@claude-flow/cli 3.32.26 → 3.32.30

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (403) hide show
  1. package/.claude/helpers/.helpers-version +1 -1
  2. package/.claude/helpers/helpers.manifest.json +2 -2
  3. package/catalog-manifest.json +4 -4
  4. package/dist/src/commands/index.d.ts +1 -0
  5. package/dist/src/commands/index.js +5 -3
  6. package/dist/src/commands/memory.js +49 -5
  7. package/dist/src/commands/metaharness.js +25 -5
  8. package/dist/src/commands/policy.d.ts +4 -0
  9. package/dist/src/commands/policy.js +107 -0
  10. package/dist/src/index.js +18 -0
  11. package/dist/src/init/claudemd-generator.js +53 -2
  12. package/dist/src/mcp-client.js +25 -1
  13. package/dist/src/mcp-tools/capability-brain.d.ts +134 -0
  14. package/dist/src/mcp-tools/capability-brain.js +697 -0
  15. package/dist/src/mcp-tools/guidance-tools.d.ts +2 -0
  16. package/dist/src/mcp-tools/guidance-tools.js +369 -37
  17. package/dist/src/mcp-tools/index.d.ts +4 -1
  18. package/dist/src/mcp-tools/index.js +3 -1
  19. package/dist/src/mcp-tools/memory-tools.js +26 -0
  20. package/dist/src/mcp-tools/metaharness-tools.js +27 -1
  21. package/dist/src/mcp-tools/policy-tools.d.ts +3 -0
  22. package/dist/src/mcp-tools/policy-tools.js +121 -0
  23. package/dist/src/memory/memory-bridge.d.ts +11 -0
  24. package/dist/src/memory/memory-bridge.js +100 -21
  25. package/dist/src/memory/memory-initializer.d.ts +22 -1
  26. package/dist/src/memory/memory-initializer.js +184 -39
  27. package/dist/src/services/bounded-worker-pool.d.ts +28 -0
  28. package/dist/src/services/bounded-worker-pool.js +90 -0
  29. package/dist/src/services/harness-flywheel-runtime.d.ts +2 -0
  30. package/dist/src/services/harness-flywheel-runtime.js +18 -0
  31. package/dist/src/services/harness-flywheel.d.ts +4 -1
  32. package/dist/src/services/harness-flywheel.js +27 -6
  33. package/dist/src/services/policy-runtime.d.ts +38 -0
  34. package/dist/src/services/policy-runtime.js +340 -0
  35. package/node_modules/@claude-flow/codex/.agents/skills/memory-management/SKILL.md +45 -0
  36. package/node_modules/@claude-flow/codex/.agents/skills/security-audit/SKILL.md +46 -0
  37. package/node_modules/@claude-flow/codex/.agents/skills/sparc-methodology/SKILL.md +46 -0
  38. package/node_modules/@claude-flow/codex/.agents/skills/swarm-orchestration/SKILL.md +53 -0
  39. package/node_modules/@claude-flow/codex/README.md +1044 -0
  40. package/node_modules/@claude-flow/codex/dist/cli.d.ts +9 -0
  41. package/node_modules/@claude-flow/codex/dist/cli.d.ts.map +1 -0
  42. package/node_modules/@claude-flow/codex/dist/cli.js +686 -0
  43. package/node_modules/@claude-flow/codex/dist/cli.js.map +1 -0
  44. package/node_modules/@claude-flow/codex/dist/dual-mode/cli.d.ts +17 -0
  45. package/node_modules/@claude-flow/codex/dist/dual-mode/cli.d.ts.map +1 -0
  46. package/node_modules/@claude-flow/codex/dist/dual-mode/cli.js +278 -0
  47. package/node_modules/@claude-flow/codex/dist/dual-mode/cli.js.map +1 -0
  48. package/node_modules/@claude-flow/codex/dist/dual-mode/index.d.ts +8 -0
  49. package/node_modules/@claude-flow/codex/dist/dual-mode/index.d.ts.map +1 -0
  50. package/node_modules/@claude-flow/codex/dist/dual-mode/index.js +7 -0
  51. package/node_modules/@claude-flow/codex/dist/dual-mode/index.js.map +1 -0
  52. package/node_modules/@claude-flow/codex/dist/dual-mode/orchestrator.d.ts +143 -0
  53. package/node_modules/@claude-flow/codex/dist/dual-mode/orchestrator.d.ts.map +1 -0
  54. package/node_modules/@claude-flow/codex/dist/dual-mode/orchestrator.js +621 -0
  55. package/node_modules/@claude-flow/codex/dist/dual-mode/orchestrator.js.map +1 -0
  56. package/node_modules/@claude-flow/codex/dist/generators/agents-md.d.ts +12 -0
  57. package/node_modules/@claude-flow/codex/dist/generators/agents-md.d.ts.map +1 -0
  58. package/node_modules/@claude-flow/codex/dist/generators/agents-md.js +730 -0
  59. package/node_modules/@claude-flow/codex/dist/generators/agents-md.js.map +1 -0
  60. package/node_modules/@claude-flow/codex/dist/generators/config-toml.d.ts +74 -0
  61. package/node_modules/@claude-flow/codex/dist/generators/config-toml.d.ts.map +1 -0
  62. package/node_modules/@claude-flow/codex/dist/generators/config-toml.js +922 -0
  63. package/node_modules/@claude-flow/codex/dist/generators/config-toml.js.map +1 -0
  64. package/node_modules/@claude-flow/codex/dist/generators/index.d.ts +9 -0
  65. package/node_modules/@claude-flow/codex/dist/generators/index.d.ts.map +1 -0
  66. package/node_modules/@claude-flow/codex/dist/generators/index.js +9 -0
  67. package/node_modules/@claude-flow/codex/dist/generators/index.js.map +1 -0
  68. package/node_modules/@claude-flow/codex/dist/generators/skill-md.d.ts +20 -0
  69. package/node_modules/@claude-flow/codex/dist/generators/skill-md.d.ts.map +1 -0
  70. package/node_modules/@claude-flow/codex/dist/generators/skill-md.js +951 -0
  71. package/node_modules/@claude-flow/codex/dist/generators/skill-md.js.map +1 -0
  72. package/node_modules/@claude-flow/codex/dist/harness/build-evidence.d.ts +46 -0
  73. package/node_modules/@claude-flow/codex/dist/harness/build-evidence.d.ts.map +1 -0
  74. package/node_modules/@claude-flow/codex/dist/harness/build-evidence.js +126 -0
  75. package/node_modules/@claude-flow/codex/dist/harness/build-evidence.js.map +1 -0
  76. package/node_modules/@claude-flow/codex/dist/harness/contract.d.ts +153 -0
  77. package/node_modules/@claude-flow/codex/dist/harness/contract.d.ts.map +1 -0
  78. package/node_modules/@claude-flow/codex/dist/harness/contract.js +44 -0
  79. package/node_modules/@claude-flow/codex/dist/harness/contract.js.map +1 -0
  80. package/node_modules/@claude-flow/codex/dist/harness/in-memory-fenced-lease-reference.d.ts +33 -0
  81. package/node_modules/@claude-flow/codex/dist/harness/in-memory-fenced-lease-reference.d.ts.map +1 -0
  82. package/node_modules/@claude-flow/codex/dist/harness/in-memory-fenced-lease-reference.js +175 -0
  83. package/node_modules/@claude-flow/codex/dist/harness/in-memory-fenced-lease-reference.js.map +1 -0
  84. package/node_modules/@claude-flow/codex/dist/harness/in-memory-inbox-reference.d.ts +42 -0
  85. package/node_modules/@claude-flow/codex/dist/harness/in-memory-inbox-reference.d.ts.map +1 -0
  86. package/node_modules/@claude-flow/codex/dist/harness/in-memory-inbox-reference.js +140 -0
  87. package/node_modules/@claude-flow/codex/dist/harness/in-memory-inbox-reference.js.map +1 -0
  88. package/node_modules/@claude-flow/codex/dist/harness/in-memory-run-receipt-reference.d.ts +19 -0
  89. package/node_modules/@claude-flow/codex/dist/harness/in-memory-run-receipt-reference.d.ts.map +1 -0
  90. package/node_modules/@claude-flow/codex/dist/harness/in-memory-run-receipt-reference.js +79 -0
  91. package/node_modules/@claude-flow/codex/dist/harness/in-memory-run-receipt-reference.js.map +1 -0
  92. package/node_modules/@claude-flow/codex/dist/harness/index.d.ts +9 -0
  93. package/node_modules/@claude-flow/codex/dist/harness/index.d.ts.map +1 -0
  94. package/node_modules/@claude-flow/codex/dist/harness/index.js +9 -0
  95. package/node_modules/@claude-flow/codex/dist/harness/index.js.map +1 -0
  96. package/node_modules/@claude-flow/codex/dist/harness/portable-case-fold.d.ts +8 -0
  97. package/node_modules/@claude-flow/codex/dist/harness/portable-case-fold.d.ts.map +1 -0
  98. package/node_modules/@claude-flow/codex/dist/harness/portable-case-fold.js +10 -0
  99. package/node_modules/@claude-flow/codex/dist/harness/portable-case-fold.js.map +1 -0
  100. package/node_modules/@claude-flow/codex/dist/harness/repository-state.d.ts +68 -0
  101. package/node_modules/@claude-flow/codex/dist/harness/repository-state.d.ts.map +1 -0
  102. package/node_modules/@claude-flow/codex/dist/harness/repository-state.js +403 -0
  103. package/node_modules/@claude-flow/codex/dist/harness/repository-state.js.map +1 -0
  104. package/node_modules/@claude-flow/codex/dist/harness/unsigned-integer.d.ts +3 -0
  105. package/node_modules/@claude-flow/codex/dist/harness/unsigned-integer.d.ts.map +1 -0
  106. package/node_modules/@claude-flow/codex/dist/harness/unsigned-integer.js +14 -0
  107. package/node_modules/@claude-flow/codex/dist/harness/unsigned-integer.js.map +1 -0
  108. package/node_modules/@claude-flow/codex/dist/index.d.ts +53 -0
  109. package/node_modules/@claude-flow/codex/dist/index.d.ts.map +1 -0
  110. package/node_modules/@claude-flow/codex/dist/index.js +54 -0
  111. package/node_modules/@claude-flow/codex/dist/index.js.map +1 -0
  112. package/node_modules/@claude-flow/codex/dist/initializer.d.ts +98 -0
  113. package/node_modules/@claude-flow/codex/dist/initializer.d.ts.map +1 -0
  114. package/node_modules/@claude-flow/codex/dist/initializer.js +795 -0
  115. package/node_modules/@claude-flow/codex/dist/initializer.js.map +1 -0
  116. package/node_modules/@claude-flow/codex/dist/loop/cli.d.ts +3 -0
  117. package/node_modules/@claude-flow/codex/dist/loop/cli.d.ts.map +1 -0
  118. package/node_modules/@claude-flow/codex/dist/loop/cli.js +123 -0
  119. package/node_modules/@claude-flow/codex/dist/loop/cli.js.map +1 -0
  120. package/node_modules/@claude-flow/codex/dist/loop/index.d.ts +58 -0
  121. package/node_modules/@claude-flow/codex/dist/loop/index.d.ts.map +1 -0
  122. package/node_modules/@claude-flow/codex/dist/loop/index.js +230 -0
  123. package/node_modules/@claude-flow/codex/dist/loop/index.js.map +1 -0
  124. package/node_modules/@claude-flow/codex/dist/mcp-config.d.ts +28 -0
  125. package/node_modules/@claude-flow/codex/dist/mcp-config.d.ts.map +1 -0
  126. package/node_modules/@claude-flow/codex/dist/mcp-config.js +121 -0
  127. package/node_modules/@claude-flow/codex/dist/mcp-config.js.map +1 -0
  128. package/node_modules/@claude-flow/codex/dist/migrations/index.d.ts +114 -0
  129. package/node_modules/@claude-flow/codex/dist/migrations/index.d.ts.map +1 -0
  130. package/node_modules/@claude-flow/codex/dist/migrations/index.js +880 -0
  131. package/node_modules/@claude-flow/codex/dist/migrations/index.js.map +1 -0
