@introspection-sdk/introspection-browser 0.5.4 → 0.5.6

package/.turbo/turbo-build.log

@@ -1,4 +1,4 @@
 
-> @introspection-sdk/introspection-browser@0.5.4 build /home/runner/work/introspection-js-sdk/introspection-js-sdk/packages/introspection-browser
+> @introspection-sdk/introspection-browser@0.5.6 build /home/runner/work/introspection-js-sdk/introspection-js-sdk/packages/introspection-browser
 > tsc
 

package/README.md

@@ -38,32 +38,42 @@ single-page app **create and stream Introspection tasks directly from the
 browser, with no API key in JavaScript**. Authentication is the standard B2B2C
 flow (see the [`sample-auth`](../../examples/apps/sample-auth) example):
 
+**The browser talks only to the Data Plane.** Runtime resolution is a Control
+Plane call and stays on your backend, so the CP never has to serve CORS to
+customer web origins.
+
 1. The app's **own backend ("broker")** mints an Introspection access token —
    via RFC 8693 token-exchange of the partner IdP token, a PKCE
    `authorization_code`, or `client_credentials`. The IdP secret never leaves
-   the backend.
-2. `connect()` redeems that token at the Data Plane
-   (`POST /v1/oauth/exchange`) for the HttpOnly `intro_dp_session` cookie.
-3. Every subsequent call rides that cookie (`credentials: "include"`). When the
-   session expires, the client transparently re-mints it once on a `401`.
+   the backend. The backend returns **`{ token, runtimeId, dpUrl }`**: it
+   resolves the runtime id server-side (e.g. with the Node SDK's
+   `client.runtimes.resolveByName("support-agent")`) and supplies the Data
+   Plane URL, so the SPA needs no Introspection config of its own.
+2. `client.connect()` redeems the token at the **Data Plane**
+   `POST /v1/oauth/exchange` for the HttpOnly `intro_dp_session` cookie.
+3. `client.tasks.start({ runtime_id })` and friends ride that cookie against
+   the Data Plane for tasks, files, conversations, and shares.
 
 ```typescript
 import { IntrospectionApiClient } from "@introspection-sdk/introspection-browser/api";
 
+// Your backend returns { token, runtimeId, dpUrl }: it mints the access token,
+// resolves the runtime id, and supplies the DP URL — so the browser never
+// calls the CP and carries no Introspection config of its own.
+const { token, runtimeId, dpUrl } = await fetch(
+  "/api/introspection/session",
+).then((r) => r.json());
+
 const client = new IntrospectionApiClient({
-  dpUrl: "https://dp.us.introspection.dev",
-  projectId: "proj_…",
-  // your backend returns a fresh Introspection access token
-  getToken: () => fetch("/api/introspection/token").then((r) => r.text()),
+  dpUrl,
+  getToken: () => token,
 });
 
-await client.connect(); // → intro_dp_session cookie
+await client.connect(); // -> intro_dp_session cookie
 
 const run = await client.tasks.start({
   prompt: "Summarize my latest order",
-  agent_name: "support-agent", // or runtime_id: "rt_…"
-  identity: { user_id: "u_42" }, // folded into metadata.identity
-  visibility: "identity", // sharing scope; defaults by credential
+  runtime_id: runtimeId,
   idle_timeout_seconds: 120, // idle window before the sandbox is torn down
 });
 
@@ -76,26 +86,21 @@ for await (const ev of run.stream()) {
 `list` / `update` / `delete` / `archive` / `unarchive`) plus per-run streaming
 (`run.stream()`, `run.text()`, `run.cancel()`).
 
-Both `create` and `start` accept two optional task controls:
-
-- **`visibility`** (`"identity" | "member" | "project"`) — the task's minimum
-  sharing scope. Defaults to `"identity"` when the credential carries an
-  identity claim, else `"project"`. The owning `identity_key` is always derived
-  from the session JWT, never the request body.
-- **`idle_timeout_seconds`** (`number`) — overrides the interactive idle window
-  before the sandbox is torn down. `0` tears it down as soon as it's
-  provisioned; omit to use the deployment default. Clamped to the task timeout.
+`create` and `start` accept **`idle_timeout_seconds`** (`number`) to override
+the interactive idle window before the sandbox is torn down. `0` tears it down
+as soon as it's provisioned; omit to use the deployment default. Clamped to the
+task timeout. When no `runtime_id` is supplied, pass `agent_name` to select a
+named recipe agent instead.
 
 ## Files and conversations
 
-The same identity session also reaches `/v1/files` and (read-only)
-`/v1/conversations` — no extra credential, just the cookie minted by
-`connect()`:
+The same cookie session also reaches `/v1/files` and (read-only)
+`/v1/conversations` on the Data Plane:
 
