@agenticprimitives/a2a 0.0.0-alpha.2 → 0.0.0-alpha.20

package/CLAUDE.md

@@ -5,6 +5,17 @@ Async, delegation-authorized **Agent-to-Agent task transport** (spec 269). Any c
 other claimed agent an asynchronous task and collects the result by poll / push / stream. Built on the
 `@agenticprimitives/fulfillment` Task substrate; the delegation primitive is the auth.
 
+## Agentic role (ADR-0044)
+A2A is the **agentic orchestration, intelligence, and discovery layer**: first-party web apps express
+INTENTS to an a2a agent, which decides *which MCP tools to compose* as primitives. Web NEVER constructs
+MCP tool calls directly. **Orchestration is a Ring-0 primitive** — the agentic loop, planner port, and tool
+model live in a pure `packages/*` orchestration core; ONLY the concrete LLM-framework binding (LangChain/
+OpenAI/Anthropic SDK) sits in a dedicated in-repo adapter behind the port (the `chain-state`+`chain-state-viem`
+pattern). This `a2a` package itself stays pure transport + delegation-auth: it carries tasks, enforces
+authority, and *runs* the orchestration core via the injected `SkillHandler` — it does not embed the LLM SDK.
+See [ADR-0044](../../docs/architecture/decisions/0044-a2a-is-the-agentic-orchestration-layer.md)
++ `docs/architecture/principles.md` §1.
+
 ## The boundary (ADR-0034 — READ FIRST)
 This package is the **transport-agnostic core**: the Task runtime over a `TaskStore` PORT, the
 `SkillHandler` contract + dispatcher, the JSON-RPC handlers, the `A2aWireAdapter` client, the
@@ -14,26 +25,43 @@ subpath. We DIVERGE from spec 245's `mcp-runtime/a2a` placement on purpose — `
 consumer (the receiving `withDelegation` gate + the a2a→mcp delivery leg), not the owner.
 
 ## Wave status
-- **W1 (done):** Task runtime core — `newTaskRecord`, `applyTransition` (fail-closed via
-  `canTaskTransition`), `dispatchTask` (skill dispatch; unknown→rejected; AuthRequired→auth-required;
-  throw→failed), the `TaskStore` port + in-memory impl, the `SkillHandler` contract.
-- **W2 (done):** delegation-auth gate `authorizeA2aMessage` (FR-4: delegate===requester, timestamp
-  window, allowedTargets=this-agent + allowedMethods=skill scoping, on-chain `isRevoked` + ERC-1271
-  injected fail-closed, signed message, single-use message-id) + `buildA2aGrantCaveats` + `hashA2aMessage`.
-- **W3 (done):** `createA2aAgent` (message/send → authorize + persist + return submitted; tasks/get +
-  tasks/cancel with party auth; `processDue` alarm body running `dispatchTask`; agent-card) +
-  `dispatchA2aRpc`/`handleA2aRpcBody` (JSON-RPC 2.0) + `A2aWireAdapter` (over an injected transport) +
-  the `./cloudflare` `createDurableObjectTaskStore` adapter.
-- **W4 (done):** vault body residency (`emitArtifact` writes the body to the assignee vault; only
-  hashes/refs in state) + signed push (`deliverPush`/`verifyPushEnvelope` — assignee signs the terminal
-  envelope, receiver verifies, bounded retry; wired into `processDue`) + `tasks/pushNotificationConfig/set`
-  + SSE framing (`formatSseEvent`/`isStreamEnd`). Poll is `tasks/get` (W3).
-- **W5 (done):** two-agent acceptance harness (`test/harness.test.ts`, AC-1..AC-4 — happy path, the
-  delegation-gate denials at the agent surface, a cross-vault entitlement deposit, the auth-required
-  round-trip via `resubmit`) + the demo-a2a relayer adoption (`apps/demo-a2a/src/a2a-task-do.ts`: a
-  per-agent `A2aTaskDO` running the real runtime over DO storage, ERC-1271 + isRevoked checks bound to
-  Base Sepolia, `alarm()`-driven `processDue`; `/api/a2a` forwards to it — the stub "received" is gone).
