@nekzus/liop 2.0.0-alpha.1 → 2.0.0-alpha.2

package/dist/chunk-4ABAFG44.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/economy/estimator.ts","../src/economy/otel.ts","../src/economy/telemetry.ts","../src/utils/mcpCompact.ts","../src/gateway/router.ts"],"names":["RealTokenEstimator","countFn","setMergeCacheSizeFn","text","HeuristicTokenEstimator","createTokenEstimator","mod","estimator","log","createSyncTokenEstimator","METER_NAME","METER_VERSION","TOKEN_USAGE_BUCKETS","DURATION_BUCKETS","LiopOTelBridge","meter","metrics","err","noopHistogram","tokens","tokenType","operationName","toolName","durationMs","error","OTEL_OPERATION_MAP","TokenTelemetryEngine","_TokenTelemetryEngine","real","content","metric","fullMetric","otelOp","sum","op","breakdown","key","existing","totalDuration","newCalls","report","uptimeStr","totalCombined","byType","typeEntries","typeLines","type","data","idx","prefix","outputPart","toolReport","toolEntries","toolLines","name","durationPart","timedOps","avgLatency","otelStatus","ms","seconds","minutes","remainingSeconds","hours","remainingMinutes","mcpCompactToolDescriptions","v","stripVerboseLiopToolDescription","description","d","markers","m","i","MANIFEST_CACHE_TTL_S","MANIFEST_DISCOVERY_RETRIES","LiopMcpRouter","_LiopMcpRouter","liopServer","meshNode","defaultRpcPort","remoteTools","t","resources","r","LiopVerifier","peerId","state","now","failures","backoff","request","method","params","id","localTools","listedLocals","allTools","telemetry","toolsPayload","toolsResponsePayload","localResources","remoteResources","allResources","rlTelemetry","rlPayload","typedParams","rrStartTime","result","rrTelemetry","rrOutputPayload","targetUri","manifest","remoteResource","promptsList","plTelemetry","plPayload","pgStartTime","pgTelemetry","pgInputPayload","pgOutputPayload","silent","cachedAt","prevCount","acc","providerIds","MAX_COLD_ATTEMPTS","coldAttempt","attempt","selfId","activePeers","c","selfIdEnd","connectedPeers","a","b","aConnected","successCount","errorCount","cacheUpdated","eligiblePeers","cached","queryResults","EXPECTED_PROVIDERS","initialTimeoutMs","boundedTimeoutMs","deadline","stableCount","lastCacheSize","resolve","tools","seenNames","localToolNames","tool","finalName","providerName","baseDesc","cleanTool","blueprint","properties","envelopeDoc","originStamp","seenUris","resource","augmentedResource","parts","suffix","baseName","stats","providerCount","meshState","cachedTools","connections","bootstrapNodes","bootstrapCount","showBootstraps","bootstrapList","addr","routingTableSize","rawPeerId","localPeerId","cachedToolList","statusText","line","diagTelemetry","isLocal","target","providers","localStartTime","localTelemetry","localInputPayload","localOutputPayload","manifestEntry","grpcPort","addrs","targetAddr","os","localInterfaces","ipIdx","advertisedIp","remoteClient","liopV1","createChannelCredentials","client","capabilityHash","proofOfIntent","transcodingStartTime","response","ciphertext","sharedSecret","Kyber768Wrapper","embeddedArgsJson","proxyLogic","nonce","sealedLogic","call","resultBody","lastResponse","grpcRes","parsedResult","remoteTelemetry","e","payload","cipher","encrypted"],"mappings":"yOA0BO,IAAMA,CAAAA,CAAN,KAAmD,CAChD,IAAA,CAAO,aAER,OAAA,CAER,WAAA,CACCC,CAAAA,CACAC,CAAAA,CACC,CACD,IAAA,CAAK,QAAUD,CAAAA,CAEXC,CAAAA,EACHA,EAAoB,GAAM,EAE5B,CAEA,WAAA,CAAYC,CAAAA,CAAsB,CACjC,OAAIA,CAAAA,CAAK,MAAA,GAAW,EAAU,CAAA,CACvB,IAAA,CAAK,QAAQA,CAAI,CACzB,CACD,CAAA,CAQaC,CAAAA,CAAN,KAAwD,CACrD,IAAA,CAAO,qBAAA,CAEhB,YAAYD,CAAAA,CAAsB,CACjC,OAAIA,CAAAA,CAAK,MAAA,GAAW,CAAA,CAAU,EACvB,IAAA,CAAK,IAAA,CAAKA,CAAAA,CAAK,MAAA,CAAS,CAAC,CACjC,CACD,EASA,eAAsBE,GAAgD,CACrE,GAAI,CACH,IAAMC,CAAAA,CAAM,MAAM,OAAO,eAAe,CAAA,CAClCC,EAAY,IAAIP,CAAAA,CACrBM,CAAAA,CAAI,WAAA,CACJA,CAAAA,CAAI,iBACL,EACA,OAAAE,CAAAA,CAAI,KAAA,CAAM,wDAAwD,CAAA,CAC3DD,CACR,MAAQ,CACP,OAAAC,EAAI,IAAA,CACH,+EACD,EACO,IAAIJ,CACZ,CACD,CAOO,SAASK,CAAAA,EAA2C,CAC1D,OAAO,IAAIL,CACZ,CCzFA,IAAMM,CAAAA,CAAa,cAAA,CACbC,CAAAA,CAAgB,eAAA,CAMhBC,EAAsB,CAC3B,CAAA,CAAG,EAAG,EAAA,CAAI,EAAA,CAAI,IAAK,IAAA,CAAM,IAAA,CAAM,KAAA,CAAO,KAAA,CAAO,MAAA,CAAQ,OAAA,CAAS,QAC9D,QAAA,CAAU,QACX,CAAA,CAMMC,CAAAA,CAAmB,CACxB,GAAA,CAAM,IAAM,GAAA,CAAM,GAAA,CAAM,GAAA,CAAM,GAAA,CAAM,GAAA,CAAM,IAAA,CAAM,KAAM,IAAA,CAAM,KAAA,CAAO,MACnE,KAAA,CAAO,KACR,EAeaC,CAAAA,CAAN,KAAqB,CACnB,UAAA,CACA,iBAAA,CACA,MAAA,CAAS,MAEjB,WAAA,EAAc,CACb,GAAI,CACH,IAAMC,CAAAA,CAAQC,QAAQ,QAAA,CAASN,CAAAA,CAAYC,CAAa,CAAA,CAExD,IAAA,CAAK,UAAA,CAAaI,EAAM,eAAA,CAAgB,2BAAA,CAA6B,CACpE,WAAA,CAAa,0DAAA,CACb,KAAM,SAAA,CACN,MAAA,CAAQ,CAAE,wBAAA,CAA0BH,CAAoB,CACzD,CAAC,CAAA,CAED,IAAA,CAAK,iBAAA,CAAoBG,CAAAA,CAAM,eAAA,CAC9B,kCAAA,CACA,CACC,WAAA,CAAa,6BAAA,CACb,IAAA,CAAM,GAAA,CACN,MAAA,CAAQ,CAAE,yBAA0BF,CAAiB,CACtD,CACD,CAAA,CAEA,IAAA,CAAK,OAAS,CAAA,CAAA,CACdL,CAAAA,CAAI,KAAA,CAAM,iDAAiD,EAC5D,CAAA,MAASS,EAAc,CAEtBT,CAAAA,CAAI,KAAA,CACH,CAAA,6BAAA,EAAgCS,CAAAA,YAAe,KAAA,CAAQA,EAAI,OAAA,CAAU,MAAA,CAAOA,CAAG,CAAC,CAAA,CACjF,CAAA,CACA,IAAMC,CAAAA,CAAgB,CACrB,OAAQ,IAAM,CAAC,CAChB,CAAA,CACA,IAAA,CAAK,UAAA,CAAaA,CAAAA,CAClB,IAAA,CAAK,iBAAA,CAAoBA,EAC1B,CACD,CAUA,aACCC,CAAAA,CACAC,CAAAA,CACAC,EACAC,CAAAA,CACO,CACP,IAAA,CAAK,UAAA,CAAW,MAAA,CAAOH,CAAAA,CAAQ,CAC9B,eAAA,CAAiB,MAAA,CACjB,wBAAyBE,CAAAA,CACzB,mBAAA,CAAqBD,EACrB,sBAAA,CAAwB,WAAA,CACxB,GAAIE,CAAAA,CAAW,CAAE,gBAAA,CAAkBA,CAAS,CAAA,CAAI,EACjD,CAAC,EACF,CASA,eACCC,CAAAA,CACAF,CAAAA,CACAG,CAAAA,CACO,CACP,IAAA,CAAK,iBAAA,CAAkB,OAAOD,CAAAA,CAAa,GAAA,CAAM,CAChD,eAAA,CAAiB,MAAA,CACjB,wBAAyBF,CAAAA,CACzB,GAAIG,CAAAA,CAAQ,CAAE,YAAA,CAAcA,CAAM,EAAI,EACvC,CAAC,EACF,CAGA,QAAA,EAAoB,CACnB,OAAO,IAAA,CAAK,MACb,CACD,EC5EA,IAAMC,EAAmE,CACxE,UAAA,CAAY,OACZ,SAAA,CAAW,cAAA,CACX,cAAe,MAAA,CACf,aAAA,CAAe,MAAA,CACf,UAAA,CAAY,MAAA,CACZ,WAAA,CAAa,OACb,UAAA,CAAY,MACb,CAAA,CAWaC,CAAAA,CAAN,MAAMC,CAAqB,CACjC,OAAe,QAAA,CAAwC,IAAA,CAC/C,UAAA,CAAqC,EAAC,CAC7B,UACA,SAAA,CACT,SAAA,CACA,WAEA,WAAA,EAAc,CACrB,KAAK,SAAA,CAAY,MAAA,CAAO,UAAA,EAAW,CACnC,IAAA,CAAK,SAAA,CAAY,KAAK,GAAA,EAAI,CAE1B,IAAA,CAAK,SAAA,CAAYlB,CAAAA,EAAyB,CAC1C,KAAK,UAAA,CAAa,IAAIK,CAAAA,CAEtB,IAAA,CAAK,iBAAA,GACN,CAGQ,iBAAA,EAA0B,CACjCT,GAAqB,CACnB,IAAA,CAAMuB,GAAS,CACf,IAAA,CAAK,SAAA,CAAYA,EAClB,CAAC,CAAA,CACA,MAAM,IAAM,CAEb,CAAC,EACH,CAEA,OAAO,aAAoC,CAC1C,OAAKD,CAAAA,CAAqB,QAAA,GACzBA,CAAAA,CAAqB,QAAA,CAAW,IAAIA,CAAAA,CAAAA,CAE9BA,CAAAA,CAAqB,QAC7B,CAMA,WAAA,CAAYE,EAAyB,CACpC,GAAI,CACH,OAAO,IAAA,CAAK,SAAA,CAAU,YAAYA,CAAO,CAC1C,CAAA,KAAQ,CAEP,OAAO,IAAA,CAAK,KAAKA,CAAAA,CAAQ,MAAA,CAAS,CAAC,CACpC,CACD,CAMA,OAAOC,CAAAA,CAAuD,CAC7D,IAAMC,CAAAA,CAAmC,CACxC,GAAGD,CAAAA,CACH,SAAA,CAAW,IAAA,CAAK,GAAA,EACjB,CAAA,CACA,KAAK,UAAA,CAAW,IAAA,CAAKC,CAAU,CAAA,CAG/B,GAAI,CACH,IAAMC,CAAAA,CAASP,CAAAA,CAAmBK,CAAAA,CAAO,IAAI,CAAA,EAAK,MAAA,CAE9CA,EAAO,oBAAA,CAAuB,CAAA,EACjC,KAAK,UAAA,CAAW,YAAA,CACfA,EAAO,oBAAA,CACP,OAAA,CACAE,CAAAA,CACAF,CAAAA,CAAO,QACR,CAAA,CAEGA,EAAO,qBAAA,CAAwB,CAAA,EAClC,KAAK,UAAA,CAAW,YAAA,CACfA,EAAO,qBAAA,CACP,QAAA,CACAE,CAAAA,CACAF,CAAAA,CAAO,QACR,CAAA,CAEGA,EAAO,UAAA,GAAe,KAAA,CAAA,EACzB,KAAK,UAAA,CAAW,cAAA,CAAeA,EAAO,UAAA,CAAYE,CAAM,EAE1D,CAAA,KAAQ,CAER,CACD,CAKA,cAAA,CAAeH,CAAAA,CAAyB,CACvC,OAAO,IAAA,CAAK,WAAA,CAAYA,CAAO,CAChC,CAGA,SAAA,EAAgC,CAC/B,OAAO,CACN,UAAW,IAAA,CAAK,SAAA,CAChB,WAAY,CAAC,GAAG,KAAK,UAAU,CAAA,CAC/B,gBAAA,CAAkB,IAAA,CAAK,UAAA,CAAW,MAAA,CACjC,CAACI,CAAAA,CAAKC,CAAAA,GAAOD,CAAAA,CAAMC,CAAAA,CAAG,oBAAA,CACtB,CACD,EACA,iBAAA,CAAmB,IAAA,CAAK,UAAA,CAAW,MAAA,CAClC,CAACD,CAAAA,CAAKC,IAAOD,CAAAA,CAAMC,CAAAA,CAAG,sBACtB,CACD,CAAA,CACA,cAAe,IAAA,CAAK,SAAA,CAAU,IAAA,CAC9B,eAAA,CAAiB,IAAA,CAAK,GAAA,GAAQ,IAAA,CAAK,SACpC,CACD,CAGA,gBAAA,EAAoD,CACnD,IAAMC,CAAAA,CAAY,IAAI,GAAA,CAEtB,IAAA,IAAWD,CAAAA,IAAM,IAAA,CAAK,WAAY,CACjC,IAAME,EAAMF,CAAAA,CAAG,QAAA,EAAYA,EAAG,MAAA,CACxBG,CAAAA,CAAWF,CAAAA,CAAU,GAAA,CAAIC,CAAG,CAAA,EAAK,CACtC,KAAA,CAAO,CAAA,CACP,MAAA,CAAQ,CAAA,CACR,KAAA,CAAO,CAAA,CACP,cAAe,CAChB,CAAA,CAEME,CAAAA,CACLD,CAAAA,CAAS,aAAA,CAAgBA,CAAAA,CAAS,OAASH,CAAAA,CAAG,UAAA,EAAc,GACvDK,CAAAA,CAAWF,CAAAA,CAAS,MAAQ,CAAA,CAElCF,CAAAA,CAAU,GAAA,CAAIC,CAAAA,CAAK,CAClB,KAAA,CAAOC,EAAS,KAAA,CAAQH,CAAAA,CAAG,oBAAA,CAC3B,MAAA,CAAQG,CAAAA,CAAS,MAAA,CAASH,EAAG,qBAAA,CAC7B,KAAA,CAAOK,CAAAA,CACP,aAAA,CAAeA,CAAAA,CAAW,CAAA,CAAID,EAAgBC,CAAAA,CAAW,CAC1D,CAAC,EACF,CAEA,OAAOJ,CACR,CAMA,iBAAA,EAA4B,CAC3B,IAAMK,CAAAA,CAAS,KAAK,SAAA,EAAU,CAC9B,GAAIA,CAAAA,CAAO,UAAA,CAAW,MAAA,GAAW,EAAG,OAAO,EAAA,CAE3C,IAAMC,CAAAA,CAAY,IAAA,CAAK,YAAA,CAAaD,EAAO,eAAe,CAAA,CACpDE,EAAgBF,CAAAA,CAAO,gBAAA,CAAmBA,EAAO,iBAAA,CAGjDG,CAAAA,CAAS,IAAI,GAAA,CAInB,IAAA,IAAWT,CAAAA,IAAMM,EAAO,UAAA,CAAY,CACnC,IAAMJ,CAAAA,CAAMF,CAAAA,CAAG,IAAA,CACTG,EAAWM,CAAAA,CAAO,GAAA,CAAIP,CAAG,CAAA,EAAK,CACnC,KAAA,CAAO,EACP,KAAA,CAAO,CAAA,CACP,OAAQ,CACT,CAAA,CACAO,EAAO,GAAA,CAAIP,CAAAA,CAAK,CACf,KAAA,CAAOC,CAAAA,CAAS,KAAA,CAAQ,EACxB,KAAA,CAAOA,CAAAA,CAAS,KAAA,CAAQH,CAAAA,CAAG,oBAAA,CAC3B,MAAA,CAAQG,EAAS,MAAA,CAASH,CAAAA,CAAG,qBAC9B,CAAC,EACF,CAGA,IAAMU,CAAAA,CAAc,KAAA,CAAM,KAAKD,CAAAA,CAAO,OAAA,EAAS,CAAA,CACzCE,CAAAA,CAAYD,CAAAA,CAAY,GAAA,CAAI,CAAC,CAACE,EAAMC,CAAI,CAAA,CAAGC,CAAAA,GAAQ,CACxD,IAAMC,CAAAA,CAASD,IAAQJ,CAAAA,CAAY,MAAA,CAAS,CAAA,CAAI,sBAAA,CAAU,sBAAA,CACpDM,CAAAA,CACLH,EAAK,MAAA,CAAS,CAAA,CAAI,MAAMA,CAAAA,CAAK,MAAA,CAAO,gBAAgB,CAAA,IAAA,CAAA,CAAS,EAAA,CAC9D,OAAO,CAAA,EAAGE,CAAM,IAAIH,CAAI,CAAA,KAAA,EAAKC,CAAAA,CAAK,KAAK,CAAA,QAAA,EAAMA,CAAAA,CAAK,MAAM,cAAA,EAAgB,CAAA,GAAA,EAAMG,CAAU,CAAA,CACzF,CAAC,EAGKC,CAAAA,CAAa,IAAA,CAAK,kBAAiB,CACnCC,CAAAA,CAAc,MAAM,IAAA,CAAKD,CAAAA,CAAW,OAAA,EAAS,CAAA,CAAE,MAAA,CACpD,CAAC,CAACf,CAAG,CAAA,GAAMA,CAAAA,GAAQ,YAAA,EAAgBA,CAAAA,GAAQ,gBAC5C,CAAA,CAEMiB,CAAAA,CAAsB,EAAC,CACzBD,CAAAA,CAAY,MAAA,CAAS,IACxBC,CAAAA,CAAU,IAAA,CAAK,uBAAa,CAAA,CAC5BD,CAAAA,CAAY,QAAQ,CAAC,CAACE,CAAAA,CAAMP,CAAI,CAAA,CAAGC,CAAAA,GAAQ,CAC1C,IAAMC,CAAAA,CAASD,CAAAA,GAAQI,CAAAA,CAAY,MAAA,CAAS,CAAA,CAAI,uBAAU,sBAAA,CACpDF,CAAAA,CACLH,CAAAA,CAAK,MAAA,CAAS,CAAA,CAAI,CAAA,GAAA,EAAMA,EAAK,MAAA,CAAO,cAAA,EAAgB,CAAA,IAAA,CAAA,CAAS,EAAA,CACxDQ,EACLR,CAAAA,CAAK,aAAA,CAAgB,CAAA,CAAI,CAAA,EAAA,EAAK,IAAA,CAAK,KAAA,CAAMA,EAAK,aAAa,CAAC,CAAA,EAAA,CAAA,CAAO,EAAA,CACpEM,CAAAA,CAAU,IAAA,CACT,GAAGJ,CAAM,CAAA,CAAA,EAAIK,CAAI,CAAA,EAAA,EAAKP,CAAAA,CAAK,KAAA,CAAM,gBAAgB,CAAA,GAAA,EAAMG,CAAU,CAAA,MAAA,EAAMH,CAAAA,CAAK,KAAK,CAAA,CAAA,EAAIQ,CAAY,CAAA,CAClG,EACD,CAAC,CAAA,CAAA,CAIF,IAAMC,CAAAA,CAAWhB,CAAAA,CAAO,UAAA,CAAW,MAAA,CACjCN,CAAAA,EAAOA,CAAAA,CAAG,aAAe,MAC3B,CAAA,CACMuB,CAAAA,CACLD,CAAAA,CAAS,MAAA,CAAS,CAAA,CACf,KAAK,KAAA,CACLA,CAAAA,CAAS,OAAO,CAACvB,CAAAA,CAAKC,IAAOD,CAAAA,EAAOC,CAAAA,CAAG,UAAA,EAAc,CAAA,CAAA,CAAI,CAAC,CAAA,CACzDsB,EAAS,MACX,CAAA,CACC,CAAA,CAEEE,CAAAA,CAAa,IAAA,CAAK,UAAA,CAAW,UAAS,CACzC,yCAAA,CACA,UAAA,CAcH,OAZc,CACb;AAAA,cAAA,CAAA,CACA,CAAA,sBAAA,EAAelB,CAAAA,CAAO,SAAA,CAAU,KAAA,CAAM,CAAA,CAAG,CAAC,CAAC,CAAA,EAAA,EAAKC,CAAS,CAAA,CAAA,CAAA,CACzD,CAAA,wBAAA,EAAiBD,CAAAA,CAAO,aAAa,CAAA,CAAA,CACrC,CAAA,yBAAA,EAAkBA,CAAAA,CAAO,UAAA,CAAW,MAAM,CAAA,CAAA,CAC1C,GAAGK,CAAAA,CACH,CAAA,oBAAA,EAAaL,CAAAA,CAAO,gBAAA,CAAiB,cAAA,EAAgB,SAASA,CAAAA,CAAO,iBAAA,CAAkB,cAAA,EAAgB,CAAA,MAAA,EAASE,CAAAA,CAAc,gBAAgB,CAAA,UAAA,CAAA,CAC9I,GAAGW,CAAAA,CACH,GAAII,CAAAA,CAAa,EAAI,CAAC,CAAA,0BAAA,EAAmBA,CAAU,CAAA,EAAA,CAAI,CAAA,CAAI,GAC3D,CAAA,mBAAA,EAAYC,CAAU,CAAA,CACvB,CAAA,CAEa,IAAA,CAAK;AAAA,CAAI,CACvB,CAGQ,YAAA,CAAaC,CAAAA,CAAoB,CACxC,IAAMC,CAAAA,CAAU,IAAA,CAAK,KAAA,CAAMD,CAAAA,CAAK,GAAI,EACpC,GAAIC,CAAAA,CAAU,GAAI,OAAO,CAAA,EAAGA,CAAO,CAAA,CAAA,CAAA,CACnC,IAAMC,CAAAA,CAAU,IAAA,CAAK,KAAA,CAAMD,CAAAA,CAAU,EAAE,CAAA,CACjCE,CAAAA,CAAmBF,EAAU,EAAA,CACnC,GAAIC,EAAU,EAAA,CAAI,OAAO,CAAA,EAAGA,CAAO,CAAA,EAAA,EAAKC,CAAgB,IACxD,IAAMC,CAAAA,CAAQ,KAAK,KAAA,CAAMF,CAAAA,CAAU,EAAE,CAAA,CAC/BG,CAAAA,CAAmBH,CAAAA,CAAU,EAAA,CACnC,OAAO,CAAA,EAAGE,CAAK,CAAA,EAAA,EAAKC,CAAgB,GACrC,CAGA,KAAA,EAAc,CACb,IAAA,CAAK,UAAA,CAAa,GACnB,CAGA,OAAO,SAAgB,CACtBrC,CAAAA,CAAqB,SAAW,KACjC,CACD,EC1TO,SAASsC,CAAAA,EAAsC,CACrD,IAAMC,CAAAA,CACL,OAAA,CAAQ,IAAI,kCAAA,EAAoC,WAAA,GAAc,IAAA,EAAK,CACpE,OAAOA,CAAAA,GAAM,GAAA,EAAOA,CAAAA,GAAM,QAAUA,CAAAA,GAAM,KAC3C,CAKO,SAASC,CAAAA,CAAgCC,CAAAA,CAA6B,CAC5E,IAAIC,CAAAA,CAAID,CAAAA,CACFE,CAAAA,CAAU,CACf;;AAAA,eAAA,CAAA,CACA,CAAA;AAAA;AAAA,eAAA,CAAA,CACA;AAAA,eAAA,CACD,CAAA,CACA,IAAA,IAAWC,CAAAA,IAAKD,CAAAA,CAAS,CACxB,IAAME,CAAAA,CAAIH,CAAAA,CAAE,OAAA,CAAQE,CAAC,CAAA,CACrB,GAAIC,CAAAA,GAAM,EAAA,CAAI,CACbH,CAAAA,CAAIA,CAAAA,CAAE,KAAA,CAAM,CAAA,CAAGG,CAAC,CAAA,CAChB,KACD,CACD,CACA,OAAOH,CAAAA,CAAE,OAAA,EACV,KCRMI,CAAAA,CAAuB,GAAA,CAGvBC,CAAAA,CAA6B,CAAA,CAWtBC,EAAN,MAAMC,CAAc,CA0B1B,WAAA,CACSC,CAAAA,CACAC,CAAAA,CAA4B,IAAA,CAC5BC,CAAAA,CAAiB,MACxB,CAHO,IAAA,CAAA,UAAA,CAAAF,CAAAA,CACA,IAAA,CAAA,QAAA,CAAAC,EACA,IAAA,CAAA,cAAA,CAAAC,CAAAA,CAGJ,IAAA,CAAK,QAAA,GACR,KAAK,QAAA,CAAS,uBAAA,CAAwB,IAAM,CAC3C,IAAMC,CAAAA,CAAc,IAAA,CAAK,UAAA,CAAW,SAAA,GAAY,GAAA,CAAKC,CAAAA,GAAO,CAC3D,IAAA,CAAMA,EAAE,IAAA,CACR,WAAA,CAAaA,CAAAA,CAAE,WAAA,CACf,YAAaA,CAAAA,CAAE,WAChB,CAAA,CAAE,CAAA,CAEIC,CAAAA,CAAY,IAAA,CAAK,UAAA,CAAW,aAAA,GAAgB,GAAA,CAAKC,CAAAA,GAAO,CAC7D,IAAA,CAAMA,EAAE,IAAA,CACR,GAAA,CAAKA,CAAAA,CAAE,GAAA,CACP,YAAaA,CAAAA,CAAE,WAAA,CACf,QAAA,CAAUA,CAAAA,CAAE,QACb,CAAA,CAAE,CAAA,CAEF,OAAO,CACN,OAAQ,IAAA,CAAK,QAAA,EAAU,SAAA,EAAU,EAAK,UACtC,QAAA,CAAU,IAAA,CAAK,cAAA,CACf,KAAA,CAAO,CAAC,GAAGH,CAAW,CAAA,CACtB,SAAA,CAAAE,EACA,UAAA,CAAY,IAAA,CAAK,UAAA,CAAW,aAAA,EAC7B,CACD,CAAC,CAAA,CAGD,IAAA,CAAK,SAAS,gBAAA,EAAiB,CAAE,KAAA,CAAOjE,CAAAA,EAAiB,CACxDT,CAAAA,CAAI,IAAA,CACH,CAAA,2CAAA,EAA8CS,CAAAA,YAAe,MAAQA,CAAAA,CAAI,OAAA,CAAU,MAAA,CAAOA,CAAG,CAAC,CAAA,CAC/F,EACD,CAAC,CAAA,CAAA,CAIE,QAAQ,GAAA,CAAI,qBAAA,GAA0B,MAAA,EACzC,OAAA,CAAQ,OAAO,KAAA,CACd,CAAA;AAAA,CAED,EAEF,CArEQ,aAAA,CAGJ,IAAI,GAAA,CAGA,iBAAyC,IAAA,CAG1C,QAAA,CAAyB,IAAImE,GAAAA,CAG7B,eAGC,oBAAA,CAGJ,IAAI,IAER,OAAwB,iCAAA,CAAoC,KAC5D,OAAwB,gCAAA,CAAmC,CAAA,CAAI,GAAA,CAC/D,OAAwB,6BAAA,CAAgC,GAAA,CAiDhD,uBAAA,CAAwBC,CAAAA,CAAyB,CACxD,IAAMC,CAAAA,CAAQ,IAAA,CAAK,oBAAA,CAAqB,IAAID,CAAM,CAAA,CAClD,GAAI,CAACC,CAAAA,CAAO,OAAO,MAAA,CACnB,IAAMC,CAAAA,CAAM,IAAA,CAAK,KAAI,CACrB,OAAIA,CAAAA,EAAOD,CAAAA,CAAM,cAAsB,KAAA,EAGtCC,CAAAA,CAAMD,CAAAA,CAAM,aAAA,CACZV,EAAc,6BAAA,GAEdpE,CAAAA,CAAI,KACH,CAAA,0CAAA,EAA6C6E,CAAM,qBAAqB,IAAA,CAAK,IAAA,CAAA,CAAMC,CAAAA,CAAM,aAAA,CAAgBC,GAAO,GAAI,CAAC,CAAA,YAAA,CACtH,CAAA,CACAD,EAAM,aAAA,CAAgBC,CAAAA,CAAAA,CAEhB,IAAA,CACR,CAEQ,2BAA2BF,CAAAA,CAAsB,CACxD,KAAK,oBAAA,CAAqB,MAAA,CAAOA,CAAM,EACxC,CAEQ,0BAAA,CAA2BA,CAAAA,CAAsB,CACxD,IAAME,CAAAA,CAAM,IAAA,CAAK,GAAA,GAEXC,CAAAA,CAAAA,CADO,IAAA,CAAK,oBAAA,CAAqB,GAAA,CAAIH,CAAM,CAAA,EACzB,QAAA,EAAY,GAAK,CAAA,CACnCI,CAAAA,CAAU,KAAK,GAAA,CACpBb,CAAAA,CAAc,iCAAA,CACb,CAAA,EAAK,KAAK,GAAA,CAAI,CAAA,CAAGY,CAAAA,CAAW,CAAC,EAC9BZ,CAAAA,CAAc,gCACf,CAAA,CACA,IAAA,CAAK,qBAAqB,GAAA,CAAIS,CAAAA,CAAQ,CACrC,QAAA,CAAAG,CAAAA,CACA,cAAeD,CAAAA,CAAME,CAAAA,CACrB,aAAA,CAAe,CAChB,CAAC,EACF,CAEA,MAAa,QAAA,CAASC,EAAkD,CACvE,GAAM,CAAE,MAAA,CAAAC,EAAQ,MAAA,CAAAC,CAAAA,CAAQ,GAAAC,CAAG,CAAA,CAAIH,EAG/B,OAFAlF,CAAAA,CAAI,IAAA,CAAK,CAAA,0BAAA,EAA6BmF,CAAM,CAAA,CAAE,CAAA,CAEtCA,CAAAA,EACP,KAAK,YAAA,CACJ,OAAO,CACN,OAAA,CAAS,MACT,EAAA,CAAAE,CAAAA,CACA,OAAQ,CACP,eAAA,CAAiB,aACjB,YAAA,CAAc,CACb,KAAA,CAAO,CAAE,YAAa,IAAK,CAAA,CAC3B,SAAA,CAAW,CAAE,YAAa,IAAK,CAAA,CAC/B,OAAA,CAAS,CAAE,YAAa,IAAK,CAC9B,EACA,UAAA,CAAY,IAAA,CAAK,WAAW,aAAA,EAC7B,CACD,CAAA,CACD,KAAK,2BAAA,CAGJ,OAAA,IAAA,CAAK,6BAAA,EAA8B,CAAE,MAAM,IAAM,CAAC,CAAC,CAAA,CAC5C,KACR,KAAK,yBAAA,CACJ,OAAO,IAAA,CACR,KAAK,OACJ,OAAO,CAAE,OAAA,CAAS,KAAA,CAAO,GAAAA,CAAAA,CAAI,MAAA,CAAQ,EAAG,EACzC,KAAK,YAAA,CAAc,CAClB,IAAMC,EAAa,IAAA,CAAK,UAAA,CAAW,WAAU,CACvCd,CAAAA,CAAc,MAAM,IAAA,CAAK,cAAA,EAAe,CAExCe,CAAAA,CAAe9B,GAA2B,CAC7C6B,CAAAA,CAAW,GAAA,CAAKb,CAAAA,GAAO,CACvB,GAAGA,CAAAA,CACH,WAAA,CAAad,CAAAA,CAAgCc,EAAE,WAAA,EAAe,EAAE,CACjE,CAAA,CAAE,CAAA,CACDa,EAEHtF,CAAAA,CAAI,IAAA,CACH,CAAA,0BAAA,EAA6BsF,CAAAA,CAAW,MAAM,CAAA,QAAA,EAAWd,CAAAA,CAAY,MAAM,CAAA,mBAAA,CAC5E,EAiBA,IAAMgB,CAAAA,CAAW,CAXM,CACtB,KAAM,gBAAA,CACN,WAAA,CACC,+FACD,WAAA,CAAa,CACZ,KAAM,QAAA,CACN,UAAA,CAAY,EAAC,CACb,qBAAsB,KACvB,CACD,CAAA,CAEkC,GAAGD,EAAc,GAAGf,CAAW,CAAA,CAG3DiB,CAAAA,CAAYvE,EAAqB,WAAA,EAAY,CAC7CwE,EAAe,IAAA,CAAK,SAAA,CAAUF,CAAQ,CAAA,CACtCG,CAAAA,CAAuB,IAAA,CAAK,SAAA,CAAU,CAAE,KAAA,CAAOH,CAAS,CAAC,CAAA,CAC/D,OAAAC,CAAAA,CAAU,MAAA,CAAO,CAChB,IAAA,CAAM,aACN,MAAA,CAAQ,YAAA,CACR,qBAAsBA,CAAAA,CAAU,WAAA,CAAYC,CAAY,CAAA,CACxD,qBAAA,CAAuBD,CAAAA,CAAU,WAAA,CAAYE,CAAoB,CAClE,CAAC,EAEM,CACN,OAAA,CAAS,MACT,EAAA,CAAAN,CAAAA,CACA,MAAA,CAAQ,CACP,MAAOG,CACR,CACD,CACD,CACA,KAAK,aACJ,OAAO,IAAA,CAAK,kBAAA,CAAmBH,CAAAA,CAAID,CAAiC,CAAA,CACrE,KAAK,gBAAA,CAAkB,CACtB,IAAMQ,CAAAA,CAAiB,IAAA,CAAK,UAAA,CAAW,aAAA,GACjCC,CAAAA,CAAkB,MAAM,KAAK,kBAAA,EAAmB,CAChDC,EAAe,CAAC,GAAGF,CAAAA,CAAgB,GAAGC,CAAe,CAAA,CAGrDE,CAAAA,CAAc7E,CAAAA,CAAqB,WAAA,GACnC8E,CAAAA,CAAY,IAAA,CAAK,SAAA,CAAUF,CAAY,EAC7C,OAAAC,CAAAA,CAAY,OAAO,CAClB,IAAA,CAAM,gBACN,MAAA,CAAQ,gBAAA,CACR,oBAAA,CAAsB,CAAA,CACtB,sBAAuBA,CAAAA,CAAY,WAAA,CAAYC,CAAS,CACzD,CAAC,CAAA,CAEM,CACN,OAAA,CAAS,KAAA,CACT,GAAAX,CAAAA,CACA,MAAA,CAAQ,CAAE,SAAA,CAAWS,CAAa,CACnC,CACD,CACA,KAAK,gBAAA,CAAkB,CACtB,IAAMG,CAAAA,CAAcb,CAAAA,CACpB,GAAI,CAACa,CAAAA,EAAa,GAAA,CACjB,OAAO,CACN,QAAS,KAAA,CACT,EAAA,CAAAZ,EACA,KAAA,CAAO,CAAE,KAAM,MAAA,CAAQ,OAAA,CAAS,sBAAuB,CACxD,EACD,GAAI,CACH,IAAMa,CAAAA,CAAc,KAAK,GAAA,EAAI,CACvBC,CAAAA,CAAS,MAAM,KAAK,UAAA,CAAW,YAAA,CAAaF,EAAY,GAAG,CAAA,CAG3DG,EAAclF,CAAAA,CAAqB,WAAA,EAAY,CAC/CmF,CAAAA,CAAkB,KAAK,SAAA,CAAUF,CAAM,CAAA,CAC7C,OAAAC,EAAY,MAAA,CAAO,CAClB,IAAA,CAAM,eAAA,CACN,OAAQ,gBAAA,CACR,QAAA,CAAUH,EAAY,GAAA,CACtB,oBAAA,CAAsBG,EAAY,WAAA,CAAYH,CAAAA,CAAY,GAAG,CAAA,CAC7D,sBAAuBG,CAAAA,CAAY,WAAA,CAAYC,CAAe,CAAA,CAC9D,WAAY,IAAA,CAAK,GAAA,EAAI,CAAIH,CAC1B,CAAC,CAAA,CAEM,CAAE,QAAS,KAAA,CAAO,EAAA,CAAAb,EAAI,MAAA,CAAAc,CAAO,CACrC,CAAA,MAAS1F,EAAc,CAEtB,IAAM6F,CAAAA,CAAYL,CAAAA,CAAY,IAC9B,IAAA,GAAW,CAAE,QAAA,CAAAM,GAAS,IAAK,IAAA,CAAK,aAAA,CAAc,QAAO,CAAG,CACvD,IAAMC,CAAAA,CAAiBD,GAAAA,CAAS,SAAA,CAAU,IAAA,CACxC5B,GAAMA,CAAAA,CAAE,GAAA,GAAQ2B,CAClB,CAAA,CACA,GAAIE,CAAAA,CACH,OAAAxG,CAAAA,CAAI,IAAA,CACH,mCAAmCsG,CAAS,CAAA,mBAAA,EAAsBC,IAAS,MAAM,CAAA,CAAA,CAClF,EACO,CACN,OAAA,CAAS,KAAA,CACT,EAAA,CAAAlB,EACA,MAAA,CAAQ,CACP,QAAA,CAAU,CACT,CACC,GAAA,CAAKmB,CAAAA,CAAe,GAAA,CACpB,QAAA,CAAUA,EAAe,QAAA,EAAY,YAAA,CACrC,KACCA,CAAAA,CAAe,IAAA,EACfA,EAAe,WAAA,EACf,qBACF,CACD,CACD,CACD,CAEF,CAEA,OAAO,CACN,QAAS,KAAA,CACT,EAAA,CAAAnB,CAAAA,CACA,KAAA,CAAO,CACN,IAAA,CAAM,KAAA,CACN,QAAS5E,CAAAA,YAAe,KAAA,CAAQA,EAAI,OAAA,CAAU,MAAA,CAAOA,CAAG,CACzD,CACD,CACD,CACD,CACA,KAAK,eAAgB,CACpB,IAAMgG,CAAAA,CAAc,IAAA,CAAK,WAAW,WAAA,EAAY,CAG1CC,EAAcxF,CAAAA,CAAqB,WAAA,GACnCyF,CAAAA,CAAY,IAAA,CAAK,SAAA,CAAUF,CAAW,EAC5C,OAAAC,CAAAA,CAAY,MAAA,CAAO,CAClB,KAAM,aAAA,CACN,MAAA,CAAQ,cAAA,CACR,oBAAA,CAAsB,EACtB,qBAAA,CAAuBA,CAAAA,CAAY,YAAYC,CAAS,CACzD,CAAC,CAAA,CAEM,CACN,OAAA,CAAS,KAAA,CACT,GAAAtB,CAAAA,CACA,MAAA,CAAQ,CAAE,OAAA,CAASoB,CAAY,CAChC,CACD,CACA,KAAK,cAAe,CACnB,IAAMR,EAAcb,CAAAA,CAGpB,GAAI,CAACa,CAAAA,EAAa,IAAA,CACjB,OAAO,CACN,QAAS,KAAA,CACT,EAAA,CAAAZ,CAAAA,CACA,KAAA,CAAO,CAAE,IAAA,CAAM,MAAA,CAAQ,OAAA,CAAS,qBAAsB,CACvD,CAAA,CACD,GAAI,CACH,IAAMuB,CAAAA,CAAc,KAAK,GAAA,EAAI,CACvBT,CAAAA,CAAS,MAAM,KAAK,UAAA,CAAW,SAAA,CAAU,CAC9C,IAAA,CAAMF,CAAAA,CAAY,KAClB,SAAA,CAAWA,CAAAA,CAAY,SAAA,EAAa,EACrC,CAAC,CAAA,CAGKY,EAAc3F,CAAAA,CAAqB,WAAA,GACnC4F,CAAAA,CAAiB,IAAA,CAAK,SAAA,CAAU,CACrC,KAAMb,CAAAA,CAAY,IAAA,CAClB,SAAA,CAAWA,CAAAA,CAAY,SACxB,CAAC,CAAA,CACKc,CAAAA,CAAkB,IAAA,CAAK,UAAUZ,CAAM,CAAA,CAC7C,OAAAU,CAAAA,CAAY,MAAA,CAAO,CAClB,IAAA,CAAM,YAAA,CACN,MAAA,CAAQ,aAAA,CACR,SAAUZ,CAAAA,CAAY,IAAA,CACtB,oBAAA,CAAsBY,CAAAA,CAAY,YAAYC,CAAc,CAAA,CAC5D,qBAAA,CAAuBD,CAAAA,CAAY,YAAYE,CAAe,CAAA,CAC9D,WAAY,IAAA,CAAK,GAAA,GAAQH,CAC1B,CAAC,CAAA,CAEM,CAAE,QAAS,KAAA,CAAO,EAAA,CAAAvB,CAAAA,CAAI,MAAA,CAAAc,CAAO,CACrC,CAAA,MAAS1F,CAAAA,CAAc,CACtB,OAAO,CACN,OAAA,CAAS,MACT,EAAA,CAAA4E,CAAAA,CACA,MAAO,CACN,IAAA,CAAM,KAAA,CACN,OAAA,CAAS5E,aAAe,KAAA,CAAQA,CAAAA,CAAI,OAAA,CAAU,MAAA,CAAOA,CAAG,CACzD,CACD,CACD,CACD,CACA,QACC,OAAO,CACN,OAAA,CAAS,KAAA,CACT,GAAA4E,CAAAA,CACA,KAAA,CAAO,CAAE,IAAA,CAAM,OAAQ,OAAA,CAAS,CAAA,kBAAA,EAAqBF,CAAM,CAAA,CAAG,CAC/D,CACF,CACD,CAMQ,6BAAA,EAA+C,CACtD,OAAA,CAAQ,SAAY,CACnB,MAAM,IAAI,QAASR,CAAAA,EAAM,UAAA,CAAWA,CAAAA,CAAG,GAAG,CAAC,CAAA,CAC3C,MAAM,OAAA,CAAQ,IAAA,CAAK,CAClB,IAAA,CAAK,oBAAA,CAAqB,IAAI,CAAA,CAC9B,IAAI,OAAA,CAAeA,CAAAA,EAAM,WAAWA,CAAAA,CAAG,IAAM,CAAC,CAC/C,CAAC,CAAA,CAAE,KAAA,CAAM,IAAM,CAAC,CAAC,EAClB,CAAA,GACD,CAOA,MAAa,oBAAA,CAAqBqC,CAAAA,CAAS,MAAsB,CAChE,GAAK,KAAK,QAAA,CACV,CAAA,GAAI,KAAK,gBAAA,CAAkB,OAAO,IAAA,CAAK,gBAAA,CAKvC,GAAI,CAACA,CAAAA,EAAU,IAAA,CAAK,aAAA,CAAc,KAAO,CAAA,CAAG,CAC3C,IAAMjC,CAAAA,CAAM,KAAK,GAAA,EAAI,CAIrB,GAHiB,KAAA,CAAM,IAAA,CAAK,KAAK,aAAA,CAAc,MAAA,EAAQ,CAAA,CAAE,MACxD,CAAC,CAAE,QAAA,CAAAkC,CAAS,IAAMlC,CAAAA,CAAMkC,CAAAA,CAAWhD,CAAAA,CAAuB,GAC3D,EACc,MACf,CAEA,YAAK,gBAAA,CAAA,CAAoB,SAAY,CACpC,GAAI,CACH,IAAMiD,CAAAA,CAAY,MAAM,IAAA,CAAK,IAAA,CAAK,aAAA,CAAc,MAAA,EAAQ,CAAA,CAAE,MAAA,CACzD,CAACC,CAAAA,CAAK,CAAE,QAAA,CAAAZ,CAAS,IAAMY,CAAAA,CAAMZ,CAAAA,CAAS,MAAM,MAAA,CAC5C,CACD,CAAA,CAGA,GAAI,KAAK,aAAA,CAAc,IAAA,GAAS,CAAA,CAC/B,IAAA,IAAS,EAAI,CAAA,CAAG,CAAA,CAAI,CAAA,CAAG,CAAA,EAAA,CAAK,CAI3B,GAAA,CADE,IAAA,CAAK,SAAiB,IAAA,EAAM,cAAA,GAAiB,MAAA,EAAU,CAAA,EACvC,CAAA,CAAG,CACpBvG,EAAI,IAAA,CACH,iEACD,CAAA,CACA,KACD,CACAA,CAAAA,CAAI,IAAA,CACH,CAAA,mDAAA,EAAsD,CAAA,CAAI,CAAC,CAAA,OAAA,CAC5D,CAAA,CACA,MAAM,IAAI,OAAA,CAAS2E,GAAM,UAAA,CAAWA,CAAAA,CAAG,GAAI,CAAC,EAC7C,CAID,IAAIyC,CAAAA,CAAwB,GACtBC,CAAAA,CAAoB,IAAA,CAAK,aAAA,CAAc,IAAA,GAAS,EAAI,CAAA,CAAI,CAAA,CAE9D,QACKC,CAAAA,CAAc,CAAA,CAClBA,EAAcD,CAAAA,CACdC,CAAAA,EAAAA,CACC,CAED,IAAA,IACKC,EAAU,CAAA,CACdA,CAAAA,CAAUrD,CAAAA,CACVqD,CAAAA,EAAAA,CACC,CACDH,CAAAA,CACE,MAAM,IAAA,CAAK,QAAA,EAAU,2BAA0B,EAAM,GACvD,IAAMI,CAAAA,CAAS,KAAK,QAAA,EAAU,SAAA,EAAU,CAExC,GADkBJ,EAAY,MAAA,CAAQ/B,CAAAA,EAAOA,CAAAA,GAAOmC,CAAM,EAC5C,MAAA,CAAS,CAAA,CAAG,MACtBD,CAAAA,CAAUrD,EAA6B,CAAA,GAC1ClE,CAAAA,CAAI,KACH,CAAA,oCAAA,EAAuCuH,CAAAA,CAAU,CAAC,CAAA,CAAA,EAAIrD,CAA0B,CAAA,GAAA,CACjF,CAAA,CACA,MAAM,IAAI,OAAA,CAASS,GAAM,UAAA,CAAWA,CAAAA,CAAG,GAAI,CAAC,CAAA,EAE9C,CAGA,IAAM8C,EAEJ,IAAA,CAAK,QAAA,CAAiB,MACpB,cAAA,EAAe,CAChB,IAAKC,CAAAA,EACLA,CAAAA,CAAE,UAAA,CAAW,QAAA,EACd,CAAA,EAAK,EAAC,CAEJD,CAAAA,CAAY,OAAS,CAAA,GACxBL,CAAAA,CAAc,KAAA,CAAM,IAAA,CAAK,IAAI,GAAA,CAAI,CAAC,GAAGA,CAAAA,CAAa,GAAGK,CAAW,CAAC,CAAC,CAAA,CAAA,CAGnE,IAAME,EAAY,IAAA,CAAK,QAAA,EAAU,SAAA,EAAU,CAE3C,GADqBP,CAAAA,CAAY,MAAA,CAAQ/B,CAAAA,EAAOA,CAAAA,GAAOsC,CAAS,CAAA,CAC/C,MAAA,CAAS,EAAG,MAEzBL,CAAAA,CAAcD,EAAoB,CAAA,GACrCrH,CAAAA,CAAI,IAAA,CACH,CAAA,sEAAA,EAAyEsH,EAAc,CAAC,CAAA,CAAA,EAAID,CAAiB,CAAA,IAAA,CAC9G,EACA,MAAM,IAAI,OAAA,CAAS1C,CAAAA,EAAM,WAAWA,CAAAA,CAAG,GAAI,CAAC,CAAA,EAE9C,CAEA,GAAIyC,CAAAA,CAAY,MAAA,GAAW,CAAA,CAAG,CAC7BpH,EAAI,IAAA,CACH,+DACD,CAAA,CACA,MACD,CAEKgH,CAAAA,EACJhH,CAAAA,CAAI,IAAA,CACH,CAAA,yBAAA,EAA4BoH,EAAY,MAAM,CAAA,6BAAA,CAC/C,EAMD,IAAMQ,CAAAA,CAAiB,IAAI,GAAA,CAAA,CAExB,IAAA,CAAK,QAAA,CAAiB,IAAA,EAAM,kBAAiB,EAAK,EAAC,EAAG,GAAA,CACtDF,GACAA,CAAAA,CAAE,UAAA,CAAW,QAAA,EACf,CACD,CAAA,CACAN,CAAAA,CAAc,CAAC,GAAGA,CAAW,EAAE,IAAA,CAAK,CAACS,CAAAA,CAAGC,CAAAA,GAAM,CAC7C,IAAMC,CAAAA,CAAaH,CAAAA,CAAe,GAAA,CAAIC,CAAC,CAAA,CAAI,CAAA,CAAI,CAAA,CAE/C,OAAA,CADmBD,EAAe,GAAA,CAAIE,CAAC,EAAI,CAAA,CAAI,CAAA,EAC3BC,CACrB,CAAC,CAAA,CAED,IAAIC,CAAAA,CAAe,EACfC,CAAAA,CAAa,CAAA,CACbC,GAAAA,CAAe,CAAA,CAAA,CAGbV,EAAS,IAAA,CAAK,QAAA,EAAU,SAAA,EAAU,CAClCW,EAAgBf,CAAAA,CAAY,MAAA,CAAQvC,GAAW,CAGpD,GAFI,CAAC,IAAA,CAAK,QAAA,EACNA,CAAAA,GAAW2C,CAAAA,EACX,KAAK,uBAAA,CAAwB3C,CAAM,EAAG,OAAO,CAAA,CAAA,CACjD,IAAMuD,CAAAA,CAAS,IAAA,CAAK,aAAA,CAAc,GAAA,CAAIvD,CAAM,CAAA,CAC5C,OACCuD,GACA,IAAA,CAAK,GAAA,GAAQA,CAAAA,CAAO,QAAA,CAAWnE,CAAAA,CAAuB,GAAA,EAEtD+D,IACO,CAAA,CAAA,EAED,CAAA,CACR,CAAC,CAAA,CAGKK,EAAe,MAAM,OAAA,CAAQ,UAAA,CAClCF,CAAAA,CAAc,IAAI,MAAOtD,CAAAA,EACnB,KAAK,QAAA,EACV7E,CAAAA,CAAI,KAAK,CAAA,sCAAA,EAAyC6E,CAAM,CAAA,CAAE,CAAA,CACnD,CACN,MAAA,CAAAA,CAAAA,CACA,QAAA,CAAU,MAAM,KAAK,QAAA,CAAS,aAAA,CAAcA,CAAM,CACnD,GAL2B,IAM3B,CACF,EAEA,IAAA,IAAWsB,CAAAA,IAAUkC,EACpB,GAAIlC,CAAAA,CAAO,MAAA,GAAW,WAAA,EAAeA,EAAO,KAAA,EAAO,QAAA,CAAU,CAC5D,GAAM,CAAE,MAAA,CAAAtB,CAAAA,CAAQ,QAAA,CAAA0B,CAAS,EAAIJ,CAAAA,CAAO,KAAA,CACpC,KAAK,aAAA,CAAc,GAAA,CAAItB,EAAQ,CAC9B,QAAA,CAAA0B,CAAAA,CACA,QAAA,CAAU,KAAK,GAAA,EAChB,CAAC,CAAA,CACD,KAAK,0BAAA,CAA2B1B,CAAM,CAAA,CACtCqD,GAAAA,CAAe,GACfF,CAAAA,EAAAA,CACAhI,CAAAA,CAAI,KACH,CAAA,qCAAA,EAAwC6E,CAAM,KAAK0B,CAAAA,CAAS,KAAA,CAAM,MAAM,CAAA,OAAA,CACzE,EACD,CAAA,KAAWJ,CAAAA,CAAO,MAAA,GAAW,WAAA,EAAeA,EAAO,KAAA,EAClD,IAAA,CAAK,0BAAA,CAA2BA,CAAAA,CAAO,MAAM,MAAM,CAAA,CACnD8B,IACAjI,CAAAA,CAAI,IAAA,CACH,kDAAkDmG,CAAAA,CAAO,KAAA,CAAM,MAAM,CAAA,CACtE,GACUA,CAAAA,CAAO,MAAA,GAAW,UAAA,GAC5B8B,CAAAA,EAAAA,CACAjI,EAAI,IAAA,CACH,8CAAA,CACAmG,CAAAA,CAAO,MAAA,YAAkB,MACtBA,CAAAA,CAAO,MAAA,CAAO,QACd,MAAA,CAAOA,CAAAA,CAAO,MAAM,CACxB,CAAA,CAAA,CAMD,IAAA,CAAa,eAAA,CAAkB,CAC/B,UAAA,CAAYiB,CAAAA,CAAY,MAAA,CACxB,OAAA,CAASY,EACT,QAAA,CAAUC,CAAAA,CACV,aAAA,CAAe,IAAA,CAAK,KACrB,CAAA,CAEIC,KACc,KAAA,CAAM,IAAA,CAAK,KAAK,aAAA,CAAc,MAAA,EAAQ,CAAA,CAAE,OACxD,CAACf,CAAAA,CAAK,CAAE,QAAA,CAAAZ,CAAS,IAAMY,CAAAA,CAAMZ,CAAAA,CAAS,KAAA,CAAM,MAAA,CAC5C,CACD,CAAA,GAEiBW,CAAAA,EAAa,KAAK,cAAA,GAClC,OAAA,CAAQ,OAAO,KAAA,CACd,CAAA;AAAA,CACD,CAAA,CACA,IAAA,CAAK,cAAA,EAAe,EAGvB,QAAE,CACD,IAAA,CAAK,gBAAA,CAAmB,KACzB,CACD,CAAA,GAAG,CAEI,IAAA,CAAK,gBAAA,CACb,CAMO,YAAA,EAAuB,CAC7B,OAAO,IAAA,CAAK,cAAc,IAC3B,CAKA,MAAc,cAAA,EAMZ,CACD,IAAMoB,CAAAA,CAAqB,MAAA,CAAO,QAAA,CACjC,QAAQ,GAAA,CAAI,uBAAA,EAA2B,GAAA,CACvC,EACD,EAMA,GAAI,IAAA,CAAK,aAAA,CAAc,IAAA,CAAOA,CAAAA,EAAsB,IAAA,CAAK,QAAA,CAAU,CAClE,IAAMC,CAAAA,CAAmB,MAAA,CAAO,QAAA,CAC/B,OAAA,CAAQ,IAAI,iCAAA,EAAqC,OAAA,CACjD,EACD,CAAA,CACMC,EACL,MAAA,CAAO,QAAA,CAASD,CAAgB,CAAA,EAAKA,EAAmB,CAAA,CACrDA,CAAAA,CACA,IAAA,CAEEE,CAAAA,CAAW,KAAK,GAAA,EAAI,CAAID,CAAAA,CAC1BE,GAAAA,CAAc,EACdC,CAAAA,CAAgB,EAAA,CAEpB,KAAO,IAAA,CAAK,KAAI,CAAIF,CAAAA,EACf,EAAA,IAAA,CAAK,aAAA,CAAc,IAAA,EAAQH,CAAAA,GAE/B,MAAM,OAAA,CAAQ,KAAK,CAClB,IAAA,CAAK,oBAAA,CAAqB,IAAI,EAC9B,IAAI,OAAA,CAAeM,CAAAA,EAAY,UAAA,CAAWA,EAAS,GAAI,CAAC,CACzD,CAAC,EAAE,KAAA,CAAM,IAAM,CAAC,CAAC,EAEb,IAAA,CAAK,aAAA,CAAc,IAAA,EAAQN,CAAAA,CAAAA,CAAAA,EARF,CAW7B,GAAI,IAAA,CAAK,aAAA,CAAc,IAAA,GAASK,GAE/B,GADAD,GAAAA,EAAAA,CACIA,GAAAA,EAAe,CAAA,EAAK,IAAA,CAAK,aAAA,CAAc,IAAA,CAAO,CAAA,CAAG,CACpD1I,CAAAA,CAAI,IAAA,CACH,CAAA,2CAAA,EAA8C,IAAA,CAAK,cAAc,IAAI,CAAA,CAAA,EAAIsI,CAAkB,CAAA,iCAAA,CAC5F,EACA,KACD,CAAA,CAAA,KAEAI,GAAAA,CAAc,CAAA,CACdC,EAAgB,IAAA,CAAK,aAAA,CAAc,IAAA,CAIpC,MAAM,IAAI,OAAA,CAAShE,CAAAA,EAAM,UAAA,CAAWA,CAAAA,CAAG,GAAI,CAAC,EAC7C,CAGI,IAAA,CAAK,cAAc,IAAA,CAAO2D,CAAAA,GAC7BtI,CAAAA,CAAI,IAAA,CACH,CAAA,qDAAA,EAA8C,IAAA,CAAK,aAAA,CAAc,IAAI,IAAIsI,CAAkB,CAAA,mEAAA,CAC5F,CAAA,CAEA,IAAA,CAAK,qBAAqB,IAAI,CAAA,CAAE,KAAA,CAAM,IAAM,CAAC,CAAC,CAAA,EAEhD,CAGA,IAAMO,EAAe,EAAC,CAChBC,CAAAA,CAAY,IAAI,IAChBC,CAAAA,CAAiB,IAAI,GAAA,CAC1B,IAAA,CAAK,WAAW,SAAA,EAAU,CAAE,GAAA,CAAK,CAAA,EAAM,EAAE,IAAI,CAC9C,CAAA,CAEA,IAAA,GAAW,CAAClE,CAAAA,CAAQ,CAAE,QAAA,CAAA0B,CAAS,CAAC,CAAA,GAAK,IAAA,CAAK,aAAA,CAAc,SAAQ,CAC/D,IAAA,IAAWyC,CAAAA,IAAQzC,CAAAA,CAAS,MAAO,CAElC,GAAIyC,CAAAA,CAAK,IAAA,GAAS,iBAAkB,SAOpC,IAAIC,CAAAA,CAAYD,CAAAA,CAAK,MACjBF,CAAAA,CAAU,GAAA,CAAIE,CAAAA,CAAK,IAAI,GAAKD,CAAAA,CAAe,GAAA,CAAIC,CAAAA,CAAK,IAAI,KAC3DC,CAAAA,CAAY,CAAA,EAAGD,CAAAA,CAAK,IAAI,CAAA,CAAA,EAAInE,CAAAA,CAAO,KAAA,CAAM,EAAE,CAAC,CAAA,CAAA,CAAA,CAE7CiE,CAAAA,CAAU,GAAA,CAAIG,CAAS,EAEvB,IAAMC,CAAAA,CAAe3C,CAAAA,CAAS,UAAA,EAAY,MAAQ,kBAAA,CAG5C4C,CAAAA,CAAWH,CAAAA,CAAK,WAAA,EAAe,oBAAoBE,CAAY,CAAA,CAAA,CAC/DE,CAAAA,CAIF,CACH,KAAMH,CAAAA,CACN,WAAA,CAAaxF,CAAAA,EAA2B,CACrCE,EAAgCwF,CAAQ,CAAA,CACxCA,CAAAA,CACH,WAAA,CAAcH,EAAK,WAAA,EAAe,CACjC,IAAA,CAAM,QAAA,CACN,UAAA,CAAY,EACb,CACD,EAIC,OAAOI,CAAAA,CAAU,WAAA,EAAgB,QAAA,EACjC,CAACA,CAAAA,CAAU,WAAA,CAAY,IAAA,GAEvBA,CAAAA,CAAU,YAAY,IAAA,CAAO,QAAA,CAAA,CAG7B,OAAOA