@agent-native/core 0.114.2 → 0.114.4

package/dist/a2a/handlers.js.map

@@ -1 +1 @@
-{"version":3,"file":"handlers.js","sourceRoot":"","sources":["../../src/a2a/handlers.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,IAAI,CAAC;AAE1D,OAAO,EACL,8BAA8B,EAC9B,gCAAgC,EAChC,4CAA4C,EAC5C,mCAAmC,EACnC,sCAAsC,GACvC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAChD,OAAO,EACL,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EACL,UAAU,EACV,iBAAiB,EACjB,OAAO,EACP,gBAAgB,EAChB,UAAU,EACV,yBAAyB,EACzB,uBAAuB,EACvB,gBAAgB,EAChB,sBAAsB,EACtB,uBAAuB,EACvB,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,EACtB,6BAA6B,EAC7B,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAYzB,qEAAqE;AACrE,0EAA0E;AAC1E,iEAAiE;AACjE,MAAM,qBAAqB,GAAG,kCAAkC,CAAC;AACjE,MAAM,oCAAoC,GAAG,KAAK,CAAC;AACnD,MAAM,kCAAkC,GAAG,MAAM,CAAC;AAClD,MAAM,6BAA6B,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACpD,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAC3C,MAAM,wBAAwB,GAAG,EAAE,CAAC;AACpC,MAAM,gCAAgC,GAAG,GAAG,CAAC;AAC7C,MAAM,iCAAiC,GAAG,EAAE,GAAG,IAAI,CAAC;AACpD,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AAEjD,SAAS,sBAAsB,CAC7B,KAAc,EACd,KAAsB;IAEtB,2EAA2E;IAC3E,yEAAyE;IACzE,8CAA8C;IAC9C,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,kBAAkB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK;SACnB,KAAK,CAAC,CAAC,EAAE,wBAAwB,CAAC;SAClC,MAAM,CACL,CAAC,SAAS,EAAkC,EAAE,CAC5C,CAAC,CAAC,SAAS;QACX,OAAO,SAAS,KAAK,QAAQ;QAC7B,OAAQ,SAAqC,CAAC,IAAI,KAAK,QAAQ;QAC/D,CAAC,CAAE,SAAqC,CAAC,IAAI,CAChD;SACA,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC1E,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC;AAED;;;;;GAKG;AACH,SAAS,yBAAyB,CAChC,QAA6C;IAE7C,MAAM,GAAG,GAAG,QAAQ,EAAE,aAAa,CAAC;IACpC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC5E,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAsB;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,yBAAyB,CAAC;YAC/B,aAAa,EAAE,SAAS,CAAC,KAAY,CAAC;SACvC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAC9B,QAA6C,EAC7C,KAAsB;IAEtB,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,cAAc,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,cAAc,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IAC3D,IACE,cAAc;QACd,CAAC,cAAc,KAAK,cAAc,IAAI,qBAAqB,CAAC,cAAc,CAAC,CAAC,EAC5E,CAAC;QACD,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,SAAS,kBAAkB,CACzB,QAA6C,EAC7C,KAAsB;IAEtB,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,OAAO,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;IAChC,MAAM,aAAa,GAAG,uBAAuB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC/D,IAAI,aAAa;QAAE,OAAO,CAAC,aAAa,GAAG,aAAa,CAAC;;QACpD,OAAO,OAAO,CAAC,aAAa,CAAC;IAClC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,sBAAsB;IAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAChD,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACvB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,0BAA0B;IACjC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;IAC/D,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAChD,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACxB,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,uBAAuB,CACpC,KAAU,EACV,MAAc,EACd,MAAiB;IAEjB,MAAM,cAAc,GAAG,sCAAsC,EAAE,CAAC;IAChE,MAAM,mBAAmB,GACvB,mCAAmC,CAAC;QAClC,QAAQ,EAAE,MAAM,CAAC,qBAAqB;KACvC,CAAC,IAAI,4CAA4C,CAAC,cAAc,CAAC,CAAC;IAErE,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,MAAM,oBAAoB,CAAC;YACzB,KAAK;YACL,IAAI,EAAE,qBAAqB;YAC3B,MAAM;SACP,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,uEAAuE;QACvE,sEAAsE;QACtE,+DAA+D;QAC/D,MAAM,oBAAoB,CAAC;YACzB,KAAK;YACL,IAAI,EAAE,cAAc;YACpB,MAAM;YACN,IAAI,EAAE;gBACJ,CAAC,gCAAgC,CAAC,EAAE,8BAA8B;aACnE;YACD,aAAa,EAAE,IAAI;SACpB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,eAAe,EAAE,CAAC;QACzB,kEAAkE;QAClE,wEAAwE;QACxE,uEAAuE;QACvE,yEAAyE;QACzE,OAAO,CAAC,KAAK,CACX,+EAA+E,EAC/E,eAAe,CAChB,CAAC;QACF,MAAM,oBAAoB,CAAC;YACzB,KAAK;YACL,IAAI,EAAE,qBAAqB;YAC3B,MAAM;YACN,mEAAmE;YACnE,yEAAyE;YACzE,yEAAyE;YACzE,uEAAuE;YACvE,mDAAmD;YACnD,aAAa,EAAE,IAAI;YACnB,iBAAiB,EAAE,oCAAoC;SACxD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAc,EACd,MAAiB,EACjB,KAAW;IAEX,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,0DAA0D;QAC1D,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,uBAAuB,CAAC,MAAM,EAAE;YACpC,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE;gBACP,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qCAAqC,EAAE,CAAC;aACvE;SACF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC;IACjE,MAAM,aAAa,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAA4B,CAAC;IAC9E,MAAM,aAAa,GAAG,aAAa,CAAC,aAAmC,CAAC;IACxE,MAAM,aAAa,GAAG,aAAa,CAAC,aAAmC,CAAC;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,0EAA0E;IAC1E,0DAA0D;IAC1D,MAAM,aAAa,GACjB,yBAAyB,CAAC,aAAa,CAAC,IAAI,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAC5E,MAAM,SAAS,GACZ,aAAa,CAAC,SAAuC,IAAI,SAAS,CAAC;IACtE,MAAM,cAAc,GACjB,aAAa,CAAC,cAGD,IAAI,SAAS,CAAC;IAC9B,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,eAAe,CAAC;QAClE,CAAC,CAAE,aAAa,CAAC,eAAuC;QACxD,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,aAAa,GAAG,MAAM,uBAAuB,CACjD,aAAa,EACb,aAAa,CACd,CAAC;IAEF,MAAM,EAAE,qBAAqB,EAAE,GAC7B,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;QACjC,sBAAsB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAC3C,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAC5D,CAAC;IACJ,CAAC,EAAE,2BAA2B,CAAC,CAAC;IAE9B,SACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACZ,IAAI,CAAC;QACH,MAAM,qBAAqB,CACzB;YACE,SAAS,EAAE,aAAa;YACxB,KAAK,EAAE,aAAa;YACpB,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,EACD,GAAG,EAAE,CACH,oBAAoB,CAClB,MAAM,EACN,OAAO,EACP,MAAM,EACN,SAAS,EACT,cAAc,EACd,KAAK,EACL,eAAe,CAChB,CACJ,CAAC;IACJ,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,uBAAuB,CAAC,MAAM,EAAE;gBACpC,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE;oBACP,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,IAAI,iBAAiB,EAAE,CAAC;iBACnE;aACF,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,cAAc,GAAe,KAAK,EACtC,OAAgB,EAChB,QAA2B,EACA,EAAE;IAC7B,kCAAkC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK;SACvB,MAAM,CAAC,CAAC,CAAC,EAAuC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;SACrE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAClB,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,OAAO,EAAE;gBACP,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC;aAC9D;SACF,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,0EAA0E;IAC1E,wDAAwD;IACxD,4EAA4E;IAC5E,oEAAoE;IACpE,yEAAyE;IACzE,8BAA8B;IAC9B,qEAAqE;IACrE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;IAC7D,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,MAAM,aAAa,GAAG,OAAO;QAC3B,CAAC,CAAC,+DAA+D,UAAU,sNAAsN,IAAI,EAAE;QACvS,CAAC,CAAC,IAAI,CAAC;IAET,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAEnD,MAAM,SAAS,GAAe,EAAE,CAAC;IACjC,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,SAAS,CAAC,IAAI,CAAC;YACb,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,6BAA6B;YAC1C,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC;SAChE,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,OAAO,EAAE;YACP,IAAI,EAAE,OAAO;YACb,KAAK,EAAE;gBACL,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;gBACvC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM;oBACzB,CAAC,CAAC;wBACE;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,kBAAkB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;yBACrD;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;aACR;SACF;QACD,SAAS,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;KACxD,CAAC;AACJ,CAAC,CAAC;AAEF,SAAS,UAAU,CAAC,MAAiB;IACnC,OAAO,MAAM,CAAC,OAAO,IAAI,cAAc,CAAC;AAC1C,CAAC;AAED,SAAS,YAAY,CACnB,EAA0B,EAC1B,IAAY,EACZ,OAAe;IAEf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,aAAa,CAAC,EAAmB,EAAE,MAAe;IACzD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,kBAAkB,CACzB,MAAc,EACd,SAAkB,EAClB,QAAkC,EAClC,KAAW,EACX,eAAqC;IAKrC,MAAM,SAAS,GAAe,EAAE,CAAC;IACjC,MAAM,OAAO,GAAsB;QACjC,MAAM;QACN,SAAS;QACT,QAAQ;QACR,KAAK;QACL,eAAe;QACf,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ;YACnC,MAAM,QAAQ,GAAa;gBACzB,IAAI;gBACJ,KAAK,EAAE,QAAQ;oBACb,CAAC,CAAC;wBACE;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE;gCACJ,IAAI;gCACJ,QAAQ;gCACR,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;6BAC/C;yBACF;qBACF;oBACH,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;aACtC,CAAC;YACF,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,qBAAqB,CAClC,QAA6C,EAC7C,KAAsB,EACtB,EAAoB;IAEpB,MAAM,EAAE,qBAAqB,EAAE,GAC7B,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;IAE/C,MAAM,aAAa,GAChB,KAAK,EAAE,OAAO,EAAE,kBAAyC,IAAI,SAAS,CAAC;IAC1E,6EAA6E;IAC7E,2EAA2E;IAC3E,yEAAyE;IACzE,qCAAqC;IACrC,MAAM,SAAS,GACZ,KAAK,EAAE,OAAO,EAAE,cAAqC,IAAI,SAAS,CAAC;IAEtE,MAAM,aAAa,GAAG,MAAM,uBAAuB,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IAC9E,MAAM,aAAa,GAAG,uBAAuB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAE/D,OAAO,qBAAqB,CAC1B;QACE,SAAS,EAAE,aAAa;QACxB,KAAK,EAAE,aAAa;QACpB,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,EACD,EAAE,CACW,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,aAAiC,EACjC,iBAAqC;IAErC,IAAI,iBAAiB,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACjE,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;YACxD,IAAI,GAAG;gBAAE,OAAO,GAAG,CAAC,KAAK,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;QAC5D,CAAC;IACH,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACnE,OAAO,CAAC,MAAM,oBAAoB,CAAC,aAAa,CAAC,CAAC,IAAI,SAAS,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;QAC5D,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,oBAAoB,CACjC,MAAc,EACd,OAAgB,EAChB,MAAiB,EACjB,SAA6B,EAC7B,QAA6C,EAC7C,KAAW,EACX,eAAqC;IAErC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,kBAAkB,CAC/C,MAAM,EACN,SAAS,EACT,QAAQ,EACR,KAAK,EACL,eAAe,CAChB,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEpD,IACE,MAAM;YACN,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,CAAC,aAAa,IAAI,MAAM,EAC9B,CAAC;YACD,IAAI,WAAgC,CAAC;YACrC,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,MAAiC,EAAE,CAAC;gBAC1D,WAAW,GAAG,GAAG,CAAC;YACpB,CAAC;YACD,IAAI,WAAW,EAAE,QAAQ,EAAE,oBAAoB,KAAK,gBAAgB,EAAE,CAAC;gBACrE,MAAM,sBAAsB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBAClD,OAAO;YACT,CAAC;YACD,MAAM,uBAAuB,CAAC,MAAM,EAAE;gBACpC,KAAK,EAAE,WAAW;gBAClB,OAAO,EAAE,WAAW;gBACpB,SAAS,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;aACxD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,aAAa,GAAG,MAAO,MAAoC,CAAC;QAClE,MAAM,YAAY,GAAG,CAAC,GAAG,SAAS,EAAE,GAAG,CAAC,aAAa,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;QACxE,IAAI,aAAa,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;YACjD,MAAM,sBAAsB,CAAC,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QACD,MAAM,uBAAuB,CAAC,MAAM,EAAE;YACpC,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,SAAS,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;SAC9D,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,uBAAuB,CAAC,MAAM,EAAE;YACpC,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE;gBACP,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,IAAI,gBAAgB,EAAE,CAAC;aAClE;SACF,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAW;IAIpC,MAAM,UAAU,GACb,KAAK,EAAE,OAAO,EAAE,kBAAyC,IAAI,IAAI,CAAC;IACrE,OAAO;QACL,UAAU;QACV,UAAU,EAAE,UAAU;YACpB,CAAC,CAAC,CAAE,KAAK,EAAE,OAAO,EAAE,cAAqC;gBACrD,EAAE,IAAI,EAAE;iBACP,WAAW,EAAE,IAAI,wBAAwB,CAAC;YAC/C,CAAC,CAAC,IAAI;KACT,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,MAA+B,EAC/B,MAAiB,EACjB,KAAW;IAEX,MAAM,OAAO,GAAG,MAAM,CAAC,OAAkB,CAAC;IAC1C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,OAAO;YACL,GAAG,YAAY,CACb,CAAC,EACD,CAAC,KAAK,EACN,sDAAsD,CACvD;YACD,GAAG,EAAE,CAAC;SACP,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,SAA+B,CAAC;IACzD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAA+C,CAAC;IACxE,MAAM,eAAe,GAAG,sBAAsB,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IAE9E,sEAAsE;IACtE,yEAAyE;IACzE,uEAAuE;IACvE,0EAA0E;IAC1E,6BAA6B;IAC7B,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,UAAU,EAAE,iBAAiB,EAAE,GACpE,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,cAAkC,CAAC;IACvC,IAAI,iBAAiB,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QAC7D,IAAI,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;YAC9C,OAAO;gBACL,GAAG,YAAY,CACb,CAAC,EACD,CAAC,KAAK,EACN,iDAAiD,CAClD;gBACD,GAAG,EAAE,CAAC;aACP,CAAC;QACJ,CAAC;QACD,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAC9C,IACE,CAAC,cAAc;YACf,cAAc,CAAC,MAAM,GAAG,6BAA6B,EACrD,CAAC;YACD,OAAO;gBACL,GAAG,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,2CAA2C,CAAC;gBACvE,GAAG,EAAE,CAAC;aACP,CAAC;QACJ,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,0EAA0E;IAC1E,8EAA8E;IAC9E,yEAAyE;IACzE,kEAAkE;IAClE,sEAAsE;IACtE,wEAAwE;IACxE,yEAAyE;IACzE,8CAA8C;IAC9C,MAAM,SAAS,GACb,MAAM,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,eAAe,KAAK,IAAI,CAAC,CAAC;IAC9E,IAAI,CAAC,SAAS;QAAE,cAAc,GAAG,SAAS,CAAC;IAE3C,IAAI,SAAS,EAAE,CAAC;QACd,uEAAuE;QACvE,sEAAsE;QACtE,uEAAuE;QACvE,sEAAsE;QACtE,uEAAuE;QACvE,0DAA0D;QAC1D,MAAM,YAAY,GAAG,sBAAsB,EAAE,CAAC;QAC9C,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QACxE,IAAI,sBAAsB,EAAE,IAAI,CAAC,YAAY,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5D,OAAO;gBACL,GAAG,YAAY,CACb,CAAC,EACD,CAAC,KAAK,EACN,+EAA+E,CAChF;gBACD,GAAG,EAAE,CAAC;aACP,CAAC;QACJ,CAAC;QACD,uEAAuE;QACvE,wEAAwE;QACxE,0EAA0E;QAC1E,sEAAsE;QACtE,0EAA0E;QAC1E,0EAA0E;QAC1E,oEAAoE;QACpE,MAAM,aAAa,GAChB,KAAK,EAAE,OAAO,EAAE,kBAAyC,IAAI,SAAS,CAAC;QAC1E,2EAA2E;QAC3E,iEAAiE;QACjE,MAAM,aAAa,GAChB,KAAK,EAAE,OAAO,EAAE,cAAqC,IAAI,SAAS,CAAC;QACtE,MAAM,aAAa,GAAG,uBAAuB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC/D,MAAM,YAAY,GAAG,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAEzD,MAAM,YAAY,GAA4B;YAC5C,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;YACvB,eAAe,EAAE;gBACf,aAAa;gBACb,aAAa;gBACb,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,SAAS,EAAE,SAAS,IAAI,IAAI;gBAC5B,cAAc,EAAE,YAAY,IAAI,IAAI;gBACpC,eAAe,EAAE,eAAe,IAAI,IAAI;aACzC;SACF,CAAC;QACF,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAC9C,OAAO,EACP,SAAS,EACT,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,CACf,CAAC;QACF,IAAI,MAAM,EAAE,CAAC;YACX,OAAO;gBACL,GAAG,aAAa,CAAC,CAAC,EAAE,uBAAuB,CAAC,IAAI,CAAC,CAAC;gBAClD,GAAG,EAAE,CAAC;aACP,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAEhE,uEAAuE;QACvE,yEAAyE;QACzE,yEAAyE;QACzE,2DAA2D;QAC3D,mEAAmE;QACnE,wEAAwE;QACxE,iEAAiE;QACjE,IAAI,CAAC;YACH,MAAM,uBAAuB,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,GAAG,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO;YACL,GAAG,aAAa,CAAC,CAAC,EAAE,uBAAuB,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC;YAC7D,GAAG,EAAE,CAAC;SACP,CAAC;IACJ,CAAC;IAED,OAAO,qBAAqB,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAC9C,OAAO,EACP,SAAS,EACT,SAAS,EACT,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,CACf,CAAC;QACF,IAAI,MAAM,EAAE,CAAC;YACX,OAAO;gBACL,GAAG,aAAa,CAAC,CAAC,EAAE,uBAAuB,CAAC,IAAI,CAAC,CAAC;gBAClD,GAAG,EAAE,CAAC;aACP,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAEhD,MAAM,GAAG,GAAG,kBAAkB,CAC5B,IAAI,CAAC,EAAE,EACP,SAAS,EACT,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,EACnC,KAAK,EACL,eAAe,CAChB,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAExD,IACE,MAAM;gBACN,OAAO,MAAM,KAAK,QAAQ;gBAC1B,MAAM,CAAC,aAAa,IAAI,MAAM,EAC9B,CAAC;gBACD,IAAI,WAAgC,CAAC;gBACrC,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,MAAiC,EAAE,CAAC;oBAC1D,WAAW,GAAG,GAAG,CAAC;gBACpB,CAAC;gBACD,IAAI,WAAW,EAAE,QAAQ,EAAE,oBAAoB,KAAK,gBAAgB,EAAE,CAAC;oBACrE,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE;wBACxC,KAAK,EAAE,gBAAgB;wBACvB,OAAO,EAAE,WAAW;qBACrB,CAAC,CAAC;oBACH,OAAO,EAAE,GAAG,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;gBAClD,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE;oBACxC,KAAK,EAAE,WAAW;oBAClB,OAAO,EAAE,WAAW;oBACpB,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;iBAChE,CAAC,CAAC;gBACH,OAAO,EAAE,GAAG,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;YAClD,CAAC;YAED,MAAM,aAAa,GAAG,MAAO,MAAoC,CAAC;YAClE,MAAM,YAAY,GAAG;gBACnB,GAAG,GAAG,CAAC,SAAS;gBAChB,GAAG,CAAC,aAAa,CAAC,SAAS,IAAI,EAAE,CAAC;aACnC,CAAC;YACF,IAAI,aAAa,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;gBACjD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE;oBACxC,KAAK,EAAE,gBAAgB;oBACvB,OAAO,EAAE,aAAa,CAAC,OAAO;iBAC/B,CAAC,CAAC;gBACH,OAAO,EAAE,GAAG,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;YAClD,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE;gBACxC,KAAK,EAAE,WAAW;gBAClB,OAAO,EAAE,aAAa,CAAC,OAAO;gBAC9B,SAAS,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;aAC9D,CAAC,CAAC;YACH,OAAO,EAAE,GAAG,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QAClD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE;gBACxB,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE;oBACP,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,IAAI,gBAAgB,EAAE,CAAC;iBACjE;aACF,CAAC,CAAC;YACH,OAAO;gBACL,GAAG,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,IAAI,gBAAgB,CAAC;gBAC3D,GAAG,EAAE,CAAC;aACP,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,MAA+B,EAC/B,MAAiB,EACjB,GAAwD,EACxD,KAAW;IAEX,MAAM,OAAO,GAAG,MAAM,CAAC,OAAkB,CAAC;IAC1C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,KAAK,CACP,SAAS,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,MAAM,CACzE,CAAC;QACF,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,SAA+B,CAAC;IACzD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAA+C,CAAC;IACxE,MAAM,eAAe,GAAG,sBAAsB,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IAC9E,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,UAAU,EAAE,iBAAiB,EAAE,GACpE,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAE3B,MAAM,qBAAqB,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,IAAI,GAAG,MAAM,UAAU,CAC3B,OAAO,EACP,SAAS,EACT,SAAS,EACT,iBAAiB,EACjB,iBAAiB,CAClB,CAAC;QAEF,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAEhD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,kBAAkB,CAC/C,IAAI,CAAC,EAAE,EACP,SAAS,EACT,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,EACnC,KAAK,EACL,eAAe,CAChB,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAEpD,IACE,MAAM;gBACN,OAAO,MAAM,KAAK,QAAQ;gBAC1B,MAAM,CAAC,aAAa,IAAI,MAAM,EAC9B,CAAC;gBACD,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,MAAiC,EAAE,CAAC;oBAC1D,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE;wBAC7C,KAAK,EAAE,SAAS;wBAChB,OAAO,EAAE,GAAG;qBACb,CAAC,CAAC;oBACH,GAAG,CAAC,KAAK,CACP,SAAS,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,MAAM,CAC9D,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,aAAa,GAAG,MAAO,MAAoC,CAAC;gBAClE,MAAM,YAAY,GAAG,CAAC,GAAG,SAAS,EAAE,GAAG,CAAC,aAAa,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;gBACxE,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE;oBACxC,KAAK,EAAE,WAAW;oBAClB,OAAO,EAAE,aAAa,CAAC,OAAO;oBAC9B,SAAS,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;iBAC9D,CAAC,CAAC;gBACH,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;gBACpE,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YAED,MAAM,YAAY,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC;YACpC,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE;gBACtC,KAAK,EAAE,WAAW;gBAClB,SAAS,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;aAC9D,CAAC,CAAC;YACH,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC/C,GAAG,CAAC,KAAK,CACP,SAAS,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC,MAAM,CACxF,CAAC;QACJ,CAAC;QAED,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACtC,aAAa;IACb,WAAW;IACX,WAAW;IACX,aAAa;IACb,cAAc;IACd,QAAQ;IACR,eAAe;IACf,eAAe;IACf,QAAQ;CACT,CAAC,CAAC;AAEH,SAAS,uBAAuB,CAAC,IAAS;IACxC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,EACJ,UAAU,EAAE,WAAW,EACvB,UAAU,EAAE,WAAW,EACvB,GAAG,UAAU,EACd,GAAG,IAAI,CAAC;IACT,IAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,OAAO,UAAU,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACpE,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,CAAC,QAAmC,CAAC;IAC5D,MAAM,UAAU,GAA4B,EAAE,CAAC;IAC/C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,KAAK,iBAAiB;YAAE,SAAS;QACtC,IAAI,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,SAAS;QAC7C,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,EAAE,GAAG,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AACjD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,mBAAmB,CAC1B,cAA6B,EAC7B,cAA6B,EAC7B,KAAU,EACV,MAAiB;IAEjB,MAAM,aAAa,GAChB,KAAK,EAAE,OAAO,EAAE,kBAAyC,IAAI,IAAI,CAAC;IACrE,MAAM,YAAY,GAAG,sBAAsB,EAAE,CAAC;IAC9C,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IACxE,MAAM,YAAY,GAAG,sBAAsB,EAAE,CAAC;IAE9C,IAAI,YAAY,IAAI,CAAC,YAAY,IAAI,CAAC,SAAS,EAAE,CAAC;QAChD,mEAAmE;QACnE,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,cAAc,EAAE,CAAC;QACnB,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,aAAa,CAAC,WAAW,EAAE,KAAK,cAAc,CAAC,WAAW,EAAE,EAAE,CAAC;YACjE,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,aAAa,GAChB,KAAK,EAAE,OAAO,EAAE,cAAqC;gBACpD,EAAE,IAAI,EAAE;iBACP,WAAW,EAAE,IAAI,wBAAwB,CAAC;YAC/C,IAAI,aAAa,KAAK,cAAc,CAAC,WAAW,EAAE,EAAE,CAAC;gBACnD,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IACD,yEAAyE;IACzE,qDAAqD;IACrD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,MAA+B,EAC/B,KAAU,EACV,MAAiB;IAEjB,MAAM,EAAE,GAAG,MAAM,CAAC,EAAY,CAAC;IAC/B,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,mBAAmB,CAChC,SAAS,CAAC,UAAU,EACpB,SAAS,CAAC,UAAU,EACpB,KAAK,EACL,MAAM,CACP,CAAC;IACF,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,4BAA4B,CACpD,EAAE,EACF,KAAK,EACL,MAAM,CACP,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACd,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,GAAG,CAAC,CAAC;QAC/D,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IACH,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,OAAO;YAAE,OAAO,aAAa,CAAC,CAAC,EAAE,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,aAAa,CAAC,CAAC,EAAE,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,MAAc,EACd,KAAU,EACV,MAAiB;IAEjB,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,eAAe;QAAE,OAAO,KAAK,CAAC;IAEnD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACzE,MAAM,oBAAoB,GAAG,GAAG,GAAG,sBAAsB,EAAE,CAAC;QAC5D,IAAI,KAAK,CAAC,SAAS,IAAI,oBAAoB,EAAE,CAAC;YAC5C,sEAAsE;YACtE,qEAAqE;YACrE,uEAAuE;YACvE,OAAO,sBAAsB,CAC3B,MAAM,EACN,oBAAoB,EACpB,kGAAkG,CACnG