 ```typescript
 // Files — CRUD + upload/download, all identity-scoped
 await client.files.upload({ file: new Blob(["hi"]), name: "hi.txt" });
-const page = await client.files.list({ visibility: "identity" });
+const page = await client.files.list();
 const bytes = await client.files.download(page.records[0].id);
 
 // Conversations — read-only projection over the telemetry store
@@ -114,6 +119,6 @@ plus `files.versions`). `client.conversations` mirrors `ConversationsApi`
 helpers return a `Paginator` — `await` it for the first page or `for await` it
 to auto-page.
 
-> **CORS:** the Data Plane authorizes browser origins against its configured
-> allowlist (`CORS_ORIGINS`). A new SPA origin must be present there for the
-> cross-origin cookie exchange and task/file/conversation calls to succeed.
+> **CORS:** the browser only calls the Data Plane, so just the selected Data
+> Plane needs to allow the SPA origin. The Control Plane never receives browser
+> requests — runtime resolution happens on your backend.

package/dist/api/client.d.ts

@@ -2,28 +2,35 @@
  * Browser-side Introspection API client.
  *
  * Lets a single-page app create and stream Introspection tasks directly
- * from the browser, with no API key in JavaScript. The auth boundary:
+ * from the browser, with no API key in JavaScript. The browser talks only
+ * to the Data Plane — runtime resolution and any other Control Plane work
+ * stays on the app's backend, so the CP never needs to serve CORS to
+ * customer web origins. The auth boundary:
  *
- *   1. The SPA's own backend ("broker") mints an Introspection access
- *      token — via RFC 8693 token-exchange of the partner IdP token, a
- *      PKCE `authorization_code`, or `client_credentials`. The IdP
- *      secret never leaves the backend. The SPA fetches that token
- *      through the `getToken` callback.
+ *   1. The SPA's own backend ("broker") mints a short-lived Introspection
+ *      access token — via RFC 8693 token-exchange of the partner IdP
+ *      token, a PKCE `authorization_code`, or `client_credentials` (the
+ *      IdP secret never leaves the backend) — and, when a specific runtime
+ *      is needed, resolves its `runtime_id` server-side. The SPA fetches
+ *      the token through the `getToken` callback.
  *   2. `connect()` redeems the token at the DP `POST /v1/oauth/exchange`
  *      for the HttpOnly `intro_dp_session` cookie.
  *   3. Every subsequent call rides that cookie (`credentials: "include"`)
- *      — `client.tasks.start(...)`, `.get(...)`, run streaming, etc.
+ *      — `client.tasks.start({ runtime_id })`, `.get(...)`, run streaming,
+ *      etc.
  *
  * When the session cookie expires, an in-flight request gets a 401, and
  * the client transparently re-runs `getToken` + the DP exchange once
  * before retrying.
  */
+import { ConversationsClient, FilesClient, SharesClient } from "@introspection-sdk/http";
 import { TasksClient } from "./tasks.js";
-import { FilesClient } from "./files.js";
-import { ConversationsClient } from "./conversations.js";
-import { SharesClient } from "./shares.js";
 export interface IntrospectionApiClientOptions {
-    /** Data Plane REST base URL (e.g. `https://dp.us.introspection.dev`). */
+    /**
+     * Data Plane REST base URL for the cookie-session APIs (`connect()` and
+     * `client.tasks` / `client.files` / `client.conversations` /
+     * `client.shares`). Required — the browser only talks to the DP.
+     */
     dpUrl: string;
     /**
      * Returns a fresh Introspection access token from the app's broker
@@ -40,16 +47,17 @@ export interface IntrospectionApiClientOptions {
 }
 export declare class IntrospectionApiClient {
     private readonly opts;
+    private readonly fetchImpl;
+    private readonly cookieClients;
+    constructor(opts: IntrospectionApiClientOptions);
     /** `/v1/tasks` operations bound to the DP session cookie. */
-    readonly tasks: TasksClient;
+    get tasks(): TasksClient;
     /** `/v1/files` operations bound to the DP session cookie. */
-    readonly files: FilesClient;
+    get files(): FilesClient;
     /** Read-only `/v1/conversations` projection bound to the session cookie. */
-    readonly conversations: ConversationsClient;
+    get conversations(): ConversationsClient;
     /** `/v1/shares` read-sharing grants bound to the session cookie. */
-    readonly shares: SharesClient;
-    private readonly fetchImpl;
-    constructor(opts: IntrospectionApiClientOptions);
+    get shares(): SharesClient;
     /**
      * Mint a token via `getToken` and redeem it at the DP for the
      * `intro_dp_session` cookie. Call once before issuing task requests.