,CAAAA,CAAU,aAAgB,QAAA,EACjC,CAACA,CAAAA,CAAU,WAAA,CAAY,aAEvBA,CAAAA,CAAU,WAAA,CAAY,UAAA,CAAa,IAGpC,IAAIC,CAAAA,CAAY,EAAA,CACZ9C,CAAAA,CAAS,WACZ8C,CAAAA,CAAY;AAAA,cAAA,EAAmB9C,EAAS,QAAA,CAAS,MAAM,KAKxD,IAAM+C,CAAAA,CAAcF,EAAU,WAAA,CAAY,UAAA,EAAc,EAAC,CACrDG,EAAc,EAAA,CACd,CAAC9F,GAA2B,EAAK6F,CAAAA,CAAW,UAC/CC,CAAAA,CAAc;AAAA,kCAAA,CAAA,CAAA,CAKd,CAAC9F,CAAAA,EAA2B,EAC5B2F,EAAU,WAAA,CAAY,QAAA,CAAS,yBAAyB,CAAA,GAExDA,CAAAA,CAAU,YAAcA,CAAAA,CAAU,WAAA,CAAY,QAC7C,0BAAA,CACA,6DACD,GAGD,IAAMI,CAAAA,CAAc/F,GAA2B,CAC5C;AAAA,OAAA,EAAYoB,EAAO,KAAA,CAAM,EAAE,CAAC,CAAA,CAAA,EAAIwE,CAAS,CAAA,CAAA,CACzC;AAAA,SAAA,EAAcxE,CAAAA,CAAO,MAAM,EAAE,CAAC,IAAIwE,CAAS,CAAA,EAAGE,CAAW,CAAA,CAAA,CAC5DH,CAAAA,CAAU,YAAc,CAAA,EAAGA,CAAAA,CAAU,WAAW,CAAA,EAAGI,CAAW,GAE9DX,CAAAA,CAAM,IAAA,CAAKO,CAAS,EACrB,CAGD,OAAOP,CACR,CAKA,MAAc,kBAAA,EAOZ,CAEI,KAAK,gBAAA,EACT,IAAA,CAAK,qBAAqB,IAAI,CAAA,CAAE,MAAM,IAAM,CAAC,CAAC,CAAA,CAG/C,IAAMnE,EAKD,EAAC,CACA+E,CAAAA,CAAW,IAAI,GAAA,CAAI,IAAA,CAAK,WAAW,aAAA,EAAc,CAAE,IAAK9E,CAAAA,EAAMA,CAAAA,CAAE,GAAG,CAAC,CAAA,CAE1E,OAAW,CAACE,CAAAA,CAAQ,CAAE,QAAA,CAAA0B,CAAS,CAAC,CAAA,GAAK,IAAA,CAAK,cAAc,OAAA,EAAQ,CAC/D,IAAA,IAAWmD,CAAAA,IAAYnD,CAAAA,CAAS,SAAA,CAC/B,GAAI,CAACkD,CAAAA,CAAS,IAAIC,CAAAA,CAAS,GAAG,EAAG,CAChC,IAAMC,EAAoB,CAAE,GAAGD,CAAS,CAAA,CAClCR,CAAAA,CAAe3C,EAAS,UAAA,EAAY,IAAA,EAAQ,mBAE9C8C,CAAAA,CAAY,EAAA,CACZ9C,CAAAA,CAAS,QAAA,GACZ8C,CAAAA,CAAY;;AAAA;AAAA,QAAA,EAA4C9C,CAAAA,CAAS,SAAS,MAAM;AAAA,gBAAA,EAAqBA,CAAAA,CAAS,QAAA,CAAS,aAAa,CAAA,CAAA,CAEnIA,CAAAA,CAAS,QAAA,CAAS,cAAA,EAClBA,CAAAA,CAAS,QAAA,CAAS,cAAA,CAAe,MAAA,CAAS,CAAA,GAE1C8C,CAAAA,EAAa;AAAA,iBAAA,EAAsB9C,CAAAA,CAAS,SAAS,cAAA,CAAe,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,CAAA,CAAA,CAIhF,IAAMiD,CAAAA,CAAc;;AAAA;AAAA,UAAA,EAA2CN,CAAY;AAAA,YAAA,EAAiBrE,CAAM,CAAA,EAAGwE,CAAS,CAAA,CAAA,CAG1GM,CAAAA,CAAkB,GAAA,CAAI,UAAA,CAAW,gBAAgB,CAAA,EACpDA,CAAAA,CAAkB,IAAA,CAAO,CAAA,SAAA,EAAYA,EAAkB,IAAI,CAAA,CAAA,CAC3DA,CAAAA,CAAkB,WAAA,CAAc,CAAA,kBAAA,EAAqBA,CAAAA,CAAkB,WAAA,EAAe,wCAAwC,GAAGH,CAAW,CAAA,CAAA,EAE5IG,CAAAA,CAAkB,WAAA,CAAcA,CAAAA,CAAkB,WAAA,CAC/C,CAAA,EAAGA,CAAAA,CAAkB,WAAW,CAAA,EAAGH,CAAW,CAAA,CAAA,CAC9CA,CAAAA,CAAY,IAAA,EAAK,CAGrB9E,CAAAA,CAAU,IAAA,CAAKiF,CAAiB,CAAA,CAChCF,CAAAA,CAAS,GAAA,CAAIC,CAAAA,CAAS,GAAG,EAC1B,CAIF,OAAOhF,CACR,CAMQ,qBAAA,CACP5D,CAAAA,CACsD,CAEtD,IAAA,GAAW,CAAC+D,CAAAA,CAAQ,CAAE,SAAA0B,CAAS,CAAC,CAAA,GAAK,IAAA,CAAK,aAAA,CAAc,OAAA,EAAQ,CAE/D,GADaA,EAAS,KAAA,CAAM,IAAA,CAAM9B,CAAAA,EAAMA,CAAAA,CAAE,IAAA,GAAS3D,CAAQ,CAAA,CAE1D,OAAO,CACN,MAAA,CAAA+D,CAAAA,CACA,gBAAA,CAAkB/D,CACnB,CAAA,CAKF,IAAM8I,CAAAA,CAAQ9I,EAAS,KAAA,CAAM,GAAG,CAAA,CAChC,GAAI8I,CAAAA,CAAM,MAAA,CAAS,CAAA,CAAG,CACrB,IAAMC,CAAAA,CAASD,CAAAA,CAAM,GAAA,EAAI,CACnBE,CAAAA,CAAWF,CAAAA,CAAM,IAAA,CAAK,GAAG,EAC/B,IAAA,GAAW,CAAC/E,CAAAA,CAAQ,CAAE,QAAA,CAAA0B,CAAS,CAAC,CAAA,GAAK,KAAK,aAAA,CAAc,OAAA,EAAQ,CAC/D,GAAI1B,CAAAA,CAAO,QAAA,CAASgF,CAAAA,EAAU,EAAE,GAClBtD,CAAAA,CAAS,KAAA,CAAM,IAAA,CAAM9B,CAAAA,EAAMA,CAAAA,CAAE,IAAA,GAASqF,CAAQ,CAAA,CAE1D,OAAO,CACN,MAAA,CAAAjF,CAAAA,CACA,gBAAA,CAAkBiF,CACnB,CAIJ,CAEA,OAAO,IACR,CAQQ,YAAA,CAAajF,CAAAA,CAAwB,CAE5C,OAAA,CADc,OAAA,CAAQ,GAAA,CAAI,qBAAA,EAAyB,UAAA,IACrC,MAAA,CAAeA,CAAAA,CACtB,CAAA,GAAA,EAAMA,CAAAA,CAAO,KAAA,CAAM,EAAE,CAAC,EAC9B,CAGA,MAAc,kBAAA,CAAmBQ,CAAAA,CAASD,CAAAA,CAA2B,CACpE,IAAMtE,CAAAA,CAAWsE,EAAO,IAAA,CAGxB,GAAItE,CAAAA,GAAa,gBAAA,CAAkB,CAIlC,IAAA,CAAK,oBAAA,CAAqB,IAAI,EAAE,KAAA,CAAM,IAAM,CAAC,CAAC,CAAA,CAG9C,IAAMiJ,CAAAA,CAAS,IAAA,CAAa,iBAAmB,CAC9C,UAAA,CAAY,CAAA,CACZ,OAAA,CAAS,CAAA,CACT,QAAA,CAAU,CACX,CAAA,CACMC,EAAgB,IAAA,CAAK,aAAA,CAAc,IAAA,CACnCC,CAAAA,CAAY,IAAA,CAAK,QAAA,CAAW,QAAA,CAAW,SAAA,CACvCC,EAAc,KAAA,CAAM,IAAA,CAAK,IAAA,CAAK,aAAA,CAAc,MAAA,EAAQ,CAAA,CAAE,MAAA,CAC3D,CAAC/C,CAAAA,CAAK,CAAE,QAAA,CAAAZ,CAAS,CAAA,GAAMY,CAAAA,CAAMZ,CAAAA,CAAS,KAAA,CAAM,OAC5C,CACD,CAAA,CACM4D,CAAAA,CAAc,IAAA,CAAK,QAAA,CAEtB,IAAA,CAAK,QAAA,CAAiB,IAAA,EAAM,gBAAe,CAAE,MAAA,CAC7C,CAAA,CAEGC,CAAAA,CACL,IAAA,CAAK,QAAA,EAEJ,IAAA,CAAK,QAAA,CAAiB,QAAQ,cAAA,CAE5B,IAAA,CAAK,QAAA,CAAiB,MAAA,CAAO,cAAA,CAC7B,EAAC,CACCC,CAAAA,CAAiBD,EAAe,MAAA,CAGhCE,CAAAA,CAAAA,CADY,OAAA,CAAQ,GAAA,CAAI,qBAAA,EAAyB,UAAA,IAClB,SAAA,CAE/BC,CAAAA,CAAgBD,EACnBF,CAAAA,CACC,GAAA,CAAKI,CAAAA,EAAS,CACd,IAAMZ,CAAAA,CAAQY,CAAAA,CAAK,KAAA,CAAM,GAAG,CAAA,CACtBnF,CAAAA,CAAKuE,CAAAA,CAAMA,CAAAA,CAAM,MAAA,CAAS,CAAC,CAAA,CACjC,OAAO,YAAOvE,CAAAA,CAAKA,CAAAA,CAAG,KAAA,CAAM,EAAE,CAAA,CAAI,SAAS,CAAA,YAAA,CAC5C,CAAC,EACA,IAAA,CAAK;AAAA,CAAI,CAAA,CACV,EAAA,CAEGoF,CAAAA,CAAmB,IAAA,CAAK,QAAA,CAE3B,IAAA,CAAK,QAAA,CAAiB,mBAAA,EAAoB,CAC1C,CAAA,CAEGC,CAAAA,CAAY,IAAA,CAAK,QAAA,EAAU,WAAU,EAAK,SAAA,CAC1CC,CAAAA,CACLD,CAAAA,GAAc,SAAA,CAAYA,CAAAA,CAAY,IAAA,CAAK,YAAA,CAAaA,CAAS,CAAA,CAE5DE,CAAAA,CAAiB,KAAA,CAAM,IAAA,CAAK,IAAA,CAAK,cAAc,OAAA,EAAS,CAAA,CAC5D,OAAA,CAAQ,CAAC,CAAC/F,CAAAA,CAAQ,CAAE,QAAA,CAAA0B,CAAS,CAAC,CAAA,GAC9BA,CAAAA,CAAS,KAAA,CAAM,IACb9B,CAAAA,EAAM,CAAA,SAAA,EAAOA,CAAAA,CAAE,IAAI,CAAA,eAAA,EAAkB,IAAA,CAAK,YAAA,CAAaI,CAAM,CAAC,CAAA,CAAA,CAChE,CACD,CAAA,CACC,IAAA,CAAK;AAAA,CAAI,CAAA,CAELgG,EAAa,CAClB,CAAA,kBAAA,EAAqBZ,IAAc,QAAA,CAAW,QAAA,CAAW,SAAS,CAAA,CAAA,CAClE,CAAA,sBAAA,EAAyBU,CAAW,CAAA,CAAA,CACpC,CAAA,SAAA,EAAYR,CAAW,CAAA,SAAA,EAAYM,CAAgB,iBAAiBJ,CAAc,CAAA,WAAA,CAAA,CAClFC,CAAAA,EAAkBD,CAAAA,CAAiB,CAAA,CAChC;AAAA;AAAA,EAAyBE,CAAa;AAAA,CAAA,CACtC,GACH,CAAA,WAAA,EAAcR,CAAAA,CAAM,UAAU,CAAA,cAAA,EAAiBA,EAAM,OAAO,CAAA,MAAA,EAASA,CAAAA,CAAM,QAAQ,QACnF,CAAA,SAAA,EAAYC,CAAa,gBAAgBE,CAAW,CAAA,mBAAA,CAAA,CACpDA,EAAc,CAAA,CACX;AAAA;AAAA,EAAoDU,CAAc,CAAA,CAAA,CAClE;AAAA,+BAAA,CAAA,CAEH1J,CAAAA,CAAqB,WAAA,EAAY,CAAE,iBAAA,EACpC,CAAA,CACE,MAAA,CAAQ4J,CAAAA,EAASA,CAAAA,GAAS,EAAE,CAAA,CAC5B,IAAA,CAAK;AAAA,CAAI,CAAA,CAGLC,EAAgB7J,CAAAA,CAAqB,WAAA,GAC3C,OAAA6J,CAAAA,CAAc,MAAA,CAAO,CACpB,IAAA,CAAM,YAAA,CACN,OAAQ,YAAA,CACR,QAAA,CAAU,iBACV,oBAAA,CAAsB,CAAA,CACtB,sBAAuBA,CAAAA,CAAc,WAAA,CAAYF,CAAU,CAC5D,CAAC,CAAA,CAEM,CACN,OAAA,CAAS,KAAA,CACT,GAAAxF,CAAAA,CACA,MAAA,CAAQ,CACP,OAAA,CAAS,CACR,CACC,IAAA,CAAM,MAAA,CACN,IAAA,CAAMwF,CACP,CACD,CACD,CACD,CACD,CAEA,IAAMG,EAAU,IAAA,CAAK,UAAA,CACnB,SAAA,EAAU,CACV,IAAA,CAAM,CAAA,EAAM,EAAE,IAAA,GAASlK,CAAQ,EAEjC,GAAI,CAACkK,GAAW,IAAA,CAAK,QAAA,CAAU,CAG9B,IAAIC,CAAAA,CAAS,IAAA,CAAK,sBAAsBnK,CAAQ,CAAA,CAQhD,GALKmK,CAAAA,GACJ,MAAM,IAAA,CAAK,sBAAqB,CAChCA,CAAAA,CAAS,IAAA,CAAK,qBAAA,CAAsBnK,CAAQ,CAAA,CAAA,CAGzCmK,EACH,OAAAjL,CAAAA,CAAI,KACH,CAAA,uBAAA,EAA0Bc,CAAQ,8BAA8BmK,CAAAA,CAAO,MAAM,CAAA,YAAA,EAAeA,CAAAA,CAAO,gBAAgB,CAAA,CAAA,CACpH,EACO,IAAA,CAAK,qBAAA,CACX5F,CAAAA,CACA4F,CAAAA,CAAO,gBAAA,CACPA,CAAAA,CAAO,OACP7F,CACD,CAAA,CAID,IAAI8F,CAAAA,CAAsB,EAAC,CAC3B,QAASlH,CAAAA,CAAI,CAAA,CAAGA,EAAI,CAAA,GACnBkH,CAAAA,CAAY,MAAM,IAAA,CAAK,QAAA,CAAS,aAAA,CAAcpK,CAAQ,CAAA,CAClD,EAAAoK,EAAU,MAAA,CAAS,CAAA,CAAA,CAAA,CAFDlH,CAAAA,EAAAA,CAGlBA,CAAAA,CAAI,CAAA,EAAG,MAAM,IAAI,OAAA,CAASW,CAAAA,EAAM,UAAA,CAAWA,CAAAA,CAAG,GAAI,CAAC,EAGxD,GAAIuG,CAAAA,CAAU,OAAS,CAAA,CACtB,OAAO,KAAK,qBAAA,CAAsB7F,CAAAA,CAAIvE,CAAAA,CAAUoK,CAAAA,CAAU,CAAC,CAAA,CAAG9F,CAAM,CAEtE,CAGA,GAAI4F,CAAAA,CACH,GAAI,CACH,IAAMG,CAAAA,CAAiB,IAAA,CAAK,GAAA,EAAI,CAC1BhF,CAAAA,CAAS,MAAM,KAAK,UAAA,CAAW,QAAA,CAAS,CAC7C,IAAA,CAAMrF,CAAAA,CACN,UAAWsE,CAAAA,CAAO,SAAA,EAAa,EAChC,CAAC,CAAA,CAGKgG,EAAiBlK,CAAAA,CAAqB,WAAA,EAAY,CAClDmK,CAAAA,CAAoB,IAAA,CAAK,SAAA,CAAUjG,EAAO,SAAA,EAAa,EAAE,CAAA,CACzDkG,CAAAA,CAAqB,IAAA,CAAK,UAAUnF,CAAM,CAAA,CAChD,OAAAiF,CAAAA,CAAe,MAAA,CAAO,CACrB,IAAA,CAAM,WAAA,CACN,MAAA,CAAQ,YAAA,CACR,QAAA,CAAAtK,CAAAA,CACA,qBAAsBsK,CAAAA,CAAe,WAAA,CAAYC,CAAiB,CAAA,CAClE,qBAAA,CAAuBD,CAAAA,CAAe,YAAYE,CAAkB,CAAA,CACpE,UAAA,CAAY,IAAA,CAAK,GAAA,EAAI,CAAIH,CAC1B,CAAC,CAAA,CAEM,CAAE,OAAA,CAAS,KAAA,CAAO,GAAA9F,CAAAA,CAAI,MAAA,CAAAc,CAAO,CACrC,CAAA,MAAS1F,CAAAA,CAAc,CACtB,OAAO,CACN,QAAS,KAAA,CACT,EAAA,CAAA4E,EACA,KAAA,CAAO,CACN,IAAA,CAAM,KAAA,CACN,OAAA,CAAS5E,CAAAA,YAAe,MAAQA,CAAAA,CAAI,OAAA,CAAU,OAAOA,CAAG,CACzD,CACD,CACD,CAGD,OAAO,CACN,OAAA,CAAS,KAAA,CACT,GAAA4E,CAAAA,CACA,KAAA,CAAO,CACN,IAAA,CAAM,MAAA,CACN,OAAA,CAAS,+BAA+BvE,CAAQ,CAAA,+DAAA,CACjD,CACD,CACD,CAEA,MAAc,sBAEbuE,CAAAA,CACAvE,CAAAA,CACA+D,EAEAO,CAAAA,CAEe,CACf,GAAI,CAAC,IAAA,CAAK,QAAA,CACT,OAAO,CACN,OAAA,CAAS,MACT,EAAA,CAAAC,CAAAA,CACA,KAAA,CAAO,CAAE,IAAA,CAAM,MAAA,CAAQ,QAAS,oBAAqB,CACtD,CAAA,CAGD,IAAIkG,CAAAA,CAAgB,IAAA,CAAK,cAAc,GAAA,CAAI1G,CAAM,EAC7C2G,CAAAA,CAAW,IAAA,CAAK,eAEpB,GAAID,CAAAA,CACHC,CAAAA,CAAWD,CAAAA,CAAc,QAAA,CAAS,QAAA,CAAA,KAC5B,CAEN,IAAMhF,CAAAA,CAAW,MAAM,IAAA,CAAK,QAAA,CAAS,aAAA,CAAc1B,CAAM,CAAA,CACrD0B,CAAAA,GACHiF,CAAAA,CAAWjF,CAAAA,CAAS,QAAA,CACpB,IAAA,CAAK,cAAc,GAAA,CAAI1B,CAAAA,CAAQ,CAC9B,QAAA,CAAA0B,CAAAA,CACA,SAAU,IAAA,CAAK,GAAA,EAChB,CAAC,CAAA,CACDgF,CAAAA,CAAgB,KAAK,aAAA,CAAc,GAAA,CAAI1G,CAAM,CAAA,EAE/C,CAKA,GAAI0G,GAAiB,OAAA,CAAQ,GAAA,CAAI,6BAAA,GAAkC,GAAA,CAAK,CACvE,IAAMrC,EACLqC,CAAAA,CAAc,QAAA,CAAS,YAAY,IAAA,EAAM,WAAA,IAAiB,EAAA,CACvDrC,CAAAA,CAAa,QAAA,CAAS,OAAO,CAAA,CAAGsC,CAAAA,CAAW,MACtCtC,CAAAA,CAAa,QAAA,CAAS,MAAM,CAAA,CAAGsC,CAAAA,CAAW,KAAA,CAC1CtC,EAAa,QAAA,CAAS,QAAQ,CAAA,GAAGsC,CAAAA,CAAW,KAAA,EACtD,CAGA,IAAMC,GAAAA,CAAQ,MAAM,KAAK,QAAA,CAAS,WAAA,CAAY5G,CAAM,CAAA,CAChD6G,GAAAA,CAA4B,IAAA,CAI1BC,CAAAA,CAAK,MAAM,OAAO,IAAS,CAAA,CAC3BC,CAAAA,CAAkB,MAAA,CAAO,MAAA,CAAOD,CAAAA,CAAG,iBAAA,EAAmB,CAAA,CAC1D,IAAA,EAAK,CACL,MAAA,CAAQ,CAAA,EAAM,CAAA,EAAG,SAAW,MAAM,CAAA,CAClC,IAAK,CAAA,EAAM,CAAA,EAAG,OAAO,CAAA,CAGvB,IAAA,IAAWnB,CAAAA,IAAQiB,GAAAA,CAAO,CACzB,IAAM7B,EAAQY,CAAAA,CAAK,KAAA,CAAM,GAAG,CAAA,CACtBqB,CAAAA,CAAQjC,CAAAA,CAAM,QAAQ,KAAK,CAAA,CACjC,GAAIiC,CAAAA,GAAU,EAAA,CAAI,CACjB,IAAMC,CAAAA,CAAelC,CAAAA,CAAMiC,EAAQ,CAAC,CAAA,CAGpC,GACCC,CAAAA,GAAiB,WAAA,EACjBF,CAAAA,CAAgB,QAAA,CAASE,CAAY,CAAA,CACpC,CACDJ,GAAAA,CAAa,CAAA,UAAA,EAAaF,CAAQ,CAAA,CAAA,CAClC,KACD,CAGKE,GAAAA,GACJA,GAAAA,CAAa,CAAA,EAAGI,CAAY,CAAA,CAAA,EAAIN,CAAQ,IAE1C,CACD,CAEKE,MAEJA,GAAAA,CAAa,CAAA,UAAA,EAAaF,CAAQ,CAAA,CAAA,CAAA,CAGnCxL,CAAAA,CAAI,IAAA,CACH,CAAA,6BAAA,EAAgCc,CAAQ,CAAA,IAAA,EAAO4K,GAAU,CAAA,UAAA,EAAa7G,CAAM,CAAA,CAAA,CAC7E,CAAA,CAEA,IAAMkH,CAAAA,CAAe,IAAIC,GAAAA,CAAO,SAAA,CAC/BN,GAAAA,CACAO,CAAAA,EACD,CAAA,CACA,OAAO,IAAA,CAAK,kBAAA,CAAmB5G,EAAI0G,CAAAA,CAAcjL,CAAAA,CAAUsE,EAAQP,CAAM,CAC1E,CAEA,MAAc,kBAAA,CAEbQ,CAAAA,CAEA6G,EACApL,CAAAA,CAEAsE,CAAAA,CACAP,CAAAA,CAEe,CACf,IAAMsH,CAAAA,CAAiBrL,EACjBsL,CAAAA,CAAgB,IAAA,CAAK,QAAA,CACxB,MAAM,IAAA,CAAK,QAAA,CAAS,KAAK,MAAA,CAAO,IAAA,CAAKD,CAAc,CAAC,CAAA,CACpD,OAAO,IAAA,CAAK,EAAE,CAAA,CAEXE,CAAAA,CAAuB,IAAA,CAAK,KAAI,CAEtC,OAAO,IAAI,OAAA,CAASzD,CAAAA,EAAY,CAC/BsD,EAAO,eAAA,CACN,CACC,SAAA,CAAW,CAAA,SAAA,EAAY,IAAA,CAAK,QAAA,EAAU,WAAU,EAAK,WAAW,GAChE,eAAA,CAAiBC,CAAAA,CACjB,gBAAiBC,CAClB,CAAA,CACA,MAAO3L,CAAAA,CAAmB6L,CAAAA,GAA6B,CACtD,GAAI7L,CAAAA,EAAO,CAAC6L,CAAAA,CAAS,QAAA,CACpB,OAAO1D,CAAAA,CAAQ,CACd,OAAA,CAAS,KAAA,CACT,EAAA,CAAAvD,CAAAA,CACA,MAAA,CAAQ,CACP,QAAS,CACR,CACC,KAAM,MAAA,CACN,IAAA,CAAM,yBAAyB5E,CAAAA,EAAK,OAAA,EAAW,UAAU,CAAA,CAC1D,CACD,CAAA,CACA,QAAS,IACV,CACD,CAAC,CAAA,CAGF,GAAM,CAAE,WAAA8L,CAAAA,CAAY,YAAA,CAAAC,CAAa,CAAA,CAChC,MAAMC,GAAAA,CAAgB,sBACrBH,CAAAA,CAAS,gBACV,EAGKI,CAAAA,CAAmB,IAAA,CAAK,UAAUtH,CAAAA,CAAO,SAAA,EAAa,EAAE,CAAA,CACxDuH,CAAAA,CAAa,kCAAkC7L,CAAQ,CAAA,wBAAA,EAA2B4L,CAAgB,CAAA,GAAA,CAAA,CAClGE,CAAAA,CAAe,CAAA,CAAA,WAAA,CAAY,EAAE,CAAA,CAE7BC,CAAAA,CAAc,IAAA,CAAK,gBAAA,CACxB,MAAA,CAAO,IAAA,CAAKF,CAAU,CAAA,CACtBH,CAAAA,CACAI,CACD,CAAA,CAEME,CAAAA,CAAOZ,EAAO,YAAA,CAAa,CAChC,aAAA,CAAeI,CAAAA,CAAS,aAAA,CACxB,WAAA,CAAa,IAAI,UAAA,CAAWO,CAAW,CAAA,CACvC,MAAA,CAAQ,EAAC,CACT,eAAgBN,CAAAA,CAChB,SAAA,CAAWK,CACZ,CAAC,CAAA,CAEGG,CAAAA,CAAa,GACbC,CAAAA,CAAqC,IAAA,CACzCF,EAAK,EAAA,CAAG,MAAA,CAASG,GAA2B,CAC3CF,CAAAA,EAAcE,CAAAA,CAAQ,iBAAA,CACtBD,CAAAA,CAAeC,EAChB,CAAC,CAAA,CACDH,CAAAA,CAAK,GAAG,KAAA,CAAO,SAAY,CAC1B,GAAI,CACH,GAAIE,CAAAA,EAOC,CANY,MAAM,KAAK,QAAA,CAAS,eAAA,CACnC,OAAO,IAAA,CAAKL,CAAU,EACtB,MAAA,CAAO,IAAA,CAAKK,CAAAA,CAAa,mBAAmB,CAAA,CAAE,QAAA,CAAS,KAAK,CAAA,CAC5D,MAAA,CAAO,IAAA,CAAKA,CAAAA,CAAa,UAAU,CACpC,EAGC,OAAOpE,CAAAA,CAAQ,CACd,OAAA,CAAS,KAAA,CACT,EAAA,CAAAvD,EACA,MAAA,CAAQ,CACP,QAAS,CACR,CACC,KAAM,MAAA,CACN,IAAA,CAAM,uEACP,CACD,CAAA,CACA,OAAA,CAAS,EACV,CACD,CAAC,CAAA,CAIH,IAAM6H,CAAAA,CAAe,IAAA,CAAK,MAAMH,CAAU,CAAA,CAGpCI,CAAAA,CAAkBjM,CAAAA,CAAqB,WAAA,EAAY,CACzDiM,EAAgB,MAAA,CAAO,CACtB,KAAM,WAAA,CACN,MAAA,CAAQ,aACR,QAAA,CAAArM,CAAAA,CACA,MAAA,CAAA+D,CAAAA,CACA,oBAAA,CACCsI,CAAAA,CAAgB,YAAYT,CAAgB,CAAA,CAC7C,qBAAA,CAAuBS,CAAAA,CAAgB,WAAA,CAAYJ,CAAU,EAC7D,UAAA,CAAY,IAAA,CAAK,GAAA,EAAI,CAAIV,CAC1B,CAAC,EAEDzD,CAAAA,CAAQ,CAAE,QAAS,KAAA,CAAO,EAAA,CAAAvD,EAAI,MAAA,CAAQ6H,CAAa,CAAC,EACrD,CAAA,KAAa,CACZtE,EAAQ,CACP,OAAA,CAAS,KAAA,CACT,EAAA,CAAAvD,CAAAA,CACA,MAAA,CAAQ,CAAE,OAAA,CAAS,CAAC,CAAE,IAAA,CAAM,MAAA,CAAQ,IAAA,CAAM0H,CAAW,CAAC,CAAE,CACzD,CAAC,EACF,CACD,CAAC,CAAA,CACDD,CAAAA,CAAK,EAAA,CAAG,OAAA,CAAUM,CAAAA,EACjBxE,EAAQ,CACP,OAAA,CAAS,KAAA,CACT,EAAA,CAAAvD,CAAAA,CACA,MAAA,CAAQ,CACP,OAAA,CAAS,CACR,CAAE,IAAA,CAAM,MAAA,CAAQ,IAAA,CAAM,oBAAoB+H,CAAAA,CAAE,OAAO,EAAG,CACvD,CAAA,CACA,QAAS,IACV,CACD,CAAC,CACF,EACD,CACD,EACD,CAAC,CACF,CAEQ,gBAAA,CACPC,CAAAA,CACAzL,CAAAA,CACAgL,EACS,CACT,IAAMU,CAAAA,CAAgB,CAAA,CAAA,cAAA,CAAe,aAAA,CAAe1L,CAAAA,CAAKgL,CAAK,CAAA,CACxDW,CAAAA,CAAY,OAAO,MAAA,CAAO,CAACD,EAAO,MAAA,CAAOD,CAAO,CAAA,CAAGC,CAAAA,CAAO,KAAA,EAAO,CAAC,CAAA,CACxE,OAAO,MAAA,CAAO,MAAA,CAAO,CAACC,CAAAA,CAAWD,EAAO,UAAA,EAAY,CAAC,CACtD,CACD","file":"chunk-4ABAFG44.js","sourcesContent":["import { log } from \"../utils/logger.js\";\n\n/**\n * TokenEstimator — Pluggable strategy for counting tokens in text content.\n *\n * Implementations range from exact BPE tokenization to lightweight heuristics,\n * allowing the SDK to choose the best trade-off for the runtime environment.\n */\nexport interface TokenEstimator {\n\t/** Count the number of tokens in the given text */\n\tcountTokens(text: string): number;\n\t/** Human-readable name of the estimation strategy */\n\treadonly name: string;\n}\n\n/**\n * Exact BPE tokenizer using o200k_base encoding.\n *\n * o200k_base is the standard encoding for all modern OpenAI models\n * (GPT-4o, GPT-4.1, o1, o3, o4) and provides a reasonable baseline\n * for Anthropic/Google models as well (~±5% variance).\n *\n * - Synchronous: safe for hot-path usage without async overhead\n * - Merge cache reduced to 10K entries for long-running server processes\n * - Zero runtime dependencies beyond gpt-tokenizer itself\n */\nexport class RealTokenEstimator implements TokenEstimator {\n\treadonly name = \"o200k_base\";\n\n\tprivate countFn: (text: string) => number;\n\n\tconstructor(\n\t\tcountFn: (text: string) => number,\n\t\tsetMergeCacheSizeFn?: (size: number) => void,\n\t) {\n\t\tthis.countFn = countFn;\n\t\t// Reduce merge cache from default 100K to 10K for server processes\n\t\tif (setMergeCacheSizeFn) {\n\t\t\tsetMergeCacheSizeFn(10_000);\n\t\t}\n\t}\n\n\tcountTokens(text: string): number {\n\t\tif (text.length === 0) return 0;\n\t\treturn this.countFn(text);\n\t}\n}\n\n/**\n * Fallback heuristic estimator: ~4 characters per token.\n *\n * Industry-standard approximation (±10% for English/code content).\n * Used only when gpt-tokenizer fails to load in constrained environments.\n */\nexport class HeuristicTokenEstimator implements TokenEstimator {\n\treadonly name = \"heuristic (chars/4)\";\n\n\tcountTokens(text: string): number {\n\t\tif (text.length === 0) return 0;\n\t\treturn Math.ceil(text.length / 4);\n\t}\n}\n\n/**\n * Factory: creates a RealTokenEstimator with gpt-tokenizer,\n * falling back to HeuristicTokenEstimator if the import fails.\n *\n * Uses dynamic import to avoid blocking SDK initialization and to\n * gracefully degrade in environments where gpt-tokenizer is unavailable.\n */\nexport async function createTokenEstimator(): Promise<TokenEstimator> {\n\ttry {\n\t\tconst mod = await import(\"gpt-tokenizer\");\n\t\tconst estimator = new RealTokenEstimator(\n\t\t\tmod.countTokens,\n\t\t\tmod.setMergeCacheSize,\n\t\t);\n\t\tlog.debug(\"[LIOP-Economy] Token estimator initialized: o200k_base\");\n\t\treturn estimator;\n\t} catch {\n\t\tlog.info(\n\t\t\t\"[LIOP-Economy] gpt-tokenizer unavailable, falling back to heuristic estimator\",\n\t\t);\n\t\treturn new HeuristicTokenEstimator();\n\t}\n}\n\n/**\n * Synchronous factory: creates a HeuristicTokenEstimator immediately.\n * Used when the async factory cannot be awaited (e.g., constructor contexts).\n * The engine should upgrade to the real estimator via setEstimator() later.\n */\nexport function createSyncTokenEstimator(): TokenEstimator {\n\treturn new HeuristicTokenEstimator();\n}\n","import type { Histogram } from \"@opentelemetry/api\";\nimport { metrics } from \"@opentelemetry/api\";\nimport { log } from \"../utils/logger.js\";\n\n/** SDK identifier for the OTel Meter */\nconst METER_NAME = \"@nekzus/liop\";\nconst METER_VERSION = \"1.2.0-alpha.9\";\n\n/**\n * gen_ai.client.token.usage — Recommended explicit bucket boundaries.\n * Source: OpenTelemetry Generative AI Semantic Conventions (experimental).\n */\nconst TOKEN_USAGE_BUCKETS = [\n\t1, 4, 16, 64, 256, 1024, 4096, 16384, 65536, 262144, 1048576, 4194304,\n\t16777216, 67108864,\n];\n\n/**\n * gen_ai.client.operation.duration — Recommended bucket boundaries (seconds).\n * Source: OpenTelemetry Generative AI Semantic Conventions.\n */\nconst DURATION_BUCKETS = [\n\t0.01, 0.02, 0.04, 0.08, 0.16, 0.32, 0.64, 1.28, 2.56, 5.12, 10.24, 20.48,\n\t40.96, 81.92,\n];\n\n/**\n * LiopOTelBridge — OpenTelemetry gen_ai.* metric emitter.\n *\n * Pattern: Library Instrumentation (uses global MeterProvider only).\n * Per official OTel JS documentation:\n * - Libraries MUST NOT create their own MeterProvider\n * - Libraries SHOULD use metrics.getMeter() from the global API\n * - If no MeterProvider is registered by the application, all operations are NoOp\n *   with zero runtime overhead (confirmed by OTel JS source: NoopMeterProvider)\n *\n * Follows OpenTelemetry Generative AI Semantic Conventions (Development status).\n * @see https://opentelemetry.io/docs/specs/semconv/gen-ai/\n */\nexport class LiopOTelBridge {\n\tprivate tokenUsage: Histogram;\n\tprivate operationDuration: Histogram;\n\tprivate active = false;\n\n\tconstructor() {\n\t\ttry {\n\t\t\tconst meter = metrics.getMeter(METER_NAME, METER_VERSION);\n\n\t\t\tthis.tokenUsage = meter.createHistogram(\"gen_ai.client.token.usage\", {\n\t\t\t\tdescription: \"Number of tokens used in LIOP Logic-on-Origin operations\",\n\t\t\t\tunit: \"{token}\",\n\t\t\t\tadvice: { explicitBucketBoundaries: TOKEN_USAGE_BUCKETS },\n\t\t\t});\n\n\t\t\tthis.operationDuration = meter.createHistogram(\n\t\t\t\t\"gen_ai.client.operation.duration\",\n\t\t\t\t{\n\t\t\t\t\tdescription: \"Duration of LIOP operations\",\n\t\t\t\t\tunit: \"s\",\n\t\t\t\t\tadvice: { explicitBucketBoundaries: DURATION_BUCKETS },\n\t\t\t\t},\n\t\t\t);\n\n\t\t\tthis.active = true;\n\t\t\tlog.debug(\"[LIOP-OTel] gen_ai.* metrics bridge initialized\");\n\t\t} catch (err: unknown) {\n\t\t\t// OTel API failed to load — degrade gracefully without affecting protocol\n\t\t\tlog.debug(\n\t\t\t\t`[LIOP-OTel] Bridge disabled: ${err instanceof Error ? err.message : String(err)}`,\n\t\t\t);\n\t\t\tconst noopHistogram = {\n\t\t\t\trecord: () => {},\n\t\t\t} as unknown as Histogram;\n\t\t\tthis.tokenUsage = noopHistogram;\n\t\t\tthis.operationDuration = noopHistogram;\n\t\t}\n\t}\n\n\t/**\n\t * Record token usage with gen_ai.* standard attributes.\n\t *\n\t * @param tokens - Number of tokens consumed\n\t * @param tokenType - \"input\" or \"output\" (gen_ai.token.type)\n\t * @param operationName - gen_ai.operation.name (e.g., \"execute_tool\", \"chat\")\n\t * @param toolName - Optional LIOP-specific tool name for attribution\n\t */\n\trecordTokens(\n\t\ttokens: number,\n\t\ttokenType: \"input\" | \"output\",\n\t\toperationName: string,\n\t\ttoolName?: string,\n\t): void {\n\t\tthis.tokenUsage.record(tokens, {\n\t\t\t\"gen_ai.system\": \"liop\",\n\t\t\t\"gen_ai.operation.name\": operationName,\n\t\t\t\"gen_ai.token.type\": tokenType,\n\t\t\t\"gen_ai.request.model\": \"liop-mesh\",\n\t\t\t...(toolName ? { \"liop.tool.name\": toolName } : {}),\n\t\t});\n\t}\n\n\t/**\n\t * Record operation duration with gen_ai.* standard attributes.\n\t *\n\t * @param durationMs - Duration in milliseconds (converted to seconds for OTel)\n\t * @param operationName - gen_ai.operation.name\n\t * @param error - Optional error type string if the operation failed\n\t */\n\trecordDuration(\n\t\tdurationMs: number,\n\t\toperationName: string,\n\t\terror?: string,\n\t): void {\n\t\tthis.operationDuration.record(durationMs / 1000, {\n\t\t\t\"gen_ai.system\": \"liop\",\n\t\t\t\"gen_ai.operation.name\": operationName,\n\t\t\t...(error ? { \"error.type\": error } : {}),\n\t\t});\n\t}\n\n\t/** Whether the OTel bridge is actively connected to a MeterProvider */\n\tisActive(): boolean {\n\t\treturn this.active;\n\t}\n}\n","import {\n\tcreateSyncTokenEstimator,\n\tcreateTokenEstimator,\n\ttype TokenEstimator,\n} from \"./estimator.js\";\nimport { LiopOTelBridge } from \"./otel.js\";\n\n/** Single MCP operation token footprint */\nexport interface TokenOperationMetric {\n\treadonly type:\n\t\t| \"tools_list\"\n\t\t| \"tool_call\"\n\t\t| \"resource_read\"\n\t\t| \"resource_list\"\n\t\t| \"prompt_get\"\n\t\t| \"prompt_list\"\n\t\t| \"diagnostic\";\n\treadonly method: string;\n\treadonly estimatedInputTokens: number;\n\treadonly estimatedOutputTokens: number;\n\treadonly timestamp: number;\n\treadonly toolName?: string;\n\treadonly peerId?: string;\n\treadonly durationMs?: number;\n}\n\n/** Session-level aggregate report */\nexport interface TokenSessionReport {\n\treadonly sessionId: string;\n\treadonly operations: ReadonlyArray<TokenOperationMetric>;\n\treadonly totalInputTokens: number;\n\treadonly totalOutputTokens: number;\n\treadonly estimatorName: string;\n\treadonly sessionUptimeMs: number;\n}\n\n/** Per-tool aggregate breakdown */\nexport interface ToolTokenBreakdown {\n\treadonly input: number;\n\treadonly output: number;\n\treadonly calls: number;\n\treadonly avgDurationMs: number;\n}\n\n/**\n * Maps operation types to OTel gen_ai.operation.name values.\n * @see https://opentelemetry.io/docs/specs/semconv/gen-ai/\n */\nconst OTEL_OPERATION_MAP: Record<TokenOperationMetric[\"type\"], string> = {\n\ttools_list: \"chat\",\n\ttool_call: \"execute_tool\",\n\tresource_read: \"chat\",\n\tresource_list: \"chat\",\n\tprompt_get: \"chat\",\n\tprompt_list: \"chat\",\n\tdiagnostic: \"chat\",\n};\n\n/**\n * TokenTelemetryEngine — Full-spectrum observational singleton for token cost measurement.\n *\n * Design principles:\n * - Pure observer pattern: NEVER mutates MCP payloads or protocol flow.\n * - Real tokenization: o200k_base BPE via gpt-tokenizer (async init, sync counting).\n * - OTel gen_ai.* emission: standard metrics via @opentelemetry/api (NoOp if no provider).\n * - Error isolation: telemetry failures never propagate to protocol operations.\n */\nexport class TokenTelemetryEngine {\n\tprivate static instance: TokenTelemetryEngine | null = null;\n\tprivate operations: TokenOperationMetric[] = [];\n\tprivate readonly sessionId: string;\n\tprivate readonly startedAt: number;\n\tprivate estimator: TokenEstimator;\n\tprivate otelBridge: LiopOTelBridge;\n\n\tprivate constructor() {\n\t\tthis.sessionId = crypto.randomUUID();\n\t\tthis.startedAt = Date.now();\n\t\t// Start with sync heuristic estimator (available immediately)\n\t\tthis.estimator = createSyncTokenEstimator();\n\t\tthis.otelBridge = new LiopOTelBridge();\n\t\t// Upgrade to real tokenizer asynchronously\n\t\tthis.initRealEstimator();\n\t}\n\n\t/** Async upgrade from heuristic to real BPE tokenizer */\n\tprivate initRealEstimator(): void {\n\t\tcreateTokenEstimator()\n\t\t\t.then((real) => {\n\t\t\t\tthis.estimator = real;\n\t\t\t})\n\t\t\t.catch(() => {\n\t\t\t\t// Keep heuristic fallback — already assigned in constructor\n\t\t\t});\n\t}\n\n\tstatic getInstance(): TokenTelemetryEngine {\n\t\tif (!TokenTelemetryEngine.instance) {\n\t\t\tTokenTelemetryEngine.instance = new TokenTelemetryEngine();\n\t\t}\n\t\treturn TokenTelemetryEngine.instance;\n\t}\n\n\t/**\n\t * Count tokens in a string using the active estimator.\n\t * Delegates to o200k_base BPE tokenizer (or heuristic fallback).\n\t */\n\tcountTokens(content: string): number {\n\t\ttry {\n\t\t\treturn this.estimator.countTokens(content);\n\t\t} catch {\n\t\t\t// Fallback: never let counting failures break protocol flow\n\t\t\treturn Math.ceil(content.length / 4);\n\t\t}\n\t}\n\n\t/**\n\t * Record a single MCP operation's token footprint.\n\t * Emits both internal metrics and OTel gen_ai.* histograms.\n\t */\n\trecord(metric: Omit<TokenOperationMetric, \"timestamp\">): void {\n\t\tconst fullMetric: TokenOperationMetric = {\n\t\t\t...metric,\n\t\t\ttimestamp: Date.now(),\n\t\t};\n\t\tthis.operations.push(fullMetric);\n\n\t\t// Emit to OTel bridge (NoOp if no MeterProvider configured)\n\t\ttry {\n\t\t\tconst otelOp = OTEL_OPERATION_MAP[metric.type] || \"chat\";\n\n\t\t\tif (metric.estimatedInputTokens > 0) {\n\t\t\t\tthis.otelBridge.recordTokens(\n\t\t\t\t\tmetric.estimatedInputTokens,\n\t\t\t\t\t\"input\",\n\t\t\t\t\totelOp,\n\t\t\t\t\tmetric.toolName,\n\t\t\t\t);\n\t\t\t}\n\t\t\tif (metric.estimatedOutputTokens > 0) {\n\t\t\t\tthis.otelBridge.recordTokens(\n\t\t\t\t\tmetric.estimatedOutputTokens,\n\t\t\t\t\t\"output\",\n\t\t\t\t\totelOp,\n\t\t\t\t\tmetric.toolName,\n\t\t\t\t);\n\t\t\t}\n\t\t\tif (metric.durationMs !== undefined) {\n\t\t\t\tthis.otelBridge.recordDuration(metric.durationMs, otelOp);\n\t\t\t}\n\t\t} catch {\n\t\t\t// OTel emission failure must never affect protocol operations\n\t\t}\n\t}\n\n\t/**\n\t * @deprecated Use countTokens() instead. Kept for backward compatibility.\n\t */\n\testimateTokens(content: string): number {\n\t\treturn this.countTokens(content);\n\t}\n\n\t/** Generate the full session report */\n\tgetReport(): TokenSessionReport {\n\t\treturn {\n\t\t\tsessionId: this.sessionId,\n\t\t\toperations: [...this.operations],\n\t\t\ttotalInputTokens: this.operations.reduce(\n\t\t\t\t(sum, op) => sum + op.estimatedInputTokens,\n\t\t\t\t0,\n\t\t\t),\n\t\t\ttotalOutputTokens: this.operations.reduce(\n\t\t\t\t(sum, op) => sum + op.estimatedOutputTokens,\n\t\t\t\t0,\n\t\t\t),\n\t\t\testimatorName: this.estimator.name,\n\t\t\tsessionUptimeMs: Date.now() - this.startedAt,\n\t\t};\n\t}\n\n\t/** Get per-tool token breakdown for diagnostic display */\n\tgetPerToolReport(): Map<string, ToolTokenBreakdown> {\n\t\tconst breakdown = new Map<string, ToolTokenBreakdown>();\n\n\t\tfor (const op of this.operations) {\n\t\t\tconst key = op.toolName || op.method;\n\t\t\tconst existing = breakdown.get(key) || {\n\t\t\t\tinput: 0,\n\t\t\t\toutput: 0,\n\t\t\t\tcalls: 0,\n\t\t\t\tavgDurationMs: 0,\n\t\t\t};\n\n\t\t\tconst totalDuration =\n\t\t\t\texisting.avgDurationMs * existing.calls + (op.durationMs || 0);\n\t\t\tconst newCalls = existing.calls + 1;\n\n\t\t\tbreakdown.set(key, {\n\t\t\t\tinput: existing.input + op.estimatedInputTokens,\n\t\t\t\toutput: existing.output + op.estimatedOutputTokens,\n\t\t\t\tcalls: newCalls,\n\t\t\t\tavgDurationMs: newCalls > 0 ? totalDuration / newCalls : 0,\n\t\t\t});\n\t\t}\n\n\t\treturn breakdown;\n\t}\n\n\t/**\n\t * Format a rich, human-readable summary block for LiopMeshStatus diagnostic.\n\t * Returns empty string when no operations have been recorded.