,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG,GAAG,kCAAkC,EAAE,CAAC;YAChE,IAAI,CAAC,CAAC,MAAM,0BAA0B,CAAC,MAAM,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC9D,IAAI,CAAC;gBACH,MAAM,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CACX,oDAAoD,EACpD,GAAG,CACJ,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;QACvC,MAAM,qBAAqB,GAAG,GAAG,GAAG,6BAA6B,CAAC;QAClE,MAAM,wBAAwB,GAAG,GAAG,GAAG,0BAA0B,EAAE,CAAC;QACpE,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,IAAI,qBAAqB,CAAC;QACzD,MAAM,cAAc,GAAG,KAAK,CAAC,SAAS,IAAI,wBAAwB,CAAC;QACnE,IAAI,OAAO,IAAI,cAAc,EAAE,CAAC;YAC9B,+DAA+D;YAC/D,yEAAyE;YACzE,wEAAwE;YACxE,OAAO,gBAAgB,CACrB,MAAM,EACN,qBAAqB,EACrB,OAAO;gBACL,CAAC,CAAC,gFAAgF;gBAClF,CAAC,CAAC,kFAAkF,EACtF,wBAAwB,CACzB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,MAA+B,EAC/B,KAAU,EACV,MAAiB;IAEjB,MAAM,EAAE,GAAG,MAAM,CAAC,EAAY,CAAC;IAC/B,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,mBAAmB,CAChC,SAAS,CAAC,UAAU,EACpB,SAAS,CAAC,UAAU,EACpB,KAAK,EACL,MAAM,CACP,CAAC;IACF,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,aAAa,CAAC,CAAC,EAAE,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,MAA+B,EAC/B,KAAU,EACV,MAAiB;IAEjB,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;IAEjC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,iCAAiC,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,gCAAgC,EAAE,CAAC;QACrD,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,oCAAoC,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,yCAAyC,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,yCAAyC,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,UAAU,GAAG,iCAAiC,EAAE,CAAC;QACnD,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,oCAAoC,CAAC,CAAC;IACvE,CAAC;IACD,IACE,CAAC,KAAK,EAAE,OAAO,EAAE,kBAAkB;QACnC,KAAK,EAAE,OAAO,EAAE,qBAAqB,KAAK,IAAI,EAC9C,CAAC;QACD,OAAO,YAAY,CACjB,CAAC,EACD,CAAC,KAAK,EACN,mFAAmF,CACpF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC;QAClC,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,wCAAwC,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAG,8BAA8B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpE,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACzC,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,kBAA4B,CAAC;IACjE,MAAM,YAAY,GAAG,CAAC,MAA8B,EAAE,EAAE;QACtD,MAAM,QAAQ,GAAG,0BAA0B,EAAE,CAAC;QAC9C,KAAK,CACH,qBAAqB,EACrB;YACE,GAAG,QAAQ;YACX,MAAM;YACN,YAAY,EAAE,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI;YACzD,UAAU,EAAE,WAAW,CAAC,SAAS,IAAI,SAAS;YAC9C,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAChD,MAAM;YACN,aAAa,EAAE,YAAY;YAC3B,GAAG,CAAC,WAAW,CAAC,WAAW;gBACzB,CAAC,CAAC,EAAE,aAAa,EAAE,WAAW,CAAC,WAAW,EAAE;gBAC5C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,WAAW,CAAC,YAAY;gBAC1B,CAAC,CAAC,EAAE,cAAc,EAAE,WAAW,CAAC,YAAY,EAAE;gBAC9C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,WAAW,CAAC,YAAY;gBAC1B,CAAC,CAAC,EAAE,oBAAoB,EAAE,WAAW,CAAC,YAAY,EAAE;gBACpD,CAAC,CAAC,EAAE,CAAC;SACR,EACD,EAAE,MAAM,EAAE,aAAa,EAAE,CAC1B,CAAC;IACJ,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAChE,MAAM,CAAC,qBAAsB,CAAC;YAC5B,MAAM;YACN,KAAK,EAAE,KAAgC;YACvC,YAAY;SACb,CAAC,CACH,CAAC;QACF,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,aAAa,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,YAAY,CAAC,QAAQ,CAAC,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,uBAAuB,MAAM,UAAU,EAAE,KAAK,CAAC,CAAC;QAC9D,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,iCAAiC,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAS,EACT,KAAU,EACV,MAAiB;IAEjB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACpD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,YAAY,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,MAAM,GAAI,IAAI,CAAC,MAAkC,IAAI,EAAE,CAAC;IAC9D,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;IAEnB,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,KAAK,cAAc,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YACvD,MAAM,EAAE,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC;YACpC,OAAO,EAAE,GAAG,QAAQ,EAAE,EAAE,EAAqB,CAAC;QAChD,CAAC;QACD,KAAK,gBAAgB,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBACtB,OAAO,YAAY,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,yBAAyB,CAAC,CAAC;YAC7D,CAAC;YACD,8CAA8C;YAC9C,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC;YAC5B,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,YAAY,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,yBAAyB,CAAC,CAAC;YAC7D,CAAC;YACD,iBAAiB,CAAC,KAAK,EAAE,cAAc,EAAE,mBAAmB,CAAC,CAAC;YAC9D,iBAAiB,CAAC,KAAK,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;YACtD,iBAAiB,CAAC,KAAK,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;YACrD,MAAM,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YAC/C,OAAO,SAAgB,CAAC,CAAC,gCAAgC;QAC3D,CAAC;QACD,KAAK,WAAW,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACtD,OAAO,EAAE,GAAG,MAAM,EAAE,EAAE,EAAqB,CAAC;QAC9C,CAAC;QACD,KAAK,cAAc,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACzD,OAAO,EAAE,GAAG,MAAM,EAAE,EAAE,EAAqB,CAAC;QAC9C,CAAC;QACD,KAAK,gBAAgB,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACvE,OAAO,EAAE,GAAG,MAAM,EAAE,EAAE,EAAqB,CAAC;QAC9C,CAAC;QACD;YACE,OAAO,YAAY,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,qBAAqB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;AACH,CAAC","sourcesContent":["import crypto from \"node:crypto\";\n\nimport { setResponseHeader, setResponseStatus } from \"h3\";\n\nimport {\n  AGENT_BACKGROUND_PROCESSOR_A2A,\n  AGENT_BACKGROUND_PROCESSOR_FIELD,\n  dispatchPathTargetsNetlifyBackgroundFunction,\n  isAgentChatDurableBackgroundEnabled,\n  resolveAgentChatProcessRunDispatchPath,\n} from \"../agent/durable-background.js\";\nimport { trackingIdentityProperties } from \"../observability/tracking-identity.js\";\nimport { withConfiguredAppBasePath } from \"../server/app-base-path.js\";\nimport { getOrigin, isConfiguredAppOrigin } from \"../server/google-oauth.js\";\nimport { fireInternalDispatch } from \"../server/self-dispatch.js\";\nimport { agentChat } from \"../shared/agent-chat.js\";\nimport { track } from \"../tracking/registry.js\";\nimport {\n  hasConfiguredA2ASecret,\n  isA2AProductionRuntime,\n} from \"./auth-policy.js\";\nimport { sanitizeA2ACorrelationMetadata } from \"./correlation.js\";\nimport {\n  createTask,\n  createOrReuseTask,\n  getTask,\n  getTaskOwnership,\n  updateTask,\n  claimA2ATaskForProcessing,\n  getA2ATaskDispatchState,\n  failStuckA2ATask,\n  failStuckQueuedA2ATask,\n  settleProcessingA2ATask,\n  touchQueuedA2ATaskDispatch,\n  touchProcessingA2ATask,\n  pauseProcessingA2ATask,\n  MAX_A2A_IDEMPOTENCY_KEY_CHARS,\n  A2A_PERSONAL_OWNER_SCOPE,\n} from \"./task-store.js\";\nimport type {\n  A2AApprovedAction,\n  A2AConfig,\n  A2AHandler,\n  A2AHandlerContext,\n  A2AHandlerResult,\n  JsonRpcResponse,\n  Message,\n  Artifact,\n} from \"./types.js\";\n\n// Inlined to avoid pulling the entire core-routes-plugin (and its h3\n// transitive deps) into the a2a/handlers test boundary. Must stay in sync\n// with FRAMEWORK_ROUTE_PREFIX in `server/core-routes-plugin.ts`.\nconst A2A_PROCESS_TASK_PATH = \"/_agent-native/a2a/_process-task\";\nconst PORTABLE_FALLBACK_HANDOFF_TIMEOUT_MS = 1_000;\nconst A2A_QUEUED_DISPATCH_STUCK_AFTER_MS = 10_000;\nconst A2A_PROCESSING_STUCK_AFTER_MS = 5 * 60 * 1000;\nconst A2A_PROCESSING_HEARTBEAT_MS = 30_000;\nconst MAX_A2A_APPROVED_ACTIONS = 10;\nconst MAX_A2A_DIRECT_ACTION_NAME_CHARS = 200;\nconst MAX_A2A_DIRECT_ACTION_INPUT_BYTES = 64 * 1024;\nconst A2A_READ_INVOKE_EVENT = \"$a2a_read_invoke\";\n\nfunction trustedApprovedActions(\n  value: unknown,\n  event: any | undefined,\n): A2AApprovedAction[] | undefined {\n  // Static API keys and unsigned requests do not prove which user authorized\n  // a consequential action. Only a verified identity-bearing JWT may carry\n  // chat authorization across the A2A boundary.\n  if (!event?.context?.__a2aVerifiedEmail || !Array.isArray(value)) {\n    return undefined;\n  }\n  const approved = value\n    .slice(0, MAX_A2A_APPROVED_ACTIONS)\n    .filter(\n      (candidate): candidate is A2AApprovedAction =>\n        !!candidate &&\n        typeof candidate === \"object\" &&\n        typeof (candidate as Record<string, unknown>).tool === \"string\" &&\n        !!(candidate as Record<string, unknown>).tool,\n    )\n    .map((candidate) => ({ tool: candidate.tool, input: candidate.input }));\n  return approved.length > 0 ? approved : undefined;\n}\n\n/**\n * Request origin is routing/link context, not an identity signal. Accept only\n * an absolute HTTP(S) origin from caller metadata so queued runs can preserve\n * custom-domain/workspace links without allowing arbitrary values to leak\n * into browser or artifact URLs.\n */\nfunction requestOriginFromMetadata(\n  metadata: Record<string, unknown> | undefined,\n): string | undefined {\n  const raw = metadata?.requestOrigin;\n  if (typeof raw !== \"string\" || !raw.trim()) return undefined;\n  try {\n    const url = new URL(raw);\n    if (url.protocol !== \"http:\" && url.protocol !== \"https:\") return undefined;\n    return url.origin;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction requestOriginFromEvent(event: any | undefined): string | undefined {\n  if (!event) return undefined;\n  try {\n    return requestOriginFromMetadata({\n      requestOrigin: getOrigin(event as any),\n    });\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Prefer the origin resolved from the receiving request. A distinct public\n * browser origin is allowed only when the receiver configured it explicitly;\n * arbitrary caller metadata must not steer links or service-token URLs.\n */\nfunction requestOriginForContext(\n  metadata: Record<string, unknown> | undefined,\n  event: any | undefined,\n): string | undefined {\n  if (!event) return undefined;\n  const receiverOrigin = requestOriginFromEvent(event);\n  const metadataOrigin = requestOriginFromMetadata(metadata);\n  if (\n    metadataOrigin &&\n    (metadataOrigin === receiverOrigin || isConfiguredAppOrigin(metadataOrigin))\n  ) {\n    return metadataOrigin;\n  }\n  return receiverOrigin;\n}\n\nfunction trustedA2AMetadata(\n  metadata: Record<string, unknown> | undefined,\n  event: any | undefined,\n): Record<string, unknown> | undefined {\n  if (!metadata) return undefined;\n  const trusted = { ...metadata };\n  const requestOrigin = requestOriginForContext(metadata, event);\n  if (requestOrigin) trusted.requestOrigin = requestOrigin;\n  else delete trusted.requestOrigin;\n  return trusted;\n}\n\n/**\n * Hard cap on how long a task may sit in submitted/working (never reaching\n * `processing`) before the dispatch-retry loop in\n * `refireStuckAsyncTaskIfNeeded` gives up and fails it. Without this, a\n * persistently failing dispatch (missing background function, bad A2A\n * secret, 404) throttles-and-retries forever — the queued bucket otherwise\n * has no terminal state. Override with A2A_QUEUED_LIFETIME_MAX_MS.\n */\nfunction a2aQueuedLifetimeMaxMs(): number {\n  const raw = Number(process.env.A2A_QUEUED_LIFETIME_MAX_MS);\n  if (Number.isFinite(raw) && raw > 0) return raw;\n  return 3 * 60 * 1000;\n}\n\n/**\n * Hard cap on total time a task may spend in `processing`, independent of\n * the liveness heartbeat. `A2A_PROCESSING_STUCK_AFTER_MS` alone only catches\n * a dead process — a hung await inside a still-alive process keeps\n * `updated_at` fresh via the heartbeat forever. This bounds that case\n * without cutting off legitimately long runs under it. Override with\n * A2A_PROCESSING_LIFETIME_MAX_MS.\n */\nfunction a2aProcessingLifetimeMaxMs(): number {\n  const raw = Number(process.env.A2A_PROCESSING_LIFETIME_MAX_MS);\n  if (Number.isFinite(raw) && raw > 0) return raw;\n  return 30 * 60 * 1000;\n}\n\n/**\n * Dispatch an async A2A task to a fresh function execution. Apps that opted\n * into durable background runs reuse the emitted Netlify 15-minute worker;\n * other hosts and apps retain the normal portable self-webhook route.\n */\nasync function fireProcessTaskDispatch(\n  event: any,\n  taskId: string,\n  config: A2AConfig,\n): Promise<void> {\n  const backgroundPath = resolveAgentChatProcessRunDispatchPath();\n  const useBackgroundWorker =\n    isAgentChatDurableBackgroundEnabled({\n      appOptIn: config.durableBackgroundRuns,\n    }) && dispatchPathTargetsNetlifyBackgroundFunction(backgroundPath);\n\n  if (!useBackgroundWorker) {\n    await fireInternalDispatch({\n      event,\n      path: A2A_PROCESS_TASK_PATH,\n      taskId,\n    });\n    return;\n  }\n\n  try {\n    // A real Netlify background function acknowledges the enqueue quickly.\n    // Await that acknowledgement so a missing or rejected worker can fall\n    // back before the task is left in `working` with no processor.\n    await fireInternalDispatch({\n      event,\n      path: backgroundPath,\n      taskId,\n      body: {\n        [AGENT_BACKGROUND_PROCESSOR_FIELD]: AGENT_BACKGROUND_PROCESSOR_A2A,\n      },\n      awaitResponse: true,\n    });\n  } catch (backgroundError) {\n    // Deploys can retain a runtime env opt-in after the corresponding\n    // background function was removed from the build. Keep async A2A useful\n    // in that state by falling back to the portable processor route, which\n    // runs in the regular framework function with the same task/auth checks.\n    console.error(\n      \"[a2a] Durable background dispatch failed; falling back to portable processor:\",\n      backgroundError,\n    );\n    await fireInternalDispatch({\n      event,\n      path: A2A_PROCESS_TASK_PATH,\n      taskId,\n      // The caller is about to return after a failed background handoff.\n      // Await the portable route briefly so the request definitely leaves this\n      // invocation, but do not hold async message/send open for the full agent\n      // run. The target processor continues independently after this bounded\n      // client-side timeout if the handler takes longer.\n      awaitResponse: true,\n      responseTimeoutMs: PORTABLE_FALLBACK_HANDOFF_TIMEOUT_MS,\n    });\n  }\n}\n\n/**\n * Process a previously-enqueued A2A task. Called by the `_process-task`\n * route in `server.ts`, in a fresh function execution. Atomically claims the\n * task, reconstructs the caller's request context from the task's metadata,\n * runs the handler, and persists the outcome.\n *\n * Idempotent on duplicate dispatches: the atomic claim returns null if some\n * other invocation already picked the task up, in which case we no-op.\n */\nexport async function processA2ATaskFromQueue(\n  taskId: string,\n  config: A2AConfig,\n  event?: any,\n): Promise<void> {\n  const claimed = await claimA2ATaskForProcessing(taskId);\n  if (!claimed) {\n    // Already in flight, terminal, or missing. Nothing to do.\n    return;\n  }\n\n  const message = claimed.history?.[0];\n  if (!message) {\n    await settleProcessingA2ATask(taskId, {\n      state: \"failed\",\n      message: {\n        role: \"agent\",\n        parts: [{ type: \"text\", text: \"Task is missing its inbound message\" }],\n      },\n    });\n    return;\n  }\n\n  const meta = (claimed.metadata ?? {}) as Record<string, unknown>;\n  const processorMeta = (meta.__a2a_processor ?? {}) as Record<string, unknown>;\n  const verifiedEmail = processorMeta.verifiedEmail as string | undefined;\n  const orgDomainHint = processorMeta.orgDomainHint as string | undefined;\n  // The processor metadata was created by the authenticated inbound handler\n  // from that request's resolved origin. Prefer it over the processor event,\n  // whose host may be an internal worker/dispatch origin. Legacy tasks that\n  // predate this metadata fall back to the processor event.\n  const requestOrigin =\n    requestOriginFromMetadata(processorMeta) ?? requestOriginFromEvent(event);\n  const contextId =\n    (processorMeta.contextId as string | null | undefined) ?? undefined;\n  const callerMetadata =\n    (processorMeta.callerMetadata as\n      | Record<string, unknown>\n      | null\n      | undefined) ?? undefined;\n  const approvedActions = Array.isArray(processorMeta.approvedActions)\n    ? (processorMeta.approvedActions as A2AApprovedAction[])\n    : undefined;\n\n  const resolvedOrgId = await resolveVerifiedA2AOrgId(\n    verifiedEmail,\n    orgDomainHint,\n  );\n\n  const { runWithRequestContext } =\n    await import(\"../server/request-context.js\");\n  const heartbeat = setInterval(() => {\n    touchProcessingA2ATask(taskId).catch((err) =>\n      console.error(\"[a2a] Failed to heartbeat async task:\", err),\n    );\n  }, A2A_PROCESSING_HEARTBEAT_MS);\n  (\n    heartbeat as ReturnType<typeof setInterval> & { unref?: () => void }\n  ).unref?.();\n  try {\n    await runWithRequestContext(\n      {\n        userEmail: verifiedEmail,\n        orgId: resolvedOrgId,\n        ...(requestOrigin ? { requestOrigin } : {}),\n      },\n      () =>\n        runHandlerAndPersist(\n          taskId,\n          message,\n          config,\n          contextId,\n          callerMetadata,\n          event,\n          approvedActions,\n        ),\n    );\n  } catch (err: any) {\n    try {\n      await settleProcessingA2ATask(taskId, {\n        state: \"failed\",\n        message: {\n          role: \"agent\",\n          parts: [{ type: \"text\", text: err?.message ?? \"Handler crashed\" }],\n        },\n      });\n    } catch {}\n  } finally {\n    clearInterval(heartbeat);\n  }\n}\n\n/**\n * Default A2A handler that delegates to agentChat.call().\n * Used when no custom handler is provided in A2AConfig.\n */\nconst defaultHandler: A2AHandler = async (\n  message: Message,\n  _context: A2AHandlerContext,\n): Promise<A2AHandlerResult> => {\n  // Extract text from message parts\n  const text = message.parts\n    .filter((p): p is { type: \"text\"; text: string } => p.type === \"text\")\n    .map((p) => p.text)\n    .join(\"\\n\");\n\n  if (!text) {\n    return {\n      message: {\n        role: \"agent\",\n        parts: [{ type: \"text\", text: \"No text content in message\" }],\n      },\n    };\n  }\n\n  // A2A note: this message arrived from a different app — the caller cannot\n  // see this app's local state (open deck, selected slide, etc.). They only\n  // see whatever this agent puts into the reply text. So:\n  //   1) include any concrete result (deck/document/dashboard URL, ID, value)\n  //      explicitly in the reply — the caller can't navigate locally.\n  //   2) URLs must be fully-qualified — relative paths resolve against the\n  //      caller's host and 404.\n  // We prepend a one-line hint to the user message so the agent knows.\n  const baseUrl = process.env.APP_URL || process.env.URL || \"\";\n  const appBaseUrl = baseUrl ? withConfiguredAppBasePath(baseUrl) : \"\";\n  const augmentedText = baseUrl\n    ? `[Cross-app A2A request — the caller is on a different host (${appBaseUrl} is yours, theirs is different). Include the concrete result (URL, ID, value) explicitly in your reply text; the caller can't see your local UI state. Any URL MUST be fully-qualified, never a relative path.]\\n\\n${text}`\n    : text;\n\n  const result = await agentChat.call(augmentedText);\n\n  const artifacts: Artifact[] = [];\n  if (result.filesChanged.length > 0) {\n    artifacts.push({\n      name: \"files-changed\",\n      description: \"Files modified by the agent\",\n      parts: [{ type: \"data\", data: { files: result.filesChanged } }],\n    });\n  }\n\n  return {\n    message: {\n      role: \"agent\",\n      parts: [\n        { type: \"text\", text: result.response },\n        ...(result.warnings?.length\n          ? [\n              {\n                type: \"text\" as const,\n                text: `\\n\\nWarnings:\\n${result.warnings.join(\"\\n\")}`,\n              },\n            ]\n          : []),\n      ],\n    },\n    artifacts: artifacts.length > 0 ? artifacts : undefined,\n  };\n};\n\nfunction getHandler(config: A2AConfig): A2AHandler {\n  return config.handler ?? defaultHandler;\n}\n\nfunction jsonRpcError(\n  id: string | number | null,\n  code: number,\n  message: string,\n): JsonRpcResponse {\n  return { jsonrpc: \"2.0\", id, error: { code, message } };\n}\n\nfunction jsonRpcResult(id: string | number, result: unknown): JsonRpcResponse {\n  return { jsonrpc: \"2.0\", id, result };\n}\n\nfunction makeHandlerContext(\n  taskId: string,\n  contextId?: string,\n  metadata?: Record<string, unknown>,\n  event?: any,\n  approvedActions?: A2AApprovedAction[],\n): {\n  context: A2AHandlerContext;\n  artifacts: Artifact[];\n} {\n  const artifacts: Artifact[] = [];\n  const context: A2AHandlerContext = {\n    taskId,\n    contextId,\n    metadata,\n    event,\n    approvedActions,\n    writeArtifact(name, content, mimeType) {\n      const artifact: Artifact = {\n        name,\n        parts: mimeType\n          ? [\n              {\n                type: \"file\",\n                file: {\n                  name,\n                  mimeType,\n                  bytes: Buffer.from(content).toString(\"base64\"),\n                },\n              },\n            ]\n          : [{ type: \"text\", text: content }],\n      };\n      artifacts.push(artifact);\n      return name;\n    },\n  };\n  return { context, artifacts };\n}\n\n/**\n * Resolve org context from A2A metadata / event context and wrap `fn`\n * inside `runWithRequestContext` so downstream actions see the org.\n */\nasync function withA2ARequestContext<T>(\n  metadata: Record<string, unknown> | undefined,\n  event: any | undefined,\n  fn: () => Promise<T>,\n): Promise<T> {\n  const { runWithRequestContext } =\n    await import(\"../server/request-context.js\");\n\n  const verifiedEmail =\n    (event?.context?.__a2aVerifiedEmail as string | undefined) ?? undefined;\n  // Only trust the org domain from the cryptographically verified JWT claim on\n  // the event context. metadata.orgDomain is caller-supplied and must not be\n  // used for org resolution — an unauthenticated caller could forge it and\n  // gain access to another org's data.\n  const orgDomain =\n    (event?.context?.