@adonis-agora/agent 0.61.0 → 0.63.0

package/dist/src/a2a/gate.js

@@ -0,0 +1,56 @@
+import { defaultScopeResolver } from '../skills.js';
+import { PERSONAL_AGENT_ROLE } from './permission-tool.js';
+/** The role a delegated scope becomes. Namespaced, so a scope can never pose as an app role. */
+export const SCOPE_ROLE_PREFIX = 'scope:';
+export function scopeRole(scope) {
+    return `${SCOPE_ROLE_PREFIX}${scope}`;
+}
+function isPersonalAgent(actor) {
+    return (actor.roles ?? []).includes(PERSONAL_AGENT_ROLE);
+}
+/**
+ * Wrap a {@link RolesPolicy} so personal agents reach only what was written for them.
+ *
+ * An A2A actor carries {@link PERSONAL_AGENT_ROLE}, plus one {@link scopeRole} per delegated scope.
+ * For it, a tool must DECLARE one of those roles, and the wrapped policy must agree too. A tool with
+ * no `roles` is unreachable: under the default policy "no roles" means "anyone", and an app's
+ * existing tools were never written with an outside caller in mind. Every other actor is decided by
+ * the wrapped policy alone, unchanged.
+ */
+export function personalAgentGate(inner) {
+    return {
+        async can(actor, tool) {
+            if (isPersonalAgent(actor)) {
+                const roles = actor.roles ?? [];
+                if (!(tool.roles ?? []).some((role) => roles.includes(role)))
+                    return false;
+            }
+            return inner.can(actor, tool);
+        },
+        /**
+         * A personal agent is OFFERED every tool written for personal agents — `personal_agent`, or a
+         * `scope:` role even when that scope was not delegated. Running it still needs {@link can}; the
+         * denied call is what the A2A turn turns into a permission request (step-up), so the model asks
+         * for a permission by doing what it would do anyway, not by remembering a separate tool.
+         */
+        async canOffer(actor, tool) {
+            if (!isPersonalAgent(actor)) {
+                return inner.canOffer ? inner.canOffer(actor, tool) : inner.can(actor, tool);
+            }
+            return (tool.roles ?? []).some((role) => role === PERSONAL_AGENT_ROLE || role.startsWith(SCOPE_ROLE_PREFIX));
+        },
+    };
+}
+/**
+ * Wrap the {@link ScopeResolver} of memory or skills so a personal agent resolves NO scope. Under
+ * delegation its actor id is the account's — without this it would read the account's memories
+ * (and its tenant's) and could write new ones, a standing instruction to the user's own assistant.
+ * Built-ins like `remember` come from config, not the registry, so the tool gate never sees them.
+ */
+export function personalAgentScopes(inner) {
+    const resolver = inner ?? defaultScopeResolver;
+    return {
+        resolve: (ctx) => (isPersonalAgent(ctx.actor) ? [] : resolver.resolve(ctx)),
+    };
+}
+//# sourceMappingURL=gate.js.map

package/dist/src/a2a/gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../../../src/a2a/gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAsB,MAAM,cAAc,CAAC;AAGxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D,gGAAgG;AAChG,MAAM,CAAC,MAAM,iBAAiB,GAAG,QAAQ,CAAC;AAE1C,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,GAAG,iBAAiB,GAAG,KAAK,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,eAAe,CAAC,KAAY;IACnC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAkB;IAClD,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,KAAY,EAAE,IAAc;YACpC,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;gBAChC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;oBAAE,OAAO,KAAK,CAAC;YAC7E,CAAC;YACD,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;QACD;;;;;WAKG;QACH,KAAK,CAAC,QAAQ,CAAC,KAAY,EAAE,IAAc;YACzC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5B,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC/E,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAC5B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,mBAAmB,IAAI,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAC7E,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAgC;IAClE,MAAM,QAAQ,GAAG,KAAK,IAAI,oBAAoB,CAAC;IAC/C,OAAO;QACL,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;KAC5E,CAAC;AACJ,CAAC"}

