@harrylabsj/kiwi 0.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (636) hide show
  1. package/LICENSE +201 -0
  2. package/README.md +150 -0
  3. package/contracts/candidate-agent-dto-1.0.README.md +39 -0
  4. package/contracts/candidate-agent-dto-1.0.schema.json +172 -0
  5. package/contracts/interop/kiwi-buyer-message-send.json +43 -0
  6. package/contracts/interop/knp-data-part-examples.json +243 -0
  7. package/contracts/kiwi-catalog/1.0/agent-record.schema.json +78 -0
  8. package/contracts/kiwi-catalog/1.0/listing-record.schema.json +88 -0
  9. package/contracts/kiwi-catalog/1.0/listing-search-result.schema.json +60 -0
  10. package/contracts/negotiation/1.0/schema.json +501 -0
  11. package/contracts/shopping.negotiation/0.1/capabilities.schema.json +47 -0
  12. package/contracts/shopping.negotiation/0.1/decision.schema.json +120 -0
  13. package/contracts/shopping.negotiation/0.1/policy-result.schema.json +52 -0
  14. package/contracts/shopping.negotiation/0.1/snapshot.schema.json +172 -0
  15. package/dist/a2a/client/client.d.ts +33 -0
  16. package/dist/a2a/client/client.js +161 -0
  17. package/dist/a2a/client/client.js.map +1 -0
  18. package/dist/a2a/client/error.d.ts +35 -0
  19. package/dist/a2a/client/error.js +34 -0
  20. package/dist/a2a/client/error.js.map +1 -0
  21. package/dist/a2a/client/index.d.ts +29 -0
  22. package/dist/a2a/client/index.js +26 -0
  23. package/dist/a2a/client/index.js.map +1 -0
  24. package/dist/a2a/client/jsonrpc.d.ts +49 -0
  25. package/dist/a2a/client/jsonrpc.js +85 -0
  26. package/dist/a2a/client/jsonrpc.js.map +1 -0
  27. package/dist/a2a/client/parse.d.ts +18 -0
  28. package/dist/a2a/client/parse.js +134 -0
  29. package/dist/a2a/client/parse.js.map +1 -0
  30. package/dist/a2a/client/types.d.ts +102 -0
  31. package/dist/a2a/client/types.js +26 -0
  32. package/dist/a2a/client/types.js.map +1 -0
  33. package/dist/a2a/client/url-policy.d.ts +44 -0
  34. package/dist/a2a/client/url-policy.js +242 -0
  35. package/dist/a2a/client/url-policy.js.map +1 -0
  36. package/dist/a2a/negotiate.d.ts +68 -0
  37. package/dist/a2a/negotiate.js +288 -0
  38. package/dist/a2a/negotiate.js.map +1 -0
  39. package/dist/a2a/node.d.ts +37 -0
  40. package/dist/a2a/node.js +155 -0
  41. package/dist/a2a/node.js.map +1 -0
  42. package/dist/a2a/server/auth.d.ts +38 -0
  43. package/dist/a2a/server/auth.js +112 -0
  44. package/dist/a2a/server/auth.js.map +1 -0
  45. package/dist/a2a/server/card.d.ts +19 -0
  46. package/dist/a2a/server/card.js +81 -0
  47. package/dist/a2a/server/card.js.map +1 -0
  48. package/dist/a2a/server/errors.d.ts +109 -0
  49. package/dist/a2a/server/errors.js +178 -0
  50. package/dist/a2a/server/errors.js.map +1 -0
  51. package/dist/a2a/server/handler.d.ts +22 -0
  52. package/dist/a2a/server/handler.js +57 -0
  53. package/dist/a2a/server/handler.js.map +1 -0
  54. package/dist/a2a/server/inbound-message.d.ts +37 -0
  55. package/dist/a2a/server/inbound-message.js +104 -0
  56. package/dist/a2a/server/inbound-message.js.map +1 -0
  57. package/dist/a2a/server/index.d.ts +43 -0
  58. package/dist/a2a/server/index.js +42 -0
  59. package/dist/a2a/server/index.js.map +1 -0
  60. package/dist/a2a/server/merchant-handler.d.ts +69 -0
  61. package/dist/a2a/server/merchant-handler.js +316 -0
  62. package/dist/a2a/server/merchant-handler.js.map +1 -0
  63. package/dist/a2a/server/pipeline.d.ts +69 -0
  64. package/dist/a2a/server/pipeline.js +329 -0
  65. package/dist/a2a/server/pipeline.js.map +1 -0
  66. package/dist/a2a/server/server.d.ts +64 -0
  67. package/dist/a2a/server/server.js +420 -0
  68. package/dist/a2a/server/server.js.map +1 -0
  69. package/dist/a2a/server/task-registry.d.ts +31 -0
  70. package/dist/a2a/server/task-registry.js +67 -0
  71. package/dist/a2a/server/task-registry.js.map +1 -0
  72. package/dist/a2a/server/throttle.d.ts +154 -0
  73. package/dist/a2a/server/throttle.js +289 -0
  74. package/dist/a2a/server/throttle.js.map +1 -0
  75. package/dist/a2a/server/types.d.ts +191 -0
  76. package/dist/a2a/server/types.js +17 -0
  77. package/dist/a2a/server/types.js.map +1 -0
  78. package/dist/a2a/server/ucp.d.ts +49 -0
  79. package/dist/a2a/server/ucp.js +85 -0
  80. package/dist/a2a/server/ucp.js.map +1 -0
  81. package/dist/a2a/task/index.d.ts +24 -0
  82. package/dist/a2a/task/index.js +22 -0
  83. package/dist/a2a/task/index.js.map +1 -0
  84. package/dist/a2a/task/ledger.d.ts +48 -0
  85. package/dist/a2a/task/ledger.js +65 -0
  86. package/dist/a2a/task/ledger.js.map +1 -0
  87. package/dist/a2a/task/poller.d.ts +93 -0
  88. package/dist/a2a/task/poller.js +184 -0
  89. package/dist/a2a/task/poller.js.map +1 -0
  90. package/dist/a2a/task/state.d.ts +72 -0
  91. package/dist/a2a/task/state.js +119 -0
  92. package/dist/a2a/task/state.js.map +1 -0
  93. package/dist/a2a/ucp-agent.d.ts +49 -0
  94. package/dist/a2a/ucp-agent.js +78 -0
  95. package/dist/a2a/ucp-agent.js.map +1 -0
  96. package/dist/agent/agent-db.d.ts +31 -0
  97. package/dist/agent/agent-db.js +91 -0
  98. package/dist/agent/agent-db.js.map +1 -0
  99. package/dist/agent/buyer/buyer-tools.d.ts +70 -0
  100. package/dist/agent/buyer/buyer-tools.js +1353 -0
  101. package/dist/agent/buyer/buyer-tools.js.map +1 -0
  102. package/dist/agent/buyer/ranker.d.ts +53 -0
  103. package/dist/agent/buyer/ranker.js +153 -0
  104. package/dist/agent/buyer/ranker.js.map +1 -0
  105. package/dist/agent/buyer/scheduler.d.ts +58 -0
  106. package/dist/agent/buyer/scheduler.js +317 -0
  107. package/dist/agent/buyer/scheduler.js.map +1 -0
  108. package/dist/agent/buyer/search-loop.d.ts +42 -0
  109. package/dist/agent/buyer/search-loop.js +280 -0
  110. package/dist/agent/buyer/search-loop.js.map +1 -0
  111. package/dist/agent/buyer/task-store.d.ts +178 -0
  112. package/dist/agent/buyer/task-store.js +637 -0
  113. package/dist/agent/buyer/task-store.js.map +1 -0
  114. package/dist/agent/buyer/types.d.ts +222 -0
  115. package/dist/agent/buyer/types.js +124 -0
  116. package/dist/agent/buyer/types.js.map +1 -0
  117. package/dist/agent/chat-tools.d.ts +41 -0
  118. package/dist/agent/chat-tools.js +193 -0
  119. package/dist/agent/chat-tools.js.map +1 -0
  120. package/dist/agent/chat-tui.d.ts +49 -0
  121. package/dist/agent/chat-tui.js +314 -0
  122. package/dist/agent/chat-tui.js.map +1 -0
  123. package/dist/agent/connector/fake-connector.d.ts +50 -0
  124. package/dist/agent/connector/fake-connector.js +138 -0
  125. package/dist/agent/connector/fake-connector.js.map +1 -0
  126. package/dist/agent/connector/http-connector.d.ts +49 -0
  127. package/dist/agent/connector/http-connector.js +208 -0
  128. package/dist/agent/connector/http-connector.js.map +1 -0
  129. package/dist/agent/connector/types.d.ts +103 -0
  130. package/dist/agent/connector/types.js +97 -0
  131. package/dist/agent/connector/types.js.map +1 -0
  132. package/dist/agent/fake-chat-model.d.ts +22 -0
  133. package/dist/agent/fake-chat-model.js +134 -0
  134. package/dist/agent/fake-chat-model.js.map +1 -0
  135. package/dist/agent/kernel.d.ts +258 -0
  136. package/dist/agent/kernel.js +1099 -0
  137. package/dist/agent/kernel.js.map +1 -0
  138. package/dist/agent/memory/schema.d.ts +32 -0
  139. package/dist/agent/memory/schema.js +291 -0
  140. package/dist/agent/memory/schema.js.map +1 -0
  141. package/dist/agent/memory/store.d.ts +193 -0
  142. package/dist/agent/memory/store.js +881 -0
  143. package/dist/agent/memory/store.js.map +1 -0
  144. package/dist/agent/memory/types.d.ts +139 -0
  145. package/dist/agent/memory/types.js +119 -0
  146. package/dist/agent/memory/types.js.map +1 -0
  147. package/dist/agent/memory/vault.d.ts +49 -0
  148. package/dist/agent/memory/vault.js +125 -0
  149. package/dist/agent/memory/vault.js.map +1 -0
  150. package/dist/agent/merchant/action-candidate.d.ts +106 -0
  151. package/dist/agent/merchant/action-candidate.js +241 -0
  152. package/dist/agent/merchant/action-candidate.js.map +1 -0
  153. package/dist/agent/merchant/credential-broker.d.ts +67 -0
  154. package/dist/agent/merchant/credential-broker.js +76 -0
  155. package/dist/agent/merchant/credential-broker.js.map +1 -0
  156. package/dist/agent/merchant/fake-merchant-client.d.ts +47 -0
  157. package/dist/agent/merchant/fake-merchant-client.js +143 -0
  158. package/dist/agent/merchant/fake-merchant-client.js.map +1 -0
  159. package/dist/agent/merchant/merchant-client.d.ts +49 -0
  160. package/dist/agent/merchant/merchant-client.js +186 -0
  161. package/dist/agent/merchant/merchant-client.js.map +1 -0
  162. package/dist/agent/merchant/merchant-tools.d.ts +74 -0
  163. package/dist/agent/merchant/merchant-tools.js +582 -0
  164. package/dist/agent/merchant/merchant-tools.js.map +1 -0
  165. package/dist/agent/merchant/types.d.ts +119 -0
