@iflow-mcp/jkheadley-instar 0.26.2

package/dist/threadline/ThreadlineEndpoints.js

@@ -0,0 +1,313 @@
+/**
+ * ThreadlineEndpoints — HTTP route handlers for the Threadline protocol.
+ *
+ * Routes:
+ *   GET  /threadline/health              — Health check + version
+ *   POST /threadline/handshake/hello     — Initiate handshake (unauthenticated)
+ *   POST /threadline/handshake/confirm   — Complete handshake (unauthenticated)
+ *   POST /threadline/messages/receive    — Receive a message (authenticated)
+ *   GET  /threadline/messages/thread/:id — Get thread messages (authenticated)
+ *   GET  /threadline/blobs/:id           — Fetch blob content (authenticated)
+ *
+ * Authentication: Threadline-Relay token + signed headers for authenticated routes.
+ * Content-Type: application/threadline+json; version=1.0
+ *
+ * Part of Threadline Protocol Phase 3.
+ */
+import { Router } from 'express';
+import crypto from 'node:crypto';
+import { verify } from './ThreadlineCrypto.js';
+// ── Error Codes ──────────────────────────────────────────────────────
+const ERROR_CODES = {
+    TL_AUTH_FAILED: 'TL_AUTH_FAILED',
+    TL_AUTH_MISSING: 'TL_AUTH_MISSING',
+    TL_INVALID_PAYLOAD: 'TL_INVALID_PAYLOAD',
+    TL_HANDSHAKE_FAILED: 'TL_HANDSHAKE_FAILED',
+    TL_RATE_LIMITED: 'TL_RATE_LIMITED',
+    TL_NOT_FOUND: 'TL_NOT_FOUND',
+    TL_INTERNAL_ERROR: 'TL_INTERNAL_ERROR',
+    TL_REPLAY_DETECTED: 'TL_REPLAY_DETECTED',
+    TL_TIMESTAMP_EXPIRED: 'TL_TIMESTAMP_EXPIRED',
+};
+const CONTENT_TYPE = 'application/threadline+json; version=1.0';
+const TIMESTAMP_WINDOW_MS = 30_000; // 30 seconds
+// ── Nonce Store (replay protection for authenticated endpoints) ──────
+class ThreadlineNonceStore {
+    nonces = new Set();
+    pruneTimer;
+    constructor() {
+        // Prune every 60 seconds
+        this.pruneTimer = setInterval(() => {
+            this.nonces.clear(); // Simple approach: clear all every minute
+        }, 60_000);
+        if (this.pruneTimer.unref)
+            this.pruneTimer.unref();
+    }
+    check(nonce) {
+        if (this.nonces.has(nonce))
+            return false;
+        this.nonces.add(nonce);
+        return true;
+    }
+    destroy() {
+        clearInterval(this.pruneTimer);
+    }
+}
+// ── Route Factory ────────────────────────────────────────────────────
+export function createThreadlineRoutes(handshakeManager, threadlineRouter, config) {
+    const router = Router();
+    const nonceStore = new ThreadlineNonceStore();
+    // ── Content-Type middleware for all threadline routes ───────────
+    router.use('/threadline', (_req, res, next) => {
+        res.setHeader('Content-Type', CONTENT_TYPE);
+        next();
+    });
+    // ── Health ─────────────────────────────────────────────────────
+    router.get('/threadline/health', (_req, res) => {
+        res.json({
+            status: 'ok',
+            protocol: 'threadline',
+            version: config.version,
+            agent: config.localAgent,
+            identityPub: handshakeManager.getIdentityPublicKey(),
+            pairedAgents: handshakeManager.listPairedAgents().length,
+            timestamp: new Date().toISOString(),
+        });
+    });
+    // ── Handshake: Hello (UNAUTHENTICATED) ─────────────────────────
+    router.post('/threadline/handshake/hello', (req, res) => {
+        try {
+            const body = req.body;
+            // Validate payload
+            if (!body || !body.agent || !body.identityPub || !body.ephemeralPub || !body.nonce) {
+                res.status(400).json(makeError(ERROR_CODES.TL_INVALID_PAYLOAD, 'Missing required fields: agent, identityPub, ephemeralPub, nonce', false));
+                return;
+            }
+            // Validate hex encoding
+            if (!isHex(body.identityPub, 64) || !isHex(body.ephemeralPub, 64)) {
+                res.status(400).json(makeError(ERROR_CODES.TL_INVALID_PAYLOAD, 'identityPub and ephemeralPub must be 32-byte hex-encoded values', false));
+                return;
+            }
+            const hello = {
+                agent: body.agent,
+                identityPub: body.identityPub,
+                ephemeralPub: body.ephemeralPub,
+                nonce: body.nonce,
+                challengeResponse: body.challengeResponse,
+            };
+            // Check if this is a hello-response (has challengeResponse) to our initiated hello
+            if (hello.challengeResponse) {
