@nekzus/liop 2.0.1-beta.1 → 2.1.0-beta.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (39) hide show
  1. package/README.md +39 -11
  2. package/dist/bin/agent.js +1 -1
  3. package/dist/bridge.d.ts +1 -1
  4. package/dist/bridge.js +1 -1
  5. package/dist/{chunk-W2QGWRTT.js → chunk-7L5ODML2.js} +3 -3
  6. package/dist/{chunk-W2QGWRTT.js.map → chunk-7L5ODML2.js.map} +1 -1
  7. package/dist/{chunk-YZVCAJJO.js → chunk-GI2LSJYZ.js} +3 -3
  8. package/dist/{chunk-YZVCAJJO.js.map → chunk-GI2LSJYZ.js.map} +1 -1
  9. package/dist/{chunk-VGXNGTIC.js → chunk-I46YEWND.js} +7 -7
  10. package/dist/chunk-I46YEWND.js.map +1 -0
  11. package/dist/{chunk-L5A64CNT.js → chunk-KQ5BDO2M.js} +3 -3
  12. package/dist/chunk-KQ5BDO2M.js.map +1 -0
  13. package/dist/chunk-PWCXZWSE.js +2 -0
  14. package/dist/chunk-PWCXZWSE.js.map +1 -0
  15. package/dist/{chunk-N6FGTZ6A.js → chunk-T3L6OCM3.js} +3 -3
  16. package/dist/chunk-T3L6OCM3.js.map +1 -0
  17. package/dist/client.d.ts +2 -2
  18. package/dist/client.js +1 -1
  19. package/dist/gateway.d.ts +2 -2
  20. package/dist/gateway.js +1 -1
  21. package/dist/{index-CL8m1L1d.d.ts → index-BcuTJtQX.d.ts} +2 -0
  22. package/dist/{index-B_Vbrb_I.d.ts → index-Brfvxmdt.d.ts} +1 -1
  23. package/dist/index.d.ts +4 -4
  24. package/dist/index.js +1 -1
  25. package/dist/server.d.ts +1 -1
  26. package/dist/server.js +1 -1
  27. package/dist/{verifier-DTCD9imJ.d.ts → verifier-COnid_dg.d.ts} +1 -1
  28. package/dist/verifier-XU2DB56Z.js +2 -0
  29. package/dist/{verifier-Z26UC7M4.js.map → verifier-XU2DB56Z.js.map} +1 -1
  30. package/dist/workers/zk-verifier.d.ts +2 -0
  31. package/dist/workers/zk-verifier.js +1 -1
  32. package/dist/workers/zk-verifier.js.map +1 -1
  33. package/package.json +1 -1
  34. package/dist/chunk-L5A64CNT.js.map +0 -1
  35. package/dist/chunk-N6FGTZ6A.js.map +0 -1
  36. package/dist/chunk-SW53FNSN.js +0 -2
  37. package/dist/chunk-SW53FNSN.js.map +0 -1
  38. package/dist/chunk-VGXNGTIC.js.map +0 -1
  39. package/dist/verifier-Z26UC7M4.js +0 -2
@@ -1 +0,0 @@
1
- {"version":3,"sources":["../src/rpc/client.ts","../src/rpc/crypto/aes.ts","../src/client/index.ts"],"names":["LiopRpcClient","address","tls","token","credentials","createChannelCredentials","liopV1","request","resolve","reject","metadata","error","response","AesGcmWrapper","payload","sharedSecret","nonce","randomBytes","cipher","createCipheriv","encrypted","authTag","ciphertextBuffer","encryptedData","decipher","createDecipheriv","LiopClient","LiopVerifier","authOpts","tokenUrl","log","params","text","data","options","clientId","clientSecret","nexusUrl","audience","scope","err","MeshNode","toolName","providers","providerId","grpcPort","manifest","addrs","maddr","parts","grpcHost","providerIds","tools","seenNames","peerId","tool","_wasmPayload","rpcClient","dynamicAddress","agentDid","intentPayload","proofOfIntent","intentResponse","publicKey","sessionToken","kyberCiphertext","Kyber768Wrapper","_safePayload","encryptedWasm","aesNonce","encryptedInputs","crypto","key","value","inputNonce","logicRequest","stream","resultFulfilled","hasReceivedData","client","nodeToken","realPeerId","pId","m","t","providerName","envToken","slug","shortId","cleanName","uri","resourceDef","r"],"mappings":"mTAcO,IAAMA,EAAN,KAAoB,CAElB,OACA,KAAA,CAER,WAAA,CAAYC,CAAAA,CAAiBC,CAAAA,CAAsBC,EAAgB,CAClE,IAAMC,EAAcC,CAAAA,CAAyBH,CAAG,EAChD,IAAA,CAAK,MAAA,CAAS,IAAII,CAAAA,CAAO,UAAUL,CAAAA,CAASG,CAAW,EACvD,IAAA,CAAK,KAAA,CAAQD,EACd,CAMA,MAAa,gBACZI,CAAAA,CAC0B,CAC1B,OAAO,IAAI,OAAA,CAAQ,CAACC,CAAAA,CAASC,CAAAA,GAAW,CACvC,IAAMC,CAAAA,CAAW,IAAS,CAAA,CAAA,QAAA,CACtB,KAAK,KAAA,EACRA,CAAAA,CAAS,IAAI,eAAA,CAAiB,CAAA,OAAA,EAAU,KAAK,KAAK,CAAA,CAAE,CAAA,CAErD,IAAA,CAAK,OAAO,eAAA,CACXH,CAAAA,CACAG,EACA,CAACC,CAAAA,CAAiCC,IAA6B,CAC1DD,CAAAA,CACHF,CAAAA,CAAOE,CAAK,EAEZH,CAAAA,CAAQI,CAAQ,EAElB,CACD,EACD,CAAC,CACF,CAMO,aACNL,CAAAA,CAC2C,CAC3C,IAAMG,CAAAA,CAAW,IAAS,WAC1B,OAAI,IAAA,CAAK,OACRA,CAAAA,CAAS,GAAA,CAAI,eAAA,CAAiB,CAAA,OAAA,EAAU,KAAK,KAAK,CAAA,CAAE,EAE9C,IAAA,CAAK,MAAA,CAAO,aAAaH,CAAAA,CAASG,CAAQ,CAClD,CAEO,OAAc,CACpB,IAAA,CAAK,OAAO,KAAA,GACb,CACD,EC7DO,IAAMG,EAAgB,CAQ5B,cAAA,CACCC,EACAC,CAAAA,CAIC,CACD,GAAIA,CAAAA,CAAa,MAAA,GAAW,GAC3B,MAAM,IAAI,MAAM,oDAAoD,CAAA,CAIrE,IAAMC,CAAAA,CAAQC,YAAY,EAAE,CAAA,CAEtBC,EAASC,cAAAA,CAAe,aAAA,CAAeJ,EAAcC,CAAK,CAAA,CAG1DI,CAAAA,CAAY,MAAA,CAAO,OAAO,CAACF,CAAAA,CAAO,OAAOJ,CAAO,CAAA,CAAGI,EAAO,KAAA,EAAO,CAAC,CAAA,CAClEG,EAAUH,CAAAA,CAAO,UAAA,GAMvB,OAAO,CACN,WAHuB,MAAA,CAAO,MAAA,CAAO,CAACE,CAAAA,CAAWC,CAAO,CAAC,CAAA,CAIzD,KAAA,CAAOL,CACR,CACD,CAAA,CAKA,eACCM,CAAAA,CACAN,CAAAA,CACAD,CAAAA,CACS,CACT,GAAIO,CAAAA,CAAiB,MAAA,CAAS,GAC7B,MAAM,IAAI,MACT,2DACD,CAAA,CAID,IAAMC,CAAAA,CAAgBD,EAAiB,QAAA,CAAS,CAAA,CAAG,GAAG,CAAA,CAChDD,CAAAA,CAAUC,EAAiB,QAAA,CAAS,GAAG,CAAA,CAEvCE,CAAAA,CAAWC,iBAAiB,aAAA,CAAeV,CAAAA,CAAcC,CAAK,CAAA,CACpE,OAAAQ,EAAS,UAAA,CAAWH,CAAO,EAEpB,MAAA,CAAO,MAAA,CAAO,CAACG,CAAAA,CAAS,MAAA,CAAOD,CAAa,CAAA,CAAGC,CAAAA,CAAS,OAAO,CAAC,CACxE,CACD,EClDO,IAAME,CAAAA,CAAN,KAAiB,CACf,QAAA,CAA4B,KAC5B,UAAA,CAAyC,IAAI,GAAA,CAC7C,SAAA,CAAuC,IAAI,GAAA,CAC3C,UAAA,CACA,WACD,QAAA,CAAyB,IAAIC,IAC5B,UAAA,CAER,WAAA,CAAYzB,CAAAA,CAAsB,CACjC,KAAK,UAAA,CAAaA,EACnB,CAKA,MAAc,eAAA,CAAgB0B,EAMV,CAInB,IAAMC,EAAW,CAAA,EAHDD,CAAAA,CAAS,SAAS,QAAA,CAAS,OAAO,EAC/CA,CAAAA,CAAS,QAAA,CACT,GAAGA,CAAAA,CAAS,QAAQ,CAAA,KAAA,CACI,CAAA,MAAA,CAAA,CAC3BE,IAAI,IAAA,CAAK,CAAA,iDAAA,EAAoDD,CAAQ,CAAA,CAAE,CAAA,CAEvE,IAAME,CAAAA,CAAS,IAAI,eAAA,CAAgB,CAClC,WAAY,oBAAA,CACZ,KAAA,CACCH,EAAS,KAAA,EACT,sFAAA,CACD,SAAUA,CAAAA,CAAS,QAAA,CACnB,SAAA,CAAWA,CAAAA,CAAS,SACpB,aAAA,CAAeA,CAAAA,CAAS,YACzB,CAAC,CAAA,CAEKhB,EAAW,MAAM,KAAA,CAAMiB,EAAU,CACtC,MAAA,CAAQ,OACR,OAAA,CAAS,CACR,eAAgB,mCACjB,CAAA,CACA,KAAME,CAAAA,CAAO,QAAA,EACd,CAAC,EAED,GAAI,CAACnB,EAAS,EAAA,CAAI,CACjB,IAAMoB,CAAAA,CAAO,MAAMpB,EAAS,IAAA,EAAK,CACjC,MAAM,IAAI,KAAA,CACT,0CAA0CA,CAAAA,CAAS,MAAM,KAAKoB,CAAI,CAAA,CACnE,CACD,CAEA,IAAMC,CAAAA,CAAQ,MAAMrB,EAAS,IAAA,EAAK,CAIlC,GAAI,CAACqB,CAAAA,CAAK,aACT,MAAM,IAAI,MAAM,uDAAuD,CAAA,CAGxE,OAAAH,GAAAA,CAAI,IAAA,CAAK,+CAA+C,CAAA,CACjDG,CAAAA,CAAK,YACb,CAMA,MAAa,OAAA,CACZhC,CAAAA,CACAiC,EAWgB,CAEhB,IAAMC,EACLD,CAAAA,EAAS,IAAA,EAAM,QAAA,EACf,OAAA,CAAQ,IAAI,oBAAA,EACZ,OAAA,CAAQ,IAAI,cAAA,CACPE,CAAAA,CACLF,GAAS,IAAA,EAAM,YAAA,EACf,OAAA,CAAQ,GAAA,CAAI,0BACZ,OAAA,CAAQ,GAAA,CAAI,mBACPG,CAAAA,CACLH,CAAAA,EAAS,MAAM,QAAA,EACf,OAAA,CAAQ,IAAI,cAAA,EACZ,uBAAA,CACKI,EACLJ,CAAAA,EAAS,IAAA,EAAM,UACf,OAAA,CAAQ,GAAA,CAAI,qBACZ,mBAAA,CACKK,CAAAA,CACLL,CAAAA,EAAS,IAAA,EAAM,OACf,OAAA,CAAQ,GAAA,CAAI,kBACZ,sFAAA,CAOD,GALA,KAAK,UAAA,CACJA,CAAAA,EAAS,IAAA,EAAM,KAAA,EACf,QAAQ,GAAA,CAAI,gBAAA,EACZ,QAAQ,GAAA,CAAI,UAAA,CAETC,GAAYC,CAAAA,CACf,GAAI,CACH,IAAA,CAAK,WAAa,MAAM,IAAA,CAAK,gBAAgB,CAC5C,QAAA,CAAAD,EACA,YAAA,CAAAC,CAAAA,CACA,SAAAC,CAAAA,CACA,QAAA,CAAAC,EACA,KAAA,CAAAC,CACD,CAAC,EACF,CAAA,MAASC,EAAc,CACtBV,GAAAA,CAAI,KAAA,CACH,CAAA,gDAAA,EACCU,aAAe,KAAA,CAAQA,CAAAA,CAAI,QAAU,MAAA,CAAOA,CAAG,CAChD,CAAA,CACD,EAED,CAGD,IAAA,CAAK,SAAW,IAAIC,GAAAA,CAASP,GAAS,UAAU,CAAA,CAChD,MAAM,IAAA,CAAK,QAAA,CAAS,KAAA,EAAM,CAC1BJ,IAAI,IAAA,CACH,CAAA,6CAAA,EAAgD,KAAK,QAAA,CAAS,SAAA,EAAW,CAAA,CAC1E,CAAA,CAEI7B,GACH,IAAA,CAAK,UAAA,CAAW,IACf,QAAA,CACA,IAAID,EAAcC,CAAAA,CAAS,IAAA,CAAK,WAAY,IAAA,CAAK,UAAU,CAC5D,CAAA,CACA,KAAK,UAAA,CAAa,CAAE,KAAM,CAAA,YAAA,EAAeA,CAAO,IAAK,OAAA,CAAS,OAAQ,EACtE6B,GAAAA,CAAI,IAAA,CAAK,4CAA4C7B,CAAO,CAAA,CAAE,GAE9D,IAAA,CAAK,UAAA,CAAa,CAAE,IAAA,CAAM,yBAAA,CAA2B,OAAA,CAAS,OAAQ,EAExE,CAMA,MAAa,kBAAkByC,CAAAA,CAAmC,CACjE,GAAI,CAAC,IAAA,CAAK,SACT,MAAM,IAAI,MACT,2DACD,CAAA,CAEDZ,IAAI,IAAA,CAAK,CAAA,6CAAA,EAAgDY,CAAQ,CAAA,GAAA,CAAK,CAAA,CACtE,IAAMC,CAAAA,CAAY,MAAM,IAAA,CAAK,QAAA,CAAS,cAAcD,CAAQ,CAAA,CAE5D,GAAIC,CAAAA,CAAU,MAAA,GAAW,CAAA,CACxB,MAAM,IAAI,KAAA,CACT,CAAA,kDAAA,EAAqDD,CAAQ,CAAA,CAC9D,CAAA,CAGD,IAAME,CAAAA,CAAaD,CAAAA,CAAU,CAAC,CAAA,CAC9Bb,IAAI,IAAA,CAAK,CAAA,+CAAA,EAAkDc,CAAU,CAAA,CAAE,CAAA,CAEvE,IAAIC,CAAAA,CAAW,KAAA,CACTC,EAAW,MAAM,IAAA,CAAK,SAAS,aAAA,CAAcF,CAAU,EACzDE,CAAAA,GACHD,CAAAA,CAAWC,EAAS,QAAA,CACpBhB,GAAAA,CAAI,IAAA,CAAK,CAAA,0CAAA,EAA6Ce,CAAQ,CAAA,CAAE,CAAA,CAAA,CAGjE,IAAME,CAAAA,CAAQ,MAAM,KAAK,QAAA,CAAS,WAAA,CAAYH,CAAU,CAAA,CACxD,QAAWI,CAAAA,IAASD,CAAAA,CAAO,CAC1B,IAAME,CAAAA,CAAQD,EAAM,KAAA,CAAM,GAAG,CAAA,CAC7B,GAAIC,EAAM,CAAC,CAAA,GAAM,MAAO,CACvB,IAAMC,EAAW,CAAA,EAAGD,CAAAA,CAAM,CAAC,CAAC,CAAA,CAAA,EAAIJ,CAAQ,CAAA,CAAA,CACxC,OAAAf,IAAI,IAAA,CACH,CAAA,kDAAA,EAAqDoB,CAAQ,CAAA,CAC9D,CAAA,CACOA,CACR,CACD,CAEA,OAAO,CAAA,UAAA,EAAaL,CAAQ,CAAA,CAC7B,CAKA,MAAa,aAAA,EAEX,CACD,GAAI,CAAC,KAAK,QAAA,CACT,MAAM,IAAI,KAAA,CAAM,oDAAoD,EAGrEf,GAAAA,CAAI,IAAA,CAAK,mCAAmC,CAAA,CAC5C,IAAMqB,CAAAA,CAAc,MAAM,KAAK,QAAA,CAAS,yBAAA,GAClCC,CAAAA,CAAkD,GAClDC,CAAAA,CAAY,IAAI,IAEtB,IAAA,IAAWC,CAAAA,IAAUH,EACpB,GAAI,CACHrB,IAAI,IAAA,CAAK,CAAA,qCAAA,EAAwCwB,CAAM,CAAA,CAAE,EACzD,IAAMR,CAAAA,CAAW,MAAM,IAAA,CAAK,QAAA,CAAS,cAAcQ,CAAM,CAAA,CACzD,GAAIR,CAAAA,CAAU,CACb,KAAK,SAAA,CAAU,GAAA,CAAIQ,EAAQR,CAAQ,CAAA,CACnC,QAAWS,CAAAA,IAAQT,CAAAA,CAAS,KAAA,CACtBO,CAAAA,CAAU,IAAIE,CAAAA,CAAK,IAAI,IAC3BH,CAAAA,CAAM,IAAA,CAAK,CAAE,IAAA,CAAMG,CAAAA,CAAK,KAAM,WAAA,CAAaA,CAAAA,CAAK,WAAY,CAAC,CAAA,CAC7DF,EAAU,GAAA,CAAIE,CAAAA,CAAK,IAAI,CAAA,EAG1B,CACD,CAAA,MAASf,CAAAA,CAAc,CACtBV,GAAAA,CAAI,IAAA,CACH,6CAA6CwB,CAAM,CAAA,CAAA,CAAA,CACnDd,aAAe,KAAA,CAAQA,CAAAA,CAAI,OAAA,CAAU,MAAA,CAAOA,CAAG,CAChD,EACD,CAGD,OAAAV,GAAAA,CAAI,KACH,CAAA,uCAAA,EAA0CsB,CAAAA,CAAM,MAAM,CAAA,cAAA,CACvD,EACOA,CACR,CAKA,MAAa,QAAA,CACZ7C,CAAAA,CACAiD,EAC0B,CAC1B,GAAI,CAAC,IAAA,CAAK,QAAA,CACT,MAAM,IAAI,KAAA,CAAM,gDAAgD,CAAA,CAGjE,IAAMd,EAAWnC,CAAAA,CAAQ,IAAA,CACzBuB,GAAAA,CAAI,IAAA,CAAK,gCAAgCY,CAAQ,CAAA,CAAE,EAGnD,IAAIe,CAAAA,CAAY,KAAK,UAAA,CAAW,GAAA,CAAI,QAAQ,CAAA,CAE5C,GAAKA,CAAAA,CAIJ3B,GAAAA,CAAI,KACH,CAAA,uDAAA,EAA0DY,CAAQ,GACnE,CAAA,CAAA,KANe,CACf,IAAMgB,CAAAA,CAAiB,MAAM,IAAA,CAAK,iBAAA,CAAkBhB,CAAQ,CAAA,CAC5De,CAAAA,CAAY,KAAK,oBAAA,CAAqBf,CAAAA,CAAUgB,CAAc,EAC/D,CAMA5B,IAAI,IAAA,CAAK,CAAA,oCAAA,EAAuCY,CAAQ,CAAA,GAAA,CAAK,CAAA,CAC7D,IAAMiB,CAAAA,CAAW,IAAA,CAAK,QAAA,CACnB,CAAA,SAAA,EAAY,KAAK,QAAA,CAAS,SAAA,EAAW,CAAA,CAAA,CACrC,oBAAA,CACGC,EAAgB,MAAA,CAAO,IAAA,CAAK,CAAA,EAAGlB,CAAQ,IAAI,IAAA,CAAK,GAAA,EAAK,CAAA,CAAE,CAAA,CACvDmB,EAAgB,IAAA,CAAK,QAAA,CACxB,MAAM,IAAA,CAAK,SAAS,IAAA,CAAKD,CAAa,EACtCA,CAAAA,CAEGE,CAAAA,CAAkB,MAAML,CAAAA,CAAU,eAAA,CAAgB,CACvD,SAAA,CAAWE,CAAAA,CACX,gBAAiBjB,CAAAA,CACjB,eAAA,CAAiBmB,CAClB,CAAC,CAAA,CASD,GAAI,CAACC,CAAAA,CAAe,QAAA,CACnB,MAAM,IAAI,KAAA,CAAM,CAAA,uBAAA,EAA0BA,EAAe,aAAa,CAAA,CAAE,EAIzE,IAAMC,CAAAA,CACLD,CAAAA,CAAe,gBAAA,EAAoBA,EAAe,cAAA,CAC7CE,CAAAA,CACLF,EAAe,aAAA,EAAiBA,CAAAA,CAAe,aAEhD,GAAI,CAACC,CAAAA,CACJ,MAAAjC,IAAI,IAAA,CACH,4EAAA,CACAgC,CACD,CAAA,CACM,IAAI,MACT,yEACD,CAAA,CAIDhC,IAAI,IAAA,CACH,CAAA,0DAAA,EAA6DvB,EAAQ,IAAI,CAAA,GAAA,CAC1E,EACA,GAAM,CAAE,WAAY0D,CAAAA,CAAiB,YAAA,CAAAlD,CAAa,CAAA,CACjD,MAAMmD,GAAAA,CAAgB,qBAAA,CAAsBH,CAAS,CAAA,CAGtDjC,GAAAA,CAAI,KAAK,iDAAiD,CAAA,CAE1D,IAAMqC,CAAAA,CAAeX,GAAgB,MAAA,CAAO,IAAA,CAAK,EAAE,CAAA,CAG7C,CAAE,WAAYY,CAAAA,CAAe,KAAA,CAAOC,CAAS,CAAA,CAClDxD,EAAc,cAAA,CAAesD,CAAAA,CAAcpD,CAAY,CAAA,CAGlDuD,CAAAA,CAA8C,EAAC,CAC/CC,CAAAA,CAAS,MAAM,OAAO,QAAa,EACzC,IAAA,GAAW,CAACC,EAAKC,CAAK,CAAA,GAAK,OAAO,OAAA,CAAQlE,CAAAA,CAAQ,SAAA,EAAa,EAAE,CAAA,CAAG,CACnE,IAAMmE,CAAAA,CAAaH,CAAAA,CAAO,YAAY,EAAE,CAAA,CAClCrD,CAAAA,CAASqD,CAAAA,CAAO,eACrB,aAAA,CACAxD,CAAAA,CACA2D,CACD,CAAA,CACMtD,CAAAA,CAAY,OAAO,MAAA,CAAO,CAC/BF,CAAAA,CAAO,MAAA,CAAO,KAAK,SAAA,CAAUuD,CAAK,CAAC,CAAA,CACnCvD,CAAAA,CAAO,OACR,CAAC,EACKG,CAAAA,CAAUH,CAAAA,CAAO,YAAW,CAElCoD,CAAAA,CAAgBE,CAAG,CAAA,CAAI,MAAA,CAAO,OAAO,CAACE,CAAAA,CAAYtD,CAAAA,CAAWC,CAAO,CAAC,EACtE,CAGA,IAAMsD,CAAAA,CAA6B,CAClC,cAAeX,CAAAA,CACf,WAAA,CAAaI,CAAAA,CACb,MAAA,CAAQE,EACR,cAAA,CAAgBL,CAAAA,CAChB,UAAWI,CACZ,CAAA,CAEA,OAAO,IAAI,OAAA,CAAQ,CAAC7D,CAAAA,CAASC,IAAW,CACvC,IAAMmE,EAASnB,CAAAA,CAAU,YAAA,CAAakB,CAAY,CAAA,CAClD,GAAI,CAACC,CAAAA,CAAQ,CACZnE,EAAO,IAAI,KAAA,CAAM,oDAAoD,CAAC,CAAA,CACtE,MACD,CACA,IAAIoE,CAAAA,CAAkB,KAAA,CAClBC,EAAkB,KAAA,CAEtBF,CAAAA,CAAO,GAAG,MAAA,CAAQ,MAAOhE,GAA4B,CACpD,GAAI,CAAAiE,CAAAA,CACJ,CAAAC,EAAkB,IAAA,CAElBhD,GAAAA,CAAI,KAAK,0DAA0D,CAAA,CAEnE,GAAI,CAIH,GAAI,CAAClB,CAAAA,CAAS,UAQT,CAPY,MAAM,KAAK,QAAA,CAAS,eAAA,CACnCuD,EACA,MAAA,CAAO,IAAA,CAAKvD,EAAS,mBAAmB,CAAA,CAAE,SAAS,KAAK,CAAA,CACxD,OAAO,IAAA,CAAKA,CAAAA,CAAS,UAAU,CAAA,CAC/B,MAAA,CAAO,IAAA,CAAKG,CAAY,CACzB,CAAA,CAEc,CACbN,EACC,IAAI,KAAA,CACH,+DACD,CACD,CAAA,CACA,MACD,CAGDoE,EAAkB,CAAA,CAAA,CAClBrE,CAAAA,CAAQ,CACP,OAAA,CAAS,CACR,CACC,IAAA,CAAM,MAAA,CACN,IAAA,CAAMI,CAAAA,CAAS,iBAChB,CACD,CAAA,CACA,QAASA,CAAAA,CAAS,QACnB,CAAC,EACF,CAAA,MAAS4B,EAAK,CACb/B,CAAAA,CAAO+B,CAAG,EACX,CAAA,CACD,CAAC,CAAA,CAEDoC,CAAAA,CAAO,GAAG,OAAA,CAAUpC,CAAAA,EAAQ,CACvBqC,CAAAA,GACJ/C,IAAI,KAAA,CAAM,4BAAA,CAA8BU,CAAG,CAAA,CAC3C/B,CAAAA,CAAO+B,CAAG,CAAA,EACX,CAAC,CAAA,CAEDoC,CAAAA,CAAO,GAAG,KAAA,CAAO,IAAM,CAGlB,CAACE,CAAAA,EAAmB,CAACD,CAAAA,EACxBpE,CAAAA,CAAO,IAAI,KAAA,CAAM,gDAAgD,CAAC,EAEpE,CAAC,EACF,CAAC,CACF,CAEQ,oBAAA,CAAqB6C,EAAgBrD,CAAAA,CAAgC,CAC5E,IAAI8E,CAAAA,CAAS,IAAA,CAAK,WAAW,GAAA,CAAIzB,CAAM,EACvC,GAAI,CAACyB,CAAAA,CAAQ,CACZ,IAAIC,CAAAA,CAAY,IAAA,CAAK,WAEjBlC,CAAAA,CAAW,IAAA,CAAK,UAAU,GAAA,CAAIQ,CAAM,CAAA,CACpC2B,CAAAA,CAAa3B,EAIjB,GAAI,CAACR,GACJ,IAAA,GAAW,CAACoC,EAAKC,CAAC,CAAA,GAAK,IAAA,CAAK,SAAA,CAAU,SAAQ,CAC7C,GAAIA,EAAE,KAAA,CAAM,IAAA,CAAMC,GAAMA,CAAAA,CAAE,IAAA,GAAS9B,CAAM,CAAA,CAAG,CAC3CR,EAAWqC,CAAAA,CACXF,CAAAA,CAAaC,EACb,KACD,CAAA,CAIF,IAAMG,CAAAA,CAAevC,CAAAA,EAAU,UAAA,EAAY,IAAA,EAAM,aAAY,EAAK,EAAA,CAC9DwC,EAGEC,CAAAA,CAAOzC,CAAAA,EAAU,UAQvB,GAPIyC,CAAAA,GACHD,EACC,OAAA,CAAQ,GAAA,CAAI,cAAcC,CAAI,CAAA,CAAE,GAChC,OAAA,CAAQ,GAAA,CAAI,oBAAoBA,CAAI,CAAA,CAAE,CAAA,CAAA,CAIpC,CAACD,GAAYL,CAAAA,CAAY,CAC5B,IAAMO,CAAAA,CAAUP,CAAAA,CAAW,MAAM,EAAE,CAAA,CAAE,aAAY,CACjDK,CAAAA,CACC,QAAQ,GAAA,CAAI,CAAA,WAAA,EAAcE,CAAO,CAAA,CAAE,CAAA,EACnC,QAAQ,GAAA,CAAI,CAAA,iBAAA,EAAoBA,CAAO,CAAA,CAAE,EAC3C,CAGA,GAAI,CAACF,CAAAA,EAAYD,CAAAA,CAAc,CAC9B,IAAMI,CAAAA,CAAYJ,CAAAA,CAChB,WAAA,GACA,OAAA,CAAQ,aAAA,CAAe,GAAG,CAAA,CAC5BC,CAAAA,CACC,QAAQ,GAAA,CAAI,CAAA,WAAA,EAAcG,CAAS,CAAA,CAAE,GACrC,OAAA,CAAQ,GAAA,CAAI,oBAAoBA,CAAS,CAAA,CAAE,EAC7C,CAEIH,CAAAA,GACHxD,IAAI,IAAA,CACH,CAAA,mDAAA,EAAsDmD,EAAW,KAAA,CAAM,EAAE,CAAC,CAAA,EAAA,EAAKI,CAAAA,EAAgB,SAAS,CAAA,CAAA,CACzG,CAAA,CACAL,CAAAA,CAAYM,CAAAA,CAAAA,CAGbP,EAAS,IAAI/E,CAAAA,CAAcC,EAAS,IAAA,CAAK,UAAA,CAAY+E,CAAS,CAAA,CAC9D,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI1B,EAAQyB,CAAM,EACnC,CACA,OAAOA,CACR,CAMA,MAAa,YAAA,CAAaW,CAAAA,CAEvB,CACF,GAAI,CAAC,IAAA,CAAK,SACT,MAAM,IAAI,MAAM,oDAAoD,CAAA,CAErE5D,IAAI,IAAA,CAAK,CAAA,yCAAA,EAA4C4D,CAAG,CAAA,GAAA,CAAK,CAAA,CAG7D,IAAM/C,CAAAA,CAAY,MAAM,KAAK,QAAA,CAAS,aAAA,CAAc+C,CAAG,CAAA,CACvD,GAAI/C,CAAAA,CAAU,MAAA,GAAW,EACxB,MAAM,IAAI,MAAM,CAAA,sCAAA,EAAyC+C,CAAG,CAAA,CAAE,CAAA,CAI/D,IAAM5C,CAAAA,CAAW,MAAM,KAAK,QAAA,CAAS,aAAA,CAAcH,EAAU,CAAC,CAAC,CAAA,CAC/D,GAAI,CAACG,CAAAA,CACJ,MAAM,IAAI,KAAA,CAAM,mDAAmD,EAIpE,IAAM6C,CAAAA,CAAc7C,EAAS,SAAA,EAAW,IAAA,CAAM8C,GAAMA,CAAAA,CAAE,GAAA,GAAQF,CAAG,CAAA,CACjE,GAAI,CAACC,CAAAA,CACJ,MAAM,IAAI,KAAA,CAAM,YAAYD,CAAG,CAAA,+BAAA,CAAiC,EAIjE,OAAO,CACN,SAAU,CACT,CACC,IAAAA,CAAAA,CACA,QAAA,CAAUC,EAAY,QAAA,EAAY,kBAAA,CAClC,KAAM,IAAA,CAAK,SAAA,CAAUA,EAAa,IAAA,CAAM,CAAC,CAC1C,CACD,CACD,CACD,CAEO,eAA+D,CACrE,OAAO,KAAK,UACb,CAKA,MAAa,KAAA,EAAuB,CAC/B,KAAK,QAAA,EACR,MAAM,KAAK,QAAA,CAAS,IAAA,GAEtB,CACD","file":"chunk-N6FGTZ6A.js","sourcesContent":["import * as grpc from \"@grpc/grpc-js\";\nimport { liopV1 } from \"./proto.js\";\nimport { createChannelCredentials, type LiopTlsOptions } from \"./tls.js\";\nimport type {\n\tIntentRequest,\n\tIntentResponse,\n\tLogicRequest,\n\tLogicResponse,\n} from \"./types.js\";\n\n/**\n * LIOP gRPC Client Implementation\n * Provides a high-level interface for secure intent negotiation and logic execution.\n */\nexport class LiopRpcClient {\n\t// biome-ignore lint/suspicious/noExplicitAny: internal gRPC client type\n\tprivate client: any;\n\tprivate token?: string;\n\n\tconstructor(address: string, tls?: LiopTlsOptions, token?: string) {\n\t\tconst credentials = createChannelCredentials(tls);\n\t\tthis.client = new liopV1.LogicMesh(address, credentials);\n\t\tthis.token = token;\n\t}\n\n\t/**\n\t * Negotiates intent with the remote host.\n\t * Returns the ephemeral Kyber public key for payload encryption.\n\t */\n\tpublic async negotiateIntent(\n\t\trequest: IntentRequest,\n\t): Promise<IntentResponse> {\n\t\treturn new Promise((resolve, reject) => {\n\t\t\tconst metadata = new grpc.Metadata();\n\t\t\tif (this.token) {\n\t\t\t\tmetadata.add(\"authorization\", `Bearer ${this.token}`);\n\t\t\t}\n\t\t\tthis.client.NegotiateIntent(\n\t\t\t\trequest,\n\t\t\t\tmetadata,\n\t\t\t\t(error: grpc.ServiceError | null, response: IntentResponse) => {\n\t\t\t\t\tif (error) {\n\t\t\t\t\t\treject(error);\n\t\t\t\t\t} else {\n\t\t\t\t\t\tresolve(response);\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t);\n\t\t});\n\t}\n\n\t/**\n\t * Pushes the encrypted Logic-on-Origin payload to the origin.\n\t * Returns a stream of semantic responses and ZK proofs.\n\t */\n\tpublic executeLogic(\n\t\trequest: LogicRequest,\n\t): grpc.ClientReadableStream<LogicResponse> {\n\t\tconst metadata = new grpc.Metadata();\n\t\tif (this.token) {\n\t\t\tmetadata.add(\"authorization\", `Bearer ${this.token}`);\n\t\t}\n\t\treturn this.client.ExecuteLogic(request, metadata);\n\t}\n\n\tpublic close(): void {\n\t\tthis.client.close();\n\t}\n}\n","import { createCipheriv, createDecipheriv, randomBytes } from \"node:crypto\";\n\n/**\n * LIOP Symmetric Payload Encryption Wrapper\n * Uses AES-256-GCM to secure WASM Code transport over Zero-Trust networks.\n * Fully compatible with the `aes-gcm` Rust crate used by Wasmtime.\n */\nexport const AesGcmWrapper = {\n\t/**\n\t * Encrypts a raw WASM payload using the shared secret negotiated via Kyber768.\n\t *\n\t * @param payload Raw incoming WASM byte array or string.\n\t * @param sharedSecret A perfectly derived 32-byte (256-bit) shared secret array\n\t * @returns The encrypted buffer to push to the GRPc stream, along with the 12-byte initialization vector natively generated.\n\t */\n\tencryptPayload(\n\t\tpayload: Uint8Array | Buffer,\n\t\tsharedSecret: Uint8Array,\n\t): {\n\t\tciphertext: Buffer;\n\t\tnonce: Buffer;\n\t} {\n\t\tif (sharedSecret.length !== 32) {\n\t\t\tthrow new Error(\"Symmetric Key must be exactly 32 bytes (256 bits).\");\n\t\t}\n\n\t\t// LIOP standard demands 96-bit (12 byte) IVs/Nonces for AES-GCM\n\t\tconst nonce = randomBytes(12);\n\n\t\tconst cipher = createCipheriv(\"aes-256-gcm\", sharedSecret, nonce);\n\n\t\t// Encrypt the payload and seal the tag\n\t\tconst encrypted = Buffer.concat([cipher.update(payload), cipher.final()]);\n\t\tconst authTag = cipher.getAuthTag(); // 16 bytes for GCM integrity\n\n\t\t// In LIOP, the auth tag is strictly appended to the end of the ciphertext bytes\n\t\t// mirroring the default serialization logic within `aes_gcm::Aes256Gcm` in Rust\n\t\tconst finalCiphertext = Buffer.concat([encrypted, authTag]);\n\n\t\treturn {\n\t\t\tciphertext: finalCiphertext,\n\t\t\tnonce: nonce,\n\t\t};\n\t},\n\n\t/**\n\t * Decrypts a remote Zero-Knowledge receipt using AES-256-GCM.\n\t */\n\tdecryptPayload(\n\t\tciphertextBuffer: Buffer,\n\t\tnonce: Buffer,\n\t\tsharedSecret: Uint8Array,\n\t): Buffer {\n\t\tif (ciphertextBuffer.length < 16) {\n\t\t\tthrow new Error(\n\t\t\t\t\"Invalid GCM Ciphertext; missing authentication tag length\",\n\t\t\t);\n\t\t}\n\n\t\t// The last 16 bytes represent the AuthTag appended by rust-aes-gcm\n\t\tconst encryptedData = ciphertextBuffer.subarray(0, -16);\n\t\tconst authTag = ciphertextBuffer.subarray(-16);\n\n\t\tconst decipher = createDecipheriv(\"aes-256-gcm\", sharedSecret, nonce);\n\t\tdecipher.setAuthTag(authTag);\n\n\t\treturn Buffer.concat([decipher.update(encryptedData), decipher.final()]);\n\t},\n};\n","import { LiopVerifier } from \"../crypto/verifier.js\";\nimport {\n\ttype LiopManifest,\n\tMeshNode,\n\ttype MeshNodeConfig,\n} from \"../mesh/node.js\";\nimport { LiopRpcClient } from \"../rpc/client.js\";\nimport { AesGcmWrapper } from \"../rpc/crypto/aes.js\";\nimport { Kyber768Wrapper } from \"../rpc/crypto/kyber.js\";\nimport type { LiopTlsOptions } from \"../rpc/tls.js\";\nimport type { LogicRequest, LogicResponse } from \"../rpc/types.js\";\nimport type { CallToolRequest, CallToolResult } from \"../types.js\";\nimport { log } from \"../utils/logger.js\";\n\n/**\n * LIOP Client\n * High-level orchestration for discovery and execution in the Logic-Injection-on-Origin mesh.\n */\nexport class LiopClient {\n\tprivate meshNode: MeshNode | null = null;\n\tprivate rpcClients: Map<string, LiopRpcClient> = new Map();\n\tprivate manifests: Map<string, LiopManifest> = new Map();\n\tprivate tlsOptions?: LiopTlsOptions;\n\tprivate serverInfo?: { name: string; version: string };\n\tpublic verifier: LiopVerifier = new LiopVerifier();\n\tprivate oauthToken?: string;\n\n\tconstructor(tls?: LiopTlsOptions) {\n\t\tthis.tlsOptions = tls;\n\t}\n\n\t/**\n\t * Requests an M2M access token from the Nexus Authorization Server using Client Credentials.\n\t */\n\tprivate async acquireM2MToken(authOpts: {\n\t\tclientId: string;\n\t\tclientSecret: string;\n\t\tnexusUrl: string;\n\t\taudience: string;\n\t\tscope?: string;\n\t}): Promise<string> {\n\t\tconst baseUrl = authOpts.nexusUrl.endsWith(\"/oidc\")\n\t\t\t? authOpts.nexusUrl\n\t\t\t: `${authOpts.nexusUrl}/oidc`;\n\t\tconst tokenUrl = `${baseUrl}/token`;\n\t\tlog.info(`[LiopClient] Requesting M2M Token from Nexus AS: ${tokenUrl}`);\n\n\t\tconst params = new URLSearchParams({\n\t\t\tgrant_type: \"client_credentials\",\n\t\t\tscope:\n\t\t\t\tauthOpts.scope ||\n\t\t\t\t\"liop:tools:call liop:tools:list liop:resources:read liop:schema:read liop:mesh:query\",\n\t\t\tresource: authOpts.audience,\n\t\t\tclient_id: authOpts.clientId,\n\t\t\tclient_secret: authOpts.clientSecret,\n\t\t});\n\n\t\tconst response = await fetch(tokenUrl, {\n\t\t\tmethod: \"POST\",\n\t\t\theaders: {\n\t\t\t\t\"Content-Type\": \"application/x-www-form-urlencoded\",\n\t\t\t},\n\t\t\tbody: params.toString(),\n\t\t});\n\n\t\tif (!response.ok) {\n\t\t\tconst text = await response.text();\n\t\t\tthrow new Error(\n\t\t\t\t`OAuth token request failed with status ${response.status}: ${text}`,\n\t\t\t);\n\t\t}\n\n\t\tconst data = (await response.json()) as {\n\t\t\taccess_token: string;\n\t\t\texpires_in?: number;\n\t\t};\n\t\tif (!data.access_token) {\n\t\t\tthrow new Error(\"OAuth token response did not contain an access_token.\");\n\t\t}\n\n\t\tlog.info(\"[LiopClient] M2M Token acquired successfully.\");\n\t\treturn data.access_token;\n\t}\n\n\t/**\n\t * Discovers and connects to the target server or mesh capability.\n\t * If address is omitted, it sets up the MeshNode to act purely dynamically.\n\t */\n\tpublic async connect(\n\t\taddress?: string,\n\t\toptions?: {\n\t\t\tmeshConfig?: MeshNodeConfig;\n\t\t\tauth?: {\n\t\t\t\tclientId?: string;\n\t\t\t\tclientSecret?: string;\n\t\t\t\tnexusUrl?: string;\n\t\t\t\taudience?: string;\n\t\t\t\tscope?: string;\n\t\t\t\ttoken?: string;\n\t\t\t};\n\t\t},\n\t): Promise<void> {\n\t\t// Attempt to acquire OAuth M2M access token if credentials are provided\n\t\tconst clientId =\n\t\t\toptions?.auth?.clientId ||\n\t\t\tprocess.env.LIOP_OAUTH_CLIENT_ID ||\n\t\t\tprocess.env.LIOP_CLIENT_ID;\n\t\tconst clientSecret =\n\t\t\toptions?.auth?.clientSecret ||\n\t\t\tprocess.env.LIOP_OAUTH_CLIENT_SECRET ||\n\t\t\tprocess.env.LIOP_CLIENT_SECRET;\n\t\tconst nexusUrl =\n\t\t\toptions?.auth?.nexusUrl ||\n\t\t\tprocess.env.LIOP_NEXUS_URL ||\n\t\t\t\"http://localhost:3000\";\n\t\tconst audience =\n\t\t\toptions?.auth?.audience ||\n\t\t\tprocess.env.LIOP_OAUTH_AUDIENCE ||\n\t\t\t\"urn:liop:mesh:api\";\n\t\tconst scope =\n\t\t\toptions?.auth?.scope ||\n\t\t\tprocess.env.LIOP_OAUTH_SCOPE ||\n\t\t\t\"liop:tools:call liop:tools:list liop:resources:read liop:schema:read liop:mesh:query\";\n\n\t\tthis.oauthToken =\n\t\t\toptions?.auth?.token ||\n\t\t\tprocess.env.LIOP_OAUTH_TOKEN ||\n\t\t\tprocess.env.LIOP_TOKEN;\n\n\t\tif (clientId && clientSecret) {\n\t\t\ttry {\n\t\t\t\tthis.oauthToken = await this.acquireM2MToken({\n\t\t\t\t\tclientId,\n\t\t\t\t\tclientSecret,\n\t\t\t\t\tnexusUrl,\n\t\t\t\t\taudience,\n\t\t\t\t\tscope,\n\t\t\t\t});\n\t\t\t} catch (err: unknown) {\n\t\t\t\tlog.error(\n\t\t\t\t\t`[LiopClient] Failed to acquire OAuth M2M Token: ${\n\t\t\t\t\t\terr instanceof Error ? err.message : String(err)\n\t\t\t\t\t}`,\n\t\t\t\t);\n\t\t\t\t// In development or when using static local token, allow connection to proceed\n\t\t\t}\n\t\t}\n\n\t\tthis.meshNode = new MeshNode(options?.meshConfig);\n\t\tawait this.meshNode.start();\n\t\tlog.info(\n\t\t\t`[LiopClient] Mesh Node synchronized. PeerID: ${this.meshNode.getPeerId()}`,\n\t\t);\n\n\t\tif (address) {\n\t\t\tthis.rpcClients.set(\n\t\t\t\t\"static\",\n\t\t\t\tnew LiopRpcClient(address, this.tlsOptions, this.oauthToken),\n\t\t\t);\n\t\t\tthis.serverInfo = { name: `LiopServer (${address})`, version: \"1.0.0\" };\n\t\t\tlog.info(`[LiopClient] Static gRPC configured for: ${address}`);\n\t\t} else {\n\t\t\tthis.serverInfo = { name: \"LiopServer (Mesh Alpha)\", version: \"1.0.0\" };\n\t\t}\n\t}\n\n\t/**\n\t * Dynamically queries Kademlia DHT to find the optimal PeerID providing the Capability\n\t * and returns the physical gRPC target (host:port) resolved from the provider's manifest.