  166. package/dist/agent/merchant/types.js +133 -0
  167. package/dist/agent/merchant/types.js.map +1 -0
  168. package/dist/agent/mode.d.ts +32 -0
  169. package/dist/agent/mode.js +34 -0
  170. package/dist/agent/mode.js.map +1 -0
  171. package/dist/agent/negotiation-chat.d.ts +81 -0
  172. package/dist/agent/negotiation-chat.js +330 -0
  173. package/dist/agent/negotiation-chat.js.map +1 -0
  174. package/dist/agent/session.d.ts +22 -0
  175. package/dist/agent/session.js +164 -0
  176. package/dist/agent/session.js.map +1 -0
  177. package/dist/agent/system-prompt.d.ts +26 -0
  178. package/dist/agent/system-prompt.js +77 -0
  179. package/dist/agent/system-prompt.js.map +1 -0
  180. package/dist/agent/write-gate.d.ts +98 -0
  181. package/dist/agent/write-gate.js +76 -0
  182. package/dist/agent/write-gate.js.map +1 -0
  183. package/dist/cli.d.ts +18 -0
  184. package/dist/cli.js +1139 -0
  185. package/dist/cli.js.map +1 -0
  186. package/dist/commerce/data-source.d.ts +88 -0
  187. package/dist/commerce/data-source.js +25 -0
  188. package/dist/commerce/data-source.js.map +1 -0
  189. package/dist/commerce/erp-source.d.ts +51 -0
  190. package/dist/commerce/erp-source.js +184 -0
  191. package/dist/commerce/erp-source.js.map +1 -0
  192. package/dist/commerce/fake-client.d.ts +167 -0
  193. package/dist/commerce/fake-client.js +549 -0
  194. package/dist/commerce/fake-client.js.map +1 -0
  195. package/dist/commerce/http-client.d.ts +73 -0
  196. package/dist/commerce/http-client.js +284 -0
  197. package/dist/commerce/http-client.js.map +1 -0
  198. package/dist/commerce/local-db-source.d.ts +50 -0
  199. package/dist/commerce/local-db-source.js +162 -0
  200. package/dist/commerce/local-db-source.js.map +1 -0
  201. package/dist/commerce/shopping-cli-source.d.ts +57 -0
  202. package/dist/commerce/shopping-cli-source.js +206 -0
  203. package/dist/commerce/shopping-cli-source.js.map +1 -0
  204. package/dist/commerce/types.d.ts +146 -0
  205. package/dist/commerce/types.js +31 -0
  206. package/dist/commerce/types.js.map +1 -0
  207. package/dist/config/profile.d.ts +122 -0
  208. package/dist/config/profile.js +386 -0
  209. package/dist/config/profile.js.map +1 -0
  210. package/dist/contracts/negotiation-schema.d.ts +28 -0
  211. package/dist/contracts/negotiation-schema.js +101 -0
  212. package/dist/contracts/negotiation-schema.js.map +1 -0
  213. package/dist/contracts/schemas.d.ts +31 -0
  214. package/dist/contracts/schemas.js +122 -0
  215. package/dist/contracts/schemas.js.map +1 -0
  216. package/dist/counterparty/a2a-direct/index.d.ts +41 -0
  217. package/dist/counterparty/a2a-direct/index.js +330 -0
  218. package/dist/counterparty/a2a-direct/index.js.map +1 -0
  219. package/dist/counterparty/channel.d.ts +200 -0
  220. package/dist/counterparty/channel.js +61 -0
  221. package/dist/counterparty/channel.js.map +1 -0
  222. package/dist/counterparty/index.d.ts +28 -0
  223. package/dist/counterparty/index.js +24 -0
  224. package/dist/counterparty/index.js.map +1 -0
  225. package/dist/counterparty/platform-api/index.d.ts +41 -0
  226. package/dist/counterparty/platform-api/index.js +65 -0
  227. package/dist/counterparty/platform-api/index.js.map +1 -0
  228. package/dist/counterparty/registry.d.ts +51 -0
  229. package/dist/counterparty/registry.js +71 -0
  230. package/dist/counterparty/registry.js.map +1 -0
  231. package/dist/counterparty/shopping-cli-hosted/index.d.ts +36 -0
  232. package/dist/counterparty/shopping-cli-hosted/index.js +337 -0
  233. package/dist/counterparty/shopping-cli-hosted/index.js.map +1 -0
  234. package/dist/discovery/agent-card/error.d.ts +28 -0
  235. package/dist/discovery/agent-card/error.js +31 -0
  236. package/dist/discovery/agent-card/error.js.map +1 -0
  237. package/dist/discovery/agent-card/extensions.d.ts +20 -0
  238. package/dist/discovery/agent-card/extensions.js +59 -0
  239. package/dist/discovery/agent-card/extensions.js.map +1 -0
  240. package/dist/discovery/agent-card/index.d.ts +29 -0
  241. package/dist/discovery/agent-card/index.js +38 -0
  242. package/dist/discovery/agent-card/index.js.map +1 -0
  243. package/dist/discovery/agent-card/secrets.d.ts +30 -0
  244. package/dist/discovery/agent-card/secrets.js +240 -0
  245. package/dist/discovery/agent-card/secrets.js.map +1 -0
  246. package/dist/discovery/agent-card/types.d.ts +110 -0
  247. package/dist/discovery/agent-card/types.js +37 -0
  248. package/dist/discovery/agent-card/types.js.map +1 -0
  249. package/dist/discovery/agent-card/validate.d.ts +31 -0
  250. package/dist/discovery/agent-card/validate.js +210 -0
  251. package/dist/discovery/agent-card/validate.js.map +1 -0
  252. package/dist/discovery/capability/error.d.ts +23 -0
  253. package/dist/discovery/capability/error.js +28 -0
  254. package/dist/discovery/capability/error.js.map +1 -0
  255. package/dist/discovery/capability/index.d.ts +21 -0
  256. package/dist/discovery/capability/index.js +21 -0
  257. package/dist/discovery/capability/index.js.map +1 -0
  258. package/dist/discovery/capability/intersect.d.ts +56 -0
  259. package/dist/discovery/capability/intersect.js +137 -0
  260. package/dist/discovery/capability/intersect.js.map +1 -0
  261. package/dist/discovery/catalog-source/errors.d.ts +32 -0
  262. package/dist/discovery/catalog-source/errors.js +41 -0
  263. package/dist/discovery/catalog-source/errors.js.map +1 -0
  264. package/dist/discovery/catalog-source/index.d.ts +30 -0
  265. package/dist/discovery/catalog-source/index.js +29 -0
  266. package/dist/discovery/catalog-source/index.js.map +1 -0
  267. package/dist/discovery/catalog-source/kiwi-record.d.ts +183 -0
  268. package/dist/discovery/catalog-source/kiwi-record.js +72 -0
  269. package/dist/discovery/catalog-source/kiwi-record.js.map +1 -0
  270. package/dist/discovery/catalog-source/kiwi-schema.d.ts +33 -0
  271. package/dist/discovery/catalog-source/kiwi-schema.js +106 -0
  272. package/dist/discovery/catalog-source/kiwi-schema.js.map +1 -0
  273. package/dist/discovery/catalog-source/kiwi-source.d.ts +38 -0
  274. package/dist/discovery/catalog-source/kiwi-source.js +318 -0
  275. package/dist/discovery/catalog-source/kiwi-source.js.map +1 -0
  276. package/dist/discovery/catalog-source/register.d.ts +48 -0
  277. package/dist/discovery/catalog-source/register.js +83 -0
  278. package/dist/discovery/catalog-source/register.js.map +1 -0
  279. package/dist/discovery/catalog-source/schema.d.ts +21 -0
  280. package/dist/discovery/catalog-source/schema.js +63 -0
  281. package/dist/discovery/catalog-source/schema.js.map +1 -0
  282. package/dist/discovery/catalog-source/source.d.ts +45 -0
  283. package/dist/discovery/catalog-source/source.js +197 -0
  284. package/dist/discovery/catalog-source/source.js.map +1 -0
  285. package/dist/discovery/catalog-source/types.d.ts +122 -0
  286. package/dist/discovery/catalog-source/types.js +30 -0
  287. package/dist/discovery/catalog-source/types.js.map +1 -0
  288. package/dist/discovery/index.d.ts +25 -0
  289. package/dist/discovery/index.js +25 -0
  290. package/dist/discovery/index.js.map +1 -0
  291. package/dist/discovery/resolve.d.ts +175 -0
  292. package/dist/discovery/resolve.js +367 -0
  293. package/dist/discovery/resolve.js.map +1 -0
  294. package/dist/discovery/ucp/error.d.ts +25 -0
  295. package/dist/discovery/ucp/error.js +27 -0
  296. package/dist/discovery/ucp/error.js.map +1 -0
  297. package/dist/discovery/ucp/index.d.ts +33 -0
  298. package/dist/discovery/ucp/index.js +28 -0
  299. package/dist/discovery/ucp/index.js.map +1 -0
  300. package/dist/discovery/ucp/intersect.d.ts +148 -0
  301. package/dist/discovery/ucp/intersect.js +312 -0
  302. package/dist/discovery/ucp/intersect.js.map +1 -0
  303. package/dist/discovery/ucp/resolver.d.ts +62 -0
  304. package/dist/discovery/ucp/resolver.js +214 -0
  305. package/dist/discovery/ucp/resolver.js.map +1 -0
  306. package/dist/discovery/ucp/types.d.ts +97 -0
  307. package/dist/discovery/ucp/types.js +103 -0
  308. package/dist/discovery/ucp/types.js.map +1 -0
  309. package/dist/discovery/ucp/validate.d.ts +38 -0
  310. package/dist/discovery/ucp/validate.js +232 -0
  311. package/dist/discovery/ucp/validate.js.map +1 -0
  312. package/dist/discovery/ucp/vendor.d.ts +60 -0
  313. package/dist/discovery/ucp/vendor.js +61 -0
  314. package/dist/discovery/ucp/vendor.js.map +1 -0
  315. package/dist/doctor.d.ts +26 -0
  316. package/dist/doctor.js +113 -0
  317. package/dist/doctor.js.map +1 -0
  318. package/dist/exit-codes.d.ts +26 -0
  319. package/dist/exit-codes.js +27 -0
  320. package/dist/exit-codes.js.map +1 -0
  321. package/dist/fanout/disclosure.d.ts +138 -0
  322. package/dist/fanout/disclosure.js +188 -0
  323. package/dist/fanout/disclosure.js.map +1 -0