package/dist/api/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,WAAW,6BAA6B;IAC5C,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,QAAQ,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,2DAA2D;IAC3D,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,kDAAkD;IAClD,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC5C;AAED,qBAAa,sBAAsB;IAYrB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAXjC,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,4EAA4E;IAC5E,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC;IAC5C,oEAAoE;IACpE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAE9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBAEZ,IAAI,EAAE,6BAA6B;IAmBhE;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;YAIhB,QAAQ;IAiBtB,0EAA0E;YAC5D,UAAU;CAQzB"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAGH,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,YAAY,EACb,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AASzC,MAAM,WAAW,6BAA6B;IAC5C;;;;OAIG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,QAAQ,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,2DAA2D;IAC3D,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,kDAAkD;IAClD,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC5C;AAED,qBAAa,sBAAsB;IAIrB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;gBAEjB,IAAI,EAAE,6BAA6B;IAwBhE,6DAA6D;IAC7D,IAAI,KAAK,IAAI,WAAW,CAEvB;IAED,6DAA6D;IAC7D,IAAI,KAAK,IAAI,WAAW,CAEvB;IAED,4EAA4E;IAC5E,IAAI,aAAa,IAAI,mBAAmB,CAEvC;IAED,oEAAoE;IACpE,IAAI,MAAM,IAAI,YAAY,CAEzB;IAED;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;YAIhB,QAAQ;IAiBtB,0EAA0E;YAC5D,UAAU;CAQzB"}