-  Added `resubmit` (auth-required → submitted) + `tasks/resubmit` routing this wave.
+W1–W5 of spec 269 are DONE (runtime, delegation-auth gate, `createA2aAgent` + JSON-RPC + client + the `./cloudflare`
+store, vault body residency + signed push + SSE, the two-agent acceptance harness + demo-a2a adoption). The spec's
+§9 decisions and `test/harness.test.ts` (AC-1..AC-4) are the record; this file says what the package IS now.
+
+## THE WIRE — A2A 1.0, and only that (spec 372, folded at S4)
+`src/standard/` IS the wire: A2A **1.0** as the official TCK tests it (PascalCase methods, proto-JSON
+shapes, `A2A-Version`, ErrorInfo on every A2A error, SSE, push). There is no second set of method names —
+`message/send` / `tasks/get` and `jsonrpc.ts` are DELETED, not deprecated.
+
+- `createStandardA2aServer({card, executor, principal?, canSeeTask?, beforeSend?, onCancel?})` — fetch-shaped;
+  the executor emits events through `ctx` and knows no transport.
+- **Authority rides as an extension.** `standard/delegated.ts`: a `SendMessage` carrying
+  `AP_DELEGATED_TASK_EXTENSION` in `message.metadata` is a delegation-authorized task — the grant, the
+  requester, and the ENVELOPE the sender signed. `createAgentBackedServer` (`standard/from-agent.ts`) puts
+  the `createA2aAgent` runtime behind it; every gate (`authorizeA2aMessage`, `hashA2aMessage`, revocation)
+  is the one that was always there, and the runtime keeps its own task ids.
+- **Two facts, kept apart.** The `Authorization` header says who is CALLING (`caller.ts`: a Home session
+  bearer, or an agent's session wire). The envelope's signature says who AUTHORED the message. A relay may
+  carry a message it did not write, so collapsing them would delete a gate.
+- A **door, never a grant**: `principal` is admission (ADR-0057); authority is the extension + the gates.
+- `canSeeTask` is not optional in a deployment that holds other people's tasks: a non-party is answered
+  TaskNotFound, because saying "forbidden" confirms it exists.
+- `tck/sut.mjs` + `scripts/run-a2a-tck.sh` = the TCK in CI (`a2a-tck.yml`), green at MUST/SHOULD/MAY.
+- `./conform` = `ap conform a2a <url>` (spec 399 §2.3): `conformA2a` probes a LIVE agent's card + binding
+  (MUSTs flip `ok`; a door without a bearer stops, and says so). Bin `a2a-conform`.
+
+## Promoted from the runtime app (spec 399 §4, W0) — protocol, not product
+- `standard/mount.ts` — mounting this surface in front of a harness: `withStandardCardFields` (the 1.0 card
+  fields), `isRuntimeTaskId`, `runtimeBackedTaskStore` (ONE view over the runtime's tasks + this server's),
+  `principalBySchemes` (`Bearer` = person, `A2A-Session` = agent — never each other's fallback, ADR-0013),
+  `delegatedDispatch` (delegated task → the runtime; engagement probe → a message), `settlementForReplyKind`
+  (spec 372 S4's reply-kind → task-state table) + `settleTask`.
+- `subject-hop.ts` — the routed hop over the one wire (spec 366 R4 / 374 §4 / 376): `sendSubjectAskOverWire`
+  resolves through the card (`a2aEndpointOf`, digest pin), `subjectAskOf` / `subjectAnswerOf` / `handoffOf`
+  read the profiles, `SUBJECT_ANSWER_ARTIFACT` carries the receiver's envelope verbatim.
+- `wire-verify.ts` — `verifyDelegationWire`: the delegate-key tail every A2A service repeats (identity,
+  caveats, revocation, signature — one boolean, fail-closed). Caveat SHAPE policy stays with the product.
 
 ## Read first
 1. `capability.manifest.json` — boundary.