  324. package/dist/fanout/index.d.ts +32 -0
  325. package/dist/fanout/index.js +30 -0
  326. package/dist/fanout/index.js.map +1 -0
  327. package/dist/fanout/orchestrator.d.ts +153 -0
  328. package/dist/fanout/orchestrator.js +439 -0
  329. package/dist/fanout/orchestrator.js.map +1 -0
  330. package/dist/fanout/policy.d.ts +128 -0
  331. package/dist/fanout/policy.js +130 -0
  332. package/dist/fanout/policy.js.map +1 -0
  333. package/dist/handoff/acp-commerce.d.ts +58 -0
  334. package/dist/handoff/acp-commerce.js +69 -0
  335. package/dist/handoff/acp-commerce.js.map +1 -0
  336. package/dist/handoff/authorization.d.ts +127 -0
  337. package/dist/handoff/authorization.js +107 -0
  338. package/dist/handoff/authorization.js.map +1 -0
  339. package/dist/handoff/candidate.d.ts +94 -0
  340. package/dist/handoff/candidate.js +172 -0
  341. package/dist/handoff/candidate.js.map +1 -0
  342. package/dist/handoff/channel.d.ts +88 -0
  343. package/dist/handoff/channel.js +189 -0
  344. package/dist/handoff/channel.js.map +1 -0
  345. package/dist/handoff/completion.d.ts +44 -0
  346. package/dist/handoff/completion.js +136 -0
  347. package/dist/handoff/completion.js.map +1 -0
  348. package/dist/handoff/delivery.d.ts +59 -0
  349. package/dist/handoff/delivery.js +185 -0
  350. package/dist/handoff/delivery.js.map +1 -0
  351. package/dist/handoff/destination.d.ts +39 -0
  352. package/dist/handoff/destination.js +99 -0
  353. package/dist/handoff/destination.js.map +1 -0
  354. package/dist/handoff/errors.d.ts +34 -0
  355. package/dist/handoff/errors.js +47 -0
  356. package/dist/handoff/errors.js.map +1 -0
  357. package/dist/handoff/idempotency.d.ts +51 -0
  358. package/dist/handoff/idempotency.js +168 -0
  359. package/dist/handoff/idempotency.js.map +1 -0
  360. package/dist/handoff/index.d.ts +46 -0
  361. package/dist/handoff/index.js +48 -0
  362. package/dist/handoff/index.js.map +1 -0
  363. package/dist/handoff/ledger.d.ts +94 -0
  364. package/dist/handoff/ledger.js +195 -0
  365. package/dist/handoff/ledger.js.map +1 -0
  366. package/dist/handoff/lifecycle.d.ts +29 -0
  367. package/dist/handoff/lifecycle.js +102 -0
  368. package/dist/handoff/lifecycle.js.map +1 -0
  369. package/dist/handoff/metrics.d.ts +56 -0
  370. package/dist/handoff/metrics.js +78 -0
  371. package/dist/handoff/metrics.js.map +1 -0
  372. package/dist/handoff/operator-approval.d.ts +143 -0
  373. package/dist/handoff/operator-approval.js +287 -0
  374. package/dist/handoff/operator-approval.js.map +1 -0
  375. package/dist/handoff/order-record.d.ts +104 -0
  376. package/dist/handoff/order-record.js +235 -0
  377. package/dist/handoff/order-record.js.map +1 -0
  378. package/dist/handoff/package.d.ts +102 -0
  379. package/dist/handoff/package.js +132 -0
  380. package/dist/handoff/package.js.map +1 -0
  381. package/dist/handoff/transaction.d.ts +96 -0
  382. package/dist/handoff/transaction.js +263 -0
  383. package/dist/handoff/transaction.js.map +1 -0
  384. package/dist/handoff/ucp-checkout/cart-channel.d.ts +111 -0
  385. package/dist/handoff/ucp-checkout/cart-channel.js +370 -0
  386. package/dist/handoff/ucp-checkout/cart-channel.js.map +1 -0
  387. package/dist/handoff/ucp-checkout/cart-parse.d.ts +22 -0
  388. package/dist/handoff/ucp-checkout/cart-parse.js +102 -0
  389. package/dist/handoff/ucp-checkout/cart-parse.js.map +1 -0
  390. package/dist/handoff/ucp-checkout/cart-types.d.ts +93 -0
  391. package/dist/handoff/ucp-checkout/cart-types.js +38 -0
  392. package/dist/handoff/ucp-checkout/cart-types.js.map +1 -0
  393. package/dist/handoff/ucp-checkout/channel.d.ts +159 -0
  394. package/dist/handoff/ucp-checkout/channel.js +636 -0
  395. package/dist/handoff/ucp-checkout/channel.js.map +1 -0
  396. package/dist/handoff/ucp-checkout/client.d.ts +88 -0
  397. package/dist/handoff/ucp-checkout/client.js +228 -0
  398. package/dist/handoff/ucp-checkout/client.js.map +1 -0
  399. package/dist/handoff/ucp-checkout/endpoint.d.ts +36 -0
  400. package/dist/handoff/ucp-checkout/endpoint.js +145 -0
  401. package/dist/handoff/ucp-checkout/endpoint.js.map +1 -0
  402. package/dist/handoff/ucp-checkout/index.d.ts +35 -0
  403. package/dist/handoff/ucp-checkout/index.js +36 -0
  404. package/dist/handoff/ucp-checkout/index.js.map +1 -0
  405. package/dist/handoff/ucp-checkout/parse.d.ts +71 -0
  406. package/dist/handoff/ucp-checkout/parse.js +349 -0
  407. package/dist/handoff/ucp-checkout/parse.js.map +1 -0
  408. package/dist/handoff/ucp-checkout/totals.d.ts +41 -0
  409. package/dist/handoff/ucp-checkout/totals.js +36 -0
  410. package/dist/handoff/ucp-checkout/totals.js.map +1 -0
  411. package/dist/handoff/ucp-checkout/types.d.ts +149 -0
  412. package/dist/handoff/ucp-checkout/types.js +58 -0
  413. package/dist/handoff/ucp-checkout/types.js.map +1 -0
  414. package/dist/handoff/url-safety.d.ts +44 -0
  415. package/dist/handoff/url-safety.js +121 -0
  416. package/dist/handoff/url-safety.js.map +1 -0
  417. package/dist/i18n.d.ts +24 -0
  418. package/dist/i18n.js +27 -0
  419. package/dist/i18n.js.map +1 -0
  420. package/dist/negotiation/action-candidate.d.ts +97 -0
  421. package/dist/negotiation/action-candidate.js +160 -0
  422. package/dist/negotiation/action-candidate.js.map +1 -0
  423. package/dist/negotiation/condition/evaluator.d.ts +36 -0
  424. package/dist/negotiation/condition/evaluator.js +123 -0
  425. package/dist/negotiation/condition/evaluator.js.map +1 -0
  426. package/dist/negotiation/context-map/index.d.ts +23 -0
  427. package/dist/negotiation/context-map/index.js +22 -0
  428. package/dist/negotiation/context-map/index.js.map +1 -0
  429. package/dist/negotiation/context-map/store.d.ts +51 -0
  430. package/dist/negotiation/context-map/store.js +186 -0
  431. package/dist/negotiation/context-map/store.js.map +1 -0
  432. package/dist/negotiation/context-map/types.d.ts +29 -0
  433. package/dist/negotiation/context-map/types.js +57 -0
  434. package/dist/negotiation/context-map/types.js.map +1 -0
  435. package/dist/negotiation/domain/common.d.ts +95 -0
  436. package/dist/negotiation/domain/common.js +216 -0
  437. package/dist/negotiation/domain/common.js.map +1 -0
  438. package/dist/negotiation/domain/envelope.d.ts +55 -0
  439. package/dist/negotiation/domain/envelope.js +110 -0
  440. package/dist/negotiation/domain/envelope.js.map +1 -0
  441. package/dist/negotiation/domain/identifiers.d.ts +65 -0
  442. package/dist/negotiation/domain/identifiers.js +130 -0
  443. package/dist/negotiation/domain/identifiers.js.map +1 -0
  444. package/dist/negotiation/domain/objects.d.ts +149 -0
  445. package/dist/negotiation/domain/objects.js +335 -0
  446. package/dist/negotiation/domain/objects.js.map +1 -0
  447. package/dist/negotiation/idempotency/index.d.ts +26 -0
  448. package/dist/negotiation/idempotency/index.js +25 -0
  449. package/dist/negotiation/idempotency/index.js.map +1 -0
  450. package/dist/negotiation/idempotency/store.d.ts +52 -0
  451. package/dist/negotiation/idempotency/store.js +189 -0
  452. package/dist/negotiation/idempotency/store.js.map +1 -0
  453. package/dist/negotiation/idempotency/types.d.ts +102 -0
  454. package/dist/negotiation/idempotency/types.js +47 -0
  455. package/dist/negotiation/idempotency/types.js.map +1 -0
  456. package/dist/negotiation/jcs.d.ts +21 -0
  457. package/dist/negotiation/jcs.js +114 -0
  458. package/dist/negotiation/jcs.js.map +1 -0
  459. package/dist/negotiation/ledger/event.d.ts +142 -0
  460. package/dist/negotiation/ledger/event.js +206 -0
  461. package/dist/negotiation/ledger/event.js.map +1 -0
  462. package/dist/negotiation/ledger/index.d.ts +26 -0
  463. package/dist/negotiation/ledger/index.js +25 -0
  464. package/dist/negotiation/ledger/index.js.map +1 -0
  465. package/dist/negotiation/ledger/store.d.ts +97 -0
  466. package/dist/negotiation/ledger/store.js +338 -0
  467. package/dist/negotiation/ledger/store.js.map +1 -0
  468. package/dist/negotiation/prompt.d.ts +34 -0
  469. package/dist/negotiation/prompt.js +113 -0
  470. package/dist/negotiation/prompt.js.map +1 -0
  471. package/dist/negotiation/recovery/index.d.ts +26 -0
  472. package/dist/negotiation/recovery/index.js +24 -0
  473. package/dist/negotiation/recovery/index.js.map +1 -0
  474. package/dist/negotiation/recovery/outbound.d.ts +49 -0
  475. package/dist/negotiation/recovery/outbound.js +34 -0
  476. package/dist/negotiation/recovery/outbound.js.map +1 -0
  477. package/dist/negotiation/recovery/recover.d.ts +59 -0
  478. package/dist/negotiation/recovery/recover.js +486 -0
  479. package/dist/negotiation/recovery/recover.js.map +1 -0
  480. package/dist/negotiation/recovery/types.d.ts +85 -0
  481. package/dist/negotiation/recovery/types.js +17 -0