package/dist/src/a2a/handler.d.ts

@@ -0,0 +1,65 @@
+import type { HttpContext } from '@adonisjs/core/http';
+import type { ToolRegistry } from '../tool-registry.js';
+import type { Actor } from '../types.js';
+import type { A2aAuth, A2aCaller } from './auth.js';
+import type { A2aStore } from './store.js';
+import { type A2aActionPolicy, type A2aTurnService } from './turn.js';
+/** What an Agent Card says about the agent, beyond what the surface fills in. */
+export interface A2aCardInput {
+    name: string;
+    description: string;
+    version?: string;
+    provider?: {
+        organization: string;
+        url: string;
+    };
+    documentationUrl?: string;
+    iconUrl?: string;
+    skills?: {
+        id: string;
+        name: string;
+        description: string;
+        tags: string[];
+        examples?: string[];
+    }[];
+}
+/** One agent exposed over A2A — a "brand" in PACT terms, at `/{path}/{id}`. */
+export interface A2aBrand {
+    id: string;
+    /** The registered agent that answers. */
+    agentName: string;
+    card: A2aCardInput;
+}
+export interface A2aHandlerOptions {
+    /** Mount prefix, no slashes (`'a2a'` → `/a2a/{brand}/…`). */
+    path: string;
+    /** Public origin the card's interface URL is built on. Omitted → the request's. */
+    baseUrl?: string;
+    brands: ReadonlyMap<string, A2aBrand>;
+    /** Serve this brand's card at `/.well-known/agent-card.json` too (PACT §2.1's standard place). */
+    rootCardBrand?: string;
+    auth: A2aAuth;
+    store: A2aStore;
+    service: A2aTurnService;
+    /** Where a tool's roles are read when the service does not answer them. */
+    registry: ToolRegistry;
+    actions: A2aActionPolicy;
+    timeoutMs: number;
+    maxBodyBytes: number;
+    /** Roles of the actor a turn runs as. Default: the personal-agent role plus the delegated scopes. */
+    roles?: (caller: A2aCaller) => string[];
+    /** Map the caller to the app's actor (see `A2aConfig.actor`). */
+    actor?: (caller: A2aCaller, defaults: Actor) => Actor | Promise<Actor>;
+}
+/**
+ * The actor of an identity-only turn: stable per (personal agent, its user), never an account id —
+ * the `pa:` prefix keeps it from ever colliding with one.
+ */
+export declare function personalAgentActorId(issuer: string, sub: string): string;
+/**
+ * The A2A 1.0 HTTP+JSON surface (PACT §2, §4, §5.5) over the agent runtime. Returns a request
+ * handler that answers everything under `/{path}/` and reports `false` for anything else, so it can
+ * sit in front of the router.
+ */
+export declare function createA2aHandler(options: A2aHandlerOptions): (ctx: HttpContext) => Promise<boolean>;
+//# sourceMappingURL=handler.d.ts.map

package/dist/src/a2a/handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/a2a/handler.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAUpD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,KAAK,eAAe,EAAE,KAAK,cAAc,EAAc,MAAM,WAAW,CAAC;AAElF,iFAAiF;AACjF,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,IAAI,EAAE,MAAM,EAAE,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;KACrB,EAAE,CAAC;CACL;AAED,+EAA+E;AAC/E,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,YAAY,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb,mFAAmF;IACnF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtC,kGAAkG;IAClG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,QAAQ,CAAC;IAChB,OAAO,EAAE,cAAc,CAAC;IACxB,2EAA2E;IAC3E,QAAQ,EAAE,YAAY,CAAC;IACvB,OAAO,EAAE,eAAe,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,qGAAqG;IACrG,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,SAAS,KAAK,MAAM,EAAE,CAAC;IACxC,iEAAiE;IACjE,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,KAAK,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;CACxE;AAID;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAExE;AAmGD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,SA2KvB,WAAW,KAAG,OAAO,CAAC,OAAO,CAAC,CAiEjE"}