@@ -43,7 +71,9 @@ consumer (the receiving `withDelegation` gate + the a2a→mcp delivery leg), not
 
 ## Allowed imports
 `@agenticprimitives/types`, `@agenticprimitives/fulfillment` (Task/Artifact types), `@agenticprimitives/delegation`
-(verify + caveats), `viem`. The `./cloudflare` subpath additionally uses `@cloudflare/workers-types` (dev).
+(verify + caveats), `@agenticprimitives/verification-receipts` (spec 303 W3 — the message/send + resubmit
+mint point behind `config.receipts`), `viem`. The `./cloudflare` subpath additionally uses
+`@cloudflare/workers-types` (dev).
 
 ## Forbidden imports
 - `apps/*`
@@ -60,6 +90,13 @@ consumer (the receiving `withDelegation` gate + the a2a→mcp delivery leg), not
   never reaches another principal's namespace.
 - No long-lived signing key for a claimed agent — KMS/session signer only (ties to spec-235 §10).
 
+## Agent-card audiences (spec 338 §8)
+`agentCard(forAudience?)` projects by `SkillHandler.exposure` (`public` | `authenticated` | `private` | `service-only`;
+omitted ⇒ **public**, so an existing well-known route cannot start leaking). **Passing an audience is not
+authenticating one**: `createCardAudienceResolver` verifies a signed challenge (nonce consumed BEFORE the signature
+read; `x-ap-*` HEADERS, never the query string) and **degrades to `public` on every failure**; `privateViewPolicy` is a
+SEPARATE injected decision (omit ⇒ capped at `authenticated`). Visibility is DISCLOSURE, not authorization.
+
 ## Validate
 ```bash
 pnpm --filter @agenticprimitives/a2a typecheck

package/bin/a2a-conform.mjs

@@ -0,0 +1,17 @@
+#!/usr/bin/env node
+// a2a-conform — `ap conform a2a <url>` (spec 399 §2.3): probe an A2A 1.0 agent on the JSON-RPC binding.
+//
+//   a2a-conform https://agent.example            (the card at /.well-known/agent-card.json)
+//   a2a-conform <url> --bearer <token>           (the bearer the surface admits — a Home session, a session wire)
+//   a2a-conform <url> --json                     (the report as JSON, for a CI step)
+//
+// Exit 1 when a MUST failed; SHOULD and MAY are reported, never gating.
+import { conformA2a, formatConformanceReport } from '../dist/conform/index.js';
+
+const argv = process.argv.slice(2);
+const url = argv.find((a) => !a.startsWith('--'));
+const opt = (name) => { const eq = argv.find((a) => a.startsWith(`--${name}=`)); if (eq) return eq.slice(name.length + 3); const i = argv.indexOf(`--${name}`); return i >= 0 ? argv[i + 1] : undefined; };
+if (!url) { console.error('usage: a2a-conform <agent-origin-or-card-url> [--bearer <token>] [--timeout <ms>] [--json]'); process.exit(2); }
+const report = await conformA2a(url, { bearer: opt('bearer') ?? process.env.A2A_BEARER, timeoutMs: opt('timeout') ? Number(opt('timeout')) : undefined });
+console.log(argv.includes('--json') ? JSON.stringify(report, null, 2) : formatConformanceReport(report));
+process.exit(report.ok ? 0 : 1);

package/dist/agent.d.ts

@@ -4,9 +4,62 @@ import type { Delegation } from '@agenticprimitives/delegation';
 import type { Task, TaskEvent, A2aMessage, VaultRef } from './types.js';
 import type { TaskStore } from './task-store.js';
 import { type SkillHandler, type VaultClient, type McpClient } from './skill-handler.js';
-import { type OnChainChecks } from './auth.js';
+import { type OnChainChecks, type ScopeCovers } from './auth.js';
+import { mintVerificationReceipt, type ReceiptProof, type Sha256, type VerificationReceiptV1 } from '@agenticprimitives/verification-receipts';
 import type { A2aEnforcers } from './grant.js';
 import { type TerminalSigner, type PushSender } from './push.js';
+import { type ApAuthorityExtensionParams } from './authority-extension.js';
+import { type PaymentGate, type SkillPayment } from './payment-gate.js';
+/**
+ * Spec 290 §6 Stage-3 — an injected per-Smart-Agent HARD budget. STRUCTURAL (no `rate-control` import —
+ * ADR-0034 keeps this package transport/vendor-agnostic); the app wires a `rate-control` HardBudgetStore
+ * adapter. The runtime reserves AFTER authority (keyed by the verified principal), COMMITS only once the
+ * task is durably created, and RELEASES on any pre-creation failure (the spec §3 A2A pattern). Additive to
+ * the on-chain enforcers, never the authority for value movement (ADR-0041). Omit ⇒ no Stage-3 budget.
