@axiom-lattice/gateway 4.2.0 → 4.2.1

package/dist/{A2AAuthService-DK5X6VIL.mjs → A2AAuthService-7UGQ7GMW.mjs}

@@ -2,10 +2,11 @@ import {
   A2AAuthError,
   A2AAuthService,
   parseEnvKeys
-} from "./chunk-2HOCF46L.mjs";
+} from "./chunk-GPHOYR3X.mjs";
+import "./chunk-NFEGQTCC.mjs";
 export {
   A2AAuthError,
   A2AAuthService,
   parseEnvKeys
 };
-//# sourceMappingURL=A2AAuthService-DK5X6VIL.mjs.map
+//# sourceMappingURL=A2AAuthService-7UGQ7GMW.mjs.map

package/dist/{WechatChannelAdapter-WSDKR4OA.mjs → WechatChannelAdapter-7WHE5UGY.mjs}

@@ -3,6 +3,7 @@ import {
   getUpdates,
   sendMessage
 } from "./chunk-6CUQGDJI.mjs";
+import "./chunk-NFEGQTCC.mjs";
 
 // src/channels/wechat/WechatChannelAdapter.ts
 import { z } from "zod";
@@ -252,4 +253,4 @@ var wechatChannelAdapter = {
 export {
   wechatChannelAdapter
 };
-//# sourceMappingURL=WechatChannelAdapter-WSDKR4OA.mjs.map
+//# sourceMappingURL=WechatChannelAdapter-7WHE5UGY.mjs.map

package/dist/{WechatChannelAdapter-WSDKR4OA.mjs.map → WechatChannelAdapter-7WHE5UGY.mjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/channels/wechat/WechatChannelAdapter.ts","../src/channels/wechat/context-store.ts"],"sourcesContent":["import { z } from \"zod\";\nimport type {\n  ChannelAdapter,\n  InboundMessage,\n  OutboundMessage,\n  ReplyTarget,\n  ChannelInstallation,\n} from \"@axiom-lattice/protocols\";\nimport type { WechatChannelInstallationConfig } from \"@axiom-lattice/protocols\";\nimport { getUpdates, sendMessage } from \"./wechat-client\";\nimport { setContextToken, getContextToken, deleteContextToken } from \"./context-store\";\nimport { Logger } from \"../../logger/Logger\";\n\nconst logger = new Logger({ serviceName: \"lattice/gateway/wechat\" });\n\nconst wechatConfigSchema = z.object({\n  botToken: z.string(),\n  uin: z.string().optional(),\n});\n\nconst MAX_RECONNECT_DELAY_MS = 30_000;\nconst BASE_RECONNECT_DELAY_MS = 1_000;\nconst HEARTBEAT_INTERVAL_MS = 60_000;\nconst CHANNEL_VERSION = \"1.0.2\";\n\n// ─── Message type constants ───────────────────────────────────────────────\n\nconst MSG_TYPE_USER = 1;\nconst MSG_ITEM_TEXT = 1;\n\n// ─── Polling connection state ─────────────────────────────────────────────\n\ninterface PollingState {\n  installationId: string;\n  abortController: AbortController;\n  lastActivity: number;\n  heartbeatTimer: NodeJS.Timeout;\n}\n\nconst activeConnections = new Map<string, PollingState>();\n\n// ─── Message dedup ────────────────────────────────────────────────────────\n\nconst seenClientIds = new Set<string>();\n\nfunction addToDedup(clientId: string): boolean {\n  if (!clientId || seenClientIds.has(clientId)) return false;\n  seenClientIds.add(clientId);\n  if (seenClientIds.size > 1000) {\n    const first = seenClientIds.values().next().value;\n    if (first !== undefined) seenClientIds.delete(first);\n  }\n  return true;\n}\n\n// ─── Text extraction from iLink message ───────────────────────────────────\n\nfunction extractText(msg: { item_list?: Array<{ type?: number; text_item?: { text?: string } }> }): string | null {\n  if (!msg.item_list?.length) return null;\n  for (const item of msg.item_list) {\n    if (item.type === MSG_ITEM_TEXT && item.text_item?.text) {\n      return item.text_item.text;\n    }\n  }\n  return null;\n}\n\n// ─── Adapter ──────────────────────────────────────────────────────────────\n\nexport const wechatChannelAdapter: ChannelAdapter<WechatChannelInstallationConfig> = {\n  channel: \"wechat\",\n\n  configSchema: wechatConfigSchema,\n\n  async receive(\n    rawPayload: unknown,\n    installation: ChannelInstallation<WechatChannelInstallationConfig>,\n  ): Promise<InboundMessage | null> {\n    const msg = rawPayload as {\n      from_user_id?: string;\n      client_id?: string;\n      message_type?: number;\n      item_list?: Array<{ type?: number; text_item?: { text?: string } }>;\n      context_token?: string;\n    };\n\n    // Only process user messages (type 1), skip bot echoes (type 2)\n    if (msg.message_type !== MSG_TYPE_USER) return null;\n\n    const senderId = msg.from_user_id;\n    if (!senderId) return null;\n\n    const text = extractText(msg);\n    if (!text) return null;\n\n    // Cache context token for reply\n    if (msg.context_token) {\n      setContextToken(installation.id, senderId, msg.context_token);\n    }\n\n    return {\n      channel: \"wechat\",\n      channelInstallationId: installation.id,\n      tenantId: installation.tenantId,\n      sender: {\n        id: senderId,\n        displayName: senderId.split(\"@\")[0],\n      },\n      content: {\n        text,\n      },\n      conversation: {\n        id: senderId,\n        type: \"direct\",\n      },\n      replyTarget: {\n        adapterChannel: \"wechat\",\n        channelInstallationId: installation.id,\n        rawTarget: { senderId },\n      },\n    };\n  },\n\n  async sendReply(\n    replyTarget: ReplyTarget,\n    message: OutboundMessage,\n    installation: ChannelInstallation<WechatChannelInstallationConfig>,\n  ): Promise<void> {\n    const senderId = replyTarget.rawTarget.senderId as string;\n    const contextToken = getContextToken(installation.id, senderId);\n\n    if (!contextToken) {\n      logger.warn(\"WeChat context token expired, cannot send reply\", {\n        installationId: installation.id,\n        senderId,\n      });\n      deleteContextToken(installation.id, senderId);\n      return;\n    }\n\n    const { botToken } = installation.config;\n    await sendMessage(botToken, senderId, message.text, contextToken);\n  },\n\n  resolveThreadId(message: InboundMessage, binding: unknown): string {\n    const date = new Date().toISOString().split(\"T\")[0];\n    const agentId = (binding as { agentId: string }).agentId;\n    return `wechat:dm:${message.sender.id}:${agentId}:${date}`;\n  },\n\n  async connect(\n    installation: ChannelInstallation<WechatChannelInstallationConfig>,\n    deps?: unknown,\n  ): Promise<void> {\n    const { id: installationId, tenantId, config } = installation;\n\n    if (!config.botToken) {\n      logger.warn(\"WeChat installation missing botToken, skipping\", { installationId });\n      return;\n    }\n\n    if (activeConnections.has(installationId)) {\n      logger.warn(\"WeChat polling already running for installation, skipping\", { installationId });\n      return;\n    }\n\n    logger.info(\"WeChat polling starting\", { installationId, tenantId });\n\n    const abortController = new AbortController();\n\n    const heartbeatTimer = setInterval(() => {\n      const state2 = activeConnections.get(installationId);\n      if (!state2) {\n        clearInterval(heartbeatTimer);\n        return;\n      }\n      const elapsed = Date.now() - state2.lastActivity;\n      if (elapsed > HEARTBEAT_INTERVAL_MS * 2) {\n        logger.error(\"WeChat polling heartbeat lost — no activity\", {\n          installationId,\n          elapsedMs: elapsed,\n        });\n        state2.abortController.abort();\n      }\n    }, HEARTBEAT_INTERVAL_MS);\n\n    const state: PollingState = {\n      installationId,\n      abortController,\n      lastActivity: Date.now(),\n      heartbeatTimer,\n    };\n    activeConnections.set(installationId, state);\n\n    const router = (deps as { router?: { dispatch(msg: InboundMessage): Promise<unknown> } })?.router;\n\n    let syncBuffer = \"\";\n    let reconnectDelay = BASE_RECONNECT_DELAY_MS;\n\n    const scheduleNextPoll = (): void => {\n      poll().catch((err) => {\n        logger.error(\"WeChat poll iteration crashed\", {\n          installationId,\n          error: err instanceof Error ? err.message : String(err),\n        });\n        const currentState = activeConnections.get(installationId);\n        if (currentState && !currentState.abortController.signal.aborted) {\n          setTimeout(scheduleNextPoll, reconnectDelay);\n        }\n      });\n    };\n\n    const poll = async (): Promise<void> => {\n      const currentState = activeConnections.get(installationId);\n      if (!currentState || currentState.abortController.signal.aborted) {\n        logger.info(\"WeChat polling aborted\", { installationId });\n        return;\n      }\n\n      try {\n        const result = await getUpdates(\n          config.botToken,\n          syncBuffer,\n          currentState.abortController.signal,\n        );\n        syncBuffer = result.syncBuffer;\n        reconnectDelay = BASE_RECONNECT_DELAY_MS;\n        currentState.lastActivity = Date.now();\n\n        if (result.msgs.length > 0) {\n          logger.info(\"WeChat poll received messages\", {\n            installationId,\n            count: result.msgs.length,\n          });\n        }\n\n        for (const rawMsg of result.msgs) {\n          // Only user messages, skip bot echoes and non-text\n          if (rawMsg.message_type !