@evalops/maestro 0.10.17 → 0.10.20

package/dist/platform/a2a-peer-pairing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"a2a-peer-pairing.d.ts","sourceRoot":"","sources":["../../src/platform/a2a-peer-pairing.ts"],"names":[],"mappings":"AACA,OAAO,EACN,KAAK,YAAY,EACjB,KAAK,iBAAiB,EAEtB,MAAM,iBAAiB,CAAC;AAEzB,eAAO,MAAM,4BAA4B,oBAAoB,CAAC;AAS9D,MAAM,WAAW,0BAA0B;IAC1C,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,0BAA0B;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,sBAAsB;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,wBAAwB;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,qBAAqB;IACrC,OAAO,EAAE,CAAC,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,YAAY,CAAC,EAAE,0BAA0B,CAAC;IAC1C,MAAM,CAAC,EAAE,0BAA0B,EAAE,CAAC;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,wBAAwB,CAAC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,gCAAgC;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,YAAY,CAAC,EAAE,0BAA0B,CAAC;IAC1C,MAAM,CAAC,EAAE,0BAA0B,EAAE,CAAC;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,wBAAwB,CAAC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IACrD,GAAG,CAAC,EAAE,IAAI,CAAC;CACX;AAED,MAAM,WAAW,6CAA6C;IAC7D,SAAS,EAAE,YAAY,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,wBAAwB,CAAC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IACrD,GAAG,CAAC,EAAE,IAAI,CAAC;CACX;AAED,MAAM,WAAW,+BAA+B;IAC/C,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,YAAY,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,0BAA0B,CAAC;IAC1C,MAAM,CAAC,EAAE,0BAA0B,EAAE,CAAC;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;CACrD;AAED,wBAAgB,2BAA2B,CAC1C,KAAK,EAAE,gCAAgC,GACrC,qBAAqB,CA6CvB;AAED,wBAAgB,wCAAwC,CACvD,KAAK,EAAE,6CAA6C,GAClD,qBAAqB,CAoBvB;AAED,wBAAgB,wBAAwB,CACvC,OAAO,EAAE,qBAAqB,GAC5B,MAAM,CAUR;AA6CD,wBAAgB,wBAAwB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,+BAAoC,GAC3C,qBAAqB,CA8BvB;AAED,wBAAgB,mCAAmC,CAClD,OAAO,EAAE,qBAAqB,GAC5B,iBAAiB,CAgBnB;AAED,wBAAgB,uBAAuB,CACtC,SAAS,EAAE,YAAY,GACrB,iBAAiB,CAsBnB;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAS5D"}

package/dist/platform/a2a-peer-pairing.js

@@ -0,0 +1,489 @@
+import { createHash, timingSafeEqual } from "node:crypto";
+import { normalizeA2ABaseUrl, } from "./a2a-client.js";
+export const A2A_PEER_PAIRING_CODE_PREFIX = "maestro-pair-v1";
+const PAIRING_CODE_VERSION = 1;
+const PAIRING_CODE_CHECKSUM_LENGTH = 16;
+const MAX_PAIRING_CODE_LENGTH = 8192;
+const DEFAULT_PAIRING_TTL_MS = 30 * 60 * 1000;
+const MAX_SKILLS_IN_PAIRING_CODE = 8;
+const MAX_SKILL_TAGS_IN_PAIRING_CODE = 8;
+export function createA2APeerPairingPayload(input) {
+    const issuedAt = toDate(input.issuedAt ?? input.now ?? new Date(), "issuedAt");
+    const expiresAt = toDate(input.expiresAt ??
+        new Date(issuedAt.getTime() + (input.ttlMs ?? DEFAULT_PAIRING_TTL_MS)), "expiresAt");
+    const payload = {
+        version: PAIRING_CODE_VERSION,
+        displayName: requireNonEmptyString(input.displayName, "displayName"),
+        agentCardUrl: normalizePairingUrl(input.agentCardUrl, "agentCardUrl"),
+        transportUrl: normalizePairingUrl(input.transportUrl, "transportUrl"),
+        protocolBinding: normalizeProtocolBinding(input.protocolBinding),
+        protocolVersion: requireNonEmptyString(input.protocolVersion ?? "1.0", "protocolVersion"),
+        issuedAt: issuedAt.toISOString(),
+        expiresAt: expiresAt.toISOString(),
+        ...(input.peerId
+            ? { peerId: requireNonEmptyString(input.peerId, "peerId") }
+            : {}),
+        ...(input.provider ? { provider: normalizeProvider(input.provider) } : {}),
+        ...(input.capabilities
+            ? { capabilities: normalizeCapabilities(input.capabilities) }
+            : {}),
+        ...(input.skills ? { skills: normalizeSkills(input.skills) } : {}),
+        ...(input.keyFingerprint
+            ? {
+                keyFingerprint: requireNonEmptyString(input.keyFingerprint, "keyFingerprint"),
+            }
+            : {}),
+        ...(input.relayHints
+            ? { relayHints: normalizeRelayHints(input.relayHints) }
+            : {}),
+        ...(input.metadata ? { metadata: normalizeMetadata(input.metadata) } : {}),
+    };
+    validateA2APeerPairingPayload(payload, { now: input.now });
+    return payload;
+}
+export function createA2APeerPairingPayloadFromAgentCard(input) {
+    const selectedInterface = selectA2AAgentInterface(input.agentCard);
+    return createA2APeerPairingPayload({
+        displayName: input.displayName ?? input.agentCard.name,
+        agentCardUrl: input.agentCardUrl,
+        transportUrl: selectedInterface.url,
+        protocolBinding: selectedInterface.protocolBinding,
+        protocolVersion: selectedInterface.protocolVersion,
+        issuedAt: input.issuedAt,
+        expiresAt: input.expiresAt,
+        ttlMs: input.ttlMs,
+        peerId: input.peerId,
+        provider: input.agentCard.provider,
+        capabilities: input.agentCard.capabilities,
+        skills: normalizeSkills(input.agentCard.skills),
+        keyFingerprint: input.keyFingerprint,
+        relayHints: input.relayHints,
+        metadata: input.metadata,
+        now: input.now,
+    });
+}
+export function encodeA2APeerPairingCode(payload) {
+    const normalized = normalizeDecodedPayload(payload, { allowExpired: true });
+    rejectSecretBearingFields(normalized);
+    for (const candidate of pairingCodeSizeCandidates(normalized)) {
+        const code = encodeNormalizedPairingCode(candidate);
+        if (code.length <= MAX_PAIRING_CODE_LENGTH) {
+            return code;
+        }
+    }
+    throw new Error("A2A pairing payload is too large");
+}
+function encodeNormalizedPairingCode(payload) {
+    const encoded = Buffer.from(JSON.stringify(payload), "utf8").toString("base64url");
+    const checksum = pairingChecksum(encoded);
+    return `${A2A_PEER_PAIRING_CODE_PREFIX}.${encoded}.${checksum}`;
+}
+function pairingCodeSizeCandidates(payload) {
+    if (!payload.skills || payload.skills.length === 0) {
+        return [payload];
+    }
+    return [
+        payload,
+        {
+            ...payload,
+            skills: payload.skills.map(compactSkillForPairingCode),
+        },
+        omitPairingCodeSkills(payload),
+    ];
+}
+function compactSkillForPairingCode(skill) {
+    return {
+        id: skill.id,
+        name: skill.name,
+        ...(skill.tags && skill.tags.length > 0
+            ? { tags: skill.tags.slice(0, MAX_SKILL_TAGS_IN_PAIRING_CODE) }
+            : {}),
+    };
+}
+function omitPairingCodeSkills(payload) {
+    const { skills: _skills, ...withoutSkills } = payload;
+    return withoutSkills;
+}
+export function decodeA2APeerPairingCode(code, options = {}) {
+    const compact = code.trim();
+    if (!compact) {
+        throw new Error("A2A pairing code is required");
+    }
+    if (compact.length > MAX_PAIRING_CODE_LENGTH) {
+        throw new Error("A2A pairing code is too large");
+    }
+    const parts = compact.split(".");
+    if (parts.length !== 3 ||
+        parts[0] !== A2A_PEER_PAIRING_CODE_PREFIX ||
+        !parts[1] ||
+        !parts[2]) {
+        throw new Error(`A2A pairing code must use the ${A2A_PEER_PAIRING_CODE_PREFIX} format`);
+    }
+    const [, encoded, checksum] = parts;
+    assertPairingChecksum(encoded, checksum);
+    let rawPayload;
+    try {
+        rawPayload = JSON.parse(Buffer.from(encoded, "base64url").toString("utf8"));
+    }
+    catch (error) {
+        throw new Error(`A2A pairing code payload is not valid JSON: ${errorMessage(error)}`);
+    }
+    return normalizeDecodedPayload(rawPayload, options);
+}
+export function a2aPeerConnectionFromPairingPayload(payload) {
+    validateA2APeerPairingPayload(payload, { allowExpired: true });
+    return {
+        peerId: payload.peerId ?? stablePeerId(payload),
+        displayName: payload.displayName,
+        baseUrl: payload.transportUrl.replace(/\/+$/u, ""),
+        agentCardUrl: payload.agentCardUrl,
+        protocolBinding: payload.protocolBinding,