__a2aOrgDomain as string | undefined) ?? undefined;\n\n  const resolvedOrgId = await resolveVerifiedA2AOrgId(verifiedEmail, orgDomain);\n  const requestOrigin = requestOriginForContext(metadata, event);\n\n  return runWithRequestContext(\n    {\n      userEmail: verifiedEmail,\n      orgId: resolvedOrgId,\n      ...(requestOrigin ? { requestOrigin } : {}),\n    },\n    fn,\n  ) as Promise<T>;\n}\n\nasync function resolveVerifiedA2AOrgId(\n  verifiedEmail: string | undefined,\n  verifiedOrgDomain: string | undefined,\n): Promise<string | undefined> {\n  if (verifiedOrgDomain) {\n    try {\n      const { resolveOrgByDomain } = await import(\"../org/context.js\");\n      const org = await resolveOrgByDomain(verifiedOrgDomain);\n      if (org) return org.orgId;\n    } catch {\n      // Org tables may not exist — continue without org context\n    }\n  }\n\n  if (verifiedEmail) {\n    try {\n      const { resolveOrgIdForEmail } = await import(\"../org/context.js\");\n      return (await resolveOrgIdForEmail(verifiedEmail)) ?? undefined;\n    } catch {\n      // Org tables may not exist — continue without org context\n    }\n  }\n\n  return undefined;\n}\n\n/**\n * Run the handler against the message and persist the outcome to the task store.\n * Used in sync mode (awaited inline) and in async mode (called by the\n * `_process-task` processor route in a fresh function execution).\n */\nasync function runHandlerAndPersist(\n  taskId: string,\n  message: Message,\n  config: A2AConfig,\n  contextId: string | undefined,\n  metadata: Record<string, unknown> | undefined,\n  event?: any,\n  approvedActions?: A2AApprovedAction[],\n): Promise<void> {\n  const { context, artifacts } = makeHandlerContext(\n    taskId,\n    contextId,\n    metadata,\n    event,\n    approvedActions,\n  );\n  try {\n    const result = getHandler(config)(message, context);\n\n    if (\n      result &&\n      typeof result === \"object\" &&\n      Symbol.asyncIterator in result\n    ) {\n      let lastMessage: Message | undefined;\n      for await (const msg of result as AsyncGenerator<Message>) {\n        lastMessage = msg;\n      }\n      if (lastMessage?.metadata?.agentNativeTaskState === \"input-required\") {\n        await pauseProcessingA2ATask(taskId, lastMessage);\n        return;\n      }\n      await settleProcessingA2ATask(taskId, {\n        state: \"completed\",\n        message: lastMessage,\n        artifacts: artifacts.length > 0 ? artifacts : undefined,\n      });\n      return;\n    }\n\n    const handlerResult = await (result as Promise<A2AHandlerResult>);\n    const allArtifacts = [...artifacts, ...(handlerResult.artifacts ?? [])];\n    if (handlerResult.taskState === \"input-required\") {\n      await pauseProcessingA2ATask(taskId, handlerResult.message);\n      return;\n    }\n    await settleProcessingA2ATask(taskId, {\n      state: \"completed\",\n      message: handlerResult.message,\n      artifacts: allArtifacts.length > 0 ? allArtifacts : undefined,\n    });\n  } catch (err: any) {\n    await settleProcessingA2ATask(taskId, {\n      state: \"failed\",\n      message: {\n        role: \"agent\",\n        parts: [{ type: \"text\", text: err?.message ?? \"Handler failed\" }],\n      },\n    });\n  }\n}\n\nfunction verifiedTaskOwner(event?: any): {\n  ownerEmail: string | null;\n  ownerScope: string | null;\n} {\n  const ownerEmail =\n    (event?.context?.__a2aVerifiedEmail as string | undefined) ?? null;\n  return {\n    ownerEmail,\n    ownerScope: ownerEmail\n      ? ((event?.context?.__a2aOrgDomain as string | undefined)\n          ?.trim()\n          .toLowerCase() ?? A2A_PERSONAL_OWNER_SCOPE)\n      : null,\n  };\n}\n\nasync function handleSend(\n  params: Record<string, unknown>,\n  config: A2AConfig,\n  event?: any,\n): Promise<JsonRpcResponse & { _id: string | number }> {\n  const message = params.message as Message;\n  if (!message || !message.role || !Array.isArray(message.parts)) {\n    return {\n      ...jsonRpcError(\n        0,\n        -32602,\n        \"Invalid params: message with role and parts required\",\n      ),\n      _id: 0,\n    };\n  }\n\n  const contextId = params.contextId as string | undefined;\n  const metadata = params.metadata as Record<string, unknown> | undefined;\n  const approvedActions = trustedApprovedActions(params.approvedActions, event);\n\n  // The JWT-verified caller email (set by mountA2A in server.ts) is the\n  // single source of truth for task ownership — bound at creation, checked\n  // on every subsequent tasks/get and tasks/cancel call. Caller-supplied\n  // metadata.userEmail is NEVER used for ownership; that would re-introduce\n  // the IDOR class fixed here.\n  const { ownerEmail: ownerEmailForTask, ownerScope: ownerScopeForTask } =\n    verifiedTaskOwner(event);\n  let idempotencyKey: string | undefined;\n  if (ownerEmailForTask && params.idempotencyKey !== undefined) {\n    if (typeof params.idempotencyKey !== \"string\") {\n      return {\n        ...jsonRpcError(\n          0,\n          -32602,\n          \"Invalid params: idempotencyKey must be a string\",\n        ),\n        _id: 0,\n      };\n    }\n    idempotencyKey = params.idempotencyKey.trim();\n    if (\n      !idempotencyKey ||\n      idempotencyKey.length > MAX_A2A_IDEMPOTENCY_KEY_CHARS\n    ) {\n      return {\n        ...jsonRpcError(0, -32602, \"Invalid params: idempotencyKey is invalid\"),\n        _id: 0,\n      };\n    }\n  }\n\n  // Async mode: return the task immediately in `working` state, run the\n  // handler in the background, and let the caller poll `tasks/get`. This is\n  // the workaround for synchronous serverless request timeouts when the handler\n  // runs LLM + tool loops that can exceed a single HTTP invocation budget.\n  // SECURITY: only honor the explicit top-level `params.async`. The\n  // metadata.async fallback was caller-controlled and could force async\n  // dispatch (which has weaker auth than the sync path) on otherwise sync\n  // requests. Async is also refused entirely when no auth is configured in\n  // production — see the additional gate below.\n  const asyncMode =\n    params.async === true || (event && event.context?.__a2aForceAsync === true);\n  if (!asyncMode) idempotencyKey = undefined;\n\n  if (asyncMode) {\n    // Refuse async mode entirely when no auth is configured in production.\n    // The async dispatch path self-fires the `_process-task` route, which\n    // accepts unsigned dispatches when A2A_SECRET is unset — that combined\n    // with the lack of caller identity here would let any unauthenticated\n    // attacker queue and trigger handler runs. In production, require some\n    // form of auth so the verifiedEmail is bound to the task.\n    const hasA2ASecret = hasConfiguredA2ASecret();\n    const hasApiKey = !!(config.apiKeyEnv && process.env[config.apiKeyEnv]);\n    if (isA2AProductionRuntime() && !hasA2ASecret && !hasApiKey) {\n      return {\n        ...jsonRpcError(\n          0,\n          -32001,\n          \"A2A async mode is not available — A2A_SECRET or apiKeyEnv must be configured.\",\n        ),\n        _id: 0,\n      };\n    }\n    // Resolve identity up front (cheap), bake it into the task's metadata,\n    // and dispatch the actual handler run to a SEPARATE function execution.\n    // On serverless hosts (Netlify, Vercel, Cloudflare) detached promises get\n    // killed when the response is flushed, so we self-fire a webhook to a\n    // dedicated processor route — same cross-platform pattern the integration\n    // webhook queue uses. The processor reconstructs the request context from\n    // the task metadata and runs the handler with its own full timeout.\n    const verifiedEmail =\n      (event?.context?.__a2aVerifiedEmail as string | undefined) ?? undefined;\n    // Only trust the verified org domain from the JWT claim — do not fall back\n    // to metadata.orgDomain which is caller-supplied and unverified.\n    const orgDomainHint =\n      (event?.context?.__a2aOrgDomain as string | undefined) ?? undefined;\n    const requestOrigin = requestOriginForContext(metadata, event);\n    const safeMetadata = trustedA2AMetadata(metadata, event);\n\n    const taskMetadata: Record<string, unknown> = {\n      ...(safeMetadata ?? {}),\n      __a2a_processor: {\n        verifiedEmail,\n        orgDomainHint,\n        ...(requestOrigin ? { requestOrigin } : {}),\n        contextId: contextId ?? null,\n        callerMetadata: safeMetadata ?? null,\n        approvedActions: approvedActions ?? null,\n      },\n    };\n    const { task, reused } = await createOrReuseTask(\n      message,\n      contextId,\n      taskMetadata,\n      ownerEmailForTask,\n      ownerScopeForTask,\n      idempotencyKey,\n    );\n    if (reused) {\n      return {\n        ...jsonRpcResult(0, sanitizeTaskForResponse(task)),\n        _id: 0,\n      };\n    }\n    const working = await updateTask(task.id, { state: \"working\" });\n\n    // Awaited, not fire-and-forget: this handler is about to return, and a\n    // detached dispatch fetch racing only a short settle timer can be killed\n    // mid-flight when the serverless response is flushed WITHOUT rejecting —\n    // see the `awaitResponse` doc on `fireInternalDispatch` in\n    // server/self-dispatch.ts. The durable worker path gets a fast 202\n    // acknowledgement; a stale-worker fallback uses a short bounded timeout\n    // because the portable route responds after processing the task.\n    try {\n      await fireProcessTaskDispatch(event, task.id, config);\n    } catch (err) {\n      console.error(\"[a2a] Failed to dispatch process-task:\", err);\n    }\n\n    return {\n      ...jsonRpcResult(0, sanitizeTaskForResponse(working ?? task)),\n      _id: 0,\n    };\n  }\n\n  return withA2ARequestContext(metadata, event, async () => {\n    const { task, reused } = await createOrReuseTask(\n      message,\n      contextId,\n      undefined,\n      ownerEmailForTask,\n      ownerScopeForTask,\n      idempotencyKey,\n    );\n    if (reused) {\n      return {\n        ...jsonRpcResult(0, sanitizeTaskForResponse(task)),\n        _id: 0,\n      };\n    }\n    await updateTask(task.id, { state: \"working\" });\n\n    const ctx = makeHandlerContext(\n      task.id,\n      contextId,\n      trustedA2AMetadata(metadata, event),\n      event,\n      approvedActions,\n    );\n\n    try {\n      const result = getHandler(config)(message, ctx.context);\n\n      if (\n        result &&\n        typeof result === \"object\" &&\n        Symbol.asyncIterator in result\n      ) {\n        let lastMessage: Message | undefined;\n        for await (const msg of result as AsyncGenerator<Message>) {\n          lastMessage = msg;\n        }\n        if (lastMessage?.metadata?.agentNativeTaskState === \"input-required\") {\n          const updated = await updateTask(task.id, {\n            state: \"input-required\",\n            message: lastMessage,\n          });\n          return { ...jsonRpcResult(0, updated), _id: 0 };\n        }\n        const updated = await updateTask(task.id, {\n          state: \"completed\",\n          message: lastMessage,\n          artifacts: ctx.artifacts.length > 0 ? ctx.artifacts : undefined,\n        });\n        return { ...jsonRpcResult(0, updated), _id: 0 };\n      }\n\n      const handlerResult = await (result as Promise<A2AHandlerResult>);\n      const allArtifacts = [\n        ...ctx.artifacts,\n        ...(handlerResult.artifacts ?? []),\n      ];\n      if (handlerResult.taskState === \"input-required\") {\n        const updated = await updateTask(task.id, {\n          state: \"input-required\",\n          message: handlerResult.message,\n        });\n        return { ...jsonRpcResult(0, updated), _id: 0 };\n      }\n      const updated = await updateTask(task.id, {\n        state: \"completed\",\n        message: handlerResult.message,\n        artifacts: allArtifacts.length > 0 ? allArtifacts : undefined,\n      });\n      return { ...jsonRpcResult(0, updated), _id: 0 };\n    } catch (err: any) {\n      await updateTask(task.id, {\n        state: \"failed\",\n        message: {\n          role: \"agent\",\n          parts: [{ type: \"text\", text: err.message ?? \"Handler failed\" }],\n        },\n      });\n      return {\n        ...jsonRpcError(0, -32000, err.message ?? \"Handler failed\"),\n        _id: 0,\n      };\n    }\n  });\n}\n\nasync function handleStream(\n  params: Record<string, unknown>,\n  config: A2AConfig,\n  res: { write: (chunk: string) => void; end: () => void },\n  event?: any,\n): Promise<void> {\n  const message = params.message as Message;\n  if (!message || !message.role || !Array.isArray(message.parts)) {\n    res.write(\n      `data: ${JSON.stringify(jsonRpcError(0, -32602, \"Invalid params\"))}\\n\\n`,\n    );\n    res.end();\n    return;\n  }\n\n  const contextId = params.contextId as string | undefined;\n  const metadata = params.metadata as Record<string, unknown> | undefined;\n  const approvedActions = trustedApprovedActions(params.approvedActions, event);\n  const { ownerEmail: ownerEmailForTask, ownerScope: ownerScopeForTask } =\n    verifiedTaskOwner(event);\n\n  await withA2ARequestContext(metadata, event, async () => {\n    const task = await createTask(\n      message,\n      contextId,\n      undefined,\n      ownerEmailForTask,\n      ownerScopeForTask,\n    );\n\n    await updateTask(task.id, { state: \"working\" });\n\n    const { context, artifacts } = makeHandlerContext(\n      task.id,\n      contextId,\n      trustedA2AMetadata(metadata, event),\n      event,\n      approvedActions,\n    );\n\n    try {\n      const result = getHandler(config)(message, context);\n\n      if (\n        result &&\n        typeof result === \"object\" &&\n        Symbol.asyncIterator in result\n      ) {\n        for await (const msg of result as AsyncGenerator<Message>) {\n          const intermediate = await updateTask(task.id, {\n            state: \"working\",\n            message: msg,\n          });\n          res.write(\n            `data: ${JSON.stringify(jsonRpcResult(0, intermediate))}\\n\\n`,\n          );\n        }\n      } else {\n        const handlerResult = await (result as Promise<A2AHandlerResult>);\n        const allArtifacts = [...artifacts, ...(handlerResult.artifacts ?? [])];\n        const updated = await updateTask(task.id, {\n          state: \"completed\",\n          message: handlerResult.message,\n          artifacts: allArtifacts.length > 0 ? allArtifacts : undefined,\n        });\n        res.write(`data: ${JSON.stringify(jsonRpcResult(0, updated))}\\n\\n`);\n        res.end();\n        return;\n      }\n\n      const allArtifacts = [...artifacts];\n      const final = await updateTask(task.id, {\n        state: \"completed\",\n        artifacts: allArtifacts.length > 0 ? allArtifacts : undefined,\n      });\n      res.write(`data: ${JSON.stringify(jsonRpcResult(0, final))}\\n\\n`);\n    } catch (err: any) {\n      await updateTask(task.id, { state: \"failed\" });\n      res.write(\n        `data: ${JSON.stringify(jsonRpcError(0, -32000, err.message ?? \"Handler failed\"))}\\n\\n`,\n      );\n    }\n\n    res.end();\n  });\n}\n\n/**\n * Caller-supplied metadata keys that may contain sensitive bearer / OAuth\n * material. Always stripped from `tasks/get` responses so a leaked task id\n * never discloses an OAuth token even when the original sender carelessly\n * stuffed one into `metadata` (see `production-agent.ts:1144-1156` for the\n * historical googleToken propagation pattern).\n */\nconst SENSITIVE_METADATA_KEYS = new Set([\n  \"googleToken\",\n  \"userEmail\",\n  \"orgDomain\",\n  \"accessToken\",\n  \"refreshToken\",\n  \"apiKey\",\n  \"Authorization\",\n  \"authorization\",\n  \"bearer\",\n]);\n\nfunction sanitizeTaskForResponse(task: any): any {\n  if (!task || typeof task !== \"object\") return task;\n  const {\n    ownerEmail: _ownerEmail,\n    ownerScope: _ownerScope,\n    ...publicTask\n  } = task;\n  if (!publicTask.metadata || typeof publicTask.metadata !== \"object\") {\n    return publicTask;\n  }\n\n  const meta = publicTask.metadata as Record<string, unknown>;\n  const publicMeta: Record<string, unknown> = {};\n  for (const [k, v] of Object.entries(meta)) {\n    if (k === \"__a2a_processor\") continue;\n    if (SENSITIVE_METADATA_KEYS.has(k)) continue;\n    publicMeta[k] = v;\n  }\n  return { ...publicTask, metadata: publicMeta };\n}\n\n/**\n * Reject access when the task has a recorded owner that doesn't match the\n * verified caller. Returns a 404-shaped JSON-RPC error to avoid disclosing\n * task existence to the wrong caller (enumeration via UUID lookup).\n *\n * - When the task has no recorded owner (legacy row from before the\n *   owner_email migration) we allow access if some verifiable bearer token\n *   was presented; otherwise we still reject so an unsigned caller can never\n *   read or cancel arbitrary task ids.\n * - When neither A2A_SECRET nor apiKeyEnv is configured AND we're in\n *   production, we refuse `tasks/get` and `tasks/cancel` outright — there's\n *   no way to authenticate the caller, so the only safe response is \"not\n *   found\".\n */\nfunction authorizeTaskAccess(\n  taskOwnerEmail: string | null,\n  taskOwnerScope: string | null,\n  event: any,\n  config: A2AConfig,\n): JsonRpcResponse | null {\n  const verifiedEmail =\n    (event?.context?.__a2aVerifiedEmail as string | undefined) ?? null;\n  const hasA2ASecret = hasConfiguredA2ASecret();\n  const hasApiKey = !!(config.apiKeyEnv && process.env[config.apiKeyEnv]);\n  const inProduction = isA2AProductionRuntime();\n\n  if (inProduction && !hasA2ASecret && !hasApiKey) {\n    // No way to authenticate the caller in production — refuse access.\n    return jsonRpcError(0, -32001, \"Task not found\");\n  }\n\n  if (taskOwnerEmail) {\n    if (!verifiedEmail) {\n      return jsonRpcError(0, -32001, \"Task not found\");\n    }\n    if (verifiedEmail.toLowerCase() !== taskOwnerEmail.toLowerCase()) {\n      return jsonRpcError(0, -32001, \"Task not found\");\n    }\n    if (taskOwnerScope) {\n      const verifiedScope =\n        (event?.context?.__a2aOrgDomain as string | undefined)\n          ?.trim()\n          .toLowerCase() ?? A2A_PERSONAL_OWNER_SCOPE;\n      if (verifiedScope !== taskOwnerScope.toLowerCase()) {\n        return jsonRpcError(0, -32001, \"Task not found\");\n      }\n    }\n  }\n  // Legacy row (no owner_email recorded). The route-level auth gate is the\n  // only thing protecting it — fall through and serve.\n  return null;\n}\n\nasync function handleGet(\n  params: Record<string, unknown>,\n  event: any,\n  config: A2AConfig,\n): Promise<JsonRpcResponse> {\n  const id = params.id as string;\n  if (!id) {\n    return jsonRpcError(0, -32602, \"Invalid params: id required\");\n  }\n  const ownership = await getTaskOwnership(id);\n  const denied = authorizeTaskAccess(\n    ownership.ownerEmail,\n    ownership.ownerScope,\n    event,\n    config,\n  );\n  if (denied) return denied;\n\n  const task = await getTask(id);\n  if (!task) {\n    return jsonRpcError(0, -32001, \"Task not found\");\n  }\n  const taskChanged = await refireStuckAsyncTaskIfNeeded(\n    id,\n    event,\n    config,\n  ).catch((err) => {\n    console.error(\"[a2a] Failed to refire stuck async task:\", err);\n    return false;\n  });\n  if (taskChanged) {\n    const updated = await getTask(id);\n    if (updated) return jsonRpcResult(0, sanitizeTaskForResponse(updated));\n  }\n  return jsonRpcResult(0, sanitizeTaskForResponse(task));\n}\n\nasync function refireStuckAsyncTaskIfNeeded(\n  taskId: string,\n  event: any,\n  config: A2AConfig,\n): Promise<boolean> {\n  const state = await getA2ATaskDispatchState(taskId);\n  if (!state) return false;\n  if (!state.metadata?.__a2a_processor) return false;\n\n  const now = Date.now();\n\n  if (state.statusState === \"submitted\" || state.statusState === \"working\") {\n    const queuedLifetimeCutoff = now - a2aQueuedLifetimeMaxMs();\n    if (state.createdAt <= queuedLifetimeCutoff) {\n      // Dispatch has kept failing (or was never delivered) long enough that\n      // retrying further would just repeat the same failure forever — stop\n      // refiring and surface a terminal error instead of throttling forever.\n      return failStuckQueuedA2ATask(\n        taskId,\n        queuedLifetimeCutoff,\n        \"The async A2A task could not be started because dispatch kept failing. Please retry the request.\",\n      );\n    }\n\n    if (state.updatedAt <= now - A2A_QUEUED_DISPATCH_STUCK_AFTER_MS) {\n      if (!(await touchQueuedA2ATaskDispatch(taskId))) return false;\n      try {\n        await fireProcessTaskDispatch(event, taskId, config);\n      } catch (err) {\n        console.error(\n          \"[a2a] Failed to refire stuck queued task dispatch:\",\n          err,\n        );\n        return false;\n      }\n      return true;\n    }\n    return false;\n  }\n\n  if (state.statusState === \"processing\") {\n    const processingStuckCutoff = now - A2A_PROCESSING_STUCK_AFTER_MS;\n    const processingLifetimeCutoff = now - a2aProcessingLifetimeMaxMs();\n    const isStale = state.updatedAt <= processingStuckCutoff;\n    const isOverLifetime = state.createdAt <= processingLifetimeCutoff;\n    if (isStale || isOverLifetime) {\n      // A processor that died mid-handler may have already performed\n      // side-effectful work. Retrying from the top can duplicate artifacts, so\n      // fail deterministically and let the caller issue an intentional retry.\n      return failStuckA2ATask(\n        taskId,\n        processingStuckCutoff,\n        isStale\n          ? \"The async A2A processor timed out before completing. Please retry the request.\"\n          : \"The async A2A processor exceeded its maximum run time. Please retry the request.