== MSG_TYPE_USER) continue;\n\n          const text = extractText(rawMsg);\n          if (!text) continue;\n\n          if (!addToDedup((rawMsg as { client_id?: string }).client_id ?? \"\")) continue;\n\n          const inbound = await wechatChannelAdapter.receive(\n            rawMsg,\n            installation as ChannelInstallation<WechatChannelInstallationConfig>,\n          );\n          if (inbound && router) {\n            const dispatchResult = await router.dispatch(inbound);\n            if (!(dispatchResult as { success?: boolean }).success) {\n              logger.warn(\"WeChat dispatch failed\", {\n                installationId,\n                error: (dispatchResult as { error?: { message?: string } }).error?.message,\n              });\n            }\n          }\n        }\n      } catch (err) {\n        if (err instanceof Error && err.name === \"AbortError\") {\n          logger.info(\"WeChat poll aborted by signal\", { installationId });\n          return;\n        }\n\n        logger.error(\"WeChat poll error\", {\n          installationId,\n          error: err instanceof Error ? err.message : String(err),\n        });\n        await new Promise((resolve) => setTimeout(resolve, reconnectDelay));\n        reconnectDelay = Math.min(reconnectDelay * 2, MAX_RECONNECT_DELAY_MS);\n      }\n\n      scheduleNextPoll();\n    };\n\n    scheduleNextPoll();\n    logger.info(\"WeChat polling started\", { installationId });\n  },\n\n  async disconnect(installationId: string): Promise<void> {\n    const state = activeConnections.get(installationId);\n    if (!state) {\n      logger.warn(\"WeChat polling not running, nothing to disconnect\", { installationId });\n      return;\n    }\n\n    logger.info(\"WeChat polling disconnecting\", { installationId });\n    state.abortController.abort();\n    clearInterval(state.heartbeatTimer);\n    activeConnections.delete(installationId);\n    logger.info(\"WeChat polling disconnected\", { installationId });\n  },\n};\n","interface ContextTokenEntry {\n  token: string;\n  installationId: string;\n  senderId: string;\n  updatedAt: number;\n}\n\nconst TOKEN_TTL_MS = 24 * 60 * 60 * 1000; // 24 hours\nconst store = new Map<string, ContextTokenEntry>();\nconst timers = new Map<string, NodeJS.Timeout>();\n\nfunction makeKey(installationId: string, senderId: string): string {\n  return `${installationId}::${senderId}`;\n}\n\nexport function getContextToken(installationId: string, senderId: string): string | undefined {\n  const key = makeKey(installationId, senderId);\n  const entry = store.get(key);\n  if (!entry) return undefined;\n  if (Date.now() - entry.updatedAt > TOKEN_TTL_MS) {\n    deleteContextToken(installationId, senderId);\n    return undefined;\n  }\n  return entry.token;\n}\n\nexport function setContextToken(installationId: string, senderId: string, token: string): void {\n  const key = makeKey(installationId, senderId);\n\n  const existingTimer = timers.get(key);\n  if (existingTimer) clearTimeout(existingTimer);\n\n  store.set(key, { token, installationId, senderId, updatedAt: Date.now() });\n\n  const timer = setTimeout(() => {\n    store.delete(key);\n    timers.delete(key);\n  }, TOKEN_TTL_MS);\n  timers.set(key, timer);\n}\n\nexport function deleteContextToken(installationId: string, senderId: string): void {\n  const key = makeKey(installationId, senderId);\n  store.delete(key);\n  const timer = timers.get(key);\n  if (timer) {\n    clearTimeout(timer);\n    timers.delete(key);\n  }\n}\n\nexport function getContextTokenStoreSize(): number {\n  return store.size;\n}\n"],"mappings":";;;;;;;AAAA,SAAS,SAAS;;;ACOlB,IAAM,eAAe,KAAK,KAAK,KAAK;AACpC,IAAM,QAAQ,oBAAI,IAA+B;AACjD,IAAM,SAAS,oBAAI,IAA4B;AAE/C,SAAS,QAAQ,gBAAwB,UAA0B;AACjE,SAAO,GAAG,cAAc,KAAK,QAAQ;AACvC;AAEO,SAAS,gBAAgB,gBAAwB,UAAsC;AAC5F,QAAM,MAAM,QAAQ,gBAAgB,QAAQ;AAC5C,QAAM,QAAQ,MAAM,IAAI,GAAG;AAC3B,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,KAAK,IAAI,IAAI,MAAM,YAAY,cAAc;AAC/C,uBAAmB,gBAAgB,QAAQ;AAC3C,WAAO;AAAA,EACT;AACA,SAAO,MAAM;AACf;AAEO,SAAS,gBAAgB,gBAAwB,UAAkB,OAAqB;AAC7F,QAAM,MAAM,QAAQ,gBAAgB,QAAQ;AAE5C,QAAM,gBAAgB,OAAO,IAAI,GAAG;AACpC,MAAI,cAAe,cAAa,aAAa;AAE7C,QAAM,IAAI,KAAK,EAAE,OAAO,gBAAgB,UAAU,WAAW,KAAK,IAAI,EAAE,CAAC;AAEzE,QAAM,QAAQ,WAAW,MAAM;AAC7B,UAAM,OAAO,GAAG;AAChB,WAAO,OAAO,GAAG;AAAA,EACnB,GAAG,YAAY;AACf,SAAO,IAAI,KAAK,KAAK;AACvB;AAEO,SAAS,mBAAmB,gBAAwB,UAAwB;AACjF,QAAM,MAAM,QAAQ,gBAAgB,QAAQ;AAC5C,QAAM,OAAO,GAAG;AAChB,QAAM,QAAQ,OAAO,IAAI,GAAG;AAC5B,MAAI,OAAO;AACT,iBAAa,KAAK;AAClB,WAAO,OAAO,GAAG;AAAA,EACnB;AACF;;;ADpCA,IAAM,SAAS,IAAI,OAAO,EAAE,aAAa,yBAAyB,CAAC;AAEnE,IAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,UAAU,EAAE,OAAO;AAAA,EACnB,KAAK,EAAE,OAAO,EAAE,SAAS;AAC3B,CAAC;AAED,IAAM,yBAAyB;AAC/B,IAAM,0BAA0B;AAChC,IAAM,wBAAwB;AAK9B,IAAM,gBAAgB;AACtB,IAAM,gBAAgB;AAWtB,IAAM,oBAAoB,oBAAI,IAA0B;AAIxD,IAAM,gBAAgB,oBAAI,IAAY;AAEtC,SAAS,WAAW,UAA2B;AAC7C,MAAI,CAAC,YAAY,cAAc,IAAI,QAAQ,EAAG,QAAO;AACrD,gBAAc,IAAI,QAAQ;AAC1B,MAAI,cAAc,OAAO,KAAM;AAC7B,UAAM,QAAQ,cAAc,OAAO,EAAE,KAAK,EAAE;AAC5C,QAAI,UAAU,OAAW,eAAc,OAAO,KAAK;AAAA,EACrD;AACA,SAAO;AACT;AAIA,SAAS,YAAY,KAA6F;AAChH,MAAI,CAAC,IAAI,WAAW,OAAQ,QAAO;AACnC,aAAW,QAAQ,IAAI,WAAW;AAChC,QAAI,KAAK,SAAS,iBAAiB,KAAK,WAAW,MAAM;AACvD,aAAO,KAAK,UAAU;AAAA,IACxB;AAAA,EACF;AACA,SAAO;AACT;AAIO,IAAM,uBAAwE;AAAA,EACnF,SAAS;AAAA,EAET,cAAc;AAAA,EAEd,MAAM,QACJ,YACA,cACgC;AAChC,UAAM,MAAM;AASZ,QAAI,IAAI,iBAAiB,cAAe,QAAO;AAE/C,UAAM,WAAW,IAAI;AACrB,QAAI,CAAC,SAAU,QAAO;AAEtB,UAAM,OAAO,YAAY,GAAG;AAC5B,QAAI,CAAC,KAAM,QAAO;AAGlB,QAAI,IAAI,eAAe;AACrB,sBAAgB,aAAa,IAAI,UAAU,IAAI,aAAa;AAAA,IAC9D;AAEA,WAAO;AAAA,MACL,SAAS;AAAA,MACT,uBAAuB,aAAa;AAAA,MACpC,UAAU,aAAa;AAAA,MACvB,QAAQ;AAAA,QACN,IAAI;AAAA,QACJ,aAAa,SAAS,MAAM,GAAG,EAAE,CAAC;AAAA,MACpC;AAAA,MACA,SAAS;AAAA,QACP;AAAA,MACF;AAAA,MACA,cAAc;AAAA,QACZ,IAAI;AAAA,QACJ,MAAM;AAAA,MACR;AAAA,MACA,aAAa;AAAA,QACX,gBAAgB;AAAA,QAChB,uBAAuB,aAAa;AAAA,QACpC,WAAW,EAAE,SAAS;AAAA,MACxB;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,UACJ,aACA,SACA,cACe;AACf,UAAM,WAAW,YAAY,UAAU;AACvC,UAAM,eAAe,gBAAgB,aAAa,IAAI,QAAQ;AAE9D,QAAI,CAAC,cAAc;AACjB,aAAO,KAAK,mDAAmD;AAAA,QAC7D,gBAAgB,aAAa;AAAA,QAC7B;AAAA,MACF,CAAC;AACD,yBAAmB,aAAa,IAAI,QAAQ;AAC5C;AAAA,IACF;AAEA,UAAM,EAAE,SAAS,IAAI,aAAa;AAClC,UAAM,YAAY,UAAU,UAAU,QAAQ,MAAM,YAAY;AAAA,EAClE;AAAA,EAEA,gBAAgB,SAAyB,SAA0B;AACjE,UAAM,QAAO,oBAAI,KAAK,GAAE,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC;AAClD,UAAM,UAAW,QAAgC;AACjD,WAAO,aAAa,QAAQ,OAAO,EAAE,IAAI,OAAO,IAAI,IAAI;AAAA,EAC1D;AAAA,EAEA,MAAM,QACJ,cACA,MACe;AACf,UAAM,EAAE,IAAI,gBAAgB,UAAU,OAAO,IAAI;AAEjD,QAAI,CAAC,OAAO,UAAU;AACpB,aAAO,KAAK,kDAAkD,EAAE,eAAe,CAAC;AAChF;AAAA,IACF;AAEA,QAAI,kBAAkB,IAAI,cAAc,GAAG;AACzC,aAAO,KAAK,6DAA6D,EAAE,eAAe,CAAC;AAC3F;AAAA,IACF;AAEA,WAAO,KAAK,2BAA2B,EAAE,gBAAgB,SAAS,CAAC;AAEnE,UAAM,kBAAkB,IAAI,gBAAgB;AAE5C,UAAM,iBAAiB,YAAY,MAAM;AACvC,YAAM,SAAS,kBAAkB,IAAI,cAAc;AACnD,UAAI,CAAC,QAAQ;AACX,sBAAc,cAAc;AAC5B;AAAA,MACF;AACA,YAAM,UAAU,KAAK,IAAI,IAAI,OAAO;AACpC,UAAI,UAAU,wBAAwB,GAAG;AACvC,eAAO,MAAM,oDAA+C;AAAA,UAC1D;AAAA,UACA,WAAW;AAAA,QACb,CAAC;AACD,eAAO,gBAAgB,MAAM;AAAA,MAC/B;AAAA,IACF,GAAG,qBAAqB;AAExB,UAAM,QAAsB;AAAA,MAC1B;AAAA,MACA;AAAA,MACA,cAAc,KAAK,IAAI;AAAA,MACvB;AAAA,IACF;AACA,sBAAkB,IAAI,gBAAgB,KAAK;AAE3C,UAAM,SAAU,MAA2E;AAE3F,QAAI,aAAa;AACjB,QAAI,iBAAiB;AAErB,UAAM,mBAAmB,MAAY;AACnC,WAAK,EAAE,MAAM,CAAC,QAAQ;AACpB,eAAO,MAAM,iCAAiC;AAAA,UAC5C;AAAA,UACA,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,QACxD,CAAC;AACD,cAAM,eAAe,kBAAkB,IAAI,cAAc;AACzD,YAAI,gBAAgB,CAAC,aAAa,gBAAgB,OAAO,SAAS;AAChE,qBAAW,kBAAkB,cAAc;AAAA,QAC7C;AAAA,MACF,CAAC;AAAA,IACH;AAEA,UAAM,OAAO,YAA2B;AACtC,YAAM,eAAe,kBAAkB,IAAI,cAAc;