@hainiva/agent-sdk 0.0.0-stage → 0.3.0

package/dist/esm/singleFlight.js

@@ -0,0 +1,46 @@
+/**
+ * Calls `fn` at most once at a time: callers that arrive while it runs share its
+ * result (or its error). The next call after it settles runs `fn` again.
+ */
+export function singleFlight(fn) {
+    let inFlight = null;
+    return () => {
+        inFlight ?? (inFlight = (async () => {
+            try {
+                return await fn();
+            }
+            finally {
+                inFlight = null;
+            }
+        })());
+        return inFlight;
+    };
+}
+/**
+ * Single-flight token refresh with a pluggable refresh function. Ten requests that
+ * find the token expired cause one refresh, not ten — which also keeps a
+ * rotating refresh token from being spent twice (reuse detection would then
+ * revoke the whole session family).
+ */
+export function createTokenRefresher(o) {
+    const skew = o.skewMs ?? 60000;
+    const now = o.now ?? Date.now;
+    let current = null;
+    const run = singleFlight(async () => {
+        const t = await o.refresh();
+        if (!t || typeof t.token !== "string" || !t.token)
+            throw new Error("refresh returned no token");
+        current = t;
+        return t.token;
+    });
+    return {
+        get valid() { return current !== null && current.expiresAt - now() > skew; },
+        async get() {
+            if (current && current.expiresAt - now() > skew)
+                return current.token;
+            return run();
+        },
+        invalidate() { current = null; },
+    };
+}
+//# sourceMappingURL=singleFlight.js.map

package/dist/esm/singleFlight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"singleFlight.js","sourceRoot":"","sources":["../../src/singleFlight.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAI,EAAoB;IAClD,IAAI,QAAQ,GAAsB,IAAI,CAAC;IACvC,OAAO,GAAG,EAAE;QACV,QAAQ,KAAR,QAAQ,GAAK,CAAC,KAAK,IAAI,EAAE;YACvB,IAAI,CAAC;gBAAC,OAAO,MAAM,EAAE,EAAE,CAAC;YAAC,CAAC;oBAClB,CAAC;gBAAC,QAAQ,GAAG,IAAI,CAAC;YAAC,CAAC;QAC9B,CAAC,CAAC,EAAE,EAAC;QACL,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC;AAyBD;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,CAAwB;IAC3D,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,IAAI,KAAM,CAAC;IAChC,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAC9B,IAAI,OAAO,GAA0B,IAAI,CAAC;IAC1C,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,IAAI,EAAE;QAClC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAChG,OAAO,GAAG,CAAC,CAAC;QACZ,OAAO,CAAC,CAAC,KAAK,CAAC;IACjB,CAAC,CAAC,CAAC;IACH,OAAO;QACL,IAAI,KAAK,KAAK,OAAO,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QAC5E,KAAK,CAAC,GAAG;YACP,IAAI,OAAO,IAAI,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE,GAAG,IAAI;gBAAE,OAAO,OAAO,CAAC,KAAK,CAAC;YACtE,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;QACD,UAAU,KAAK,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC;KACjC,CAAC;AACJ,CAAC"}

package/dist/esm/url.d.ts

@@ -0,0 +1,14 @@
+export interface UrlRules {
+    /** "http" for REST (https required), "ws" for sockets (wss required). */
+    kind: "http" | "ws";
+    /** Allow http:// / ws:// to localhost (local development only). Default false. */
+    allowInsecureLocalhost?: boolean;
+}
+/**
+ * A base / socket / media URL a partner configured, checked before use: TLS only,
+ * no user:password@, and no credential in the query string. Tokens travel in
+ * headers or in the socket's first frame — never in a URL, which ends up in
+ * access logs, proxies and browser history.
+ */
+export declare function assertSafeUrl(raw: string, rules: UrlRules): URL;
+//# sourceMappingURL=url.d.ts.map

package/dist/esm/url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.d.ts","sourceRoot":"","sources":["../../src/url.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,QAAQ;IACvB,yEAAyE;IACzE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,kFAAkF;IAClF,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAMD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,GAAG,GAAG,CAiB/D"}