  132. package/node_modules/@claude-flow/codex/dist/templates/index.d.ts +92 -0
  133. package/node_modules/@claude-flow/codex/dist/templates/index.d.ts.map +1 -0
  134. package/node_modules/@claude-flow/codex/dist/templates/index.js +284 -0
  135. package/node_modules/@claude-flow/codex/dist/templates/index.js.map +1 -0
  136. package/node_modules/@claude-flow/codex/dist/types.d.ts +240 -0
  137. package/node_modules/@claude-flow/codex/dist/types.d.ts.map +1 -0
  138. package/node_modules/@claude-flow/codex/dist/types.js +8 -0
  139. package/node_modules/@claude-flow/codex/dist/types.js.map +1 -0
  140. package/node_modules/@claude-flow/codex/dist/validators/index.d.ts +42 -0
  141. package/node_modules/@claude-flow/codex/dist/validators/index.d.ts.map +1 -0
  142. package/node_modules/@claude-flow/codex/dist/validators/index.js +929 -0
  143. package/node_modules/@claude-flow/codex/dist/validators/index.js.map +1 -0
  144. package/node_modules/@claude-flow/codex/dist/worktrees/coordinator.d.ts +37 -0
  145. package/node_modules/@claude-flow/codex/dist/worktrees/coordinator.d.ts.map +1 -0
  146. package/node_modules/@claude-flow/codex/dist/worktrees/coordinator.js +137 -0
  147. package/node_modules/@claude-flow/codex/dist/worktrees/coordinator.js.map +1 -0
  148. package/node_modules/@claude-flow/codex/dist/worktrees/index.d.ts +2 -0
  149. package/node_modules/@claude-flow/codex/dist/worktrees/index.d.ts.map +1 -0
  150. package/node_modules/@claude-flow/codex/dist/worktrees/index.js +2 -0
  151. package/node_modules/@claude-flow/codex/dist/worktrees/index.js.map +1 -0
  152. package/node_modules/@claude-flow/codex/package.json +122 -0
  153. package/node_modules/@claude-flow/plugin-agent-federation/README.md +49 -0
  154. package/node_modules/@claude-flow/plugin-agent-federation/dist/a2a/agent-card.d.ts +130 -0
  155. package/node_modules/@claude-flow/plugin-agent-federation/dist/a2a/agent-card.d.ts.map +1 -0
  156. package/node_modules/@claude-flow/plugin-agent-federation/dist/a2a/agent-card.js +239 -0
  157. package/node_modules/@claude-flow/plugin-agent-federation/dist/a2a/agent-card.js.map +1 -0
  158. package/node_modules/@claude-flow/plugin-agent-federation/dist/a2a/consume.d.ts +34 -0
  159. package/node_modules/@claude-flow/plugin-agent-federation/dist/a2a/consume.d.ts.map +1 -0
  160. package/node_modules/@claude-flow/plugin-agent-federation/dist/a2a/consume.js +69 -0
  161. package/node_modules/@claude-flow/plugin-agent-federation/dist/a2a/consume.js.map +1 -0
  162. package/node_modules/@claude-flow/plugin-agent-federation/dist/a2a/well-known.d.ts +46 -0
  163. package/node_modules/@claude-flow/plugin-agent-federation/dist/a2a/well-known.d.ts.map +1 -0
  164. package/node_modules/@claude-flow/plugin-agent-federation/dist/a2a/well-known.js +84 -0
  165. package/node_modules/@claude-flow/plugin-agent-federation/dist/a2a/well-known.js.map +1 -0
  166. package/node_modules/@claude-flow/plugin-agent-federation/dist/application/claim-checker.d.ts +27 -0
  167. package/node_modules/@claude-flow/plugin-agent-federation/dist/application/claim-checker.d.ts.map +1 -0
  168. package/node_modules/@claude-flow/plugin-agent-federation/dist/application/claim-checker.js +46 -0
  169. package/node_modules/@claude-flow/plugin-agent-federation/dist/application/claim-checker.js.map +1 -0
  170. package/node_modules/@claude-flow/plugin-agent-federation/dist/application/federation-breaker-service.d.ts +192 -0
  171. package/node_modules/@claude-flow/plugin-agent-federation/dist/application/federation-breaker-service.d.ts.map +1 -0
  172. package/node_modules/@claude-flow/plugin-agent-federation/dist/application/federation-breaker-service.js +253 -0
  173. package/node_modules/@claude-flow/plugin-agent-federation/dist/application/federation-breaker-service.js.map +1 -0
  174. package/node_modules/@claude-flow/plugin-agent-federation/dist/application/federation-coordinator.d.ts +211 -0
  175. package/node_modules/@claude-flow/plugin-agent-federation/dist/application/federation-coordinator.d.ts.map +1 -0
  176. package/node_modules/@claude-flow/plugin-agent-federation/dist/application/federation-coordinator.js +501 -0
  177. package/node_modules/@claude-flow/plugin-agent-federation/dist/application/federation-coordinator.js.map +1 -0
  178. package/node_modules/@claude-flow/plugin-agent-federation/dist/application/inbound-dispatcher.d.ts +114 -0
  179. package/node_modules/@claude-flow/plugin-agent-federation/dist/application/inbound-dispatcher.d.ts.map +1 -0
  180. package/node_modules/@claude-flow/plugin-agent-federation/dist/application/inbound-dispatcher.js +356 -0
  181. package/node_modules/@claude-flow/plugin-agent-federation/dist/application/inbound-dispatcher.js.map +1 -0
  182. package/node_modules/@claude-flow/plugin-agent-federation/dist/application/policy-engine.d.ts +41 -0
  183. package/node_modules/@claude-flow/plugin-agent-federation/dist/application/policy-engine.d.ts.map +1 -0
  184. package/node_modules/@claude-flow/plugin-agent-federation/dist/application/policy-engine.js +184 -0
  185. package/node_modules/@claude-flow/plugin-agent-federation/dist/application/policy-engine.js.map +1 -0
  186. package/node_modules/@claude-flow/plugin-agent-federation/dist/application/spend-reporter.d.ts +150 -0
  187. package/node_modules/@claude-flow/plugin-agent-federation/dist/application/spend-reporter.d.ts.map +1 -0
  188. package/node_modules/@claude-flow/plugin-agent-federation/dist/application/spend-reporter.js +128 -0
  189. package/node_modules/@claude-flow/plugin-agent-federation/dist/application/spend-reporter.js.map +1 -0
  190. package/node_modules/@claude-flow/plugin-agent-federation/dist/application/trust-evaluator.d.ts +74 -0
  191. package/node_modules/@claude-flow/plugin-agent-federation/dist/application/trust-evaluator.d.ts.map +1 -0
  192. package/node_modules/@claude-flow/plugin-agent-federation/dist/application/trust-evaluator.js +179 -0
  193. package/node_modules/@claude-flow/plugin-agent-federation/dist/application/trust-evaluator.js.map +1 -0
  194. package/node_modules/@claude-flow/plugin-agent-federation/dist/bin.d.ts +13 -0
  195. package/node_modules/@claude-flow/plugin-agent-federation/dist/bin.d.ts.map +1 -0
  196. package/node_modules/@claude-flow/plugin-agent-federation/dist/bin.js +189 -0
  197. package/node_modules/@claude-flow/plugin-agent-federation/dist/bin.js.map +1 -0
  198. package/node_modules/@claude-flow/plugin-agent-federation/dist/cli-commands.d.ts +7 -0
  199. package/node_modules/@claude-flow/plugin-agent-federation/dist/cli-commands.d.ts.map +1 -0
  200. package/node_modules/@claude-flow/plugin-agent-federation/dist/cli-commands.js +317 -0
  201. package/node_modules/@claude-flow/plugin-agent-federation/dist/cli-commands.js.map +1 -0
  202. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/entities/federation-envelope.d.ts +45 -0
  203. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/entities/federation-envelope.d.ts.map +1 -0
  204. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/entities/federation-envelope.js +71 -0
  205. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/entities/federation-envelope.js.map +1 -0
  206. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/entities/federation-node.d.ts +104 -0
  207. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/entities/federation-node.d.ts.map +1 -0
  208. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/entities/federation-node.js +152 -0
  209. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/entities/federation-node.js.map +1 -0
  210. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/entities/federation-session.d.ts +55 -0
  211. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/entities/federation-session.d.ts.map +1 -0
  212. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/entities/federation-session.js +105 -0
  213. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/entities/federation-session.js.map +1 -0
  214. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/entities/trust-level.d.ts +17 -0
  215. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/entities/trust-level.d.ts.map +1 -0
  216. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/entities/trust-level.js +35 -0
  217. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/entities/trust-level.js.map +1 -0
  218. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/audit-service.d.ts +69 -0
  219. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/audit-service.d.ts.map +1 -0
  220. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/audit-service.js +149 -0
  221. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/audit-service.js.map +1 -0
  222. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/discovery-service.d.ts +68 -0
  223. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/discovery-service.d.ts.map +1 -0
  224. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/discovery-service.js +161 -0
  225. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/discovery-service.js.map +1 -0
  226. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/handshake-service.d.ts +58 -0
  227. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/handshake-service.d.ts.map +1 -0
  228. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/handshake-service.js +122 -0
  229. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/handshake-service.js.map +1 -0
  230. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/pii-pipeline-service.d.ts +65 -0
  231. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/pii-pipeline-service.d.ts.map +1 -0
  232. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/pii-pipeline-service.js +208 -0
  233. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/pii-pipeline-service.js.map +1 -0
  234. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/routing-service.d.ts +51 -0
  235. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/routing-service.d.ts.map +1 -0
  236. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/routing-service.js +147 -0