package/dist/src/a2a/handler.js

@@ -0,0 +1,322 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { scopeRole } from './gate.js';
+import { PERSONAL_AGENT_ROLE } from './permission-tool.js';
+import { A2A_CONTENT_TYPE, A2aError, parseSendMessage, } from './protocol.js';
+import { runA2aTurn } from './turn.js';
+const DEFAULT_PAGE_SIZE = 50;
+/**
+ * The actor of an identity-only turn: stable per (personal agent, its user), never an account id —
+ * the `pa:` prefix keeps it from ever colliding with one.
+ */
+export function personalAgentActorId(issuer, sub) {
+    return `pa:${createHash('sha256').update(`${issuer}\n${sub}`).digest('hex').slice(0, 40)}`;
+}
+async function actorFor(caller, options) {
+    const extra = options.roles?.(caller) ?? (caller.delegation?.scopes ?? []).map(scopeRole);
+    const defaults = {
+        id: caller.delegation?.accountId ?? personalAgentActorId(caller.issuer, caller.sub),
+        roles: [...new Set([PERSONAL_AGENT_ROLE, ...extra])],
+    };
+    const actor = options.actor ? await options.actor(caller, defaults) : defaults;
+    // `personal_agent` is ALWAYS there, whatever the hook returned: it is what puts the actor behind
+    // `personalAgentGate`.
+    return { ...actor, roles: [...new Set([PERSONAL_AGENT_ROLE, ...(actor.roles ?? [])])] };
+}
+/**
+ * Where the FIRST message of a conversation is claimed: it has no `contextId` yet, so a retry of it
+ * could only be told apart from a new conversation by this per-(brand, personal-agent user) slot.
+ */
+function newConversationKey(brand, caller) {
+    return `new:${brand}:${personalAgentActorId(caller.issuer, caller.sub)}`;
+}
+function sendA2a(ctx, status, body) {
+    ctx.response.status(status);
+    ctx.response.header('Content-Type', A2A_CONTENT_TYPE);
+    ctx.response.send(JSON.stringify(body));
+}
+/** A bare status, no A2A body — unmatched routes and unknown brands (PACT §2.2). */
+function sendBare(ctx, status) {
+    ctx.response.status(status);
+    ctx.response.header('Content-Type', 'text/plain; charset=utf-8');
+    ctx.response.send(status === 404 ? 'Not Found' : 'Method Not Allowed');
+}
+/** The request body, read straight off the socket: no bodyparser runs ahead of this surface. */
+async function readBody(ctx, limit) {
+    const parsed = ctx.request.raw?.();
+    if (typeof parsed === 'string')
+        return parsed;
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of ctx.request.request) {
+        const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        size += buffer.length;
+        if (size > limit)
+            throw new A2aError('INVALID_PARAMS', 'Request body is too large');
+        chunks.push(buffer);
+    }
+    return Buffer.concat(chunks).toString('utf8');
+}
+/** The request path without the query string. */
+function pathOf(ctx) {
+    return (ctx.request.url() ?? '').split('?')[0] ?? '';
+}
+/**
+ * Match `rest` (the path after `/{path}/{brand}/`) against the A2A operations. `null` → 404, a
+ * method mismatch → 405 — both decided before any authentication (PACT §2.2).
+ */
+function matchRoute(method, rest) {
+    const allow = (methods, route) => (methods.includes(method) ? route : 405);
+    if (rest === '.well-known/agent-card.json')
+        return allow(['GET'], { kind: 'card' });
+    if (rest === 'message:send')
+        return allow(['POST'], { kind: 'send' });
+    if (rest === 'message:stream')
+        return allow(['POST'], { kind: 'unsupported' });
+    if (rest === 'extendedAgentCard')
+        return allow(['GET'], { kind: 'unsupported' });
+    if (rest === 'tasks')
+        return allow(['GET'], { kind: 'listTasks' });
+    const segments = rest.split('/');
+    if (segments[0] !== 'tasks' || !segments[1])
+        return 404;
+    const [, taskSegment, sub, configId, ...extra] = segments;
+    if (extra.length > 0)
+        return 404;
+    if (sub === undefined) {
+        const action = /^(.+):(cancel|subscribe)$/.exec(taskSegment);
+        if (action?.[2] === 'cancel') {
+            return allow(['POST'], { kind: 'task', taskId: action[1] ?? taskSegment });
+        }
+        if (action?.[2] === 'subscribe')
+            return allow(['POST', 'GET'], { kind: 'unsupported' });
+        return allow(['GET'], { kind: 'task', taskId: taskSegment });
+    }
+    if (sub !== 'pushNotificationConfigs')
+        return 404;
+    return configId === undefined
+        ? allow(['GET', 'POST'], { kind: 'push' })
+        : allow(['GET', 'DELETE'], { kind: 'push' });
+}
+/**
+ * The A2A 1.0 HTTP+JSON surface (PACT §2, §4, §5.5) over the agent runtime. Returns a request
+ * handler that answers everything under `/{path}/` and reports `false` for anything else, so it can
+ * sit in front of the router.
+ */
+export function createA2aHandler(options) {
+    const prefix = `/${options.path}/`;
+    const toolRoles = (name) => options.service.toolRoles?.(name) ?? options.registry.spec(name)?.roles;
+    const interfaceUrl = (ctx, brand) => {
+        const origin = options.baseUrl?.replace(/\/+$/, '') ??