\n\t */\n\tpublic async resolveCapability(toolName: string): Promise<string> {\n\t\tif (!this.meshNode)\n\t\t\tthrow new Error(\n\t\t\t\t\"Client must be connected to Mesh to resolve capabilities.\",\n\t\t\t);\n\n\t\tlog.info(`[LiopClient] Querying Mesh DHT for Provider: ${toolName}...`);\n\t\tconst providers = await this.meshNode.findProviders(toolName);\n\n\t\tif (providers.length === 0) {\n\t\t\tthrow new Error(\n\t\t\t\t`Kademlia DHT found zero providers for capability: ${toolName}`,\n\t\t\t);\n\t\t}\n\n\t\tconst providerId = providers[0];\n\t\tlog.info(`[LiopClient] Identified Alpha Provider PeerID: ${providerId}`);\n\n\t\tlet grpcPort = 50051;\n\t\tconst manifest = await this.meshNode.queryManifest(providerId);\n\t\tif (manifest) {\n\t\t\tgrpcPort = manifest.grpcPort;\n\t\t\tlog.info(`[LiopClient] Manifest resolved: gRPC port ${grpcPort}`);\n\t\t}\n\n\t\tconst addrs = await this.meshNode.resolvePeer(providerId);\n\t\tfor (const maddr of addrs) {\n\t\t\tconst parts = maddr.split(\"/\");\n\t\t\tif (parts[1] === \"ip4\") {\n\t\t\t\tconst grpcHost = `${parts[2]}:${grpcPort}`;\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LiopClient] Translated Multiaddr to gRPC Target: ${grpcHost}`,\n\t\t\t\t);\n\t\t\t\treturn grpcHost;\n\t\t\t}\n\t\t}\n\n\t\treturn `127.0.0.1:${grpcPort}`;\n\t}\n\n\t/**\n\t * Discovers remote capabilities via the LIOP Manifest Protocol.\n\t */\n\tpublic async discoverTools(): Promise<\n\t\t{ name: string; description?: string }[]\n\t> {\n\t\tif (!this.meshNode) {\n\t\t\tthrow new Error(\"Client must be connected before discovering tools.\");\n\t\t}\n\n\t\tlog.info(`[LiopClient] Discovery started...`);\n\t\tconst providerIds = await this.meshNode.discoverManifestProviders();\n\t\tconst tools: { name: string; description?: string }[] = [];\n\t\tconst seenNames = new Set<string>();\n\n\t\tfor (const peerId of providerIds) {\n\t\t\ttry {\n\t\t\t\tlog.info(`[LiopClient] Querying manifest from: ${peerId}`);\n\t\t\t\tconst manifest = await this.meshNode.queryManifest(peerId);\n\t\t\t\tif (manifest) {\n\t\t\t\t\tthis.manifests.set(peerId, manifest);\n\t\t\t\t\tfor (const tool of manifest.tools) {\n\t\t\t\t\t\tif (!seenNames.has(tool.name)) {\n\t\t\t\t\t\t\ttools.push({ name: tool.name, description: tool.description });\n\t\t\t\t\t\t\tseenNames.add(tool.name);\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t} catch (err: unknown) {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LiopClient] Error querying manifest from ${peerId}:`,\n\t\t\t\t\terr instanceof Error ? err.message : String(err),\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\n\t\tlog.info(\n\t\t\t`[LiopClient] Discovery finished. Found ${tools.length} unique tools.`,\n\t\t);\n\t\treturn tools;\n\t}\n\n\t/**\n\t * Invokes a tool.\n\t */\n\tpublic async callTool(\n\t\trequest: CallToolRequest,\n\t\t_wasmPayload?: Buffer,\n\t): Promise<CallToolResult> {\n\t\tif (!this.meshNode) {\n\t\t\tthrow new Error(\"Client must be connected before calling tools.\");\n\t\t}\n\n\t\tconst toolName = request.name;\n\t\tlog.info(`[LiopClient] Resolving Tool: ${toolName}`);\n\n\t\t// [ALPHA-FIX] Bypass DHT discovery if we are already statically connected to a provider (Enterprise/Test mode)\n\t\tlet rpcClient = this.rpcClients.get(\"static\");\n\n\t\tif (!rpcClient) {\n\t\t\tconst dynamicAddress = await this.resolveCapability(toolName);\n\t\t\trpcClient = this.getOrCreateRpcClient(toolName, dynamicAddress);\n\t\t} else {\n\t\t\tlog.info(\n\t\t\t\t`[LiopClient] Using existing static gRPC connection for ${toolName}.`,\n\t\t\t);\n\t\t}\n\n\t\tlog.info(`[LiopClient] Negotiating intent for ${toolName}...`);\n\t\tconst agentDid = this.meshNode\n\t\t\t? `did:liop:${this.meshNode.getPeerId()}`\n\t\t\t: \"did:liop:ephemeral\";\n\t\tconst intentPayload = Buffer.from(`${toolName}:${Date.now()}`);\n\t\tconst proofOfIntent = this.meshNode\n\t\t\t? await this.meshNode.sign(intentPayload)\n\t\t\t: intentPayload;\n\n\t\tconst intentResponse = (await rpcClient.negotiateIntent({\n\t\t\tagent_did: agentDid,\n\t\t\tcapability_hash: toolName,\n\t\t\tproof_of_intent: proofOfIntent,\n\t\t})) as unknown as {\n\t\t\taccepted: boolean;\n\t\t\terror_message: string;\n\t\t\tkyber_public_key: Uint8Array;\n\t\t\tkyberPublicKey: Uint8Array;\n\t\t\tsession_token: string;\n\t\t\tsessionToken: string;\n\t\t};\n\n\t\tif (!intentResponse.accepted) {\n\t\t\tthrow new Error(`Intent denied by host: ${intentResponse.error_message}`);\n\t\t}\n\n\t\t// LIOP Robust Field Extraction (Supports both snake_case and camelCase via gRPC-JS)\n\t\tconst publicKey =\n\t\t\tintentResponse.kyber_public_key || intentResponse.kyberPublicKey;\n\t\tconst sessionToken =\n\t\t\tintentResponse.session_token || intentResponse.sessionToken;\n\n\t\tif (!publicKey) {\n\t\t\tlog.info(\n\t\t\t\t\"[LiopClient] Critical Error: Kyber Public Key not found in IntentResponse.\",\n\t\t\t\tintentResponse,\n\t\t\t);\n\t\t\tthrow new Error(\n\t\t\t\t\"Handshake failed: Remote host did not provide a valid Kyber Public Key.\",\n\t\t\t);\n\t\t}\n\n\t\t// 2. Post-Quantum Encapsulation (ML-KEM-768)\n\t\tlog.info(\n\t\t\t`[LiopClient] Encapsulating Post-Quantum Shared Secret for ${request.name}...`,\n\t\t);\n\t\tconst { ciphertext: kyberCiphertext, sharedSecret } =\n\t\t\tawait Kyber768Wrapper.encapsulateAsymmetric(publicKey);\n\n\t\t// 3. Symmetric Sealing (AES-256-GCM)\n\t\tlog.info(`[LiopClient] Sealing WASM Payload and Inputs...`);\n\n\t\tconst _safePayload = _wasmPayload || Buffer.from(\"\");\n\n\t\t// Encrypt WASM binary\n\t\tconst { ciphertext: encryptedWasm, nonce: aesNonce } =\n\t\t\tAesGcmWrapper.encryptPayload(_safePayload, sharedSecret);\n\n\t\t// Encrypt inputs using a fresh random nonce per input to prevent AES-GCM nonce reuse\n\t\tconst encryptedInputs: Record<string, Uint8Array> = {};\n\t\tconst crypto = await import(\"node:crypto\");\n\t\tfor (const [key, value] of Object.entries(request.arguments || {})) {\n\t\t\tconst inputNonce = crypto.randomBytes(12);\n\t\t\tconst cipher = crypto.createCipheriv(\n\t\t\t\t\"aes-256-gcm\",\n\t\t\t\tsharedSecret,\n\t\t\t\tinputNonce,\n\t\t\t);\n\t\t\tconst encrypted = Buffer.concat([\n\t\t\t\tcipher.update(JSON.stringify(value)),\n\t\t\t\tcipher.final(),\n\t\t\t]);\n\t\t\tconst authTag = cipher.getAuthTag();\n\t\t\t// Prepend the 12-byte nonce to the ciphertext\n\t\t\tencryptedInputs[key] = Buffer.concat([inputNonce, encrypted, authTag]);\n\t\t}\n\n\t\t// 4. Assemble and Execute gRPC LogicRequest\n\t\tconst logicRequest: LogicRequest = {\n\t\t\tsession_token: sessionToken,\n\t\t\twasm_binary: encryptedWasm,\n\t\t\tinputs: encryptedInputs,\n\t\t\tpqc_ciphertext: kyberCiphertext,\n\t\t\taes_nonce: aesNonce,\n\t\t};\n\n\t\treturn new Promise((resolve, reject) => {\n\t\t\tconst stream = rpcClient.executeLogic(logicRequest);\n\t\t\tif (!stream) {\n\t\t\t\treject(new Error(\"RPC Client unavailable or failed to create stream.\"));\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tlet resultFulfilled = false;\n\t\t\tlet hasReceivedData = false;\n\n\t\t\tstream.on(\"data\", async (response: LogicResponse) => {\n\t\t\t\tif (resultFulfilled) return;\n\t\t\t\thasReceivedData = true;\n\n\t\t\t\tlog.info(\"[LiopClient] Logic Executed. Verification in progress...\");\n\n\t\t\t\ttry {\n\t\t\t\t\t// Only verify ZK-Receipt if the remote execution succeeded.\n\t\t\t\t\t// If the remote execution failed due to a policy error (e.g. Egress Shield),\n\t\t\t\t\t// the ZK proof is empty and we should bypass validation to propagate the original error.\n\t\t\t\t\tif (!response.is_error) {\n\t\t\t\t\t\tconst isValid = await this.verifier.verifyZkReceipt(\n\t\t\t\t\t\t\t_safePayload,\n\t\t\t\t\t\t\tBuffer.from(response.cryptographic_proof).toString(\"hex\"),\n\t\t\t\t\t\t\tBuffer.from(response.zk_receipt),\n\t\t\t\t\t\t\tBuffer.from(sharedSecret),\n\t\t\t\t\t\t);\n\n\t\t\t\t\t\tif (!isValid) {\n\t\t\t\t\t\t\treject(\n\t\t\t\t\t\t\t\tnew Error(\n\t\t\t\t\t\t\t\t\t\"PROTOCOL INTEGRITY VIOLATION: ZK-Receipt verification failed.\",\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\treturn;\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\n\t\t\t\t\tresultFulfilled = true;\n\t\t\t\t\tresolve({\n\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\t\ttext: response.semantic_evidence,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t],\n\t\t\t\t\t\tisError: response.is_error,\n\t\t\t\t\t});\n\t\t\t\t} catch (err) {\n\t\t\t\t\treject(err);\n\t\t\t\t}\n\t\t\t});\n\n\t\t\tstream.on(\"error\", (err) => {\n\t\t\t\tif (resultFulfilled) return;\n\t\t\t\tlog.error(\"[LiopClient] Stream Error:\", err);\n\t\t\t\treject(err);\n\t\t\t});\n\n\t\t\tstream.on(\"end\", () => {\n\t\t\t\t// We don't throw here if we already received a response block that is currently\n\t\t\t\t// undergoing ZK Verification in the Piscina worker pool.\n\t\t\t\tif (!hasReceivedData && !resultFulfilled) {\n\t\t\t\t\treject(new Error(\"Logic-on-Origin stream closed without results.\"));\n\t\t\t\t}\n\t\t\t});\n\t\t});\n\t}\n\n\tprivate getOrCreateRpcClient(peerId: string, address: string): LiopRpcClient {\n\t\tlet client = this.rpcClients.get(peerId);\n\t\tif (!client) {\n\t\t\tlet nodeToken = this.oauthToken;\n\n\t\t\tlet manifest = this.manifests.get(peerId);\n\t\t\tlet realPeerId = peerId;\n\n\t\t\t// If peerId is actually a toolName (which happens when called from callTool),\n\t\t\t// resolve the real PeerID and its manifest from the manifest cache.\n\t\t\tif (!manifest) {\n\t\t\t\tfor (const [pId, m] of this.manifests.entries()) {\n\t\t\t\t\tif (m.tools.some((t) => t.name === peerId)) {\n\t\t\t\t\t\tmanifest = m;\n\t\t\t\t\t\trealPeerId = pId;\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tconst providerName = manifest?.serverInfo?.name?.toLowerCase() || \"\";\n\t\t\tlet envToken: string | undefined;\n\n\t\t\t// 0. Deterministic tokenSlug resolution (highest priority, zero heuristic)\n\t\t\tconst slug = manifest?.tokenSlug;\n\t\t\tif (slug) {\n\t\t\t\tenvToken =\n\t\t\t\t\tprocess.env[`LIOP_TOKEN_${slug}`] ||\n\t\t\t\t\tprocess.env[`LIOP_OAUTH_TOKEN_${slug}`];\n\t\t\t}\n\n\t\t\t// 1. PeerID-specific resolution: LIOP_TOKEN_<last 8 chars of PeerID in uppercase>\n\t\t\tif (!envToken && realPeerId) {\n\t\t\t\tconst shortId = realPeerId.slice(-8).toUpperCase();\n\t\t\t\tenvToken =\n\t\t\t\t\tprocess.env[`LIOP_TOKEN_${shortId}`] ||\n\t\t\t\t\tprocess.env[`LIOP_OAUTH_TOKEN_${shortId}`];\n\t\t\t}\n\n\t\t\t// 2. Provider-name resolution: LIOP_TOKEN_<CLEAN_PROVIDER_NAME_UPPERCASE>\n\t\t\tif (!envToken && providerName) {\n\t\t\t\tconst cleanName = providerName\n\t\t\t\t\t.toUpperCase()\n\t\t\t\t\t.replace(/[^A-Z0-9_]/g, \"_\");\n\t\t\t\tenvToken =\n\t\t\t\t\tprocess.env[`LIOP_TOKEN_${cleanName}`] ||\n\t\t\t\t\tprocess.env[`LIOP_OAUTH_TOKEN_${cleanName}`];\n\t\t\t}\n\n\t\t\tif (envToken) {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LiopClient] Resolved node-specific token for peer ${realPeerId.slice(-8)} (${providerName || \"unknown\"})`,\n\t\t\t\t);\n\t\t\t\tnodeToken = envToken;\n\t\t\t}\n\n\t\t\tclient = new LiopRpcClient(address, this.tlsOptions, nodeToken);\n\t\t\tthis.rpcClients.set(peerId, client);\n\t\t}\n\t\treturn client;\n\t}\n\n\t/**\n\t * Reads a specific resource by URI.\n\t * In LIOP, resources can be static definitions or dynamic streams.\n\t */\n\tpublic async readResource(uri: string): Promise<{\n\t\tcontents: Array<{ uri: string; mimeType?: string; text: string }>;\n\t}> {\n\t\tif (!this.meshNode) {\n\t\t\tthrow new Error(\"Client must be connected before reading resources.\");\n\t\t}\n\t\tlog.info(`[LiopClient] Querying Mesh for Resource: ${uri}...`);\n\n\t\t// We search for the peer hosting the resource in the P2P Mesh\n\t\tconst providers = await this.meshNode.findProviders(uri);\n\t\tif (providers.length === 0) {\n\t\t\tthrow new Error(`No mesh providers found for resource: ${uri}`);\n\t\t}\n\n\t\t// Query the remote peer's manifest\n\t\tconst manifest = await this.meshNode.queryManifest(providers[0]);\n\t\tif (!manifest) {\n\t\t\tthrow new Error(\"Target peer did not return a valid LIOP Manifest.\");\n\t\t}\n\n\t\t// Locate the exact resource metadata\n\t\tconst resourceDef = manifest.resources?.find((r) => r.uri === uri);\n\t\tif (!resourceDef) {\n\t\t\tthrow new Error(`Resource ${uri} not listed in remote manifest.`);\n\t\t}\n\n\t\t// Return the declarative metadata (Logic-Injection is required for actual data extraction)\n\t\treturn {\n\t\t\tcontents: [\n\t\t\t\t{\n\t\t\t\t\turi,\n\t\t\t\t\tmimeType: resourceDef.mimeType || \"application/json\",\n\t\t\t\t\ttext: JSON.stringify(resourceDef, null, 2),\n\t\t\t\t},\n\t\t\t],\n\t\t};\n\t}\n\n\tpublic getServerInfo(): { name: string; version: string } | undefined {\n\t\treturn this.serverInfo;\n\t}\n\n\t/**\n\t * Destroys the active Mesh Node resources.\n\t */\n\tpublic async close(): Promise<void> {\n\t\tif (this.meshNode) {\n\t\t\tawait this.meshNode.stop();\n\t\t}\n\t}\n}\n"]}
@@ -1,2 +0,0 @@
1
- import {b}from'./chunk-ANFXJGMP.js';import {a as a$1}from'./chunk-S6RJHZV2.js';import*as u from'fs';import {createRequire}from'module';import a from'path';import {fileURLToPath,pathToFileURL}from'url';import {Piscina}from'piscina';var h=fileURLToPath(import.meta.url),m=a.dirname(h),c=class s{static zkWorkerPool=null;getZkPool(){if(!s.zkWorkerPool){let r=import.meta.url.endsWith(".ts"),i=r?".ts":".js",t=[];if(r)try{let p=createRequire(import.meta.url).resolve("tsx/package.json");t=["--import",pathToFileURL(a.join(a.dirname(p),"dist","loader.mjs")).href];}catch{t=["--import","tsx"];}let n=[a.resolve(m,`./workers/zk-verifier${i}`),a.resolve(m,`../workers/zk-verifier${i}`)],f=n.find(e=>u.existsSync(e))||n[1];s.zkWorkerPool=new Piscina({filename:f,minThreads:1,maxThreads:2,idleTimeout:3e4,execArgv:t}),s.zkWorkerPool.run({action:"warmup"}).catch(e=>{a$1.debug(`[LiopVerifier] Verification pool warm-up ping failed: ${e.message}`);});}return s.zkWorkerPool}async verifyZkReceipt(r,i,t,n){let f=this.getZkPool();if(!f)throw new Error("Worker pool initialization failed");let e=await f.run({action:"verify_receipt",logicPayload:new Uint8Array(r),remoteImageIdHex:i,zkReceipt:new Uint8Array(t),sessionSecret:n?new Uint8Array(n):void 0});return e.verified?(a$1.info(`[LiopVerifier] ${e.message}`),true):(a$1.error(`[LiopVerifier] FAILED: ${e.message}`),false)}async verifyTeeAttestation(r){if(r.length===0)return true;try{return a$1.info("[LiopVerifier] TEE Attestation: Not configured (no-op)."),!0}catch(i){return a$1.error("[LiopVerifier] TEE Verification Failed:",i),false}}deriveImageId(r){return b(r)}};export{c as a};//# sourceMappingURL=chunk-SW53FNSN.js.map
2
- //# sourceMappingURL=chunk-SW53FNSN.js.map
@@ -1 +0,0 @@
1
- {"version":3,"sources":["../src/crypto/verifier.ts"],"names":["__filename","fileURLToPath","__dirname","path","LiopVerifier","_LiopVerifier","isTS","workerExt","execArgv","tsxPkg","createRequire","pathToFileURL","workerPaths","workerFilename","p","Piscina","err","log","logicPayload","remoteImageIdHex","zkReceipt","sessionSecret","pool","result","attestationReport","deriveLogicImageDigest"],"mappings":"uOAQA,IAAMA,CAAAA,CAAaC,aAAAA,CAAc,MAAA,CAAA,IAAA,CAAY,GAAG,CAAA,CAC1CC,CAAAA,CAAYC,CAAAA,CAAK,OAAA,CAAQH,CAAU,EAS5BI,CAAAA,CAAN,MAAMC,CAAa,CAEzB,OAAe,YAAA,CAA+B,IAAA,CAEtC,SAAA,EAAY,CACnB,GAAI,CAACA,CAAAA,CAAa,YAAA,CAAc,CAC/B,IAAMC,CAAAA,CAAO,YAAY,GAAA,CAAI,QAAA,CAAS,KAAK,CAAA,CACrCC,CAAAA,CAAYD,CAAAA,CAAO,KAAA,CAAQ,KAAA,CAE7BE,EAAqB,EAAC,CAC1B,GAAIF,CAAAA,CACH,GAAI,CAEH,IAAMG,CAAAA,CADMC,cAAc,MAAA,CAAA,IAAA,CAAY,GAAG,CAAA,CACtB,OAAA,CAAQ,kBAAkB,CAAA,CAI7CF,CAAAA,CAAW,CAAC,UAAA,CAHQG,aAAAA,CACnBR,CAAAA,CAAK,IAAA,CAAKA,CAAAA,CAAK,OAAA,CAAQM,CAAM,CAAA,CAAG,OAAQ,YAAY,CACrD,CAAA,CAAE,IACiC,EACpC,CAAA,KAAa,CACZD,CAAAA,CAAW,CAAC,UAAA,CAAY,KAAK,EAC9B,CAID,IAAMI,CAAAA,CAAc,CACnBT,EAAK,OAAA,CAAQD,CAAAA,CAAW,CAAA,qBAAA,EAAwBK,CAAS,CAAA,CAAE,CAAA,CAC3DJ,CAAAA,CAAK,OAAA,CAAQD,CAAAA,CAAW,CAAA,sBAAA,EAAyBK,CAAS,CAAA,CAAE,CAC7D,CAAA,CAEMM,CAAAA,CACLD,CAAAA,CAAY,KAAME,CAAAA,EAAS,CAAA,CAAA,UAAA,CAAWA,CAAC,CAAC,CAAA,EAAKF,CAAAA,CAAY,CAAC,CAAA,CAE3DP,EAAa,YAAA,CAAe,IAAIU,OAAAA,CAAQ,CACvC,QAAA,CAAUF,CAAAA,CACV,UAAA,CAAY,CAAA,CACZ,WAAY,CAAA,CACZ,WAAA,CAAa,GAAA,CACb,QAAA,CAAAL,CACD,CAAC,CAAA,CAGDH,CAAAA,CAAa,YAAA,CAAa,GAAA,CAAI,CAAE,MAAA,CAAQ,QAAS,CAAC,CAAA,CAAE,KAAA,CAAOW,GAAQ,CAClEC,GAAAA,CAAI,KAAA,CACH,CAAA,sDAAA,EAAyDD,CAAAA,CAAI,OAAO,CAAA,CACrE,EACD,CAAC,EACF,CACA,OAAOX,CAAAA,CAAa,YACrB,CASA,MAAa,gBACZa,CAAAA,CACAC,CAAAA,CACAC,CAAAA,CACAC,CAAAA,CACmB,CACnB,IAAMC,CAAAA,CAAO,IAAA,CAAK,SAAA,EAAU,CAC5B,GAAI,CAACA,CAAAA,CAAM,MAAM,IAAI,KAAA,CAAM,mCAAmC,CAAA,CAC9D,IAAMC,CAAAA,CAAS,MAAMD,CAAAA,CAAK,GAAA,CAAI,CAC7B,MAAA,CAAQ,iBACR,YAAA,CAAc,IAAI,UAAA,CAAWJ,CAAY,CAAA,CACzC,gBAAA,CAAAC,CAAAA,CACA,SAAA,CAAW,IAAI,UAAA,CAAWC,CAAS,CAAA,CACnC,aAAA,CAAeC,CAAAA,CAAgB,IAAI,UAAA,CAAWA,CAAa,CAAA,CAAI,MAChE,CAAC,CAAA,CAED,OAAIE,CAAAA,CAAO,QAAA,EACVN,GAAAA,CAAI,KAAK,CAAA,eAAA,EAAkBM,CAAAA,CAAO,OAAO,CAAA,CAAE,CAAA,CACpC,IAAA,GAGRN,GAAAA,CAAI,KAAA,CAAM,CAAA,uBAAA,EAA0BM,CAAAA,CAAO,OAAO,CAAA,CAAE,CAAA,CAC7C,KAAA,CACR,CAOA,MAAa,qBACZC,CAAAA,CACmB,CACnB,GAAIA,CAAAA,CAAkB,MAAA,GAAW,CAAA,CAAG,OAAO,KAAA,CAE3C,GAAI,CAKH,OAAAP,GAAAA,CAAI,IAAA,CAAK,yDAAyD,CAAA,CAC3D,CAAA,CACR,OAASD,CAAAA,CAAK,CACb,OAAAC,GAAAA,CAAI,KAAA,CAAM,yCAAA,CAA2CD,CAAG,CAAA,CACjD,KACR,CACD,CAKO,aAAA,CAAcE,CAAAA,CAA8B,CAClD,OAAOO,CAAAA,CAAuBP,CAAY,CAC3C,CACD","file":"chunk-SW53FNSN.js","sourcesContent":["import * as fs from \"node:fs\";\nimport { createRequire } from \"node:module\";\nimport path from \"node:path\";\nimport { fileURLToPath, pathToFileURL } from \"node:url\";\nimport { Piscina } from \"piscina\";\nimport { log } from \"../utils/logger.js\";\nimport { deriveLogicImageDigest } from \"./logic-image-id.js\";\n\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = path.dirname(__filename);\n\n/**\n * LIOP Tier-0 Industrial Verifier\n *\n * This engine is responsible for the trustless verification of remote logic execution.\n * It validates both the integrity of the code (ZkImageID) and the mathematical proof\n * of its execution (ZkSeal), as well as hardware-level attestation (TEE).\n */\nexport class LiopVerifier {\n\t// Singleton Worker Pool for heavy ZK verification\n\tprivate static zkWorkerPool: Piscina | null = null;\n\n\tprivate getZkPool() {\n\t\tif (!LiopVerifier.zkWorkerPool) {\n\t\t\tconst isTS = import.meta.url.endsWith(\".ts\");\n\t\t\tconst workerExt = isTS ? \".ts\" : \".js\";\n\n\t\t\tlet execArgv: string[] = [];\n\t\t\tif (isTS) {\n\t\t\t\ttry {\n\t\t\t\t\tconst req = createRequire(import.meta.url);\n\t\t\t\t\tconst tsxPkg = req.resolve(\"tsx/package.json\");\n\t\t\t\t\tconst absoluteTsx = pathToFileURL(\n\t\t\t\t\t\tpath.join(path.dirname(tsxPkg), \"dist\", \"loader.mjs\"),\n\t\t\t\t\t).href;\n\t\t\t\t\texecArgv = [\"--import\", absoluteTsx];\n\t\t\t\t} catch (_e) {\n\t\t\t\t\texecArgv = [\"--import\", \"tsx\"];\n\t\t\t\t}\n\t\t\t}\n\n\t\t\t// Support both flat dist/ and original src/ structure\n\t\t\tconst workerPaths = [\n\t\t\t\tpath.resolve(__dirname, `./workers/zk-verifier${workerExt}`), // Flat dist/ (tsup)\n\t\t\t\tpath.resolve(__dirname, `../workers/zk-verifier${workerExt}`), // Original src/\n\t\t\t];\n\n\t\t\tconst workerFilename =\n\t\t\t\tworkerPaths.find((p) => fs.existsSync(p)) || workerPaths[1];\n\n\t\t\tLiopVerifier.zkWorkerPool = new Piscina({\n\t\t\t\tfilename: workerFilename,\n\t\t\t\tminThreads: 1,\n\t\t\t\tmaxThreads: 2, // Minimal footprint since verification is fast compared to generation\n\t\t\t\tidleTimeout: 30000,\n\t\t\t\texecArgv,\n\t\t\t});\n\n\t\t\t// Pre-warm the verification worker\n\t\t\tLiopVerifier.zkWorkerPool.run({ action: \"warmup\" }).catch((err) => {\n\t\t\t\tlog.debug(\n\t\t\t\t\t`[LiopVerifier] Verification pool warm-up ping failed: ${err.message}`,\n\t\t\t\t);\n\t\t\t});\n\t\t}\n\t\treturn LiopVerifier.zkWorkerPool;\n\t}\n\n\t/**\n\t * Verifies a Zero-Knowledge Receipt from a remote LIOP node via Worker Pool.\n\t *\n\t * @param logicPayload The raw WASM or JS logic that was sent to the provider.\n\t * @param remoteImageIdHex The ImageID reported by the provider (must match our local calculation).\n\t * @param zkReceipt The mathematical proof (Seal + Journal) from the zkVM.\n\t */\n\tpublic async verifyZkReceipt(\n\t\tlogicPayload: Buffer,\n\t\tremoteImageIdHex: string,\n\t\tzkReceipt: Buffer,\n\t\tsessionSecret?: Buffer,\n\t): Promise<boolean> {\n\t\tconst pool = this.getZkPool();\n\t\tif (!pool) throw new Error(\"Worker pool initialization failed\");\n\t\tconst result = await pool.run({\n\t\t\taction: \"verify_receipt\",\n\t\t\tlogicPayload: new Uint8Array(logicPayload),\n\t\t\tremoteImageIdHex,\n\t\t\tzkReceipt: new Uint8Array(zkReceipt),\n\t\t\tsessionSecret: sessionSecret ? new Uint8Array(sessionSecret) : undefined,\n\t\t});\n\n\t\tif (result.verified) {\n\t\t\tlog.info(`[LiopVerifier] ${result.message}`);\n\t\t\treturn true;\n\t\t}\n\n\t\tlog.error(`[LiopVerifier] FAILED: ${result.message}`);\n\t\treturn false;\n\t}\n\n\t/**\n\t * Verifies if a node is running inside an authenticated TEE (e.g. AWS Nitro).\n\t *\n\t * @param attestationReport The COSE-signed attestation document from the hardware.\n\t */\n\tpublic async verifyTeeAttestation(\n\t\tattestationReport: Buffer,\n\t): Promise<boolean> {\n\t\tif (attestationReport.length === 0) return true; // Optional in Mesh Alpha\n\n\t\ttry {\n\t\t\t// Architecture for AWS Nitro Enclaves:\n\t\t\t// 1. Decode CBOR/COSE\n\t\t\t// 2. Verify Signature against AWS Nitro Root CA\n\t\t\t// 3. Compare PCRs\n\t\t\tlog.info(\"[LiopVerifier] TEE Attestation: Not configured (no-op).\");\n\t\t\treturn true;\n\t\t} catch (err) {\n\t\t\tlog.error(\"[LiopVerifier] TEE Verification Failed:\", err);\n\t\t\treturn false;\n\t\t}\n\t}\n\n\t/**\n\t * Derives the ImageID of a logic payload following the LIOP v1 Standard.\n\t */\n\tpublic deriveImageId(logicPayload: Buffer): Buffer {\n\t\treturn deriveLogicImageDigest(logicPayload);\n\t}\n}\n"]}
@@ -1 +0,0 @@
1