package/dist/api/client.js

@@ -2,54 +2,71 @@
  * Browser-side Introspection API client.
  *
  * Lets a single-page app create and stream Introspection tasks directly
- * from the browser, with no API key in JavaScript. The auth boundary:
+ * from the browser, with no API key in JavaScript. The browser talks only
+ * to the Data Plane — runtime resolution and any other Control Plane work
+ * stays on the app's backend, so the CP never needs to serve CORS to
+ * customer web origins. The auth boundary:
  *
- *   1. The SPA's own backend ("broker") mints an Introspection access
- *      token — via RFC 8693 token-exchange of the partner IdP token, a
- *      PKCE `authorization_code`, or `client_credentials`. The IdP
- *      secret never leaves the backend. The SPA fetches that token
- *      through the `getToken` callback.
+ *   1. The SPA's own backend ("broker") mints a short-lived Introspection
+ *      access token — via RFC 8693 token-exchange of the partner IdP
+ *      token, a PKCE `authorization_code`, or `client_credentials` (the
+ *      IdP secret never leaves the backend) — and, when a specific runtime
+ *      is needed, resolves its `runtime_id` server-side. The SPA fetches
+ *      the token through the `getToken` callback.
  *   2. `connect()` redeems the token at the DP `POST /v1/oauth/exchange`
  *      for the HttpOnly `intro_dp_session` cookie.
  *   3. Every subsequent call rides that cookie (`credentials: "include"`)
- *      — `client.tasks.start(...)`, `.get(...)`, run streaming, etc.
+ *      — `client.tasks.start({ runtime_id })`, `.get(...)`, run streaming,
+ *      etc.
  *
  * When the session cookie expires, an in-flight request gets a 401, and
  * the client transparently re-runs `getToken` + the DP exchange once
  * before retrying.
  */
 import { BrowserHttpClient, stripTrailingSlash, toApiError } from "./http.js";
+import { ConversationsClient, FilesClient, SharesClient, } from "@introspection-sdk/http";
 import { TasksClient } from "./tasks.js";
-import { FilesClient } from "./files.js";
-import { ConversationsClient } from "./conversations.js";
-import { SharesClient } from "./shares.js";
 export class IntrospectionApiClient {
     opts;
-    /** `/v1/tasks` operations bound to the DP session cookie. */
-    tasks;
-    /** `/v1/files` operations bound to the DP session cookie. */
-    files;
-    /** Read-only `/v1/conversations` projection bound to the session cookie. */
-    conversations;
-    /** `/v1/shares` read-sharing grants bound to the session cookie. */
-    shares;
     fetchImpl;
+    cookieClients;
     constructor(opts) {
         this.opts = opts;
         this.fetchImpl = opts.fetch ?? globalThis.fetch;
         if (!this.fetchImpl) {
             throw new Error("global fetch is unavailable; pass `fetch` or run in a modern browser");
         }
+        if (!opts.dpUrl) {
+            throw new Error("IntrospectionApiClient requires a dpUrl");
+        }
         const http = new BrowserHttpClient({
             apiUrl: opts.dpUrl,
             additionalHeaders: opts.additionalHeaders,
             fetch: opts.fetch,
             onUnauthorized: () => this.reexchange(),
         });
-        this.tasks = new TasksClient(http);
-        this.files = new FilesClient(http);
-        this.conversations = new ConversationsClient(http);
-        this.shares = new SharesClient(http);
+        this.cookieClients = {
+            tasks: new TasksClient(http),
+            files: new FilesClient(http),
+            conversations: new ConversationsClient(http),
+            shares: new SharesClient(http),
+        };
+    }
+    /** `/v1/tasks` operations bound to the DP session cookie. */
+    get tasks() {
+        return this.cookieClients.tasks;
+    }
+    /** `/v1/files` operations bound to the DP session cookie. */
+    get files() {
+        return this.cookieClients.files;
+    }
+    /** Read-only `/v1/conversations` projection bound to the session cookie. */
+    get conversations() {
+        return this.cookieClients.conversations;
+    }
+    /** `/v1/shares` read-sharing grants bound to the session cookie. */
+    get shares() {
+        return this.cookieClients.shares;
     }
     /**
      * Mint a token via `getToken` and redeem it at the DP for the