+            `${ctx.request.protocol()}://${ctx.request.host() ?? 'localhost'}`;
+        return `${origin}/${options.path}/${encodeURIComponent(brand.id)}`;
+    };
+    async function card(ctx, brand) {
+        const url = interfaceUrl(ctx, brand);
+        ctx.response.header('Content-Type', 'application/json');
+        ctx.response.header('Access-Control-Allow-Origin', '*');
+        ctx.response.send(JSON.stringify({
+            name: brand.card.name,
+            description: brand.card.description,
+            supportedInterfaces: [{ url, protocolBinding: 'HTTP+JSON', protocolVersion: '1.0' }],
+            ...(brand.card.provider ? { provider: brand.card.provider } : {}),
+            version: brand.card.version ?? '1.0.0',
+            ...(brand.card.documentationUrl ? { documentationUrl: brand.card.documentationUrl } : {}),
+            ...(brand.card.iconUrl ? { iconUrl: brand.card.iconUrl } : {}),
+            capabilities: { streaming: false, pushNotifications: false, extendedAgentCard: false },
+            ...(await options.auth.cardSecurity(ctx, url)),
+            defaultInputModes: ['text/plain'],
+            defaultOutputModes: ['text/plain'],
+            skills: brand.card.skills ?? [],
+        }));
+    }
+    async function send(ctx, brand, caller) {
+        const input = parseSendMessage(await readBody(ctx, options.maxBodyBytes));
+        const actor = await actorFor(caller, options);
+        const accountId = caller.delegation?.accountId ?? null;
+        if (input.contextId !== undefined) {
+            const context = await options.store.getContext(input.contextId);
+            // Another user's or another brand's context is indistinguishable from none (PACT §4.2).
+            if (!context ||
+                context.brand !== brand.id ||
+                context.agentIssuer !== caller.issuer ||
+                context.agentSub !== caller.sub) {
+                throw new A2aError('INVALID_PARAMS', 'Unknown contextId');
+            }
+            // A conversation that ran as an account holds that account's data: it continues only under
+            // a delegation for it — not identity-only (a revoked grant), not another account (§5.5).
+            if (context.accountRef !== null && accountId === null) {
+                throw new A2aError('INVALID_PARAMS', 'contextId needs the delegation it ran under');
+            }
+            if (accountId !== null && !(await options.store.bindAccount(input.contextId, accountId))) {
+                throw new A2aError('INVALID_PARAMS', 'contextId belongs to another account');
+            }
+        }
+        const claimKey = input.contextId ?? newConversationKey(brand.id, caller);
+        const claim = await options.store.claimMessage(claimKey, input.messageId);
+        if (claim.status === 'done') {
+            const stored = claim.reply;
+            return sendA2a(ctx, stored.status, stored.body);
+        }
+        if (claim.status === 'pending') {
+            throw new A2aError('INVALID_PARAMS', 'messageId is already in use in this context');
+        }
+        let threadId = input.contextId;
+        const finish = async (reply) => {
+            await options.store.completeMessage(claimKey, input.messageId, reply);
+            // A first message is also answerable from its new context — a retry may carry it by now.
+            if (threadId !== undefined && threadId !== claimKey) {
+                await options.store.claimMessage(threadId, input.messageId);
+                await options.store.completeMessage(threadId, input.messageId, reply);
+            }
+            sendA2a(ctx, reply.status, reply.body);
+        };
+        let turn;
+        try {
+            turn = await runA2aTurn(options.service, toolRoles, {
+                actor,
+                text: input.text,
+                agentName: brand.agentName,
+                ...(input.contextId !== undefined ? { threadId: input.contextId } : {}),
+                delegatedScopes: caller.delegation?.scopes ?? null,
+                actions: options.actions,
+                timeoutMs: options.timeoutMs,
+                onStarted: async (id) => {
+                    threadId = id;
+                    if (input.contextId !== undefined)
+                        return;
+                    await options.store.createContext({
+                        id,
+                        brand: brand.id,
+                        agentIssuer: caller.issuer,
+                        agentSub: caller.sub,
+                        accountRef: accountId,
+                    });
+                },
+            });
+        }
+        catch (error) {
+            await options.store.releaseMessage(claimKey, input.messageId);
+            if (error.code === 'run_active') {
+                throw new A2aError('INVALID_PARAMS', 'contextId already has a message in progress');
+            }
+            throw error;
+        }
+        if (turn.error !== null) {
+            const failure = new A2aError('INTERNAL', 'The agent could not answer');