\",\n        processingLifetimeCutoff,\n      );\n    }\n  }\n\n  return false;\n}\n\nasync function handleCancel(\n  params: Record<string, unknown>,\n  event: any,\n  config: A2AConfig,\n): Promise<JsonRpcResponse> {\n  const id = params.id as string;\n  if (!id) {\n    return jsonRpcError(0, -32602, \"Invalid params: id required\");\n  }\n  const ownership = await getTaskOwnership(id);\n  const denied = authorizeTaskAccess(\n    ownership.ownerEmail,\n    ownership.ownerScope,\n    event,\n    config,\n  );\n  if (denied) return denied;\n\n  const task = await updateTask(id, { state: \"canceled\" });\n  if (!task) {\n    return jsonRpcError(0, -32001, \"Task not found\");\n  }\n  return jsonRpcResult(0, sanitizeTaskForResponse(task));\n}\n\nasync function handleInvokeReadOnlyAction(\n  params: Record<string, unknown>,\n  event: any,\n  config: A2AConfig,\n): Promise<JsonRpcResponse> {\n  const action = typeof params.action === \"string\" ? params.action.trim() : \"\";\n  const input = params.input ?? {};\n\n  if (!action) {\n    return jsonRpcError(0, -32602, \"Invalid params: action required\");\n  }\n  if (action.length > MAX_A2A_DIRECT_ACTION_NAME_CHARS) {\n    return jsonRpcError(0, -32602, \"Invalid params: action is too long\");\n  }\n  if (!input || typeof input !== \"object\" || Array.isArray(input)) {\n    return jsonRpcError(0, -32602, \"Invalid params: input must be an object\");\n  }\n  let inputBytes: number;\n  try {\n    inputBytes = Buffer.byteLength(JSON.stringify(input), \"utf8\");\n  } catch {\n    return jsonRpcError(0, -32602, \"Invalid params: input must be JSON-safe\");\n  }\n  if (inputBytes > MAX_A2A_DIRECT_ACTION_INPUT_BYTES) {\n    return jsonRpcError(0, -32602, \"Invalid params: input is too large\");\n  }\n  if (\n    !event?.context?.__a2aVerifiedEmail ||\n    event?.context?.__a2aAudienceVerified !== true\n  ) {\n    return jsonRpcError(\n      0,\n      -32001,\n      \"A verified, audience-bound user identity is required for direct action invocation\",\n    );\n  }\n  if (!config.executeReadOnlyAction) {\n    return jsonRpcError(0, -32601, \"Direct action invocation not supported\");\n  }\n\n  const startedAt = Date.now();\n  const correlation = sanitizeA2ACorrelationMetadata(params.metadata);\n  const invocationId = crypto.randomUUID();\n  const verifiedEmail = event.context.__a2aVerifiedEmail as string;\n  const emitTracking = (status: \"completed\" | \"failed\") => {\n    const identity = trackingIdentityProperties();\n    track(\n      A2A_READ_INVOKE_EVENT,\n      {\n        ...identity,\n        action,\n        receiver_app: config.appId ?? identity.app ?? config.name,\n        caller_app: correlation.callerApp ?? \"unknown\",\n        duration_ms: Math.max(0, Date.now() - startedAt),\n        status,\n        invocation_id: invocationId,\n        ...(correlation.parentRunId\n          ? { parent_run_id: correlation.parentRunId }\n          : {}),\n        ...(correlation.parentTurnId\n          ? { parent_turn_id: correlation.parentTurnId }\n          : {}),\n        ...(correlation.invocationId\n          ? { caller_invocation_id: correlation.invocationId }\n          : {}),\n      },\n      { userId: verifiedEmail },\n    );\n  };\n\n  try {\n    const result = await withA2ARequestContext(undefined, event, () =>\n      config.executeReadOnlyAction!({\n        action,\n        input: input as Record<string, unknown>,\n        invocationId,\n      }),\n    );\n    emitTracking(result.status);\n    return jsonRpcResult(0, { action, ...result });\n  } catch (error) {\n    emitTracking(\"failed\");\n    console.error(`[a2a] Direct action ${action} failed:`, error);\n    return jsonRpcError(0, -32000, \"Direct action invocation failed\");\n  }\n}\n\n/**\n * H3-compatible JSON-RPC handler. Returns JSON directly (H3 serializes it).\n * Streaming is handled via H3's node response when needed.\n */\nexport async function handleJsonRpcH3(\n  body: any,\n  event: any,\n  config: A2AConfig,\n): Promise<JsonRpcResponse> {\n  if (!body || body.jsonrpc !== \"2.0\" || !body.method) {\n    setResponseStatus(event, 400);\n    return jsonRpcError(body?.id ?? null, -32600, \"Invalid JSON-RPC request\");\n  }\n\n  const params = (body.params as Record<string, unknown>) ?? {};\n  const id = body.id;\n\n  switch (body.method) {\n    case \"message/send\": {\n      const result = await handleSend(params, config, event);\n      const { _id, ...response } = result;\n      return { ...response, id } as JsonRpcResponse;\n    }\n    case \"message/stream\": {\n      if (!config.streaming) {\n        return jsonRpcError(id, -32601, \"Streaming not supported\");\n      }\n      // Use the raw node response for SSE streaming\n      const res = event.node?.res;\n      if (!res) {\n        return jsonRpcError(id, -32000, \"Streaming not available\");\n      }\n      setResponseHeader(event, \"Content-Type\", \"text/event-stream\");\n      setResponseHeader(event, \"Cache-Control\", \"no-cache\");\n      setResponseHeader(event, \"Connection\", \"keep-alive\");\n      await handleStream(params, config, res, event);\n      return undefined as any; // Response already sent via SSE\n    }\n    case \"tasks/get\": {\n      const result = await handleGet(params, event, config);\n      return { ...result, id } as JsonRpcResponse;\n    }\n    case \"tasks/cancel\": {\n      const result = await handleCancel(params, event, config);\n      return { ...result, id } as JsonRpcResponse;\n    }\n    case \"actions/invoke\": {\n      const result = await handleInvokeReadOnlyAction(params, event, config);\n      return { ...result, id } as JsonRpcResponse;\n    }\n    default:\n      return jsonRpcError(id, -32601, `Method not found: ${body.method}`);\n  }\n}\n"]}
+{"version":3,"file":"handlers.js","sourceRoot":"","sources":["../../src/a2a/handlers.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,IAAI,CAAC;AAE1D,OAAO,EACL,8BAA8B,EAC9B,gCAAgC,EAChC,4CAA4C,EAC5C,mCAAmC,EACnC,sCAAsC,GACvC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAChD,OAAO,EACL,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EACL,UAAU,EACV,iBAAiB,EACjB,OAAO,EACP,gBAAgB,EAChB,UAAU,EACV,yBAAyB,EACzB,uBAAuB,EACvB,gBAAgB,EAChB,sBAAsB,EACtB,uBAAuB,EACvB,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,EACtB,6BAA6B,EAC7B,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAczB,qEAAqE;AACrE,0EAA0E;AAC1E,iEAAiE;AACjE,MAAM,qBAAqB,GAAG,kCAAkC,CAAC;AACjE,MAAM,oCAAoC,GAAG,KAAK,CAAC;AACnD,MAAM,kCAAkC,GAAG,MAAM,CAAC;AAClD,MAAM,6BAA6B,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACpD,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAC3C,MAAM,wBAAwB,GAAG,EAAE,CAAC;AACpC,MAAM,gCAAgC,GAAG,GAAG,CAAC;AAC7C,MAAM,iCAAiC,GAAG,EAAE,GAAG,IAAI,CAAC;AACpD,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AAEjD,SAAS,sBAAsB,CAC7B,KAAc,EACd,KAAsB;IAEtB,2EAA2E;IAC3E,yEAAyE;IACzE,8CAA8C;IAC9C,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,kBAAkB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK;SACnB,KAAK,CAAC,CAAC,EAAE,wBAAwB,CAAC;SAClC,MAAM,CACL,CAAC,SAAS,EAAkC,EAAE,CAC5C,CAAC,CAAC,SAAS;QACX,OAAO,SAAS,KAAK,QAAQ;QAC7B,OAAQ,SAAqC,CAAC,IAAI,KAAK,QAAQ;QAC/D,CAAC,CAAE,SAAqC,CAAC,IAAI,CAChD;SACA,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC1E,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAc;IAEd,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,IACE,SAAS,CAAC,QAAQ,KAAK,OAAO;QAC9B,OAAO,SAAS,CAAC,iBAAiB,KAAK,QAAQ,EAC/C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,iBAAiB,GAAG,SAAS,CAAC,iBAAiB,CAAC;IACtD,IACE,CAAC,iBAAiB;QAClB,iBAAiB,KAAK,iBAAiB,CAAC,IAAI,EAAE;QAC9C,iBAAiB,CAAC,MAAM,GAAG,GAAG,EAC9B,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,0BAA0B,CACjC,KAAc;IAEd,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,IACE,SAAS,CAAC,QAAQ,KAAK,OAAO;QAC9B,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ,EACvC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;IACtC,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,SAAS,CAAC,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC;IACnE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QAClC,MAAM,WAAW,GACf,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC5E,IACE,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAC5B,CAAC,WAAW;YACZ,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,IAAI,EACX,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,KAAc,EACd,KAAsB;IAEtB,MAAM,aAAa,GAAG,KAAK,EAAE,OAAO,EAAE,kBAEzB,CAAC;IACd,MAAM,SAAS,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAChD,IACE,CAAC,aAAa;QACd,KAAK,EAAE,OAAO,EAAE,qBAAqB,KAAK,IAAI;QAC9C,CAAC,SAAS,EACV,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,QAAQ,GAAG,0BAA0B,EAAE,CAAC;IAC9C,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,SAAS,GAAG,KAAK,EAAE,OAAO,EAAE,cAAoC,CAAC;IACvE,IAAI,SAA6B,CAAC;IAClC,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC;YACH,SAAS,GAAG,CAAC,MAAM,oBAAoB,CAAC,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAC7B,QAAQ,CAAC,GAAG,EACZ,oCAAoC,EACpC,EAAE,iBAAiB,EAAE,SAAS,CAAC,iBAAiB,EAAE,EAClD;YACE,SAAS,EAAE,aAAa;YACxB,SAAS;YACT,SAAS;YACT,gBAAgB,EAAE,KAAK;SACxB,CACF,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO,SAAS,CAAC;QACpD,OAAO,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,yBAAyB,CAChC,QAA6C;IAE7C,MAAM,GAAG,GAAG,QAAQ,EAAE,aAAa,CAAC;IACpC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC5E,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAsB;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,yBAAyB,CAAC;YAC/B,aAAa,EAAE,SAAS,CAAC,KAAY,CAAC;SACvC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAC9B,QAA6C,EAC7C,KAAsB;IAEtB,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,cAAc,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,cAAc,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IAC3D,IACE,cAAc;QACd,CAAC,cAAc,KAAK,cAAc,IAAI,qBAAqB,CAAC,cAAc,CAAC,CAAC,EAC5E,CAAC;QACD,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,SAAS,kBAAkB,CACzB,QAA6C,EAC7C,KAAsB;IAEtB,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,OAAO,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;IAChC,OAAO,OAAO,CAAC,aAAa,CAAC;IAC7B,MAAM,aAAa,GAAG,uBAAuB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC/D,IAAI,aAAa;QAAE,OAAO,CAAC,aAAa,GAAG,aAAa,CAAC;;QACpD,OAAO,OAAO,CAAC,aAAa,CAAC;IAClC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,sBAAsB;IAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAChD,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACvB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,0BAA0B;IACjC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;IAC/D,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAChD,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACxB,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,uBAAuB,CACpC,KAAU,EACV,MAAc,EACd,MAAiB;IAEjB,MAAM,cAAc,GAAG,sCAAsC,EAAE,CAAC;IAChE,MAAM,mBAAmB,GACvB,mCAAmC,CAAC;QAClC,QAAQ,EAAE,MAAM,CAAC,qBAAqB;KACvC,CAAC,IAAI,4CAA4C,CAAC,cAAc,CAAC,CAAC;IAErE,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,MAAM,oBAAoB,CAAC;YACzB,KAAK;YACL,IAAI,EAAE,qBAAqB;YAC3B,MAAM;SACP,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,uEAAuE;QACvE,sEAAsE;QACtE,+DAA+D;QAC/D,MAAM,oBAAoB,CAAC;YACzB,KAAK;YACL,IAAI,EAAE,cAAc;YACpB,MAAM;YACN,IAAI,EAAE;gBACJ,CAAC,gCAAgC,CAAC,EAAE,8BAA8B;aACnE;YACD,aAAa,EAAE,IAAI;SACpB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,eAAe,EAAE,CAAC;QACzB,kEAAkE;QAClE,wEAAwE;QACxE,uEAAuE;QACvE,yEAAyE;QACzE,OAAO,CAAC,KAAK,CACX,+EAA+E,EAC/E,eAAe,CAChB,CAAC;QACF,MAAM,oBAAoB,CAAC;YACzB,KAAK;YACL,IAAI,EAAE,qBAAqB;YAC3B,MAAM;YACN,mEAAmE;YACnE,yEAAyE;YACzE,yEAAyE;YACzE,uEAAuE;YACvE,mDAAmD;YACnD,aAAa,EAAE,IAAI;YACnB,iBAAiB,EAAE,oCAAoC;SACxD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAc,EACd,MAAiB,EACjB,KAAW;IAEX,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,0DAA0D;QAC1D,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,uBAAuB,CAAC,MAAM,EAAE;YACpC,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE;gBACP,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qCAAqC,EAAE,CAAC;aACvE;SACF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC;IACjE,MAAM,aAAa,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAA4B,CAAC;IAC9E,MAAM,aAAa,GAAG,aAAa,CAAC,aAAmC,CAAC;IACxE,MAAM,aAAa,GAAG,aAAa,CAAC,aAAmC,CAAC;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,0EAA0E;IAC1E,0DAA0D;IAC1D,MAAM,aAAa,GACjB,yBAAyB,CAAC,aAAa,CAAC,IAAI,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAC5E,MAAM,SAAS,GACZ,aAAa,CAAC,SAAuC,IAAI,SAAS,CAAC;IACtE,MAAM,cAAc,GACjB,aAAa,CAAC,cAGD,IAAI,SAAS,CAAC;IAC9B,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,eAAe,CAAC;QAClE,CAAC,CAAE,aAAa,CAAC,eAAuC;QACxD,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,aAAa,GAAG,aAAa,CAAC,aAEvB,CAAC;IAEd,MAAM,aAAa,GAAG,MAAM,uBAAuB,CACjD,aAAa,EACb,aAAa,CACd,CAAC;IAEF,MAAM,EAAE,qBAAqB,EAAE,GAC7B,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;QACjC,sBAAsB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAC3C,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAC5D,CAAC;IACJ,CAAC,EAAE,2BAA2B,CAAC,CAAC;IAE9B,SACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACZ,IAAI,CAAC;QACH,MAAM,qBAAqB,CACzB;YACE,SAAS,EAAE,aAAa;YACxB,KAAK,EAAE,aAAa;YACpB,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,EACD,GAAG,EAAE,CACH,oBAAoB,CAClB,MAAM,EACN,OAAO,EACP,MAAM,EACN,SAAS,EACT,cAAc,EACd,KAAK,EACL,eAAe,EACf,aAAa,CACd,CACJ,CAAC;IACJ,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,uBAAuB,CAAC,MAAM,EAAE;gBACpC,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE;oBACP,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,IAAI,iBAAiB,EAAE,CAAC;iBACnE;aACF,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,cAAc,GAAe,KAAK,EACtC,OAAgB,EAChB,OAA0B,EACC,EAAE;IAC7B,kCAAkC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK;SACvB,MAAM,CAAC,CAAC,CAAC,EAAuC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;SACrE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAClB,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,OAAO,EAAE;gBACP,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC;aAC9D;SACF,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,0EAA0E;IAC1E,wDAAwD;IACxD,4EAA4E;IAC5E,oEAAoE;IACpE,yEAAyE;IACzE,8BAA8B;IAC9B,qEAAqE;IACrE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;IAC7D,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,MAAM,aAAa,GAAG,OAAO;QAC3B,CAAC,CAAC,+DAA+D,UAAU,sNAAsN,IAAI,EAAE;QACvS,CAAC,CAAC,IAAI,CAAC;IAET,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa;QACzC,CAAC,CAAC,qCAAqC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,uIAAuI;QACnN,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,MAAM,GAAG,aAAa;QAC1B,CAAC,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;QACjE,CAAC,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAExC,MAAM,SAAS,GAAe,EAAE,CAAC;IACjC,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,SAAS,CAAC,IAAI,CAAC;YACb,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,6BAA6B;YAC1C,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC;SAChE,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,OAAO,EAAE;YACP,IAAI,EAAE,OAAO;YACb,KAAK,EAAE;gBACL,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;gBACvC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM;oBACzB,CAAC,CAAC;wBACE;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,kBAAkB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;yBACrD;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;aACR;SACF;QACD,SAAS,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;KACxD,CAAC;AACJ,CAAC,CAAC;AAEF,SAAS,UAAU,CAAC,MAAiB;IACnC,OAAO,MAAM,CAAC,OAAO,IAAI,cAAc,CAAC;AAC1C,CAAC;AAED,SAAS,YAAY,CACnB,EAA0B,EAC1B,IAAY,EACZ,OAAe;IAEf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,aAAa,CAAC,EAAmB,EAAE,MAAe;IACzD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,kBAAkB,CACzB,MAAc,EACd,SAAkB,EAClB,QAAkC,EAClC,KAAW,EACX,eAAqC,EACrC,aAAgC;IAKhC,MAAM,SAAS,GAAe,EAAE,CAAC;IACjC,MAAM,OAAO,GAAsB;QACjC,MAAM;QACN,SAAS;QACT,QAAQ;QACR,KAAK;QACL,eAAe;QACf,aAAa;QACb,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ;YACnC,MAAM,QAAQ,GAAa;gBACzB,IAAI;gBACJ,KAAK,EAAE,QAAQ;oBACb,CAAC,CAAC;wBACE;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE;gCACJ,IAAI;gCACJ,QAAQ;gCACR,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;6BAC/C;yBACF;qBACF;oBACH,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;aACtC,CAAC;YACF,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,qBAAqB,CAClC,QAA6C,EAC7C,KAAsB,EACtB,EAAoB;IAEpB,MAAM,EAAE,qBAAqB,EAAE,GAC7B,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;IAE/C,MAAM,aAAa,GAChB,KAAK,EAAE,OAAO,EAAE,kBAAyC,IAAI,SAAS,CAAC;IAC1E,6EAA6E;IAC7E,2EAA2E;IAC3E,yEAAyE;IACzE,qCAAqC;IACrC,MAAM,SAAS,GACZ,KAAK,EAAE,OAAO,EAAE,cAAqC,IAAI,SAAS,CAAC;IAEtE,MAAM,aAAa,GAAG,MAAM,uBAAuB,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IAC9E,MAAM,aAAa,GAAG,uBAAuB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAE/D,OAAO,qBAAqB,CAC1B;QACE,SAAS,EAAE,aAAa;QACxB,KAAK,EAAE,aAAa;QACpB,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,EACD,EAAE,CACW,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,aAAiC,EACjC,iBAAqC;IAErC,IAAI,iBAAiB,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACjE,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;YACxD,IAAI,GAAG;gBAAE,OAAO,GAAG,CAAC,KAAK,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;QAC5D,CAAC;IACH,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACnE,OAAO,CAAC,MAAM,oBAAoB,CAAC,aAAa,CAAC,CAAC,IAAI,SAAS,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;QAC5D,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,oBAAoB,CACjC,MAAc,EACd,OAAgB,EAChB,MAAiB,EACjB,SAA6B,EAC7B,QAA6C,EAC7C,KAAW,EACX,eAAqC,EACrC,aAAgC;IAEhC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,kBAAkB,CAC/C,MAAM,EACN,SAAS,EACT,QAAQ,EACR,KAAK,EACL,eAAe,EACf,aAAa,CACd,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEpD,IACE,MAAM;YACN,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,CAAC,aAAa,IAAI,MAAM,EAC9B,CAAC;YACD,IAAI,WAAgC,CAAC;YACrC,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,MAAiC,EAAE,CAAC;gBAC1D,WAAW,GAAG,GAAG,CAAC;YACpB,CAAC;YACD,IAAI,WAAW,EAAE,QAAQ,EAAE,oBAAoB,KAAK,gBAAgB,EAAE,CAAC;gBACrE,MAAM,sBAAsB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBAClD,OAAO;YACT,CAAC;YACD,MAAM,uBAAuB,CAAC,MAAM,EAAE;gBACpC,KAAK,EAAE,WAAW;gBAClB,OAAO,EAAE,WAAW;gBACpB,SAAS,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;aACxD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,aAAa,GAAG,MAAO,MAAoC,CAAC;QAClE,MAAM,YAAY,GAAG,CAAC,GAAG,SAAS,EAAE,GAAG,CAAC,aAAa,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;QACxE,IAAI,aAAa,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;YACjD,MAAM,sBAAsB,CAAC,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QACD,MAAM,uBAAuB,CAAC,MAAM,EAAE;YACpC,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,SAAS,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;SAC9D,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,uBAAuB,CAAC,MAAM,EAAE;YACpC,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE;gBACP,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,IAAI,gBAAgB,EAAE,CAAC;aAClE;SACF,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAW;IAIpC,MAAM,UAAU,GACb,KAAK,EAAE,OAAO,EAAE,kBAAyC,IAAI,IAAI,CAAC;IACrE,OAAO;QACL,UAAU;QACV,UAAU,EAAE,UAAU;YACpB,CAAC,CAAC,CAAE,KAAK,EAAE,OAAO,EAAE,cAAqC;gBACrD,EAAE,IAAI,EAAE;iBACP,WAAW,EAAE,IAAI,wBAAwB,CAAC;YAC/C,CAAC,CAAC,IAAI;KACT,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,MAA+B,EAC/B,MAAiB,EACjB,KAAW;IAEX,MAAM,OAAO,GAAG,MAAM,CAAC,OAAkB,CAAC;IAC1C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,OAAO;YACL,GAAG,YAAY,CACb,CAAC,EACD,CAAC,KAAK,EACN,sDAAsD,CACvD;YACD,GAAG,EAAE,CAAC;SACP,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,SAA+B,CAAC;IACzD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAA+C,CAAC;IACxE,MAAM,eAAe,GAAG,sBAAsB,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IAC9E,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAC9C,QAAQ,EAAE,aAAa,EACvB,KAAK,CACN,CAAC;IAEF,sEAAsE;IACtE,yEAAyE;IACzE,uEAAuE;IACvE,0EAA0E;IAC1E,6BAA6B;IAC7B,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,UAAU,EAAE,iBAAiB,EAAE,GACpE,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,cAAkC,CAAC;IACvC,IAAI,iBAAiB,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QAC7D,IAAI,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;YAC9C,OAAO;gBACL,GAAG,YAAY,CACb,CAAC,EACD,CAAC,KAAK,EACN,iDAAiD,CAClD;gBACD,GAAG,EAAE,CAAC;aACP,CAAC;QACJ,CAAC;QACD,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAC9C,IACE,CAAC,cAAc;YACf,cAAc,CAAC,MAAM,GAAG,6BAA6B,EACrD,CAAC;YACD,OAAO;gBACL,GAAG,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,2CAA2C,CAAC;gBACvE,GAAG,EAAE,CAAC;aACP,CAAC;QACJ,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,0EAA0E;IAC1E,8EAA8E;IAC9E,yEAAyE;IACzE,kEAAkE;IAClE,sEAAsE;IACtE,wEAAwE;IACxE,yEAAyE;IACzE,8CAA8C;IAC9C,MAAM,SAAS,GACb,MAAM,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,eAAe,KAAK,IAAI,CAAC,CAAC;IAC9E,IAAI,CAAC,SAAS;QAAE,cAAc,GAAG,SAAS,CAAC;IAE3C,IAAI,SAAS,EAAE,CAAC;QACd,uEAAuE;QACvE,sEAAsE;QACtE,uEAAuE;QACvE,sEAAsE;QACtE,uEAAuE;QACvE,0DAA0D;QAC1D,MAAM,YAAY,GAAG,sBAAsB,EAAE,CAAC;QAC9C,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QACxE,IAAI,sBAAsB,EAAE,IAAI,CAAC,YAAY,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5D,OAAO;gBACL,GAAG,YAAY,CACb,CAAC,EACD,CAAC,KAAK,EACN,+EAA+E,CAChF;gBACD,GAAG,EAAE,CAAC;aACP,CAAC;QACJ,CAAC;QACD,uEAAuE;QACvE,wEAAwE;QACxE,0EAA0E;QAC1E,sEAAsE;QACtE,0EAA0E;QAC1E,0EAA0E;QAC1E,oEAAoE;QACpE,MAAM,aAAa,GAChB,KAAK,EAAE,OAAO,EAAE,kBAAyC,IAAI,SAAS,CAAC;QAC1E,2EAA2E;QAC3E,iEAAiE;QACjE,MAAM,aAAa,GAChB,KAAK,EAAE,OAAO,EAAE,cAAqC,IAAI,SAAS,CAAC;QACtE,MAAM,aAAa,GAAG,uBAAuB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC/D,MAAM,YAAY,GAAG,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAEzD,MAAM,YAAY,GAA4B;YAC5C,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;YACvB,eAAe,EAAE;gBACf,aAAa;gBACb,aAAa;gBACb,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,SAAS,EAAE,SAAS,IAAI,IAAI;gBAC5B,cAAc,EAAE,YAAY,IAAI,IAAI;gBACpC,eAAe,EAAE,eAAe,IAAI,IAAI;gBACxC,aAAa,EAAE,aAAa,IAAI,IAAI;aACrC;SACF,CAAC;QACF,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAC9C,OAAO,EACP,SAAS,EACT,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,CACf,CAAC;QACF,IAAI,MAAM,EAAE,CAAC;YACX,OAAO;gBACL,GAAG,aAAa,CAAC,CAAC,EAAE,uBAAuB,CAAC,IAAI,CAAC,CAAC;gBAClD,GAAG,EAAE,CAAC;aACP,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAEhE,uEAAuE;QACvE,yEAAyE;QACzE,yEAAyE;QACzE,2DAA2D;QAC3D,mEAAmE;QACnE,wEAAwE;QACxE,iEAAiE;QACjE,IAAI,CAAC;YACH,MAAM,uBAAuB,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,GAAG,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO;YACL,GAAG,aAAa,CAAC,CAAC,EAAE,uBAAuB,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC;YAC7D,GAAG,EAAE,CAAC;SACP,CAAC;IACJ,CAAC;IAED,OAAO,qBAAqB,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAC9C,OAAO,EACP,SAAS,EACT,SAAS,EACT,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,CACf,CAAC;QACF,IAAI,MAAM,EAAE,CAAC;YACX,OAAO;gBACL,GAAG,aAAa,CAAC,CAAC,EAAE,uBAAuB,CAAC,IAAI,CAAC,CAAC;gBAClD,GAAG,EAAE,CAAC;aACP,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAEhD,MAAM,GAAG,GAAG,kBAAkB,CAC5B,IAAI,CAAC,EAAE,EACP,SAAS,EACT,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,EACnC,KAAK,EACL,eAAe,EACf,aAAa,CACd,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAExD,IACE,MAAM;gBACN,OAAO,MAAM,KAAK,QAAQ;gBAC1B,MAAM,CAAC,aAAa,IAAI,MAAM,EAC9B,CAAC;gBACD,IAAI,WAAgC,CAAC;gBACrC,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,MAAiC,EAAE,CAAC;oBAC1D,WAAW,GAAG,GAAG,CAAC;gBACpB,CAAC;gBACD,IAAI,WAAW,EAAE,QAAQ,EAAE,oBAAoB,KAAK,gBAAgB,EAAE,CAAC;oBACrE,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE;wBACxC,KAAK,EAAE,gBAAgB;wBACvB,OAAO,EAAE,WAAW;qBACrB,CAAC,CAAC;oBACH,OAAO,EAAE,GAAG,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;gBAClD,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE;oBACxC,KAAK,EAAE,WAAW;oBAClB,OAAO,EAAE,WAAW;oBACpB,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;iBAChE,CAAC,CAAC;gBACH,OAAO,EAAE,GAAG,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;YAClD,CAAC;YAED,MAAM,aAAa,GAAG,MAAO,MAAoC,CAAC;YAClE,MAAM,YAAY,GAAG;gBACnB,GAAG,GAAG,CAAC,SAAS;gBAChB,GAAG,CAAC,aAAa,CAAC,SAAS,IAAI,EAAE,CAAC;aACnC,CAAC;YACF,IAAI,aAAa,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;gBACjD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE;oBACxC,KAAK,EAAE,gBAAgB;oBACvB,OAAO,EAAE,aAAa,CAAC,OAAO;iBAC/B,CAAC,CAAC;gBACH,OAAO,EAAE,GAAG,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;YAClD,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE;gBACxC,KAAK,EAAE,WAAW;gBAClB,OAAO,EAAE,aAAa,CAAC,OAAO;gBAC9B,SAAS,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;aAC9D,CAAC,CAAC;YACH,OAAO,EAAE,GAAG,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QAClD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE;gBACxB,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE;oBACP,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,IAAI,gBAAgB,EAAE,CAAC;iBACjE;aACF,CAAC,CAAC;YACH,OAAO;gBACL,GAAG,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,IAAI,gBAAgB,CAAC;gBAC3D,GAAG,EAAE,CAAC;aACP,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,MAA+B,EAC/B,MAAiB,EACjB,GAAwD,EACxD,KAAW;IAEX,MAAM,OAAO,GAAG,MAAM,CAAC,OAAkB,CAAC;IAC1C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,KAAK,CACP,SAAS,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,MAAM,CACzE,CAAC;QACF,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,SAA+B,CAAC;IACzD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAA+C,CAAC;IACxE,MAAM,eAAe,GAAG,sBAAsB,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IAC9E,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAC9C,QAAQ,EAAE,aAAa,EACvB,KAAK,CACN,CAAC;IACF,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,UAAU,EAAE,iBAAiB,EAAE,GACpE,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAE3B,MAAM,qBAAqB,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,IAAI,GAAG,MAAM,UAAU,CAC3B,OAAO,EACP,SAAS,EACT,SAAS,EACT,iBAAiB,EACjB,iBAAiB,CAClB,CAAC;QAEF,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAEhD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,kBAAkB,CAC/C,IAAI,CAAC,EAAE,EACP,SAAS,EACT,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,EACnC,KAAK,EACL,eAAe,EACf,aAAa,CACd,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAEpD,IACE,MAAM;gBACN,OAAO,MAAM,KAAK,QAAQ;gBAC1B,MAAM,CAAC,aAAa,IAAI,MAAM,EAC9B,CAAC;gBACD,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,MAAiC,EAAE,CAAC;oBAC1D,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE;wBAC7C,KAAK,EAAE,SAAS;wBAChB,OAAO,EAAE,GAAG;qBACb,CAAC,CAAC;oBACH,GAAG,CAAC,KAAK,CACP,SAAS,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,MAAM,CAC9D,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,aAAa,GAAG,MAAO,MAAoC,CAAC;gBAClE,MAAM,YAAY,GAAG,CAAC,GAAG,SAAS,EAAE,GAAG,CAAC,aAAa,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;gBACxE,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE;oBACxC,KAAK,EAAE,WAAW;oBAClB,OAAO,EAAE,aAAa,CAAC,OAAO;oBAC9B,SAAS,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;iBAC9D,CAAC,CAAC;gBACH,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;gBACpE,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YAED,MAAM,YAAY,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC;YACpC,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE;gBACtC,KAAK,EAAE,WAAW;gBAClB,SAAS,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;aAC9D,CAAC,CAAC;YACH,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC/C,GAAG,CAAC,KAAK,CACP,SAAS,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC,MAAM,CACxF,CAAC;QACJ,CAAC;QAED,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACtC,aAAa;IACb,WAAW;IACX,WAAW;IACX,aAAa;IACb,cAAc;IACd,QAAQ;IACR,eAAe;IACf,eAAe;IACf,QAAQ;CACT,CAAC,CAAC;AAEH,SAAS,uBAAuB,CAAC,IAAS;IACxC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,EACJ,UAAU,EAAE,WAAW,EACvB,UAAU,EAAE,WAAW,EACvB,GAAG,UAAU,EACd,GAAG,IAAI,CAAC;IACT,IAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,OAAO,UAAU,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACpE,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,CAAC,QAAmC,CAAC;IAC5D,MAAM,UAAU,GAA4B,EAAE,CAAC;IAC/C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,KAAK,iBAAiB;YAAE,SAAS;QACtC,IAAI,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,SAAS;QAC7C,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,EAAE,GAAG,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AACjD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,mBAAmB,CAC1B,cAA6B,EAC7B,cAA6B,EAC7B,KAAU,EACV,MAAiB;IAEjB,MAAM,aAAa,GAChB,KAAK,EAAE,OAAO,EAAE,kBAAyC,IAAI,IAAI,CAAC;IACrE,MAAM,YAAY,GAAG,sBAAsB,EAAE,CAAC;IAC9C,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IACxE,MAAM,YAAY,GAAG,sBAAsB,EAAE,CAAC;IAE9C,IAAI,YAAY,IAAI,CAAC,YAAY,IAAI,CAAC,SAAS,EAAE,CAAC;QAChD,mEAAmE;QACnE,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,cAAc,EAAE,CAAC;QACnB,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,aAAa,CAAC,WAAW,EAAE,KAAK,cAAc,CAAC,WAAW,EAAE,EAAE,CAAC;YACjE,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,aAAa,GAChB,KAAK,EAAE,OAAO,EAAE,cAAqC;gBACpD,EAAE,IAAI,EAAE;iBACP,WAAW,EAAE,IAAI,wBAAwB,CAAC;YAC/C,IAAI,aAAa,KAAK,cAAc,CAAC,WAAW,EAAE,EAAE,CAAC;gBACnD,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IACD,yEAAyE;IACzE,qDAAqD;IACrD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,MAA+B,EAC/B,KAAU,EACV,MAAiB;IAEjB,MAAM,EAAE,GAAG,MAAM,CAAC,EAAY,CAAC;IAC/B,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,mBAAmB,CAChC,SAAS,CAAC,UAAU,EACpB,SAAS,CAAC,UAAU,EACpB,KAAK,EACL,MAAM,CACP,CAAC;IACF,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,4BAA4B,CACpD,EAAE,EACF,KAAK,EACL,MAAM,CACP,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACd,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,GAAG,CAAC,CAAC;QAC/D,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IACH,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,OAAO;YAAE,OAAO,aAAa,CAAC,CAAC,EAAE,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,aAAa,CAAC,CAAC,EAAE,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,MAAc,EACd,KAAU,EACV,MAAiB;IAEjB,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,eAAe;QAAE,OAAO,KAAK,CAAC;IAEnD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACzE,MAAM,oBAAoB,GAAG,GAAG,GAAG,sBAAsB,EAAE,CAAC;QAC5D,IAAI,KAAK,CAAC,SAAS,IAAI,oBAAoB,EAAE,CAAC;YAC5C,sEAAsE;YACtE,qEAAqE;YACrE,uEAAuE;YACvE,OAAO,sBAAsB,CAC3B,MAAM,EACN,oBAAoB,EACpB,kGAAkG,CACnG,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG,GAAG,kCAAkC,EAAE,CAAC;YAChE,IAAI,CAAC,CAAC,MAAM,0BAA0B,CAAC,MAAM,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC9D,IAAI,CAAC;gBACH,MAAM,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CACX,oDAAoD,EACpD,GAAG,CACJ,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;QACvC,MAAM,qBAAqB,GAAG,GAAG,GAAG,6BAA6B,CAAC;QAClE,MAAM,wBAAwB,GAAG,GAAG,GAAG,0BAA0B,EAAE,CAAC;QACpE,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,IAAI,qBAAqB,CAAC;QACzD,MAAM,cAAc,GAAG,KAAK,CAAC,SAAS,IAAI,wBAAwB,CAAC;QACnE,IAAI,OAAO,IAAI,cAAc,EAAE,CAAC;YAC9B,+DAA+D;YAC/D,yEAAyE;YACzE,wEAAwE;YACxE,OAAO,gBAAgB,CACrB,MAAM,EACN,qBAAqB,EACrB,OAAO;gBACL,CAAC,CAAC,gFAAgF;gBAClF,CAAC,CAAC,kFAAkF,EACtF,wBAAwB,CACzB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,MAA+B,EAC/B,KAAU,EACV,MAAiB;IAEjB,MAAM,EAAE,GAAG,MAAM,CAAC,EAAY,CAAC;IAC/B,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,mBAAmB,CAChC,SAAS,CAAC,UAAU,EACpB,SAAS,CAAC,UAAU,EACpB,KAAK,EACL,MAAM,CACP,CAAC;IACF,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,aAAa,CAAC,CAAC,EAAE,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,MAA+B,EAC/B,KAAU,EACV,MAAiB;IAEjB,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;IAEjC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,iCAAiC,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,gCAAgC,EAAE,CAAC;QACrD,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,oCAAoC,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,yCAAyC,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,yCAAyC,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,UAAU,GAAG,iCAAiC,EAAE,CAAC;QACnD,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,oCAAoC,CAAC,CAAC;IACvE,CAAC;IACD,IACE,CAAC,KAAK,EAAE,OAAO,EAAE,kBAAkB;QACnC,KAAK,EAAE,OAAO,EAAE,qBAAqB,KAAK,IAAI,EAC9C,CAAC;QACD,OAAO,YAAY,CACjB,CAAC,EACD,CAAC,KAAK,EACN,mFAAmF,CACpF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC;QAClC,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,wCAAwC,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAG,8BAA8B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpE,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACzC,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,kBAA4B,CAAC;IACjE,MAAM,YAAY,GAAG,CAAC,MAA8B,EAAE,EAAE;QACtD,MAAM,QAAQ,GAAG,0BAA0B,EAAE,CAAC;QAC9C,KAAK,CACH,qBAAqB,EACrB;YACE,GAAG,QAAQ;YACX,MAAM;YACN,YAAY,EAAE,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI;YACzD,UAAU,EAAE,WAAW,CAAC,SAAS,IAAI,SAAS;YAC9C,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAChD,MAAM;YACN,aAAa,EAAE,YAAY;YAC3B,GAAG,CAAC,WAAW,CAAC,WAAW;gBACzB,CAAC,CAAC,EAAE,aAAa,EAAE,WAAW,CAAC,WAAW,EAAE;gBAC5C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,WAAW,CAAC,YAAY;gBAC1B,CAAC,CAAC,EAAE,cAAc,EAAE,WAAW,CAAC,YAAY,EAAE;gBAC9C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,WAAW,CAAC,YAAY;gBAC1B,CAAC,CAAC,EAAE,oBAAoB,EAAE,WAAW,CAAC,YAAY,EAAE;gBACpD,CAAC,CAAC,EAAE,CAAC;SACR,EACD,EAAE,MAAM,EAAE,aAAa,EAAE,CAC1B,CAAC;IACJ,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAChE,MAAM,CAAC,qBAAsB,CAAC;YAC5B,MAAM;YACN,KAAK,EAAE,KAAgC;YACvC,YAAY;SACb,CAAC,CACH,CAAC;QACF,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,aAAa,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,YAAY,CAAC,QAAQ,CAAC,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,uBAAuB,MAAM,UAAU,EAAE,KAAK,CAAC,CAAC;QAC9D,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,iCAAiC,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAS,EACT,KAAU,EACV,MAAiB;IAEjB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACpD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,YAAY,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,MAAM,GAAI,IAAI,CAAC,MAAkC,IAAI,EAAE,CAAC;IAC9D,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;IAEnB,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,KAAK,cAAc,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YACvD,MAAM,EAAE,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC;YACpC,OAAO,EAAE,GAAG,QAAQ,EAAE,EAAE,EAAqB,CAAC;QAChD,CAAC;QACD,KAAK,gBAAgB,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBACtB,OAAO,YAAY,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,yBAAyB,CAAC,CAAC;YAC7D,CAAC;YACD,8CAA8C;YAC9C,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC;YAC5B,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,YAAY,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,yBAAyB,CAAC,CAAC;YAC7D,CAAC;YACD,iBAAiB,CAAC,KAAK,EAAE,cAAc,EAAE,mBAAmB,CAAC,CAAC;YAC9D,iBAAiB,CAAC,KAAK,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;YACtD,iBAAiB,CAAC,KAAK,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;YACrD,MAAM,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YAC/C,OAAO,SAAgB,CAAC,CAAC,gCAAgC;QAC3D,CAAC;QACD,KAAK,WAAW,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACtD,OAAO,EAAE,GAAG,MAAM,EAAE,EAAE,EAAqB,CAAC;QAC9C,CAAC;QACD,KAAK,cAAc,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACzD,OAAO,EAAE,GAAG,MAAM,EAAE,EAAE,EAAqB,CAAC;QAC9C,CAAC;QACD,KAAK,gBAAgB,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACvE,OAAO,EAAE,GAAG,MAAM,EAAE,EAAE,EAAqB,CAAC;QAC9C,CAAC;QACD;YACE,OAAO,YAAY,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,qBAAqB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;AACH,CAAC","sourcesContent":["import crypto from \"node:crypto\";\n\nimport { setResponseHeader, setResponseStatus } from \"h3\";\n\nimport {\n  AGENT_BACKGROUND_PROCESSOR_A2A,\n  AGENT_BACKGROUND_PROCESSOR_FIELD,\n  dispatchPathTargetsNetlifyBackgroundFunction,\n  isAgentChatDurableBackgroundEnabled,\n  resolveAgentChatProcessRunDispatchPath,\n} from \"../agent/durable-background.js\";\nimport { trackingIdentityProperties } from \"../observability/tracking-identity.js\";\nimport { getA2ASecretByDomain } from \"../org/context.js\";\nimport { findWorkspaceDispatchAgent } from \"../server/agent-discovery.js\";\nimport { withConfiguredAppBasePath } from \"../server/app-base-path.js\";\nimport { getOrigin, isConfiguredAppOrigin } from \"../server/google-oauth.js\";\nimport { fireInternalDispatch } from \"../server/self-dispatch.js\";\nimport { agentChat } from \"../shared/agent-chat.js\";\nimport { track } from \"../tracking/registry.js\";\nimport {\n  hasConfiguredA2ASecret,\n  isA2AProductionRuntime,\n} from \"./auth-policy.js\";\nimport { callAction } from \"./client.js\";\nimport { sanitizeA2ACorrelationMetadata } from \"./correlation.js\";\nimport {\n  createTask,\n  createOrReuseTask,\n  getTask,\n  getTaskOwnership,\n  updateTask,\n  claimA2ATaskForProcessing,\n  getA2ATaskDispatchState,\n  failStuckA2ATask,\n  failStuckQueuedA2ATask,\n  settleProcessingA2ATask,\n  touchQueuedA2ATaskDispatch,\n  touchProcessingA2ATask,\n  pauseProcessingA2ATask,\n  MAX_A2A_IDEMPOTENCY_KEY_CHARS,\n  A2A_PERSONAL_OWNER_SCOPE,\n} from \"./task-store.js\";\nimport type {\n  A2AApprovedAction,\n  A2ASourceContext,\n  A2ASourceContextReference,\n  A2AConfig,\n  A2AHandler,\n  A2AHandlerContext,\n  A2AHandlerResult,\n  JsonRpcResponse,\n  Message,\n  Artifact,\n} from \"./types.js\";\n\n// Inlined to avoid pulling the entire core-routes-plugin (and its h3\n// transitive deps) into the a2a/handlers test boundary. Must stay in sync\n// with FRAMEWORK_ROUTE_PREFIX in `server/core-routes-plugin.ts`.\nconst A2A_PROCESS_TASK_PATH = \"/_agent-native/a2a/_process-task\";\nconst PORTABLE_FALLBACK_HANDOFF_TIMEOUT_MS = 1_000;\nconst A2A_QUEUED_DISPATCH_STUCK_AFTER_MS = 10_000;\nconst A2A_PROCESSING_STUCK_AFTER_MS = 5 * 60 * 1000;\nconst A2A_PROCESSING_HEARTBEAT_MS = 30_000;\nconst MAX_A2A_APPROVED_ACTIONS = 10;\nconst MAX_A2A_DIRECT_ACTION_NAME_CHARS = 200;\nconst MAX_A2A_DIRECT_ACTION_INPUT_BYTES = 64 * 1024;\nconst A2A_READ_INVOKE_EVENT = \"$a2a_read_invoke\";\n\nfunction trustedApprovedActions(\n  value: unknown,\n  event: any | undefined,\n): A2AApprovedAction[] | undefined {\n  // Static API keys and unsigned requests do not prove which user authorized\n  // a consequential action. Only a verified identity-bearing JWT may carry\n  // chat authorization across the A2A boundary.\n  if (!event?.context?.__a2aVerifiedEmail || !Array.isArray(value)) {\n    return undefined;\n  }\n  const approved = value\n    .slice(0, MAX_A2A_APPROVED_ACTIONS)\n    .filter(\n      (candidate): candidate is A2AApprovedAction =>\n        !!candidate &&\n        typeof candidate === \"object\" &&\n        typeof (candidate as Record<string, unknown>).tool === \"string\" &&\n        !!(candidate as Record<string, unknown>).tool,\n    )\n    .map((candidate) => ({ tool: candidate.tool, input: candidate.input }));\n  return approved.length > 0 ? approved : undefined;\n}\n\nfunction sourceContextReference(\n  value: unknown,\n): A2ASourceContextReference | undefined {\n  if (!value || typeof value !== \"object\") {\n    return undefined;\n  }\n  const candidate = value as Record<string, unknown>;\n  if (\n    candidate.platform !== \"slack\" ||\n    typeof candidate.integrationTaskId !== \"string\"\n  ) {\n    return undefined;\n  }\n  const integrationTaskId = candidate.integrationTaskId;\n  if (\n    !integrationTaskId ||\n    integrationTaskId !== integrationTaskId.trim() ||\n    integrationTaskId.length > 200\n  ) {\n    return undefined;\n  }\n  return { platform: \"slack\", integrationTaskId };\n}\n\nfunction resolvedSlackSourceContext(\n  value: unknown,\n): A2ASourceContext | undefined {\n  if (!value || typeof value !== \"object\") return undefined;\n  const candidate = value as Record<string, unknown>;\n  if (\n    candidate.platform !== \"slack\" ||\n    typeof candidate.sourceUrl !== \"string\"\n  ) {\n    return undefined;\n  }\n  const sourceUrl = candidate.sourceUrl;\n  if (!sourceUrl || sourceUrl !== sourceUrl.trim()) return undefined;\n  try {\n    const parsed = new URL(sourceUrl);\n    const isSlackHost =\n      parsed.hostname === \"slack.com\" || parsed.hostname.endsWith(\".slack.com\");\n    if (\n      parsed.protocol !== \"https:\" ||\n      !isSlackHost ||\n      parsed.username ||\n      parsed.password ||\n      parsed.port\n    ) {\n      return undefined;\n    }\n    return { platform: \"slack\", sourceUrl };\n  } catch {\n    return undefined;\n  }\n}\n\nasync function trustedSourceContext(\n  value: unknown,\n  event: any | undefined,\n): Promise<A2ASourceContext | undefined> {\n  const verifiedEmail = event?.context?.__a2aVerifiedEmail as\n    | string\n    | undefined;\n  const reference = sourceContextReference(value);\n  if (\n    !verifiedEmail ||\n    event?.context?.__a2aAudienceVerified !== true ||\n    !reference\n  ) {\n    return undefined;\n  }\n\n  const dispatch = findWorkspaceDispatchAgent();\n  if (!dispatch) return undefined;\n  const orgDomain = event?.context?.__a2aOrgDomain as string | undefined;\n  let orgSecret: string | undefined;\n  if (orgDomain) {\n    try {\n      orgSecret = (await getA2ASecretByDomain(orgDomain)) ?? undefined;\n    } catch {}\n  }\n\n  try {\n    const result = await callAction(\n      dispatch.url,\n      \"resolve-integration-source-context\",\n      { integrationTaskId: reference.integrationTaskId },\n      {\n        userEmail: verifiedEmail,\n        orgDomain,\n        orgSecret,\n        requestTimeoutMs: 5_000,\n      },\n    );\n    if (result.status !== \"completed\") return undefined;\n    return resolvedSlackSourceContext(JSON.parse(result.output));\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Request origin is routing/link context, not an identity signal. Accept only\n * an absolute HTTP(S) origin from caller metadata so queued runs can preserve\n * custom-domain/workspace links without allowing arbitrary values to leak\n * into browser or artifact URLs.\n */\nfunction requestOriginFromMetadata(\n  metadata: Record<string, unknown> | undefined,\n): string | undefined {\n  const raw = metadata?.requestOrigin;\n  if (typeof raw !== \"string\" || !raw.trim()) return undefined;\n  try {\n    const url = new URL(raw);\n    if (url.protocol !== \"http:\" && url.protocol !== \"https:\") return undefined;\n    return url.origin;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction requestOriginFromEvent(event: any | undefined): string | undefined {\n  if (!event) return undefined;\n  try {\n    return requestOriginFromMetadata({\n      requestOrigin: getOrigin(event as any),\n    });\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Prefer the origin resolved from the receiving request. A distinct public\n * browser origin is allowed only when the receiver configured it explicitly;\n * arbitrary caller metadata must not steer links or service-token URLs.\n */\nfunction requestOriginForContext(\n  metadata: Record<string, unknown> | undefined,\n  event: any | undefined,\n): string | undefined {\n  if (!event) return undefined;\n  const receiverOrigin = requestOriginFromEvent(event);\n  const metadataOrigin = requestOriginFromMetadata(metadata);\n  if (\n    metadataOrigin &&\n    (metadataOrigin === receiverOrigin || isConfiguredAppOrigin(metadataOrigin))\n  ) {\n    return metadataOrigin;\n  }\n  return receiverOrigin;\n}\n\nfunction trustedA2AMetadata(\n  metadata: Record<string, unknown> | undefined,\n  event: any | undefined,\n): Record<string, unknown> | undefined {\n  if (!metadata) return undefined;\n  const trusted = { ...metadata };\n  delete trusted.sourceContext;\n  const requestOrigin = requestOriginForContext(metadata, event);\n  if (requestOrigin) trusted.requestOrigin = requestOrigin;\n  else delete trusted.requestOrigin;\n  return trusted;\n}\n\n/**\n * Hard cap on how long a task may sit in submitted/working (never reaching\n * `processing`) before the dispatch-retry loop in\n * `refireStuckAsyncTaskIfNeeded` gives up and fails it. Without this, a\n * persistently failing dispatch (missing background function, bad A2A\n * secret, 404) throttles-and-retries forever — the queued bucket otherwise\n * has no terminal state. Override with A2A_QUEUED_LIFETIME_MAX_MS.\n */\nfunction a2aQueuedLifetimeMaxMs(): number {\n  const raw = Number(process.env.A2A_QUEUED_LIFETIME_MAX_MS);\n  if (Number.isFinite(raw) && raw > 0) return raw;\n  return 3 * 60 * 1000;\n}\n\n/**\n * Hard cap on total time a task may spend in `processing`, independent of\n * the liveness heartbeat. `A2A_PROCESSING_STUCK_AFTER_MS` alone only catches\n * a dead process — a hung await inside a still-alive process keeps\n * `updated_at` fresh via the heartbeat forever. This bounds that case\n * without cutting off legitimately long runs under it. Override with\n * A2A_PROCESSING_LIFETIME_MAX_MS.