@atrib/agent 0.1.0

package/dist/adapters/vercel-ai-sdk-mcp.d.ts

@@ -0,0 +1,129 @@
+/**
+ * Adapter: attribute MCP tool calls flowing through a Vercel AI SDK MCP client.
+ *
+ * The Vercel AI SDK exposes `createMCPClient()` (and the legacy
+ * `experimental_createMCPClient()`) from `@ai-sdk/mcp`. The returned client is
+ * NOT a `@modelcontextprotocol/sdk` Client. it has its own JSON-RPC
+ * implementation (verified against `@ai-sdk/mcp@1.0.35`'s `dist/index.mjs`).
+ * This means our `wrapMcpClient` adapter (which expects the structural shape
+ * of `@modelcontextprotocol/sdk` Client) does not apply directly.
+ *
+ * Two structural differences make this adapter necessary:
+ *
+ *   1. **`callTool` shape mismatch.** `@ai-sdk/mcp` MCPClient.callTool takes
+ *      `{ name, args, options }` (verified at `dist/index.mjs:1814`),
+ *      whereas `@modelcontextprotocol/sdk` Client.callTool takes
+ *      `{ name, arguments, _meta }`. Different field names, and
+ *      `@ai-sdk/mcp` does not pass `_meta` through to the request layer at
+ *      all. it builds the request as `{ method: 'tools/call', params: { name, arguments: args } }`
+ *      with no `_meta` field (`dist/index.mjs:1819`).
+ *
+ *   2. **`tools()` builds AI-SDK-shaped tool definitions whose execute()
+ *      callbacks pass through `extractStructuredContent`** when an
+ *      outputSchema is set, which DROPS the `_meta` field from the result
+ *      envelope (`dist/index.mjs:1989-1991`). Wrapping at the AI SDK execute
+ *      layer would lose attribution data for any structured-output tool.
+ *
+ * The right integration point is **`MCPClient.request()`**. the JSON-RPC
+ * bottleneck through which every tools/call (and tools/list, resources/read,
+ * etc.) flows on its way to the transport (`dist/index.mjs:1750`). Patching
+ * here lets us:
+ *
+ *   - Inject `_meta` (atrib token, traceparent, tracestate, baggage,
+ *     X-Atrib-Chain) into the outbound request.params, so the upstream MCP
+ *     server sees a properly contextualized tools/call request
+ *   - Receive the raw CallToolResult before any AI-SDK-specific transformation,
+ *     so our interceptor's `onAfterToolResponse` gets the original `_meta`
+ *     including any `atrib` token from the server side
+ *
+ * Symmetry with the server side: `@atrib/mcp` patches
+ * `McpServer.server.setRequestHandler(CallToolRequestSchema, ...)`. This
+ * adapter patches `MCPClient.request` for outbound `tools/call`. Same pattern,
+ * opposite end of the wire.
+ */
+import type { ToolCallInterceptor } from '../middleware.js';
+/**
+ * Minimal structural type for an `@ai-sdk/mcp` MCPClient. Mirrors the public
+ * surface we depend on without importing from `@ai-sdk/mcp` (we don't want a
+ * hard dependency on the AI SDK package).
+ *
+ * The `request` method is typed loosely (`unknown` return) because the actual
+ * `@ai-sdk/mcp` implementation uses Zod-derived result types that vary per
+ * call. The runtime-injected `_meta` we care about is a structural field on
+ * the request params, not a typed contract.
+ */
+export interface VercelAiSdkMcpClientLike {
+    request(args: {
+        request: {
+            method: string;
+            params?: Record<string, unknown> | undefined;
+        };
+        resultSchema?: unknown;
+        options?: {
+            signal?: AbortSignal | undefined;
+        } | undefined;
+    }): Promise<unknown>;
+}
+/** Options for `attributeVercelAiSdkMcp`. */
+export interface AttributeVercelAiSdkMcpOptions {
+    /** The atrib interceptor that observes tool calls on this client. */
+    interceptor: ToolCallInterceptor;
+    /**
+     * Canonical URL of the MCP server this client connects to. Used by the
+     * interceptor for content_id derivation when emitting Path 2 transaction
+     * records (the agent fallback path described in spec §5.4.5). Recommended
+     * for any production setup; required for stdio upstreams (where no host
+     * header is available).
+     */
+    serverUrl?: string;
+}
+/**
+ * Patch a Vercel AI SDK MCP client so every outbound `tools/call` flows
+ * through atrib's interceptor lifecycle.
+ *
+ * Mutates the passed client in place by replacing its `request` method with
+ * a wrapped version. Returns the same client reference for convenience.
+ *
+ * Idempotent: calling this helper twice on the same client is a no-op the
+ * second time.
+ *
+ * Order: this helper can be called BEFORE or AFTER `mcpClient.tools()`. The
+ * AI SDK builds tool execute() callbacks that read `client.request` at
+ * invocation time, not at build time, so subsequent tool invocations will
+ * use the patched method regardless of when you patch.