+        protocolVersion: payload.protocolVersion,
+        ...(payload.capabilities ? { capabilities: payload.capabilities } : {}),
+        ...(payload.skills ? { skills: payload.skills } : {}),
+        ...(payload.keyFingerprint
+            ? { keyFingerprint: payload.keyFingerprint }
+            : {}),
+        ...(payload.metadata ? { metadata: payload.metadata } : {}),
+    };
+}
+export function selectA2AAgentInterface(agentCard) {
+    if (!Array.isArray(agentCard.supportedInterfaces)) {
+        throw new Error("A2A Agent Card must include supportedInterfaces");
+    }
+    const preferred = agentCard.supportedInterfaces.find((candidate) => candidate.protocolBinding.trim().toUpperCase() === "HTTP+JSON");
+    if (!preferred) {
+        throw new Error("A2A Agent Card does not advertise a supported HTTP+JSON interface");
+    }
+    return {
+        url: normalizePairingUrl(preferred.url, "supportedInterfaces[].url"),
+        protocolBinding: normalizeProtocolBinding(preferred.protocolBinding),
+        protocolVersion: requireNonEmptyString(preferred.protocolVersion, "supportedInterfaces[].protocolVersion"),
+        ...(preferred.tenant ? { tenant: preferred.tenant } : {}),
+    };
+}
+export function resolveA2AAgentCardUrl(input) {
+    const baseUrl = normalizeA2ABaseUrl(normalizePairingUrl(input, "agentCardUrl"));
+    const parsed = new URL(baseUrl);
+    parsed.pathname = `${parsed.pathname.replace(/\/+$/u, "")}/.well-known/agent-card.json`;
+    parsed.search = "";
+    parsed.hash = "";
+    return normalizePairingUrl(parsed.toString(), "agentCardUrl");
+}
+function normalizeDecodedPayload(input, options = {}) {
+    if (!isRecord(input)) {
+        throw new Error("A2A pairing code payload must be an object");
+    }
+    if (input.version !== PAIRING_CODE_VERSION) {
+        throw new Error(`Unsupported A2A pairing code version: ${String(input.version)}`);
+    }
+    const payload = {
+        version: PAIRING_CODE_VERSION,
+        displayName: requireNonEmptyString(input.displayName, "displayName"),
+        agentCardUrl: normalizePairingUrl(input.agentCardUrl, "agentCardUrl"),
+        transportUrl: normalizePairingUrl(input.transportUrl, "transportUrl"),
+        protocolBinding: normalizeProtocolBinding(input.protocolBinding),
+        protocolVersion: requireNonEmptyString(input.protocolVersion, "protocolVersion"),
+        issuedAt: toDate(input.issuedAt, "issuedAt").toISOString(),
+        expiresAt: toDate(input.expiresAt, "expiresAt").toISOString(),
+        ...(typeof input.peerId === "string"
+            ? { peerId: requireNonEmptyString(input.peerId, "peerId") }
+            : {}),
+        ...(isRecord(input.provider)
+            ? { provider: normalizeProvider(input.provider) }
+            : {}),
+        ...(isRecord(input.capabilities)
+            ? { capabilities: normalizeCapabilities(input.capabilities) }
+            : {}),
+        ...(Array.isArray(input.skills)
+            ? { skills: normalizeSkills(input.skills) }
+            : {}),
+        ...(typeof input.keyFingerprint === "string"
+            ? {
+                keyFingerprint: requireNonEmptyString(input.keyFingerprint, "keyFingerprint"),
+            }
+            : {}),
+        ...(isRecord(input.relayHints)
+            ? { relayHints: normalizeRelayHints(input.relayHints) }
+            : {}),
+        ...(isRecord(input.metadata)
+            ? { metadata: normalizeMetadata(input.metadata) }
+            : {}),
+    };
+    validateA2APeerPairingPayload(payload, options);
+    return payload;
+}
+function validateA2APeerPairingPayload(payload, options = {}) {
+    rejectSecretBearingFields(payload);
+    const issuedAt = toDate(payload.issuedAt, "issuedAt");
+    const expiresAt = toDate(payload.expiresAt, "expiresAt");
+    if (expiresAt.getTime() <= issuedAt.getTime()) {
+        throw new Error("A2A pairing code expiresAt must be after issuedAt");
+    }
+    if (!options.allowExpired) {
+        const now = options.now ?? new Date();
+        if (expiresAt.getTime() <= now.getTime()) {
+            throw new Error("A2A pairing code has expired");
+        }
+    }
+}
+function normalizePairingUrl(input, label) {
+    const raw = requireNonEmptyString(input, label);
+    let parsed;
+    try {
+        parsed = new URL(raw);
+    }
+    catch (error) {
+        throw new Error(`${label} must be an absolute URL: ${errorMessage(error)}`);
+    }
+    parsed.username = "";
+    parsed.password = "";
+    parsed.search = "";
+    parsed.hash = "";
+    if (parsed.protocol === "https:") {
+        return parsed.toString();
+    }
+    if (parsed.protocol !== "http:") {
+        throw new Error(`${label} must use http or https`);
+    }
+    if (!isLocalPairingHost(parsed.hostname)) {
+        throw new Error(`${label} must use https unless it targets localhost, private LAN, or Tailscale`);
+    }
+    return parsed.toString();
+}
+function isLocalPairingHost(hostname) {
+    const host = hostname.toLowerCase().replace(/^\[/u, "").replace(/\]$/u, "");
+    if (host === "localhost" ||
+        host === "::1" ||
+        host.endsWith(".local") ||
+        host.endsWith(".ts.net") ||
+        !host.includes(".")) {
+        return true;
+    }
+    const ipv4Parts = host.split(".").map((part) => Number(part));
+    if (ipv4Parts.length === 4 &&
+        ipv4Parts.every((part) => Number.isInteger(part))) {
+        const first = ipv4Parts[0] ?? -1;
+        const second = ipv4Parts[1] ?? -1;
+        return (first === 10 ||
+            first === 127 ||
+            (first === 192 && second === 168) ||
+            (first === 172 && second >= 16 && second <= 31) ||
+            (first === 100 && second >= 64 && second <= 127));
+    }
+    return (host.includes(":") &&
+        (/^f[cd][0-9a-f]*:/u.test(host) || host.startsWith("fe80:")));
+}
+function normalizeProtocolBinding(input) {
+    return requireNonEmptyString(input ?? "HTTP+JSON", "protocolBinding");
+}
+function normalizeProvider(input) {
+    return {
+        ...(typeof input.organization === "string" && input.organization.trim()
+            ? { organization: input.organization.trim() }
+            : {}),
+        ...(typeof input.url === "string" && input.url.trim()
+            ? { url: normalizePairingUrl(input.url, "provider.url") }
+            : {}),
+    };
+}
+function normalizeCapabilities(input) {
+    return {
+        ...(typeof input.streaming === "boolean"
+            ? { streaming: input.streaming }
+            : {}),
+        ...(typeof input.pushNotifications === "boolean"
+            ? { pushNotifications: input.pushNotifications }
+            : {}),
+        ...(typeof input.extendedAgentCard === "boolean"
+            ? { extendedAgentCard: input.extendedAgentCard }
+            : {}),
+    };
+}
+function normalizeSkills(input) {
+    return input.slice(0, MAX_SKILLS_IN_PAIRING_CODE).map((skill, index) => {
+        if (!isRecord(skill)) {
+            throw new Error(`skills[${index}] must be an object`);
+        }
+        return {
+            id: requireNonEmptyString(skill.id, `skills[${index}].id`),
+            name: requireNonEmptyString(skill.name, `skills[${index}].name`),
+            ...copyOptionalString(skill, "description"),
+            ...copyStringList(skill, "tags", MAX_SKILL_TAGS_IN_PAIRING_CODE),
+            ...copyStringList(skill, "examples"),
+            ...copyStringList(skill, "inputModes"),
+            ...copyStringList(skill, "outputModes"),
+            ...copyStringList(skill, "requiredContextGrants"),
+            ...copyOptionalString(skill, "approvalPolicyRef"),
+            ...copyOptionalString(skill, "maxAutonomy"),
+            ...copyStringList(skill, "requiredArtifactKinds"),
+            ...copyStringList(skill, "optionalArtifactKinds"),
+            ...copyStringList(skill, "allowedTaskClasses"),
+            ...copyStringList(skill, "deniedTaskClasses"),
+            ...copyStringRecord(skill, "attributes"),
+            ...copyPrimitiveRecord(skill, "metadata"),