- {"version":3,"sources":["../src/economy/estimator.ts","../../../node_modules/.pnpm/@opentelemetry+api@1.9.1/node_modules/@opentelemetry/api/src/version.ts","../../../node_modules/.pnpm/@opentelemetry+api@1.9.1/node_modules/@opentelemetry/api/src/internal/semver.ts","../../../node_modules/.pnpm/@opentelemetry+api@1.9.1/node_modules/@opentelemetry/api/src/internal/global-utils.ts","../../../node_modules/.pnpm/@opentelemetry+api@1.9.1/node_modules/@opentelemetry/api/src/diag/ComponentLogger.ts","../../../node_modules/.pnpm/@opentelemetry+api@1.9.1/node_modules/@opentelemetry/api/src/diag/types.ts","../../../node_modules/.pnpm/@opentelemetry+api@1.9.1/node_modules/@opentelemetry/api/src/diag/internal/logLevelLogger.ts","../../../node_modules/.pnpm/@opentelemetry+api@1.9.1/node_modules/@opentelemetry/api/src/api/diag.ts","../../../node_modules/.pnpm/@opentelemetry+api@1.9.1/node_modules/@opentelemetry/api/src/metrics/NoopMeter.ts","../../../node_modules/.pnpm/@opentelemetry+api@1.9.1/node_modules/@opentelemetry/api/src/metrics/NoopMeterProvider.ts","../../../node_modules/.pnpm/@opentelemetry+api@1.9.1/node_modules/@opentelemetry/api/src/api/metrics.ts","../../../node_modules/.pnpm/@opentelemetry+api@1.9.1/node_modules/@opentelemetry/api/src/metrics-api.ts","../src/economy/otel.ts","../src/economy/telemetry.ts","../src/utils/mcpCompact.ts","../src/gateway/router.ts"],"names":["RealTokenEstimator","countFn","setMergeCacheSizeFn","text","HeuristicTokenEstimator","createTokenEstimator","mod","estimator","log","createSyncTokenEstimator","VERSION","re","_makeCompatibilityCheck","ownVersion","acceptedVersions","rejectedVersions","myVersionMatch","ownVersionParsed","globalVersion","_reject","v","_accept","globalVersionMatch","globalVersionParsed","isCompatible","major","GLOBAL_OPENTELEMETRY_API_KEY","_global","registerGlobal","type","instance","diag","allowOverride","api","_a","err","getGlobal","_b","unregisterGlobal","DiagComponentLogger","props","args","logProxy","funcName","namespace","logger","DiagLogLevel","createLogLevelDiagLogger","maxLevel","_filterFunc","theLevel","theFunc","API_NAME","DiagAPI","_DiagAPI","_logProxy","self","setLogger","optionsOrLogLevel","oldLogger","newLogger","stack","_c","options","NoopMeter","_name","_options","NOOP_GAUGE_METRIC","NOOP_HISTOGRAM_METRIC","NOOP_COUNTER_METRIC","NOOP_UP_DOWN_COUNTER_METRIC","NOOP_OBSERVABLE_GAUGE_METRIC","NOOP_OBSERVABLE_COUNTER_METRIC","NOOP_OBSERVABLE_UP_DOWN_COUNTER_METRIC","_callback","_observables","NoopMetric","NoopCounterMetric","_value","_attributes","NoopUpDownCounterMetric","NoopGaugeMetric","NoopHistogramMetric","NoopObservableMetric","NoopObservableCounterMetric","NoopObservableGaugeMetric","NoopObservableUpDownCounterMetric","NOOP_METER","NoopMeterProvider","_version","NOOP_METER_PROVIDER","MetricsAPI","_MetricsAPI","provider","name","version","metrics","METER_NAME","METER_VERSION","TOKEN_USAGE_BUCKETS","DURATION_BUCKETS","LiopOTelBridge","meter","noopHistogram","tokens","tokenType","operationName","toolName","durationMs","error","OTEL_OPERATION_MAP","TokenTelemetryEngine","_TokenTelemetryEngine","real","content","metric","fullMetric","otelOp","sum","op","breakdown","key","existing","totalDuration","newCalls","report","uptimeStr","totalCombined","byType","typeEntries","typeLines","data","idx","prefix","outputPart","toolReport","toolEntries","toolLines","durationPart","timedOps","avgLatency","otelStatus","ms","seconds","minutes","remainingSeconds","hours","remainingMinutes","mcpCompactToolDescriptions","stripVerboseLiopToolDescription","description","d","markers","m","i","MANIFEST_CACHE_TTL_S","MANIFEST_DISCOVERY_RETRIES","LiopMcpRouter","_LiopMcpRouter","liopServer","meshNode","defaultRpcPort","remoteTools","t","resources","r","serverConfig","LiopVerifier","peerId","state","now","failures","backoff","request","authInfo","method","params","id","authResult","authorizeRequest","localTools","listedLocals","allTools","telemetry","toolsPayload","toolsResponsePayload","localResources","remoteResources","allResources","rlTelemetry","rlPayload","typedParams","rrStartTime","result","rrTelemetry","rrOutputPayload","targetUri","manifest","remoteResource","promptsList","plTelemetry","plPayload","pgStartTime","pgTelemetry","pgInputPayload","pgOutputPayload","silent","cachedAt","prevCount","acc","providerIds","MAX_COLD_ATTEMPTS","coldAttempt","attempt","selfId","activePeers","c","selfIdEnd","connectedPeers","a","b","aConnected","successCount","errorCount","cacheUpdated","eligiblePeers","cached","queryResults","EXPECTED_PROVIDERS","initialTimeoutMs","boundedTimeoutMs","deadline","stableCount","lastCacheSize","resolve","tools","seenNames","localToolNames","tool","finalName","providerName","baseDesc","cleanTool","blueprint","properties","envelopeDoc","originStamp","seenUris","resource","augmentedResource","parts","suffix","baseName","token","stats","providerCount","meshState","cachedTools","connections","bootstrapNodes","bootstrapCount","showBootstraps","bootstrapList","addr","routingTableSize","rawPeerId","localPeerId","cachedToolList","statusText","line","diagTelemetry","isLocal","target","manifestEntry","effectiveToken","resolvedToken","slug","shortId","primaryVar","providers","localStartTime","localTelemetry","localInputPayload","localOutputPayload","grpcPort","addrs","targetAddr","os","localInterfaces","ipIdx","advertisedIp","remoteClient","liopV1","createChannelCredentials","nodeToken","envKey","cleanName","staticToken","nexusUrl","clientId","clientSecret","audience","tokenUrl","response","client","capabilityHash","proofOfIntent","transcodingStartTime","activeToken","metadata","ciphertext","sharedSecret","Kyber768Wrapper","embeddedArgsJson","proxyLogic","nonce","sealedLogic","metadataCall","call","resultBody","lastResponse","grpcRes","proofHex","parsedResult","remoteTelemetry","e","payload","cipher","encrypted"],"mappings":"4QA0BO,IAAMA,CAAAA,CAAN,KAAmD,CAChD,IAAA,CAAO,YAAA,CAER,QAER,WAAA,CACCC,CAAAA,CACAC,CAAAA,CACC,CACD,IAAA,CAAK,OAAA,CAAUD,EAEXC,CAAAA,EACHA,CAAAA,CAAoB,GAAM,EAE5B,CAEA,WAAA,CAAYC,CAAAA,CAAsB,CACjC,OAAIA,CAAAA,CAAK,MAAA,GAAW,CAAA,CAAU,CAAA,CACvB,IAAA,CAAK,QAAQA,CAAI,CACzB,CACD,CAAA,CAQaC,CAAAA,CAAN,KAAwD,CACrD,IAAA,CAAO,qBAAA,CAEhB,WAAA,CAAYD,CAAAA,CAAsB,CACjC,OAAIA,EAAK,MAAA,GAAW,CAAA,CAAU,CAAA,CACvB,IAAA,CAAK,IAAA,CAAKA,CAAAA,CAAK,MAAA,CAAS,CAAC,CACjC,CACD,EASA,eAAsBE,EAAAA,EAAgD,CACrE,GAAI,CACH,IAAMC,CAAAA,CAAM,MAAM,OAAO,eAAe,EAClCC,CAAAA,CAAY,IAAIP,CAAAA,CACrBM,CAAAA,CAAI,WAAA,CACJA,CAAAA,CAAI,iBACL,CAAA,CACA,OAAAE,CAAAA,CAAI,KAAA,CAAM,wDAAwD,CAAA,CAC3DD,CACR,CAAA,KAAQ,CACP,OAAAC,CAAAA,CAAI,IAAA,CACH,+EACD,CAAA,CACO,IAAIJ,CACZ,CACD,CAOO,SAASK,EAAAA,EAA2C,CAC1D,OAAO,IAAIL,CACZ,CCxFO,IAAMM,CAAAA,CAAU,OAAA,CCCvB,IAAMC,GAAK,+BAAA,CAkBL,SAAUC,EAAAA,CACdC,CAAAA,CAAkB,CAElB,IAAMC,CAAAA,CAAmB,IAAI,GAAA,CAAY,CAACD,CAAU,CAAC,CAAA,CAC/CE,CAAAA,CAAmB,IAAI,GAAA,CAEvBC,CAAAA,CAAiBH,CAAAA,CAAW,KAAA,CAAMF,EAAE,CAAA,CAC1C,GAAI,CAACK,CAAAA,CAEH,OAAO,IAAM,KAAA,CAGf,IAAMC,EAAmB,CACvB,KAAA,CAAO,CAACD,CAAAA,CAAe,CAAC,CAAA,CACxB,KAAA,CAAO,CAACA,CAAAA,CAAe,CAAC,CAAA,CACxB,KAAA,CAAO,CAACA,CAAAA,CAAe,CAAC,CAAA,CACxB,UAAA,CAAYA,CAAAA,CAAe,CAAC,CAAA,CAAA,CAI9B,GAAIC,EAAiB,UAAA,EAAc,IAAA,CACjC,OAAO,SAAsBC,CAAAA,CAAqB,CAChD,OAAOA,CAAAA,GAAkBL,CAC3B,CAAA,CAGF,SAASM,CAAAA,CAAQC,CAAAA,CAAS,CACxB,OAAAL,CAAAA,CAAiB,GAAA,CAAIK,CAAC,CAAA,CACf,KACT,CAEA,SAASC,CAAAA,CAAQD,CAAAA,CAAS,CACxB,OAAAN,CAAAA,CAAiB,GAAA,CAAIM,CAAC,CAAA,CACf,IACT,CAEA,OAAO,SAAsBF,CAAAA,CAAqB,CAChD,GAAIJ,CAAAA,CAAiB,GAAA,CAAII,CAAa,CAAA,CACpC,OAAO,KAAA,CAGT,GAAIH,CAAAA,CAAiB,GAAA,CAAIG,CAAa,CAAA,CACpC,OAAO,MAAA,CAGT,IAAMI,CAAAA,CAAqBJ,CAAAA,CAAc,KAAA,CAAMP,EAAE,CAAA,CACjD,GAAI,CAACW,CAAAA,CAGH,OAAOH,CAAAA,CAAQD,CAAa,CAAA,CAG9B,IAAMK,CAAAA,CAAsB,CAC1B,KAAA,CAAO,CAACD,CAAAA,CAAmB,CAAC,CAAA,CAC5B,KAAA,CAAO,CAACA,CAAAA,CAAmB,CAAC,CAAA,CAC5B,KAAA,CAAO,CAACA,CAAAA,CAAmB,CAAC,EAC5B,UAAA,CAAYA,CAAAA,CAAmB,CAAC,CAAA,CAAA,CASlC,OALIC,CAAAA,CAAoB,YAAc,IAAA,EAKlCN,CAAAA,CAAiB,KAAA,GAAUM,CAAAA,CAAoB,KAAA,CAC1CJ,CAAAA,CAAQD,CAAa,CAAA,CAG1BD,CAAAA,CAAiB,KAAA,GAAU,CAAA,CAE3BA,CAAAA,CAAiB,KAAA,GAAUM,CAAAA,CAAoB,KAAA,EAC/CN,CAAAA,CAAiB,KAAA,EAASM,CAAAA,CAAoB,KAAA,CAEvCF,CAAAA,CAAQH,CAAa,EAGvBC,CAAAA,CAAQD,CAAa,CAAA,CAG1BD,CAAAA,CAAiB,KAAA,EAASM,CAAAA,CAAoB,MACzCF,CAAAA,CAAQH,CAAa,CAAA,CAGvBC,CAAAA,CAAQD,CAAa,CAC9B,CACF,CAiBO,IAAMM,EAAAA,CAAeZ,EAAAA,CAAwBF,CAAO,CAAA,CCnH3D,IAAMe,EAAAA,CAAQf,CAAAA,CAAQ,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,CAC5BgB,EAA+B,MAAA,CAAO,GAAA,CAC1C,CAAA,qBAAA,EAAwBD,EAAK,CAAA,CAAE,CAAA,CAO3BE,EACJ,OAAO,UAAA,EAAe,QAAA,CAClB,UAAA,CACA,OAAO,IAAA,EAAS,SACd,IAAA,CACA,OAAO,MAAA,EAAW,QAAA,CAChB,MAAA,CACA,OAAO,MAAA,EAAW,QAAA,CAChB,MAAA,CACA,EAAA,CAGN,SAAUC,CAAAA,CACdC,CAAAA,CACAC,EACAC,CAAAA,CACAC,CAAAA,CAAgB,KAAA,CAAK,CAAA,IAAA,CAAA,CAErB,IAAMC,CAAAA,CAAON,CAAAA,CAAQD,CAA4B,CAAA,CAAA,CAAIQ,CAAAA,CAAAP,CAAAA,CACnDD,CAA4B,CAAA,IAC7B,IAAA,EAAAQ,IAAA,MAAA,CAAAA,CAAAA,CAAI,CACH,OAAA,CAASxB,CAAAA,CAAAA,CAGX,GAAI,CAACsB,CAAAA,EAAiBC,CAAAA,CAAIJ,CAAI,CAAA,CAAG,CAE/B,IAAMM,CAAAA,CAAM,IAAI,KAAA,CACd,CAAA,6DAAA,EAAgEN,CAAI,CAAA,CAAE,CAAA,CAExE,OAAAE,EAAK,KAAA,CAAMI,CAAAA,CAAI,KAAA,EAASA,CAAAA,CAAI,OAAO,CAAA,CAC5B,MAGT,GAAIF,CAAAA,CAAI,OAAA,GAAYvB,CAAAA,CAAS,CAE3B,IAAMyB,CAAAA,CAAM,IAAI,KAAA,CACd,CAAA,6CAAA,EAAgDF,CAAAA,CAAI,OAAO,CAAA,KAAA,EAAQJ,CAAI,8CAA8CnB,CAAO,CAAA,CAAE,CAAA,CAEhI,OAAAqB,CAAAA,CAAK,KAAA,CAAMI,CAAAA,CAAI,KAAA,EAASA,CAAAA,CAAI,OAAO,CAAA,CAC5B,KAAA,CAGT,OAAAF,CAAAA,CAAIJ,CAAI,CAAA,CAAIC,CAAAA,CACZC,CAAAA,CAAK,KAAA,CACH,CAAA,4CAAA,EAA+CF,CAAI,CAAA,EAAA,EAAKnB,CAAO,CAAA,CAAA,CAAG,CAAA,CAG7D,IACT,CAEM,SAAU0B,CAAAA,CACdP,EAAU,CAAA,IAAA,CAAA,CAAA,CAAA,CAEV,IAAMX,CAAAA,CAAAA,CAAgBgB,CAAAA,CAAAP,CAAAA,CAAQD,CAA4B,KAAC,IAAA,EAAAQ,CAAAA,GAAA,MAAA,CAAA,MAAA,CAAAA,CAAAA,CAAE,OAAA,CAC7D,GAAI,EAAA,CAAChB,CAAAA,EAAiB,CAACM,EAAAA,CAAaN,CAAa,CAAA,CAAA,CAGjD,OAAA,CAAOmB,CAAAA,CAAAV,CAAAA,CAAQD,CAA4B,CAAA,IAAC,IAAA,EAAAW,CAAAA,GAAA,MAAA,CAAA,OAAAA,CAAAA,CAAGR,CAAI,CACrD,CAEM,SAAUS,CAAAA,CAAiBT,CAAAA,CAA2BE,CAAAA,CAAgB,CAC1EA,CAAAA,CAAK,KAAA,CACH,CAAA,+CAAA,EAAkDF,CAAI,CAAA,EAAA,EAAKnB,CAAO,CAAA,CAAA,CAAG,CAAA,CAEvE,IAAMuB,CAAAA,CAAMN,CAAAA,CAAQD,CAA4B,CAAA,CAE5CO,CAAAA,EACF,OAAOA,CAAAA,CAAIJ,CAAI,EAEnB,CC1EM,IAAOU,EAAP,KAA0B,CAG9B,WAAA,CAAYC,CAAAA,CAA6B,CACvC,IAAA,CAAK,WAAaA,CAAAA,CAAM,SAAA,EAAa,sBACvC,CAEO,KAAA,CAAA,GAASC,CAAAA,CAAe,CAC7B,OAAOC,CAAAA,CAAS,OAAA,CAAS,IAAA,CAAK,UAAA,CAAYD,CAAI,CAChD,CAEO,KAAA,CAAA,GAASA,CAAAA,CAAe,CAC7B,OAAOC,CAAAA,CAAS,OAAA,CAAS,KAAK,UAAA,CAAYD,CAAI,CAChD,CAEO,IAAA,CAAA,GAAQA,CAAAA,CAAe,CAC5B,OAAOC,CAAAA,CAAS,MAAA,CAAQ,IAAA,CAAK,UAAA,CAAYD,CAAI,CAC/C,CAEO,IAAA,CAAA,GAAQA,CAAAA,CAAe,CAC5B,OAAOC,CAAAA,CAAS,MAAA,CAAQ,IAAA,CAAK,UAAA,CAAYD,CAAI,CAC/C,CAEO,OAAA,CAAA,GAAWA,CAAAA,CAAe,CAC/B,OAAOC,CAAAA,CAAS,SAAA,CAAW,IAAA,CAAK,UAAA,CAAYD,CAAI,CAClD,CAAA,CAAA,CAGF,SAASC,CAAAA,CACPC,CAAAA,CACAC,CAAAA,CACAH,CAAAA,CAAe,CAEf,IAAMI,CAAAA,CAAST,CAAAA,CAAU,MAAM,CAAA,CAE/B,GAAKS,CAAAA,CAIL,OAAOA,CAAAA,CAAOF,CAAQ,CAAA,CAAEC,CAAAA,CAAW,GAAGH,CAAI,CAC5C,CCGA,IAAYK,CAAAA,CAAAA,CAAZ,SAAYA,CAAAA,CAAY,CAEtBA,CAAAA,CAAAA,CAAAA,CAAA,IAAA,CAAA,CAAA,CAAA,CAAA,MAAA,CAGAA,CAAAA,CAAAA,CAAAA,CAAA,MAAA,EAAA,CAAA,CAAA,OAAA,CAGAA,CAAAA,CAAAA,CAAAA,CAAA,IAAA,CAAA,EAAA,CAAA,CAAA,MAAA,CAGAA,CAAAA,CAAAA,CAAAA,CAAA,IAAA,CAAA,EAAA,CAAA,CAAA,OAGAA,CAAAA,CAAAA,CAAAA,CAAA,KAAA,CAAA,EAAA,CAAA,CAAA,OAAA,CAMAA,EAAAA,CAAAA,CAAA,OAAA,CAAA,EAAA,CAAA,CAAA,SAAA,CAGAA,CAAAA,CAAAA,EAAA,GAAA,CAAA,IAAA,CAAA,CAAA,MACF,CAAA,EAxBYA,CAAAA,GAAAA,CAAAA,CAAY,EAAA,CAAA,CAAA,CCpDlB,SAAUC,EAAAA,CACdC,CAAAA,CACAH,CAAAA,CAAkB,CAEdG,CAAAA,CAAWF,CAAAA,CAAa,IAAA,CAC1BE,CAAAA,CAAWF,CAAAA,CAAa,IAAA,CACfE,EAAWF,CAAAA,CAAa,GAAA,GACjCE,CAAAA,CAAWF,CAAAA,CAAa,GAAA,CAAA,CAI1BD,CAAAA,CAASA,GAAU,EAAA,CAEnB,SAASI,CAAAA,CACPN,CAAAA,CACAO,CAAAA,CAAsB,CAEtB,IAAMC,CAAAA,CAAUN,CAAAA,CAAOF,CAAQ,CAAA,CAE/B,OAAI,OAAOQ,GAAY,UAAA,EAAcH,CAAAA,EAAYE,CAAAA,CACxCC,CAAAA,CAAQ,IAAA,CAAKN,CAAM,EAErB,UAAA,CAAa,CACtB,CAEA,OAAO,CACL,MAAOI,CAAAA,CAAY,OAAA,CAASH,CAAAA,CAAa,KAAK,CAAA,CAC9C,IAAA,CAAMG,CAAAA,CAAY,MAAA,CAAQH,CAAAA,CAAa,IAAI,CAAA,CAC3C,IAAA,CAAMG,CAAAA,CAAY,MAAA,CAAQH,EAAa,IAAI,CAAA,CAC3C,KAAA,CAAOG,CAAAA,CAAY,OAAA,CAASH,CAAAA,CAAa,KAAK,CAAA,CAC9C,OAAA,CAASG,CAAAA,CAAY,SAAA,CAAWH,CAAAA,CAAa,OAAO,CAAA,CAExD,CCpBA,IAAMM,EAAAA,CAAW,MAAA,CAQJC,CAAAA,CAAP,MAAOC,CAAO,CAIX,OAAO,QAAA,EAAQ,CACpB,OAAK,IAAA,CAAK,SAAA,GACR,IAAA,CAAK,UAAY,IAAIA,CAAAA,CAAAA,CAGhB,IAAA,CAAK,SACd,CAMA,WAAA,EAAA,CACE,SAASC,CAAAA,CAAUZ,CAAAA,CAA0B,CAC3C,OAAO,SAAA,GAAaF,EAAI,CACtB,IAAMI,CAAAA,CAAST,CAAAA,CAAU,MAAM,CAAA,CAE/B,GAAKS,CAAAA,CACL,OAAOA,CAAAA,CAAOF,CAAQ,CAAA,CAAE,GAAGF,CAAI,CACjC,CACF,CAGA,IAAMe,CAAAA,CAAO,IAAA,CAIPC,CAAAA,CAAwC,CAC5CZ,CAAAA,CACAa,CAAAA,CAAoB,CAAE,QAAA,CAAUZ,CAAAA,CAAa,IAAI,IAC/C,CAAA,IAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CACF,GAAID,CAAAA,GAAWW,CAAAA,CAAM,CAInB,IAAMrB,CAAAA,CAAM,IAAI,KAAA,CACd,oIAAoI,CAAA,CAEtI,OAAAqB,CAAAA,CAAK,KAAA,CAAA,CAAMtB,EAAAC,CAAAA,CAAI,KAAA,IAAK,IAAA,EAAAD,CAAAA,GAAA,MAAA,CAAAA,CAAAA,CAAIC,EAAI,OAAO,CAAA,CAC5B,KAAA,CAGL,OAAOuB,CAAAA,EAAsB,QAAA,GAC/BA,EAAoB,CAClB,QAAA,CAAUA,CAAAA,CAAAA,CAAAA,CAId,IAAMC,CAAAA,CAAYvB,CAAAA,CAAU,MAAM,CAAA,CAC5BwB,CAAAA,CAAYb,EAAAA,CAAAA,CAChBV,CAAAA,CAAAqB,CAAAA,CAAkB,QAAA,IAAQ,IAAA,EAAArB,IAAA,MAAA,CAAAA,CAAAA,CAAIS,CAAAA,CAAa,IAAA,CAC3CD,CAAM,CAAA,CAGR,GAAIc,CAAAA,EAAa,CAACD,CAAAA,CAAkB,uBAAA,CAAyB,CAC3D,IAAMG,CAAAA,CAAAA,CAAQC,EAAA,IAAI,KAAA,EAAK,CAAG,KAAA,IAAK,IAAA,EAAAA,CAAAA,GAAA,MAAA,CAAAA,CAAAA,CAAI,iCAAA,CACnCH,CAAAA,CAAU,IAAA,CAAK,CAAA,wCAAA,EAA2CE,CAAK,CAAA,CAAE,EACjED,CAAAA,CAAU,IAAA,CACR,CAAA,0DAAA,EAA6DC,CAAK,CAAA,CAAE,EAAA,CAIxE,OAAOjC,CAAAA,CAAe,MAAA,CAAQgC,CAAAA,CAAWJ,CAAAA,CAAM,IAAI,CACrD,EAEAA,CAAAA,CAAK,SAAA,CAAYC,CAAAA,CAEjBD,CAAAA,CAAK,OAAA,CAAU,IAAK,CAClBlB,CAAAA,CAAiBc,EAAAA,CAAUI,CAAI,EACjC,CAAA,CAEAA,CAAAA,CAAK,qBAAA,CAAyBO,GACrB,IAAIxB,CAAAA,CAAoBwB,CAAO,CAAA,CAGxCP,CAAAA,CAAK,OAAA,CAAUD,CAAAA,CAAU,SAAS,CAAA,CAClCC,CAAAA,CAAK,KAAA,CAAQD,CAAAA,CAAU,OAAO,CAAA,CAC9BC,EAAK,IAAA,CAAOD,CAAAA,CAAU,MAAM,CAAA,CAC5BC,CAAAA,CAAK,IAAA,CAAOD,CAAAA,CAAU,MAAM,CAAA,CAC5BC,CAAAA,CAAK,KAAA,CAAQD,CAAAA,CAAU,OAAO,EAChC,GCvFI,IAAOS,CAAAA,CAAP,KAAgB,CACpB,WAAA,EAAA,CAAe,CAKf,WAAA,CAAYC,CAAAA,CAAeC,CAAAA,CAAwB,CACjD,OAAOC,EACT,CAKA,eAAA,CAAgBF,CAAAA,CAAeC,CAAAA,CAAwB,CACrD,OAAOE,EACT,CAKA,aAAA,CAAcH,CAAAA,CAAeC,CAAAA,CAAwB,CACnD,OAAOG,EACT,CAKA,oBAAoBJ,CAAAA,CAAeC,CAAAA,CAAwB,CACzD,OAAOI,EACT,CAKA,qBAAA,CACEL,CAAAA,CACAC,CAAAA,CAAwB,CAExB,OAAOK,EACT,CAKA,uBAAA,CACEN,EACAC,CAAAA,CAAwB,CAExB,OAAOM,EACT,CAKA,6BAAA,CACEP,CAAAA,CACAC,CAAAA,CAAwB,CAExB,OAAOO,EACT,CAKA,0BAAA,CACEC,CAAAA,CACAC,EAA0B,CACnB,CAKT,6BAAA,CAA8BD,CAAAA,CAAkC,CAAS,CAAA,CAAA,CAG9DE,EAAP,KAAiB,EAAA,CAEVC,CAAAA,CAAP,cAAiCD,CAAU,CAC/C,IAAIE,CAAAA,CAAgBC,CAAAA,CAA6B,CAAS,CAAA,CAAA,CAG/CC,CAAAA,CAAP,cACIJ,CAAU,CAGlB,GAAA,CAAIE,CAAAA,CAAgBC,CAAAA,CAA6B,CAAS,CAAA,CAAA,CAG/CE,CAAAA,CAAP,cAA+BL,CAAU,CAC7C,MAAA,CAAOE,CAAAA,CAAgBC,CAAAA,CAA6B,CAAS,GAGlDG,CAAAA,CAAP,cAAmCN,CAAU,CACjD,MAAA,CAAOE,CAAAA,CAAgBC,EAA6B,CAAS,CAAA,CAAA,CAGlDI,CAAAA,CAAP,KAA2B,CAC/B,WAAA,CAAYT,CAAAA,CAA6B,CAAG,CAE5C,cAAA,CAAeA,CAAAA,CAA6B,CAAG,CAAA,CAAA,CAGpCU,EAAAA,CAAP,cACID,CAAoB,EAAA,CAGjBE,EAAAA,CAAP,cACIF,CAAoB,EAAA,CAGjBG,GAAP,cACIH,CAAoB,EAAA,CAGjBI,EAAAA,CAAa,IAAIvB,CAAAA,CAGjBK,GAAsB,IAAIQ,CAAAA,CAC1BV,EAAAA,CAAoB,IAAIc,CAAAA,CACxBb,EAAAA,CAAwB,IAAIc,CAAAA,CAC5BZ,EAAAA,CAA8B,IAAIU,CAAAA,CAGlCR,EAAAA,CAAiC,IAAIY,EAAAA,CACrCb,GAA+B,IAAIc,EAAAA,CACnCZ,EAAAA,CACX,IAAIa,EAAAA,CC1IA,IAAOE,EAAAA,CAAP,KAAwB,CAC5B,QAAA,CAASvB,CAAAA,CAAewB,CAAAA,CAAmBvB,CAAAA,CAAuB,CAChE,OAAOqB,EACT,CAAA,CAAA,CAGWG,EAAAA,CAAsB,IAAIF,EAAAA,CCJvC,IAAMpC,EAAAA,CAAW,SAAA,CAKJuC,CAAAA,CAAP,MAAOC,CAAU,CAIrB,WAAA,EAAA,CAAuB,CAGhB,OAAO,WAAA,EAAW,CACvB,OAAK,IAAA,CAAK,SAAA,GACR,KAAK,SAAA,CAAY,IAAIA,CAAAA,CAAAA,CAGhB,IAAA,CAAK,SACd,CAMO,uBAAuBC,CAAAA,CAAuB,CACnD,OAAOjE,CAAAA,CAAewB,EAAAA,CAAUyC,CAAAA,CAAUxC,CAAAA,CAAQ,QAAA,EAAU,CAC9D,CAKO,gBAAA,EAAgB,CACrB,OAAOjB,EAAUgB,EAAQ,CAAA,EAAKsC,EAChC,CAKO,QAAA,CACLI,CAAAA,CACAC,EACAhC,CAAAA,CAAsB,CAEtB,OAAO,IAAA,CAAK,gBAAA,EAAgB,CAAG,SAAS+B,CAAAA,CAAMC,CAAAA,CAAShC,CAAO,CAChE,CAGO,OAAA,EAAO,CACZzB,CAAAA,CAAiBc,EAAAA,CAAUC,CAAAA,CAAQ,QAAA,EAAU,EAC/C,CAAA,CAAA,CCnDK,IAAM2C,EAAAA,CAAUL,CAAAA,CAAW,WAAA,EAAW,CCR7C,IAAMM,EAAAA,CAAa,eACbC,EAAAA,CAAgB,eAAA,CAMhBC,EAAAA,CAAsB,CAC3B,CAAA,CAAG,CAAA,CAAG,GAAI,EAAA,CAAI,GAAA,CAAK,IAAA,CAAM,IAAA,CAAM,KAAA,CAAO,KAAA,CAAO,MAAA,CAAQ,OAAA,CAAS,OAAA,CAC9D,QAAA,CAAU,QACX,CAAA,CAMMC,EAAAA,CAAmB,CACxB,IAAM,GAAA,CAAM,GAAA,CAAM,GAAA,CAAM,GAAA,CAAM,GAAA,CAAM,GAAA,CAAM,IAAA,CAAM,IAAA,CAAM,IAAA,CAAM,KAAA,CAAO,KAAA,CACnE,KAAA,CAAO,KACR,CAAA,CAeaC,EAAN,KAAqB,CACnB,UAAA,CACA,iBAAA,CACA,MAAA,CAAS,KAAA,CAEjB,WAAA,EAAc,CACb,GAAI,CACH,IAAMC,CAAAA,CAAQN,EAAAA,CAAQ,QAAA,CAASC,GAAYC,EAAa,CAAA,CAExD,IAAA,CAAK,UAAA,CAAaI,CAAAA,CAAM,eAAA,CAAgB,4BAA6B,CACpE,WAAA,CAAa,0DAAA,CACb,IAAA,CAAM,SAAA,CACN,MAAA,CAAQ,CAAE,wBAAA,CAA0BH,EAAoB,CACzD,CAAC,CAAA,CAED,IAAA,CAAK,iBAAA,CAAoBG,CAAAA,CAAM,eAAA,CAC9B,kCAAA,CACA,CACC,WAAA,CAAa,6BAAA,CACb,IAAA,CAAM,IACN,MAAA,CAAQ,CAAE,wBAAA,CAA0BF,EAAiB,CACtD,CACD,EAEA,IAAA,CAAK,MAAA,CAAS,CAAA,CAAA,CACd5F,CAAAA,CAAI,KAAA,CAAM,iDAAiD,EAC5D,CAAA,MAAS2B,CAAAA,CAAc,CAEtB3B,CAAAA,CAAI,KAAA,CACH,CAAA,6BAAA,EAAgC2B,CAAAA,YAAe,KAAA,CAAQA,CAAAA,CAAI,OAAA,CAAU,MAAA,CAAOA,CAAG,CAAC,CAAA,CACjF,EACA,IAAMoE,CAAAA,CAAgB,CACrB,MAAA,CAAQ,IAAM,CAAC,CAChB,CAAA,CACA,IAAA,CAAK,UAAA,CAAaA,CAAAA,CAClB,IAAA,CAAK,iBAAA,CAAoBA,EAC1B,CACD,CAUA,YAAA,CACCC,CAAAA,CACAC,CAAAA,CACAC,CAAAA,CACAC,CAAAA,CACO,CACP,IAAA,CAAK,UAAA,CAAW,MAAA,CAAOH,CAAAA,CAAQ,CAC9B,eAAA,CAAiB,OACjB,uBAAA,CAAyBE,CAAAA,CACzB,mBAAA,CAAqBD,CAAAA,CACrB,sBAAA,CAAwB,WAAA,CACxB,GAAIE,CAAAA,CAAW,CAAE,gBAAA,CAAkBA,CAAS,CAAA,CAAI,EACjD,CAAC,EACF,CASA,cAAA,CACCC,CAAAA,CACAF,CAAAA,CACAG,CAAAA,CACO,CACP,IAAA,CAAK,iBAAA,CAAkB,MAAA,CAAOD,CAAAA,CAAa,GAAA,CAAM,CAChD,eAAA,CAAiB,OACjB,uBAAA,CAAyBF,CAAAA,CACzB,GAAIG,CAAAA,CAAQ,CAAE,YAAA,CAAcA,CAAM,CAAA,CAAI,EACvC,CAAC,EACF,CAGA,UAAoB,CACnB,OAAO,IAAA,CAAK,MACb,CACD,EC5EA,IAAMC,EAAAA,CAAmE,CACxE,UAAA,CAAY,MAAA,CACZ,SAAA,CAAW,cAAA,CACX,aAAA,CAAe,OACf,aAAA,CAAe,MAAA,CACf,UAAA,CAAY,MAAA,CACZ,WAAA,CAAa,MAAA,CACb,UAAA,CAAY,MACb,CAAA,CAWaC,CAAAA,CAAN,MAAMC,CAAqB,CACjC,OAAe,SAAwC,IAAA,CAC/C,UAAA,CAAqC,EAAC,CAC7B,SAAA,CACA,SAAA,CACT,SAAA,CACA,UAAA,CAEA,WAAA,EAAc,CACrB,IAAA,CAAK,SAAA,CAAY,MAAA,CAAO,UAAA,GACxB,IAAA,CAAK,SAAA,CAAY,IAAA,CAAK,GAAA,EAAI,CAE1B,IAAA,CAAK,UAAYvG,EAAAA,EAAyB,CAC1C,IAAA,CAAK,UAAA,CAAa,IAAI4F,CAAAA,CAEtB,KAAK,iBAAA,GACN,CAGQ,iBAAA,EAA0B,CACjChG,EAAAA,EAAqB,CACnB,IAAA,CAAM4G,CAAAA,EAAS,CACf,IAAA,CAAK,SAAA,CAAYA,EAClB,CAAC,EACA,KAAA,CAAM,IAAM,CAEb,CAAC,EACH,CAEA,OAAO,WAAA,EAAoC,CAC1C,OAAKD,CAAAA,CAAqB,QAAA,GACzBA,CAAAA,CAAqB,QAAA,CAAW,IAAIA,CAAAA,CAAAA,CAE9BA,CAAAA,CAAqB,QAC7B,CAMA,WAAA,CAAYE,CAAAA,CAAyB,CACpC,GAAI,CACH,OAAO,IAAA,CAAK,SAAA,CAAU,WAAA,CAAYA,CAAO,CAC1C,CAAA,KAAQ,CAEP,OAAO,IAAA,CAAK,IAAA,CAAKA,CAAAA,CAAQ,OAAS,CAAC,CACpC,CACD,CAMA,MAAA,CAAOC,CAAAA,CAAuD,CAC7D,IAAMC,CAAAA,CAAmC,CACxC,GAAGD,CAAAA,CACH,SAAA,CAAW,IAAA,CAAK,GAAA,EACjB,CAAA,CACA,IAAA,CAAK,UAAA,CAAW,IAAA,CAAKC,CAAU,EAG/B,GAAI,CACH,IAAMC,CAAAA,CAASP,EAAAA,CAAmBK,CAAAA,CAAO,IAAI,CAAA,EAAK,MAAA,CAE9CA,CAAAA,CAAO,oBAAA,CAAuB,CAAA,EACjC,IAAA,CAAK,WAAW,YAAA,CACfA,CAAAA,CAAO,oBAAA,CACP,OAAA,CACAE,CAAAA,CACAF,CAAAA,CAAO,QACR,CAAA,CAEGA,CAAAA,CAAO,qBAAA,CAAwB,CAAA,EAClC,IAAA,CAAK,UAAA,CAAW,YAAA,CACfA,EAAO,qBAAA,CACP,QAAA,CACAE,CAAAA,CACAF,CAAAA,CAAO,QACR,CAAA,CAEGA,EAAO,UAAA,GAAe,KAAA,CAAA,EACzB,IAAA,CAAK,UAAA,CAAW,cAAA,CAAeA,CAAAA,CAAO,WAAYE,CAAM,EAE1D,CAAA,KAAQ,CAER,CACD,CAKA,cAAA,CAAeH,CAAAA,CAAyB,CACvC,OAAO,IAAA,CAAK,WAAA,CAAYA,CAAO,CAChC,CAGA,SAAA,EAAgC,CAC/B,OAAO,CACN,SAAA,CAAW,IAAA,CAAK,SAAA,CAChB,UAAA,CAAY,CAAC,GAAG,IAAA,CAAK,UAAU,CAAA,CAC/B,gBAAA,CAAkB,KAAK,UAAA,CAAW,MAAA,CACjC,CAACI,CAAAA,CAAKC,CAAAA,GAAOD,CAAAA,CAAMC,CAAAA,CAAG,oBAAA,CACtB,CACD,CAAA,CACA,iBAAA,CAAmB,IAAA,CAAK,UAAA,CAAW,MAAA,CAClC,CAACD,CAAAA,CAAKC,CAAAA,GAAOD,CAAAA,CAAMC,CAAAA,CAAG,qBAAA,CACtB,CACD,EACA,aAAA,CAAe,IAAA,CAAK,SAAA,CAAU,IAAA,CAC9B,eAAA,CAAiB,IAAA,CAAK,KAAI,CAAI,IAAA,CAAK,SACpC,CACD,CAGA,gBAAA,EAAoD,CACnD,IAAMC,CAAAA,CAAY,IAAI,GAAA,CAEtB,IAAA,IAAWD,CAAAA,IAAM,IAAA,CAAK,WAAY,CACjC,IAAME,CAAAA,CAAMF,CAAAA,CAAG,QAAA,EAAYA,CAAAA,CAAG,MAAA,CACxBG,CAAAA,CAAWF,CAAAA,CAAU,GAAA,CAAIC,CAAG,CAAA,EAAK,CACtC,KAAA,CAAO,EACP,MAAA,CAAQ,CAAA,CACR,KAAA,CAAO,CAAA,CACP,aAAA,CAAe,CAChB,CAAA,CAEME,CAAAA,CACLD,CAAAA,CAAS,aAAA,CAAgBA,CAAAA,CAAS,KAAA,EAASH,CAAAA,CAAG,UAAA,EAAc,GACvDK,CAAAA,CAAWF,CAAAA,CAAS,KAAA,CAAQ,CAAA,CAElCF,CAAAA,CAAU,GAAA,CAAIC,EAAK,CAClB,KAAA,CAAOC,CAAAA,CAAS,KAAA,CAAQH,CAAAA,CAAG,oBAAA,CAC3B,OAAQG,CAAAA,CAAS,MAAA,CAASH,CAAAA,CAAG,qBAAA,CAC7B,KAAA,CAAOK,CAAAA,CACP,aAAA,CAAeA,CAAAA,CAAW,CAAA,CAAID,CAAAA,CAAgBC,CAAAA,CAAW,CAC1D,CAAC,EACF,CAEA,OAAOJ,CACR,CAMA,iBAAA,EAA4B,CAC3B,IAAMK,CAAAA,CAAS,IAAA,CAAK,SAAA,EAAU,CAC9B,GAAIA,CAAAA,CAAO,UAAA,CAAW,MAAA,GAAW,EAAG,OAAO,EAAA,CAE3C,IAAMC,CAAAA,CAAY,IAAA,CAAK,YAAA,CAAaD,CAAAA,CAAO,eAAe,CAAA,CACpDE,CAAAA,CAAgBF,CAAAA,CAAO,gBAAA,CAAmBA,CAAAA,CAAO,iBAAA,CAGjDG,EAAS,IAAI,GAAA,CAInB,IAAA,IAAWT,CAAAA,IAAMM,CAAAA,CAAO,UAAA,CAAY,CACnC,IAAMJ,CAAAA,CAAMF,CAAAA,CAAG,IAAA,CACTG,CAAAA,CAAWM,CAAAA,CAAO,IAAIP,CAAG,CAAA,EAAK,CACnC,KAAA,CAAO,CAAA,CACP,KAAA,CAAO,CAAA,CACP,MAAA,CAAQ,CACT,CAAA,CACAO,CAAAA,CAAO,GAAA,CAAIP,CAAAA,CAAK,CACf,MAAOC,CAAAA,CAAS,KAAA,CAAQ,CAAA,CACxB,KAAA,CAAOA,CAAAA,CAAS,KAAA,CAAQH,EAAG,oBAAA,CAC3B,MAAA,CAAQG,CAAAA,CAAS,MAAA,CAASH,CAAAA,CAAG,qBAC9B,CAAC,EACF,CAGA,IAAMU,CAAAA,CAAc,KAAA,CAAM,IAAA,CAAKD,CAAAA,CAAO,OAAA,EAAS,CAAA,CACzCE,CAAAA,CAAYD,CAAAA,CAAY,GAAA,CAAI,CAAC,CAACpG,CAAAA,CAAMsG,CAAI,CAAA,CAAGC,CAAAA,GAAQ,CACxD,IAAMC,EAASD,CAAAA,GAAQH,CAAAA,CAAY,MAAA,CAAS,CAAA,CAAI,sBAAA,CAAU,sBAAA,CACpDK,EACLH,CAAAA,CAAK,MAAA,CAAS,CAAA,CAAI,CAAA,GAAA,EAAMA,CAAAA,CAAK,MAAA,CAAO,cAAA,EAAgB,CAAA,IAAA,CAAA,CAAS,EAAA,CAC9D,OAAO,CAAA,EAAGE,CAAM,CAAA,CAAA,EAAIxG,CAAI,CAAA,KAAA,EAAKsG,CAAAA,CAAK,KAAK,CAAA,QAAA,EAAMA,CAAAA,CAAK,KAAA,CAAM,cAAA,EAAgB,CAAA,GAAA,EAAMG,CAAU,CAAA,CACzF,CAAC,CAAA,CAGKC,CAAAA,CAAa,KAAK,gBAAA,EAAiB,CACnCC,CAAAA,CAAc,KAAA,CAAM,IAAA,CAAKD,CAAAA,CAAW,OAAA,EAAS,CAAA,CAAE,MAAA,CACpD,CAAC,CAACd,CAAG,CAAA,GAAMA,IAAQ,YAAA,EAAgBA,CAAAA,GAAQ,gBAC5C,CAAA,CAEMgB,CAAAA,CAAsB,GACxBD,CAAAA,CAAY,MAAA,CAAS,CAAA,GACxBC,CAAAA,CAAU,IAAA,CAAK,uBAAa,EAC5BD,CAAAA,CAAY,OAAA,CAAQ,CAAC,CAAC1C,CAAAA,CAAMqC,CAAI,CAAA,CAAGC,CAAAA,GAAQ,CAC1C,IAAMC,CAAAA,CAASD,CAAAA,GAAQI,CAAAA,CAAY,MAAA,CAAS,EAAI,sBAAA,CAAU,sBAAA,CACpDF,CAAAA,CACLH,CAAAA,CAAK,MAAA,CAAS,CAAA,CAAI,CAAA,GAAA,EAAMA,CAAAA,CAAK,MAAA,CAAO,cAAA,EAAgB,CAAA,IAAA,CAAA,CAAS,EAAA,CACxDO,CAAAA,CACLP,EAAK,aAAA,CAAgB,CAAA,CAAI,CAAA,EAAA,EAAK,IAAA,CAAK,KAAA,CAAMA,CAAAA,CAAK,aAAa,CAAC,CAAA,EAAA,CAAA,CAAO,EAAA,CACpEM,CAAAA,CAAU,IAAA,CACT,CAAA,EAAGJ,CAAM,IAAIvC,CAAI,CAAA,EAAA,EAAKqC,CAAAA,CAAK,KAAA,CAAM,cAAA,EAAgB,MAAMG,CAAU,CAAA,MAAA,EAAMH,CAAAA,CAAK,KAAK,CAAA,CAAA,EAAIO,CAAY,EAClG,EACD,CAAC,CAAA,CAAA,CAIF,IAAMC,CAAAA,CAAWd,CAAAA,CAAO,UAAA,CAAW,MAAA,CACjCN,CAAAA,EAAOA,CAAAA,CAAG,UAAA,GAAe,MAC3B,CAAA,CACMqB,CAAAA,CACLD,EAAS,MAAA,CAAS,CAAA,CACf,IAAA,CAAK,KAAA,CACLA,CAAAA,CAAS,MAAA,CAAO,CAACrB,CAAAA,CAAKC,CAAAA,GAAOD,CAAAA,EAAOC,CAAAA,CAAG,UAAA,EAAc,CAAA,CAAA,CAAI,CAAC,EACzDoB,CAAAA,CAAS,MACX,CAAA,CACC,CAAA,CAEEE,CAAAA,CAAa,IAAA,CAAK,UAAA,CAAW,QAAA,EAAS,CACzC,yCAAA,CACA,UAAA,CAcH,OAZc,CACb;AAAA,cAAA,CAAA,CACA,CAAA,sBAAA,EAAehB,CAAAA,CAAO,SAAA,CAAU,KAAA,CAAM,CAAA,CAAG,CAAC,CAAC,CAAA,EAAA,EAAKC,CAAS,CAAA,CAAA,CAAA,CACzD,CAAA,wBAAA,EAAiBD,CAAAA,CAAO,aAAa,CAAA,CAAA,CACrC,CAAA,yBAAA,EAAkBA,CAAAA,CAAO,UAAA,CAAW,MAAM,CAAA,CAAA,CAC1C,GAAGK,CAAAA,CACH,CAAA,oBAAA,EAAaL,CAAAA,CAAO,gBAAA,CAAiB,cAAA,EAAgB,SAASA,CAAAA,CAAO,iBAAA,CAAkB,cAAA,EAAgB,CAAA,MAAA,EAASE,CAAAA,CAAc,gBAAgB,CAAA,UAAA,CAAA,CAC9I,GAAGU,CAAAA,CACH,GAAIG,CAAAA,CAAa,EAAI,CAAC,CAAA,0BAAA,EAAmBA,CAAU,CAAA,EAAA,CAAI,CAAA,CAAI,GAC3D,CAAA,mBAAA,EAAYC,CAAU,CAAA,CACvB,CAAA,CAEa,IAAA,CAAK;AAAA,CAAI,CACvB,CAGQ,YAAA,CAAaC,CAAAA,CAAoB,CACxC,IAAMC,CAAAA,CAAU,IAAA,CAAK,KAAA,CAAMD,CAAAA,CAAK,GAAI,EACpC,GAAIC,CAAAA,CAAU,EAAA,CAAI,OAAO,CAAA,EAAGA,CAAO,IACnC,IAAMC,CAAAA,CAAU,IAAA,CAAK,KAAA,CAAMD,CAAAA,CAAU,EAAE,EACjCE,CAAAA,CAAmBF,CAAAA,CAAU,GACnC,GAAIC,CAAAA,CAAU,GAAI,OAAO,CAAA,EAAGA,CAAO,CAAA,EAAA,EAAKC,CAAgB,CAAA,CAAA,CAAA,CACxD,IAAMC,CAAAA,CAAQ,IAAA,CAAK,KAAA,CAAMF,CAAAA,CAAU,EAAE,CAAA,CAC/BG,EAAmBH,CAAAA,CAAU,EAAA,CACnC,OAAO,CAAA,EAAGE,CAAK,CAAA,EAAA,EAAKC,CAAgB,CAAA,CAAA,CACrC,CAGA,OAAc,CACb,IAAA,CAAK,WAAa,GACnB,CAGA,OAAO,OAAA,EAAgB,CACtBnC,EAAqB,QAAA,CAAW,KACjC,CACD,ECzTO,SAASoC,CAAAA,EAAsC,CACrD,IAAMhI,CAAAA,CACL,OAAA,CAAQ,GAAA,CAAI,kCAAA,EAAoC,WAAA,EAAY,CAAE,MAAK,CACpE,OAAI,EAAAA,CAAAA,GAAM,GAAA,EAAOA,CAAAA,GAAM,SAAWA,CAAAA,GAAM,IAAA,CAEzC,CAKO,SAASiI,EAAAA,CAAgCC,CAAAA,CAA6B,CAC5E,IAAIC,CAAAA,CAAID,CAAAA,CACFE,CAAAA,CAAU,CACf;;AAAA,eAAA,CAAA,CACA,CAAA;AAAA;AAAA,eAAA,CAAA,CACA;AAAA,eAAA,CACD,EACA,IAAA,IAAWC,CAAAA,IAAKD,EAAS,CACxB,IAAME,EAAIH,CAAAA,CAAE,OAAA,CAAQE,CAAC,CAAA,CACrB,GAAIC,IAAM,EAAA,CAAI,CACbH,EAAIA,CAAAA,CAAE,KAAA,CAAM,EAAGG,CAAC,CAAA,CAChB,KACD,CACD,CACA,OAAOH,CAAAA,CAAE,OAAA,EACV,CCPA,IAAMI,GAAuB,GAAA,CAGvBC,EAAAA,CAA6B,EAWtBC,EAAAA,CAAN,MAAMC,GAAc,CA0B1B,WAAA,CACSC,EACAC,CAAAA,CAA4B,IAAA,CAC5BC,EAAiB,KAAA,CACxB,CAHO,gBAAAF,CAAAA,CACA,IAAA,CAAA,QAAA,CAAAC,EACA,IAAA,CAAA,cAAA,CAAAC,CAAAA,CAGJ,KAAK,QAAA,GACR,IAAA,CAAK,SAAS,uBAAA,CAAwB,IAAM,CAC3C,IAAMC,CAAAA,CAAc,KAAK,UAAA,CAAW,SAAA,GAAY,GAAA,CAAKC,CAAAA,GAAO,CAC3D,IAAA,CAAMA,CAAAA,CAAE,KACR,WAAA,CAAaA,CAAAA,CAAE,YACf,WAAA,CAAaA,CAAAA,CAAE,WAChB,CAAA,CAAE,CAAA,CAEIC,EAAY,IAAA,CAAK,UAAA,CAAW,eAAc,CAAE,GAAA,CAAKC,IAAO,CAC7D,IAAA,CAAMA,EAAE,IAAA,CACR,GAAA,CAAKA,EAAE,GAAA,CACP,WAAA,CAAaA,EAAE,WAAA,CACf,QAAA,CAAUA,EAAE,QACb,CAAA,CAAE,EAGIC,CAAAA,CAAgB,IAAA,CAAK,WAAmB,MAAA,CAE9C,OAAO,CACN,MAAA,CAAQ,IAAA,CAAK,UAAU,SAAA,EAAU,EAAK,UACtC,QAAA,CAAU,IAAA,CAAK,eACf,KAAA,CAAO,CAAC,GAAGJ,CAAW,CAAA,CACtB,UAAAE,CAAAA,CACA,UAAA,CAAY,KAAK,UAAA,CAAW,aAAA,GAC5B,YAAA,CAAc,IAAA,CAAK,WAAW,YAAA,GAAiB,MAAA,CAC/C,UAAWE,CAAAA,EAAc,SAAA,CACzB,SAAUA,CAAAA,EAAc,QAAA,CACrB,CACA,MAAA,CAAQA,CAAAA,CAAa,SAAS,MAAA,EAAU,gBAAA,CACxC,cAAeA,CAAAA,CAAa,QAAA,CAAS,eAAiB,CAAA,CACtD,cAAA,CAAgBA,EAAa,QAAA,CAAS,cAAA,EAAkB,EACzD,CAAA,CACC,MACJ,CACD,CAAC,EAGD,IAAA,CAAK,QAAA,CAAS,kBAAiB,CAAE,KAAA,CAAOnI,GAAiB,CACxD3B,CAAAA,CAAI,KACH,CAAA,2CAAA,EAA8C2B,CAAAA,YAAe,MAAQA,CAAAA,CAAI,OAAA,CAAU,OAAOA,CAAG,CAAC,EAC/F,EACD,CAAC,GAIE,OAAA,CAAQ,GAAA,CAAI,wBAA0B,MAAA,EACzC,OAAA,CAAQ,OAAO,KAAA,CACd,CAAA;AAAA,CAED,EAEF,CAjFQ,aAAA,CAGJ,IAAI,GAAA,CAGA,iBAAyC,IAAA,CAG1C,QAAA,CAAyB,IAAIoI,GAAAA,CAG7B,eAGC,oBAAA,CAGJ,IAAI,IAER,OAAwB,iCAAA,CAAoC,KAC5D,OAAwB,gCAAA,CAAmC,CAAA,CAAI,GAAA,CAC/D,OAAwB,6BAAA,CAAgC,GAAA,CA6DhD,wBAAwBC,CAAAA,CAAyB,CACxD,IAAMC,CAAAA,CAAQ,IAAA,CAAK,oBAAA,CAAqB,GAAA,CAAID,CAAM,CAAA,CAClD,GAAI,CAACC,CAAAA,CAAO,OAAO,OACnB,IAAMC,CAAAA,CAAM,IAAA,CAAK,GAAA,GACjB,OAAIA,CAAAA,EAAOD,EAAM,aAAA,CAAsB,KAAA,EAGtCC,EAAMD,CAAAA,CAAM,aAAA,CACZX,GAAAA,CAAc,6BAAA,GAEdtJ,EAAI,IAAA,CACH,CAAA,0CAAA,EAA6CgK,CAAM,CAAA,kBAAA,EAAqB,IAAA,CAAK,MAAMC,CAAAA,CAAM,aAAA,CAAgBC,CAAAA,EAAO,GAAI,CAAC,CAAA,YAAA,CACtH,CAAA,CACAD,EAAM,aAAA,CAAgBC,CAAAA,CAAAA,CAEhB,KACR,CAEQ,0BAAA,CAA2BF,CAAAA,CAAsB,CACxD,KAAK,oBAAA,CAAqB,MAAA,CAAOA,CAAM,EACxC,CAEQ,2BAA2BA,CAAAA,CAAsB,CACxD,IAAME,CAAAA,CAAM,KAAK,GAAA,EAAI,CAEfC,CAAAA,CAAAA,CADO,IAAA,CAAK,qBAAqB,GAAA,CAAIH,CAAM,CAAA,EACzB,QAAA,EAAY,GAAK,CAAA,CACnCI,CAAAA,CAAU,KAAK,GAAA,CACpBd,GAAAA,CAAc,kCACb,CAAA,EAAK,IAAA,CAAK,GAAA,CAAI,CAAA,CAAGa,EAAW,CAAC,CAAA,CAC9Bb,IAAc,gCACf,CAAA,CACA,KAAK,oBAAA,CAAqB,GAAA,CAAIU,CAAAA,CAAQ,CACrC,SAAAG,CAAAA,CACA,aAAA,CAAeD,EAAME,CAAAA,CACrB,aAAA,CAAe,CAChB,CAAC,EACF,CAEA,MAAa,SACZC,CAAAA,CACAC,CAAAA,CAC8B,CAC9B,GAAM,CAAE,OAAAC,CAAAA,CAAQ,MAAA,CAAAC,CAAAA,CAAQ,EAAA,CAAAC,CAAG,CAAA,CAAIJ,CAAAA,CAI/B,GAHArK,CAAAA,CAAI,IAAA,CAAK,6BAA6BuK,CAAM,CAAA,CAAE,CAAA,CAG1C,IAAA,CAAK,WAAW,YAAA,CAAc,CACjC,IAAMG,CAAAA,CAAaC,GAAAA,CAAiBJ,EAAQD,CAAAA,EAAY,IAAI,CAAA,CAC5D,GAAI,CAACI,CAAAA,CAAW,OAAA,CACf,OAAA1K,CAAAA,CAAI,IAAA,CACH,gDAAgDuK,CAAM,CAAA,GAAA,EAAMG,CAAAA,CAAW,MAAM,EAC9E,CAAA,CACO,CACN,OAAA,CAAS,KAAA,CACT,GAAAD,CAAAA,CACA,KAAA,CAAO,CACN,IAAA,CAAM,OACN,OAAA,CAASC,CAAAA,CAAW,QAAU,eAC/B,CACD,CAEF,CAEA,OAAQH,CAAAA,EACP,KAAK,YAAA,CACJ,OAAO,CACN,OAAA,CAAS,KAAA,CACT,GAAAE,CAAAA,CACA,MAAA,CAAQ,CACP,eAAA,CAAiB,aACjB,YAAA,CAAc,CACb,MAAO,CAAE,WAAA,CAAa,IAAK,CAAA,CAC3B,SAAA,CAAW,CAAE,WAAA,CAAa,IAAK,CAAA,CAC/B,OAAA,CAAS,CAAE,WAAA,CAAa,IAAK,CAC9B,CAAA,CACA,UAAA,CAAY,IAAA,CAAK,UAAA,CAAW,eAC7B,CACD,EACD,KAAK,2BAAA,CAGJ,YAAK,6BAAA,EAA8B,CAAE,KAAA,CAAM,IAAM,CAAC,CAAC,CAAA,CAC5C,KACR,KAAK,yBAAA,CACJ,OAAO,IAAA,CACR,KAAK,MAAA,CACJ,OAAO,CAAE,OAAA,CAAS,KAAA,CAAO,GAAAA,CAAAA,CAAI,MAAA,CAAQ,EAAG,CAAA,CACzC,KAAK,YAAA,CAAc,CAClB,IAAMG,CAAAA,CAAa,IAAA,CAAK,UAAA,CAAW,WAAU,CACvClB,CAAAA,CAAc,MAAM,IAAA,CAAK,gBAAe,CAExCmB,GAAAA,CAAejC,GAA2B,CAC7CgC,CAAAA,CAAW,IAAKjB,CAAAA,GAAO,CACvB,GAAGA,CAAAA,CACH,YAAad,EAAAA,CAAgCc,CAAAA,CAAE,aAAe,EAAE,CACjE,EAAE,CAAA,CACDiB,CAAAA,CAEH5K,CAAAA,CAAI,IAAA,CACH,6BAA6B4K,CAAAA,CAAW,MAAM,WAAWlB,CAAAA,CAAY,MAAM,qBAC5E,CAAA,CAiBA,IAAMoB,CAAAA,CAAW,CAXM,CACtB,IAAA,CAAM,gBAAA,CACN,YACC,8FAAA,CACD,WAAA,CAAa,CACZ,IAAA,CAAM,QAAA,CACN,UAAA,CAAY,GACZ,oBAAA,CAAsB,KACvB,CACD,CAAA,CAEkC,GAAGD,IAAc,GAAGnB,CAAW,CAAA,CAG3DqB,CAAAA,CAAYxE,EAAqB,WAAA,EAAY,CAC7CyE,EAAe,IAAA,CAAK,SAAA,CAAUF,CAAQ,CAAA,CACtCG,CAAAA,CAAuB,IAAA,CAAK,SAAA,CAAU,CAAE,KAAA,CAAOH,CAAS,CAAC,CAAA,CAC/D,OAAAC,EAAU,MAAA,CAAO,CAChB,IAAA,CAAM,YAAA,CACN,OAAQ,YAAA,CACR,oBAAA,CAAsBA,CAAAA,CAAU,WAAA,CAAYC,CAAY,CAAA,CACxD,qBAAA,CAAuBD,CAAAA,CAAU,WAAA,CAAYE,CAAoB,CAClE,CAAC,EAEM,CACN,OAAA,CAAS,MACT,EAAA,CAAAR,CAAAA,CACA,MAAA,CAAQ,CACP,MAAOK,CACR,CACD,CACD,CACA,KAAK,aACJ,OAAO,IAAA,CAAK,kBAAA,CACXL,CAAAA,CACAD,EACAF,CAAAA,EAAU,KACX,EACD,KAAK,gBAAA,CAAkB,CACtB,IAAMY,CAAAA,CAAiB,IAAA,CAAK,UAAA,CAAW,eAAc,CAC/CC,CAAAA,CAAkB,MAAM,IAAA,CAAK,kBAAA,GAC7BC,CAAAA,CAAe,CAAC,GAAGF,CAAAA,CAAgB,GAAGC,CAAe,CAAA,CAGrDE,EAAc9E,CAAAA,CAAqB,WAAA,GACnC+E,CAAAA,CAAY,IAAA,CAAK,SAAA,CAAUF,CAAY,EAC7C,OAAAC,CAAAA,CAAY,OAAO,CAClB,IAAA,CAAM,gBACN,MAAA,CAAQ,gBAAA,CACR,oBAAA,CAAsB,CAAA,CACtB,sBAAuBA,CAAAA,CAAY,WAAA,CAAYC,CAAS,CACzD,CAAC,EAEM,CACN,OAAA,CAAS,KAAA,CACT,EAAA,CAAAb,EACA,MAAA,CAAQ,CAAE,SAAA,CAAWW,CAAa,CACnC,CACD,CACA,KAAK,gBAAA,CAAkB,CACtB,IAAMG,CAAAA,CAAcf,EACpB,GAAI,CAACe,GAAa,GAAA,CACjB,OAAO,CACN,OAAA,CAAS,MACT,EAAA,CAAAd,CAAAA,CACA,MAAO,CAAE,IAAA,CAAM,OAAQ,OAAA,CAAS,sBAAuB,CACxD,CAAA,CACD,GAAI,CACH,IAAMe,EAAc,IAAA,CAAK,GAAA,GACnBC,CAAAA,CAAS,MAAM,IAAA,CAAK,UAAA,CAAW,aAAaF,CAAAA,CAAY,GAAG,EAG3DG,CAAAA,CAAcnF,CAAAA,CAAqB,aAAY,CAC/CoF,CAAAA,CAAkB,IAAA,CAAK,SAAA,CAAUF,CAAM,CAAA,CAC7C,OAAAC,EAAY,MAAA,CAAO,CAClB,KAAM,eAAA,CACN,MAAA,CAAQ,gBAAA,CACR,QAAA,CAAUH,EAAY,GAAA,CACtB,oBAAA,CAAsBG,EAAY,WAAA,CAAYH,CAAAA,CAAY,GAAG,CAAA,CAC7D,qBAAA,CAAuBG,CAAAA,CAAY,WAAA,CAAYC,CAAe,CAAA,CAC9D,UAAA,CAAY,KAAK,GAAA,EAAI,CAAIH,CAC1B,CAAC,CAAA,CAEM,CAAE,OAAA,CAAS,MAAO,EAAA,CAAAf,CAAAA,CAAI,MAAA,CAAAgB,CAAO,CACrC,CAAA,MAAS9J,CAAAA,CAAc,CAEtB,IAAMiK,IAAYL,CAAAA,CAAY,GAAA,CAC9B,OAAW,CAAE,QAAA,CAAAM,CAAS,CAAA,GAAK,IAAA,CAAK,aAAA,CAAc,MAAA,GAAU,CACvD,IAAMC,EAAiBD,CAAAA,CAAS,SAAA,CAAU,KACxChC,CAAAA,EAAMA,CAAAA,CAAE,GAAA,GAAQ+B,GAClB,EACA,GAAIE,CAAAA,CACH,OAAA9L,CAAAA,CAAI,IAAA,CACH,mCAAmC4L,GAAS,CAAA,mBAAA,EAAsBC,CAAAA,CAAS,MAAM,GAClF,CAAA,CACO,CACN,QAAS,KAAA,CACT,EAAA,CAAApB,EACA,MAAA,CAAQ,CACP,QAAA,CAAU,CACT,CACC,GAAA,CAAKqB,CAAAA,CAAe,IACpB,QAAA,CAAUA,CAAAA,CAAe,UAAY,YAAA,CACrC,IAAA,CACCA,CAAAA,CAAe,IAAA,EACfA,EAAe,WAAA,EACf,qBACF,CACD,CACD,CACD,CAEF,CAEA,OAAO,CACN,OAAA,CAAS,MACT,EAAA,CAAArB,CAAAA,CACA,MAAO,CACN,IAAA,CAAM,MACN,OAAA,CAAS9I,CAAAA,YAAe,KAAA,CAAQA,CAAAA,CAAI,QAAU,MAAA,CAAOA,CAAG,CACzD,CACD,CACD,CACD,CACA,KAAK,cAAA,CAAgB,CACpB,IAAMoK,CAAAA,CAAc,IAAA,CAAK,WAAW,WAAA,EAAY,CAG1CC,EAAczF,CAAAA,CAAqB,WAAA,EAAY,CAC/C0F,CAAAA,CAAY,KAAK,SAAA,CAAUF,CAAW,EAC5C,OAAAC,CAAAA,CAAY,OAAO,CAClB,IAAA,CAAM,aAAA,CACN,MAAA,CAAQ,eACR,oBAAA,CAAsB,CAAA,CACtB,sBAAuBA,CAAAA,CAAY,WAAA,CAAYC,CAAS,CACzD,CAAC,CAAA,CAEM,CACN,QAAS,KAAA,CACT,EAAA,CAAAxB,EACA,MAAA,CAAQ,CAAE,QAASsB,CAAY,CAChC,CACD,CACA,KAAK,aAAA,CAAe,CACnB,IAAMR,CAAAA,CAAcf,CAAAA,CAGpB,GAAI,CAACe,CAAAA,EAAa,IAAA,CACjB,OAAO,CACN,OAAA,CAAS,KAAA,CACT,GAAAd,CAAAA,CACA,KAAA,CAAO,CAAE,IAAA,CAAM,MAAA,CAAQ,OAAA,CAAS,qBAAsB,CACvD,CAAA,CACD,GAAI,CACH,IAAMyB,CAAAA,CAAc,KAAK,GAAA,EAAI,CACvBT,CAAAA,CAAS,MAAM,KAAK,UAAA,CAAW,SAAA,CAAU,CAC9C,IAAA,CAAMF,EAAY,IAAA,CAClB,SAAA,CAAWA,CAAAA,CAAY,SAAA,EAAa,EACrC,CAAC,EAGKY,CAAAA,CAAc5F,CAAAA,CAAqB,aAAY,CAC/C6F,CAAAA,CAAiB,IAAA,CAAK,SAAA,CAAU,CACrC,IAAA,CAAMb,CAAAA,CAAY,KAClB,SAAA,CAAWA,CAAAA,CAAY,SACxB,CAAC,CAAA,CACKc,CAAAA,CAAkB,IAAA,CAAK,UAAUZ,CAAM,CAAA,CAC7C,OAAAU,CAAAA,CAAY,MAAA,CAAO,CAClB,IAAA,CAAM,YAAA,CACN,MAAA,CAAQ,aAAA,CACR,SAAUZ,CAAAA,CAAY,IAAA,CACtB,qBAAsBY,CAAAA,CAAY,WAAA,CAAYC,CAAc,CAAA,CAC5D,qBAAA,CAAuBD,CAAAA,CAAY,WAAA,CAAYE,CAAe,CAAA,CAC9D,UAAA,CAAY,KAAK,GAAA,EAAI,CAAIH,CAC1B,CAAC,CAAA,CAEM,CAAE,OAAA,CAAS,MAAO,EAAA,CAAAzB,CAAAA,CAAI,OAAAgB,CAAO,CACrC,OAAS9J,CAAAA,CAAc,CACtB,OAAO,CACN,QAAS,KAAA,CACT,EAAA,CAAA8I,EACA,KAAA,CAAO,CACN,KAAM,KAAA,CACN,OAAA,CAAS9I,CAAAA,YAAe,KAAA,CAAQA,EAAI,OAAA,CAAU,MAAA,CAAOA,CAAG,CACzD,CACD,CACD,CACD,CACA,QACC,OAAO,CACN,OAAA,CAAS,MACT,EAAA,CAAA8I,CAAAA,CACA,MAAO,CAAE,IAAA,CAAM,MAAA,CAAQ,OAAA,CAAS,qBAAqBF,CAAM,CAAA,CAAG,CAC/D,CACF,CACD,CAMQ,6BAAA,EAA+C,CACtD,OAAA,CAAQ,SAAY,CACnB,MAAM,IAAI,QAASV,CAAAA,EAAM,UAAA,CAAWA,EAAG,GAAG,CAAC,CAAA,CAC3C,MAAM,QAAQ,IAAA,CAAK,CAClB,KAAK,oBAAA,CAAqB,IAAI,EAC9B,IAAI,OAAA,CAAeA,CAAAA,EAAM,UAAA,CAAWA,EAAG,IAAM,CAAC,CAC/C,CAAC,CAAA,CAAE,MAAM,IAAM,CAAC,CAAC,EAClB,IACD,CAOA,MAAa,oBAAA,CAAqByC,CAAAA,CAAS,MAAsB,CAChE,GAAK,IAAA,CAAK,QAAA,CACV,IAAI,IAAA,CAAK,gBAAA,CAAkB,OAAO,IAAA,CAAK,gBAAA,CAKvC,GAAI,CAACA,CAAAA,EAAU,IAAA,CAAK,aAAA,CAAc,KAAO,CAAA,CAAG,CAC3C,IAAMpC,CAAAA,CAAM,KAAK,GAAA,EAAI,CAIrB,GAHiB,KAAA,CAAM,KAAK,IAAA,CAAK,aAAA,CAAc,QAAQ,CAAA,CAAE,MACxD,CAAC,CAAE,QAAA,CAAAqC,CAAS,IAAMrC,CAAAA,CAAMqC,CAAAA,CAAWpD,GAAuB,GAC3D,CAAA,CACc,MACf,CAEA,OAAA,IAAA,CAAK,gBAAA,CAAA,CAAoB,SAAY,CACpC,GAAI,CACH,IAAMqD,CAAAA,CAAY,KAAA,CAAM,KAAK,IAAA,CAAK,aAAA,CAAc,MAAA,EAAQ,EAAE,MAAA,CACzD,CAACC,EAAK,CAAE,QAAA,CAAAZ,CAAS,CAAA,GAAMY,CAAAA,CAAMZ,CAAAA,CAAS,KAAA,CAAM,OAC5C,CACD,CAAA,CAGA,GAAI,IAAA,CAAK,aAAA,CAAc,OAAS,CAAA,CAC/B,IAAA,IAAS3C,CAAAA,CAAI,CAAA,CAAGA,EAAI,CAAA,CAAGA,CAAAA,EAAAA,CAAK,CAI3B,GAAA,CADE,IAAA,CAAK,SAAiB,IAAA,EAAM,cAAA,EAAe,CAAE,MAAA,EAAU,GACvC,CAAA,CAAG,CACpBlJ,EAAI,IAAA,CACH,iEACD,EACA,KACD,CACAA,CAAAA,CAAI,IAAA,CACH,sDAAsDkJ,CAAAA,CAAI,CAAC,CAAA,OAAA,CAC5D,CAAA,CACA,MAAM,IAAI,OAAA,CAASW,CAAAA,EAAM,UAAA,CAAWA,EAAG,GAAI,CAAC,EAC7C,CAID,IAAI6C,EAAwB,EAAC,CACvBC,CAAAA,CAAoB,IAAA,CAAK,cAAc,IAAA,GAAS,CAAA,CAAI,EAAI,CAAA,CAE9D,IAAA,IACKC,EAAc,CAAA,CAClBA,CAAAA,CAAcD,CAAAA,CACdC,CAAAA,EAAAA,CACC,CAED,IAAA,IACKC,CAAAA,CAAU,EACdA,CAAAA,CAAUzD,EAAAA,CACVyD,IACC,CACDH,CAAAA,CACE,MAAM,IAAA,CAAK,UAAU,yBAAA,EAA0B,EAAM,EAAC,CACxD,IAAMI,EAAS,IAAA,CAAK,QAAA,EAAU,SAAA,EAAU,CAExC,GADkBJ,CAAAA,CAAY,MAAA,CAAQjC,GAAOA,CAAAA,GAAOqC,CAAM,EAC5C,MAAA,CAAS,CAAA,CAAG,MACtBD,CAAAA,CAAUzD,GAA6B,CAAA,GAC1CpJ,CAAAA,CAAI,KACH,CAAA,oCAAA,EAAuC6M,CAAAA,CAAU,CAAC,CAAA,CAAA,EAAIzD,EAA0B,CAAA,GAAA,CACjF,CAAA,CACA,MAAM,IAAI,OAAA,CAASS,GAAM,UAAA,CAAWA,CAAAA,CAAG,GAAI,CAAC,CAAA,EAE9C,CAGA,IAAMkD,EAEJ,IAAA,CAAK,QAAA,CAAiB,IAAA,EACpB,cAAA,GACD,GAAA,CAAKC,CAAAA,EACLA,CAAAA,CAAE,UAAA,CAAW,UACd,CAAA,EAAK,EAAC,CAEJD,CAAAA,CAAY,OAAS,CAAA,GACxBL,CAAAA,CAAc,KAAA,CAAM,IAAA,CAAK,IAAI,GAAA,CAAI,CAAC,GAAGA,CAAAA,CAAa,GAAGK,CAAW,CAAC,CAAC,CAAA,CAAA,CAGnE,IAAME,EAAY,IAAA,CAAK,QAAA,EAAU,WAAU,CAE3C,GADqBP,EAAY,MAAA,CAAQjC,CAAAA,EAAOA,CAAAA,GAAOwC,CAAS,EAC/C,MAAA,CAAS,CAAA,CAAG,MAEzBL,CAAAA,CAAcD,CAAAA,CAAoB,IACrC3M,CAAAA,CAAI,IAAA,CACH,CAAA,sEAAA,EAAyE4M,CAAAA,CAAc,CAAC,CAAA,CAAA,EAAID,CAAiB,MAC9G,CAAA,CACA,MAAM,IAAI,OAAA,CAAS9C,CAAAA,EAAM,UAAA,CAAWA,CAAAA,CAAG,GAAI,CAAC,CAAA,EAE9C,CAEA,GAAI6C,CAAAA,CAAY,SAAW,CAAA,CAAG,CAC7B1M,CAAAA,CAAI,IAAA,CACH,+DACD,CAAA,CACA,MACD,CAEKsM,CAAAA,EACJtM,CAAAA,CAAI,KACH,CAAA,yBAAA,EAA4B0M,CAAAA,CAAY,MAAM,CAAA,6BAAA,CAC/C,EAMD,IAAMQ,CAAAA,CAAiB,IAAI,GAAA,CAAA,CAExB,KAAK,QAAA,CAAiB,IAAA,EAAM,cAAA,IAAiB,EAAK,EAAC,EAAG,GAAA,CACtDF,GACAA,CAAAA,CAAE,UAAA,CAAW,UACf,CACD,CAAA,CACAN,CAAAA,CAAc,CAAC,GAAGA,CAAW,EAAE,IAAA,CAAK,CAACS,EAAGC,CAAAA,GAAM,CAC7C,IAAMC,CAAAA,CAAaH,EAAe,GAAA,CAAIC,CAAC,EAAI,CAAA,CAAI,CAAA,CAE/C,QADmBD,CAAAA,CAAe,GAAA,CAAIE,CAAC,CAAA,CAAI,EAAI,CAAA,EAC3BC,CACrB,CAAC,CAAA,CAED,IAAIC,EAAe,CAAA,CACfC,CAAAA,CAAa,CAAA,CACbC,GAAAA,CAAe,GAGbV,CAAAA,CAAS,IAAA,CAAK,UAAU,SAAA,EAAU,CAClCW,EAAgBf,CAAAA,CAAY,MAAA,CAAQ1C,CAAAA,EAAW,CAGpD,GAFI,CAAC,IAAA,CAAK,UACNA,CAAAA,GAAW8C,CAAAA,EACX,KAAK,uBAAA,CAAwB9C,CAAM,CAAA,CAAG,OAAO,GACjD,IAAM0D,CAAAA,CAAS,KAAK,aAAA,CAAc,GAAA,CAAI1D,CAAM,CAAA,CAC5C,OACC0D,CAAAA,EACA,IAAA,CAAK,KAAI,CAAIA,CAAAA,CAAO,QAAA,CAAWvE,EAAAA,CAAuB,KAEtDmE,CAAAA,EAAAA,CACO,CAAA,CAAA,EAED,CAAA,CACR,CAAC,EAGKK,CAAAA,CAAe,MAAM,QAAQ,UAAA,CAClCF,CAAAA,CAAc,IAAI,MAAOzD,CAAAA,EACnB,IAAA,CAAK,QAAA,EACVhK,EAAI,IAAA,CAAK,CAAA,sCAAA,EAAyCgK,CAAM,CAAA,CAAE,CAAA,CACnD,CACN,MAAA,CAAAA,CAAAA,CACA,QAAA,CAAU,MAAM,KAAK,QAAA,CAAS,aAAA,CAAcA,CAAM,CACnD,CAAA,EAL2B,IAM3B,CACF,CAAA,CAEA,IAAA,IAAWyB,CAAAA,IAAUkC,EACpB,GAAIlC,CAAAA,CAAO,SAAW,WAAA,EAAeA,CAAAA,CAAO,OAAO,QAAA,CAAU,CAC5D,GAAM,CAAE,OAAAzB,CAAAA,CAAQ,QAAA,CAAA6B,CAAS,CAAA,CAAIJ,CAAAA,CAAO,MACpC,IAAA,CAAK,aAAA,CAAc,GAAA,CAAIzB,CAAAA,CAAQ,CAC9B,QAAA,CAAA6B,CAAAA,CACA,SAAU,IAAA,CAAK,GAAA,EAChB,CAAC,CAAA,CACD,IAAA,CAAK,0BAAA,CAA2B7B,CAAM,CAAA,CACtCwD,GAAAA,CAAe,GACfF,CAAAA,EAAAA,CACAtN,CAAAA,CAAI,KACH,CAAA,qCAAA,EAAwCgK,CAAM,CAAA,EAAA,EAAK6B,CAAAA,CAAS,MAAM,MAAM,CAAA,OAAA,CACzE,EACD,CAAA,KAAWJ,CAAAA,CAAO,SAAW,WAAA,EAAeA,CAAAA,CAAO,KAAA,EAClD,IAAA,CAAK,2BAA2BA,CAAAA,CAAO,KAAA,CAAM,MAAM,CAAA,CACnD8B,CAAAA,EAAAA,CACAvN,EAAI,IAAA,CACH,CAAA,+CAAA,EAAkDyL,CAAAA,CAAO,KAAA,CAAM,MAAM,CAAA,CACtE,CAAA,EACUA,EAAO,MAAA,GAAW,UAAA,GAC5B8B,IACAvN,CAAAA,CAAI,IAAA,CACH,8CAAA,CACAyL,CAAAA,CAAO,kBAAkB,KAAA,CACtBA,CAAAA,CAAO,OAAO,OAAA,CACd,MAAA,CAAOA,EAAO,MAAM,CACxB,CAAA,CAAA,CAMD,IAAA,CAAa,gBAAkB,CAC/B,UAAA,CAAYiB,EAAY,MAAA,CACxB,OAAA,CAASY,EACT,QAAA,CAAUC,CAAAA,CACV,aAAA,CAAe,IAAA,CAAK,KACrB,CAAA,CAEIC,KACc,KAAA,CAAM,IAAA,CAAK,KAAK,aAAA,CAAc,MAAA,EAAQ,CAAA,CAAE,OACxD,CAACf,CAAAA,CAAK,CAAE,QAAA,CAAAZ,CAAS,IAAMY,CAAAA,CAAMZ,CAAAA,CAAS,KAAA,CAAM,MAAA,CAC5C,CACD,CAAA,GAEiBW,CAAAA,EAAa,KAAK,cAAA,GAClC,OAAA,CAAQ,OAAO,KAAA,CACd,CAAA;AAAA,CACD,CAAA,CACA,IAAA,CAAK,cAAA,EAAe,EAGvB,QAAE,CACD,IAAA,CAAK,gBAAA,CAAmB,KACzB,CACD,CAAA,GAAG,CAEI,IAAA,CAAK,gBAAA,CACb,CAMO,YAAA,EAAuB,CAC7B,OAAO,IAAA,CAAK,cAAc,IAC3B,CAKA,MAAc,cAAA,EAMZ,CACD,IAAMoB,CAAAA,CAAqB,MAAA,CAAO,QAAA,CACjC,QAAQ,GAAA,CAAI,uBAAA,EAA2B,GAAA,CACvC,EACD,EAMA,GAAI,IAAA,CAAK,aAAA,CAAc,IAAA,CAAOA,CAAAA,EAAsB,IAAA,CAAK,QAAA,CAAU,CAClE,IAAMC,CAAAA,CAAmB,MAAA,CAAO,QAAA,CAC/B,OAAA,CAAQ,IAAI,iCAAA,EAAqC,MAAA,CACjD,EACD,CAAA,CACMC,EACL,MAAA,CAAO,QAAA,CAASD,CAAgB,CAAA,EAAKA,EAAmB,CAAA,CACrDA,CAAAA,CACA,IAAA,CAEEE,CAAAA,CAAW,KAAK,GAAA,EAAI,CAAID,CAAAA,CAC1BE,GAAAA,CAAc,EACdC,CAAAA,CAAgB,EAAA,CAEpB,KAAO,IAAA,CAAK,KAAI,CAAIF,CAAAA,EACf,EAAA,IAAA,CAAK,aAAA,CAAc,IAAA,EAAQH,CAAAA,GAE/B,MAAM,OAAA,CAAQ,KAAK,CAClB,IAAA,CAAK,oBAAA,CAAqB,IAAI,EAC9B,IAAI,OAAA,CAAeM,CAAAA,EAAY,UAAA,CAAWA,EAAS,GAAI,CAAC,CACzD,CAAC,EAAE,KAAA,CAAM,IAAM,CAAC,CAAC,EAEb,IAAA,CAAK,aAAA,CAAc,IAAA,EAAQN,CAAAA,CAAAA,CAAAA,EARF,CAW7B,GAAI,IAAA,CAAK,aAAA,CAAc,IAAA,GAASK,GAE/B,GADAD,GAAAA,EAAAA,CACIA,GAAAA,EAAe,CAAA,EAAK,IAAA,CAAK,aAAA,CAAc,IAAA,CAAO,CAAA,CAAG,CACpDhO,CAAAA,CAAI,IAAA,CACH,CAAA,2CAAA,EAA8C,IAAA,CAAK,cAAc,IAAI,CAAA,CAAA,EAAI4N,CAAkB,CAAA,iCAAA,CAC5F,EACA,KACD,CAAA,CAAA,KAEAI,GAAAA,CAAc,CAAA,CACdC,EAAgB,IAAA,CAAK,aAAA,CAAc,IAAA,CAIpC,MAAM,IAAI,OAAA,CAASpE,CAAAA,EAAM,UAAA,CAAWA,CAAAA,CAAG,GAAI,CAAC,EAC7C,CAGI,IAAA,CAAK,cAAc,IAAA,CAAO+D,CAAAA,GAC7B5N,CAAAA,CAAI,IAAA,CACH,CAAA,qDAAA,EAA8C,IAAA,CAAK,aAAA,CAAc,IAAI,IAAI4N,CAAkB,CAAA,mEAAA,CAC5F,CAAA,CAEA,IAAA,CAAK,qBAAqB,IAAI,CAAA,CAAE,KAAA,CAAM,IAAM,CAAC,CAAC,CAAA,EAEhD,CAGA,IAAMO,EAAe,EAAC,CAChBC,CAAAA,CAAY,IAAI,IAChBC,CAAAA,CAAiB,IAAI,GAAA,CAC1B,IAAA,CAAK,WAAW,SAAA,EAAU,CAAE,GAAA,CAAK1E,CAAAA,EAAMA,EAAE,IAAI,CAC9C,CAAA,CAEA,IAAA,GAAW,CAACK,CAAAA,CAAQ,CAAE,QAAA,CAAA6B,CAAS,CAAC,CAAA,GAAK,IAAA,CAAK,aAAA,CAAc,SAAQ,CAC/D,IAAA,IAAWyC,CAAAA,IAAQzC,CAAAA,CAAS,MAAO,CAElC,GAAIyC,CAAAA,CAAK,IAAA,GAAS,iBAAkB,SAOpC,IAAIC,CAAAA,CAAYD,CAAAA,CAAK,MACjBF,CAAAA,CAAU,GAAA,CAAIE,CAAAA,CAAK,IAAI,GAAKD,CAAAA,CAAe,GAAA,CAAIC,CAAAA,CAAK,IAAI,KAC3DC,CAAAA,CAAY,CAAA,EAAGD,CAAAA,CAAK,IAAI,CAAA,CAAA,EAAItE,CAAAA,CAAO,KAAA,CAAM,EAAE,CAAC,CAAA,CAAA,CAAA,CAE7CoE,CAAAA,CAAU,GAAA,CAAIG,CAAS,EAEvB,IAAMC,CAAAA,CAAe3C,CAAAA,CAAS,UAAA,EAAY,MAAQ,kBAAA,CAG5C4C,CAAAA,CAAWH,CAAAA,CAAK,WAAA,EAAe,oBAAoBE,CAAY,CAAA,CAAA,CAC/DE,CAAAA,CAIF,CACH,KAAMH,CAAAA,CACN,WAAA,CAAa3F,CAAAA,EAA2B,CACrCC,GAAgC4F,CAAQ,CAAA,CACxCA,CAAAA,CACH,WAAA,CAAcH,EAAK,WAAA,EAAe,CACjC,IAAA,CAAM,QAAA,CACN,UAAA,CAAY,EACb,CACD,EAIC,OAAOI,CAAAA,CAAU,WAAA,EAAgB,QAAA,EACjC,CAACA,CAAAA,CAAU,WAAA,CAAY,IAAA,GAEvBA,CAAAA,CAAU,YAAY,IAAA,CAAO,QAAA,CAAA,CAG7B,OAAOA,CAAAA,CAAU,aAAgB,QAAA,EACjC,CAACA,CAAAA,CAAU,WAAA,CAAY,aAEvBA,CAAAA,CAAU,WAAA,CAAY,UAAA,CAAa,IAGpC,IAAIC,CAAAA,CAAY,EAAA,CACZ9C,CAAAA,CAAS,WACZ8C,CAAAA,CAAY;AAAA,cAAA,EAAmB9C,EAAS,QAAA,CAAS,MAAM,KAKxD,IAAM+C,CAAAA,CAAcF,EAAU,WAAA,CAAY,UAAA,EAAc,EAAC,CACrDG,EAAc,EAAA,CACd,CAACjG,GAA2B,EAAKgG,CAAAA,CAAW,UAC/CC,CAAAA,CAAc;AAAA,kCAAA,CAAA,CAAA,CAKd,CAACjG,CAAAA,EAA2B,EAC5B8F,EAAU,WAAA,CAAY,QAAA,CAAS,yBAAyB,CAAA,GAExDA,CAAAA,CAAU,YAAcA,CAAAA,CAAU,WAAA,CAAY,QAC7C,0BAAA,CACA,6DACD,GAGD,IAAMI,CAAAA,CAAclG,GAA2B,CAC5C;AAAA,OAAA,EAAYoB,EAAO,KAAA,CAAM,EAAE,CAAC,CAAA,CAAA,EAAI2E,CAAS,CAAA,CAAA,CACzC;AAAA,SAAA,EAAc3E,CAAAA,CAAO,MAAM,EAAE,CAAC,IAAI2E,CAAS,CAAA,EAAGE,CAAW,CAAA,CAAA,CAC5DH,CAAAA,CAAU,YAAc,CAAA,EAAGA,CAAAA,CAAU,WAAW,CAAA,EAAGI,CAAW,GAE9DX,CAAAA,CAAM,IAAA,CAAKO,CAAS,EACrB,CAGD,OAAOP,CACR,CAKA,MAAc,kBAAA,EAOZ,CAEI,KAAK,gBAAA,EACT,IAAA,CAAK,qBAAqB,IAAI,CAAA,CAAE,MAAM,IAAM,CAAC,CAAC,CAAA,CAG/C,IAAMvE,EAKD,EAAC,CACAmF,CAAAA,CAAW,IAAI,GAAA,CAAI,IAAA,CAAK,WAAW,aAAA,EAAc,CAAE,IAAK,CAAA,EAAM,CAAA,CAAE,GAAG,CAAC,CAAA,CAE1E,OAAW,CAAC/E,CAAAA,CAAQ,CAAE,QAAA,CAAA6B,CAAS,CAAC,CAAA,GAAK,IAAA,CAAK,cAAc,OAAA,EAAQ,CAC/D,IAAA,IAAWmD,CAAAA,IAAYnD,CAAAA,CAAS,SAAA,CAC/B,GAAI,CAACkD,CAAAA,CAAS,IAAIC,CAAAA,CAAS,GAAG,EAAG,CAChC,IAAMC,EAAoB,CAAE,GAAGD,CAAS,CAAA,CAClCR,CAAAA,CAAe3C,EAAS,UAAA,EAAY,IAAA,EAAQ,mBAE9C8C,CAAAA,CAAY,EAAA,CACZ9C,CAAAA,CAAS,QAAA,GACZ8C,CAAAA,CAAY;;AAAA;AAAA,QAAA,EAA4C9C,CAAAA,CAAS,SAAS,MAAM;AAAA,gBAAA,EAAqBA,CAAAA,CAAS,QAAA,CAAS,aAAa,CAAA,CAAA,CAEnIA,CAAAA,CAAS,QAAA,CAAS,cAAA,EAClBA,CAAAA,CAAS,QAAA,CAAS,cAAA,CAAe,MAAA,CAAS,CAAA,GAE1C8C,CAAAA,EAAa;AAAA,iBAAA,EAAsB9C,CAAAA,CAAS,SAAS,cAAA,CAAe,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,CAAA,CAAA,CAIhF,IAAMiD,CAAAA,CAAc;;AAAA;AAAA,UAAA,EAA2CN,CAAY;AAAA,YAAA,EAAiBxE,CAAM,CAAA,EAAG2E,CAAS,CAAA,CAAA,CAG1GM,CAAAA,CAAkB,GAAA,CAAI,UAAA,CAAW,gBAAgB,CAAA,EACpDA,CAAAA,CAAkB,IAAA,CAAO,CAAA,SAAA,EAAYA,EAAkB,IAAI,CAAA,CAAA,CAC3DA,CAAAA,CAAkB,WAAA,CAAc,CAAA,kBAAA,EAAqBA,CAAAA,CAAkB,WAAA,EAAe,wCAAwC,GAAGH,CAAW,CAAA,CAAA,EAE5IG,CAAAA,CAAkB,WAAA,CAAcA,CAAAA,CAAkB,WAAA,CAC/C,CAAA,EAAGA,CAAAA,CAAkB,WAAW,CAAA,EAAGH,CAAW,CAAA,CAAA,CAC9CA,CAAAA,CAAY,IAAA,EAAK,CAGrBlF,CAAAA,CAAU,IAAA,CAAKqF,CAAiB,CAAA,CAChCF,CAAAA,CAAS,GAAA,CAAIC,CAAAA,CAAS,GAAG,EAC1B,CAIF,OAAOpF,CACR,CAMQ,qBAAA,CACPzD,CAAAA,CACsD,CAEtD,IAAA,GAAW,CAAC6D,CAAAA,CAAQ,CAAE,SAAA6B,CAAS,CAAC,CAAA,GAAK,IAAA,CAAK,aAAA,CAAc,OAAA,EAAQ,CAE/D,GADaA,EAAS,KAAA,CAAM,IAAA,CAAMlC,CAAAA,EAAMA,CAAAA,CAAE,IAAA,GAASxD,CAAQ,CAAA,CAE1D,OAAO,CACN,MAAA,CAAA6D,CAAAA,CACA,gBAAA,CAAkB7D,CACnB,CAAA,CAKF,IAAM+I,CAAAA,CAAQ/I,CAAAA,CAAS,MAAM,GAAG,CAAA,CAChC,GAAI+I,CAAAA,CAAM,MAAA,CAAS,CAAA,CAAG,CACrB,IAAMC,EAASD,CAAAA,CAAM,GAAA,EAAI,CACnBE,CAAAA,CAAWF,CAAAA,CAAM,IAAA,CAAK,GAAG,CAAA,CAC/B,OAAW,CAAClF,CAAAA,CAAQ,CAAE,QAAA,CAAA6B,CAAS,CAAC,CAAA,GAAK,IAAA,CAAK,cAAc,OAAA,EAAQ,CAC/D,GAAI7B,CAAAA,CAAO,QAAA,CAASmF,CAAAA,EAAU,EAAE,CAAA,EAClBtD,EAAS,KAAA,CAAM,IAAA,CAAMlC,CAAAA,EAAMA,CAAAA,CAAE,IAAA,GAASyF,CAAQ,CAAA,CAE1D,OAAO,CACN,MAAA,CAAApF,CAAAA,CACA,gBAAA,CAAkBoF,CACnB,CAIJ,CAEA,OAAO,IACR,CAQQ,YAAA,CAAapF,CAAAA,CAAwB,CAE5C,OAAA,CADc,OAAA,CAAQ,GAAA,CAAI,qBAAA,EAAyB,UAAA,IACrC,MAAA,CAAeA,CAAAA,CACtB,CAAA,GAAA,EAAMA,CAAAA,CAAO,KAAA,CAAM,EAAE,CAAC,CAAA,CAC9B,CAEA,MAAc,kBAAA,CACbS,CAAAA,CACAD,CAAAA,CACA6E,CAAAA,CAC8B,CAC9B,IAAMlJ,CAAAA,CAAWqE,EAAO,IAAA,CAGxB,GAAIrE,CAAAA,GAAa,gBAAA,CAAkB,CAIlC,IAAA,CAAK,oBAAA,CAAqB,IAAI,EAAE,KAAA,CAAM,IAAM,CAAC,CAAC,CAAA,CAG9C,IAAMmJ,CAAAA,CAAS,IAAA,CAAa,iBAAmB,CAC9C,UAAA,CAAY,CAAA,CACZ,OAAA,CAAS,CAAA,CACT,QAAA,CAAU,CACX,CAAA,CACMC,EAAgB,IAAA,CAAK,aAAA,CAAc,IAAA,CACnCC,CAAAA,CAAY,IAAA,CAAK,QAAA,CAAW,QAAA,CAAW,SAAA,CACvCC,EAAc,KAAA,CAAM,IAAA,CAAK,IAAA,CAAK,aAAA,CAAc,MAAA,EAAQ,CAAA,CAAE,MAAA,CAC3D,CAAChD,CAAAA,CAAK,CAAE,QAAA,CAAAZ,CAAS,CAAA,GAAMY,CAAAA,CAAMZ,CAAAA,CAAS,KAAA,CAAM,OAC5C,CACD,CAAA,CACM6D,CAAAA,CAAc,IAAA,CAAK,QAAA,CAEtB,IAAA,CAAK,QAAA,CAAiB,IAAA,EAAM,gBAAe,CAAE,MAAA,CAC7C,CAAA,CAEGC,CAAAA,CACL,IAAA,CAAK,QAAA,EAEJ,IAAA,CAAK,QAAA,CAAiB,QAAQ,cAAA,CAE5B,IAAA,CAAK,QAAA,CAAiB,MAAA,CAAO,cAAA,CAC7B,EAAC,CACCC,CAAAA,CAAiBD,EAAe,MAAA,CAGhCE,CAAAA,CAAAA,CADY,OAAA,CAAQ,GAAA,CAAI,qBAAA,EAAyB,UAAA,IAClB,SAAA,CAE/BC,CAAAA,CAAgBD,EACnBF,CAAAA,CACC,GAAA,CAAKI,CAAAA,EAAS,CACd,IAAMb,CAAAA,CAAQa,CAAAA,CAAK,KAAA,CAAM,GAAG,CAAA,CACtBtF,CAAAA,CAAKyE,CAAAA,CAAMA,CAAAA,CAAM,MAAA,CAAS,CAAC,CAAA,CACjC,OAAO,YAAOzE,CAAAA,CAAKA,CAAAA,CAAG,KAAA,CAAM,EAAE,CAAA,CAAI,SAAS,CAAA,YAAA,CAC5C,CAAC,EACA,IAAA,CAAK;AAAA,CAAI,CAAA,CACV,EAAA,CAEGuF,CAAAA,CAAmB,IAAA,CAAK,QAAA,CAE3B,IAAA,CAAK,QAAA,CAAiB,mBAAA,EAAoB,CAC1C,CAAA,CAEGC,CAAAA,CAAY,IAAA,CAAK,QAAA,EAAU,WAAU,EAAK,SAAA,CAC1CC,CAAAA,CACLD,CAAAA,GAAc,SAAA,CAAYA,CAAAA,CAAY,IAAA,CAAK,YAAA,CAAaA,CAAS,CAAA,CAE5DE,CAAAA,CAAiB,KAAA,CAAM,IAAA,CAAK,IAAA,CAAK,cAAc,OAAA,EAAS,CAAA,CAC5D,OAAA,CAAQ,CAAC,CAACnG,CAAAA,CAAQ,CAAE,QAAA,CAAA6B,CAAS,CAAC,CAAA,GAC9BA,CAAAA,CAAS,KAAA,CAAM,IACblC,CAAAA,EAAM,CAAA,SAAA,EAAOA,CAAAA,CAAE,IAAI,CAAA,eAAA,EAAkB,IAAA,CAAK,YAAA,CAAaK,CAAM,CAAC,CAAA,CAAA,CAChE,CACD,CAAA,CACC,IAAA,CAAK;AAAA,CAAI,CAAA,CAELoG,EAAa,CAClB,CAAA,kBAAA,EAAqBZ,IAAc,QAAA,CAAW,QAAA,CAAW,SAAS,CAAA,CAAA,CAClE,CAAA,sBAAA,EAAyBU,CAAW,CAAA,CAAA,CACpC,CAAA,SAAA,EAAYR,CAAW,CAAA,SAAA,EAAYM,CAAgB,iBAAiBJ,CAAc,CAAA,WAAA,CAAA,CAClFC,CAAAA,EAAkBD,CAAAA,CAAiB,CAAA,CAChC;AAAA;AAAA,EAAyBE,CAAa;AAAA,CAAA,CACtC,GACH,CAAA,WAAA,EAAcR,CAAAA,CAAM,UAAU,CAAA,cAAA,EAAiBA,EAAM,OAAO,CAAA,MAAA,EAASA,CAAAA,CAAM,QAAQ,QACnF,CAAA,SAAA,EAAYC,CAAa,gBAAgBE,CAAW,CAAA,mBAAA,CAAA,CACpDA,EAAc,CAAA,CACX;AAAA;AAAA,EAAoDU,CAAc,CAAA,CAAA,CAClE;AAAA,+BAAA,CAAA,CAEH5J,CAAAA,CAAqB,WAAA,EAAY,CAAE,iBAAA,EACpC,CAAA,CACE,MAAA,CAAQ8J,CAAAA,EAASA,CAAAA,GAAS,EAAE,CAAA,CAC5B,IAAA,CAAK;AAAA,CAAI,EAGLC,CAAAA,CAAgB/J,CAAAA,CAAqB,aAAY,CACvD,OAAA+J,EAAc,MAAA,CAAO,CACpB,IAAA,CAAM,YAAA,CACN,OAAQ,YAAA,CACR,QAAA,CAAU,iBACV,oBAAA,CAAsB,CAAA,CACtB,sBAAuBA,CAAAA,CAAc,WAAA,CAAYF,CAAU,CAC5D,CAAC,CAAA,CAEM,CACN,QAAS,KAAA,CACT,EAAA,CAAA3F,EACA,MAAA,CAAQ,CACP,OAAA,CAAS,CACR,CACC,IAAA,CAAM,MAAA,CACN,KAAM2F,CACP,CACD,CACD,CACD,CACD,CAEA,IAAMG,EAAU,IAAA,CAAK,UAAA,CACnB,WAAU,CACV,IAAA,CAAM5G,GAAMA,CAAAA,CAAE,IAAA,GAASxD,CAAQ,CAAA,CAEjC,GAAI,CAACoK,CAAAA,EAAW,KAAK,QAAA,CAAU,CAG9B,IAAIC,CAAAA,CAAS,IAAA,CAAK,qBAAA,CAAsBrK,CAAQ,EAQhD,GALKqK,CAAAA,GACJ,MAAM,IAAA,CAAK,oBAAA,GACXA,CAAAA,CAAS,IAAA,CAAK,qBAAA,CAAsBrK,CAAQ,GAGzCqK,CAAAA,CAAQ,CACXxQ,EAAI,IAAA,CACH,CAAA,uBAAA,EAA0BmG,CAAQ,CAAA,2BAAA,EAA8BqK,CAAAA,CAAO,MAAM,CAAA,YAAA,EAAeA,EAAO,gBAAgB,CAAA,CAAA,CACpH,EAIA,IAAMC,GAAAA,CAAgB,KAAK,aAAA,CAAc,GAAA,CAAID,CAAAA,CAAO,MAAM,EACtDE,CAAAA,CAAiBrB,CAAAA,CACrB,GAAIoB,GAAAA,EAAe,QAAA,CAAS,aAAc,CACzC,IAAME,CAAAA,CACLtB,CAAAA,EAAU,MAAM,IAAA,CAAK,0BAAA,CAA2BmB,EAAO,MAAM,CAAA,CAC9D,GAAI,CAACG,CAAAA,CAAe,CACnB,IAAMnC,EACLiC,GAAAA,CAAc,QAAA,CAAS,YAAY,IAAA,EAAM,WAAA,IACzC,SAAA,CACKG,CAAAA,CAAOH,GAAAA,CAAc,QAAA,CAAS,UAC9BI,CAAAA,CAAUL,CAAAA,CAAO,OAAO,KAAA,CAAM,EAAE,EAAE,WAAA,EAAY,CAC9CM,CAAAA,CAAaF,CAAAA,CAChB,cAAcA,CAAI,CAAA,CAAA,CAClB,cAAcpC,CAAAA,CAAa,WAAA,GAAc,OAAA,CAAQ,aAAA,CAAe,GAAG,CAAC,GACvE,OAAO,CACN,QAAS,KAAA,CACT,EAAA,CAAA/D,EACA,MAAA,CAAQ,CACP,QAAS,CACR,CACC,KAAM,MAAA,CACN,IAAA,CAAM,iDAAiD+D,CAAY,CAAA,8CAAA,EAAiDsC,CAAU,CAAA,eAAA,EAAkBD,CAAO,CAAA,gDAAA,CACxJ,CACD,EACA,OAAA,CAAS,IACV,CACD,CACD,CAEAH,EAAiBC,EAClB,CAEA,OAAO,IAAA,CAAK,sBACXlG,CAAAA,CACA+F,CAAAA,CAAO,iBACPA,CAAAA,CAAO,MAAA,CACPhG,EACAkG,CACD,CACD,CAGA,IAAIK,EAAsB,EAAC,CAC3B,QAAS7H,CAAAA,CAAI,CAAA,CAAGA,EAAI,CAAA,GACnB6H,CAAAA,CAAY,MAAM,IAAA,CAAK,SAAS,aAAA,CAAc5K,CAAQ,EAClD,EAAA4K,CAAAA,CAAU,OAAS,CAAA,CAAA,CAAA,CAFD7H,CAAAA,EAAAA,CAGlBA,CAAAA,CAAI,CAAA,EAAG,MAAM,IAAI,OAAA,CAASW,GAAM,UAAA,CAAWA,CAAAA,CAAG,GAAI,CAAC,CAAA,CAGxD,GAAIkH,CAAAA,CAAU,OAAS,CAAA,CACtB,OAAO,KAAK,qBAAA,CACXtG,CAAAA,CACAtE,EACA4K,CAAAA,CAAU,CAAC,CAAA,CACXvG,CAAAA,CACA6E,CACD,CAEF,CAGA,GAAIkB,CAAAA,CACH,GAAI,CACH,IAAMS,CAAAA,CAAiB,KAAK,GAAA,EAAI,CAC1BvF,EAAS,MAAM,IAAA,CAAK,WAAW,QAAA,CAAS,CAC7C,KAAMtF,CAAAA,CACN,SAAA,CAAWqE,CAAAA,CAAO,SAAA,EAAa,EAChC,CAAC,EAGKyG,CAAAA,CAAiB1K,CAAAA,CAAqB,aAAY,CAClD2K,CAAAA,CAAoB,IAAA,CAAK,SAAA,CAAU1G,EAAO,SAAA,EAAa,EAAE,CAAA,CACzD2G,CAAAA,CAAqB,KAAK,SAAA,CAAU1F,CAAM,CAAA,CAChD,OAAAwF,EAAe,MAAA,CAAO,CACrB,KAAM,WAAA,CACN,MAAA,CAAQ,aACR,QAAA,CAAA9K,CAAAA,CACA,oBAAA,CAAsB8K,CAAAA,CAAe,YAAYC,CAAiB,CAAA,CAClE,sBAAuBD,CAAAA,CAAe,WAAA,CAAYE,CAAkB,CAAA,CACpE,UAAA,CAAY,IAAA,CAAK,GAAA,GAAQH,CAC1B,CAAC,EAEM,CAAE,OAAA,CAAS,MAAO,EAAA,CAAAvG,CAAAA,CAAI,MAAA,CAAAgB,CAAO,CACrC,CAAA,MAAS9J,CAAAA,CAAc,CACtB,OAAO,CACN,QAAS,KAAA,CACT,EAAA,CAAA8I,CAAAA,CACA,KAAA,CAAO,CACN,IAAA,CAAM,KAAA,CACN,QAAS9I,CAAAA,YAAe,KAAA,CAAQA,EAAI,OAAA,CAAU,MAAA,CAAOA,CAAG,CACzD,CACD,CACD,CAGD,OAAO,CACN,OAAA,CAAS,KAAA,CACT,GAAA8I,CAAAA,CACA,KAAA,CAAO,CACN,IAAA,CAAM,OACN,OAAA,CAAS,CAAA,4BAAA,EAA+BtE,CAAQ,CAAA,+DAAA,CACjD,CACD,CACD,CAEA,MAAc,qBAAA,CAEbsE,CAAAA,CACAtE,EACA6D,CAAAA,CAEAQ,CAAAA,CACA6E,EAEe,CACf,GAAI,CAAC,IAAA,CAAK,QAAA,CACT,OAAO,CACN,QAAS,KAAA,CACT,EAAA,CAAA5E,EACA,KAAA,CAAO,CAAE,KAAM,MAAA,CAAQ,OAAA,CAAS,oBAAqB,CACtD,EAGD,IAAIgG,CAAAA,CAAgB,KAAK,aAAA,CAAc,GAAA,CAAIzG,CAAM,CAAA,CAC7CoH,CAAAA,CAAW,IAAA,CAAK,cAAA,CAEpB,GAAIX,CAAAA,CACHW,CAAAA,CAAWX,EAAc,QAAA,CAAS,QAAA,CAAA,KAC5B,CAEN,IAAM5E,CAAAA,CAAW,MAAM,IAAA,CAAK,SAAS,aAAA,CAAc7B,CAAM,EACrD6B,CAAAA,GACHuF,CAAAA,CAAWvF,EAAS,QAAA,CACpB,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI7B,EAAQ,CAC9B,QAAA,CAAA6B,EACA,QAAA,CAAU,IAAA,CAAK,KAChB,CAAC,CAAA,CACD4E,CAAAA,CAAgB,KAAK,aAAA,CAAc,GAAA,CAAIzG,CAAM,CAAA,EAE/C,CAaA,IALC,OAAA,CAAQ,GAAA,CAAI,6BAAA,GAAkC,GAAA,EAC9C,QAAQ,GAAA,CAAI,eAAA,GAAoB,QAChC,OAAA,CAAQ,GAAA,CAAI,gBAAkB,MAAA,EAC9B,OAAA,CAAQ,GAAA,CAAI,QAAA,GAAa,eACzB,OAAA,CAAQ,GAAA,CAAI,WAAa,MAAA,GACEyG,CAAAA,CAAe,CAC1C,IAAMjC,CAAAA,CACLiC,CAAAA,CAAc,QAAA,CAAS,YAAY,IAAA,EAAM,WAAA,IAAiB,EAAA,CACvDjC,CAAAA,CAAa,SAAS,OAAO,CAAA,CAAG4C,CAAAA,CAAW,KAAA,CACtC5C,EAAa,QAAA,CAAS,MAAM,EAAG4C,CAAAA,CAAW,KAAA,CAC1C5C,EAAa,QAAA,CAAS,QAAQ,CAAA,GAAG4C,CAAAA,CAAW,OACtD,CAGA,IAAMC,EAAQ,MAAM,IAAA,CAAK,SAAS,WAAA,CAAYrH,CAAM,CAAA,CAChDsH,CAAAA,CAA4B,KAI1BC,CAAAA,CAAK,aAAa,IAAS,CAAA,CAC3BC,EAAkB,MAAA,CAAO,MAAA,CAAOD,CAAAA,CAAG,iBAAA,EAAmB,CAAA,CAC1D,IAAA,GACA,MAAA,CAAQrI,CAAAA,EAAMA,GAAG,MAAA,GAAW,MAAM,EAClC,GAAA,CAAKA,CAAAA,EAAMA,GAAG,OAAO,CAAA,CAGvB,QAAW6G,CAAAA,IAAQsB,CAAAA,CAAO,CACzB,IAAMnC,CAAAA,CAAQa,CAAAA,CAAK,KAAA,CAAM,GAAG,CAAA,CACtB0B,CAAAA,CAAQvC,EAAM,OAAA,CAAQ,KAAK,EACjC,GAAIuC,CAAAA,GAAU,EAAA,CAAI,CACjB,IAAMC,CAAAA,CAAexC,CAAAA,CAAMuC,EAAQ,CAAC,CAAA,CAGpC,GACCC,CAAAA,GAAiB,WAAA,EACjBF,CAAAA,CAAgB,QAAA,CAASE,CAAY,CAAA,CACpC,CACDJ,EAAa,CAAA,UAAA,EAAaF,CAAQ,GAClC,KACD,CAGKE,CAAAA,GACJA,CAAAA,CAAa,GAAGI,CAAY,CAAA,CAAA,EAAIN,CAAQ,CAAA,CAAA,EAE1C,CACD,CAEKE,CAAAA,GAEJA,CAAAA,CAAa,CAAA,UAAA,EAAaF,CAAQ,IAGnCpR,CAAAA,CAAI,IAAA,CACH,gCAAgCmG,CAAQ,CAAA,IAAA,EAAOmL,CAAU,CAAA,UAAA,EAAatH,CAAM,CAAA,CAAA,CAC7E,CAAA,CAEA,IAAM2H,CAAAA,CAAe,IAAIC,IAAO,SAAA,CAC/BN,CAAAA,CACAO,GACD,CAAA,CACA,OAAO,IAAA,CAAK,mBACXpH,CAAAA,CACAkH,CAAAA,CACAxL,EACAqE,CAAAA,CACAR,CAAAA,CACAqF,CACD,CACD,CAGQ,eAOR,MAAc,0BAAA,CACbrF,EAC8B,CAC9B,GAAIA,EAAQ,CACX,IAAMyG,EAAgB,IAAA,CAAK,aAAA,CAAc,GAAA,CAAIzG,CAAM,EAC7CwE,GAAAA,CACLiC,CAAAA,EAAe,SAAS,UAAA,EAAY,IAAA,EAAM,aAAY,EAAK,EAAA,CAExDqB,CAAAA,CAGElB,CAAAA,CAAOH,GAAe,QAAA,CAAS,SAAA,CACrC,GAAIG,CAAAA,CAAM,CACT,IAAMmB,CAAAA,CAAS,CAAA,WAAA,EAAcnB,CAAI,CAAA,CAAA,CACjCkB,EACC,OAAA,CAAQ,GAAA,CAAIC,CAAM,CAAA,EAAK,OAAA,CAAQ,IAAI,CAAA,iBAAA,EAAoBnB,CAAI,CAAA,CAAE,CAAA,CAC9D5Q,EAAI,IAAA,CACH,CAAA,8BAAA,EAAiC4Q,CAAI,CAAA,QAAA,EAAWmB,CAAM,UAAU,CAAC,CAACD,CAAS,CAAA,MAAA,EAAS9H,EAAO,KAAA,CAAM,EAAE,CAAC,CAAA,CACrG,EACD,MACChK,CAAAA,CAAI,IAAA,CACH,CAAA,uEAAA,EAA0EgK,CAAAA,CAAO,MAAM,EAAE,CAAC,aAAawE,GAAY,CAAA,CACpH,EAID,GAAI,CAACsD,CAAAA,CAAW,CACf,IAAMjB,CAAAA,CAAU7G,CAAAA,CAAO,MAAM,EAAE,CAAA,CAAE,aAAY,CAC7C8H,CAAAA,CACC,QAAQ,GAAA,CAAI,CAAA,WAAA,EAAcjB,CAAO,CAAA,CAAE,CAAA,EACnC,QAAQ,GAAA,CAAI,CAAA,iBAAA,EAAoBA,CAAO,CAAA,CAAE,EAC3C,CAGA,GAAI,CAACiB,CAAAA,EAAatD,GAAAA,CAAc,CAC/B,IAAMwD,CAAAA,CAAYxD,IAChB,WAAA,EAAY,CACZ,OAAA,CAAQ,aAAA,CAAe,GAAG,CAAA,CAC5BsD,CAAAA,CACC,QAAQ,GAAA,CAAI,CAAA,WAAA,EAAcE,CAAS,CAAA,CAAE,CAAA,EACrC,OAAA,CAAQ,GAAA,CAAI,oBAAoBA,CAAS,CAAA,CAAE,EAC7C,CAEA,GAAIF,EACH,OAAA9R,CAAAA,CAAI,IAAA,CACH,CAAA,oDAAA,EAAuDgK,EAAO,KAAA,CAAM,EAAE,CAAC,CAAA,EAAA,EAAKwE,GAAAA,EAAgB,SAAS,CAAA,CAAA,CACtG,CAAA,CACOsD,CAET,CAEA,GAAI,IAAA,CAAK,cAAA,CAAgB,OAAO,IAAA,CAAK,cAAA,CAGrC,IAAMG,CAAAA,CAAc,OAAA,CAAQ,GAAA,CAAI,gBAAA,EAAoB,QAAQ,GAAA,CAAI,UAAA,CAChE,GAAIA,CAAAA,CACH,OAAA,IAAA,CAAK,eAAiBA,CAAAA,CACf,IAAA,CAAK,cAAA,CAGb,IAAMC,EAAW,OAAA,CAAQ,GAAA,CAAI,eAC7B,GAAI,CAACA,EAAU,OAEf,IAAMC,CAAAA,CACL,OAAA,CAAQ,IAAI,oBAAA,EACZ,OAAA,CAAQ,IAAI,cAAA,EACZ,iBAAA,CACKC,EACL,OAAA,CAAQ,GAAA,CAAI,wBAAA,EACZ,OAAA,CAAQ,IAAI,kBAAA,EACZ,sBAAA,CACKC,EACL,OAAA,CAAQ,GAAA,CAAI,qBACZ,OAAA,CAAQ,GAAA,CAAI,aAAA,EACZ,mBAAA,CAED,GAAI,CAIH,IAAMC,IAAW,CAAA,EAHDJ,CAAAA,CAAS,SAAS,OAAO,CAAA,CACtCA,CAAAA,CACA,CAAA,EAAGA,CAAQ,CAAA,KAAA,CACa,CAAA,MAAA,CAAA,CAC3BlS,EAAI,IAAA,CACH,CAAA,0DAAA,EAA6DsS,GAAQ,CAAA,CACtE,CAAA,CAEA,IAAM9H,CAAAA,CAAS,IAAI,eAAA,CAAgB,CAClC,WAAY,oBAAA,CACZ,KAAA,CACC,uFACD,QAAA,CAAU6H,CAAAA,CACV,SAAA,CAAWF,CAAAA,CACX,cAAeC,CAChB,CAAC,EAEKG,CAAAA,CAAW,MAAM,MAAMD,GAAAA,CAAU,CACtC,MAAA,CAAQ,MAAA,CACR,QAAS,CACR,cAAA,CAAgB,mCACjB,CAAA,CACA,IAAA,CAAM9H,EAAO,QAAA,EACd,CAAC,CAAA,CAED,GAAI,CAAC+H,CAAAA,CAAS,GAAI,CACjB,IAAM5S,EAAO,MAAM4S,CAAAA,CAAS,MAAK,CACjCvS,CAAAA,CAAI,KACH,CAAA,4CAAA,EAA+CuS,CAAAA,CAAS,MAAM,CAAA,CAAA,EAAI5S,CAAI,EACvE,CAAA,CACA,MACD,CAEA,IAAMgI,EAAQ,MAAM4K,CAAAA,CAAS,MAAK,CAClC,GAAI5K,EAAK,YAAA,CACR,OAAA,IAAA,CAAK,cAAA,CAAiBA,CAAAA,CAAK,aAC3B3H,CAAAA,CAAI,IAAA,CACH,mEACD,CAAA,CACO,IAAA,CAAK,cAEd,CAAA,MAAS2B,CAAAA,CAAc,CACtB3B,CAAAA,CAAI,KACH,CAAA,2CAAA,EACC2B,CAAAA,YAAe,MAAQA,CAAAA,CAAI,OAAA,CAAU,OAAOA,CAAG,CAChD,CAAA,CACD,EACD,CAED,CAEA,MAAc,mBAEb8I,CAAAA,CAEA+H,CAAAA,CACArM,EAEAqE,CAAAA,CACAR,CAAAA,CACAqF,CAAAA,CAEe,CACf,IAAMoD,CAAAA,CAAiBtM,CAAAA,CACjBuM,EAAgB,IAAA,CAAK,QAAA,CACxB,MAAM,IAAA,CAAK,QAAA,CAAS,IAAA,CAAK,MAAA,CAAO,KAAKD,CAAc,CAAC,EACpD,MAAA,CAAO,IAAA,CAAK,EAAE,CAAA,CAEXE,CAAAA,CAAuB,IAAA,CAAK,KAAI,CAGlCC,CAAAA,CAAcvD,EAKlB,GAJKuD,CAAAA,GACJA,EAAc,MAAM,IAAA,CAAK,2BAA2B5I,CAAM,CAAA,CAAA,CAGvDA,EAAQ,CACX,IAAMyG,EAAgB,IAAA,CAAK,aAAA,CAAc,IAAIzG,CAAM,CAAA,CACnD,GAAIyG,CAAAA,EAAe,SAAS,YAAA,EAAgB,CAACmC,EAAa,CACzD,IAAMpE,EACLiC,CAAAA,CAAc,QAAA,CAAS,UAAA,EAAY,IAAA,EAAM,aAAY,EAAK,SAAA,CACrDG,EAAOH,CAAAA,CAAc,QAAA,CAAS,UAC9BI,CAAAA,CAAU7G,CAAAA,CAAO,KAAA,CAAM,EAAE,EAAE,WAAA,EAAY,CACvC8G,EAAaF,CAAAA,CAChB,CAAA,WAAA,EAAcA,CAAI,CAAA,CAAA,CAClB,CAAA,WAAA,EAAcpC,CAAAA,CAAa,WAAA,GAAc,OAAA,CAAQ,aAAA,CAAe,GAAG,CAAC,CAAA,CAAA,CAEvE,OAAO,CACN,OAAA,CAAS,KAAA,CACT,EAAA,CAAA/D,EACA,MAAA,CAAQ,CACP,QAAS,CACR,CACC,KAAM,MAAA,CACN,IAAA,CAAM,CAAA,8CAAA,EAAiD+D,CAAY,iDAAiDsC,CAAU,CAAA,eAAA,EAAkBD,CAAO,CAAA,gDAAA,CACxJ,CACD,EACA,OAAA,CAAS,IACV,CACD,CACD,CACD,CAEA,OAAO,IAAI,OAAA,CAAS3C,CAAAA,EAAY,CAC/B,IAAM2E,CAAAA,CAAW,IAAS,EAAA,CAAA,QAAA,CACtBD,CAAAA,EACHC,EAAS,GAAA,CAAI,eAAA,CAAiB,UAAUD,CAAW,CAAA,CAAE,EAGtDJ,CAAAA,CAAO,eAAA,CACN,CACC,SAAA,CAAW,YAAY,IAAA,CAAK,QAAA,EAAU,WAAU,EAAK,WAAW,GAChE,eAAA,CAAiBC,CAAAA,CACjB,eAAA,CAAiBC,CAClB,EACAG,CAAAA,CACA,MAAOlR,EAAmB4Q,CAAAA,GAA6B,CACtD,GAAI5Q,CAAAA,EAAO,CAAC4Q,CAAAA,CAAS,QAAA,CACpB,OAAOrE,CAAAA,CAAQ,CACd,QAAS,KAAA,CACT,EAAA,CAAAzD,EACA,MAAA,CAAQ,CACP,OAAA,CAAS,CACR,CACC,IAAA,CAAM,MAAA,CACN,KAAM,CAAA,sBAAA,EAAyB9I,CAAAA,EAAK,SAAW,UAAU,CAAA,CAC1D,CACD,CAAA,CACA,QAAS,IACV,CACD,CAAC,CAAA,CAGF,GAAM,CAAE,UAAA,CAAAmR,CAAAA,CAAY,YAAA,CAAAC,CAAa,EAChC,MAAMC,GAAAA,CAAgB,sBACrBT,CAAAA,CAAS,gBACV,EAGKU,CAAAA,CAAmB,IAAA,CAAK,SAAA,CAAUzI,CAAAA,CAAO,WAAa,EAAE,EACxD0I,CAAAA,CAAa,CAAA,+BAAA,EAAkC/M,CAAQ,CAAA,wBAAA,EAA2B8M,CAAgB,CAAA,GAAA,CAAA,CAClGE,CAAAA,CAAe,cAAY,EAAE,CAAA,CAE7BC,EAAc,IAAA,CAAK,gBAAA,CACxB,OAAO,IAAA,CAAKF,CAAU,CAAA,CACtBH,CAAAA,CACAI,CACD,CAAA,CAEME,CAAAA,CAAe,IAAS,EAAA,CAAA,QAAA,CAC1BT,CAAAA,EACHS,EAAa,GAAA,CAAI,eAAA,CAAiB,CAAA,OAAA,EAAUT,CAAW,EAAE,CAAA,CAG1D,IAAMU,EAAOd,CAAAA,CAAO,YAAA,CACnB,CACC,aAAA,CAAeD,CAAAA,CAAS,aAAA,CACxB,WAAA,CAAa,IAAI,UAAA,CAAWa,CAAW,EACvC,MAAA,CAAQ,GACR,cAAA,CAAgBN,CAAAA,CAChB,SAAA,CAAWK,CACZ,EACAE,CACD,CAAA,CAEIE,EAAa,EAAA,CACbC,CAAAA,CAAqC,KACzCF,CAAAA,CAAK,EAAA,CAAG,MAAA,CAASG,CAAAA,EAA2B,CAC3CF,CAAAA,EAAcE,CAAAA,CAAQ,kBACtBD,CAAAA,CAAeC,EAChB,CAAC,CAAA,CACDH,CAAAA,CAAK,EAAA,CAAG,KAAA,CAAO,SAAY,CAC1B,GAAI,CACH,GAAIE,CAAAA,EAIC,CAACA,CAAAA,CAAa,QAAA,CAAU,CAC3B,IAAME,GAAW,MAAA,CAAO,IAAA,CACvBF,EAAa,mBACd,CAAA,CAAE,SAAS,KAAK,CAAA,CAQhB,GAAI,CAPY,MAAM,KAAK,QAAA,CAAS,eAAA,CACnC,OAAO,IAAA,CAAKN,CAAU,EACtBQ,EAAAA,CACA,MAAA,CAAO,IAAA,CAAKF,CAAAA,CAAa,UAAU,CAAA,CACnC,MAAA,CAAO,KAAKT,CAAY,CACzB,EAGC,OAAO7E,CAAAA,CAAQ,CACd,OAAA,CAAS,MACT,EAAA,CAAAzD,CAAAA,CACA,OAAQ,CACP,OAAA,CAAS,CACR,CACC,IAAA,CAAM,MAAA,CACN,IAAA,CAAM,uEACP,CACD,CAAA,CACA,QAAS,CAAA,CACV,CACD,CAAC,CAEH,CAGD,IAAMkJ,CAAAA,CAAe,KAAK,KAAA,CAAMJ,CAAU,EAGpCK,CAAAA,CAAkBrN,CAAAA,CAAqB,aAAY,CACzDqN,CAAAA,CAAgB,MAAA,CAAO,CACtB,KAAM,WAAA,CACN,MAAA,CAAQ,aACR,QAAA,CAAAzN,CAAAA,CACA,OAAA6D,CAAAA,CACA,oBAAA,CACC4J,CAAAA,CAAgB,WAAA,CAAYX,CAAgB,CAAA,CAC7C,qBAAA,CAAuBW,EAAgB,WAAA,CAAYL,CAAU,EAC7D,UAAA,CAAY,IAAA,CAAK,GAAA,EAAI,CAAIZ,CAC1B,CAAC,CAAA,CAEDzE,EAAQ,CAAE,OAAA,CAAS,MAAO,EAAA,CAAAzD,CAAAA,CAAI,OAAQkJ,CAAa,CAAC,EACrD,CAAA,KAAa,CACZzF,EAAQ,CACP,OAAA,CAAS,MACT,EAAA,CAAAzD,CAAAA,CACA,MAAA,CAAQ,CAAE,QAAS,CAAC,CAAE,KAAM,MAAA,CAAQ,IAAA,CAAM8I,CAAW,CAAC,CAAE,CACzD,CAAC,EACF,CACD,CAAC,EACDD,CAAAA,CAAK,EAAA,CAAG,QAAUO,CAAAA,EACjB3F,CAAAA,CAAQ,CACP,OAAA,CAAS,MACT,EAAA,CAAAzD,CAAAA,CACA,OAAQ,CACP,OAAA,CAAS,CACR,CAAE,IAAA,CAAM,MAAA,CAAQ,IAAA,CAAM,oBAAoBoJ,CAAAA,CAAE,OAAO,EAAG,CACvD,CAAA,CACA,QAAS,IACV,CACD,CAAC,CACF,EACD,CACD,EACD,CAAC,CACF,CAEQ,iBACPC,CAAAA,CACA7M,CAAAA,CACAkM,CAAAA,CACS,CACT,IAAMY,CAAAA,CAAgB,CAAA,CAAA,cAAA,CAAe,cAAe9M,CAAAA,CAAKkM,CAAK,EACxDa,CAAAA,CAAY,MAAA,CAAO,MAAA,CAAO,CAACD,EAAO,MAAA,CAAOD,CAAO,EAAGC,CAAAA,CAAO,KAAA,EAAO,CAAC,CAAA,CACxE,OAAO,MAAA,CAAO,MAAA,CAAO,CAACC,CAAAA,CAAWD,CAAAA,CAAO,YAAY,CAAC,CACtD,CACD","file":"chunk-VGXNGTIC.js","sourcesContent":["import { log } from \"../utils/logger.js\";\n\n/**\n * TokenEstimator — Pluggable strategy for counting tokens in text content.\n *\n * Implementations range from exact BPE tokenization to lightweight heuristics,\n * allowing the SDK to choose the best trade-off for the runtime environment.\n */\nexport interface TokenEstimator {\n\t/** Count the number of tokens in the given text */\n\tcountTokens(text: string): number;\n\t/** Human-readable name of the estimation strategy */\n\treadonly name: string;\n}\n\n/**\n * Exact BPE tokenizer using o200k_base encoding.\n *\n * o200k_base is the standard encoding for all modern OpenAI models\n * (GPT-4o, GPT-4.1, o1, o3, o4) and provides a reasonable baseline\n * for Anthropic/Google models as well (~±5% variance).\n *\n * - Synchronous: safe for hot-path usage without async overhead\n * - Merge cache reduced to 10K entries for long-running server processes\n * - Zero runtime dependencies beyond gpt-tokenizer itself\n */\nexport class RealTokenEstimator implements TokenEstimator {\n\treadonly name = \"o200k_base\";\n\n\tprivate countFn: (text: string) => number;\n\n\tconstructor(\n\t\tcountFn: (text: string) => number,\n\t\tsetMergeCacheSizeFn?: (size: number) => void,\n\t) {\n\t\tthis.countFn = countFn;\n\t\t// Reduce merge cache from default 100K to 10K for server processes\n\t\tif (setMergeCacheSizeFn) {\n\t\t\tsetMergeCacheSizeFn(10_000);\n\t\t}\n\t}\n\n\tcountTokens(text: string): number {\n\t\tif (text.length === 0) return 0;\n\t\treturn this.countFn(text);\n\t}\n}\n\n/**\n * Fallback heuristic estimator: ~4 characters per token.\n *\n * Industry-standard approximation (±10% for English/code content).\n * Used only when gpt-tokenizer fails to load in constrained environments.\n */\nexport class HeuristicTokenEstimator implements TokenEstimator {\n\treadonly name = \"heuristic (chars/4)\";\n\n\tcountTokens(text: string): number {\n\t\tif (text.length === 0) return 0;\n\t\treturn Math.ceil(text.length / 4);\n\t}\n}\n\n/**\n * Factory: creates a RealTokenEstimator with gpt-tokenizer,\n * falling back to HeuristicTokenEstimator if the import fails.\n *\n * Uses dynamic import to avoid blocking SDK initialization and to\n * gracefully degrade in environments where gpt-tokenizer is unavailable.\n */\nexport async function createTokenEstimator(): Promise<TokenEstimator> {\n\ttry {\n\t\tconst mod = await import(\"gpt-tokenizer\");\n\t\tconst estimator = new RealTokenEstimator(\n\t\t\tmod.countTokens,\n\t\t\tmod.setMergeCacheSize,\n\t\t);\n\t\tlog.debug(\"[LIOP-Economy] Token estimator initialized: o200k_base\");\n\t\treturn estimator;\n\t} catch {\n\t\tlog.info(\n\t\t\t\"[LIOP-Economy] gpt-tokenizer unavailable, falling back to heuristic estimator\",\n\t\t);\n\t\treturn new HeuristicTokenEstimator();\n\t}\n}\n\n/**\n * Synchronous factory: creates a HeuristicTokenEstimator immediately.\n * Used when the async factory cannot be awaited (e.g., constructor contexts).\n * The engine should upgrade to the real estimator via setEstimator() later.\n */\nexport function createSyncTokenEstimator(): TokenEstimator {\n\treturn new HeuristicTokenEstimator();\n}\n","/*\n * Copyright The OpenTelemetry Authors\n * SPDX-License-Identifier: Apache-2.0\n */\n\n// this is autogenerated file, see scripts/version-update.js\nexport const VERSION = '1.9.1';\n","/*\n * Copyright The OpenTelemetry Authors\n * SPDX-License-Identifier: Apache-2.0\n */\n\nimport { VERSION } from '../version';\n\nconst re = /^(\\d+)\\.(\\d+)\\.(\\d+)(-(.+))?$/;\n\n/**\n * Create a function to test an API version to see if it is compatible with the provided ownVersion.\n *\n * The returned function has the following semantics:\n * - Exact match is always compatible\n * - Major versions must match exactly\n * - 1.x package cannot use global 2.x package\n * - 2.x package cannot use global 1.x package\n * - The minor version of the API module requesting access to the global API must be less than or equal to the minor version of this API\n * - 1.3 package may use 1.4 global because the later global contains all functions 1.3 expects\n * - 1.4 package may NOT use 1.3 global because it may try to call functions which don't exist on 1.3\n * - If the major version is 0, the minor version is treated as the major and the patch is treated as the minor\n * - Patch and build tag differences are not considered at this time\n *\n * @param ownVersion version which should be checked against\n */\nexport function _makeCompatibilityCheck(\n ownVersion: string\n): (globalVersion: string) => boolean {\n const acceptedVersions = new Set<string>([ownVersion]);\n const rejectedVersions = new Set<string>();\n\n const myVersionMatch = ownVersion.match(re);\n if (!myVersionMatch) {\n // we cannot guarantee compatibility so we always return noop\n return () => false;\n }\n\n const ownVersionParsed = {\n major: +myVersionMatch[1],\n minor: +myVersionMatch[2],\n patch: +myVersionMatch[3],\n prerelease: myVersionMatch[4],\n };\n\n // if ownVersion has a prerelease tag, versions must match exactly\n if (ownVersionParsed.prerelease != null) {\n return function isExactmatch(globalVersion: string): boolean {\n return globalVersion === ownVersion;\n };\n }\n\n function _reject(v: string) {\n rejectedVersions.add(v);\n return false;\n }\n\n function _accept(v: string) {\n acceptedVersions.add(v);\n return true;\n }\n\n return function isCompatible(globalVersion: string): boolean {\n if (acceptedVersions.has(globalVersion)) {\n return true;\n }\n\n if (rejectedVersions.has(globalVersion)) {\n return false;\n }\n\n const globalVersionMatch = globalVersion.match(re);\n if (!globalVersionMatch) {\n // cannot parse other version\n // we cannot guarantee compatibility so we always noop\n return _reject(globalVersion);\n }\n\n const globalVersionParsed = {\n major: +globalVersionMatch[1],\n minor: +globalVersionMatch[2],\n patch: +globalVersionMatch[3],\n prerelease: globalVersionMatch[4],\n };\n\n // if globalVersion has a prerelease tag, versions must match exactly\n if (globalVersionParsed.prerelease != null) {\n return _reject(globalVersion);\n }\n\n // major versions must match\n if (ownVersionParsed.major !== globalVersionParsed.major) {\n return _reject(globalVersion);\n }\n\n if (ownVersionParsed.major === 0) {\n if (\n ownVersionParsed.minor === globalVersionParsed.minor &&\n ownVersionParsed.patch <= globalVersionParsed.patch\n ) {\n return _accept(globalVersion);\n }\n\n return _reject(globalVersion);\n }\n\n if (ownVersionParsed.minor <= globalVersionParsed.minor) {\n return _accept(globalVersion);\n }\n\n return _reject(globalVersion);\n };\n}\n\n/**\n * Test an API version to see if it is compatible with this API.\n *\n * - Exact match is always compatible\n * - Major versions must match exactly\n * - 1.x package cannot use global 2.x package\n * - 2.x package cannot use global 1.x package\n * - The minor version of the API module requesting access to the global API must be less than or equal to the minor version of this API\n * - 1.3 package may use 1.4 global because the later global contains all functions 1.3 expects\n * - 1.4 package may NOT use 1.3 global because it may try to call functions which don't exist on 1.3\n * - If the major version is 0, the minor version is treated as the major and the patch is treated as the minor\n * - Patch and build tag differences are not considered at this time\n *\n * @param version version of the API requesting an instance of the global API\n */\nexport const isCompatible = _makeCompatibilityCheck(VERSION);\n","/*\n * Copyright The OpenTelemetry Authors\n * SPDX-License-Identifier: Apache-2.0\n */\n\nimport type { MeterProvider } from '../metrics/MeterProvider';\nimport type { ContextManager } from '../context/types';\nimport type { DiagLogger } from '../diag/types';\nimport type { TextMapPropagator } from '../propagation/TextMapPropagator';\nimport type { TracerProvider } from '../trace/tracer_provider';\nimport { VERSION } from '../version';\nimport { isCompatible } from './semver';\n\nconst major = VERSION.split('.')[0];\nconst GLOBAL_OPENTELEMETRY_API_KEY = Symbol.for(\n `opentelemetry.js.api.${major}`\n);\n\ndeclare const self: unknown;\ndeclare const window: unknown;\ndeclare const global: unknown;\n\nconst _global = (\n typeof globalThis === 'object'\n ? globalThis\n : typeof self === 'object'\n ? self\n : typeof window === 'object'\n ? window\n : typeof global === 'object'\n ? global\n : {}\n) as OTelGlobal;\n\nexport function registerGlobal<Type extends keyof OTelGlobalAPI>(\n type: Type,\n instance: OTelGlobalAPI[Type],\n diag: DiagLogger,\n allowOverride = false\n): boolean {\n const api = (_global[GLOBAL_OPENTELEMETRY_API_KEY] = _global[\n GLOBAL_OPENTELEMETRY_API_KEY\n ] ?? {\n version: VERSION,\n });\n\n if (!allowOverride && api[type]) {\n // already registered an API of this type\n const err = new Error(\n `@opentelemetry/api: Attempted duplicate registration of API: ${type}`\n );\n diag.error(err.stack || err.message);\n return false;\n }\n\n if (api.version !== VERSION) {\n // All registered APIs must be of the same version exactly\n const err = new Error(\n `@opentelemetry/api: Registration of version v${api.version} for ${type} does not match previously registered API v${VERSION}`\n );\n diag.error(err.stack || err.message);\n return false;\n }\n\n api[type] = instance;\n diag.debug(\n `@opentelemetry/api: Registered a global for ${type} v${VERSION}.`\n );\n\n return true;\n}\n\nexport function getGlobal<Type extends keyof OTelGlobalAPI>(\n type: Type\n): OTelGlobalAPI[Type] | undefined {\n const globalVersion = _global[GLOBAL_OPENTELEMETRY_API_KEY]?.version;\n if (!globalVersion || !isCompatible(globalVersion)) {\n return;\n }\n return _global[GLOBAL_OPENTELEMETRY_API_KEY]?.[type];\n}\n\nexport function unregisterGlobal(type: keyof OTelGlobalAPI, diag: DiagLogger) {\n diag.debug(\n `@opentelemetry/api: Unregistering a global for ${type} v${VERSION}.`\n );\n const api = _global[GLOBAL_OPENTELEMETRY_API_KEY];\n\n if (api) {\n delete api[type];\n }\n}\n\ntype OTelGlobal = {\n [GLOBAL_OPENTELEMETRY_API_KEY]?: OTelGlobalAPI;\n};\n\ntype OTelGlobalAPI = {\n version: string;\n\n diag?: DiagLogger;\n trace?: TracerProvider;\n context?: ContextManager;\n metrics?: MeterProvider;\n propagation?: TextMapPropagator;\n};\n","/*\n * Copyright The OpenTelemetry Authors\n * SPDX-License-Identifier: Apache-2.0\n */\n\nimport { getGlobal } from '../internal/global-utils';\nimport type { ComponentLoggerOptions, DiagLogger } from './types';\n\n/**\n * Component Logger which is meant to be used as part of any component which\n * will add automatically additional namespace in front of the log message.\n * It will then forward all message to global diag logger\n * @example\n * const cLogger = diag.createComponentLogger({ namespace: '@opentelemetry/instrumentation-http' });\n * cLogger.debug('test');\n * // @opentelemetry/instrumentation-http test\n */\nexport class DiagComponentLogger implements DiagLogger {\n private _namespace: string;\n\n constructor(props: ComponentLoggerOptions) {\n this._namespace = props.namespace || 'DiagComponentLogger';\n }\n\n public debug(...args: unknown[]): void {\n return logProxy('debug', this._namespace, args);\n }\n\n public error(...args: unknown[]): void {\n return logProxy('error', this._namespace, args);\n }\n\n public info(...args: unknown[]): void {\n return logProxy('info', this._namespace, args);\n }\n\n public warn(...args: unknown[]): void {\n return logProxy('warn', this._namespace, args);\n }\n\n public verbose(...args: unknown[]): void {\n return logProxy('verbose', this._namespace, args);\n }\n}\n\nfunction logProxy(\n funcName: keyof DiagLogger,\n namespace: string,\n args: unknown[]\n): void {\n const logger = getGlobal('diag');\n // shortcut if logger not set\n if (!logger) {\n return;\n }\n\n return logger[funcName](namespace, ...args);\n}\n","/*\n * Copyright The OpenTelemetry Authors\n * SPDX-License-Identifier: Apache-2.0\n */\n\n/**\n * @since 1.0.0\n */\nexport type DiagLogFunction = (message: string, ...args: unknown[]) => void;\n\n/**\n * Defines an internal diagnostic logger interface which is used to log internal diagnostic\n * messages, you can set the default diagnostic logger via the {@link DiagAPI} setLogger function.\n * API provided implementations include :-\n * - a No-Op {@link createNoopDiagLogger}\n * - a {@link DiagLogLevel} filtering wrapper {@link createLogLevelDiagLogger}\n * - a general Console {@link DiagConsoleLogger} version.\n *\n * @since 1.0.0\n */\nexport interface DiagLogger {\n /** Log an error scenario that was not expected and caused the requested operation to fail. */\n error: DiagLogFunction;\n\n /**\n * Log a warning scenario to inform the developer of an issues that should be investigated.\n * The requested operation may or may not have succeeded or completed.\n */\n warn: DiagLogFunction;\n\n /**\n * Log a general informational message, this should not affect functionality.\n * This is also the default logging level so this should NOT be used for logging\n * debugging level information.\n */\n info: DiagLogFunction;\n\n /**\n * Log a general debug message that can be useful for identifying a failure.\n * Information logged at this level may include diagnostic details that would\n * help identify a failure scenario.\n * For example: Logging the order of execution of async operations.\n */\n debug: DiagLogFunction;\n\n /**\n * Log a detailed (verbose) trace level logging that can be used to identify failures\n * where debug level logging would be insufficient, this level of tracing can include\n * input and output parameters and as such may include PII information passing through\n * the API. As such it is recommended that this level of tracing should not be enabled\n * in a production environment.\n */\n verbose: DiagLogFunction;\n}\n\n/**\n * Defines the available internal logging levels for the diagnostic logger, the numeric values\n * of the levels are defined to match the original values from the initial LogLevel to avoid\n * compatibility/migration issues for any implementation that assume the numeric ordering.\n */\nexport enum DiagLogLevel {\n /** Diagnostic Logging level setting to disable all logging (except and forced logs) */\n NONE = 0,\n\n /** Identifies an error scenario */\n ERROR = 30,\n\n /** Identifies a warning scenario */\n WARN = 50,\n\n /** General informational log message */\n INFO = 60,\n\n /** General debug log message */\n DEBUG = 70,\n\n /**\n * Detailed trace level logging should only be used for development, should only be set\n * in a development environment.\n */\n VERBOSE = 80,\n\n /** Used to set the logging level to include all logging */\n ALL = 9999,\n}\n\n/**\n * Defines options for ComponentLogger\n *\n * @since 1.0.0\n */\nexport interface ComponentLoggerOptions {\n namespace: string;\n}\n\n/**\n * @since 1.4.1\n */\nexport interface DiagLoggerOptions {\n /**\n * The {@link DiagLogLevel} used to filter logs sent to the logger.\n *\n * @defaultValue DiagLogLevel.INFO\n */\n logLevel?: DiagLogLevel;\n\n /**\n * Setting this value to `true` will suppress the warning message normally emitted when registering a logger when another logger is already registered.\n */\n suppressOverrideMessage?: boolean;\n}\n\nexport interface DiagLoggerApi {\n /**\n * Set the global DiagLogger and DiagLogLevel.\n * If a global diag logger is already set, this will override it.\n *\n * @param logger - The {@link DiagLogger} instance to set as the default logger.\n * @param options - A {@link DiagLoggerOptions} object. If not provided, default values will be set.\n * @returns `true` if the logger was successfully registered, else `false`\n */\n setLogger(logger: DiagLogger, options?: DiagLoggerOptions): boolean;\n\n /**\n *\n * @param logger - The {@link DiagLogger} instance to set as the default logger.\n * @param logLevel - The {@link DiagLogLevel} used to filter logs sent to the logger. If not provided it will default to {@link DiagLogLevel.INFO}.\n * @returns `true` if the logger was successfully registered, else `false`\n */\n setLogger(logger: DiagLogger, logLevel?: DiagLogLevel): boolean;\n}\n","/*\n * Copyright The OpenTelemetry Authors\n * SPDX-License-Identifier: Apache-2.0\n */\n\nimport type { DiagLogFunction, DiagLogger } from '../types';\nimport { DiagLogLevel } from '../types';\n\nexport function createLogLevelDiagLogger(\n maxLevel: DiagLogLevel,\n logger: DiagLogger\n): DiagLogger {\n if (maxLevel < DiagLogLevel.NONE) {\n maxLevel = DiagLogLevel.NONE;\n } else if (maxLevel > DiagLogLevel.ALL) {\n maxLevel = DiagLogLevel.ALL;\n }\n\n // In case the logger is null or undefined\n logger = logger || {};\n\n function _filterFunc(\n funcName: keyof DiagLogger,\n theLevel: DiagLogLevel\n ): DiagLogFunction {\n const theFunc = logger[funcName];\n\n if (typeof theFunc === 'function' && maxLevel >= theLevel) {\n return theFunc.bind(logger);\n }\n return function () {};\n }\n\n return {\n error: _filterFunc('error', DiagLogLevel.ERROR),\n warn: _filterFunc('warn', DiagLogLevel.WARN),\n info: _filterFunc('info', DiagLogLevel.INFO),\n debug: _filterFunc('debug', DiagLogLevel.DEBUG),\n verbose: _filterFunc('verbose', DiagLogLevel.VERBOSE),\n };\n}\n","/*\n * Copyright The OpenTelemetry Authors\n * SPDX-License-Identifier: Apache-2.0\n */\n\nimport { DiagComponentLogger } from '../diag/ComponentLogger';\nimport { createLogLevelDiagLogger } from '../diag/internal/logLevelLogger';\nimport type {\n ComponentLoggerOptions,\n DiagLogFunction,\n DiagLogger,\n DiagLoggerApi,\n} from '../diag/types';\nimport { DiagLogLevel } from '../diag/types';\nimport {\n getGlobal,\n registerGlobal,\n unregisterGlobal,\n} from '../internal/global-utils';\n\nconst API_NAME = 'diag';\n\n/**\n * Singleton object which represents the entry point to the OpenTelemetry internal\n * diagnostic API\n *\n * @since 1.0.0\n */\nexport class DiagAPI implements DiagLogger, DiagLoggerApi {\n private static _instance?: DiagAPI;\n\n /** Get the singleton instance of the DiagAPI API */\n public static instance(): DiagAPI {\n if (!this._instance) {\n this._instance = new DiagAPI();\n }\n\n return this._instance;\n }\n\n /**\n * Private internal constructor\n * @private\n */\n private constructor() {\n function _logProxy(funcName: keyof DiagLogger): DiagLogFunction {\n return function (...args) {\n const logger = getGlobal('diag');\n // shortcut if logger not set\n if (!logger) return;\n return logger[funcName](...args);\n };\n }\n\n // Using self local variable for minification purposes as 'this' cannot be minified\n const self = this;\n\n // DiagAPI specific functions\n\n const setLogger: DiagLoggerApi['setLogger'] = (\n logger,\n optionsOrLogLevel = { logLevel: DiagLogLevel.INFO }\n ) => {\n if (logger === self) {\n // There isn't much we can do here.\n // Logging to the console might break the user application.\n // Try to log to self. If a logger was previously registered it will receive the log.\n const err = new Error(\n 'Cannot use diag as the logger for itself. Please use a DiagLogger implementation like ConsoleDiagLogger or a custom implementation'\n );\n self.error(err.stack ?? err.message);\n return false;\n }\n\n if (typeof optionsOrLogLevel === 'number') {\n optionsOrLogLevel = {\n logLevel: optionsOrLogLevel,\n };\n }\n\n const oldLogger = getGlobal('diag');\n const newLogger = createLogLevelDiagLogger(\n optionsOrLogLevel.logLevel ?? DiagLogLevel.INFO,\n logger\n );\n // There already is an logger registered. We'll let it know before overwriting it.\n if (oldLogger && !optionsOrLogLevel.suppressOverrideMessage) {\n const stack = new Error().stack ?? '<failed to generate stacktrace>';\n oldLogger.warn(`Current logger will be overwritten from ${stack}`);\n newLogger.warn(\n `Current logger will overwrite one already registered from ${stack}`\n );\n }\n\n return registerGlobal('diag', newLogger, self, true);\n };\n\n self.setLogger = setLogger;\n\n self.disable = () => {\n unregisterGlobal(API_NAME, self);\n };\n\n self.createComponentLogger = (options: ComponentLoggerOptions) => {\n return new DiagComponentLogger(options);\n };\n\n self.verbose = _logProxy('verbose');\n self.debug = _logProxy('debug');\n self.info = _logProxy('info');\n self.warn = _logProxy('warn');\n self.error = _logProxy('error');\n }\n\n public setLogger!: DiagLoggerApi['setLogger'];\n /**\n *\n */\n public createComponentLogger!: (\n options: ComponentLoggerOptions\n ) => DiagLogger;\n\n // DiagLogger implementation\n public verbose!: DiagLogFunction;\n public debug!: DiagLogFunction;\n public info!: DiagLogFunction;\n public warn!: DiagLogFunction;\n public error!: DiagLogFunction;\n\n /**\n * Unregister the global logger and return to Noop\n */\n public disable!: () => void;\n}\n","/*\n * Copyright The OpenTelemetry Authors\n * SPDX-License-Identifier: Apache-2.0\n */\n\nimport type { Meter } from './Meter';\nimport type {\n BatchObservableCallback,\n Counter,\n Gauge,\n Histogram,\n MetricAttributes,\n MetricOptions,\n Observable,\n ObservableCallback,\n ObservableCounter,\n ObservableGauge,\n ObservableUpDownCounter,\n UpDownCounter,\n} from './Metric';\n\n/**\n * NoopMeter is a noop implementation of the {@link Meter} interface. It reuses\n * constant NoopMetrics for all of its methods.