@letsping/sdk 0.1.5 → 0.2.0

package/README.md

@@ -10,9 +10,9 @@ LetsPing is a behavioral firewall and Human-in-the-Loop (HITL) infrastructure la
 - **Smart-Accept Drift Adaptation:** Approval decisions mathematically alter the baseline. Old unused reasoning paths decay automatically via Exponential Moving Average (EMA).
 
 ## Requirements
-
 - Node.js 18+
 - TypeScript 5+ (recommended)
+- (Optional) `@langchain/langgraph` and `@langchain/core` for state persistence
 
 ## Installation
 
@@ -92,21 +92,115 @@ const { id } = await lp.defer({
 console.log(`Approval request queued → ${id}`);
 ```
 
-### Webhook Rehydration (Framework Agnostic)
-LetsPing does **not** magically inject state back into your framework natively. You must handle the webhook and rehydrate your specific framework manually.
+### Webhook Rehydration (Next.js Example)
+
+When you pass `state_snapshot` to `ask` / `defer`, the SDK:
+
+- Encrypts the snapshot with either `LETSPING_ENCRYPTION_KEY` or a one‑time DEK.
+- Uploads it directly to your storage bucket using a signed URL.
+- Includes a `state_download_url` (and DEK) in subsequent webhooks.
+
+You can use the built‑in `webhookHandler` to validate and hydrate webhooks in a Next.js App Router route:
 
 ```typescript
-// Example Webhook Route Handler
-if (body.status === "APPROVED") {
-    let hydratedState = null;
-    if (body.state_download_url) {
-        const res = await fetch(body.state_download_url);
-        hydratedState = lp._decrypt(await res.json());
-    }
-    // Manually push `hydratedState` back into your LangGraph/Vercel thread
+// Example Next.js App Router route
+import { NextRequest, NextResponse } from "next/server";
+import { LetsPing } from "@letsping/sdk";
+
+const lp = new LetsPing();
+const WEBHOOK_SECRET = process.env.LETSPING_WEBHOOK_SECRET!;
+
+export async function POST(req: NextRequest) {
+  const rawBody = await req.text();
+  const signature = req.headers.get("x-letsping-signature") || "";
+
+  try {
+    const { id, event, data, state_snapshot } = await lp.webhookHandler(
+      rawBody,
+      signature,
+      WEBHOOK_SECRET
+    );
+
+    // At this point:
+    // - `data` contains the decision payload (status, payload, patched_payload, metadata, etc.)
+    // - `state_snapshot` contains your decrypted agent state, if Cryo-Sleep was used.
+
+    await handleDecision({ id, event, data, state_snapshot });
+
+    return NextResponse.json({ ok: true });
+  } catch (err: any) {
+    console.error("LetsPing webhook error:", err);
+    return NextResponse.json({ error: "invalid webhook" }, { status: 400 });
+  }
 }
+
+async function handleDecision(args: {
+  id: string;
+  event: string;
+  data: any;
+  state_snapshot?: Record<string, any>;
+}) {
+  // Example: resume a workflow run or LangGraph thread using `state_snapshot`
+}
+```
+
+This pattern works similarly for Express/Fastify — call `lp.webhookHandler(rawBody, signature, secret)`, then resume your framework using the provided `state_snapshot`.
+
+### LangGraph Integration (Persisted State)
+
+LetsPing provides a `LetsPingCheckpointer` for LangGraph JS/TS under `@letsping/sdk/integrations/langgraph`.  
+In v0.2 this checkpointer persists checkpoints **remotely** via the LetsPing control plane — encrypted alongside your existing Cryo‑Sleep state in Supabase Storage. Threads can survive process restarts without you wiring your own database.
+
+```typescript
+import { StateGraph } from "@langchain/langgraph";
+import { LetsPing } from "@letsping/sdk";
+import { LetsPingCheckpointer } from "@letsping/sdk/integrations/langgraph";
+
+const lp = new LetsPing(process.env.LETSPING_API_KEY!);
+const checkpointer = new LetsPingCheckpointer(lp);
+
+const builder = new StateGraph<any /* your state type */>({});
+const graph = builder.compile({ checkpointer });
 ```
 
+#### Auto‑resuming a thread after approval (webhook + checkpointer)
+
+Because checkpoints are stored remotely, you can resume a LangGraph thread from any worker once a human clicks Approve. A minimal Next.js webhook + auto‑resume flow looks like:
+
+```ts
+// Example Next.js App Router route for LangGraph auto-resume
+import { NextRequest, NextResponse } from "next/server";
+import { LetsPing } from "@letsping/sdk";
+import { StateGraph } from "@langchain/langgraph";
+import { LetsPingCheckpointer } from "@letsping/sdk/integrations/langgraph";
+import { graphBuilder } from "@/lib/langgraph"; // your app's graph definition
+
+const lp = new LetsPing(process.env.LETSPING_API_KEY!);
+const checkpointer = new LetsPingCheckpointer(lp);
+const graph = graphBuilder.compile({ checkpointer });
+
+export async function POST(req: NextRequest) {
+  const raw = await req.text();
+  const sig = req.headers.get("x-letsping-signature") || "";
+
+  const event = await lp.webhookHandler(raw, sig, process.env.LETSPING_WEBHOOK_SECRET!);
+  const { data, state_snapshot } = event;
+
+  // You decide how to encode the thread id into your state snapshot.
+  const threadId = state_snapshot?.thread_id as string | undefined;
+  if (!threadId) return NextResponse.json({ ok: false, error: "missing_thread_id" }, { status: 400 });
+
+  // Resume the graph from the latest remote checkpoint.
+  await graph.invoke(state_snapshot.input, {
+    configurable: { thread_id: threadId },
+  });
+
+  return NextResponse.json({ ok: true });
+}
+```
+
+In your agent runner, you simply include `thread_id` and `state_snapshot` when you first call LetsPing from inside a LangGraph node. The checkpointer and webhook then keep the thread resumable across restarts.
+
 ## API Reference
 
 ### `new LetsPing(apiKey, options?)`
@@ -148,4 +242,68 @@ interface Decision {
 For full documentation, request schema examples, error codes, and dashboard integration see:  
 https://letsping.co/docs#sdk
 
-Deploy agents with confidence.
+Deploy agents with confidence.
+
+## 2-Minute Demo (Node/TypeScript)
+
+You can feel the full LetsPing loop (intercept → approve → resume) in under 2 minutes.
+
+```ts
+// demo.ts
+import { LetsPing } from "@letsping/sdk";
+
+async function main() {
+  const apiKey = process.env.LETSPING_API_KEY;
+  if (!apiKey) {
+    console.error("Missing LETSPING_API_KEY env var.");
+    process.exit(1);
+  }
+
+  const lp = new LetsPing(apiKey);
+
+  console.log("Sending demo approval request to LetsPing…");
+  const decision = await lp.ask({
+    service: "demo-agent",
+    action: "transfer_funds",
+    priority: "high",
+    payload: {
+      amount: 500,
+      currency: "USD",
+      recipient: "acct_demo_123",
+    },
+  });
+
+  if (decision.status === "REJECTED") {
+    console.log("Demo request REJECTED by human. No action taken.");
+  } else if (decision.status === "APPROVED_WITH_MODIFICATIONS") {
+    console.log("APPROVED WITH MODIFICATIONS:");
+    console.dir(decision.diff_summary, { depth: null });
+  } else {
+    console.log("APPROVED with original payload.");
+  }
+}
+
+main().catch((err) => {
+  console.error("Demo failed:", err);
+  process.exit(1);
+});
+```
+
+Run:
+
+```bash
+export LETSPING_API_KEY="lp_live_..."
+node demo.ts
+```
+
+Then open the LetsPing dashboard for your project, approve/reject the `demo-agent / transfer_funds` request, and watch the script resume.
+
+If you’re using the local tunnel (`npx @letsping/cli dev`), you can also point the SDK at it during local development:
+
+```ts
+const lp = new LetsPing(process.env.LETSPING_API_KEY!, {
+  baseUrl: "http://localhost:<port>/api",
+});
+```
+
+All `ask` / `defer` calls made through that client will flow through your local tunnel into the LetsPing dashboard.

package/dist/index.d.ts

@@ -8,6 +8,13 @@ export interface RequestOptions {
     state_snapshot?: Record<string, any>;
     timeoutMs?: number;
     role?: string;
+    /**
+     * Optional distributed tracing identifiers. If provided, these will be
+     * attached to the request envelope so downstream frameworks can stitch
+     * together multi-agent flows.
+     */
+    trace_id?: string;
+    parent_request_id?: string;
 }
 export interface Decision {
     status: "APPROVED" | "REJECTED" | "APPROVED_WITH_MODIFICATIONS";

package/dist/index.js

@@ -35,7 +35,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@letsping/sdk",
-      version: "0.1.5",
+      version: "0.2.0",
       description: "Behavioral Firewall and Cryo-Sleep State Parking for Autonomous Agents",
       main: "./dist/index.js",
       module: "./dist/index.mjs",
@@ -45,6 +45,11 @@ var require_package = __commonJS({
           types: "./dist/index.d.ts",
           require: "./dist/index.js",
           import: "./dist/index.mjs"
+        },
+        "./integrations/langgraph": {
+          types: "./dist/integrations/langgraph.d.ts",
+          require: "./dist/integrations/langgraph.js",
+          import: "./dist/integrations/langgraph.mjs"
         }
       },
       scripts: {
@@ -52,20 +57,29 @@ var require_package = __commonJS({
         dev: "tsup --watch",
         clean: "rm -rf dist .turbo"
       },
-      dependencies: {},
       peerDependencies: {
+        "@langchain/core": ">=0.1.52",
+        "@langchain/langgraph": ">=0.0.1",
         "@opentelemetry/api": "^1.0.0"
       },
       peerDependenciesMeta: {
         "@opentelemetry/api": {
           optional: true
+        },
+        "@langchain/langgraph": {
+          optional: true
+        },
+        "@langchain/core": {
+          optional: true
         }
       },
       devDependencies: {
-        tsup: "^8.0.0",
-        typescript: "^5.7.2",
+        "@langchain/core": "^1.1.28",
+        "@langchain/langgraph": "^1.1.5",
+        "@opentelemetry/api": "^1.9.0",
         "@types/node": "^22.0.0",
-        "@opentelemetry/api": "^1.9.0"
+        tsup: "^8.0.0",
+        typescript: "^5.7.2"
       },
       publishConfig: {
         access: "public"
@@ -83,7 +97,7 @@ __export(index_exports, {
 });
 module.exports = __toCommonJS(index_exports);
 var import_node_crypto = require("crypto");
-var SDK_VERSION = "0.1.5";
+var SDK_VERSION = "0.2.0";