  482. package/dist/negotiation/recovery/types.js.map +1 -0
  483. package/dist/negotiation/state/phase.d.ts +70 -0
  484. package/dist/negotiation/state/phase.js +200 -0
  485. package/dist/negotiation/state/phase.js.map +1 -0
  486. package/dist/negotiation/types.d.ts +139 -0
  487. package/dist/negotiation/types.js +24 -0
  488. package/dist/negotiation/types.js.map +1 -0
  489. package/dist/net/safe-http.d.ts +54 -0
  490. package/dist/net/safe-http.js +116 -0
  491. package/dist/net/safe-http.js.map +1 -0
  492. package/dist/operator/controller.d.ts +181 -0
  493. package/dist/operator/controller.js +784 -0
  494. package/dist/operator/controller.js.map +1 -0
  495. package/dist/operator/runner.d.ts +128 -0
  496. package/dist/operator/runner.js +248 -0
  497. package/dist/operator/runner.js.map +1 -0
  498. package/dist/operator/store.d.ts +39 -0
  499. package/dist/operator/store.js +169 -0
  500. package/dist/operator/store.js.map +1 -0
  501. package/dist/operator/strategy.d.ts +54 -0
  502. package/dist/operator/strategy.js +249 -0
  503. package/dist/operator/strategy.js.map +1 -0
  504. package/dist/operator/tui.d.ts +27 -0
  505. package/dist/operator/tui.js +395 -0
  506. package/dist/operator/tui.js.map +1 -0
  507. package/dist/operator/types.d.ts +224 -0
  508. package/dist/operator/types.js +17 -0
  509. package/dist/operator/types.js.map +1 -0
  510. package/dist/product-buyer.d.ts +74 -0
  511. package/dist/product-buyer.js +161 -0
  512. package/dist/product-buyer.js.map +1 -0
  513. package/dist/product-cli.d.ts +56 -0
  514. package/dist/product-cli.js +175 -0
  515. package/dist/product-cli.js.map +1 -0
  516. package/dist/product-compat.d.ts +50 -0
  517. package/dist/product-compat.js +63 -0
  518. package/dist/product-compat.js.map +1 -0
  519. package/dist/product-init.d.ts +73 -0
  520. package/dist/product-init.js +203 -0
  521. package/dist/product-init.js.map +1 -0
  522. package/dist/product-publish.d.ts +85 -0
  523. package/dist/product-publish.js +216 -0
  524. package/dist/product-publish.js.map +1 -0
  525. package/dist/protocol/legacy-shopping-negotiation/adapter.d.ts +42 -0
  526. package/dist/protocol/legacy-shopping-negotiation/adapter.js +561 -0
  527. package/dist/protocol/legacy-shopping-negotiation/adapter.js.map +1 -0
  528. package/dist/protocol/legacy-shopping-negotiation/mapping.d.ts +78 -0
  529. package/dist/protocol/legacy-shopping-negotiation/mapping.js +321 -0
  530. package/dist/protocol/legacy-shopping-negotiation/mapping.js.map +1 -0
  531. package/dist/protocol/legacy-shopping-negotiation/money.d.ts +49 -0
  532. package/dist/protocol/legacy-shopping-negotiation/money.js +70 -0
  533. package/dist/protocol/legacy-shopping-negotiation/money.js.map +1 -0
  534. package/dist/protocol/legacy-shopping-negotiation/types.d.ts +107 -0
  535. package/dist/protocol/legacy-shopping-negotiation/types.js +34 -0
  536. package/dist/protocol/legacy-shopping-negotiation/types.js.map +1 -0
  537. package/dist/runtime/buyer-policy.d.ts +58 -0
  538. package/dist/runtime/buyer-policy.js +89 -0
  539. package/dist/runtime/buyer-policy.js.map +1 -0
  540. package/dist/runtime/fake-model.d.ts +77 -0
  541. package/dist/runtime/fake-model.js +307 -0
  542. package/dist/runtime/fake-model.js.map +1 -0
  543. package/dist/runtime/foreground.d.ts +56 -0
  544. package/dist/runtime/foreground.js +97 -0
  545. package/dist/runtime/foreground.js.map +1 -0
  546. package/dist/runtime/heartbeat.d.ts +36 -0
  547. package/dist/runtime/heartbeat.js +49 -0
  548. package/dist/runtime/heartbeat.js.map +1 -0
  549. package/dist/runtime/merchant-turn.d.ts +35 -0
  550. package/dist/runtime/merchant-turn.js +20 -0
  551. package/dist/runtime/merchant-turn.js.map +1 -0
  552. package/dist/runtime/model.d.ts +40 -0
  553. package/dist/runtime/model.js +86 -0
  554. package/dist/runtime/model.js.map +1 -0
  555. package/dist/runtime/negotiation-turn.d.ts +101 -0
  556. package/dist/runtime/negotiation-turn.js +317 -0
  557. package/dist/runtime/negotiation-turn.js.map +1 -0
  558. package/dist/runtime/tools.d.ts +64 -0
  559. package/dist/runtime/tools.js +236 -0
  560. package/dist/runtime/tools.js.map +1 -0
  561. package/dist/supervisor/init.d.ts +31 -0
  562. package/dist/supervisor/init.js +222 -0
  563. package/dist/supervisor/init.js.map +1 -0
  564. package/dist/supervisor/logs.d.ts +28 -0
  565. package/dist/supervisor/logs.js +101 -0
  566. package/dist/supervisor/logs.js.map +1 -0
  567. package/dist/supervisor/manage.d.ts +72 -0
  568. package/dist/supervisor/manage.js +419 -0
  569. package/dist/supervisor/manage.js.map +1 -0
  570. package/dist/supervisor/manifest.d.ts +69 -0
  571. package/dist/supervisor/manifest.js +209 -0
  572. package/dist/supervisor/manifest.js.map +1 -0
  573. package/dist/supervisor/stack-config.d.ts +79 -0
  574. package/dist/supervisor/stack-config.js +262 -0
  575. package/dist/supervisor/stack-config.js.map +1 -0
  576. package/dist/supervisor/wrapper.d.ts +17 -0
  577. package/dist/supervisor/wrapper.js +138 -0
  578. package/dist/supervisor/wrapper.js.map +1 -0
  579. package/dist/trust/identity/auth-verifier.d.ts +96 -0
  580. package/dist/trust/identity/auth-verifier.js +166 -0
  581. package/dist/trust/identity/auth-verifier.js.map +1 -0
  582. package/dist/trust/identity/identity-binding.d.ts +63 -0
  583. package/dist/trust/identity/identity-binding.js +59 -0
  584. package/dist/trust/identity/identity-binding.js.map +1 -0
  585. package/dist/trust/identity/index.d.ts +38 -0
  586. package/dist/trust/identity/index.js +31 -0
  587. package/dist/trust/identity/index.js.map +1 -0
  588. package/dist/trust/identity/jws.d.ts +64 -0
  589. package/dist/trust/identity/jws.js +178 -0
  590. package/dist/trust/identity/jws.js.map +1 -0
  591. package/dist/trust/identity/keys.d.ts +71 -0
  592. package/dist/trust/identity/keys.js +118 -0
  593. package/dist/trust/identity/keys.js.map +1 -0
  594. package/dist/trust/identity/message-signature.d.ts +105 -0
  595. package/dist/trust/identity/message-signature.js +297 -0
  596. package/dist/trust/identity/message-signature.js.map +1 -0
  597. package/dist/trust/identity/nonce.d.ts +45 -0
  598. package/dist/trust/identity/nonce.js +50 -0
  599. package/dist/trust/identity/nonce.js.map +1 -0
  600. package/dist/trust/identity/signature-base.d.ts +84 -0
  601. package/dist/trust/identity/signature-base.js +261 -0
  602. package/dist/trust/identity/signature-base.js.map +1 -0
  603. package/dist/trust/identity/trust-policy.d.ts +92 -0
  604. package/dist/trust/identity/trust-policy.js +95 -0
  605. package/dist/trust/identity/trust-policy.js.map +1 -0
  606. package/dist/trust/index.d.ts +21 -0
  607. package/dist/trust/index.js +22 -0
  608. package/dist/trust/index.js.map +1 -0
  609. package/dist/trust/records/evaluator.d.ts +76 -0
  610. package/dist/trust/records/evaluator.js +122 -0
  611. package/dist/trust/records/evaluator.js.map +1 -0
  612. package/dist/trust/records/index.d.ts +28 -0
  613. package/dist/trust/records/index.js +26 -0
  614. package/dist/trust/records/index.js.map +1 -0
  615. package/dist/trust/records/store.d.ts +75 -0
  616. package/dist/trust/records/store.js +339 -0
  617. package/dist/trust/records/store.js.map +1 -0
  618. package/dist/trust/records/types.d.ts +159 -0
  619. package/dist/trust/records/types.js +40 -0
  620. package/dist/trust/records/types.js.map +1 -0
  621. package/dist/tui/banner.d.ts +46 -0
  622. package/dist/tui/banner.js +99 -0
  623. package/dist/tui/banner.js.map +1 -0
  624. package/dist/tui/styles.d.ts +70 -0
  625. package/dist/tui/styles.js +197 -0
  626. package/dist/tui/styles.js.map +1 -0
  627. package/dist/tui/theme.d.ts +63 -0
  628. package/dist/tui/theme.js +136 -0
  629. package/dist/tui/theme.js.map +1 -0
  630. package/examples/profiles/buyer.deepseek.yaml +34 -0
  631. package/examples/profiles/buyer.fake.yaml +36 -0
  632. package/examples/profiles/buyer.local.yaml +40 -0
  633. package/examples/profiles/merchant.deepseek.yaml +32 -0
  634. package/examples/profiles/merchant.fake.yaml +31 -0
  635. package/examples/profiles/merchant.local.yaml +34 -0
  636. package/package.json +55 -0
@@ -0,0 +1,242 @@
1
+ /**
2
+ * Copyright 2026 harrylabsj
3
+ *
4
+ * Licensed under the Apache License, Version 2.0 (the "License");
5
+ * you may not use this file except in compliance with the License.
6
+ * You may obtain a copy of the License at
7
+ *
8
+ * http://www.apache.org/licenses/LICENSE-2.0
9
+ *
10
+ * Unless required by applicable law or agreed to in writing, software
11
+ * distributed under the License is distributed on an "AS IS" BASIS,
12
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13
+ * See the License for the specific language governing permissions and
14
+ * limitations under the License.