package/dist/esm/url.js

@@ -0,0 +1,37 @@
+import { HainivaAgentError } from "./errors.js";
+const LOCAL = new Set(["localhost", "127.0.0.1", "[::1]", "::1"]);
+/** Query parameter names that would carry a credential. */
+const CREDENTIAL_PARAM = /token|assertion|secret|password|passw|key|auth|jwt|session|signature|ticket/i;
+/**
+ * A base / socket / media URL a partner configured, checked before use: TLS only,
+ * no user:password@, and no credential in the query string. Tokens travel in
+ * headers or in the socket's first frame — never in a URL, which ends up in
+ * access logs, proxies and browser history.
+ */
+export function assertSafeUrl(raw, rules) {
+    let u;
+    try {
+        u = new URL(raw);
+    }
+    catch {
+        throw new HainivaAgentError(0, "invalid_url", { kind: rules.kind });
+    }
+    const secure = rules.kind === "http" ? "https:" : "wss:";
+    const insecure = rules.kind === "http" ? "http:" : "ws:";
+    const local = LOCAL.has(u.hostname);
+    if (u.protocol !== secure && !(u.protocol === insecure && local && rules.allowInsecureLocalhost)) {
+        throw new HainivaAgentError(0, "insecure_url", { expected: secure, got: u.protocol, host: u.host });
+    }
+    if (u.username || u.password)
+        throw new HainivaAgentError(0, "credentials_in_url", { host: u.host });
+    let param = null;
+    u.searchParams.forEach((_v, name) => { if (!param && CREDENTIAL_PARAM.test(name))
+        param = name; });
+    if (param)
+        throw new HainivaAgentError(0, "credentials_in_url", { host: u.host, param });
+    if (/eyJ[A-Za-z0-9_-]{4,}\.[A-Za-z0-9_-]{4,}/.test(u.search + u.hash + u.pathname)) {
+        throw new HainivaAgentError(0, "credentials_in_url", { host: u.host });
+    }
+    return u;
+}
+//# sourceMappingURL=url.js.map

package/dist/esm/url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.js","sourceRoot":"","sources":["../../src/url.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAShD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AAClE,2DAA2D;AAC3D,MAAM,gBAAgB,GAAG,8EAA8E,CAAC;AAExG;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,KAAe;IACxD,IAAI,CAAM,CAAC;IACX,IAAI,CAAC;QAAC,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,iBAAiB,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IACxG,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;IACzD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IACzD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,IAAI,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACjG,MAAM,IAAI,iBAAiB,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ;QAAE,MAAM,IAAI,iBAAiB,CAAC,CAAC,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACrG,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACnG,IAAI,KAAK;QAAE,MAAM,IAAI,iBAAiB,CAAC,CAAC,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzF,IAAI,yCAAyC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,iBAAiB,CAAC,CAAC,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/esm/web.d.ts

@@ -0,0 +1,24 @@
+/**
+ * @hainiva/agent-sdk/web — browser adapters: an opt-in localStorage session store
+ * and LiveKit call media (peer dependency `livekit-client`).
+ */
+import type { SessionStore } from "./session.js";
+export { memoryStore } from "./session.js";
+export { joinCallRoom, type JoinOptions, type MediaCall, type MediaJoin } from "./livekit.js";
+export interface LocalStorageStoreOptions {
+    /** Default "hainiva.agent.session". */
+    key?: string;
+    /** Default globalThis.localStorage. */
+    storage?: Pick<Storage, "getItem" | "setItem" | "removeItem">;
+}
+/**
+ * OPT-IN: keep the session in localStorage so a reload stays signed in.
+ *
+ * ⚠ Any script running on your origin (an XSS, a compromised third-party script)
+ * can read localStorage — including the 30-day refresh token. Use it only with a
+ * strict Content-Security-Policy and no third-party scripts on the page. The
+ * default (memoryStore) keeps nothing: a reload signs in again with a fresh
+ * assertion from your backend, which is the safer choice.
+ */
+export declare function localStorageStore(o?: LocalStorageStoreOptions): SessionStore;
+//# sourceMappingURL=web.d.ts.map

package/dist/esm/web.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web.d.ts","sourceRoot":"","sources":["../../src/web.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,KAAK,WAAW,EAAE,KAAK,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,cAAc,CAAC;AAE9F,MAAM,WAAW,wBAAwB;IACvC,uCAAuC;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,uCAAuC;IACvC,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,YAAY,CAAC,CAAC;CAC/D;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,GAAE,wBAA6B,GAAG,YAAY,CAShF"}

