@ironflow/node 0.19.3 → 0.20.0

package/README.md

@@ -96,10 +96,12 @@ All fields on the config object:
 |-------|------|-------------|
 | `id` | `string` | **Required.** Unique function identifier. |
 | `name` | `string` | Display name. Defaults to `id`. |
+| `description` | `string` | Human-readable description shown in the dashboard. |
 | `triggers` | `Trigger[]` | **Required.** Array of event triggers (can be empty for invoke-only functions). |
 | `retry` | `RetryConfig` | Retry policy for failed steps. |
 | `timeout` | `number` | Function timeout in milliseconds (default: 600000 = 10 min). |
 | `concurrency` | `ConcurrencyConfig` | Concurrency control. |
+| `debounce` | `DebounceConfig` | Debounce configuration — collapses rapid-fire events into a single invocation. |
 | `mode` | `"push" \| "pull"` | Preferred execution mode. |
 | `actorKey` | `string` | JSON path for actor-based sticky routing (e.g., `"event.data.customerId"`). |
 | `schema` | `ZodType` | Zod schema for event data validation and type inference. |
@@ -108,6 +110,7 @@ All fields on the config object:
 | `recording` | `boolean` | Enable audit recording for this function. |
 | `recordingRetention` | `string` | Retention period for audit events (`"7d"`, `"30d"`, `"90d"`, `"forever"`). |
 | `pauseBehavior` | `"hold" \| "release"` | Controls whether a paused run retains (`"hold"`, default) or releases (`"release"`) its concurrency lane slot. |
+| `compensateOnCancel` | `boolean` | Run registered `step.compensate()` handlers in reverse order when a pull-mode run is cancelled mid-saga. Ignored for push-mode. |
 | `metadata` | `Record<string, unknown>` | Arbitrary metadata attached to the function definition. |
 
 **Trigger** fields:
@@ -1290,8 +1293,8 @@ Receive and transform external HTTP events from third-party services.
 | Field | Type | Description |
 |-------|------|-------------|
 | `id` | `string` | Webhook source identifier (used in URL path). |
-| `verify` | `(req) => void \| Promise<void>` | Verification function. Throw to reject. |
-| `transform` | `(payload) => WebhookEvent` | Transform raw payload to an Ironflow event. |
+| `verify` | `(req) => unknown \| Promise<unknown>` | Verify the request and return the parsed payload (or throw to reject). |
+| `transform` | `(payload) => WebhookEvent \| Promise<WebhookEvent>` | Transform the verified payload to an Ironflow event. |
 
 ### Stripe webhook example
 

package/dist/agent/agent.d.ts

@@ -0,0 +1,60 @@
+/**
+ * agent() — entrypoint for durable AI agents.
+ *
+ * Wraps createFunction() with an extended handler context that carries
+ * agent-shaped primitives (tool, llm, approve, memory, spawn). The
+ * returned value is a plain IronflowFunction so existing serve() and
+ * createWorker() register agents with zero changes.
+ *
+ * Runtime shape:
+ *   - Per-run turn counter (drives ctx.turn + maxTurns enforcement).
+ *   - Per-run tool registry built from AgentConfig.tools (drives by-name
+ *     dispatch in ctx.tool(name, args) for LLM-driven tool calls).
+ *   - Per-run byArgs idempotency cache for ctx.tool().
+ *   - Per-run in-memory cache for memory.get() reads.
+ *
+ * All wrappers compose over ctx.step — agents inherit Ironflow's
+ * crash-resume, replay, and audit semantics from the existing runtime.
+ */
+import type { z } from "zod";
+import type { AgentConfig, AgentHandler, IronflowAgent } from "./types.js";
+/**
+ * Define a durable agent.
+ *
+ * When `config.memory` is set, the runtime constructs an IronflowClient
+ * from `process.env.IRONFLOW_URL` (or `IRONFLOW_SERVER_URL`) plus
+ * `IRONFLOW_API_KEY` for the memory backend. Workers that pass
+ * `serverUrl` explicitly to `serve()` / `createWorker()` should also
+ * export the matching env vars so memory operations resolve correctly.
+ *
+ * @example
+ * ```ts
+ * import { agent, defineTool } from "@ironflow/node/agent";
+ * import { z } from "zod";
+ *
+ * const fetchDiff = defineTool({
+ *   name: "fetch-diff",
+ *   input: z.object({ pr: z.number() }),
+ *   handler: async ({ pr }) => api.diff(pr),
+ * });
+ *
+ * export const reviewAgent = agent(
+ *   {
+ *     id: "code-review",
+ *     triggers: [{ event: "pr.opened" }],
+ *     tools: [fetchDiff],
+ *   },
+ *   async ({ step, tool, llm, approve }) => {
+ *     const diff = await tool(fetchDiff, { pr: event.data.prNumber });
+ *     const findings = await llm.complete({
+ *       messages: [{ role: "user", content: `Review:\n${diff}` }],
+ *       call: () => myProvider.complete(...),
+ *     });
+ *     const decision = await approve("ship-it", { ttl: "24h", payload: findings });
+ *     return { approved: decision.approved };
+ *   }
+ * );
+ * ```
+ */
+export declare function agent<TEventSchema extends z.ZodType = z.ZodType<unknown>, TResult = unknown>(config: AgentConfig<TEventSchema>, handler: AgentHandler<z.infer<TEventSchema>, TResult>): IronflowAgent<z.infer<TEventSchema>, TResult>;
+//# sourceMappingURL=agent.d.ts.map