package/dist/api/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC9E,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAmB3C,MAAM,OAAO,sBAAsB;IAYJ;IAX7B,6DAA6D;IACpD,KAAK,CAAc;IAC5B,6DAA6D;IACpD,KAAK,CAAc;IAC5B,4EAA4E;IACnE,aAAa,CAAsB;IAC5C,oEAAoE;IAC3D,MAAM,CAAe;IAEb,SAAS,CAAe;IAEzC,YAA6B,IAAmC;QAAnC,SAAI,GAAJ,IAAI,CAA+B;QAC9D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,sEAAsE,CACvE,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,iBAAiB,CAAC;YACjC,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE;SACxC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,aAAa,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAC9B,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAC1D;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC;aACvC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;YAC/B,WAAW,EAAE,SAAS;SACvB,CACF,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC;IAED,0EAA0E;IAClE,KAAK,CAAC,UAAU;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC9E,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,YAAY,GACb,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AA8BzC,MAAM,OAAO,sBAAsB;IAIJ;IAHZ,SAAS,CAAe;IACxB,aAAa,CAAgB;IAE9C,YAA6B,IAAmC;QAAnC,SAAI,GAAJ,IAAI,CAA+B;QAC9D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,sEAAsE,CACvE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,iBAAiB,CAAC;YACjC,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE;SACxC,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,GAAG;YACnB,KAAK,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC;YAC5B,KAAK,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC;YAC5B,aAAa,EAAE,IAAI,mBAAmB,CAAC,IAAI,CAAC;YAC5C,MAAM,EAAE,IAAI,YAAY,CAAC,IAAI,CAAC;SAC/B,CAAC;IACJ,CAAC;IAED,6DAA6D;IAC7D,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;IAClC,CAAC;IAED,6DAA6D;IAC7D,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;IAClC,CAAC;IAED,4EAA4E;IAC5E,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC;IAC1C,CAAC;IAED,oEAAoE;IACpE,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;IACnC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAC9B,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAC1D;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC;aACvC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;YAC/B,WAAW,EAAE,SAAS;SACvB,CACF,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC;IAED,0EAA0E;IAClE,KAAK,CAAC,UAAU;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF"}

package/dist/api/index.d.ts

@@ -6,34 +6,40 @@
  * Separate from the package's default telemetry export so apps only pull
  * in what they use.
  *
+ * The browser talks only to the Data Plane. Resolving a runtime by name
+ * (a Control Plane call) stays on your backend, which hands the browser a
+ * short-lived access token plus the resolved `runtime_id`.
+ *
  * @example
  * ```typescript
  * import { IntrospectionApiClient } from "@introspection-sdk/introspection-browser/api";
  *
+ * // Your backend returns { token, runtimeId, dpUrl } — it mints the access
+ * // token, resolves the runtime id, and surfaces the DP URL (e.g. from the
+ * // Node SDK's serviceAccountToken response), so the browser never calls the CP.
+ * const { token, runtimeId, dpUrl } = await fetch(
+ *   "/api/introspection/session",
+ * ).then((r) => r.json());
+ *
  * const client = new IntrospectionApiClient({
- *   dpUrl: "https://dp.us.introspection.dev",
- *   // your backend mints the Introspection access token (the session's
- *   // project is derived from its claims — no projectId option needed)
- *   getToken: () => fetch("/api/introspection/token").then((r) => r.text()),
+ *   dpUrl,
+ *   getToken: () => token,
  * });
  *
- * await client.connect(); // → intro_dp_session cookie
+ * await client.connect(); // -> intro_dp_session cookie
  * const run = await client.tasks.start({
  *   prompt: "Summarize my latest order",
- *   agent_name: "support-agent",
- *   identity: { user_id: "u_42" },
+ *   runtime_id: runtimeId,
  * });
  * for await (const ev of run.stream()) console.log(ev.event, ev.data);
  * ```
  */
 export { IntrospectionApiClient, type IntrospectionApiClientOptions, } from "./client.js";
 export { TasksClient, TaskRunsClient, RunHandle, type CreateTaskParams, type StartTaskParams, } from "./tasks.js";
-export { FilesClient, FileVersionsClient, type FileUploadBody, } from "./files.js";
-export { ConversationsClient, ConversationItemsClient, } from "./conversations.js";
-export { SharesClient } from "./shares.js";
+export { ConversationItemsClient, ConversationsClient, FileVersionsClient, FilesClient, SharesClient, type FileUploadBody, } from "@introspection-sdk/http";
 export { BrowserHttpClient, type BrowserHttpConfig } from "./http.js";
 export { parseSse } from "./sse.js";
 export { Paginator, cursorPaginate, type PageSource, } from "@introspection-sdk/http";
 export type { Task, TaskRun, TaskStatus, TaskCreateResponse, TaskListParams, TaskUpdateParams, TaskRunCreateParams, TaskCancelResponse, RunIdentityInput, Paginated, SseEvent, File, FileType, FileListParams, FileUpdateParams, FileCreateTextParams, ListParams, ConversationSummary, ConversationItem, ConversationItemList, ConversationListParams, ConversationItemListParams, ConversationItemInclude, ConversationResponse, ResourceShare, ShareResourceType, ShareCreateParams, ShareListParams, } from "@introspection-sdk/types";
-export { IntrospectionAPIError, AuthenticationError, InsufficientScopeError, NotFoundError, NetworkError, } from "@introspection-sdk/types";
+export { IntrospectionAPIError, AuthenticationError, InsufficientScopeError, NotFoundError, NetworkError, RunnerExpiredError, } from "@introspection-sdk/types";
 //# sourceMappingURL=index.d.ts.map