 try {
   SDK_VERSION = require_package().version;
 } catch {
@@ -221,14 +235,27 @@ var LetsPing = class {
         }
       });
     }
+    const traceId = options.trace_id;
+    const parentId = options.parent_request_id;
+    const basePayload = options.payload || {};
+    const metaKey = "_lp_meta";
+    const existingMeta = basePayload[metaKey] || {};
+    const enrichedPayload = {
+      ...basePayload,
+      [metaKey]: {
+        ...existingMeta,
+        ...traceId ? { trace_id: traceId } : {},
+        ...parentId ? { parent_request_id: parentId } : {}
+      }
+    };
     try {
       const res = await this.request("POST", "/ingest", {
         service: options.service,
         action: options.action,
-        payload: this._encrypt(options.payload),
+        payload: this._encrypt(enrichedPayload),
         priority: options.priority || "medium",
         schema: options.schema,
-        metadata: { role: options.role, sdk: "node" }
+        metadata: { role: options.role, sdk: "node", trace_id: traceId, parent_request_id: parentId }
       });
       const { id, uploadUrl, dek } = res;
       if (uploadUrl && options.state_snapshot) {
@@ -311,10 +338,27 @@ var LetsPing = class {
         }
       });
     }
+    const traceId = options.trace_id;
+    const parentId = options.parent_request_id;
+    const basePayload = options.payload || {};
+    const metaKey = "_lp_meta";
+    const existingMeta = basePayload[metaKey] || {};
+    const enrichedPayload = {
+      ...basePayload,
+      [metaKey]: {
+        ...existingMeta,
+        ...traceId ? { trace_id: traceId } : {},
+        ...parentId ? { parent_request_id: parentId } : {}
+      }
+    };
     try {
       const res = await this.request("POST", "/ingest", {
-        ...options,
-        payload: this._encrypt(options.payload)
+        service: options.service,
+        action: options.action,
+        payload: this._encrypt(enrichedPayload),
+        priority: options.priority || "medium",
+        schema: options.schema,
+        metadata: { role: options.role, sdk: "node", trace_id: traceId, parent_request_id: parentId }
       });
       if (res.uploadUrl && options.state_snapshot) {
         try {
@@ -411,10 +455,25 @@ var LetsPing = class {
     };
   }
   async webhookHandler(payloadStr, signatureHeader, webhookSecret) {
-    const hmac = (0, import_node_crypto.createHmac)("sha256", webhookSecret).update(payloadStr).digest("hex");
     const sigParts = signatureHeader.split(",").map((p) => p.split("="));
     const sigMap = Object.fromEntries(sigParts);
-    if (sigMap["v1"] !== hmac) {
+    const rawTs = sigMap["t"];
+    const rawSig = sigMap["v1"];
+    if (!rawTs || !rawSig) {
+      throw new LetsPingError("LetsPing Error: Missing webhook signature fields", 401);
+    }
+    const ts = Number(rawTs);
+    if (!Number.isFinite(ts)) {
+      throw new LetsPingError("LetsPing Error: Invalid webhook timestamp", 401);
+    }
+    const now = Date.now();
+    const skewMs = Math.abs(now - ts);
+    const maxSkewMs = 5 * 60 * 1e3;
+    if (skewMs > maxSkewMs) {
+      throw new LetsPingError("LetsPing Error: Webhook replay window exceeded", 401);
+    }
+    const expected = (0, import_node_crypto.createHmac)("sha256", webhookSecret).update(payloadStr).digest("hex");
+    if (rawSig !== expected) {
       throw new LetsPingError("LetsPing Error: Invalid webhook signature", 401);
     }
     const payload = JSON.parse(payloadStr);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../package.json","../src/index.ts"],"sourcesContent":["{\n  \"name\": \"@letsping/sdk\",\n  \"version\": \"0.1.5\",\n  \"description\": \"Behavioral Firewall and Cryo-Sleep State Parking for Autonomous Agents\",\n  \"main\": \"./dist/index.js\",\n  \"module\": \"./dist/index.mjs\",\n  \"types\": \"./dist/index.d.ts\",\n  \"exports\": {\n    \".\": {\n      \"types\": \"./dist/index.d.ts\",\n      \"require\": \"./dist/index.js\",\n      \"import\": \"./dist/index.mjs\"\n    }\n  },\n  \"scripts\": {\n    \"build\": \"tsup && tsc --emitDeclarationOnly --outDir dist\",\n    \"dev\": \"tsup --watch\",\n    \"clean\": \"rm -rf dist .turbo\"\n  },\n  \"dependencies\": {},\n  \"peerDependencies\": {\n    \"@opentelemetry/api\": \"^1.0.0\"\n  },\n  \"peerDependenciesMeta\": {\n    \"@opentelemetry/api\": {\n      \"optional\": true\n    }\n  },\n  \"devDependencies\": {\n    \"tsup\": \"^8.0.0\",\n    \"typescript\": \"^5.7.2\",\n    \"@types/node\": \"^22.0.0\",\n    \"@opentelemetry/api\": \"^1.9.0\"\n  },\n  \"publishConfig\": {\n    \"access\": \"public\"\n  }\n}","import { createCipheriv, createDecipheriv, randomBytes, createHmac } from \"node:crypto\";\r\n\r\nlet SDK_VERSION = \"0.1.5\";\r\ntry {\r\n\r\n    SDK_VERSION = require(\"../package.json\").version;\r\n} catch { }\r\n\r\nlet otelApi: any = null;\r\nlet otelTried = false;\r\n\r\nasync function getOtel() {\r\n    if (otelTried) return otelApi;\r\n    otelTried = true;\r\n    try {\r\n        otelApi = await import(\"@opentelemetry/api\");\r\n    } catch { }\r\n    return otelApi;\r\n}\r\n\r\nexport type Priority = \"low\" | \"medium\" | \"high\" | \"critical\";\r\n\r\nexport interface RequestOptions {\r\n\r\n    service: string;\r\n\r\n    action: string;\r\n\r\n    payload: Record<string, any>;\r\n\r\n    priority?: Priority;\r\n\r\n    schema?: Record<string, any>;\r\n\r\n    state_snapshot?: Record<string, any>;\r\n\r\n    timeoutMs?: number;\r\n\r\n    role?: string;\r\n}\r\n\r\nexport interface Decision {\r\n    status: \"APPROVED\" | \"REJECTED\" | \"APPROVED_WITH_MODIFICATIONS\";\r\n\r\n    payload: any;\r\n\r\n    patched_payload?: any;\r\n\r\n    diff_summary?: any;\r\n    metadata?: {\r\n        resolved_at: string;\r\n        actor_id: string;\r\n        method?: string;\r\n    };\r\n}\r\n\r\nexport class LetsPingError extends Error {\r\n    constructor(message: string, public status?: number) {\r\n        super(message);\r\n        this.name = \"LetsPingError\";\r\n    }\r\n}\r\n\r\ninterface EncEnvelope {\r\n    _lp_enc: true;\r\n    iv: string;\r\n    ct: string;\r\n}\r\n\r\nfunction isEncEnvelope(v: unknown): v is EncEnvelope {\r\n    return (\r\n        typeof v === \"object\" && v !== null &&\r\n        (v as any)._lp_enc === true &&\r\n        typeof (v as any).iv === \"string\" &&\r\n        typeof (v as any).ct === \"string\"\r\n    );\r\n}\r\n\r\nfunction encryptPayload(keyBase64: string, payload: Record<string, any>): EncEnvelope {\r\n    const keyBuf = Buffer.from(keyBase64, \"base64\");\r\n    const iv = randomBytes(12);\r\n    const cipher = createCipheriv(\"aes-256-gcm\", keyBuf, iv);\r\n    const plain = Buffer.from(JSON.stringify(payload), \"utf8\");\r\n    const ct = Buffer.concat([cipher.update(plain), cipher.final(), cipher.getAuthTag()]);\r\n    return {\r\n        _lp_enc: true,\r\n        iv: iv.toString(\"base64\"),\r\n        ct: ct.toString(\"base64\"),\r\n    };\r\n}\r\n\r\nfunction decryptPayload(keyBase64: string, envelope: EncEnvelope): Record<string, any> {\r\n    const keyBuf = Buffer.from(keyBase64, \"base64\");\r\n    const iv = Buffer.from(envelope.iv, \"base64\");\r\n    const ctFull = Buffer.from(envelope.ct, \"base64\");\r\n\r\n    const authTag = ctFull.subarray(ctFull.length - 16);\r\n    const ct = ctFull.subarray(0, ctFull.length - 16);\r\n    const decipher = createDecipheriv(\"aes-256-gcm\", keyBuf, iv);\r\n    decipher.setAuthTag(authTag);\r\n    const plain = Buffer.concat([decipher.update(ct), decipher.final()]);\r\n    return JSON.parse(plain.toString(\"utf8\"));\r\n}\r\n\r\nfunction computeDiff(original: any, patched: any): any {\r\n    if (original === patched) return null;\r\n\r\n    if (\r\n        typeof original !== \"object\" ||\r\n        typeof patched !== \"object\" ||\r\n        original === null ||\r\n        patched === null ||\r\n        Array.isArray(original) ||\r\n        Array.isArray(patched)\r\n    ) {\r\n        if (JSON.stringify(original) !== JSON.stringify(patched)) {\r\n            return { from: original, to: patched };\r\n        }\r\n        return null;\r\n    }\r\n\r\n    const changes: Record<string, any> = {};\r\n    let hasChanges = false;\r\n    const allKeys = new Set([...Object.keys(original), ...Object.keys(patched)]);\r\n\r\n    for (const key of allKeys) {\r\n        const oV = original[key];\r\n        const pV = patched[key];\r\n\r\n        if (!(key in original)) {\r\n            changes[key] = { from: undefined, to: pV };\r\n            hasChanges = true;\r\n        } else if (!(key in patched)) {\r\n            changes[key] = { from: oV, to: undefined };\r\n            hasChanges = true;\r\n        } else {\r\n            const nestedDiff = computeDiff(oV, pV);\r\n            if (nestedDiff) {\r\n                changes[key] = nestedDiff;\r\n                hasChanges = true;\r\n            }\r\n        }\r\n    }\r\n\r\n    return hasChanges ? changes : null;\r\n}\r\n\r\nexport class LetsPing {\r\n    private readonly apiKey: string;\r\n    private readonly baseUrl: string;\r\n    private readonly encryptionKey: string | null;\r\n\r\n    constructor(apiKey?: string, options?: { baseUrl?: string; encryptionKey?: string }) {\r\n        const key = apiKey || process.env.LETSPING_API_KEY;\r\n        if (!key) throw new Error(\"LetsPing: API Key is required. Pass it to the constructor or set LETSPING_API_KEY env var.