package/dist/agent/agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/agent/agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAc7B,OAAO,KAAK,EACV,WAAW,EAEX,YAAY,EAEZ,aAAa,EACd,MAAM,YAAY,CAAC;AAKpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,wBAAgB,KAAK,CAAC,YAAY,SAAS,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,EAC1F,MAAM,EAAE,WAAW,CAAC,YAAY,CAAC,EACjC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,GACpD,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,CAoC/C"}

package/dist/agent/agent.js

@@ -0,0 +1,133 @@
+/**
+ * agent() — entrypoint for durable AI agents.
+ *
+ * Wraps createFunction() with an extended handler context that carries
+ * agent-shaped primitives (tool, llm, approve, memory, spawn). The
+ * returned value is a plain IronflowFunction so existing serve() and
+ * createWorker() register agents with zero changes.
+ *
+ * Runtime shape:
+ *   - Per-run turn counter (drives ctx.turn + maxTurns enforcement).
+ *   - Per-run tool registry built from AgentConfig.tools (drives by-name
+ *     dispatch in ctx.tool(name, args) for LLM-driven tool calls).
+ *   - Per-run byArgs idempotency cache for ctx.tool().
+ *   - Per-run in-memory cache for memory.get() reads.
+ *
+ * All wrappers compose over ctx.step — agents inherit Ironflow's
+ * crash-resume, replay, and audit semantics from the existing runtime.
+ */
+import { IronflowClient } from "../client.js";
+import { createFunction } from "../function.js";
+import { makeApprove } from "./approve.js";
+import { DuplicateToolError } from "./errors.js";
+import { createTurnCounter, makeLlm } from "./llm.js";
+import { createMemoryRuntimeCache, createMemoryRuntimeCounters, makeMemory, } from "./memory.js";
+import { makeSpawn } from "./spawn.js";
+import { createToolRuntime, makeTool } from "./tool.js";
+/** Default agent turn budget. Configurable via AgentConfig.maxTurns. */
+const DEFAULT_MAX_TURNS = 20;
+/**
+ * Define a durable agent.
+ *
+ * When `config.memory` is set, the runtime constructs an IronflowClient
+ * from `process.env.IRONFLOW_URL` (or `IRONFLOW_SERVER_URL`) plus
+ * `IRONFLOW_API_KEY` for the memory backend. Workers that pass
+ * `serverUrl` explicitly to `serve()` / `createWorker()` should also
+ * export the matching env vars so memory operations resolve correctly.
+ *
+ * @example
+ * ```ts
+ * import { agent, defineTool } from "@ironflow/node/agent";
+ * import { z } from "zod";
+ *
+ * const fetchDiff = defineTool({
+ *   name: "fetch-diff",
+ *   input: z.object({ pr: z.number() }),
+ *   handler: async ({ pr }) => api.diff(pr),
+ * });
+ *
+ * export const reviewAgent = agent(
+ *   {
+ *     id: "code-review",
+ *     triggers: [{ event: "pr.opened" }],
+ *     tools: [fetchDiff],
+ *   },
+ *   async ({ step, tool, llm, approve }) => {
+ *     const diff = await tool(fetchDiff, { pr: event.data.prNumber });
+ *     const findings = await llm.complete({
+ *       messages: [{ role: "user", content: `Review:\n${diff}` }],
+ *       call: () => myProvider.complete(...),
+ *     });
+ *     const decision = await approve("ship-it", { ttl: "24h", payload: findings });
+ *     return { approved: decision.approved };
+ *   }
+ * );
+ * ```
+ */
+export function agent(config, handler) {
+    const maxTurns = config.maxTurns ?? DEFAULT_MAX_TURNS;
+    const registry = buildRegistry(config.tools);
+    return createFunction(config, async (ctx) => {
+        const counter = createTurnCounter();
+        const toolRuntime = createToolRuntime();
+        const memoryCache = createMemoryRuntimeCache();
+        const memoryCounters = createMemoryRuntimeCounters();
+        const memoryBackend = config.memory ? createDefaultMemoryBackend() : undefined;
+        const agentCtx = {
+            event: ctx.event,
+            step: ctx.step,
+            run: ctx.run,
+            logger: ctx.logger,
+            secrets: ctx.secrets,
+            tool: makeTool(ctx.step, registry, toolRuntime),
+            llm: makeLlm(ctx.step, counter, maxTurns),