+            // Something already ran on the account: a retry must get this failure back, not run it again.
+            if (turn.actions.length > 0) {
+                return finish({ status: failure.httpStatus, body: failure.toJSON() });
+            }
+            await options.store.releaseMessage(claimKey, input.messageId);
+            throw failure;
+        }
+        const receipt = caller.delegation
+            ? await options.auth.receipt(ctx, {
+                scopesUsed: [...new Set(turn.actions.flatMap((action) => action.scopes))],
+                actions: turn.actions.map(({ tool, argsHash }) => ({ tool, argsHash })),
+            })
+            : {};
+        const message = {
+            messageId: randomUUID(),
+            contextId: turn.threadId,
+            role: 'ROLE_AGENT',
+            parts: [
+                ...(turn.text !== '' || turn.outcomes.length === 0 ? [{ text: turn.text }] : []),
+                ...turn.outcomes.map((outcome) => ({
+                    data: { action: outcome },
+                    mediaType: 'application/json',
+                })),
+            ],
+            ...(Object.keys(receipt).length > 0 ? { metadata: receipt } : {}),
+        };
+        let reply = { message };
+        const missing = (turn.permission ?? []).filter((scope) => !(caller.delegation?.scopes ?? []).includes(scope));
+        if (missing.length > 0) {
+            const stepUp = await options.auth.stepUp(ctx, missing);
+            if (stepUp !== null) {
+                reply = {
+                    task: {
+                        id: `t-${randomUUID()}`,
+                        contextId: turn.threadId,
+                        status: { state: 'TASK_STATE_AUTH_REQUIRED', message },
+                        metadata: { ...receipt, ...stepUp },
+                    },
+                };
+            }
+        }
+        await finish({ status: 200, body: reply });
+    }
+    function listTasks(ctx) {
+        const raw = ctx.request.qs().pageSize;
+        const pageSize = raw === undefined ? DEFAULT_PAGE_SIZE : Number(raw);
+        if (!Number.isInteger(pageSize) || pageSize < 1 || pageSize > 100) {
+            throw new A2aError('INVALID_PARAMS', 'pageSize must be an integer from 1 to 100');
+        }
+        // Ordinary turns create no task (PACT §4.2) and step-up tasks are ephemeral.
+        sendA2a(ctx, 200, { tasks: [], nextPageToken: '', pageSize, totalSize: 0 });
+    }
+    return async function handle(ctx) {
+        const path = pathOf(ctx);
+        const method = ctx.request.method().toUpperCase();
+        if (path === '/.well-known/agent-card.json' && options.rootCardBrand !== undefined) {
+            const brand = options.brands.get(options.rootCardBrand);
+            if (!brand)
+                return false;
+            if (method !== 'GET') {
+                sendBare(ctx, 405);
+                return true;
+            }
+            await card(ctx, brand);
+            return true;
+        }
+        if (!path.startsWith(prefix))
+            return false;
+        const [brandSegment = '', ...restSegments] = path.slice(prefix.length).split('/');
+        let brandId;
+        try {
+            brandId = decodeURIComponent(brandSegment);
+        }
+        catch {
+            brandId = '';
+        }
+        const brand = options.brands.get(brandId);
+        const route = brand ? matchRoute(method, restSegments.join('/')) : 404;
+        if (!brand || route === 404 || route === 405) {
+            sendBare(ctx, route === 405 ? 405 : 404);
+            return true;
+        }
+        try {
+            if (route.kind === 'card') {
+                await card(ctx, brand);
+                return true;
+            }
+            // Authenticate before reading the body (PACT §3.4).
+            const caller = await options.auth.authenticate(ctx);
+            if (!caller)
+                return true;
+            switch (route.kind) {
+                case 'send':
+                    await send(ctx, brand, caller);
+                    break;
+                case 'listTasks':
+                    listTasks(ctx);
+                    break;
+                case 'task':
+                    throw new A2aError('TASK_NOT_FOUND', `Task not found: ${route.taskId}`);
+                case 'unsupported':
+                    throw new A2aError('UNSUPPORTED_OPERATION', 'This operation is not supported');
+                case 'push':
+                    throw new A2aError('PUSH_NOTIFICATION_NOT_SUPPORTED', 'Push notifications are not supported');
+            }
+        }
+        catch (error) {
+            const a2a = error instanceof A2aError ? error : new A2aError('INTERNAL', 'Internal error');
+            if (!(error instanceof A2aError)) {
+                ctx.logger?.error({ err: error }, 'a2a: request failed');
+            }
+            sendA2a(ctx, a2a.httpStatus, a2a.toJSON());
+        }
+        return true;
+    };
+}
+//# sourceMappingURL=handler.js.map