+                const result = handshakeManager.handleHelloResponse(hello);
+                if ('error' in result) {
+                    const statusCode = result.error.includes('Rate limited') ? 429 : 400;
+                    res.status(statusCode).json(makeError(result.error.includes('Rate limited') ? ERROR_CODES.TL_RATE_LIMITED : ERROR_CODES.TL_HANDSHAKE_FAILED, result.error, result.error.includes('Rate limited'), result.error.includes('Rate limited') ? 60 : undefined));
+                    return;
+                }
+                res.json({
+                    type: 'confirm-ack',
+                    agent: config.localAgent,
+                    status: 'paired',
+                });
+                return;
+            }
+            // Standard hello — they're initiating
+            const result = handshakeManager.handleHello(hello);
+            if ('error' in result) {
+                const statusCode = result.error.includes('Rate limited') ? 429 : 400;
+                res.status(statusCode).json(makeError(result.error.includes('Rate limited') ? ERROR_CODES.TL_RATE_LIMITED : ERROR_CODES.TL_HANDSHAKE_FAILED, result.error, result.error.includes('Rate limited'), result.error.includes('Rate limited') ? 60 : undefined));
+                return;
+            }
+            res.json({
+                type: 'hello-response',
+                ...result.payload,
+            });
+        }
+        catch (err) {
+            console.error('[ThreadlineEndpoints] Handshake hello error:', err);
+            res.status(500).json(makeError(ERROR_CODES.TL_INTERNAL_ERROR, 'Internal error during handshake', true, 5));
+        }
+    });
+    // ── Handshake: Confirm (UNAUTHENTICATED) ───────────────────────
+    router.post('/threadline/handshake/confirm', (req, res) => {
+        try {
+            const body = req.body;
+            if (!body || !body.agent || !body.challengeResponse) {
+                res.status(400).json(makeError(ERROR_CODES.TL_INVALID_PAYLOAD, 'Missing required fields: agent, challengeResponse', false));
+                return;
+            }
+            const confirm = {
+                agent: body.agent,
+                challengeResponse: body.challengeResponse,
+            };
+            const result = handshakeManager.handleConfirm(confirm);
+            if ('error' in result) {
+                const statusCode = result.error.includes('Rate limited') ? 429 :
+                    result.error.includes('timed out') ? 408 : 400;
+                res.status(statusCode).json(makeError(result.error.includes('Rate limited') ? ERROR_CODES.TL_RATE_LIMITED : ERROR_CODES.TL_HANDSHAKE_FAILED, result.error, result.error.includes('Rate limited') || result.error.includes('timed out'), result.error.includes('Rate limited') ? 60 : undefined));
+                return;
+            }
+            res.json({
+                type: 'confirm-ack',
+                agent: config.localAgent,
+                status: 'paired',
+            });
+        }
+        catch (err) {
+            console.error('[ThreadlineEndpoints] Handshake confirm error:', err);
+            res.status(500).json(makeError(ERROR_CODES.TL_INTERNAL_ERROR, 'Internal error during handshake', true, 5));
+        }
+    });
+    // ── Auth Middleware for authenticated endpoints ────────────────
+    const threadlineAuth = (req, res, next) => {
+        const authHeader = req.headers.authorization;
+        if (!authHeader || !authHeader.startsWith('Threadline-Relay ')) {
+            res.status(401).json(makeError(ERROR_CODES.TL_AUTH_MISSING, 'Missing Authorization: Threadline-Relay <token> header', false));
+            return;
+        }
+        const token = authHeader.slice('Threadline-Relay '.length);
+        const agentName = req.headers['x-threadline-agent'];
+        const nonce = req.headers['x-threadline-nonce'];
+        const timestamp = req.headers['x-threadline-timestamp'];
+        const signature = req.headers['x-threadline-signature'];
+        if (!agentName || !nonce || !timestamp || !signature) {
+            res.status(401).json(makeError(ERROR_CODES.TL_AUTH_MISSING, 'Missing required headers: X-Threadline-Agent, X-Threadline-Nonce, X-Threadline-Timestamp, X-Threadline-Signature', false));
+            return;
+        }
+        // Validate relay token
+        if (!handshakeManager.validateRelayToken(agentName, token)) {
+            res.status(403).json(makeError(ERROR_CODES.TL_AUTH_FAILED, 'Invalid relay token for agent', false));