\n */\nfunction a2aProcessingLifetimeMaxMs(): number {\n  const raw = Number(process.env.A2A_PROCESSING_LIFETIME_MAX_MS);\n  if (Number.isFinite(raw) && raw > 0) return raw;\n  return 30 * 60 * 1000;\n}\n\n/**\n * Dispatch an async A2A task to a fresh function execution. Apps that opted\n * into durable background runs reuse the emitted Netlify 15-minute worker;\n * other hosts and apps retain the normal portable self-webhook route.\n */\nasync function fireProcessTaskDispatch(\n  event: any,\n  taskId: string,\n  config: A2AConfig,\n): Promise<void> {\n  const backgroundPath = resolveAgentChatProcessRunDispatchPath();\n  const useBackgroundWorker =\n    isAgentChatDurableBackgroundEnabled({\n      appOptIn: config.durableBackgroundRuns,\n    }) && dispatchPathTargetsNetlifyBackgroundFunction(backgroundPath);\n\n  if (!useBackgroundWorker) {\n    await fireInternalDispatch({\n      event,\n      path: A2A_PROCESS_TASK_PATH,\n      taskId,\n    });\n    return;\n  }\n\n  try {\n    // A real Netlify background function acknowledges the enqueue quickly.\n    // Await that acknowledgement so a missing or rejected worker can fall\n    // back before the task is left in `working` with no processor.\n    await fireInternalDispatch({\n      event,\n      path: backgroundPath,\n      taskId,\n      body: {\n        [AGENT_BACKGROUND_PROCESSOR_FIELD]: AGENT_BACKGROUND_PROCESSOR_A2A,\n      },\n      awaitResponse: true,\n    });\n  } catch (backgroundError) {\n    // Deploys can retain a runtime env opt-in after the corresponding\n    // background function was removed from the build. Keep async A2A useful\n    // in that state by falling back to the portable processor route, which\n    // runs in the regular framework function with the same task/auth checks.\n    console.error(\n      \"[a2a] Durable background dispatch failed; falling back to portable processor:\",\n      backgroundError,\n    );\n    await fireInternalDispatch({\n      event,\n      path: A2A_PROCESS_TASK_PATH,\n      taskId,\n      // The caller is about to return after a failed background handoff.\n      // Await the portable route briefly so the request definitely leaves this\n      // invocation, but do not hold async message/send open for the full agent\n      // run. The target processor continues independently after this bounded\n      // client-side timeout if the handler takes longer.\n      awaitResponse: true,\n      responseTimeoutMs: PORTABLE_FALLBACK_HANDOFF_TIMEOUT_MS,\n    });\n  }\n}\n\n/**\n * Process a previously-enqueued A2A task. Called by the `_process-task`\n * route in `server.ts`, in a fresh function execution. Atomically claims the\n * task, reconstructs the caller's request context from the task's metadata,\n * runs the handler, and persists the outcome.\n *\n * Idempotent on duplicate dispatches: the atomic claim returns null if some\n * other invocation already picked the task up, in which case we no-op.\n */\nexport async function processA2ATaskFromQueue(\n  taskId: string,\n  config: A2AConfig,\n  event?: any,\n): Promise<void> {\n  const claimed = await claimA2ATaskForProcessing(taskId);\n  if (!claimed) {\n    // Already in flight, terminal, or missing. Nothing to do.\n    return;\n  }\n\n  const message = claimed.history?.[0];\n  if (!message) {\n    await settleProcessingA2ATask(taskId, {\n      state: \"failed\",\n      message: {\n        role: \"agent\",\n        parts: [{ type: \"text\", text: \"Task is missing its inbound message\" }],\n      },\n    });\n    return;\n  }\n\n  const meta = (claimed.metadata ?? {}) as Record<string, unknown>;\n  const processorMeta = (meta.__a2a_processor ?? {}) as Record<string, unknown>;\n  const verifiedEmail = processorMeta.verifiedEmail as string | undefined;\n  const orgDomainHint = processorMeta.orgDomainHint as string | undefined;\n  // The processor metadata was created by the authenticated inbound handler\n  // from that request's resolved origin. Prefer it over the processor event,\n  // whose host may be an internal worker/dispatch origin. Legacy tasks that\n  // predate this metadata fall back to the processor event.\n  const requestOrigin =\n    requestOriginFromMetadata(processorMeta) ?? requestOriginFromEvent(event);\n  const contextId =\n    (processorMeta.contextId as string | null | undefined) ?? undefined;\n  const callerMetadata =\n    (processorMeta.callerMetadata as\n      | Record<string, unknown>\n      | null\n      | undefined) ?? undefined;\n  const approvedActions = Array.isArray(processorMeta.approvedActions)\n    ? (processorMeta.approvedActions as A2AApprovedAction[])\n    : undefined;\n  const sourceContext = processorMeta.sourceContext as\n    | A2ASourceContext\n    | undefined;\n\n  const resolvedOrgId = await resolveVerifiedA2AOrgId(\n    verifiedEmail,\n    orgDomainHint,\n  );\n\n  const { runWithRequestContext } =\n    await import(\"../server/request-context.js\");\n  const heartbeat = setInterval(() => {\n    touchProcessingA2ATask(taskId).catch((err) =>\n      console.error(\"[a2a] Failed to heartbeat async task:\", err),\n    );\n  }, A2A_PROCESSING_HEARTBEAT_MS);\n  (\n    heartbeat as ReturnType<typeof setInterval> & { unref?: () => void }\n  ).unref?.();\n  try {\n    await runWithRequestContext(\n      {\n        userEmail: verifiedEmail,\n        orgId: resolvedOrgId,\n        ...(requestOrigin ? { requestOrigin } : {}),\n      },\n      () =>\n        runHandlerAndPersist(\n          taskId,\n          message,\n          config,\n          contextId,\n          callerMetadata,\n          event,\n          approvedActions,\n          sourceContext,\n        ),\n    );\n  } catch (err: any) {\n    try {\n      await settleProcessingA2ATask(taskId, {\n        state: \"failed\",\n        message: {\n          role: \"agent\",\n          parts: [{ type: \"text\", text: err?.message ?? \"Handler crashed\" }],\n        },\n      });\n    } catch {}\n  } finally {\n    clearInterval(heartbeat);\n  }\n}\n\n/**\n * Default A2A handler that delegates to agentChat.call().\n * Used when no custom handler is provided in A2AConfig.\n */\nconst defaultHandler: A2AHandler = async (\n  message: Message,\n  context: A2AHandlerContext,\n): Promise<A2AHandlerResult> => {\n  // Extract text from message parts\n  const text = message.parts\n    .filter((p): p is { type: \"text\"; text: string } => p.type === \"text\")\n    .map((p) => p.text)\n    .join(\"\\n\");\n\n  if (!text) {\n    return {\n      message: {\n        role: \"agent\",\n        parts: [{ type: \"text\", text: \"No text content in message\" }],\n      },\n    };\n  }\n\n  // A2A note: this message arrived from a different app — the caller cannot\n  // see this app's local state (open deck, selected slide, etc.). They only\n  // see whatever this agent puts into the reply text. So:\n  //   1) include any concrete result (deck/document/dashboard URL, ID, value)\n  //      explicitly in the reply — the caller can't navigate locally.\n  //   2) URLs must be fully-qualified — relative paths resolve against the\n  //      caller's host and 404.\n  // We prepend a one-line hint to the user message so the agent knows.\n  const baseUrl = process.env.APP_URL || process.env.URL || \"\";\n  const appBaseUrl = baseUrl ? withConfiguredAppBasePath(baseUrl) : \"\";\n  const augmentedText = baseUrl\n    ? `[Cross-app A2A request — the caller is on a different host (${appBaseUrl} is yours, theirs is different). Include the concrete result (URL, ID, value) explicitly in your reply text; the caller can't see your local UI state. Any URL MUST be fully-qualified, never a relative path.]\\n\\n${text}`\n    : text;\n\n  const sourceContext = context.sourceContext\n    ? `Authenticated A2A source context: ${JSON.stringify(context.sourceContext)}. Treat this structured value as authoritative provenance. Preserve its sourceUrl exactly when recording source or submission fields.`\n    : undefined;\n  const result = sourceContext\n    ? await agentChat.call(augmentedText, { context: sourceContext })\n    : await agentChat.call(augmentedText);\n\n  const artifacts: Artifact[] = [];\n  if (result.filesChanged.length > 0) {\n    artifacts.push({\n      name: \"files-changed\",\n      description: \"Files modified by the agent\",\n      parts: [{ type: \"data\", data: { files: result.filesChanged } }],\n    });\n  }\n\n  return {\n    message: {\n      role: \"agent\",\n      parts: [\n        { type: \"text\", text: result.response },\n        ...(result.warnings?.length\n          ? [\n              {\n                type: \"text\" as const,\n                text: `\\n\\nWarnings:\\n${result.warnings.join(\"\\n\")}`,\n              },\n            ]\n          : []),\n      ],\n    },\n    artifacts: artifacts.length > 0 ? artifacts : undefined,\n  };\n};\n\nfunction getHandler(config: A2AConfig): A2AHandler {\n  return config.handler ?? defaultHandler;\n}\n\nfunction jsonRpcError(\n  id: string | number | null,\n  code: number,\n  message: string,\n): JsonRpcResponse {\n  return { jsonrpc: \"2.0\", id, error: { code, message } };\n}\n\nfunction jsonRpcResult(id: string | number, result: unknown): JsonRpcResponse {\n  return { jsonrpc: \"2.0\", id, result };\n}\n\nfunction makeHandlerContext(\n  taskId: string,\n  contextId?: string,\n  metadata?: Record<string, unknown>,\n  event?: any,\n  approvedActions?: A2AApprovedAction[],\n  sourceContext?: A2ASourceContext,\n): {\n  context: A2AHandlerContext;\n  artifacts: Artifact[];\n} {\n  const artifacts: Artifact[] = [];\n  const context: A2AHandlerContext = {\n    taskId,\n    contextId,\n    metadata,\n    event,\n    approvedActions,\n    sourceContext,\n    writeArtifact(name, content, mimeType) {\n      const artifact: Artifact = {\n        name,\n        parts: mimeType\n          ? [\n              {\n                type: \"file\",\n                file: {\n                  name,\n                  mimeType,\n                  bytes: Buffer.from(content).toString(\"base64\"),\n                },\n              },\n            ]\n          : [{ type: \"text\", text: content }],\n      };\n      artifacts.push(artifact);\n      return name;\n    },\n  };\n  return { context, artifacts };\n}\n\n/**\n * Resolve org context from A2A metadata / event context and wrap `fn`\n * inside `runWithRequestContext` so downstream actions see the org.\n */\nasync function withA2ARequestContext<T>(\n  metadata: Record<string, unknown> | undefined,\n  event: any | undefined,\n  fn: () => Promise<T>,\n): Promise<T> {\n  const { runWithRequestContext } =\n    await import(\"../server/request-context.js\");\n\n  const verifiedEmail =\n    (event?.context?.__a2aVerifiedEmail as string | undefined) ?? undefined;\n  // Only trust the org domain from the cryptographically verified JWT claim on\n  // the event context. metadata.orgDomain is caller-supplied and must not be\n  // used for org resolution — an unauthenticated caller could forge it and\n  // gain access to another org's data.\n  const orgDomain =\n    (event?.context?.__a2aOrgDomain as string | undefined) ?? undefined;\n\n  const resolvedOrgId = await resolveVerifiedA2AOrgId(verifiedEmail, orgDomain);\n  const requestOrigin = requestOriginForContext(metadata, event);\n\n  return runWithRequestContext(\n    {\n      userEmail: verifiedEmail,\n      orgId: resolvedOrgId,\n      ...(requestOrigin ? { requestOrigin } : {}),\n    },\n    fn,\n  ) as Promise<T>;\n}\n\nasync function resolveVerifiedA2AOrgId(\n  verifiedEmail: string | undefined,\n  verifiedOrgDomain: string | undefined,\n): Promise<string | undefined> {\n  if (verifiedOrgDomain) {\n    try {\n      const { resolveOrgByDomain } = await import(\"../org/context.js\");\n      const org = await resolveOrgByDomain(verifiedOrgDomain);\n      if (org) return org.orgId;\n    } catch {\n      // Org tables may not exist — continue without org context\n    }\n  }\n\n  if (verifiedEmail) {\n    try {\n      const { resolveOrgIdForEmail } = await import(\"../org/context.js\");\n      return (await resolveOrgIdForEmail(verifiedEmail)) ?? undefined;\n    } catch {\n      // Org tables may not exist — continue without org context\n    }\n  }\n\n  return undefined;\n}\n\n/**\n * Run the handler against the message and persist the outcome to the task store.\n * Used in sync mode (awaited inline) and in async mode (called by the\n * `_process-task` processor route in a fresh function execution).\n */\nasync function runHandlerAndPersist(\n  taskId: string,\n  message: Message,\n  config: A2AConfig,\n  contextId: string | undefined,\n  metadata: Record<string, unknown> | undefined,\n  event?: any,\n  approvedActions?: A2AApprovedAction[],\n  sourceContext?: A2ASourceContext,\n): Promise<void> {\n  const { context, artifacts } = makeHandlerContext(\n    taskId,\n    contextId,\n    metadata,\n    event,\n    approvedActions,\n    sourceContext,\n  );\n  try {\n    const result = getHandler(config)(message, context);\n\n    if (\n      result &&\n      typeof result === \"object\" &&\n      Symbol.asyncIterator in result\n    ) {\n      let lastMessage: Message | undefined;\n      for await (const msg of result as AsyncGenerator<Message>) {\n        lastMessage = msg;\n      }\n      if (lastMessage?.metadata?.agentNativeTaskState === \"input-required\") {\n        await pauseProcessingA2ATask(taskId, lastMessage);\n        return;\n      }\n      await settleProcessingA2ATask(taskId, {\n        state: \"completed\",\n        message: lastMessage,\n        artifacts: artifacts.length > 0 ? artifacts : undefined,\n      });\n      return;\n    }\n\n    const handlerResult = await (result as Promise<A2AHandlerResult>);\n    const allArtifacts = [...artifacts, ...(handlerResult.artifacts ?? [])];\n    if (handlerResult.taskState === \"input-required\") {\n      await pauseProcessingA2ATask(taskId, handlerResult.message);\n      return;\n    }\n    await settleProcessingA2ATask(taskId, {\n      state: \"completed\",\n      message: handlerResult.message,\n      artifacts: allArtifacts.length > 0 ? allArtifacts : undefined,\n    });\n  } catch (err: any) {\n    await settleProcessingA2ATask(taskId, {\n      state: \"failed\",\n      message: {\n        role: \"agent\",\n        parts: [{ type: \"text\", text: err?.message ?? \"Handler failed\" }],\n      },\n    });\n  }\n}\n\nfunction verifiedTaskOwner(event?: any): {\n  ownerEmail: string | null;\n  ownerScope: string | null;\n} {\n  const ownerEmail =\n    (event?.context?.__a2aVerifiedEmail as string | undefined) ?? null;\n  return {\n    ownerEmail,\n    ownerScope: ownerEmail\n      ? ((event?.context?.__a2aOrgDomain as string | undefined)\n          ?.trim()\n          .toLowerCase() ?? A2A_PERSONAL_OWNER_SCOPE)\n      : null,\n  };\n}\n\nasync function handleSend(\n  params: Record<string, unknown>,\n  config: A2AConfig,\n  event?: any,\n): Promise<JsonRpcResponse & { _id: string | number }> {\n  const message = params.message as Message;\n  if (!message || !message.role || !Array.isArray(message.parts)) {\n    return {\n      ...jsonRpcError(\n        0,\n        -32602,\n        \"Invalid params: message with role and parts required\",\n      ),\n      _id: 0,\n    };\n  }\n\n  const contextId = params.contextId as string | undefined;\n  const metadata = params.metadata as Record<string, unknown> | undefined;\n  const approvedActions = trustedApprovedActions(params.approvedActions, event);\n  const sourceContext = await trustedSourceContext(\n    metadata?.sourceContext,\n    event,\n  );\n\n  // The JWT-verified caller email (set by mountA2A in server.ts) is the\n  // single source of truth for task ownership — bound at creation, checked\n  // on every subsequent tasks/get and tasks/cancel call. Caller-supplied\n  // metadata.userEmail is NEVER used for ownership; that would re-introduce\n  // the IDOR class fixed here.\n  const { ownerEmail: ownerEmailForTask, ownerScope: ownerScopeForTask } =\n    verifiedTaskOwner(event);\n  let idempotencyKey: string | undefined;\n  if (ownerEmailForTask && params.idempotencyKey !== undefined) {\n    if (typeof params.idempotencyKey !== \"string\") {\n      return {\n        ...jsonRpcError(\n          0,\n          -32602,\n          \"Invalid params: idempotencyKey must be a string\",\n        ),\n        _id: 0,\n      };\n    }\n    idempotencyKey = params.idempotencyKey.trim();\n    if (\n      !idempotencyKey ||\n      idempotencyKey.length > MAX_A2A_IDEMPOTENCY_KEY_CHARS\n    ) {\n      return {\n        ...jsonRpcError(0, -32602, \"Invalid params: idempotencyKey is invalid\"),\n        _id: 0,\n      };\n    }\n  }\n\n  // Async mode: return the task immediately in `working` state, run the\n  // handler in the background, and let the caller poll `tasks/get`. This is\n  // the workaround for synchronous serverless request timeouts when the handler\n  // runs LLM + tool loops that can exceed a single HTTP invocation budget.\n  // SECURITY: only honor the explicit top-level `params.async`. The\n  // metadata.async fallback was caller-controlled and could force async\n  // dispatch (which has weaker auth than the sync path) on otherwise sync\n  // requests. Async is also refused entirely when no auth is configured in\n  // production — see the additional gate below.\n  const asyncMode =\n    params.async === true || (event && event.context?.__a2aForceAsync === true);\n  if (!asyncMode) idempotencyKey = undefined;\n\n  if (asyncMode) {\n    // Refuse async mode entirely when no auth is configured in production.\n    // The async dispatch path self-fires the `_process-task` route, which\n    // accepts unsigned dispatches when A2A_SECRET is unset — that combined\n    // with the lack of caller identity here would let any unauthenticated\n    // attacker queue and trigger handler runs. In production, require some\n    // form of auth so the verifiedEmail is bound to the task.\n    const hasA2ASecret = hasConfiguredA2ASecret();\n    const hasApiKey = !!(config.apiKeyEnv && process.env[config.apiKeyEnv]);\n    if (isA2AProductionRuntime() && !hasA2ASecret && !hasApiKey) {\n      return {\n        ...jsonRpcError(\n          0,\n          -32001,\n          \"A2A async mode is not available — A2A_SECRET or apiKeyEnv must be configured.\",\n        ),\n        _id: 0,\n      };\n    }\n    // Resolve identity up front (cheap), bake it into the task's metadata,\n    // and dispatch the actual handler run to a SEPARATE function execution.\n    // On serverless hosts (Netlify, Vercel, Cloudflare) detached promises get\n    // killed when the response is flushed, so we self-fire a webhook to a\n    // dedicated processor route — same cross-platform pattern the integration\n    // webhook queue uses. The processor reconstructs the request context from\n    // the task metadata and runs the handler with its own full timeout.\n    const verifiedEmail =\n      (event?.context?.__a2aVerifiedEmail as string | undefined) ?? undefined;\n    // Only trust the verified org domain from the JWT claim — do not fall back\n    // to metadata.orgDomain which is caller-supplied and unverified.\n    const orgDomainHint =\n      (event?.context?.__a2aOrgDomain as string | undefined) ?? undefined;\n    const requestOrigin = requestOriginForContext(metadata, event);\n    const safeMetadata = trustedA2AMetadata(metadata, event);\n\n    const taskMetadata: Record<string, unknown> = {\n      ...(safeMetadata ?? {}),\n      __a2a_processor: {\n        verifiedEmail,\n        orgDomainHint,\n        ...(requestOrigin ? { requestOrigin } : {}),\n        contextId: contextId ?? null,\n        callerMetadata: safeMetadata ?? null,\n        approvedActions: approvedActions ?? null,\n        sourceContext: sourceContext ?? null,\n      },\n    };\n    const { task, reused } = await createOrReuseTask(\n      message,\n      contextId,\n      taskMetadata,\n      ownerEmailForTask,\n      ownerScopeForTask,\n      idempotencyKey,\n    );\n    if (reused) {\n      return {\n        ...jsonRpcResult(0, sanitizeTaskForResponse(task)),\n        _id: 0,\n      };\n    }\n    const working = await updateTask(task.id, { state: \"working\" });\n\n    // Awaited, not fire-and-forget: this handler is about to return, and a\n    // detached dispatch fetch racing only a short settle timer can be killed\n    // mid-flight when the serverless response is flushed WITHOUT rejecting —\n    // see the `awaitResponse` doc on `fireInternalDispatch` in\n    // server/self-dispatch.ts. The durable worker path gets a fast 202\n    // acknowledgement; a stale-worker fallback uses a short bounded timeout\n    // because the portable route responds after processing the task.\n    try {\n      await fireProcessTaskDispatch(event, task.id, config);\n    } catch (err) {\n      console.error(\"[a2a] Failed to dispatch process-task:\", err);\n    }\n\n    return {\n      ...jsonRpcResult(0, sanitizeTaskForResponse(working ?? task)),\n      _id: 0,\n    };\n  }\n\n  return withA2ARequestContext(metadata, event, async () => {\n    const { task, reused } = await createOrReuseTask(\n      message,\n      contextId,\n      undefined,\n      ownerEmailForTask,\n      ownerScopeForTask,\n      idempotencyKey,\n    );\n    if (reused) {\n      return {\n        ...jsonRpcResult(0, sanitizeTaskForResponse(task)),\n        _id: 0,\n      };\n    }\n    await updateTask(task.id, { state: \"working\" });\n\n    const ctx = makeHandlerContext(\n      task.id,\n      contextId,\n      trustedA2AMetadata(metadata, event),\n      event,\n      approvedActions,\n      sourceContext,\n    );\n\n    try {\n      const result = getHandler(config)(message, ctx.context);\n\n      if (\n        result &&\n        typeof result === \"object\" &&\n        Symbol.asyncIterator in result\n      ) {\n        let lastMessage: Message | undefined;\n        for await (const msg of result as AsyncGenerator<Message>) {\n          lastMessage = msg;\n        }\n        if (lastMessage?.metadata?.agentNativeTaskState === \"input-required\") {\n          const updated = await updateTask(task.id, {\n            state: \"input-required\",\n            message: lastMessage,\n          });\n          return { ...jsonRpcResult(0, updated), _id: 0 };\n        }\n        const updated = await updateTask(task.id, {\n          state: \"completed\",\n          message: lastMessage,\n          artifacts: ctx.artifacts.length > 0 ? ctx.artifacts : undefined,\n        });\n        return { ...jsonRpcResult(0, updated), _id: 0 };\n      }\n\n      const handlerResult = await (result as Promise<A2AHandlerResult>);\n      const allArtifacts = [\n        ...ctx.artifacts,\n        ...