package/dist/src/a2a/handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.js","sourceRoot":"","sources":["../../../src/a2a/handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKrD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EACL,gBAAgB,EAChB,QAAQ,EAGR,gBAAgB,GACjB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAA6C,UAAU,EAAE,MAAM,WAAW,CAAC;AAiDlF,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,GAAW;IAC9D,OAAO,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,KAAK,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAC7F,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,MAAiB,EAAE,OAA0B;IACnE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC1F,MAAM,QAAQ,GAAU;QACtB,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,IAAI,oBAAoB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC;QACnF,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,mBAAmB,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;KACrD,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC/E,iGAAiG;IACjG,uBAAuB;IACvB,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,mBAAmB,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1F,CAAC;AAQD;;;GAGG;AACH,SAAS,kBAAkB,CAAC,KAAa,EAAE,MAAiB;IAC1D,OAAO,OAAO,KAAK,IAAI,oBAAoB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,OAAO,CAAC,GAAgB,EAAE,MAAc,EAAE,IAAa;IAC9D,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5B,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IACtD,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,oFAAoF;AACpF,SAAS,QAAQ,CAAC,GAAgB,EAAE,MAAiB;IACnD,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5B,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;IACjE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;AACzE,CAAC;AAED,gGAAgG;AAChG,KAAK,UAAU,QAAQ,CAAC,GAAgB,EAAE,KAAa;IACrD,MAAM,MAAM,GAAI,GAAG,CAAC,OAAyC,CAAC,GAAG,EAAE,EAAE,CAAC;IACtE,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC9C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;QAC7E,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC;QACtB,IAAI,IAAI,GAAG,KAAK;YAAE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,2BAA2B,CAAC,CAAC;QACpF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,iDAAiD;AACjD,SAAS,MAAM,CAAC,GAAgB;IAC9B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACvD,CAAC;AAUD;;;GAGG;AACH,SAAS,UAAU,CAAC,MAAc,EAAE,IAAY;IAC9C,MAAM,KAAK,GAAG,CAAC,OAAiB,EAAE,KAAY,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5F,IAAI,IAAI,KAAK,6BAA6B;QAAE,OAAO,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACpF,IAAI,IAAI,KAAK,cAAc;QAAE,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACtE,IAAI,IAAI,KAAK,gBAAgB;QAAE,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;IAC/E,IAAI,IAAI,KAAK,mBAAmB;QAAE,OAAO,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;IACjF,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IAEnE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC;IACxD,MAAM,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,GAAG,QAAQ,CAAC;IAC1D,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACjC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,2BAA2B,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7D,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,WAAW;YAAE,OAAO,KAAK,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;QACxF,OAAO,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,GAAG,KAAK,yBAAyB;QAAE,OAAO,GAAG,CAAC;IAClD,OAAO,QAAQ,KAAK,SAAS;QAC3B,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC1C,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAA0B;IACzD,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC;IACnC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CACjC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC;IAE1E,MAAM,YAAY,GAAG,CAAC,GAAgB,EAAE,KAAe,EAAU,EAAE;QACjE,MAAM,MAAM,GACV,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACpC,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC;QACrE,OAAO,GAAG,MAAM,IAAI,OAAO,CAAC,IAAI,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;IACrE,CAAC,CAAC;IAEF,KAAK,UAAU,IAAI,CAAC,GAAgB,EAAE,KAAe;QACnD,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACrC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QACxD,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QACxD,GAAG,CAAC,QAAQ,CAAC,IAAI,CACf,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI;YACrB,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW;YACnC,mBAAmB,EAAE,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,WAAW,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;YACpF,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO;YACtC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,YAAY,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE;YACtF,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC9C,iBAAiB,EAAE,CAAC,YAAY,CAAC;YACjC,kBAAkB,EAAE,CAAC,YAAY,CAAC;YAClC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE;SAChC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,IAAI,CAAC,GAAgB,EAAE,KAAe,EAAE,MAAiB;QACtE,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,SAAS,IAAI,IAAI,CAAC;QAEvD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAChE,wFAAwF;YACxF,IACE,CAAC,OAAO;gBACR,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,EAAE;gBAC1B,OAAO,CAAC,WAAW,KAAK,MAAM,CAAC,MAAM;gBACrC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,GAAG,EAC/B,CAAC;gBACD,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;YAC5D,CAAC;YACD,2FAA2F;YAC3F,yFAAyF;YACzF,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACtD,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,6CAA6C,CAAC,CAAC;YACtF,CAAC;YACD,IAAI,SAAS,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;gBACzF,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,sCAAsC,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAC1E,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAoB,CAAC;YAC1C,OAAO,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,6CAA6C,CAAC,CAAC;QACtF,CAAC;QAED,IAAI,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC;QAC/B,MAAM,MAAM,GAAG,KAAK,EAAE,KAAkB,EAAE,EAAE;YAC1C,MAAM,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACtE,yFAAyF;YACzF,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACpD,MAAM,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;gBAC5D,MAAM,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACxE,CAAC;YACD,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC,CAAC;QAEF,IAAI,IAA4C,CAAC;QACjD,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE;gBAClD,KAAK;gBACL,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,eAAe,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,IAAI,IAAI;gBAClD,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;oBACtB,QAAQ,GAAG,EAAE,CAAC;oBACd,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;wBAAE,OAAO;oBAC1C,MAAM,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC;wBAChC,EAAE;wBACF,KAAK,EAAE,KAAK,CAAC,EAAE;wBACf,WAAW,EAAE,MAAM,CAAC,MAAM;wBAC1B,QAAQ,EAAE,MAAM,CAAC,GAAG;wBACpB,UAAU,EAAE,SAAS;qBACtB,CAAC,CAAC;gBACL,CAAC;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YAC9D,IAAK,KAA2B,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACvD,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,6CAA6C,CAAC,CAAC;YACtF,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,IAAI,QAAQ,CAAC,UAAU,EAAE,4BAA4B,CAAC,CAAC;YACvE,8FAA8F;YAC9F,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACxE,CAAC;YACD,MAAM,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YAC9D,MAAM,OAAO,CAAC;QAChB,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU;YAC/B,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;gBAC9B,UAAU,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBACzE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;aACxE,CAAC;YACJ,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,OAAO,GAAe;YAC1B,SAAS,EAAE,UAAU,EAAE;YACvB,SAAS,EAAE,IAAI,CAAC,QAAQ;YACxB,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE;gBACL,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChF,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBACjC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;oBACzB,SAAS,EAAE,kBAAkB;iBAC9B,CAAC,CAAC;aACJ;YACD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC;QAEF,IAAI,KAAK,GAAkB,EAAE,OAAO,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,CAC5C,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAC9D,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACvD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,KAAK,GAAG;oBACN,IAAI,EAAE;wBACJ,EAAE,EAAE,KAAK,UAAU,EAAE,EAAE;wBACvB,SAAS,EAAE,IAAI,CAAC,QAAQ;wBACxB,MAAM,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,OAAO,EAAE;wBACtD,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,EAAE;qBACpC;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,SAAS,SAAS,CAAC,GAAgB;QACjC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC;QACtC,MAAM,QAAQ,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,GAAG,EAAE,CAAC;YAClE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,2CAA2C,CAAC,CAAC;QACpF,CAAC;QACD,6EAA6E;QAC7E,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,OAAO,KAAK,UAAU,MAAM,CAAC,GAAgB;QAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC;QAElD,IAAI,IAAI,KAAK,8BAA8B,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACnF,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YACxD,IAAI,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;YACzB,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACrB,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACnB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QAE3C,MAAM,CAAC,YAAY,GAAG,EAAE,EAAE,GAAG,YAAY,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClF,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACvE,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YAC7C,QAAQ,CAAC,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC1B,MAAM,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACvB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,oDAAoD;YACpD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YACpD,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YAEzB,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;gBACnB,KAAK,MAAM;oBACT,MAAM,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;oBAC/B,MAAM;gBACR,KAAK,WAAW;oBACd,SAAS,CAAC,GAAG,CAAC,CAAC;oBACf,MAAM;gBACR,KAAK,MAAM;oBACT,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,mBAAmB,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC1E,KAAK,aAAa;oBAChB,MAAM,IAAI,QAAQ,CAAC,uBAAuB,EAAE,iCAAiC,CAAC,CAAC;gBACjF,KAAK,MAAM;oBACT,MAAM,IAAI,QAAQ,CAChB,iCAAiC,EACjC,sCAAsC,CACvC,CAAC;YACN,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,KAAK,YAAY,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;YAC3F,IAAI,CAAC,CAAC,KAAK,YAAY,QAAQ,CAAC,EAAE,CAAC;gBACjC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,qBAAqB,CAAC,CAAC;YAC3D,CAAC;YACD,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;AACJ,CAAC"}