+        };
+    });
+}
+function copyOptionalString(input, key) {
+    const value = input[key];
+    return typeof value === "string" && value.trim()
+        ? { [key]: value.trim() }
+        : {};
+}
+function copyStringList(input, key, limit = Number.POSITIVE_INFINITY) {
+    const value = input[key];
+    if (!Array.isArray(value)) {
+        return {};
+    }
+    const strings = value
+        .filter((item) => typeof item === "string")
+        .map((item) => item.trim())
+        .filter(Boolean)
+        .slice(0, limit);
+    return strings.length > 0 ? { [key]: strings } : {};
+}
+function copyStringRecord(input, key) {
+    const value = input[key];
+    if (!isRecord(value)) {
+        return {};
+    }
+    const entries = Object.entries(value)
+        .map(([entryKey, entryValue]) => [
+        entryKey.trim(),
+        typeof entryValue === "string" ? entryValue.trim() : "",
+    ])
+        .filter((entry) => Boolean(entry[0]) && Boolean(entry[1]));
+    return entries.length > 0 ? { [key]: Object.fromEntries(entries) } : {};
+}
+function copyPrimitiveRecord(input, key) {
+    const value = input[key];
+    if (!isRecord(value)) {
+        return {};
+    }
+    const output = {};
+    for (const [entryKey, entryValue] of Object.entries(value)) {
+        const normalizedKey = entryKey.trim();
+        if (!normalizedKey) {
+            continue;
+        }
+        if (typeof entryValue === "string" ||
+            typeof entryValue === "number" ||
+            typeof entryValue === "boolean") {
+            output[normalizedKey] =
+                typeof entryValue === "string" ? entryValue.trim() : entryValue;
+        }
+    }
+    return Object.keys(output).length > 0 ? { [key]: output } : {};
+}
+function normalizeRelayHints(input) {
+    return {
+        ...(typeof input.host === "string" && input.host.trim()
+            ? { host: input.host.trim() }
+            : {}),
+        ...(typeof input.port === "number" &&
+            Number.isInteger(input.port) &&
+            input.port > 0 &&
+            input.port <= 65535
+            ? { port: input.port }
+            : {}),
+        ...(typeof input.tailscaleName === "string" && input.tailscaleName.trim()
+            ? { tailscaleName: input.tailscaleName.trim() }
+            : {}),
+        ...(typeof input.path === "string" && input.path.trim()
+            ? { path: input.path.trim() }
+            : {}),
+    };
+}
+function normalizeMetadata(input) {
+    const output = {};
+    for (const [key, value] of Object.entries(input)) {
+        if (!key.trim()) {
+            throw new Error("A2A pairing metadata keys must be non-empty");
+        }
+        if (typeof value === "string" ||
+            typeof value === "number" ||
+            typeof value === "boolean") {
+            output[key.trim()] = value;
+        }
+    }
+    return output;
+}
+function rejectSecretBearingFields(value, path = "$") {
+    if (Array.isArray(value)) {
+        for (const [index, item] of value.entries()) {
+            rejectSecretBearingFields(item, `${path}[${index}]`);
+        }
+        return;
+    }
+    if (!isRecord(value)) {
+        return;
+    }
+    for (const [key, child] of Object.entries(value)) {
+        if (isSecretLikeKey(key)) {
+            throw new Error(`A2A pairing codes must not include secret field ${path}.${key}`);
+        }
+        rejectSecretBearingFields(child, `${path}.${key}`);
+    }
+}
+function isSecretLikeKey(key) {
+    const normalized = key.toLowerCase().replace(/[-_]/gu, "");
+    return (normalized === "authorization" ||
+        normalized === "token" ||
+        normalized.endsWith("token") ||
+        normalized === "secret" ||
+        normalized.endsWith("secret") ||
+        normalized === "password" ||
+        normalized.endsWith("password") ||
+        normalized === "apikey" ||
+        normalized.endsWith("apikey") ||
+        normalized === "credentials" ||
+        normalized.endsWith("credentials") ||
+        normalized === "bearer");
+}
+function requireNonEmptyString(input, label) {
+    if (typeof input !== "string" || !input.trim()) {
+        throw new Error(`${label} is required`);
+    }
+    return input.trim();
+}
+function toDate(input, label) {
+    const date = input instanceof Date
+        ? input
+        : new Date(requireNonEmptyString(input, label));
+    if (Number.isNaN(date.getTime())) {
+        throw new Error(`${label} must be an ISO timestamp`);
+    }
+    return date;
+}
+function pairingChecksum(encoded) {
+    return createHash("sha256")
+        .update(`${A2A_PEER_PAIRING_CODE_PREFIX}.${encoded}`)
+        .digest("hex")
+        .slice(0, PAIRING_CODE_CHECKSUM_LENGTH);
+}
+function assertPairingChecksum(encoded, checksum) {
+    const expected = pairingChecksum(encoded);
+    if (checksum.length !== expected.length) {
+        throw new Error("A2A pairing code checksum does not match");
+    }
+    const expectedBytes = Buffer.from(expected, "utf8");
+    const actualBytes = Buffer.from(checksum, "utf8");
+    if (!timingSafeEqual(expectedBytes, actualBytes)) {
+        throw new Error("A2A pairing code checksum does not match");
+    }
+}
+function stablePeerId(payload) {
+    const hash = createHash("sha256")
+        .update(`${payload.displayName}\n${payload.agentCardUrl}\n${payload.transportUrl}`)
+        .digest("base64url")
+        .slice(0, 16);
+    return `a2a-peer-${hash}`;
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+//# sourceMappingURL=a2a-peer-pairing.js.map

package/dist/platform/a2a-peer-pairing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"a2a-peer-pairing.js","sourceRoot":"","sources":["../../src/platform/a2a-peer-pairing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAGN,mBAAmB,GACnB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,CAAC,MAAM,4BAA4B,GAAG,iBAAiB,CAAC;AAE9D,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,MAAM,4BAA4B,GAAG,EAAE,CAAC;AACxC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AACrC,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC9C,MAAM,0BAA0B,GAAG,CAAC,CAAC;AACrC,MAAM,8BAA8B,GAAG,CAAC,CAAC;AA4GzC,MAAM,UAAU,2BAA2B,CAC1C,KAAuC;IAEvC,MAAM,QAAQ,GAAG,MAAM,CACtB,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,EACzC,UAAU,CACV,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,CACvB,KAAK,CAAC,SAAS;QACd,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,sBAAsB,CAAC,CAAC,EACvE,WAAW,CACX,CAAC;IACF,MAAM,OAAO,GAA0B;QACtC,OAAO,EAAE,oBAAoB;QAC7B,WAAW,EAAE,qBAAqB,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC;QACpE,YAAY,EAAE,mBAAmB,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC;QACrE,YAAY,EAAE,mBAAmB,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC;QACrE,eAAe,EAAE,wBAAwB,CAAC,KAAK,CAAC,eAAe,CAAC;QAChE,eAAe,EAAE,qBAAqB,CACrC,KAAK,CAAC,eAAe,IAAI,KAAK,EAC9B,iBAAiB,CACjB;QACD,QAAQ,EAAE,QAAQ,CAAC,WAAW,EAAE;QAChC,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;QAClC,GAAG,CAAC,KAAK,CAAC,MAAM;YACf,CAAC,CAAC,EAAE,MAAM,EAAE,qBAAqB,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE;YAC3D,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,KAAK,CAAC,YAAY;YACrB,CAAC,CAAC,EAAE,YAAY,EAAE,qBAAqB,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE;YAC7D,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,KAAK,CAAC,cAAc;YACvB,CAAC,CAAC;gBACA,cAAc,EAAE,qBAAqB,CACpC,KAAK,CAAC,cAAc,EACpB,gBAAgB,CAChB;aACD;YACF,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,UAAU;YACnB,CAAC,CAAC,EAAE,UAAU,EAAE,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE;YACvD,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAC;IACF,6BAA6B,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3D,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,wCAAwC,CACvD,KAAoD;IAEpD,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACnE,OAAO,2BAA2B,CAAC;QAClC,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI;QACtD,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,YAAY,EAAE,iBAAiB,CAAC,GAAG;QACnC,eAAe,EAAE,iBAAiB,CAAC,eAAe