  237. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/routing-service.js.map +1 -0
  238. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/wg-firewall-service.d.ts +71 -0
  239. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/wg-firewall-service.d.ts.map +1 -0
  240. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/wg-firewall-service.js +194 -0
  241. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/wg-firewall-service.js.map +1 -0
  242. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/wg-mesh-service.d.ts +156 -0
  243. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/wg-mesh-service.d.ts.map +1 -0
  244. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/wg-mesh-service.js +292 -0
  245. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/wg-mesh-service.js.map +1 -0
  246. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/wg-witness-service.d.ts +98 -0
  247. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/wg-witness-service.d.ts.map +1 -0
  248. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/wg-witness-service.js +122 -0
  249. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/services/wg-witness-service.js.map +1 -0
  250. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/value-objects/federation-budget.d.ts +89 -0
  251. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/value-objects/federation-budget.d.ts.map +1 -0
  252. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/value-objects/federation-budget.js +165 -0
  253. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/value-objects/federation-budget.js.map +1 -0
  254. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/value-objects/federation-node-state.d.ts +92 -0
  255. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/value-objects/federation-node-state.d.ts.map +1 -0
  256. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/value-objects/federation-node-state.js +100 -0
  257. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/value-objects/federation-node-state.js.map +1 -0
  258. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/value-objects/wg-config.d.ts +70 -0
  259. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/value-objects/wg-config.d.ts.map +1 -0
  260. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/value-objects/wg-config.js +104 -0
  261. package/node_modules/@claude-flow/plugin-agent-federation/dist/domain/value-objects/wg-config.js.map +1 -0
  262. package/node_modules/@claude-flow/plugin-agent-federation/dist/index.d.ts +23 -0
  263. package/node_modules/@claude-flow/plugin-agent-federation/dist/index.d.ts.map +1 -0
  264. package/node_modules/@claude-flow/plugin-agent-federation/dist/index.js +24 -0
  265. package/node_modules/@claude-flow/plugin-agent-federation/dist/index.js.map +1 -0
  266. package/node_modules/@claude-flow/plugin-agent-federation/dist/mcp-tools.d.ts +10 -0
  267. package/node_modules/@claude-flow/plugin-agent-federation/dist/mcp-tools.d.ts.map +1 -0
  268. package/node_modules/@claude-flow/plugin-agent-federation/dist/mcp-tools.js +439 -0
  269. package/node_modules/@claude-flow/plugin-agent-federation/dist/mcp-tools.js.map +1 -0
  270. package/node_modules/@claude-flow/plugin-agent-federation/dist/plugin.d.ts +19 -0
  271. package/node_modules/@claude-flow/plugin-agent-federation/dist/plugin.d.ts.map +1 -0
  272. package/node_modules/@claude-flow/plugin-agent-federation/dist/plugin.js +515 -0
  273. package/node_modules/@claude-flow/plugin-agent-federation/dist/plugin.js.map +1 -0
  274. package/node_modules/@claude-flow/plugin-agent-federation/dist/transport/midstream-aware-loader.d.ts +72 -0
  275. package/node_modules/@claude-flow/plugin-agent-federation/dist/transport/midstream-aware-loader.d.ts.map +1 -0
  276. package/node_modules/@claude-flow/plugin-agent-federation/dist/transport/midstream-aware-loader.js +269 -0
  277. package/node_modules/@claude-flow/plugin-agent-federation/dist/transport/midstream-aware-loader.js.map +1 -0
  278. package/node_modules/@claude-flow/plugin-agent-federation/dist/version.d.ts +3 -0
  279. package/node_modules/@claude-flow/plugin-agent-federation/dist/version.d.ts.map +1 -0
  280. package/node_modules/@claude-flow/plugin-agent-federation/dist/version.js +3 -0
  281. package/node_modules/@claude-flow/plugin-agent-federation/dist/version.js.map +1 -0
  282. package/node_modules/@claude-flow/plugin-agent-federation/package.json +64 -0
  283. package/node_modules/@claude-flow/security/README.md +292 -0
  284. package/node_modules/@claude-flow/security/dist/CVE-REMEDIATION.d.ts +97 -0
  285. package/node_modules/@claude-flow/security/dist/CVE-REMEDIATION.d.ts.map +1 -0
  286. package/node_modules/@claude-flow/security/dist/CVE-REMEDIATION.js +537 -0
  287. package/node_modules/@claude-flow/security/dist/CVE-REMEDIATION.js.map +1 -0
  288. package/node_modules/@claude-flow/security/dist/application/index.d.ts +7 -0
  289. package/node_modules/@claude-flow/security/dist/application/index.d.ts.map +1 -0
  290. package/node_modules/@claude-flow/security/dist/application/index.js +7 -0
  291. package/node_modules/@claude-flow/security/dist/application/index.js.map +1 -0
  292. package/node_modules/@claude-flow/security/dist/application/services/security-application-service.d.ts +71 -0
  293. package/node_modules/@claude-flow/security/dist/application/services/security-application-service.d.ts.map +1 -0
  294. package/node_modules/@claude-flow/security/dist/application/services/security-application-service.js +153 -0
  295. package/node_modules/@claude-flow/security/dist/application/services/security-application-service.js.map +1 -0
  296. package/node_modules/@claude-flow/security/dist/authorization/propagator.d.ts +148 -0
  297. package/node_modules/@claude-flow/security/dist/authorization/propagator.d.ts.map +1 -0
  298. package/node_modules/@claude-flow/security/dist/authorization/propagator.js +182 -0
  299. package/node_modules/@claude-flow/security/dist/authorization/propagator.js.map +1 -0
  300. package/node_modules/@claude-flow/security/dist/credential-generator.d.ts +176 -0
  301. package/node_modules/@claude-flow/security/dist/credential-generator.d.ts.map +1 -0
  302. package/node_modules/@claude-flow/security/dist/credential-generator.js +272 -0
  303. package/node_modules/@claude-flow/security/dist/credential-generator.js.map +1 -0
  304. package/node_modules/@claude-flow/security/dist/domain/entities/security-context.d.ts +68 -0
  305. package/node_modules/@claude-flow/security/dist/domain/entities/security-context.d.ts.map +1 -0
  306. package/node_modules/@claude-flow/security/dist/domain/entities/security-context.js +132 -0
  307. package/node_modules/@claude-flow/security/dist/domain/entities/security-context.js.map +1 -0
  308. package/node_modules/@claude-flow/security/dist/domain/index.d.ts +8 -0
  309. package/node_modules/@claude-flow/security/dist/domain/index.d.ts.map +1 -0
  310. package/node_modules/@claude-flow/security/dist/domain/index.js +8 -0
  311. package/node_modules/@claude-flow/security/dist/domain/index.js.map +1 -0
  312. package/node_modules/@claude-flow/security/dist/domain/services/security-domain-service.d.ts +71 -0
  313. package/node_modules/@claude-flow/security/dist/domain/services/security-domain-service.d.ts.map +1 -0
  314. package/node_modules/@claude-flow/security/dist/domain/services/security-domain-service.js +237 -0
  315. package/node_modules/@claude-flow/security/dist/domain/services/security-domain-service.js.map +1 -0
  316. package/node_modules/@claude-flow/security/dist/index.d.ts +129 -0
  317. package/node_modules/@claude-flow/security/dist/index.d.ts.map +1 -0
  318. package/node_modules/@claude-flow/security/dist/index.js +176 -0
  319. package/node_modules/@claude-flow/security/dist/index.js.map +1 -0
  320. package/node_modules/@claude-flow/security/dist/input-validator.d.ts +306 -0
  321. package/node_modules/@claude-flow/security/dist/input-validator.d.ts.map +1 -0
  322. package/node_modules/@claude-flow/security/dist/input-validator.js +393 -0
  323. package/node_modules/@claude-flow/security/dist/input-validator.js.map +1 -0
  324. package/node_modules/@claude-flow/security/dist/keychain-adapter.d.ts +48 -0
  325. package/node_modules/@claude-flow/security/dist/keychain-adapter.d.ts.map +1 -0
  326. package/node_modules/@claude-flow/security/dist/keychain-adapter.js +0 -0
  327. package/node_modules/@claude-flow/security/dist/keychain-adapter.js.map +1 -0
  328. package/node_modules/@claude-flow/security/dist/mcp-composition-inspector.d.ts +133 -0
  329. package/node_modules/@claude-flow/security/dist/mcp-composition-inspector.d.ts.map +1 -0
  330. package/node_modules/@claude-flow/security/dist/mcp-composition-inspector.js +254 -0
  331. package/node_modules/@claude-flow/security/dist/mcp-composition-inspector.js.map +1 -0
  332. package/node_modules/@claude-flow/security/dist/oauth/browser.d.ts +31 -0
  333. package/node_modules/@claude-flow/security/dist/oauth/browser.d.ts.map +1 -0
  334. package/node_modules/@claude-flow/security/dist/oauth/browser.js +55 -0
  335. package/node_modules/@claude-flow/security/dist/oauth/browser.js.map +1 -0
  336. package/node_modules/@claude-flow/security/dist/oauth/callback-server.d.ts +37 -0
  337. package/node_modules/@claude-flow/security/dist/oauth/callback-server.d.ts.map +1 -0
  338. package/node_modules/@claude-flow/security/dist/oauth/callback-server.js +86 -0
  339. package/node_modules/@claude-flow/security/dist/oauth/callback-server.js.map +1 -0
  340. package/node_modules/@claude-flow/security/dist/oauth/client.d.ts +57 -0
  341. package/node_modules/@claude-flow/security/dist/oauth/client.d.ts.map +1 -0
  342. package/node_modules/@claude-flow/security/dist/oauth/client.js +120 -0
  343. package/node_modules/@claude-flow/security/dist/oauth/client.js.map +1 -0
  344. package/node_modules/@claude-flow/security/dist/oauth/pkce.d.ts +25 -0
  345. package/node_modules/@claude-flow/security/dist/oauth/pkce.d.ts.map +1 -0
  346. package/node_modules/@claude-flow/security/dist/oauth/pkce.js +36 -0