+ */
+export interface A2aBudgetPort {
+    reserve(input: {
+        sponsorAgent: Address;
+        capabilityId: string;
+        idempotencyKey: string;
+    }): Promise<{
+        allowed: boolean;
+        reservationId?: string;
+    }>;
+    commit(reservationId: string): Promise<void>;
+    release(reservationId: string): Promise<void>;
+}
+/**
+ * Spec 303 W3 — verification receipts on the A2A ingress. Mirrors mcp-runtime's
+ * `ReceiptsConfig`: the agent mints a commitment-split `VerificationReceiptV1`
+ * at message/send + resubmit terminal decisions (allow after durable accept;
+ * deny with the PUBLIC rpc message as the coarse reason — the raw auth reason
+ * is already suppressed, NEW-A2A-1) and hands the pair to `onReceipt`. The
+ * public receipt also rides the accept result so the SENDER retains it.
+ * Absent ⇒ no receipts, byte-identical behavior (INV-303-5).
+ */
+export interface A2aReceiptsConfig {
+    /** The verifying agent identity stamped into receipts (this agent's SA — Mode-1 public). */
+    verifier: string;
+    policyVersion: string;
+    onReceipt: (minted: Awaited<ReturnType<typeof mintVerificationReceipt>>, ctx: {
+        outcome: 'allow' | 'deny';
+        messageId: Hex;
+        skill: string;
+        taskId?: Hex;
+    }) => Promise<void>;
+    /** Injected signer over the canonical receiptHash. Omit ⇒ unsigned (integrity-only). */
+    sign?: (receiptHash: Sha256) => Promise<ReceiptProof>;
+    /** Duty-3 evidence provider (latest block); omit ⇒ blockNumber '0' + zero hash. */
+    statusEvidence?: () => Promise<{
+        blockNumber: string;
+        blockHash: Hex;
+    }>;
+    /** Per-relationship receipt key; omit ⇒ fresh key per receipt. */
+    receiptKey?: Hex;
+    /** `true` ⇒ a failed mint/onReceipt aborts the call (spec 291 §5 posture). Default fail-soft. */
+    failClosed?: boolean;
+}
 export interface A2aAgentConfig {
     /** This agent's Smart Account — the assignee + the allowedTargets the gate requires. */
     agentSA: Address;
@@ -16,7 +69,25 @@ export interface A2aAgentConfig {
     enforcers: A2aEnforcers;
     taskStore: TaskStore;
     checks: OnChainChecks;
+    /** FR-4.2 scope classes for `allowedTargets` — see `ScopeCovers` in auth.ts. Omit ⇒ exact match only. */
+    scopeCovers?: ScopeCovers;
     handlers: SkillHandler[];
+    /**
+     * Resolve a method the static `handlers` list does not contain — the METHOD-FAMILY seam.
+     *
+     * (`skill` is this protocol's name for the string a message addresses; the authorization layer
+     * calls the same value a METHOD — `skillSelector` reduces it to a `bytes4` the ALLOWED_METHODS
+     * enforcer checks. Family members are methods, not necessarily distinct implementations.)
+     *
+     * Consulted only on a registry miss, so it can never shadow a registered handler. It exists for
+     * agents whose method set is DATA rather than code: one hosting a set of archetypes defined in
+     * its own library answers `archetype.<slug>` for whatever that library declares, and adding a role
+     * is a library write instead of a redeploy. Returning undefined leaves the task rejected as
+     * `unknown skill`, exactly as before.