;QAClD,eAAe,EAAE,iBAAiB,CAAC,eAAe;QAClD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ;QAClC,YAAY,EAAE,KAAK,CAAC,SAAS,CAAC,YAAY;QAC1C,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC;QAC/C,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,EAAE,KAAK,CAAC,GAAG;KACd,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACvC,OAA8B;IAE9B,MAAM,UAAU,GAAG,uBAAuB,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5E,yBAAyB,CAAC,UAAU,CAAC,CAAC;IACtC,KAAK,MAAM,SAAS,IAAI,yBAAyB,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,GAAG,2BAA2B,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,MAAM,IAAI,uBAAuB,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,2BAA2B,CAAC,OAA8B;IAClE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CACpE,WAAW,CACX,CAAC;IACF,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC1C,OAAO,GAAG,4BAA4B,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,yBAAyB,CACjC,OAA8B;IAE9B,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,CAAC,OAAO,CAAC,CAAC;IAClB,CAAC;IACD,OAAO;QACN,OAAO;QACP;YACC,GAAG,OAAO;YACV,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,0BAA0B,CAAC;SACtD;QACD,qBAAqB,CAAC,OAAO,CAAC;KAC9B,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAClC,KAAiC;IAEjC,OAAO;QACN,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;YACtC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,8BAA8B,CAAC,EAAE;YAC/D,CAAC,CAAC,EAAE,CAAC;KACN,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC7B,OAA8B;IAE9B,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,aAAa,EAAE,GAAG,OAAO,CAAC;IACtD,OAAO,aAAa,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,wBAAwB,CACvC,IAAY,EACZ,UAA2C,EAAE;IAE7C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IACC,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,CAAC,CAAC,KAAK,4BAA4B;QACzC,CAAC,KAAK,CAAC,CAAC,CAAC;QACT,CAAC,KAAK,CAAC,CAAC,CAAC,EACR,CAAC;QACF,MAAM,IAAI,KAAK,CACd,iCAAiC,4BAA4B,SAAS,CACtE,CAAC;IACH,CAAC;IACD,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,KAAK,CAAC;IACpC,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzC,IAAI,UAAmB,CAAC;IACxB,IAAI,CAAC;QACJ,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACd,+CAA+C,YAAY,CAAC,KAAK,CAAC,EAAE,CACpE,CAAC;IACH,CAAC;IACD,OAAO,uBAAuB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,mCAAmC,CAClD,OAA8B;IAE9B,6BAA6B,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,OAAO;QACN,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,YAAY,CAAC,OAAO,CAAC;QAC/C,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAClD,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,OAAO,CAAC,cAAc;YACzB,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE;YAC5C,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CACtC,SAAuB;IAEvB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,CAAC,mBAAmB,CAAC,IAAI,CACnD,CAAC,SAAS,EAAE,EAAE,CACb,SAAS,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,WAAW,CAC/D,CAAC;IACF,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACd,mEAAmE,CACnE,CAAC;IACH,CAAC;IACD,OAAO;QACN,GAAG,EAAE,mBAAmB,CAAC,SAAS,CAAC,GAAG,EAAE,2BAA2B,CAAC;QACpE,eAAe,EAAE,wBAAwB,CAAC,SAAS,CAAC,eAAe,CAAC;QACpE,eAAe,EAAE,qBAAqB,CACrC,SAAS,CAAC,eAAe,EACzB,uCAAuC,CACvC;QACD,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAa;IACnD,MAAM,OAAO,GAAG,mBAAmB,CAClC,mBAAmB,CAAC,KAAK,EAAE,cAAc,CAAC,CAC1C,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,CAAC,QAAQ,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,8BAA8B,CAAC;IACxF,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;IACnB,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;IACjB,OAAO,mBAAmB,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,cAAc,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,uBAAuB,CAC/B,KAAc,EACd,UAA2C,EAAE;IAE7C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,oBAAoB,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACd,yCAAyC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAChE,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAA0B;QACtC,OAAO,EAAE,oBAAoB;QAC7B,WAAW,EAAE,qBAAqB,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC;QACpE,YAAY,EAAE,mBAAmB,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC;QACrE,YAAY,EAAE,mBAAmB,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC;QACrE,eAAe,EAAE,wBAAwB,CAAC,KAAK,CAAC,eAAe,CAAC;QAChE,eAAe,EAAE,qBAAqB,CACrC,KAAK,CAAC,eAAe,EACrB,iBAAiB,CACjB;QACD,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,WAAW,EAAE;QAC1D,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,WAAW,EAAE;QAC7D,GAAG,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;YACnC,CAAC,CAAC,EAAE,MAAM,EAAE,qBAAqB,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE;YAC3D,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;YAC3B,CAAC,CAAC,EAAE,QAAQ,EAAE,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE;YACjD,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC;YAC/B,CAAC,CAAC,EAAE,YAAY,EAAE,qBAAqB,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE;YAC7D,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;YAC9B,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;YAC3C,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;YAC3C,CAAC,CAAC;gBACA,cAAc,EAAE,qBAAqB,CACpC,KAAK,CAAC,cAAc,EACpB,gBAAgB,CAChB;aACD;YACF,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;YAC7B,CAAC,CAAC,EAAE,UAAU,EAAE,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE;YACvD,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;YAC3B,CAAC,CAAC,EAAE,QAAQ,EAAE,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE;YACjD,CAAC,CAAC,EAAE,CAAC;KACN,CAAC;IACF,6BAA6B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,6BAA6B,CACrC,OAA8B,EAC9B,UAA2C,EAAE;IAE7C,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACzD,IAAI,SAAS,CAAC,OAAO,EAAE,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;QACtC,IAAI,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACjD,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAE,KAAa;IACzD,MAAM,GAAG,GAAG,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAChD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC;IACrB,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC;IACrB,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;IACnB,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;IACjB,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yBAAyB,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACd,GAAG,KAAK,wEAAwE,CAChF,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB;IAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5E,IACC,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,KAAK;QACd,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QACxB,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAClB,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,IACC,SAAS,CAAC,MAAM,KAAK,CAAC;QACtB,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAChD,CAAC;QACF,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAClC,OAAO,CACN,KAAK,KAAK,EAAE;YACZ,KAAK,KAAK,GAAG;YACb,CAAC,KAAK,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;YACjC,CAAC,KAAK,KAAK,GAAG,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,CAAC;YAC/C,CAAC,KAAK,KAAK,GAAG,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI,GAAG,CAAC,CAChD,CAAC;IACH,CAAC;IACD,OAAO,CACN,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAClB,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAC5D,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc;IAC/C,OAAO,qBAAqB,CAAC,KAAK,IAAI,WAAW,EAAE,iBAAiB,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,iBAAiB,CACzB,KAAuD;IAEvD,OAAO;QACN,GAAG,CAAC,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE;YACtE,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE;YAC7C,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE;YACpD,CAAC,CAAC,EAAE,GAAG,EAAE,mBAAmB,CAAC,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE;YACzD,CAAC,CAAC,EAAE,CAAC;KACN,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC7B,KAA2D;IAE3D,OAAO;QACN,GAAG,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;YAChC,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,OAAO,KAAK,CAAC,iBAAiB,