\n\t */\n\tformatStatusBlock(): string {\n\t\tconst report = this.getReport();\n\t\tif (report.operations.length === 0) return \"\";\n\n\t\tconst uptimeStr = this.formatUptime(report.sessionUptimeMs);\n\t\tconst totalCombined = report.totalInputTokens + report.totalOutputTokens;\n\n\t\t// Aggregate operations by type\n\t\tconst byType = new Map<\n\t\t\tstring,\n\t\t\t{ count: number; input: number; output: number }\n\t\t>();\n\t\tfor (const op of report.operations) {\n\t\t\tconst key = op.type;\n\t\t\tconst existing = byType.get(key) || {\n\t\t\t\tcount: 0,\n\t\t\t\tinput: 0,\n\t\t\t\toutput: 0,\n\t\t\t};\n\t\t\tbyType.set(key, {\n\t\t\t\tcount: existing.count + 1,\n\t\t\t\tinput: existing.input + op.estimatedInputTokens,\n\t\t\t\toutput: existing.output + op.estimatedOutputTokens,\n\t\t\t});\n\t\t}\n\n\t\t// Build type breakdown lines\n\t\tconst typeEntries = Array.from(byType.entries());\n\t\tconst typeLines = typeEntries.map(([type, data], idx) => {\n\t\t\tconst prefix = idx === typeEntries.length - 1 ? \"│  └─\" : \"│  ├─\";\n\t\t\tconst outputPart =\n\t\t\t\tdata.output > 0 ? ` / ${data.output.toLocaleString()} out` : \"\";\n\t\t\treturn `${prefix} ${type} ×${data.count} → ${data.input.toLocaleString()} in${outputPart}`;\n\t\t});\n\n\t\t// Build per-tool breakdown\n\t\tconst toolReport = this.getPerToolReport();\n\t\tconst toolEntries = Array.from(toolReport.entries()).filter(\n\t\t\t([key]) => key !== \"tools/list\" && key !== \"LiopMeshStatus\",\n\t\t);\n\n\t\tconst toolLines: string[] = [];\n\t\tif (toolEntries.length > 0) {\n\t\t\ttoolLines.push(\"├─ By Tool:\");\n\t\t\ttoolEntries.forEach(([name, data], idx) => {\n\t\t\t\tconst prefix = idx === toolEntries.length - 1 ? \"│  └─\" : \"│  ├─\";\n\t\t\t\tconst outputPart =\n\t\t\t\t\tdata.output > 0 ? ` / ${data.output.toLocaleString()} out` : \"\";\n\t\t\t\tconst durationPart =\n\t\t\t\t\tdata.avgDurationMs > 0 ? ` ~${Math.round(data.avgDurationMs)}ms` : \"\";\n\t\t\t\ttoolLines.push(\n\t\t\t\t\t`${prefix} ${name}: ${data.input.toLocaleString()} in${outputPart} (×${data.calls})${durationPart}`,\n\t\t\t\t);\n\t\t\t});\n\t\t}\n\n\t\t// Calculate average latency across all timed operations\n\t\tconst timedOps = report.operations.filter(\n\t\t\t(op) => op.durationMs !== undefined,\n\t\t);\n\t\tconst avgLatency =\n\t\t\ttimedOps.length > 0\n\t\t\t\t? Math.round(\n\t\t\t\t\t\ttimedOps.reduce((sum, op) => sum + (op.durationMs || 0), 0) /\n\t\t\t\t\t\t\ttimedOps.length,\n\t\t\t\t\t)\n\t\t\t\t: 0;\n\n\t\tconst otelStatus = this.otelBridge.isActive()\n\t\t\t? \"gen_ai.client.token.usage → active\"\n\t\t\t: \"disabled\";\n\n\t\tconst lines = [\n\t\t\t\"\\nToken Economy:\",\n\t\t\t`├─ Session: ${report.sessionId.slice(0, 8)} (${uptimeStr})`,\n\t\t\t`├─ Estimator: ${report.estimatorName}`,\n\t\t\t`├─ Operations: ${report.operations.length}`,\n\t\t\t...typeLines,\n\t\t\t`├─ Total: ${report.totalInputTokens.toLocaleString()} in / ${report.totalOutputTokens.toLocaleString()} out (${totalCombined.toLocaleString()} combined)`,\n\t\t\t...toolLines,\n\t\t\t...(avgLatency > 0 ? [`├─ Avg Latency: ${avgLatency}ms`] : []),\n\t\t\t`└─ OTel: ${otelStatus}`,\n\t\t];\n\n\t\treturn lines.join(\"\\n\");\n\t}\n\n\t/** Format milliseconds into human-readable uptime string */\n\tprivate formatUptime(ms: number): string {\n\t\tconst seconds = Math.floor(ms / 1000);\n\t\tif (seconds < 60) return `${seconds}s`;\n\t\tconst minutes = Math.floor(seconds / 60);\n\t\tconst remainingSeconds = seconds % 60;\n\t\tif (minutes < 60) return `${minutes}m ${remainingSeconds}s`;\n\t\tconst hours = Math.floor(minutes / 60);\n\t\tconst remainingMinutes = minutes % 60;\n\t\treturn `${hours}h ${remainingMinutes}m`;\n\t}\n\n\t/** Reset all recorded metrics (used in tests) */\n\treset(): void {\n\t\tthis.operations = [];\n\t}\n\n\t/** Destroy the singleton (used in tests to guarantee isolation) */\n\tstatic destroy(): void {\n\t\tTokenTelemetryEngine.instance = null;\n\t}\n}\n","/**\n * MCP UX: optional compact tool descriptions for clients (e.g. cloud models)\n * that over-trigger on long \"envelope / injection\" wording in tools/list.\n *\n * Full LIOP payload format remains in prompts/get → liop_blind_analyst.\n */\nexport function mcpCompactToolDescriptions(): boolean {\n\tconst v =\n\t\tprocess.env.LIOP_MCP_COMPACT_TOOL_DESCRIPTIONS?.toLowerCase().trim();\n\treturn v === \"1\" || v === \"true\" || v === \"yes\";\n}\n\n/**\n * Removes SDK-appended LIOP specification blocks from a registered tool description.\n */\nexport function stripVerboseLiopToolDescription(description: string): string {\n\tlet d = description;\n\tconst markers = [\n\t\t\"\\n\\n[LIOP-PROTO-V1:\",\n\t\t\"\\r\\n\\r\\n[LIOP-PROTO-V1:\",\n\t\t\"\\n[LIOP-PROTO-V1:\", // rare\n\t];\n\tfor (const m of markers) {\n\t\tconst i = d.indexOf(m);\n\t\tif (i !== -1) {\n\t\t\td = d.slice(0, i);\n\t\t\tbreak;\n\t\t}\n\t}\n\treturn d.trimEnd();\n}\n","import * as crypto from \"node:crypto\";\nimport { LiopVerifier } from \"../crypto/verifier.js\";\nimport { TokenTelemetryEngine } from \"../economy/telemetry.js\";\nimport type { LiopManifest, MeshNode } from \"../mesh/index.js\";\nimport { Kyber768Wrapper } from \"../rpc/crypto/kyber.js\";\nimport { liopV1 } from \"../rpc/proto.js\";\nimport { createChannelCredentials } from \"../rpc/tls.js\";\nimport type { IntentResponse, LogicResponse } from \"../rpc/types.js\";\nimport type { LiopServer } from \"../server/index.js\";\nimport type { McpRequest, McpResponse } from \"../types.js\";\nimport { log } from \"../utils/logger.js\";\nimport {\n\tmcpCompactToolDescriptions,\n\tstripVerboseLiopToolDescription,\n} from \"../utils/mcpCompact.js\";\n\n/**\n * Time-to-live for cached manifests (seconds).\n * Aligned with libp2p Kademlia DHT TABLE_REFRESH_INTERVAL (5 minutes).\n * Provider records in the DHT are valid for 48 hours (PROVIDERS_VALIDITY),\n * so 300s is a conservative, network-friendly value.\n */\nconst MANIFEST_CACHE_TTL_S = 300;\n\n/** Maximum number of DHT query retries for manifest discovery */\nconst MANIFEST_DISCOVERY_RETRIES = 5;\n\n/**\n * LIOP MCP Router\n *\n * Core logic for routing MCP requests to local or remote LIOP providers.\n * Decoupled from transport (HTTP/Stdio).\n *\n * All tool discovery and port resolution is DYNAMIC via the\n * /liop/manifest/1.0.0 protocol stream over Kademlia DHT.\n */\nexport class LiopMcpRouter {\n\t/** Cached manifests from remote peers. Key = PeerID */\n\tprivate manifestCache: Map<\n\t\tstring,\n\t\t{ manifest: LiopManifest; cachedAt: number }\n\t> = new Map();\n\n\t/** Guards against concurrent discovery storms */\n\tprivate currentDiscovery: Promise<void> | null = null;\n\n\t/** Verifier for Tier-0 integrity checks */\n\tpublic verifier: LiopVerifier = new LiopVerifier();\n\n\t/** Callback when new remote tools are discovered */\n\tpublic onToolsChanged?: () => void;\n\n\t/** Circuit-breaker state for peers that repeatedly fail manifest queries. */\n\tprivate manifestFailureState: Map<\n\t\tstring,\n\t\t{ failures: number; cooldownUntil: number; lastSkipLogAt: number }\n\t> = new Map();\n\n\tprivate static readonly MANIFEST_FAILURE_BASE_COOLDOWN_MS = 15_000;\n\tprivate static readonly MANIFEST_FAILURE_MAX_COOLDOWN_MS = 5 * 60_000;\n\tprivate static readonly MANIFEST_SKIP_LOG_THROTTLE_MS = 30_000;\n\n\tconstructor(\n\t\tprivate liopServer: LiopServer,\n\t\tprivate meshNode: MeshNode | null = null,\n\t\tprivate defaultRpcPort = 50051,\n\t) {\n\t\t// Auto-register manifest handler if mesh node is provided\n\t\tif (this.meshNode) {\n\t\t\tthis.meshNode.registerManifestHandler(() => {\n\t\t\t\tconst remoteTools = this.liopServer.listTools().map((t) => ({\n\t\t\t\t\tname: t.name,\n\t\t\t\t\tdescription: t.description,\n\t\t\t\t\tinputSchema: t.inputSchema as Record<string, unknown>,\n\t\t\t\t}));\n\n\t\t\t\tconst resources = this.liopServer.listResources().map((r) => ({\n\t\t\t\t\tname: r.name,\n\t\t\t\t\turi: r.uri,\n\t\t\t\t\tdescription: r.description,\n\t\t\t\t\tmimeType: r.mimeType,\n\t\t\t\t}));\n\n\t\t\t\treturn {\n\t\t\t\t\tpeerId: this.meshNode?.getPeerId() || \"unknown\",\n\t\t\t\t\tgrpcPort: this.defaultRpcPort,\n\t\t\t\t\ttools: [...remoteTools],\n\t\t\t\t\tresources,\n\t\t\t\t\tserverInfo: this.liopServer.getServerInfo(),\n\t\t\t\t};\n\t\t\t});\n\n\t\t\t// Proactively announce manifest capability to the mesh\n\t\t\tthis.meshNode.announceManifest().catch((err: unknown) => {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] Failed to announce manifest: ${err instanceof Error ? err.message : String(err)}`,\n\t\t\t\t);\n\t\t\t});\n\t\t}\n\n\t\t// [OWASP-A01] Startup warning when diagnostic level exposes full topology\n\t\tif (process.env.LIOP_DIAGNOSTIC_LEVEL === \"full\") {\n\t\t\tprocess.stderr.write(\n\t\t\t\t\"⚠️ [LIOP-Security] Diagnostic level set to FULL — \" +\n\t\t\t\t\t\"PeerIDs and network topology are exposed. Do NOT use in production.\\n\",\n\t\t\t);\n\t\t}\n\t}\n\n\tprivate shouldSkipManifestQuery(peerId: string): boolean {\n\t\tconst state = this.manifestFailureState.get(peerId);\n\t\tif (!state) return false;\n\t\tconst now = Date.now();\n\t\tif (now >= state.cooldownUntil) return false;\n\n\t\tif (\n\t\t\tnow - state.lastSkipLogAt >\n\t\t\tLiopMcpRouter.MANIFEST_SKIP_LOG_THROTTLE_MS\n\t\t) {\n\t\t\tlog.info(\n\t\t\t\t`[LIOP-Router] Skipping manifest query for ${peerId} during cooldown (${Math.ceil((state.cooldownUntil - now) / 1000)}s remaining)`,\n\t\t\t);\n\t\t\tstate.lastSkipLogAt = now;\n\t\t}\n\t\treturn true;\n\t}\n\n\tprivate recordManifestQuerySuccess(peerId: string): void {\n\t\tthis.manifestFailureState.delete(peerId);\n\t}\n\n\tprivate recordManifestQueryFailure(peerId: string): void {\n\t\tconst now = Date.now();\n\t\tconst prev = this.manifestFailureState.get(peerId);\n\t\tconst failures = (prev?.failures || 0) + 1;\n\t\tconst backoff = Math.min(\n\t\t\tLiopMcpRouter.MANIFEST_FAILURE_BASE_COOLDOWN_MS *\n\t\t\t\t2 ** Math.max(0, failures - 1),\n\t\t\tLiopMcpRouter.MANIFEST_FAILURE_MAX_COOLDOWN_MS,\n\t\t);\n\t\tthis.manifestFailureState.set(peerId, {\n\t\t\tfailures,\n\t\t\tcooldownUntil: now + backoff,\n\t\t\tlastSkipLogAt: 0,\n\t\t});\n\t}\n\n\tpublic async dispatch(request: McpRequest): Promise<McpResponse | null> {\n\t\tconst { method, params, id } = request;\n\t\tlog.info(`[LIOP-Router] Processing: ${method}`);\n\n\t\tswitch (method) {\n\t\t\tcase \"initialize\":\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\tresult: {\n\t\t\t\t\t\tprotocolVersion: \"2025-11-25\",\n\t\t\t\t\t\tcapabilities: {\n\t\t\t\t\t\t\ttools: { listChanged: true },\n\t\t\t\t\t\t\tresources: { listChanged: true },\n\t\t\t\t\t\t\tprompts: { listChanged: true },\n\t\t\t\t\t\t},\n\t\t\t\t\t\tserverInfo: this.liopServer.getServerInfo(),\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\tcase \"notifications/initialized\":\n\t\t\t\t// Cloud MCP clients often fire tools/list immediately; kick discovery early\n\t\t\t\t// so manifests populate before (or right after) that call completes.\n\t\t\t\tthis.kickDiscoveryAfterInitialized().catch(() => {});\n\t\t\t\treturn null;\n\t\t\tcase \"notifications/cancelled\":\n\t\t\t\treturn null; // No-op for MCP spec compliance\n\t\t\tcase \"ping\":\n\t\t\t\treturn { jsonrpc: \"2.0\", id, result: {} };\n\t\t\tcase \"tools/list\": {\n\t\t\t\tconst localTools = this.liopServer.listTools();\n\t\t\t\tconst remoteTools = await this.getRemoteTools();\n\n\t\t\t\tconst listedLocals = mcpCompactToolDescriptions()\n\t\t\t\t\t? localTools.map((t) => ({\n\t\t\t\t\t\t\t...t,\n\t\t\t\t\t\t\tdescription: stripVerboseLiopToolDescription(t.description ?? \"\"),\n\t\t\t\t\t\t}))\n\t\t\t\t\t: localTools;\n\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] tools/list: ${localTools.length} local, ${remoteTools.length} remote tools found`,\n\t\t\t\t);\n\n\t\t\t\t// Inject a mandatory static diagnostic tool.\n\t\t\t\t// This ensures that the {tools: []} list is never empty on startup.\n\t\t\t\t// Claude Desktop silently hides the connector if it receives an empty array initially,\n\t\t\t\t// which broke the UX due to the ~3s warm-up time of the Kademlia DHT.\n\t\t\t\tconst diagnosticTool = {\n\t\t\t\t\tname: \"LiopMeshStatus\",\n\t\t\t\t\tdescription:\n\t\t\t\t\t\t\"LiopMeshStatus: Returns the current dynamic diagnostic status of the Zero-Trust Neural Mesh.\",\n\t\t\t\t\tinputSchema: {\n\t\t\t\t\t\ttype: \"object\",\n\t\t\t\t\t\tproperties: {},\n\t\t\t\t\t\tadditionalProperties: false,\n\t\t\t\t\t},\n\t\t\t\t};\n\n\t\t\t\tconst allTools = [diagnosticTool, ...listedLocals, ...remoteTools];\n\n\t\t\t\t// [Token Economy] Record telemetry for the tools/list response\n\t\t\t\tconst telemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\tconst toolsPayload = JSON.stringify(allTools);\n\t\t\t\tconst toolsResponsePayload = JSON.stringify({ tools: allTools });\n\t\t\t\ttelemetry.record({\n\t\t\t\t\ttype: \"tools_list\",\n\t\t\t\t\tmethod: \"tools/list\",\n\t\t\t\t\testimatedInputTokens: telemetry.countTokens(toolsPayload),\n\t\t\t\t\testimatedOutputTokens: telemetry.countTokens(toolsResponsePayload),\n\t\t\t\t});\n\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\tresult: {\n\t\t\t\t\t\ttools: allTools,\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\t\t\tcase \"tools/call\":\n\t\t\t\treturn this.transcodeMcpToLiop(id, params as Record<string, unknown>);\n\t\t\tcase \"resources/list\": {\n\t\t\t\tconst localResources = this.liopServer.listResources();\n\t\t\t\tconst remoteResources = await this.getRemoteResources();\n\t\t\t\tconst allResources = [...localResources, ...remoteResources];\n\n\t\t\t\t// [Token Economy] Record resources/list telemetry\n\t\t\t\tconst rlTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\tconst rlPayload = JSON.stringify(allResources);\n\t\t\t\trlTelemetry.record({\n\t\t\t\t\ttype: \"resource_list\",\n\t\t\t\t\tmethod: \"resources/list\",\n\t\t\t\t\testimatedInputTokens: 0,\n\t\t\t\t\testimatedOutputTokens: rlTelemetry.countTokens(rlPayload),\n\t\t\t\t});\n\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\tresult: { resources: allResources },\n\t\t\t\t};\n\t\t\t}\n\t\t\tcase \"resources/read\": {\n\t\t\t\tconst typedParams = params as { uri?: string } | undefined;\n\t\t\t\tif (!typedParams?.uri)\n\t\t\t\t\treturn {\n\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\tid,\n\t\t\t\t\t\terror: { code: -32602, message: \"Missing resource uri\" },\n\t\t\t\t\t};\n\t\t\t\ttry {\n\t\t\t\t\tconst rrStartTime = Date.now();\n\t\t\t\t\tconst result = await this.liopServer.readResource(typedParams.uri);\n\n\t\t\t\t\t// [Token Economy] Record resources/read telemetry\n\t\t\t\t\tconst rrTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\t\tconst rrOutputPayload = JSON.stringify(result);\n\t\t\t\t\trrTelemetry.record({\n\t\t\t\t\t\ttype: \"resource_read\",\n\t\t\t\t\t\tmethod: \"resources/read\",\n\t\t\t\t\t\ttoolName: typedParams.uri,\n\t\t\t\t\t\testimatedInputTokens: rrTelemetry.countTokens(typedParams.uri),\n\t\t\t\t\t\testimatedOutputTokens: rrTelemetry.countTokens(rrOutputPayload),\n\t\t\t\t\t\tdurationMs: Date.now() - rrStartTime,\n\t\t\t\t\t});\n\n\t\t\t\t\treturn { jsonrpc: \"2.0\", id, result };\n\t\t\t\t} catch (err: unknown) {\n\t\t\t\t\t// Fallback: Resolve remotely from manifest cache\n\t\t\t\t\tconst targetUri = typedParams.uri;\n\t\t\t\t\tfor (const { manifest } of this.manifestCache.values()) {\n\t\t\t\t\t\tconst remoteResource = manifest.resources.find(\n\t\t\t\t\t\t\t(r) => r.uri === targetUri,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tif (remoteResource) {\n\t\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t\t`[LIOP-Router] Resolved resource ${targetUri} from cache (Peer: ${manifest.peerId})`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\tresult: {\n\t\t\t\t\t\t\t\t\tcontents: [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\turi: remoteResource.uri,\n\t\t\t\t\t\t\t\t\t\t\tmimeType: remoteResource.mimeType || \"text/plain\",\n\t\t\t\t\t\t\t\t\t\t\ttext:\n\t\t\t\t\t\t\t\t\t\t\t\tremoteResource.text ||\n\t\t\t\t\t\t\t\t\t\t\t\tremoteResource.description ||\n\t\t\t\t\t\t\t\t\t\t\t\t\"No content provided\",\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t};\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\n\t\t\t\t\treturn {\n\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\tid,\n\t\t\t\t\t\terror: {\n\t\t\t\t\t\t\tcode: -32000,\n\t\t\t\t\t\t\tmessage: err instanceof Error ? err.message : String(err),\n\t\t\t\t\t\t},\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\t\t\tcase \"prompts/list\": {\n\t\t\t\tconst promptsList = this.liopServer.listPrompts();\n\n\t\t\t\t// [Token Economy] Record prompts/list telemetry\n\t\t\t\tconst plTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\tconst plPayload = JSON.stringify(promptsList);\n\t\t\t\tplTelemetry.record({\n\t\t\t\t\ttype: \"prompt_list\",\n\t\t\t\t\tmethod: \"prompts/list\",\n\t\t\t\t\testimatedInputTokens: 0,\n\t\t\t\t\testimatedOutputTokens: plTelemetry.countTokens(plPayload),\n\t\t\t\t});\n\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\tresult: { prompts: promptsList },\n\t\t\t\t};\n\t\t\t}\n\t\t\tcase \"prompts/get\": {\n\t\t\t\tconst typedParams = params as\n\t\t\t\t\t| { name?: string; arguments?: Record<string, string> }\n\t\t\t\t\t| undefined;\n\t\t\t\tif (!typedParams?.name)\n\t\t\t\t\treturn {\n\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\tid,\n\t\t\t\t\t\terror: { code: -32602, message: \"Missing prompt name\" },\n\t\t\t\t\t};\n\t\t\t\ttry {\n\t\t\t\t\tconst pgStartTime = Date.now();\n\t\t\t\t\tconst result = await this.liopServer.getPrompt({\n\t\t\t\t\t\tname: typedParams.name as string,\n\t\t\t\t\t\targuments: typedParams.arguments || {},\n\t\t\t\t\t});\n\n\t\t\t\t\t// [Token Economy] Record prompts/get telemetry\n\t\t\t\t\tconst pgTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\t\tconst pgInputPayload = JSON.stringify({\n\t\t\t\t\t\tname: typedParams.name,\n\t\t\t\t\t\targuments: typedParams.arguments,\n\t\t\t\t\t});\n\t\t\t\t\tconst pgOutputPayload = JSON.stringify(result);\n\t\t\t\t\tpgTelemetry.record({\n\t\t\t\t\t\ttype: \"prompt_get\",\n\t\t\t\t\t\tmethod: \"prompts/get\",\n\t\t\t\t\t\ttoolName: typedParams.name,\n\t\t\t\t\t\testimatedInputTokens: pgTelemetry.countTokens(pgInputPayload),\n\t\t\t\t\t\testimatedOutputTokens: pgTelemetry.countTokens(pgOutputPayload),\n\t\t\t\t\t\tdurationMs: Date.now() - pgStartTime,\n\t\t\t\t\t});\n\n\t\t\t\t\treturn { jsonrpc: \"2.0\", id, result };\n\t\t\t\t} catch (err: unknown) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\tid,\n\t\t\t\t\t\terror: {\n\t\t\t\t\t\t\tcode: -32000,\n\t\t\t\t\t\t\tmessage: err instanceof Error ? err.message : String(err),\n\t\t\t\t\t\t},\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\t\t\tdefault:\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\terror: { code: -32601, message: `Method not found: ${method}` },\n\t\t\t\t};\n\t\t}\n\t}\n\n\t/**\n\t * MCP clients often send notifications/initialized then immediately tools/list.\n\t * Start manifest discovery without blocking the notification handler.\n\t */\n\tprivate kickDiscoveryAfterInitialized(): Promise<void> {\n\t\treturn (async () => {\n\t\t\tawait new Promise((r) => setTimeout(r, 250));\n\t\t\tawait Promise.race([\n\t\t\t\tthis.refreshManifestCache(true),\n\t\t\t\tnew Promise<void>((r) => setTimeout(r, 15_000)),\n\t\t\t]).catch(() => {});\n\t\t})();\n\t}\n\n\t/**\n\t * Discovers and caches manifests from all remote LIOP providers in the mesh.\n\t * Uses Kademlia DHT to find \"liop:manifest\" providers, then opens\n\t * /liop/manifest/1.0.0 protocol streams to retrieve their full metadata.\n\t */\n\tpublic async refreshManifestCache(silent = false): Promise<void> {\n\t\tif (!this.meshNode) return;\n\t\tif (this.currentDiscovery) return this.currentDiscovery;\n\n\t\t// Fast-path: Skip DHT query entirely when cache is fresh and populated.\n\t\t// Only background polls (silent=true) should bypass this to detect new nodes.\n\t\t// Foreground requests (tools/list, tools/call) can safely reuse valid cache.\n\t\tif (!silent && this.manifestCache.size > 0) {\n\t\t\tconst now = Date.now();\n\t\t\tconst allFresh = Array.from(this.manifestCache.values()).every(\n\t\t\t\t({ cachedAt }) => now - cachedAt < MANIFEST_CACHE_TTL_S * 1000,\n\t\t\t);\n\t\t\tif (allFresh) return;\n\t\t}\n\n\t\tthis.currentDiscovery = (async () => {\n\t\t\ttry {\n\t\t\t\tconst prevCount = Array.from(this.manifestCache.values()).reduce(\n\t\t\t\t\t(acc, { manifest }) => acc + manifest.tools.length,\n\t\t\t\t\t0,\n\t\t\t\t);\n\n\t\t\t\t// Phase 0: Wait for at least one active connection if mesh is empty (Cold Start)\n\t\t\t\tif (this.manifestCache.size === 0) {\n\t\t\t\t\tfor (let i = 0; i < 3; i++) {\n\t\t\t\t\t\tconst connections =\n\t\t\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: access internal nodes for connection count\n\t\t\t\t\t\t\t(this.meshNode as any).node?.getConnections().length || 0;\n\t\t\t\t\t\tif (connections > 0) {\n\t\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t\t`[LIOP-Router] P2P Connection established. Starting discovery...`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\t}\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Waiting for P2P connections (attempt ${i + 1}/10)...`,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tawait new Promise((r) => setTimeout(r, 1000));\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\t// Phase 1: Try DHT discovery + Fallback loop\n\t\t\t\tlet providerIds: string[] = [];\n\t\t\t\tconst MAX_COLD_ATTEMPTS = this.manifestCache.size === 0 ? 5 : 1;\n\n\t\t\t\tfor (\n\t\t\t\t\tlet coldAttempt = 0;\n\t\t\t\t\tcoldAttempt < MAX_COLD_ATTEMPTS;\n\t\t\t\t\tcoldAttempt++\n\t\t\t\t) {\n\t\t\t\t\t// 1.1 Try DHT discovery\n\t\t\t\t\tfor (\n\t\t\t\t\t\tlet attempt = 0;\n\t\t\t\t\t\tattempt < MANIFEST_DISCOVERY_RETRIES;\n\t\t\t\t\t\tattempt++\n\t\t\t\t\t) {\n\t\t\t\t\t\tproviderIds =\n\t\t\t\t\t\t\t(await this.meshNode?.discoverManifestProviders()) || [];\n\t\t\t\t\t\tconst selfId = this.meshNode?.getPeerId();\n\t\t\t\t\t\tconst remoteIds = providerIds.filter((id) => id !== selfId);\n\t\t\t\t\t\tif (remoteIds.length > 0) break;\n\t\t\t\t\t\tif (attempt < MANIFEST_DISCOVERY_RETRIES - 1) {\n\t\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t\t`[LIOP-Router] DHT discovery attempt ${attempt + 1}/${MANIFEST_DISCOVERY_RETRIES}...`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tawait new Promise((r) => setTimeout(r, 1000));\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\n\t\t\t\t\t// 1.2 Aggressively merge all active connections to bypass DHT propagation delays\n\t\t\t\t\tconst activePeers =\n\t\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: access internal nodes\n\t\t\t\t\t\t(this.meshNode as any).node\n\t\t\t\t\t\t\t?.getConnections()\n\t\t\t\t\t\t\t.map((c: { remotePeer: { toString: () => string } }) =>\n\t\t\t\t\t\t\t\tc.remotePeer.toString(),\n\t\t\t\t\t\t\t) || [];\n\n\t\t\t\t\tif (activePeers.length > 0) {\n\t\t\t\t\t\tproviderIds = Array.from(new Set([...providerIds, ...activePeers]));\n\t\t\t\t\t}\n\n\t\t\t\t\tconst selfIdEnd = this.meshNode?.getPeerId();\n\t\t\t\t\tconst remoteIdsEnd = providerIds.filter((id) => id !== selfIdEnd);\n\t\t\t\t\tif (remoteIdsEnd.length > 0) break;\n\n\t\t\t\t\tif (coldAttempt < MAX_COLD_ATTEMPTS - 1) {\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Initial discovery failed (0 providers). Retrying in 1s (${coldAttempt + 1}/${MAX_COLD_ATTEMPTS})...`,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tawait new Promise((r) => setTimeout(r, 1000));\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\tif (providerIds.length === 0) {\n\t\t\t\t\tlog.info(\n\t\t\t\t\t\t`[LIOP-Router] No manifest providers found after all attempts.`,\n\t\t\t\t\t);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\n\t\t\t\tif (!silent) {\n\t\t\t\t\tlog.info(\n\t\t\t\t\t\t`[LIOP-Router] Discovered ${providerIds.length} candidate manifest providers`,\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\t// Prioritize already-connected peers to avoid blocking on stale providers.\n\t\t\t\t// This improves first tools/list latency on Linux/Ubuntu while preserving\n\t\t\t\t// full discovery for slower peers in subsequent refresh cycles.\n\t\t\t\tconst connectedPeers = new Set<string>(\n\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: internal node access for fast peer ordering\n\t\t\t\t\t((this.meshNode as any).node?.getConnections?.() || []).map(\n\t\t\t\t\t\t(c: { remotePeer: { toString: () => string } }) =>\n\t\t\t\t\t\t\tc.remotePeer.toString(),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t\tproviderIds = [...providerIds].sort((a, b) => {\n\t\t\t\t\tconst aConnected = connectedPeers.has(a) ? 1 : 0;\n\t\t\t\t\tconst bConnected = connectedPeers.has(b) ? 1 : 0;\n\t\t\t\t\treturn bConnected - aConnected;\n\t\t\t\t});\n\n\t\t\t\tlet successCount = 0;\n\t\t\t\tlet errorCount = 0;\n\t\t\t\tlet cacheUpdated = false;\n\n\t\t\t\t// Filter peers eligible for querying\n\t\t\t\tconst selfId = this.meshNode?.getPeerId();\n\t\t\t\tconst eligiblePeers = providerIds.filter((peerId) => {\n\t\t\t\t\tif (!this.meshNode) return false;\n\t\t\t\t\tif (peerId === selfId) return false;\n\t\t\t\t\tif (this.shouldSkipManifestQuery(peerId)) return false;\n\t\t\t\t\tconst cached = this.manifestCache.get(peerId);\n\t\t\t\t\tif (\n\t\t\t\t\t\tcached &&\n\t\t\t\t\t\tDate.now() - cached.cachedAt < MANIFEST_CACHE_TTL_S * 1000\n\t\t\t\t\t) {\n\t\t\t\t\t\tsuccessCount++;\n\t\t\t\t\t\treturn false;\n\t\t\t\t\t}\n\t\t\t\t\treturn true;\n\t\t\t\t});\n\n\t\t\t\t// Parallel manifest queries — eliminates sequential 100ms + retry delays\n\t\t\t\tconst queryResults = await Promise.allSettled(\n\t\t\t\t\teligiblePeers.map(async (peerId) => {\n\t\t\t\t\t\tif (!this.meshNode) return null;\n\t\t\t\t\t\tlog.info(`[LIOP-Router] Querying manifest from: ${peerId}`);\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tpeerId,\n\t\t\t\t\t\t\tmanifest: await this.meshNode.queryManifest(peerId),\n\t\t\t\t\t\t};\n\t\t\t\t\t}),\n\t\t\t\t);\n\n\t\t\t\tfor (const result of queryResults) {\n\t\t\t\t\tif (result.status === \"fulfilled\" && result.value?.manifest) {\n\t\t\t\t\t\tconst { peerId, manifest } = result.value;\n\t\t\t\t\t\tthis.manifestCache.set(peerId, {\n\t\t\t\t\t\t\tmanifest,\n\t\t\t\t\t\t\tcachedAt: Date.now(),\n\t\t\t\t\t\t});\n\t\t\t\t\t\tthis.recordManifestQuerySuccess(peerId);\n\t\t\t\t\t\tcacheUpdated = true;\n\t\t\t\t\t\tsuccessCount++;\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Manifest received from ${peerId} (${manifest.tools.length} tools)`,\n\t\t\t\t\t\t);\n\t\t\t\t\t} else if (result.status === \"fulfilled\" && result.value) {\n\t\t\t\t\t\tthis.recordManifestQueryFailure(result.value.peerId);\n\t\t\t\t\t\terrorCount++;\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Manifest query returned NULL for ${result.value.peerId}`,\n\t\t\t\t\t\t);\n\t\t\t\t\t} else if (result.status === \"rejected\") {\n\t\t\t\t\t\terrorCount++;\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Fatal error querying manifest:`,\n\t\t\t\t\t\t\tresult.reason instanceof Error\n\t\t\t\t\t\t\t\t? result.reason.message\n\t\t\t\t\t\t\t\t: String(result.reason),\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\t// Store discovery stats for LiopMeshStatus diagnostics\n\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: private stats for telemetry\n\t\t\t\t(this as any)._discoveryStats = {\n\t\t\t\t\tcandidates: providerIds.length,\n\t\t\t\t\tsuccess: successCount,\n\t\t\t\t\tfailures: errorCount,\n\t\t\t\t\tlastDiscovery: Date.now(),\n\t\t\t\t};\n\n\t\t\t\tif (cacheUpdated) {\n\t\t\t\t\tconst newCount = Array.from(this.manifestCache.values()).reduce(\n\t\t\t\t\t\t(acc, { manifest }) => acc + manifest.tools.length,\n\t\t\t\t\t\t0,\n\t\t\t\t\t);\n\n\t\t\t\t\tif (newCount !