15
+ */
16
+ /**
17
+ * A2A 出站端点 URL 安全策略(SSRF 防护)。
18
+ *
19
+ * 对齐仓库既有 base_url 安全做法(src/config/profile.ts assertSecureBaseUrl):
20
+ * 只打 http(s)、禁止 userinfo、明文 HTTP 仅限 loopback 主机。在此基础上为
21
+ * 出站(访问远端 untrusted Agent Card 端点)增加私网/保留网段拒绝:
22
+ *
23
+ * - 字面 IP 落在 RFC1918 私网、link-local、CGNAT、保留段、multicast、loopback
24
+ * 之外才放行(loopback 默认放行,与仓库模式一致);
25
+ * - 主机名先做保留主机名检查,再在请求前 DNS 解析复查解析出的 IP(DNS
26
+ * rebinding 的基础缓解;`allowPrivateRanges` 可显式逃生)。
27
+ *
28
+ * 任何拒绝都抛 A2AClientError("unsafe_target"),fail-closed。
29
+ */
30
+ import { lookup } from "node:dns/promises";
31
+ import { isIP } from "node:net";
32
+ import { A2AClientError } from "./error.js";
33
+ const LOOPBACK_HOSTNAMES = new Set(["localhost", "127.0.0.1", "[::1]", "::1"]);
34
+ const RESERVED_HOSTNAMES = new Set([
35
+ "metadata.google.internal",
36
+ "metadata.goog",
37
+ "instance-data.ec2.internal",
38
+ "ip-169-254-169-254.ec2.internal",
39
+ ]);
40
+ function isIpLiteral(hostname) {
41
+ return isIP(stripBrackets(hostname)) !== 0;
42
+ }
43
+ function stripBrackets(hostname) {
44
+ return hostname.startsWith("[") && hostname.endsWith("]") ? hostname.slice(1, -1) : hostname;
45
+ }
46
+ const IPV4_RANGES = [
47
+ { start: 0x00000000, end: 0x00ffffff, name: "this network 0.0.0.0/8" },
48
+ { start: 0x0a000000, end: 0x0affffff, name: "private 10.0.0.0/8" },
49
+ { start: 0x64400000, end: 0x647fffff, name: "CGNAT 100.64.0.0/10" },
50
+ { start: 0x7f000000, end: 0x7fffffff, name: "loopback 127.0.0.0/8" },
51
+ { start: 0xa9fe0000, end: 0xa9feffff, name: "link-local 169.254.0.0/16" },
52
+ { start: 0xac100000, end: 0xac1fffff, name: "private 172.16.0.0/12" },
53
+ { start: 0xc0000000, end: 0xc00000ff, name: "IETF protocol 192.0.0.0/24" },
54
+ { start: 0xc0000200, end: 0xc00002ff, name: "TEST-NET-1 192.0.2.0/24" },
55
+ { start: 0xc0a80000, end: 0xc0a8ffff, name: "private 192.168.0.0/16" },
56
+ { start: 0xc6120000, end: 0xc633ffff, name: "benchmarking 198.18.0.0/15" },
57
+ { start: 0xc6336400, end: 0xc63364ff, name: "TEST-NET-2 198.51.100.0/24" },
58
+ { start: 0xcb007100, end: 0xcb0071ff, name: "TEST-NET-3 203.0.113.0/24" },
59
+ { start: 0xe0000000, end: 0xefffffff, name: "multicast 224.0.0.0/4" },
60
+ { start: 0xf0000000, end: 0xffffffff, name: "reserved 240.0.0.0/4" },
61
+ ];
62
+ export function ipv4ToInt(ip) {
63
+ const parts = ip.split(".");
64
+ if (parts.length !== 4)
65
+ return undefined;
66
+ let value = 0;
67
+ for (const part of parts) {
68
+ if (!/^\d{1,3}$/.test(part))
69
+ return undefined;
70
+ const octet = Number(part);
71
+ if (octet < 0 || octet > 255)
72
+ return undefined;
73
+ value = (value << 8) | octet;
74
+ }
75
+ return value >>> 0;
76
+ }
77
+ export function isReservedIpv4(ip) {
78
+ const value = ipv4ToInt(ip);
79
+ if (value === undefined)
80
+ return { reserved: false };
81
+ const hit = IPV4_RANGES.find((range) => value >= range.start && value <= range.end);
82
+ return hit !== undefined ? { reserved: true, name: hit.name } : { reserved: false };
83
+ }
84
+ // ---------------------------------------------------------------------------
85
+ // IPv6 范围判定
86
+ // ---------------------------------------------------------------------------
87
+ function normalizeIpv6(ip) {
88
+ const clean = stripBrackets(ip);
89
+ if (isIP(clean) !== 6)
90
+ return undefined;
91
+ const address = clean.toLowerCase();
92
+ const [head, tail] = address.split("::");
93
+ if (head === undefined)
94
+ return undefined;
95
+ const headGroups = head === "" ? [] : head.split(":");
96
+ const tailGroups = tail === undefined || tail === "" ? [] : tail.split(":");
97
+ const fill = 8 - headGroups.length - tailGroups.length;
98
+ if (fill < 0)
99
+ return undefined;
100
+ const all = [...headGroups, ...new Array(fill).fill("0"), ...tailGroups];
101
+ return all.map((group) => group.padStart(4, "0")).join(":");
102
+ }
103
+ const IPV6_LOOPBACK = "0000:0000:0000:0000:0000:0000:0000:0001";
104
+ const IPV6_UNSPECIFIED = "0000:0000:0000:0000:0000:0000:0000:0000";
105
+ const IPV6_V4MAPPED_PREFIX = "0000:0000:0000:0000:0000:ffff:";
106
+ export function isReservedIpv6(ip) {
107
+ const normalized = normalizeIpv6(ip);
108
+ if (normalized === undefined)
109
+ return { reserved: false };
110
+ if (normalized === IPV6_LOOPBACK)
111
+ return { reserved: true, name: "loopback ::1/128" };
112
+ if (normalized === IPV6_UNSPECIFIED)
113
+ return { reserved: true, name: "unspecified ::/128" };
114
+ // IPv4-mapped IPv6 按内嵌 IPv4 判定(::ffff:127.0.0.1 等)。
115
+ if (normalized.startsWith(IPV6_V4MAPPED_PREFIX)) {
116
+ const groups = normalized.slice(IPV6_V4MAPPED_PREFIX.length).split(":");
117
+ const last = groups[groups.length - 1];
118
+ const penultimate = groups[groups.length - 2];
119
+ if (last !== undefined && penultimate !== undefined) {
120
+ const a = Number.parseInt(penultimate, 16);
121
+ const b = Number.parseInt(last, 16);
122
+ const mapped = `${a >> 8}.${a & 0xff}.${b >> 8}.${b & 0xff}`;
123
+ const ipv4 = isReservedIpv4(mapped);
124
+ if (ipv4.reserved)
125
+ return { reserved: true, name: `IPv4-mapped ${ipv4.name}` };
126
+ }
127
+ return { reserved: false };
128
+ }
129
+ const first = normalized.slice(0, 4);
130
+ const firstHextet = Number.parseInt(first, 16);
131
+ // fc00::/7 覆盖 fc00-fdff 首 hextet(数值比较,前缀位判定)。
132
+ if (firstHextet >= 0xfc00 && firstHextet <= 0xfdff)
133
+ return { reserved: true, name: "unique local fc00::/7" };
134
+ // fe80::/10 = 首 hextet fe80–febf(此前 startsWith("fe8") 只覆盖 fe80–fe8f,
135
+ // 漏掉 fe90–febf 这 48/64 段——link-local 邻居可被 SSRF 探测)。
136
+ if (firstHextet >= 0xfe80 && firstHextet <= 0xfebf)
137
+ return { reserved: true, name: "link-local fe80::/10" };
138
+ // fec0::/10 是已废弃 site-local(RFC 3879),同样属保留网段。
139
+ if (firstHextet >= 0xfec0 && firstHextet <= 0xfeff)
140
+ return { reserved: true, name: "site-local fec0::/10 (deprecated)" };
141
+ if (firstHextet >= 0xff00)
142
+ return { reserved: true, name: "multicast ff00::/8" };
143
+ if (normalized.startsWith("2001:0db8"))
144
+ return { reserved: true, name: "documentation 2001:db8::/32" };
145
+ return { reserved: false };
146
+ }
147
+ // ---------------------------------------------------------------------------
148
+ // 主机判定
149
+ // ---------------------------------------------------------------------------
150
+ /** loopback 主机:known hostname 或 loopback 范围字面 IP。 */
151
+ export function isLoopbackHost(hostname) {
152
+ const lower = hostname.toLowerCase();
153
+ if (LOOPBACK_HOSTNAMES.has(lower))
154
+ return true;
155
+ const ip = stripBrackets(lower);
156
+ if (isIP(ip) === 4) {
157
+ const value = ipv4ToInt(ip);
158
+ return value !== undefined && value >= 0x7f000000 && value <= 0x7fffffff;
159
+ }
160
+ if (isIP(ip) === 6) {
161
+ return normalizeIpv6(ip) === IPV6_LOOPBACK;
162
+ }
163
+ return false;
164
+ }
165
+ function isReservedHostname(hostname) {
166
+ const lower = hostname.toLowerCase();
167
+ if (RESERVED_HOSTNAMES.has(lower))
168
+ return true;
169
+ // RFC 6762/6761 保留域:云元数据主机常落在 *.internal。
170
+ return lower.endsWith(".internal");
171
+ }
172
+ function unsafeTarget(message) {
173
+ return new A2AClientError("unsafe_target", message);
174
+ }
175
+ /**
176
+ * 静态 URL 安全校验(同步)。构造 client / 选中 binding 时执行。
177
+ * 返回规范化 URL;拒绝时抛 unsafe_target。
178
+ */
179
+ export function assertSafeTargetUrl(value, options = {}) {
180
+ let url;
181
+ try {
182
+ url = new URL(value);
183
+ }
184
+ catch {
185
+ throw unsafeTarget(`invalid URL: ${value}`);
186
+ }
187
+ if (url.protocol !== "https:" && url.protocol !== "http:") {
188
+ throw unsafeTarget(`A2A endpoint must use http or https (got ${url.protocol})`);
189
+ }
190
+ if (url.username !== "" || url.password !== "") {
191
+ throw unsafeTarget("A2A endpoint must not embed credentials (userinfo)");
192
+ }
193
+ const hostname = url.hostname;
194
+ const loopback = isLoopbackHost(hostname);
195
+ if (url.protocol === "http:") {
196
+ if (!loopback) {
197
+ throw unsafeTarget("cleartext HTTP only for loopback hosts (localhost, 127.0.0.1, ::1) — use HTTPS for remote endpoints");
198
+ }
199
+ }
200
+ if (loopback)
201
+ return url;
202
+ if (isIpLiteral(hostname)) {
203
+ const ip = stripBrackets(hostname);
204
+ const check = isIP(ip) === 4 ? isReservedIpv4(ip) : isReservedIpv6(ip);
205
+ if (check.reserved && !options.allowPrivateRanges) {
206
+ throw unsafeTarget(`A2A endpoint resolves to a reserved network (${check.name})`);
207
+ }
208
+ }
209
+ else if (isReservedHostname(hostname) && !options.allowPrivateRanges) {
210
+ throw unsafeTarget(`A2A endpoint hostname is reserved (${hostname})`);
211
+ }
212
+ return url;
213
+ }
214
+ /**
215
+ * 请求前的 DNS 复查:主机名解析出的每个 IP 都必须通过私网/保留网段判定。
216
+ * 字面 IP 跳过(静态校验已覆盖);解析失败 fail-closed。
217
+ */
218
+ export async function assertResolvableTargetUrl(url, options = {}) {
219
+ const hostname = url.hostname;
220
+ if (options.skipDnsCheck)
221
+ return;
222
+ if (isIpLiteral(hostname) || isLoopbackHost(hostname))
223
+ return;
224
+ const resolve = options.resolveIp ??