KAAK,SAAS;YAC/C,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE;YAChD,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,OAAO,KAAK,CAAC,iBAAiB,KAAK,SAAS;YAC/C,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE;YAChD,CAAC,CAAC,EAAE,CAAC;KACN,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACvB,KAAyB;IAEzB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACtE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,qBAAqB,CAAC,CAAC;QACvD,CAAC;QACD,OAAO;YACN,EAAE,EAAE,qBAAqB,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,KAAK,MAAM,CAAC;YAC1D,IAAI,EAAE,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,KAAK,QAAQ,CAAC;YAChE,GAAG,kBAAkB,CAAC,KAAK,EAAE,aAAa,CAAC;YAC3C,GAAG,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,8BAA8B,CAAC;YAChE,GAAG,cAAc,CAAC,KAAK,EAAE,UAAU,CAAC;YACpC,GAAG,cAAc,CAAC,KAAK,EAAE,YAAY,CAAC;YACtC,GAAG,cAAc,CAAC,KAAK,EAAE,aAAa,CAAC;YACvC,GAAG,cAAc,CAAC,KAAK,EAAE,uBAAuB,CAAC;YACjD,GAAG,kBAAkB,CAAC,KAAK,EAAE,mBAAmB,CAAC;YACjD,GAAG,kBAAkB,CAAC,KAAK,EAAE,aAAa,CAAC;YAC3C,GAAG,cAAc,CAAC,KAAK,EAAE,uBAAuB,CAAC;YACjD,GAAG,cAAc,CAAC,KAAK,EAAE,uBAAuB,CAAC;YACjD,GAAG,cAAc,CAAC,KAAK,EAAE,oBAAoB,CAAC;YAC9C,GAAG,cAAc,CAAC,KAAK,EAAE,mBAAmB,CAAC;YAC7C,GAAG,gBAAgB,CAAC,KAAK,EAAE,YAAY,CAAC;YACxC,GAAG,mBAAmB,CAAC,KAAK,EAAE,UAAU,CAAC;SACzC,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAC1B,KAA8B,EAC9B,GAAW;IAEX,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;QAC/C,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE;QACzB,CAAC,CAAC,EAAE,CAAC;AACP,CAAC;AAED,SAAS,cAAc,CACtB,KAA8B,EAC9B,GAAW,EACX,KAAK,GAAG,MAAM,CAAC,iBAAiB;IAEhC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC;IACX,CAAC;IACD,MAAM,OAAO,GAAG,KAAK;SACnB,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;SAC1D,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC;SACf,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAClB,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,gBAAgB,CACxB,KAA8B,EAC9B,GAAW;IAEX,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;IACX,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;SACnC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC;QAChC,QAAQ,CAAC,IAAI,EAAE;QACf,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;KACvD,CAAC;SACD,MAAM,CACN,CAAC,KAAK,EAA6B,EAAE,CACpC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CACvC,CAAC;IACH,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,mBAAmB,CAC3B,KAA8B,EAC9B,GAAW;IAEX,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;IACX,CAAC;IACD,MAAM,MAAM,GAA8C,EAAE,CAAC;IAC7D,KAAK,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,CAAC,aAAa,EAAE,CAAC;YACpB,SAAS;QACV,CAAC;QACD,IACC,OAAO,UAAU,KAAK,QAAQ;YAC9B,OAAO,UAAU,KAAK,QAAQ;YAC9B,OAAO,UAAU,KAAK,SAAS,EAC9B,CAAC;YACF,MAAM,CAAC,aAAa,CAAC;gBACpB,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;QAClE,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,mBAAmB,CAC3B,KAAyD;IAEzD,OAAO;QACN,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;YACtD,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE;YAC7B,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAClC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;YAC5B,KAAK,CAAC,IAAI,GAAG,CAAC;YACd,KAAK,CAAC,IAAI,IAAI,KAAK;YAClB,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;YACtB,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE;YACxE,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE;YAC/C,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;YACtD,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE;YAC7B,CAAC,CAAC,EAAE,CAAC;KACN,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACzB,KAA8B;IAE9B,MAAM,MAAM,GAA8C,EAAE,CAAC;IAC7D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAChE,CAAC;QACD,IACC,OAAO,KAAK,KAAK,QAAQ;YACzB,OAAO,KAAK,KAAK,QAAQ;YACzB,OAAO,KAAK,KAAK,SAAS,EACzB,CAAC;YACF,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC;QAC5B,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc,EAAE,IAAI,GAAG,GAAG;IAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC7C,yBAAyB,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC;QACtD,CAAC;QACD,OAAO;IACR,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO;IACR,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACd,mDAAmD,IAAI,IAAI,GAAG,EAAE,CAChE,CAAC;QACH,CAAC;QACD,yBAAyB,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;IACpD,CAAC;AACF,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IACnC,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC3D,OAAO,CACN,UAAU,KAAK,eAAe;QAC9B,UAAU,KAAK,OAAO;QACtB,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC5B,UAAU,KAAK,QAAQ;QACvB,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,UAAU,KAAK,UAAU;QACzB,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC/B,UAAU,KAAK,QAAQ;QACvB,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,UAAU,KAAK,aAAa;QAC5B,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC;QAClC,UAAU,KAAK,QAAQ,CACvB,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc,EAAE,KAAa;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,MAAM,CAAC,KAA8B,EAAE,KAAa;IAC5D,MAAM,IAAI,GACT,KAAK,YAAY,IAAI;QACpB,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,IAAI,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACvC,OAAO,UAAU,CAAC,QAAQ,CAAC;SACzB,MAAM,CAAC,GAAG,4BAA4B,IAAI,OAAO,EAAE,CAAC;SACpD,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,4BAA4B,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAe,EAAE,QAAgB;IAC/D,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,eAAe,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC7D,CAAC;AACF,CAAC;AAED,SAAS,YAAY,CAAC,OAA8B;IACnD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC;SAC/B,MAAM,CACN,GAAG,OAAO,CAAC,WAAW,KAAK,OAAO,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY,EAAE,CAC1E;SACA,MAAM,CAAC,WAAW,CAAC;SACnB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACf,OAAO,YAAY,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IACnC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC","sourcesContent":["import { createHash, timingSafeEqual } from \"node:crypto\";\nimport {\n\ttype A2AAgentCard,\n\ttype A2AAgentInterface,\n\tnormalizeA2ABaseUrl,\n} from \"./a2a-client.js\";\n\nexport const A2A_PEER_PAIRING_CODE_PREFIX = \"maestro-pair-v1\";\n\nconst PAIRING_CODE_VERSION = 1;\nconst PAIRING_CODE_CHECKSUM_LENGTH = 16;\nconst MAX_PAIRING_CODE_LENGTH = 8192;\nconst DEFAULT_PAIRING_TTL_MS = 30 * 60 * 1000;\nconst MAX_SKILLS_IN_PAIRING_CODE = 8;\nconst MAX_SKILL_TAGS_IN_PAIRING_CODE = 8;\n\nexport interface A2APeerPairingCapabilities {\n\tstreaming?: boolean;\n\tpushNotifications?: boolean;\n\textendedAgentCard?: boolean;\n}\n\nexport interface A2APeerPairingSkillSummary {\n\tid: string;\n\tname: string;\n\tdescription?: string;\n\ttags?: string[];\n\texamples?: string[];\n\tinputModes?: string[];\n\toutputModes?: string[];\n\trequiredContextGrants?: string[];\n\tapprovalPolicyRef?: string;\n\tmaxAutonomy?: string;\n\trequiredArtifactKinds?: string[];\n\toptionalArtifactKinds?: string[];\n\tallowedTaskClasses?: string[];\n\tdeniedTaskClasses?: string[];\n\tattributes?: Record<string, string>;\n\tmetadata?: Record<string, string | number | boolean>;\n}\n\nexport interface A2APeerPairingProvider {\n\torganization?: string;\n\turl?: string;\n}\n\nexport interface A2APeerPairingRelayHints {\n\thost?: string;\n\tport?: number;\n\ttailscaleName?: string;\n\tpath?: string;\n}\n\nexport interface A2APeerPairingPayload {\n\tversion: 1;\n\tdisplayName: string;\n\tagentCardUrl: string;\n\ttransportUrl: string;\n\tprotocolBinding: string;\n\tprotocolVersion: string;\n\tissuedAt: string;\n\texpiresAt: string;\n\tpeerId?: string;\n\tprovider?: A2APeerPairingProvider;\n\tcapabilities?: A2APeerPairingCapabilities;\n\tskills?: A2APeerPairingSkillSummary[];\n\tkeyFingerprint?: string;\n\trelayHints?: A2APeerPairingRelayHints;\n\tmetadata?: Record<string, string | number | boolean>;\n}\n\nexport interface CreateA2APeerPairingPayloadInput {\n\tdisplayName: string;\n\tagentCardUrl: string;\n\ttransportUrl: string;\n\tprotocolBinding?: string;\n\tprotocolVersion?: string;\n\tissuedAt?: Date | string;\n\texpiresAt?: Date | string;\n\tttlMs?: number;\n\tpeerId?: string;\n\tprovider?: A2APeerPairingProvider;\n\tcapabilities?: A2APeerPairingCapabilities;\n\tskills?: A2APeerPairingSkillSummary[];\n\tkeyFingerprint?: string;\n\trelayHints?: A2APeerPairingRelayHints;\n\tmetadata?: Record<string, string | number | boolean>;\n\tnow?: Date;\n}\n\nexport interface CreateA2APeerPairingPayloadFromAgentCardInput {\n\tagentCard: A2AAgentCard;\n\tagentCardUrl: string;\n\tdisplayName?: string;\n\tissuedAt?: Date | string;\n\texpiresAt?: Date | string;\n\tttlMs?: number;\n\tpeerId?: string;\n\tkeyFingerprint?: string;\n\trelayHints?: A2APeerPairingRelayHints;\n\tmetadata?: Record<string, string | number | boolean>;\n\tnow?: Date;\n}\n\nexport interface DecodeA2APeerPairingCodeOptions {\n\tnow?: Date;\n\tallowExpired?: boolean;\n}\n\nexport interface A2APeerConnection {\n\tpeerId: string;\n\tdisplayName: string;\n\tbaseUrl: string;\n\tagentCardUrl: string;\n\tprotocolBinding: string;\n\tprotocolVersion: string;\n\tcapabilities?: A2APeerPairingCapabilities;\n\tskills?: A2APeerPairingSkillSummary[];\n\tkeyFingerprint?: string;\n\tmetadata?: Record<string, string | number | boolean>;\n}\n\nexport function createA2APeerPairingPayload(\n\tinput: CreateA2APeerPairingPayloadInput,\n): A2APeerPairingPayload {\n\tconst issuedAt = toDate(\n\t\tinput.issuedAt ?? input.now ?? new Date(),\n\t\t\"issuedAt\",\n\t);\n\tconst expiresAt = toDate(\n\t\tinput.expiresAt ??\n\t\t\tnew Date(issuedAt.getTime() + (input.ttlMs ?? DEFAULT_PAIRING_TTL_MS)),\n\t\t\"expiresAt\",\n\t);\n\tconst payload: A2APeerPairingPayload = {\n\t\tversion: PAIRING_CODE_VERSION,\n\t\tdisplayName: requireNonEmptyString(input.displayName, \"displayName\"),\n\t\tagentCardUrl: normalizePairingUrl(input.agentCardUrl, \"agentCardUrl\"),\n\t\ttransportUrl: normalizePairingUrl(input.transportUrl, \"transportUrl\"),\n\t\tprotocolBinding: normalizeProtocolBinding(input.protocolBinding),\n\t\tprotocolVersion: requireNonEmptyString(\n\t\t\tinput.protocolVersion ?? \"1.0\",\n\t\t\t\"protocolVersion\",\n\t\t),\n\t\tissuedAt: issuedAt.toISOString(),\n\t\texpiresAt: expiresAt.toISOString(),\n\t\t...(input.peerId\n\t\t\t? { peerId: requireNonEmptyString(input.peerId, \"peerId\") }\n\t\t\t: {}),\n\t\t...(input.provider ? { provider: normalizeProvider(input.provider) } : {}),\n\t\t...(input.capabilities\n\t\t\t? { capabilities: normalizeCapabilities(input.capabilities) }\n\t\t\t: {}),\n\t\t...(input.skills ? { skills: normalizeSkills(input.skills) } : {}),\n\t\t...(input.keyFingerprint\n\t\t\t? {\n\t\t\t\t\tkeyFingerprint: requireNonEmptyString(\n\t\t\t\t\t\tinput.keyFingerprint,\n\t\t\t\t\t\t\"keyFingerprint\",\n\t\t\t\t\t),\n\t\t\t\t}\n\t\t\t: {}),\n\t\t...(input.relayHints\n\t\t\t? { relayHints: normalizeRelayHints(input.relayHints) }\n\t\t\t: {}),\n\t\t...(input.metadata ? { metadata: normalizeMetadata(input.metadata) } : {}),\n\t};\n\tvalidateA2APeerPairingPayload(payload, { now: input.now });\n\treturn payload;\n}\n\nexport function createA2APeerPairingPayloadFromAgentCard(\n\tinput: CreateA2APeerPairingPayloadFromAgentCardInput,\n): A2APeerPairingPayload {\n\tconst selectedInterface = selectA2AAgentInterface(input.agentCard);\n\treturn createA2APeerPairingPayload({\n\t\tdisplayName: input.displayName ?? input.agentCard.name,\n\t\tagentCardUrl: input.agentCardUrl,\n\t\ttransportUrl: selectedInterface.url,\n\t\tprotocolBinding: selectedInterface.protocolBinding,\n\t\tprotocolVersion: selectedInterface.protocolVersion,\n\t\tissuedAt: input.issuedAt,\n\t\texpiresAt: input.expiresAt,\n\t\tttlMs: input.ttlMs,\n\t\tpeerId: input.peerId,\n\t\tprovider: input.agentCard.provider,\n\t\tcapabilities: input.agentCard.capabilities,\n\t\tskills: normalizeSkills(input.agentCard.skills),\n\t\tkeyFingerprint: input.keyFingerprint,\n\t\trelayHints: input.relayHints,\n\t\tmetadata: input.metadata,\n\t\tnow: input.now,\n\t});\n}\n\nexport function encodeA2APeerPairingCode(\n\tpayload: A2APeerPairingPayload,\n): string {\n\tconst normalized = normalizeDecodedPayload(payload, { allowExpired: true });\n\trejectSecretBearingFields(normalized);\n\tfor (const candidate of pairingCodeSizeCandidates(normalized)) {\n\t\tconst code = encodeNormalizedPairingCode(candidate);\n\t\tif (code.length <= MAX_PAIRING_CODE_LENGTH) {\n\t\t\treturn code;\n\t\t}\n\t}\n\tthrow new Error(\"A2A pairing payload is too large\");\n}\n\nfunction encodeNormalizedPairingCode(payload: A2APeerPairingPayload): string {\n\tconst encoded = Buffer.from(JSON.stringify(payload), \"utf8\").toString(\n\t\t\"base64url\",\n\t);\n\tconst checksum = pairingChecksum(encoded);\n\treturn `${A2A_PEER_PAIRING_CODE_PREFIX}.${encoded}.${checksum}`;\n}\n\nfunction pairingCodeSizeCandidates(\n\tpayload: A2APeerPairingPayload,\n): A2APeerPairingPayload[] {\n\tif (!payload.skills || payload.skills.length === 0) {\n\t\treturn [payload];\n\t}\n\treturn [\n\t\tpayload,\n\t\t{\n\t\t\t...payload,\n\t\t\tskills: payload.skills.map(compactSkillForPairingCode),\n\t\t},\n\t\tomitPairingCodeSkills(payload),\n\t];\n}\n\nfunction compactSkillForPairingCode(\n\tskill: A2APeerPairingSkillSummary,\n): A2APeerPairingSkillSummary {\n\treturn {\n\t\tid: skill.id,\n\t\tname: skill.name,\n\t\t...(skill.tags && skill.tags.length > 0\n\t\t\t? { tags: skill.tags.slice(0, MAX_SKILL_TAGS_IN_PAIRING_CODE) }\n\t\t\t: {}),\n\t};\n}\n\nfunction omitPairingCodeSkills(\n\tpayload: A2APeerPairingPayload,\n): A2APeerPairingPayload {\n\tconst { skills: _skills, ...withoutSkills } = payload;\n\treturn withoutSkills;\n}\n\nexport function decodeA2APeerPairingCode(\n\tcode: string,\n\toptions: DecodeA2APeerPairingCodeOptions = {},\n): A2APeerPairingPayload {\n\tconst compact = code.trim();\n\tif (!compact) {\n\t\tthrow new Error(\"A2A pairing code is required\");\n\t}\n\tif (compact.length > MAX_PAIRING_CODE_LENGTH) {\n\t\tthrow new Error(\"A2A pairing code is too large\");\n\t}\n\tconst parts = compact.split(\".\");\n\tif (\n\t\tparts.length !== 3 ||\n\t\tparts[0] !== A2A_PEER_PAIRING_CODE_PREFIX ||\n\t\t!parts[1] ||\n\t\t!parts[2]\n\t) {\n\t\tthrow new Error(\n\t\t\t`A2A pairing code must use the ${A2A_PEER_PAIRING_CODE_PREFIX} format`,\n\t\t);\n\t}\n\tconst [, encoded, checksum] = parts;\n\tassertPairingChecksum(encoded, checksum);\n\tlet rawPayload: unknown;\n\ttry {\n\t\trawPayload = JSON.parse(Buffer.from(encoded, \"base64url\").toString(\"utf8\"));\n\t} catch (error) {\n\t\tthrow new Error(\n\t\t\t`A2A pairing code payload is not valid JSON: ${errorMessage(error)}`,\n\t\t);\n\t}\n\treturn normalizeDecodedPayload(rawPayload, options);\n}\n\nexport function a2aPeerConnectionFromPairingPayload(\n\tpayload: A2APeerPairingPayload,\n): A2APeerConnection {\n\tvalidateA2APeerPairingPayload(payload, { allowExpired: true });\n\treturn {\n\t\tpeerId: payload.peerId ?? stablePeerId(payload),\n\t\tdisplayName: payload.displayName,\n\t\tbaseUrl: payload.transportUrl.replace(/\\/+$/u, \"\"),\n\t\tagentCardUrl: payload.agentCardUrl,\n\t\tprotocolBinding: payload.protocolBinding,\n\t\tprotocolVersion: payload.protocolVersion,\n\t\t...(payload.capabilities ? { capabilities: payload.capabilities } : {}),\n\t\t...(payload.skills ? { skills: payload.skills } : {}),\n\t\t...(payload.keyFingerprint\n\t\t\t? { keyFingerprint: payload.keyFingerprint }\n\t\t\t: {}),\n\t\t...(payload.metadata ? { metadata: payload.metadata } : {}),\n\t};\n}\n\nexport function selectA2AAgentInterface(\n\tagentCard: A2AAgentCard,\n): A2AAgentInterface {\n\tif (!Array.isArray(agentCard.supportedInterfaces)) {\n\t\tthrow new Error(\"A2A Agent Card must include supportedInterfaces\");\n\t}\n\tconst preferred = agentCard.supportedInterfaces.find(\n\t\t(candidate) =>\n\t\t\tcandidate.protocolBinding.trim().toUpperCase() === \"HTTP+JSON\",\n\t);\n\tif (!preferred) {\n\t\tthrow new Error(\n\t\t\t\"A2A Agent Card does not advertise a supported HTTP+JSON interface\",\n\t\t);\n\t}\n\treturn {\n\t\turl: normalizePairingUrl(preferred.url, \"supportedInterfaces[].url\"),\n\t\tprotocolBinding: normalizeProtocolBinding(preferred.protocolBinding),\n\t\tprotocolVersion: requireNonEmptyString(\n\t\t\tpreferred.protocolVersion,\n\t\t\t\"supportedInterfaces[].protocolVersion\",\n\t\t),\n\t\t...