AACzD,UAAI,CAAC,gBAAgB,aAAa,gBAAgB,OAAO,SAAS;AAChE,eAAO,KAAK,0BAA0B,EAAE,eAAe,CAAC;AACxD;AAAA,MACF;AAEA,UAAI;AACF,cAAM,SAAS,MAAM;AAAA,UACnB,OAAO;AAAA,UACP;AAAA,UACA,aAAa,gBAAgB;AAAA,QAC/B;AACA,qBAAa,OAAO;AACpB,yBAAiB;AACjB,qBAAa,eAAe,KAAK,IAAI;AAErC,YAAI,OAAO,KAAK,SAAS,GAAG;AAC1B,iBAAO,KAAK,iCAAiC;AAAA,YAC3C;AAAA,YACA,OAAO,OAAO,KAAK;AAAA,UACrB,CAAC;AAAA,QACH;AAEA,mBAAW,UAAU,OAAO,MAAM;AAEhC,cAAI,OAAO,iBAAiB,cAAe;AAE3C,gBAAM,OAAO,YAAY,MAAM;AAC/B,cAAI,CAAC,KAAM;AAEX,cAAI,CAAC,WAAY,OAAkC,aAAa,EAAE,EAAG;AAErE,gBAAM,UAAU,MAAM,qBAAqB;AAAA,YACzC;AAAA,YACA;AAAA,UACF;AACA,cAAI,WAAW,QAAQ;AACrB,kBAAM,iBAAiB,MAAM,OAAO,SAAS,OAAO;AACpD,gBAAI,CAAE,eAAyC,SAAS;AACtD,qBAAO,KAAK,0BAA0B;AAAA,gBACpC;AAAA,gBACA,OAAQ,eAAoD,OAAO;AAAA,cACrE,CAAC;AAAA,YACH;AAAA,UACF;AAAA,QACF;AAAA,MACF,SAAS,KAAK;AACZ,YAAI,eAAe,SAAS,IAAI,SAAS,cAAc;AACrD,iBAAO,KAAK,iCAAiC,EAAE,eAAe,CAAC;AAC/D;AAAA,QACF;AAEA,eAAO,MAAM,qBAAqB;AAAA,UAChC;AAAA,UACA,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,QACxD,CAAC;AACD,cAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,cAAc,CAAC;AAClE,yBAAiB,KAAK,IAAI,iBAAiB,GAAG,sBAAsB;AAAA,MACtE;AAEA,uBAAiB;AAAA,IACnB;AAEA,qBAAiB;AACjB,WAAO,KAAK,0BAA0B,EAAE,eAAe,CAAC;AAAA,EAC1D;AAAA,EAEA,MAAM,WAAW,gBAAuC;AACtD,UAAM,QAAQ,kBAAkB,IAAI,cAAc;AAClD,QAAI,CAAC,OAAO;AACV,aAAO,KAAK,qDAAqD,EAAE,eAAe,CAAC;AACnF;AAAA,IACF;AAEA,WAAO,KAAK,gCAAgC,EAAE,eAAe,CAAC;AAC9D,UAAM,gBAAgB,MAAM;AAC5B,kBAAc,MAAM,cAAc;AAClC,sBAAkB,OAAO,cAAc;AACvC,WAAO,KAAK,+BAA+B,EAAE,eAAe,CAAC;AAAA,EAC/D;AACF;","names":[]}
+{"version":3,"sources":["../src/channels/wechat/WechatChannelAdapter.ts","../src/channels/wechat/context-store.ts"],"sourcesContent":["import { z } from \"zod\";\nimport type {\n  ChannelAdapter,\n  InboundMessage,\n  OutboundMessage,\n  ReplyTarget,\n  ChannelInstallation,\n} from \"@axiom-lattice/protocols\";\nimport type { WechatChannelInstallationConfig } from \"@axiom-lattice/protocols\";\nimport { getUpdates, sendMessage } from \"./wechat-client\";\nimport { setContextToken, getContextToken, deleteContextToken } from \"./context-store\";\nimport { Logger } from \"../../logger/Logger\";\n\nconst logger = new Logger({ serviceName: \"lattice/gateway/wechat\" });\n\nconst wechatConfigSchema = z.object({\n  botToken: z.string(),\n  uin: z.string().optional(),\n});\n\nconst MAX_RECONNECT_DELAY_MS = 30_000;\nconst BASE_RECONNECT_DELAY_MS = 1_000;\nconst HEARTBEAT_INTERVAL_MS = 60_000;\nconst CHANNEL_VERSION = \"1.0.2\";\n\n// ─── Message type constants ───────────────────────────────────────────────\n\nconst MSG_TYPE_USER = 1;\nconst MSG_ITEM_TEXT = 1;\n\n// ─── Polling connection state ─────────────────────────────────────────────\n\ninterface PollingState {\n  installationId: string;\n  abortController: AbortController;\n  lastActivity: number;\n  heartbeatTimer: NodeJS.Timeout;\n}\n\nconst activeConnections = new Map<string, PollingState>();\n\n// ─── Message dedup ────────────────────────────────────────────────────────\n\nconst seenClientIds = new Set<string>();\n\nfunction addToDedup(clientId: string): boolean {\n  if (!clientId || seenClientIds.has(clientId)) return false;\n  seenClientIds.add(clientId);\n  if (seenClientIds.size > 1000) {\n    const first = seenClientIds.values().next().value;\n    if (first !== undefined) seenClientIds.delete(first);\n  }\n  return true;\n}\n\n// ─── Text extraction from iLink message ───────────────────────────────────\n\nfunction extractText(msg: { item_list?: Array<{ type?: number; text_item?: { text?: string } }> }): string | null {\n  if (!msg.item_list?.length) return null;\n  for (const item of msg.item_list) {\n    if (item.type === MSG_ITEM_TEXT && item.text_item?.text) {\n      return item.text_item.text;\n    }\n  }\n  return null;\n}\n\n// ─── Adapter ──────────────────────────────────────────────────────────────\n\nexport const wechatChannelAdapter: ChannelAdapter<WechatChannelInstallationConfig> = {\n  channel: \"wechat\",\n\n  configSchema: wechatConfigSchema,\n\n  async receive(\n    rawPayload: unknown,\n    installation: ChannelInstallation<WechatChannelInstallationConfig>,\n  ): Promise<InboundMessage | null> {\n    const msg = rawPayload as {\n      from_user_id?: string;\n      client_id?: string;\n      message_type?: number;\n      item_list?: Array<{ type?: number; text_item?: { text?: string } }>;\n      context_token?: string;\n    };\n\n    // Only process user messages (type 1), skip bot echoes (type 2)\n    if (msg.message_type !== MSG_TYPE_USER) return null;\n\n    const senderId = msg.from_user_id;\n    if (!senderId) return null;\n\n    const text = extractText(msg);\n    if (!text) return null;\n\n    // Cache context token for reply\n    if (msg.context_token) {\n      setContextToken(installation.id, senderId, msg.context_token);\n    }\n\n    return {\n      channel: \"wechat\",\n      channelInstallationId: installation.id,\n      tenantId: installation.tenantId,\n      sender: {\n        id: senderId,\n        displayName: senderId.split(\"@\")[0],\n      },\n      content: {\n        text,\n      },\n      conversation: {\n        id: senderId,\n        type: \"direct\",\n      },\n      replyTarget: {\n        adapterChannel: \"wechat\",\n        channelInstallationId: installation.id,\n        rawTarget: { senderId },\n      },\n    };\n  },\n\n  async sendReply(\n    replyTarget: ReplyTarget,\n    message: OutboundMessage,\n    installation: ChannelInstallation<WechatChannelInstallationConfig>,\n  ): Promise<void> {\n    const senderId = replyTarget.rawTarget.senderId as string;\n    const contextToken = getContextToken(installation.id, senderId);\n\n    if (!contextToken) {\n      logger.warn(\"WeChat context token expired, cannot send reply\", {\n        installationId: installation.id,\n        senderId,\n      });\n      deleteContextToken(installation.id, senderId);\n      return;\n    }\n\n    const { botToken } = installation.config;\n    await sendMessage(botToken, senderId, message.text, contextToken);\n  },\n\n  resolveThreadId(message: InboundMessage, binding: unknown): string {\n    const date = new Date().toISOString().split(\"T\")[0];\n    const agentId = (binding as { agentId: string }).agentId;\n    return `wechat:dm:${message.sender.id}:${agentId}:${date}`;\n  },\n\n  async connect(\n    installation: ChannelInstallation<WechatChannelInstallationConfig>,\n    deps?: unknown,\n  ): Promise<void> {\n    const { id: installationId, tenantId, config } = installation;\n\n    if (!config.botToken) {\n      logger.warn(\"WeChat installation missing botToken, skipping\", { installationId });\n      return;\n    }\n\n    if (activeConnections.has(installationId)) {\n      logger.warn(\"WeChat polling already running for installation, skipping\", { installationId });\n      return;\n    }\n\n    logger.info(\"WeChat polling starting\", { installationId, tenantId });\n\n    const abortController = new AbortController();\n\n    const heartbeatTimer = setInterval(() => {\n      const state2 = activeConnections.get(installationId);\n      if (!state2) {\n        clearInterval(heartbeatTimer);\n        return;\n      }\n      const elapsed = Date.now() - state2.lastActivity;\n      if (elapsed > HEARTBEAT_INTERVAL_MS * 2) {\n        logger.error(\"WeChat polling heartbeat lost — no activity\", {\n          installationId,\n          elapsedMs: elapsed,\n        });\n        state2.abortController.abort();\n      }\n    }, HEARTBEAT_INTERVAL_MS);\n\n    const state: PollingState = {\n      installationId,\n      abortController,\n      lastActivity: Date.now(),\n      heartbeatTimer,\n    };\n    activeConnections.set(installationId, state);\n\n    const router = (deps as { router?: { dispatch(msg: InboundMessage): Promise<unknown> } })?.router;\n\n    let syncBuffer = \"\";\n    let reconnectDelay = BASE_RECONNECT_DELAY_MS;\n\n    const scheduleNextPoll = (): void => {\n      poll().catch((err) => {\n        logger.error(\"WeChat poll iteration crashed\", {\n          installationId,\n          error: err instanceof Error ? err.message : String(err),\n        });\n        const currentState = activeConnections.get(installationId);\n        if (currentState && !currentState.abortController.signal.aborted) {\n          setTimeout(scheduleNextPoll, reconnectDelay);\n        }\n      });\n    };\n\n    const poll = async (): Promise<void> => {\n      const currentState = activeConnections.get(installationId);\n      if (!currentState || currentState.abortController.signal.aborted) {\n        logger.info(\"WeChat polling aborted\", { installationId });\n        return;\n      }\n\n      try {\n        const result = await getUpdates(\n          config.botToken,\n          syncBuffer,\n          currentState.abortController.signal,\n        );\n        syncBuffer = result.syncBuffer;\n        reconnectDelay = BASE_RECONNECT_DELAY_MS;\n        currentState.lastActivity = Date.now();\n\n        if (result.msgs.length > 0) {\n          logger.info(\"WeChat poll received messages\", {\n            installationId,\n            count: result.msgs.length,\n          });\n        }\n\n        for (const rawMsg of result.msgs) {\n          // Only user messages, skip bot echoes and non-text\n          if (rawMsg.message_type !