225
+ ((h) => lookup(h, { all: true, verbatim: true }).then((addrs) => addrs.map((a) => a.address)));
226
+ let ips;
227
+ try {
228
+ ips = await resolve(hostname);
229
+ }
230
+ catch {
231
+ throw unsafeTarget(`cannot resolve A2A endpoint host ${hostname}`);
232
+ }
233
+ for (const ip of ips) {
234
+ const version = isIP(ip);
235
+ const check = version === 4 ? isReservedIpv4(ip) : version === 6 ? isReservedIpv6(ip) : { reserved: false };
236
+ // loopback 解析结果始终放行(与静态校验一致);其余保留网段拒绝。
237
+ if (check.reserved && !isLoopbackHost(ip) && !options.allowPrivateRanges) {
238
+ throw unsafeTarget(`A2A endpoint host ${hostname} resolves to a reserved network (${check.name})`);
239
+ }
240
+ }
241
+ }
242
+ //# sourceMappingURL=url-policy.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"url-policy.js","sourceRoot":"","sources":["../../../src/a2a/client/url-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAO5C,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AAEpG,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IACtD,0BAA0B;IAC1B,eAAe;IACf,4BAA4B;IAC5B,iCAAiC;CAClC,CAAC,CAAC;AAEH,SAAS,WAAW,CAAC,QAAgB;IACnC,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,OAAO,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC/F,CAAC;AAYD,MAAM,WAAW,GAAuB;IACtC,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,wBAAwB,EAAE;IACtE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,oBAAoB,EAAE;IAClE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,qBAAqB,EAAE;IACnE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,sBAAsB,EAAE;IACpE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,2BAA2B,EAAE;IACzE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,uBAAuB,EAAE;IACrE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,4BAA4B,EAAE;IAC1E,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,yBAAyB,EAAE;IACvE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,wBAAwB,EAAE;IACtE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,4BAA4B,EAAE;IAC1E,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,4BAA4B,EAAE;IAC1E,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,2BAA2B,EAAE;IACzE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,uBAAuB,EAAE;IACrE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,sBAAsB,EAAE;CACrE,CAAC;AAEF,MAAM,UAAU,SAAS,CAAC,EAAU;IAClC,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG;YAAE,OAAO,SAAS,CAAC;QAC/C,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;IAC/B,CAAC;IACD,OAAO,KAAK,KAAK,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;IAC5B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACpD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;IACpF,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACtF,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,SAAS,aAAa,CAAC,EAAU;IAC/B,MAAM,KAAK,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;IAChC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IACpC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IACvD,IAAI,IAAI,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,GAAG,GAAG,CAAC,GAAG,UAAU,EAAE,GAAG,IAAI,KAAK,CAAS,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,UAAU,CAAC,CAAC;IACjF,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,aAAa,GAAG,yCAAyC,CAAC;AAChE,MAAM,gBAAgB,GAAG,yCAAyC,CAAC;AACnE,MAAM,oBAAoB,GAAG,gCAAgC,CAAC;AAE9D,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,MAAM,UAAU,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;IACrC,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACzD,IAAI,UAAU,KAAK,aAAa;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;IACtF,IAAI,UAAU,KAAK,gBAAgB;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;IAC3F,oDAAoD;IACpD,IAAI,UAAU,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxE,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACvC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC9C,IAAI,IAAI,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACpC,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;YAC7D,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACjF,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC/C,8CAA8C;IAC9C,IAAI,WAAW,IAAI,MAAM,IAAI,WAAW,IAAI,MAAM;QAChD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IAC3D,qEAAqE;IACrE,oDAAoD;IACpD,IAAI,WAAW,IAAI,MAAM,IAAI,WAAW,IAAI,MAAM;QAChD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC;IAC1D,+CAA+C;IAC/C,IAAI,WAAW,IAAI,MAAM,IAAI,WAAW,IAAI,MAAM;QAChD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,mCAAmC,EAAE,CAAC;IACvE,IAAI,WAAW,IAAI,MAAM;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;IACjF,IAAI,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC;QACpC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC;IACjE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E,qDAAqD;AACrD,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5B,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,IAAI,UAAU,IAAI,KAAK,IAAI,UAAU,CAAC;IAC3E,CAAC;IACD,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QACnB,OAAO,aAAa,CAAC,EAAE,CAAC,KAAK,aAAa,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,0CAA0C;IAC1C,OAAO,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO,IAAI,cAAc,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,UAAgC,EAAE;IACnF,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,YAAY,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1D,MAAM,YAAY,CAAC,4CAA4C,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,YAAY,CAAC,oDAAoD,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,YAAY,CAChB,qGAAqG,CACtG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,QAAQ;QAAE,OAAO,GAAG,CAAC;IAEzB,IAAI,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QACvE,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAClD,MAAM,YAAY,CAAC,gDAAgD,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;SAAM,IAAI,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;QACvE,MAAM,YAAY,CAAC,sCAAsC,QAAQ,GAAG,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAOD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,GAAQ,EACR,UAAsC,EAAE;IAExC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,IAAI,OAAO,CAAC,YAAY;QAAE,OAAO;IACjC,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,cAAc,CAAC,QAAQ,CAAC;QAAE,OAAO;IAE9D,MAAM,OAAO,GACX,OAAO,CAAC,SAAS;QACjB,CAAC,CAAC,CAAS,EAAE,EAAE,CACb,MAAM,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAE3F,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,YAAY,CAAC,oCAAoC,QAAQ,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;QACzB,MAAM,KAAK,GACT,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAChG,uCAAuC;QACvC,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;YACzE,MAAM,YAAY,CAChB,qBAAqB,QAAQ,oCAAoC,KAAK,CAAC,IAAI,GAAG,CAC/E,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}
@@ -0,0 +1,68 @@
1
+ /**
2
+ * Copyright 2026 harrylabsj
3
+ *
4
+ * Licensed under the Apache License, Version 2.0 (the "License");
5
+ * you may not use this file except in compliance with the License.
6
+ * You may obtain a copy of the License at
7
+ *
8
+ * http://www.apache.org/licenses/LICENSE-2.0
9
+ *
10
+ * Unless required by applicable law or agreed to in writing, software
11
+ * distributed under the License is distributed on an "AS IS" BASIS,
12
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13
+ * See the License for the specific language governing permissions and
14
+ * limitations under the License.
15
+ */
16
+ import { type CatalogSource } from "../discovery/catalog-source/index.js";
17
+ import { type KiwiLocale } from "../i18n.js";
18
+ export declare const NEGOTIATE_CAPABILITY = "com.harrylabsj.kiwi.shopping.negotiation";
19
+ export declare const NEGOTIATE_SKU = "sku-001";
20
+ export declare const NEGOTIATE_CURRENCY = "CNY";
21
+ export declare const NEGOTIATE_QUANTITY = 200;
22
+ export declare const NEGOTIATE_DEAL_PRICE_MINOR = 83500;
23
+ export declare const NEGOTIATE_DELIVERY_BEFORE = "2026-08-20T18:00:00Z";
24
+ export interface NegotiateOptions {
25
+ /** agent catalog base URL。 */
26
+ catalog: string;
27
+ /**
28
+ * catalog source 注入(rev1.5 CD #27:Buyer 传 KiwiCatalogSource 走
29
+ * product-first 链路)。缺省 ShoppingCliCatalogSource 保持 legacy 行为。
30
+ */
31
+ catalogSource?: CatalogSource;
32
+ /** 目标 catalog_agent_id;缺省取第一个可发现候选。 */
33
+ catalogAgentId?: string;
34
+ /** 订货量(缺省 200)。 */
35
+ quantity?: number;
36
+ /** 询价 SKU(缺省 sku-001)。买家任务驱动时取任务 intent 的 sku/category。 */
37
+ sku?: string;
38
+ /** 买方还价单价(minor 单位;缺省 835.00 分 = 83.50 元)。 */
39
+ dealPriceMinor?: number;
40
+ /** 要求交期(RFC3339;缺省 2026-08-20T18:00:00Z)。 */
41
+ deliveryBefore?: string;
42
+ /** 发送方身份(缺省 buyer:a2a-demo)。 */
43
+ senderIdentity?: string;
44
+ }
45
+ export interface NegotiateResult {
46
+ ok: boolean;
47
+ negotiationId: string;
48
+ catalogAgentId: string;
49
+ agentCardUrl: string;
50
+ steps: string[];
51
+ agreement?: Record<string, unknown>;
52
+ /** 磋商商业要点(自然语言渲染用)。 */
53
+ facts?: {
54
+ sku: string;
55
+ quantity: number;
56
+ offerPriceMinor?: number;
57
+ dealPriceMinor?: number;
58
+ deliveryBefore: string;
59
+ };
60
+ error?: string;
61
+ }
62
+ /** 把一轮磋商结果渲染成人类可读的自然语言总结(跟随用户语言,缺省 detectLocale)。 */
63
+ export declare function summarizeNegotiation(result: NegotiateResult, locale?: KiwiLocale): string;
64
+ /**
65
+ * 与 catalog 中发现的一个 agent 完成一轮确定性磋商(RFQ→…→Agreement)。
66
+ * 失败返回 `{ ok: false, error }`,不抛错(供对话内命令友好报告)。
67
+ */
68
+ export declare function negotiateWithAgent(options: NegotiateOptions): Promise<NegotiateResult>;
@@ -0,0 +1,288 @@
1
+ /**
2
+ * Copyright 2026 harrylabsj
3
+ *
4
+ * Licensed under the Apache License, Version 2.0 (the "License");
5
+ * you may not use this file except in compliance with the License.
6
+ * You may obtain a copy of the License at
7
+ *
8
+ * http://www.apache.org/licenses/LICENSE-2.0
9
+ *
10
+ * Unless required by applicable law or agreed to in writing, software
11
+ * distributed under the License is distributed on an "AS IS" BASIS,
12
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13
+ * See the License for the specific language governing permissions and
14
+ * limitations under the License.