\");\r\n\r\n        this.apiKey = key;\r\n        this.baseUrl = options?.baseUrl || \"https://letsping.co/api\";\r\n        this.encryptionKey = options?.encryptionKey\r\n            ?? process.env.LETSPING_ENCRYPTION_KEY\r\n            ?? null;\r\n    }\r\n\r\n    private _encrypt(payload: Record<string, any>): Record<string, any> {\r\n        if (!this.encryptionKey) return payload;\r\n        return encryptPayload(this.encryptionKey, payload) as any;\r\n    }\r\n\r\n    private _decrypt(val: any): any {\r\n        if (!this.encryptionKey || !isEncEnvelope(val)) return val;\r\n        try {\r\n            return decryptPayload(this.encryptionKey, val);\r\n        } catch {\r\n\r\n            return val;\r\n        }\r\n    }\r\n\r\n    private _prepareStateUpload(\r\n        stateSnapshot: Record<string, any>,\r\n        fallbackDek?: string\r\n    ): { data: any; contentType: string } {\r\n        if (this.encryptionKey) {\r\n            return {\r\n                data: this._encrypt(stateSnapshot),\r\n                contentType: \"application/json\"\r\n            };\r\n        } else if (fallbackDek) {\r\n            const keyBuf = Buffer.from(fallbackDek, \"base64\");\r\n            const iv = randomBytes(12);\r\n            const cipher = createCipheriv(\"aes-256-gcm\", keyBuf, iv);\r\n            const plain = Buffer.from(JSON.stringify(stateSnapshot), \"utf8\");\r\n            const ct = Buffer.concat([cipher.update(plain), cipher.final(), cipher.getAuthTag()]);\r\n            const finalPayload = Buffer.concat([iv, ct]);\r\n\r\n            return {\r\n                data: finalPayload,\r\n                contentType: \"application/octet-stream\"\r\n            };\r\n        }\r\n        return {\r\n            data: stateSnapshot,\r\n            contentType: \"application/json\"\r\n        };\r\n    }\r\n\r\n    async ask(options: RequestOptions): Promise<Decision> {\r\n        if (options.schema && (options.schema as any)._def) {\r\n            throw new LetsPingError(\"LetsPing Error: Raw Zod schema detected. You must convert it to JSON Schema (e.g. using 'zod-to-json-schema') before passing it to the SDK.\");\r\n        }\r\n\r\n        const otel = await getOtel();\r\n        let span: any = null;\r\n        if (otel && otel.trace) {\r\n            const tracer = otel.trace.getTracer(\"letsping-sdk\");\r\n            span = tracer.startSpan(`letsping.ask`, {\r\n                attributes: {\r\n                    \"letsping.service\": options.service,\r\n                    \"letsping.action\": options.action,\r\n                    \"letsping.priority\": options.priority || \"medium\",\r\n                }\r\n            });\r\n        }\r\n\r\n        try {\r\n            const res = await this.request<{ id: string, uploadUrl?: string, dek?: string }>(\"POST\", \"/ingest\", {\r\n                service: options.service,\r\n                action: options.action,\r\n                payload: this._encrypt(options.payload),\r\n                priority: options.priority || \"medium\",\r\n                schema: options.schema,\r\n                metadata: { role: options.role, sdk: \"node\" }\r\n            });\r\n\r\n            const { id, uploadUrl, dek } = res;\r\n\r\n            if (uploadUrl && options.state_snapshot) {\r\n                try {\r\n                    const { data, contentType } = this._prepareStateUpload(options.state_snapshot, dek);\r\n                    const putRes = await fetch(uploadUrl, {\r\n                        method: \"PUT\",\r\n                        headers: { \"Content-Type\": contentType },\r\n                        body: Buffer.isBuffer(data) ? (data as any) : JSON.stringify(data)\r\n                    });\r\n                    if (!putRes.ok) {\r\n                        console.warn(\"LetsPing: Failed to upload state_snapshot to storage\", await putRes.text());\r\n                    }\r\n                } catch (e: any) {\r\n                    console.warn(\"LetsPing: Exception uploading state_snapshot\", e.message);\r\n                }\r\n            }\r\n\r\n            if (span) span.setAttribute(\"letsping.request_id\", id);\r\n\r\n            const timeout = options.timeoutMs || 24 * 60 * 60 * 1000;\r\n            const start = Date.now();\r\n            let delay = 1000;\r\n            const maxDelay = 10000;\r\n\r\n            while (Date.now() - start < timeout) {\r\n                try {\r\n                    const check = await this.request<any>(\"GET\", `/status/${id}`);\r\n\r\n                    if (check.status === \"APPROVED\" || check.status === \"REJECTED\") {\r\n                        const decryptedPayload = this._decrypt(check.payload) ?? options.payload;\r\n                        const decryptedPatched = check.patched_payload ? this._decrypt(check.patched_payload) : undefined;\r\n\r\n                        let diff_summary;\r\n                        let finalStatus = check.status;\r\n                        if (check.status === \"APPROVED\" && decryptedPatched !== undefined) {\r\n                            finalStatus = \"APPROVED_WITH_MODIFICATIONS\";\r\n                            const diff = computeDiff(decryptedPayload, decryptedPatched);\r\n                            diff_summary = diff ? { changes: diff } : { changes: \"Unknown structure changes\" };\r\n                        }\r\n\r\n                        if (span) {\r\n                            span.setAttribute(\"letsping.status\", finalStatus);\r\n                            if (check.actor_id) span.setAttribute(\"letsping.actor_id\", check.actor_id);\r\n                            span.end();\r\n                        }\r\n\r\n                        return {\r\n                            status: finalStatus,\r\n                            payload: decryptedPayload,\r\n                            patched_payload: decryptedPatched,\r\n                            diff_summary,\r\n                            metadata: {\r\n                                resolved_at: check.resolved_at,\r\n                                actor_id: check.actor_id,\r\n                            }\r\n                        };\r\n                    }\r\n                } catch (e: any) {\r\n                    const s = e.status;\r\n                    if (s && s >= 400 && s < 500 && s !== 404 && s !== 429) throw e;\r\n                }\r\n\r\n                const jitter = Math.random() * 200;\r\n                await new Promise(r => setTimeout(r, delay + jitter));\r\n                delay = Math.min(delay * 1.5, maxDelay);\r\n            }\r\n\r\n            throw new LetsPingError(`Request ${id} timed out waiting for approval.`);\r\n        } catch (error: any) {\r\n            if (span) {\r\n                span.recordException(error);\r\n                span.setStatus({ code: otel.SpanStatusCode.ERROR });\r\n                span.end();\r\n            }\r\n            throw error;\r\n        }\r\n    }\r\n\r\n    async defer(options: RequestOptions): Promise<{ id: string }> {\r\n        const otel = await getOtel();\r\n        let span: any = null;\r\n        if (otel && otel.trace) {\r\n            const tracer = otel.trace.getTracer(\"letsping-sdk\");\r\n            span = tracer.startSpan(`letsping.defer`, {\r\n                attributes: {\r\n                    \"letsping.service\": options.service,\r\n                    \"letsping.action\": options.action,\r\n                    \"letsping.priority\": options.priority || \"medium\",\r\n                }\r\n            });\r\n        }\r\n\r\n        try {\r\n            const res = await this.request<{ id: string, uploadUrl?: string, dek?: string }>(\"POST\", \"/ingest\", {\r\n                ...options,\r\n                payload: this._encrypt(options.payload),\r\n            });\r\n            if (res.uploadUrl && options.state_snapshot) {\r\n                try {\r\n                    const { data, contentType } = this._prepareStateUpload(options.state_snapshot, res.dek);\r\n                    const putRes = await fetch(res.uploadUrl, {\r\n                        method: \"PUT\",\r\n                        headers: { \"Content-Type\": contentType },\r\n                        body: Buffer.isBuffer(data) ? (data as any) : JSON.stringify(data)\r\n                    });\r\n                    if (!putRes.ok) {\r\n                        console.warn(\"LetsPing: Failed to upload state_snapshot to storage\", await putRes.text());\r\n                    }\r\n                } catch (e: any) {\r\n                    console.warn(\"LetsPing: Exception uploading state_snapshot\", e.message);\r\n                }\r\n            }\r\n\r\n            if (span) {\r\n                span.setAttribute(\"letsping.request_id\", res.id);\r\n                span.end();\r\n            }\r\n            return { id: res.id };\r\n        } catch (error: any) {\r\n            if (span) {\r\n                span.recordException(error);\r\n                span.setStatus({ code: otel.SpanStatusCode.ERROR });\r\n                span.end();\r\n            }\r\n            throw error;\r\n        }\r\n    }\r\n\r\n    private async request<T>(method: string, path: string, body?: any): Promise<T> {\r\n        const headers: Record<string, string> = {\r\n            \"Authorization\": `Bearer ${this.apiKey}`,\r\n            \"Content-Type\": \"application/json\",\r\n            \"User-Agent\": `letsping-node/${SDK_VERSION}`,\r\n        };\r\n\r\n        try {\r\n            const response = await fetch(`${this.baseUrl}${path}`, {\r\n                method,\r\n                headers,\r\n                body: body ? JSON.stringify(body) : undefined,\r\n            });\r\n\r\n            if (!response.ok) {\r\n                const errorText = await response.text();\r\n                let message = errorText;\r\n                try {\r\n                    const json = JSON.parse(errorText);\r\n                    if (json.message) message = json.message;\r\n                } catch { }\r\n                throw new LetsPingError(`API Error [${response.status}]: ${message}`, response.status);\r\n            }\r\n\r\n            return response.json() as Promise<T>;\r\n        } catch (e: any) {\r\n            if (e instanceof LetsPingError) throw e;\r\n            throw new LetsPingError(`Network Error: ${e.message}`);\r\n        }\r\n    }\r\n\r\n    tool(service: string, action: string, priority: Priority = \"medium\"): (context: string | Record<string, any>) => Promise<string> {\r\n        return async (context: string | Record<string, any>): Promise<string> => {\r\n            let payload: Record<string, any>;\r\n            try {\r\n                if (typeof context === \"string\") {\r\n                    try { payload = JSON.parse(context); }\r\n                    catch { payload = { raw_context: context }; }\r\n                } else if (typeof context === \"object\" && context !