== prevCount && this.onToolsChanged) {\n\t\t\t\t\t\tprocess.stderr.write(\n\t\t\t\t\t\t\t\"[LIOP-Router] Mesh topology updated! Emitting notifications/tools/list_changed.\\n\",\n\t\t\t\t\t\t);\n\t\t\t\t\t\tthis.onToolsChanged();\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t} finally {\n\t\t\t\tthis.currentDiscovery = null;\n\t\t\t}\n\t\t})();\n\n\t\treturn this.currentDiscovery;\n\t}\n\n\t/**\n\t * Returns the current manifest cache size for external telemetry.\n\t * Used by the adaptive polling system to detect topology stabilization.\n\t */\n\tpublic getCacheSize(): number {\n\t\treturn this.manifestCache.size;\n\t}\n\n\t/**\n\t * Returns all remote tools discovered via the manifest protocol.\n\t */\n\tprivate async getRemoteTools(): Promise<\n\t\tArray<{\n\t\t\tname: string;\n\t\t\tdescription?: string;\n\t\t\tinputSchema?: Record<string, unknown>;\n\t\t}>\n\t> {\n\t\tconst EXPECTED_PROVIDERS = Number.parseInt(\n\t\t\tprocess.env.LIOP_EXPECTED_PROVIDERS ?? \"4\",\n\t\t\t10,\n\t\t);\n\n\t\t// [Phase 106] Smart Warm-up with Stabilization Detection\n\t\t// Loops until EXPECTED_PROVIDERS are found, the deadline expires, or\n\t\t// the provider count stabilizes (same count for 3 consecutive checks).\n\t\t// This prevents a ~20s block when a node (e.g. Bank) is absent.\n\t\tif (this.manifestCache.size < EXPECTED_PROVIDERS && this.meshNode) {\n\t\t\tconst initialTimeoutMs = Number.parseInt(\n\t\t\t\tprocess.env.LIOP_INITIAL_DISCOVERY_TIMEOUT_MS ?? \"12000\",\n\t\t\t\t10,\n\t\t\t);\n\t\t\tconst boundedTimeoutMs =\n\t\t\t\tNumber.isFinite(initialTimeoutMs) && initialTimeoutMs > 0\n\t\t\t\t\t? initialTimeoutMs\n\t\t\t\t\t: 12000;\n\n\t\t\tconst deadline = Date.now() + boundedTimeoutMs;\n\t\t\tlet stableCount = 0;\n\t\t\tlet lastCacheSize = -1;\n\n\t\t\twhile (Date.now() < deadline) {\n\t\t\t\tif (this.manifestCache.size >= EXPECTED_PROVIDERS) break;\n\n\t\t\t\tawait Promise.race([\n\t\t\t\t\tthis.refreshManifestCache(true),\n\t\t\t\t\tnew Promise<void>((resolve) => setTimeout(resolve, 3000)),\n\t\t\t\t]).catch(() => {});\n\n\t\t\t\tif (this.manifestCache.size >= EXPECTED_PROVIDERS) break;\n\n\t\t\t\t// Stabilization detection: exit early when provider count plateaus\n\t\t\t\tif (this.manifestCache.size === lastCacheSize) {\n\t\t\t\t\tstableCount++;\n\t\t\t\t\tif (stableCount >= 3 && this.manifestCache.size > 0) {\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Provider count stabilized at ${this.manifestCache.size}/${EXPECTED_PROVIDERS}. Proceeding with available mesh.`,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\t\t\t\t} else {\n\t\t\t\t\tstableCount = 0;\n\t\t\t\t\tlastCacheSize = this.manifestCache.size;\n\t\t\t\t}\n\n\t\t\t\t// Wait before the next iteration to avoid CPU spin\n\t\t\t\tawait new Promise((r) => setTimeout(r, 1000));\n\t\t\t}\n\n\t\t\t// Diagnostic warning for partial mesh availability\n\t\t\tif (this.manifestCache.size < EXPECTED_PROVIDERS) {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] ⚠️ Mesh partially available: ${this.manifestCache.size}/${EXPECTED_PROVIDERS} providers. Some tools may be unavailable. Check Docker containers.`,\n\t\t\t\t);\n\t\t\t\t// Trigger one more background refresh to catch late joiners\n\t\t\t\tthis.refreshManifestCache(true).catch(() => {});\n\t\t\t}\n\t\t}\n\n\t\t// biome-ignore lint/suspicious/noExplicitAny: Tool schema is polymorphic\n\t\tconst tools: any[] = [];\n\t\tconst seenNames = new Set<string>();\n\t\tconst localToolNames = new Set(\n\t\t\tthis.liopServer.listTools().map((t) => t.name),\n\t\t);\n\n\t\tfor (const [peerId, { manifest }] of this.manifestCache.entries()) {\n\t\t\tfor (const tool of manifest.tools) {\n\t\t\t\t// LiopMeshStatus is a local-only diagnostic — skip remote copies\n\t\t\t\tif (tool.name === \"LiopMeshStatus\") continue;\n\n\t\t\t\t// [LIOP-STABILITY] Allow discovery of ALL remote tools.\n\t\t\t\t// MCP Requires unique names per server session.\n\t\t\t\t// In a P2P mesh, multiple nodes might expose the same tool (e.g. LiopMeshStatus).\n\t\t\t\t// We suffix duplicate names with a short peer hash to ensure\n\t\t\t\t// ALL tools from ALL providers are correctly registered and visible.\n\t\t\t\tlet finalName = tool.name;\n\t\t\t\tif (seenNames.has(tool.name) || localToolNames.has(tool.name)) {\n\t\t\t\t\tfinalName = `${tool.name}_${peerId.slice(-4)}`;\n\t\t\t\t}\n\t\t\t\tseenNames.add(finalName);\n\n\t\t\t\tconst providerName = manifest.serverInfo?.name || \"Unknown Provider\";\n\n\t\t\t\t// [SANITIZATION] Create a clean MCP-compliant tool object\n\t\t\t\tconst baseDesc = tool.description || `Remote tool from ${providerName}`;\n\t\t\t\tconst cleanTool: {\n\t\t\t\t\tname: string;\n\t\t\t\t\tdescription: string;\n\t\t\t\t\tinputSchema: Record<string, unknown>;\n\t\t\t\t} = {\n\t\t\t\t\tname: finalName,\n\t\t\t\t\tdescription: mcpCompactToolDescriptions()\n\t\t\t\t\t\t? stripVerboseLiopToolDescription(baseDesc)\n\t\t\t\t\t\t: baseDesc,\n\t\t\t\t\tinputSchema: (tool.inputSchema || {\n\t\t\t\t\t\ttype: \"object\",\n\t\t\t\t\t\tproperties: {},\n\t\t\t\t\t}) as Record<string, unknown>,\n\t\t\t\t};\n\n\t\t\t\t// Ensure inputSchema has the mandatory 'type: object' for MCP compliance\n\t\t\t\tif (\n\t\t\t\t\ttypeof cleanTool.inputSchema === \"object\" &&\n\t\t\t\t\t!cleanTool.inputSchema.type\n\t\t\t\t) {\n\t\t\t\t\tcleanTool.inputSchema.type = \"object\";\n\t\t\t\t}\n\t\t\t\tif (\n\t\t\t\t\ttypeof cleanTool.inputSchema === \"object\" &&\n\t\t\t\t\t!cleanTool.inputSchema.properties\n\t\t\t\t) {\n\t\t\t\t\tcleanTool.inputSchema.properties = {};\n\t\t\t\t}\n\n\t\t\t\tlet blueprint = \"\";\n\t\t\t\tif (manifest.taxonomy) {\n\t\t\t\t\tblueprint = `\\n[LIOP-DOMAIN: ${manifest.taxonomy.domain}]`;\n\t\t\t\t}\n\n\t\t\t\t// LIOP Logic-on-Origin Detection:\n\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: polymorphic input schema\n\t\t\t\tconst properties = (cleanTool.inputSchema.properties || {}) as any;\n\t\t\t\tlet envelopeDoc = \"\";\n\t\t\t\tif (!mcpCompactToolDescriptions() && properties.payload) {\n\t\t\t\t\tenvelopeDoc = `\\n[REQUIRES: LIOP-PROTO-V1 ENVELOPE]`;\n\t\t\t\t}\n\n\t\t\t\t// INDUSTRIAL REPLICATION: Highlight schema adherence blocks\n\t\t\t\tif (\n\t\t\t\t\t!mcpCompactToolDescriptions() &&\n\t\t\t\t\tcleanTool.description.includes(\"STRICT SCHEMA ADHERENCE\")\n\t\t\t\t) {\n\t\t\t\t\tcleanTool.description = cleanTool.description.replace(\n\t\t\t\t\t\t\"STRICT SCHEMA ADHERENCE:\",\n\t\t\t\t\t\t\"[INDUSTRIAL-REQUISITE] STRICT SCHEMA ADHERENCE (MANDATORY):\",\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\tconst originStamp = mcpCompactToolDescriptions()\n\t\t\t\t\t? `\\n(Peer: ${peerId.slice(-8)})${blueprint}`\n\t\t\t\t\t: `\\n(Origin: ${peerId.slice(-8)})${blueprint}${envelopeDoc}`;\n\t\t\t\tcleanTool.description = `${cleanTool.description}${originStamp}`;\n\n\t\t\t\ttools.push(cleanTool);\n\t\t\t}\n\t\t}\n\n\t\treturn tools;\n\t}\n\n\t/**\n\t * Returns all remote resources discovered via the manifest protocol.\n\t */\n\tprivate async getRemoteResources(): Promise<\n\t\tArray<{\n\t\t\tname: string;\n\t\t\turi: string;\n\t\t\tdescription?: string;\n\t\t\tmimeType?: string;\n\t\t}>\n\t> {\n\t\t// Trigger background refresh if not already discovering\n\t\tif (!this.currentDiscovery) {\n\t\t\tthis.refreshManifestCache(true).catch(() => {});\n\t\t}\n\n\t\tconst resources: Array<{\n\t\t\tname: string;\n\t\t\turi: string;\n\t\t\tdescription?: string;\n\t\t\tmimeType?: string;\n\t\t}> = [];\n\t\tconst seenUris = new Set(this.liopServer.listResources().map((r) => r.uri));\n\n\t\tfor (const [peerId, { manifest }] of this.manifestCache.entries()) {\n\t\t\tfor (const resource of manifest.resources) {\n\t\t\t\tif (!seenUris.has(resource.uri)) {\n\t\t\t\t\tconst augmentedResource = { ...resource };\n\t\t\t\t\tconst providerName = manifest.serverInfo?.name || \"Unknown Provider\";\n\n\t\t\t\t\tlet blueprint = \"\";\n\t\t\t\t\tif (manifest.taxonomy) {\n\t\t\t\t\t\tblueprint = `\\n\\n[LIOP Zero-Trust Blueprint]\\nDomain: ${manifest.taxonomy.domain}\\nClearance Tier: ${manifest.taxonomy.clearanceTier}`;\n\t\t\t\t\t\tif (\n\t\t\t\t\t\t\tmanifest.taxonomy.executionTypes &&\n\t\t\t\t\t\t\tmanifest.taxonomy.executionTypes.length > 0\n\t\t\t\t\t\t) {\n\t\t\t\t\t\t\tblueprint += `\\nExecution Types: ${manifest.taxonomy.executionTypes.join(\", \")}`;\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\n\t\t\t\t\tconst originStamp = `\\n\\n[LIOP Zero-Trust Origin]\\nProvider: ${providerName}\\nNetwork ID: ${peerId}${blueprint}`;\n\n\t\t\t\t\t// INDUSTRIAL REPLICATION: Mark schema resources clearly\n\t\t\t\t\tif (augmentedResource.uri.startsWith(\"liop://schema/\")) {\n\t\t\t\t\t\taugmentedResource.name = `[SCHEMA] ${augmentedResource.name}`;\n\t\t\t\t\t\taugmentedResource.description = `[CRITICAL SCHEMA] ${augmentedResource.description || \"Data Dictionary for Zero-Shot Autonomy\"}${originStamp}`;\n\t\t\t\t\t} else {\n\t\t\t\t\t\taugmentedResource.description = augmentedResource.description\n\t\t\t\t\t\t\t? `${augmentedResource.description}${originStamp}`\n\t\t\t\t\t\t\t: originStamp.trim();\n\t\t\t\t\t}\n\n\t\t\t\t\tresources.push(augmentedResource);\n\t\t\t\t\tseenUris.add(resource.uri);\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\treturn resources;\n\t}\n\n\t/**\n\t * Resolves the gRPC target (host:port) AND the peerId for a given tool name\n\t * by searching the manifest cache. Supports exact names and suffixed names.\n\t */\n\tprivate resolveManifestTarget(\n\t\ttoolName: string,\n\t): { peerId: string; originalToolName: string } | null {\n\t\t// 1. Try exact match\n\t\tfor (const [peerId, { manifest }] of this.manifestCache.entries()) {\n\t\t\tconst tool = manifest.tools.find((t) => t.name === toolName);\n\t\t\tif (tool) {\n\t\t\t\treturn {\n\t\t\t\t\tpeerId,\n\t\t\t\t\toriginalToolName: toolName,\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\n\t\t// 2. Try suffixed match (tool_xxxx)\n\t\tconst parts = toolName.split(\"_\");\n\t\tif (parts.length > 1) {\n\t\t\tconst suffix = parts.pop();\n\t\t\tconst baseName = parts.join(\"_\");\n\t\t\tfor (const [peerId, { manifest }] of this.manifestCache.entries()) {\n\t\t\t\tif (peerId.endsWith(suffix || \"\")) {\n\t\t\t\t\tconst tool = manifest.tools.find((t) => t.name === baseName);\n\t\t\t\t\tif (tool) {\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tpeerId,\n\t\t\t\t\t\t\toriginalToolName: baseName,\n\t\t\t\t\t\t};\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\treturn null;\n\t}\n\n\t/**\n\t * Redacts a PeerID for external-facing diagnostics.\n\t * LIOP_DIAGNOSTIC_LEVEL controls verbosity:\n\t *   - \"redacted\" (default): truncated to last 8 chars\n\t *   - \"full\": complete PeerID (development only)\n\t */\n\tprivate redactPeerId(peerId: string): string {\n\t\tconst level = process.env.LIOP_DIAGNOSTIC_LEVEL || \"redacted\";\n\t\tif (level === \"full\") return peerId;\n\t\treturn `***${peerId.slice(-8)}`;\n\t}\n\n\t// biome-ignore lint/suspicious/noExplicitAny: MCP JSON-RPC params/id are polymorphic\n\tprivate async transcodeMcpToLiop(id: any, params: any): Promise<any> {\n\t\tconst toolName = params.name;\n\n\t\t// Intercept the static diagnostic tool\n\t\tif (toolName === \"LiopMeshStatus\") {\n\t\t\t// [INDUSTRIAL-FIX] Proactive warm-up: request a refresh when status is called.\n\t\t\t// This ensures that even if the DHT was cold, the next status call (or tools/list)\n\t\t\t// will have data.\n\t\t\tthis.refreshManifestCache(true).catch(() => {});\n\n\t\t\t// biome-ignore lint/suspicious/noExplicitAny: private stats for telemetry\n\t\t\tconst stats = (this as any)._discoveryStats || {\n\t\t\t\tcandidates: 0,\n\t\t\t\tsuccess: 0,\n\t\t\t\tfailures: 0,\n\t\t\t};\n\t\t\tconst providerCount = this.manifestCache.size;\n\t\t\tconst meshState = this.meshNode ? \"Active\" : \"Offline\";\n\t\t\tconst cachedTools = Array.from(this.manifestCache.values()).reduce(\n\t\t\t\t(acc, { manifest }) => acc + manifest.tools.length,\n\t\t\t\t0,\n\t\t\t);\n\t\t\tconst connections = this.meshNode\n\t\t\t\t? // biome-ignore lint/suspicious/noExplicitAny: access internal nodes\n\t\t\t\t\t(this.meshNode as any).node?.getConnections().length\n\t\t\t\t: 0;\n\n\t\t\tconst bootstrapNodes: string[] =\n\t\t\t\tthis.meshNode &&\n\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: access internal config\n\t\t\t\t(this.meshNode as any).config?.bootstrapNodes\n\t\t\t\t\t? // biome-ignore lint/suspicious/noExplicitAny: access internal config\n\t\t\t\t\t\t(this.meshNode as any).config.bootstrapNodes\n\t\t\t\t\t: [];\n\t\t\tconst bootstrapCount = bootstrapNodes.length;\n\n\t\t\tconst diagLevel = process.env.LIOP_DIAGNOSTIC_LEVEL || \"redacted\";\n\t\t\tconst showBootstraps = diagLevel !== \"minimal\";\n\n\t\t\tconst bootstrapList = showBootstraps\n\t\t\t\t? bootstrapNodes\n\t\t\t\t\t\t.map((addr) => {\n\t\t\t\t\t\t\tconst parts = addr.split(\"/\");\n\t\t\t\t\t\t\tconst id = parts[parts.length - 1];\n\t\t\t\t\t\t\treturn `  • ${id ? id.slice(-8) : \"Unknown\"} (bootstrap)`;\n\t\t\t\t\t\t})\n\t\t\t\t\t\t.join(\"\\n\")\n\t\t\t\t: \"\";\n\n\t\t\tconst routingTableSize = this.meshNode\n\t\t\t\t? // biome-ignore lint/suspicious/noExplicitAny: access internal nodes\n\t\t\t\t\t(this.meshNode as any).getRoutingTableSize()\n\t\t\t\t: 0;\n\n\t\t\tconst rawPeerId = this.meshNode?.getPeerId() || \"Offline\";\n\t\t\tconst localPeerId =\n\t\t\t\trawPeerId === \"Offline\" ? rawPeerId : this.redactPeerId(rawPeerId);\n\n\t\t\tconst cachedToolList = Array.from(this.manifestCache.entries())\n\t\t\t\t.flatMap(([peerId, { manifest }]) =>\n\t\t\t\t\tmanifest.tools.map(\n\t\t\t\t\t\t(t) => `  • ${t.name} (from origin: ${this.redactPeerId(peerId)})`,\n\t\t\t\t\t),\n\t\t\t\t)\n\t\t\t\t.join(\"\\n\");\n\n\t\t\tconst statusText = [\n\t\t\t\t`LIOP Mesh Status: ${meshState === \"Active\" ? \"Active\" : \"Offline\"}`,\n\t\t\t\t`Local Agent Identity: ${localPeerId}`,\n\t\t\t\t`Network: ${connections} Conns | ${routingTableSize} Mesh Nodes | ${bootstrapCount} Bootstraps`,\n\t\t\t\tshowBootstraps && bootstrapCount > 0\n\t\t\t\t\t? `\\nActive Bootstraps:\\n${bootstrapList}\\n`\n\t\t\t\t\t: \"\",\n\t\t\t\t`Discovery: ${stats.candidates} Candidates | ${stats.success} OK | ${stats.failures} FAIL`,\n\t\t\t\t`Tooling: ${providerCount} Providers | ${cachedTools} Total Remote Tools`,\n\t\t\t\tcachedTools > 0\n\t\t\t\t\t? `\\nDiscovered Remote Tools (Zero-Trust Origins):\\n${cachedToolList}`\n\t\t\t\t\t: \"\\nNo remote tools discovered yet.\",\n\t\t\t\t// [Token Economy] Telemetry block (only appears when operations exist)\n\t\t\t\tTokenTelemetryEngine.getInstance().formatStatusBlock(),\n\t\t\t]\n\t\t\t\t.filter((line) => line !== \"\")\n\t\t\t\t.join(\"\\n\");\n\n\t\t\t// [Token Economy] Record diagnostic output telemetry\n\t\t\tconst diagTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\tdiagTelemetry.record({\n\t\t\t\ttype: \"diagnostic\",\n\t\t\t\tmethod: \"tools/call\",\n\t\t\t\ttoolName: \"LiopMeshStatus\",\n\t\t\t\testimatedInputTokens: 0,\n\t\t\t\testimatedOutputTokens: diagTelemetry.countTokens(statusText),\n\t\t\t});\n\n\t\t\treturn {\n\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\tid,\n\t\t\t\tresult: {\n\t\t\t\t\tcontent: [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\ttext: statusText,\n\t\t\t\t\t\t},\n\t\t\t\t\t],\n\t\t\t\t},\n\t\t\t};\n\t\t}\n\n\t\tconst isLocal = this.liopServer\n\t\t\t.listTools()\n\t\t\t.some((t) => t.name === toolName);\n\n\t\tif (!isLocal && this.meshNode) {\n\t\t\t// Phase 1: Cache-first — resolve directly from cached manifests (zero-latency)\n\t\t\t// Per MCP spec, tools don't change between notifications/tools/list_changed.\n\t\t\tlet target = this.resolveManifestTarget(toolName);\n\n\t\t\t// Phase 2: If not cached, trigger DHT refresh and retry\n\t\t\tif (!target) {\n\t\t\t\tawait this.refreshManifestCache();\n\t\t\t\ttarget = this.resolveManifestTarget(toolName);\n\t\t\t}\n\n\t\t\tif (target) {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] Resolved ${toolName} via manifest cache (Peer: ${target.peerId}, Original: ${target.originalToolName})`,\n\t\t\t\t);\n\t\t\t\treturn this.routeToRemoteProvider(\n\t\t\t\t\tid,\n\t\t\t\t\ttarget.originalToolName,\n\t\t\t\t\ttarget.peerId,\n\t\t\t\t\tparams,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\t// Phase 2: Try DHT-based dynamic provider discovery (fallback for unsuffixed names)\n\t\t\tlet providers: string[] = [];\n\t\t\tfor (let i = 0; i < 3; i++) {\n\t\t\t\tproviders = await this.meshNode.findProviders(toolName);\n\t\t\t\tif (providers.length > 0) break;\n\t\t\t\tif (i < 2) await new Promise((r) => setTimeout(r, 1000));\n\t\t\t}\n\n\t\t\tif (providers.length > 0) {\n\t\t\t\treturn this.routeToRemoteProvider(id, toolName, providers[0], params);\n\t\t\t}\n\t\t}\n\n\t\t// If no remote provider found, try local execution\n\t\tif (isLocal) {\n\t\t\ttry {\n\t\t\t\tconst localStartTime = Date.now();\n\t\t\t\tconst result = await this.liopServer.callTool({\n\t\t\t\t\tname: toolName,\n\t\t\t\t\targuments: params.arguments || {},\n\t\t\t\t});\n\n\t\t\t\t// [Token Economy] Record local tool call telemetry\n\t\t\t\tconst localTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\tconst localInputPayload = JSON.stringify(params.arguments || {});\n\t\t\t\tconst localOutputPayload = JSON.stringify(result);\n\t\t\t\tlocalTelemetry.record({\n\t\t\t\t\ttype: \"tool_call\",\n\t\t\t\t\tmethod: \"tools/call\",\n\t\t\t\t\ttoolName,\n\t\t\t\t\testimatedInputTokens: localTelemetry.countTokens(localInputPayload),\n\t\t\t\t\testimatedOutputTokens: localTelemetry.countTokens(localOutputPayload),\n\t\t\t\t\tdurationMs: Date.now() - localStartTime,\n\t\t\t\t});\n\n\t\t\t\treturn { jsonrpc: \"2.0\", id, result };\n\t\t\t} catch (err: unknown) {\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\terror: {\n\t\t\t\t\t\tcode: -32000,\n\t\t\t\t\t\tmessage: err instanceof Error ? err.message : String(err),\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\n\t\treturn {\n\t\t\tjsonrpc: \"2.0\",\n\t\t\tid,\n\t\t\terror: {\n\t\t\t\tcode: -32002,\n\t\t\t\tmessage: `No provider found for tool: ${toolName}. Ensure the provider node is active and connected to the mesh.`,\n\t\t\t},\n\t\t};\n\t}\n\n\tprivate async routeToRemoteProvider(\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t\tid: any,\n\t\ttoolName: string,\n\t\tpeerId: string,\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t\tparams: any,\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t): Promise<any> {\n\t\tif (!this.meshNode)\n\t\t\treturn {\n\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\tid,\n\t\t\t\terror: { code: -32603, message: \"Mesh Node inactive\" },\n\t\t\t};\n\n\t\t// Dynamic gRPC port resolution from manifest cache\n\t\tlet manifestEntry = this.manifestCache.get(peerId);\n\t\tlet grpcPort = this.defaultRpcPort;\n\n\t\tif (manifestEntry) {\n\t\t\tgrpcPort = manifestEntry.manifest.grpcPort;\n\t\t} else {\n\t\t\t// Try to query the manifest directly\n\t\t\tconst manifest = await this.meshNode.queryManifest(peerId);\n\t\t\tif (manifest) {\n\t\t\t\tgrpcPort = manifest.grpcPort;\n\t\t\t\tthis.manifestCache.set(peerId, {\n\t\t\t\t\tmanifest,\n\t\t\t\t\tcachedAt: Date.now(),\n\t\t\t\t});\n\t\t\t\tmanifestEntry = this.manifestCache.get(peerId);\n\t\t\t}\n\t\t}\n\n\t\t// Host-mode convenience (opt-in):\n\t\t// Some Docker Desktop setups publish gRPC ports on the host as 13011/13021/13031.\n\t\t// Inside Docker networks we must keep the manifest-advertised container port.\n\t\tif (manifestEntry && process.env.LIOP_USE_PUBLISHED_GRPC_PORTS === \"1\") {\n\t\t\tconst providerName =\n\t\t\t\tmanifestEntry.manifest.serverInfo?.name?.toLowerCase() || \"\";\n\t\t\tif (providerName.includes(\"vault\")) grpcPort = 13011;\n\t\t\telse if (providerName.includes(\"bank\")) grpcPort = 13021;\n\t\t\telse if (providerName.includes(\"oracle\")) grpcPort = 13031;\n\t\t}\n\n\t\t// Resolve IP from active connections\n\t\tconst addrs = await this.meshNode.resolvePeer(peerId);\n\t\tlet targetAddr: string | null = null;\n\n\t\t// [LIOP-ALPHA] Check if the peer is running on the same physical machine\n\t\t// by comparing its advertised IPs against our local OS interfaces.\n\t\tconst os = await import(\"node:os\");\n\t\tconst localInterfaces = Object.values(os.networkInterfaces())\n\t\t\t.flat()\n\t\t\t.filter((i) => i?.family === \"IPv4\")\n\t\t\t.map((i) => i?.address);\n\n\t\t// Loop through all advertised addresses to find the optimal target\n\t\tfor (const addr of addrs) {\n\t\t\tconst parts = addr.split(\"/\");\n\t\t\tconst ipIdx = parts.indexOf(\"ip4\");\n\t\t\tif (ipIdx !== -1) {\n\t\t\t\tconst advertisedIp = parts[ipIdx + 1];\n\n\t\t\t\t// Loopback priority or Same-Machine detection\n\t\t\t\tif (\n\t\t\t\t\tadvertisedIp === \"127.0.0.1\" ||\n\t\t\t\t\tlocalInterfaces.includes(advertisedIp)\n\t\t\t\t) {\n\t\t\t\t\ttargetAddr = `127.0.0.1:${grpcPort}`;\n\t\t\t\t\tbreak; // Supreme priority for local execution\n\t\t\t\t}\n\n\t\t\t\t// Default to first discovered valid external IP\n\t\t\t\tif (!targetAddr) {\n\t\t\t\t\ttargetAddr = `${advertisedIp}:${grpcPort}`;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tif (!targetAddr) {\n\t\t\t// Fallback to localhost with the dynamically resolved port\n\t\t\ttargetAddr = `127.0.0.1:${grpcPort}`;\n\t\t}\n\n\t\tlog.info(\n\t\t\t`[LIOP-Router] Dynamic route: ${toolName} -> ${targetAddr} (PeerID: ${peerId})`,\n\t\t);\n\n\t\tconst remoteClient = new liopV1.LogicMesh(\n\t\t\ttargetAddr,\n\t\t\tcreateChannelCredentials(),\n\t\t);\n\t\treturn this.performTranscoding(id, remoteClient, toolName, params, peerId);\n\t}\n\n\tprivate async performTranscoding(\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t\tid: any,\n\t\t// biome-ignore lint/suspicious/noExplicitAny: gRPC client from dynamic proto-loader\n\t\tclient: any,\n\t\ttoolName: string,\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t\tparams: any,\n\t\tpeerId?: string,\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t): Promise<any> {\n\t\tconst capabilityHash = toolName;\n\t\tconst proofOfIntent = this.meshNode\n\t\t\t? await this.meshNode.sign(Buffer.from(capabilityHash))\n\t\t\t: Buffer.from([]);\n\n\t\tconst transcodingStartTime = Date.now();\n\n\t\treturn new Promise((resolve) => {\n\t\t\tclient.negotiateIntent(\n\t\t\t\t{\n\t\t\t\t\tagent_did: `did:liop:${this.meshNode?.getPeerId() || \"mcp-proxy\"}`,\n\t\t\t\t\tcapability_hash: capabilityHash,\n\t\t\t\t\tproof_of_intent: proofOfIntent,\n\t\t\t\t},\n\t\t\t\tasync (err: Error | null, response: IntentResponse) => {\n\t\t\t\t\tif (err || !response.accepted) {\n\t\t\t\t\t\treturn resolve({\n\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\tresult: {\n\t\t\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\t\t\t\ttext: `PQC Handshake Failed: ${err?.message || \"Rejected\"}`,\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\tisError: true,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t});\n\t\t\t\t\t}\n\n\t\t\t\t\tconst { ciphertext, sharedSecret } =\n\t\t\t\t\t\tawait Kyber768Wrapper.encapsulateAsymmetric(\n\t\t\t\t\t\t\tresponse.kyber_public_key,\n\t\t\t\t\t\t);\n\t\t\t\t\t// SECURITY: Avoid AES-GCM nonce reuse across multiple ciphertexts.\n\t\t\t\t\t// We embed arguments directly into the proxy logic so we only encrypt ONE payload per session/nonce.\n\t\t\t\t\tconst embeddedArgsJson = JSON.stringify(params.arguments || {});\n\t\t\t\t\tconst proxyLogic = `return { \"__liop_proxy_tool\": \"${toolName}\", \"__liop_proxy_args\": ${embeddedArgsJson} };`;\n\t\t\t\t\tconst nonce = crypto.randomBytes(12);\n\n\t\t\t\t\tconst sealedLogic = this.encryptWithNonce(\n\t\t\t\t\t\tBuffer.from(proxyLogic),\n\t\t\t\t\t\tsharedSecret,\n\t\t\t\t\t\tnonce,\n\t\t\t\t\t);\n\n\t\t\t\t\tconst call = client.executeLogic({\n\t\t\t\t\t\tsession_token: response.session_token,\n\t\t\t\t\t\twasm_binary: new Uint8Array(sealedLogic),\n\t\t\t\t\t\tinputs: {},\n\t\t\t\t\t\tpqc_ciphertext: ciphertext,\n\t\t\t\t\t\taes_nonce: nonce,\n\t\t\t\t\t});\n\n\t\t\t\t\tlet resultBody = \"\";\n\t\t\t\t\tlet lastResponse: LogicResponse | null = null;\n\t\t\t\t\tcall.on(\"data\", (grpcRes: LogicResponse) => {\n\t\t\t\t\t\tresultBody += grpcRes.semantic_evidence;\n\t\t\t\t\t\tlastResponse = grpcRes;\n\t\t\t\t\t});\n\t\t\t\t\tcall.on(\"end\", async () => {\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tif (lastResponse) {\n\t\t\t\t\t\t\t\tconst isValid = await this.verifier.verifyZkReceipt(\n\t\t\t\t\t\t\t\t\tBuffer.from(proxyLogic),\n\t\t\t\t\t\t\t\t\tBuffer.from(lastResponse.cryptographic_proof).toString(\"hex\"),\n\t\t\t\t\t\t\t\t\tBuffer.from(lastResponse.zk_receipt),\n\t\t\t\t\t\t\t\t);\n\n\t\t\t\t\t\t\t\tif (!isValid) {\n\t\t\t\t\t\t\t\t\treturn resolve({\n\t\t\t\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\t\t\tresult: {\n\t\t\t\t\t\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\t\t\t\t\t\t\ttext: \"SECURITY ALERT: Remote response failed cryptographic integrity audit.\",\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\t\t\t\tisError: true,\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\n\t\t\t\t\t\t\tconst parsedResult = JSON.parse(resultBody);\n\n\t\t\t\t\t\t\t// [Token Economy] Record remote tool call telemetry\n\t\t\t\t\t\t\tconst remoteTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\t\t\t\tremoteTelemetry.record({\n\t\t\t\t\t\t\t\ttype: \"tool_call\",\n\t\t\t\t\t\t\t\tmethod: \"tools/call\",\n\t\t\t\t\t\t\t\ttoolName,\n\t\t\t\t\t\t\t\tpeerId,\n\t\t\t\t\t\t\t\testimatedInputTokens:\n\t\t\t\t\t\t\t\t\tremoteTelemetry.countTokens(embeddedArgsJson),\n\t\t\t\t\t\t\t\testimatedOutputTokens: remoteTelemetry.countTokens(resultBody),\n\t\t\t\t\t\t\t\tdurationMs: Date.now() - transcodingStartTime,\n\t\t\t\t\t\t\t});\n\n\t\t\t\t\t\t\tresolve({ jsonrpc: \"2.0\", id, result: parsedResult });\n\t\t\t\t\t\t} catch (_e) {\n\t\t\t\t\t\t\tresolve({\n\t\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\tresult: { content: [{ type: \"text\", text: resultBody }] },\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t}\n\t\t\t\t\t});\n\t\t\t\t\tcall.on(\"error\", (e: Error) =>\n\t\t\t\t\t\tresolve({\n\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\tresult: {\n\t\t\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t\t\t{ type: \"text\", text: `LIOP gRPC Error: ${e.message}` },\n\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\tisError: true,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t\t},\n\t\t\t);\n\t\t});\n\t}\n\n\tprivate encryptWithNonce(\n\t\tpayload: Buffer,\n\t\tkey: Uint8Array,\n\t\tnonce: Buffer,\n\t): Buffer {\n\t\tconst cipher = crypto.createCipheriv(\"aes-256-gcm\", key, nonce);\n\t\tconst encrypted = Buffer.concat([cipher.update(payload), cipher.final()]);\n\t\treturn Buffer.concat([encrypted, cipher.getAuthTag()]);\n\t}\n}\n"]}