== MSG_TYPE_USER) continue;\n\n          const text = extractText(rawMsg);\n          if (!text) continue;\n\n          if (!addToDedup((rawMsg as { client_id?: string }).client_id ?? \"\")) continue;\n\n          const inbound = await wechatChannelAdapter.receive(\n            rawMsg,\n            installation as ChannelInstallation<WechatChannelInstallationConfig>,\n          );\n          if (inbound && router) {\n            const dispatchResult = await router.dispatch(inbound);\n            if (!(dispatchResult as { success?: boolean }).success) {\n              logger.warn(\"WeChat dispatch failed\", {\n                installationId,\n                error: (dispatchResult as { error?: { message?: string } }).error?.message,\n              });\n            }\n          }\n        }\n      } catch (err) {\n        if (err instanceof Error && err.name === \"AbortError\") {\n          logger.info(\"WeChat poll aborted by signal\", { installationId });\n          return;\n        }\n\n        logger.error(\"WeChat poll error\", {\n          installationId,\n          error: err instanceof Error ? err.message : String(err),\n        });\n        await new Promise((resolve) => setTimeout(resolve, reconnectDelay));\n        reconnectDelay = Math.min(reconnectDelay * 2, MAX_RECONNECT_DELAY_MS);\n      }\n\n      scheduleNextPoll();\n    };\n\n    scheduleNextPoll();\n    logger.info(\"WeChat polling started\", { installationId });\n  },\n\n  async disconnect(installationId: string): Promise<void> {\n    const state = activeConnections.get(installationId);\n    if (!state) {\n      logger.warn(\"WeChat polling not running, nothing to disconnect\", { installationId });\n      return;\n    }\n\n    logger.info(\"WeChat polling disconnecting\", { installationId });\n    state.abortController.abort();\n    clearInterval(state.heartbeatTimer);\n    activeConnections.delete(installationId);\n    logger.info(\"WeChat polling disconnected\", { installationId });\n  },\n};\n","interface ContextTokenEntry {\n  token: string;\n  installationId: string;\n  senderId: string;\n  updatedAt: number;\n}\n\nconst TOKEN_TTL_MS = 24 * 60 * 60 * 1000; // 24 hours\nconst store = new Map<string, ContextTokenEntry>();\nconst timers = new Map<string, NodeJS.Timeout>();\n\nfunction makeKey(installationId: string, senderId: string): string {\n  return `${installationId}::${senderId}`;\n}\n\nexport function getContextToken(installationId: string, senderId: string): string | undefined {\n  const key = makeKey(installationId, senderId);\n  const entry = store.get(key);\n  if (!entry) return undefined;\n  if (Date.now() - entry.updatedAt > TOKEN_TTL_MS) {\n    deleteContextToken(installationId, senderId);\n    return undefined;\n  }\n  return entry.token;\n}\n\nexport function setContextToken(installationId: string, senderId: string, token: string): void {\n  const key = makeKey(installationId, senderId);\n\n  const existingTimer = timers.get(key);\n  if (existingTimer) clearTimeout(existingTimer);\n\n  store.set(key, { token, installationId, senderId, updatedAt: Date.now() });\n\n  const timer = setTimeout(() => {\n    store.delete(key);\n    timers.delete(key);\n  }, TOKEN_TTL_MS);\n  timers.set(key, timer);\n}\n\nexport function deleteContextToken(installationId: string, senderId: string): void {\n  const key = makeKey(installationId, senderId);\n  store.delete(key);\n  const timer = timers.get(key);\n  if (timer) {\n    clearTimeout(timer);\n    timers.delete(key);\n  }\n}\n\nexport function getContextTokenStoreSize(): number {\n  return store.size;\n}\n"],"mappings":";;;;;;;;AAAA,SAAS,SAAS;;;ACOlB,IAAM,eAAe,KAAK,KAAK,KAAK;AACpC,IAAM,QAAQ,oBAAI,IAA+B;AACjD,IAAM,SAAS,oBAAI,IAA4B;AAE/C,SAAS,QAAQ,gBAAwB,UAA0B;AACjE,SAAO,GAAG,cAAc,KAAK,QAAQ;AACvC;AAEO,SAAS,gBAAgB,gBAAwB,UAAsC;AAC5F,QAAM,MAAM,QAAQ,gBAAgB,QAAQ;AAC5C,QAAM,QAAQ,MAAM,IAAI,GAAG;AAC3B,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,KAAK,IAAI,IAAI,MAAM,YAAY,cAAc;AAC/C,uBAAmB,gBAAgB,QAAQ;AAC3C,WAAO;AAAA,EACT;AACA,SAAO,MAAM;AACf;AAEO,SAAS,gBAAgB,gBAAwB,UAAkB,OAAqB;AAC7F,QAAM,MAAM,QAAQ,gBAAgB,QAAQ;AAE5C,QAAM,gBAAgB,OAAO,IAAI,GAAG;AACpC,MAAI,cAAe,cAAa,aAAa;AAE7C,QAAM,IAAI,KAAK,EAAE,OAAO,gBAAgB,UAAU,WAAW,KAAK,IAAI,EAAE,CAAC;AAEzE,QAAM,QAAQ,WAAW,MAAM;AAC7B,UAAM,OAAO,GAAG;AAChB,WAAO,OAAO,GAAG;AAAA,EACnB,GAAG,YAAY;AACf,SAAO,IAAI,KAAK,KAAK;AACvB;AAEO,SAAS,mBAAmB,gBAAwB,UAAwB;AACjF,QAAM,MAAM,QAAQ,gBAAgB,QAAQ;AAC5C,QAAM,OAAO,GAAG;AAChB,QAAM,QAAQ,OAAO,IAAI,GAAG;AAC5B,MAAI,OAAO;AACT,iBAAa,KAAK;AAClB,WAAO,OAAO,GAAG;AAAA,EACnB;AACF;;;ADpCA,IAAM,SAAS,IAAI,OAAO,EAAE,aAAa,yBAAyB,CAAC;AAEnE,IAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,UAAU,EAAE,OAAO;AAAA,EACnB,KAAK,EAAE,OAAO,EAAE,SAAS;AAC3B,CAAC;AAED,IAAM,yBAAyB;AAC/B,IAAM,0BAA0B;AAChC,IAAM,wBAAwB;AAK9B,IAAM,gBAAgB;AACtB,IAAM,gBAAgB;AAWtB,IAAM,oBAAoB,oBAAI,IAA0B;AAIxD,IAAM,gBAAgB,oBAAI,IAAY;AAEtC,SAAS,WAAW,UAA2B;AAC7C,MAAI,CAAC,YAAY,cAAc,IAAI,QAAQ,EAAG,QAAO;AACrD,gBAAc,IAAI,QAAQ;AAC1B,MAAI,cAAc,OAAO,KAAM;AAC7B,UAAM,QAAQ,cAAc,OAAO,EAAE,KAAK,EAAE;AAC5C,QAAI,UAAU,OAAW,eAAc,OAAO,KAAK;AAAA,EACrD;AACA,SAAO;AACT;AAIA,SAAS,YAAY,KAA6F;AAChH,MAAI,CAAC,IAAI,WAAW,OAAQ,QAAO;AACnC,aAAW,QAAQ,IAAI,WAAW;AAChC,QAAI,KAAK,SAAS,iBAAiB,KAAK,WAAW,MAAM;AACvD,aAAO,KAAK,UAAU;AAAA,IACxB;AAAA,EACF;AACA,SAAO;AACT;AAIO,IAAM,uBAAwE;AAAA,EACnF,SAAS;AAAA,EAET,cAAc;AAAA,EAEd,MAAM,QACJ,YACA,cACgC;AAChC,UAAM,MAAM;AASZ,QAAI,IAAI,iBAAiB,cAAe,QAAO;AAE/C,UAAM,WAAW,IAAI;AACrB,QAAI,CAAC,SAAU,QAAO;AAEtB,UAAM,OAAO,YAAY,GAAG;AAC5B,QAAI,CAAC,KAAM,QAAO;AAGlB,QAAI,IAAI,eAAe;AACrB,sBAAgB,aAAa,IAAI,UAAU,IAAI,aAAa;AAAA,IAC9D;AAEA,WAAO;AAAA,MACL,SAAS;AAAA,MACT,uBAAuB,aAAa;AAAA,MACpC,UAAU,aAAa;AAAA,MACvB,QAAQ;AAAA,QACN,IAAI;AAAA,QACJ,aAAa,SAAS,MAAM,GAAG,EAAE,CAAC;AAAA,MACpC;AAAA,MACA,SAAS;AAAA,QACP;AAAA,MACF;AAAA,MACA,cAAc;AAAA,QACZ,IAAI;AAAA,QACJ,MAAM;AAAA,MACR;AAAA,MACA,aAAa;AAAA,QACX,gBAAgB;AAAA,QAChB,uBAAuB,aAAa;AAAA,QACpC,WAAW,EAAE,SAAS;AAAA,MACxB;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,UACJ,aACA,SACA,cACe;AACf,UAAM,WAAW,YAAY,UAAU;AACvC,UAAM,eAAe,gBAAgB,aAAa,IAAI,QAAQ;AAE9D,QAAI,CAAC,cAAc;AACjB,aAAO,KAAK,mDAAmD;AAAA,QAC7D,gBAAgB,aAAa;AAAA,QAC7B;AAAA,MACF,CAAC;AACD,yBAAmB,aAAa,IAAI,QAAQ;AAC5C;AAAA,IACF;AAEA,UAAM,EAAE,SAAS,IAAI,aAAa;AAClC,UAAM,YAAY,UAAU,UAAU,QAAQ,MAAM,YAAY;AAAA,EAClE;AAAA,EAEA,gBAAgB,SAAyB,SAA0B;AACjE,UAAM,QAAO,oBAAI,KAAK,GAAE,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC;AAClD,UAAM,UAAW,QAAgC;AACjD,WAAO,aAAa,QAAQ,OAAO,EAAE,IAAI,OAAO,IAAI,IAAI;AAAA,EAC1D;AAAA,EAEA,MAAM,QACJ,cACA,MACe;AACf,UAAM,EAAE,IAAI,gBAAgB,UAAU,OAAO,IAAI;AAEjD,QAAI,CAAC,OAAO,UAAU;AACpB,aAAO,KAAK,kDAAkD,EAAE,eAAe,CAAC;AAChF;AAAA,IACF;AAEA,QAAI,kBAAkB,IAAI,cAAc,GAAG;AACzC,aAAO,KAAK,6DAA6D,EAAE,eAAe,CAAC;AAC3F;AAAA,IACF;AAEA,WAAO,KAAK,2BAA2B,EAAE,gBAAgB,SAAS,CAAC;AAEnE,UAAM,kBAAkB,IAAI,gBAAgB;AAE5C,UAAM,iBAAiB,YAAY,MAAM;AACvC,YAAM,SAAS,kBAAkB,IAAI,cAAc;AACnD,UAAI,CAAC,QAAQ;AACX,sBAAc,cAAc;AAC5B;AAAA,MACF;AACA,YAAM,UAAU,KAAK,IAAI,IAAI,OAAO;AACpC,UAAI,UAAU,wBAAwB,GAAG;AACvC,eAAO,MAAM,oDAA+C;AAAA,UAC1D;AAAA,UACA,WAAW;AAAA,QACb,CAAC;AACD,eAAO,gBAAgB,MAAM;AAAA,MAC/B;AAAA,IACF,GAAG,qBAAqB;AAExB,UAAM,QAAsB;AAAA,MAC1B;AAAA,MACA;AAAA,MACA,cAAc,KAAK,IAAI;AAAA,MACvB;AAAA,IACF;AACA,sBAAkB,IAAI,gBAAgB,KAAK;AAE3C,UAAM,SAAU,MAA2E;AAE3F,QAAI,aAAa;AACjB,QAAI,iBAAiB;AAErB,UAAM,mBAAmB,MAAY;AACnC,WAAK,EAAE,MAAM,CAAC,QAAQ;AACpB,eAAO,MAAM,iCAAiC;AAAA,UAC5C;AAAA,UACA,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,QACxD,CAAC;AACD,cAAM,eAAe,kBAAkB,IAAI,cAAc;AACzD,YAAI,gBAAgB,CAAC,aAAa,gBAAgB,OAAO,SAAS;AAChE,qBAAW,kBAAkB,cAAc;AAAA,QAC7C;AAAA,MACF,CAAC;AAAA,IACH;AAEA,UAAM,OAAO,YAA2B;AACtC,YAAM,eAAe,kBAAkB,IAAI,cAAc;AACzD,UAAI,CAAC,gBAAgB,aAAa,gBAAgB,OAAO,SAAS;AAChE,eAAO,KAAK,0BAA0B,EAAE,eAAe,CAAC;AACxD;AAAA,MACF;AAEA,UAAI;AACF,cAAM,SAAS,MAAM;AAAA,UACnB,OAAO;AAAA,UACP;AAAA,UACA,aAAa,gBAAgB;AAAA,QAC/B;AACA,qBAAa,OAAO;AACpB,yBAAiB;AACjB,qBAAa,eAAe,KAAK,IAAI;AAErC,YAAI,OAAO,KAAK,SAAS,GAAG;AAC1B,iBAAO,KAAK,iCAAiC;AAAA,YAC3C;AAAA,YACA,OAAO,OAAO,KAAK;AAAA,UACrB,CAAC;AAAA,QACH;AAEA,mBAAW,UAAU,OAAO,MAAM;AAEhC,cAAI,OAAO,iBAAiB,cAAe;AAE3C,gBAAM,OAAO,YAAY,MAAM;AAC/B,cAAI,CAAC,KAAM;AAEX,cAAI,CAAC,WAAY,OAAkC,aAAa,EAAE,EAAG;AAErE,gBAAM,UAAU,MAAM,qBAAqB;AAAA,YACzC;AAAA,YACA;AAAA,UACF;AACA,cAAI,WAAW,QAAQ;AACrB,kBAAM,iBAAiB,MAAM,OAAO,SAAS,OAAO;AACpD,gBAAI,CAAE,eAAyC,SAAS;AACtD,qBAAO,KAAK,0BAA0B;AAAA,gBACpC;AAAA,gBACA,OAAQ,eAAoD,OAAO;AAAA,cACrE,CAAC;AAAA,YACH;AAAA,UACF;AAAA,QACF;AAAA,MACF,SAAS,KAAK;AACZ,YAAI,eAAe,SAAS,IAAI,SAAS,cAAc;AACrD,iBAAO,KAAK,iCAAiC,EAAE,eAAe,CAAC;AAC/D;AAAA,QACF;AAEA,eAAO,MAAM,qBAAqB;AAAA,UAChC;AAAA,UACA,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,QACxD,CAAC;AACD,cAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,cAAc,CAAC;AAClE,yBAAiB,KAAK,IAAI,iBAAiB,GAAG,sBAAsB;AAAA,MACtE;AAEA,uBAAiB;AAAA,IACnB;AAEA,qBAAiB;AACjB,WAAO,KAAK,0BAA0B,EAAE,eAAe,CAAC;AAAA,EAC1D;AAAA,EAEA,MAAM,WAAW,gBAAuC;AACtD,UAAM,QAAQ,kBAAkB,IAAI,cAAc;AAClD,QAAI,CAAC,OAAO;AACV,aAAO,KAAK,qDAAqD,EAAE,eAAe,CAAC;AACnF;AAAA,IACF;AAEA,WAAO,KAAK,gCAAgC,EAAE,eAAe,CAAC;AAC9D,UAAM,gBAAgB,MAAM;AAC5B,kBAAc,MAAM,cAAc;AAClC,sBAAkB,OAAO,cAAc;AACvC,WAAO,KAAK,+BAA+B,EAAE,eAAe,CAAC;AAAA,EAC/D;AACF;","names":[]}

package/dist/{a2a-7N3WDAOP.mjs → a2a-FGYX2HH3.mjs}

@@ -1,6 +1,7 @@
 import {
   A2AAuthError
-} from "./chunk-2HOCF46L.mjs";
+} from "./chunk-GPHOYR3X.mjs";
+import "./chunk-NFEGQTCC.mjs";
 
 // src/routes/a2a.ts
 var _a2aKeyStore = null;
@@ -68,6 +69,7 @@ async function handleApiKeyCreate(request, reply) {
       tenantId,
       projectId: body.projectId,
       assistantIds: body.assistantIds,
+      grants: body.grants,
       label: body.label
     });
     await refreshStoreKeyMap();
@@ -81,6 +83,36 @@ async function handleApiKeyCreate(request, reply) {
     reply.status(500).send({ success: false, error: "Failed to create key" });
   }
 }
+async function handleApiKeyUpdate(request, reply) {
+  if (!_a2aKeyStore || !_a2aAuthService) {
+    reply.status(501).send({ error: "Key store not configured" });
+    return;
+  }
+  if (!await authorizeKeyMutation(request, reply)) return;
+  const body = request.body;
+  const tenantId = getUserTenantId(request);
+  try {
+    const record = await _a2aAuthService.updateKeyScoped(
+      request.params.id,
+      tenantId,
+      {
+        label: body.label,
+        projectId: body.projectId,
+        assistantIds: body.assistantIds,
+        grants: body.grants
+      }
+    );
+    await refreshStoreKeyMap();
+    reply.status(200).send({ success: true, data: record });
+  } catch (err) {
+    if (err instanceof A2AAuthError) {
+      reply.status(err.statusCode).send({ success: false, error: err.message });
+      return;
+    }
+    request.log.error({ err }, "a2a:keys:update");
+    reply.status(500).send({ success: false, error: "Failed to update key" });
+  }
+}
 async function handleApiKeyDelete(request, reply) {
   if (!await authorizeKeyMutation(request, reply)) return;
   await _a2aKeyStore.delete(request.params.id);
@@ -107,36 +139,43 @@ async function handleApiKeyRotate(request, reply) {
 }
 function registerA2ARoutes(app) {
   const options = { preHandler: requireTenantSession };
-  app.get(
-    "/api/a2a/keys",
-    options,
-    handleApiKeyList
-  );
-  app.post(
-    "/api/a2a/keys",
-    options,
-    handleApiKeyCreate
-  );
-  app.delete(
-    "/api/a2a/keys/:id",
-    options,
-    handleApiKeyDelete
-  );
-  app.post(
-    "/api/a2a/keys/:id/disable",
-    options,
-    handleApiKeyDisable
-  );
-  app.post(
-    "/api/a2a/keys/:id/enable",
-    options,
-    handleApiKeyEnable
-  );
-  app.post(
-    "/api/a2a/keys/:id/rotate",
-    options,
-    handleApiKeyRotate
-  );
+  for (const base of ["/api/keys", "/api/a2a/keys"]) {
+    app.get(
+      base,
+      options,
+      handleApiKeyList
+    );
+    app.post(
+      base,
+      options,
+      handleApiKeyCreate
+    );
+    app.delete(
+      `${base}/:id`,
+      options,
+      handleApiKeyDelete
+    );
+    app.post(
+      `${base}/:id/disable`,
+      options,
+      handleApiKeyDisable
+    );
+    app.post(
+      `${base}/:id/enable`,
+      options,
+      handleApiKeyEnable
+    );
+    app.post(
+      `${base}/:id/rotate`,
+      options,
+      handleApiKeyRotate
+    );
+    app.patch(
+      `${base}/:id`,
+      options,
+      handleApiKeyUpdate
+    );
+  }
 }
 export {
   refreshStoreKeyMap,
@@ -144,4 +183,4 @@ export {
   setA2AAuthService,
   setA2AKeyStore
 };
-//# sourceMappingURL=a2a-7N3WDAOP.mjs.map
+//# sourceMappingURL=a2a-FGYX2HH3.mjs.map

package/dist/a2a-FGYX2HH3.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/routes/a2a.ts"],"sourcesContent":["import type { FastifyInstance, FastifyRequest, FastifyReply } from \"fastify\";\nimport type {\n  A2AApiKeyStore,\n  CreateA2AApiKeyInput,\n} from \"@axiom-lattice/protocols\";\nimport { A2AAuthError } from \"../services/a2a/A2AAuthService\";\nimport type { A2AAuthService } from \"../services/a2a/A2AAuthService\";\n\n// ─── Key Store ────────────────────────────────────────────────────────────\n\nlet _a2aKeyStore: A2AApiKeyStore | null = null;\nlet _a2aAuthService: A2AAuthService | null = null;\n\n/** Inject the A2A key store used by the keys management routes. */\nexport function setA2AKeyStore(store: A2AApiKeyStore): void {\n  _a2aKeyStore = store;\n}\n\n/** Inject the A2A auth service used to create keys and refresh the key cache. */\nexport function setA2AAuthService(service: A2AAuthService): void {\n  _a2aAuthService = service;\n}\n\n/**\n * Reload cached key maps after a keys CRUD mutation. Delegates to the auth\n * service's key-map cache so authentication reflects the latest keys without\n * hitting the store on every request.\n */\nexport async function refreshStoreKeyMap(): Promise<void> {\n  if (_a2aAuthService) await _a2aAuthService.refresh();\n}\n\ninterface RequestWithUser extends FastifyRequest {\n  user?: { id: string; tenantId?: string };\n}\n\nasync function requireTenantSession(\n  request: FastifyRequest,\n  reply: FastifyReply,\n): Promise<void> {\n  if (!getUserTenantId(request)) {\n    await reply.status(401).send({ success: false, error: \"Unauthorized\" });\n  }\n}\n\nasync function authorizeKeyMutation(\n  request: FastifyRequest<{ Params: { id: string } }>,\n  reply: FastifyReply,\n): Promise<boolean> {\n  if (!_a2aKeyStore) {\n    await reply.status(501).send({ error: \"Key store not configured\" });\n    return false;\n  }\n  const record = await _a2aKeyStore.findById(request.params.id);\n  if (!record) {\n    await reply.status(404).send({ success: false, error: \"A2A API key not found\" });\n    return false;\n  }\n  if (record.tenantId !== getUserTenantId(request)) {\n    await reply.status(403).send({ success: false, error: \"Forbidden\" });\n    return false;\n  }\n  return true;\n}\n\nfunction getUserTenantId(request: FastifyRequest): string | undefined {\n  return (request as RequestWithUser).user?.tenantId;\n}\n\n// ─── API Key Management Handlers ─────────────────────────────────────────\n\nasync function handleApiKeyList(\n  request: FastifyRequest<{ Querystring: { tenantId?: string; limit?: string; offset?: string } }>,\n  reply: FastifyReply,\n): Promise<void> {\n  if (!