package/dist/esm/web.js

@@ -0,0 +1,23 @@
+export { memoryStore } from "./session.js";
+export { joinCallRoom } from "./livekit.js";
+/**
+ * OPT-IN: keep the session in localStorage so a reload stays signed in.
+ *
+ * ⚠ Any script running on your origin (an XSS, a compromised third-party script)
+ * can read localStorage — including the 30-day refresh token. Use it only with a
+ * strict Content-Security-Policy and no third-party scripts on the page. The
+ * default (memoryStore) keeps nothing: a reload signs in again with a fresh
+ * assertion from your backend, which is the safer choice.
+ */
+export function localStorageStore(o = {}) {
+    const key = o.key ?? "hainiva.agent.session";
+    const storage = o.storage ?? globalThis.localStorage;
+    if (!storage)
+        throw new Error("localStorage is not available here; use memoryStore()");
+    return {
+        get: () => storage.getItem(key),
+        set: (v) => storage.setItem(key, v),
+        remove: () => storage.removeItem(key),
+    };
+}
+//# sourceMappingURL=web.js.map

package/dist/esm/web.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web.js","sourceRoot":"","sources":["../../src/web.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAoD,MAAM,cAAc,CAAC;AAS9F;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAA8B,EAAE;IAChE,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,uBAAuB,CAAC;IAC7C,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,IAAK,UAAyC,CAAC,YAAY,CAAC;IACrF,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IACvF,OAAO;QACL,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;QAC/B,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACnC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;KACtC,CAAC;AACJ,CAAC"}

package/dist/esm/ws.d.ts

@@ -0,0 +1,135 @@
+import { TypedEmitter } from "./emitter.js";
+import { HainivaAgentError } from "./errors.js";
+import { type Logger } from "./log.js";
+import { Redactor } from "./redact.js";
+export type ConnectionState = "idle" | "connecting" | "open" | "reconnecting" | "closed";
+/** Exponential backoff with full jitter: between half and all of min(max, initial·2^attempt). */
+export declare function backoffDelay(attempt: number, initial?: number, max?: number, rnd?: () => number): number;
+/** The part of the WebSocket API this client uses (browser, React Native, `ws` in Node). */
+export interface WebSocketLike {
+    readonly readyState: number;
+    send(data: string): void;
+    close(code?: number, reason?: string): void;
+    onopen: ((ev: unknown) => void) | null;
+    onmessage: ((ev: {
+        data: unknown;
+    }) => void) | null;
+    onclose: ((ev: {
+        code: number;
+        reason?: string;
+    }) => void) | null;
+    onerror: ((ev: unknown) => void) | null;
+}
+export type WebSocketCtor = new (url: string) => WebSocketLike;
+type AnyFrame = Record<string, unknown>;
+export interface SocketOptions<In = AnyFrame, Out = AnyFrame> {
+    /** wss:// URL, or a function returning it. Never carries a credential (checked). */
+    url: string | (() => string | Promise<string>);
+    /** A valid access token (e.g. `session.accessToken()`); sent in the first frame. */
+    getToken: () => Promise<string>;
+    /** The server refused the token (close code `tokenExpired`): e.g. `session.invalidate()`. */
+    onTokenRejected?: () => void;
+    WebSocket?: WebSocketCtor;
+    /** First frame after open. Default `{ type: "auth", token }`. */
+    authFrame?: (token: string) => Out;
+    /** Whether a frame is the server's "authenticated" answer. Default `type === "ready"`. */
+    isReady?: (frame: In) => boolean;