+            approve: makeApprove(ctx.step, ctx.run.id),
+            memory: makeMemory(ctx.step, config.memory, ctx.run.id, memoryCache, memoryBackend, memoryCounters),
+            spawn: makeSpawn(ctx.step),
+            get turn() {
+                return counter.value;
+            },
+        };
+        return handler(agentCtx);
+    });
+}
+/**
+ * Construct the default MemoryBackend from environment variables.
+ *
+ * Reads IRONFLOW_URL / IRONFLOW_SERVER_URL for the server endpoint and
+ * IRONFLOW_API_KEY for auth. Returns undefined when no URL is set so
+ * makeMemory() can surface a clear "no backend" error on first use.
+ */
+function createDefaultMemoryBackend() {
+    const serverUrl = process.env.IRONFLOW_URL ?? process.env.IRONFLOW_SERVER_URL;
+    if (!serverUrl)
+        return undefined;
+    const client = new IronflowClient({
+        serverUrl,
+        apiKey: process.env.IRONFLOW_API_KEY,
+    });
+    return {
+        appendEvent: (streamId, input) => client.streams.append(streamId, { name: input.name, data: input.data, entityType: input.entityType }, { idempotencyKey: input.idempotencyKey, metadata: input.metadata }),
+        getProjection: (name) => client.projections.get(name),
+        waitForCatchup: async (name, opts) => {
+            await client.projections.waitForCatchup(name, {
+                minSeq: opts.minSeq,
+                partition: opts.partition,
+                timeoutMs: opts.timeoutMs,
+            });
+        },
+    };
+}
+function buildRegistry(tools) {
+    const map = new Map();
+    if (!tools)
+        return map;
+    for (const def of tools) {
+        if (map.has(def.name)) {
+            throw new DuplicateToolError(def.name);
+        }
+        map.set(def.name, def);
+    }
+    return map;
+}
+//# sourceMappingURL=agent.js.map

package/dist/agent/agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../src/agent/agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACtD,OAAO,EAEL,wBAAwB,EACxB,2BAA2B,EAC3B,UAAU,GACX,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AASxD,wEAAwE;AACxE,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAM,UAAU,KAAK,CACnB,MAAiC,EACjC,OAAqD;IAErD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IACtD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE7C,OAAO,cAAc,CAAwB,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACjE,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QACpC,MAAM,WAAW,GAAG,iBAAiB,EAAE,CAAC;QACxC,MAAM,WAAW,GAAG,wBAAwB,EAAE,CAAC;QAC/C,MAAM,cAAc,GAAG,2BAA2B,EAAE,CAAC;QACrD,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAE/E,MAAM,QAAQ,GAAwC;YACpD,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC;YAC/C,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC;YACzC,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,EAAE,UAAU,CAChB,GAAG,CAAC,IAAI,EACR,MAAM,CAAC,MAAM,EACb,GAAG,CAAC,GAAG,CAAC,EAAE,EACV,WAAW,EACX,aAAa,EACb,cAAc,CACf;YACD,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;YAC1B,IAAI,IAAI;gBACN,OAAO,OAAO,CAAC,KAAK,CAAC;YACvB,CAAC;SACF,CAAC;QAEF,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAS,0BAA0B;IACjC,MAAM,SAAS,GACb,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAC9D,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IAEjC,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC;QAChC,SAAS;QACT,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB;KACrC,CAAC,CAAC;IAEH,OAAO;QACL,WAAW,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAC/B,MAAM,CAAC,OAAO,CAAC,MAAM,CACnB,QAAQ,EACR,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,EACpE,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CACnE;QACH,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;QACrD,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YACnC,MAAM,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,EAAE;gBAC5C,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,KAAmD;IAEnD,MAAM,GAAG,GAAG,IAAI,GAAG,EAA6B,CAAC;IACjD,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC;IACvB,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/agent/approve.d.ts