+            return;
+        }
+        // Validate timestamp freshness
+        const tsMs = new Date(timestamp).getTime();
+        if (isNaN(tsMs) || Math.abs(Date.now() - tsMs) > TIMESTAMP_WINDOW_MS) {
+            res.status(401).json(makeError(ERROR_CODES.TL_TIMESTAMP_EXPIRED, 'Timestamp outside acceptable window', true, 1));
+            return;
+        }
+        // Replay protection via nonce
+        if (!nonceStore.check(nonce)) {
+            res.status(401).json(makeError(ERROR_CODES.TL_REPLAY_DETECTED, 'Nonce already used (replay detected)', false));
+            return;
+        }
+        // Verify signature: Ed25519 sign over (method + path + nonce + timestamp + body_hash)
+        const bodyHash = crypto.createHash('sha256')
+            .update(JSON.stringify(req.body ?? ''))
+            .digest();
+        const signedData = Buffer.concat([
+            Buffer.from(`${req.method}\n${req.path}\n${nonce}\n${timestamp}\n`, 'utf-8'),
+            bodyHash,
+        ]);
+        // We need the agent's identity pub to verify
+        // It's stored in the relay tokens via handshakeManager
+        // For now we accept the signature check against the stored identity
+        try {
+            const identityPub = getAgentIdentityPub(handshakeManager, agentName);
+            if (!identityPub) {
+                res.status(403).json(makeError(ERROR_CODES.TL_AUTH_FAILED, 'Unknown agent identity', false));
+                return;
+            }
+            const isValid = verify(Buffer.from(identityPub, 'hex'), signedData, Buffer.from(signature, 'hex'));
+            if (!isValid) {
+                res.status(403).json(makeError(ERROR_CODES.TL_AUTH_FAILED, 'Signature verification failed', false));
+                return;
+            }
+        }
+        catch {
+            res.status(403).json(makeError(ERROR_CODES.TL_AUTH_FAILED, 'Signature verification error', false));
+            return;
+        }
+        next();
+    };
+    // ── Messages: Receive (AUTHENTICATED) ──────────────────────────
+    router.post('/threadline/messages/receive', threadlineAuth, async (req, res) => {
+        try {
+            const body = req.body;
+            if (!body || !body.message) {
+                res.status(400).json(makeError(ERROR_CODES.TL_INVALID_PAYLOAD, 'Missing required field: message', false));
+                return;
+            }
+            if (!threadlineRouter) {
+                res.status(503).json(makeError(ERROR_CODES.TL_INTERNAL_ERROR, 'Threadline router not available', true, 5));
+                return;
+            }
+            // Route the message through the ThreadlineRouter
+            // Build a minimal MessageEnvelope from the inbound payload
+            const envelope = {
+                schemaVersion: 1,
+                message: body.message,
+                transport: body.transport ?? {
+                    originServer: req.headers['x-threadline-agent'],
+                    nonce: req.headers['x-threadline-nonce'],
+                    timestamp: req.headers['x-threadline-timestamp'],
+                },
+                delivery: body.delivery ?? {
+                    status: 'pending',
+                    attempts: 0,
+                    createdAt: new Date().toISOString(),
+                },
+            };
+            const result = await threadlineRouter.handleInboundMessage(envelope);
+            if (result.error) {
+                res.status(422).json(makeError(ERROR_CODES.TL_INTERNAL_ERROR, result.error, true, 5));
+                return;
+            }
+            res.json({
+                accepted: true,
+                threadId: result.threadId,
+                spawned: result.spawned,
+                resumed: result.resumed,
+            });
+        }
+        catch (err) {
+            console.error('[ThreadlineEndpoints] Message receive error:', err);
+            res.status(500).json(makeError(ERROR_CODES.TL_INTERNAL_ERROR, 'Internal error processing message', true, 5));
+        }
+    });
+    // ── Messages: Thread (AUTHENTICATED) ───────────────────────────
+    router.get('/threadline/messages/thread/:id', threadlineAuth, (_req, res) => {
+        // Thread retrieval — returns messages in this thread
+        // For now, this returns a placeholder. Full implementation depends on
+        // MessageStore integration which is outside Phase 3 scope.