+     */
+    resolveHandler?: (skill: string) => SkillHandler | undefined;
+    /** Extra methods to advertise on the agent card for a family the handlers array cannot list. */
+    dynamicSkills?: () => string[];
     vault: VaultClient;
     mcp: McpClient;
     /** Clock + id generators — injected for determinism in tests. */
@@ -29,9 +100,45 @@ export interface A2aAgentConfig {
      *  be a KMS/session signer for the assignee SA (SR-8). */
     signTerminal?: TerminalSigner;
     pushSender?: PushSender;
+    /**
+     * What this deployment actually MOUNTED, for the Agent Card's capability block (ADR-0059).
+     *
+     * `streaming` is not knowable from here: `message/stream` is served by the SSE transport, which the
+     * embedding worker mounts (`dispatchA2aRpc` explicitly rejects it). So the deployment declares it,
+     * and the default is FALSE — an agent that has not said it streams is assumed not to, because the
+     * cost of over-claiming is a peer that opens a stream which never arrives.
+     *
+     * `pushNotifications` is NOT taken from here: it is DERIVED from whether push is actually wired
+     * (`signTerminal` + `pushSender`), because that is knowable and a config flag could contradict it.
+     */
+    declaredCapabilities?: {
+        streaming?: boolean;
+        stateTransitionHistory?: boolean;
+    };
+    /**
+     * The authority model this agent's Card declares (ADR-0059 / spec 341 §2.1).
+     *
+     * Omit and the Card says nothing about how to authenticate — which is the state that made "an
+     * external agent can use the same skills the Home uses" unreachable. It is optional only so the
+     * bump is non-breaking; a deployment serving peer-callable skills SHOULD set it.
+     */
+    authority?: ApAuthorityExtensionParams;
     /** FR-3.6 — the policy gating skill-handler hand-offs (`requestHandoff`). Omit ⇒ hand-offs are
      *  rejected (fail-closed). */
     handoffPolicy?: HandoffPolicy;
+    /** Spec 272 PAY-A2A — the injected x402 payment gate. When a priced skill (handler.payment) is
+     *  invoked, the gate decides paid/unpaid (the app wires the payments x402 rail). Omit ⇒ priced skills
+     *  behave as free (dev / unpriced deployment). */
+    paymentGate?: PaymentGate;
+    /** Spec 290 §6 Stage-3 — the per-Smart-Agent hard-budget port (post-authority, keyed by the verified
+     *  principal). Omit ⇒ no Stage-3 budget (authority + single-use message-id still apply). */
+    budget?: A2aBudgetPort;
+    /** N-2 (seam audit): when set, read/control caller signatures (tasks/get, tasks/cancel,
+     *  pushNotificationConfig/set) MUST carry a recent `issuedAt` (within this many seconds) — bounding
+     *  replay of a captured signature to the window. Omit ⇒ no freshness requirement (legacy behavior). */
+    callerSigMaxAgeSec?: number;
+    /** Spec 303 W3 — verification receipts at the message/send + resubmit terminals. Omit ⇒ none. */
+    receipts?: A2aReceiptsConfig;
 }
 export type RpcOk<T> = {
     ok: true;
@@ -60,42 +167,83 @@ export interface ResubmitParams extends MessageSendParams {
     taskId: Hex;
 }
 export interface A2aAgent {
+    /** `receipt` (spec 303 W3): the PUBLIC verification receipt for the accept — commitment-only,
+     *  retained by the SENDER independently of this agent. Present only when `config.receipts` is set. */
     messageSend(params: MessageSendParams): Promise<RpcResult<{
         taskId: Hex;
         state: Task['state'];
+        receipt?: VerificationReceiptV1;
     }>>;
     /** Resume an auth-required task (auth-required → submitted) with a fresh grant + message (FR-3.5). */
     resubmit(params: ResubmitParams): Promise<RpcResult<{
         taskId: Hex;
         state: Task['state'];
+        receipt?: VerificationReceiptV1;
     }>>;
     tasksGet(params: {
         taskId: Hex;
         caller: Address;
+        signature: Hex;
+        issuedAt?: number;
     }): Promise<RpcResult<Task & {
         error?: string;
         artifactRefs: VaultRef[];
     }>>;
+    /** Read ONE artifact's BODY. `tasks/get` returns refs only, and an artifact body lives in the
+     *  ASSIGNEE's vault — so without this a party to a task can see that a result exists and never
+     *  read it, which makes every A2A skill that produces a document unusable to its own requester.