== null) {\r\n                    payload = context;\r\n                } else {\r\n                    payload = { raw_context: String(context) };\r\n                }\r\n\r\n                const result = await this.ask({ service, action, payload, priority });\r\n\r\n                if (result.status === \"REJECTED\") {\r\n                    return \"STOP: Action Rejected by Human.\";\r\n                }\r\n\r\n                if (result.status === \"APPROVED_WITH_MODIFICATIONS\") {\r\n                    return JSON.stringify({\r\n                        status: \"APPROVED_WITH_MODIFICATIONS\",\r\n                        message: \"The human reviewer authorized this action but modified your original payload. Please review the diff_summary to learn from this correction.\",\r\n                        diff_summary: result.diff_summary,\r\n                        original_payload: result.payload,\r\n                        executed_payload: result.patched_payload\r\n                    });\r\n                }\r\n\r\n                return JSON.stringify({\r\n                    status: \"APPROVED\",\r\n                    executed_payload: result.payload\r\n                });\r\n            } catch (e: any) {\r\n                return `ERROR: System Failure: ${e.message}`;\r\n            }\r\n        };\r\n    }\r\n\r\n    async webhookHandler(\r\n        payloadStr: string,\r\n        signatureHeader: string,\r\n        webhookSecret: string\r\n    ): Promise<{ id: string; event: string; data: Decision; state_snapshot?: Record<string, any> }> {\r\n        const hmac = createHmac(\"sha256\", webhookSecret).update(payloadStr).digest(\"hex\");\r\n        const sigParts = signatureHeader.split(\",\").map(p => p.split(\"=\"));\r\n        const sigMap = Object.fromEntries(sigParts);\r\n\r\n        if (sigMap[\"v1\"] !== hmac) {\r\n            throw new LetsPingError(\"LetsPing Error: Invalid webhook signature\", 401);\r\n        }\r\n\r\n        const payload = JSON.parse(payloadStr);\r\n        const data = payload.data;\r\n        let state_snapshot = undefined;\r\n\r\n        if (data && data.state_download_url) {\r\n            try {\r\n                const res = await fetch(data.state_download_url);\r\n                if (res.ok) {\r\n                    const contentType = res.headers.get(\"content-type\") || \"\";\r\n                    if (contentType.includes(\"application/octet-stream\")) {\r\n                        const fallbackDek = data.dek;\r\n                        if (fallbackDek) {\r\n                            const buffer = Buffer.from(await res.arrayBuffer());\r\n                            const keyBuf = Buffer.from(fallbackDek, \"base64\");\r\n                            const iv = buffer.subarray(0, 12);\r\n                            const ctFull = buffer.subarray(12);\r\n\r\n                            const authTag = ctFull.subarray(ctFull.length - 16);\r\n                            const ct = ctFull.subarray(0, ctFull.length - 16);\r\n\r\n                            const decipher = createDecipheriv(\"aes-256-gcm\", keyBuf, iv);\r\n                            decipher.setAuthTag(authTag);\r\n                            const plain = Buffer.concat([decipher.update(ct), decipher.final()]);\r\n                            state_snapshot = JSON.parse(plain.toString(\"utf8\"));\r\n                        } else {\r\n                            console.warn(\"LetsPing: Missing fallback DEK to decrypt octet-stream storage file\");\r\n                        }\r\n                    } else {\r\n                        const encState = await res.json();\r\n                        state_snapshot = this._decrypt(encState);\r\n                    }\r\n                } else {\r\n                    console.warn(\"LetsPing: Could not fetch state_snapshot from storage\", await res.text());\r\n                }\r\n            } catch (e: any) {\r\n                console.warn(\"LetsPing: Exception downloading state_snapshot from webhook url\", e.message);\r\n            }\r\n        }\r\n\r\n        return {\r\n            id: payload.id,\r\n            event: payload.event,\r\n            data,\r\n            state_snapshot\r\n        };\r\n    }\r\n}\r\n\r\nexport { computeDiff };"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA,iBAAAA,UAAAC,SAAA;AAAA,IAAAA,QAAA;AAAA,MACE,MAAQ;AAAA,MACR,SAAW;AAAA,MACX,aAAe;AAAA,MACf,MAAQ;AAAA,MACR,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,QACT,KAAK;AAAA,UACH,OAAS;AAAA,UACT,SAAW;AAAA,UACX,QAAU;AAAA,QACZ;AAAA,MACF;AAAA,MACA,SAAW;AAAA,QACT,OAAS;AAAA,QACT,KAAO;AAAA,QACP,OAAS;AAAA,MACX;AAAA,MACA,cAAgB,CAAC;AAAA,MACjB,kBAAoB;AAAA,QAClB,sBAAsB;AAAA,MACxB;AAAA,MACA,sBAAwB;AAAA,QACtB,sBAAsB;AAAA,UACpB,UAAY;AAAA,QACd;AAAA,MACF;AAAA,MACA,iBAAmB;AAAA,QACjB,MAAQ;AAAA,QACR,YAAc;AAAA,QACd,eAAe;AAAA,QACf,sBAAsB;AAAA,MACxB;AAAA,MACA,eAAiB;AAAA,QACf,QAAU;AAAA,MACZ;AAAA,IACF;AAAA;AAAA;;;ACrCA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,yBAA0E;AAE1E,IAAI,cAAc;AAClB,IAAI;AAEA,gBAAc,kBAA2B;AAC7C,QAAQ;AAAE;AAEV,IAAI,UAAe;AACnB,IAAI,YAAY;AAEhB,eAAe,UAAU;AACrB,MAAI,UAAW,QAAO;AACtB,cAAY;AACZ,MAAI;AACA,cAAU,MAAM,OAAO,oBAAoB;AAAA,EAC/C,QAAQ;AAAA,EAAE;AACV,SAAO;AACX;AAsCO,IAAM,gBAAN,cAA4B,MAAM;AAAA,EACrC,YAAY,SAAwB,QAAiB;AACjD,UAAM,OAAO;AADmB;AAEhC,SAAK,OAAO;AAAA,EAChB;AACJ;AAQA,SAAS,cAAc,GAA8B;AACjD,SACI,OAAO,MAAM,YAAY,MAAM,QAC9B,EAAU,YAAY,QACvB,OAAQ,EAAU,OAAO,YACzB,OAAQ,EAAU,OAAO;AAEjC;AAEA,SAAS,eAAe,WAAmB,SAA2C;AAClF,QAAM,SAAS,OAAO,KAAK,WAAW,QAAQ;AAC9C,QAAM,SAAK,gCAAY,EAAE;AACzB,QAAM,aAAS,mCAAe,eAAe,QAAQ,EAAE;AACvD,QAAM,QAAQ,OAAO,KAAK,KAAK,UAAU,OAAO,GAAG,MAAM;AACzD,QAAM,KAAK,OAAO,OAAO,CAAC,OAAO,OAAO,KAAK,GAAG,OAAO,MAAM,GAAG,OAAO,WAAW,CAAC,CAAC;AACpF,SAAO;AAAA,IACH,SAAS;AAAA,IACT,IAAI,GAAG,SAAS,QAAQ;AAAA,IACxB,IAAI,GAAG,SAAS,QAAQ;AAAA,EAC5B;AACJ;AAEA,SAAS,eAAe,WAAmB,UAA4C;AACnF,QAAM,SAAS,OAAO,KAAK,WAAW,QAAQ;AAC9C,QAAM,KAAK,OAAO,KAAK,SAAS,IAAI,QAAQ;AAC5C,QAAM,SAAS,OAAO,KAAK,SAAS,IAAI,QAAQ;AAEhD,QAAM,UAAU,OAAO,SAAS,OAAO,SAAS,EAAE;AAClD,QAAM,KAAK,OAAO,SAAS,GAAG,OAAO,SAAS,EAAE;AAChD,QAAM,eAAW,qCAAiB,eAAe,QAAQ,EAAE;AAC3D,WAAS,WAAW,OAAO;AAC3B,QAAM,QAAQ,OAAO,OAAO,CAAC,SAAS,OAAO,EAAE,GAAG,SAAS,MAAM,CAAC,CAAC;AACnE,SAAO,KAAK,MAAM,MAAM,SAAS,MAAM,CAAC;AAC5C;AAEA,SAAS,YAAY,UAAe,SAAmB;AACnD,MAAI,aAAa,QAAS,QAAO;AAEjC,MACI,OAAO,aAAa,YACpB,OAAO,YAAY,YACnB,aAAa,QACb,YAAY,QACZ,MAAM,QAAQ,QAAQ,KACtB,MAAM,QAAQ,OAAO,GACvB;AACE,QAAI,KAAK,UAAU,QAAQ,MAAM,KAAK,UAAU,OAAO,GAAG;AACtD,aAAO,EAAE,MAAM,UAAU,IAAI,QAAQ;AAAA,IACzC;AACA,WAAO;AAAA,EACX;AAEA,QAAM,UAA+B,CAAC;AACtC,MAAI,aAAa;AACjB,QAAM,UAAU,oBAAI,IAAI,CAAC,GAAG,OAAO,KAAK,QAAQ,GAAG,GAAG,OAAO,KAAK,OAAO,CAAC,CAAC;AAE3E,aAAW,OAAO,SAAS;AACvB,UAAM,KAAK,SAAS,GAAG;AACvB,UAAM,KAAK,QAAQ,GAAG;AAEtB,QAAI,EAAE,OAAO,WAAW;AACpB,cAAQ,GAAG,IAAI,EAAE,MAAM,QAAW,IAAI,GAAG;AACzC,mBAAa;AAAA,IACjB,WAAW,EAAE,OAAO,UAAU;AAC1B,cAAQ,GAAG,IAAI,EAAE,MAAM,IAAI,IAAI,OAAU;AACzC,mBAAa;AAAA,IACjB,OAAO;AACH,YAAM,aAAa,YAAY,IAAI,EAAE;AACrC,UAAI,YAAY;AACZ,gBAAQ,GAAG,IAAI;AACf,qBAAa;AAAA,MACjB;AAAA,IACJ;AAAA,EACJ;AAEA,SAAO,aAAa,UAAU;AAClC;AAEO,IAAM,WAAN,MAAe;AAAA,EAKlB,YAAY,QAAiB,SAAwD;AACjF,UAAM,MAAM,UAAU,QAAQ,IAAI;AAClC,QAAI,CAAC,IAAK,OAAM,IAAI,MAAM,4FAA4F;AAEtH,SAAK,SAAS;AACd,SAAK,UAAU,SAAS,WAAW;AACnC,SAAK,gBAAgB,SAAS,iBACvB,QAAQ,IAAI,2BACZ;AAAA,EACX;AAAA,EAEQ,SAAS,SAAmD;AAChE,QAAI,CAAC,KAAK,cAAe,QAAO;AAChC,WAAO,eAAe,KAAK,eAAe,OAAO;AAAA,EACrD;AAAA,EAEQ,SAAS,KAAe;AAC5B,QAAI,CAAC,KAAK,iBAAiB,CAAC,cAAc,GAAG,EAAG,QAAO;AACvD,QAAI;AACA,aAAO,eAAe,KAAK,eAAe,GAAG;AAAA,IACjD,QAAQ;AAEJ,aAAO;AAAA,IACX;AAAA,EACJ;AAAA,EAEQ,oBACJ,eACA,aACkC;AAClC,QAAI,KAAK,eAAe;AACpB,aAAO;AAAA,QACH,MAAM,KAAK,SAAS,aAAa;AAAA,QACjC,aAAa;AAAA,MACjB;AAAA,IACJ,WAAW,aAAa;AACpB,YAAM,SAAS,OAAO,KAAK,aAAa,QAAQ;AAChD,YAAM,SAAK,gCAAY,EAAE;AACzB,YAAM,aAAS,mCAAe,eAAe,QAAQ,EAAE;AACvD,YAAM,QAAQ,OAAO,KAAK,KAAK,UAAU,aAAa,GAAG,MAAM;AAC/D,YAAM,KAAK,OAAO,OAAO,CAAC,OAAO,OAAO,KAAK,GAAG,OAAO,MAAM,GAAG,OAAO,WAAW,CAAC,CAAC;AACpF,YAAM,eAAe,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;AAE3C,aAAO;AAAA,QACH,MAAM;AAAA,QACN,aAAa;AAAA,MACjB;AAAA,IACJ;AACA,WAAO;AAAA,MACH,MAAM;AAAA,MACN,aAAa;AAAA,IACjB;AAAA,EACJ;AAAA,EAEA,MAAM,IAAI,SAA4C;AAClD,QAAI,QAAQ,UAAW,QAAQ,OAAe,MAAM;AAChD,YAAM,IAAI,cAAc,6IAA6I;AAAA,IACzK;AAEA,UAAM,OAAO,MAAM,QAAQ;AAC3B,QAAI,OAAY;AAChB,QAAI,QAAQ,KAAK,OAAO;AACpB,YAAM,SAAS,KAAK,MAAM,UAAU,cAAc;AAClD,aAAO,OAAO,UAAU,gBAAgB;AAAA,QACpC,YAAY;AAAA,UACR,oBAAoB,QAAQ;AAAA,UAC5B,mBAAmB,QAAQ;AAAA,UAC3B,qBAAqB,QAAQ,YAAY;AAAA,QAC7C;AAAA,MACJ,CAAC;AAAA,IACL;AAEA,QAAI;AACA,YAAM,MAAM,MAAM,KAAK,QAA0D,QAAQ,WAAW;AAAA,QAChG,SAAS,QAAQ;AAAA,QACjB,QAAQ,QAAQ;AAAA,QAChB,SAAS,KAAK,SAAS,QAAQ,OAAO;AAAA,QACtC,UAAU,QAAQ,YAAY;AAAA,QAC9B,QAAQ,QAAQ;AAAA,QAChB,UAAU,EAAE,MAAM,QAAQ,MAAM,KAAK,OAAO;AAAA,MAChD,CAAC;AAED,YAAM,EAAE,IAAI,WAAW,IAAI,IAAI;AAE/B,UAAI,aAAa,QAAQ,gBAAgB;AACrC,YAAI;AACA,gBAAM,EAAE,MAAM,YAAY,IAAI,KAAK,oBAAoB,QAAQ,gBAAgB,GAAG;AAClF,gBAAM,SAAS,MAAM,MAAM,WAAW;AAAA,YAClC,QAAQ;AAAA,YACR,SAAS,EAAE,gBAAgB,YAAY;AAAA,YACvC,MAAM,OAAO,SAAS,IAAI,IAAK,OAAe,KAAK,UAAU,IAAI;AAAA,UACrE,CAAC;AACD,cAAI,CAAC,OAAO,IAAI;AACZ,oBAAQ,KAAK,wDAAwD,MAAM,OAAO,KAAK,CAAC;AAAA,UAC5F;AAAA,QACJ,SAAS,GAAQ;AACb,kBAAQ,KAAK,gDAAgD,EAAE,OAAO;AAAA,QAC1E;AAAA,MACJ;AAEA,UAAI,KAAM,MAAK,aAAa,uBAAuB,EAAE;AAErD,YAAM,UAAU,QAAQ,aAAa,KAAK,KAAK,KAAK;AACpD,YAAM,QAAQ,KAAK,IAAI;AACvB,UAAI,QAAQ;AACZ,YAAM,WAAW;AAEjB,aAAO,KAAK,IAAI,IAAI,QAAQ,SAAS;AACjC,YAAI;AACA,gBAAM,QAAQ,MAAM,KAAK,QAAa,OAAO,WAAW,EAAE,EAAE;AAE5D,cAAI,MAAM,WAAW,cAAc,MAAM,WAAW,YAAY;AAC5D,kBAAM,mBAAmB,KAAK,SAAS,MAAM,OAAO,KAAK,QAAQ;AACjE,kBAAM,mBAAmB,MAAM,kBAAkB,KAAK,SAAS,MAAM,eAAe,IAAI;AAExF,gBAAI;AACJ,gBAAI,cAAc,MAAM;AACxB,gBAAI,MAAM,WAAW,cAAc,qBAAqB,QAAW;AAC/D,4BAAc;AACd,oBAAM,OAAO,YAAY,kBAAkB,gBAAgB;AAC3D,6BAAe,OAAO,EAAE,SAAS,KAAK,IAAI,EAAE,SAAS,4BAA4B;AAAA,YACrF;AAEA,gBAAI,MAAM;AACN,mBAAK,aAAa,mBAAmB,WAAW;AAChD,kBAAI,MAAM,SAAU,MAAK,aAAa,qBAAqB,MAAM,QAAQ;AACzE,mBAAK,IAAI;AAAA,YACb;AAEA,mBAAO;AAAA,cACH,QAAQ;AAAA,cACR,SAAS;AAAA,cACT,iBAAiB;AAAA,cACjB;AAAA,cACA,UAAU;AAAA,gBACN,aAAa,MAAM;AAAA,gBACnB,UAAU,MAAM;AAAA,cACpB;AAAA,YACJ;AAAA,UACJ;AAAA,QACJ,SAAS,GAAQ;AACb,gBAAM,IAAI,EAAE;AACZ,cAAI,KAAK,KAAK,OAAO,IAAI,OAAO,MAAM,OAAO,MAAM,IAAK,OAAM;AAAA,QAClE;AAEA,cAAM,SAAS,KAAK,OAAO,IAAI;AAC/B,cAAM,IAAI,QAAQ,OAAK,WAAW,GAAG,QAAQ,MAAM,CAAC;AACpD,gBAAQ,KAAK,IAAI,QAAQ,KAAK,QAAQ;AAAA,MAC1C;AAEA,YAAM,IAAI,cAAc,WAAW,EAAE,kCAAkC;AAAA,IAC3E,SAAS,OAAY;AACjB,UAAI,MAAM;AACN,aAAK,gBAAgB,KAAK;AAC1B,aAAK,UAAU,EAAE,MAAM,KAAK,eAAe,MAAM,CAAC;AAClD,aAAK,IAAI;AAAA,MACb;AACA,YAAM;AAAA,IACV;AAAA,EACJ;AAAA,EAEA,MAAM,MAAM,SAAkD;AAC1D,UAAM,OAAO,MAAM,QAAQ;AAC3B,QAAI,OAAY;AAChB,QAAI,QAAQ,KAAK,OAAO;AACpB,YAAM,SAAS,KAAK,MAAM,UAAU,cAAc;AAClD,aAAO,OAAO,UAAU,kBAAkB;AAAA,QACtC,YAAY;AAAA,UACR,oBAAoB,QAAQ;AAAA,UAC5B,mBAAmB,QAAQ;AAAA,UAC3B,qBAAqB,QAAQ,YAAY;AAAA,QAC7C;AAAA,MACJ,CAAC;AAAA,IACL;AAEA,QAAI;AACA,YAAM,MAAM,MAAM,KAAK,QAA0D,QAAQ,WAAW;AAAA,QAChG,GAAG;AAAA,QACH,SAAS,KAAK,SAAS,QAAQ,OAAO;AAAA,MAC1C,CAAC;AACD,UAAI,IAAI,aAAa,QAAQ,gBAAgB;AACzC,YAAI;AACA,gBAAM,EAAE,MAAM,YAAY,IAAI,KAAK,oBAAoB,QAAQ,gBAAgB,IAAI,GAAG;AACtF,gBAAM,SAAS,MAAM,MAAM,IAAI,WAAW;AAAA,YACtC,QAAQ;AAAA,YACR,SAAS,EAAE,gBAAgB,YAAY;AAAA,YACvC,MAAM,OAAO,SAAS,IAAI,IAAK,OAAe,KAAK,UAAU,IAAI;AAAA,UACrE,CAAC;AACD,cAAI,CAAC,OAAO,IAAI;AACZ,oBAAQ,KAAK,wDAAwD,MAAM,OAAO,KAAK,CAAC;AAAA,UAC5F;AAAA,QACJ,SAAS,GAAQ;AACb,kBAAQ,KAAK,gDAAgD,EAAE,OAAO;AAAA,QAC1E;AAAA,MACJ;AAEA,UAAI,MAAM;AACN,aAAK,aAAa,uBAAuB,IAAI,EAAE;AAC/C,aAAK,IAAI;AAAA,MACb;AACA,aAAO,EAAE,IAAI,IAAI,GAAG;AAAA,IACxB,SAAS,OAAY;AACjB,UAAI,MAAM;AACN,aAAK,gBAAgB,KAAK;AAC1B,aAAK,UAAU,EAAE,MAAM,KAAK,eAAe,MAAM,CAAC;AAClD,aAAK,IAAI;AAAA,MACb;AACA,YAAM;AAAA,IACV;AAAA,EACJ;AAAA,EAEA,MAAc,QAAW,QAAgB,MAAc,MAAwB;AAC3E,UAAM,UAAkC;AAAA,MACpC,iBAAiB,UAAU,KAAK,MAAM;AAAA,MACtC,gBAAgB;AAAA,MAChB,cAAc,iBAAiB,WAAW;AAAA,IAC9C;AAEA,QAAI;AACA,YAAM,WAAW,MAAM,MAAM,GAAG,KAAK,OAAO,GAAG,IAAI,IAAI;AAAA,QACnD;AAAA,QACA;AAAA,QACA,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,MACxC,CAAC;AAED,UAAI,CAAC,SAAS,IAAI;AACd,cAAM,YAAY,MAAM,SAAS,KAAK;AACtC,YAAI,UAAU;AACd,YAAI;AACA,gBAAM,OAAO,KAAK,MAAM,SAAS;AACjC,cAAI,KAAK,QAAS,WAAU,KAAK;AAAA,QACrC,QAAQ;AAAA,QAAE;AACV,cAAM,IAAI,cAAc,cAAc,SAAS,MAAM,MAAM,OAAO,IAAI,SAAS,MAAM;AAAA,MACzF;AAEA,aAAO,SAAS,KAAK;AAAA,IACzB,SAAS,GAAQ;AACb,UAAI,aAAa,cAAe,OAAM;AACtC,YAAM,IAAI,cAAc,kBAAkB,EAAE,OAAO,EAAE;AAAA,IACzD;AAAA,EACJ;AAAA,EAEA,KAAK,SAAiB,QAAgB,WAAqB,UAAsE;AAC7H,WAAO,OAAO,YAA2D;AACrE,UAAI;AACJ,UAAI;AACA,YAAI,OAAO,YAAY,UAAU;AAC7B,cAAI;AAAE,sBAAU,KAAK,MAAM,OAAO;AAAA,UAAG,QAC/B;AAAE,sBAAU,EAAE,aAAa,QAAQ;AAAA,UAAG;AAAA,QAChD,WAAW,OAAO,YAAY,YAAY,YAAY,MAAM;AACxD,oBAAU;AAAA,QACd,OAAO;AACH,oBAAU,EAAE,aAAa,OAAO,OAAO,EAAE;AAAA,QAC7C;AAEA,cAAM,SAAS,MAAM,KAAK,IAAI,EAAE,SAAS,QAAQ,SAAS,SAAS,CAAC;AAEpE,YAAI,OAAO,WAAW,YAAY;AAC9B,iBAAO;AAAA,QACX;AAEA,YAAI,OAAO,WAAW,+BAA+B;AACjD,iBAAO,KAAK,UAAU;AAAA,YAClB,QAAQ;AAAA,YACR,SAAS;AAAA,YACT,cAAc,OAAO;AAAA,YACrB,kBAAkB,OAAO;AAAA,YACzB,kBAAkB,OAAO;AAAA,UAC7B,CAAC;AAAA,QACL;AAEA,eAAO,KAAK,UAAU;AAAA,UAClB,QAAQ;AAAA,UACR,kBAAkB,OAAO;AAAA,QAC7B,CAAC;AAAA,MACL,SAAS,GAAQ;AACb,eAAO,0BAA0B,EAAE,OAAO;AAAA,MAC9C;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,MAAM,eACF,YACA,iBACA,eAC4F;AAC5F,UAAM,WAAO,+BAAW,UAAU,aAAa,EAAE,OAAO,UAAU,EAAE,OAAO,KAAK;AAChF,UAAM,WAAW,gBAAgB,MAAM,GAAG,EAAE,IAAI,OAAK,EAAE,MAAM,GAAG,CAAC;AACjE,UAAM,SAAS,OAAO,YAAY,QAAQ;AAE1C,QAAI,OAAO,IAAI,MAAM,MAAM;AACvB,YAAM,IAAI,cAAc,6CAA6C,GAAG;AAAA,IAC5E;AAEA,UAAM,UAAU,KAAK,MAAM,UAAU;AACrC,UAAM,OAAO,QAAQ;AACrB,QAAI,iBAAiB;AAErB,QAAI,QAAQ,KAAK,oBAAoB;AACjC,UAAI;AACA,cAAM,MAAM,MAAM,MAAM,KAAK,kBAAkB;AAC/C,YAAI,IAAI,IAAI;AACR,gBAAM,cAAc,IAAI,QAAQ,IAAI,cAAc,KAAK;AACvD,cAAI,YAAY,SAAS,0BAA0B,GAAG;AAClD,kBAAM,cAAc,KAAK;AACzB,gBAAI,aAAa;AACb,oBAAM,SAAS,OAAO,KAAK,MAAM,IAAI,YAAY,CAAC;AAClD,oBAAM,SAAS,OAAO,KAAK,aAAa,QAAQ;AAChD,oBAAM,KAAK,OAAO,SAAS,GAAG,EAAE;AAChC,oBAAM,SAAS,OAAO,SAAS,EAAE;AAEjC,oBAAM,UAAU,OAAO,SAAS,OAAO,SAAS,EAAE;AAClD,oBAAM,KAAK,OAAO,SAAS,GAAG,OAAO,SAAS,EAAE;AAEhD,oBAAM,eAAW,qCAAiB,eAAe,QAAQ,EAAE;AAC3D,uBAAS,WAAW,OAAO;AAC3B,oBAAM,QAAQ,OAAO,OAAO,CAAC,SAAS,OAAO,EAAE,GAAG,SAAS,MAAM,CAAC,CAAC;AACnE,+BAAiB,KAAK,MAAM,MAAM,SAAS,MAAM,CAAC;AAAA,YACtD,OAAO;AACH,sBAAQ,KAAK,qEAAqE;AAAA,YACtF;AAAA,UACJ,OAAO;AACH,kBAAM,WAAW,MAAM,IAAI,KAAK;AAChC,6BAAiB,KAAK,SAAS,QAAQ;AAAA,UAC3C;AAAA,QACJ,OAAO;AACH,kBAAQ,KAAK,yDAAyD,MAAM,IAAI,KAAK,CAAC;AAAA,QAC1F;AAAA,MACJ,SAAS,GAAQ;AACb,gBAAQ,KAAK,mEAAmE,EAAE,OAAO;AAAA,MAC7F;AAAA,IACJ;AAEA,WAAO;AAAA,MACH,IAAI,QAAQ;AAAA,MACZ,OAAO,QAAQ;AAAA,MACf;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AACJ;","names":["exports","module"]}
+{"version":3,"sources":["../package.json","../src/index.ts"],"sourcesContent":["{\n  \"name\": \"@letsping/sdk\",\n  \"version\": \"0.2.0\",\n  \"description\": \"Behavioral Firewall and Cryo-Sleep State Parking for Autonomous Agents\",\n  \"main\": \"./dist/index.js\",\n  \"module\": \"./dist/index.mjs\",\n  \"types\": \"./dist/index.d.ts\",\n  \"exports\": {\n    \".\": {\n      \"types\": \"./dist/index.d.ts\",\n      \"require\": \"./dist/index.js\",\n      \"import\": \"./dist/index.mjs\"\n    },\n    \"./integrations/langgraph\": {\n      \"types\": \"./dist/integrations/langgraph.d.ts\",\n      \"require\": \"./dist/integrations/langgraph.js\",\n      \"import\": \"./dist/integrations/langgraph.mjs\"\n    }\n  },\n  \"scripts\": {\n    \"build\": \"tsup && tsc --emitDeclarationOnly --outDir dist\",\n    \"dev\": \"tsup --watch\",\n    \"clean\": \"rm -rf dist .turbo\"\n  },\n  \"peerDependencies\": {\n    \"@langchain/core\": \">=0.1.52\",\n    \"@langchain/langgraph\": \">=0.0.1\",\n    \"@opentelemetry/api\": \"^1.0.0\"\n  },\n  \"peerDependenciesMeta\": {\n    \"@opentelemetry/api\": {\n      \"optional\": true\n    },\n    \"@langchain/langgraph\": {\n      \"optional\": true\n    },\n    \"@langchain/core\": {\n      \"optional\": true\n    }\n  },\n  \"devDependencies\": {\n    \"@langchain/core\": \"^1.1.28\",\n    \"@langchain/langgraph\": \"^1.1.5\",\n    \"@opentelemetry/api\": \"^1.9.0\",\n    \"@types/node\": \"^22.0.0\",\n    \"tsup\": \"^8.0.0\",\n    \"typescript\": \"^5.7.2\"\n  },\n  \"publishConfig\": {\n    \"access\": \"public\"\n  }\n}\n","import { createCipheriv, createDecipheriv, randomBytes, createHmac } from \"node:crypto\";\r\n\r\nlet SDK_VERSION = \"0.2.0\";\r\ntry {\r\n\r\n    SDK_VERSION = require(\"../package.json\").version;\r\n} catch { }\r\n\r\nlet otelApi: any = null;\r\nlet otelTried = false;\r\n\r\nasync function getOtel() {\r\n    if (otelTried) return otelApi;\r\n    otelTried = true;\r\n    try {\r\n        otelApi = await import(\"@opentelemetry/api\");\r\n    } catch { }\r\n    return otelApi;\r\n}\r\n\r\nexport type Priority = \"low\" | \"medium\" | \"high\" | \"critical\";\r\n\r\nexport interface RequestOptions {\r\n\r\n    service: string;\r\n\r\n    action: string;\r\n\r\n    payload: Record<string, any>;\r\n\r\n    priority?: Priority;\r\n\r\n    schema?: Record<string, any>;\r\n\r\n    state_snapshot?: Record<string, any>;\r\n\r\n    timeoutMs?: number;\r\n\r\n    role?: string;\r\n\r\n    /**\r\n     * Optional distributed tracing identifiers. If provided, these will be\r\n     * attached to the request envelope so downstream frameworks can stitch\r\n     * together multi-agent flows.\r\n     */\r\n    trace_id?: string;\r\n    parent_request_id?: string;\r\n}\r\n\r\nexport interface Decision {\r\n    status: \"APPROVED\" | \"REJECTED\" | \"APPROVED_WITH_MODIFICATIONS\";\r\n\r\n    payload: any;\r\n\r\n    patched_payload?: any;\r\n\r\n    diff_summary?: any;\r\n    metadata?: {\r\n        resolved_at: string;\r\n        actor_id: string;\r\n        method?: string;\r\n    };\r\n}\r\n\r\nexport class LetsPingError extends Error {\r\n    constructor(message: string, public status?: number) {\r\n        super(message);\r\n        this.name = \"LetsPingError\";\r\n    }\r\n}\r\n\r\ninterface EncEnvelope {\r\n    _lp_enc: true;\r\n    iv: string;\r\n    ct: string;\r\n}\r\n\r\nfunction isEncEnvelope(v: unknown): v is EncEnvelope {\r\n    return (\r\n        typeof v === \"object\" && v !== null &&\r\n        (v as any)._lp_enc === true &&\r\n        typeof (v as any).iv === \"string\" &&\r\n        typeof (v as any).ct === \"string\"\r\n    );\r\n}\r\n\r\nfunction encryptPayload(keyBase64: string, payload: Record<string, any>): EncEnvelope {\r\n    const keyBuf = Buffer.from(keyBase64, \"base64\");\r\n    const iv = randomBytes(12);\r\n    const cipher = createCipheriv(\"aes-256-gcm\", keyBuf, iv);\r\n    const plain = Buffer.from(JSON.stringify(payload), \"utf8\");\r\n    const ct = Buffer.concat([cipher.update(plain), cipher.final(), cipher.getAuthTag()]);\r\n    return {\r\n        _lp_enc: true,\r\n        iv: iv.toString(\"base64\"),\r\n        ct: ct.toString(\"base64\"),\r\n    };\r\n}\r\n\r\nfunction decryptPayload(keyBase64: string, envelope: EncEnvelope): Record<string, any> {\r\n    const keyBuf = Buffer.from(keyBase64, \"base64\");\r\n    const iv = Buffer.from(envelope.iv, \"base64\");\r\n    const ctFull = Buffer.from(envelope.ct, \"base64\");\r\n\r\n    const authTag = ctFull.subarray(ctFull.length - 16);\r\n    const ct = ctFull.subarray(0, ctFull.length - 16);\r\n    const decipher = createDecipheriv(\"aes-256-gcm\", keyBuf, iv);\r\n    decipher.setAuthTag(authTag);\r\n    const plain = Buffer.concat([decipher.update(ct), decipher.final()]);\r\n    return JSON.parse(plain.toString(\"utf8\"));\r\n}\r\n\r\nfunction computeDiff(original: any, patched: any): any {\r\n    if (original === patched) return null;\r\n\r\n    if (\r\n        typeof original !== \"object\" ||\r\n        typeof patched !== \"object\" ||\r\n        original === null ||\r\n        patched === null ||\r\n        Array.isArray(original) ||\r\n        Array.isArray(patched)\r\n    ) {\r\n        if (JSON.stringify(original) !== JSON.stringify(patched)) {\r\n            return { from: original, to: patched };\r\n        }\r\n        return null;\r\n    }\r\n\r\n    const changes: Record<string, any> = {};\r\n    let hasChanges = false;\r\n    const allKeys = new Set([...Object.keys(original), ...Object.keys(patched)]);\r\n\r\n    for (const key of allKeys) {\r\n        const oV = original[key];\r\n        const pV = patched[key];\r\n\r\n        if (!