(preferred.tenant ? { tenant: preferred.tenant } : {}),\n\t};\n}\n\nexport function resolveA2AAgentCardUrl(input: string): string {\n\tconst baseUrl = normalizeA2ABaseUrl(\n\t\tnormalizePairingUrl(input, \"agentCardUrl\"),\n\t);\n\tconst parsed = new URL(baseUrl);\n\tparsed.pathname = `${parsed.pathname.replace(/\\/+$/u, \"\")}/.well-known/agent-card.json`;\n\tparsed.search = \"\";\n\tparsed.hash = \"\";\n\treturn normalizePairingUrl(parsed.toString(), \"agentCardUrl\");\n}\n\nfunction normalizeDecodedPayload(\n\tinput: unknown,\n\toptions: DecodeA2APeerPairingCodeOptions = {},\n): A2APeerPairingPayload {\n\tif (!isRecord(input)) {\n\t\tthrow new Error(\"A2A pairing code payload must be an object\");\n\t}\n\tif (input.version !== PAIRING_CODE_VERSION) {\n\t\tthrow new Error(\n\t\t\t`Unsupported A2A pairing code version: ${String(input.version)}`,\n\t\t);\n\t}\n\tconst payload: A2APeerPairingPayload = {\n\t\tversion: PAIRING_CODE_VERSION,\n\t\tdisplayName: requireNonEmptyString(input.displayName, \"displayName\"),\n\t\tagentCardUrl: normalizePairingUrl(input.agentCardUrl, \"agentCardUrl\"),\n\t\ttransportUrl: normalizePairingUrl(input.transportUrl, \"transportUrl\"),\n\t\tprotocolBinding: normalizeProtocolBinding(input.protocolBinding),\n\t\tprotocolVersion: requireNonEmptyString(\n\t\t\tinput.protocolVersion,\n\t\t\t\"protocolVersion\",\n\t\t),\n\t\tissuedAt: toDate(input.issuedAt, \"issuedAt\").toISOString(),\n\t\texpiresAt: toDate(input.expiresAt, \"expiresAt\").toISOString(),\n\t\t...(typeof input.peerId === \"string\"\n\t\t\t? { peerId: requireNonEmptyString(input.peerId, \"peerId\") }\n\t\t\t: {}),\n\t\t...(isRecord(input.provider)\n\t\t\t? { provider: normalizeProvider(input.provider) }\n\t\t\t: {}),\n\t\t...(isRecord(input.capabilities)\n\t\t\t? { capabilities: normalizeCapabilities(input.capabilities) }\n\t\t\t: {}),\n\t\t...(Array.isArray(input.skills)\n\t\t\t? { skills: normalizeSkills(input.skills) }\n\t\t\t: {}),\n\t\t...(typeof input.keyFingerprint === \"string\"\n\t\t\t? {\n\t\t\t\t\tkeyFingerprint: requireNonEmptyString(\n\t\t\t\t\t\tinput.keyFingerprint,\n\t\t\t\t\t\t\"keyFingerprint\",\n\t\t\t\t\t),\n\t\t\t\t}\n\t\t\t: {}),\n\t\t...(isRecord(input.relayHints)\n\t\t\t? { relayHints: normalizeRelayHints(input.relayHints) }\n\t\t\t: {}),\n\t\t...(isRecord(input.metadata)\n\t\t\t? { metadata: normalizeMetadata(input.metadata) }\n\t\t\t: {}),\n\t};\n\tvalidateA2APeerPairingPayload(payload, options);\n\treturn payload;\n}\n\nfunction validateA2APeerPairingPayload(\n\tpayload: A2APeerPairingPayload,\n\toptions: DecodeA2APeerPairingCodeOptions = {},\n): void {\n\trejectSecretBearingFields(payload);\n\tconst issuedAt = toDate(payload.issuedAt, \"issuedAt\");\n\tconst expiresAt = toDate(payload.expiresAt, \"expiresAt\");\n\tif (expiresAt.getTime() <= issuedAt.getTime()) {\n\t\tthrow new Error(\"A2A pairing code expiresAt must be after issuedAt\");\n\t}\n\tif (!options.allowExpired) {\n\t\tconst now = options.now ?? new Date();\n\t\tif (expiresAt.getTime() <= now.getTime()) {\n\t\t\tthrow new Error(\"A2A pairing code has expired\");\n\t\t}\n\t}\n}\n\nfunction normalizePairingUrl(input: unknown, label: string): string {\n\tconst raw = requireNonEmptyString(input, label);\n\tlet parsed: URL;\n\ttry {\n\t\tparsed = new URL(raw);\n\t} catch (error) {\n\t\tthrow new Error(`${label} must be an absolute URL: ${errorMessage(error)}`);\n\t}\n\tparsed.username = \"\";\n\tparsed.password = \"\";\n\tparsed.search = \"\";\n\tparsed.hash = \"\";\n\tif (parsed.protocol === \"https:\") {\n\t\treturn parsed.toString();\n\t}\n\tif (parsed.protocol !== \"http:\") {\n\t\tthrow new Error(`${label} must use http or https`);\n\t}\n\tif (!isLocalPairingHost(parsed.hostname)) {\n\t\tthrow new Error(\n\t\t\t`${label} must use https unless it targets localhost, private LAN, or Tailscale`,\n\t\t);\n\t}\n\treturn parsed.toString();\n}\n\nfunction isLocalPairingHost(hostname: string): boolean {\n\tconst host = hostname.toLowerCase().replace(/^\\[/u, \"\").replace(/\\]$/u, \"\");\n\tif (\n\t\thost === \"localhost\" ||\n\t\thost === \"::1\" ||\n\t\thost.endsWith(\".local\") ||\n\t\thost.endsWith(\".ts.net\") ||\n\t\t!host.includes(\".\")\n\t) {\n\t\treturn true;\n\t}\n\tconst ipv4Parts = host.split(\".\").map((part) => Number(part));\n\tif (\n\t\tipv4Parts.length === 4 &&\n\t\tipv4Parts.every((part) => Number.isInteger(part))\n\t) {\n\t\tconst first = ipv4Parts[0] ?? -1;\n\t\tconst second = ipv4Parts[1] ?? -1;\n\t\treturn (\n\t\t\tfirst === 10 ||\n\t\t\tfirst === 127 ||\n\t\t\t(first === 192 && second === 168) ||\n\t\t\t(first === 172 && second >= 16 && second <= 31) ||\n\t\t\t(first === 100 && second >= 64 && second <= 127)\n\t\t);\n\t}\n\treturn (\n\t\thost.includes(\":\") &&\n\t\t(/^f[cd][0-9a-f]*:/u.test(host) || host.startsWith(\"fe80:\"))\n\t);\n}\n\nfunction normalizeProtocolBinding(input: unknown): string {\n\treturn requireNonEmptyString(input ?? \"HTTP+JSON\", \"protocolBinding\");\n}\n\nfunction normalizeProvider(\n\tinput: A2APeerPairingProvider | Record<string, unknown>,\n): A2APeerPairingProvider {\n\treturn {\n\t\t...(typeof input.organization === \"string\" && input.organization.trim()\n\t\t\t? { organization: input.organization.trim() }\n\t\t\t: {}),\n\t\t...(typeof input.url === \"string\" && input.url.trim()\n\t\t\t? { url: normalizePairingUrl(input.url, \"provider.url\") }\n\t\t\t: {}),\n\t};\n}\n\nfunction normalizeCapabilities(\n\tinput: A2APeerPairingCapabilities | Record<string, unknown>,\n): A2APeerPairingCapabilities {\n\treturn {\n\t\t...(typeof input.streaming === \"boolean\"\n\t\t\t? { streaming: input.streaming }\n\t\t\t: {}),\n\t\t...(typeof input.pushNotifications === \"boolean\"\n\t\t\t? { pushNotifications: input.pushNotifications }\n\t\t\t: {}),\n\t\t...(typeof input.extendedAgentCard === \"boolean\"\n\t\t\t? { extendedAgentCard: input.extendedAgentCard }\n\t\t\t: {}),\n\t};\n}\n\nfunction normalizeSkills(\n\tinput: readonly unknown[],\n): A2APeerPairingSkillSummary[] {\n\treturn input.slice(0, MAX_SKILLS_IN_PAIRING_CODE).map((skill, index) => {\n\t\tif (!isRecord(skill)) {\n\t\t\tthrow new Error(`skills[${index}] must be an object`);\n\t\t}\n\t\treturn {\n\t\t\tid: requireNonEmptyString(skill.id, `skills[${index}].id`),\n\t\t\tname: requireNonEmptyString(skill.name, `skills[${index}].name`),\n\t\t\t...copyOptionalString(skill, \"description\"),\n\t\t\t...copyStringList(skill, \"tags\", MAX_SKILL_TAGS_IN_PAIRING_CODE),\n\t\t\t...copyStringList(skill, \"examples\"),\n\t\t\t...copyStringList(skill, \"inputModes\"),\n\t\t\t...copyStringList(skill, \"outputModes\"),\n\t\t\t...copyStringList(skill, \"requiredContextGrants\"),\n\t\t\t...copyOptionalString(skill, \"approvalPolicyRef\"),\n\t\t\t...copyOptionalString(skill, \"maxAutonomy\"),\n\t\t\t...copyStringList(skill, \"requiredArtifactKinds\"),\n\t\t\t...copyStringList(skill, \"optionalArtifactKinds\"),\n\t\t\t...copyStringList(skill, \"allowedTaskClasses\"),\n\t\t\t...copyStringList(skill, \"deniedTaskClasses\"),\n\t\t\t...copyStringRecord(skill, \"attributes\"),\n\t\t\t...copyPrimitiveRecord(skill, \"metadata\"),\n\t\t};\n\t});\n}\n\nfunction copyOptionalString(\n\tinput: Record<string, unknown>,\n\tkey: string,\n): Record<string, string> {\n\tconst value = input[key];\n\treturn typeof value === \"string\" && value.trim()\n\t\t? { [key]: value.trim() }\n\t\t: {};\n}\n\nfunction copyStringList(\n\tinput: Record<string, unknown>,\n\tkey: string,\n\tlimit = Number.POSITIVE_INFINITY,\n): Record<string, string[]> {\n\tconst value = input[key];\n\tif (!Array.isArray(value)) {\n\t\treturn {};\n\t}\n\tconst strings = value\n\t\t.filter((item): item is string => typeof item === \"string\")\n\t\t.map((item) => item.trim())\n\t\t.filter(Boolean)\n\t\t.slice(0, limit);\n\treturn strings.length > 0 ? { [key]: strings } : {};\n}\n\nfunction copyStringRecord(\n\tinput: Record<string, unknown>,\n\tkey: string,\n): Record<string, Record<string, string>> {\n\tconst value = input[key];\n\tif (!isRecord(value)) {\n\t\treturn {};\n\t}\n\tconst entries = Object.entries(value)\n\t\t.map(([entryKey, entryValue]) => [\n\t\t\tentryKey.trim(),\n\t\t\ttypeof entryValue === \"string\" ? entryValue.trim() : \"\",\n\t\t])\n\t\t.filter(\n\t\t\t(entry): entry is [string, string] =>\n\t\t\t\tBoolean(entry[0]) && Boolean(entry[1]),\n\t\t);\n\treturn entries.length > 0 ? { [key]: Object.fromEntries(entries) } : {};\n}\n\nfunction copyPrimitiveRecord(\n\tinput: Record<string, unknown>,\n\tkey: string,\n): Record<string, Record<string, string | number | boolean>> {\n\tconst value = input[key];\n\tif (!isRecord(value)) {\n\t\treturn {};\n\t}\n\tconst output: Record<string, string | number | boolean> = {};\n\tfor (const [entryKey, entryValue] of Object.entries(value)) {\n\t\tconst normalizedKey = entryKey.trim();\n\t\tif (!normalizedKey) {\n\t\t\tcontinue;\n\t\t}\n\t\tif (\n\t\t\ttypeof entryValue === \"string\" ||\n\t\t\ttypeof entryValue === \"number\" ||\n\t\t\ttypeof entryValue === \"boolean\"\n\t\t) {\n\t\t\toutput[normalizedKey] =\n\t\t\t\ttypeof entryValue === \"string\" ? entryValue.trim() : entryValue;\n\t\t}\n\t}\n\treturn Object.keys(output).length > 0 ? { [key]: output } : {};\n}\n\nfunction normalizeRelayHints(\n\tinput: A2APeerPairingRelayHints | Record<string, unknown>,\n): A2APeerPairingRelayHints {\n\treturn {\n\t\t...(typeof input.host === \"string\" && input.host.trim()\n\t\t\t? { host: input.host.trim() }\n\t\t\t: {}),\n\t\t...(typeof input.port === \"number\" &&\n\t\tNumber.isInteger(input.port) &&\n\t\tinput.port > 0 &&\n\t\tinput.port <= 65535\n\t\t\t? { port: input.port }\n\t\t\t: {}),\n\t\t...(typeof input.tailscaleName === \"string\" && input.tailscaleName.trim()\n\t\t\t? { tailscaleName: input.tailscaleName.trim() }\n\t\t\t: {}),\n\t\t...(typeof input.path === \"string\" && input.path.trim()\n\t\t\t? { path: input.path.trim() }\n\t\t\t: {}),\n\t};\n}\n\nfunction normalizeMetadata(\n\tinput: Record<string, unknown>,\n): Record<string, string | number | boolean> {\n\tconst output: Record<string, string | number | boolean> = {};\n\tfor (const [key, value] of Object.entries(input)) {\n\t\tif (!key.trim()) {\n\t\t\tthrow new Error(\"A2A pairing metadata keys must be non-empty\");\n\t\t}\n\t\tif (\n\t\t\ttypeof value === \"string\" ||\n\t\t\ttypeof value === \"number\" ||\n\t\t\ttypeof value === \"boolean\"\n\t\t) {\n\t\t\toutput[key.trim()] = value;\n\t\t}\n\t}\n\treturn output;\n}\n\nfunction rejectSecretBearingFields(value: unknown, path = \"$\"): void {\n\tif (Array.isArray(value)) {\n\t\tfor (const [index, item] of value.entries()) {\n\t\t\trejectSecretBearingFields(item, `${path}[${index}]`);\n\t\t}\n\t\treturn;\n\t}\n\tif (!isRecord(value)) {\n\t\treturn;\n\t}\n\tfor (const [key, child] of Object.entries(value)) {\n\t\tif (isSecretLikeKey(key)) {\n\t\t\tthrow new Error(\n\t\t\t\t`A2A pairing codes must not include secret field ${path}.${key}`,\n\t\t\t);\n\t\t}\n\t\trejectSecretBearingFields(child, `${path}.${key}`);\n\t}\n}\n\nfunction isSecretLikeKey(key: string): boolean {\n\tconst normalized = key.toLowerCase().replace(/[-_]/gu, \"\");\n\treturn (\n\t\tnormalized === \"authorization\" ||\n\t\tnormalized === \"token\" ||\n\t\tnormalized.endsWith(\"token\") ||\n\t\tnormalized === \"secret\" ||\n\t\tnormalized.endsWith(\"secret\") ||\n\t\tnormalized === \"password\" ||\n\t\tnormalized.endsWith(\"password\") ||\n\t\tnormalized === \"apikey\" ||\n\t\tnormalized.endsWith(\"apikey\") ||\n\t\tnormalized === \"credentials\" ||\n\t\tnormalized.endsWith(\"credentials\") ||\n\t\tnormalized === \"bearer\"\n\t);\n}\n\nfunction requireNonEmptyString(input: unknown, label: string): string {\n\tif (typeof input !== \"string\" || !input.trim()) {\n\t\tthrow new Error(`${label} is required`);\n\t}\n\treturn input.trim();\n}\n\nfunction toDate(input: Date | string | unknown, label: string): Date {\n\tconst date =\n\t\tinput instanceof Date\n\t\t\t? input\n\t\t\t: new Date(requireNonEmptyString(input, label));\n\tif (Number.isNaN(date.getTime())) {\n\t\tthrow new Error(`${label} must be an ISO timestamp`);\n\t}\n\treturn date;\n}\n\nfunction pairingChecksum(encoded: string): string {\n\treturn createHash(\"sha256\")\n\t\t.update(`${A2A_PEER_PAIRING_CODE_PREFIX}.${encoded}`)\n\t\t.digest(\"hex\")\n\t\t.slice(0, PAIRING_CODE_CHECKSUM_LENGTH);\n}\n\nfunction assertPairingChecksum(encoded: string, checksum: string): void {\n\tconst expected = pairingChecksum(encoded);\n\tif (checksum.length !== expected.length) {\n\t\tthrow new Error(\"A2A pairing code checksum does not match\");\n\t}\n\tconst expectedBytes = Buffer.from(expected, \"utf8\");\n\tconst actualBytes = Buffer.from(checksum, \"utf8\");\n\tif (!timingSafeEqual(expectedBytes, actualBytes)) {\n\t\tthrow new Error(\"A2A pairing code checksum does not match\");\n\t}\n}\n\nfunction stablePeerId(payload: A2APeerPairingPayload): string {\n\tconst hash = createHash(\"sha256\")\n\t\t.update(\n\t\t\t`${payload.displayName}\\n${payload.agentCardUrl}\\n${payload.transportUrl}`,\n\t\t)\n\t\t.digest(\"base64url\")\n\t\t.slice(0, 16);\n\treturn `a2a-peer-${hash}`;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction errorMessage(error: unknown): string {\n\treturn error instanceof Error ? error.message : String(error);\n}\n"]}

package/dist/platform/a2a-peer-registry.d.ts

@@ -0,0 +1,68 @@
+import { type A2AServiceConfig } from "./a2a-client.js";
+import { type A2APeerConnection, type A2APeerPairingPayload } from "./a2a-peer-pairing.js";
+export interface A2APeerRegistryEntry {
+    url: string;
+    displayName?: string;
+    agentCardUrl?: string;
+    protocolBinding?: string;
+    protocolVersion?: string;
+    tokenEnv?: string;
+    tokenFile?: string;
+    organizationId?: string;
+    workspaceId?: string;
+    agentId?: string;
+    sessionId?: string;
+    actorId?: string;
+    timeoutMs?: number;
+    maxAttempts?: number;
+    capabilities?: A2APeerConnection["capabilities"];
+    skills?: A2APeerConnection["skills"];
+    keyFingerprint?: string;
+    metadata?: Record<string, string | number | boolean>;
+    createdAt?: string;
+    updatedAt?: string;
+}
+export interface A2APeerRegistryFile {
+    defaultPeer?: string;
+    timeoutMs?: number;
+    maxAttempts?: number;
+    peers: Record<string, A2APeerRegistryEntry>;
+}
+export interface A2APeerRegistryOptions {
+    path?: string;
+    now?: Date;
+}
+export interface UpsertA2APeerOptions extends A2APeerRegistryOptions {
+    name?: string;
+    makeDefault?: boolean;
+    tokenEnv?: string;
+    tokenFile?: string;
+    workspaceId?: string;
+    organizationId?: string;
+}
+export interface ResolveA2APeerOptions extends A2APeerRegistryOptions {
+    token?: string;
+    timeoutMs?: number;
+    maxAttempts?: number;
+}
+export interface ResolvedA2APeer {
+    name: string;
+    entry: A2APeerRegistryEntry;
+    config: A2AServiceConfig;
+}
+export declare function getA2APeerRegistryPath(path?: string): string;
+export declare function loadA2APeerRegistry(options?: A2APeerRegistryOptions): Promise<A2APeerRegistryFile>;
+export declare function saveA2APeerRegistry(registry: A2APeerRegistryFile, options?: A2APeerRegistryOptions): Promise<string>;
+export declare function upsertA2APeerFromPairingPayload(payload: A2APeerPairingPayload, options?: UpsertA2APeerOptions): Promise<{
+    name: string;
+    entry: A2APeerRegistryEntry;
+    path: string;
+}>;
+export declare function listA2APeers(options?: A2APeerRegistryOptions): Promise<{
+    path: string;
+    registry: A2APeerRegistryFile;
+}>;
+export declare function resolveA2APeer(name: string | undefined, options?: ResolveA2APeerOptions): Promise<ResolvedA2APeer>;
+export declare function resolvePeerToken(entry: Pick<A2APeerRegistryEntry, "tokenEnv" | "tokenFile">): Promise<string | undefined>;
+export declare function normalizePeerName(name: string | undefined): string;
+//# sourceMappingURL=a2a-peer-registry.d.ts.map