+     *  Adds NO authority: same signed-digest proof and same sender-or-assignee test as `tasks/get`,
+     *  returning the body that party is already entitled to. The artifactId is bound into the
+     *  signature (N-1) so a captured one cannot be replayed for a different artifact. */
+    tasksArtifact(params: {
+        taskId: Hex;
+        artifactId: Hex;
+        caller: Address;
+        signature: Hex;
+        issuedAt?: number;
+    }): Promise<RpcResult<{
+        artifactId: Hex;
+        artifactKind?: string;
+        bodyRef: VaultRef;
+        body: unknown;
+    }>>;
     tasksCancel(params: {
         taskId: Hex;
         caller: Address;
+        signature: Hex;
+        issuedAt?: number;
     }): Promise<RpcResult<{
         taskId: Hex;
         state: Task['state'];
     }>>;
-    /** Register the push webhook for a task (FR-5.2). Party-authed. */
+    /** Cancel for a caller the TRANSPORT authenticated (spec 372 S4) — same party test, no per-request
+     *  signature, and callable only from a surface that has already proved who is asking. */
+    tasksCancelAs(params: {
+        taskId: Hex;
+        caller: Address;
+    }): Promise<RpcResult<{
+        taskId: Hex;
+        state: Task['state'];
+    }>>;
+    /** Register the push webhook for a task (FR-5.2). Signed-caller + party-authed (NEW-A2A-2). */
     pushConfigSet(params: {
         taskId: Hex;
         caller: Address;
+        signature: Hex;
         url: string;
         token?: string;
+        issuedAt?: number;
     }): Promise<RpcResult<{
         taskId: Hex;
         registered: true;
     }>>;
     /** The alarm() body — process every due task to a next state. Returns the events to fan out (W4 delivery). */
     processDue(): Promise<TaskEvent[]>;
-    agentCard(): AgentCard;
+    /**
+     * Build the agent card for an audience. Omitted ⇒ `public` — so an existing caller that serves
+     * `/.well-known/agent-card.json` keeps serving a PUBLIC card, never an extended one by accident.
+     */
+    agentCard(forAudience?: AgentCardAudience): AgentCard;
 }
 export interface AgentCard {
     name: string;
@@ -105,10 +253,30 @@ export interface AgentCard {
         streaming: boolean;
         pushNotifications: boolean;
         stateTransitionHistory: boolean;
+        /** PAY-A2A-4 — declared extensions (e.g. x402 pay-per-use); clients activate via X-A2A-Extensions. */
+        extensions?: {
+            uri: string;
+            required: boolean;
+            description: string;
+        }[];
     };
+    /** Priced skills annotate their `payment` so clients learn the price BEFORE calling. */
     skills: {
         id: string;
+        payment?: SkillPayment;
     }[];
 }
+/**
+ * Who is asking for the card (spec 338 §8).
+ *
+ * `authenticated` and `private` MUST only be passed once the caller has been genuinely
+ * authenticated — this type does not verify anything, it records a verdict the caller already
+ * reached. Passing `'private'` for an unauthenticated request is how an extended card leaks.