+ *
+ * Usage:
+ *
+ *   import { createMCPClient } from '@ai-sdk/mcp'
+ *   import { streamText } from 'ai'
+ *   import { atrib, attributeVercelAiSdkMcp } from '@atrib/agent'
+ *
+ *   const interceptor = atrib({
+ *     creatorKey: process.env.ATRIB_PRIVATE_KEY,
+ *     merchantDomain: 'https://merchant.example.com',
+ *     serverUrls: ['https://my-tool.example'],
+ *   })
+ *
+ *   const mcpClient = await createMCPClient({
+ *     transport: { type: 'http', url: 'https://my-tool.example/mcp' },
+ *   })
+ *
+ *   attributeVercelAiSdkMcp(mcpClient, {
+ *     interceptor,
+ *     serverUrl: 'https://my-tool.example',
+ *   })
+ *
+ *   const tools = await mcpClient.tools()
+ *
+ *   const result = await streamText({
+ *     model: openai('gpt-4o'),
+ *     tools,
+ *     prompt: 'What can you do?',
+ *     onFinish: async () => {
+ *       await mcpClient.close()
+ *       await interceptor.flush()
+ *     },
+ *   })
+ */
+export declare function attributeVercelAiSdkMcp<C extends VercelAiSdkMcpClientLike>(client: C, options: AttributeVercelAiSdkMcpOptions): C;
+//# sourceMappingURL=vercel-ai-sdk-mcp.d.ts.map

package/dist/adapters/vercel-ai-sdk-mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vercel-ai-sdk-mcp.d.ts","sourceRoot":"","sources":["../../src/adapters/vercel-ai-sdk-mcp.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAQ3D;;;;;;;;;GASG;AACH,MAAM,WAAW,wBAAwB;IACvC,OAAO,CAAC,IAAI,EAAE;QACZ,OAAO,EAAE;YACP,MAAM,EAAE,MAAM,CAAA;YACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAA;SAC7C,CAAA;QACD,YAAY,CAAC,EAAE,OAAO,CAAA;QACtB,OAAO,CAAC,EAAE;YAAE,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;SAAE,GAAG,SAAS,CAAA;KAC3D,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACrB;AAED,6CAA6C;AAC7C,MAAM,WAAW,8BAA8B;IAC7C,qEAAqE;IACrE,WAAW,EAAE,mBAAmB,CAAA;IAEhC;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,wBAAgB,uBAAuB,CAAC,CAAC,SAAS,wBAAwB,EACxE,MAAM,EAAE,CAAC,EACT,OAAO,EAAE,8BAA8B,GACtC,CAAC,CAyEH"}

package/dist/adapters/vercel-ai-sdk-mcp.js

@@ -0,0 +1,115 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Marker symbol set on a patched client to make repeated calls to
+ * `attributeVercelAiSdkMcp` idempotent.
+ */
+const ATRIB_PATCHED = Symbol.for('atrib.vercel-ai-sdk.patched');
+/**
+ * Patch a Vercel AI SDK MCP client so every outbound `tools/call` flows
+ * through atrib's interceptor lifecycle.
+ *
+ * Mutates the passed client in place by replacing its `request` method with
+ * a wrapped version. Returns the same client reference for convenience.
+ *
+ * Idempotent: calling this helper twice on the same client is a no-op the
+ * second time.
+ *
+ * Order: this helper can be called BEFORE or AFTER `mcpClient.tools()`. The
+ * AI SDK builds tool execute() callbacks that read `client.request` at
+ * invocation time, not at build time, so subsequent tool invocations will
+ * use the patched method regardless of when you patch.
+ *
+ * Usage:
+ *
+ *   import { createMCPClient } from '@ai-sdk/mcp'
+ *   import { streamText } from 'ai'
+ *   import { atrib, attributeVercelAiSdkMcp } from '@atrib/agent'
+ *
+ *   const interceptor = atrib({
+ *     creatorKey: process.env.ATRIB_PRIVATE_KEY,
+ *     merchantDomain: 'https://merchant.example.com',
+ *     serverUrls: ['https://my-tool.example'],
+ *   })
+ *
+ *   const mcpClient = await createMCPClient({
+ *     transport: { type: 'http', url: 'https://my-tool.example/mcp' },
+ *   })
+ *
+ *   attributeVercelAiSdkMcp(mcpClient, {
+ *     interceptor,
+ *     serverUrl: 'https://my-tool.example',
+ *   })
+ *
+ *   const tools = await mcpClient.tools()
+ *
+ *   const result = await streamText({
+ *     model: openai('gpt-4o'),
+ *     tools,
+ *     prompt: 'What can you do?',
+ *     onFinish: async () => {
+ *       await mcpClient.close()
+ *       await interceptor.flush()
+ *     },
+ *   })
+ */
+export function attributeVercelAiSdkMcp(client, options) {
+    // Idempotency check. don't double-patch a client. Repeat calls are a no-op.
+    if (client[ATRIB_PATCHED] === true) {
+        return client;
+    }
+    const { interceptor, serverUrl } = options;
+    const originalRequest = client.request.bind(client);
+    const patchedRequest = async (args) => {
+        // Forward non-tools/call methods unchanged (tools/list, resources/read,
+        // notifications, etc.). The interceptor only cares about tool invocations.
+        if (args?.request?.method !== 'tools/call') {
+            return originalRequest(args);
+        }
+        const params = args.request.params ?? {};
+        const toolName = params.name ?? '';
+        const existingMeta = params._meta ?? {};
+        // §5.4.3: Build outbound _meta. The interceptor returns a record that
+        // includes any existing _meta keys plus atrib's own (atrib token,
+        // traceparent, tracestate, baggage, X-Atrib-Chain).
+        let outboundMeta;
+        try {
+            outboundMeta = await interceptor.onBeforeToolCall(toolName, existingMeta);
+        }
+        catch (err) {
+            // §5.8 degradation: pass through with the original meta on failure
+            console.warn('atrib: vercel-ai-sdk-mcp onBeforeToolCall failed, passing through', err);
+            outboundMeta = undefined;
+        }
+        // Forward the request with merged _meta if the interceptor provided any.
+        // We construct a new args object so the caller's reference is not mutated.