+        const threadId = _req.params.id;
+        res.json({
+            threadId,
+            messages: [],
+            messageCount: 0,
+        });
+    });
+    // ── Blobs: Fetch (AUTHENTICATED) ──────────────────────────────
+    router.get('/threadline/blobs/:id', threadlineAuth, (_req, res) => {
+        // Blob retrieval — returns binary content for a blob ID.
+        // Placeholder for Phase 3. Full blob storage is a future phase.
+        const blobId = _req.params.id;
+        res.status(404).json(makeError(ERROR_CODES.TL_NOT_FOUND, `Blob ${blobId} not found`, false));
+    });
+    return router;
+}
+// ── Helpers ──────────────────────────────────────────────────────────
+function makeError(code, message, retryable, retryAfterSeconds) {
+    return {
+        error: {
+            code,
+            message,
+            retryable,
+            ...(retryAfterSeconds !== undefined && { retryAfterSeconds }),
+        },
+    };
+}
+function isHex(value, expectedLength) {
+    return typeof value === 'string' &&
+        value.length === expectedLength &&
+        /^[0-9a-f]+$/i.test(value);
+}
+/**
+ * Get an agent's identity public key from the relay token store.
+ * This is stored when the handshake completes.
+ */
+function getAgentIdentityPub(handshakeManager, agentName) {
+    // Access the stored identity pub through the handshake manager.
+    // The relay tokens store includes theirIdentityPub.
+    // We expose this through a method on HandshakeManager.
+    return handshakeManager.relayTokens?.[agentName]?.theirIdentityPub ?? null;
+}
+//# sourceMappingURL=ThreadlineEndpoints.js.map

package/dist/threadline/ThreadlineEndpoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ThreadlineEndpoints.js","sourceRoot":"","sources":["../../src/threadline/ThreadlineEndpoints.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,MAAM,MAAM,aAAa,CAAC;AAIjC,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAoB/C,wEAAwE;AAExE,MAAM,WAAW,GAAG;IAClB,cAAc,EAAE,gBAAgB;IAChC,eAAe,EAAE,iBAAiB;IAClC,kBAAkB,EAAE,oBAAoB;IACxC,mBAAmB,EAAE,qBAAqB;IAC1C,eAAe,EAAE,iBAAiB;IAClC,YAAY,EAAE,cAAc;IAC5B,iBAAiB,EAAE,mBAAmB;IACtC,kBAAkB,EAAE,oBAAoB;IACxC,oBAAoB,EAAE,sBAAsB;CACpC,CAAC;AAEX,MAAM,YAAY,GAAG,0CAA0C,CAAC;AAChE,MAAM,mBAAmB,GAAG,MAAM,CAAC,CAAC,aAAa;AAEjD,wEAAwE;AAExE,MAAM,oBAAoB;IAChB,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3B,UAAU,CAAiC;IAEnD;QACE,yBAAyB;QACzB,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE;YACjC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,0CAA0C;QACjE,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK;YAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,KAAa;QACjB,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACjC,CAAC;CACF;AAED,wEAAwE;AAExE,MAAM,UAAU,sBAAsB,CACpC,gBAAkC,EAClC,gBAAyC,EACzC,MAAiC;IAEjC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,UAAU,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAE9C,mEAAmE;IACnE,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAC7E,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;QAC5C,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAElE,MAAM,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QAChE,GAAG,CAAC,IAAI,CAAC;YACP,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,YAAY;YACtB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK,EAAE,MAAM,CAAC,UAAU;YACxB,WAAW,EAAE,gBAAgB,CAAC,oBAAoB,EAAE;YACpD,YAAY,EAAE,gBAAgB,CAAC,gBAAgB,EAAE,CAAC,MAAM;YACxD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAElE,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACzE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YAEtB,mBAAmB;YACnB,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACnF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAC5B,WAAW,CAAC,kBAAkB,EAC9B,kEAAkE,EAClE,KAAK,CACN,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,wBAAwB;YACxB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC;gBAClE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAC5B,WAAW,CAAC,kBAAkB,EAC9B,iEAAiE,EACjE,KAAK,CACN,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAiB;gBAC1B,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;aAC1C,CAAC;YAEF,mFAAmF;YACnF,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;gBAC3D,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;oBACtB,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;oBACrE,