+    /** Give up on an open socket that is not ready after this long. Default 10 s. */
+    authTimeoutMs?: number;
+    /** Keep-alive. `false` turns it off. */
+    heartbeat?: false | {
+        /** Send `frame()` this often. Default 20 s. */
+        intervalMs?: number;
+        /** Reconnect when nothing at all was received for this long. Default 45 s. */
+        timeoutMs?: number;
+        /** Default `{ type: "ping" }`. */
+        frame?: () => Out;
+    };
+    /** Resume hook: the frame to send after `ready` when frames were seen before. */
+    resume?: (lastSeq: number) => Out | null;
+    /** A frame's sequence number, if it has one. Default: numeric `seq`. */
+    seqOf?: (frame: In) => number | undefined;
+    /** Frame to hand the server a refreshed access token on an open socket. */
+    tokenFrame?: (token: string) => Out;
+    encode?: (frame: Out) => string;
+    decode?: (raw: string) => In;
+    backoff?: {
+        initialMs?: number;
+        maxMs?: number;
+        random?: () => number;
+    };
+    /**
+     * Server close codes. Defaults: tokenExpired 4001 (refresh and reconnect),
+     * revoked 4003 (stop). `fatal`: codes reconnecting cannot fix (stop, emit
+     * `error` with code `socket_closed_<code>`). Default none.
+     */
+    closeCodes?: {
+        tokenExpired?: number;
+        revoked?: number;
+        fatal?: number[];
+    };
+    /** Allow ws://localhost in development. Default false. */
+    allowInsecureLocalhost?: boolean;
+    log?: Logger;
+    redactor?: Redactor;
+}
+export interface SocketEvents<In> {
+    state: ConnectionState;
+    /** Authenticated (after every (re)connect). */
+    ready: In;
+    /** Every frame after `ready`, except ones already seen (seq ≤ lastSeq). */
+    frame: In;
+    /** The server revoked the session: the socket stays closed until connect() is called again. */
+    revoked: {
+        code: number;
+    };
+    error: HainivaAgentError;
+}
+/**
+ * A WebSocket that stays connected: exponential backoff with jitter, auth in the
+ * first frame (the token is never in the URL), heartbeat with a dead-connection
+ * timeout, and a resume hook carrying the last sequence number seen. Frame shapes
+ * are the caller's: pass `authFrame`, `isReady`, `resume`, `seqOf` for the
+ * protocol (`/agent/v1/ws` bindings: TODO(S3b)).
+ */
+export declare class ReconnectingSocket<In = AnyFrame, Out = AnyFrame> {
+    private readonly o;
+    readonly events: TypedEmitter<SocketEvents<In>>;
+    private ws;
+    private st;
+    private want;
+    private authed;
+    private attempt;
+    private seq;
+    private lastFrameAt;
+    private reconnectTimer;
+    private authTimer;
+    private pingTimer;
+    private readonly WS;
+    private readonly redactor;
+    private readonly log;
+    private readonly expiredCode;
+    private readonly revokedCode;
+    constructor(o: SocketOptions<In, Out>);
+    get state(): ConnectionState;
+    /** The highest sequence number received (what `resume` is called with). */
+    get lastSeq(): number;
+    /** Restore a sequence number kept from an earlier run. */
+    setLastSeq(n: number): void;
+    connect(): void;
+    disconnect(): void;
+    /** Send a frame on an authenticated socket. False when not open (nothing is queued). */
+    send(frame: Out): boolean;
+    /** Hand a refreshed access token to the open socket (needs `tokenFrame`). */
+    updateToken(token: string): boolean;
+    private encode;
+    private setState;
+    private fail;
+    private open;
+    private onFrame;
+    private startHeartbeat;
+    private scheduleReconnect;
+    private clearTimers;
+}
+export {};
+//# sourceMappingURL=ws.d.ts.map