_a2aKeyStore) {\n    reply.status(501).send({ error: \"Key store not configured\" });\n    return;\n  }\n\n  const records = await _a2aKeyStore.list({\n    tenantId: getUserTenantId(request),\n    limit: request.query.limit ? parseInt(request.query.limit, 10) : undefined,\n    offset: request.query.offset ? parseInt(request.query.offset, 10) : undefined,\n  });\n\n  reply.status(200).send({\n    success: true,\n    data: {\n      records: records.map((r) => ({ ...r, key: r.key.slice(0, 8) + \"...\" })),\n      total: records.length,\n    },\n  });\n}\n\nasync function handleApiKeyCreate(\n  request: FastifyRequest<{ Body: Partial<CreateA2AApiKeyInput> }>,\n  reply: FastifyReply,\n): Promise<void> {\n  if (!_a2aKeyStore || !_a2aAuthService) {\n    reply.status(501).send({ error: \"Key store not configured\" });\n    return;\n  }\n\n  const body = request.body as Partial<CreateA2AApiKeyInput>;\n  const tenantId = getUserTenantId(request)!;\n\n  try {\n    const record = await _a2aAuthService.createKeyScoped({\n      tenantId,\n      projectId: body.projectId,\n      assistantIds: body.assistantIds,\n      grants: body.grants,\n      label: body.label,\n    });\n    await refreshStoreKeyMap();\n    reply.status(201).send({ success: true, data: record });\n  } catch (err) {\n    if (err instanceof A2AAuthError) {\n      reply.status(err.statusCode).send({ success: false, error: err.message });\n      return;\n    }\n    request.log.error({ err }, \"a2a:keys:create\");\n    reply.status(500).send({ success: false, error: \"Failed to create key\" });\n  }\n}\n\nasync function handleApiKeyUpdate(\n  request: FastifyRequest<{ Params: { id: string }; Body: Partial<CreateA2AApiKeyInput> }>,\n  reply: FastifyReply,\n): Promise<void> {\n  if (!_a2aKeyStore || !_a2aAuthService) {\n    reply.status(501).send({ error: \"Key store not configured\" });\n    return;\n  }\n  if (!(await authorizeKeyMutation(request, reply))) return;\n\n  const body = request.body as Partial<CreateA2AApiKeyInput>;\n  const tenantId = getUserTenantId(request)!;\n  try {\n    const record = await _a2aAuthService.updateKeyScoped(\n      request.params.id,\n      tenantId,\n      {\n        label: body.label,\n        projectId: body.projectId,\n        assistantIds: body.assistantIds,\n        grants: body.grants,\n      },\n    );\n    await refreshStoreKeyMap();\n    reply.status(200).send({ success: true, data: record });\n  } catch (err) {\n    if (err instanceof A2AAuthError) {\n      reply.status(err.statusCode).send({ success: false, error: err.message });\n      return;\n    }\n    request.log.error({ err }, \"a2a:keys:update\");\n    reply.status(500).send({ success: false, error: \"Failed to update key\" });\n  }\n}\n\nasync function handleApiKeyDelete(\n  request: FastifyRequest<{ Params: { id: string } }>,\n  reply: FastifyReply,\n): Promise<void> {\n  if (!(await authorizeKeyMutation(request, reply))) return;\n\n  await _a2aKeyStore!.delete(request.params.id);\n  await refreshStoreKeyMap();\n\n  reply.status(200).send({ success: true });\n}\n\nasync function handleApiKeyDisable(\n  request: FastifyRequest<{ Params: { id: string } }>,\n  reply: FastifyReply,\n): Promise<void> {\n  if (!(await authorizeKeyMutation(request, reply))) return;\n\n  await _a2aKeyStore!.disable(request.params.id);\n  await refreshStoreKeyMap();\n\n  reply.status(200).send({ success: true });\n}\n\nasync function handleApiKeyEnable(\n  request: FastifyRequest<{ Params: { id: string } }>,\n  reply: FastifyReply,\n): Promise<void> {\n  if (!(await authorizeKeyMutation(request, reply))) return;\n\n  await _a2aKeyStore!.enable(request.params.id);\n  await refreshStoreKeyMap();\n\n  reply.status(200).send({ success: true });\n}\n\nasync function handleApiKeyRotate(\n  request: FastifyRequest<{ Params: { id: string } }>,\n  reply: FastifyReply,\n): Promise<void> {\n  if (!(await authorizeKeyMutation(request, reply))) return;\n\n  const record = await _a2aKeyStore!.rotate(request.params.id);\n  await refreshStoreKeyMap();\n\n  reply.status(200).send({ success: true, data: record });\n}\n\n// ─── Route Registration ───────────────────────────────────────────────────\n\n/**\n * Register the API key management routes.\n *\n * `/api/keys` is the canonical unified surface; `/api/a2a/keys` remains as a\n * backward-compatible alias for existing clients.\n */\nexport function registerA2ARoutes(app: FastifyInstance): void {\n  const options = { preHandler: requireTenantSession };\n  for (const base of [\"/api/keys\", \"/api/a2a/keys\"]) {\n    app.get<{ Querystring: { tenantId?: string; limit?: string; offset?: string } }>(\n      base,\n      options,\n      handleApiKeyList,\n    );\n\n    app.post<{ Body: Partial<CreateA2AApiKeyInput> }>(\n      base,\n      options,\n      handleApiKeyCreate,\n    );\n\n    app.delete<{ Params: { id: string } }>(\n      `${base}/:id`,\n      options,\n      handleApiKeyDelete,\n    );\n\n    app.post<{ Params: { id: string } }>(\n      `${base}/:id/disable`,\n      options,\n      handleApiKeyDisable,\n    );\n\n    app.post<{ Params: { id: string } }>(\n      `${base}/:id/enable`,\n      options,\n      handleApiKeyEnable,\n    );\n\n    app.post<{ Params: { id: string } }>(\n      `${base}/:id/rotate`,\n      options,\n      handleApiKeyRotate,\n    );\n    app.patch<{ Params: { id: string }; Body: Partial<CreateA2AApiKeyInput> }>(\n      `${base}/:id`,\n      options,\n      handleApiKeyUpdate,\n    );\n  }\n}\n"],"mappings":";;;;;;AAUA,IAAI,eAAsC;AAC1C,IAAI,kBAAyC;AAGtC,SAAS,eAAe,OAA6B;AAC1D,iBAAe;AACjB;AAGO,SAAS,kBAAkB,SAA+B;AAC/D,oBAAkB;AACpB;AAOA,eAAsB,qBAAoC;AACxD,MAAI,gBAAiB,OAAM,gBAAgB,QAAQ;AACrD;AAMA,eAAe,qBACb,SACA,OACe;AACf,MAAI,CAAC,gBAAgB,OAAO,GAAG;AAC7B,UAAM,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,OAAO,OAAO,eAAe,CAAC;AAAA,EACxE;AACF;AAEA,eAAe,qBACb,SACA,OACkB;AAClB,MAAI,CAAC,cAAc;AACjB,UAAM,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,2BAA2B,CAAC;AAClE,WAAO;AAAA,EACT;AACA,QAAM,SAAS,MAAM,aAAa,SAAS,QAAQ,OAAO,EAAE;AAC5D,MAAI,CAAC,QAAQ;AACX,UAAM,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,OAAO,OAAO,wBAAwB,CAAC;AAC/E,WAAO;AAAA,EACT;AACA,MAAI,OAAO,aAAa,gBAAgB,OAAO,GAAG;AAChD,UAAM,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,OAAO,OAAO,YAAY,CAAC;AACnE,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,SAA6C;AACpE,SAAQ,QAA4B,MAAM;AAC5C;AAIA,eAAe,iBACb,SACA,OACe;AACf,MAAI,CAAC,cAAc;AACjB,UAAM,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,2BAA2B,CAAC;AAC5D;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,aAAa,KAAK;AAAA,IACtC,UAAU,gBAAgB,OAAO;AAAA,IACjC,OAAO,QAAQ,MAAM,QAAQ,SAAS,QAAQ,MAAM,OAAO,EAAE,IAAI;AAAA,IACjE,QAAQ,QAAQ,MAAM,SAAS,SAAS,QAAQ,MAAM,QAAQ,EAAE,IAAI;AAAA,EACtE,CAAC;AAED,QAAM,OAAO,GAAG,EAAE,KAAK;AAAA,IACrB,SAAS;AAAA,IACT,MAAM;AAAA,MACJ,SAAS,QAAQ,IAAI,CAAC,OAAO,EAAE,GAAG,GAAG,KAAK,EAAE,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,EAAE;AAAA,MACtE,OAAO,QAAQ;AAAA,IACjB;AAAA,EACF,CAAC;AACH;AAEA,eAAe,mBACb,SACA,OACe;AACf,MAAI,CAAC,gBAAgB,CAAC,iBAAiB;AACrC,UAAM,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,2BAA2B,CAAC;AAC5D;AAAA,EACF;AAEA,QAAM,OAAO,QAAQ;AACrB,QAAM,WAAW,gBAAgB,OAAO;AAExC,MAAI;AACF,UAAM,SAAS,MAAM,gBAAgB,gBAAgB;AAAA,MACnD;AAAA,MACA,WAAW,KAAK;AAAA,MAChB,cAAc,KAAK;AAAA,MACnB,QAAQ,KAAK;AAAA,MACb,OAAO,KAAK;AAAA,IACd,CAAC;AACD,UAAM,mBAAmB;AACzB,UAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,MAAM,MAAM,OAAO,CAAC;AAAA,EACxD,SAAS,KAAK;AACZ,QAAI,eAAe,cAAc;AAC/B,YAAM,OAAO,IAAI,UAAU,EAAE,KAAK,EAAE,SAAS,OAAO,OAAO,IAAI,QAAQ,CAAC;AACxE;AAAA,IACF;AACA,YAAQ,IAAI,MAAM,EAAE,IAAI,GAAG,iBAAiB;AAC5C,UAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,OAAO,OAAO,uBAAuB,CAAC;AAAA,EAC1E;AACF;AAEA,eAAe,mBACb,SACA,OACe;AACf,MAAI,CAAC,gBAAgB,CAAC,iBAAiB;AACrC,UAAM,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,2BAA2B,CAAC;AAC5D;AAAA,EACF;AACA,MAAI,CAAE,MAAM,qBAAqB,SAAS,KAAK,EAAI;AAEnD,QAAM,OAAO,QAAQ;AACrB,QAAM,WAAW,gBAAgB,OAAO;AACxC,MAAI;AACF,UAAM,SAAS,MAAM,gBAAgB;AAAA,MACnC,QAAQ,OAAO;AAAA,MACf;AAAA,MACA;AAAA,QACE,OAAO,KAAK;AAAA,QACZ,WAAW,KAAK;AAAA,QAChB,cAAc,KAAK;AAAA,QACnB,QAAQ,KAAK;AAAA,MACf;AAAA,IACF;AACA,UAAM,mBAAmB;AACzB,UAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,MAAM,MAAM,OAAO,CAAC;AAAA,EACxD,SAAS,KAAK;AACZ,QAAI,eAAe,cAAc;AAC/B,YAAM,OAAO,IAAI,UAAU,EAAE,KAAK,EAAE,SAAS,OAAO,OAAO,IAAI,QAAQ,CAAC;AACxE;AAAA,IACF;AACA,YAAQ,IAAI,MAAM,EAAE,IAAI,GAAG,iBAAiB;AAC5C,UAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,OAAO,OAAO,uBAAuB,CAAC;AAAA,EAC1E;AACF;AAEA,eAAe,mBACb,SACA,OACe;AACf,MAAI,CAAE,MAAM,qBAAqB,SAAS,KAAK,EAAI;AAEnD,QAAM,aAAc,OAAO,QAAQ,OAAO,EAAE;AAC5C,QAAM,mBAAmB;AAEzB,QAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,KAAK,CAAC;AAC1C;AAEA,eAAe,oBACb,SACA,OACe;AACf,MAAI,CAAE,MAAM,qBAAqB,SAAS,KAAK,EAAI;AAEnD,QAAM,aAAc,QAAQ,QAAQ,OAAO,EAAE;AAC7C,QAAM,mBAAmB;AAEzB,QAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,KAAK,CAAC;AAC1C;AAEA,eAAe,mBACb,SACA,OACe;AACf,MAAI,CAAE,MAAM,qBAAqB,SAAS,KAAK,EAAI;AAEnD,QAAM,aAAc,OAAO,QAAQ,OAAO,EAAE;AAC5C,QAAM,mBAAmB;AAEzB,QAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,KAAK,CAAC;AAC1C;AAEA,eAAe,mBACb,SACA,OACe;AACf,MAAI,CAAE,MAAM,qBAAqB,SAAS,KAAK,EAAI;AAEnD,QAAM,SAAS,MAAM,aAAc,OAAO,QAAQ,OAAO,EAAE;AAC3D,QAAM,mBAAmB;AAEzB,QAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,MAAM,MAAM,OAAO,CAAC;AACxD;AAUO,SAAS,kBAAkB,KAA4B;AAC5D,QAAM,UAAU,EAAE,YAAY,qBAAqB;AACnD,aAAW,QAAQ,CAAC,aAAa,eAAe,GAAG;AACjD,QAAI;AAAA,MACF;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,QAAI;AAAA,MACF;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,QAAI;AAAA,MACF,GAAG,IAAI;AAAA,MACP;AAAA,MACA;AAAA,IACF;AAEA,QAAI;AAAA,MACF,GAAG,IAAI;AAAA,MACP;AAAA,MACA;AAAA,IACF;AAEA,QAAI;AAAA,MACF,GAAG,IAAI;AAAA,MACP;AAAA,MACA;AAAA,IACF;AAEA,QAAI;AAAA,MACF,GAAG,IAAI;AAAA,MACP;AAAA,MACA;AAAA,IACF;AACA,QAAI;AAAA,MACF,GAAG,IAAI;AAAA,MACP;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/{a2a-standard-WC2BSOFV.mjs → a2a-standard-VEQBXBMM.mjs}

@@ -1,10 +1,14 @@
+import {
+  buildAgentCardForAssistant
+} from "./chunk-QUT2DS4R.mjs";
 import {
   formatFileRefsSection,
   saveProjectFile
 } from "./chunk-J4BK77PA.mjs";
 import {
   A2AAuthError
-} from "./chunk-2HOCF46L.mjs";
+} from "./chunk-GPHOYR3X.mjs";
+import "./chunk-NFEGQTCC.mjs";
 
 // src/routes/a2a-standard.ts
 import { v4 as uuidv42 } from "uuid";
@@ -12,54 +16,12 @@ import {
   A2AError,
   DefaultExecutionEventBus as DefaultExecutionEventBus2,
   DefaultRequestHandler,
+  InMemoryTaskStore,
   JsonRpcTransportHandler,
   RequestContext
 } from "@a2a-js/sdk/server";
 import { createTaskLifecycleService, getStoreLattice } from "@axiom-lattice/core";
 
-// src/services/a2a/A2AAgentCardBuilder.ts
-function buildAgentCardForAssistant(params) {
-  const { assistant, exposure, baseUrl } = params;
-  const jsonRpcUrl = `${baseUrl}/api/a2a/agents/${assistant.id}/jsonrpc`;
-  const skills = (exposure?.skills ?? []).map((s) => ({
-    id: s.id,
-    name: s.name,
-    description: s.description,
-    tags: s.tags ?? [],
-    examples: s.examples ?? []
-  }));
-  return {
-    name: assistant.name,
-    description: assistant.description ?? "",
-    url: jsonRpcUrl,
-    protocolVersion: "0.3.0",
-    version: "1.0.0",
-    defaultInputModes: exposure?.inputModes ?? ["text"],
-    defaultOutputModes: exposure?.outputModes ?? ["text"],
-    capabilities: {
-      streaming: true,
-      pushNotifications: false,
-      stateTransitionHistory: true
-    },
-    skills,
-    additionalInterfaces: [{ transport: "JSONRPC", url: jsonRpcUrl }],
-    securitySchemes: {
-      bearer: {
-        type: "http",
-        scheme: "Bearer",
-        description: "A2A API key sent as an Authorization Bearer token"
-      },
-      apiKeyHeader: {
-        type: "apiKey",
-        in: "header",
-        name: "x-api-key",
-        description: "A2A API key sent via the x-api-key header"
-      }
-    },
-    security: [{ bearer: [] }, { apiKeyHeader: [] }]
-  };
-}
-
 // src/services/a2a/A2ATaskStoreAdapter.ts
 import { createHash } from "crypto";
 import { isDeepStrictEqual } from "util";
@@ -515,6 +477,13 @@ function agentMessage(text) {
     parts: [{ kind: "text", text }]
   };
 }
+function assistantHasGovernedTask(assistant) {
+  const graph = assistant.graphDefinition;
+  const middleware = graph && typeof graph === "object" ? graph.middleware : void 0;
+  const taskMiddleware = Array.isArray(middleware) ? middleware.find((entry) => !!entry && typeof entry === "object" && entry.type === "task" && entry.enabled === true) : void 0;
+  const allowedTools = taskMiddleware?.allowedTools;
+  return !!taskMiddleware && (allowedTools === void 0 || Array.isArray(allowedTools) && (allowedTools.length === 0 || allowedTools.includes("manage_task")));
+}
 var _AxiomAgentExecutor = class _AxiomAgentExecutor {
   constructor(options) {
     this.scope = options.scope;
@@ -559,18 +528,13 @@ var _AxiomAgentExecutor = class _AxiomAgentExecutor {
       });
     };
     try {
-      try {
-        if (!this.taskStore) {
-          throw new Error("A2A governed execution requires a canonical task store");
-        }
-        this.assertGovernedTaskCapability();
-      } catch (err) {
+      if (!this.taskStore) {
         const initialTask2 = createTask([]);
-        if (this.taskStore) await this.taskStore.save(initialTask2);
         bus.publish(initialTask2);
-        publishFailed(err);
+        publishFailed(new Error("A2A execution requires a canonical task store"));
         return;
       }
+      const governed = this.hasGovernedTaskCapability();
       const interruption = existing?.metadata?.interruption;
       const reviewInterruption = interruption && typeof interruption === "object" && interruption.type === "review_required";
       const reviewCommand = reviewInterruption ? this.reviewCommand(text) : void 0;
@@ -607,13 +571,13 @@ var _AxiomAgentExecutor = class _AxiomAgentExecutor {
         const requestText = inputFiles.length > 0 ? `${text}
 
 ${formatFileRefsSection(inputFiles)}` : text;
-        const messageText = [
+        const messageText = governed ? [
           `A2A governed task instruction: get and update the existing TaskItem ${ctx.taskId}; do not create a replacement task.`,
           "Before doing the requested work, initialize its canonical description through manage_task with ## Objective, ## Acceptance Criteria, and ## Belief State sections.",
           "Keep lifecycle status truthful. Change status only through manage_task set_status; complete with a nonblank result and structured beliefImpact, and use interrupted, failed, or cancelled when appropriate. Use manage_task update for content fields only.",
           "",
           requestText
-        ].join("\n");
+        ].join("\n") : requestText;
         const continuationCommand = interruption && typeof interruption === "object" ? { resume: text } : void 0;
         const { messageId } = await agent.addMessage({
           input: { message: messageText },
@@ -623,13 +587,19 @@ ${formatFileRefsSection(inputFiles)}` : text;
         const stream = agent.chunkStream(messageId, [
           MessageChunkTypes.MESSAGE_COMPLETED
         ]);
+        let outputText = "";
+        let interrupted = false;
         for await (const chunk of stream) {
           if (execution.canceled) return;
           const chunkType = chunk.type;
           const chunkText = chunk.data?.content ?? "";
           if (chunkType === MessageChunkTypes.INTERRUPT) {
+            interrupted = true;
             break;
           }
+          if (chunkType === MessageChunkTypes.AI && chunkText) {
+            outputText += chunkText;
+          }
           if (chunkType === MessageChunkTypes.AI || chunkType === MessageChunkTypes.TOOL) {
             if (chunkText) {
               bus.publish({
@@ -647,6 +617,48 @@ ${formatFileRefsSection(inputFiles)}` : text;
           }
         }
         if (execution.canceled) return;
+        if (!governed) {
+          if (interrupted) {
+            const paused = {
+              ...createTask(inputFiles),
+              status: { state: "input-required", timestamp: isoNow() }
+            };
+            await this.taskStore.save(paused);
+            bus.publish({
+              kind: "status-update",
+              taskId: ctx.taskId,
+              contextId: ctx.contextId,
+              status: { state: "input-required", timestamp: isoNow() },
+              final: true
+            });
+            return;
+          }
+          const resultArtifact = {
+            artifactId: uuidv4(),
+            name: "result",
+            parts: [{ kind: "text", text: outputText }]