  347. package/node_modules/@claude-flow/security/dist/oauth/pkce.js.map +1 -0
  348. package/node_modules/@claude-flow/security/dist/password-hasher.d.ts +128 -0
  349. package/node_modules/@claude-flow/security/dist/password-hasher.d.ts.map +1 -0
  350. package/node_modules/@claude-flow/security/dist/password-hasher.js +190 -0
  351. package/node_modules/@claude-flow/security/dist/password-hasher.js.map +1 -0
  352. package/node_modules/@claude-flow/security/dist/path-validator.d.ts +148 -0
  353. package/node_modules/@claude-flow/security/dist/path-validator.d.ts.map +1 -0
  354. package/node_modules/@claude-flow/security/dist/path-validator.js +421 -0
  355. package/node_modules/@claude-flow/security/dist/path-validator.js.map +1 -0
  356. package/node_modules/@claude-flow/security/dist/plugins/integrity-verifier.d.ts +125 -0
  357. package/node_modules/@claude-flow/security/dist/plugins/integrity-verifier.d.ts.map +1 -0
  358. package/node_modules/@claude-flow/security/dist/plugins/integrity-verifier.js +186 -0
  359. package/node_modules/@claude-flow/security/dist/plugins/integrity-verifier.js.map +1 -0
  360. package/node_modules/@claude-flow/security/dist/policy/canonical.d.ts +5 -0
  361. package/node_modules/@claude-flow/security/dist/policy/canonical.d.ts.map +1 -0
  362. package/node_modules/@claude-flow/security/dist/policy/canonical.js +30 -0
  363. package/node_modules/@claude-flow/security/dist/policy/canonical.js.map +1 -0
  364. package/node_modules/@claude-flow/security/dist/policy/engine.d.ts +34 -0
  365. package/node_modules/@claude-flow/security/dist/policy/engine.d.ts.map +1 -0
  366. package/node_modules/@claude-flow/security/dist/policy/engine.js +285 -0
  367. package/node_modules/@claude-flow/security/dist/policy/engine.js.map +1 -0
  368. package/node_modules/@claude-flow/security/dist/policy/envelope.d.ts +9 -0
  369. package/node_modules/@claude-flow/security/dist/policy/envelope.d.ts.map +1 -0
  370. package/node_modules/@claude-flow/security/dist/policy/envelope.js +90 -0
  371. package/node_modules/@claude-flow/security/dist/policy/envelope.js.map +1 -0
  372. package/node_modules/@claude-flow/security/dist/policy/evaluator.d.ts +4 -0
  373. package/node_modules/@claude-flow/security/dist/policy/evaluator.d.ts.map +1 -0
  374. package/node_modules/@claude-flow/security/dist/policy/evaluator.js +119 -0
  375. package/node_modules/@claude-flow/security/dist/policy/evaluator.js.map +1 -0
  376. package/node_modules/@claude-flow/security/dist/policy/index.d.ts +7 -0
  377. package/node_modules/@claude-flow/security/dist/policy/index.d.ts.map +1 -0
  378. package/node_modules/@claude-flow/security/dist/policy/index.js +7 -0
  379. package/node_modules/@claude-flow/security/dist/policy/index.js.map +1 -0
  380. package/node_modules/@claude-flow/security/dist/policy/product-plane.d.ts +238 -0
  381. package/node_modules/@claude-flow/security/dist/policy/product-plane.d.ts.map +1 -0
  382. package/node_modules/@claude-flow/security/dist/policy/product-plane.js +1022 -0
  383. package/node_modules/@claude-flow/security/dist/policy/product-plane.js.map +1 -0
  384. package/node_modules/@claude-flow/security/dist/policy/types.d.ts +169 -0
  385. package/node_modules/@claude-flow/security/dist/policy/types.d.ts.map +1 -0
  386. package/node_modules/@claude-flow/security/dist/policy/types.js +2 -0
  387. package/node_modules/@claude-flow/security/dist/policy/types.js.map +1 -0
  388. package/node_modules/@claude-flow/security/dist/safe-executor.d.ts +180 -0
  389. package/node_modules/@claude-flow/security/dist/safe-executor.d.ts.map +1 -0
  390. package/node_modules/@claude-flow/security/dist/safe-executor.js +390 -0
  391. package/node_modules/@claude-flow/security/dist/safe-executor.js.map +1 -0
  392. package/node_modules/@claude-flow/security/dist/token-generator.d.ts +224 -0
  393. package/node_modules/@claude-flow/security/dist/token-generator.d.ts.map +1 -0
  394. package/node_modules/@claude-flow/security/dist/token-generator.js +351 -0
  395. package/node_modules/@claude-flow/security/dist/token-generator.js.map +1 -0
  396. package/node_modules/@claude-flow/security/dist/tool-output-guardrail.d.ts +126 -0
  397. package/node_modules/@claude-flow/security/dist/tool-output-guardrail.d.ts.map +1 -0
  398. package/node_modules/@claude-flow/security/dist/tool-output-guardrail.js +257 -0
  399. package/node_modules/@claude-flow/security/dist/tool-output-guardrail.js.map +1 -0
  400. package/node_modules/@claude-flow/security/package.json +44 -0
  401. package/package.json +44 -12
  402. package/plugins/ruflo-metaharness/scripts/smoke.sh +22 -14
  403. package/plugins/ruflo-metaharness/scripts/test-mcp-tools.mjs +3 -1
@@ -0,0 +1,515 @@
1
+ import * as ed from '@noble/ed25519';
2
+ import { createHash } from 'node:crypto';
3
+ import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'node:fs';
4
+ import { join } from 'node:path';
5
+ // @noble/ed25519 v2 needs a sync sha512 wired explicitly.
6
+ ed.etc.sha512Sync = (...m) => {
7
+ const h = createHash('sha512');
8
+ for (const x of m)
9
+ h.update(x);
10
+ return h.digest();
11
+ };
12
+ import { FederationCoordinator } from './application/federation-coordinator.js';
13
+ import { DiscoveryService } from './domain/services/discovery-service.js';
14
+ import { HandshakeService } from './domain/services/handshake-service.js';
15
+ import { RoutingService } from './domain/services/routing-service.js';
16
+ import { AuditService } from './domain/services/audit-service.js';
17
+ import { PIIPipelineService } from './domain/services/pii-pipeline-service.js';
18
+ import { TrustEvaluator } from './application/trust-evaluator.js';
19
+ import { PolicyEngine } from './application/policy-engine.js';
20
+ import { createFederationClaimChecker, } from './application/claim-checker.js';
21
+ import { getTrustLevelLabel } from './domain/entities/trust-level.js';
22
+ // ADR-104: real wire transport via agentic-flow loader pattern.
23
+ // ADR-120: midstream-aware loader wraps the agentic-flow loader so
24
+ // when `midstreamer` (ruvnet/midstream) ships its production QUIC
25
+ // build (Step 1 of ADR-120) and operators opt in with
26
+ // MIDSTREAMER_QUIC_NATIVE=1, the federation transport auto-upgrades.
27
+ // Until then, the wrapper transparently defers to the agentic-flow
28
+ // loader — which itself resolves to WebSocketFallbackTransport
29
+ // today, or native QUIC when AGENTIC_FLOW_QUIC_NATIVE=1.
30
+ import { loadFederationTransport, } from './transport/midstream-aware-loader.js';
31
+ import { DEFAULT_ENVELOPE_SIGNATURE_MODE, JCS_SIGNATURE_PROTOCOL, canonicalizeEnvelopeForVerify, dispatchInbound, selectEnvelopeSignatureVersion, } from './application/inbound-dispatcher.js';
32
+ import { createMcpTools } from './mcp-tools.js';
33
+ import { createCliCommands } from './cli-commands.js';
34
+ import { FEDERATION_PLUGIN_VERSION } from './version.js';
35
+ // A2A (Agent2Agent, Linux Foundation) Agent Card adapter — cards only.
36
+ // Opt-in via config.a2aCard; serves /.well-known/agent-card.json on a
37
+ // 127.0.0.1-default bind (ADR-166 posture preserved).
38
+ import { toAgentCard } from './a2a/agent-card.js';
39
+ import { startAgentCardServer } from './a2a/well-known.js';
40
+ export class AgentFederationPlugin {
41
+ name = '@claude-flow/plugin-agent-federation';
42
+ version = FEDERATION_PLUGIN_VERSION;
43
+ description = 'Cross-installation agent federation with PII protection and AI defence';
44
+ author = 'Claude Flow Team';
45
+ dependencies = ['@claude-flow/security', '@claude-flow/aidefence'];
46
+ coordinator = null;
47
+ context = null;
48
+ // ADR-104: live transport instance, created in initialize() and torn
49
+ // down in shutdown(). Null when transport is disabled (the legacy
50
+ // in-process behavior — preserves backward compat for tests that
51
+ // don't supply a port).
52
+ transport = null;
53
+ // A2A Agent Card well-known endpoint (opt-in via config.a2aCard). Null
54
+ // when the HTTP surface is off — everything else works without it.
55
+ agentCardServer = null;
56
+ async initialize(context) {
57
+ this.context = context;
58
+ const config = context.config;
59
+ const nodeId = config['nodeId'] ?? `node-${Date.now().toString(36)}`;
60
+ const endpoint = config['endpoint'] ?? 'ws://localhost:9100';
61
+ const complianceMode = config['complianceMode'] ?? 'none';
62
+ const staticPeers = config['staticPeers'] ?? [];
63
+ const hashSalt = config['hashSalt'] ?? `salt-${nodeId}`;
64
+ const signatureMode = config['signatureMode']
65
+ ?? DEFAULT_ENVELOPE_SIGNATURE_MODE;
66
+ if (!['legacy', 'prefer-jcs', 'require-jcs'].includes(signatureMode)) {
67
+ throw new TypeError(`Unsupported federation signature mode: ${String(signatureMode)}`);
68
+ }
69
+ // ADR-095 G2: real Ed25519 keypair instead of empty publicKey + stub
70
+ // signatures. Persist to .claude-flow/federation/key-<nodeId>.json so
71
+ // the same node identity survives restarts. Audit log
72
+ // audit_1776483149979 flagged the previous "verifySignature returns
73
+ // true unconditionally" as a critical authn bypass; this closes it.
74
+ const keyDir = join(process.cwd(), '.claude-flow', 'federation');
75
+ const keyPath = join(keyDir, `key-${nodeId}.json`);
76
+ let privateKey;
77
+ let publicKeyHex;
78
+ try {
79
+ if (existsSync(keyPath)) {
80
+ const stored = JSON.parse(readFileSync(keyPath, 'utf-8'));
81
+ privateKey = new Uint8Array(Buffer.from(stored.privateKey, 'hex'));
82
+ publicKeyHex = stored.publicKey;
83
+ }
84
+ else {
85
+ privateKey = ed.utils.randomPrivateKey();
86
+ const pk = ed.getPublicKey(privateKey);
87
+ publicKeyHex = Buffer.from(pk).toString('hex');
88
+ if (!existsSync(keyDir))
89
+ mkdirSync(keyDir, { recursive: true, mode: 0o700 });
90
+ writeFileSync(keyPath, JSON.stringify({
91
+ nodeId,
92
+ privateKey: Buffer.from(privateKey).toString('hex'),
93
+ publicKey: publicKeyHex,
94
+ createdAt: new Date().toISOString(),
95
+ }, null, 2), { mode: 0o600 });
96
+ }
97
+ }
98
+ catch (err) {
99
+ // Fall back to ephemeral key if persistence fails — still real crypto.