15
+ */
16
+ /**
17
+ * buyer 侧 A2A 磋商驱动(`/negotiate` 用)——经 agent catalog 发现目标 → fresh
18
+ * resolve Agent Card → A2ADirectChannel → 脚本化 KNP 磋商
19
+ * (RFQ→Offer→CounterOffer→ConditionalOffer→AcceptNonbinding→Agreement)。
20
+ *
21
+ * 确定性(不依赖 LLM):与 a2a-agent.mjs 同一语义,供对话内 /negotiate 复用。
22
+ */
23
+ import { mkdtempSync, rmSync } from "node:fs";
24
+ import { tmpdir } from "node:os";
25
+ import path from "node:path";
26
+ import { ShoppingCliCatalogSource } from "../discovery/catalog-source/index.js";
27
+ import { AgentDiscovery } from "../discovery/index.js";
28
+ import { selectChannelCandidate, A2ADirectChannel } from "../counterparty/index.js";
29
+ import { LedgerStore } from "../negotiation/ledger/index.js";
30
+ import { IdempotencyStore } from "../negotiation/idempotency/index.js";
31
+ import { newExchangeId, newMessageId, newNegotiationId, newOfferId, } from "../negotiation/domain/identifiers.js";
32
+ import { finalizeEnvelope } from "../negotiation/domain/envelope.js";
33
+ import { contentDigest } from "../negotiation/jcs.js";
34
+ import { evaluateConditionalOffer } from "../negotiation/condition/evaluator.js";
35
+ import { detectLocale } from "../i18n.js";
36
+ export const NEGOTIATE_CAPABILITY = "com.harrylabsj.kiwi.shopping.negotiation";
37
+ export const NEGOTIATE_SKU = "sku-001";
38
+ export const NEGOTIATE_CURRENCY = "CNY";
39
+ export const NEGOTIATE_QUANTITY = 200;
40
+ export const NEGOTIATE_DEAL_PRICE_MINOR = 83_500;
41
+ export const NEGOTIATE_DELIVERY_BEFORE = "2026-08-20T18:00:00Z";
42
+ const minorPrice = (minor) => minor === undefined ? "?" : (minor / 100).toFixed(2);
43
+ /** 把一轮磋商结果渲染成人类可读的自然语言总结(跟随用户语言,缺省 detectLocale)。 */
44
+ export function summarizeNegotiation(result, locale = detectLocale()) {
45
+ const f = result.facts;
46
+ const a = result.agreement;
47
+ const sku = f?.sku ?? NEGOTIATE_SKU;
48
+ const quantity = f?.quantity ?? NEGOTIATE_QUANTITY;
49
+ const delivery = f?.deliveryBefore ?? NEGOTIATE_DELIVERY_BEFORE;
50
+ const offerPrice = minorPrice(f?.offerPriceMinor);
51
+ const dealPrice = minorPrice(f?.dealPriceMinor);
52
+ const agreementId = String(a?.agreement_id ?? "");
53
+ if (!result.ok) {
54
+ return locale === "zh"
55
+ ? `磋商失败:${result.error ?? "未知错误"}(可先 /discover 查看 catalog 里的 agent)`
56
+ : `Negotiation failed: ${result.error ?? "unknown error"} (run /discover to list catalog agents)`;
57
+ }
58
+ if (locale === "zh") {
59
+ return [
60
+ `已完成一轮 A2A 磋商(negotiation ${result.negotiationId}):`,
61
+ `· 发现商家 ${result.catalogAgentId} 并验证其 Agent Card(${result.agentCardUrl}),确认在线可用`,
62
+ `· 询价:采购 ${quantity} 件 ${sku},要求 ${delivery} 前交货`,
63
+ `· 商家首次报价:${offerPrice} 元/件`,
64
+ `· 还价后商家给出条件价:总采购量 ≥ 100 件时按 ${dealPrice} 元/件成交`,
65
+ `· 采购量满足条件,双方达成非绑定协议(agreement ${agreementId})`,
66
+ `协议性质:nonbinding — 不创建订单、不锁库存、不授权支付(§41 #25/#26/#27)`,
67
+ ].join("\n");
68
+ }
69
+ return [
70
+ `A round of A2A negotiation completed (negotiation ${result.negotiationId}):`,
71
+ `· Discovered merchant ${result.catalogAgentId} and verified its Agent Card (${result.agentCardUrl}) — online and reachable`,
72
+ `· RFQ: ${quantity} units of ${sku}, delivery by ${delivery}`,
73
+ `· Merchant's initial offer: ${offerPrice} ${NEGOTIATE_CURRENCY}/unit`,
74
+ `· After the counter, the merchant offered a conditional price: ${dealPrice} ${NEGOTIATE_CURRENCY}/unit when total quantity ≥ 100`,
75
+ `· Quantity meets the condition; non-binding agreement reached (agreement ${agreementId})`,
76
+ `Agreement is nonbinding — no order, no inventory reservation, no payment authorization (§41 #25/#26/#27)`,
77
+ ].join("\n");
78
+ }
79
+ function monotonicNow() {
80
+ let tick = 0;
81
+ const base = Date.parse("2026-08-07T00:00:00.000Z");
82
+ return () => {
83
+ const t = new Date(base + tick);
84
+ tick += 1;
85
+ return t.toISOString();
86
+ };
87
+ }
88
+ function seedEnvelope(seed) {
89
+ return finalizeEnvelope({
90
+ capability: NEGOTIATE_CAPABILITY,
91
+ protocol_version: "1.0",
92
+ exchange_id: seed.exchange_id ?? newExchangeId(),
93
+ message_id: seed.message_id ?? newMessageId(),
94
+ ...seed,
95
+ });
96
+ }
97
+ function rfqEnvelope(negotiationId, now, quantity, sku, deliveryBefore) {
98
+ return seedEnvelope({
99
+ negotiation_id: negotiationId,
100
+ actor: "buyer",
101
+ action: "rfq",
102
+ created_at: now(),
103
+ payload: {
104
+ type: "rfq",
105
+ items: [{ sku, quantity: { value: quantity, unit: "piece" } }],
106
+ requested_terms: { delivery_before: deliveryBefore },
107
+ },
108
+ });
109
+ }
110
+ function counterEnvelope(negotiationId, now, inReplyTo, respondingToOfferId, quantity, sku, counterPriceMinor) {
111
+ return seedEnvelope({
112
+ negotiation_id: negotiationId,
113
+ in_reply_to: inReplyTo,
114
+ actor: "buyer",
115
+ action: "counter_offer",
116
+ created_at: now(),
117
+ payload: {
118
+ type: "counter_offer",
119
+ offer_id: newOfferId(),
120
+ responding_to_offer_id: respondingToOfferId,
121
+ proposed_terms: {
122
+ items: [
123
+ {
124
+ sku,
125
+ quantity: { value: quantity, unit: "piece" },
126
+ unit_price: { currency: NEGOTIATE_CURRENCY, amount_minor: counterPriceMinor },
127
+ },
128
+ ],
129
+ },
130
+ },
131
+ });
132
+ }
133
+ function acceptEnvelope(negotiationId, now, inReplyTo, offerId, termsDigest) {
134
+ return seedEnvelope({
135
+ negotiation_id: negotiationId,
136
+ in_reply_to: inReplyTo,
137
+ actor: "buyer",
138
+ action: "accept_nonbinding",
139
+ created_at: now(),
140
+ payload: { type: "accept_nonbinding", offer_id: offerId, terms_digest: termsDigest },
141
+ });
142
+ }
143
+ function extractKnpEnvelope(task) {
144
+ const message = task?.status?.message;
145
+ if (message === undefined)
146
+ return null;
147
+ for (const part of message.parts ?? []) {
148
+ if (part.kind === "data" && part.data?.["knp_envelope"])
149
+ return part.data["knp_envelope"];
150
+ }
151
+ return null;
152
+ }
153
+ function extractAgreement(task) {
154
+ for (const artifact of task?.artifacts ?? []) {
155
+ for (const part of artifact.parts ?? []) {
156
+ if (part.kind === "data" && part.data?.["agreement"])
157
+ return part.data["agreement"];
158
+ }
159
+ }
160
+ return null;
161
+ }
162
+ /**
163
+ * 与 catalog 中发现的一个 agent 完成一轮确定性磋商(RFQ→…→Agreement)。
164
+ * 失败返回 `{ ok: false, error }`,不抛错(供对话内命令友好报告)。
165
+ */
166
+ export async function negotiateWithAgent(options) {
167
+ const quantity = options.quantity ?? NEGOTIATE_QUANTITY;
168
+ const sku = options.sku ?? NEGOTIATE_SKU;
169
+ const counterPriceMinor = options.dealPriceMinor ?? NEGOTIATE_DEAL_PRICE_MINOR;
170
+ const deliveryBefore = options.deliveryBefore ?? NEGOTIATE_DELIVERY_BEFORE;
171
+ const senderIdentity = options.senderIdentity ?? "buyer:a2a-demo";
172
+ const dir = mkdtempSync(path.join(tmpdir(), "kiwi-a2a-negotiate-"));
173
+ const now = monotonicNow();
174
+ const ledger = new LedgerStore({ dir, now });
175
+ const idempotency = new IdempotencyStore({ dir, now });
176
+ const steps = [];
177
+ let handle = null;
178
+ const negotiationId = newNegotiationId();
179
+ try {
180
+ // 1. 发现:catalog 候选 → fresh resolve Agent Card(评审项 L4:includeBlocked
181
+ // 默认关闭——此前 true 会让 catalog 判定 rejected/suspended/unreachable 的
182
+ // 商户也进入磋商并产生误导性商业共识;演示路径也不该放宽安全默认)。
183
+ // CD #27:Buyer 可注入 KiwiCatalogSource(listing → owner_agent_id → getRecord →
184
+ // resolveViaCatalog fresh verify 全链);缺省 legacy ShoppingCliCatalogSource。
185
+ const source = options.catalogSource ?? new ShoppingCliCatalogSource({ baseUrl: options.catalog });
186
+ const discovery = new AgentDiscovery({ catalog: { source, includeBlocked: false } });
187
+ const resolved = await discovery.resolveViaCatalog();
188
+ if (resolved.length === 0) {
189
+ return { ok: false, negotiationId, catalogAgentId: "", agentCardUrl: "", steps, error: "catalog 里没有可发现的 agent" };
190
+ }
191
+ const target = options.catalogAgentId === undefined
192
+ ? resolved[0]
193
+ : resolved.find((r) => r.candidate.catalog_agent_id === options.catalogAgentId);
194
+ if (target === undefined) {
195
+ return {
196
+ ok: false,
197
+ negotiationId,
198
+ catalogAgentId: options.catalogAgentId ?? "",
199
+ agentCardUrl: "",
200
+ steps,
201
+ error: `catalog 里找不到 ${options.catalogAgentId ?? ""}(可用 /discover 查看)`,
202
+ };
203
+ }
204
+ const catalogAgentId = target.candidate.catalog_agent_id;
205
+ const agentCardUrl = target.candidate.discovery?.agent_card_url ?? "";
206
+ steps.push(`discover ${catalogAgentId}`);
207
+ steps.push(`resolve ${agentCardUrl}`);
208
+ // 2. 通道:a2a-direct 优先。
209
+ const channelCandidate = selectChannelCandidate(target.profile);
210
+ if (channelCandidate === null || channelCandidate.url === undefined) {
211
+ return { ok: false, negotiationId, catalogAgentId, agentCardUrl, steps, error: "无 a2a-direct 通道候选" };
212
+ }
213
+ const channel = new A2ADirectChannel({ url: channelCandidate.url, ledger, idempotency, now });
214
+ handle = await channel.open({
215
+ negotiation_id: negotiationId,
216
+ sender_identity: senderIdentity,
217
+ identity: target.profile.identity,
218
+ });
219
+ const send = async (envelope) => handle.send({ envelope, ref: { negotiation_id: negotiationId } });
220
+ // 3. RFQ → Offer。
221
+ const rfq = rfqEnvelope(negotiationId, now, quantity, sku, deliveryBefore);
222
+ steps.push(`rfq`);
223
+ const offerRes = await send(rfq);
224
+ const offer = extractKnpEnvelope(offerRes.task);
225
+ if (offer === null || offer.action !== "offer") {
226
+ return { ok: false, negotiationId, catalogAgentId, agentCardUrl, steps, error: "未收到 offer 回复" };
227
+ }
228
+ const offerPayload = offer.payload;
229
+ if (offerPayload.offer_id === undefined) {
230
+ return { ok: false, negotiationId, catalogAgentId, agentCardUrl, steps, error: "offer 缺 offer_id" };
231
+ }
232
+ const offerPriceMinor = offerPayload.terms?.items?.[0]?.unit_price?.amount_minor;
233
+ steps.push(`offer ${offerPayload.offer_id}`);
234
+ // 4. CounterOffer → ConditionalOffer。
235
+ const counter = counterEnvelope(negotiationId, now, offer.message_id ?? "", offerPayload.offer_id, quantity, sku, counterPriceMinor);
236
+ steps.push(`counter_offer`);
237
+ const condRes = await send(counter);
238
+ const conditional = extractKnpEnvelope(condRes.task);
239
+ if (conditional === null || conditional.action !== "conditional_offer") {
240
+ return { ok: false, negotiationId, catalogAgentId, agentCardUrl, steps, error: "未收到 conditional_offer 回复" };