package/dist/api/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EACL,sBAAsB,EACtB,KAAK,6BAA6B,GACnC,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,WAAW,EACX,cAAc,EACd,SAAS,EACT,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,KAAK,cAAc,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACtE,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EACL,SAAS,EACT,cAAc,EACd,KAAK,UAAU,GAChB,MAAM,yBAAyB,CAAC;AAGjC,YAAY,EACV,IAAI,EACJ,OAAO,EACP,UAAU,EACV,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,SAAS,EACT,QAAQ,EACR,IAAI,EACJ,QAAQ,EACR,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,UAAU,EACV,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,0BAA0B,EAC1B,uBAAuB,EACvB,oBAAoB,EACpB,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,aAAa,EACb,YAAY,GACb,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EACL,sBAAsB,EACtB,KAAK,6BAA6B,GACnC,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,WAAW,EACX,cAAc,EACd,SAAS,EACT,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,KAAK,cAAc,GACpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACtE,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EACL,SAAS,EACT,cAAc,EACd,KAAK,UAAU,GAChB,MAAM,yBAAyB,CAAC;AAGjC,YAAY,EACV,IAAI,EACJ,OAAO,EACP,UAAU,EACV,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,SAAS,EACT,QAAQ,EACR,IAAI,EACJ,QAAQ,EACR,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,UAAU,EACV,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,0BAA0B,EAC1B,uBAAuB,EACvB,oBAAoB,EACpB,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,aAAa,EACb,YAAY,EACZ,kBAAkB,GACnB,MAAM,0BAA0B,CAAC"}

package/dist/api/index.js

@@ -6,33 +6,39 @@
  * Separate from the package's default telemetry export so apps only pull
  * in what they use.
  *
+ * The browser talks only to the Data Plane. Resolving a runtime by name
+ * (a Control Plane call) stays on your backend, which hands the browser a
+ * short-lived access token plus the resolved `runtime_id`.
+ *
  * @example
  * ```typescript
  * import { IntrospectionApiClient } from "@introspection-sdk/introspection-browser/api";
  *
+ * // Your backend returns { token, runtimeId, dpUrl } — it mints the access
+ * // token, resolves the runtime id, and surfaces the DP URL (e.g. from the
+ * // Node SDK's serviceAccountToken response), so the browser never calls the CP.
+ * const { token, runtimeId, dpUrl } = await fetch(
+ *   "/api/introspection/session",
+ * ).then((r) => r.json());
+ *
  * const client = new IntrospectionApiClient({
- *   dpUrl: "https://dp.us.introspection.dev",
- *   // your backend mints the Introspection access token (the session's
- *   // project is derived from its claims — no projectId option needed)
- *   getToken: () => fetch("/api/introspection/token").then((r) => r.text()),
+ *   dpUrl,
+ *   getToken: () => token,
  * });
  *
- * await client.connect(); // → intro_dp_session cookie
+ * await client.connect(); // -> intro_dp_session cookie
  * const run = await client.tasks.start({
  *   prompt: "Summarize my latest order",
- *   agent_name: "support-agent",
- *   identity: { user_id: "u_42" },
+ *   runtime_id: runtimeId,
  * });
  * for await (const ev of run.stream()) console.log(ev.event, ev.data);
  * ```
  */
 export { IntrospectionApiClient, } from "./client.js";
 export { TasksClient, TaskRunsClient, RunHandle, } from "./tasks.js";
-export { FilesClient, FileVersionsClient, } from "./files.js";
-export { ConversationsClient, ConversationItemsClient, } from "./conversations.js";
-export { SharesClient } from "./shares.js";
+export { ConversationItemsClient, ConversationsClient, FileVersionsClient, FilesClient, SharesClient, } from "@introspection-sdk/http";
 export { BrowserHttpClient } from "./http.js";
 export { parseSse } from "./sse.js";
 export { Paginator, cursorPaginate, } from "@introspection-sdk/http";
-export { IntrospectionAPIError, AuthenticationError, InsufficientScopeError, NotFoundError, NetworkError, } from "@introspection-sdk/types";
+export { IntrospectionAPIError, AuthenticationError, InsufficientScopeError, NotFoundError, NetworkError, RunnerExpiredError, } from "@introspection-sdk/types";
 //# sourceMappingURL=index.js.map