100
+ privateKey = ed.utils.randomPrivateKey();
101
+ const pk = ed.getPublicKey(privateKey);
102
+ publicKeyHex = Buffer.from(pk).toString('hex');
103
+ context.logger.warn(`Federation: could not persist keypair (${err instanceof Error ? err.message : err}); using ephemeral key for this session`);
104
+ }
105
+ const coordConfig = {
106
+ nodeId,
107
+ publicKey: publicKeyHex,
108
+ endpoint,
109
+ capabilities: [
110
+ 'send',
111
+ 'receive',
112
+ 'query-redacted',
113
+ 'status',
114
+ 'ping',
115
+ 'discovery',
116
+ ...(signatureMode === 'legacy' ? [] : [JCS_SIGNATURE_PROTOCOL]),
117
+ ],
118
+ supportedProtocols: [
119
+ 'websocket',
120
+ 'http',
121
+ ...(signatureMode === 'legacy' ? [] : [JCS_SIGNATURE_PROTOCOL]),
122
+ ],
123
+ version: FEDERATION_PLUGIN_VERSION,
124
+ };
125
+ const generateId = () => `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`;
126
+ // ADR-095 G2: real signing + verification using @noble/ed25519. The
127
+ // sign* helpers use this node's private key; verify* helpers accept
128
+ // a peer's public key over the wire and check the signature with
129
+ // ed.verify(). No "return true" stubs.
130
+ const signBytes = (msg) => {
131
+ const sig = ed.sign(new TextEncoder().encode(msg), privateKey);
132
+ return Buffer.from(sig).toString('hex');
133
+ };
134
+ const verifyBytes = (msg, signatureHex, peerPublicKeyHex) => {
135
+ try {
136
+ if (!signatureHex || !peerPublicKeyHex)
137
+ return false;
138
+ return ed.verify(Buffer.from(signatureHex, 'hex'), new TextEncoder().encode(msg), Buffer.from(peerPublicKeyHex, 'hex'));
139
+ }
140
+ catch {
141
+ return false;
142
+ }
143
+ };
144
+ // Canonical manifest serialization for signing — sorts keys to keep
145
+ // sign/verify deterministic. Excludes the signature field itself.
146
+ const canonicalize = (obj) => {
147
+ const stripped = {};
148
+ for (const k of Object.keys(obj).sort()) {
149
+ if (k === 'signature')
150
+ continue;
151
+ const v = obj[k];
152
+ stripped[k] = (v && typeof v === 'object' && !Array.isArray(v))
153
+ ? JSON.parse(canonicalize(v))
154
+ : v;
155
+ }
156
+ return JSON.stringify(stripped);
157
+ };
158
+ const discovery = new DiscoveryService({
159
+ signManifest: async (manifest) => signBytes(canonicalize(manifest)),
160
+ verifyManifest: async (manifest) => {
161
+ const peerPub = manifest.publicKey;
162
+ const sig = manifest.signature;
163
+ if (!peerPub || !sig)
164
+ return false;
165
+ return verifyBytes(canonicalize(manifest), sig, peerPub);
166
+ },
167
+ onPeerDiscovered: (node) => {
168
+ context.logger.info(`Peer discovered: ${node.nodeId} at ${node.endpoint}`);
169
+ },
170
+ }, { staticPeers });
171
+ const handshake = new HandshakeService({
172
+ generateSessionId: generateId,
173
+ generateSessionToken: () => `token-${generateId()}`,
174
+ generateNonce: () => `nonce-${Math.random().toString(36).slice(2)}`,
175
+ signChallenge: async (nonce) => signBytes(nonce),
176
+ verifySignature: async (nonce, signature, peerPublicKey) => verifyBytes(nonce, signature, peerPublicKey),
177
+ getLocalNodeId: () => nodeId,
178
+ getLocalPublicKey: () => publicKeyHex,
179
+ getLocalCapabilities: () => coordConfig.capabilities,
180
+ });
181
+ const piiPipeline = new PIIPipelineService({ hashFunction: (val, salt) => `hash-${salt}-${val.slice(0, 4)}` }, { hashSalt });
182
+ const auditEvents = [];
183
+ const audit = new AuditService({
184
+ generateEventId: generateId,
185
+ getLocalNodeId: () => nodeId,
186
+ persistEvent: async (event) => { auditEvents.push(event); },
187
+ queryEvents: async (query) => {
188
+ return auditEvents
189
+ .filter(e => {
190
+ if (query.eventType && e['eventType'] !== query.eventType)
191
+ return false;
192
+ if (query.severity && e['severity'] !== query.severity)
193
+ return false;
194
+ if (query.category && e['category'] !== query.category)
195
+ return false;
196
+ return true;
197
+ })
198
+ .slice(query.offset ?? 0, (query.offset ?? 0) + (query.limit ?? 100));
199
+ },
200
+ onAuditEvent: (event) => {
201
+ context.eventBus.emit('federation:audit', event);
202
+ },
203
+ }, { complianceMode });
204
+ const trustEvaluator = new TrustEvaluator({
205
+ onTrustChange: (nid, result) => {
206
+ context.logger.info(`Trust change for ${nid}: ${getTrustLevelLabel(result.previousLevel)} -> ${getTrustLevelLabel(result.newLevel)}`);
207
+ context.eventBus.emit('federation:trust-change', { nodeId: nid, ...result });
208
+ },
209
+ });
210
+ const authorizationMode = config['authorizationMode'] ?? 'legacy';
211
+ const grantedClaims = Array.isArray(config['federationClaims'])
212
+ ? config['federationClaims'].filter((claim) => typeof claim === 'string')
213
+ : [];
214
+ const claimChecker = createFederationClaimChecker({
215
+ mode: authorizationMode,
216
+ grantedClaims,
217
+ onObservation: (claim, granted) => {
218
+ context.eventBus.emit('federation:policy-observation', {
219
+ claim,
220
+ granted,
221
+ mode: authorizationMode,
222
+ });
223
+ },
224
+ });
225
+ if (claimChecker.mode === 'legacy') {
226
+ context.logger.warn('Federation authorization is in ADR-325 legacy compatibility mode; ' +
227
+ 'use observe before enabling enforce');
228
+ }
229
+ const policyEngine = new PolicyEngine({ checkClaim: claimChecker.checkClaim });
230
+ const sessions = new Map();
231
+ // ADR-104 + ADR-120: load wire transport. WebSocket fallback by
232
+ // default; native QUIC when AGENTIC_FLOW_QUIC_NATIVE=1 (ADR-108) or
233
+ // MIDSTREAMER_QUIC_NATIVE=1 (ADR-120 Step 1, when midstream@0.3.0
234
+ // ships its real QUIC build). The midstream-aware loader picks the
235
+ // best available transport transparently. Failures downgrade to
236
+ // in-process noop (logged), preserving backward compat for
237
+ // tests/environments without ws available.
238
+ let transport = null;
239
+ try {
240
+ const loaded = await loadFederationTransport({
241
+ serverName: nodeId,
242
+ maxIdleTimeoutMs: 30_000,
243
+ maxConcurrentStreams: 100,
244
+ enable0Rtt: true,
245
+ });
246
+ transport = loaded.transport;
247
+ this.transport = transport;
248
+ context.logger.info(`Federation transport loaded: ${nodeId} (source=${loaded.source}${loaded.fallbackReason ? `, note=${loaded.fallbackReason}` : ''})`);
249
+ }
250
+ catch (err) {
251
+ context.logger.warn(`Federation transport unavailable (${err instanceof Error ? err.message : err}); ` +
252
+ `falling back to in-process routing — federation_send will log only`);
253
+ }
254
+ /**
255
+ * Resolve a peer's nodeId to a wire address suitable for
256
+ * transport.send(). Looks up the discovery registry to get the
257
+ * peer's published endpoint, then strips the protocol prefix to
258
+ * get a `host:port` string.
259
+ *
260
+ * Endpoint shapes accepted:
261
+ * - "ws://host:port" → "host:port"
262
+ * - "tailscale://host:port" → "host:port"
263
+ * - "host:port" → "host:port" (passthrough)
264
+ */
265
+ const resolveAddress = (targetNodeId) => {
266
+ const peer = discovery.getPeer(targetNodeId);
267
+ if (!peer)
268
+ return null;
269
+ const ep = peer.endpoint;
270
+ const m = ep.match(/^(?:[a-z]+:\/\/)?(.+)$/);
271
+ return m ? m[1] : ep;
272
+ };
273
+ const routing = new RoutingService({
274
+ generateEnvelopeId: generateId,
275
+ generateNonce: () => `nonce-${Math.random().toString(36).slice(2)}`,
276
+ signEnvelope: (payload, token) => `hmac-${token.slice(0, 6)}-${payload.length}`,
277
+ verifyEnvelope: () => true,
278
+ scanPii: (text, trustLevel) => {
279
+ const result = piiPipeline.transform(text, trustLevel);
280
+ return {
281
+ transformedText: result.transformedText,
282
+ scanResult: {
283
+ scanned: true,
284
+ piiFound: result.detections.length > 0,
285
+ detections: result.detections.map(d => ({
286
+ type: d.type,
287
+ action: result.actionsApplied.find(a => a.type === d.type)?.action ?? 'pass',
288
+ confidence: d.confidence,
289
+ })),
290
+ actionsApplied: result.actionsApplied.map(a => a.action),
291
+ scanDurationMs: 0,
292
+ },
293
+ };
294
+ },
295
+ sendToNode: async (targetNodeId, envelope) => {
296
+ // ADR-104: real wire send via the loaded transport. If the
297
+ // transport failed to load OR the peer's address can't be
298
+ // resolved, log + return (the upstream RoutingService.send
299
+ // already wraps this in try/catch and returns a RoutingResult
300
+ // with the error to the caller).
301
+ if (!transport) {
302
+ context.logger.debug(`Federation send (in-process noop): ${envelope.envelopeId} → ${targetNodeId}`);
303
+ return;
304
+ }
305
+ const address = resolveAddress(targetNodeId);
306
+ const peer = discovery.getPeer(targetNodeId);
307
+ if (!address || !peer) {
308
+ context.logger.warn(`Federation send aborted: peer ${targetNodeId} not in discovery registry`);
309
+ throw new Error(`PEER_UNKNOWN: ${targetNodeId}`);
310
+ }
311
+ const signatureVersion = selectEnvelopeSignatureVersion(signatureMode, peer.capabilities.supportedProtocols, envelope.messageType);
312
+ // Build the AgentMessage WITHOUT signature first, canonicalize
313
+ // the bytes, sign them, then attach the signature to metadata.
314
+ // The receiver runs the same canonicalization and verifies
315
+ // against this node's published public key.