+        const forwardedArgs = outboundMeta !== undefined
+            ? {
+                ...args,
+                request: {
+                    ...args.request,
+                    params: { ...params, _meta: outboundMeta },
+                },
+            }
+            : args;
+        const result = await originalRequest(forwardedArgs);
+        // §5.4.4: Update session state from the response _meta. The Vercel AI
+        // SDK MCPClient returns the raw CallToolResult here BEFORE any
+        // extractStructuredContent transformation, so the _meta field is intact.
+        try {
+            const responseMeta = result?._meta ?? {};
+            const responseOptions = {
+                ...(serverUrl !== undefined ? { serverUrl } : {}),
+                isError: result?.isError === true,
+            };
+            interceptor.onAfterToolResponse(toolName, result, responseMeta, responseOptions);
+        }
+        catch (err) {
+            console.warn('atrib: vercel-ai-sdk-mcp onAfterToolResponse failed, passing through', err);
+        }
+        return result;
+    };
+    client.request = patchedRequest;
+    client[ATRIB_PATCHED] = true;
+    return client;
+}
+//# sourceMappingURL=vercel-ai-sdk-mcp.js.map

package/dist/adapters/vercel-ai-sdk-mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vercel-ai-sdk-mcp.js","sourceRoot":"","sources":["../../src/adapters/vercel-ai-sdk-mcp.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAgDtC;;;GAGG;AACH,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAA;AAsC/D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAS,EACT,OAAuC;IAEvC,4EAA4E;IAC5E,IAAK,MAA6C,CAAC,aAAa,CAAC,KAAK,IAAI,EAAE,CAAC;QAC3E,OAAO,MAAM,CAAA;IACf,CAAC;IAED,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,OAAO,CAAA;IAC1C,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAEnD,MAAM,cAAc,GAAwC,KAAK,EAAE,IAAI,EAAE,EAAE;QACzE,wEAAwE;QACxE,2EAA2E;QAC3E,IAAI,IAAI,EAAE,OAAO,EAAE,MAAM,KAAK,YAAY,EAAE,CAAC;YAC3C,OAAO,eAAe,CAAC,IAAI,CAAC,CAAA;QAC9B,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAA;QACxC,MAAM,QAAQ,GAAI,MAAM,CAAC,IAAe,IAAI,EAAE,CAAA;QAC9C,MAAM,YAAY,GAAI,MAAM,CAAC,KAAiC,IAAI,EAAE,CAAA;QAEpE,sEAAsE;QACtE,kEAAkE;QAClE,oDAAoD;QACpD,IAAI,YAAiD,CAAA;QACrD,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,WAAW,CAAC,gBAAgB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;QAC3E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,mEAAmE;YACnE,OAAO,CAAC,IAAI,CAAC,mEAAmE,EAAE,GAAG,CAAC,CAAA;YACtF,YAAY,GAAG,SAAS,CAAA;QAC1B,CAAC;QAED,yEAAyE;QACzE,2EAA2E;QAC3E,MAAM,aAAa,GACjB,YAAY,KAAK,SAAS;YACxB,CAAC,CAAC;gBACE,GAAG,IAAI;gBACP,OAAO,EAAE;oBACP,GAAG,IAAI,CAAC,OAAO;oBACf,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE;iBAC3C;aACF;YACH,CAAC,CAAC,IAAI,CAAA;QAEV,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,aAAa,CAAC,CAAA;QAEnD,sEAAsE;QACtE,+DAA+D;QAC/D,yEAAyE;QACzE,IAAI,CAAC;YACH,MAAM,YAAY,GAAI,MAA8C,EAAE,KAAK,IAAI,EAAE,CAAA;YACjF,MAAM,eAAe,GAAG;gBACtB,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,OAAO,EAAG,MAAkC,EAAE,OAAO,KAAK,IAAI;aAC/D,CAAA;YACD,WAAW,CAAC,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,eAAe,CAAC,CAAA;QAClF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,sEAAsE,EAAE,GAAG,CAAC,CAAA;QAC3F,CAAC;QAED,OAAO,MAAM,CAAA;IACf,CAAC,CAKA;IAAC,MAAwD,CAAC,OAAO,GAAG,cAAc,CAGlF;IAAC,MAA6C,CAAC,aAAa,CAAC,GAAG,IAAI,CAAA;IAErE,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,18 @@
+export { atrib } from './middleware.js';
+export type { AgentAtribOptions, ToolCallInterceptor } from './middleware.js';
+export { createSession, buildOutboundMeta, accumulateInboundContext } from './session.js';
+export type { SessionState, LatestContext } from './session.js';
+export type { GapNode } from '@atrib/verify';
+export { detectTransaction } from './transaction.js';
+export type { TransactionDetection } from './transaction.js';
+export { initializeSessionPolicy } from './policy.js';
+export type { SessionPolicyRecord, PolicyDocument, CreatorPolicyEntry } from './policy.js';
+export { wrapMcpClient } from './adapters/mcp-client.js';
+export type { MinimalMcpClient, WrapMcpClientOptions } from './adapters/mcp-client.js';
+export { attributeCloudflareAgentMcp } from './adapters/cloudflare-agent.js';
+export type { CloudflareAgentLike, AttributeCloudflareAgentMcpOptions, } from './adapters/cloudflare-agent.js';
+export { attributeVercelAiSdkMcp } from './adapters/vercel-ai-sdk-mcp.js';
+export type { VercelAiSdkMcpClientLike, AttributeVercelAiSdkMcpOptions, } from './adapters/vercel-ai-sdk-mcp.js';
+export { attributeLangchainMcp } from './adapters/langchain-mcp.js';
+export type { LangchainMcpClientLike, LangchainMultiServerMcpClientLike, AttributeLangchainMcpOptions, } from './adapters/langchain-mcp.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AACvC,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAG7E,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAA;AACzF,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC/D,YAAY,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAG5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACpD,YAAY,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAG5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AACrD,YAAY,EAAE,mBAAmB,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAG1F,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AACxD,YAAY,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AAKtF,OAAO,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAA;AAC5E,YAAY,EACV,mBAAmB,EACnB,kCAAkC,GACnC,MAAM,gCAAgC,CAAA;AAMvC,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAA;AACzE,YAAY,EACV,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,iCAAiC,CAAA;AAMxC,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AACnE,YAAY,EACV,sBAAsB,EACtB,iCAAiC,EACjC,4BAA4B,GAC7B,MAAM,6BAA6B,CAAA"}

package/dist/index.js

@@ -0,0 +1,27 @@
+// SPDX-License-Identifier: Apache-2.0
+// @atrib/agent. Public API
+// Middleware (primary export)
+export { atrib } from './middleware.js';
+// Session state (for advanced usage)
+export { createSession, buildOutboundMeta, accumulateInboundContext } from './session.js';
+// Transaction detection
+export { detectTransaction } from './transaction.js';
+// Policy negotiation
+export { initializeSessionPolicy } from './policy.js';
+// Framework adapters
+export { wrapMcpClient } from './adapters/mcp-client.js';
+// Cloudflare Agents adapter. wraps MCP connections on a Cloudflare `Agent`
+// (or `AIChatAgent`) after `addMcpServer` so subsequent tool calls flow
+// through atrib's interceptor lifecycle.