(handlerResult.artifacts ?? []),\n      ];\n      if (handlerResult.taskState === \"input-required\") {\n        const updated = await updateTask(task.id, {\n          state: \"input-required\",\n          message: handlerResult.message,\n        });\n        return { ...jsonRpcResult(0, updated), _id: 0 };\n      }\n      const updated = await updateTask(task.id, {\n        state: \"completed\",\n        message: handlerResult.message,\n        artifacts: allArtifacts.length > 0 ? allArtifacts : undefined,\n      });\n      return { ...jsonRpcResult(0, updated), _id: 0 };\n    } catch (err: any) {\n      await updateTask(task.id, {\n        state: \"failed\",\n        message: {\n          role: \"agent\",\n          parts: [{ type: \"text\", text: err.message ?? \"Handler failed\" }],\n        },\n      });\n      return {\n        ...jsonRpcError(0, -32000, err.message ?? \"Handler failed\"),\n        _id: 0,\n      };\n    }\n  });\n}\n\nasync function handleStream(\n  params: Record<string, unknown>,\n  config: A2AConfig,\n  res: { write: (chunk: string) => void; end: () => void },\n  event?: any,\n): Promise<void> {\n  const message = params.message as Message;\n  if (!message || !message.role || !Array.isArray(message.parts)) {\n    res.write(\n      `data: ${JSON.stringify(jsonRpcError(0, -32602, \"Invalid params\"))}\\n\\n`,\n    );\n    res.end();\n    return;\n  }\n\n  const contextId = params.contextId as string | undefined;\n  const metadata = params.metadata as Record<string, unknown> | undefined;\n  const approvedActions = trustedApprovedActions(params.approvedActions, event);\n  const sourceContext = await trustedSourceContext(\n    metadata?.sourceContext,\n    event,\n  );\n  const { ownerEmail: ownerEmailForTask, ownerScope: ownerScopeForTask } =\n    verifiedTaskOwner(event);\n\n  await withA2ARequestContext(metadata, event, async () => {\n    const task = await createTask(\n      message,\n      contextId,\n      undefined,\n      ownerEmailForTask,\n      ownerScopeForTask,\n    );\n\n    await updateTask(task.id, { state: \"working\" });\n\n    const { context, artifacts } = makeHandlerContext(\n      task.id,\n      contextId,\n      trustedA2AMetadata(metadata, event),\n      event,\n      approvedActions,\n      sourceContext,\n    );\n\n    try {\n      const result = getHandler(config)(message, context);\n\n      if (\n        result &&\n        typeof result === \"object\" &&\n        Symbol.asyncIterator in result\n      ) {\n        for await (const msg of result as AsyncGenerator<Message>) {\n          const intermediate = await updateTask(task.id, {\n            state: \"working\",\n            message: msg,\n          });\n          res.write(\n            `data: ${JSON.stringify(jsonRpcResult(0, intermediate))}\\n\\n`,\n          );\n        }\n      } else {\n        const handlerResult = await (result as Promise<A2AHandlerResult>);\n        const allArtifacts = [...artifacts, ...(handlerResult.artifacts ?? [])];\n        const updated = await updateTask(task.id, {\n          state: \"completed\",\n          message: handlerResult.message,\n          artifacts: allArtifacts.length > 0 ? allArtifacts : undefined,\n        });\n        res.write(`data: ${JSON.stringify(jsonRpcResult(0, updated))}\\n\\n`);\n        res.end();\n        return;\n      }\n\n      const allArtifacts = [...artifacts];\n      const final = await updateTask(task.id, {\n        state: \"completed\",\n        artifacts: allArtifacts.length > 0 ? allArtifacts : undefined,\n      });\n      res.write(`data: ${JSON.stringify(jsonRpcResult(0, final))}\\n\\n`);\n    } catch (err: any) {\n      await updateTask(task.id, { state: \"failed\" });\n      res.write(\n        `data: ${JSON.stringify(jsonRpcError(0, -32000, err.message ?? \"Handler failed\"))}\\n\\n`,\n      );\n    }\n\n    res.end();\n  });\n}\n\n/**\n * Caller-supplied metadata keys that may contain sensitive bearer / OAuth\n * material. Always stripped from `tasks/get` responses so a leaked task id\n * never discloses an OAuth token even when the original sender carelessly\n * stuffed one into `metadata` (see `production-agent.ts:1144-1156` for the\n * historical googleToken propagation pattern).\n */\nconst SENSITIVE_METADATA_KEYS = new Set([\n  \"googleToken\",\n  \"userEmail\",\n  \"orgDomain\",\n  \"accessToken\",\n  \"refreshToken\",\n  \"apiKey\",\n  \"Authorization\",\n  \"authorization\",\n  \"bearer\",\n]);\n\nfunction sanitizeTaskForResponse(task: any): any {\n  if (!task || typeof task !== \"object\") return task;\n  const {\n    ownerEmail: _ownerEmail,\n    ownerScope: _ownerScope,\n    ...publicTask\n  } = task;\n  if (!publicTask.metadata || typeof publicTask.metadata !== \"object\") {\n    return publicTask;\n  }\n\n  const meta = publicTask.metadata as Record<string, unknown>;\n  const publicMeta: Record<string, unknown> = {};\n  for (const [k, v] of Object.entries(meta)) {\n    if (k === \"__a2a_processor\") continue;\n    if (SENSITIVE_METADATA_KEYS.has(k)) continue;\n    publicMeta[k] = v;\n  }\n  return { ...publicTask, metadata: publicMeta };\n}\n\n/**\n * Reject access when the task has a recorded owner that doesn't match the\n * verified caller. Returns a 404-shaped JSON-RPC error to avoid disclosing\n * task existence to the wrong caller (enumeration via UUID lookup).\n *\n * - When the task has no recorded owner (legacy row from before the\n *   owner_email migration) we allow access if some verifiable bearer token\n *   was presented; otherwise we still reject so an unsigned caller can never\n *   read or cancel arbitrary task ids.\n * - When neither A2A_SECRET nor apiKeyEnv is configured AND we're in\n *   production, we refuse `tasks/get` and `tasks/cancel` outright — there's\n *   no way to authenticate the caller, so the only safe response is \"not\n *   found\".\n */\nfunction authorizeTaskAccess(\n  taskOwnerEmail: string | null,\n  taskOwnerScope: string | null,\n  event: any,\n  config: A2AConfig,\n): JsonRpcResponse | null {\n  const verifiedEmail =\n    (event?.context?.__a2aVerifiedEmail as string | undefined) ?? null;\n  const hasA2ASecret = hasConfiguredA2ASecret();\n  const hasApiKey = !!(config.apiKeyEnv && process.env[config.apiKeyEnv]);\n  const inProduction = isA2AProductionRuntime();\n\n  if (inProduction && !hasA2ASecret && !hasApiKey) {\n    // No way to authenticate the caller in production — refuse access.\n    return jsonRpcError(0, -32001, \"Task not found\");\n  }\n\n  if (taskOwnerEmail) {\n    if (!verifiedEmail) {\n      return jsonRpcError(0, -32001, \"Task not found\");\n    }\n    if (verifiedEmail.toLowerCase() !== taskOwnerEmail.toLowerCase()) {\n      return jsonRpcError(0, -32001, \"Task not found\");\n    }\n    if (taskOwnerScope) {\n      const verifiedScope =\n        (event?.context?.__a2aOrgDomain as string | undefined)\n          ?.trim()\n          .toLowerCase() ?? A2A_PERSONAL_OWNER_SCOPE;\n      if (verifiedScope !== taskOwnerScope.toLowerCase()) {\n        return jsonRpcError(0, -32001, \"Task not found\");\n      }\n    }\n  }\n  // Legacy row (no owner_email recorded). The route-level auth gate is the\n  // only thing protecting it — fall through and serve.\n  return null;\n}\n\nasync function handleGet(\n  params: Record<string, unknown>,\n  event: any,\n  config: A2AConfig,\n): Promise<JsonRpcResponse> {\n  const id = params.id as string;\n  if (!id) {\n    return jsonRpcError(0, -32602, \"Invalid params: id required\");\n  }\n  const ownership = await getTaskOwnership(id);\n  const denied = authorizeTaskAccess(\n    ownership.ownerEmail,\n    ownership.ownerScope,\n    event,\n    config,\n  );\n  if (denied) return denied;\n\n  const task = await getTask(id);\n  if (!task) {\n    return jsonRpcError(0, -32001, \"Task not found\");\n  }\n  const taskChanged = await refireStuckAsyncTaskIfNeeded(\n    id,\n    event,\n    config,\n  ).catch((err) => {\n    console.error(\"[a2a] Failed to refire stuck async task:\", err);\n    return false;\n  });\n  if (taskChanged) {\n    const updated = await getTask(id);\n    if (updated) return jsonRpcResult(0, sanitizeTaskForResponse(updated));\n  }\n  return jsonRpcResult(0, sanitizeTaskForResponse(task));\n}\n\nasync function refireStuckAsyncTaskIfNeeded(\n  taskId: string,\n  event: any,\n  config: A2AConfig,\n): Promise<boolean> {\n  const state = await getA2ATaskDispatchState(taskId);\n  if (!state) return false;\n  if (!state.metadata?.__a2a_processor) return false;\n\n  const now = Date.now();\n\n  if (state.statusState === \"submitted\" || state.statusState === \"working\") {\n    const queuedLifetimeCutoff = now - a2aQueuedLifetimeMaxMs();\n    if (state.createdAt <= queuedLifetimeCutoff) {\n      // Dispatch has kept failing (or was never delivered) long enough that\n      // retrying further would just repeat the same failure forever — stop\n      // refiring and surface a terminal error instead of throttling forever.\n      return failStuckQueuedA2ATask(\n        taskId,\n        queuedLifetimeCutoff,\n        \"The async A2A task could not be started because dispatch kept failing. Please retry the request.\",\n      );\n    }\n\n    if (state.updatedAt <= now - A2A_QUEUED_DISPATCH_STUCK_AFTER_MS) {\n      if (!(await touchQueuedA2ATaskDispatch(taskId))) return false;\n      try {\n        await fireProcessTaskDispatch(event, taskId, config);\n      } catch (err) {\n        console.error(\n          \"[a2a] Failed to refire stuck queued task dispatch:\",\n          err,\n        );\n        return false;\n      }\n      return true;\n    }\n    return false;\n  }\n\n  if (state.statusState === \"processing\") {\n    const processingStuckCutoff = now - A2A_PROCESSING_STUCK_AFTER_MS;\n    const processingLifetimeCutoff = now - a2aProcessingLifetimeMaxMs();\n    const isStale = state.updatedAt <= processingStuckCutoff;\n    const isOverLifetime = state.createdAt <= processingLifetimeCutoff;\n    if (isStale || isOverLifetime) {\n      // A processor that died mid-handler may have already performed\n      // side-effectful work. Retrying from the top can duplicate artifacts, so\n      // fail deterministically and let the caller issue an intentional retry.\n      return failStuckA2ATask(\n        taskId,\n        processingStuckCutoff,\n        isStale\n          ? \"The async A2A processor timed out before completing. Please retry the request.\"\n          : \"The async A2A processor exceeded its maximum run time. Please retry the request.\",\n        processingLifetimeCutoff,\n      );\n    }\n  }\n\n  return false;\n}\n\nasync function handleCancel(\n  params: Record<string, unknown>,\n  event: any,\n  config: A2AConfig,\n): Promise<JsonRpcResponse> {\n  const id = params.id as string;\n  if (!id) {\n    return jsonRpcError(0, -32602, \"Invalid params: id required\");\n  }\n  const ownership = await getTaskOwnership(id);\n  const denied = authorizeTaskAccess(\n    ownership.ownerEmail,\n    ownership.ownerScope,\n    event,\n    config,\n  );\n  if (denied) return denied;\n\n  const task = await updateTask(id, { state: \"canceled\" });\n  if (!task) {\n    return jsonRpcError(0, -32001, \"Task not found\");\n  }\n  return jsonRpcResult(0, sanitizeTaskForResponse(task));\n}\n\nasync function handleInvokeReadOnlyAction(\n  params: Record<string, unknown>,\n  event: any,\n  config: A2AConfig,\n): Promise<JsonRpcResponse> {\n  const action = typeof params.action === \"string\" ? params.action.trim() : \"\";\n  const input = params.input ?? {};\n\n  if (!action) {\n    return jsonRpcError(0, -32602, \"Invalid params: action required\");\n  }\n  if (action.length > MAX_A2A_DIRECT_ACTION_NAME_CHARS) {\n    return jsonRpcError(0, -32602, \"Invalid params: action is too long\");\n  }\n  if (!input || typeof input !== \"object\" || Array.isArray(input)) {\n    return jsonRpcError(0, -32602, \"Invalid params: input must be an object\");\n  }\n  let inputBytes: number;\n  try {\n    inputBytes = Buffer.byteLength(JSON.stringify(input), \"utf8\");\n  } catch {\n    return jsonRpcError(0, -32602, \"Invalid params: input must be JSON-safe\");\n  }\n  if (inputBytes > MAX_A2A_DIRECT_ACTION_INPUT_BYTES) {\n    return jsonRpcError(0, -32602, \"Invalid params: input is too large\");\n  }\n  if (\n    !event?.context?.__a2aVerifiedEmail ||\n    event?.context?.__a2aAudienceVerified !== true\n  ) {\n    return jsonRpcError(\n      0,\n      -32001,\n      \"A verified, audience-bound user identity is required for direct action invocation\",\n    );\n  }\n  if (!config.executeReadOnlyAction) {\n    return jsonRpcError(0, -32601, \"Direct action invocation not supported\");\n  }\n\n  const startedAt = Date.now();\n  const correlation = sanitizeA2ACorrelationMetadata(params.metadata);\n  const invocationId = crypto.randomUUID();\n  const verifiedEmail = event.context.__a2aVerifiedEmail as string;\n  const emitTracking = (status: \"completed\" | \"failed\") => {\n    const identity = trackingIdentityProperties();\n    track(\n      A2A_READ_INVOKE_EVENT,\n      {\n        ...identity,\n        action,\n        receiver_app: config.appId ?? identity.app ?? config.name,\n        caller_app: correlation.callerApp ?? \"unknown\",\n        duration_ms: Math.max(0, Date.now() - startedAt),\n        status,\n        invocation_id: invocationId,\n        ...(correlation.parentRunId\n          ? { parent_run_id: correlation.parentRunId }\n          : {}),\n        ...(correlation.parentTurnId\n          ? { parent_turn_id: correlation.parentTurnId }\n          : {}),\n        ...(correlation.invocationId\n          ? { caller_invocation_id: correlation.invocationId }\n          : {}),\n      },\n      { userId: verifiedEmail },\n    );\n  };\n\n  try {\n    const result = await withA2ARequestContext(undefined, event, () =>\n      config.executeReadOnlyAction!({\n        action,\n        input: input as Record<string, unknown>,\n        invocationId,\n      }),\n    );\n    emitTracking(result.status);\n    return jsonRpcResult(0, { action, ...result });\n  } catch (error) {\n    emitTracking(\"failed\");\n    console.error(`[a2a] Direct action ${action} failed:`, error);\n    return jsonRpcError(0, -32000, \"Direct action invocation failed\");\n  }\n}\n\n/**\n * H3-compatible JSON-RPC handler. Returns JSON directly (H3 serializes it).\n * Streaming is handled via H3's node response when needed.\n */\nexport async function handleJsonRpcH3(\n  body: any,\n  event: any,\n  config: A2AConfig,\n): Promise<JsonRpcResponse> {\n  if (!body || body.jsonrpc !== \"2.0\" || !body.method) {\n    setResponseStatus(event, 400);\n    return jsonRpcError(body?.id ?? null, -32600, \"Invalid JSON-RPC request\");\n  }\n\n  const params = (body.params as Record<string, unknown>) ?? {};\n  const id = body.id;\n\n  switch (body.method) {\n    case \"message/send\": {\n      const result = await handleSend(params, config, event);\n      const { _id, ...response } = result;\n      return { ...response, id } as JsonRpcResponse;\n    }\n    case \"message/stream\": {\n      if (!config.streaming) {\n        return jsonRpcError(id, -32601, \"Streaming not supported\");\n      }\n      // Use the raw node response for SSE streaming\n      const res = event.node?.res;\n      if (!res) {\n        return jsonRpcError(id, -32000, \"Streaming not available\");\n      }\n      setResponseHeader(event, \"Content-Type\", \"text/event-stream\");\n      setResponseHeader(event, \"Cache-Control\", \"no-cache\");\n      setResponseHeader(event, \"Connection\", \"keep-alive\");\n      await handleStream(params, config, res, event);\n      return undefined as any; // Response already sent via SSE\n    }\n    case \"tasks/get\": {\n      const result = await handleGet(params, event, config);\n      return { ...result, id } as JsonRpcResponse;\n    }\n    case \"tasks/cancel\": {\n      const result = await handleCancel(params, event, config);\n      return { ...result, id } as JsonRpcResponse;\n    }\n    case \"actions/invoke\": {\n      const result = await handleInvokeReadOnlyAction(params, event, config);\n      return { ...result, id } as JsonRpcResponse;\n    }\n    default:\n      return jsonRpcError(id, -32601, `Method not found: ${body.method}`);\n  }\n}\n"]}

package/dist/a2a/index.d.ts

@@ -3,6 +3,6 @@ export type { A2ATokenPayload } from "./server.js";
 export { generateAgentCard } from "./agent-card.js";
 export { A2AClient, callAction, callAgent, signA2AToken } from "./client.js";
 export { AgentInvocationError, buildAgentInvocationPrompt, invokeAgent, invokeAgentAction, looksLikeAgentUrl, resolveAgentInvocationTarget, } from "./invoke.js";
-export type { A2AConfig, A2AHandler, A2AHandlerContext, A2AHandlerResult, AgentCard, AgentSkill, AgentCapabilities, Task, TaskState, TaskStatus, Message, Part, TextPart, FilePart, DataPart, Artifact, JsonRpcRequest, JsonRpcResponse, A2ACorrelationMetadata, A2AReadOnlyActionInvocation, A2AReadOnlyActionResult, } from "./types.js";
+export type { A2AConfig, A2AHandler, A2AHandlerContext, A2AHandlerResult, A2ASourceContext, AgentCard, AgentSkill, AgentCapabilities, Task, TaskState, TaskStatus, Message, Part, TextPart, FilePart, DataPart, Artifact, JsonRpcRequest, JsonRpcResponse, A2ACorrelationMetadata, A2AReadOnlyActionInvocation, A2AReadOnlyActionResult, } from "./types.js";
 export type { AgentInvocationErrorCode, AgentActionInvocationResult, AgentInvocationResult, AgentInvocationRuntime, InvokeAgentActionOptions, InvokeAgentOptions, ResolveAgentInvocationTargetOptions, ResolvedAgentInvocationTarget, } from "./invoke.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/a2a/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/a2a/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACvD,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAGpD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,WAAW,EACX,iBAAiB,EACjB,iBAAiB,EACjB,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AAGrB,YAAY,EACV,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,gBAAgB,EAChB,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,IAAI,EACJ,SAAS,EACT,UAAU,EACV,OAAO,EACP,IAAI,EACJ,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,cAAc,EACd,eAAe,EACf,sBAAsB,EACtB,2BAA2B,EAC3B,uBAAuB,GACxB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,wBAAwB,EACxB,2BAA2B,EAC3B,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,EACxB,kBAAkB,EAClB,mCAAmC,EACnC,6BAA6B,GAC9B,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/a2a/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACvD,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAGpD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,WAAW,EACX,iBAAiB,EACjB,iBAAiB,EACjB,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AAGrB,YAAY,EACV,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,IAAI,EACJ,SAAS,EACT,UAAU,EACV,OAAO,EACP,IAAI,EACJ,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,cAAc,EACd,eAAe,EACf,sBAAsB,EACtB,2BAA2B,EAC3B,uBAAuB,GACxB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,wBAAwB,EACxB,2BAA2B,EAC3B,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,EACxB,kBAAkB,EAClB,mCAAmC,EACnC,6BAA6B,GAC9B,MAAM,aAAa,CAAC"}

package/dist/a2a/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/a2a/index.ts"],"names":[],"mappings":"AAAA,oBAAoB;AACpB,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAEvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,SAAS;AACT,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,WAAW,EACX,iBAAiB,EACjB,iBAAiB,EACjB,4BAA4B,GAC7B,MAAM,aAAa,CAAC","sourcesContent":["// Server (H3/Nitro)\nexport { mountA2A, verifyA2AToken } from \"./server.js\";\nexport type { A2ATokenPayload } from \"./server.js\";\nexport { generateAgentCard } from \"./agent-card.js\";\n\n// Client\nexport { A2AClient, callAction, callAgent, signA2AToken } from \"./client.js\";\nexport {\n  AgentInvocationError,\n  buildAgentInvocationPrompt,\n  invokeAgent,\n  invokeAgentAction,\n  looksLikeAgentUrl,\n  resolveAgentInvocationTarget,\n} from \"./invoke.js\";\n\n// Types\nexport type {\n  A2AConfig,\n  A2AHandler,\n  A2AHandlerContext,\n  A2AHandlerResult,\n  AgentCard,\n  AgentSkill,\n  AgentCapabilities,\n  Task,\n  TaskState,\n  TaskStatus,\n  Message,\n  Part,\n  TextPart,\n  FilePart,\n  DataPart,\n  Artifact,\n  JsonRpcRequest,\n  JsonRpcResponse,\n  A2ACorrelationMetadata,\n  A2AReadOnlyActionInvocation,\n  A2AReadOnlyActionResult,\n} from \"./types.js\";\nexport type {\n  AgentInvocationErrorCode,\n  AgentActionInvocationResult,\n  AgentInvocationResult,\n  AgentInvocationRuntime,\n  InvokeAgentActionOptions,\n  InvokeAgentOptions,\n  ResolveAgentInvocationTargetOptions,\n  ResolvedAgentInvocationTarget,\n} from \"./invoke.js\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/a2a/index.ts"],"names":[],"mappings":"AAAA,oBAAoB;AACpB,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAEvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,SAAS;AACT,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,WAAW,EACX,iBAAiB,EACjB,iBAAiB,EACjB,4BAA4B,GAC7B,MAAM,aAAa,CAAC","sourcesContent":["// Server (H3/Nitro)\nexport { mountA2A, verifyA2AToken } from \"./server.js\";\nexport type { A2ATokenPayload } from \"./server.js\";\nexport { generateAgentCard } from \"./agent-card.js\";\n\n// Client\nexport { A2AClient, callAction, callAgent, signA2AToken } from \"./client.js\";\nexport {\n  AgentInvocationError,\n  buildAgentInvocationPrompt,\n  invokeAgent,\n  invokeAgentAction,\n  looksLikeAgentUrl,\n  resolveAgentInvocationTarget,\n} from \"./invoke.js\";\n\n// Types\nexport type {\n  A2AConfig,\n  A2AHandler,\n  A2AHandlerContext,\n  A2AHandlerResult,\n  A2ASourceContext,\n  AgentCard,\n  AgentSkill,\n  AgentCapabilities,\n  Task,\n  TaskState,\n  TaskStatus,\n  Message,\n  Part,\n  TextPart,\n  FilePart,\n  DataPart,\n  Artifact,\n  JsonRpcRequest,\n  JsonRpcResponse,\n  A2ACorrelationMetadata,\n  A2AReadOnlyActionInvocation,\n  A2AReadOnlyActionResult,\n} from \"./types.js\";\nexport type {\n  AgentInvocationErrorCode,\n  AgentActionInvocationResult,\n  AgentInvocationResult,\n  AgentInvocationRuntime,\n  InvokeAgentActionOptions,\n  InvokeAgentOptions,\n  ResolveAgentInvocationTargetOptions,\n  ResolvedAgentInvocationTarget,\n} from \"./invoke.js\";\n"]}