package/dist/chunk-ANFXJGMP.js

@@ -0,0 +1,2 @@
+import e from'crypto';var i=/^\s*@LIOP\{[^}]+\}\n?([\s\S]*?)\n?@END\s*$/;function f(t){let r=t.match(i);return r?.[1]!==void 0?r[1].trim():t.trim()}function c(t){if(t[0]===0&&t[1]===97)return e.createHash("sha256").update(t).digest();let n=Buffer.from(t).toString("utf-8"),s=f(n);return e.createHash("sha256").update(Buffer.from(s,"utf-8")).digest()}export{f as a,c as b};//# sourceMappingURL=chunk-ANFXJGMP.js.map
+//# sourceMappingURL=chunk-ANFXJGMP.js.map

package/dist/chunk-ANFXJGMP.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/crypto/logic-image-id.ts"],"names":["TOP_LEVEL_ENVELOPE","normalizeLogicSource","logicUtf8","match","deriveLogicImageDigest","logicPayload","crypto","text","normalized"],"mappings":"sBAOA,IAAMA,CAAAA,CAAqB,4CAAA,CAEpB,SAASC,CAAAA,CAAqBC,CAAAA,CAA2B,CAC/D,IAAMC,EAAQD,CAAAA,CAAU,KAAA,CAAMF,CAAkB,CAAA,CAChD,OAAIG,CAAAA,GAAQ,CAAC,CAAA,GAAM,MAAA,CACXA,EAAM,CAAC,CAAA,CAAE,IAAA,EAAK,CAEfD,EAAU,IAAA,EAClB,CAGO,SAASE,EAAuBC,CAAAA,CAAkC,CAExE,GADeA,CAAAA,CAAa,CAAC,IAAM,CAAA,EAAQA,CAAAA,CAAa,CAAC,CAAA,GAAM,GAE9D,OAAOC,CAAAA,CAAO,UAAA,CAAW,QAAQ,EAAE,MAAA,CAAOD,CAAY,CAAA,CAAE,MAAA,GAEzD,IAAME,CAAAA,CAAO,MAAA,CAAO,IAAA,CAAKF,CAAY,CAAA,CAAE,QAAA,CAAS,OAAO,CAAA,CACjDG,EAAaP,CAAAA,CAAqBM,CAAI,CAAA,CAC5C,OAAOD,EACL,UAAA,CAAW,QAAQ,CAAA,CACnB,MAAA,CAAO,OAAO,IAAA,CAAKE,CAAAA,CAAY,OAAO,CAAC,CAAA,CACvC,QACH","file":"chunk-ANFXJGMP.js","sourcesContent":["import crypto from \"node:crypto\";\n\n/**\n * Top-level LIOP v1 envelope only. Must NOT use multiline (^/$) mode:\n * proxy logic embeds a full envelope inside JSON strings; `^` per line would\n * incorrectly treat that as the document root and desync ImageID vs the worker.\n */\nconst TOP_LEVEL_ENVELOPE = /^\\s*@LIOP\\{[^}]+\\}\\n?([\\s\\S]*?)\\n?@END\\s*$/;\n\nexport function normalizeLogicSource(logicUtf8: string): string {\n\tconst match = logicUtf8.match(TOP_LEVEL_ENVELOPE);\n\tif (match?.[1] !== undefined) {\n\t\treturn match[1].trim();\n\t}\n\treturn logicUtf8.trim();\n}\n\n/** SHA-256 digest of logic bytes (WASM raw; JS UTF-8 after top-level envelope strip). */\nexport function deriveLogicImageDigest(logicPayload: Uint8Array): Buffer {\n\tconst isWasm = logicPayload[0] === 0x00 && logicPayload[1] === 0x61;\n\tif (isWasm) {\n\t\treturn crypto.createHash(\"sha256\").update(logicPayload).digest();\n\t}\n\tconst text = Buffer.from(logicPayload).toString(\"utf-8\");\n\tconst normalized = normalizeLogicSource(text);\n\treturn crypto\n\t\t.createHash(\"sha256\")\n\t\t.update(Buffer.from(normalized, \"utf-8\"))\n\t\t.digest();\n}\n"]}

package/dist/chunk-DBXGYHKY.js

@@ -0,0 +1,2 @@
+import {createMlKem768}from'mlkem';var a=null;async function n(){return a||(a=await createMlKem768()),a}var m={importPublicKey(e){if(e.length!==1184)throw new Error(`Kyber768 Public Key must be exactly 1184 bytes (Received: ${e.length})`);return e},async encapsulateAsymmetric(e){try{if(e.length!==1184)throw new Error("Kyber768 Public Key must be exactly 1184 bytes.");let r=await n(),[t,c]=r.encap(e);return {ciphertext:t,sharedSecret:c}}catch(r){throw new Error(`Failed to perform PQC encapsulation: ${r.message}`)}},async generateKeyPair(){let e=await n(),[r,t]=e.generateKeyPair();return {publicKey:r,secretKey:t}},async decapsulateSymmetric(e,r){return (await n()).decap(e,r)}};export{m as a};//# sourceMappingURL=chunk-DBXGYHKY.js.map
+//# sourceMappingURL=chunk-DBXGYHKY.js.map

package/dist/chunk-DBXGYHKY.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/rpc/crypto/kyber.ts"],"names":["kemInstance","getKemInstance","createMlKem768","Kyber768Wrapper","buffer","publicKey","kem","ct","ss","error","pk","sk","ciphertext","secretKey"],"mappings":"mCAcA,IAAIA,CAAAA,CAAiE,IAAA,CAErE,eAAeC,CAAAA,EAAiB,CAC/B,OAAKD,CAAAA,GACJA,CAAAA,CAAc,MAAME,cAAAA,EAAe,CAAA,CAE7BF,CACR,CAEO,IAAMG,CAAAA,CAAkB,CAK9B,eAAA,CAAgBC,CAAAA,CAAgC,CAC/C,GAAIA,CAAAA,CAAO,MAAA,GAAW,IAAA,CACrB,MAAM,IAAI,KAAA,CACT,CAAA,0DAAA,EAA6DA,CAAAA,CAAO,MAAM,CAAA,CAAA,CAC3E,CAAA,CAED,OAAOA,CACR,CAAA,CAMA,MAAM,qBAAA,CAAsBC,CAAAA,CAGzB,CACF,GAAI,CACH,GAAIA,CAAAA,CAAU,MAAA,GAAW,IAAA,CACxB,MAAM,IAAI,KAAA,CAAM,iDAAiD,CAAA,CAGlE,IAAMC,CAAAA,CAAM,MAAML,CAAAA,EAAe,CAC3B,CAACM,CAAAA,CAAIC,CAAE,EAAIF,CAAAA,CAAI,KAAA,CAAMD,CAAS,CAAA,CAEpC,OAAO,CACN,UAAA,CAAYE,CAAAA,CACZ,YAAA,CAAcC,CACf,CACD,CAAA,MAASC,CAAAA,CAAO,CACf,MAAM,IAAI,KAAA,CACT,CAAA,qCAAA,EAAyCA,CAAAA,CAAgB,OAAO,CAAA,CACjE,CACD,CACD,CAAA,CAKA,MAAM,eAAA,EAGH,CACF,IAAMH,CAAAA,CAAM,MAAML,CAAAA,EAAe,CAC3B,CAACS,CAAAA,CAAIC,CAAE,CAAA,CAAIL,CAAAA,CAAI,eAAA,EAAgB,CACrC,OAAO,CACN,SAAA,CAAWI,CAAAA,CACX,SAAA,CAAWC,CACZ,CACD,CAAA,CAMA,MAAM,oBAAA,CACLC,CAAAA,CACAC,CAAAA,CACsB,CAEtB,OAAA,CADY,MAAMZ,CAAAA,EAAe,EACtB,KAAA,CAAMW,CAAAA,CAAYC,CAAS,CACvC,CACD","file":"chunk-DBXGYHKY.js","sourcesContent":["import { createMlKem768 } from \"mlkem\";\n\n/**\n * LIOP Post-Quantum Cryptography Wrapper\n * Implements ML-KEM-768 (NIST FIPS 203) for Zero-Trust secure key encapsulation\n * directly compatible with `pqcrypto-kyber` on the Mesh-Node Backend.\n *\n * Uses the `mlkem` package which provides:\n * - FIPS 203 compliance (ML-KEM standard)\n * - Constant-time validation (KyberSlash patched)\n * - ~3.5x performance improvement over legacy crystals-kyber\n */\n\n/** Lazy-initialized singleton for the ML-KEM-768 engine */\nlet kemInstance: Awaited<ReturnType<typeof createMlKem768>> | null = null;\n\nasync function getKemInstance() {\n\tif (!kemInstance) {\n\t\tkemInstance = await createMlKem768();\n\t}\n\treturn kemInstance;\n}\n\nexport const Kyber768Wrapper = {\n\t/**\n\t * Extracts and validates the 1184-byte Public Key from the Rust LIOP Data Node\n\t * @param buffer Raw buffer sent via gRPC IntentResponse\n\t */\n\timportPublicKey(buffer: Uint8Array): Uint8Array {\n\t\tif (buffer.length !== 1184) {\n\t\t\tthrow new Error(\n\t\t\t\t`Kyber768 Public Key must be exactly 1184 bytes (Received: ${buffer.length})`,\n\t\t\t);\n\t\t}\n\t\treturn buffer;\n\t},\n\n\t/**\n\t * Encapsulates a shared secret using the server's public key.\n\t * Returns the 1088-byte ciphertext to be sent back, and the 32-byte shared AES secret.\n\t */\n\tasync encapsulateAsymmetric(publicKey: Uint8Array): Promise<{\n\t\tciphertext: Uint8Array;\n\t\tsharedSecret: Uint8Array;\n\t}> {\n\t\ttry {\n\t\t\tif (publicKey.length !== 1184) {\n\t\t\t\tthrow new Error(\"Kyber768 Public Key must be exactly 1184 bytes.\");\n\t\t\t}\n\n\t\t\tconst kem = await getKemInstance();\n\t\t\tconst [ct, ss] = kem.encap(publicKey);\n\n\t\t\treturn {\n\t\t\t\tciphertext: ct,\n\t\t\t\tsharedSecret: ss,\n\t\t\t};\n\t\t} catch (error) {\n\t\t\tthrow new Error(\n\t\t\t\t`Failed to perform PQC encapsulation: ${(error as Error).message}`,\n\t\t\t);\n\t\t}\n\t},\n\n\t/**\n\t * Generates a Kyber768 KeyPair for the server to accept intents.\n\t */\n\tasync generateKeyPair(): Promise<{\n\t\tpublicKey: Uint8Array;\n\t\tsecretKey: Uint8Array;\n\t}> {\n\t\tconst kem = await getKemInstance();\n\t\tconst [pk, sk] = kem.generateKeyPair();\n\t\treturn {\n\t\t\tpublicKey: pk,\n\t\t\tsecretKey: sk,\n\t\t};\n\t},\n\n\t/**\n\t * Decapsulates the shared secret using the server's secret key.\n\t * Zero-fills the shared secret buffer after extraction for side-channel protection.\n\t */\n\tasync decapsulateSymmetric(\n\t\tciphertext: Uint8Array,\n\t\tsecretKey: Uint8Array,\n\t): Promise<Uint8Array> {\n\t\tconst kem = await getKemInstance();\n\t\treturn kem.decap(ciphertext, secretKey);\n\t},\n};\n"]}

package/dist/chunk-HM77MWB6.js

@@ -0,0 +1,2 @@
+import {a}from'./chunk-S6RJHZV2.js';import n from'path';import {fileURLToPath}from'url';import*as r from'@grpc/grpc-js';import*as d from'@grpc/proto-loader';import*as t from'fs';var m=fileURLToPath(import.meta.url),s=n.dirname(m),u=[n.resolve(s,"./protocol/liop_core.proto"),n.resolve(s,"../protocol/liop_core.proto")],g=n.resolve(s,"../../../../protocol/proto/liop_core.proto"),p=u.find(e=>t.existsSync(e))||g;t.existsSync(p)||a.error(`[LIOP-Proto] CRITICAL: Proto file not found at ${p}`);var S=d.loadSync(p,{keepCase:true,longs:String,enums:String,defaults:true,oneofs:true}),y=r.loadPackageDefinition(S),_=y.liop.v1;function x(e){if(!e?.certChain||!e?.privateKey)return r.ServerCredentials.createInsecure();try{let o=e.rootCert?t.readFileSync(e.rootCert):null,c=t.readFileSync(e.certChain),a=t.readFileSync(e.privateKey);return r.ServerCredentials.createSsl(o,[{cert_chain:c,private_key:a}])}catch(o){return a.info(`[LIOP-TLS] Failed to load certificates, falling back to insecure: ${o}`),r.ServerCredentials.createInsecure()}}function K(e){if(!e?.rootCert)return r.credentials.createInsecure();try{let o=t.readFileSync(e.rootCert),c=e.certChain?t.readFileSync(e.certChain):void 0,a=e.privateKey?t.readFileSync(e.privateKey):void 0;return r.credentials.createSsl(o,a,c)}catch(o){return a.info(`[LIOP-TLS] Failed to load certificates, falling back to insecure: ${o}`),r.credentials.createInsecure()}}export{_ as a,x as b,K as c};//# sourceMappingURL=chunk-HM77MWB6.js.map
+//# sourceMappingURL=chunk-HM77MWB6.js.map

package/dist/chunk-HM77MWB6.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/rpc/proto.ts","../src/rpc/tls.ts"],"names":["__filename","fileURLToPath","__dirname","path","PROD_PATHS","DEV_PROTO_PATH","PROTO_PATH","p","l","log","packageDefinition","liopProto","f","liopV1","createServerCredentials","tls","rootCert","certChain","privateKey","error","createChannelCredentials"],"mappings":"kLAKA,IAAMA,CAAAA,CAAaC,aAAAA,CAAc,YAAY,GAAG,CAAA,CAC1CC,CAAAA,CAAYC,CAAAA,CAAK,OAAA,CAAQH,CAAU,EAMnCI,CAAAA,CAAa,CAClBD,EAAK,OAAA,CAAQD,CAAAA,CAAW,4BAA4B,CAAA,CACpDC,CAAAA,CAAK,OAAA,CAAQD,CAAAA,CAAW,6BAA6B,CACtD,EAEMG,CAAAA,CAAiBF,CAAAA,CAAK,OAAA,CAC3BD,CAAAA,CACA,4CACD,CAAA,CAGMI,EAAaF,CAAAA,CAAW,IAAA,CAAMG,CAAAA,EAASC,CAAA,CAAA,UAAA,CAAWD,CAAC,CAAC,GAAKF,CAAAA,CAEvDG,CAAA,CAAA,UAAA,CAAWF,CAAU,CAAA,EAC5BG,CAAAA,CAAI,MAAM,CAAA,+CAAA,EAAkDH,CAAU,CAAA,CAAE,CAAA,CAOzE,IAAMI,CAAAA,CAAgC,WAASJ,CAAAA,CAAY,CAC1D,QAAA,CAAU,IAAA,CACV,KAAA,CAAO,MAAA,CACP,MAAO,MAAA,CACP,QAAA,CAAU,IAAA,CACV,MAAA,CAAQ,IACT,CAAC,EAGYK,CAAAA,CAAiBC,CAAA,CAAA,qBAAA,CAAsBF,CAAiB,CAAA,CACxDG,CAAAA,CAASF,CAAAA,CAAU,KAAK,GClB9B,SAASG,CAAAA,CACfC,CAAAA,CACyB,CACzB,GAAI,CAACA,GAAK,SAAA,EAAa,CAACA,CAAAA,EAAK,UAAA,CAC5B,OAAY,CAAA,CAAA,iBAAA,CAAkB,gBAAe,CAG9C,GAAI,CACH,IAAMC,CAAAA,CAAWD,EAAI,QAAA,CAAc,CAAA,CAAA,YAAA,CAAaA,CAAAA,CAAI,QAAQ,CAAA,CAAI,IAAA,CAC1DE,EAAe,CAAA,CAAA,YAAA,CAAaF,CAAAA,CAAI,SAAS,CAAA,CACzCG,CAAAA,CAAgB,CAAA,CAAA,YAAA,CAAaH,EAAI,UAAU,CAAA,CAEjD,OAAY,CAAA,CAAA,iBAAA,CAAkB,SAAA,CAAUC,CAAAA,CAAU,CACjD,CAAE,UAAA,CAAYC,EAAW,WAAA,CAAaC,CAAW,CAClD,CAAC,CACF,CAAA,MAASC,CAAAA,CAAO,CACf,OAAAV,EAAI,IAAA,CACH,CAAA,kEAAA,EAAqEU,CAAK,CAAA,CAC3E,CAAA,CACY,CAAA,CAAA,iBAAA,CAAkB,gBAC/B,CACD,CAMO,SAASC,CAAAA,CACfL,CAAAA,CAC0B,CAC1B,GAAI,CAACA,GAAK,QAAA,CACT,OAAY,cAAY,cAAA,EAAe,CAGxC,GAAI,CACH,IAAMC,CAAAA,CAAc,eAAaD,CAAAA,CAAI,QAAQ,CAAA,CACvCE,CAAAA,CAAYF,CAAAA,CAAI,SAAA,CAChB,eAAaA,CAAAA,CAAI,SAAS,CAAA,CAC7B,KAAA,CAAA,CACGG,CAAAA,CAAaH,CAAAA,CAAI,WACjB,CAAA,CAAA,YAAA,CAAaA,CAAAA,CAAI,UAAU,CAAA,CAC9B,KAAA,CAAA,CAEH,OAAY,cAAY,SAAA,CAAUC,CAAAA,CAAUE,CAAAA,CAAYD,CAAS,CAClE,CAAA,MAASE,EAAO,CACf,OAAAV,CAAAA,CAAI,IAAA,CACH,CAAA,kEAAA,EAAqEU,CAAK,EAC3E,CAAA,CACY,CAAA,CAAA,WAAA,CAAY,cAAA,EACzB,CACD","file":"chunk-HM77MWB6.js","sourcesContent":["import path from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport * as grpc from \"@grpc/grpc-js\";\nimport * as protoLoader from \"@grpc/proto-loader\";\n\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = path.dirname(__filename);\n\nimport * as fs from \"node:fs\";\nimport { log } from \"../utils/logger.js\";\n\n// Selection logic: support both flat dist/ and original src/ structure\nconst PROD_PATHS = [\n\tpath.resolve(__dirname, \"./protocol/liop_core.proto\"), // Flat dist/ (tsup)\n\tpath.resolve(__dirname, \"../protocol/liop_core.proto\"), // dist/rpc/ (tsc)\n];\n\nconst DEV_PROTO_PATH = path.resolve(\n\t__dirname,\n\t\"../../../../protocol/proto/liop_core.proto\",\n);\n\n// Selection logic\nconst PROTO_PATH = PROD_PATHS.find((p) => fs.existsSync(p)) || DEV_PROTO_PATH;\n\nif (!fs.existsSync(PROTO_PATH)) {\n\tlog.error(`[LIOP-Proto] CRITICAL: Proto file not found at ${PROTO_PATH}`);\n}\n\n/**\n * LIOP Proto Loader\n * Loads the core gRPC definitions for the Logic-Injection-on-Origin Protocol.\n */\nconst packageDefinition = protoLoader.loadSync(PROTO_PATH, {\n\tkeepCase: true,\n\tlongs: String,\n\tenums: String,\n\tdefaults: true,\n\toneofs: true,\n});\n\n// biome-ignore lint/suspicious/noExplicitAny: gRPC dynamic loading requires any for the service definition map\nexport const liopProto = grpc.loadPackageDefinition(packageDefinition) as any;\nexport const liopV1 = liopProto.liop.v1;\n","/**\n * LIOP TLS Configuration\n *\n * Provides conditional TLS credential factories for gRPC connections.\n * When TLS options are provided, connections are secured with mutual TLS.\n * Otherwise, falls back to insecure credentials (alpha/development mode).\n */\n\nimport * as fs from \"node:fs\";\nimport * as grpc from \"@grpc/grpc-js\";\nimport { log } from \"../utils/logger.js\";\n\nexport interface LiopTlsOptions {\n\t/** Path to the root CA certificate (PEM format) */\n\trootCert?: string;\n\t/** Path to the server/client certificate (PEM format) */\n\tcertChain?: string;\n\t/** Path to the private key (PEM format) */\n\tprivateKey?: string;\n}\n\n/**\n * Creates gRPC server credentials from TLS options.\n * Falls back to insecure if no options are provided.\n */\nexport function createServerCredentials(\n\ttls?: LiopTlsOptions,\n): grpc.ServerCredentials {\n\tif (!tls?.certChain || !tls?.privateKey) {\n\t\treturn grpc.ServerCredentials.createInsecure();\n\t}\n\n\ttry {\n\t\tconst rootCert = tls.rootCert ? fs.readFileSync(tls.rootCert) : null;\n\t\tconst certChain = fs.readFileSync(tls.certChain);\n\t\tconst privateKey = fs.readFileSync(tls.privateKey);\n\n\t\treturn grpc.ServerCredentials.createSsl(rootCert, [\n\t\t\t{ cert_chain: certChain, private_key: privateKey },\n\t\t]);\n\t} catch (error) {\n\t\tlog.info(\n\t\t\t`[LIOP-TLS] Failed to load certificates, falling back to insecure: ${error}`,\n\t\t);\n\t\treturn grpc.ServerCredentials.createInsecure();\n\t}\n}\n\n/**\n * Creates gRPC channel credentials from TLS options.\n * Falls back to insecure if no options are provided.\n */\nexport function createChannelCredentials(\n\ttls?: LiopTlsOptions,\n): grpc.ChannelCredentials {\n\tif (!tls?.rootCert) {\n\t\treturn grpc.credentials.createInsecure();\n\t}\n\n\ttry {\n\t\tconst rootCert = fs.readFileSync(tls.rootCert);\n\t\tconst certChain = tls.certChain\n\t\t\t? fs.readFileSync(tls.certChain)\n\t\t\t: undefined;\n\t\tconst privateKey = tls.privateKey\n\t\t\t? fs.readFileSync(tls.privateKey)\n\t\t\t: undefined;\n\n\t\treturn grpc.credentials.createSsl(rootCert, privateKey, certChain);\n\t} catch (error) {\n\t\tlog.info(\n\t\t\t`[LIOP-TLS] Failed to load certificates, falling back to insecure: ${error}`,\n\t\t);\n\t\treturn grpc.credentials.createInsecure();\n\t}\n}\n"]}

package/dist/chunk-HNDVAKEK.js

@@ -0,0 +1,24 @@
+import A from'crypto';import*as n from'fs/promises';import*as b from'os';import*as c from'path';import h from'vm';import {WASI}from'wasi';var f=class extends Error{constructor(t){super(`AST Sec-Policy Violation: ${t}`),this.name="GuardianError";}},w={analyze(d){let t=WebAssembly.Module.imports(d),s=0,l=new Set(["fd_write","fd_read","fd_close","fd_seek","environ_get","environ_sizes_get","args_get","args_sizes_get","clock_time_get","random_get","proc_exit","fd_prestat_get","fd_prestat_dir_name","fd_fdstat_get"]);for(let i of t){if(i.module==="wasi_snapshot_preview1"){if(!l.has(i.name))throw new f(`Banned WASI Import Detected: ${i.module}/${i.name}`)}else throw new f(`Banned Host Import Module Detected: ${i.module}`);if(s++,s>128)throw new f("Import limit exceeded. Possible resource exhaustion attack.")}}};var x=process.emit;process.emit=(d,t,...s)=>d==="warning"&&typeof t=="object"&&t.name==="ExperimentalWarning"&&String(t.message).includes("WASI")||String(t.message).includes("importing WASI")?false:x.call(process,d,t,...s);var y=class{wasi;sandboxId;workingDir;config;stdoutHandle=null;stderrHandle=null;constructor(t={}){this.sandboxId=A.randomUUID(),this.workingDir=c.join(b.tmpdir(),"liop-mesh","sandboxes",this.sandboxId),this.config=t;}async init(){try{await n.mkdir(this.workingDir,{recursive:!0}),this.stdoutHandle=await n.open(c.join(this.workingDir,"stdout.log"),"w+"),this.stderrHandle=await n.open(c.join(this.workingDir,"stderr.log"),"w+"),this.wasi=new WASI({version:"preview1",args:["liop_runtime"],env:this.config.allowEnv?process.env:{NODE_ENV:"production",LIOP_NODE:"true",RUNTIME_ID:this.sandboxId},preopens:{"/sandbox":this.workingDir,...this.config.allowedDirectories},stdout:this.stdoutHandle.fd,stderr:this.stderrHandle.fd});}catch(t){throw new Error(`Sandbox Initialization Failed: ${t instanceof Error?t.message:"FS Error"}`)}}async execute(t,s=[],l={}){let i=performance.now();if(t instanceof Buffer)try{let e=await WebAssembly.compile(new Uint8Array(t));w.analyze(e);let p=await WebAssembly.instantiate(e,this.wasi.getImportObject());this.wasi.start(p);let u=c.join(this.workingDir,"stdout.log"),o=c.join(this.workingDir,"stderr.log"),m=await n.readFile(u,"utf-8"),r=await n.readFile(o,"utf-8"),a=performance.now()-i;return {output:m||(r?`Error: ${r}`:"WASM_EXECUTION_SUCCESS"),fuelConsumed:Math.floor(a*1e3)}}catch(e){throw new Error(`WASM Runtime Error: ${e instanceof Error?e.message:String(e)}`)}else {let e=Object.create(null),p={records:s,...l};e.require=void 0,e.process=void 0,e.global=void 0,e.globalThis=void 0,e.Buffer=void 0,e.setTimeout=void 0,e.setInterval=void 0,e.setImmediate=void 0,e.queueMicrotask=void 0,e.eval=void 0,e.Function=void 0,e.SharedArrayBuffer=void 0,e.Date=void 0,e.ArrayBuffer=void 0,e.Uint8Array=void 0,e.Int8Array=void 0,e.Uint16Array=void 0,e.Int16Array=void 0,e.Uint32Array=void 0,e.Int32Array=void 0,e.Float32Array=void 0,e.Float64Array=void 0,e.BigInt64Array=void 0,e.BigUint64Array=void 0,e.DataView=void 0,e.records=JSON.parse(JSON.stringify(s)),e.env=JSON.parse(JSON.stringify(p));for(let[r,a]of Object.entries(l))e[r]=JSON.parse(JSON.stringify(a));let u=r=>{if(r&&typeof r=="object"&&!Object.isFrozen(r)){Object.freeze(r);for(let a of Object.keys(r))u(r[a]);}return r};u(e.records),u(e.env);for(let r of Object.keys(e))Object.defineProperty(e,r,{writable:false,configurable:false});let o=String(t);(/^\s*return\s/m.test(o)||!o.includes("function liop_main"))&&(o.includes("function liop_main")||(o=`function liop_main(env) {
+${o}
+}`));let m=`
+				(function() {
+					try {
+						Object.freeze(Object.prototype);
+						Object.freeze(Array.prototype);
+						Object.freeze(String.prototype);
+						Object.freeze(Number.prototype);
+						Object.freeze(Boolean.prototype);
+						Object.freeze(Object.getPrototypeOf(function(){}));
+
+						${o}
+						if (typeof liop_main === 'function') {
+							return liop_main(env);
+						}
+						return "ERR_NO_ENTRY_POINT";
+					} catch(e) {
+						return "LogicError: " + e.message;
+					}
+				})();
+			`;try{let r=new h.Script(m,{filename:`liop-sandbox-${this.sandboxId.slice(0,8)}.js`}),a=h.createContext(e,{name:"LIOP Isolate",origin:"liop://sandbox"}),_=r.runInContext(a,{timeout:5e3,breakOnSigint:!0,displayErrors:!0}),S=performance.now()-i,I=Math.floor(S*1500+100),g=Math.ceil(I/100)*100;if(g>1e6)throw new Error("LIOP_RESOURCE_EXHAUSTED: Execution fuel limit exceeded.");return {output:_,fuelConsumed:g}}catch(r){throw new Error(`V8 Isolate Fault: ${r instanceof Error?r.message:"Execution Timeout"}`)}}}async teardown(){try{this.stdoutHandle&&await this.stdoutHandle.close(),this.stderrHandle&&await this.stderrHandle.close(),await n.rm(this.workingDir,{recursive:!0,force:!0});}catch{}}};
+export{w as a,y as b};//# sourceMappingURL=chunk-HNDVAKEK.js.map
+//# sourceMappingURL=chunk-HNDVAKEK.js.map