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CACnC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,mBAAmB,EACrG,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,EACrC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CACvD,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBAED,GAAG,CAAC,IAAI,CAAC;oBACP,IAAI,EAAE,aAAa;oBACnB,KAAK,EAAE,MAAM,CAAC,UAAU;oBACxB,MAAM,EAAE,QAAQ;iBACjB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,sCAAsC;YACtC,MAAM,MAAM,GAAG,gBAAgB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAEnD,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;gBACtB,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBACrE,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CACnC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,mBAAmB,EACrG,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,EACrC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CACvD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,gBAAgB;gBACtB,GAAG,MAAM,CAAC,OAAO;aAClB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE,GAAG,CAAC,CAAC;YACnE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAC5B,WAAW,CAAC,iBAAiB,EAC7B,iCAAiC,EACjC,IAAI,EACJ,CAAC,CACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAElE,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC3E,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YAEtB,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACpD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAC5B,WAAW,CAAC,kBAAkB,EAC9B,mDAAmD,EACnD,KAAK,CACN,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAmB;gBAC9B,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;aAC1C,CAAC;YAEF,MAAM,MAAM,GAAG,gBAAgB,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YAEvD,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;gBACtB,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;oBAC9C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBACjE,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CACnC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,mBAAmB,EACrG,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,EAC3E,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CACvD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,aAAa;gBACnB,KAAK,EAAE,MAAM,CAAC,UAAU;gBACxB,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,gDAAgD,EAAE,GAAG,CAAC,CAAC;YACrE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAC5B,WAAW,CAAC,iBAAiB,EAC7B,iCAAiC,EACjC,IAAI,EACJ,CAAC,CACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAElE,MAAM,cAAc,GAAG,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;QAC/E,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;QAC7C,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAC5B,WAAW,CAAC,eAAe,EAC3B,wDAAwD,EACxD,KAAK,CACN,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAuB,CAAC;QAC1E,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAuB,CAAC;QACtE,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,wBAAwB,CAAuB,CAAC;QAC9E,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,wBAAwB,CAAuB,CAAC;QAE9E,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;YACrD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAC5B,WAAW,CAAC,eAAe,EAC3B,kHAAkH,EAClH,KAAK,CACN,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,uBAAuB;QACvB,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAC5B,WAAW,CAAC,cAAc,EAC1B,+BAA+B,EAC/B,KAAK,CACN,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,+BAA+B;QAC/B,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QAC3C,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,mBAAmB,EAAE,CAAC;YACrE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAC5B,WAAW,CAAC,oBAAoB,EAChC,qCAAqC,EACrC,IAAI,EACJ,CAAC,CACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,8BAA8B;QAC9B,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAC5B,WAAW,CAAC,kBAAkB,EAC9B,sCAAsC,EACtC,KAAK,CACN,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,sFAAsF;QACtF,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;aACzC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;aACtC,MAAM,EAAE,CAAC;QACZ,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,IAAI,KAAK,KAAK,KAAK,SAAS,IAAI,EAAE,OAAO,CAAC;YAC5E,QAAQ;SACT,CAAC,CAAC;QAEH,6CAA6C;QAC7C,uDAAuD;QACvD,oEAAoE;QACpE,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,mBAAmB,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;YACrE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAC5B,WAAW,CAAC,cAAc,EAC1B,wBAAwB,EACxB,KAAK,CACN,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,CACpB,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,EAC/B,UAAU,EACV,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAC9B,CAAC;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAC5B,WAAW,CAAC,cAAc,EAC1B,+BAA+B,EAC/B,KAAK,CACN,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAC5B,WAAW,CAAC,cAAc,EAC1B,8BAA8B,EAC9B,KAAK,CACN,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;IAEF,kEAAkE;IAElE,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,cAAc,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAChG,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YAEtB,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC3B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAC5B,WAAW,CAAC,kBAAkB,EAC9B,iCAAiC,EACjC,KAAK,CACN,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAC5B,WAAW,CAAC,iBAAiB,EAC7B,iCAAiC,EACjC,IAAI,EACJ,CAAC,CACF,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,iDAAiD;YACjD,2DAA2D;YAC3D,MAAM,QAAQ,GAAG;gBACf,aAAa,EAAE,CAAU;gBACzB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI;oBAC3B,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAW;oBACzD,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAW;oBAClD,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,wBAAwB,CAAW;iBAC3D;gBACD,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI;oBACzB,MAAM,EAAE,SAAkB;oBAC1B,QAAQ,EAAE,CAAC;oBACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC;aACF,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;YAErE,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAC5B,WAAW,CAAC,iBAAiB,EAC7B,MAAM,CAAC,KAAK,EACZ,IAAI,EACJ,CAAC,CACF,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,GAAG,CAAC,IAAI,CAAC;gBACP,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE,GAAG,CAAC,CAAC;YACnE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAC5B,WAAW,CAAC,iBAAiB,EAC7B,mCAAmC,EACnC,IAAI,EACJ,CAAC,CACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAElE,MAAM,CAAC,GAAG,CAAC,iCAAiC,EAAE,cAAc,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QAC7F,qDAAqD;QACrD,sEAAsE;QACtE,2DAA2D;QAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC;YACP,QAAQ;YACR,QAAQ,EAAE,EAAE;YACZ,YAAY,EAAE,CAAC;SAChB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,iEAAiE;IAEjE,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,cAAc,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QACnF,yDAAyD;QACzD,gEAAgE;QAChE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAC5B,WAAW,CAAC,YAAY,EACxB,QAAQ,MAAM,YAAY,EAC1B,KAAK,CACN,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wEAAwE;AAExE,SAAS,SAAS,CAChB,IAAY,EACZ,OAAe,EACf,SAAkB,EAClB,iBAA0B;IAE1B,OAAO;QACL,KAAK,EAAE;YACL,IAAI;YACJ,OAAO;YACP,SAAS;YACT,GAAG,CAAC,iBAAiB,KAAK,SAAS,IAAI,EAAE,iBAAiB,EAAE,CAAC;SAC9D;KACF,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,KAAa,EAAE,cAAsB;IAClD,OAAO,OAAO,KAAK,KAAK,QAAQ;QAC9B,KAAK,CAAC,MAAM,KAAK,cAAc;QAC/B,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,gBAAkC,EAAE,SAAiB;IAChF,gEAAgE;IAChE,oDAAoD;IACpD,uDAAuD;IACvD,OAAQ,gBAAwB,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,EAAE,gBAAgB,IAAI,IAAI,CAAC;AACtF,CAAC"}

package/dist/threadline/ThreadlineMCPServer.d.ts

@@ -0,0 +1,165 @@
+/**
+ * ThreadlineMCPServer — MCP Tool Server for Threadline Protocol.
+ *
+ * Exposes Threadline capabilities as up to 9 MCP tools:
+ *   - threadline_discover         — Find Threadline-capable agents
+ *   - threadline_send             — Send a message (with optional reply wait)
+ *   - threadline_history          — Get conversation history (participant-only)
+ *   - threadline_agents           — List known agents and status
+ *   - threadline_delete           — Delete a thread permanently
+ *   - threadline_registry_search  — Search the persistent agent registry (if registry available)
+ *   - threadline_registry_update  — Update your registry listing (if registry available)
+ *   - threadline_registry_status  — Check your registration status (if registry available)
+ *   - threadline_registry_get     — Look up an agent by ID (if registry available)
+ *
+ * Transports:
+ *   - stdio (default, local)  — No auth required
+ *   - SSE (network)           — Bearer token auth
+ *   - HTTP streamable (network) — Bearer token auth
+ *
+ * Part of Threadline Protocol Phase 6B (Network Interop).