package/dist/esm/ws.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws.d.ts","sourceRoot":"","sources":["../../src/ws.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAc,KAAK,MAAM,EAAE,MAAM,UAAU,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvC,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,YAAY,GAAG,MAAM,GAAG,cAAc,GAAG,QAAQ,CAAC;AAEzF,iGAAiG;AACjG,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,SAAO,EAAE,GAAG,SAAQ,EAAE,GAAG,GAAE,MAAM,MAAoB,GAAG,MAAM,CAGlH;AAED,4FAA4F;AAC5F,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;IACvC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;IACpD,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;IAClE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;CACzC;AACD,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,EAAE,MAAM,KAAK,aAAa,CAAC;AAE/D,KAAK,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAExC,MAAM,WAAW,aAAa,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,GAAG,QAAQ;IAC1D,oFAAoF;IACpF,GAAG,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/C,oFAAoF;IACpF,QAAQ,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC,6FAA6F;IAC7F,eAAe,CAAC,EAAE,MAAM,IAAI,CAAC;IAC7B,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,iEAAiE;IACjE,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,GAAG,CAAC;IACnC,0FAA0F;IAC1F,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,KAAK,OAAO,CAAC;IACjC,iFAAiF;IACjF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,wCAAwC;IACxC,SAAS,CAAC,EAAE,KAAK,GAAG;QAClB,+CAA+C;QAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,8EAA8E;QAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,kCAAkC;QAClC,KAAK,CAAC,EAAE,MAAM,GAAG,CAAC;KACnB,CAAC;IACF,iFAAiF;IACjF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC;IACzC,wEAAwE;IACxE,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,KAAK,MAAM,GAAG,SAAS,CAAC;IAC1C,2EAA2E;IAC3E,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,GAAG,CAAC;IACpC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,MAAM,CAAC;IAChC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,EAAE,CAAC;IAC7B,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,MAAM,CAAA;KAAE,CAAC;IACxE;;;;OAIG;IACH,UAAU,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC3E,0DAA0D;IAC1D,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAED,MAAM,WAAW,YAAY,CAAC,EAAE;IAC9B,KAAK,EAAE,eAAe,CAAC;IACvB,+CAA+C;IAC/C,KAAK,EAAE,EAAE,CAAC;IACV,2EAA2E;IAC3E,KAAK,EAAE,EAAE,CAAC;IACV,+FAA+F;IAC/F,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1B,KAAK,EAAE,iBAAiB,CAAC;CAC1B;AAID;;;;;;GAMG;AACH,qBAAa,kBAAkB,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,GAAG,QAAQ;IAkB/C,OAAO,CAAC,QAAQ,CAAC,CAAC;IAjB9B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;IAChD,OAAO,CAAC,EAAE,CAA8B;IACxC,OAAO,CAAC,EAAE,CAA2B;IACrC,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,GAAG,CAAK;IAChB,OAAO,CAAC,WAAW,CAAK;IACxB,OAAO,CAAC,cAAc,CAA8C;IACpE,OAAO,CAAC,SAAS,CAA8C;IAC/D,OAAO,CAAC,SAAS,CAA+C;IAChE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAA4B;IAC/C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;IACpC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;gBAER,CAAC,EAAE,aAAa,CAAC,EAAE,EAAE,GAAG,CAAC;IAStD,IAAI,KAAK,IAAI,eAAe,CAAoB;IAChD,2EAA2E;IAC3E,IAAI,OAAO,IAAI,MAAM,CAAqB;IAC1C,0DAA0D;IAC1D,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI;IAE3B,OAAO,IAAI,IAAI;IAOf,UAAU,IAAI,IAAI;IAUlB,wFAAwF;IACxF,IAAI,CAAC,KAAK,EAAE,GAAG,GAAG,OAAO;IAMzB,6EAA6E;IAC7E,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAKnC,OAAO,CAAC,MAAM;IAEd,OAAO,CAAC,QAAQ;IAMhB,OAAO,CAAC,IAAI;YAKE,IAAI;IA4DlB,OAAO,CAAC,OAAO;IA0Bf,OAAO,CAAC,cAAc;IAatB,OAAO,CAAC,iBAAiB;IAQzB,OAAO,CAAC,WAAW;CAKpB"}