+ */
+export interface AgentCardAudience {
+    audience: 'public' | 'authenticated' | 'private';
+    /** The VERIFIED requester. Required for `private`; absent ⇒ no private skill matches. */
+    requester?: string;
+}
 export declare function createA2aAgent(config: A2aAgentConfig): A2aAgent;
 //# sourceMappingURL=agent.d.ts.map

package/dist/agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,KAAK,EAAE,IAAI,EAAc,SAAS,EAAE,UAAU,EAAe,QAAQ,EAAc,MAAM,YAAY,CAAC;AAE7G,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAsB,KAAK,YAAY,EAAE,KAAK,WAAW,EAAE,KAAK,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC7G,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,WAAW,CAAC;AACpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAe,KAAK,cAAc,EAAE,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAE9E,MAAM,WAAW,cAAc;IAC7B,wFAAwF;IACxF,OAAO,EAAE,OAAO,CAAC;IACjB,qFAAqF;IACrF,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,SAAS,EAAE,YAAY,CAAC;IACxB,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,KAAK,EAAE,WAAW,CAAC;IACnB,GAAG,EAAE,SAAS,CAAC;IACf,iEAAiE;IACjE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,GAAG,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,GAAG,CAAC;IAC1B,iGAAiG;IACjG,QAAQ,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,GAAG,CAAC;IACjC;8DAC0D;IAC1D,YAAY,CAAC,EAAE,cAAc,CAAC;IAC9B,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;kCAC8B;IAC9B,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED,MAAM,MAAM,KAAK,CAAC,CAAC,IAAI;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,CAAC,CAAA;CAAE,CAAC;AAC/C,MAAM,MAAM,MAAM,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAClE,MAAM,MAAM,SAAS,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC;AAE7C,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,UAAU,CAAC;IACpB,4EAA4E;IAC5E,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9C;AAED;wGACwG;AACxG,MAAM,WAAW,cAAe,SAAQ,iBAAiB;IACvD,MAAM,EAAE,GAAG,CAAC;CACb;AAED,MAAM,WAAW,QAAQ;IACvB,WAAW,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,SAAS,CAAC;QAAE,MAAM,EAAE,GAAG,CAAC;QAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC,CAAC;IAClG,sGAAsG;IACtG,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC;QAAE,MAAM,EAAE,GAAG,CAAC;QAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC,CAAC;IAC5F,QAAQ,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,GAAG,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,GAAG;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,QAAQ,EAAE,CAAA;KAAE,CAAC,CAAC,CAAC;IAC5H,WAAW,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,GAAG,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC;QAAE,MAAM,EAAE,GAAG,CAAC;QAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC,CAAC;IACjH,mEAAmE;IACnE,aAAa,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,GAAG,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC;QAAE,MAAM,EAAE,GAAG,CAAC;QAAC,UAAU,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC,CAAC;IAC5I,8GAA8G;IAC9G,UAAU,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IACnC,SAAS,IAAI,SAAS,CAAC;CACxB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,iBAAiB,EAAE,OAAO,CAAC;QAAC,sBAAsB,EAAE,OAAO,CAAA;KAAE,CAAC;IAClG,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC1B;AAOD,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,QAAQ,CAiL/D"}
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,KAAK,EAAE,IAAI,EAAc,SAAS,EAAE,UAAU,EAAe,QAAQ,EAAc,MAAM,YAAY,CAAC;AAE7G,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAsB,KAAK,YAAY,EAAE,KAAK,WAAW,EAAE,KAAK,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC7G,OAAO,EACe,KAAK,aAAa,EAAE,KAAK,WAAW,EAAE,MAAM,WAAW,CAAC;AAI9E,OAAO,EACL,uBAAuB,EACvB,KAAK,YAAY,EAEjB,KAAK,MAAM,EACX,KAAK,qBAAqB,EAC3B,MAAM,0CAA0C,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAe,KAAK,cAAc,EAAE,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAC9E,OAAO,EAAwB,KAAK,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACjG,OAAO,EAA0B,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEhG;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,KAAK,EAAE;QAAE,YAAY,EAAE,OAAO,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/I,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,OAAO,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/C;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,4FAA4F;IAC5F,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,CACT,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC,EAC3D,GAAG,EAAE;QAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC;QAAC,SAAS,EAAE,GAAG,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,GAAG,CAAA;KAAE,KAC5E,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,wFAAwF;IACxF,