package/dist/chunk-HNDVAKEK.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sandbox/guardian.ts","../src/sandbox/wasi.ts"],"names":["GuardianError","message","ASTGuardian","module","imports","_importCount","ALLOWED_WASI_FUNCTIONS","imp","originalEmit","name","data","args","WasiSandbox","config","crypto","WASI","error","compiledLogic","records","inputs","startTime","instance","stdoutPath","stderrPath","stdout","stderr","duration","sandboxEnv","env","key","value","deepFreeze","obj","processedLogic","scriptCode","script","vm","context","output","rawFuel","fuelUsed"],"mappings":"0IAAO,IAAMA,CAAAA,CAAN,cAA4B,KAAM,CACxC,YAAYC,CAAAA,CAAiB,CAC5B,KAAA,CAAM,CAAA,0BAAA,EAA6BA,CAAO,CAAA,CAAE,CAAA,CAC5C,IAAA,CAAK,IAAA,CAAO,gBACb,CACD,CAAA,CAQaC,CAAAA,CAAc,CAO1B,OAAA,CAAQC,CAAAA,CAAkC,CACzC,IAAMC,EAAU,WAAA,CAAY,MAAA,CAAO,OAAA,CAAQD,CAAM,EAC7CE,CAAAA,CAAe,CAAA,CAEbC,CAAAA,CAAyB,IAAI,IAAI,CACtC,UAAA,CACA,SAAA,CACA,UAAA,CACA,SAAA,CACA,aAAA,CACA,mBAAA,CACA,UAAA,CACA,iBACA,gBAAA,CACA,YAAA,CACA,WAAA,CACA,gBAAA,CACA,sBACA,eACD,CAAC,CAAA,CAED,IAAA,IAAWC,KAAOH,CAAAA,CAAS,CAE1B,GAAIG,CAAAA,CAAI,MAAA,GAAW,wBAAA,CAAA,CAClB,GAAI,CAACD,EAAuB,GAAA,CAAIC,CAAAA,CAAI,IAAI,CAAA,CACvC,MAAM,IAAIP,CAAAA,CACT,CAAA,6BAAA,EAAgCO,CAAAA,CAAI,MAAM,CAAA,CAAA,EAAIA,CAAAA,CAAI,IAAI,CAAA,CACvD,CAAA,CAAA,KAGD,MAAM,IAAIP,CAAAA,CACT,uCAAuCO,CAAAA,CAAI,MAAM,CAAA,CAClD,CAAA,CAID,GAFAF,CAAAA,EAAAA,CAEIA,CAAAA,CAAe,GAAA,CAClB,MAAM,IAAIL,CAAAA,CACT,6DACD,CAEF,CAKD,CACD,EC1DA,IAAMQ,CAAAA,CAAe,QAAQ,IAAA,CAE7B,OAAA,CAAQ,IAAA,CAAO,CAACC,EAAMC,CAAAA,CAAAA,GAASC,CAAAA,GAE5BF,CAAAA,GAAS,SAAA,EACT,OAAOC,CAAAA,EAAS,QAAA,EACfA,CAAAA,CAAiC,IAAA,GAAS,qBAAA,EAC3C,MAAA,CAAQA,CAAAA,CAAiC,OAAO,EAAE,QAAA,CAAS,MAAM,CAAA,EAClE,MAAA,CAAQA,EAAiC,OAAO,CAAA,CAAE,QAAA,CAAS,gBAAgB,EAEpE,KAAA,CAEDF,CAAAA,CAAa,IAAA,CAAK,OAAA,CAASC,CAAAA,CAAMC,CAAAA,CAAM,GAAGC,CAAI,EAgB/C,IAAMC,CAAAA,CAAN,KAAkB,CAChB,KACA,SAAA,CACA,UAAA,CACA,MAAA,CACA,YAAA,CAAqC,KACrC,YAAA,CAAqC,IAAA,CAE7C,WAAA,CAAYC,CAAAA,CAAwB,EAAC,CAAG,CACvC,IAAA,CAAK,UAAYC,CAAAA,CAAO,UAAA,EAAW,CAEnC,IAAA,CAAK,WAAkB,CAAA,CAAA,IAAA,CACnB,CAAA,CAAA,MAAA,EAAO,CACV,WAAA,CACA,YACA,IAAA,CAAK,SACN,CAAA,CACA,IAAA,CAAK,MAAA,CAASD,EACf,CAKA,MAAa,MAAsB,CAClC,GAAI,CACH,MAAS,QAAM,IAAA,CAAK,UAAA,CAAY,CAAE,SAAA,CAAW,EAAK,CAAC,CAAA,CAGnD,IAAA,CAAK,YAAA,CAAe,MAAS,CAAA,CAAA,IAAA,CACvB,CAAA,CAAA,IAAA,CAAK,IAAA,CAAK,WAAY,YAAY,CAAA,CACvC,IACD,CAAA,CACA,KAAK,YAAA,CAAe,MAAS,CAAA,CAAA,IAAA,CACvB,CAAA,CAAA,IAAA,CAAK,KAAK,UAAA,CAAY,YAAY,CAAA,CACvC,IACD,CAAA,CAEA,IAAA,CAAK,IAAA,CAAO,IAAIE,KAAK,CACpB,OAAA,CAAS,UAAA,CACT,IAAA,CAAM,CAAC,cAAc,CAAA,CACrB,GAAA,CAAK,IAAA,CAAK,OAAO,QAAA,CACd,OAAA,CAAQ,GAAA,CACR,CACA,QAAA,CAAU,YAAA,CACV,SAAA,CAAW,MAAA,CACX,WAAY,IAAA,CAAK,SAClB,CAAA,CACF,QAAA,CAAU,CACT,UAAA,CAAY,IAAA,CAAK,UAAA,CACjB,GAAG,KAAK,MAAA,CAAO,kBAChB,CAAA,CACA,MAAA,CAAQ,IAAA,CAAK,YAAA,CAAa,EAAA,CAC1B,MAAA,CAAQ,KAAK,YAAA,CAAa,EAC3B,CAAC,EACF,OAASC,CAAAA,CAAO,CACf,MAAM,IAAI,MACT,CAAA,+BAAA,EAAkCA,CAAAA,YAAiB,KAAA,CAAQA,CAAAA,CAAM,QAAU,UAAU,CAAA,CACtF,CACD,CACD,CAKA,MAAa,OAAA,CACZC,CAAAA,CACAC,CAAAA,CAAqC,EAAC,CACtCC,CAAAA,CAAkC,EAAC,CACkB,CACrD,IAAMC,CAAAA,CAAY,WAAA,CAAY,GAAA,EAAI,CAElC,GAAIH,CAAAA,YAAyB,MAAA,CAE5B,GAAI,CACH,IAAMd,CAAAA,CAAS,MAAM,YAAY,OAAA,CAAQ,IAAI,UAAA,CAAWc,CAAa,CAAC,CAAA,CAGtEf,CAAAA,CAAY,OAAA,CAAQC,CAAM,CAAA,CAE1B,IAAMkB,CAAAA,CAAW,MAAM,YAAY,WAAA,CAClClB,CAAAA,CACA,IAAA,CAAK,IAAA,CAAK,iBACX,CAAA,CAGA,IAAA,CAAK,IAAA,CAAK,MAAMkB,CAAQ,CAAA,CAGxB,IAAMC,CAAAA,CAAkB,CAAA,CAAA,IAAA,CAAK,IAAA,CAAK,UAAA,CAAY,YAAY,EACpDC,CAAAA,CAAkB,CAAA,CAAA,IAAA,CAAK,IAAA,CAAK,UAAA,CAAY,YAAY,CAAA,CACpDC,CAAAA,CAAS,MAAS,CAAA,CAAA,QAAA,CAASF,EAAY,OAAO,CAAA,CAC9CG,CAAAA,CAAS,MAAS,CAAA,CAAA,QAAA,CAASF,CAAAA,CAAY,OAAO,CAAA,CAE9CG,EAAW,WAAA,CAAY,GAAA,EAAI,CAAIN,CAAAA,CACrC,OAAO,CACN,MAAA,CACCI,CAAAA,GAAWC,CAAAA,CAAS,UAAUA,CAAM,CAAA,CAAA,CAAK,wBAAA,CAAA,CAC1C,YAAA,CAAc,IAAA,CAAK,KAAA,CAAMC,CAAAA,CAAW,GAAI,CACzC,CACD,CAAA,MAASV,CAAAA,CAAgB,CACxB,MAAM,IAAI,KAAA,CACT,CAAA,oBAAA,EAAuBA,CAAAA,YAAiB,MAAQA,CAAAA,CAAM,OAAA,CAAU,MAAA,CAAOA,CAAK,CAAC,CAAA,CAC9E,CACD,CAAA,KACM,CAKN,IAAMW,CAAAA,CAAkB,MAAA,CAAO,MAAA,CAAO,IAAI,CAAA,CACpCC,CAAAA,CAAM,CAAE,OAAA,CAAAV,EAAS,GAAGC,CAAO,CAAA,CAGjCQ,CAAAA,CAAW,OAAA,CAAU,MAAA,CACrBA,CAAAA,CAAW,OAAA,CAAU,OACrBA,CAAAA,CAAW,MAAA,CAAS,MAAA,CACpBA,CAAAA,CAAW,WAAa,MAAA,CACxBA,CAAAA,CAAW,MAAA,CAAS,MAAA,CACpBA,EAAW,UAAA,CAAa,MAAA,CACxBA,CAAAA,CAAW,WAAA,CAAc,OACzBA,CAAAA,CAAW,YAAA,CAAe,MAAA,CAC1BA,CAAAA,CAAW,eAAiB,MAAA,CAC5BA,CAAAA,CAAW,IAAA,CAAO,MAAA,CAClBA,EAAW,QAAA,CAAW,MAAA,CACtBA,CAAAA,CAAW,iBAAA,CAAoB,OAC/BA,CAAAA,CAAW,IAAA,CAAO,MAAA,CAMlBA,CAAAA,CAAW,WAAA,CAAc,MAAA,CACzBA,CAAAA,CAAW,UAAA,CAAa,OACxBA,CAAAA,CAAW,SAAA,CAAY,MAAA,CACvBA,CAAAA,CAAW,YAAc,MAAA,CACzBA,CAAAA,CAAW,UAAA,CAAa,MAAA,CACxBA,EAAW,WAAA,CAAc,MAAA,CACzBA,CAAAA,CAAW,UAAA,CAAa,MAAA,CACxBA,CAAAA,CAAW,YAAA,CAAe,MAAA,CAC1BA,EAAW,YAAA,CAAe,MAAA,CAC1BA,CAAAA,CAAW,aAAA,CAAgB,OAC3BA,CAAAA,CAAW,cAAA,CAAiB,MAAA,CAC5BA,CAAAA,CAAW,SAAW,MAAA,CAGtBA,CAAAA,CAAW,OAAA,CAAU,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,SAAA,CAAUT,CAAO,CAAC,CAAA,CACvDS,CAAAA,CAAW,GAAA,CAAM,IAAA,CAAK,MAAM,IAAA,CAAK,SAAA,CAAUC,CAAG,CAAC,EAE/C,IAAA,GAAW,CAACC,CAAAA,CAAKC,CAAK,CAAA,GAAK,MAAA,CAAO,OAAA,CAAQX,CAAM,EAC/CQ,CAAAA,CAAWE,CAAG,CAAA,CAAI,IAAA,CAAK,MAAM,IAAA,CAAK,SAAA,CAAUC,CAAK,CAAC,EAKnD,IAAMC,CAAAA,CAAcC,CAAAA,EAAa,CAChC,GAAIA,CAAAA,EAAO,OAAOA,CAAAA,EAAQ,UAAY,CAAC,MAAA,CAAO,QAAA,CAASA,CAAG,EAAG,CAC5D,MAAA,CAAO,MAAA,CAAOA,CAAG,EACjB,IAAA,IAAWH,CAAAA,IAAO,MAAA,CAAO,IAAA,CAAKG,CAAG,CAAA,CAChCD,CAAAA,CAAWC,CAAAA,CAAIH,CAAG,CAAC,EAErB,CACA,OAAOG,CACR,CAAA,CAEAD,CAAAA,CAAWJ,CAAAA,CAAW,OAAO,EAC7BI,CAAAA,CAAWJ,CAAAA,CAAW,GAAG,CAAA,CAGzB,IAAA,IAAWE,CAAAA,IAAO,MAAA,CAAO,IAAA,CAAKF,CAAU,CAAA,CACvC,MAAA,CAAO,cAAA,CAAeA,CAAAA,CAAYE,EAAK,CACtC,QAAA,CAAU,KAAA,CACV,YAAA,CAAc,KACf,CAAC,CAAA,CAKF,IAAII,CAAAA,CAAiB,OAAOhB,CAAa,CAAA,CAAA,CAExC,eAAA,CAAgB,IAAA,CAAKgB,CAAc,CAAA,EACnC,CAACA,CAAAA,CAAe,QAAA,CAAS,oBAAoB,CAAA,IAExCA,CAAAA,CAAe,QAAA,CAAS,oBAAoB,IAChDA,CAAAA,CAAiB,CAAA;AAAA,EAA8BA,CAAc;AAAA,CAAA,CAAA,CAAA,CAAA,CAI/D,IAAMC,CAAAA,CAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA,MAAA,EAUdD,CAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,GAAA,CAAA,CAWnB,GAAI,CACH,IAAME,CAAAA,CAAS,IAAIC,CAAAA,CAAG,MAAA,CAAOF,CAAAA,CAAY,CACxC,QAAA,CAAU,CAAA,aAAA,EAAgB,IAAA,CAAK,SAAA,CAAU,KAAA,CAAM,CAAA,CAAG,CAAC,CAAC,CAAA,GAAA,CACrD,CAAC,CAAA,CAEKG,CAAAA,CAAUD,CAAAA,CAAG,aAAA,CAAcT,CAAAA,CAAY,CAC5C,IAAA,CAAM,cAAA,CACN,MAAA,CAAQ,gBACT,CAAC,CAAA,CAGKW,CAAAA,CAASH,CAAAA,CAAO,YAAA,CAAaE,CAAAA,CAAS,CAC3C,OAAA,CAAS,GAAA,CACT,aAAA,CAAe,CAAA,CAAA,CACf,aAAA,CAAe,CAAA,CAChB,CAAC,CAAA,CAEKX,CAAAA,CAAW,WAAA,CAAY,GAAA,EAAI,CAAIN,CAAAA,CAE/BmB,CAAAA,CAAU,IAAA,CAAK,KAAA,CAAMb,CAAAA,CAAW,IAAA,CAAO,GAAG,CAAA,CAC1Cc,CAAAA,CAAW,IAAA,CAAK,IAAA,CAAKD,CAAAA,CAAU,GAAG,EAAI,GAAA,CAE5C,GAAIC,CAAAA,CAAW,GAAA,CACd,MAAM,IAAI,KAAA,CACT,yDACD,CAAA,CAGD,OAAO,CAAE,MAAA,CAAAF,CAAAA,CAAQ,YAAA,CAAcE,CAAS,CACzC,CAAA,MAASxB,CAAAA,CAAO,CACf,MAAM,IAAI,KAAA,CACT,CAAA,kBAAA,EAAqBA,CAAAA,YAAiB,KAAA,CAAQA,CAAAA,CAAM,OAAA,CAAU,mBAAmB,CAAA,CAClF,CACD,CACD,CACD,CAKA,MAAa,QAAA,EAA0B,CACtC,GAAI,CACC,IAAA,CAAK,YAAA,EAAc,MAAM,IAAA,CAAK,YAAA,CAAa,KAAA,EAAM,CACjD,IAAA,CAAK,YAAA,EAAc,MAAM,IAAA,CAAK,YAAA,CAAa,KAAA,EAAM,CACrD,MAAS,CAAA,CAAA,EAAA,CAAG,IAAA,CAAK,UAAA,CAAY,CAAE,SAAA,CAAW,CAAA,CAAA,CAAM,KAAA,CAAO,CAAA,CAAK,CAAC,EAC9D,CAAA,KAAa,CAEb,CACD,CACD","file":"chunk-HNDVAKEK.js","sourcesContent":["export class GuardianError extends Error {\n\tconstructor(message: string) {\n\t\tsuper(`AST Sec-Policy Violation: ${message}`);\n\t\tthis.name = \"GuardianError\";\n\t}\n}\n\n/**\n * The Guardian-TS Module\n * Scans the Abstract Syntax Tree (AST) imports of incoming WASM\n * before it reaches the V8 Wasmtime engine to prevent sandbox-escape\n * zero-days, resource exhaustion bombs, and evasive execution.\n */\nexport const ASTGuardian = {\n\t/**\n\t * Analyzes the WebAssembly Module interface proactively.\n\t *\n\t * @param module - The compiled WebAssembly.Module to inspect\n\t * @throws {GuardianError} If illegal imports or capabilities are detected\n\t */\n\tanalyze(module: WebAssembly.Module): void {\n\t\tconst imports = WebAssembly.Module.imports(module);\n\t\tlet _importCount = 0;\n\n\t\tconst ALLOWED_WASI_FUNCTIONS = new Set([\n\t\t\t\"fd_write\",\n\t\t\t\"fd_read\",\n\t\t\t\"fd_close\",\n\t\t\t\"fd_seek\",\n\t\t\t\"environ_get\",\n\t\t\t\"environ_sizes_get\",\n\t\t\t\"args_get\",\n\t\t\t\"args_sizes_get\",\n\t\t\t\"clock_time_get\",\n\t\t\t\"random_get\",\n\t\t\t\"proc_exit\",\n\t\t\t\"fd_prestat_get\",\n\t\t\t\"fd_prestat_dir_name\",\n\t\t\t\"fd_fdstat_get\",\n\t\t]);\n\n\t\tfor (const imp of imports) {\n\t\t\t// Strict Sandbox Validation: Only allow WASI preview 1 specific whitelisted functions.\n\t\t\tif (imp.module === \"wasi_snapshot_preview1\") {\n\t\t\t\tif (!ALLOWED_WASI_FUNCTIONS.has(imp.name)) {\n\t\t\t\t\tthrow new GuardianError(\n\t\t\t\t\t\t`Banned WASI Import Detected: ${imp.module}/${imp.name}`,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tthrow new GuardianError(\n\t\t\t\t\t`Banned Host Import Module Detected: ${imp.module}`,\n\t\t\t\t);\n\t\t\t}\n\t\t\t_importCount++;\n\n\t\t\tif (_importCount > 128) {\n\t\t\t\tthrow new GuardianError(\n\t\t\t\t\t\"Import limit exceeded. Possible resource exhaustion attack.\",\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\n\t\t// In Node.js / V8, the maximum module size and function limits\n\t\t// are natively enforced by the engine during compilation.\n\t\t// A successfully compiled WebAssembly.Module already passed structural checks.\n\t},\n};\n","import crypto from \"node:crypto\";\nimport * as fs from \"node:fs/promises\";\nimport * as os from \"node:os\";\nimport * as path from \"node:path\";\nimport vm from \"node:vm\";\nimport { WASI } from \"node:wasi\";\nimport { ASTGuardian } from \"./guardian.js\";\n\n// Silence Node.js ExperimentalWarning for WASI (Industrial console parity)\nconst originalEmit = process.emit;\n// @ts-expect-error\nprocess.emit = (name, data, ...args) => {\n\tif (\n\t\t(name === \"warning\" &&\n\t\t\ttypeof data === \"object\" &&\n\t\t\t(data as Record<string, unknown>).name === \"ExperimentalWarning\" &&\n\t\t\tString((data as Record<string, unknown>).message).includes(\"WASI\")) ||\n\t\tString((data as Record<string, unknown>).message).includes(\"importing WASI\")\n\t) {\n\t\treturn false;\n\t}\n\treturn originalEmit.call(process, name, data, ...args);\n};\n\nexport interface SandboxConfig {\n\tallowEnv?: boolean;\n\tallowedDirectories?: Record<string, string>; // guestPath -> hostPath\n\tmemoryLimitMb?: number;\n}\n\n/**\n * LIOP WasiSandbox (Industrial Grade)\n *\n * Provides a production-grade isolated environment for executing untrusted logic.\n * Primarily uses WebAssembly (WASI) for byte-code isolation, with a hardened\n * V8 Isolate fallback for dynamic JS-to-WASM logic injection.\n */\nexport class WasiSandbox {\n\tprivate wasi!: WASI;\n\tprivate sandboxId: string;\n\tprivate workingDir: string;\n\tprivate config: SandboxConfig;\n\tprivate stdoutHandle: fs.FileHandle | null = null;\n\tprivate stderrHandle: fs.FileHandle | null = null;\n\n\tconstructor(config: SandboxConfig = {}) {\n\t\tthis.sandboxId = crypto.randomUUID();\n\t\t// Use a dedicated LIOP directory in the OS temp folder\n\t\tthis.workingDir = path.join(\n\t\t\tos.tmpdir(),\n\t\t\t\"liop-mesh\",\n\t\t\t\"sandboxes\",\n\t\t\tthis.sandboxId,\n\t\t);\n\t\tthis.config = config;\n\t}\n\n\t/**\n\t * Initializes the physical sandbox environment with strict directory lockdown.\n\t */\n\tpublic async init(): Promise<void> {\n\t\ttry {\n\t\t\tawait fs.mkdir(this.workingDir, { recursive: true });\n\n\t\t\t// Initialize WASI with explicit limits\n\t\t\tthis.stdoutHandle = await fs.open(\n\t\t\t\tpath.join(this.workingDir, \"stdout.log\"),\n\t\t\t\t\"w+\",\n\t\t\t);\n\t\t\tthis.stderrHandle = await fs.open(\n\t\t\t\tpath.join(this.workingDir, \"stderr.log\"),\n\t\t\t\t\"w+\",\n\t\t\t);\n\n\t\t\tthis.wasi = new WASI({\n\t\t\t\tversion: \"preview1\",\n\t\t\t\targs: [\"liop_runtime\"],\n\t\t\t\tenv: this.config.allowEnv\n\t\t\t\t\t? process.env\n\t\t\t\t\t: {\n\t\t\t\t\t\t\tNODE_ENV: \"production\",\n\t\t\t\t\t\t\tLIOP_NODE: \"true\",\n\t\t\t\t\t\t\tRUNTIME_ID: this.sandboxId,\n\t\t\t\t\t\t},\n\t\t\t\tpreopens: {\n\t\t\t\t\t\"/sandbox\": this.workingDir,\n\t\t\t\t\t...this.config.allowedDirectories,\n\t\t\t\t},\n\t\t\t\tstdout: this.stdoutHandle.fd,\n\t\t\t\tstderr: this.stderrHandle.fd,\n\t\t\t});\n\t\t} catch (error) {\n\t\t\tthrow new Error(\n\t\t\t\t`Sandbox Initialization Failed: ${error instanceof Error ? error.message : \"FS Error\"}`,\n\t\t\t);\n\t\t}\n\t}\n\n\t/**\n\t * Executes logic (WASM or JS-Wrapped) with hard resource limits.\n\t */\n\tpublic async execute(\n\t\tcompiledLogic: Buffer | string,\n\t\trecords: Record<string, unknown>[] = [],\n\t\tinputs: Record<string, unknown> = {},\n\t): Promise<{ output: unknown; fuelConsumed: number }> {\n\t\tconst startTime = performance.now();\n\n\t\tif (compiledLogic instanceof Buffer) {\n\t\t\t// Path A: Native WebAssembly Isolation\n\t\t\ttry {\n\t\t\t\tconst module = await WebAssembly.compile(new Uint8Array(compiledLogic));\n\n\t\t\t\t// Tier-0 Guardian: Static analysis to prevent sandbox escapes\n\t\t\t\tASTGuardian.analyze(module);\n\n\t\t\t\tconst instance = await WebAssembly.instantiate(\n\t\t\t\t\tmodule,\n\t\t\t\t\tthis.wasi.getImportObject() as WebAssembly.Imports,\n\t\t\t\t);\n\n\t\t\t\t// Standard entry point\n\t\t\t\tthis.wasi.start(instance);\n\n\t\t\t\t// Capture output from the sandbox\n\t\t\t\tconst stdoutPath = path.join(this.workingDir, \"stdout.log\");\n\t\t\t\tconst stderrPath = path.join(this.workingDir, \"stderr.log\");\n\t\t\t\tconst stdout = await fs.readFile(stdoutPath, \"utf-8\");\n\t\t\t\tconst stderr = await fs.readFile(stderrPath, \"utf-8\");\n\n\t\t\t\tconst duration = performance.now() - startTime;\n\t\t\t\treturn {\n\t\t\t\t\toutput:\n\t\t\t\t\t\tstdout || (stderr ? `Error: ${stderr}` : \"WASM_EXECUTION_SUCCESS\"),\n\t\t\t\t\tfuelConsumed: Math.floor(duration * 1000),\n\t\t\t\t};\n\t\t\t} catch (error: unknown) {\n\t\t\t\tthrow new Error(\n\t\t\t\t\t`WASM Runtime Error: ${error instanceof Error ? error.message : String(error)}`,\n\t\t\t\t);\n\t\t\t}\n\t\t} else {\n\t\t\t// Path B: Hardened V8 Isolate Fallback\n\t\t\t// Uses node:vm with zero-prototype objects to prevent prototype pollution escapes.\n\n\t\t\t// biome-ignore lint/suspicious/noExplicitAny: Required for Sandbox global poisoning\n\t\t\tconst sandboxEnv: any = Object.create(null); // Isolated global object\n\t\t\tconst env = { records, ...inputs };\n\n\t\t\t// Explicitly poison Node.js escape vectors in the context\n\t\t\tsandboxEnv.require = undefined;\n\t\t\tsandboxEnv.process = undefined;\n\t\t\tsandboxEnv.global = undefined;\n\t\t\tsandboxEnv.globalThis = undefined;\n\t\t\tsandboxEnv.Buffer = undefined;\n\t\t\tsandboxEnv.setTimeout = undefined;\n\t\t\tsandboxEnv.setInterval = undefined;\n\t\t\tsandboxEnv.setImmediate = undefined;\n\t\t\tsandboxEnv.queueMicrotask = undefined;\n\t\t\tsandboxEnv.eval = undefined;\n\t\t\tsandboxEnv.Function = undefined;\n\t\t\tsandboxEnv.SharedArrayBuffer = undefined;\n\t\t\tsandboxEnv.Date = undefined;\n\n\t\t\t// [DoS Defense] Block off-heap memory allocation vectors.\n\t\t\t// Logic-on-Origin operates on JSON data (env.records) — binary buffers\n\t\t\t// serve no legitimate purpose and enable memory exhaustion DoS.\n\t\t\t// (Uint8Array(2GB) bypassed Piscina's maxOldGenerationSizeMb limit)\n\t\t\tsandboxEnv.ArrayBuffer = undefined;\n\t\t\tsandboxEnv.Uint8Array = undefined;\n\t\t\tsandboxEnv.Int8Array = undefined;\n\t\t\tsandboxEnv.Uint16Array = undefined;\n\t\t\tsandboxEnv.Int16Array = undefined;\n\t\t\tsandboxEnv.Uint32Array = undefined;\n\t\t\tsandboxEnv.Int32Array = undefined;\n\t\t\tsandboxEnv.Float32Array = undefined;\n\t\t\tsandboxEnv.Float64Array = undefined;\n\t\t\tsandboxEnv.BigInt64Array = undefined;\n\t\t\tsandboxEnv.BigUint64Array = undefined;\n\t\t\tsandboxEnv.DataView = undefined;\n\n\t\t\t// Inject strictly monitored globals\n\t\t\tsandboxEnv.records = JSON.parse(JSON.stringify(records)); // Deep copy safety\n\t\t\tsandboxEnv.env = JSON.parse(JSON.stringify(env));\n\n\t\t\tfor (const [key, value] of Object.entries(inputs)) {\n\t\t\t\tsandboxEnv[key] = JSON.parse(JSON.stringify(value));\n\t\t\t}\n\n\t\t\t// Freeze the sandbox context to prevent mutation (SEC-GAP-1)\n\t\t\t// biome-ignore lint/suspicious/noExplicitAny: Required for recursive deep freeze of unknown data\n\t\t\tconst deepFreeze = (obj: any) => {\n\t\t\t\tif (obj && typeof obj === \"object\" && !Object.isFrozen(obj)) {\n\t\t\t\t\tObject.freeze(obj);\n\t\t\t\t\tfor (const key of Object.keys(obj)) {\n\t\t\t\t\t\tdeepFreeze(obj[key]);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\treturn obj;\n\t\t\t};\n\n\t\t\tdeepFreeze(sandboxEnv.records);\n\t\t\tdeepFreeze(sandboxEnv.env);\n\n\t\t\t// Prevent property addition/modification on global scope\n\t\t\tfor (const key of Object.keys(sandboxEnv)) {\n\t\t\t\tObject.defineProperty(sandboxEnv, key, {\n\t\t\t\t\twritable: false,\n\t\t\t\t\tconfigurable: false,\n\t\t\t\t});\n\t\t\t}\n\n\t\t\t// LIOP Execution Wrapper\n\t\t\t// Host-side logic transformation to avoid 'new Function' in sandbox\n\t\t\tlet processedLogic = String(compiledLogic);\n\t\t\tif (\n\t\t\t\t/^\\s*return\\s/m.test(processedLogic) ||\n\t\t\t\t!processedLogic.includes(\"function liop_main\")\n\t\t\t) {\n\t\t\t\tif (!processedLogic.includes(\"function liop_main\")) {\n\t\t\t\t\tprocessedLogic = `function liop_main(env) {\\n${processedLogic}\\n}`;\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tconst scriptCode = `\n\t\t\t\t(function() {\n\t\t\t\t\ttry {\n\t\t\t\t\t\tObject.freeze(Object.prototype);\n\t\t\t\t\t\tObject.freeze(Array.prototype);\n\t\t\t\t\t\tObject.freeze(String.prototype);\n\t\t\t\t\t\tObject.freeze(Number.prototype);\n\t\t\t\t\t\tObject.freeze(Boolean.prototype);\n\t\t\t\t\t\tObject.freeze(Object.getPrototypeOf(function(){}));\n\n\t\t\t\t\t\t${processedLogic}\n\t\t\t\t\t\tif (typeof liop_main === 'function') {\n\t\t\t\t\t\t\treturn liop_main(env);\n\t\t\t\t\t\t}\n\t\t\t\t\t\treturn \"ERR_NO_ENTRY_POINT\";\n\t\t\t\t\t} catch(e) {\n\t\t\t\t\t\treturn \"LogicError: \" + e.message;\n\t\t\t\t\t}\n\t\t\t\t})();\n\t\t\t`;\n\n\t\t\ttry {\n\t\t\t\tconst script = new vm.Script(scriptCode, {\n\t\t\t\t\tfilename: `liop-sandbox-${this.sandboxId.slice(0, 8)}.js`,\n\t\t\t\t});\n\n\t\t\t\tconst context = vm.createContext(sandboxEnv, {\n\t\t\t\t\tname: \"LIOP Isolate\",\n\t\t\t\t\torigin: \"liop://sandbox\",\n\t\t\t\t});\n\n\t\t\t\t// Execution with hard CPU and Memory limits (Fuel)\n\t\t\t\tconst output = script.runInContext(context, {\n\t\t\t\t\ttimeout: 5000,\n\t\t\t\t\tbreakOnSigint: true,\n\t\t\t\t\tdisplayErrors: true,\n\t\t\t\t});\n\n\t\t\t\tconst duration = performance.now() - startTime;\n\t\t\t\t// SEC: Normalize fuel to buckets of 100 to prevent timing side-channel inference\n\t\t\t\tconst rawFuel = Math.floor(duration * 1500 + 100);\n\t\t\t\tconst fuelUsed = Math.ceil(rawFuel / 100) * 100;\n\n\t\t\t\tif (fuelUsed > 1000000) {\n\t\t\t\t\tthrow new Error(\n\t\t\t\t\t\t\"LIOP_RESOURCE_EXHAUSTED: Execution fuel limit exceeded.\",\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\treturn { output, fuelConsumed: fuelUsed };\n\t\t\t} catch (error) {\n\t\t\t\tthrow new Error(\n\t\t\t\t\t`V8 Isolate Fault: ${error instanceof Error ? error.message : \"Execution Timeout\"}`,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t}\n\n\t/**\n\t * Physically cleans up the sandbox and releases resources.\n\t */\n\tpublic async teardown(): Promise<void> {\n\t\ttry {\n\t\t\tif (this.stdoutHandle) await this.stdoutHandle.close();\n\t\t\tif (this.stderrHandle) await this.stderrHandle.close();\n\t\t\tawait fs.rm(this.workingDir, { recursive: true, force: true });\n\t\t} catch (_e) {\n\t\t\t// Silent fail on teardown to prevent process crashes\n\t\t}\n\t}\n}\n"]}

package/dist/chunk-HQZHZM6U.js

@@ -0,0 +1,2 @@
+import {z}from'zod';var o=z.object({name:z.string(),description:z.string().optional(),inputSchema:z.record(z.string(),z.unknown())}),i=z.object({uri:z.string(),name:z.string(),description:z.string().optional(),mimeType:z.string().optional()}),s=z.object({name:z.string(),description:z.string().optional(),arguments:z.array(z.object({name:z.string(),description:z.string().optional(),required:z.boolean().optional()})).optional()});export{o as a,i as b,s as c};//# sourceMappingURL=chunk-HQZHZM6U.js.map
+//# sourceMappingURL=chunk-HQZHZM6U.js.map

package/dist/chunk-HQZHZM6U.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/types.ts"],"names":["ToolSchema","z","ResourceSchema","PromptSchema"],"mappings":"oBAMO,IAAMA,EAAaC,CAAAA,CAAE,MAAA,CAAO,CAClC,IAAA,CAAMA,CAAAA,CAAE,QAAO,CACf,WAAA,CAAaA,EAAE,MAAA,EAAO,CAAE,UAAS,CACjC,WAAA,CAAaA,CAAAA,CAAE,MAAA,CAAOA,CAAAA,CAAE,MAAA,GAAUA,CAAAA,CAAE,OAAA,EAAS,CAC9C,CAAC,EAIYC,CAAAA,CAAiBD,CAAAA,CAAE,OAAO,CACtC,GAAA,CAAKA,EAAE,MAAA,EAAO,CACd,KAAMA,CAAAA,CAAE,MAAA,GACR,WAAA,CAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS,CACjC,SAAUA,CAAAA,CAAE,MAAA,GAAS,QAAA,EACtB,CAAC,CAAA,CAIYE,CAAAA,CAAeF,EAAE,MAAA,CAAO,CACpC,KAAMA,CAAAA,CAAE,MAAA,GACR,WAAA,CAAaA,CAAAA,CAAE,QAAO,CAAE,QAAA,EAAS,CACjC,SAAA,CAAWA,CAAAA,CACT,KAAA,CACAA,EAAE,MAAA,CAAO,CACR,KAAMA,CAAAA,CAAE,MAAA,GACR,WAAA,CAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS,CACjC,SAAUA,CAAAA,CAAE,OAAA,GAAU,QAAA,EACvB,CAAC,CACF,CAAA,CACC,QAAA,EACH,CAAC","file":"chunk-HQZHZM6U.js","sourcesContent":["import { z } from \"zod\";\n\n/**\n * Base Protocol Types representing parity with Model Context Protocol\n */\n\nexport const ToolSchema = z.object({\n\tname: z.string(),\n\tdescription: z.string().optional(),\n\tinputSchema: z.record(z.string(), z.unknown()), // Represents a JSON Schema\n});\n\nexport type Tool = z.infer<typeof ToolSchema>;\n\nexport const ResourceSchema = z.object({\n\turi: z.string(),\n\tname: z.string(),\n\tdescription: z.string().optional(),\n\tmimeType: z.string().optional(),\n});\n\nexport type Resource = z.infer<typeof ResourceSchema>;\n\nexport const PromptSchema = z.object({\n\tname: z.string(),\n\tdescription: z.string().optional(),\n\targuments: z\n\t\t.array(\n\t\t\tz.object({\n\t\t\t\tname: z.string(),\n\t\t\t\tdescription: z.string().optional(),\n\t\t\t\trequired: z.boolean().optional(),\n\t\t\t}),\n\t\t)\n\t\t.optional(),\n});\n\nexport type Prompt = z.infer<typeof PromptSchema>;\n\nexport interface CallToolRequest {\n\tname: string;\n\targuments?: Record<string, unknown>;\n}\n\nexport interface CallToolResult {\n\tcontent: Array<{\n\t\ttype: \"text\" | \"image\" | \"resource\";\n\t\ttext?: string;\n\t\tdata?: string;\n\t\tmimeType?: string;\n\t\tresource?: {\n\t\t\turi: string;\n\t\t\ttext?: string;\n\t\t\tblob?: string;\n\t\t};\n\t}>;\n\tisError?: boolean;\n}\n\nexport interface GetPromptRequest {\n\tname: string;\n\targuments?: Record<string, string>;\n}\n\nexport interface GetPromptResult {\n\tdescription?: string;\n\tmessages: Array<{\n\t\trole: \"user\" | \"assistant\";\n\t\tcontent:\n\t\t\t| { type: \"text\"; text: string }\n\t\t\t| { type: \"image\"; data: string; mimeType: string }\n\t\t\t| {\n\t\t\t\t\ttype: \"resource\";\n\t\t\t\t\tresource: { uri: string; text?: string; blob?: string };\n\t\t\t  };\n\t}>;\n}\n\nexport interface ServerInfo {\n\tname: string;\n\tversion: string;\n\tcapabilities?: {\n\t\tprompts?: { listChanged?: boolean };\n\t\tresources?: { subscribe?: boolean; listChanged?: boolean };\n\t\ttools?: { listChanged?: boolean };\n\t\tlogging?: Record<string, unknown>;\n\t};\n}\n\nexport interface McpRequest {\n\tmethod: string;\n\tparams?: unknown;\n\tid?: string | number | null;\n\tjsonrpc?: \"2.0\";\n}\n\nexport interface McpResponse {\n\tjsonrpc: \"2.0\";\n\tid?: string | number | null;\n\tresult?: unknown;\n\terror?: {\n\t\tcode: number;\n\t\tmessage: string;\n\t\tdata?: unknown;\n\t};\n}\n"]}