\n */\nexport class NoopMeter implements Meter {\n constructor() {}\n\n /**\n * @see {@link Meter.createGauge}\n */\n createGauge(_name: string, _options?: MetricOptions): Gauge {\n return NOOP_GAUGE_METRIC;\n }\n\n /**\n * @see {@link Meter.createHistogram}\n */\n createHistogram(_name: string, _options?: MetricOptions): Histogram {\n return NOOP_HISTOGRAM_METRIC;\n }\n\n /**\n * @see {@link Meter.createCounter}\n */\n createCounter(_name: string, _options?: MetricOptions): Counter {\n return NOOP_COUNTER_METRIC;\n }\n\n /**\n * @see {@link Meter.createUpDownCounter}\n */\n createUpDownCounter(_name: string, _options?: MetricOptions): UpDownCounter {\n return NOOP_UP_DOWN_COUNTER_METRIC;\n }\n\n /**\n * @see {@link Meter.createObservableGauge}\n */\n createObservableGauge(\n _name: string,\n _options?: MetricOptions\n ): ObservableGauge {\n return NOOP_OBSERVABLE_GAUGE_METRIC;\n }\n\n /**\n * @see {@link Meter.createObservableCounter}\n */\n createObservableCounter(\n _name: string,\n _options?: MetricOptions\n ): ObservableCounter {\n return NOOP_OBSERVABLE_COUNTER_METRIC;\n }\n\n /**\n * @see {@link Meter.createObservableUpDownCounter}\n */\n createObservableUpDownCounter(\n _name: string,\n _options?: MetricOptions\n ): ObservableUpDownCounter {\n return NOOP_OBSERVABLE_UP_DOWN_COUNTER_METRIC;\n }\n\n /**\n * @see {@link Meter.addBatchObservableCallback}\n */\n addBatchObservableCallback(\n _callback: BatchObservableCallback,\n _observables: Observable[]\n ): void {}\n\n /**\n * @see {@link Meter.removeBatchObservableCallback}\n */\n removeBatchObservableCallback(_callback: BatchObservableCallback): void {}\n}\n\nexport class NoopMetric {}\n\nexport class NoopCounterMetric extends NoopMetric implements Counter {\n add(_value: number, _attributes: MetricAttributes): void {}\n}\n\nexport class NoopUpDownCounterMetric\n extends NoopMetric\n implements UpDownCounter\n{\n add(_value: number, _attributes: MetricAttributes): void {}\n}\n\nexport class NoopGaugeMetric extends NoopMetric implements Gauge {\n record(_value: number, _attributes: MetricAttributes): void {}\n}\n\nexport class NoopHistogramMetric extends NoopMetric implements Histogram {\n record(_value: number, _attributes: MetricAttributes): void {}\n}\n\nexport class NoopObservableMetric {\n addCallback(_callback: ObservableCallback) {}\n\n removeCallback(_callback: ObservableCallback) {}\n}\n\nexport class NoopObservableCounterMetric\n extends NoopObservableMetric\n implements ObservableCounter {}\n\nexport class NoopObservableGaugeMetric\n extends NoopObservableMetric\n implements ObservableGauge {}\n\nexport class NoopObservableUpDownCounterMetric\n extends NoopObservableMetric\n implements ObservableUpDownCounter {}\n\nexport const NOOP_METER = new NoopMeter();\n\n// Synchronous instruments\nexport const NOOP_COUNTER_METRIC = new NoopCounterMetric();\nexport const NOOP_GAUGE_METRIC = new NoopGaugeMetric();\nexport const NOOP_HISTOGRAM_METRIC = new NoopHistogramMetric();\nexport const NOOP_UP_DOWN_COUNTER_METRIC = new NoopUpDownCounterMetric();\n\n// Asynchronous instruments\nexport const NOOP_OBSERVABLE_COUNTER_METRIC = new NoopObservableCounterMetric();\nexport const NOOP_OBSERVABLE_GAUGE_METRIC = new NoopObservableGaugeMetric();\nexport const NOOP_OBSERVABLE_UP_DOWN_COUNTER_METRIC =\n new NoopObservableUpDownCounterMetric();\n\n/**\n * Create a no-op Meter\n *\n * @since 1.3.0\n */\nexport function createNoopMeter(): Meter {\n return NOOP_METER;\n}\n","/*\n * Copyright The OpenTelemetry Authors\n * SPDX-License-Identifier: Apache-2.0\n */\n\nimport type { Meter, MeterOptions } from './Meter';\nimport type { MeterProvider } from './MeterProvider';\nimport { NOOP_METER } from './NoopMeter';\n\n/**\n * An implementation of the {@link MeterProvider} which returns an impotent Meter\n * for all calls to `getMeter`\n */\nexport class NoopMeterProvider implements MeterProvider {\n getMeter(_name: string, _version?: string, _options?: MeterOptions): Meter {\n return NOOP_METER;\n }\n}\n\nexport const NOOP_METER_PROVIDER = new NoopMeterProvider();\n","/*\n * Copyright The OpenTelemetry Authors\n * SPDX-License-Identifier: Apache-2.0\n */\n\nimport type { Meter, MeterOptions } from '../metrics/Meter';\nimport type { MeterProvider } from '../metrics/MeterProvider';\nimport { NOOP_METER_PROVIDER } from '../metrics/NoopMeterProvider';\nimport {\n getGlobal,\n registerGlobal,\n unregisterGlobal,\n} from '../internal/global-utils';\nimport { DiagAPI } from './diag';\n\nconst API_NAME = 'metrics';\n\n/**\n * Singleton object which represents the entry point to the OpenTelemetry Metrics API\n */\nexport class MetricsAPI {\n private static _instance?: MetricsAPI;\n\n /** Empty private constructor prevents end users from constructing a new instance of the API */\n private constructor() {}\n\n /** Get the singleton instance of the Metrics API */\n public static getInstance(): MetricsAPI {\n if (!this._instance) {\n this._instance = new MetricsAPI();\n }\n\n return this._instance;\n }\n\n /**\n * Set the current global meter provider.\n * Returns true if the meter provider was successfully registered, else false.\n */\n public setGlobalMeterProvider(provider: MeterProvider): boolean {\n return registerGlobal(API_NAME, provider, DiagAPI.instance());\n }\n\n /**\n * Returns the global meter provider.\n */\n public getMeterProvider(): MeterProvider {\n return getGlobal(API_NAME) || NOOP_METER_PROVIDER;\n }\n\n /**\n * Returns a meter from the global meter provider.\n */\n public getMeter(\n name: string,\n version?: string,\n options?: MeterOptions\n ): Meter {\n return this.getMeterProvider().getMeter(name, version, options);\n }\n\n /** Remove the global meter provider */\n public disable(): void {\n unregisterGlobal(API_NAME, DiagAPI.instance());\n }\n}\n","/*\n * Copyright The OpenTelemetry Authors\n * SPDX-License-Identifier: Apache-2.0\n */\n\n// Split module-level variable definition into separate files to allow\n// tree-shaking on each api instance.\nimport { MetricsAPI } from './api/metrics';\n/**\n * Entrypoint for metrics API\n *\n * @since 1.3.0\n */\nexport const metrics = MetricsAPI.getInstance();\n","import type { Histogram } from \"@opentelemetry/api\";\nimport { metrics } from \"@opentelemetry/api\";\nimport { log } from \"../utils/logger.js\";\n\n/** SDK identifier for the OTel Meter */\nconst METER_NAME = \"@nekzus/liop\";\nconst METER_VERSION = \"1.2.0-alpha.9\";\n\n/**\n * gen_ai.client.token.usage — Recommended explicit bucket boundaries.\n * Source: OpenTelemetry Generative AI Semantic Conventions (experimental).\n */\nconst TOKEN_USAGE_BUCKETS = [\n\t1, 4, 16, 64, 256, 1024, 4096, 16384, 65536, 262144, 1048576, 4194304,\n\t16777216, 67108864,\n];\n\n/**\n * gen_ai.client.operation.duration — Recommended bucket boundaries (seconds).\n * Source: OpenTelemetry Generative AI Semantic Conventions.\n */\nconst DURATION_BUCKETS = [\n\t0.01, 0.02, 0.04, 0.08, 0.16, 0.32, 0.64, 1.28, 2.56, 5.12, 10.24, 20.48,\n\t40.96, 81.92,\n];\n\n/**\n * LiopOTelBridge — OpenTelemetry gen_ai.* metric emitter.\n *\n * Pattern: Library Instrumentation (uses global MeterProvider only).\n * Per official OTel JS documentation:\n * - Libraries MUST NOT create their own MeterProvider\n * - Libraries SHOULD use metrics.getMeter() from the global API\n * - If no MeterProvider is registered by the application, all operations are NoOp\n * with zero runtime overhead (confirmed by OTel JS source: NoopMeterProvider)\n *\n * Follows OpenTelemetry Generative AI Semantic Conventions (Development status).\n * @see https://opentelemetry.io/docs/specs/semconv/gen-ai/\n */\nexport class LiopOTelBridge {\n\tprivate tokenUsage: Histogram;\n\tprivate operationDuration: Histogram;\n\tprivate active = false;\n\n\tconstructor() {\n\t\ttry {\n\t\t\tconst meter = metrics.getMeter(METER_NAME, METER_VERSION);\n\n\t\t\tthis.tokenUsage = meter.createHistogram(\"gen_ai.client.token.usage\", {\n\t\t\t\tdescription: \"Number of tokens used in LIOP Logic-on-Origin operations\",\n\t\t\t\tunit: \"{token}\",\n\t\t\t\tadvice: { explicitBucketBoundaries: TOKEN_USAGE_BUCKETS },\n\t\t\t});\n\n\t\t\tthis.operationDuration = meter.createHistogram(\n\t\t\t\t\"gen_ai.client.operation.duration\",\n\t\t\t\t{\n\t\t\t\t\tdescription: \"Duration of LIOP operations\",\n\t\t\t\t\tunit: \"s\",\n\t\t\t\t\tadvice: { explicitBucketBoundaries: DURATION_BUCKETS },\n\t\t\t\t},\n\t\t\t);\n\n\t\t\tthis.active = true;\n\t\t\tlog.debug(\"[LIOP-OTel] gen_ai.* metrics bridge initialized\");\n\t\t} catch (err: unknown) {\n\t\t\t// OTel API failed to load — degrade gracefully without affecting protocol\n\t\t\tlog.debug(\n\t\t\t\t`[LIOP-OTel] Bridge disabled: ${err instanceof Error ? err.message : String(err)}`,\n\t\t\t);\n\t\t\tconst noopHistogram = {\n\t\t\t\trecord: () => {},\n\t\t\t} as unknown as Histogram;\n\t\t\tthis.tokenUsage = noopHistogram;\n\t\t\tthis.operationDuration = noopHistogram;\n\t\t}\n\t}\n\n\t/**\n\t * Record token usage with gen_ai.* standard attributes.\n\t *\n\t * @param tokens - Number of tokens consumed\n\t * @param tokenType - \"input\" or \"output\" (gen_ai.token.type)\n\t * @param operationName - gen_ai.operation.name (e.g., \"execute_tool\", \"chat\")\n\t * @param toolName - Optional LIOP-specific tool name for attribution\n\t */\n\trecordTokens(\n\t\ttokens: number,\n\t\ttokenType: \"input\" | \"output\",\n\t\toperationName: string,\n\t\ttoolName?: string,\n\t): void {\n\t\tthis.tokenUsage.record(tokens, {\n\t\t\t\"gen_ai.system\": \"liop\",\n\t\t\t\"gen_ai.operation.name\": operationName,\n\t\t\t\"gen_ai.token.type\": tokenType,\n\t\t\t\"gen_ai.request.model\": \"liop-mesh\",\n\t\t\t...(toolName ? { \"liop.tool.name\": toolName } : {}),\n\t\t});\n\t}\n\n\t/**\n\t * Record operation duration with gen_ai.* standard attributes.\n\t *\n\t * @param durationMs - Duration in milliseconds (converted to seconds for OTel)\n\t * @param operationName - gen_ai.operation.name\n\t * @param error - Optional error type string if the operation failed\n\t */\n\trecordDuration(\n\t\tdurationMs: number,\n\t\toperationName: string,\n\t\terror?: string,\n\t): void {\n\t\tthis.operationDuration.record(durationMs / 1000, {\n\t\t\t\"gen_ai.system\": \"liop\",\n\t\t\t\"gen_ai.operation.name\": operationName,\n\t\t\t...(error ? { \"error.type\": error } : {}),\n\t\t});\n\t}\n\n\t/** Whether the OTel bridge is actively connected to a MeterProvider */\n\tisActive(): boolean {\n\t\treturn this.active;\n\t}\n}\n","import {\n\tcreateSyncTokenEstimator,\n\tcreateTokenEstimator,\n\ttype TokenEstimator,\n} from \"./estimator.js\";\nimport { LiopOTelBridge } from \"./otel.js\";\n\n/** Single MCP operation token footprint */\nexport interface TokenOperationMetric {\n\treadonly type:\n\t\t| \"tools_list\"\n\t\t| \"tool_call\"\n\t\t| \"resource_read\"\n\t\t| \"resource_list\"\n\t\t| \"prompt_get\"\n\t\t| \"prompt_list\"\n\t\t| \"diagnostic\";\n\treadonly method: string;\n\treadonly estimatedInputTokens: number;\n\treadonly estimatedOutputTokens: number;\n\treadonly timestamp: number;\n\treadonly toolName?: string;\n\treadonly peerId?: string;\n\treadonly durationMs?: number;\n}\n\n/** Session-level aggregate report */\nexport interface TokenSessionReport {\n\treadonly sessionId: string;\n\treadonly operations: ReadonlyArray<TokenOperationMetric>;\n\treadonly totalInputTokens: number;\n\treadonly totalOutputTokens: number;\n\treadonly estimatorName: string;\n\treadonly sessionUptimeMs: number;\n}\n\n/** Per-tool aggregate breakdown */\nexport interface ToolTokenBreakdown {\n\treadonly input: number;\n\treadonly output: number;\n\treadonly calls: number;\n\treadonly avgDurationMs: number;\n}\n\n/**\n * Maps operation types to OTel gen_ai.operation.name values.\n * @see https://opentelemetry.io/docs/specs/semconv/gen-ai/\n */\nconst OTEL_OPERATION_MAP: Record<TokenOperationMetric[\"type\"], string> = {\n\ttools_list: \"chat\",\n\ttool_call: \"execute_tool\",\n\tresource_read: \"chat\",\n\tresource_list: \"chat\",\n\tprompt_get: \"chat\",\n\tprompt_list: \"chat\",\n\tdiagnostic: \"chat\",\n};\n\n/**\n * TokenTelemetryEngine — Full-spectrum observational singleton for token cost measurement.\n *\n * Design principles:\n * - Pure observer pattern: NEVER mutates MCP payloads or protocol flow.\n * - Real tokenization: o200k_base BPE via gpt-tokenizer (async init, sync counting).\n * - OTel gen_ai.* emission: standard metrics via @opentelemetry/api (NoOp if no provider).\n * - Error isolation: telemetry failures never propagate to protocol operations.\n */\nexport class TokenTelemetryEngine {\n\tprivate static instance: TokenTelemetryEngine | null = null;\n\tprivate operations: TokenOperationMetric[] = [];\n\tprivate readonly sessionId: string;\n\tprivate readonly startedAt: number;\n\tprivate estimator: TokenEstimator;\n\tprivate otelBridge: LiopOTelBridge;\n\n\tprivate constructor() {\n\t\tthis.sessionId = crypto.randomUUID();\n\t\tthis.startedAt = Date.now();\n\t\t// Start with sync heuristic estimator (available immediately)\n\t\tthis.estimator = createSyncTokenEstimator();\n\t\tthis.otelBridge = new LiopOTelBridge();\n\t\t// Upgrade to real tokenizer asynchronously\n\t\tthis.initRealEstimator();\n\t}\n\n\t/** Async upgrade from heuristic to real BPE tokenizer */\n\tprivate initRealEstimator(): void {\n\t\tcreateTokenEstimator()\n\t\t\t.then((real) => {\n\t\t\t\tthis.estimator = real;\n\t\t\t})\n\t\t\t.catch(() => {\n\t\t\t\t// Keep heuristic fallback — already assigned in constructor\n\t\t\t});\n\t}\n\n\tstatic getInstance(): TokenTelemetryEngine {\n\t\tif (!TokenTelemetryEngine.instance) {\n\t\t\tTokenTelemetryEngine.instance = new TokenTelemetryEngine();\n\t\t}\n\t\treturn TokenTelemetryEngine.instance;\n\t}\n\n\t/**\n\t * Count tokens in a string using the active estimator.\n\t * Delegates to o200k_base BPE tokenizer (or heuristic fallback).\n\t */\n\tcountTokens(content: string): number {\n\t\ttry {\n\t\t\treturn this.estimator.countTokens(content);\n\t\t} catch {\n\t\t\t// Fallback: never let counting failures break protocol flow\n\t\t\treturn Math.ceil(content.length / 4);\n\t\t}\n\t}\n\n\t/**\n\t * Record a single MCP operation's token footprint.\n\t * Emits both internal metrics and OTel gen_ai.* histograms.\n\t */\n\trecord(metric: Omit<TokenOperationMetric, \"timestamp\">): void {\n\t\tconst fullMetric: TokenOperationMetric = {\n\t\t\t...metric,\n\t\t\ttimestamp: Date.now(),\n\t\t};\n\t\tthis.operations.push(fullMetric);\n\n\t\t// Emit to OTel bridge (NoOp if no MeterProvider configured)\n\t\ttry {\n\t\t\tconst otelOp = OTEL_OPERATION_MAP[metric.type] || \"chat\";\n\n\t\t\tif (metric.estimatedInputTokens > 0) {\n\t\t\t\tthis.otelBridge.recordTokens(\n\t\t\t\t\tmetric.estimatedInputTokens,\n\t\t\t\t\t\"input\",\n\t\t\t\t\totelOp,\n\t\t\t\t\tmetric.toolName,\n\t\t\t\t);\n\t\t\t}\n\t\t\tif (metric.estimatedOutputTokens > 0) {\n\t\t\t\tthis.otelBridge.recordTokens(\n\t\t\t\t\tmetric.estimatedOutputTokens,\n\t\t\t\t\t\"output\",\n\t\t\t\t\totelOp,\n\t\t\t\t\tmetric.toolName,\n\t\t\t\t);\n\t\t\t}\n\t\t\tif (metric.durationMs !== undefined) {\n\t\t\t\tthis.otelBridge.recordDuration(metric.durationMs, otelOp);\n\t\t\t}\n\t\t} catch {\n\t\t\t// OTel emission failure must never affect protocol operations\n\t\t}\n\t}\n\n\t/**\n\t * @deprecated Use countTokens() instead. Kept for backward compatibility.\n\t */\n\testimateTokens(content: string): number {\n\t\treturn this.countTokens(content);\n\t}\n\n\t/** Generate the full session report */\n\tgetReport(): TokenSessionReport {\n\t\treturn {\n\t\t\tsessionId: this.sessionId,\n\t\t\toperations: [...this.operations],\n\t\t\ttotalInputTokens: this.operations.reduce(\n\t\t\t\t(sum, op) => sum + op.estimatedInputTokens,\n\t\t\t\t0,\n\t\t\t),\n\t\t\ttotalOutputTokens: this.operations.reduce(\n\t\t\t\t(sum, op) => sum + op.estimatedOutputTokens,\n\t\t\t\t0,\n\t\t\t),\n\t\t\testimatorName: this.estimator.name,\n\t\t\tsessionUptimeMs: Date.now() - this.startedAt,\n\t\t};\n\t}\n\n\t/** Get per-tool token breakdown for diagnostic display */\n\tgetPerToolReport(): Map<string, ToolTokenBreakdown> {\n\t\tconst breakdown = new Map<string, ToolTokenBreakdown>();\n\n\t\tfor (const op of this.operations) {\n\t\t\tconst key = op.toolName || op.method;\n\t\t\tconst existing = breakdown.get(key) || {\n\t\t\t\tinput: 0,\n\t\t\t\toutput: 0,\n\t\t\t\tcalls: 0,\n\t\t\t\tavgDurationMs: 0,\n\t\t\t};\n\n\t\t\tconst totalDuration =\n\t\t\t\texisting.avgDurationMs * existing.calls + (op.durationMs || 0);\n\t\t\tconst newCalls = existing.calls + 1;\n\n\t\t\tbreakdown.set(key, {\n\t\t\t\tinput: existing.input + op.estimatedInputTokens,\n\t\t\t\toutput: existing.output + op.estimatedOutputTokens,\n\t\t\t\tcalls: newCalls,\n\t\t\t\tavgDurationMs: newCalls > 0 ? totalDuration / newCalls : 0,\n\t\t\t});\n\t\t}\n\n\t\treturn breakdown;\n\t}\n\n\t/**\n\t * Format a rich, human-readable summary block for LiopMeshStatus diagnostic.\n\t * Returns empty string when no operations have been recorded.\n\t */\n\tformatStatusBlock(): string {\n\t\tconst report = this.getReport();\n\t\tif (report.operations.length === 0) return \"\";\n\n\t\tconst uptimeStr = this.formatUptime(report.sessionUptimeMs);\n\t\tconst totalCombined = report.totalInputTokens + report.totalOutputTokens;\n\n\t\t// Aggregate operations by type\n\t\tconst byType = new Map<\n\t\t\tstring,\n\t\t\t{ count: number; input: number; output: number }\n\t\t>();\n\t\tfor (const op of report.operations) {\n\t\t\tconst key = op.type;\n\t\t\tconst existing = byType.get(key) || {\n\t\t\t\tcount: 0,\n\t\t\t\tinput: 0,\n\t\t\t\toutput: 0,\n\t\t\t};\n\t\t\tbyType.set(key, {\n\t\t\t\tcount: existing.count + 1,\n\t\t\t\tinput: existing.input + op.estimatedInputTokens,\n\t\t\t\toutput: existing.output + op.estimatedOutputTokens,\n\t\t\t});\n\t\t}\n\n\t\t// Build type breakdown lines\n\t\tconst typeEntries = Array.from(byType.entries());\n\t\tconst typeLines = typeEntries.map(([type, data], idx) => {\n\t\t\tconst prefix = idx === typeEntries.length - 1 ? \"│ └─\" : \"│ ├─\";\n\t\t\tconst outputPart =\n\t\t\t\tdata.output > 0 ? ` / ${data.output.toLocaleString()} out` : \"\";\n\t\t\treturn `${prefix} ${type} ×${data.count} → ${data.input.toLocaleString()} in${outputPart}`;\n\t\t});\n\n\t\t// Build per-tool breakdown\n\t\tconst toolReport = this.getPerToolReport();\n\t\tconst toolEntries = Array.from(toolReport.entries()).filter(\n\t\t\t([key]) => key !== \"tools/list\" && key !== \"LiopMeshStatus\",\n\t\t);\n\n\t\tconst toolLines: string[] = [];\n\t\tif (toolEntries.length > 0) {\n\t\t\ttoolLines.push(\"├─ By Tool:\");\n\t\t\ttoolEntries.forEach(([name, data], idx) => {\n\t\t\t\tconst prefix = idx === toolEntries.length - 1 ? \"│ └─\" : \"│ ├─\";\n\t\t\t\tconst outputPart =\n\t\t\t\t\tdata.output > 0 ? ` / ${data.output.toLocaleString()} out` : \"\";\n\t\t\t\tconst durationPart =\n\t\t\t\t\tdata.avgDurationMs > 0 ? ` ~${Math.round(data.avgDurationMs)}ms` : \"\";\n\t\t\t\ttoolLines.push(\n\t\t\t\t\t`${prefix} ${name}: ${data.input.toLocaleString()} in${outputPart} (×${data.calls})${durationPart}`,\n\t\t\t\t);\n\t\t\t});\n\t\t}\n\n\t\t// Calculate average latency across all timed operations\n\t\tconst timedOps = report.operations.filter(\n\t\t\t(op) => op.durationMs !== undefined,\n\t\t);\n\t\tconst avgLatency =\n\t\t\ttimedOps.length > 0\n\t\t\t\t? Math.round(\n\t\t\t\t\t\ttimedOps.reduce((sum, op) => sum + (op.durationMs || 0), 0) /\n\t\t\t\t\t\t\ttimedOps.length,\n\t\t\t\t\t)\n\t\t\t\t: 0;\n\n\t\tconst otelStatus = this.otelBridge.isActive()\n\t\t\t? \"gen_ai.client.token.usage → active\"\n\t\t\t: \"disabled\";\n\n\t\tconst lines = [\n\t\t\t\"\\nToken Economy:\",\n\t\t\t`├─ Session: ${report.sessionId.slice(0, 8)} (${uptimeStr})`,\n\t\t\t`├─ Estimator: ${report.estimatorName}`,\n\t\t\t`├─ Operations: ${report.operations.length}`,\n\t\t\t...typeLines,\n\t\t\t`├─ Total: ${report.totalInputTokens.toLocaleString()} in / ${report.totalOutputTokens.toLocaleString()} out (${totalCombined.toLocaleString()} combined)`,\n\t\t\t...toolLines,\n\t\t\t...(avgLatency > 0 ? [`├─ Avg Latency: ${avgLatency}ms`] : []),\n\t\t\t`└─ OTel: ${otelStatus}`,\n\t\t];\n\n\t\treturn lines.join(\"\\n\");\n\t}\n\n\t/** Format milliseconds into human-readable uptime string */\n\tprivate formatUptime(ms: number): string {\n\t\tconst seconds = Math.floor(ms / 1000);\n\t\tif (seconds < 60) return `${seconds}s`;\n\t\tconst minutes = Math.floor(seconds / 60);\n\t\tconst remainingSeconds = seconds % 60;\n\t\tif (minutes < 60) return `${minutes}m ${remainingSeconds}s`;\n\t\tconst hours = Math.floor(minutes / 60);\n\t\tconst remainingMinutes = minutes % 60;\n\t\treturn `${hours}h ${remainingMinutes}m`;\n\t}\n\n\t/** Reset all recorded metrics (used in tests) */\n\treset(): void {\n\t\tthis.operations = [];\n\t}\n\n\t/** Destroy the singleton (used in tests to guarantee isolation) */\n\tstatic destroy(): void {\n\t\tTokenTelemetryEngine.instance = null;\n\t}\n}\n","/**\n * MCP UX: compact tool descriptions are ENABLED by default to optimize\n * token consumption for LLM clients (e.g. Claude Desktop).\n *\n * Set LIOP_MCP_COMPACT_TOOL_DESCRIPTIONS=0 to restore verbose descriptions.\n * Full LIOP payload format remains in prompts/get → liop_blind_analyst.\n */\nexport function mcpCompactToolDescriptions(): boolean {\n\tconst v =\n\t\tprocess.env.LIOP_MCP_COMPACT_TOOL_DESCRIPTIONS?.toLowerCase().trim();\n\tif (v === \"0\" || v === \"false\" || v === \"no\") return false;\n\treturn true;\n}\n\n/**\n * Removes SDK-appended LIOP specification blocks from a registered tool description.\n */\nexport function stripVerboseLiopToolDescription(description: string): string {\n\tlet d = description;\n\tconst markers = [\n\t\t\"\\n\\n[LIOP-PROTO-V1:\",\n\t\t\"\\r\\n\\r\\n[LIOP-PROTO-V1:\",\n\t\t\"\\n[LIOP-PROTO-V1:\", // rare\n\t];\n\tfor (const m of markers) {\n\t\tconst i = d.indexOf(m);\n\t\tif (i !== -1) {\n\t\t\td = d.slice(0, i);\n\t\t\tbreak;\n\t\t}\n\t}\n\treturn d.trimEnd();\n}\n","import * as crypto from \"node:crypto\";\nimport * as grpc from \"@grpc/grpc-js\";\nimport { LiopVerifier } from \"../crypto/verifier.js\";\nimport { TokenTelemetryEngine } from \"../economy/telemetry.js\";\nimport type { LiopManifest, MeshNode } from \"../mesh/index.js\";\nimport { Kyber768Wrapper } from \"../rpc/crypto/kyber.js\";\nimport { liopV1 } from \"../rpc/proto.js\";\nimport { createChannelCredentials } from \"../rpc/tls.js\";\nimport type { IntentResponse, LogicResponse } from \"../rpc/types.js\";\nimport type { AuthInfo } from \"../security/jwt-validator.js\";\nimport { authorizeRequest } from \"../security/rbac.js\";\nimport type { LiopServer } from \"../server/index.js\";\nimport type { McpRequest, McpResponse } from \"../types.js\";\nimport { log } from \"../utils/logger.js\";\nimport {\n\tmcpCompactToolDescriptions,\n\tstripVerboseLiopToolDescription,\n} from \"../utils/mcpCompact.js\";\n\n/**\n * Time-to-live for cached manifests (seconds).\n * Aligned with libp2p Kademlia DHT TABLE_REFRESH_INTERVAL (5 minutes).\n * Provider records in the DHT are valid for 48 hours (PROVIDERS_VALIDITY),\n * so 300s is a conservative, network-friendly value.\n */\nconst MANIFEST_CACHE_TTL_S = 300;\n\n/** Maximum number of DHT query retries for manifest discovery */\nconst MANIFEST_DISCOVERY_RETRIES = 5;\n\n/**\n * LIOP MCP Router\n *\n * Core logic for routing MCP requests to local or remote LIOP providers.\n * Decoupled from transport (HTTP/Stdio).\n *\n * All tool discovery and port resolution is DYNAMIC via the\n * /liop/manifest/1.0.0 protocol stream over Kademlia DHT.