316
+ const baseMessage = {
317
+ id: envelope.envelopeId,
318
+ type: envelope.messageType,
319
+ payload: envelope,
320
+ metadata: {
321
+ sourceNodeId: envelope.sourceNodeId,
322
+ targetNodeId: envelope.targetNodeId,
323
+ sessionId: envelope.sessionId,
324
+ ...(signatureVersion === 'jcs-v1' ? { signatureVersion } : {}),
325
+ },
326
+ };
327
+ const canon = canonicalizeEnvelopeForVerify(baseMessage, signatureVersion);
328
+ const signature = signBytes(canon);
329
+ const signed = {
330
+ ...baseMessage,
331
+ metadata: { ...baseMessage.metadata, signature },
332
+ };
333
+ await transport.send(address, signed);
334
+ context.logger.debug(`Federation send → ${address} (envelope=${envelope.envelopeId}, type=${envelope.messageType}, signed)`);
335
+ },
336
+ getActiveSessions: () => Array.from(sessions.values()).filter(s => s.active),
337
+ getLocalNodeId: () => nodeId,
338
+ });
339
+ this.coordinator = new FederationCoordinator(coordConfig, discovery, handshake, routing, audit, piiPipeline, trustEvaluator, policyEngine);
340
+ context.services.register('federation:coordinator', this.coordinator);
341
+ context.services.register('federation:discovery', discovery);
342
+ context.services.register('federation:audit', audit);
343
+ context.services.register('federation:pii', piiPipeline);
344
+ context.services.register('federation:trust', trustEvaluator);
345
+ context.services.register('federation:policy', policyEngine);
346
+ context.services.register('federation:routing', routing);
347
+ if (transport) {
348
+ context.services.register('federation:transport', transport);
349
+ }
350
+ // ADR-104: bind the inbound listener if config supplies a port. The
351
+ // port is OPTIONAL — peers that only initiate outbound (no inbound
352
+ // accept) leave it unset. Common config: port 9100 for tailscale
353
+ // hosts. Defaults to "no listener" so existing tests/configs don't
354
+ // need to free a port.
355
+ const listenPort = config['port'];
356
+ if (transport && typeof listenPort === 'number' && transport.listen) {
357
+ const listenHost = config['host'] ?? '0.0.0.0';
358
+ try {
359
+ await transport.listen(listenPort, listenHost);
360
+ context.logger.info(`Federation listening on ${listenHost}:${listenPort}`);
361
+ }
362
+ catch (err) {
363
+ context.logger.error(`Federation listener bind failed on ${listenHost}:${listenPort}: ` +
364
+ (err instanceof Error ? err.message : String(err)));
365
+ }
366
+ }
367
+ // ADR-109: subscribe to inbound messages. transport.onMessage was
368
+ // added in agentic-flow@2.0.12-fix.3 — older builds gracefully
369
+ // degrade (optional method, no-op via the ?? guard).
370
+ if (transport && typeof transport.onMessage === 'function') {
371
+ // Real Ed25519 envelope verifier — closes the inbound trust gap
372
+ // (without this, sourceNodeId in metadata is a self-claim, not
373
+ // an authenticated assertion).
374
+ const verifyEnvelope = (canonicalBytes, signatureHex, peerPublicKeyHex) => {
375
+ if (!signatureHex || !peerPublicKeyHex)
376
+ return false;
377
+ return verifyBytes(canonicalBytes, signatureHex, peerPublicKeyHex);
378
+ };
379
+ transport.onMessage(async (address, message) => {
380
+ await dispatchInbound(address, message, {
381
+ discovery,
382
+ audit,
383
+ eventBus: context.eventBus,
384
+ logger: context.logger,
385
+ verifyEnvelope,
386
+ acceptedSignatureVersions: signatureMode === 'require-jcs' ? ['jcs-v1'] : ['legacy-v1', 'jcs-v1'],
387
+ authorizationMode,
388
+ authorizeInbound: ({ messageType, peer, messageSizeBytes, sourceNodeId }) => policyEngine.evaluateMessage(messageType, peer.trustLevel, messageSizeBytes, sourceNodeId),
389
+ });
390
+ });
391
+ context.logger.debug('Federation inbound dispatcher subscribed (with Ed25519 sig verify)');
392
+ }
393
+ else {
394
+ context.logger.warn('Federation transport does not expose onMessage(); inbound bytes will queue but not dispatch. ' +
395
+ 'Upgrade agentic-flow to >= 2.0.12-fix.3.');
396
+ }
397
+ // A2A Agent Card well-known endpoint (opt-in, graceful). Enabled with
398
+ // config.a2aCard = true + config.a2aCardPort. Serves the local node's
399
+ // manifest as a spec-compliant A2A 1.0 card at
400
+ // /.well-known/agent-card.json. Binds 127.0.0.1 unless config.a2aCardHost
401
+ // is set AND config.a2aCardAllowNonLoopback is true (ADR-166: never
402
+ // loosen binding implicitly). A bind failure logs and degrades — the
403
+ // rest of federation is unaffected.
404
+ const a2aEnabled = config['a2aCard'] === true;
405
+ const a2aPort = config['a2aCardPort'];
406
+ if (a2aEnabled && typeof a2aPort === 'number') {
407
+ try {
408
+ this.agentCardServer = await startAgentCardServer({
409
+ getCard: () => {
410
+ const manifest = discovery.getLocalManifest() ?? {
411
+ nodeId,
412
+ publicKey: publicKeyHex,
413
+ endpoint,
414
+ capabilities: {
415
+ agentTypes: coordConfig.capabilities,
416
+ maxConcurrentSessions: 10,
417
+ supportedProtocols: [
418
+ 'websocket',
419
+ 'http',
420
+ ...(signatureMode === 'legacy' ? [] : [JCS_SIGNATURE_PROTOCOL]),
421
+ ],
422
+ complianceModes: complianceMode === 'none' ? [] : [complianceMode],
423
+ },
424
+ version: this.version,
425
+ signature: '',
426
+ timestamp: new Date().toISOString(),
427
+ };
428
+ return toAgentCard(manifest);
429
+ },
430
+ port: a2aPort,
431
+ host: config['a2aCardHost'] ?? '127.0.0.1',
432
+ allowNonLoopback: config['a2aCardAllowNonLoopback'] === true,
433
+ });
434
+ context.logger.info(`A2A agent card served at ${this.agentCardServer.url}`);
435
+ }
436
+ catch (err) {
437
+ context.logger.warn(`A2A agent card endpoint unavailable (${err instanceof Error ? err.message : err}); ` +
438
+ 'federation continues without the A2A discovery surface');
439
+ this.agentCardServer = null;
440
+ }
441
+ }
442
+ context.logger.info('Agent Federation plugin initialized');
443
+ }
444
+ async shutdown() {
445
+ if (this.agentCardServer) {
446
+ try {
447
+ await this.agentCardServer.close();
448
+ }
449
+ catch (err) {
450
+ this.context?.logger.warn(`A2A agent card server close error: ${err instanceof Error ? err.message : err}`);
451
+ }
452
+ this.agentCardServer = null;
453
+ }
454
+ if (this.coordinator) {
455
+ await this.coordinator.shutdown();
456
+ this.coordinator = null;
457
+ }
458
+ if (this.transport) {
459
+ try {
460
+ await this.transport.close?.();
461
+ }
462
+ catch (err) {
463
+ this.context?.logger.warn(`Federation transport close error: ${err instanceof Error ? err.message : err}`);
464
+ }
465
+ this.transport = null;
466
+ }
467
+ this.context?.logger.info('Agent Federation plugin shut down');
468
+ this.context = null;
469
+ }
470
+ registerMCPTools() {
471
+ return createMcpTools(() => this.coordinator, () => this.context);
472
+ }
473
+ registerCLICommands() {
474
+ return createCliCommands(() => this.coordinator, () => this.context);
475
+ }
476
+ registerAgentTypes() {
477
+ return [
478
+ {
479
+ type: 'federation-coordinator',
480
+ name: 'Federation Coordinator',
481
+ description: 'Coordinates cross-installation agent federation, managing discovery, handshake, trust evaluation, and secure message routing between federated nodes.',
482
+ defaultConfig: {
483
+ id: '',
484
+ name: 'federation-coordinator',
485
+ type: 'coordinator',
486
+ capabilities: [
487
+ 'federation:discover',
488
+ 'federation:connect',
489
+ 'federation:read',
490
+ 'federation:write',
491
+ 'federation:admin',
492
+ ],
493
+ maxConcurrentTasks: 10,
494
+ priority: 90,
495
+ timeout: 300_000,
496
+ metadata: {
497
+ pluginSource: '@claude-flow/plugin-agent-federation',
498
+ },
499
+ },
500
+ requiredCapabilities: ['federation:discover', 'federation:connect'],
501
+ metadata: {
502
+ trustAware: true,
503
+ piiAware: true,
504
+ },
505
+ },
506
+ ];
507
+ }
508
+ async healthCheck() {
509
+ if (!this.coordinator)
510
+ return false;
511
+ const status = this.coordinator.getStatus();
512
+ return status.healthy;
513
+ }
514
+ }
515
+ //# sourceMappingURL=plugin.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"plugin.js","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAW,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,0DAA0D;AAC1D,EAAE,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC,GAAG,CAAe,EAAc,EAAE;IACrD,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,CAAC;QAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/B,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;AACpB,CAAC,CAAC;AAEF,OAAO,EAAE,qBAAqB,EAAoC,MAAM,yCAAyC,CAAC;AAClH,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AACtE,OAAO,EAAE,YAAY,EAAuB,MAAM,oCAAoC,CAAC;AACvF,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EACL,4BAA4B,GAE7B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAc,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAGlF,gEAAgE;AAChE,mEAAmE;AACnE,kEAAkE;AAClE,sDAAsD;AACtD,qEAAqE;AACrE,mEAAmE;AACnE,+DAA+D;AAC/D,yDAAyD;AACzD,OAAO,EACL,uBAAuB,GAGxB,MAAM,uCAAuC,CAAC;AAO/C,OAAO,EACL,+BAA+B,EAC/B,sBAAsB,EACtB,6BAA6B,EAC7B,eAAe,EACf,8BAA8B,GAE/B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACzD,uEAAuE;AACvE,sEAAsE;AACtE,sDAAsD;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAA8B,MAAM,qBAAqB,CAAC;AAEvF,MAAM,OAAO,qBAAqB;IACvB,IAAI,GAAG,sCAAsC,CAAC;IAC9C,OAAO,GAAG,yBAAyB,CAAC;IACpC,WAAW,GAAG,wEAAwE,CAAC;IACvF,MAAM,GAAG,kBAAkB,CAAC;IAC5B,YAAY,GAAG,CAAC,uBAAuB,EAAE,wBAAwB,CAAC,CAAC;IAEpE,WAAW,GAAiC,IAAI,CAAC;IACjD,OAAO,GAAyB,IAAI,CAAC;IAC7C,qEAAqE;IACrE,kEAAkE;IAClE,iEAAiE;IACjE,wBAAwB;IAChB,SAAS,GAA2B,IAAI,CAAC;IACjD,uEAAuE;IACvE,mEAAmE;IAC3D,eAAe,GAAiC,IAAI,CAAC;IAE7D,KAAK,CAAC,UAAU,CAAC,OAAsB;QACrC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAE9B,MAAM,MAAM,GAAI,MAAM,CAAC,QAAQ,CAAY,IAAI,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QACjF,MAAM,QAAQ,GAAI,MAAM,CAAC,UAAU,CAAY,IAAI,qBAAqB,CAAC;QACzE,MAAM,cAAc,GAAI,MAAM,CAAC,gBAAgB,CAAoB,IAAI,MAAM,CAAC;QAC9E,MAAM,WAAW,GAAI,MAAM,CAAC,aAAa,CAAc,IAAI,EAAE,CAAC;QAC9D,MAAM,QAAQ,GAAI,MAAM,CAAC,UAAU,CAAY,IAAI,QAAQ,MAAM,EAAE,CAAC;QACpE,MAAM,aAAa,GAChB,MAAM,CAAC,eAAe,CAAuC;eAC3D,+BAA+B,CAAC;QACrC,IAAI,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,SAAS,CAAC,0CAA0C,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,qEAAqE;QACrE,sEAAsE;QACtE,sDAAsD;QACtD,oEAAoE;QACpE,oEAAoE;QACpE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,MAAM,OAAO,CAAC,CAAC;QACnD,IAAI,UAAsB,CAAC;QAC3B,IAAI,YAAoB,CAAC;QACzB,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAA8D,CAAC;gBACvH,UAAU,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;gBACnE,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,UAAU,GAAG,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;gBACzC,MAAM,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;gBACvC,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC/C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;oBAAE,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC7E,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;oBACpC,MAAM;oBACN,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;oBACnD,SAAS,EAAE,YAAY;oBACvB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,uEAAuE;YACvE,UAAU,GAAG,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;YACzC,MAAM,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;YACvC,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC/C,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,yCAAyC,CAAC,CAAC;QACnJ,CAAC;QAED,MAAM,WAAW,GAAgC;YAC/C,MAAM;YACN,SAAS,EAAE,YAAY;YACvB,QAAQ;YACR,YAAY,EAAE;gBACZ,MAAM;gBACN,SAAS;gBACT,gBAAgB;gBAChB,QAAQ;gBACR,MAAM;gBACN,WAAW;gBACX,GAAG,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;aAChE;YACD,kBAAkB,EAAE;gBAClB,WAAW;gBACX,MAAM;gBACN,GAAG,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;aAChE;YACD,OAAO,EAAE,yBAAyB;SACnC,CAAC;QAEF,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAEhG,oEAAoE;QACpE,oEAAoE;QACpE,iEAAiE;QACjE,uCAAuC;QACvC,MAAM,SAAS,GAAG,CAAC,GAAW,EAAU,EAAE;YACxC,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;YAC/D,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC,CAAC;QACF,MAAM,WAAW,GAAG,CAAC,GAAW,EAAE,YAAoB,EAAE,gBAAwB,EAAW,EAAE;YAC3F,IAAI,CAAC;gBACH,IAAI,CAAC,YAAY,IAAI,CAAC,gBAAgB;oBAAE,OAAO,KAAK,CAAC;gBACrD,OAAO,EAAE,CAAC,MAAM,CACd,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,EAChC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAC7B,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,CACrC,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC;QAC3B,CAAC,CAAC;QAEF,oEAAoE;QACpE,kEAAkE;QAClE,MAAM,YAAY,GAAG,CAAC,GAA4B,EAAU,EAAE;YAC5D,MAAM,QAAQ,GAA4B,EAAE,CAAC;YAC7C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;gBACxC,IAAI,CAAC,KAAK,WAAW;oBAAE,SAAS;gBAChC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;gBACjB,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;oBAC7D,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAA4B,CAAC,CAAC;oBACxD,CAAC,CAAC,CAAC,CAAC;YACR,CAAC;YACD,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,gBAAgB,CACpC;YACE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC,QAA8C,CAAC,CAAC;YACzG,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;gBACjC,MAAM,OAAO,GAAI,QAAmC,CAAC,SAAS,CAAC;gBAC/D,MAAM,GAAG,GAAI,QAAmC,CAAC,SAAS,CAAC;gBAC3D,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG;oBAAE,OAAO,KAAK,CAAC;gBACnC,OAAO,WAAW,CAAC,YAAY,CAAC,QAA8C,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YACjG,CAAC;YACD,gBAAgB,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,MAAM,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7E,CAAC;SACF,EACD,EAAE,WAAW,EAAE,CAChB,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,gBAAgB,CAAC;YACrC,iBAAiB,EAAE,UAAU;YAC7B,oBAAoB,EAAE,GAAG,EAAE,CAAC,SAAS,UAAU,EAAE,EAAE;YACnD,aAAa,EAAE,GAAG,EAAE,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YACnE,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC;YAChD,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,CACzD,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,aAAa,CAAC;YAC9C,cAAc,EAAE,GAAG,EAAE,CAAC,MAAM;YAC5B,iBAAiB,EAAE,GAAG,EAAE,CAAC,YAAY;YACrC,oBAAoB,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,YAAY;SACrD,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,IAAI,kBAAkB,CACxC,EAAE,YAAY,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,QAAQ,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAClE,EAAE,QAAQ,EAAE,CACb,CAAC;QAEF,MAAM,WAAW,GAAmC,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,IAAI,YAAY,CAC5B;YACE,eAAe,EAAE,UAAU;YAC3B,cAAc,EAAE,GAAG,EAAE,CAAC,MAAM;YAC5B,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,KAA2C,CAAC,CAAC,CAAC,CAAC;YACjG,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBAC3B,OAAO,WAAW;qBACf,MAAM,CAAC,CAAC,CAAC,EAAE;oBACV,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,WAAW,CAAC,KAAK,KAAK,CAAC,SAAS;wBAAE,OAAO,KAAK,CAAC;oBACxE,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC,QAAQ;wBAAE,OAAO,KAAK,CAAC;oBACrE,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC,QAAQ;wBAAE,OAAO,KAAK,CAAC;oBACrE,OAAO,IAAI,CAAC;gBACd,CAAC,CAAC;qBACD,KAAK,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,GAAG,CAAC,CAAQ,CAAC;YACjF,CAAC;YACD,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE;gBACtB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;YACnD,CAAC;SACF,EACD,EAAE,cAAc,EAAE,CACnB,CAAC;QAEF,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC;YACxC,aAAa,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;gBAC7B,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,GAAG,KAAK,kBAAkB,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBACtI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;YAC/E,CAAC;SACF,CAAC,CAAC;QAEH,MAAM,iBAAiB,GACpB,MAAM,CAAC,mBAAmB,CAA6C,IAAI,QAAQ,CAAC;QACvF,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAC7D,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;YAC1F,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,YAAY,GAAG,4BAA4B,CAAC;YAChD,IAAI,EAAE,iBAAiB;YACvB,aAAa;YACb,aAAa,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;gBAChC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,+BAA+B,EAAE;oBACrD,KAAK;oBACL,OAAO;oBACP,IAAI,EAAE,iBAAiB;iBACxB,CAAC,CAAC;YACL,CAAC;SACF,CAAC,CAAC;QACH,IAAI,YAAY,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnC,OAAO,CAAC,MAAM,CAAC,IAAI,CACjB,oEAAoE;gBAClE,qCAAqC,CACxC,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC,UAAU,EAAE,CAAC,CAAC;QAE/E,MAAM,QAAQ,GAAqF,IAAI,GAAG,EAAE,CAAC;QAE7G,gEAAgE;QAChE,oEAAoE;QACpE,kEAAkE;QAClE,mEAAmE;QACnE,gEAAgE;QAChE,2DAA2D;QAC3D,2CAA2C;QAC3C,IAAI,SAAS,GAA2B,IAAI,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC;gBAC3C,UAAU,EAAE,MAAM;gBAClB,gBAAgB,EAAE,MAAM;gBACxB,oBAAoB,EAAE,GAAG;gBACzB,UAAU,EAAE,IAAI;aACjB,CAAC,CAAC;YACH,SAAS,GAAG,MAAM,CAAC,SAA4B,CAAC;YAChD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAC3B,OAAO,CAAC,MAAM,CAAC,IAAI,CACjB,gCAAgC,MAAM,YAAY,MAAM,CAAC,MAAM,GAC7D,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAC9D,GAAG,CACJ,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,IAAI,CACjB,qCAAqC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK;gBAChF,oEAAoE,CACvE,CAAC;QACJ,CAAC;QAED;;;;;;;;;;WAUG;QACH,MAAM,cAAc,GAAG,CAAC,YAAoB,EAAiB,EAAE;YAC7D,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC7C,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YACvB,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;YACzB,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC7C,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvB,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC;YACjC,kBAAkB,EAAE,UAAU;YAC9B,aAAa,EAAE,GAAG,EAAE,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YACnE,YAAY,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE;YAC/E,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;YAC1B,OAAO,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE;gBAC5B,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,EAAE,UAAwB,CAAC,CAAC;gBACrE,OAAO;oBACL,eAAe,EAAE,MAAM,CAAC,eAAe;oBACvC,UAAU,EAAE;wBACV,OAAO,EAAE,IAAI;wBACb,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;wBACtC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;4BACtC,IAAI,EAAE,CAAC,CAAC,IAAI;4BACZ,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,MAAM;4BAC5E,UAAU,EAAE,CAAC,CAAC,UAAU;yBACzB,CAAC,CAAC;wBACH,cAAc,EAAE,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;wBACxD,cAAc,EAAE,CAAC;qBAClB;iBACF,CAAC;YACJ,CAAC;YACD,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE;gBAC3C,2DAA2D;gBAC3D,0DAA0D;gBAC1D,2DAA2D;gBAC3D,8DAA8D;gBAC9D,iCAAiC;gBACjC,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sCAAsC,QAAQ,CAAC,UAAU,MAAM,YAAY,EAAE,CAC9E,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,MAAM,OAAO,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;gBAC7C,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBAC7C,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;oBACtB,OAAO,CAAC,MAAM,CAAC,IAAI,CACjB,iCAAiC,YAAY,4BAA4B,CAC1E,CAAC;oBACF,MAAM,IAAI,KAAK,CAAC,iBAAiB,YAAY,EAAE,CAAC,CAAC;gBACnD,CAAC;gBACD,MAAM,gBAAgB,GAAG,8BAA8B,CACrD,aAAa,EACb,IAAI,CAAC,YAAY,CAAC,kBAAkB,EACpC,QAAQ,CAAC,WAAW,CACrB,CAAC;gBACF,+DAA+D;gBAC/D,+DAA+D;gBAC/D,2DAA2D;gBAC3D,4CAA4C;gBAC5C,MAAM,WAAW,GAAiB;oBAChC,EAAE,EAAE,QAAQ,CAAC,UAAU;oBACvB,IAAI,EAAE,QAAQ,CAAC,WAAW;oBAC1B,OAAO,EAAE,QAAmB;oBAC5B,QAAQ,EAAE;wBACR,YAAY,EAAE,QAAQ,CAAC,YAAY;wBACnC,YAAY,EAAE,QAAQ,CAAC,YAAY;wBACnC,SAAS,EAAE,QAAQ,CAAC,SAAS;wBAC7B,GAAG,CAAC,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC/D;iBACF,CAAC;gBACF,MAAM,KAAK,GAAG,6BAA6B,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;gBAC3E,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;gBACnC,MAAM,MAAM,GAAiB;oBAC3B,GAAG,WAAW;oBACd,QAAQ,EAAE,EAAE,GAAI,WAAW,CAAC,QAAoC,EAAE,SAAS,EAAE;iBAC9E,CAAC;gBACF,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qBAAqB,OAAO,cAAc,QAAQ,CAAC,UAAU,UAAU,QAAQ,CAAC,WAAW,WAAW,CACvG,CAAC;YACJ,CAAC;YACD,iBAAiB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;YAC5E,cAAc,EAAE,GAAG,EAAE,CAAC,MAAM;SAC7B,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,GAAG,IAAI,qBAAqB,CAC1C,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EACjD,WAAW,EAAE,cAAc,EAAE,YAAY,CAC1C,CAAC;QAEF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,wBAAwB,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACtE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,sBAAsB,EAAE,SAAS,CAAC,CAAC;QAC7D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;QACrD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;QACzD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;QAC9D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC;QAC7D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;QACzD,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,sBAAsB,EAAE,SAAS,CAAC,CAAC;QAC/D,CAAC;QAED,oEAAoE;QACpE,mEAAmE;QACnE,iEAAiE;QACjE,mEAAmE;QACnE,uBAAuB;QACvB,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAuB,CAAC;QACxD,IAAI,SAAS,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;YACpE,MAAM,UAAU,GAAI,MAAM,CAAC,MAAM,CAAwB,IAAI,SAAS,CAAC;YACvE,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;gBAC/C,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,UAAU,IAAI,UAAU,EAAE,CAAC,CAAC;YAC7E,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sCAAsC,UAAU,IAAI,UAAU,IAAI;oBAChE,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACrD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,kEAAkE;QAClE,+DAA+D;QAC/D,qDAAqD;QACrD,IAAI,SAAS,IAAI,OAAO,SAAS,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YAC3D,gEAAgE;YAChE,+DAA+D;YAC/D,+BAA+B;YAC/B,MAAM,cAAc,GAAG,CACrB,cAAsB,EACtB,YAA2B,EAC3B,gBAAwB,EACf,EAAE;gBACX,IAAI,CAAC,YAAY,IAAI,CAAC,gBAAgB;oBAAE,OAAO,KAAK,CAAC;gBACrD,OAAO,WAAW,CAAC,cAAc,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;YACrE,CAAC,CAAC;YACF,SAAS,CAAC,SAAS,CAAC,KAAK,EAAE,OAAe,EAAE,OAAqB,EAAE,EAAE;gBACnE,MAAM,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE;oBACtC,SAAS;oBACT,KAAK;oBACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,cAAc;oBACd,yBAAyB,EACvB,aAAa,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC;oBACxE,iBAAiB;oBACjB,gBAAgB,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,gBAAgB,EAAE,YAAY,EAAE,EAAE,EAAE,CAC1E,YAAY,CAAC,eAAe,CAC1B,WAAoC,EACpC,IAAI,CAAC,UAAU,EACf,gBAAgB,EAChB,YAAY,CACb;iBACJ,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;QAC7F,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,IAAI,CACjB,+FAA+F;gBAC7F,0CAA0C,CAC7C,CAAC;QACJ,CAAC;QAED,sEAAsE;QACtE,sEAAsE;QACtE,+CAA+C;QAC/C,0EAA0E;QAC1E,oEAAoE;QACpE,qEAAqE;QACrE,oCAAoC;QACpC,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,CAAuB,CAAC;QAC5D,IAAI,UAAU,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,IAAI,CAAC,eAAe,GAAG,MAAM,oBAAoB,CAAC;oBAChD,OAAO,EAAE,GAAG,EAAE;wBACZ,MAAM,QAAQ,GAAG,SAAS,CAAC,gBAAgB,EAAE,IAAI;4BAC/C,MAAM;4BACN,SAAS,EAAE,YAAY;4BACvB,QAAQ;4BACR,YAAY,EAAE;gCACZ,UAAU,EAAE,WAAW,CAAC,YAAY;gCACpC,qBAAqB,EAAE,EAAE;gCACzB,kBAAkB,EAAE;oCAClB,WAAW;oCACX,MAAM;oCACN,GAAG,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;iCAChE;gCACD,eAAe,EAAE,cAAc,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;6BACnE;4BACD,OAAO,EAAE,IAAI,CAAC,OAAO;4BACrB,SAAS,EAAE,EAAE;4BACb,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;yBACpC,CAAC;wBACF,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC;oBAC/B,CAAC;oBACD,IAAI,EAAE,OAAO;oBACb,IAAI,EAAG,MAAM,CAAC,aAAa,CAAwB,IAAI,WAAW;oBAClE,gBAAgB,EAAE,MAAM,CAAC,yBAAyB,CAAC,KAAK,IAAI;iBAC7D,CAAC,CAAC;gBACH,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,CAAC;YAC9E,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,MAAM,CAAC,IAAI,CACjB,wCAAwC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK;oBACnF,wDAAwD,CAC3D,CAAC;gBACF,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;YACrC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CACvB,sCAAsC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CACjF,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC9B,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;YAClC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;YACjC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CACvB,qCAAqC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAChF,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QAC/D,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACtB,CAAC;IAED,gBAAgB;QACd,OAAO,cAAc,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpE,CAAC;IAED,mBAAmB;QACjB,OAAO,iBAAiB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvE,CAAC;IAED,kBAAkB;QAChB,OAAO;YACL;gBACE,IAAI,EAAE,wBAAwB;gBAC9B,IAAI,EAAE,wBAAwB;gBAC9B,WAAW,EAAE,uJAAuJ;gBACpK,aAAa,EAAE;oBACb,EAAE,EAAE,EAAE;oBACN,IAAI,EAAE,wBAAwB;oBAC9B,IAAI,EAAE,aAAa;oBACnB,YAAY,EAAE;wBACZ,qBAAqB;wBACrB,oBAAoB;wBACpB,iBAAiB;wBACjB,kBAAkB;wBAClB,kBAAkB;qBACnB;oBACD,kBAAkB,EAAE,EAAE;oBACtB,QAAQ,EAAE,EAAE;oBACZ,OAAO,EAAE,OAAO;oBAChB,QAAQ,EAAE;wBACR,YAAY,EAAE,sCAAsC;qBACrD;iBACF;gBACD,oBAAoB,EAAE,CAAC,qBAAqB,EAAE,oBAAoB,CAAC;gBACnE,QAAQ,EAAE;oBACR,UAAU,EAAE,IAAI;oBAChB,QAAQ,EAAE,IAAI;iBACf;aACF;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW;QACf,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;QAC5C,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;CACF"}
@@ -0,0 +1,72 @@
1
+ /**
2
+ * Midstream-aware federation transport loader (ADR-120, Step 2).
3
+ *
4
+ * Extends the agentic-flow `loadQuicTransport` loader pattern with a
5
+ * preferred branch that probes `midstreamer` first. When `midstreamer`
6
+ * ships real QUIC (currently the WASM build is a counter-tracking
7
+ * stub per ADR-119), this loader picks it up automatically without
8
+ * any change to consumer plugins.
9
+ *
10
+ * Resolution order:
11
+ *
12
+ * 1. If `MIDSTREAMER_QUIC_NATIVE=1` AND the `midstreamer` module
13
+ * exposes a real `QuicMultistream`-derived `AgentTransport`,
14
+ * use it. (Today: probes fail closed and we fall through.)
15
+ *
16
+ * 2. Otherwise: defer to agentic-flow's existing loader, which
17
+ * itself respects `AGENTIC_FLOW_QUIC_NATIVE=1` (ADR-108) and
18
+ * falls back to WebSocket (ADR-104) otherwise.
19
+ *
20
+ * The loader is opt-in: callers must explicitly invoke
21
+ * `loadFederationTransport()` instead of `loadQuicTransport()`.
22
+ * Behavior is identical to `loadQuicTransport()` until upstream
23
+ * `midstreamer` ships its real QUIC build AND the operator sets the
24
+ * env flag — so this change is safe to land before any of that
25
+ * happens.
26
+ *
27
+ * Re-exports the `AgentTransport` / `AgentMessage` / `QuicTransportConfig`
28
+ * surface from agentic-flow so consumers only import from one place.
29
+ */
30
+ export interface AgentMessage {
31
+ id: string;
32
+ type: 'task' | 'result' | 'status' | 'coordination' | 'heartbeat' | string;
33
+ payload: unknown;
34
+ metadata?: Record<string, unknown>;
35
+ [key: string]: unknown;
36
+ }
37
+ export interface AgentTransport {
38
+ send: (address: string, message: AgentMessage) => Promise<void>;
39
+ onMessage: (handler: (address: string, message: AgentMessage) => void) => void;
40
+ listen?: (port: number, host?: string) => Promise<void>;
41
+ close?: () => Promise<void> | void;
42
+ [key: string]: unknown;
43
+ }
44
+ export interface QuicTransportConfig {
45
+ port?: number;
46
+ host?: string;
47
+ serverName?: string;
48
+ [key: string]: unknown;
49
+ }
50
+ /** Result envelope describing which backend the loader picked. */
51
+ export interface LoadedFederationTransport {
52
+ /** The live transport. Send/receive against this. */
53
+ transport: AgentTransport;
54
+ /** Which loader branch resolved. Useful for logs/metrics. */
55
+ source: 'midstreamer-native' | 'agentic-flow-loader' | 'websocket-fallback';
56
+ /** Free-form note when a probe failed (helps explain a fallback). */
57
+ fallbackReason?: string;
58
+ }
59
+ /**
60
+ * Top-level loader for federation transport. Identical signature to
61
+ * agentic-flow's `loadQuicTransport`, but with the midstreamer-first
62
+ * preference. Use this from `plugins/ruflo-federation` in place of
63
+ * the bare `loadQuicTransport`.
64
+ *
65
+ * Failure mode: if midstreamer is requested but rejects (stub, init
66
+ * error, missing package), this function falls through to the
67
+ * agentic-flow loader. If current agentic-flow does not export its
68
+ * historical loader subpath, the plugin-owned WebSocket fallback is
69
+ * used directly (ADR-104, #2618).
70
+ */
71
+ export declare function loadFederationTransport(config?: QuicTransportConfig): Promise<LoadedFederationTransport>;
72
+ //# sourceMappingURL=midstream-aware-loader.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"midstream-aware-loader.d.ts","sourceRoot":"","sources":["../../src/transport/midstream-aware-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAUH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,cAAc,GAAG,WAAW,GAAG,MAAM,CAAC;IAC3E,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AACD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,SAAS,EAAE,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,KAAK,IAAI,KAAK,IAAI,CAAC;IAC/E,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,KAAK,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACnC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AACD,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAoED,kEAAkE;AAClE,MAAM,WAAW,yBAAyB;IACxC,qDAAqD;IACrD,SAAS,EAAE,cAAc,CAAC;IAC1B,6DAA6D;IAC7D,MAAM,EAAE,oBAAoB,GAAG,qBAAqB,GAAG,oBAAoB,CAAC;IAC5E,qEAAqE;IACrE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAiMD;;;;;;;;;;;GAWG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,CAAC,EAAE,mBAAmB,GAC3B,OAAO,CAAC,yBAAyB,CAAC,CAoBpC"}