package/dist/api/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EACL,sBAAsB,GAEvB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,WAAW,EACX,cAAc,EACd,SAAS,GAGV,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,WAAW,EACX,kBAAkB,GAEnB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAA0B,MAAM,WAAW,CAAC;AACtE,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EACL,SAAS,EACT,cAAc,GAEf,MAAM,yBAAyB,CAAC;AAiCjC,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,aAAa,EACb,YAAY,GACb,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EACL,sBAAsB,GAEvB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,WAAW,EACX,cAAc,EACd,SAAS,GAGV,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EAClB,WAAW,EACX,YAAY,GAEb,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAA0B,MAAM,WAAW,CAAC;AACtE,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EACL,SAAS,EACT,cAAc,GAEf,MAAM,yBAAyB,CAAC;AAiCjC,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,aAAa,EACb,YAAY,EACZ,kBAAkB,GACnB,MAAM,0BAA0B,CAAC"}

package/dist/api/tasks.d.ts

@@ -1,6 +1,5 @@
-import type { RunIdentityInput, SseEvent, Task, TaskCancelResponse, TaskCreateResponse, TaskListParams, TaskRun, TaskRunCreateParams, TaskUpdateParams } from "@introspection-sdk/types";
-import { Paginator } from "@introspection-sdk/http";
-import { BrowserHttpClient } from "./http.js";
+import type { RunIdentityInput } from "@introspection-sdk/types";
+import { RunHandle, TaskRunsClient, TasksClient as SharedTasksClient, type ResourceHttpClient } from "@introspection-sdk/http";
 /**
  * Body for creating a task directly against the DP from the browser.
  *
@@ -39,51 +38,13 @@ export interface StartTaskParams extends CreateTaskParams {
     /** Required for the `start()` sugar that returns a run handle. */
     prompt: string;
 }
-/** Live handle on a task's run: stream its events, collect text, cancel. */
-export declare class RunHandle {
-    readonly task: Task | null;
-    readonly run: TaskRun;
-    private readonly runs;
-    constructor(task: Task | null, run: TaskRun, runs: TaskRunsClient);
-    stream(): AsyncIterable<SseEvent>;
-    cancel(): Promise<TaskCancelResponse>;
-    /** Convenience: concatenate `data` from `text`/`message` SSE frames. */
-    text(): Promise<string>;
-}
-export declare class TaskRunsClient {
-    private readonly http;
-    constructor(http: BrowserHttpClient);
-    create(taskId: string, body: TaskRunCreateParams): Promise<RunHandle>;
-    get(taskId: string, runId: string): Promise<TaskRun>;
-    cancel(taskId: string, runId: string): Promise<TaskCancelResponse>;
-    stream(taskId: string, runId: string): AsyncIterable<SseEvent>;
-}
 /**
- * Cookie-authenticated `/v1/tasks` client. Mirrors the Node SDK's
- * `TasksApi` shape but is bound to a DP session cookie rather than a
- * bearer token, and lets the caller select the agent on create.
+ * Cookie-authenticated `/v1/tasks` client. The implementation is shared with
+ * Node's runner-bound task client; this browser subclass only adds the
+ * `identity -> metadata.identity` body mapping used by cookie-session calls.
  */
-export declare class TasksClient {
-    private readonly http;
-    readonly runs: TaskRunsClient;
-    constructor(http: BrowserHttpClient);
-    /**
-     * Tasks matching `params`. `await` it for the first page (preserving
-     * the wire envelope's counts + `next` cursor), or `for await` it to
-     * stream every task across pages (fetched lazily — `limit` sets the
-     * page size, `next` the starting cursor; stop early to stop fetching).
-     *
-     * Mirrors the Node SDK's `TasksApi.list`, which is the source of truth
-     * for the `/v1/tasks` shape.
-     */
-    list(params?: TaskListParams): Paginator<Task>;
-    create(body: CreateTaskParams): Promise<TaskCreateResponse>;
-    get(taskId: string): Promise<Task>;
-    update(taskId: string, body: TaskUpdateParams): Promise<Task>;
-    delete(taskId: string): Promise<void>;
-    archive(taskId: string): Promise<void>;
-    unarchive(taskId: string): Promise<void>;
-    /** Sugar: create a task + return a handle on its initial run. */
-    start(params: StartTaskParams): Promise<RunHandle>;
+export declare class TasksClient extends SharedTasksClient<CreateTaskParams, StartTaskParams> {
+    constructor(http: ResourceHttpClient);
 }
+export { RunHandle, TaskRunsClient };
 //# sourceMappingURL=tasks.d.ts.map