package/dist/chunk-P52IE4L6.js

@@ -0,0 +1,2 @@
+import {a as a$1}from'./chunk-UVTEJYHN.js';import {a as a$4}from'./chunk-DBXGYHKY.js';import {c,a}from'./chunk-HM77MWB6.js';import {a as a$2}from'./chunk-PPCOS2NU.js';import {a as a$3}from'./chunk-S6RJHZV2.js';import {createDecipheriv,randomBytes,createCipheriv}from'crypto';var u=class{client;constructor(e,r){let t=c(r);this.client=new a.LogicMesh(e,t);}async negotiateIntent(e){return new Promise((r,t)=>{this.client.NegotiateIntent(e,(i,o)=>{i?t(i):r(o);});})}executeLogic(e){return this.client.ExecuteLogic(e)}close(){this.client.close();}};var $={encryptPayload(l,e){if(e.length!==32)throw new Error("Symmetric Key must be exactly 32 bytes (256 bits).");let r=randomBytes(12),t=createCipheriv("aes-256-gcm",e,r),i=Buffer.concat([t.update(l),t.final()]),o=t.getAuthTag();return {ciphertext:Buffer.concat([i,o]),nonce:r}},decryptPayload(l,e,r){if(l.length<16)throw new Error("Invalid GCM Ciphertext; missing authentication tag length");let t=l.subarray(0,-16),i=l.subarray(-16),o=createDecipheriv("aes-256-gcm",r,e);return o.setAuthTag(i),Buffer.concat([o.update(t),o.final()])}};var O=class{meshNode=null;rpcClients=new Map;manifests=new Map;tlsOptions;serverInfo;verifier=new a$1;constructor(e){this.tlsOptions=e;}async connect(e,r){this.meshNode=new a$2(r?.meshConfig),await this.meshNode.start(),a$3.info(`[LiopClient] Mesh Node synchronized. PeerID: ${this.meshNode.getPeerId()}`),e?(this.rpcClients.set("static",new u(e,this.tlsOptions)),this.serverInfo={name:`LiopServer (${e})`,version:"1.0.0"},a$3.info(`[LiopClient] Static gRPC configured for: ${e}`)):this.serverInfo={name:"LiopServer (Mesh Alpha)",version:"1.0.0"};}async resolveCapability(e){if(!this.meshNode)throw new Error("Client must be connected to Mesh to resolve capabilities.");a$3.info(`[LiopClient] Querying Mesh DHT for Provider: ${e}...`);let r=await this.meshNode.findProviders(e);if(r.length===0)throw new Error(`Kademlia DHT found zero providers for capability: ${e}`);let t=r[0];a$3.info(`[LiopClient] Identified Alpha Provider PeerID: ${t}`);let i=50051,o=await this.meshNode.queryManifest(t);o&&(i=o.grpcPort,a$3.info(`[LiopClient] Manifest resolved: gRPC port ${i}`));let s=await this.meshNode.resolvePeer(t);for(let y of s){let a=y.split("/");if(a[1]==="ip4"){let m=`${a[2]}:${i}`;return a$3.info(`[LiopClient] Translated Multiaddr to gRPC Target: ${m}`),m}}return `127.0.0.1:${i}`}async discoverTools(){if(!this.meshNode)throw new Error("Client must be connected before discovering tools.");a$3.info("[LiopClient] Discovery started...");let e=await this.meshNode.discoverManifestProviders(),r=[],t=new Set;for(let i of e)try{a$3.info(`[LiopClient] Querying manifest from: ${i}`);let o=await this.meshNode.queryManifest(i);if(o){this.manifests.set(i,o);for(let s of o.tools)t.has(s.name)||(r.push({name:s.name,description:s.description}),t.add(s.name));}}catch(o){a$3.info(`[LiopClient] Error querying manifest from ${i}:`,o instanceof Error?o.message:String(o));}return a$3.info(`[LiopClient] Discovery finished. Found ${r.length} unique tools.`),r}async callTool(e,r){if(!this.meshNode)throw new Error("Client must be connected before calling tools.");let t=e.name;a$3.info(`[LiopClient] Resolving Tool: ${t}`);let i=this.rpcClients.get("static");if(i)a$3.info(`[LiopClient] Using existing static gRPC connection for ${t}.`);else {let h=await this.resolveCapability(t);i=this.getOrCreateRpcClient(t,h);}a$3.info(`[LiopClient] Negotiating intent for ${t}...`);let o=this.meshNode?`did:liop:${this.meshNode.getPeerId()}`:"did:liop:ephemeral",s=Buffer.from(`${t}:${Date.now()}`),y=this.meshNode?await this.meshNode.sign(s):s,a=await i.negotiateIntent({agent_did:o,capability_hash:t,proof_of_intent:y});if(!a.accepted)throw new Error(`Intent denied by host: ${a.error_message}`);let m=a.kyber_public_key||a.kyberPublicKey,x=a.session_token||a.sessionToken;if(!m)throw a$3.info("[LiopClient] Critical Error: Kyber Public Key not found in IntentResponse.",a),new Error("Handshake failed: Remote host did not provide a valid Kyber Public Key.");a$3.info(`[LiopClient] Encapsulating Post-Quantum Shared Secret for ${e.name}...`);let{ciphertext:_,sharedSecret:C}=await a$4.encapsulateAsymmetric(m);a$3.info("[LiopClient] Sealing WASM Payload and Inputs...");let v=r||Buffer.from(""),{ciphertext:k,nonce:A}=$.encryptPayload(v,C),w={},b=await import('crypto');for(let[h,f]of Object.entries(e.arguments||{})){let d=b.randomBytes(12),p=b.createCipheriv("aes-256-gcm",C,d),g=Buffer.concat([p.update(JSON.stringify(f)),p.final()]),c=p.getAuthTag();w[h]=Buffer.concat([d,g,c]);}let B={session_token:x,wasm_binary:k,inputs:w,pqc_ciphertext:_,aes_nonce:A};return new Promise((h,f)=>{let d=i.executeLogic(B);if(!d){f(new Error("RPC Client unavailable or failed to create stream."));return}let p=false,g=false;d.on("data",async c=>{if(!p){g=true,a$3.info("[LiopClient] Logic Executed. Verification in progress...");try{if(!await this.verifier.verifyZkReceipt(v,Buffer.from(c.cryptographic_proof).toString("hex"),Buffer.from(c.zk_receipt),Buffer.from(C))){f(new Error("PROTOCOL INTEGRITY VIOLATION: ZK-Receipt verification failed."));return}p=!0,h({content:[{type:"text",text:c.semantic_evidence}],isError:c.is_error});}catch(L){f(L);}}}),d.on("error",c=>{p||(a$3.error("[LiopClient] Stream Error:",c),f(c));}),d.on("end",()=>{!g&&!p&&f(new Error("Logic-on-Origin stream closed without results."));});})}getOrCreateRpcClient(e,r){let t=this.rpcClients.get(e);return t||(t=new u(r,this.tlsOptions),this.rpcClients.set(e,t)),t}async readResource(e){if(!this.meshNode)throw new Error("Client must be connected before reading resources.");a$3.info(`[LiopClient] Querying Mesh for Resource: ${e}...`);let r=await this.meshNode.findProviders(e);if(r.length===0)throw new Error(`No mesh providers found for resource: ${e}`);let t=await this.meshNode.queryManifest(r[0]);if(!t)throw new Error("Target peer did not return a valid LIOP Manifest.");let i=t.resources?.find(o=>o.uri===e);if(!i)throw new Error(`Resource ${e} not listed in remote manifest.`);return {contents:[{uri:e,mimeType:i.mimeType||"application/json",text:JSON.stringify(i,null,2)}]}}getServerInfo(){return this.serverInfo}async close(){this.meshNode&&await this.meshNode.stop();}};export{u as a,O as b};//# sourceMappingURL=chunk-P52IE4L6.js.map
+//# sourceMappingURL=chunk-P52IE4L6.js.map

package/dist/chunk-P52IE4L6.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/rpc/client.ts","../src/rpc/crypto/aes.ts","../src/client/index.ts"],"names":["LiopRpcClient","address","tls","credentials","createChannelCredentials","liopV1","request","resolve","reject","error","response","AesGcmWrapper","payload","sharedSecret","nonce","randomBytes","cipher","createCipheriv","encrypted","authTag","ciphertextBuffer","encryptedData","decipher","createDecipheriv","LiopClient","LiopVerifier","options","MeshNode","log","toolName","providers","providerId","grpcPort","manifest","addrs","maddr","parts","grpcHost","providerIds","tools","seenNames","peerId","tool","err","_wasmPayload","rpcClient","dynamicAddress","agentDid","intentPayload","proofOfIntent","intentResponse","publicKey","sessionToken","kyberCiphertext","Kyber768Wrapper","_safePayload","encryptedWasm","aesNonce","encryptedInputs","crypto","key","value","inputNonce","logicRequest","stream","resultFulfilled","hasReceivedData","client","uri","resourceDef","r"],"mappings":"mRAcO,IAAMA,CAAAA,CAAN,KAAoB,CAElB,MAAA,CAER,WAAA,CAAYC,CAAAA,CAAiBC,CAAAA,CAAsB,CAClD,IAAMC,CAAAA,CAAcC,CAAAA,CAAyBF,CAAG,CAAA,CAChD,IAAA,CAAK,MAAA,CAAS,IAAIG,CAAAA,CAAO,SAAA,CAAUJ,CAAAA,CAASE,CAAW,EACxD,CAMA,MAAa,eAAA,CACZG,CAAAA,CAC0B,CAC1B,OAAO,IAAI,QAAQ,CAACC,CAAAA,CAASC,CAAAA,GAAW,CACvC,IAAA,CAAK,MAAA,CAAO,eAAA,CACXF,CAAAA,CACA,CAACG,CAAAA,CAAiCC,CAAAA,GAA6B,CAC1DD,CAAAA,CACHD,CAAAA,CAAOC,CAAK,CAAA,CAEZF,CAAAA,CAAQG,CAAQ,EAElB,CACD,EACD,CAAC,CACF,CAMO,YAAA,CACNJ,CAAAA,CAC2C,CAC3C,OAAO,IAAA,CAAK,MAAA,CAAO,YAAA,CAAaA,CAAO,CACxC,CAEO,KAAA,EAAc,CACpB,IAAA,CAAK,MAAA,CAAO,KAAA,GACb,CACD,EClDO,IAAMK,CAAAA,CAAgB,CAQ5B,cAAA,CACCC,CAAAA,CACAC,CAAAA,CAIC,CACD,GAAIA,CAAAA,CAAa,MAAA,GAAW,EAAA,CAC3B,MAAM,IAAI,KAAA,CAAM,oDAAoD,EAIrE,IAAMC,CAAAA,CAAQC,WAAAA,CAAY,EAAE,CAAA,CAEtBC,CAAAA,CAASC,cAAAA,CAAe,aAAA,CAAeJ,CAAAA,CAAcC,CAAK,CAAA,CAG1DI,CAAAA,CAAY,MAAA,CAAO,MAAA,CAAO,CAACF,CAAAA,CAAO,MAAA,CAAOJ,CAAO,CAAA,CAAGI,CAAAA,CAAO,KAAA,EAAO,CAAC,CAAA,CAClEG,CAAAA,CAAUH,CAAAA,CAAO,UAAA,EAAW,CAMlC,OAAO,CACN,UAAA,CAHuB,MAAA,CAAO,OAAO,CAACE,CAAAA,CAAWC,CAAO,CAAC,CAAA,CAIzD,KAAA,CAAOL,CACR,CACD,CAAA,CAKA,cAAA,CACCM,CAAAA,CACAN,CAAAA,CACAD,CAAAA,CACS,CACT,GAAIO,CAAAA,CAAiB,MAAA,CAAS,EAAA,CAC7B,MAAM,IAAI,KAAA,CACT,2DACD,CAAA,CAID,IAAMC,CAAAA,CAAgBD,CAAAA,CAAiB,QAAA,CAAS,CAAA,CAAG,GAAG,CAAA,CAChDD,CAAAA,CAAUC,CAAAA,CAAiB,SAAS,GAAG,CAAA,CAEvCE,CAAAA,CAAWC,gBAAAA,CAAiB,aAAA,CAAeV,CAAAA,CAAcC,CAAK,CAAA,CACpE,OAAAQ,CAAAA,CAAS,UAAA,CAAWH,CAAO,CAAA,CAEpB,MAAA,CAAO,MAAA,CAAO,CAACG,CAAAA,CAAS,MAAA,CAAOD,CAAa,CAAA,CAAGC,CAAAA,CAAS,KAAA,EAAO,CAAC,CACxE,CACD,CAAA,CClDO,IAAME,CAAAA,CAAN,KAAiB,CACf,QAAA,CAA4B,KAC5B,UAAA,CAAyC,IAAI,GAAA,CAC7C,SAAA,CAAuC,IAAI,GAAA,CAC3C,UAAA,CACA,UAAA,CACD,QAAA,CAAyB,IAAIC,GAAAA,CAEpC,WAAA,CAAYvB,CAAAA,CAAsB,CACjC,IAAA,CAAK,UAAA,CAAaA,EACnB,CAMA,MAAa,OAAA,CACZD,CAAAA,CACAyB,CAAAA,CACgB,CAChB,IAAA,CAAK,QAAA,CAAW,IAAIC,GAAAA,CAASD,CAAAA,EAAS,UAAU,CAAA,CAChD,MAAM,IAAA,CAAK,SAAS,KAAA,EAAM,CAC1BE,GAAAA,CAAI,IAAA,CACH,CAAA,6CAAA,EAAgD,IAAA,CAAK,QAAA,CAAS,SAAA,EAAW,CAAA,CAC1E,CAAA,CAEI3B,CAAAA,EACH,IAAA,CAAK,UAAA,CAAW,GAAA,CACf,QAAA,CACA,IAAID,CAAAA,CAAcC,CAAAA,CAAS,IAAA,CAAK,UAAU,CAC3C,CAAA,CACA,IAAA,CAAK,UAAA,CAAa,CAAE,IAAA,CAAM,CAAA,YAAA,EAAeA,CAAO,CAAA,CAAA,CAAA,CAAK,OAAA,CAAS,OAAQ,EACtE2B,GAAAA,CAAI,IAAA,CAAK,CAAA,yCAAA,EAA4C3B,CAAO,CAAA,CAAE,CAAA,EAE9D,IAAA,CAAK,UAAA,CAAa,CAAE,IAAA,CAAM,yBAAA,CAA2B,OAAA,CAAS,OAAQ,EAExE,CAMA,MAAa,iBAAA,CAAkB4B,CAAAA,CAAmC,CACjE,GAAI,CAAC,IAAA,CAAK,QAAA,CACT,MAAM,IAAI,KAAA,CACT,2DACD,CAAA,CAEDD,GAAAA,CAAI,IAAA,CAAK,CAAA,6CAAA,EAAgDC,CAAQ,KAAK,CAAA,CACtE,IAAMC,CAAAA,CAAY,MAAM,IAAA,CAAK,QAAA,CAAS,aAAA,CAAcD,CAAQ,CAAA,CAE5D,GAAIC,CAAAA,CAAU,MAAA,GAAW,CAAA,CACxB,MAAM,IAAI,KAAA,CACT,CAAA,kDAAA,EAAqDD,CAAQ,CAAA,CAC9D,CAAA,CAGD,IAAME,CAAAA,CAAaD,CAAAA,CAAU,CAAC,CAAA,CAC9BF,GAAAA,CAAI,IAAA,CAAK,CAAA,+CAAA,EAAkDG,CAAU,CAAA,CAAE,CAAA,CAEvE,IAAIC,EAAW,KAAA,CACTC,CAAAA,CAAW,MAAM,IAAA,CAAK,QAAA,CAAS,aAAA,CAAcF,CAAU,CAAA,CACzDE,CAAAA,GACHD,CAAAA,CAAWC,CAAAA,CAAS,QAAA,CACpBL,GAAAA,CAAI,IAAA,CAAK,CAAA,0CAAA,EAA6CI,CAAQ,CAAA,CAAE,CAAA,CAAA,CAGjE,IAAME,CAAAA,CAAQ,MAAM,IAAA,CAAK,QAAA,CAAS,WAAA,CAAYH,CAAU,CAAA,CACxD,IAAA,IAAWI,CAAAA,IAASD,CAAAA,CAAO,CAC1B,IAAME,CAAAA,CAAQD,EAAM,KAAA,CAAM,GAAG,CAAA,CAC7B,GAAIC,CAAAA,CAAM,CAAC,CAAA,GAAM,KAAA,CAAO,CACvB,IAAMC,CAAAA,CAAW,CAAA,EAAGD,CAAAA,CAAM,CAAC,CAAC,CAAA,CAAA,EAAIJ,CAAQ,CAAA,CAAA,CACxC,OAAAJ,GAAAA,CAAI,IAAA,CACH,CAAA,kDAAA,EAAqDS,CAAQ,CAAA,CAC9D,CAAA,CACOA,CACR,CACD,CAEA,OAAO,CAAA,UAAA,EAAaL,CAAQ,CAAA,CAC7B,CAKA,MAAa,aAAA,EAEX,CACD,GAAI,CAAC,IAAA,CAAK,QAAA,CACT,MAAM,IAAI,KAAA,CAAM,oDAAoD,CAAA,CAGrEJ,GAAAA,CAAI,IAAA,CAAK,mCAAmC,CAAA,CAC5C,IAAMU,CAAAA,CAAc,MAAM,IAAA,CAAK,QAAA,CAAS,yBAAA,EAA0B,CAC5DC,CAAAA,CAAkD,EAAC,CACnDC,CAAAA,CAAY,IAAI,GAAA,CAEtB,IAAA,IAAWC,CAAAA,IAAUH,CAAAA,CACpB,GAAI,CACHV,GAAAA,CAAI,IAAA,CAAK,CAAA,qCAAA,EAAwCa,CAAM,CAAA,CAAE,CAAA,CACzD,IAAMR,CAAAA,CAAW,MAAM,IAAA,CAAK,QAAA,CAAS,aAAA,CAAcQ,CAAM,CAAA,CACzD,GAAIR,CAAAA,CAAU,CACb,IAAA,CAAK,SAAA,CAAU,GAAA,CAAIQ,CAAAA,CAAQR,CAAQ,CAAA,CACnC,IAAA,IAAWS,CAAAA,IAAQT,CAAAA,CAAS,KAAA,CACtBO,CAAAA,CAAU,GAAA,CAAIE,CAAAA,CAAK,IAAI,IAC3BH,CAAAA,CAAM,IAAA,CAAK,CAAE,IAAA,CAAMG,CAAAA,CAAK,IAAA,CAAM,WAAA,CAAaA,CAAAA,CAAK,WAAY,CAAC,CAAA,CAC7DF,CAAAA,CAAU,GAAA,CAAIE,CAAAA,CAAK,IAAI,CAAA,EAG1B,CACD,CAAA,MAASC,CAAAA,CAAc,CACtBf,GAAAA,CAAI,IAAA,CACH,CAAA,0CAAA,EAA6Ca,CAAM,CAAA,CAAA,CAAA,CACnDE,CAAAA,YAAe,KAAA,CAAQA,CAAAA,CAAI,OAAA,CAAU,MAAA,CAAOA,CAAG,CAChD,EACD,CAGD,OAAAf,GAAAA,CAAI,IAAA,CACH,CAAA,uCAAA,EAA0CW,CAAAA,CAAM,MAAM,CAAA,cAAA,CACvD,CAAA,CACOA,CACR,CAKA,MAAa,QAAA,CACZjC,CAAAA,CACAsC,CAAAA,CAC0B,CAC1B,GAAI,CAAC,IAAA,CAAK,QAAA,CACT,MAAM,IAAI,KAAA,CAAM,gDAAgD,CAAA,CAGjE,IAAMf,CAAAA,CAAWvB,CAAAA,CAAQ,IAAA,CACzBsB,GAAAA,CAAI,IAAA,CAAK,CAAA,6BAAA,EAAgCC,CAAQ,CAAA,CAAE,CAAA,CAGnD,IAAIgB,CAAAA,CAAY,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,QAAQ,CAAA,CAE5C,GAAKA,CAAAA,CAIJjB,GAAAA,CAAI,IAAA,CACH,CAAA,uDAAA,EAA0DC,CAAQ,CAAA,CAAA,CACnE,CAAA,CAAA,KANe,CACf,IAAMiB,CAAAA,CAAiB,MAAM,IAAA,CAAK,iBAAA,CAAkBjB,CAAQ,CAAA,CAC5DgB,CAAAA,CAAY,IAAA,CAAK,oBAAA,CAAqBhB,CAAAA,CAAUiB,CAAc,EAC/D,CAMAlB,IAAI,IAAA,CAAK,CAAA,oCAAA,EAAuCC,CAAQ,CAAA,GAAA,CAAK,CAAA,CAC7D,IAAMkB,CAAAA,CAAW,IAAA,CAAK,QAAA,CACnB,CAAA,SAAA,EAAY,IAAA,CAAK,QAAA,CAAS,SAAA,EAAW,CAAA,CAAA,CACrC,oBAAA,CACGC,CAAAA,CAAgB,MAAA,CAAO,IAAA,CAAK,CAAA,EAAGnB,CAAQ,CAAA,CAAA,EAAI,IAAA,CAAK,GAAA,EAAK,CAAA,CAAE,CAAA,CACvDoB,CAAAA,CAAgB,IAAA,CAAK,QAAA,CACxB,MAAM,IAAA,CAAK,SAAS,IAAA,CAAKD,CAAa,CAAA,CACtCA,CAAAA,CAEGE,CAAAA,CAAkB,MAAML,CAAAA,CAAU,eAAA,CAAgB,CACvD,SAAA,CAAWE,CAAAA,CACX,eAAA,CAAiBlB,CAAAA,CACjB,eAAA,CAAiBoB,CAClB,CAAC,CAAA,CASD,GAAI,CAACC,CAAAA,CAAe,QAAA,CACnB,MAAM,IAAI,KAAA,CAAM,CAAA,uBAAA,EAA0BA,CAAAA,CAAe,aAAa,CAAA,CAAE,CAAA,CAIzE,IAAMC,CAAAA,CACLD,CAAAA,CAAe,kBAAoBA,CAAAA,CAAe,cAAA,CAC7CE,CAAAA,CACLF,CAAAA,CAAe,aAAA,EAAiBA,CAAAA,CAAe,YAAA,CAEhD,GAAI,CAACC,CAAAA,CACJ,MAAAvB,GAAAA,CAAI,IAAA,CACH,4EAAA,CACAsB,CACD,CAAA,CACM,IAAI,KAAA,CACT,yEACD,CAAA,CAIDtB,GAAAA,CAAI,IAAA,CACH,CAAA,0DAAA,EAA6DtB,CAAAA,CAAQ,IAAI,CAAA,GAAA,CAC1E,CAAA,CACA,GAAM,CAAE,UAAA,CAAY+C,CAAAA,CAAiB,YAAA,CAAAxC,CAAa,CAAA,CACjD,MAAMyC,GAAAA,CAAgB,qBAAA,CAAsBH,CAAS,CAAA,CAGtDvB,GAAAA,CAAI,IAAA,CAAK,iDAAiD,CAAA,CAE1D,IAAM2B,CAAAA,CAAeX,CAAAA,EAAgB,MAAA,CAAO,IAAA,CAAK,EAAE,CAAA,CAG7C,CAAE,UAAA,CAAYY,CAAAA,CAAe,KAAA,CAAOC,CAAS,CAAA,CAClD9C,CAAAA,CAAc,cAAA,CAAe4C,CAAAA,CAAc1C,CAAY,CAAA,CAGlD6C,CAAAA,CAA8C,EAAC,CAC/CC,CAAAA,CAAS,MAAM,OAAO,QAAa,CAAA,CACzC,IAAA,GAAW,CAACC,CAAAA,CAAKC,CAAK,CAAA,GAAK,MAAA,CAAO,OAAA,CAAQvD,CAAAA,CAAQ,SAAA,EAAa,EAAE,CAAA,CAAG,CACnE,IAAMwD,CAAAA,CAAaH,CAAAA,CAAO,WAAA,CAAY,EAAE,CAAA,CAClC3C,CAAAA,CAAS2C,CAAAA,CAAO,cAAA,CACrB,aAAA,CACA9C,CAAAA,CACAiD,CACD,CAAA,CACM5C,CAAAA,CAAY,MAAA,CAAO,MAAA,CAAO,CAC/BF,CAAAA,CAAO,MAAA,CAAO,IAAA,CAAK,SAAA,CAAU6C,CAAK,CAAC,CAAA,CACnC7C,CAAAA,CAAO,KAAA,EACR,CAAC,CAAA,CACKG,CAAAA,CAAUH,CAAAA,CAAO,UAAA,EAAW,CAElC0C,CAAAA,CAAgBE,CAAG,CAAA,CAAI,MAAA,CAAO,MAAA,CAAO,CAACE,CAAAA,CAAY5C,CAAAA,CAAWC,CAAO,CAAC,EACtE,CAGA,IAAM4C,CAAAA,CAA6B,CAClC,aAAA,CAAeX,EACf,WAAA,CAAaI,CAAAA,CACb,MAAA,CAAQE,CAAAA,CACR,cAAA,CAAgBL,CAAAA,CAChB,SAAA,CAAWI,CACZ,CAAA,CAEA,OAAO,IAAI,OAAA,CAAQ,CAAClD,CAAAA,CAASC,CAAAA,GAAW,CACvC,IAAMwD,CAAAA,CAASnB,CAAAA,CAAU,YAAA,CAAakB,CAAY,CAAA,CAClD,GAAI,CAACC,CAAAA,CAAQ,CACZxD,CAAAA,CAAO,IAAI,KAAA,CAAM,oDAAoD,CAAC,CAAA,CACtE,MACD,CACA,IAAIyD,CAAAA,CAAkB,KAAA,CAClBC,CAAAA,CAAkB,KAAA,CAEtBF,CAAAA,CAAO,EAAA,CAAG,MAAA,CAAQ,MAAOtD,CAAAA,EAA4B,CACpD,GAAI,CAAAuD,CAAAA,CACJ,CAAAC,CAAAA,CAAkB,IAAA,CAElBtC,GAAAA,CAAI,IAAA,CAAK,0DAA0D,CAAA,CAEnE,GAAI,CAQH,GAAI,CAPY,MAAM,IAAA,CAAK,QAAA,CAAS,eAAA,CACnC2B,CAAAA,CACA,MAAA,CAAO,KAAK7C,CAAAA,CAAS,mBAAmB,CAAA,CAAE,QAAA,CAAS,KAAK,CAAA,CACxD,MAAA,CAAO,IAAA,CAAKA,CAAAA,CAAS,UAAU,CAAA,CAC/B,MAAA,CAAO,IAAA,CAAKG,CAAY,CACzB,CAAA,CAEc,CACbL,CAAAA,CACC,IAAI,KAAA,CACH,+DACD,CACD,CAAA,CACA,MACD,CAEAyD,CAAAA,CAAkB,CAAA,CAAA,CAClB1D,CAAAA,CAAQ,CACP,OAAA,CAAS,CACR,CACC,KAAM,MAAA,CACN,IAAA,CAAMG,CAAAA,CAAS,iBAChB,CACD,CAAA,CACA,OAAA,CAASA,CAAAA,CAAS,QACnB,CAAC,EACF,CAAA,MAASiC,CAAAA,CAAK,CACbnC,CAAAA,CAAOmC,CAAG,EACX,CAAA,CACD,CAAC,CAAA,CAEDqB,CAAAA,CAAO,EAAA,CAAG,OAAA,CAAUrB,CAAAA,EAAQ,CACvBsB,CAAAA,GACJrC,GAAAA,CAAI,KAAA,CAAM,4BAAA,CAA8Be,CAAG,CAAA,CAC3CnC,CAAAA,CAAOmC,CAAG,CAAA,EACX,CAAC,CAAA,CAEDqB,CAAAA,CAAO,EAAA,CAAG,KAAA,CAAO,IAAM,CAGlB,CAACE,CAAAA,EAAmB,CAACD,CAAAA,EACxBzD,CAAAA,CAAO,IAAI,KAAA,CAAM,gDAAgD,CAAC,EAEpE,CAAC,EACF,CAAC,CACF,CAEQ,oBAAA,CAAqBiC,CAAAA,CAAgBxC,CAAAA,CAAgC,CAC5E,IAAIkE,CAAAA,CAAS,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI1B,CAAM,CAAA,CACvC,OAAK0B,CAAAA,GACJA,CAAAA,CAAS,IAAInE,CAAAA,CAAcC,CAAAA,CAAS,IAAA,CAAK,UAAU,CAAA,CACnD,IAAA,CAAK,UAAA,CAAW,GAAA,CAAIwC,CAAAA,CAAQ0B,CAAM,CAAA,CAAA,CAE5BA,CACR,CAMA,MAAa,YAAA,CAAaC,CAAAA,CAEvB,CACF,GAAI,CAAC,IAAA,CAAK,QAAA,CACT,MAAM,IAAI,KAAA,CAAM,oDAAoD,CAAA,CAErExC,GAAAA,CAAI,KAAK,CAAA,yCAAA,EAA4CwC,CAAG,CAAA,GAAA,CAAK,CAAA,CAG7D,IAAMtC,CAAAA,CAAY,MAAM,IAAA,CAAK,QAAA,CAAS,aAAA,CAAcsC,CAAG,CAAA,CACvD,GAAItC,CAAAA,CAAU,MAAA,GAAW,CAAA,CACxB,MAAM,IAAI,KAAA,CAAM,CAAA,sCAAA,EAAyCsC,CAAG,CAAA,CAAE,CAAA,CAI/D,IAAMnC,CAAAA,CAAW,MAAM,IAAA,CAAK,QAAA,CAAS,aAAA,CAAcH,CAAAA,CAAU,CAAC,CAAC,EAC/D,GAAI,CAACG,CAAAA,CACJ,MAAM,IAAI,KAAA,CAAM,mDAAmD,CAAA,CAIpE,IAAMoC,CAAAA,CAAcpC,CAAAA,CAAS,SAAA,EAAW,IAAA,CAAMqC,CAAAA,EAAMA,CAAAA,CAAE,GAAA,GAAQF,CAAG,CAAA,CACjE,GAAI,CAACC,CAAAA,CACJ,MAAM,IAAI,KAAA,CAAM,CAAA,SAAA,EAAYD,CAAG,CAAA,+BAAA,CAAiC,CAAA,CAIjE,OAAO,CACN,QAAA,CAAU,CACT,CACC,GAAA,CAAAA,CAAAA,CACA,QAAA,CAAUC,CAAAA,CAAY,QAAA,EAAY,kBAAA,CAClC,IAAA,CAAM,IAAA,CAAK,SAAA,CAAUA,CAAAA,CAAa,IAAA,CAAM,CAAC,CAC1C,CACD,CACD,CACD,CAEO,aAAA,EAA+D,CACrE,OAAO,IAAA,CAAK,UACb,CAKA,MAAa,KAAA,EAAuB,CAC/B,IAAA,CAAK,QAAA,EACR,MAAM,IAAA,CAAK,QAAA,CAAS,IAAA,GAEtB,CACD","file":"chunk-P52IE4L6.js","sourcesContent":["import type * as grpc from \"@grpc/grpc-js\";\nimport { liopV1 } from \"./proto.js\";\nimport { createChannelCredentials, type LiopTlsOptions } from \"./tls.js\";\nimport type {\n\tIntentRequest,\n\tIntentResponse,\n\tLogicRequest,\n\tLogicResponse,\n} from \"./types.js\";\n\n/**\n * LIOP gRPC Client Implementation\n * Provides a high-level interface for secure intent negotiation and logic execution.\n */\nexport class LiopRpcClient {\n\t// biome-ignore lint/suspicious/noExplicitAny: internal gRPC client type\n\tprivate client: any;\n\n\tconstructor(address: string, tls?: LiopTlsOptions) {\n\t\tconst credentials = createChannelCredentials(tls);\n\t\tthis.client = new liopV1.LogicMesh(address, credentials);\n\t}\n\n\t/**\n\t * Negotiates intent with the remote host.\n\t * Returns the ephemeral Kyber public key for payload encryption.\n\t */\n\tpublic async negotiateIntent(\n\t\trequest: IntentRequest,\n\t): Promise<IntentResponse> {\n\t\treturn new Promise((resolve, reject) => {\n\t\t\tthis.client.NegotiateIntent(\n\t\t\t\trequest,\n\t\t\t\t(error: grpc.ServiceError | null, response: IntentResponse) => {\n\t\t\t\t\tif (error) {\n\t\t\t\t\t\treject(error);\n\t\t\t\t\t} else {\n\t\t\t\t\t\tresolve(response);\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t);\n\t\t});\n\t}\n\n\t/**\n\t * Pushes the encrypted Logic-on-Origin payload to the origin.\n\t * Returns a stream of semantic responses and ZK proofs.\n\t */\n\tpublic executeLogic(\n\t\trequest: LogicRequest,\n\t): grpc.ClientReadableStream<LogicResponse> {\n\t\treturn this.client.ExecuteLogic(request);\n\t}\n\n\tpublic close(): void {\n\t\tthis.client.close();\n\t}\n}\n","import { createCipheriv, createDecipheriv, randomBytes } from \"node:crypto\";\n\n/**\n * LIOP Symmetric Payload Encryption Wrapper\n * Uses AES-256-GCM to secure WASM Code transport over Zero-Trust networks.\n * Fully compatible with the `aes-gcm` Rust crate used by Wasmtime.\n */\nexport const AesGcmWrapper = {\n\t/**\n\t * Encrypts a raw WASM payload using the shared secret negotiated via Kyber768.\n\t *\n\t * @param payload Raw incoming WASM byte array or string.\n\t * @param sharedSecret A perfectly derived 32-byte (256-bit) shared secret array\n\t * @returns The encrypted buffer to push to the GRPc stream, along with the 12-byte initialization vector natively generated.\n\t */\n\tencryptPayload(\n\t\tpayload: Uint8Array | Buffer,\n\t\tsharedSecret: Uint8Array,\n\t): {\n\t\tciphertext: Buffer;\n\t\tnonce: Buffer;\n\t} {\n\t\tif (sharedSecret.length !== 32) {\n\t\t\tthrow new Error(\"Symmetric Key must be exactly 32 bytes (256 bits).\");\n\t\t}\n\n\t\t// LIOP standard demands 96-bit (12 byte) IVs/Nonces for AES-GCM\n\t\tconst nonce = randomBytes(12);\n\n\t\tconst cipher = createCipheriv(\"aes-256-gcm\", sharedSecret, nonce);\n\n\t\t// Encrypt the payload and seal the tag\n\t\tconst encrypted = Buffer.concat([cipher.update(payload), cipher.final()]);\n\t\tconst authTag = cipher.getAuthTag(); // 16 bytes for GCM integrity\n\n\t\t// In LIOP, the auth tag is strictly appended to the end of the ciphertext bytes\n\t\t// mirroring the default serialization logic within `aes_gcm::Aes256Gcm` in Rust\n\t\tconst finalCiphertext = Buffer.concat([encrypted, authTag]);\n\n\t\treturn {\n\t\t\tciphertext: finalCiphertext,\n\t\t\tnonce: nonce,\n\t\t};\n\t},\n\n\t/**\n\t * Decrypts a remote Zero-Knowledge receipt using AES-256-GCM.\n\t */\n\tdecryptPayload(\n\t\tciphertextBuffer: Buffer,\n\t\tnonce: Buffer,\n\t\tsharedSecret: Uint8Array,\n\t): Buffer {\n\t\tif (ciphertextBuffer.length < 16) {\n\t\t\tthrow new Error(\n\t\t\t\t\"Invalid GCM Ciphertext; missing authentication tag length\",\n\t\t\t);\n\t\t}\n\n\t\t// The last 16 bytes represent the AuthTag appended by rust-aes-gcm\n\t\tconst encryptedData = ciphertextBuffer.subarray(0, -16);\n\t\tconst authTag = ciphertextBuffer.subarray(-16);\n\n\t\tconst decipher = createDecipheriv(\"aes-256-gcm\", sharedSecret, nonce);\n\t\tdecipher.setAuthTag(authTag);\n\n\t\treturn Buffer.concat([decipher.update(encryptedData), decipher.final()]);\n\t},\n};\n","import { LiopVerifier } from \"../crypto/verifier.js\";\nimport {\n\ttype LiopManifest,\n\tMeshNode,\n\ttype MeshNodeConfig,\n} from \"../mesh/node.js\";\nimport { LiopRpcClient } from \"../rpc/client.js\";\nimport { AesGcmWrapper } from \"../rpc/crypto/aes.js\";\nimport { Kyber768Wrapper } from \"../rpc/crypto/kyber.js\";\nimport type { LiopTlsOptions } from \"../rpc/tls.js\";\nimport type { LogicRequest, LogicResponse } from \"../rpc/types.js\";\nimport type { CallToolRequest, CallToolResult } from \"../types.js\";\nimport { log } from \"../utils/logger.js\";\n\n/**\n * LIOP Client\n * High-level orchestration for discovery and execution in the Logic-Injection-on-Origin mesh.\n */\nexport class LiopClient {\n\tprivate meshNode: MeshNode | null = null;\n\tprivate rpcClients: Map<string, LiopRpcClient> = new Map();\n\tprivate manifests: Map<string, LiopManifest> = new Map();\n\tprivate tlsOptions?: LiopTlsOptions;\n\tprivate serverInfo?: { name: string; version: string };\n\tpublic verifier: LiopVerifier = new LiopVerifier();\n\n\tconstructor(tls?: LiopTlsOptions) {\n\t\tthis.tlsOptions = tls;\n\t}\n\n\t/**\n\t * Discovers and connects to the target server or mesh capability.\n\t * If address is omitted, it sets up the MeshNode to act purely dynamically.\n\t */\n\tpublic async connect(\n\t\taddress?: string,\n\t\toptions?: { meshConfig?: MeshNodeConfig },\n\t): Promise<void> {\n\t\tthis.meshNode = new MeshNode(options?.meshConfig);\n\t\tawait this.meshNode.start();\n\t\tlog.info(\n\t\t\t`[LiopClient] Mesh Node synchronized. PeerID: ${this.meshNode.getPeerId()}`,\n\t\t);\n\n\t\tif (address) {\n\t\t\tthis.rpcClients.set(\n\t\t\t\t\"static\",\n\t\t\t\tnew LiopRpcClient(address, this.tlsOptions),\n\t\t\t);\n\t\t\tthis.serverInfo = { name: `LiopServer (${address})`, version: \"1.0.0\" };\n\t\t\tlog.info(`[LiopClient] Static gRPC configured for: ${address}`);\n\t\t} else {\n\t\t\tthis.serverInfo = { name: \"LiopServer (Mesh Alpha)\", version: \"1.0.0\" };\n\t\t}\n\t}\n\n\t/**\n\t * Dynamically queries Kademlia DHT to find the optimal PeerID providing the Capability\n\t * and returns the physical gRPC target (host:port) resolved from the provider's manifest.\n\t */\n\tpublic async resolveCapability(toolName: string): Promise<string> {\n\t\tif (!this.meshNode)\n\t\t\tthrow new Error(\n\t\t\t\t\"Client must be connected to Mesh to resolve capabilities.\",\n\t\t\t);\n\n\t\tlog.info(`[LiopClient] Querying Mesh DHT for Provider: ${toolName}...`);\n\t\tconst providers = await this.meshNode.findProviders(toolName);\n\n\t\tif (providers.length === 0) {\n\t\t\tthrow new Error(\n\t\t\t\t`Kademlia DHT found zero providers for capability: ${toolName}`,\n\t\t\t);\n\t\t}\n\n\t\tconst providerId = providers[0];\n\t\tlog.info(`[LiopClient] Identified Alpha Provider PeerID: ${providerId}`);\n\n\t\tlet grpcPort = 50051;\n\t\tconst manifest = await this.meshNode.queryManifest(providerId);\n\t\tif (manifest) {\n\t\t\tgrpcPort = manifest.grpcPort;\n\t\t\tlog.info(`[LiopClient] Manifest resolved: gRPC port ${grpcPort}`);\n\t\t}\n\n\t\tconst addrs = await this.meshNode.resolvePeer(providerId);\n\t\tfor (const maddr of addrs) {\n\t\t\tconst parts = maddr.split(\"/\");\n\t\t\tif (parts[1] === \"ip4\") {\n\t\t\t\tconst grpcHost = `${parts[2]}:${grpcPort}`;\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LiopClient] Translated Multiaddr to gRPC Target: ${grpcHost}`,\n\t\t\t\t);\n\t\t\t\treturn grpcHost;\n\t\t\t}\n\t\t}\n\n\t\treturn `127.0.0.1:${grpcPort}`;\n\t}\n\n\t/**\n\t * Discovers remote capabilities via the LIOP Manifest Protocol.\n\t */\n\tpublic async discoverTools(): Promise<\n\t\t{ name: string; description?: string }[]\n\t> {\n\t\tif (!this.meshNode) {\n\t\t\tthrow new Error(\"Client must be connected before discovering tools.\");\n\t\t}\n\n\t\tlog.info(`[LiopClient] Discovery started...`);\n\t\tconst providerIds = await this.meshNode.discoverManifestProviders();\n\t\tconst tools: { name: string; description?: string }[] = [];\n\t\tconst seenNames = new Set<string>();\n\n\t\tfor (const peerId of providerIds) {\n\t\t\ttry {\n\t\t\t\tlog.info(`[LiopClient] Querying manifest from: ${peerId}`);\n\t\t\t\tconst manifest = await this.meshNode.queryManifest(peerId);\n\t\t\t\tif (manifest) {\n\t\t\t\t\tthis.manifests.set(peerId, manifest);\n\t\t\t\t\tfor (const tool of manifest.tools) {\n\t\t\t\t\t\tif (!seenNames.has(tool.name)) {\n\t\t\t\t\t\t\ttools.push({ name: tool.name, description: tool.description });\n\t\t\t\t\t\t\tseenNames.add(tool.name);\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t} catch (err: unknown) {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LiopClient] Error querying manifest from ${peerId}:`,\n\t\t\t\t\terr instanceof Error ? err.message : String(err),\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\n\t\tlog.info(\n\t\t\t`[LiopClient] Discovery finished. Found ${tools.length} unique tools.`,\n\t\t);\n\t\treturn tools;\n\t}\n\n\t/**\n\t * Invokes a tool.\n\t */\n\tpublic async callTool(\n\t\trequest: CallToolRequest,\n\t\t_wasmPayload?: Buffer,\n\t): Promise<CallToolResult> {\n\t\tif (!this.meshNode) {\n\t\t\tthrow new Error(\"Client must be connected before calling tools.\");\n\t\t}\n\n\t\tconst toolName = request.name;\n\t\tlog.info(`[LiopClient] Resolving Tool: ${toolName}`);\n\n\t\t// [ALPHA-FIX] Bypass DHT discovery if we are already statically connected to a provider (Enterprise/Test mode)\n\t\tlet rpcClient = this.rpcClients.get(\"static\");\n\n\t\tif (!rpcClient) {\n\t\t\tconst dynamicAddress = await this.resolveCapability(toolName);\n\t\t\trpcClient = this.getOrCreateRpcClient(toolName, dynamicAddress);\n\t\t} else {\n\t\t\tlog.info(\n\t\t\t\t`[LiopClient] Using existing static gRPC connection for ${toolName}.`,\n\t\t\t);\n\t\t}\n\n\t\tlog.info(`[LiopClient] Negotiating intent for ${toolName}...`);\n\t\tconst agentDid = this.meshNode\n\t\t\t? `did:liop:${this.meshNode.getPeerId()}`\n\t\t\t: \"did:liop:ephemeral\";\n\t\tconst intentPayload = Buffer.from(`${toolName}:${Date.now()}`);\n\t\tconst proofOfIntent = this.meshNode\n\t\t\t? await this.meshNode.sign(intentPayload)\n\t\t\t: intentPayload;\n\n\t\tconst intentResponse = (await rpcClient.negotiateIntent({\n\t\t\tagent_did: agentDid,\n\t\t\tcapability_hash: toolName,\n\t\t\tproof_of_intent: proofOfIntent,\n\t\t})) as unknown as {\n\t\t\taccepted: boolean;\n\t\t\terror_message: string;\n\t\t\tkyber_public_key: Uint8Array;\n\t\t\tkyberPublicKey: Uint8Array;\n\t\t\tsession_token: string;\n\t\t\tsessionToken: string;\n\t\t};\n\n\t\tif (!intentResponse.accepted) {\n\t\t\tthrow new Error(`Intent denied by host: ${intentResponse.error_message}`);\n\t\t}\n\n\t\t// LIOP Robust Field Extraction (Supports both snake_case and camelCase via gRPC-JS)\n\t\tconst publicKey =\n\t\t\tintentResponse.kyber_public_key || intentResponse.kyberPublicKey;\n\t\tconst sessionToken =\n\t\t\tintentResponse.session_token || intentResponse.sessionToken;\n\n\t\tif (!publicKey) {\n\t\t\tlog.info(\n\t\t\t\t\"[LiopClient] Critical Error: Kyber Public Key not found in IntentResponse.\",\n\t\t\t\tintentResponse,\n\t\t\t);\n\t\t\tthrow new Error(\n\t\t\t\t\"Handshake failed: Remote host did not provide a valid Kyber Public Key.\",\n\t\t\t);\n\t\t}\n\n\t\t// 2. Post-Quantum Encapsulation (ML-KEM-768)\n\t\tlog.info(\n\t\t\t`[LiopClient] Encapsulating Post-Quantum Shared Secret for ${request.name}...`,\n\t\t);\n\t\tconst { ciphertext: kyberCiphertext, sharedSecret } =\n\t\t\tawait Kyber768Wrapper.encapsulateAsymmetric(publicKey);\n\n\t\t// 3. Symmetric Sealing (AES-256-GCM)\n\t\tlog.info(`[LiopClient] Sealing WASM Payload and Inputs...`);\n\n\t\tconst _safePayload = _wasmPayload || Buffer.from(\"\");\n\n\t\t// Encrypt WASM binary\n\t\tconst { ciphertext: encryptedWasm, nonce: aesNonce } =\n\t\t\tAesGcmWrapper.encryptPayload(_safePayload, sharedSecret);\n\n\t\t// Encrypt inputs using a fresh random nonce per input to prevent AES-GCM nonce reuse\n\t\tconst encryptedInputs: Record<string, Uint8Array> = {};\n\t\tconst crypto = await import(\"node:crypto\");\n\t\tfor (const [key, value] of Object.entries(request.arguments || {})) {\n\t\t\tconst inputNonce = crypto.randomBytes(12);\n\t\t\tconst cipher = crypto.createCipheriv(\n\t\t\t\t\"aes-256-gcm\",\n\t\t\t\tsharedSecret,\n\t\t\t\tinputNonce,\n\t\t\t);\n\t\t\tconst encrypted = Buffer.concat([\n\t\t\t\tcipher.update(JSON.stringify(value)),\n\t\t\t\tcipher.final(),\n\t\t\t]);\n\t\t\tconst authTag = cipher.getAuthTag();\n\t\t\t// Prepend the 12-byte nonce to the ciphertext\n\t\t\tencryptedInputs[key] = Buffer.concat([inputNonce, encrypted, authTag]);\n\t\t}\n\n\t\t// 4. Assemble and Execute gRPC LogicRequest\n\t\tconst logicRequest: LogicRequest = {\n\t\t\tsession_token: sessionToken,\n\t\t\twasm_binary: encryptedWasm,\n\t\t\tinputs: encryptedInputs,\n\t\t\tpqc_ciphertext: kyberCiphertext,\n\t\t\taes_nonce: aesNonce,\n\t\t};\n\n\t\treturn new Promise((resolve, reject) => {\n\t\t\tconst stream = rpcClient.executeLogic(logicRequest);\n\t\t\tif (!stream) {\n\t\t\t\treject(new Error(\"RPC Client unavailable or failed to create stream.\"));\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tlet resultFulfilled = false;\n\t\t\tlet hasReceivedData = false;\n\n\t\t\tstream.on(\"data\", async (response: LogicResponse) => {\n\t\t\t\tif (resultFulfilled) return;\n\t\t\t\thasReceivedData = true;\n\n\t\t\t\tlog.info(\"[LiopClient] Logic Executed. Verification in progress...\");\n\n\t\t\t\ttry {\n\t\t\t\t\tconst isValid = await this.verifier.verifyZkReceipt(\n\t\t\t\t\t\t_safePayload,\n\t\t\t\t\t\tBuffer.from(response.cryptographic_proof).toString(\"hex\"),\n\t\t\t\t\t\tBuffer.from(response.zk_receipt),\n\t\t\t\t\t\tBuffer.from(sharedSecret),\n\t\t\t\t\t);\n\n\t\t\t\t\tif (!isValid) {\n\t\t\t\t\t\treject(\n\t\t\t\t\t\t\tnew Error(\n\t\t\t\t\t\t\t\t\"PROTOCOL INTEGRITY VIOLATION: ZK-Receipt verification failed.\",\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t);\n\t\t\t\t\t\treturn;\n\t\t\t\t\t}\n\n\t\t\t\t\tresultFulfilled = true;\n\t\t\t\t\tresolve({\n\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\t\ttext: response.semantic_evidence,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t],\n\t\t\t\t\t\tisError: response.is_error,\n\t\t\t\t\t});\n\t\t\t\t} catch (err) {\n\t\t\t\t\treject(err);\n\t\t\t\t}\n\t\t\t});\n\n\t\t\tstream.on(\"error\", (err) => {\n\t\t\t\tif (resultFulfilled) return;\n\t\t\t\tlog.error(\"[LiopClient] Stream Error:\", err);\n\t\t\t\treject(err);\n\t\t\t});\n\n\t\t\tstream.on(\"end\", () => {\n\t\t\t\t// We don't throw here if we already received a response block that is currently\n\t\t\t\t// undergoing ZK Verification in the Piscina worker pool.\n\t\t\t\tif (!hasReceivedData && !resultFulfilled) {\n\t\t\t\t\treject(new Error(\"Logic-on-Origin stream closed without results.\"));\n\t\t\t\t}\n\t\t\t});\n\t\t});\n\t}\n\n\tprivate getOrCreateRpcClient(peerId: string, address: string): LiopRpcClient {\n\t\tlet client = this.rpcClients.get(peerId);\n\t\tif (!client) {\n\t\t\tclient = new LiopRpcClient(address, this.tlsOptions);\n\t\t\tthis.rpcClients.set(peerId, client);\n\t\t}\n\t\treturn client;\n\t}\n\n\t/**\n\t * Reads a specific resource by URI.\n\t * In LIOP, resources can be static definitions or dynamic streams.\n\t */\n\tpublic async readResource(uri: string): Promise<{\n\t\tcontents: Array<{ uri: string; mimeType?: string; text: string }>;\n\t}> {\n\t\tif (!this.meshNode) {\n\t\t\tthrow new Error(\"Client must be connected before reading resources.\");\n\t\t}\n\t\tlog.info(`[LiopClient] Querying Mesh for Resource: ${uri}...`);\n\n\t\t// We search for the peer hosting the resource in the P2P Mesh\n\t\tconst providers = await this.meshNode.findProviders(uri);\n\t\tif (providers.length === 0) {\n\t\t\tthrow new Error(`No mesh providers found for resource: ${uri}`);\n\t\t}\n\n\t\t// Query the remote peer's manifest\n\t\tconst manifest = await this.meshNode.queryManifest(providers[0]);\n\t\tif (!manifest) {\n\t\t\tthrow new Error(\"Target peer did not return a valid LIOP Manifest.\");\n\t\t}\n\n\t\t// Locate the exact resource metadata\n\t\tconst resourceDef = manifest.resources?.find((r) => r.uri === uri);\n\t\tif (!resourceDef) {\n\t\t\tthrow new Error(`Resource ${uri} not listed in remote manifest.`);\n\t\t}\n\n\t\t// Return the declarative metadata (Logic-Injection is required for actual data extraction)\n\t\treturn {\n\t\t\tcontents: [\n\t\t\t\t{\n\t\t\t\t\turi,\n\t\t\t\t\tmimeType: resourceDef.mimeType || \"application/json\",\n\t\t\t\t\ttext: JSON.stringify(resourceDef, null, 2),\n\t\t\t\t},\n\t\t\t],\n\t\t};\n\t}\n\n\tpublic getServerInfo(): { name: string; version: string } | undefined {\n\t\treturn this.serverInfo;\n\t}\n\n\t/**\n\t * Destroys the active Mesh Node resources.\n\t */\n\tpublic async close(): Promise<void> {\n\t\tif (this.meshNode) {\n\t\t\tawait this.meshNode.stop();\n\t\t}\n\t}\n}\n"]}