(key in original)) {\r\n            changes[key] = { from: undefined, to: pV };\r\n            hasChanges = true;\r\n        } else if (!(key in patched)) {\r\n            changes[key] = { from: oV, to: undefined };\r\n            hasChanges = true;\r\n        } else {\r\n            const nestedDiff = computeDiff(oV, pV);\r\n            if (nestedDiff) {\r\n                changes[key] = nestedDiff;\r\n                hasChanges = true;\r\n            }\r\n        }\r\n    }\r\n\r\n    return hasChanges ? changes : null;\r\n}\r\n\r\nexport class LetsPing {\r\n    private readonly apiKey: string;\r\n    private readonly baseUrl: string;\r\n    private readonly encryptionKey: string | null;\r\n\r\n    constructor(apiKey?: string, options?: { baseUrl?: string; encryptionKey?: string }) {\r\n        const key = apiKey || process.env.LETSPING_API_KEY;\r\n        if (!key) throw new Error(\"LetsPing: API Key is required. Pass it to the constructor or set LETSPING_API_KEY env var.\");\r\n\r\n        this.apiKey = key;\r\n        this.baseUrl = options?.baseUrl || \"https://letsping.co/api\";\r\n        this.encryptionKey = options?.encryptionKey\r\n            ?? process.env.LETSPING_ENCRYPTION_KEY\r\n            ?? null;\r\n    }\r\n\r\n    private _encrypt(payload: Record<string, any>): Record<string, any> {\r\n        if (!this.encryptionKey) return payload;\r\n        return encryptPayload(this.encryptionKey, payload) as any;\r\n    }\r\n\r\n    private _decrypt(val: any): any {\r\n        if (!this.encryptionKey || !isEncEnvelope(val)) return val;\r\n        try {\r\n            return decryptPayload(this.encryptionKey, val);\r\n        } catch {\r\n\r\n            return val;\r\n        }\r\n    }\r\n\r\n    private _prepareStateUpload(\r\n        stateSnapshot: Record<string, any>,\r\n        fallbackDek?: string\r\n    ): { data: any; contentType: string } {\r\n        if (this.encryptionKey) {\r\n            return {\r\n                data: this._encrypt(stateSnapshot),\r\n                contentType: \"application/json\"\r\n            };\r\n        } else if (fallbackDek) {\r\n            const keyBuf = Buffer.from(fallbackDek, \"base64\");\r\n            const iv = randomBytes(12);\r\n            const cipher = createCipheriv(\"aes-256-gcm\", keyBuf, iv);\r\n            const plain = Buffer.from(JSON.stringify(stateSnapshot), \"utf8\");\r\n            const ct = Buffer.concat([cipher.update(plain), cipher.final(), cipher.getAuthTag()]);\r\n            const finalPayload = Buffer.concat([iv, ct]);\r\n\r\n            return {\r\n                data: finalPayload,\r\n                contentType: \"application/octet-stream\"\r\n            };\r\n        }\r\n        return {\r\n            data: stateSnapshot,\r\n            contentType: \"application/json\"\r\n        };\r\n    }\r\n\r\n    async ask(options: RequestOptions): Promise<Decision> {\r\n        if (options.schema && (options.schema as any)._def) {\r\n            throw new LetsPingError(\"LetsPing Error: Raw Zod schema detected. You must convert it to JSON Schema (e.g. using 'zod-to-json-schema') before passing it to the SDK.\");\r\n        }\r\n\r\n        const otel = await getOtel();\r\n        let span: any = null;\r\n        if (otel && otel.trace) {\r\n            const tracer = otel.trace.getTracer(\"letsping-sdk\");\r\n            span = tracer.startSpan(`letsping.ask`, {\r\n                attributes: {\r\n                    \"letsping.service\": options.service,\r\n                    \"letsping.action\": options.action,\r\n                    \"letsping.priority\": options.priority || \"medium\",\r\n                }\r\n            });\r\n        }\r\n\r\n        const traceId = options.trace_id;\r\n        const parentId = options.parent_request_id;\r\n\r\n        // Do not mutate caller payload; attach tracing metadata under a reserved key.\r\n        const basePayload = options.payload || {};\r\n        const metaKey = \"_lp_meta\";\r\n        const existingMeta = (basePayload as any)[metaKey] || {};\r\n        const enrichedPayload = {\r\n            ...basePayload,\r\n            [metaKey]: {\r\n                ...existingMeta,\r\n                ...(traceId ? { trace_id: traceId } : {}),\r\n                ...(parentId ? { parent_request_id: parentId } : {}),\r\n            },\r\n        };\r\n\r\n        try {\r\n            const res = await this.request<{ id: string, uploadUrl?: string, dek?: string }>(\"POST\", \"/ingest\", {\r\n                service: options.service,\r\n                action: options.action,\r\n                payload: this._encrypt(enrichedPayload),\r\n                priority: options.priority || \"medium\",\r\n                schema: options.schema,\r\n                metadata: { role: options.role, sdk: \"node\", trace_id: traceId, parent_request_id: parentId }\r\n            });\r\n\r\n            const { id, uploadUrl, dek } = res;\r\n\r\n            if (uploadUrl && options.state_snapshot) {\r\n                try {\r\n                    const { data, contentType } = this._prepareStateUpload(options.state_snapshot, dek);\r\n                    const putRes = await fetch(uploadUrl, {\r\n                        method: \"PUT\",\r\n                        headers: { \"Content-Type\": contentType },\r\n                        body: Buffer.isBuffer(data) ? (data as any) : JSON.stringify(data)\r\n                    });\r\n                    if (!putRes.ok) {\r\n                        console.warn(\"LetsPing: Failed to upload state_snapshot to storage\", await putRes.text());\r\n                    }\r\n                } catch (e: any) {\r\n                    console.warn(\"LetsPing: Exception uploading state_snapshot\", e.message);\r\n                }\r\n            }\r\n\r\n            if (span) span.setAttribute(\"letsping.request_id\", id);\r\n\r\n            const timeout = options.timeoutMs || 24 * 60 * 60 * 1000;\r\n            const start = Date.now();\r\n            let delay = 1000;\r\n            const maxDelay = 10000;\r\n\r\n            while (Date.now() - start < timeout) {\r\n                try {\r\n                    const check = await this.request<any>(\"GET\", `/status/${id}`);\r\n\r\n                    if (check.status === \"APPROVED\" || check.status === \"REJECTED\") {\r\n                        const decryptedPayload = this._decrypt(check.payload) ?? options.payload;\r\n                        const decryptedPatched = check.patched_payload ? this._decrypt(check.patched_payload) : undefined;\r\n\r\n                        let diff_summary;\r\n                        let finalStatus = check.status;\r\n                        if (check.status === \"APPROVED\" && decryptedPatched !== undefined) {\r\n                            finalStatus = \"APPROVED_WITH_MODIFICATIONS\";\r\n                            const diff = computeDiff(decryptedPayload, decryptedPatched);\r\n                            diff_summary = diff ? { changes: diff } : { changes: \"Unknown structure changes\" };\r\n                        }\r\n\r\n                        if (span) {\r\n                            span.setAttribute(\"letsping.status\", finalStatus);\r\n                            if (check.actor_id) span.setAttribute(\"letsping.actor_id\", check.actor_id);\r\n                            span.end();\r\n                        }\r\n\r\n                        return {\r\n                            status: finalStatus,\r\n                            payload: decryptedPayload,\r\n                            patched_payload: decryptedPatched,\r\n                            diff_summary,\r\n                            metadata: {\r\n                                resolved_at: check.resolved_at,\r\n                                actor_id: check.actor_id,\r\n                            }\r\n                        };\r\n                    }\r\n                } catch (e: any) {\r\n                    const s = e.status;\r\n                    if (s && s >= 400 && s < 500 && s !== 404 && s !== 429) throw e;\r\n                }\r\n\r\n                const jitter = Math.random() * 200;\r\n                await new Promise(r => setTimeout(r, delay + jitter));\r\n                delay = Math.min(delay * 1.5, maxDelay);\r\n            }\r\n\r\n            throw new LetsPingError(`Request ${id} timed out waiting for approval.`);\r\n        } catch (error: any) {\r\n            if (span) {\r\n                span.recordException(error);\r\n                span.setStatus({ code: otel.SpanStatusCode.ERROR });\r\n                span.end();\r\n            }\r\n            throw error;\r\n        }\r\n    }\r\n\r\n    async defer(options: RequestOptions): Promise<{ id: string }> {\r\n        const otel = await getOtel();\r\n        let span: any = null;\r\n        if (otel && otel.trace) {\r\n            const tracer = otel.trace.getTracer(\"letsping-sdk\");\r\n            span = tracer.startSpan(`letsping.defer`, {\r\n                attributes: {\r\n                    \"letsping.service\": options.service,\r\n                    \"letsping.action\": options.action,\r\n                    \"letsping.priority\": options.priority || \"medium\",\r\n                }\r\n            });\r\n        }\r\n\r\n        const traceId = options.trace_id;\r\n        const parentId = options.parent_request_id;\r\n        const basePayload = options.payload || {};\r\n        const metaKey = \"_lp_meta\";\r\n        const existingMeta = (basePayload as any)[metaKey] || {};\r\n        const enrichedPayload = {\r\n            ...basePayload,\r\n            [metaKey]: {\r\n                ...existingMeta,\r\n                ...(traceId ? { trace_id: traceId } : {}),\r\n                ...