@@ -0,0 +1,23 @@
+/**
+ * approve() — durable human-approval gate.
+ *
+ * Wraps step.waitForEvent on a deterministic event name derived from the
+ * agent run + approval name. The default behavior on TTL elapse is to
+ * resolve with approved=false, reason="timeout" — explicit rejection vs
+ * timeout is observable to the caller via the returned reason field.
+ *
+ * Approval events follow the convention:
+ *   name:      "agent.approve.{name}"
+ *   filter:    runId === ctx.run.id
+ *   data shape:
+ *     { approved: boolean, approver?: string, payload?, reason? }
+ */
+import type { StepClient } from "@ironflow/core";
+import type { ApproveFn } from "./types.js";
+/**
+ * Build an ApproveFn bound to the given step + run.
+ *
+ * Exported for use by agent.ts; not part of the public API surface.
+ */
+export declare function makeApprove(step: StepClient, runId: string): ApproveFn;
+//# sourceMappingURL=approve.d.ts.map

package/dist/agent/approve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approve.d.ts","sourceRoot":"","sources":["../../src/agent/approve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEjD,OAAO,KAAK,EAAE,SAAS,EAAiC,MAAM,YAAY,CAAC;AAI3E;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,CA4BtE"}

package/dist/agent/approve.js

@@ -0,0 +1,42 @@
+/**
+ * approve() — durable human-approval gate.
+ *
+ * Wraps step.waitForEvent on a deterministic event name derived from the
+ * agent run + approval name. The default behavior on TTL elapse is to
+ * resolve with approved=false, reason="timeout" — explicit rejection vs
+ * timeout is observable to the caller via the returned reason field.
+ *
+ * Approval events follow the convention:
+ *   name:      "agent.approve.{name}"
+ *   filter:    runId === ctx.run.id
+ *   data shape:
+ *     { approved: boolean, approver?: string, payload?, reason? }
+ */
+import { escapeMatchValue, normalizeDuration } from "./internal.js";
+const APPROVE_EVENT_PREFIX = "agent.approve.";
+/**
+ * Build an ApproveFn bound to the given step + run.
+ *
+ * Exported for use by agent.ts; not part of the public API surface.
+ */
+export function makeApprove(step, runId) {
+    return async function approve(name, options) {
+        const eventName = APPROVE_EVENT_PREFIX + name;
+        const event = await step.waitForEvent(`approve.${name}`, {
+            event: eventName,
+            timeout: normalizeDuration(options.ttl),
+            match: `data.runId == "${escapeMatchValue(runId)}"`,
+        });
+        if (event === null || event === undefined) {
+            return { approved: false, reason: "timeout" };
+        }
+        const data = event.data;
+        return {
+            approved: Boolean(data?.approved),
+            approver: data?.approver,
+            payload: data?.payload,
+            reason: data?.reason,
+        };
+    };
+}
+//# sourceMappingURL=approve.js.map