package/dist/esm/ws.js

@@ -0,0 +1,242 @@
+import { TypedEmitter } from "./emitter.js";
+import { HainivaAgentError } from "./errors.js";
+import { safeLogger } from "./log.js";
+import { Redactor } from "./redact.js";
+import { assertSafeUrl } from "./url.js";
+/** Exponential backoff with full jitter: between half and all of min(max, initial·2^attempt). */
+export function backoffDelay(attempt, initial = 1000, max = 30000, rnd = Math.random) {
+    const cap = Math.min(max, initial * 2 ** Math.max(0, attempt));
+    return Math.round(cap / 2 + rnd() * (cap / 2));
+}
+const OPEN = 1;
+/**
+ * A WebSocket that stays connected: exponential backoff with jitter, auth in the
+ * first frame (the token is never in the URL), heartbeat with a dead-connection
+ * timeout, and a resume hook carrying the last sequence number seen. Frame shapes
+ * are the caller's: pass `authFrame`, `isReady`, `resume`, `seqOf` for the
+ * protocol (`/agent/v1/ws` bindings: TODO(S3b)).
+ */
+export class ReconnectingSocket {
+    constructor(o) {
+        this.o = o;
+        this.ws = null;
+        this.st = "idle";
+        this.want = false;
+        this.authed = false;
+        this.attempt = 0;
+        this.seq = 0;
+        this.lastFrameAt = 0;
+        this.reconnectTimer = null;
+        this.authTimer = null;
+        this.pingTimer = null;
+        this.WS = o.WebSocket ?? globalThis.WebSocket;
+        this.redactor = o.redactor ?? new Redactor();
+        this.log = safeLogger(o.log, this.redactor);
+        this.events = new TypedEmitter((e) => this.log("listener_error", e));
+        this.expiredCode = o.closeCodes?.tokenExpired ?? 4001;
+        this.revokedCode = o.closeCodes?.revoked ?? 4003;
+    }
+    get state() { return this.st; }
+    /** The highest sequence number received (what `resume` is called with). */
+    get lastSeq() { return this.seq; }
+    /** Restore a sequence number kept from an earlier run. */
+    setLastSeq(n) { if (Number.isFinite(n) && n >= 0)
+        this.seq = n; }
+    connect() {
+        this.want = true;
+        if (this.ws || this.reconnectTimer)
+            return;
+        if (!this.WS) {
+            this.fail(new HainivaAgentError(0, "no_websocket"));
+            return;
+        }
+        void this.open();
+    }
+    disconnect() {
+        this.want = false;
+        this.clearTimers();
+        const ws = this.ws;
+        this.ws = null;
+        this.authed = false;
+        ws?.close(1000);
+        this.setState("closed");
+    }
+    /** Send a frame on an authenticated socket. False when not open (nothing is queued). */
+    send(frame) {
+        if (!this.ws || !this.authed || this.ws.readyState !== OPEN)
+            return false;
+        this.ws.send(this.encode(frame));
+        return true;
+    }
+    /** Hand a refreshed access token to the open socket (needs `tokenFrame`). */
+    updateToken(token) {
+        this.redactor.add(token);
+        return this.o.tokenFrame ? this.send(this.o.tokenFrame(token)) : false;
+    }
+    encode(f) { return (this.o.encode ?? JSON.stringify)(f); }
+    setState(s) {
+        if (this.st === s)
+            return;
+        this.st = s;
+        this.events.emit("state", s);
+    }
+    fail(e) {
+        this.log("socket_error", { code: e.code });
+        this.events.emit("error", e);
+    }
+    async open() {
+        this.setState(this.attempt ? "reconnecting" : "connecting");
+        let token;
+        let url;
+        try {
+            token = await this.o.getToken();
+            this.redactor.add(token);
+            url = typeof this.o.url === "function" ? await this.o.url() : this.o.url;
+        }
+        catch (e) {
+            this.fail(HainivaAgentError.from(e, "socket_auth_failed", this.redactor));
+            return this.scheduleReconnect();
+        }
+        if (!this.want)
+            return;
+        try {
+            assertSafeUrl(url, { kind: "ws", ...(this.o.allowInsecureLocalhost ? { allowInsecureLocalhost: true } : {}) });
+            if (token && url.includes(token))
+                throw new HainivaAgentError(0, "credentials_in_url");
+        }
+        catch (e) {
+            // A configuration mistake: retrying cannot fix it.
+            this.want = false;
+            this.setState("closed");
+            return this.fail(HainivaAgentError.from(e, "invalid_url", this.redactor));
+        }
+        let ws;
+        try {
+            ws = new this.WS(url);
+        }
+        catch (e) {
+            this.fail(HainivaAgentError.from(e, "socket_failed", this.redactor));