(parentId ? { parent_request_id: parentId } : {}),\r\n            },\r\n        };\r\n\r\n        try {\r\n            const res = await this.request<{ id: string, uploadUrl?: string, dek?: string }>(\"POST\", \"/ingest\", {\r\n                service: options.service,\r\n                action: options.action,\r\n                payload: this._encrypt(enrichedPayload),\r\n                priority: options.priority || \"medium\",\r\n                schema: options.schema,\r\n                metadata: { role: options.role, sdk: \"node\", trace_id: traceId, parent_request_id: parentId },\r\n            });\r\n            if (res.uploadUrl && options.state_snapshot) {\r\n                try {\r\n                    const { data, contentType } = this._prepareStateUpload(options.state_snapshot, res.dek);\r\n                    const putRes = await fetch(res.uploadUrl, {\r\n                        method: \"PUT\",\r\n                        headers: { \"Content-Type\": contentType },\r\n                        body: Buffer.isBuffer(data) ? (data as any) : JSON.stringify(data)\r\n                    });\r\n                    if (!putRes.ok) {\r\n                        console.warn(\"LetsPing: Failed to upload state_snapshot to storage\", await putRes.text());\r\n                    }\r\n                } catch (e: any) {\r\n                    console.warn(\"LetsPing: Exception uploading state_snapshot\", e.message);\r\n                }\r\n            }\r\n\r\n            if (span) {\r\n                span.setAttribute(\"letsping.request_id\", res.id);\r\n                span.end();\r\n            }\r\n            return { id: res.id };\r\n        } catch (error: any) {\r\n            if (span) {\r\n                span.recordException(error);\r\n                span.setStatus({ code: otel.SpanStatusCode.ERROR });\r\n                span.end();\r\n            }\r\n            throw error;\r\n        }\r\n    }\r\n\r\n    private async request<T>(method: string, path: string, body?: any): Promise<T> {\r\n        const headers: Record<string, string> = {\r\n            \"Authorization\": `Bearer ${this.apiKey}`,\r\n            \"Content-Type\": \"application/json\",\r\n            \"User-Agent\": `letsping-node/${SDK_VERSION}`,\r\n        };\r\n\r\n        try {\r\n            const response = await fetch(`${this.baseUrl}${path}`, {\r\n                method,\r\n                headers,\r\n                body: body ? JSON.stringify(body) : undefined,\r\n            });\r\n\r\n            if (!response.ok) {\r\n                const errorText = await response.text();\r\n                let message = errorText;\r\n                try {\r\n                    const json = JSON.parse(errorText);\r\n                    if (json.message) message = json.message;\r\n                } catch { }\r\n                throw new LetsPingError(`API Error [${response.status}]: ${message}`, response.status);\r\n            }\r\n\r\n            return response.json() as Promise<T>;\r\n        } catch (e: any) {\r\n            if (e instanceof LetsPingError) throw e;\r\n            throw new LetsPingError(`Network Error: ${e.message}`);\r\n        }\r\n    }\r\n\r\n    tool(service: string, action: string, priority: Priority = \"medium\"): (context: string | Record<string, any>) => Promise<string> {\r\n        return async (context: string | Record<string, any>): Promise<string> => {\r\n            let payload: Record<string, any>;\r\n            try {\r\n                if (typeof context === \"string\") {\r\n                    try { payload = JSON.parse(context); }\r\n                    catch { payload = { raw_context: context }; }\r\n                } else if (typeof context === \"object\" && context !== null) {\r\n                    payload = context;\r\n                } else {\r\n                    payload = { raw_context: String(context) };\r\n                }\r\n\r\n                const result = await this.ask({ service, action, payload, priority });\r\n\r\n                if (result.status === \"REJECTED\") {\r\n                    return \"STOP: Action Rejected by Human.\";\r\n                }\r\n\r\n                if (result.status === \"APPROVED_WITH_MODIFICATIONS\") {\r\n                    return JSON.stringify({\r\n                        status: \"APPROVED_WITH_MODIFICATIONS\",\r\n                        message: \"The human reviewer authorized this action but modified your original payload. Please review the diff_summary to learn from this correction.\",\r\n                        diff_summary: result.diff_summary,\r\n                        original_payload: result.payload,\r\n                        executed_payload: result.patched_payload\r\n                    });\r\n                }\r\n\r\n                return JSON.stringify({\r\n                    status: \"APPROVED\",\r\n                    executed_payload: result.payload\r\n                });\r\n            } catch (e: any) {\r\n                return `ERROR: System Failure: ${e.message}`;\r\n            }\r\n        };\r\n    }\r\n\r\n    async webhookHandler(\r\n        payloadStr: string,\r\n        signatureHeader: string,\r\n        webhookSecret: string\r\n    ): Promise<{ id: string; event: string; data: Decision; state_snapshot?: Record<string, any> }> {\r\n        const sigParts = signatureHeader.split(\",\").map(p => p.split(\"=\"));\r\n        const sigMap = Object.fromEntries(sigParts);\r\n\r\n        const rawTs = sigMap[\"t\"];\r\n        const rawSig = sigMap[\"v1\"];\r\n        if (!rawTs || !rawSig) {\r\n            throw new LetsPingError(\"LetsPing Error: Missing webhook signature fields\", 401);\r\n        }\r\n\r\n        const ts = Number(rawTs);\r\n        if (!Number.isFinite(ts)) {\r\n            throw new LetsPingError(\"LetsPing Error: Invalid webhook timestamp\", 401);\r\n        }\r\n\r\n        const now = Date.now();\r\n        const skewMs = Math.abs(now - ts);\r\n        const maxSkewMs = 5 * 60 * 1000; // 5 minutes\r\n        if (skewMs > maxSkewMs) {\r\n            throw new LetsPingError(\"LetsPing Error: Webhook replay window exceeded\", 401);\r\n        }\r\n\r\n        const expected = createHmac(\"sha256\", webhookSecret).update(payloadStr).digest(\"hex\");\r\n        if (rawSig !== expected) {\r\n            throw new LetsPingError(\"LetsPing Error: Invalid webhook signature\", 401);\r\n        }\r\n\r\n        const payload = JSON.parse(payloadStr);\r\n        const data = payload.data;\r\n        let state_snapshot = undefined;\r\n\r\n        if (data && data.state_download_url) {\r\n            try {\r\n                const res = await fetch(data.state_download_url);\r\n                if (res.ok) {\r\n                    const contentType = res.headers.get(\"content-type\") || \"\";\r\n                    if (contentType.includes(\"application/octet-stream\")) {\r\n                        const fallbackDek = data.dek;\r\n                        if (fallbackDek) {\r\n                            const buffer = Buffer.from(await res.arrayBuffer());\r\n                            const keyBuf = Buffer.from(fallbackDek, \"base64\");\r\n                            const iv = buffer.subarray(0, 12);\r\n                            const ctFull = buffer.subarray(12);\r\n\r\n                            const authTag = ctFull.subarray(ctFull.length - 16);\r\n                            const ct = ctFull.subarray(0, ctFull.length - 16);\r\n\r\n                            const decipher = createDecipheriv(\"aes-256-gcm\", keyBuf, iv);\r\n                            decipher.setAuthTag(authTag);\r\n                            const plain = Buffer.concat([decipher.update(ct), decipher.final()]);\r\n                            state_snapshot = JSON.parse(plain.toString(\"utf8\"));\r\n                        } else {\r\n                            console.warn(\"LetsPing: Missing fallback DEK to decrypt octet-stream storage file\");\r\n                        }\r\n                    } else {\r\n                        const encState = await res.json();\r\n                        state_snapshot = this._decrypt(encState);\r\n                    }\r\n                } else {\r\n                    console.warn(\"LetsPing: Could not fetch state_snapshot from storage\", await res.text());\r\n                }\r\n            } catch (e: any) {\r\n                console.warn(\"LetsPing: Exception downloading state_snapshot from webhook url\", e.message);\r\n            }\r\n        }\r\n\r\n        return {\r\n            id: payload.id,\r\n            event: payload.event,\r\n            data,\r\n            state_snapshot\r\n        };\r\n    }\r\n}\r\n\r\nexport { computeDiff };"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA,iBAAAA,UAAAC,SAAA;AAAA,IAAAA,QAAA;AAAA,MACE,MAAQ;AAAA,MACR,SAAW;AAAA,MACX,aAAe;AAAA,MACf,MAAQ;AAAA,MACR,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,QACT,KAAK;AAAA,UACH,OAAS;AAAA,UACT,SAAW;AAAA,UACX,QAAU;AAAA,QACZ;AAAA,QACA,4BAA4B;AAAA,UAC1B,OAAS;AAAA,UACT,SAAW;AAAA,UACX,QAAU;AAAA,QACZ;AAAA,MACF;AAAA,MACA,SAAW;AAAA,QACT,OAAS;AAAA,QACT,KAAO;AAAA,QACP,OAAS;AAAA,MACX;AAAA,MACA,kBAAoB;AAAA,QAClB,mBAAmB;AAAA,QACnB,wBAAwB;AAAA,QACxB,sBAAsB;AAAA,MACxB;AAAA,MACA,sBAAwB;AAAA,QACtB,sBAAsB;AAAA,UACpB,UAAY;AAAA,QACd;AAAA,QACA,wBAAwB;AAAA,UACtB,UAAY;AAAA,QACd;AAAA,QACA,mBAAmB;AAAA,UACjB,UAAY;AAAA,QACd;AAAA,MACF;AAAA,MACA,iBAAmB;AAAA,QACjB,mBAAmB;AAAA,QACnB,wBAAwB;AAAA,QACxB,sBAAsB;AAAA,QACtB,eAAe;AAAA,QACf,MAAQ;AAAA,QACR,YAAc;AAAA,MAChB;AAAA,MACA,eAAiB;AAAA,QACf,QAAU;AAAA,MACZ;AAAA,IACF;AAAA;AAAA;;;ACnDA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,yBAA0E;AAE1E,IAAI,cAAc;AAClB,IAAI;AAEA,gBAAc,kBAA2B;AAC7C,QAAQ;AAAE;AAEV,IAAI,UAAe;AACnB,IAAI,YAAY;AAEhB,eAAe,UAAU;AACrB,MAAI,UAAW,QAAO;AACtB,cAAY;AACZ,MAAI;AACA,cAAU,MAAM,OAAO,oBAAoB;AAAA,EAC/C,QAAQ;AAAA,EAAE;AACV,SAAO;AACX;AA8CO,IAAM,gBAAN,cAA4B,MAAM;AAAA,EACrC,YAAY,SAAwB,QAAiB;AACjD,UAAM,OAAO;AADmB;AAEhC,SAAK,OAAO;AAAA,EAChB;AACJ;AAQA,SAAS,cAAc,GAA8B;AACjD,SACI,OAAO,MAAM,YAAY,MAAM,QAC9B,EAAU,YAAY,QACvB,OAAQ,EAAU,OAAO,YACzB,OAAQ,EAAU,OAAO;AAEjC;AAEA,SAAS,eAAe,WAAmB,SAA2C;AAClF,QAAM,SAAS,OAAO,KAAK,WAAW,QAAQ;AAC9C,QAAM,SAAK,gCAAY,EAAE;AACzB,QAAM,aAAS,mCAAe,eAAe,QAAQ,EAAE;AACvD,QAAM,QAAQ,OAAO,KAAK,KAAK,UAAU,OAAO,GAAG,MAAM;AACzD,QAAM,KAAK,OAAO,OAAO,CAAC,OAAO,OAAO,KAAK,GAAG,OAAO,MAAM,GAAG,OAAO,WAAW,CAAC,CAAC;AACpF,SAAO;AAAA,IACH,SAAS;AAAA,IACT,IAAI,GAAG,SAAS,QAAQ;AAAA,IACxB,IAAI,GAAG,SAAS,QAAQ;AAAA,EAC5B;AACJ;AAEA,SAAS,eAAe,WAAmB,UAA4C;AACnF,QAAM,SAAS,OAAO,KAAK,WAAW,QAAQ;AAC9C,QAAM,KAAK,OAAO,KAAK,SAAS,IAAI,QAAQ;AAC5C,QAAM,SAAS,OAAO,KAAK,SAAS,IAAI,QAAQ;AAEhD,QAAM,UAAU,OAAO,SAAS,OAAO,SAAS,EAAE;AAClD,QAAM,KAAK,OAAO,SAAS,GAAG,OAAO,SAAS,EAAE;AAChD,QAAM,eAAW,qCAAiB,eAAe,QAAQ,EAAE;AAC3D,WAAS,WAAW,OAAO;AAC3B,QAAM,QAAQ,OAAO,OAAO,CAAC,SAAS,OAAO,EAAE,GAAG,SAAS,MAAM,CAAC,CAAC;AACnE,SAAO,KAAK,MAAM,MAAM,SAAS,MAAM,CAAC;AAC5C;AAEA,SAAS,YAAY,UAAe,SAAmB;AACnD,MAAI,aAAa,QAAS,QAAO;AAEjC,MACI,OAAO,aAAa,YACpB,OAAO,YAAY,YACnB,aAAa,QACb,YAAY,QACZ,MAAM,QAAQ,QAAQ,KACtB,MAAM,QAAQ,OAAO,GACvB;AACE,QAAI,KAAK,UAAU,QAAQ,MAAM,KAAK,UAAU,OAAO,GAAG;AACtD,aAAO,EAAE,MAAM,UAAU,IAAI,QAAQ;AAAA,IACzC;AACA,WAAO;AAAA,EACX;AAEA,QAAM,UAA+B,CAAC;AACtC,MAAI,aAAa;AACjB,QAAM,UAAU,oBAAI,IAAI,CAAC,GAAG,OAAO,KAAK,QAAQ,GAAG,GAAG,OAAO,KAAK,OAAO,CAAC,CAAC;AAE3E,aAAW,OAAO,SAAS;AACvB,UAAM,KAAK,SAAS,GAAG;AACvB,UAAM,KAAK,QAAQ,GAAG;AAEtB,QAAI,EAAE,OAAO,WAAW;AACpB,cAAQ,GAAG,IAAI,EAAE,MAAM,QAAW,IAAI,GAAG;AACzC,mBAAa;AAAA,IACjB,WAAW,EAAE,OAAO,UAAU;AAC1B,cAAQ,GAAG,IAAI,EAAE,MAAM,IAAI,IAAI,OAAU;AACzC,mBAAa;AAAA,IACjB,OAAO;AACH,YAAM,aAAa,YAAY,IAAI,EAAE;AACrC,UAAI,YAAY;AACZ,gBAAQ,GAAG,IAAI;AACf,qBAAa;AAAA,MACjB;AAAA,IACJ;AAAA,EACJ;AAEA,SAAO,aAAa,UAAU;AAClC;AAEO,IAAM,WAAN,MAAe;AAAA,EAKlB,YAAY,QAAiB,SAAwD;AACjF,UAAM,MAAM,UAAU,QAAQ,IAAI;AAClC,QAAI,CAAC,IAAK,OAAM,IAAI,MAAM,4FAA4F;AAEtH,SAAK,SAAS;AACd,SAAK,UAAU,SAAS,WAAW;AACnC,SAAK,gBAAgB,SAAS,iBACvB,QAAQ,IAAI,2BACZ;AAAA,EACX;AAAA,EAEQ,SAAS,SAAmD;AAChE,QAAI,CAAC,KAAK,cAAe,QAAO;AAChC,WAAO,eAAe,KAAK,eAAe,OAAO;AAAA,EACrD;AAAA,EAEQ,SAAS,KAAe;AAC5B,QAAI,CAAC,KAAK,iBAAiB,CAAC,cAAc,GAAG,EAAG,QAAO;AACvD,QAAI;AACA,aAAO,eAAe,KAAK,eAAe,GAAG;AAAA,IACjD,QAAQ;AAEJ,aAAO;AAAA,IACX;AAAA,EACJ;AAAA,EAEQ,oBACJ,eACA,aACkC;AAClC,QAAI,KAAK,eAAe;AACpB,aAAO;AAAA,QACH,MAAM,KAAK,SAAS,aAAa;AAAA,QACjC,aAAa;AAAA,MACjB;AAAA,IACJ,WAAW,aAAa;AACpB,YAAM,SAAS,OAAO,KAAK,aAAa,QAAQ;AAChD,YAAM,SAAK,gCAAY,EAAE;AACzB,YAAM,aAAS,mCAAe,eAAe,QAAQ,EAAE;AACvD,YAAM,QAAQ,OAAO,KAAK,KAAK,UAAU,aAAa,GAAG,MAAM;AAC/D,YAAM,KAAK,OAAO,OAAO,CAAC,OAAO,OAAO,KAAK,GAAG,OAAO,MAAM,GAAG,OAAO,WAAW,CAAC,CAAC;AACpF,YAAM,eAAe,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;AAE3C,aAAO;AAAA,QACH,MAAM;AAAA,QACN,aAAa;AAAA,MACjB;AAAA,IACJ;AACA,WAAO;AAAA,MACH,MAAM;AAAA,MACN,aAAa;AAAA,IACjB;AAAA,EACJ;AAAA,EAEA,MAAM,IAAI,SAA4C;AAClD,QAAI,QAAQ,UAAW,QAAQ,OAAe,MAAM;AAChD,YAAM,IAAI,cAAc,6IAA6I;AAAA,IACzK;AAEA,UAAM,OAAO,MAAM,QAAQ;AAC3B,QAAI,OAAY;AAChB,QAAI,QAAQ,KAAK,OAAO;AACpB,YAAM,SAAS,KAAK,MAAM,UAAU,cAAc;AAClD,aAAO,OAAO,UAAU,gBAAgB;AAAA,QACpC,YAAY;AAAA,UACR,oBAAoB,QAAQ;AAAA,UAC5B,mBAAmB,QAAQ;AAAA,UAC3B,qBAAqB,QAAQ,YAAY;AAAA,QAC7C;AAAA,MACJ,CAAC;AAAA,IACL;AAEA,UAAM,UAAU,QAAQ;AACxB,UAAM,WAAW,QAAQ;AAGzB,UAAM,cAAc,QAAQ,WAAW,CAAC;AACxC,UAAM,UAAU;AAChB,UAAM,eAAgB,YAAoB,OAAO,KAAK,CAAC;AACvD,UAAM,kBAAkB;AAAA,MACpB,GAAG;AAAA,MACH,CAAC,OAAO,GAAG;AAAA,QACP,GAAG;AAAA,QACH,GAAI,UAAU,EAAE,UAAU,QAAQ,IAAI,CAAC;AAAA,QACvC,GAAI,WAAW,EAAE,mBAAmB,SAAS,IAAI,CAAC;AAAA,MACtD;AAAA,IACJ;AAEA,QAAI;AACA,YAAM,MAAM,MAAM,KAAK,QAA0D,QAAQ,WAAW;AAAA,QAChG,SAAS,QAAQ;AAAA,QACjB,QAAQ,QAAQ;AAAA,QAChB,SAAS,KAAK,SAAS,eAAe;AAAA,QACtC,UAAU,QAAQ,YAAY;AAAA,QAC9B,QAAQ,QAAQ;AAAA,QAChB,UAAU,EAAE,MAAM,QAAQ,MAAM,KAAK,QAAQ,UAAU,SAAS,mBAAmB,SAAS;AAAA,MAChG,CAAC;AAED,YAAM,EAAE,IAAI,WAAW,IAAI,IAAI;AAE/B,UAAI,aAAa,QAAQ,gBAAgB;AACrC,YAAI;AACA,gBAAM,EAAE,MAAM,YAAY,IAAI,KAAK,oBAAoB,QAAQ,gBAAgB,GAAG;AAClF,gBAAM,SAAS,MAAM,MAAM,WAAW;AAAA,YAClC,QAAQ;AAAA,YACR,SAAS,EAAE,gBAAgB,YAAY;AAAA,YACvC,MAAM,OAAO,SAAS,IAAI,IAAK,OAAe,KAAK,UAAU,IAAI;AAAA,UACrE,CAAC;AACD,cAAI,CAAC,OAAO,IAAI;AACZ,oBAAQ,KAAK,wDAAwD,MAAM,OAAO,KAAK,CAAC;AAAA,UAC5F;AAAA,QACJ,SAAS,GAAQ;AACb,kBAAQ,KAAK,gDAAgD,EAAE,OAAO;AAAA,QAC1E;AAAA,MACJ;AAEA,UAAI,KAAM,MAAK,aAAa,uBAAuB,EAAE;AAErD,YAAM,UAAU,QAAQ,aAAa,KAAK,KAAK,KAAK;AACpD,YAAM,QAAQ,KAAK,IAAI;AACvB,UAAI,QAAQ;AACZ,YAAM,WAAW;AAEjB,aAAO,KAAK,IAAI,IAAI,QAAQ,SAAS;AACjC,YAAI;AACA,gBAAM,QAAQ,MAAM,KAAK,QAAa,OAAO,WAAW,EAAE,EAAE;AAE5D,cAAI,MAAM,WAAW,cAAc,MAAM,WAAW,YAAY;AAC5D,kBAAM,mBAAmB,KAAK,SAAS,MAAM,OAAO,KAAK,QAAQ;AACjE,kBAAM,mBAAmB,MAAM,kBAAkB,KAAK,SAAS,MAAM,eAAe,IAAI;AAExF,gBAAI;AACJ,gBAAI,cAAc,MAAM;AACxB,gBAAI,MAAM,WAAW,cAAc,qBAAqB,QAAW;AAC/D,4BAAc;AACd,oBAAM,OAAO,YAAY,kBAAkB,gBAAgB;AAC3D,6BAAe,OAAO,EAAE,SAAS,KAAK,IAAI,EAAE,SAAS,4BAA4B;AAAA,YACrF;AAEA,gBAAI,MAAM;AACN,mBAAK,aAAa,mBAAmB,WAAW;AAChD,kBAAI,MAAM,SAAU,MAAK,aAAa,qBAAqB,MAAM,QAAQ;AACzE,mBAAK,IAAI;AAAA,YACb;AAEA,mBAAO;AAAA,cACH,QAAQ;AAAA,cACR,SAAS;AAAA,cACT,iBAAiB;AAAA,cACjB;AAAA,cACA,UAAU;AAAA,gBACN,aAAa,MAAM;AAAA,gBACnB,UAAU,MAAM;AAAA,cACpB;AAAA,YACJ;AAAA,UACJ;AAAA,QACJ,SAAS,GAAQ;AACb,gBAAM,IAAI,EAAE;AACZ,cAAI,KAAK,KAAK,OAAO,IAAI,OAAO,MAAM,OAAO,MAAM,IAAK,OAAM;AAAA,QAClE;AAEA,cAAM,SAAS,KAAK,OAAO,IAAI;AAC/B,cAAM,IAAI,QAAQ,OAAK,WAAW,GAAG,QAAQ,MAAM,CAAC;AACpD,gBAAQ,KAAK,IAAI,QAAQ,KAAK,QAAQ;AAAA,MAC1C;AAEA,YAAM,IAAI,cAAc,WAAW,EAAE,kCAAkC;AAAA,IAC3E,SAAS,OAAY;AACjB,UAAI,MAAM;AACN,aAAK,gBAAgB,KAAK;AAC1B,aAAK,UAAU,EAAE,MAAM,KAAK,eAAe,MAAM,CAAC;AAClD,aAAK,IAAI;AAAA,MACb;AACA,YAAM;AAAA,IACV;AAAA,EACJ;AAAA,EAEA,MAAM,MAAM,SAAkD;AAC1D,UAAM,OAAO,MAAM,QAAQ;AAC3B,QAAI,OAAY;AAChB,QAAI,QAAQ,KAAK,OAAO;AACpB,YAAM,SAAS,KAAK,MAAM,UAAU,cAAc;AAClD,aAAO,OAAO,UAAU,kBAAkB;AAAA,QACtC,YAAY;AAAA,UACR,oBAAoB,QAAQ;AAAA,UAC5B,mBAAmB,QAAQ;AAAA,UAC3B,qBAAqB,QAAQ,YAAY;AAAA,QAC7C;AAAA,MACJ,CAAC;AAAA,IACL;AAEA,UAAM,UAAU,QAAQ;AACxB,UAAM,WAAW,QAAQ;AACzB,UAAM,cAAc,QAAQ,WAAW,CAAC;AACxC,UAAM,UAAU;AAChB,UAAM,eAAgB,YAAoB,OAAO,KAAK,CAAC;AACvD,UAAM,kBAAkB;AAAA,MACpB,GAAG;AAAA,MACH,CAAC,OAAO,GAAG;AAAA,QACP,GAAG;AAAA,QACH,GAAI,UAAU,EAAE,UAAU,QAAQ,IAAI,CAAC;AAAA,QACvC,GAAI,WAAW,EAAE,mBAAmB,SAAS,IAAI,CAAC;AAAA,MACtD;AAAA,IACJ;AAEA,QAAI;AACA,YAAM,MAAM,MAAM,KAAK,QAA0D,QAAQ,WAAW;AAAA,QAChG,SAAS,QAAQ;AAAA,QACjB,QAAQ,QAAQ;AAAA,QAChB,SAAS,KAAK,SAAS,eAAe;AAAA,QACtC,UAAU,QAAQ,YAAY;AAAA,QAC9B,QAAQ,QAAQ;AAAA,QAChB,UAAU,EAAE,MAAM,QAAQ,MAAM,KAAK,QAAQ,UAAU,SAAS,mBAAmB,SAAS;AAAA,MAChG,CAAC;AACD,UAAI,IAAI,aAAa,QAAQ,gBAAgB;AACzC,YAAI;AACA,gBAAM,EAAE,MAAM,YAAY,IAAI,KAAK,oBAAoB,QAAQ,gBAAgB,IAAI,GAAG;AACtF,gBAAM,SAAS,MAAM,MAAM,IAAI,WAAW;AAAA,YACtC,QAAQ;AAAA,YACR,SAAS,EAAE,gBAAgB,YAAY;AAAA,YACvC,MAAM,OAAO,SAAS,IAAI,IAAK,OAAe,KAAK,UAAU,IAAI;AAAA,UACrE,CAAC;AACD,cAAI,CAAC,OAAO,IAAI;AACZ,oBAAQ,KAAK,wDAAwD,MAAM,OAAO,KAAK,CAAC;AAAA,UAC5F;AAAA,QACJ,SAAS,GAAQ;AACb,kBAAQ,KAAK,gDAAgD,EAAE,OAAO;AAAA,QAC1E;AAAA,MACJ;AAEA,UAAI,MAAM;AACN,aAAK,aAAa,uBAAuB,IAAI,EAAE;AAC/C,aAAK,IAAI;AAAA,MACb;AACA,aAAO,EAAE,IAAI,IAAI,GAAG;AAAA,IACxB,SAAS,OAAY;AACjB,UAAI,MAAM;AACN,aAAK,gBAAgB,KAAK;AAC1B,aAAK,UAAU,EAAE,MAAM,KAAK,eAAe,MAAM,CAAC;AAClD,aAAK,IAAI;AAAA,MACb;AACA,YAAM;AAAA,IACV;AAAA,EACJ;AAAA,EAEA,MAAc,QAAW,QAAgB,MAAc,MAAwB;AAC3E,UAAM,UAAkC;AAAA,MACpC,iBAAiB,UAAU,KAAK,MAAM;AAAA,MACtC,gBAAgB;AAAA,MAChB,cAAc,iBAAiB,WAAW;AAAA,IAC9C;AAEA,QAAI;AACA,YAAM,WAAW,MAAM,MAAM,GAAG,KAAK,OAAO,GAAG,IAAI,IAAI;AAAA,QACnD;AAAA,QACA;AAAA,QACA,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,MACxC,CAAC;AAED,UAAI,CAAC,SAAS,IAAI;AACd,cAAM,YAAY,MAAM,SAAS,KAAK;AACtC,YAAI,UAAU;AACd,YAAI;AACA,gBAAM,OAAO,KAAK,MAAM,SAAS;AACjC,cAAI,KAAK,QAAS,WAAU,KAAK;AAAA,QACrC,QAAQ;AAAA,QAAE;AACV,cAAM,IAAI,cAAc,cAAc,SAAS,MAAM,MAAM,OAAO,IAAI,SAAS,MAAM;AAAA,MACzF;AAEA,aAAO,SAAS,KAAK;AAAA,IACzB,SAAS,GAAQ;AACb,UAAI,aAAa,cAAe,OAAM;AACtC,YAAM,IAAI,cAAc,kBAAkB,EAAE,OAAO,EAAE;AAAA,IACzD;AAAA,EACJ;AAAA,EAEA,KAAK,SAAiB,QAAgB,WAAqB,UAAsE;AAC7H,WAAO,OAAO,YAA2D;AACrE,UAAI;AACJ,UAAI;AACA,YAAI,OAAO,YAAY,UAAU;AAC7B,cAAI;AAAE,sBAAU,KAAK,MAAM,OAAO;AAAA,UAAG,QAC/B;AAAE,sBAAU,EAAE,aAAa,QAAQ;AAAA,UAAG;AAAA,QAChD,WAAW,OAAO,YAAY,YAAY,YAAY,MAAM;AACxD,oBAAU;AAAA,QACd,OAAO;AACH,oBAAU,EAAE,aAAa,OAAO,OAAO,EAAE;AAAA,QAC7C;AAEA,cAAM,SAAS,MAAM,KAAK,IAAI,EAAE,SAAS,QAAQ,SAAS,SAAS,CAAC;AAEpE,YAAI,OAAO,WAAW,YAAY;AAC9B,iBAAO;AAAA,QACX;AAEA,YAAI,OAAO,WAAW,+BAA+B;AACjD,iBAAO,KAAK,UAAU;AAAA,YAClB,QAAQ;AAAA,YACR,SAAS;AAAA,YACT,cAAc,OAAO;AAAA,YACrB,kBAAkB,OAAO;AAAA,YACzB,kBAAkB,OAAO;AAAA,UAC7B,CAAC;AAAA,QACL;AAEA,eAAO,KAAK,UAAU;AAAA,UAClB,QAAQ;AAAA,UACR,kBAAkB,OAAO;AAAA,QAC7B,CAAC;AAAA,MACL,SAAS,GAAQ;AACb,eAAO,0BAA0B,EAAE,OAAO;AAAA,MAC9C;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,MAAM,eACF,YACA,iBACA,eAC4F;AAC5F,UAAM,WAAW,gBAAgB,MAAM,GAAG,EAAE,IAAI,OAAK,EAAE,MAAM,GAAG,CAAC;AACjE,UAAM,SAAS,OAAO,YAAY,QAAQ;AAE1C,UAAM,QAAQ,OAAO,GAAG;AACxB,UAAM,SAAS,OAAO,IAAI;AAC1B,QAAI,CAAC,SAAS,CAAC,QAAQ;AACnB,YAAM,IAAI,cAAc,oDAAoD,GAAG;AAAA,IACnF;AAEA,UAAM,KAAK,OAAO,KAAK;AACvB,QAAI,CAAC,OAAO,SAAS,EAAE,GAAG;AACtB,YAAM,IAAI,cAAc,6CAA6C,GAAG;AAAA,IAC5E;AAEA,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,SAAS,KAAK,IAAI,MAAM,EAAE;AAChC,UAAM,YAAY,IAAI,KAAK;AAC3B,QAAI,SAAS,WAAW;AACpB,YAAM,IAAI,cAAc,kDAAkD,GAAG;AAAA,IACjF;AAEA,UAAM,eAAW,+BAAW,UAAU,aAAa,EAAE,OAAO,UAAU,EAAE,OAAO,KAAK;AACpF,QAAI,WAAW,UAAU;AACrB,YAAM,IAAI,cAAc,6CAA6C,GAAG;AAAA,IAC5E;AAEA,UAAM,UAAU,KAAK,MAAM,UAAU;AACrC,UAAM,OAAO,QAAQ;AACrB,QAAI,iBAAiB;AAErB,QAAI,QAAQ,KAAK,oBAAoB;AACjC,UAAI;AACA,cAAM,MAAM,MAAM,MAAM,KAAK,kBAAkB;AAC/C,YAAI,IAAI,IAAI;AACR,gBAAM,cAAc,IAAI,QAAQ,IAAI,cAAc,KAAK;AACvD,cAAI,YAAY,SAAS,0BAA0B,GAAG;AAClD,kBAAM,cAAc,KAAK;AACzB,gBAAI,aAAa;AACb,oBAAM,SAAS,OAAO,KAAK,MAAM,IAAI,YAAY,CAAC;AAClD,oBAAM,SAAS,OAAO,KAAK,aAAa,QAAQ;AAChD,oBAAM,KAAK,OAAO,SAAS,GAAG,EAAE;AAChC,oBAAM,SAAS,OAAO,SAAS,EAAE;AAEjC,oBAAM,UAAU,OAAO,SAAS,OAAO,SAAS,EAAE;AAClD,oBAAM,KAAK,OAAO,SAAS,GAAG,OAAO,SAAS,EAAE;AAEhD,oBAAM,eAAW,qCAAiB,eAAe,QAAQ,EAAE;AAC3D,uBAAS,WAAW,OAAO;AAC3B,oBAAM,QAAQ,OAAO,OAAO,CAAC,SAAS,OAAO,EAAE,GAAG,SAAS,MAAM,CAAC,CAAC;AACnE,+BAAiB,KAAK,MAAM,MAAM,SAAS,MAAM,CAAC;AAAA,YACtD,OAAO;AACH,sBAAQ,KAAK,qEAAqE;AAAA,YACtF;AAAA,UACJ,OAAO;AACH,kBAAM,WAAW,MAAM,IAAI,KAAK;AAChC,6BAAiB,KAAK,SAAS,QAAQ;AAAA,UAC3C;AAAA,QACJ,OAAO;AACH,kBAAQ,KAAK,yDAAyD,MAAM,IAAI,KAAK,CAAC;AAAA,QAC1F;AAAA,MACJ,SAAS,GAAQ;AACb,gBAAQ,KAAK,mEAAmE,EAAE,OAAO;AAAA,MAC7F;AAAA,IACJ;AAEA,WAAO;AAAA,MACH,IAAI,QAAQ;AAAA,MACZ,OAAO,QAAQ;AAAA,MACf;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AACJ;","names":["exports","module"]}