package/dist/agent/approve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approve.js","sourceRoot":"","sources":["../../src/agent/approve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAGpE,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAE9C;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,IAAgB,EAAE,KAAa;IACzD,OAAO,KAAK,UAAU,OAAO,CAC3B,IAAY,EACZ,OAAiC;QAEjC,MAAM,SAAS,GAAG,oBAAoB,GAAG,IAAI,CAAC;QAE9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CACnC,WAAW,IAAI,EAAE,EACjB;YACE,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC;YACvC,KAAK,EAAE,kBAAkB,gBAAgB,CAAC,KAAK,CAAC,GAAG;SACpD,CACF,CAAC;QAEF,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAChD,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACxB,OAAO;YACL,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;YACjC,QAAQ,EAAE,IAAI,EAAE,QAAQ;YACxB,OAAO,EAAE,IAAI,EAAE,OAAO;YACtB,MAAM,EAAE,IAAI,EAAE,MAAM;SACrB,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/agent/dispatch.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Inbound callback handler for Ironflow → SDK agent-tool dispatch.
+ *
+ * The Ironflow server's `agent_tools.Dispatcher` POSTs an HMAC-signed
+ * request to `${callbackUrl}` (the user's serve() mount). serve() routes
+ * `/ironflow/agent-tools/dispatch` here. We:
+ *
+ *   1. Verify HMAC + replay window (5min past, 1min future).
+ *   2. Look up the qualified tool in the local registry.
+ *   3. Validate input against the McpToolDef Zod schema.
+ *   4. Run the handler, mapping success → {output} and any throw →
+ *      {error:{code:"HANDLER_ERROR", message}} (200 with envelope so the
+ *      Go dispatcher decodes it as a tool error instead of a transport
+ *      failure — see internal/agent_tools/dispatcher.go:182).
+ *
+ *	 server                            SDK serve()
+ *	   │  POST /…/dispatch              │
+ *	   │ X-Ironflow-Timestamp: <unix>   │
+ *	   │ X-Ironflow-Signature: sha256=… │
+ *	   │ body: {qualified_name, input}  │
+ *	   │  ─────────────────────────────▶│
+ *	   │                                │ verify HMAC
+ *	   │                                │ lookupLocal()
+ *	   │                                │ Zod parse(input)
+ *	   │                                │ def.handler(input)
+ *	   │                                │
+ *	   │ 200 {output} | 200 {error} |   │
+ *	   │ 401 sig | 400 schema           │
+ *	   │ ◀───────────────────────────── │
+ */
+/** Path served on the user's serve() mount. */
+export declare const DISPATCH_PATH = "/ironflow/agent-tools/dispatch";
+interface DispatchEnvelope {
+    output?: unknown;
+    error?: {
+        code: string;
+        message: string;
+    };
+}
+interface DispatchResult {
+    status: number;
+    body: DispatchEnvelope;
+}
+interface MinimalRequest {
+    text(): Promise<string>;
+    headers: {
+        get(name: string): string | null;
+    };
+}
+/**
+ * Process an inbound dispatch request. Returns status + body envelope —
+ * the caller (serve()) is responsible for serializing.
+ */
+export declare function handleAgentToolDispatch(request: MinimalRequest): Promise<DispatchResult>;
+/**
+ * verifyHmac is exported for cross-language vector parity tests
+ * (testdata/hmac_vectors.json, issue #595 S8). It is NOT part of the
+ * public @ironflow/node/agent surface — production callers reach it
+ * via handleAgentToolDispatch().
+ */
+export declare function verifyHmac(rawBody: string, ts: number, receivedHex: string, secretHex: string): boolean;
+export {};
+//# sourceMappingURL=dispatch.d.ts.map

package/dist/agent/dispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../src/agent/dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAYH,+CAA+C;AAC/C,eAAO,MAAM,aAAa,mCAAmC,CAAC;AAE9D,UAAU,gBAAgB;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3C;AAOD,UAAU,cAAc;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,gBAAgB,CAAC;CACxB;AAED,UAAU,cAAc;IACtB,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACxB,OAAO,EAAE;QAAE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CAC/C;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,cAAc,CAAC,CAgEzB;AAMD;;;;;GAKG;AACH,wBAAgB,UAAU,CACxB,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAkBT"}