+            return this.scheduleReconnect();
+        }
+        this.ws = ws;
+        this.authed = false;
+        ws.onopen = () => {
+            if (this.ws !== ws)
+                return;
+            // First frame: the credential. Nothing else is sent before the server says ready.
+            ws.send(this.encode((this.o.authFrame ?? ((t) => ({ type: "auth", token: t })))(token)));
+            this.authTimer = setTimeout(() => {
+                if (this.ws === ws && !this.authed) {
+                    this.log("auth_timeout");
+                    ws.close(4000, "auth timeout");
+                }
+            }, this.o.authTimeoutMs ?? 10000);
+        };
+        ws.onmessage = (ev) => { if (this.ws === ws)
+            this.onFrame(ws, typeof ev.data === "string" ? ev.data : String(ev.data)); };
+        ws.onerror = () => { };
+        ws.onclose = (ev) => {
+            if (this.ws !== ws)
+                return;
+            this.ws = null;
+            this.authed = false;
+            this.clearTimers();
+            this.log("socket_closed", { code: ev.code });
+            if (!this.want)
+                return this.setState("closed");
+            if (ev.code === this.revokedCode) {
+                this.want = false;
+                this.setState("closed");
+                this.events.emit("revoked", { code: ev.code });
+                return;
+            }
+            if (this.o.closeCodes?.fatal?.includes(ev.code)) {
+                this.want = false;
+                this.setState("closed");
+                return this.fail(new HainivaAgentError(0, `socket_closed_${ev.code}`, {}, this.redactor));
+            }
+            if (ev.code === this.expiredCode)
+                this.o.onTokenRejected?.();
+            this.scheduleReconnect();
+        };
+    }
+    onFrame(ws, raw) {
+        let f;
+        try {
+            f = (this.o.decode ?? JSON.parse)(raw);
+        }
+        catch {
+            return;
+        }
+        this.lastFrameAt = Date.now();
+        if (!this.authed) {
+            const ready = this.o.isReady ?? ((x) => x?.["type"] === "ready");
+            if (!ready(f))
+                return; // nothing is delivered before the server accepted the credential
+            this.authed = true;
+            this.attempt = 0;
+            if (this.authTimer) {
+                clearTimeout(this.authTimer);
+                this.authTimer = null;
+            }
+            this.startHeartbeat(ws);
+            this.setState("open");
+            const resume = this.seq > 0 ? this.o.resume?.(this.seq) : null;
+            if (resume)
+                ws.send(this.encode(resume));
+            this.events.emit("ready", f);
+            return;
+        }
+        const seqOf = this.o.seqOf ?? ((x) => { const s = x?.["seq"]; return typeof s === "number" ? s : undefined; });
+        const s = seqOf(f);
+        if (s !== undefined) {
+            if (s <= this.seq)
+                return; // a replayed frame already delivered
+            this.seq = s;
+        }
+        this.events.emit("frame", f);
+    }
+    startHeartbeat(ws) {
+        const hb = this.o.heartbeat;
+        if (hb === false)
+            return;
+        const every = hb?.intervalMs ?? 20000;
+        const dead = hb?.timeoutMs ?? 45000;
+        const frame = hb?.frame ?? (() => ({ type: "ping" }));
+        this.pingTimer = setInterval(() => {
+            if (this.ws !== ws)
+                return;
+            if (Date.now() - this.lastFrameAt > dead) {
+                this.log("heartbeat_timeout");
+                ws.close(4000, "heartbeat timeout");
+                return;
+            }
+            if (ws.readyState === OPEN)
+                ws.send(this.encode(frame()));
+        }, every);
+    }
+    scheduleReconnect() {
+        if (!this.want)
+            return;
+        const b = this.o.backoff;
+        const d = backoffDelay(this.attempt++, b?.initialMs, b?.maxMs, b?.random);
+        this.setState("reconnecting");
+        this.reconnectTimer = setTimeout(() => { this.reconnectTimer = null; if (this.want)
+            void this.open(); }, d);
+    }
+    clearTimers() {
+        if (this.reconnectTimer) {
+            clearTimeout(this.reconnectTimer);
+            this.reconnectTimer = null;
+        }
+        if (this.authTimer) {
+            clearTimeout(this.authTimer);
+            this.authTimer = null;
+        }
+        if (this.pingTimer) {
+            clearInterval(this.pingTimer);
+            this.pingTimer = null;
+        }
+    }
+}
+//# sourceMappingURL=ws.js.map