+export { attributeCloudflareAgentMcp } from './adapters/cloudflare-agent.js';
+// Vercel AI SDK MCP adapter. patches an `@ai-sdk/mcp` MCPClient's `request`
+// method so every outbound `tools/call` flows through atrib's interceptor.
+// The Vercel client has its own JSON-RPC implementation (NOT
+// `@modelcontextprotocol/sdk` Client), so `wrapMcpClient` does not apply.
+export { attributeVercelAiSdkMcp } from './adapters/vercel-ai-sdk-mcp.js';
+// LangChain JS MCP adapter. patches every internal `@modelcontextprotocol/sdk`
+// Client owned by a `@langchain/mcp-adapters` `MultiServerMCPClient` so every
+// outbound `tools/call` (and every forked client from per-call-header
+// workflows) flows through atrib's interceptor.
+export { attributeLangchainMcp } from './adapters/langchain-mcp.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,2BAA2B;AAE3B,8BAA8B;AAC9B,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AAGvC,qCAAqC;AACrC,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAA;AAIzF,wBAAwB;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAGpD,qBAAqB;AACrB,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAGrD,qBAAqB;AACrB,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAGxD,2EAA2E;AAC3E,wEAAwE;AACxE,yCAAyC;AACzC,OAAO,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAA;AAM5E,4EAA4E;AAC5E,2EAA2E;AAC3E,6DAA6D;AAC7D,0EAA0E;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAA;AAMzE,+EAA+E;AAC/E,8EAA8E;AAC9E,sEAAsE;AACtE,gDAAgD;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA"}

package/dist/middleware.d.ts

@@ -0,0 +1,53 @@
+import type { GapNode } from '@atrib/verify';
+import type { SessionPolicyRecord } from './policy.js';
+/** Options for the agent atrib() middleware (§5.4.1). */
+export interface AgentAtribOptions {
+    /** Base64url-encoded Ed25519 private key (32 bytes). Required. */
+    creatorKey?: string | undefined;
+    /** Merchant domain for policy fetch at session init. */
+    merchantDomain?: string | undefined;
+    /** Merkle log submission endpoint. */
+    logEndpoint?: string | undefined;
+    /** Session token for cross-trace linking. Auto-generated if absent. */
+    sessionToken?: string | undefined;
+    /** Server URLs for tools the agent will call (for policy fetch). */
+    serverUrls?: string[] | undefined;
+}
+/**
+ * The interception surface for wrapping an agent or MCP client.
+ * The agent middleware needs to intercept outbound tool calls and
+ * inbound responses. This interface defines the minimum contract.
+ */
+export interface ToolCallInterceptor {
+    /**
+     * Called before a tool call is sent. Returns modified _meta to attach.
+     * MUST be awaited. session initialization happens here on the first call.
+     */
+    onBeforeToolCall(toolName: string, meta: Record<string, unknown>): Promise<Record<string, unknown>>;
+    /**
+     * Called after a tool response is received.
+     * @param isError - if true, the response is an error and no attribution is recorded
+     */
+    onAfterToolResponse(toolName: string, response: unknown, responseMeta: Record<string, unknown> | undefined, options?: {
+        headers?: Record<string, string | undefined>;
+        isError?: boolean;
+        /** The MCP server URL of the tool that was called (for heuristic content_id). */
+        serverUrl?: string;
+    }): void;
+    /** Get the session policy record for a context_id. */
+    getSessionPolicyRecord(contextId?: string): SessionPolicyRecord | null;
+    /** Get gap nodes recorded during this session (§1.6). */
+    getGapNodes(): GapNode[];
+    /** Flush pending log submissions. */
+    flush(): Promise<void>;
+}
+/**
+ * Create an atrib agent interceptor (§5.4).
+ *
+ * Returns a ToolCallInterceptor that manages attribution context.
+ * The caller is responsible for integrating this with their MCP client
+ * or agent framework by calling onBeforeToolCall/onAfterToolResponse
+ * at the appropriate points.