package/dist/agent/dispatch.js

@@ -0,0 +1,130 @@
+/**
+ * Inbound callback handler for Ironflow → SDK agent-tool dispatch.
+ *
+ * The Ironflow server's `agent_tools.Dispatcher` POSTs an HMAC-signed
+ * request to `${callbackUrl}` (the user's serve() mount). serve() routes
+ * `/ironflow/agent-tools/dispatch` here. We:
+ *
+ *   1. Verify HMAC + replay window (5min past, 1min future).
+ *   2. Look up the qualified tool in the local registry.
+ *   3. Validate input against the McpToolDef Zod schema.
+ *   4. Run the handler, mapping success → {output} and any throw →
+ *      {error:{code:"HANDLER_ERROR", message}} (200 with envelope so the
+ *      Go dispatcher decodes it as a tool error instead of a transport
+ *      failure — see internal/agent_tools/dispatcher.go:182).
+ *
+ *	 server                            SDK serve()
+ *	   │  POST /…/dispatch              │
+ *	   │ X-Ironflow-Timestamp: <unix>   │
+ *	   │ X-Ironflow-Signature: sha256=… │
+ *	   │ body: {qualified_name, input}  │
+ *	   │  ─────────────────────────────▶│
+ *	   │                                │ verify HMAC
+ *	   │                                │ lookupLocal()
+ *	   │                                │ Zod parse(input)
+ *	   │                                │ def.handler(input)
+ *	   │                                │
+ *	   │ 200 {output} | 200 {error} |   │
+ *	   │ 401 sig | 400 schema           │
+ *	   │ ◀───────────────────────────── │
+ */
+import { createHmac, timingSafeEqual } from "node:crypto";
+import { lookupLocal } from "./internal-registry.js";
+const HEADER_SIGNATURE = "x-ironflow-signature";
+const HEADER_TIMESTAMP = "x-ironflow-timestamp";
+const SIGNATURE_PREFIX = "sha256=";
+const REPLAY_WINDOW_SEC = 5 * 60;
+const FUTURE_SKEW_SEC = 60;
+/** Path served on the user's serve() mount. */
+export const DISPATCH_PATH = "/ironflow/agent-tools/dispatch";
+/**
+ * Process an inbound dispatch request. Returns status + body envelope —
+ * the caller (serve()) is responsible for serializing.
+ */
+export async function handleAgentToolDispatch(request) {
+    const rawBody = await request.text();
+    const sigHeader = request.headers.get(HEADER_SIGNATURE);
+    const tsHeader = request.headers.get(HEADER_TIMESTAMP);
+    if (!sigHeader || !tsHeader) {
+        return errorResponse(401, "SIGNATURE_MISMATCH", "missing HMAC headers");
+    }
+    if (!sigHeader.startsWith(SIGNATURE_PREFIX)) {
+        return errorResponse(401, "SIGNATURE_MISMATCH", "invalid signature format");
+    }
+    const ts = Number.parseInt(tsHeader, 10);
+    if (!Number.isFinite(ts)) {
+        return errorResponse(401, "TIMESTAMP_SKEW", "invalid timestamp");
+    }
+    const now = Math.floor(Date.now() / 1000);
+    if (now - ts > REPLAY_WINDOW_SEC) {
+        return errorResponse(401, "TIMESTAMP_SKEW", "request timestamp too old");
+    }
+    if (ts - now > FUTURE_SKEW_SEC) {
+        return errorResponse(401, "TIMESTAMP_SKEW", "request timestamp too far in future");
+    }
+    let payload;
+    try {
+        payload = JSON.parse(rawBody);
+    }
+    catch {
+        return errorResponse(400, "INVALID_REQUEST", "callback body is not valid JSON");
+    }
+    const qualifiedName = typeof payload.qualified_name === "string" ? payload.qualified_name : "";
+    if (!qualifiedName) {
+        return errorResponse(400, "INVALID_REQUEST", "qualified_name missing");
+    }
+    const entry = lookupLocal(qualifiedName);
+    if (!entry) {
+        console.warn(`ironflow.agent.dispatch unknown_tool qualified_name=${JSON.stringify(qualifiedName)}`);
+        return errorResponse(401, "SIGNATURE_MISMATCH", "HMAC mismatch");
+    }
+    if (!verifyHmac(rawBody, ts, sigHeader.slice(SIGNATURE_PREFIX.length), entry.hmacSecret)) {
+        return errorResponse(401, "SIGNATURE_MISMATCH", "HMAC mismatch");
+    }
+    const parseResult = entry.def.input.safeParse(payload.input);
+    if (!parseResult.success) {
+        const issues = parseResult.error.issues
+            .map((i) => `${i.path.join(".") || "(root)"}: ${i.message}`)
+            .join("; ");
+        return errorResponse(400, "INPUT_SCHEMA_INVALID", issues);
+    }
+    try {
+        const output = await entry.def.handler(parseResult.data);
+        return { status: 200, body: { output } };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { status: 200, body: { error: { code: "HANDLER_ERROR", message } } };
+    }
+}
+function errorResponse(status, code, message) {
+    return { status, body: { error: { code, message } } };
+}
+/**
+ * verifyHmac is exported for cross-language vector parity tests
+ * (testdata/hmac_vectors.json, issue #595 S8). It is NOT part of the
+ * public @ironflow/node/agent surface — production callers reach it
+ * via handleAgentToolDispatch().
+ */
+export function verifyHmac(rawBody, ts, receivedHex, secretHex) {
+    // Buffer.from(..., "hex") silently truncates at the first non-hex char
+    // instead of throwing. Validate explicitly so a malformed secret/sig
+    // can't quietly produce a partial buffer that passes timingSafeEqual.
+    if (!isHex(secretHex) || !isHex(receivedHex)) {
+        return false;
+    }
+    const secretBuf = Buffer.from(secretHex, "hex");
+    const expectedHex = createHmac("sha256", secretBuf)
+        .update(`${ts}.${rawBody}`)
+        .digest("hex");
+    const receivedBuf = Buffer.from(receivedHex, "hex");
+    const expectedBuf = Buffer.from(expectedHex, "hex");
+    if (receivedBuf.length !== expectedBuf.length || receivedBuf.length === 0) {
+        return false;
+    }
+    return timingSafeEqual(receivedBuf, expectedBuf);
+}
+function isHex(s) {
+    return s.length > 0 && s.length % 2 === 0 && /^[0-9a-fA-F]+$/.test(s);
+}
+//# sourceMappingURL=dispatch.js.map