package/dist/chunk-PIBCW4BD.js

@@ -0,0 +1,13 @@
+import {g}from'./chunk-4ABAFG44.js';import {a}from'./chunk-S6RJHZV2.js';import*as d from'http';import*as c from'http2';import*as l from'net';var h=class{constructor(e,r=null,o=50051){this.liopServer=e;this.meshNode=r;this.router=new g(this.liopServer,this.meshNode,o),this.h2Server=c.createServer(),this.setupH2Routes(),this.h1Server=d.createServer(),this.setupH1Routes(),this.netServer=l.createServer(t=>{t.once("data",n=>{let s=n.toString().startsWith("PRI * HTTP/2.0");a.info(`[LIOP-Gateway] Incoming L4 Connection. Protocol: ${s?"HTTP/2 (gRPC)":"HTTP/1.1 (MCP)"}`),s?this.h2Server.emit("connection",t):this.h1Server.emit("connection",t),t.unshift(n);}),t.on("error",n=>a.error(`[LIOP-Gateway] NetServer Socket Error: ${n.message}`));}),this.h1Server.on("error",t=>a.error(`[LIOP-Gateway] H1 Server Error: ${t.message}`)),this.h2Server.on("error",t=>a.error(`[LIOP-Gateway] H2 Server Error: ${t.message}`)),a.info("[LIOP-Gateway] Hybrid adapter initialized.");}netServer;h2Server;h1Server;router;setupH2Routes(){this.h2Server.on("stream",(e,r)=>{let o=r["content-type"],t=r[":path"];o==="application/grpc"?this.handleGrpcStream(e):t==="/mcp"&&this.handleMcpH2Stream(e,r);});}setupH1Routes(){this.h1Server.on("request",async(e,r)=>{let o=e.url||"",t=e.method;if(t==="GET"&&(o==="/"||o==="/mcp"||o==="/health")){if(o==="/health"&&e.headers.accept?.includes("application/json")){let n=this.meshNode?{peerId:this.meshNode.getPeerId()?.toString()||"",multiaddrs:this.meshNode.getMultiaddrs().map(s=>s.toString())}:null;r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"healthy",node:this.liopServer.getServerInfo(),mesh:n,tools:this.liopServer.listTools().map(s=>s.name),timestamp:new Date().toISOString()}));return}r.writeHead(200,{"Content-Type":"text/html; charset=utf-8"}),r.end(`
+                    <body style="background:#0f172a;color:#f8fafc;font-family:sans-serif;display:flex;flex-direction:column;align-items:center;justify-content:center;height:100vh;margin:0">
+                        <div style="background:#1e293b;padding:40px;border-radius:16px;border:1px solid #38bdf8;text-align:center;box-shadow:0 20px 25px -5px rgba(0,0,0,0.1)">
+                            <h1 style="color:#38bdf8;margin-top:0">LIOP Protocol Transformer</h1>
+                            <p style="opacity:0.8;font-weight:600">L4/L7 Transcoding: JSON-RPC &harr; gRPC</p>
+                            <p style="opacity:0.6;font-size:14px">Active Protections: Kyber768 + AES-256-GCM + ZK-Proof Ready</p>
+                            <div style="background:#0f172a;padding:15px;border-radius:8px;margin-top:20px;border:1px dashed #334155">
+                                <code style="color:#10b981">Endpoint: http://localhost:3000/mcp</code>
+                            </div>
+                        </div>
+                    </body>
+                `);return}if(o==="/mcp"&&t==="POST"){let n="";e.on("data",s=>n+=s.toString()),e.on("end",async()=>{try{let s=JSON.parse(n),a=await this.router.dispatch(s);r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify(a));}catch(s){a.info(`[LIOP-Gateway] Error processing JSON-RPC payload: ${s.message}`),r.writeHead(400),r.end(JSON.stringify({jsonrpc:"2.0",error:{code:-32700,message:"Parse error"}}));}});}else r.writeHead(404),r.end("Not Found");});}handleGrpcStream(e){e.on("data",r=>{let o=r;o&&a.info(`[LIOP-Gateway] Native gRPC Proxy passing ${o.length} bytes`);}),e.respond({":status":200,"content-type":"application/grpc"}),e.end();}handleMcpH2Stream(e,r){let o="";e.on("data",t=>o+=t.toString()),e.on("end",async()=>{try{let t=await this.router.dispatch(JSON.parse(o));t?(e.respond({":status":200,"content-type":"application/json"}),e.end(JSON.stringify(t))):e.close();}catch{e.respond({":status":400}),e.end();}});}async listen(e,r="0.0.0.0"){if(this.meshNode){await this.meshNode.start();let o=this.liopServer.listTools();for(let t of o)await this.meshNode.announceCapability(t.name),a.info(`[LIOP-Gateway] \u{1F4E1} Announced local tool to Mesh: ${t.name}`);}return new Promise((o,t)=>{this.netServer.on("error",n=>{n.code==="EADDRINUSE"?a.info(`[LIOP-Gateway] FATAL: Port ${e} is already in use by another process.`):a.error(`[LIOP-Gateway] Binding Error: ${n.message}`),t(n);}),this.netServer.listen(e,r,()=>{let n=this.netServer.address(),s=typeof n=="string"?n:n?.address||r,a$1=typeof n=="string"?e:n?.port||e;a.info(`[LIOP-Gateway] \u2705 Transformer Mesh Gateway READY and listening on ${s}:${a$1}`),o(a$1);});})}async stop(){this.meshNode&&await this.meshNode.stop(),this.netServer.close(),this.h2Server.close(),this.h1Server.close();}getRouter(){return this.router}};export{h as a};//# sourceMappingURL=chunk-PIBCW4BD.js.map
+//# sourceMappingURL=chunk-PIBCW4BD.js.map

package/dist/chunk-PIBCW4BD.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/gateway/hybrid.ts"],"names":["LiopHybridGateway","liopServer","meshNode","rpcPort","LiopMcpRouter","socket","buffer","isHttp2","log","err","stream","headers","contentType","path","req","res","url","method","meshInfo","m","t","body","chunk","jsonRequest","response","e","data","_headers","port","host","tools","tool","resolve","reject","addr","actualHost","assignedPort"],"mappings":"6IAYO,IAAMA,CAAAA,CAAN,KAAwB,CAM9B,WAAA,CACSC,EACAC,CAAAA,CAA4B,IAAA,CACpCC,CAAAA,CAAkB,KAAA,CACjB,CAHO,IAAA,CAAA,UAAA,CAAAF,CAAAA,CACA,IAAA,CAAA,QAAA,CAAAC,EAIR,IAAA,CAAK,MAAA,CAAS,IAAIE,CAAAA,CAAc,KAAK,UAAA,CAAY,IAAA,CAAK,QAAA,CAAUD,CAAO,EAGvE,IAAA,CAAK,QAAA,CAAiB,CAAA,CAAA,YAAA,EAAa,CACnC,IAAA,CAAK,aAAA,EAAc,CAGnB,IAAA,CAAK,SAAgB,CAAA,CAAA,YAAA,EAAa,CAClC,IAAA,CAAK,aAAA,EAAc,CAGnB,IAAA,CAAK,SAAA,CAAgB,CAAA,CAAA,YAAA,CAAcE,GAAW,CAC7CA,CAAAA,CAAO,IAAA,CAAK,MAAA,CAASC,CAAAA,EAAW,CAC/B,IAAMC,CAAAA,CAAUD,EAAO,QAAA,EAAS,CAAE,UAAA,CAAW,gBAAgB,EAC7DE,CAAAA,CAAI,IAAA,CACH,CAAA,iDAAA,EAAoDD,CAAAA,CAAU,gBAAkB,gBAAgB,CAAA,CACjG,CAAA,CACIA,CAAAA,CACH,IAAA,CAAK,QAAA,CAAS,IAAA,CAAK,YAAA,CAAcF,CAAM,CAAA,CAEvC,IAAA,CAAK,QAAA,CAAS,IAAA,CAAK,YAAA,CAAcA,CAAM,CAAA,CAExCA,CAAAA,CAAO,QAAQC,CAAM,EACtB,CAAC,CAAA,CACDD,CAAAA,CAAO,EAAA,CAAG,OAAA,CAAUI,CAAAA,EACnBD,EAAI,KAAA,CAAM,CAAA,uCAAA,EAA0CC,CAAAA,CAAI,OAAO,EAAE,CAClE,EACD,CAAC,CAAA,CAGD,KAAK,QAAA,CAAS,EAAA,CAAG,OAAA,CAAUA,CAAAA,EAC1BD,CAAAA,CAAI,KAAA,CAAM,CAAA,gCAAA,EAAmCC,CAAAA,CAAI,OAAO,CAAA,CAAE,CAC3D,CAAA,CACA,IAAA,CAAK,QAAA,CAAS,EAAA,CAAG,OAAA,CAAUA,CAAAA,EAC1BD,EAAI,KAAA,CAAM,CAAA,gCAAA,EAAmCC,CAAAA,CAAI,OAAO,CAAA,CAAE,CAC3D,CAAA,CAEAD,CAAAA,CAAI,KAAK,4CAA4C,EACtD,CAjDQ,SAAA,CACA,SACA,QAAA,CACA,MAAA,CAgDA,aAAA,EAAgB,CACvB,KAAK,QAAA,CAAS,EAAA,CAAG,QAAA,CAAU,CAACE,CAAAA,CAAQC,CAAAA,GAAY,CAC/C,IAAMC,EAAcD,CAAAA,CAAQ,cAAc,CAAA,CACpCE,CAAAA,CAAOF,CAAAA,CAAQ,OAAO,CAAA,CAExBC,CAAAA,GAAgB,mBACnB,IAAA,CAAK,gBAAA,CAAiBF,CAAiC,CAAA,CAC7CG,CAAAA,GAAS,MAAA,EACnB,IAAA,CAAK,iBAAA,CAAkBH,EAAmCC,CAAO,EAEnE,CAAC,EACF,CAEQ,aAAA,EAAgB,CACvB,IAAA,CAAK,QAAA,CAAS,GAAG,SAAA,CAAW,MAAOG,CAAAA,CAAKC,CAAAA,GAAQ,CAC/C,IAAMC,CAAAA,CAAMF,CAAAA,CAAI,KAAO,EAAA,CACjBG,CAAAA,CAASH,CAAAA,CAAI,MAAA,CAEnB,GACCG,CAAAA,GAAW,KAAA,GACVD,CAAAA,GAAQ,KAAOA,CAAAA,GAAQ,MAAA,EAAUA,CAAAA,GAAQ,SAAA,CAAA,CACzC,CACD,GACCA,CAAAA,GAAQ,SAAA,EACRF,EAAI,OAAA,CAAQ,MAAA,EAAQ,QAAA,CAAS,kBAAkB,EAC9C,CACD,IAAMI,CAAAA,CAAW,IAAA,CAAK,SACnB,CACA,MAAA,CAAQ,IAAA,CAAK,QAAA,CAAS,SAAA,EAAU,EAAG,QAAA,EAAS,EAAK,GACjD,UAAA,CAAY,IAAA,CAAK,QAAA,CACf,aAAA,EAAc,CACd,GAAA,CAAKC,CAAAA,EAAMA,CAAAA,CAAE,UAAU,CAC1B,CAAA,CACC,IAAA,CACHJ,CAAAA,CAAI,SAAA,CAAU,GAAA,CAAK,CAAE,eAAgB,kBAAmB,CAAC,CAAA,CACzDA,CAAAA,CAAI,IACH,IAAA,CAAK,SAAA,CAAU,CACd,MAAA,CAAQ,UACR,IAAA,CAAM,IAAA,CAAK,UAAA,CAAW,aAAA,EAAc,CACpC,IAAA,CAAMG,CAAAA,CACN,KAAA,CAAO,KAAK,UAAA,CAAW,SAAA,EAAU,CAAE,GAAA,CAAKE,CAAAA,EAAMA,CAAAA,CAAE,IAAI,CAAA,CACpD,UAAW,IAAI,IAAA,EAAK,CAAE,WAAA,EACvB,CAAC,CACF,CAAA,CACA,MACD,CAEAL,CAAAA,CAAI,SAAA,CAAU,GAAA,CAAK,CAAE,cAAA,CAAgB,0BAA2B,CAAC,CAAA,CACjEA,EAAI,GAAA,CAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,gBAAA,CAWK,EACb,MACD,CAEA,GAAIC,CAAAA,GAAQ,MAAA,EAAUC,IAAW,MAAA,CAAQ,CACxC,IAAII,CAAAA,CAAO,GACXP,CAAAA,CAAI,EAAA,CAAG,OAASQ,CAAAA,EAAWD,CAAAA,EAAQC,EAAM,QAAA,EAAW,CAAA,CACpDR,CAAAA,CAAI,GAAG,KAAA,CAAO,SAAY,CACzB,GAAI,CACH,IAAMS,CAAAA,CAAc,IAAA,CAAK,KAAA,CAAMF,CAAI,EAC7BG,CAAAA,CAAW,MAAM,KAAK,MAAA,CAAO,QAAA,CAASD,CAAW,CAAA,CACvDR,CAAAA,CAAI,SAAA,CAAU,GAAA,CAAK,CAAE,cAAA,CAAgB,kBAAmB,CAAC,CAAA,CACzDA,CAAAA,CAAI,IAAI,IAAA,CAAK,SAAA,CAAUS,CAAQ,CAAC,EACjC,CAAA,MAASC,CAAAA,CAAY,CACpBjB,CAAAA,CAAI,IAAA,CACH,qDAAsDiB,CAAAA,CAAY,OAAO,CAAA,CAC1E,CAAA,CACAV,EAAI,SAAA,CAAU,GAAG,EACjBA,CAAAA,CAAI,GAAA,CACH,KAAK,SAAA,CAAU,CACd,QAAS,KAAA,CACT,KAAA,CAAO,CAAE,IAAA,CAAM,MAAA,CAAQ,QAAS,aAAc,CAC/C,CAAC,CACF,EACD,CACD,CAAC,EACF,CAAA,KACCA,CAAAA,CAAI,UAAU,GAAG,CAAA,CACjBA,EAAI,GAAA,CAAI,WAAW,EAErB,CAAC,EACF,CAEQ,gBAAA,CAAiBL,EAAiC,CACzDA,CAAAA,CAAO,GAAG,MAAA,CAASY,CAAAA,EAAmB,CAErC,IAAMI,EAAOJ,CAAAA,CACTI,CAAAA,EACHlB,EAAI,IAAA,CACH,CAAA,yCAAA,EAA4CkB,EAAK,MAAM,CAAA,MAAA,CACxD,EACF,CAAC,EACDhB,CAAAA,CAAO,OAAA,CAAQ,CAAE,SAAA,CAAW,GAAA,CAAK,eAAgB,kBAAmB,CAAC,CAAA,CACrEA,CAAAA,CAAO,MACR,CAEQ,kBACPA,CAAAA,CACAiB,CAAAA,CACC,CACD,IAAIN,CAAAA,CAAO,EAAA,CACXX,CAAAA,CAAO,GAAG,MAAA,CAASY,CAAAA,EAAWD,GAAQC,CAAAA,CAAM,QAAA,EAAW,CAAA,CACvDZ,CAAAA,CAAO,EAAA,CAAG,KAAA,CAAO,SAAY,CAC5B,GAAI,CACH,IAAMc,CAAAA,CAAW,MAAM,IAAA,CAAK,MAAA,CAAO,SAAS,IAAA,CAAK,KAAA,CAAMH,CAAI,CAAC,CAAA,CACxDG,GACHd,CAAAA,CAAO,OAAA,CAAQ,CACd,SAAA,CAAW,GAAA,CACX,cAAA,CAAgB,kBACjB,CAAC,CAAA,CACDA,CAAAA,CAAO,IAAI,IAAA,CAAK,SAAA,CAAUc,CAAQ,CAAC,CAAA,EAC7Bd,CAAAA,CAAO,KAAA,GACf,CAAA,KAAa,CACZA,EAAO,OAAA,CAAQ,CAAE,UAAW,GAAI,CAAC,CAAA,CACjCA,CAAAA,CAAO,MACR,CACD,CAAC,EACF,CAEA,MAAa,MAAA,CAAOkB,CAAAA,CAAcC,CAAAA,CAAe,SAAA,CAA4B,CAC5E,GAAI,IAAA,CAAK,SAAU,CAClB,MAAM,KAAK,QAAA,CAAS,KAAA,EAAM,CAG1B,IAAMC,EAAQ,IAAA,CAAK,UAAA,CAAW,WAAU,CACxC,IAAA,IAAWC,KAAQD,CAAAA,CAClB,MAAM,IAAA,CAAK,QAAA,CAAS,mBAAmBC,CAAAA,CAAK,IAAI,EAChDvB,CAAAA,CAAI,IAAA,CACH,0DAAmDuB,CAAAA,CAAK,IAAI,CAAA,CAC7D,EAEF,CACA,OAAO,IAAI,QAAQ,CAACC,CAAAA,CAASC,IAAW,CACvC,IAAA,CAAK,UAAU,EAAA,CAAG,OAAA,CAAUxB,GAAmC,CAC1DA,CAAAA,CAAI,OAAS,YAAA,CAChBD,CAAAA,CAAI,KACH,CAAA,2BAAA,EAA8BoB,CAAI,CAAA,sCAAA,CACnC,CAAA,CAEApB,EAAI,KAAA,CAAM,CAAA,8BAAA,EAAiCC,EAAI,OAAO,CAAA,CAAE,EAEzDwB,CAAAA,CAAOxB,CAAG,EACX,CAAC,EAED,IAAA,CAAK,SAAA,CAAU,OAAOmB,CAAAA,CAAMC,CAAAA,CAAM,IAAM,CACvC,IAAMK,CAAAA,CAAO,IAAA,CAAK,UAAU,OAAA,EAAQ,CAC9BC,EACL,OAAOD,CAAAA,EAAS,SAAWA,CAAAA,CAAOA,CAAAA,EAAM,OAAA,EAAWL,CAAAA,CAC9CO,IACL,OAAOF,CAAAA,EAAS,SAAWN,CAAAA,CAAOM,CAAAA,EAAM,MAAQN,CAAAA,CAEjDpB,CAAAA,CAAI,IAAA,CACH,CAAA,sEAAA,EAAoE2B,CAAU,CAAA,CAAA,EAAIC,GAAY,EAC/F,CAAA,CACAJ,CAAAA,CAAQI,GAAY,EACrB,CAAC,EACF,CAAC,CACF,CAEA,MAAa,MAAO,CACf,IAAA,CAAK,UACR,MAAM,IAAA,CAAK,QAAA,CAAS,IAAA,GAErB,IAAA,CAAK,SAAA,CAAU,OAAM,CACrB,IAAA,CAAK,SAAS,KAAA,EAAM,CACpB,KAAK,QAAA,CAAS,KAAA,GACf,CAEO,SAAA,EAA2B,CACjC,OAAO,IAAA,CAAK,MACb,CACD","file":"chunk-PIBCW4BD.js","sourcesContent":["import * as http from \"node:http\";\nimport * as http2 from \"node:http2\";\nimport * as net from \"node:net\";\nimport type { MeshNode } from \"../mesh/index.js\";\nimport type { LiopServer } from \"../server/index.js\";\nimport { log } from \"../utils/logger.js\";\nimport { LiopMcpRouter } from \"./router.js\";\n\n/**\n * LIOP Hybrid Gateway\n * High-level orchestration for connecting MCP (JSON-RPC) clients to the LIOP Mesh.\n */\nexport class LiopHybridGateway {\n\tprivate netServer: net.Server;\n\tprivate h2Server: http2.Http2Server;\n\tprivate h1Server: http.Server;\n\tprivate router: LiopMcpRouter;\n\n\tconstructor(\n\t\tprivate liopServer: LiopServer,\n\t\tprivate meshNode: MeshNode | null = null,\n\t\trpcPort: number = 50051,\n\t) {\n\t\t// Initialize the Universal Router\n\t\tthis.router = new LiopMcpRouter(this.liopServer, this.meshNode, rpcPort);\n\n\t\t// Internal HTTP/2 Server (for Native gRPC Proxying)\n\t\tthis.h2Server = http2.createServer();\n\t\tthis.setupH2Routes();\n\n\t\t// Internal HTTP/1 Server (for Browser/MCP)\n\t\tthis.h1Server = http.createServer();\n\t\tthis.setupH1Routes();\n\n\t\t// Primary Multiplexer (L4)\n\t\tthis.netServer = net.createServer((socket) => {\n\t\t\tsocket.once(\"data\", (buffer) => {\n\t\t\t\tconst isHttp2 = buffer.toString().startsWith(\"PRI * HTTP/2.0\");\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Gateway] Incoming L4 Connection. Protocol: ${isHttp2 ? \"HTTP/2 (gRPC)\" : \"HTTP/1.1 (MCP)\"}`,\n\t\t\t\t);\n\t\t\t\tif (isHttp2) {\n\t\t\t\t\tthis.h2Server.emit(\"connection\", socket);\n\t\t\t\t} else {\n\t\t\t\t\tthis.h1Server.emit(\"connection\", socket);\n\t\t\t\t}\n\t\t\t\tsocket.unshift(buffer);\n\t\t\t});\n\t\t\tsocket.on(\"error\", (err) =>\n\t\t\t\tlog.error(`[LIOP-Gateway] NetServer Socket Error: ${err.message}`),\n\t\t\t);\n\t\t});\n\n\t\t// Attach error listeners to sub-servers to catch silent failures\n\t\tthis.h1Server.on(\"error\", (err) =>\n\t\t\tlog.error(`[LIOP-Gateway] H1 Server Error: ${err.message}`),\n\t\t);\n\t\tthis.h2Server.on(\"error\", (err) =>\n\t\t\tlog.error(`[LIOP-Gateway] H2 Server Error: ${err.message}`),\n\t\t);\n\n\t\tlog.info(\"[LIOP-Gateway] Hybrid adapter initialized.\");\n\t}\n\n\tprivate setupH2Routes() {\n\t\tthis.h2Server.on(\"stream\", (stream, headers) => {\n\t\t\tconst contentType = headers[\"content-type\"] as string;\n\t\t\tconst path = headers[\":path\"] as string;\n\n\t\t\tif (contentType === \"application/grpc\") {\n\t\t\t\tthis.handleGrpcStream(stream as http2.ServerHttp2Stream);\n\t\t\t} else if (path === \"/mcp\") {\n\t\t\t\tthis.handleMcpH2Stream(stream as http2.ServerHttp2Stream, headers);\n\t\t\t}\n\t\t});\n\t}\n\n\tprivate setupH1Routes() {\n\t\tthis.h1Server.on(\"request\", async (req, res) => {\n\t\t\tconst url = req.url || \"\";\n\t\t\tconst method = req.method;\n\n\t\t\tif (\n\t\t\t\tmethod === \"GET\" &&\n\t\t\t\t(url === \"/\" || url === \"/mcp\" || url === \"/health\")\n\t\t\t) {\n\t\t\t\tif (\n\t\t\t\t\turl === \"/health\" &&\n\t\t\t\t\treq.headers.accept?.includes(\"application/json\")\n\t\t\t\t) {\n\t\t\t\t\tconst meshInfo = this.meshNode\n\t\t\t\t\t\t? {\n\t\t\t\t\t\t\t\tpeerId: this.meshNode.getPeerId()?.toString() || \"\",\n\t\t\t\t\t\t\t\tmultiaddrs: this.meshNode\n\t\t\t\t\t\t\t\t\t.getMultiaddrs()\n\t\t\t\t\t\t\t\t\t.map((m) => m.toString()),\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t: null;\n\t\t\t\t\tres.writeHead(200, { \"Content-Type\": \"application/json\" });\n\t\t\t\t\tres.end(\n\t\t\t\t\t\tJSON.stringify({\n\t\t\t\t\t\t\tstatus: \"healthy\",\n\t\t\t\t\t\t\tnode: this.liopServer.getServerInfo(),\n\t\t\t\t\t\t\tmesh: meshInfo,\n\t\t\t\t\t\t\ttools: this.liopServer.listTools().map((t) => t.name),\n\t\t\t\t\t\t\ttimestamp: new Date().toISOString(),\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\n\t\t\t\tres.writeHead(200, { \"Content-Type\": \"text/html; charset=utf-8\" });\n\t\t\t\tres.end(`\n                    <body style=\"background:#0f172a;color:#f8fafc;font-family:sans-serif;display:flex;flex-direction:column;align-items:center;justify-content:center;height:100vh;margin:0\">\n                        <div style=\"background:#1e293b;padding:40px;border-radius:16px;border:1px solid #38bdf8;text-align:center;box-shadow:0 20px 25px -5px rgba(0,0,0,0.1)\">\n                            <h1 style=\"color:#38bdf8;margin-top:0\">LIOP Protocol Transformer</h1>\n                            <p style=\"opacity:0.8;font-weight:600\">L4/L7 Transcoding: JSON-RPC &harr; gRPC</p>\n                            <p style=\"opacity:0.6;font-size:14px\">Active Protections: Kyber768 + AES-256-GCM + ZK-Proof Ready</p>\n                            <div style=\"background:#0f172a;padding:15px;border-radius:8px;margin-top:20px;border:1px dashed #334155\">\n                                <code style=\"color:#10b981\">Endpoint: http://localhost:3000/mcp</code>\n                            </div>\n                        </div>\n                    </body>\n                `);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tif (url === \"/mcp\" && method === \"POST\") {\n\t\t\t\tlet body = \"\";\n\t\t\t\treq.on(\"data\", (chunk) => (body += chunk.toString()));\n\t\t\t\treq.on(\"end\", async () => {\n\t\t\t\t\ttry {\n\t\t\t\t\t\tconst jsonRequest = JSON.parse(body);\n\t\t\t\t\t\tconst response = await this.router.dispatch(jsonRequest);\n\t\t\t\t\t\tres.writeHead(200, { \"Content-Type\": \"application/json\" });\n\t\t\t\t\t\tres.end(JSON.stringify(response));\n\t\t\t\t\t} catch (e: unknown) {\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Gateway] Error processing JSON-RPC payload: ${(e as Error).message}`,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tres.writeHead(400);\n\t\t\t\t\t\tres.end(\n\t\t\t\t\t\t\tJSON.stringify({\n\t\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\t\terror: { code: -32700, message: \"Parse error\" },\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t});\n\t\t\t} else {\n\t\t\t\tres.writeHead(404);\n\t\t\t\tres.end(\"Not Found\");\n\t\t\t}\n\t\t});\n\t}\n\n\tprivate handleGrpcStream(stream: http2.ServerHttp2Stream) {\n\t\tstream.on(\"data\", (chunk: unknown) => {\n\t\t\t// biome-ignore lint/suspicious/noExplicitAny: Standard gRPC stream data is Buffer\n\t\t\tconst data = chunk as any;\n\t\t\tif (data)\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Gateway] Native gRPC Proxy passing ${data.length} bytes`,\n\t\t\t\t);\n\t\t});\n\t\tstream.respond({ \":status\": 200, \"content-type\": \"application/grpc\" });\n\t\tstream.end();\n\t}\n\n\tprivate handleMcpH2Stream(\n\t\tstream: http2.ServerHttp2Stream,\n\t\t_headers: http2.IncomingHttpHeaders,\n\t) {\n\t\tlet body = \"\";\n\t\tstream.on(\"data\", (chunk) => (body += chunk.toString()));\n\t\tstream.on(\"end\", async () => {\n\t\t\ttry {\n\t\t\t\tconst response = await this.router.dispatch(JSON.parse(body));\n\t\t\t\tif (response) {\n\t\t\t\t\tstream.respond({\n\t\t\t\t\t\t\":status\": 200,\n\t\t\t\t\t\t\"content-type\": \"application/json\",\n\t\t\t\t\t});\n\t\t\t\t\tstream.end(JSON.stringify(response));\n\t\t\t\t} else stream.close();\n\t\t\t} catch (_e) {\n\t\t\t\tstream.respond({ \":status\": 400 });\n\t\t\t\tstream.end();\n\t\t\t}\n\t\t});\n\t}\n\n\tpublic async listen(port: number, host: string = \"0.0.0.0\"): Promise<number> {\n\t\tif (this.meshNode) {\n\t\t\tawait this.meshNode.start();\n\n\t\t\t// Announce all local tools to the DHT\n\t\t\tconst tools = this.liopServer.listTools();\n\t\t\tfor (const tool of tools) {\n\t\t\t\tawait this.meshNode.announceCapability(tool.name);\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Gateway] 📡 Announced local tool to Mesh: ${tool.name}`,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t\treturn new Promise((resolve, reject) => {\n\t\t\tthis.netServer.on(\"error\", (err: Error & { code?: string }) => {\n\t\t\t\tif (err.code === \"EADDRINUSE\") {\n\t\t\t\t\tlog.info(\n\t\t\t\t\t\t`[LIOP-Gateway] FATAL: Port ${port} is already in use by another process.`,\n\t\t\t\t\t);\n\t\t\t\t} else {\n\t\t\t\t\tlog.error(`[LIOP-Gateway] Binding Error: ${err.message}`);\n\t\t\t\t}\n\t\t\t\treject(err);\n\t\t\t});\n\n\t\t\tthis.netServer.listen(port, host, () => {\n\t\t\t\tconst addr = this.netServer.address();\n\t\t\t\tconst actualHost =\n\t\t\t\t\ttypeof addr === \"string\" ? addr : addr?.address || host;\n\t\t\t\tconst assignedPort =\n\t\t\t\t\ttypeof addr === \"string\" ? port : addr?.port || port;\n\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Gateway] ✅ Transformer Mesh Gateway READY and listening on ${actualHost}:${assignedPort}`,\n\t\t\t\t);\n\t\t\t\tresolve(assignedPort);\n\t\t\t});\n\t\t});\n\t}\n\n\tpublic async stop() {\n\t\tif (this.meshNode) {\n\t\t\tawait this.meshNode.stop();\n\t\t}\n\t\tthis.netServer.close();\n\t\tthis.h2Server.close();\n\t\tthis.h1Server.close();\n\t}\n\n\tpublic getRouter(): LiopMcpRouter {\n\t\treturn this.router;\n\t}\n}\n"]}