+ */
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { AgentDiscovery } from './AgentDiscovery.js';
+import type { ThreadResumeMap } from './ThreadResumeMap.js';
+import type { AgentTrustManager } from './AgentTrustManager.js';
+import type { MCPAuth, MCPTokenInfo } from './MCPAuth.js';
+export interface ThreadlineMCPServerConfig {
+    /** Name of this agent */
+    agentName: string;
+    /** Threadline protocol version */
+    protocolVersion: string;
+    /** Transport mode */
+    transport: 'stdio' | 'sse' | 'streamable-http';
+    /** Port for network transports (SSE, streamable-http) */
+    port?: number;
+    /** Whether this is a network transport (requires auth) */
+    requireAuth: boolean;
+}
+/** Registry REST API client for registry tools */
+export interface RegistryClient {
+    /** Make an authenticated REST call to the registry. Returns status + parsed JSON. */
+    fetch(path: string, options?: {
+        method?: string;
+        body?: unknown;
+    }): Promise<{
+        status: number;
+        data: unknown;
+    }>;
+    /** Whether the registry client has a valid token */
+    hasToken(): boolean;
+}
+export interface ThreadlineMCPDeps {
+    /** Agent discovery service */
+    discovery: AgentDiscovery;
+    /** Thread resume map for thread state */
+    threadResumeMap: ThreadResumeMap;
+    /** Agent trust manager for trust levels */
+    trustManager: AgentTrustManager;
+    /** MCP auth for network transports (null for stdio) */
+    auth: MCPAuth | null;
+    /** Message sender function — sends a message and optionally waits for reply */
+    sendMessage: (params: SendMessageParams) => Promise<SendMessageResult>;
+    /** Thread history retriever */
+    getThreadHistory: (threadId: string, limit: number, before?: string) => Promise<ThreadHistoryResult>;
+    /** Registry REST API client (null if registry not available) */
+    registry: RegistryClient | null;
+    /** State directory (.instar path) for config access */
+    stateDir?: string;
+}
+export interface SendMessageParams {
+    targetAgent: string;
+    threadId?: string;
+    message: string;
+    waitForReply: boolean;
+    timeoutSeconds: number;
+}
+export interface SendMessageResult {
+    success: boolean;
+    threadId: string;
+    messageId: string;
+    reply?: string;
+    replyFrom?: string;
+    error?: string;
+}
+export interface ThreadHistoryMessage {
+    id: string;
+    from: string;
+    body: string;
+    timestamp: string;
+    threadId: string;
+}
+export interface ThreadHistoryResult {
+    threadId: string;
+    messages: ThreadHistoryMessage[];
+    totalCount: number;
+    hasMore: boolean;
+}
+/**
+ * Tracks the authenticated identity for the current request.
+ * For stdio: always authorized (local operator).
+ * For network: set by bearer token validation.
+ */
+interface RequestContext {
+    /** Whether the request is authenticated */
+    authenticated: boolean;
+    /** Token info if authenticated via bearer token */
+    tokenInfo?: MCPTokenInfo;
+    /** Whether this is a local (stdio) connection */
+    isLocal: boolean;
+}
+export declare class ThreadlineMCPServer {
+    private readonly mcpServer;
+    private readonly config;
+    private readonly deps;
+    private requestContext;
+    private started;
+    constructor(config: ThreadlineMCPServerConfig, deps: ThreadlineMCPDeps);
+    /**
+     * Start the MCP server with the configured transport.
+     * For stdio: connects to process stdin/stdout.
+     * For network transports: returns the McpServer for external wiring.
+     */
+    start(): Promise<void>;
+    /**
+     * Stop the MCP server.
+     */
+    stop(): Promise<void>;
+    /**
+     * Get the underlying McpServer for external transport wiring.
+     * Used by SSE/streamable-http integrations.
+     */
+    getServer(): McpServer;
+    /**
+     * Set the auth context for the current request (network transports).
+     * Called by the HTTP middleware before tool handlers execute.
+     */
+    setRequestContext(ctx: RequestContext): void;
+    /**
+     * Validate a bearer token and set the request context.
+     * Returns true if the token is valid.