package/dist/agent/dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch.js","sourceRoot":"","sources":["../../src/agent/dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErD,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;AAChD,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;AAChD,MAAM,gBAAgB,GAAG,SAAS,CAAC;AAEnC,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,CAAC;AACjC,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B,+CAA+C;AAC/C,MAAM,CAAC,MAAM,aAAa,GAAG,gCAAgC,CAAC;AAsB9D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAuB;IAEvB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAEvD,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5B,OAAO,aAAa,CAAC,GAAG,EAAE,oBAAoB,EAAE,sBAAsB,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC5C,OAAO,aAAa,CAAC,GAAG,EAAE,oBAAoB,EAAE,0BAA0B,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QACzB,OAAO,aAAa,CAAC,GAAG,EAAE,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,IAAI,GAAG,GAAG,EAAE,GAAG,iBAAiB,EAAE,CAAC;QACjC,OAAO,aAAa,CAAC,GAAG,EAAE,gBAAgB,EAAE,2BAA2B,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,EAAE,GAAG,GAAG,GAAG,eAAe,EAAE,CAAC;QAC/B,OAAO,aAAa,CAAC,GAAG,EAAE,gBAAgB,EAAE,qCAAqC,CAAC,CAAC;IACrF,CAAC;IAED,IAAI,OAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,CAAC,GAAG,EAAE,iBAAiB,EAAE,iCAAiC,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,aAAa,GACjB,OAAO,OAAO,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,aAAa,CAAC,GAAG,EAAE,iBAAiB,EAAE,wBAAwB,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,IAAI,CACV,uDAAuD,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CACvF,CAAC;QACF,OAAO,aAAa,CAAC,GAAG,EAAE,oBAAoB,EAAE,eAAe,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACzF,OAAO,aAAa,CAAC,GAAG,EAAE,oBAAoB,EAAE,eAAe,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM;aACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC3D,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,OAAO,aAAa,CAAC,GAAG,EAAE,sBAAsB,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACzD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,IAAY,EAAE,OAAe;IAClE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CACxB,OAAe,EACf,EAAU,EACV,WAAmB,EACnB,SAAiB;IAEjB,uEAAuE;IACvE,qEAAqE;IACrE,sEAAsE;IACtE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC;SAChD,MAAM,CAAC,GAAG,EAAE,IAAI,OAAO,EAAE,CAAC;SAC1B,MAAM,CAAC,KAAK,CAAC,CAAC;IAEjB,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACpD,IAAI,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,KAAK,CAAC,CAAS;IACtB,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC"}