\n */\nexport class LiopMcpRouter {\n\t/** Cached manifests from remote peers. Key = PeerID */\n\tprivate manifestCache: Map<\n\t\tstring,\n\t\t{ manifest: LiopManifest; cachedAt: number }\n\t> = new Map();\n\n\t/** Guards against concurrent discovery storms */\n\tprivate currentDiscovery: Promise<void> | null = null;\n\n\t/** Verifier for Tier-0 integrity checks */\n\tpublic verifier: LiopVerifier = new LiopVerifier();\n\n\t/** Callback when new remote tools are discovered */\n\tpublic onToolsChanged?: () => void;\n\n\t/** Circuit-breaker state for peers that repeatedly fail manifest queries. */\n\tprivate manifestFailureState: Map<\n\t\tstring,\n\t\t{ failures: number; cooldownUntil: number; lastSkipLogAt: number }\n\t> = new Map();\n\n\tprivate static readonly MANIFEST_FAILURE_BASE_COOLDOWN_MS = 15_000;\n\tprivate static readonly MANIFEST_FAILURE_MAX_COOLDOWN_MS = 5 * 60_000;\n\tprivate static readonly MANIFEST_SKIP_LOG_THROTTLE_MS = 30_000;\n\n\tconstructor(\n\t\tprivate liopServer: LiopServer,\n\t\tprivate meshNode: MeshNode | null = null,\n\t\tprivate defaultRpcPort = 50051,\n\t) {\n\t\t// Auto-register manifest handler if mesh node is provided\n\t\tif (this.meshNode) {\n\t\t\tthis.meshNode.registerManifestHandler(() => {\n\t\t\t\tconst remoteTools = this.liopServer.listTools().map((t) => ({\n\t\t\t\t\tname: t.name,\n\t\t\t\t\tdescription: t.description,\n\t\t\t\t\tinputSchema: t.inputSchema as Record<string, unknown>,\n\t\t\t\t}));\n\n\t\t\t\tconst resources = this.liopServer.listResources().map((r) => ({\n\t\t\t\t\tname: r.name,\n\t\t\t\t\turi: r.uri,\n\t\t\t\t\tdescription: r.description,\n\t\t\t\t\tmimeType: r.mimeType,\n\t\t\t\t}));\n\n\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: access private configuration properties\n\t\t\t\tconst serverConfig = (this.liopServer as any).config;\n\n\t\t\t\treturn {\n\t\t\t\t\tpeerId: this.meshNode?.getPeerId() || \"unknown\",\n\t\t\t\t\tgrpcPort: this.defaultRpcPort,\n\t\t\t\t\ttools: [...remoteTools],\n\t\t\t\t\tresources,\n\t\t\t\t\tserverInfo: this.liopServer.getServerInfo(),\n\t\t\t\t\tauthRequired: this.liopServer.jwtValidator !== undefined,\n\t\t\t\t\ttokenSlug: serverConfig?.tokenSlug,\n\t\t\t\t\ttaxonomy: serverConfig?.taxonomy\n\t\t\t\t\t\t? {\n\t\t\t\t\t\t\t\tdomain: serverConfig.taxonomy.domain || \"Unknown Domain\",\n\t\t\t\t\t\t\t\tclearanceTier: serverConfig.taxonomy.clearanceTier ?? 0,\n\t\t\t\t\t\t\t\texecutionTypes: serverConfig.taxonomy.executionTypes || [],\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t: undefined,\n\t\t\t\t};\n\t\t\t});\n\n\t\t\t// Proactively announce manifest capability to the mesh\n\t\t\tthis.meshNode.announceManifest().catch((err: unknown) => {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] Failed to announce manifest: ${err instanceof Error ? err.message : String(err)}`,\n\t\t\t\t);\n\t\t\t});\n\t\t}\n\n\t\t// [OWASP-A01] Startup warning when diagnostic level exposes full topology\n\t\tif (process.env.LIOP_DIAGNOSTIC_LEVEL === \"full\") {\n\t\t\tprocess.stderr.write(\n\t\t\t\t\"⚠️ [LIOP-Security] Diagnostic level set to FULL — \" +\n\t\t\t\t\t\"PeerIDs and network topology are exposed. Do NOT use in production.\\n\",\n\t\t\t);\n\t\t}\n\t}\n\n\tprivate shouldSkipManifestQuery(peerId: string): boolean {\n\t\tconst state = this.manifestFailureState.get(peerId);\n\t\tif (!state) return false;\n\t\tconst now = Date.now();\n\t\tif (now >= state.cooldownUntil) return false;\n\n\t\tif (\n\t\t\tnow - state.lastSkipLogAt >\n\t\t\tLiopMcpRouter.MANIFEST_SKIP_LOG_THROTTLE_MS\n\t\t) {\n\t\t\tlog.info(\n\t\t\t\t`[LIOP-Router] Skipping manifest query for ${peerId} during cooldown (${Math.ceil((state.cooldownUntil - now) / 1000)}s remaining)`,\n\t\t\t);\n\t\t\tstate.lastSkipLogAt = now;\n\t\t}\n\t\treturn true;\n\t}\n\n\tprivate recordManifestQuerySuccess(peerId: string): void {\n\t\tthis.manifestFailureState.delete(peerId);\n\t}\n\n\tprivate recordManifestQueryFailure(peerId: string): void {\n\t\tconst now = Date.now();\n\t\tconst prev = this.manifestFailureState.get(peerId);\n\t\tconst failures = (prev?.failures || 0) + 1;\n\t\tconst backoff = Math.min(\n\t\t\tLiopMcpRouter.MANIFEST_FAILURE_BASE_COOLDOWN_MS *\n\t\t\t\t2 ** Math.max(0, failures - 1),\n\t\t\tLiopMcpRouter.MANIFEST_FAILURE_MAX_COOLDOWN_MS,\n\t\t);\n\t\tthis.manifestFailureState.set(peerId, {\n\t\t\tfailures,\n\t\t\tcooldownUntil: now + backoff,\n\t\t\tlastSkipLogAt: 0,\n\t\t});\n\t}\n\n\tpublic async dispatch(\n\t\trequest: McpRequest,\n\t\tauthInfo?: AuthInfo | null,\n\t): Promise<McpResponse | null> {\n\t\tconst { method, params, id } = request;\n\t\tlog.info(`[LIOP-Router] Processing: ${method}`);\n\n\t\t// [SEC] Enforce RBAC scope validation (Least Privilege) only if JWT validation is active\n\t\tif (this.liopServer.jwtValidator) {\n\t\t\tconst authResult = authorizeRequest(method, authInfo ?? null);\n\t\t\tif (!authResult.allowed) {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] RBAC Access Denied for method '${method}': ${authResult.reason}`,\n\t\t\t\t);\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\terror: {\n\t\t\t\t\t\tcode: -32099, // Custom authentication/authorization failure code\n\t\t\t\t\t\tmessage: authResult.reason || \"Access Denied\",\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\n\t\tswitch (method) {\n\t\t\tcase \"initialize\":\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\tresult: {\n\t\t\t\t\t\tprotocolVersion: \"2025-11-25\",\n\t\t\t\t\t\tcapabilities: {\n\t\t\t\t\t\t\ttools: { listChanged: true },\n\t\t\t\t\t\t\tresources: { listChanged: true },\n\t\t\t\t\t\t\tprompts: { listChanged: true },\n\t\t\t\t\t\t},\n\t\t\t\t\t\tserverInfo: this.liopServer.getServerInfo(),\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\tcase \"notifications/initialized\":\n\t\t\t\t// Cloud MCP clients often fire tools/list immediately; kick discovery early\n\t\t\t\t// so manifests populate before (or right after) that call completes.\n\t\t\t\tthis.kickDiscoveryAfterInitialized().catch(() => {});\n\t\t\t\treturn null;\n\t\t\tcase \"notifications/cancelled\":\n\t\t\t\treturn null; // No-op for MCP spec compliance\n\t\t\tcase \"ping\":\n\t\t\t\treturn { jsonrpc: \"2.0\", id, result: {} };\n\t\t\tcase \"tools/list\": {\n\t\t\t\tconst localTools = this.liopServer.listTools();\n\t\t\t\tconst remoteTools = await this.getRemoteTools();\n\n\t\t\t\tconst listedLocals = mcpCompactToolDescriptions()\n\t\t\t\t\t? localTools.map((t) => ({\n\t\t\t\t\t\t\t...t,\n\t\t\t\t\t\t\tdescription: stripVerboseLiopToolDescription(t.description ?? \"\"),\n\t\t\t\t\t\t}))\n\t\t\t\t\t: localTools;\n\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] tools/list: ${localTools.length} local, ${remoteTools.length} remote tools found`,\n\t\t\t\t);\n\n\t\t\t\t// Inject a mandatory static diagnostic tool.\n\t\t\t\t// This ensures that the {tools: []} list is never empty on startup.\n\t\t\t\t// Claude Desktop silently hides the connector if it receives an empty array initially,\n\t\t\t\t// which broke the UX due to the ~3s warm-up time of the Kademlia DHT.\n\t\t\t\tconst diagnosticTool = {\n\t\t\t\t\tname: \"LiopMeshStatus\",\n\t\t\t\t\tdescription:\n\t\t\t\t\t\t\"LiopMeshStatus: Returns the current dynamic diagnostic status of the Zero-Trust Neural Mesh.\",\n\t\t\t\t\tinputSchema: {\n\t\t\t\t\t\ttype: \"object\",\n\t\t\t\t\t\tproperties: {},\n\t\t\t\t\t\tadditionalProperties: false,\n\t\t\t\t\t},\n\t\t\t\t};\n\n\t\t\t\tconst allTools = [diagnosticTool, ...listedLocals, ...remoteTools];\n\n\t\t\t\t// [Token Economy] Record telemetry for the tools/list response\n\t\t\t\tconst telemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\tconst toolsPayload = JSON.stringify(allTools);\n\t\t\t\tconst toolsResponsePayload = JSON.stringify({ tools: allTools });\n\t\t\t\ttelemetry.record({\n\t\t\t\t\ttype: \"tools_list\",\n\t\t\t\t\tmethod: \"tools/list\",\n\t\t\t\t\testimatedInputTokens: telemetry.countTokens(toolsPayload),\n\t\t\t\t\testimatedOutputTokens: telemetry.countTokens(toolsResponsePayload),\n\t\t\t\t});\n\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\tresult: {\n\t\t\t\t\t\ttools: allTools,\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\t\t\tcase \"tools/call\":\n\t\t\t\treturn this.transcodeMcpToLiop(\n\t\t\t\t\tid,\n\t\t\t\t\tparams as { name: string; arguments?: Record<string, unknown> },\n\t\t\t\t\tauthInfo?.token,\n\t\t\t\t);\n\t\t\tcase \"resources/list\": {\n\t\t\t\tconst localResources = this.liopServer.listResources();\n\t\t\t\tconst remoteResources = await this.getRemoteResources();\n\t\t\t\tconst allResources = [...localResources, ...remoteResources];\n\n\t\t\t\t// [Token Economy] Record resources/list telemetry\n\t\t\t\tconst rlTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\tconst rlPayload = JSON.stringify(allResources);\n\t\t\t\trlTelemetry.record({\n\t\t\t\t\ttype: \"resource_list\",\n\t\t\t\t\tmethod: \"resources/list\",\n\t\t\t\t\testimatedInputTokens: 0,\n\t\t\t\t\testimatedOutputTokens: rlTelemetry.countTokens(rlPayload),\n\t\t\t\t});\n\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\tresult: { resources: allResources },\n\t\t\t\t};\n\t\t\t}\n\t\t\tcase \"resources/read\": {\n\t\t\t\tconst typedParams = params as { uri?: string } | undefined;\n\t\t\t\tif (!typedParams?.uri)\n\t\t\t\t\treturn {\n\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\tid,\n\t\t\t\t\t\terror: { code: -32602, message: \"Missing resource uri\" },\n\t\t\t\t\t};\n\t\t\t\ttry {\n\t\t\t\t\tconst rrStartTime = Date.now();\n\t\t\t\t\tconst result = await this.liopServer.readResource(typedParams.uri);\n\n\t\t\t\t\t// [Token Economy] Record resources/read telemetry\n\t\t\t\t\tconst rrTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\t\tconst rrOutputPayload = JSON.stringify(result);\n\t\t\t\t\trrTelemetry.record({\n\t\t\t\t\t\ttype: \"resource_read\",\n\t\t\t\t\t\tmethod: \"resources/read\",\n\t\t\t\t\t\ttoolName: typedParams.uri,\n\t\t\t\t\t\testimatedInputTokens: rrTelemetry.countTokens(typedParams.uri),\n\t\t\t\t\t\testimatedOutputTokens: rrTelemetry.countTokens(rrOutputPayload),\n\t\t\t\t\t\tdurationMs: Date.now() - rrStartTime,\n\t\t\t\t\t});\n\n\t\t\t\t\treturn { jsonrpc: \"2.0\", id, result };\n\t\t\t\t} catch (err: unknown) {\n\t\t\t\t\t// Fallback: Resolve remotely from manifest cache\n\t\t\t\t\tconst targetUri = typedParams.uri;\n\t\t\t\t\tfor (const { manifest } of this.manifestCache.values()) {\n\t\t\t\t\t\tconst remoteResource = manifest.resources.find(\n\t\t\t\t\t\t\t(r) => r.uri === targetUri,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tif (remoteResource) {\n\t\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t\t`[LIOP-Router] Resolved resource ${targetUri} from cache (Peer: ${manifest.peerId})`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\tresult: {\n\t\t\t\t\t\t\t\t\tcontents: [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\turi: remoteResource.uri,\n\t\t\t\t\t\t\t\t\t\t\tmimeType: remoteResource.mimeType || \"text/plain\",\n\t\t\t\t\t\t\t\t\t\t\ttext:\n\t\t\t\t\t\t\t\t\t\t\t\tremoteResource.text ||\n\t\t\t\t\t\t\t\t\t\t\t\tremoteResource.description ||\n\t\t\t\t\t\t\t\t\t\t\t\t\"No content provided\",\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t};\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\n\t\t\t\t\treturn {\n\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\tid,\n\t\t\t\t\t\terror: {\n\t\t\t\t\t\t\tcode: -32000,\n\t\t\t\t\t\t\tmessage: err instanceof Error ? err.message : String(err),\n\t\t\t\t\t\t},\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\t\t\tcase \"prompts/list\": {\n\t\t\t\tconst promptsList = this.liopServer.listPrompts();\n\n\t\t\t\t// [Token Economy] Record prompts/list telemetry\n\t\t\t\tconst plTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\tconst plPayload = JSON.stringify(promptsList);\n\t\t\t\tplTelemetry.record({\n\t\t\t\t\ttype: \"prompt_list\",\n\t\t\t\t\tmethod: \"prompts/list\",\n\t\t\t\t\testimatedInputTokens: 0,\n\t\t\t\t\testimatedOutputTokens: plTelemetry.countTokens(plPayload),\n\t\t\t\t});\n\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\tresult: { prompts: promptsList },\n\t\t\t\t};\n\t\t\t}\n\t\t\tcase \"prompts/get\": {\n\t\t\t\tconst typedParams = params as\n\t\t\t\t\t| { name?: string; arguments?: Record<string, string> }\n\t\t\t\t\t| undefined;\n\t\t\t\tif (!typedParams?.name)\n\t\t\t\t\treturn {\n\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\tid,\n\t\t\t\t\t\terror: { code: -32602, message: \"Missing prompt name\" },\n\t\t\t\t\t};\n\t\t\t\ttry {\n\t\t\t\t\tconst pgStartTime = Date.now();\n\t\t\t\t\tconst result = await this.liopServer.getPrompt({\n\t\t\t\t\t\tname: typedParams.name as string,\n\t\t\t\t\t\targuments: typedParams.arguments || {},\n\t\t\t\t\t});\n\n\t\t\t\t\t// [Token Economy] Record prompts/get telemetry\n\t\t\t\t\tconst pgTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\t\tconst pgInputPayload = JSON.stringify({\n\t\t\t\t\t\tname: typedParams.name,\n\t\t\t\t\t\targuments: typedParams.arguments,\n\t\t\t\t\t});\n\t\t\t\t\tconst pgOutputPayload = JSON.stringify(result);\n\t\t\t\t\tpgTelemetry.record({\n\t\t\t\t\t\ttype: \"prompt_get\",\n\t\t\t\t\t\tmethod: \"prompts/get\",\n\t\t\t\t\t\ttoolName: typedParams.name,\n\t\t\t\t\t\testimatedInputTokens: pgTelemetry.countTokens(pgInputPayload),\n\t\t\t\t\t\testimatedOutputTokens: pgTelemetry.countTokens(pgOutputPayload),\n\t\t\t\t\t\tdurationMs: Date.now() - pgStartTime,\n\t\t\t\t\t});\n\n\t\t\t\t\treturn { jsonrpc: \"2.0\", id, result };\n\t\t\t\t} catch (err: unknown) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\tid,\n\t\t\t\t\t\terror: {\n\t\t\t\t\t\t\tcode: -32000,\n\t\t\t\t\t\t\tmessage: err instanceof Error ? err.message : String(err),\n\t\t\t\t\t\t},\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\t\t\tdefault:\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\terror: { code: -32601, message: `Method not found: ${method}` },\n\t\t\t\t};\n\t\t}\n\t}\n\n\t/**\n\t * MCP clients often send notifications/initialized then immediately tools/list.\n\t * Start manifest discovery without blocking the notification handler.\n\t */\n\tprivate kickDiscoveryAfterInitialized(): Promise<void> {\n\t\treturn (async () => {\n\t\t\tawait new Promise((r) => setTimeout(r, 250));\n\t\t\tawait Promise.race([\n\t\t\t\tthis.refreshManifestCache(true),\n\t\t\t\tnew Promise<void>((r) => setTimeout(r, 15_000)),\n\t\t\t]).catch(() => {});\n\t\t})();\n\t}\n\n\t/**\n\t * Discovers and caches manifests from all remote LIOP providers in the mesh.\n\t * Uses Kademlia DHT to find \"liop:manifest\" providers, then opens\n\t * /liop/manifest/1.0.0 protocol streams to retrieve their full metadata.\n\t */\n\tpublic async refreshManifestCache(silent = false): Promise<void> {\n\t\tif (!this.meshNode) return;\n\t\tif (this.currentDiscovery) return this.currentDiscovery;\n\n\t\t// Fast-path: Skip DHT query entirely when cache is fresh and populated.\n\t\t// Only background polls (silent=true) should bypass this to detect new nodes.\n\t\t// Foreground requests (tools/list, tools/call) can safely reuse valid cache.\n\t\tif (!silent && this.manifestCache.size > 0) {\n\t\t\tconst now = Date.now();\n\t\t\tconst allFresh = Array.from(this.manifestCache.values()).every(\n\t\t\t\t({ cachedAt }) => now - cachedAt < MANIFEST_CACHE_TTL_S * 1000,\n\t\t\t);\n\t\t\tif (allFresh) return;\n\t\t}\n\n\t\tthis.currentDiscovery = (async () => {\n\t\t\ttry {\n\t\t\t\tconst prevCount = Array.from(this.manifestCache.values()).reduce(\n\t\t\t\t\t(acc, { manifest }) => acc + manifest.tools.length,\n\t\t\t\t\t0,\n\t\t\t\t);\n\n\t\t\t\t// Phase 0: Wait for at least one active connection if mesh is empty (Cold Start)\n\t\t\t\tif (this.manifestCache.size === 0) {\n\t\t\t\t\tfor (let i = 0; i < 3; i++) {\n\t\t\t\t\t\tconst connections =\n\t\t\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: access internal nodes for connection count\n\t\t\t\t\t\t\t(this.meshNode as any).node?.getConnections().length || 0;\n\t\t\t\t\t\tif (connections > 0) {\n\t\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t\t`[LIOP-Router] P2P Connection established. Starting discovery...`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\t}\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Waiting for P2P connections (attempt ${i + 1}/10)...`,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tawait new Promise((r) => setTimeout(r, 1000));\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\t// Phase 1: Try DHT discovery + Fallback loop\n\t\t\t\tlet providerIds: string[] = [];\n\t\t\t\tconst MAX_COLD_ATTEMPTS = this.manifestCache.size === 0 ? 5 : 1;\n\n\t\t\t\tfor (\n\t\t\t\t\tlet coldAttempt = 0;\n\t\t\t\t\tcoldAttempt < MAX_COLD_ATTEMPTS;\n\t\t\t\t\tcoldAttempt++\n\t\t\t\t) {\n\t\t\t\t\t// 1.1 Try DHT discovery\n\t\t\t\t\tfor (\n\t\t\t\t\t\tlet attempt = 0;\n\t\t\t\t\t\tattempt < MANIFEST_DISCOVERY_RETRIES;\n\t\t\t\t\t\tattempt++\n\t\t\t\t\t) {\n\t\t\t\t\t\tproviderIds =\n\t\t\t\t\t\t\t(await this.meshNode?.discoverManifestProviders()) || [];\n\t\t\t\t\t\tconst selfId = this.meshNode?.getPeerId();\n\t\t\t\t\t\tconst remoteIds = providerIds.filter((id) => id !== selfId);\n\t\t\t\t\t\tif (remoteIds.length > 0) break;\n\t\t\t\t\t\tif (attempt < MANIFEST_DISCOVERY_RETRIES - 1) {\n\t\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t\t`[LIOP-Router] DHT discovery attempt ${attempt + 1}/${MANIFEST_DISCOVERY_RETRIES}...`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tawait new Promise((r) => setTimeout(r, 1000));\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\n\t\t\t\t\t// 1.2 Aggressively merge all active connections to bypass DHT propagation delays\n\t\t\t\t\tconst activePeers =\n\t\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: access internal nodes\n\t\t\t\t\t\t(this.meshNode as any).node\n\t\t\t\t\t\t\t?.getConnections()\n\t\t\t\t\t\t\t.map((c: { remotePeer: { toString: () => string } }) =>\n\t\t\t\t\t\t\t\tc.remotePeer.toString(),\n\t\t\t\t\t\t\t) || [];\n\n\t\t\t\t\tif (activePeers.length > 0) {\n\t\t\t\t\t\tproviderIds = Array.from(new Set([...providerIds, ...activePeers]));\n\t\t\t\t\t}\n\n\t\t\t\t\tconst selfIdEnd = this.meshNode?.getPeerId();\n\t\t\t\t\tconst remoteIdsEnd = providerIds.filter((id) => id !== selfIdEnd);\n\t\t\t\t\tif (remoteIdsEnd.length > 0) break;\n\n\t\t\t\t\tif (coldAttempt < MAX_COLD_ATTEMPTS - 1) {\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Initial discovery failed (0 providers). Retrying in 1s (${coldAttempt + 1}/${MAX_COLD_ATTEMPTS})...`,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tawait new Promise((r) => setTimeout(r, 1000));\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\tif (providerIds.length === 0) {\n\t\t\t\t\tlog.info(\n\t\t\t\t\t\t`[LIOP-Router] No manifest providers found after all attempts.`,\n\t\t\t\t\t);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\n\t\t\t\tif (!silent) {\n\t\t\t\t\tlog.info(\n\t\t\t\t\t\t`[LIOP-Router] Discovered ${providerIds.length} candidate manifest providers`,\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\t// Prioritize already-connected peers to avoid blocking on stale providers.\n\t\t\t\t// This improves first tools/list latency on Linux/Ubuntu while preserving\n\t\t\t\t// full discovery for slower peers in subsequent refresh cycles.\n\t\t\t\tconst connectedPeers = new Set<string>(\n\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: internal node access for fast peer ordering\n\t\t\t\t\t((this.meshNode as any).node?.getConnections?.() || []).map(\n\t\t\t\t\t\t(c: { remotePeer: { toString: () => string } }) =>\n\t\t\t\t\t\t\tc.remotePeer.toString(),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t\tproviderIds = [...providerIds].sort((a, b) => {\n\t\t\t\t\tconst aConnected = connectedPeers.has(a) ? 1 : 0;\n\t\t\t\t\tconst bConnected = connectedPeers.has(b) ? 1 : 0;\n\t\t\t\t\treturn bConnected - aConnected;\n\t\t\t\t});\n\n\t\t\t\tlet successCount = 0;\n\t\t\t\tlet errorCount = 0;\n\t\t\t\tlet cacheUpdated = false;\n\n\t\t\t\t// Filter peers eligible for querying\n\t\t\t\tconst selfId = this.meshNode?.getPeerId();\n\t\t\t\tconst eligiblePeers = providerIds.filter((peerId) => {\n\t\t\t\t\tif (!this.meshNode) return false;\n\t\t\t\t\tif (peerId === selfId) return false;\n\t\t\t\t\tif (this.shouldSkipManifestQuery(peerId)) return false;\n\t\t\t\t\tconst cached = this.manifestCache.get(peerId);\n\t\t\t\t\tif (\n\t\t\t\t\t\tcached &&\n\t\t\t\t\t\tDate.now() - cached.cachedAt < MANIFEST_CACHE_TTL_S * 1000\n\t\t\t\t\t) {\n\t\t\t\t\t\tsuccessCount++;\n\t\t\t\t\t\treturn false;\n\t\t\t\t\t}\n\t\t\t\t\treturn true;\n\t\t\t\t});\n\n\t\t\t\t// Parallel manifest queries — eliminates sequential 100ms + retry delays\n\t\t\t\tconst queryResults = await Promise.allSettled(\n\t\t\t\t\teligiblePeers.map(async (peerId) => {\n\t\t\t\t\t\tif (!this.meshNode) return null;\n\t\t\t\t\t\tlog.info(`[LIOP-Router] Querying manifest from: ${peerId}`);\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tpeerId,\n\t\t\t\t\t\t\tmanifest: await this.meshNode.queryManifest(peerId),\n\t\t\t\t\t\t};\n\t\t\t\t\t}),\n\t\t\t\t);\n\n\t\t\t\tfor (const result of queryResults) {\n\t\t\t\t\tif (result.status === \"fulfilled\" && result.value?.manifest) {\n\t\t\t\t\t\tconst { peerId, manifest } = result.value;\n\t\t\t\t\t\tthis.manifestCache.set(peerId, {\n\t\t\t\t\t\t\tmanifest,\n\t\t\t\t\t\t\tcachedAt: Date.now(),\n\t\t\t\t\t\t});\n\t\t\t\t\t\tthis.recordManifestQuerySuccess(peerId);\n\t\t\t\t\t\tcacheUpdated = true;\n\t\t\t\t\t\tsuccessCount++;\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Manifest received from ${peerId} (${manifest.tools.length} tools)`,\n\t\t\t\t\t\t);\n\t\t\t\t\t} else if (result.status === \"fulfilled\" && result.value) {\n\t\t\t\t\t\tthis.recordManifestQueryFailure(result.value.peerId);\n\t\t\t\t\t\terrorCount++;\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Manifest query returned NULL for ${result.value.peerId}`,\n\t\t\t\t\t\t);\n\t\t\t\t\t} else if (result.status === \"rejected\") {\n\t\t\t\t\t\terrorCount++;\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Fatal error querying manifest:`,\n\t\t\t\t\t\t\tresult.reason instanceof Error\n\t\t\t\t\t\t\t\t? result.reason.message\n\t\t\t\t\t\t\t\t: String(result.reason),\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\t// Store discovery stats for LiopMeshStatus diagnostics\n\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: private stats for telemetry\n\t\t\t\t(this as any)._discoveryStats = {\n\t\t\t\t\tcandidates: providerIds.length,\n\t\t\t\t\tsuccess: successCount,\n\t\t\t\t\tfailures: errorCount,\n\t\t\t\t\tlastDiscovery: Date.now(),\n\t\t\t\t};\n\n\t\t\t\tif (cacheUpdated) {\n\t\t\t\t\tconst newCount = Array.from(this.manifestCache.values()).reduce(\n\t\t\t\t\t\t(acc, { manifest }) => acc + manifest.tools.length,\n\t\t\t\t\t\t0,\n\t\t\t\t\t);\n\n\t\t\t\t\tif (newCount !== prevCount && this.onToolsChanged) {\n\t\t\t\t\t\tprocess.stderr.write(\n\t\t\t\t\t\t\t\"[LIOP-Router] Mesh topology updated! Emitting notifications/tools/list_changed.\\n\",\n\t\t\t\t\t\t);\n\t\t\t\t\t\tthis.onToolsChanged();\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t} finally {\n\t\t\t\tthis.currentDiscovery = null;\n\t\t\t}\n\t\t})();\n\n\t\treturn this.currentDiscovery;\n\t}\n\n\t/**\n\t * Returns the current manifest cache size for external telemetry.\n\t * Used by the adaptive polling system to detect topology stabilization.\n\t */\n\tpublic getCacheSize(): number {\n\t\treturn this.manifestCache.size;\n\t}\n\n\t/**\n\t * Returns all remote tools discovered via the manifest protocol.\n\t */\n\tprivate async getRemoteTools(): Promise<\n\t\tArray<{\n\t\t\tname: string;\n\t\t\tdescription?: string;\n\t\t\tinputSchema?: Record<string, unknown>;\n\t\t}>\n\t> {\n\t\tconst EXPECTED_PROVIDERS = Number.parseInt(\n\t\t\tprocess.env.LIOP_EXPECTED_PROVIDERS ?? \"1\",\n\t\t\t10,\n\t\t);\n\n\t\t// [Phase 106] Smart Warm-up with Stabilization Detection\n\t\t// Loops until EXPECTED_PROVIDERS are found, the deadline expires, or\n\t\t// the provider count stabilizes (same count for 3 consecutive checks).\n\t\t// This prevents a ~20s block when a node (e.g. Bank) is absent.\n\t\tif (this.manifestCache.size < EXPECTED_PROVIDERS && this.meshNode) {\n\t\t\tconst initialTimeoutMs = Number.parseInt(\n\t\t\t\tprocess.env.LIOP_INITIAL_DISCOVERY_TIMEOUT_MS ?? \"8000\",\n\t\t\t\t10,\n\t\t\t);\n\t\t\tconst boundedTimeoutMs =\n\t\t\t\tNumber.isFinite(initialTimeoutMs) && initialTimeoutMs > 0\n\t\t\t\t\t? initialTimeoutMs\n\t\t\t\t\t: 12000;\n\n\t\t\tconst deadline = Date.now() + boundedTimeoutMs;\n\t\t\tlet stableCount = 0;\n\t\t\tlet lastCacheSize = -1;\n\n\t\t\twhile (Date.now() < deadline) {\n\t\t\t\tif (this.manifestCache.size >= EXPECTED_PROVIDERS) break;\n\n\t\t\t\tawait Promise.race([\n\t\t\t\t\tthis.refreshManifestCache(true),\n\t\t\t\t\tnew Promise<void>((resolve) => setTimeout(resolve, 3000)),\n\t\t\t\t]).catch(() => {});\n\n\t\t\t\tif (this.manifestCache.size >= EXPECTED_PROVIDERS) break;\n\n\t\t\t\t// Stabilization detection: exit early when provider count plateaus\n\t\t\t\tif (this.manifestCache.size === lastCacheSize) {\n\t\t\t\t\tstableCount++;\n\t\t\t\t\tif (stableCount >= 3 && this.manifestCache.size > 0) {\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Provider count stabilized at ${this.manifestCache.size}/${EXPECTED_PROVIDERS}. Proceeding with available mesh.`,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\t\t\t\t} else {\n\t\t\t\t\tstableCount = 0;\n\t\t\t\t\tlastCacheSize = this.manifestCache.size;\n\t\t\t\t}\n\n\t\t\t\t// Wait before the next iteration to avoid CPU spin\n\t\t\t\tawait new Promise((r) => setTimeout(r, 1000));\n\t\t\t}\n\n\t\t\t// Diagnostic warning for partial mesh availability\n\t\t\tif (this.manifestCache.size < EXPECTED_PROVIDERS) {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] ⚠️ Mesh partially available: ${this.manifestCache.size}/${EXPECTED_PROVIDERS} providers. Some tools may be unavailable. Check Docker containers.