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IACtD,mFAAmF;IACnF,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC;IACxE,kEAAkE;IAClE,UAAU,CAAC,EAAE,GAAG,CAAC;IACjB,iGAAiG;IACjG,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,wFAAwF;IACxF,OAAO,EAAE,OAAO,CAAC;IACjB,qFAAqF;IACrF,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,SAAS,EAAE,YAAY,CAAC;IACxB,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,EAAE,aAAa,CAAC;IACtB,yGAAyG;IACzG,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB;;;;;;;;;;;;OAYG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,YAAY,GAAG,SAAS,CAAC;IAC7D,gGAAgG;IAChG,aAAa,CAAC,EAAE,MAAM,MAAM,EAAE,CAAC;IAC/B,KAAK,EAAE,WAAW,CAAC;IACnB,GAAG,EAAE,SAAS,CAAC;IACf,iEAAiE;IACjE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,GAAG,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,GAAG,CAAC;IAC1B,iGAAiG;IACjG,QAAQ,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,GAAG,CAAC;IACjC;8DAC0D;IAC1D,YAAY,CAAC,EAAE,cAAc,CAAC;IAC9B,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;;;;;;;;;;OAUG;IACH,oBAAoB,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,sBAAsB,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACjF;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,0BAA0B,CAAC;IACvC;kCAC8B;IAC9B,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;sDAEkD;IAClD,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;gGAC4F;IAC5F,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;2GAEuG;IACvG,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iGAAiG;IACjG,QAAQ,CAAC,EAAE,iBAAiB,CAAC;CAC9B;AAED,MAAM,MAAM,KAAK,CAAC,CAAC,IAAI;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,CAAC,CAAA;CAAE,CAAC;AAC/C,MAAM,MAAM,MAAM,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAClE,MAAM,MAAM,SAAS,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC;AAE7C,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,UAAU,CAAC;IACpB,4EAA4E;IAC5E,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9C;AAED;wGACwG;AACxG,MAAM,WAAW,cAAe,SAAQ,iBAAiB;IACvD,MAAM,EAAE,GAAG,CAAC;CACb;AAED,MAAM,WAAW,QAAQ;IACvB;0GACsG;IACtG,WAAW,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,SAAS,CAAC;QAAE,MAAM,EAAE,GAAG,CAAC;QAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAAC,OAAO,CAAC,EAAE,qBAAqB,CAAA;KAAE,CAAC,CAAC,CAAC;IACnI,sGAAsG;IACtG,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC;QAAE,MAAM,EAAE,GAAG,CAAC;QAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAAC,OAAO,CAAC,EAAE,qBAAqB,CAAA;KAAE,CAAC,CAAC,CAAC;IAI7H,QAAQ,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,GAAG,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,GAAG,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,GAAG;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,QAAQ,EAAE,CAAA;KAAE,CAAC,CAAC,CAAC;IAC/J;;;;;yFAKqF;IACrF,aAAa,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,GAAG,CAAC;QAAC,UAAU,EAAE,GAAG,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,GAAG,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC;QAAE,UAAU,EAAE,GAAG,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,QAAQ,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC,CAAC;IAC9M,WAAW,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,GAAG,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,GAAG,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC;QAAE,MAAM,EAAE,GAAG,CAAC;QAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC,CAAC;IACpJ;6FACyF;IACzF,aAAa,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,GAAG,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC;QAAE,MAAM,EAAE,GAAG,CAAC;QAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC,CAAC;IACnH,+FAA+F;IAC/F,aAAa,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,GAAG,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,GAAG,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC;QAAE,MAAM,EAAE,GAAG,CAAC;QAAC,UAAU,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC,CAAC;IAC/K,8GAA8G;IAC9G,UAAU,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IACnC;;;OAGG;IACH,SAAS,CAAC,WAAW,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;CACvD;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE;QACZ,SAAS,EAAE,OAAO,CAAC;QACnB,iBAAiB,EAAE,OAAO,CAAC;QAC3B,sBAAsB,EAAE,OAAO,CAAC;QAChC,sGAAsG;QACtG,UAAU,CAAC,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,OAAO,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;KACxE,CAAC;IACF,wFAAwF;IACxF,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,YAAY,CAAA;KAAE,EAAE,CAAC;CAClD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,QAAQ,GAAG,eAAe,GAAG,SAAS,CAAC;IACjD,yFAAyF;IACzF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAoCD,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,QAAQ,CA0a/D"}