package/dist/src/a2a/index.d.ts

@@ -0,0 +1,15 @@
+export type { A2aAuth, A2aAuthContext, A2aAuthFactory, A2aCaller, A2aReceiptInput, } from './auth.js';
+export { authKitPersonalAgents, resolveA2aAuth } from './auth.js';
+export type { A2aAgentConfig, A2aConfig } from './define_config.js';
+export { defineA2aConfig } from './define_config.js';
+export { personalAgentGate } from './gate.js';
+export type { A2aBrand, A2aCardInput, A2aHandlerOptions } from './handler.js';
+export { createA2aHandler, personalAgentActorId } from './handler.js';
+export { PERMISSION_COMPONENT, PERSONAL_AGENT_ROLE, REQUEST_PERMISSION_TOOL, registerRequestPermissionTool, } from './permission-tool.js';
+export type { A2aDataPart, A2aErrorReason, A2aMessage, A2aSendResult, A2aTask, } from './protocol.js';
+export { A2A_CONTENT_TYPE, A2aError, parseSendMessage } from './protocol.js';
+export type { A2aContext, A2aStore, MessageClaim } from './store.js';
+export { A2A_TABLES, a2aTableStatements, ensureA2aTables, InMemoryA2aStore, LucidA2aStore, } from './store.js';
+export type { A2aActionPolicy, A2aTurnOutcome, A2aTurnResult, A2aTurnService, } from './turn.js';
+export { runA2aTurn } from './turn.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/a2a/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/a2a/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,OAAO,EACP,cAAc,EACd,cAAc,EACd,SAAS,EACT,eAAe,GAChB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAClE,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACtE,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,WAAW,EACX,cAAc,EACd,UAAU,EACV,aAAa,EACb,OAAO,GACR,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC7E,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACrE,OAAO,EACL,UAAU,EACV,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,eAAe,EACf,cAAc,EACd,aAAa,EACb,cAAc,GACf,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC"}

package/dist/src/a2a/index.js

@@ -0,0 +1,9 @@
+export { authKitPersonalAgents, resolveA2aAuth } from './auth.js';
+export { defineA2aConfig } from './define_config.js';
+export { personalAgentGate } from './gate.js';
+export { createA2aHandler, personalAgentActorId } from './handler.js';
+export { PERMISSION_COMPONENT, PERSONAL_AGENT_ROLE, REQUEST_PERMISSION_TOOL, registerRequestPermissionTool, } from './permission-tool.js';
+export { A2A_CONTENT_TYPE, A2aError, parseSendMessage } from './protocol.js';
+export { A2A_TABLES, a2aTableStatements, ensureA2aTables, InMemoryA2aStore, LucidA2aStore, } from './store.js';
+export { runA2aTurn } from './turn.js';
+//# sourceMappingURL=index.js.map

package/dist/src/a2a/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/a2a/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAElE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACtE,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,sBAAsB,CAAC;AAQ9B,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAE7E,OAAO,EACL,UAAU,EACV,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,aAAa,GACd,MAAM,YAAY,CAAC;AAOpB,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC"}

package/dist/src/a2a/permission-tool.d.ts

@@ -0,0 +1,17 @@
+import type { ToolRegistry } from '../tool-registry.js';
+/** The role every A2A caller carries — what a tool names to be reachable by personal agents at all. */
+export declare const PERSONAL_AGENT_ROLE = "personal_agent";
+export declare const REQUEST_PERMISSION_TOOL = "request_permission";
+/** The component the tool pushes into the stream; the A2A turn reads it back as a step-up. */
+export declare const PERMISSION_COMPONENT = "a2a.permission";
+/**
+ * Register `request_permission`: the tool a personal agent's turn calls when what it was asked to do
+ * needs a permission the user has not delegated. It pushes the requested scopes into the stream and
+ * ENDS the turn; the A2A handler answers with a step-up task (PACT §5.5) carrying a consent link for
+ * exactly those scopes. The conversation stays open — the agent re-sends once the user approves.
+ *
+ * Only personal agents reach it ({@link PERSONAL_AGENT_ROLE}), and only scopes the deployment
+ * offers can be asked for.
+ */
+export declare function registerRequestPermissionTool(registry: ToolRegistry, scopes: Record<string, string>): void;
+//# sourceMappingURL=permission-tool.d.ts.map

package/dist/src/a2a/permission-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-tool.d.ts","sourceRoot":"","sources":["../../../src/a2a/permission-tool.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,uGAAuG;AACvG,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AAEpD,eAAO,MAAM,uBAAuB,uBAAuB,CAAC;AAE5D,8FAA8F;AAC9F,eAAO,MAAM,oBAAoB,mBAAmB,CAAC;AA4CrD;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,YAAY,EACtB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,IAAI,CAoBN"}