+     */
+    authenticateBearer(rawToken: string): boolean;
+    private checkAuth;
+    private registerTools;
+    private registerDiscoverTool;
+    private registerSendTool;
+    private registerHistoryTool;
+    private registerAgentsTool;
+    private registerDeleteTool;
+    private registerTrustTool;
+    private registerRelayTool;
+    /** Resolve the .instar/config.json path from the state directory */
+    private resolveConfigPath;
+    /** Read and parse config.json */
+    private readConfig;
+    /** Write config.json atomically */
+    private writeConfig;
+    private frameRegistryEntry;
+    private registerRegistrySearchTool;
+    private registerRegistryUpdateTool;
+    private registerRegistryStatusTool;
+    private registerRegistryGetTool;
+}
+export {};
+//# sourceMappingURL=ThreadlineMCPServer.d.ts.map

package/dist/threadline/ThreadlineMCPServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ThreadlineMCPServer.d.ts","sourceRoot":"","sources":["../../src/threadline/ThreadlineMCPServer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAMpE,OAAO,KAAK,EAAE,cAAc,EAAuB,MAAM,qBAAqB,CAAC;AAC/E,OAAO,KAAK,EAAE,eAAe,EAAqB,MAAM,sBAAsB,CAAC;AAC/E,OAAO,KAAK,EAAE,iBAAiB,EAAmB,MAAM,wBAAwB,CAAC;AACjF,OAAO,KAAK,EAAE,OAAO,EAAE,YAAY,EAAiB,MAAM,cAAc,CAAC;AAIzE,MAAM,WAAW,yBAAyB;IACxC,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,kCAAkC;IAClC,eAAe,EAAE,MAAM,CAAC;IACxB,qBAAqB;IACrB,SAAS,EAAE,OAAO,GAAG,KAAK,GAAG,iBAAiB,CAAC;IAC/C,yDAAyD;IACzD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,kDAAkD;AAClD,MAAM,WAAW,cAAc;IAC7B,qFAAqF;IACrF,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC/G,oDAAoD;IACpD,QAAQ,IAAI,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,8BAA8B;IAC9B,SAAS,EAAE,cAAc,CAAC;IAC1B,yCAAyC;IACzC,eAAe,EAAE,eAAe,CAAC;IACjC,2CAA2C;IAC3C,YAAY,EAAE,iBAAiB,CAAC;IAChC,uDAAuD;IACvD,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IACrB,+EAA+E;IAC/E,WAAW,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACvE,+BAA+B;IAC/B,gBAAgB,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACrG,gEAAgE;IAChE,QAAQ,EAAE,cAAc,GAAG,IAAI,CAAC;IAChC,uDAAuD;IACvD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,OAAO,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,oBAAoB,EAAE,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;CAClB;AAgCD;;;;GAIG;AACH,UAAU,cAAc;IACtB,2CAA2C;IAC3C,aAAa,EAAE,OAAO,CAAC;IACvB,mDAAmD;IACnD,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB,iDAAiD;IACjD,OAAO,EAAE,OAAO,CAAC;CAClB;AAID,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4B;IACnD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAoB;IACzC,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,OAAO,CAAS;gBAEZ,MAAM,EAAE,yBAAyB,EAAE,IAAI,EAAE,iBAAiB;IA2BtE;;;;OAIG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAgB5B;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAM3B;;;OAGG;IACH,SAAS,IAAI,SAAS;IAItB;;;OAGG;IACH,iBAAiB,CAAC,GAAG,EAAE,cAAc,GAAG,IAAI;IAI5C;;;OAGG;IACH,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAmB7C,OAAO,CAAC,SAAS;IAqBjB,OAAO,CAAC,aAAa;IAoBrB,OAAO,CAAC,oBAAoB;IAkE5B,OAAO,CAAC,gBAAgB;IAoExB,OAAO,CAAC,mBAAmB;IAsE3B,OAAO,CAAC,kBAAkB;IAoE1B,OAAO,CAAC,kBAAkB;IAsD1B,OAAO,CAAC,iBAAiB;IA2LzB,OAAO,CAAC,iBAAiB;IAmJzB,oEAAoE;IACpE,OAAO,CAAC,iBAAiB;IAczB,iCAAiC;IACjC,OAAO,CAAC,UAAU;IASlB,mCAAmC;IACnC,OAAO,CAAC,WAAW;IAQnB,OAAO,CAAC,kBAAkB;IAyB1B,OAAO,CAAC,0BAA0B;IAmElC,OAAO,CAAC,0BAA0B;IA0DlC,OAAO,CAAC,0BAA0B;IAmClC,OAAO,CAAC,uBAAuB;CA+ChC"}