+ */
+export declare function atrib(options?: AgentAtribOptions): ToolCallInterceptor;
+//# sourceMappingURL=middleware.d.ts.map

package/dist/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAI5C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAEtD,yDAAyD;AACzD,MAAM,WAAW,iBAAiB;IAChC,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,wDAAwD;IACxD,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,sCAAsC;IACtC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,uEAAuE;IACvE,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,oEAAoE;IACpE,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;CAClC;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,gBAAgB,CACd,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IACnC;;;OAGG;IACH,mBAAmB,CACjB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,OAAO,EACjB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EACjD,OAAO,CAAC,EAAE;QACR,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;QAC5C,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,iFAAiF;QACjF,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,GACA,IAAI,CAAA;IACP,sDAAsD;IACtD,sBAAsB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAAA;IACtE,yDAAyD;IACzD,WAAW,IAAI,OAAO,EAAE,CAAA;IACxB,qCAAqC;IACrC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AAED;;;;;;;GAOG;AACH,wBAAgB,KAAK,CAAC,OAAO,GAAE,iBAAsB,GAAG,mBAAmB,CAmN1E"}

package/dist/middleware.js

@@ -0,0 +1,268 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * @atrib/agent middleware. the atrib() wrapper for agents (§5.4).
+ *
+ * Wraps an agent or MCP client to automatically manage attribution
+ * context across tool calls. Zero ongoing surface area.
+ */
+import { base64urlDecode, base64urlEncode, signRecord, getPublicKey, computeContentId, hexEncode, genesisChainRoot, createSubmissionQueue, } from '@atrib/mcp';
+import { createSession, buildOutboundMeta, accumulateInboundContext } from './session.js';
+import { detectTransaction } from './transaction.js';
+import { initializeSessionPolicy } from './policy.js';
+/**
+ * Create an atrib agent interceptor (§5.4).
+ *
+ * Returns a ToolCallInterceptor that manages attribution context.
+ * The caller is responsible for integrating this with their MCP client
+ * or agent framework by calling onBeforeToolCall/onAfterToolResponse
+ * at the appropriate points.
+ */
+export function atrib(options = {}) {
+    // §5.8: Pass-through mode if no creatorKey
+    if (!options.creatorKey) {
+        console.warn('atrib: no creatorKey provided, operating in pass-through mode');
+        return createPassthrough();
+    }
+    const privateKey = base64urlDecode(options.creatorKey);
+    if (privateKey.length !== 32) {
+        console.warn('atrib: creatorKey must be 32 bytes, operating in pass-through mode');
+        return createPassthrough();
+    }
+    const queue = createSubmissionQueue(options.logEndpoint);
+    // Derive public key at init
+    let publicKeyB64;
+    const publicKeyReady = getPublicKey(privateKey).then((pk) => {
+        publicKeyB64 = base64urlEncode(pk);
+    });
+    // Create session state
+    const session = createSession({
+        sessionToken: options.sessionToken,
+    });
+    // Session policy record (populated after init)
+    let sessionPolicyRecord = null;
+    let initPromise = null;
+    const pendingEmissions = [];
+    /**
+     * Append a runtime warning to BOTH session.warnings and the session policy
+     * record. §5.4.6: warnings must be observable through getSessionPolicyRecord().
+     */
+    function addRuntimeWarning(warning) {
+        session.warnings.push(warning);
+        if (sessionPolicyRecord && !sessionPolicyRecord.warnings.includes(warning)) {
+            sessionPolicyRecord.warnings.push(warning);
+        }
+    }
+    /**
+     * Run session initialization once. §5.4.2: MUST complete before
+     * the first outbound tool call.
+     */
+    async function ensureInitialized() {
+        if (session.initialized)
+            return;
+        if (!initPromise) {
+            initPromise = (async () => {
+                try {
+                    sessionPolicyRecord = await initializeSessionPolicy({
+                        contextId: session.contextId,
+                        merchantDomain: options.merchantDomain,
+                        serverUrls: options.serverUrls,
+                    });
+                    session.warnings.push(...sessionPolicyRecord.warnings);
+                    // §4.5.1 Step 4: embed policy record ID in baggage on subsequent calls
+                    session.policyRecordId = sessionPolicyRecord.record_id;
+                }
+                catch (err) {
+                    console.warn('atrib: session initialization failed, using defaults', err);
+                    session.warnings.push('session initialization failed');
+                }
+                session.initialized = true;
+            })();
+        }
+        await initPromise;
+    }
+    return {
+        async onBeforeToolCall(_toolName, meta) {
+            try {
+                // §5.4.2: Session init MUST complete before the first outbound tool call
+                await ensureInitialized();
+                // Build outbound _meta. passes existing so baggage/tracestate are appended,
+                // not clobbered (§5.4.3 W3C semantics)
+                const outbound = buildOutboundMeta(session, meta);
+                // Merge with existing _meta
+                return { ...meta, ...outbound };
+            }
+            catch (err) {
+                console.warn('atrib: error in onBeforeToolCall, passing through', err);
+                return meta;
+            }
+        },
+        onAfterToolResponse(toolName, response, responseMeta, callOptions) {
+            // §5.7: tool_call_inbound trigger only fires when isError is false.
+            // Check both the explicit option (set by adapters) and the response
+            // body's own isError field (guards direct callers who omit options).
+            if (callOptions?.isError === true)
+                return;
+            if (response?.isError === true)
+                return;
+            try {
+                // §5.7: task_created trigger. When a tasks/create response arrives,
+                // store the task ID for the session context.