package/dist/esm/ws.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws.js","sourceRoot":"","sources":["../../src/ws.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,UAAU,EAAe,MAAM,UAAU,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAIzC,iGAAiG;AACjG,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,OAAO,GAAG,IAAI,EAAE,GAAG,GAAG,KAAK,EAAE,MAAoB,IAAI,CAAC,MAAM;IACxG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/D,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAuED,MAAM,IAAI,GAAG,CAAC,CAAC;AAEf;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IAkB7B,YAA6B,CAAyB;QAAzB,MAAC,GAAD,CAAC,CAAwB;QAhB9C,OAAE,GAAyB,IAAI,CAAC;QAChC,OAAE,GAAoB,MAAM,CAAC;QAC7B,SAAI,GAAG,KAAK,CAAC;QACb,WAAM,GAAG,KAAK,CAAC;QACf,YAAO,GAAG,CAAC,CAAC;QACZ,QAAG,GAAG,CAAC,CAAC;QACR,gBAAW,GAAG,CAAC,CAAC;QAChB,mBAAc,GAAyC,IAAI,CAAC;QAC5D,cAAS,GAAyC,IAAI,CAAC;QACvD,cAAS,GAA0C,IAAI,CAAC;QAQ9D,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,SAAS,IAAK,UAA4C,CAAC,SAAS,CAAC;QACjF,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC7C,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,GAAG,IAAI,YAAY,CAAmB,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,CAAC;QACvF,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,UAAU,EAAE,YAAY,IAAI,IAAI,CAAC;QACtD,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,UAAU,EAAE,OAAO,IAAI,IAAI,CAAC;IACnD,CAAC;IAED,IAAI,KAAK,KAAsB,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAChD,2EAA2E;IAC3E,IAAI,OAAO,KAAa,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,0DAA0D;IAC1D,UAAU,CAAC,CAAS,IAAU,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IAE/E,OAAO;QACL,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO;QAC3C,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC9E,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;IACnB,CAAC;IAED,UAAU;QACR,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACnB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;QACf,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAChB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IAED,wFAAwF;IACxF,IAAI,CAAC,KAAU;QACb,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC1E,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6EAA6E;IAC7E,WAAW,CAAC,KAAa;QACvB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACzE,CAAC;IAEO,MAAM,CAAC,CAAM,IAAY,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvE,QAAQ,CAAC,CAAkB;QACjC,IAAI,IAAI,CAAC,EAAE,KAAK,CAAC;YAAE,OAAO;QAC1B,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QACZ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC/B,CAAC;IAEO,IAAI,CAAC,CAAoB;QAC/B,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC/B,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAC5D,IAAI,KAAa,CAAC;QAClB,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;YAChC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACzB,GAAG,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;QAC3E,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,oBAAoB,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC1E,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAClC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO;QACvB,IAAI,CAAC;YACH,aAAa,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAC/G,IAAI,KAAK,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,iBAAiB,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;QACzF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,mDAAmD;YACnD,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;YAClB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,EAAiB,CAAC;QACtB,IAAI,CAAC;YAAC,EAAE,GAAG,IAAI,IAAI,CAAC,EAAG,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAC/B,OAAO,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAAC,CAAC;QACpH,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,EAAE,CAAC,MAAM,GAAG,GAAG,EAAE;YACf,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE;gBAAE,OAAO;YAC3B,kFAAkF;YAClF,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACxG,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC/B,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;oBAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;oBAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBAAC,CAAC;YACnG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,IAAI,KAAM,CAAC,CAAC;QACrC,CAAC,CAAC;QACF,EAAE,CAAC,SAAS,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE;YAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1H,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE,GAAyB,CAAC,CAAC;QAC7C,EAAE,CAAC,OAAO,GAAG,CAAC,EAAE,EAAE,EAAE;YAClB,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE;gBAAE,OAAO;YAC3B,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;YACf,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;YACpB,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;gBAClB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;YACD,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;gBAClB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACxB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC5F,CAAC;YACD,IAAI,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW;gBAAE,IAAI,CAAC,CAAC,CAAC,eAAe,EAAE,EAAE,CAAC;YAC7D,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3B,CAAC,CAAC;IACJ,CAAC;IAEO,OAAO,CAAC,EAAiB,EAAE,GAAW;QAC5C,IAAI,CAAK,CAAC;QACV,IAAI,CAAC;YAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAO,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO;QAAC,CAAC;QACvE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAK,EAAE,EAAE,CAAE,CAAc,EAAE,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,CAAC;YACnF,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,iEAAiE;YACxF,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;YACjB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YAAC,CAAC;YAC5E,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;YACxB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACtB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/D,IAAI,MAAM;gBAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAK,EAAE,EAAE,GAAG,MAAM,CAAC,GAAI,CAAc,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACjI,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG;gBAAE,OAAO,CAAC,qCAAqC;YAChE,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;QACf,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC/B,CAAC;IAEO,cAAc,CAAC,EAAiB;QACtC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5B,IAAI,EAAE,KAAK,KAAK;YAAE,OAAO;QACzB,MAAM,KAAK,GAAG,EAAE,EAAE,UAAU,IAAI,KAAM,CAAC;QACvC,MAAM,IAAI,GAAG,EAAE,EAAE,SAAS,IAAI,KAAM,CAAC;QACrC,MAAM,KAAK,GAAG,EAAE,EAAE,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAQ,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;YAChC,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE;gBAAE,OAAO;YAC3B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW,GAAG,IAAI,EAAE,CAAC;gBAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACzH,IAAI,EAAE,CAAC,UAAU,KAAK,IAAI;gBAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC5D,CAAC,EAAE,KAAK,CAAC,CAAC;IACZ,CAAC;IAEO,iBAAiB;QACvB,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO;QACvB,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;QACzB,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QAC9B,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI;YAAE,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9G,CAAC;IAEO,WAAW;QACjB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAAC,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAAC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAAC,CAAC;QAC3F,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QAAC,CAAC;QAC5E,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QAAC,CAAC;IAC/E,CAAC;CACF"}