package/dist/api/tasks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tasks.d.ts","sourceRoot":"","sources":["../../src/api/tasks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,gBAAgB,EAChB,QAAQ,EACR,IAAI,EACJ,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,EACd,OAAO,EACP,mBAAmB,EAEnB,gBAAgB,EACjB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,SAAS,EAAkB,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAG9C;;;;;;;;;GASG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,wEAAwE;IACxE,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAgB,SAAQ,gBAAgB;IACvD,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAC;CAChB;AAYD,4EAA4E;AAC5E,qBAAa,SAAS;aAEF,IAAI,EAAE,IAAI,GAAG,IAAI;aACjB,GAAG,EAAE,OAAO;IAC5B,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAFL,IAAI,EAAE,IAAI,GAAG,IAAI,EACjB,GAAG,EAAE,OAAO,EACX,IAAI,EAAE,cAAc;IAGvC,MAAM,IAAI,aAAa,CAAC,QAAQ,CAAC;IAIjC,MAAM,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAIrC,wEAAwE;IAClE,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC;CAO9B;AAED,qBAAa,cAAc;IACb,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,iBAAiB;IAE9C,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,SAAS,CAAC;IAS3E,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAOpD,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAO3D,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC;CAMtE;AAED;;;;GAIG;AACH,qBAAa,WAAW;IAGV,OAAO,CAAC,QAAQ,CAAC,IAAI;IAFjC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;gBAED,IAAI,EAAE,iBAAiB;IAIpD;;;;;;;;OAQG;IACH,IAAI,CAAC,MAAM,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC,IAAI,CAAC;IAY9C,MAAM,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAQ3D,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOlC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ7D,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQrC,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQtC,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQxC,iEAAiE;IAC3D,KAAK,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC;CAIzD"}
+{"version":3,"file":"tasks.d.ts","sourceRoot":"","sources":["../../src/api/tasks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EACL,SAAS,EACT,cAAc,EACd,WAAW,IAAI,iBAAiB,EAChC,KAAK,kBAAkB,EACxB,MAAM,yBAAyB,CAAC;AAEjC;;;;;;;;;GASG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,wEAAwE;IACxE,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAgB,SAAQ,gBAAgB;IACvD,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAC;CAChB;AAYD;;;;GAIG;AACH,qBAAa,WAAY,SAAQ,iBAAiB,CAChD,gBAAgB,EAChB,eAAe,CAChB;gBACa,IAAI,EAAE,kBAAkB;CAGrC;AAED,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC"}