+          };
+          const completed = {
+            ...createTask(inputFiles),
+            artifacts: [...existing?.artifacts ?? [], resultArtifact],
+            status: { state: "completed", timestamp: isoNow() }
+          };
+          await this.taskStore.save(completed);
+          bus.publish({
+            kind: "artifact-update",
+            taskId: ctx.taskId,
+            contextId: ctx.contextId,
+            artifact: resultArtifact
+          });
+          bus.publish({
+            kind: "status-update",
+            taskId: ctx.taskId,
+            contextId: ctx.contextId,
+            status: { state: "completed", timestamp: isoNow() },
+            final: true
+          });
+          return;
+        }
         const canonical = await this.taskStore.load(ctx.taskId);
         const canonicalState = canonical?.status.state;
         if (canonicalState === "completed") {
@@ -726,15 +738,8 @@ ${formatFileRefsSection(inputFiles)}` : text;
   taskKey(taskId) {
     return `${this.scope.tenantId}:${this.scope.projectId}:${this.scope.assistantId}:${taskId}`;
   }
-  assertGovernedTaskCapability() {
-    const graph = this.assistant.graphDefinition;
-    const middleware = graph && typeof graph === "object" ? graph.middleware : void 0;
-    const taskMiddleware = Array.isArray(middleware) ? middleware.find((entry) => !!entry && typeof entry === "object" && entry.type === "task" && entry.enabled === true) : void 0;
-    const allowedTools = taskMiddleware?.allowedTools;
-    const exposesManageTask = taskMiddleware && (allowedTools === void 0 || Array.isArray(allowedTools) && (allowedTools.length === 0 || allowedTools.includes("manage_task")));
-    if (!exposesManageTask) {
-      throw new Error("A2A execution requires enabled TaskMiddleware exposing manage_task");
-    }
+  hasGovernedTaskCapability() {
+    return assistantHasGovernedTask(this.assistant);
   }
   /**
    * Cancel a running task: resolve its thread id from the task store, abort the
@@ -1038,27 +1043,15 @@ function getHeader(value) {
   if (Array.isArray(value)) return value[0];
   return value;
 }
-function getTenantHeader(request) {
-  return getHeader(request.headers["x-tenant-id"]) ?? "default";
-}
 function getSessionUser(request) {
   return request.user;
 }
-function getSessionTenantId(request) {
-  const userTenantId = getSessionUser(request)?.tenantId;
-  if (userTenantId) return userTenantId;
-  return getTenantHeader(request);
-}
 function buildBaseUrl(request) {
   const protocol = getHeader(request.headers["x-forwarded-proto"]) ?? request.protocol;
   const forwardedHost = getHeader(request.headers["x-forwarded-host"]);
   const host = forwardedHost ? forwardedHost.split(",")[0].trim() : request.host;
   return `${protocol}://${host}`;
 }
-function getExposure(assistant) {
-  const graphDefinition = assistant.graphDefinition;
-  return graphDefinition?.a2aExposure;
-}
 function makeFileIngestor(tenantId, maxFileBytes) {
   return new A2AFileIngestor({
     saveProjectFile: (params) => saveProjectFile({ tenantId, ...params }),
@@ -1105,33 +1098,6 @@ function registerA2AStandardRoutes(app, deps) {
   const resolveTaskWorkItems = deps.getTaskWorkItemStore ?? (() => getStoreLattice("default", "taskWorkItem").store);
   const getAssistantStore = deps.getAssistantStore ?? (() => getStoreLattice("default", "assistant").store);
   const getProjectStore = deps.getProjectStore ?? (() => getStoreLattice("default", "project").store);
-  const getTenantStore = deps.getTenantStore ?? (() => {
-    try {
-      return getStoreLattice("default", "tenant").store;
-    } catch {
-      return void 0;
-    }
-  });
-  async function findExposedAssistant(request, assistantId) {
-    const tenantId = getSessionTenantId(request);
-    const direct = await getAssistantStore().getAssistantById(
-      tenantId,
-      assistantId
-    );
-    if (direct) return direct;
-    const tenantStore = getTenantStore();
-    if (!tenantStore) return null;
-    const tenants = await tenantStore.getAllTenants();
-    for (const tenant of tenants) {
-      if (tenant.id === tenantId) continue;
-      const found = await getAssistantStore().getAssistantById(
-        tenant.id,
-        assistantId
-      );
-      if (found) return found;
-    }
-    return null;
-  }
   const runtimeRegistry = deps.runtimeRegistry ?? new A2ARuntimeRegistry();
   app.addHook("onClose", async () => {
     runtimeRegistry.close();
@@ -1139,19 +1105,32 @@ function registerA2AStandardRoutes(app, deps) {
   app.get(
     "/api/a2a/agents/:assistantId/.well-known/agent-card.json",
     async (request, reply) => {
-      const assistant = await findExposedAssistant(
-        request,
-        request.params.assistantId
+      const auth = await authService.authenticate(
+        getHeader(request.headers.authorization) ?? getHeader(request.headers["x-api-key"])
       );
-      if (!assistant || getExposure(assistant)?.enabled !== true) {
-        reply.status(404).send({ error: "Not found" });
+      if (!auth.authenticated) {
+        reply.status(401).send({ error: "Unauthorized" });
+        return;
+      }
+      let assistant;
+      try {
+        assistant = await authService.assertAgentAccess(
+          auth,
+          request.params.assistantId
+        );
+      } catch (err) {
+        if (err instanceof A2AAuthError) {
+          reply.status(err.statusCode).send({ error: err.message });
+          return;
+        }
+        request.log.error({ err }, "a2a:agent-card:auth");
+        reply.status(500).send({ error: "Internal error" });
         return;
       }
       reply.header("A2A-Version", "0.3");
       reply.status(200).send(
         buildAgentCardForAssistant({
           assistant,
-          exposure: getExposure(assistant),
           baseUrl: buildBaseUrl(request)
         })
       );
@@ -1170,7 +1149,7 @@ function registerA2AStandardRoutes(app, deps) {
       }
       let assistant;
       try {
-        assistant = await authService.assertExposedAgent(
+        assistant = await authService.assertAgentAccess(
           auth,
           request.params.assistantId
         );
@@ -1196,7 +1175,7 @@ function registerA2AStandardRoutes(app, deps) {
       };
       const internalTasks = resolveTasks();
       const workItems = resolveTaskWorkItems();
-      const taskStore = new A2ATaskStoreAdapter({
+      const taskStore = assistantHasGovernedTask(assistant) ? new A2ATaskStoreAdapter({
         taskStore: internalTasks,
         workItemStore: workItems,
         lifecycle: createTaskLifecycleService({
@@ -1204,12 +1183,11 @@ function registerA2AStandardRoutes(app, deps) {
           workItemStore: workItems
         }),
         scope
-      });
+      }) : new InMemoryTaskStore();
       const ingestor = makeFileIngestor(scope.tenantId, deps.maxFileBytes);
       const executor = new AxiomAgentExecutor({ scope, assistant, taskStore, ingestor });
       const card = buildAgentCardForAssistant({
         assistant,
-        exposure: getExposure(assistant),
         baseUrl: buildBaseUrl(request)
       });
       let runtimeLease;
@@ -1315,7 +1293,7 @@ data: ${JSON.stringify(errorResponse)}
       const ingestor = makeFileIngestor(scope.tenantId, deps.maxFileBytes);
       const internalTasks = resolveTasks();
       const workItems = resolveTaskWorkItems();
-      const taskStore = new A2ATaskStoreAdapter({
+      const taskStore = assistantHasGovernedTask(assistant) ? new A2ATaskStoreAdapter({
         taskStore: internalTasks,
         workItemStore: workItems,
         lifecycle: createTaskLifecycleService({
@@ -1323,7 +1301,7 @@ data: ${JSON.stringify(errorResponse)}
           workItemStore: workItems
         }),
         scope
-      });
+      }) : new InMemoryTaskStore();
       const executor = new AxiomAgentExecutor({ scope, assistant, taskStore, ingestor });
       const taskId = uuidv42();
       const contextId = uuidv42();
@@ -1366,4 +1344,4 @@ data: ${JSON.stringify(data)}
 export {
   registerA2AStandardRoutes
 };
-//# sourceMappingURL=a2a-standard-WC2BSOFV.mjs.map
+//# sourceMappingURL=a2a-standard-VEQBXBMM.mjs.map