+                const responseObj = response;
+                if (responseObj?.id && typeof responseObj.id === 'string') {
+                    const method = responseMeta?.method ?? responseObj?.method;
+                    if (method === 'tasks/create') {
+                        session.taskIds.add(responseObj.id);
+                    }
+                    // §5.7: task_completed trigger. If this is a completed task,
+                    // treat it as a successful tool_call response (apply inbound logic below).
+                    if (session.taskIds.has(responseObj.id) &&
+                        (responseObj.status === 'completed' || responseObj.status === 'done')) {
+                        // Fall through to normal inbound processing below.
+                        // The task completion is handled identically to tool_call_inbound.
+                    }
+                }
+                // §5.4.4: Accumulate inbound context
+                const hasAtribToken = accumulateInboundContext(session, responseMeta);
+                // §1.6: If no attribution token was received, this is an unsigned hop.
+                // Record a gap node so the graph shows the contribution.
+                if (!hasAtribToken) {
+                    const gapNode = {
+                        type: 'gap_node',
+                        tool_url: callOptions?.serverUrl ?? '',
+                        tool_name: toolName,
+                        context_id: session.contextId,
+                        timestamp: Date.now(),
+                        signed: false,
+                    };
+                    session.gapNodes.push(gapNode);
+                }
+                // §5.4.5: Transaction detection
+                const detection = detectTransaction(toolName, response, callOptions?.headers);
+                if (detection.detected) {
+                    // Path 1: Merchant has @atrib/mcp. token present in response
+                    if (hasAtribToken) {
+                        // Path 1: Skip emission, merchant already emitted transaction record.
+                        return;
+                    }
+                    // Path 2: No attribution token. agent emits transaction record
+                    // §5.4.6: warnings are appended throughout the session. push to BOTH
+                    // session.warnings (for in-memory tracking) and sessionPolicyRecord.warnings
+                    // (so getSessionPolicyRecord() callers see them)
+                    addRuntimeWarning('transaction_emitted_by_agent');
+                    if (detection.protocol === 'heuristic') {
+                        addRuntimeWarning('transaction_detected_by_heuristic');
+                    }
+                    // Emit transaction record asynchronously
+                    const emission = emitTransactionRecord(toolName, detection, callOptions?.serverUrl, session, privateKey, publicKeyReady, () => publicKeyB64, queue).catch((err) => {
+                        console.warn('atrib: transaction emission failed', err);
+                    }).finally(() => {
+                        const idx = pendingEmissions.indexOf(emission);
+                        if (idx !== -1)
+                            pendingEmissions.splice(idx, 1);
+                    });
+                    pendingEmissions.push(emission);
+                }
+            }
+            catch (err) {
+                console.warn('atrib: error in onAfterToolResponse, continuing', err);
+            }
+        },
+        getSessionPolicyRecord(_contextId) {
+            return sessionPolicyRecord;
+        },
+        getGapNodes() {
+            return [...session.gapNodes];
+        },
+        async flush() {
+            // Drain in a loop: emissions arriving during our await are caught
+            // by the next iteration. Terminates when no new emissions appear.
+            while (pendingEmissions.length > 0) {
+                const snapshot = pendingEmissions.splice(0);
+                await Promise.allSettled(snapshot);
+            }
+            await queue.flush();
+            // Drain any emissions that submitted to the queue during queue.flush()
+            while (pendingEmissions.length > 0) {
+                const snapshot = pendingEmissions.splice(0);
+                await Promise.allSettled(snapshot);
+                await queue.flush();
+            }
+        },
+    };
+}
+/**
+ * Emit a transaction record for Path 2 agent-side detection (§5.4.5).
+ * Derives content_id per protocol:
+ * - ACP/UCP: checkout URL from response, tool_name = "checkout"
+ * - x402/MPP: HTTP endpoint URL, tool_name = "checkout"
+ * - Heuristic: MCP server URL of tool, actual tool_name
+ */
+async function emitTransactionRecord(toolName, detection, callServerUrl, session, privateKey, publicKeyReady, publicKeyB64Getter, queue) {