241
+ }
242
+ const conditionalPayload = conditional.payload;
243
+ steps.push(`conditional_offer ${conditionalPayload.offer_id ?? ""}`);
244
+ const dealPriceMinor = conditionalPayload.conditions?.[0]?.then_terms?.items?.[0]?.unit_price?.amount_minor;
245
+ // 5. 确定性求值 → AcceptNonbinding → Agreement。
246
+ const agreedTerms = evaluateConditionalOffer(conditionalPayload, {
247
+ "aggregate.total_quantity": quantity,
248
+ });
249
+ const accept = acceptEnvelope(negotiationId, now, conditional.message_id ?? "", conditionalPayload.offer_id ?? "", contentDigest(agreedTerms));
250
+ steps.push(`accept_nonbinding`);
251
+ const acceptRes = await send(accept);
252
+ const agreement = extractAgreement(acceptRes.task);
253
+ if (agreement === null) {
254
+ return { ok: false, negotiationId, catalogAgentId, agentCardUrl, steps, error: "未收到 agreement artifact" };
255
+ }
256
+ steps.push(`agreement ${String(agreement.agreement_id ?? "")}`);
257
+ return {
258
+ ok: true,
259
+ negotiationId,
260
+ catalogAgentId,
261
+ agentCardUrl,
262
+ steps,
263
+ agreement,
264
+ facts: {
265
+ sku,
266
+ quantity,
267
+ offerPriceMinor,
268
+ dealPriceMinor,
269
+ deliveryBefore,
270
+ },
271
+ };
272
+ }
273
+ catch (err) {
274
+ return {
275
+ ok: false,
276
+ negotiationId,
277
+ catalogAgentId: "",
278
+ agentCardUrl: "",
279
+ steps,
280
+ error: err instanceof Error ? err.message : String(err),
281
+ };
282
+ }
283
+ finally {
284
+ await handle?.close().catch(() => undefined);
285
+ rmSync(dir, { recursive: true, force: true });
286
+ }
287
+ }
288
+ //# sourceMappingURL=negotiate.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"negotiate.js","sourceRoot":"","sources":["../../src/a2a/negotiate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;GAMG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,wBAAwB,EAAsB,MAAM,sCAAsC,CAAC;AACpG,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEpF,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EACL,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,UAAU,GACX,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,YAAY,EAAmB,MAAM,YAAY,CAAC;AAE3D,MAAM,CAAC,MAAM,oBAAoB,GAAG,0CAA0C,CAAC;AAC/E,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAC;AACvC,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACxC,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC;AACjD,MAAM,CAAC,MAAM,yBAAyB,GAAG,sBAAsB,CAAC;AA0ChE,MAAM,UAAU,GAAG,CAAC,KAAyB,EAAU,EAAE,CACvD,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAEvD,qDAAqD;AACrD,MAAM,UAAU,oBAAoB,CAClC,MAAuB,EACvB,SAAqB,YAAY,EAAE;IAEnC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;IACvB,MAAM,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;IAC3B,MAAM,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,aAAa,CAAC;IACpC,MAAM,QAAQ,GAAG,CAAC,EAAE,QAAQ,IAAI,kBAAkB,CAAC;IACnD,MAAM,QAAQ,GAAG,CAAC,EAAE,cAAc,IAAI,yBAAyB,CAAC;IAChE,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,MAAM,KAAK,IAAI;YACpB,CAAC,CAAC,QAAQ,MAAM,CAAC,KAAK,IAAI,MAAM,oCAAoC;YACpE,CAAC,CAAC,uBAAuB,MAAM,CAAC,KAAK,IAAI,eAAe,yCAAyC,CAAC;IACtG,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO;YACL,4BAA4B,MAAM,CAAC,aAAa,IAAI;YACpD,UAAU,MAAM,CAAC,cAAc,oBAAoB,MAAM,CAAC,YAAY,UAAU;YAChF,WAAW,QAAQ,MAAM,GAAG,OAAO,QAAQ,MAAM;YACjD,YAAY,UAAU,MAAM;YAC5B,+BAA+B,SAAS,QAAQ;YAChD,iCAAiC,WAAW,GAAG;YAC/C,qDAAqD;SACtD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IACD,OAAO;QACL,qDAAqD,MAAM,CAAC,aAAa,IAAI;QAC7E,yBAAyB,MAAM,CAAC,cAAc,iCAAiC,MAAM,CAAC,YAAY,0BAA0B;QAC5H,UAAU,QAAQ,aAAa,GAAG,iBAAiB,QAAQ,EAAE;QAC7D,+BAA+B,UAAU,IAAI,kBAAkB,OAAO;QACtE,kEAAkE,SAAS,IAAI,kBAAkB,iCAAiC;QAClI,4EAA4E,WAAW,GAAG;QAC1F,0GAA0G;KAC3G,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,YAAY;IACnB,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACpD,OAAO,GAAG,EAAE;QACV,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,CAAC;QACV,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IACzB,CAAC,CAAC;AACJ,CAAC;AAQD,SAAS,YAAY,CAAC,IAAkB;IACtC,OAAO,gBAAgB,CAAC;QACtB,UAAU,EAAE,oBAAoB;QAChC,gBAAgB,EAAE,KAAK;QACvB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,aAAa,EAAE;QAChD,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,YAAY,EAAE;QAC7C,GAAG,IAAI;KACR,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAClB,aAAqB,EACrB,GAAiB,EACjB,QAAgB,EAChB,GAAW,EACX,cAAsB;IAEtB,OAAO,YAAY,CAAC;QAClB,cAAc,EAAE,aAAa;QAC7B,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,KAAK;QACb,UAAU,EAAE,GAAG,EAAE;QACjB,OAAO,EAAE;YACP,IAAI,EAAE,KAAK;YACX,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;YAC9D,eAAe,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE;SACrD;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CACtB,aAAqB,EACrB,GAAiB,EACjB,SAAiB,EACjB,mBAA2B,EAC3B,QAAgB,EAChB,GAAW,EACX,iBAAyB;IAEzB,OAAO,YAAY,CAAC;QAClB,cAAc,EAAE,aAAa;QAC7B,WAAW,EAAE,SAAS;QACtB,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,eAAe;QACvB,UAAU,EAAE,GAAG,EAAE;QACjB,OAAO,EAAE;YACP,IAAI,EAAE,eAAe;YACrB,QAAQ,EAAE,UAAU,EAAE;YACtB,sBAAsB,EAAE,mBAAmB;YAC3C,cAAc,EAAE;gBACd,KAAK,EAAE;oBACL;wBACE,GAAG;wBACH,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE;wBAC5C,UAAU,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE,YAAY,EAAE,iBAAiB,EAAE;qBAC9E;iBACF;aACF;SACF;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,aAAqB,EAAE,GAAiB,EAAE,SAAiB,EAAE,OAAe,EAAE,WAAmB;IACvH,OAAO,YAAY,CAAC;QAClB,cAAc,EAAE,aAAa;QAC7B,WAAW,EAAE,SAAS;QACtB,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,mBAAmB;QAC3B,UAAU,EAAE,GAAG,EAAE;QACjB,OAAO,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE;KACrF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAgH;IAC1I,MAAM,OAAO,GAAG,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC;IACtC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,cAAc,CAAC;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAA4B,CAAC;IACvH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,IAA4G;IACpI,KAAK,MAAM,QAAQ,IAAI,IAAI,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC;QAC7C,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;YACxC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAA4B,CAAC;QACjH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAyB;IAChE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,kBAAkB,CAAC;IACxD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,aAAa,CAAC;IACzC,MAAM,iBAAiB,GAAG,OAAO,CAAC,cAAc,IAAI,0BAA0B,CAAC;IAC/E,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,yBAAyB,CAAC;IAC3E,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,gBAAgB,CAAC;IAClE,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACpE,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,IAAI,gBAAgB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACvD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,GAAyB,IAAI,CAAC;IACxC,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IAEzC,IAAI,CAAC;QACH,oEAAoE;QACpE,+DAA+D;QAC/D,oCAAoC;QACpC,4EAA4E;QAC5E,yEAAyE;QACzE,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,IAAI,IAAI,wBAAwB,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACnG,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACrF,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,iBAAiB,EAAE,CAAC;QACrD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;QACnH,CAAC;QACD,MAAM,MAAM,GACV,OAAO,CAAC,cAAc,KAAK,SAAS;YAClC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YACb,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;QACpF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,aAAa;gBACb,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,EAAE;gBAC5C,YAAY,EAAE,EAAE;gBAChB,KAAK;gBACL,KAAK,EAAE,gBAAgB,OAAO,CAAC,cAAc,IAAI,EAAE,mBAAmB;aACvE,CAAC;QACJ,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC;QACzD,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,cAAc,IAAI,EAAE,CAAC;QACtE,KAAK,CAAC,IAAI,CAAC,YAAY,cAAc,EAAE,CAAC,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,WAAW,YAAY,EAAE,CAAC,CAAC;QAEtC,uBAAuB;QACvB,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,gBAAgB,KAAK,IAAI,IAAI,gBAAgB,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YACpE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;QACvG,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,EAAE,GAAG,EAAE,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9F,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAC1B,cAAc,EAAE,aAAa;YAC7B,eAAe,EAAE,cAAc;YAC/B,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ;SAClC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,KAAK,EAAE,QAA6C,EAAE,EAAE,CACnE,MAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;QAErE,kBAAkB;QAClB,MAAM,GAAG,GAAG,WAAW,CAAC,aAAa,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;QAC3E,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC/C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;QAClG,CAAC;QACD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAuG,CAAC;QACnI,IAAI,YAAY,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;QACtG,CAAC;QACD,MAAM,eAAe,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC;QACjF,KAAK,CAAC,IAAI,CAAC,SAAS,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC;QAE7C,sCAAsC;QACtC,MAAM,OAAO,GAAG,eAAe,CAC7B,aAAa,EACb,GAAG,EACF,KAAK,CAAC,UAAqB,IAAI,EAAE,EAClC,YAAY,CAAC,QAAQ,EACrB,QAAQ,EACR,GAAG,EACH,iBAAiB,CAClB,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,CAAC,MAAM,KAAK,mBAAmB,EAAE,CAAC;YACvE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;QAC9G,CAAC;QACD,MAAM,kBAAkB,GAAG,WAAW,CAAC,OAGtC,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,qBAAqB,kBAAkB,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC;QACrE,MAAM,cAAc,GAAG,kBAAkB,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC;QAE5G,2CAA2C;QAC3C,MAAM,WAAW,GAAG,wBAAwB,CAAC,kBAA2B,EAAE;YACxE,0BAA0B,EAAE,QAAQ;SACrC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAC3B,aAAa,EACb,GAAG,EACF,WAAW,CAAC,UAAqB,IAAI,EAAE,EACxC,kBAAkB,CAAC,QAAQ,IAAI,EAAE,EACjC,aAAa,CAAC,WAAoB,CAAC,CACpC,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;QAC5G,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,SAAS,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QAChE,OAAO;YACL,EAAE,EAAE,IAAI;YACR,aAAa;YACb,cAAc;YACd,YAAY;YACZ,KAAK;YACL,SAAS;YACT,KAAK,EAAE;gBACL,GAAG;gBACH,QAAQ;gBACR,eAAe;gBACf,cAAc;gBACd,cAAc;aACf;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,aAAa;YACb,cAAc,EAAE,EAAE;YAClB,YAAY,EAAE,EAAE;YAChB,KAAK;YACL,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC"}