package/dist/a2a/types.d.ts

@@ -99,6 +99,16 @@ export interface A2AApprovedAction {
     tool: string;
     input: unknown;
 }
+/** Structured provenance accepted only from an authenticated A2A caller. */
+export interface A2ASourceContext {
+    platform: "slack";
+    sourceUrl: string;
+}
+/** Opaque reference that a receiver must resolve through its trusted Dispatch app. */
+export interface A2ASourceContextReference {
+    platform: "slack";
+    integrationTaskId: string;
+}
 /**
  * Telemetry-only cross-app correlation. Receivers must never use these
  * caller-supplied values for identity, ownership, org scoping, access, or
@@ -120,6 +130,8 @@ export interface A2AHandlerContext {
     event?: unknown;
     /** Exact one-time action grants from a JWT-authenticated caller. */
     approvedActions?: A2AApprovedAction[];
+    /** Receiver-validated provenance from a JWT-authenticated caller. */
+    sourceContext?: A2ASourceContext;
     writeArtifact: (name: string, content: string, mimeType?: string) => string;
 }
 export interface A2AHandlerResult {

package/dist/a2a/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/a2a/types.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAI5D,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE;QACJ,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,MAAM,MAAM,IAAI,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAIlD,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,MAAM,SAAS,GACjB,WAAW,GACX,SAAS,GACT,WAAW,GACX,QAAQ,GACR,UAAU,GACV,gBAAgB,CAAC;AAErB,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,SAAS,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC;IACpB,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAID,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,WAAW,CAAC,EAAE,uBAAuB,CAAC;CACvC;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,KAAK,CAAC;IACvB,YAAY,EAAE,iBAAiB,CAAC;IAChC,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;CACvC;AAID,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AAED,8EAA8E;AAC9E,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAID,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,2EAA2E;IAC3E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,oEAAoE;IACpE,eAAe,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACtC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;CAC7E;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;IACvB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,iFAAiF;AACjF,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,UAAU,GAAG,CACvB,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,iBAAiB,KACvB,OAAO,CAAC,gBAAgB,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;AAEzD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,sFAAsF;IACtF,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,uFAAuF;IACvF,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,yDAAyD;IACzD,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,oBAAoB,KAAK,OAAO,CAAC;QAC5D,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;QAC/B,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;IACH,+EAA+E;IAC/E,qBAAqB,CAAC,EAAE,CACtB,UAAU,EAAE,2BAA2B,KACpC,OAAO,CAAC,IAAI,CAAC,uBAAuB,EAAE,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC;CAClE"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/a2a/types.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAI5D,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE;QACJ,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,MAAM,MAAM,IAAI,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAIlD,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,MAAM,SAAS,GACjB,WAAW,GACX,SAAS,GACT,WAAW,GACX,QAAQ,GACR,UAAU,GACV,gBAAgB,CAAC;AAErB,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,SAAS,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC;IACpB,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAID,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,WAAW,CAAC,EAAE,uBAAuB,CAAC;CACvC;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,KAAK,CAAC;IACvB,YAAY,EAAE,iBAAiB,CAAC;IAChC,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;CACvC;AAID,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AAED,8EAA8E;AAC9E,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,4EAA4E;AAC5E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,sFAAsF;AACtF,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,OAAO,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAID,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,2EAA2E;IAC3E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,oEAAoE;IACpE,eAAe,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACtC,qEAAqE;IACrE,aAAa,CAAC,EAAE,gBAAgB,CAAC;IACjC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;CAC7E;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;IACvB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,iFAAiF;AACjF,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,UAAU,GAAG,CACvB,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,iBAAiB,KACvB,OAAO,CAAC,gBAAgB,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;AAEzD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,sFAAsF;IACtF,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,uFAAuF;IACvF,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,yDAAyD;IACzD,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,oBAAoB,KAAK,OAAO,CAAC;QAC5D,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;QAC/B,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;IACH,+EAA+E;IAC/E,qBAAqB,CAAC,EAAE,CACtB,UAAU,EAAE,2BAA2B,KACpC,OAAO,CAAC,IAAI,CAAC,uBAAuB,EAAE,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC;CAClE"}

package/dist/a2a/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/a2a/types.ts"],"names":[],"mappings":"","sourcesContent":["// A2A Protocol types (spec v0.3) + framework config types\nimport type { PublicAgentActionConfig } from \"../action.js\";\n\n// --- Parts (content atoms) ---\n\nexport interface TextPart {\n  type: \"text\";\n  text: string;\n}\n\nexport interface FilePart {\n  type: \"file\";\n  file: {\n    name?: string;\n    mimeType?: string;\n    bytes?: string;\n    uri?: string;\n  };\n}\n\nexport interface DataPart {\n  type: \"data\";\n  data: Record<string, unknown>;\n}\n\nexport type Part = TextPart | FilePart | DataPart;\n\n// --- Messages and Tasks ---\n\nexport interface Message {\n  role: \"user\" | \"agent\";\n  parts: Part[];\n  metadata?: Record<string, unknown>;\n}\n\nexport type TaskState =\n  | \"submitted\"\n  | \"working\"\n  | \"completed\"\n  | \"failed\"\n  | \"canceled\"\n  | \"input-required\";\n\nexport interface TaskStatus {\n  state: TaskState;\n  message?: Message;\n  timestamp: string;\n}\n\nexport interface Artifact {\n  name?: string;\n  description?: string;\n  parts: Part[];\n  metadata?: Record<string, unknown>;\n}\n\nexport interface Task {\n  id: string;\n  contextId?: string;\n  status: TaskStatus;\n  history?: Message[];\n  artifacts?: Artifact[];\n  metadata?: Record<string, unknown>;\n}\n\n// --- Agent Card ---\n\nexport interface AgentSkill {\n  id: string;\n  name: string;\n  description: string;\n  tags?: string[];\n  examples?: string[];\n  public?: boolean;\n  readOnly?: boolean;\n  requiresAuth?: boolean;\n  isConsequential?: boolean;\n  publicAgent?: PublicAgentActionConfig;\n}\n\nexport interface AgentCapabilities {\n  streaming?: boolean;\n  pushNotifications?: boolean;\n  stateTransitionHistory?: boolean;\n}\n\nexport interface AgentSecurityScheme {\n  type: string;\n  scheme?: string;\n  bearerFormat?: string;\n  in?: string;\n  name?: string;\n}\n\nexport interface AgentCard {\n  name: string;\n  description: string;\n  url: string;\n  version: string;\n  protocolVersion: \"0.3\";\n  capabilities: AgentCapabilities;\n  skills: AgentSkill[];\n  securitySchemes?: Record<string, AgentSecurityScheme>;\n  security?: Record<string, string[]>[];\n}\n\n// --- JSON-RPC ---\n\nexport interface JsonRpcRequest {\n  jsonrpc: \"2.0\";\n  id: string | number;\n  method: string;\n  params?: Record<string, unknown>;\n}\n\nexport interface JsonRpcError {\n  code: number;\n  message: string;\n  data?: unknown;\n}\n\nexport interface JsonRpcResponse {\n  jsonrpc: \"2.0\";\n  id: string | number | null;\n  result?: unknown;\n  error?: JsonRpcError;\n}\n\n/** One exact downstream action explicitly authorized in the caller's chat. */\nexport interface A2AApprovedAction {\n  tool: string;\n  input: unknown;\n}\n\n/**\n * Telemetry-only cross-app correlation. Receivers must never use these\n * caller-supplied values for identity, ownership, org scoping, access, or\n * approval decisions.\n */\nexport interface A2ACorrelationMetadata {\n  callerApp?: string;\n  callerThreadId?: string;\n  parentRunId?: string;\n  parentTurnId?: string;\n  invocationId?: string;\n}\n\n// --- Framework config ---\n\nexport interface A2AHandlerContext {\n  taskId: string;\n  contextId?: string;\n  /** Metadata from the caller (e.g., userEmail for identity forwarding) */\n  metadata?: Record<string, unknown>;\n  /** Current H3 event when the handler is running inside an HTTP request. */\n  event?: unknown;\n  /** Exact one-time action grants from a JWT-authenticated caller. */\n  approvedActions?: A2AApprovedAction[];\n  writeArtifact: (name: string, content: string, mimeType?: string) => string;\n}\n\nexport interface A2AHandlerResult {\n  message: Message;\n  artifacts?: Artifact[];\n  /** Optional non-terminal state requested by the handler. */\n  taskState?: Extract<TaskState, \"input-required\">;\n}\n\nexport interface A2AApprovalExecution {\n  id: string;\n  taskId: string;\n  ownerEmail: string;\n  orgId?: string | null;\n  tool: string;\n  input: unknown;\n  approvalKey: string;\n  callId: string;\n}\n\n/** One explicitly exposed read-only app action invoked without an agent loop. */\nexport interface A2AReadOnlyActionInvocation {\n  action: string;\n  input: Record<string, unknown>;\n  invocationId: string;\n}\n\nexport interface A2AReadOnlyActionResult {\n  action: string;\n  status: \"completed\" | \"failed\";\n  output: string;\n}\n\nexport type A2AHandler = (\n  message: Message,\n  context: A2AHandlerContext,\n) => Promise<A2AHandlerResult> | AsyncGenerator<Message>;\n\nexport interface A2AConfig {\n  name: string;\n  /** Canonical receiver app id used only for telemetry attribution. */\n  appId?: string;\n  description: string;\n  version?: string;\n  skills: AgentSkill[];\n  /** If true, public agent-card discovery includes only explicit public-safe skills. */\n  publicSkillsOnly?: boolean;\n  handler?: A2AHandler;\n  apiKeyEnv?: string;\n  streaming?: boolean;\n  /** Route async A2A work through the app's durable background worker when available. */\n  durableBackgroundRuns?: boolean;\n  /** Execute a persisted, human-approved A2A tool call. */\n  executeApproval?: (approval: A2AApprovalExecution) => Promise<{\n    status: \"completed\" | \"failed\";\n    output: string;\n  }>;\n  /** Execute an explicitly exposed read-only action without starting a model. */\n  executeReadOnlyAction?: (\n    invocation: A2AReadOnlyActionInvocation,\n  ) => Promise<Pick<A2AReadOnlyActionResult, \"status\" | \"output\">>;\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/a2a/types.ts"],"names":[],"mappings":"","sourcesContent":["// A2A Protocol types (spec v0.3) + framework config types\nimport type { PublicAgentActionConfig } from \"../action.js\";\n\n// --- Parts (content atoms) ---\n\nexport interface TextPart {\n  type: \"text\";\n  text: string;\n}\n\nexport interface FilePart {\n  type: \"file\";\n  file: {\n    name?: string;\n    mimeType?: string;\n    bytes?: string;\n    uri?: string;\n  };\n}\n\nexport interface DataPart {\n  type: \"data\";\n  data: Record<string, unknown>;\n}\n\nexport type Part = TextPart | FilePart | DataPart;\n\n// --- Messages and Tasks ---\n\nexport interface Message {\n  role: \"user\" | \"agent\";\n  parts: Part[];\n  metadata?: Record<string, unknown>;\n}\n\nexport type TaskState =\n  | \"submitted\"\n  | \"working\"\n  | \"completed\"\n  | \"failed\"\n  | \"canceled\"\n  | \"input-required\";\n\nexport interface TaskStatus {\n  state: TaskState;\n  message?: Message;\n  timestamp: string;\n}\n\nexport interface Artifact {\n  name?: string;\n  description?: string;\n  parts: Part[];\n  metadata?: Record<string, unknown>;\n}\n\nexport interface Task {\n  id: string;\n  contextId?: string;\n  status: TaskStatus;\n  history?: Message[];\n  artifacts?: Artifact[];\n  metadata?: Record<string, unknown>;\n}\n\n// --- Agent Card ---\n\nexport interface AgentSkill {\n  id: string;\n  name: string;\n  description: string;\n  tags?: string[];\n  examples?: string[];\n  public?: boolean;\n  readOnly?: boolean;\n  requiresAuth?: boolean;\n  isConsequential?: boolean;\n  publicAgent?: PublicAgentActionConfig;\n}\n\nexport interface AgentCapabilities {\n  streaming?: boolean;\n  pushNotifications?: boolean;\n  stateTransitionHistory?: boolean;\n}\n\nexport interface AgentSecurityScheme {\n  type: string;\n  scheme?: string;\n  bearerFormat?: string;\n  in?: string;\n  name?: string;\n}\n\nexport interface AgentCard {\n  name: string;\n  description: string;\n  url: string;\n  version: string;\n  protocolVersion: \"0.3\";\n  capabilities: AgentCapabilities;\n  skills: AgentSkill[];\n  securitySchemes?: Record<string, AgentSecurityScheme>;\n  security?: Record<string, string[]>[];\n}\n\n// --- JSON-RPC ---\n\nexport interface JsonRpcRequest {\n  jsonrpc: \"2.0\";\n  id: string | number;\n  method: string;\n  params?: Record<string, unknown>;\n}\n\nexport interface JsonRpcError {\n  code: number;\n  message: string;\n  data?: unknown;\n}\n\nexport interface JsonRpcResponse {\n  jsonrpc: \"2.0\";\n  id: string | number | null;\n  result?: unknown;\n  error?: JsonRpcError;\n}\n\n/** One exact downstream action explicitly authorized in the caller's chat. */\nexport interface A2AApprovedAction {\n  tool: string;\n  input: unknown;\n}\n\n/** Structured provenance accepted only from an authenticated A2A caller. */\nexport interface A2ASourceContext {\n  platform: \"slack\";\n  sourceUrl: string;\n}\n\n/** Opaque reference that a receiver must resolve through its trusted Dispatch app. */\nexport interface A2ASourceContextReference {\n  platform: \"slack\";\n  integrationTaskId: string;\n}\n\n/**\n * Telemetry-only cross-app correlation. Receivers must never use these\n * caller-supplied values for identity, ownership, org scoping, access, or\n * approval decisions.\n */\nexport interface A2ACorrelationMetadata {\n  callerApp?: string;\n  callerThreadId?: string;\n  parentRunId?: string;\n  parentTurnId?: string;\n  invocationId?: string;\n}\n\n// --- Framework config ---\n\nexport interface A2AHandlerContext {\n  taskId: string;\n  contextId?: string;\n  /** Metadata from the caller (e.g., userEmail for identity forwarding) */\n  metadata?: Record<string, unknown>;\n  /** Current H3 event when the handler is running inside an HTTP request. */\n  event?: unknown;\n  /** Exact one-time action grants from a JWT-authenticated caller. */\n  approvedActions?: A2AApprovedAction[];\n  /** Receiver-validated provenance from a JWT-authenticated caller. */\n  sourceContext?: A2ASourceContext;\n  writeArtifact: (name: string, content: string, mimeType?: string) => string;\n}\n\nexport interface A2AHandlerResult {\n  message: Message;\n  artifacts?: Artifact[];\n  /** Optional non-terminal state requested by the handler. */\n  taskState?: Extract<TaskState, \"input-required\">;\n}\n\nexport interface A2AApprovalExecution {\n  id: string;\n  taskId: string;\n  ownerEmail: string;\n  orgId?: string | null;\n  tool: string;\n  input: unknown;\n  approvalKey: string;\n  callId: string;\n}\n\n/** One explicitly exposed read-only app action invoked without an agent loop. */\nexport interface A2AReadOnlyActionInvocation {\n  action: string;\n  input: Record<string, unknown>;\n  invocationId: string;\n}\n\nexport interface A2AReadOnlyActionResult {\n  action: string;\n  status: \"completed\" | \"failed\";\n  output: string;\n}\n\nexport type A2AHandler = (\n  message: Message,\n  context: A2AHandlerContext,\n) => Promise<A2AHandlerResult> | AsyncGenerator<Message>;\n\nexport interface A2AConfig {\n  name: string;\n  /** Canonical receiver app id used only for telemetry attribution. */\n  appId?: string;\n  description: string;\n  version?: string;\n  skills: AgentSkill[];\n  /** If true, public agent-card discovery includes only explicit public-safe skills. */\n  publicSkillsOnly?: boolean;\n  handler?: A2AHandler;\n  apiKeyEnv?: string;\n  streaming?: boolean;\n  /** Route async A2A work through the app's durable background worker when available. */\n  durableBackgroundRuns?: boolean;\n  /** Execute a persisted, human-approved A2A tool call. */\n  executeApproval?: (approval: A2AApprovalExecution) => Promise<{\n    status: \"completed\" | \"failed\";\n    output: string;\n  }>;\n  /** Execute an explicitly exposed read-only action without starting a model. */\n  executeReadOnlyAction?: (\n    invocation: A2AReadOnlyActionInvocation,\n  ) => Promise<Pick<A2AReadOnlyActionResult, \"status\" | \"output\">>;\n}\n"]}

package/dist/collab/routes.d.ts

@@ -26,8 +26,8 @@ export declare const getCollabState: import("h3").EventHandlerWithFetch<import("
  * Body: { update: string (base64), requestSource?: string }
  */
 export declare const postCollabUpdate: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/collab/struct-routes.d.ts

@@ -13,8 +13,8 @@
  * Body: { json: any, fieldName?: string, type?: "map"|"array", requestSource?: string }
  */
 export declare const postCollabJson: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/db/request-telemetry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"request-telemetry.d.ts","sourceRoot":"","sources":["../../src/db/request-telemetry.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,OAAO,CAAC;AAExD,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAwBD,wBAAgB,8BAA8B,IAAI,wBAAwB,CAezE;AAmBD,wBAAgB,6BAA6B,IACzC,wBAAwB,GACxB,SAAS,CAIZ;AAED,wBAAgB,+BAA+B,CAAC,CAAC,EAC/C,SAAS,EAAE,wBAAwB,EACnC,EAAE,EAAE,MAAM,CAAC,GACV,CAAC,CAEH;AAED,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,wBAAwB,GAClC,IAAI,CAEN;AAED,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,qBAAqB,GAC/B,CAAC,OAAO,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,KAAK,IAAI,CAiDpD;AAED,wBAAgB,mBAAmB,IAAI,IAAI,CAG1C"}
+{"version":3,"file":"request-telemetry.d.ts","sourceRoot":"","sources":["../../src/db/request-telemetry.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,OAAO,CAAC;AAExD,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAgDD,wBAAgB,8BAA8B,IAAI,wBAAwB,CAezE;AAmBD,wBAAgB,6BAA6B,IACzC,wBAAwB,GACxB,SAAS,CAIZ;AAED,wBAAgB,+BAA+B,CAAC,CAAC,EAC/C,SAAS,EAAE,wBAAwB,EACnC,EAAE,EAAE,MAAM,CAAC,GACV,CAAC,CAEH;AAED,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,wBAAwB,GAClC,IAAI,CAEN;AAED,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,qBAAqB,GAC/B,CAAC,OAAO,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,KAAK,IAAI,CAiDpD;AAED,wBAAgB,mBAAmB,IAAI,IAAI,CAG1C"}

package/dist/db/request-telemetry.js

@@ -1,10 +1,28 @@
-import { AsyncLocalStorage } from "node:async_hooks";
+import { getAsyncLocalStorageCtor } from "../shared/optional-node-builtins.js";
 const STORAGE_KEY = Symbol.for("@agent-native/core/db.request-telemetry-storage");
 const STARTUP_STATE_KEY = Symbol.for("@agent-native/core/db.startup-telemetry-state");
 const STARTUP_CAPTURE_WINDOW_MS = 120_000;
 const globalRef = globalThis;
-const storage = globalRef[STORAGE_KEY] ??
-    (globalRef[STORAGE_KEY] = new AsyncLocalStorage());
+// AsyncLocalStorage is resolved lazily, never at module load: this module can
+// land in the browser dev graph, where a top-level `new AsyncLocalStorage()`
+// would throw against Vite's externalized `node:async_hooks` stub. On non-Node
+// runtimes telemetry no-ops.
+const NOOP_STORAGE = {
+    getStore: () => undefined,
+    run: (_store, fn) => fn(),
+    enterWith: () => { },
+};
+function getStorage() {
+    const existing = globalRef[STORAGE_KEY];
+    if (existing)
+        return existing;
+    const Ctor = getAsyncLocalStorageCtor();
+    const created = Ctor
+        ? new Ctor()
+        : NOOP_STORAGE;
+    globalRef[STORAGE_KEY] = created;
+    return created;
+}
 export function createDatabaseRequestTelemetry() {
     return {
         operationCount: 0,
@@ -28,7 +46,7 @@ const startupState = globalRef[STARTUP_STATE_KEY] ??
         telemetry: createDatabaseRequestTelemetry(),
     });
 function currentDatabaseTelemetry() {
-    const requestTelemetry = storage.getStore();
+    const requestTelemetry = getStorage().getStore();
     if (requestTelemetry)
         return requestTelemetry;
     if (!startupState.claimed && Date.now() <= startupState.captureUntil) {
@@ -43,10 +61,10 @@ export function claimStartupDatabaseTelemetry() {
     return startupState.telemetry;
 }
 export function runWithDatabaseRequestTelemetry(telemetry, fn) {
-    return storage.run(telemetry, fn);
+    return getStorage().run(telemetry, fn);
 }
 export function enterDatabaseRequestTelemetry(telemetry) {
-    storage.enterWith(telemetry);
+    getStorage().enterWith(telemetry);
 }
 export function beginDatabaseOperation(operation) {
     const telemetry = currentDatabaseTelemetry();