+    await publicKeyReady;
+    const publicKeyB64 = publicKeyB64Getter();
+    if (!publicKeyB64) {
+        throw new Error('public key not ready');
+    }
+    // Derive content_id per protocol (§5.4.5)
+    let contentIdServerUrl;
+    let contentIdToolName;
+    switch (detection.protocol) {
+        case 'ACP':
+        case 'UCP':
+            contentIdServerUrl = detection.checkoutUrl ?? callServerUrl ?? '';
+            contentIdToolName = 'checkout';
+            break;
+        case 'x402':
+        case 'MPP':
+            // Use the HTTP endpoint URL that returned Payment-Receipt
+            contentIdServerUrl = callServerUrl ?? '';
+            contentIdToolName = 'checkout';
+            break;
+        case 'AP2':
+            contentIdServerUrl = callServerUrl ?? '';
+            contentIdToolName = 'checkout';
+            break;
+        case 'heuristic':
+        default:
+            // Heuristic: weakest case, use the MCP server URL of the tool that was called
+            contentIdServerUrl = callServerUrl ?? '';
+            contentIdToolName = toolName;
+            break;
+    }
+    const contentId = computeContentId(contentIdServerUrl, contentIdToolName);
+    // §1.2.3: chain_root for genesis records
+    const chainRoot = session.latestContext
+        ? `sha256:${hexEncode(session.latestContext.recordHash)}`
+        : genesisChainRoot(session.contextId);
+    const record = {
+        spec_version: 'atrib/1.0',
+        content_id: contentId,
+        creator_key: publicKeyB64,
+        chain_root: chainRoot,
+        event_type: 'https://atrib.dev/v1/types/transaction',
+        context_id: session.contextId,
+        timestamp: Date.now(),
+        signature: '',
+        session_token: session.sessionToken,
+    };
+    const signed = await signRecord(record, privateKey);
+    // Submit immediately. transaction records are the closing anchor
+    queue.submit(signed, 'high');
+}
+/** Create a no-op pass-through interceptor. */
+function createPassthrough() {
+    return {
+        async onBeforeToolCall(_toolName, meta) {
+            return meta;
+        },
+        onAfterToolResponse() { },
+        getSessionPolicyRecord() {
+            return null;
+        },
+        getGapNodes() {
+            return [];
+        },
+        async flush() { },
+    };
+}
+//# sourceMappingURL=middleware.js.map

package/dist/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC;;;;;GAKG;AAEH,OAAO,EACL,eAAe,EACf,eAAe,EACf,UAAU,EACV,YAAY,EACZ,gBAAgB,EAChB,SAAS,EACT,gBAAgB,EAChB,qBAAqB,GAEtB,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAA;AAGzF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAEpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAsDrD;;;;;;;GAOG;AACH,MAAM,UAAU,KAAK,CAAC,UAA6B,EAAE;IACnD,2CAA2C;IAC3C,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAA;QAC7E,OAAO,iBAAiB,EAAE,CAAA;IAC5B,CAAC;IAED,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IACtD,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAA;QAClF,OAAO,iBAAiB,EAAE,CAAA;IAC5B,CAAC;IAED,MAAM,KAAK,GAAoB,qBAAqB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IAEzE,4BAA4B;IAC5B,IAAI,YAAgC,CAAA;IACpC,MAAM,cAAc,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE;QAC1D,YAAY,GAAG,eAAe,CAAC,EAAE,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF,uBAAuB;IACvB,MAAM,OAAO,GAAG,aAAa,CAAC;QAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;KACnC,CAAC,CAAA;IAEF,+CAA+C;IAC/C,IAAI,mBAAmB,GAA+B,IAAI,CAAA;IAC1D,IAAI,WAAW,GAAyB,IAAI,CAAA;IAC5C,MAAM,gBAAgB,GAAoB,EAAE,CAAA;IAE5C;;;OAGG;IACH,SAAS,iBAAiB,CAAC,OAAe;QACxC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC9B,IAAI,mBAAmB,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3E,mBAAmB,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC5C,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,UAAU,iBAAiB;QAC9B,IAAI,OAAO,CAAC,WAAW;YAAE,OAAM;QAE/B,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,WAAW,GAAG,CAAC,KAAK,IAAI,EAAE;gBACxB,IAAI,CAAC;oBACH,mBAAmB,GAAG,MAAM,uBAAuB,CAAC;wBAClD,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,cAAc,EAAE,OAAO,CAAC,cAAc;wBACtC,UAAU,EAAE,OAAO,CAAC,UAAU;qBAC/B,CAAC,CAAA;oBACF,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAA;oBACtD,uEAAuE;oBACvE,OAAO,CAAC,cAAc,GAAG,mBAAmB,CAAC,SAAS,CAAA;gBACxD,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,IAAI,CAAC,sDAAsD,EAAE,GAAG,CAAC,CAAA;oBACzE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAA;gBACxD,CAAC;gBACD,OAAO,CAAC,WAAW,GAAG,IAAI,CAAA;YAC5B,CAAC,CAAC,EAAE,CAAA;QACN,CAAC;QAED,MAAM,WAAW,CAAA;IACnB,CAAC;IAED,OAAO;QACL,KAAK,CAAC,gBAAgB,CACpB,SAAiB,EACjB,IAA6B;YAE7B,IAAI,CAAC;gBACH,yEAAyE;gBACzE,MAAM,iBAAiB,EAAE,CAAA;gBAEzB,4EAA4E;gBAC5E,uCAAuC;gBACvC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;gBAEjD,4BAA4B;gBAC5B,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,EAAE,CAAA;YACjC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