package/dist/src/a2a/permission-tool.js

@@ -0,0 +1,70 @@
+/** The role every A2A caller carries — what a tool names to be reachable by personal agents at all. */
+export const PERSONAL_AGENT_ROLE = 'personal_agent';
+export const REQUEST_PERMISSION_TOOL = 'request_permission';
+/** The component the tool pushes into the stream; the A2A turn reads it back as a step-up. */
+export const PERMISSION_COMPONENT = 'a2a.permission';
+function inputSchema(scopeIds) {
+    const known = new Set(scopeIds);
+    return {
+        '~standard': {
+            version: 1,
+            vendor: 'adonis-agora-agent',
+            validate: (value) => {
+                const scopes = value?.scopes;
+                if (!Array.isArray(scopes) || scopes.length === 0) {
+                    return { issues: [{ message: 'must be a non-empty array', path: ['scopes'] }] };
+                }
+                const unknownScope = scopes.find((id) => typeof id !== 'string' || !known.has(id));
+                if (unknownScope !== undefined) {
+                    return {
+                        issues: [{ message: `unknown scope ${String(unknownScope)}`, path: ['scopes'] }],
+                    };
+                }
+                return { value: { scopes: [...new Set(scopes)] } };
+            },
+            jsonSchema: {
+                input: () => ({
+                    type: 'object',
+                    properties: {
+                        scopes: {
+                            type: 'array',
+                            items: { type: 'string', enum: scopeIds },
+                            minItems: 1,
+                            description: 'The permissions this request needs and the user has not granted yet.',
+                        },
+                    },
+                    required: ['scopes'],
+                    additionalProperties: false,
+                }),
+            },
+        },
+    };
+}
+/**
+ * Register `request_permission`: the tool a personal agent's turn calls when what it was asked to do
+ * needs a permission the user has not delegated. It pushes the requested scopes into the stream and
+ * ENDS the turn; the A2A handler answers with a step-up task (PACT §5.5) carrying a consent link for
+ * exactly those scopes. The conversation stays open — the agent re-sends once the user approves.
+ *
+ * Only personal agents reach it ({@link PERSONAL_AGENT_ROLE}), and only scopes the deployment
+ * offers can be asked for.
+ */
+export function registerRequestPermissionTool(registry, scopes) {
+    const ids = Object.keys(scopes);
+    const catalog = ids.map((id) => `- ${id}: ${scopes[id]}`).join('\n');
+    registry.register({
+        name: REQUEST_PERMISSION_TOOL,
+        kind: 'read',
+        terminal: true,
+        roles: [PERSONAL_AGENT_ROLE],
+        description: `Ask the user to grant permissions you do not have yet. Call it when the request needs one of these and it is not among your current permissions — the user approves on their own account page and you continue afterwards:\n${catalog}`,
+        inputSchema: inputSchema(ids),
+    }, {
+        async execute(input, ctx) {
+            const { scopes: requested } = input;
+            await ctx.emitComponent?.(PERMISSION_COMPONENT, { scopes: requested });
+            return { requested, status: 'awaiting_user_approval' };
+        },
+    });
+}
+//# sourceMappingURL=permission-tool.js.map

package/dist/src/a2a/permission-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-tool.js","sourceRoot":"","sources":["../../../src/a2a/permission-tool.ts"],"names":[],"mappings":"AAGA,uGAAuG;AACvG,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AAEpD,MAAM,CAAC,MAAM,uBAAuB,GAAG,oBAAoB,CAAC;AAE5D,8FAA8F;AAC9F,MAAM,CAAC,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAMrD,SAAS,WAAW,CAAC,QAAkB;IACrC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChC,OAAO;QACL,WAAW,EAAE;YACX,OAAO,EAAE,CAAC;YACV,MAAM,EAAE,oBAAoB;YAC5B,QAAQ,EAAE,CAAC,KAAc,EAAE,EAAE;gBAC3B,MAAM,MAAM,GAAI,KAAqC,EAAE,MAAM,CAAC;gBAC9D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAClD,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;gBAClF,CAAC;gBACD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;gBACnF,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;oBAC/B,OAAO;wBACL,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,iBAAiB,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;qBACjF,CAAC;gBACJ,CAAC;gBACD,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAkB,CAAC,CAAC,EAAE,EAAE,CAAC;YACjE,CAAC;YACD,UAAU,EAAE;gBACV,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;oBACZ,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,MAAM,EAAE;4BACN,IAAI,EAAE,OAAO;4BACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;4BACzC,QAAQ,EAAE,CAAC;4BACX,WAAW,EAAE,sEAAsE;yBACpF;qBACF;oBACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;oBACpB,oBAAoB,EAAE,KAAK;iBAC5B,CAAC;aACH;SACF;KACmD,CAAC;AACzD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,6BAA6B,CAC3C,QAAsB,EACtB,MAA8B;IAE9B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,QAAQ,CAAC,QAAQ,CACf;QACE,IAAI,EAAE,uBAAuB;QAC7B,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,mBAAmB,CAAC;QAC5B,WAAW,EAAE,+NAA+N,OAAO,EAAE;QACrP,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC;KAC9B,EACD;QACE,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;YACtB,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,KAA+B,CAAC;YAC9D,MAAM,GAAG,CAAC,aAAa,EAAE,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YACvE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;QACzD,CAAC;KACF,CACF,CAAC;AACJ,CAAC"}