package/dist/agent/errors.d.ts

@@ -0,0 +1,90 @@
+/**
+ * Agent module error classes.
+ *
+ * All extend IronflowError. Codes are stable for programmatic handling.
+ */
+import { IronflowError } from "@ironflow/core";
+/**
+ * Thrown when an agent exceeds its configured turn budget.
+ *
+ * Default budget is 20 turns. Configurable via AgentConfig.maxTurns.
+ */
+export declare class MaxTurnsExceededError extends IronflowError {
+    constructor(maxTurns: number, options?: {
+        cause?: Error;
+    });
+}
+/**
+ * Base class for classified LLM errors emitted by llm().
+ */
+export declare class LLMError extends IronflowError {
+    constructor(message: string, options: {
+        code: string;
+        retryable?: boolean;
+        details?: Record<string, unknown>;
+        cause?: Error;
+    });
+}
+/**
+ * Provider refused the request (safety, policy, etc.).
+ */
+export declare class LLMRefusalError extends LLMError {
+    constructor(message: string, options?: {
+        details?: Record<string, unknown>;
+        cause?: Error;
+    });
+}
+/**
+ * Provider returned content that failed JSON parsing when JSON was required.
+ */
+export declare class LLMInvalidJSONError extends LLMError {
+    constructor(message: string, options?: {
+        details?: Record<string, unknown>;
+        cause?: Error;
+    });
+}
+/**
+ * Provider truncated the response by hitting max_tokens.
+ */
+export declare class LLMMaxTokensError extends LLMError {
+    constructor(message: string, options?: {
+        details?: Record<string, unknown>;
+        cause?: Error;
+    });
+}
+/**
+ * Thrown when tool() input fails Zod validation.
+ *
+ * Distinct from generic ValidationError so callers can differentiate
+ * agent-tool input failures from event-payload schema failures.
+ */
+export declare class ToolValidationError extends IronflowError {
+    constructor(toolName: string, issues: unknown, options?: {
+        cause?: Error;
+    });
+}
+/**
+ * Thrown when AgentConfig.tools contains two or more definitions sharing
+ * the same name. Silent overwrite would let LLM-driven dispatch route to
+ * an unintended handler — so we fail loudly at agent construction.
+ */
+export declare class DuplicateToolError extends IronflowError {
+    constructor(toolName: string);
+}
+/**
+ * Thrown when ctx.tool(name, args) is called with a name that isn't
+ * registered on AgentConfig.tools.
+ */
+export declare class ToolNotFoundError extends IronflowError {
+    constructor(toolName: string);
+}
+/**
+ * Thrown when memory.entityStream() is called without a projection.
+ *
+ * Per architecture decision: raw event replay is not exposed through
+ * the agent memory API. Consumers must define a projection.
+ */
+export declare class MemoryProjectionRequiredError extends IronflowError {
+    constructor(streamId: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/agent/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/agent/errors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C;;;;GAIG;AACH,qBAAa,qBAAsB,SAAQ,aAAa;gBAC1C,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,KAAK,CAAA;KAAE;CAS1D;AAED;;GAEG;AACH,qBAAa,QAAS,SAAQ,aAAa;gBAEvC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,KAAK,CAAC,EAAE,KAAK,CAAC;KACf;CAKJ;AAED;;GAEG;AACH,qBAAa,eAAgB,SAAQ,QAAQ;gBAC/B,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,KAAK,CAAC,EAAE,KAAK,CAAA;KAAE;CAS5F;AAED;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,QAAQ;gBACnC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,KAAK,CAAC,EAAE,KAAK,CAAA;KAAE;CAS5F;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,QAAQ;gBACjC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,KAAK,CAAC,EAAE,KAAK,CAAA;KAAE;CAS5F;AAED;;;;;GAKG;AACH,qBAAa,mBAAoB,SAAQ,aAAa;gBAElD,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,OAAO,EACf,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,KAAK,CAAA;KAAE;CAU9B;AAED;;;;GAIG;AACH,qBAAa,kBAAmB,SAAQ,aAAa;gBACvC,QAAQ,EAAE,MAAM;CAQ7B;AAED;;;GAGG;AACH,qBAAa,iBAAkB,SAAQ,aAAa;gBACtC,QAAQ,EAAE,MAAM;CAW7B;AAED;;;;;GAKG;AACH,qBAAa,6BAA8B,SAAQ,aAAa;gBAClD,QAAQ,EAAE,MAAM;CAW7B"}