,mDAAmD,EAAE,GAAG,CAAC,CAAA;gBACtE,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC;QAED,mBAAmB,CACjB,QAAgB,EAChB,QAAiB,EACjB,YAAiD,EACjD,WAIC;YAED,oEAAoE;YACpE,oEAAoE;YACpE,qEAAqE;YACrE,IAAI,WAAW,EAAE,OAAO,KAAK,IAAI;gBAAE,OAAM;YACzC,IAAK,QAAoC,EAAE,OAAO,KAAK,IAAI;gBAAE,OAAM;YAEnE,IAAI,CAAC;gBACH,oEAAoE;gBACpE,6CAA6C;gBAC7C,MAAM,WAAW,GAAG,QAA+C,CAAA;gBACnE,IAAI,WAAW,EAAE,EAAE,IAAI,OAAO,WAAW,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;oBAC1D,MAAM,MAAM,GAAG,YAAY,EAAE,MAAM,IAAI,WAAW,EAAE,MAAM,CAAA;oBAC1D,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;wBAC9B,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAY,CAAC,CAAA;oBAC/C,CAAC;oBACD,6DAA6D;oBAC7D,2EAA2E;oBAC3E,IACE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAY,CAAC;wBAC7C,CAAC,WAAW,CAAC,MAAM,KAAK,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,MAAM,CAAC,EACrE,CAAC;wBACD,mDAAmD;wBACnD,mEAAmE;oBACrE,CAAC;gBACH,CAAC;gBAED,qCAAqC;gBACrC,MAAM,aAAa,GAAG,wBAAwB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;gBAErE,uEAAuE;gBACvE,yDAAyD;gBACzD,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,MAAM,OAAO,GAAY;wBACvB,IAAI,EAAE,UAAU;wBAChB,QAAQ,EAAE,WAAW,EAAE,SAAS,IAAI,EAAE;wBACtC,SAAS,EAAE,QAAQ;wBACnB,UAAU,EAAE,OAAO,CAAC,SAAS;wBAC7B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;wBACrB,MAAM,EAAE,KAAK;qBACd,CAAA;oBACD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;gBAChC,CAAC;gBAED,gCAAgC;gBAChC,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;gBAE7E,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;oBACvB,6DAA6D;oBAC7D,IAAI,aAAa,EAAE,CAAC;wBAClB,sEAAsE;wBACtE,OAAM;oBACR,CAAC;oBAED,+DAA+D;oBAC/D,qEAAqE;oBACrE,6EAA6E;oBAC7E,iDAAiD;oBACjD,iBAAiB,CAAC,8BAA8B,CAAC,CAAA;oBACjD,IAAI,SAAS,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;wBACvC,iBAAiB,CAAC,mCAAmC,CAAC,CAAA;oBACxD,CAAC;oBAED,yCAAyC;oBACzC,MAAM,QAAQ,GAAG,qBAAqB,CACpC,QAAQ,EACR,SAAS,EACT,WAAW,EAAE,SAAS,EACtB,OAAO,EACP,UAAU,EACV,cAAc,EACd,GAAG,EAAE,CAAC,YAAY,EAClB,KAAK,CACN,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;wBACd,OAAO,CAAC,IAAI,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAA;oBACzD,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;wBACd,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;wBAC9C,IAAI,GAAG,KAAK,CAAC,CAAC;4BAAE,gBAAgB,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;oBACjD,CAAC,CAAC,CAAA;oBACF,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;gBACjC,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,iDAAiD,EAAE,GAAG,CAAC,CAAA;YACtE,CAAC;QACH,CAAC;QAED,sBAAsB,CAAC,UAAmB;YACxC,OAAO,mBAAmB,CAAA;QAC5B,CAAC;QAED,WAAW;YACT,OAAO,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;QAC9B,CAAC;QAED,KAAK,CAAC,KAAK;YACT,kEAAkE;YAClE,kEAAkE;YAClE,OAAO,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;gBAC3C,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;YACpC,CAAC;YACD,MAAM,KAAK,CAAC,KAAK,EAAE,CAAA;YACnB,uEAAuE;YACvE,OAAO,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;gBAC3C,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;gBAClC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAA;YACrB,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,qBAAqB,CAClC,QAAgB,EAChB,SAA+B,EAC/B,aAAiC,EACjC,OAAqB,EACrB,UAAsB,EACtB,cAA6B,EAC7B,kBAA4C,EAC5C,KAAsB;IAEtB,MAAM,cAAc,CAAA;IACpB,MAAM,YAAY,GAAG,kBAAkB,EAAE,CAAA;IACzC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;IACzC,CAAC;IAED,0CAA0C;IAC1C,IAAI,kBAA0B,CAAA;IAC9B,IAAI,iBAAyB,CAAA;IAE7B,QAAQ,SAAS,CAAC,QAAQ,EAAE,CAAC;QAC3B,KAAK,KAAK,CAAC;QACX,KAAK,KAAK;YACR,kBAAkB,GAAG,SAAS,CAAC,WAAW,IAAI,aAAa,IAAI,EAAE,CAAA;YACjE,iBAAiB,GAAG,UAAU,CAAA;YAC9B,MAAK;QACP,KAAK,MAAM,CAAC;QACZ,KAAK,KAAK;YACR,0DAA0D;YAC1D,kBAAkB,GAAG,aAAa,IAAI,EAAE,CAAA;YACxC,iBAAiB,GAAG,UAAU,CAAA;YAC9B,MAAK;QACP,KAAK,KAAK;YACR,kBAAkB,GAAG,aAAa,IAAI,EAAE,CAAA;YACxC,iBAAiB,GAAG,UAAU,CAAA;YAC9B,MAAK;QACP,KAAK,WAAW,CAAC;QACjB;YACE,8EAA8E;YAC9E,kBAAkB,GAAG,aAAa,IAAI,EAAE,CAAA;YACxC,iBAAiB,GAAG,QAAQ,CAAA;YAC5B,MAAK;IACT,CAAC;IAED,MAAM,SAAS,GAAG,gBAAgB,CAAC,kBAAkB,EAAE,iBAAiB,CAAC,CAAA;IAEzE,yCAAyC;IACzC,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa;QACrC,CAAC,CAAC,UAAU,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE;QACzD,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAEvC,MAAM,MAAM,GAAgB;QAC1B,YAAY,EAAE,WAAW;QACzB,UAAU,EAAE,SAAS;QACrB,WAAW,EAAE,YAAY;QACzB,UAAU,EAAE,SAAS;QACrB,UAAU,EAAE,wCAAwC;QACpD,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,SAAS,EAAE,EAAE;QACb,aAAa,EAAE,OAAO,CAAC,YAAY;KACrB,CAAA;IAEhB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IAEnD,iEAAiE;IACjE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;AAC9B,CAAC;AAED,+CAA+C;AAC/C,SAAS,iBAAiB;IACxB,OAAO;QACL,KAAK,CAAC,gBAAgB,CAAC,SAAiB,EAAE,IAA6B;YACrE,OAAO,IAAI,CAAA;QACb,CAAC;QACD,mBAAmB,KAAI,CAAC;QACxB,sBAAsB;YACpB,OAAO,IAAI,CAAA;QACb,CAAC;QACD,WAAW;YACT,OAAO,EAAE,CAAA;QACX,CAAC;QACD,KAAK,CAAC,KAAK,KAAI,CAAC;KACjB,CAAA;AACH,CAAC"}