`,\n\t\t\t\t);\n\t\t\t\t// Trigger one more background refresh to catch late joiners\n\t\t\t\tthis.refreshManifestCache(true).catch(() => {});\n\t\t\t}\n\t\t}\n\n\t\t// biome-ignore lint/suspicious/noExplicitAny: Tool schema is polymorphic\n\t\tconst tools: any[] = [];\n\t\tconst seenNames = new Set<string>();\n\t\tconst localToolNames = new Set(\n\t\t\tthis.liopServer.listTools().map((t) => t.name),\n\t\t);\n\n\t\tfor (const [peerId, { manifest }] of this.manifestCache.entries()) {\n\t\t\tfor (const tool of manifest.tools) {\n\t\t\t\t// LiopMeshStatus is a local-only diagnostic — skip remote copies\n\t\t\t\tif (tool.name === \"LiopMeshStatus\") continue;\n\n\t\t\t\t// [LIOP-STABILITY] Allow discovery of ALL remote tools.\n\t\t\t\t// MCP Requires unique names per server session.\n\t\t\t\t// In a P2P mesh, multiple nodes might expose the same tool (e.g. LiopMeshStatus).\n\t\t\t\t// We suffix duplicate names with a short peer hash to ensure\n\t\t\t\t// ALL tools from ALL providers are correctly registered and visible.\n\t\t\t\tlet finalName = tool.name;\n\t\t\t\tif (seenNames.has(tool.name) || localToolNames.has(tool.name)) {\n\t\t\t\t\tfinalName = `${tool.name}_${peerId.slice(-4)}`;\n\t\t\t\t}\n\t\t\t\tseenNames.add(finalName);\n\n\t\t\t\tconst providerName = manifest.serverInfo?.name || \"Unknown Provider\";\n\n\t\t\t\t// [SANITIZATION] Create a clean MCP-compliant tool object\n\t\t\t\tconst baseDesc = tool.description || `Remote tool from ${providerName}`;\n\t\t\t\tconst cleanTool: {\n\t\t\t\t\tname: string;\n\t\t\t\t\tdescription: string;\n\t\t\t\t\tinputSchema: Record<string, unknown>;\n\t\t\t\t} = {\n\t\t\t\t\tname: finalName,\n\t\t\t\t\tdescription: mcpCompactToolDescriptions()\n\t\t\t\t\t\t? stripVerboseLiopToolDescription(baseDesc)\n\t\t\t\t\t\t: baseDesc,\n\t\t\t\t\tinputSchema: (tool.inputSchema || {\n\t\t\t\t\t\ttype: \"object\",\n\t\t\t\t\t\tproperties: {},\n\t\t\t\t\t}) as Record<string, unknown>,\n\t\t\t\t};\n\n\t\t\t\t// Ensure inputSchema has the mandatory 'type: object' for MCP compliance\n\t\t\t\tif (\n\t\t\t\t\ttypeof cleanTool.inputSchema === \"object\" &&\n\t\t\t\t\t!cleanTool.inputSchema.type\n\t\t\t\t) {\n\t\t\t\t\tcleanTool.inputSchema.type = \"object\";\n\t\t\t\t}\n\t\t\t\tif (\n\t\t\t\t\ttypeof cleanTool.inputSchema === \"object\" &&\n\t\t\t\t\t!cleanTool.inputSchema.properties\n\t\t\t\t) {\n\t\t\t\t\tcleanTool.inputSchema.properties = {};\n\t\t\t\t}\n\n\t\t\t\tlet blueprint = \"\";\n\t\t\t\tif (manifest.taxonomy) {\n\t\t\t\t\tblueprint = `\\n[LIOP-DOMAIN: ${manifest.taxonomy.domain}]`;\n\t\t\t\t}\n\n\t\t\t\t// LIOP Logic-on-Origin Detection:\n\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: polymorphic input schema\n\t\t\t\tconst properties = (cleanTool.inputSchema.properties || {}) as any;\n\t\t\t\tlet envelopeDoc = \"\";\n\t\t\t\tif (!mcpCompactToolDescriptions() && properties.payload) {\n\t\t\t\t\tenvelopeDoc = `\\n[REQUIRES: LIOP-PROTO-V1 ENVELOPE]`;\n\t\t\t\t}\n\n\t\t\t\t// INDUSTRIAL REPLICATION: Highlight schema adherence blocks\n\t\t\t\tif (\n\t\t\t\t\t!mcpCompactToolDescriptions() &&\n\t\t\t\t\tcleanTool.description.includes(\"STRICT SCHEMA ADHERENCE\")\n\t\t\t\t) {\n\t\t\t\t\tcleanTool.description = cleanTool.description.replace(\n\t\t\t\t\t\t\"STRICT SCHEMA ADHERENCE:\",\n\t\t\t\t\t\t\"[INDUSTRIAL-REQUISITE] STRICT SCHEMA ADHERENCE (MANDATORY):\",\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\tconst originStamp = mcpCompactToolDescriptions()\n\t\t\t\t\t? `\\n(Peer: ${peerId.slice(-8)})${blueprint}`\n\t\t\t\t\t: `\\n(Origin: ${peerId.slice(-8)})${blueprint}${envelopeDoc}`;\n\t\t\t\tcleanTool.description = `${cleanTool.description}${originStamp}`;\n\n\t\t\t\ttools.push(cleanTool);\n\t\t\t}\n\t\t}\n\n\t\treturn tools;\n\t}\n\n\t/**\n\t * Returns all remote resources discovered via the manifest protocol.\n\t */\n\tprivate async getRemoteResources(): Promise<\n\t\tArray<{\n\t\t\tname: string;\n\t\t\turi: string;\n\t\t\tdescription?: string;\n\t\t\tmimeType?: string;\n\t\t}>\n\t> {\n\t\t// Trigger background refresh if not already discovering\n\t\tif (!this.currentDiscovery) {\n\t\t\tthis.refreshManifestCache(true).catch(() => {});\n\t\t}\n\n\t\tconst resources: Array<{\n\t\t\tname: string;\n\t\t\turi: string;\n\t\t\tdescription?: string;\n\t\t\tmimeType?: string;\n\t\t}> = [];\n\t\tconst seenUris = new Set(this.liopServer.listResources().map((r) => r.uri));\n\n\t\tfor (const [peerId, { manifest }] of this.manifestCache.entries()) {\n\t\t\tfor (const resource of manifest.resources) {\n\t\t\t\tif (!seenUris.has(resource.uri)) {\n\t\t\t\t\tconst augmentedResource = { ...resource };\n\t\t\t\t\tconst providerName = manifest.serverInfo?.name || \"Unknown Provider\";\n\n\t\t\t\t\tlet blueprint = \"\";\n\t\t\t\t\tif (manifest.taxonomy) {\n\t\t\t\t\t\tblueprint = `\\n\\n[LIOP Zero-Trust Blueprint]\\nDomain: ${manifest.taxonomy.domain}\\nClearance Tier: ${manifest.taxonomy.clearanceTier}`;\n\t\t\t\t\t\tif (\n\t\t\t\t\t\t\tmanifest.taxonomy.executionTypes &&\n\t\t\t\t\t\t\tmanifest.taxonomy.executionTypes.length > 0\n\t\t\t\t\t\t) {\n\t\t\t\t\t\t\tblueprint += `\\nExecution Types: ${manifest.taxonomy.executionTypes.join(\", \")}`;\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\n\t\t\t\t\tconst originStamp = `\\n\\n[LIOP Zero-Trust Origin]\\nProvider: ${providerName}\\nNetwork ID: ${peerId}${blueprint}`;\n\n\t\t\t\t\t// INDUSTRIAL REPLICATION: Mark schema resources clearly\n\t\t\t\t\tif (augmentedResource.uri.startsWith(\"liop://schema/\")) {\n\t\t\t\t\t\taugmentedResource.name = `[SCHEMA] ${augmentedResource.name}`;\n\t\t\t\t\t\taugmentedResource.description = `[CRITICAL SCHEMA] ${augmentedResource.description || \"Data Dictionary for Zero-Shot Autonomy\"}${originStamp}`;\n\t\t\t\t\t} else {\n\t\t\t\t\t\taugmentedResource.description = augmentedResource.description\n\t\t\t\t\t\t\t? `${augmentedResource.description}${originStamp}`\n\t\t\t\t\t\t\t: originStamp.trim();\n\t\t\t\t\t}\n\n\t\t\t\t\tresources.push(augmentedResource);\n\t\t\t\t\tseenUris.add(resource.uri);\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\treturn resources;\n\t}\n\n\t/**\n\t * Resolves the gRPC target (host:port) AND the peerId for a given tool name\n\t * by searching the manifest cache. Supports exact names and suffixed names.\n\t */\n\tprivate resolveManifestTarget(\n\t\ttoolName: string,\n\t): { peerId: string; originalToolName: string } | null {\n\t\t// 1. Try exact match\n\t\tfor (const [peerId, { manifest }] of this.manifestCache.entries()) {\n\t\t\tconst tool = manifest.tools.find((t) => t.name === toolName);\n\t\t\tif (tool) {\n\t\t\t\treturn {\n\t\t\t\t\tpeerId,\n\t\t\t\t\toriginalToolName: toolName,\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\n\t\t// 2. Try suffixed match (tool_xxxx)\n\t\tconst parts = toolName.split(\"_\");\n\t\tif (parts.length > 1) {\n\t\t\tconst suffix = parts.pop();\n\t\t\tconst baseName = parts.join(\"_\");\n\t\t\tfor (const [peerId, { manifest }] of this.manifestCache.entries()) {\n\t\t\t\tif (peerId.endsWith(suffix || \"\")) {\n\t\t\t\t\tconst tool = manifest.tools.find((t) => t.name === baseName);\n\t\t\t\t\tif (tool) {\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tpeerId,\n\t\t\t\t\t\t\toriginalToolName: baseName,\n\t\t\t\t\t\t};\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\treturn null;\n\t}\n\n\t/**\n\t * Redacts a PeerID for external-facing diagnostics.\n\t * LIOP_DIAGNOSTIC_LEVEL controls verbosity:\n\t * - \"redacted\" (default): truncated to last 8 chars\n\t * - \"full\": complete PeerID (development only)\n\t */\n\tprivate redactPeerId(peerId: string): string {\n\t\tconst level = process.env.LIOP_DIAGNOSTIC_LEVEL || \"redacted\";\n\t\tif (level === \"full\") return peerId;\n\t\treturn `***${peerId.slice(-8)}`;\n\t}\n\n\tprivate async transcodeMcpToLiop(\n\t\tid: string | number | null | undefined,\n\t\tparams: { name: string; arguments?: Record<string, unknown> },\n\t\ttoken?: string,\n\t): Promise<McpResponse | null> {\n\t\tconst toolName = params.name;\n\n\t\t// Intercept the static diagnostic tool\n\t\tif (toolName === \"LiopMeshStatus\") {\n\t\t\t// [INDUSTRIAL-FIX] Proactive warm-up: request a refresh when status is called.\n\t\t\t// This ensures that even if the DHT was cold, the next status call (or tools/list)\n\t\t\t// will have data.\n\t\t\tthis.refreshManifestCache(true).catch(() => {});\n\n\t\t\t// biome-ignore lint/suspicious/noExplicitAny: private stats for telemetry\n\t\t\tconst stats = (this as any)._discoveryStats || {\n\t\t\t\tcandidates: 0,\n\t\t\t\tsuccess: 0,\n\t\t\t\tfailures: 0,\n\t\t\t};\n\t\t\tconst providerCount = this.manifestCache.size;\n\t\t\tconst meshState = this.meshNode ? \"Active\" : \"Offline\";\n\t\t\tconst cachedTools = Array.from(this.manifestCache.values()).reduce(\n\t\t\t\t(acc, { manifest }) => acc + manifest.tools.length,\n\t\t\t\t0,\n\t\t\t);\n\t\t\tconst connections = this.meshNode\n\t\t\t\t? // biome-ignore lint/suspicious/noExplicitAny: access internal nodes\n\t\t\t\t\t(this.meshNode as any).node?.getConnections().length\n\t\t\t\t: 0;\n\n\t\t\tconst bootstrapNodes: string[] =\n\t\t\t\tthis.meshNode &&\n\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: access internal config\n\t\t\t\t(this.meshNode as any).config?.bootstrapNodes\n\t\t\t\t\t? // biome-ignore lint/suspicious/noExplicitAny: access internal config\n\t\t\t\t\t\t(this.meshNode as any).config.bootstrapNodes\n\t\t\t\t\t: [];\n\t\t\tconst bootstrapCount = bootstrapNodes.length;\n\n\t\t\tconst diagLevel = process.env.LIOP_DIAGNOSTIC_LEVEL || \"redacted\";\n\t\t\tconst showBootstraps = diagLevel !== \"minimal\";\n\n\t\t\tconst bootstrapList = showBootstraps\n\t\t\t\t? bootstrapNodes\n\t\t\t\t\t\t.map((addr) => {\n\t\t\t\t\t\t\tconst parts = addr.split(\"/\");\n\t\t\t\t\t\t\tconst id = parts[parts.length - 1];\n\t\t\t\t\t\t\treturn ` • ${id ? id.slice(-8) : \"Unknown\"} (bootstrap)`;\n\t\t\t\t\t\t})\n\t\t\t\t\t\t.join(\"\\n\")\n\t\t\t\t: \"\";\n\n\t\t\tconst routingTableSize = this.meshNode\n\t\t\t\t? // biome-ignore lint/suspicious/noExplicitAny: access internal nodes\n\t\t\t\t\t(this.meshNode as any).getRoutingTableSize()\n\t\t\t\t: 0;\n\n\t\t\tconst rawPeerId = this.meshNode?.getPeerId() || \"Offline\";\n\t\t\tconst localPeerId =\n\t\t\t\trawPeerId === \"Offline\" ? rawPeerId : this.redactPeerId(rawPeerId);\n\n\t\t\tconst cachedToolList = Array.from(this.manifestCache.entries())\n\t\t\t\t.flatMap(([peerId, { manifest }]) =>\n\t\t\t\t\tmanifest.tools.map(\n\t\t\t\t\t\t(t) => ` • ${t.name} (from origin: ${this.redactPeerId(peerId)})`,\n\t\t\t\t\t),\n\t\t\t\t)\n\t\t\t\t.join(\"\\n\");\n\n\t\t\tconst statusText = [\n\t\t\t\t`LIOP Mesh Status: ${meshState === \"Active\" ? \"Active\" : \"Offline\"}`,\n\t\t\t\t`Local Agent Identity: ${localPeerId}`,\n\t\t\t\t`Network: ${connections} Conns | ${routingTableSize} Mesh Nodes | ${bootstrapCount} Bootstraps`,\n\t\t\t\tshowBootstraps && bootstrapCount > 0\n\t\t\t\t\t? `\\nActive Bootstraps:\\n${bootstrapList}\\n`\n\t\t\t\t\t: \"\",\n\t\t\t\t`Discovery: ${stats.candidates} Candidates | ${stats.success} OK | ${stats.failures} FAIL`,\n\t\t\t\t`Tooling: ${providerCount} Providers | ${cachedTools} Total Remote Tools`,\n\t\t\t\tcachedTools > 0\n\t\t\t\t\t? `\\nDiscovered Remote Tools (Zero-Trust Origins):\\n${cachedToolList}`\n\t\t\t\t\t: \"\\nNo remote tools discovered yet.\",\n\t\t\t\t// [Token Economy] Telemetry block (only appears when operations exist)\n\t\t\t\tTokenTelemetryEngine.getInstance().formatStatusBlock(),\n\t\t\t]\n\t\t\t\t.filter((line) => line !== \"\")\n\t\t\t\t.join(\"\\n\");\n\n\t\t\t// [Token Economy] Record diagnostic output telemetry\n\t\t\tconst diagTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\tdiagTelemetry.record({\n\t\t\t\ttype: \"diagnostic\",\n\t\t\t\tmethod: \"tools/call\",\n\t\t\t\ttoolName: \"LiopMeshStatus\",\n\t\t\t\testimatedInputTokens: 0,\n\t\t\t\testimatedOutputTokens: diagTelemetry.countTokens(statusText),\n\t\t\t});\n\n\t\t\treturn {\n\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\tid,\n\t\t\t\tresult: {\n\t\t\t\t\tcontent: [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\ttext: statusText,\n\t\t\t\t\t\t},\n\t\t\t\t\t],\n\t\t\t\t},\n\t\t\t};\n\t\t}\n\n\t\tconst isLocal = this.liopServer\n\t\t\t.listTools()\n\t\t\t.some((t) => t.name === toolName);\n\n\t\tif (!isLocal && this.meshNode) {\n\t\t\t// Phase 1: Cache-first — resolve directly from cached manifests (zero-latency)\n\t\t\t// Per MCP spec, tools don't change between notifications/tools/list_changed.\n\t\t\tlet target = this.resolveManifestTarget(toolName);\n\n\t\t\t// Phase 2: If not cached, trigger DHT refresh and retry\n\t\t\tif (!target) {\n\t\t\t\tawait this.refreshManifestCache();\n\t\t\t\ttarget = this.resolveManifestTarget(toolName);\n\t\t\t}\n\n\t\t\tif (target) {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] Resolved ${toolName} via manifest cache (Peer: ${target.peerId}, Original: ${target.originalToolName})`,\n\t\t\t\t);\n\n\t\t\t\t// Proactive auth check: block locally if the remote node requires authentication\n\t\t\t\t// and no token can be resolved — avoids unnecessary network calls to resolvePeer/gRPC\n\t\t\t\tconst manifestEntry = this.manifestCache.get(target.peerId);\n\t\t\t\tlet effectiveToken = token;\n\t\t\t\tif (manifestEntry?.manifest.authRequired) {\n\t\t\t\t\tconst resolvedToken =\n\t\t\t\t\t\ttoken || (await this.getOrAcquireMeshAgentToken(target.peerId));\n\t\t\t\t\tif (!resolvedToken) {\n\t\t\t\t\t\tconst providerName =\n\t\t\t\t\t\t\tmanifestEntry.manifest.serverInfo?.name?.toLowerCase() ||\n\t\t\t\t\t\t\t\"unknown\";\n\t\t\t\t\t\tconst slug = manifestEntry.manifest.tokenSlug;\n\t\t\t\t\t\tconst shortId = target.peerId.slice(-8).toUpperCase();\n\t\t\t\t\t\tconst primaryVar = slug\n\t\t\t\t\t\t\t? `LIOP_TOKEN_${slug}`\n\t\t\t\t\t\t\t: `LIOP_TOKEN_${providerName.toUpperCase().replace(/[^A-Z0-9_]/g, \"_\")}`;\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\tresult: {\n\t\t\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\t\t\t\ttext: `Authentication Required: The restricted node (${providerName}) requires an access token. Please define the ${primaryVar} or LIOP_TOKEN_${shortId} environment variable on your agent/client host.`,\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\tisError: true,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t};\n\t\t\t\t\t}\n\t\t\t\t\t// Forward the resolved token instead of the original (potentially undefined) caller token\n\t\t\t\t\teffectiveToken = resolvedToken;\n\t\t\t\t}\n\n\t\t\t\treturn this.routeToRemoteProvider(\n\t\t\t\t\tid,\n\t\t\t\t\ttarget.originalToolName,\n\t\t\t\t\ttarget.peerId,\n\t\t\t\t\tparams,\n\t\t\t\t\teffectiveToken,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\t// Phase 2: Try DHT-based dynamic provider discovery (fallback for unsuffixed names)\n\t\t\tlet providers: string[] = [];\n\t\t\tfor (let i = 0; i < 3; i++) {\n\t\t\t\tproviders = await this.meshNode.findProviders(toolName);\n\t\t\t\tif (providers.length > 0) break;\n\t\t\t\tif (i < 2) await new Promise((r) => setTimeout(r, 1000));\n\t\t\t}\n\n\t\t\tif (providers.length > 0) {\n\t\t\t\treturn this.routeToRemoteProvider(\n\t\t\t\t\tid,\n\t\t\t\t\ttoolName,\n\t\t\t\t\tproviders[0],\n\t\t\t\t\tparams,\n\t\t\t\t\ttoken,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\n\t\t// If no remote provider found, try local execution\n\t\tif (isLocal) {\n\t\t\ttry {\n\t\t\t\tconst localStartTime = Date.now();\n\t\t\t\tconst result = await this.liopServer.callTool({\n\t\t\t\t\tname: toolName,\n\t\t\t\t\targuments: params.arguments || {},\n\t\t\t\t});\n\n\t\t\t\t// [Token Economy] Record local tool call telemetry\n\t\t\t\tconst localTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\tconst localInputPayload = JSON.stringify(params.arguments || {});\n\t\t\t\tconst localOutputPayload = JSON.stringify(result);\n\t\t\t\tlocalTelemetry.record({\n\t\t\t\t\ttype: \"tool_call\",\n\t\t\t\t\tmethod: \"tools/call\",\n\t\t\t\t\ttoolName,\n\t\t\t\t\testimatedInputTokens: localTelemetry.countTokens(localInputPayload),\n\t\t\t\t\testimatedOutputTokens: localTelemetry.countTokens(localOutputPayload),\n\t\t\t\t\tdurationMs: Date.now() - localStartTime,\n\t\t\t\t});\n\n\t\t\t\treturn { jsonrpc: \"2.0\", id, result };\n\t\t\t} catch (err: unknown) {\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\terror: {\n\t\t\t\t\t\tcode: -32000,\n\t\t\t\t\t\tmessage: err instanceof Error ? err.message : String(err),\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\n\t\treturn {\n\t\t\tjsonrpc: \"2.0\",\n\t\t\tid,\n\t\t\terror: {\n\t\t\t\tcode: -32002,\n\t\t\t\tmessage: `No provider found for tool: ${toolName}. Ensure the provider node is active and connected to the mesh.`,\n\t\t\t},\n\t\t};\n\t}\n\n\tprivate async routeToRemoteProvider(\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t\tid: any,\n\t\ttoolName: string,\n\t\tpeerId: string,\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t\tparams: any,\n\t\ttoken?: string,\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t): Promise<any> {\n\t\tif (!this.meshNode)\n\t\t\treturn {\n\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\tid,\n\t\t\t\terror: { code: -32603, message: \"Mesh Node inactive\" },\n\t\t\t};\n\n\t\t// Dynamic gRPC port resolution from manifest cache\n\t\tlet manifestEntry = this.manifestCache.get(peerId);\n\t\tlet grpcPort = this.defaultRpcPort;\n\n\t\tif (manifestEntry) {\n\t\t\tgrpcPort = manifestEntry.manifest.grpcPort;\n\t\t} else {\n\t\t\t// Try to query the manifest directly\n\t\t\tconst manifest = await this.meshNode.queryManifest(peerId);\n\t\t\tif (manifest) {\n\t\t\t\tgrpcPort = manifest.grpcPort;\n\t\t\t\tthis.manifestCache.set(peerId, {\n\t\t\t\t\tmanifest,\n\t\t\t\t\tcachedAt: Date.now(),\n\t\t\t\t});\n\t\t\t\tmanifestEntry = this.manifestCache.get(peerId);\n\t\t\t}\n\t\t}\n\n\t\t// Docker Demo convenience (opt-in):\n\t\t// Docker Desktop setups publish gRPC ports on the host as 13011/13021/13031.\n\t\t// Container-internal gRPC ports (50051) are unreachable from the host.\n\t\t// Activated by any Docker-mapping flag: LIOP_DOCKER_MAP, LIOP_DEV_MODE,\n\t\t// LIOP_USE_PUBLISHED_GRPC_PORTS, or NODE_ENV=development/test.\n\t\tconst shouldRemapGrpcPorts =\n\t\t\tprocess.env.LIOP_USE_PUBLISHED_GRPC_PORTS === \"1\" ||\n\t\t\tprocess.env.LIOP_DOCKER_MAP === \"true\" ||\n\t\t\tprocess.env.LIOP_DEV_MODE === \"true\" ||\n\t\t\tprocess.env.NODE_ENV === \"development\" ||\n\t\t\tprocess.env.NODE_ENV === \"test\";\n\t\tif (shouldRemapGrpcPorts && manifestEntry) {\n\t\t\tconst providerName =\n\t\t\t\tmanifestEntry.manifest.serverInfo?.name?.toLowerCase() || \"\";\n\t\t\tif (providerName.includes(\"vault\")) grpcPort = 13011;\n\t\t\telse if (providerName.includes(\"bank\")) grpcPort = 13021;\n\t\t\telse if (providerName.includes(\"oracle\")) grpcPort = 13031;\n\t\t}\n\n\t\t// Resolve IP from active connections\n\t\tconst addrs = await this.meshNode.resolvePeer(peerId);\n\t\tlet targetAddr: string | null = null;\n\n\t\t// [LIOP-ALPHA] Check if the peer is running on the same physical machine\n\t\t// by comparing its advertised IPs against our local OS interfaces.\n\t\tconst os = await import(\"node:os\");\n\t\tconst localInterfaces = Object.values(os.networkInterfaces())\n\t\t\t.flat()\n\t\t\t.filter((i) => i?.family === \"IPv4\")\n\t\t\t.map((i) => i?.address);\n\n\t\t// Loop through all advertised addresses to find the optimal target\n\t\tfor (const addr of addrs) {\n\t\t\tconst parts = addr.split(\"/\");\n\t\t\tconst ipIdx = parts.indexOf(\"ip4\");\n\t\t\tif (ipIdx !== -1) {\n\t\t\t\tconst advertisedIp = parts[ipIdx + 1];\n\n\t\t\t\t// Loopback priority or Same-Machine detection\n\t\t\t\tif (\n\t\t\t\t\tadvertisedIp === \"127.0.0.1\" ||\n\t\t\t\t\tlocalInterfaces.includes(advertisedIp)\n\t\t\t\t) {\n\t\t\t\t\ttargetAddr = `127.0.0.1:${grpcPort}`;\n\t\t\t\t\tbreak; // Supreme priority for local execution\n\t\t\t\t}\n\n\t\t\t\t// Default to first discovered valid external IP\n\t\t\t\tif (!targetAddr) {\n\t\t\t\t\ttargetAddr = `${advertisedIp}:${grpcPort}`;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tif (!targetAddr) {\n\t\t\t// Fallback to localhost with the dynamically resolved port\n\t\t\ttargetAddr = `127.0.0.1:${grpcPort}`;\n\t\t}\n\n\t\tlog.info(\n\t\t\t`[LIOP-Router] Dynamic route: ${toolName} -> ${targetAddr} (PeerID: ${peerId})`,\n\t\t);\n\n\t\tconst remoteClient = new liopV1.LogicMesh(\n\t\t\ttargetAddr,\n\t\t\tcreateChannelCredentials(),\n\t\t);\n\t\treturn this.performTranscoding(\n\t\t\tid,\n\t\t\tremoteClient,\n\t\t\ttoolName,\n\t\t\tparams,\n\t\t\tpeerId,\n\t\t\ttoken,\n\t\t);\n\t}\n\n\t/** Cached M2M token for dynamic gateway-to-node routing */\n\tprivate meshAgentToken?: string;\n\n\t/**\n\t * Dynamically acquires an M2M access token from the Nexus Authorization Server.\n\t * If peerId is provided, checks if there are node-specific environment tokens\n\t * before falling back to the global static token or Nexus acquisition.\n\t */\n\tprivate async getOrAcquireMeshAgentToken(\n\t\tpeerId?: string,\n\t): Promise<string | undefined> {\n\t\tif (peerId) {\n\t\t\tconst manifestEntry = this.manifestCache.get(peerId);\n\t\t\tconst providerName =\n\t\t\t\tmanifestEntry?.manifest.serverInfo?.name?.toLowerCase() || \"\";\n\n\t\t\tlet nodeToken: string | undefined;\n\n\t\t\t// 0. Deterministic tokenSlug resolution (highest priority, zero heuristic)\n\t\t\tconst slug = manifestEntry?.manifest.tokenSlug;\n\t\t\tif (slug) {\n\t\t\t\tconst envKey = `LIOP_TOKEN_${slug}`;\n\t\t\t\tnodeToken =\n\t\t\t\t\tprocess.env[envKey] || process.env[`LIOP_OAUTH_TOKEN_${slug}`];\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] Step0 tokenSlug=${slug} envKey=${envKey} found=${!!nodeToken} peer=${peerId.slice(-8)}`,\n\t\t\t\t);\n\t\t\t} else {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] Step0 tokenSlug=MISSING (manifest has no tokenSlug) peer=${peerId.slice(-8)} provider=${providerName}`,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\t// 1. PeerID-specific resolution: LIOP_TOKEN_<last 8 chars of PeerID in uppercase>\n\t\t\tif (!nodeToken) {\n\t\t\t\tconst shortId = peerId.slice(-8).toUpperCase();\n\t\t\t\tnodeToken =\n\t\t\t\t\tprocess.env[`LIOP_TOKEN_${shortId}`] ||\n\t\t\t\t\tprocess.env[`LIOP_OAUTH_TOKEN_${shortId}`];\n\t\t\t}\n\n\t\t\t// 2. Provider-name resolution: LIOP_TOKEN_<CLEAN_PROVIDER_NAME_UPPERCASE>\n\t\t\tif (!nodeToken && providerName) {\n\t\t\t\tconst cleanName = providerName\n\t\t\t\t\t.toUpperCase()\n\t\t\t\t\t.replace(/[^A-Z0-9_]/g, \"_\");\n\t\t\t\tnodeToken =\n\t\t\t\t\tprocess.env[`LIOP_TOKEN_${cleanName}`] ||\n\t\t\t\t\tprocess.env[`LIOP_OAUTH_TOKEN_${cleanName}`];\n\t\t\t}\n\n\t\t\tif (nodeToken) {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] Resolved node-specific token for peer ${peerId.slice(-8)} (${providerName || \"unknown\"})`,\n\t\t\t\t);\n\t\t\t\treturn nodeToken;\n\t\t\t}\n\t\t}\n\n\t\tif (this.meshAgentToken) return this.meshAgentToken;\n\n\t\t// Support static pre-generated Access Tokens from environment\n\t\tconst staticToken = process.env.LIOP_OAUTH_TOKEN || process.env.LIOP_TOKEN;\n\t\tif (staticToken) {\n\t\t\tthis.meshAgentToken = staticToken;\n\t\t\treturn this.meshAgentToken;\n\t\t}\n\n\t\tconst nexusUrl = process.env.LIOP_NEXUS_URL;\n\t\tif (!nexusUrl) return undefined;\n\n\t\tconst clientId =\n\t\t\tprocess.env.LIOP_OAUTH_CLIENT_ID ||\n\t\t\tprocess.env.LIOP_CLIENT_ID ||\n\t\t\t\"liop-mesh-agent\";\n\t\tconst clientSecret =\n\t\t\tprocess.env.LIOP_OAUTH_CLIENT_SECRET ||\n\t\t\tprocess.env.LIOP_CLIENT_SECRET ||\n\t\t\t\"dev-secret-change-me\";\n\t\tconst audience =\n\t\t\tprocess.env.LIOP_OAUTH_AUDIENCE ||\n\t\t\tprocess.env.LIOP_AUDIENCE ||\n\t\t\t\"urn:liop:mesh:api\";\n\n\t\ttry {\n\t\t\tconst baseUrl = nexusUrl.endsWith(\"/oidc\")\n\t\t\t\t? nexusUrl\n\t\t\t\t: `${nexusUrl}/oidc`;\n\t\t\tconst tokenUrl = `${baseUrl}/token`;\n\t\t\tlog.info(\n\t\t\t\t`[LIOP-Router] Proactively acquiring M2M token from Nexus: ${tokenUrl}`,\n\t\t\t);\n\n\t\t\tconst params = new URLSearchParams({\n\t\t\t\tgrant_type: \"client_credentials\",\n\t\t\t\tscope:\n\t\t\t\t\t\"liop:tools:call liop:tools:list liop:resources:read liop:schema:read liop:mesh:query\",\n\t\t\t\tresource: audience,\n\t\t\t\tclient_id: clientId,\n\t\t\t\tclient_secret: clientSecret,\n\t\t\t});\n\n\t\t\tconst response = await fetch(tokenUrl, {\n\t\t\t\tmethod: \"POST\",\n\t\t\t\theaders: {\n\t\t\t\t\t\"Content-Type\": \"application/x-www-form-urlencoded\",\n\t\t\t\t},\n\t\t\t\tbody: params.toString(),\n\t\t\t});\n\n\t\t\tif (!response.ok) {\n\t\t\t\tconst text = await response.text();\n\t\t\t\tlog.warn(\n\t\t\t\t\t`[LIOP-Router] M2M Token acquisition failed: ${response.status} ${text}`,\n\t\t\t\t);\n\t\t\t\treturn undefined;\n\t\t\t}\n\n\t\t\tconst data = (await response.json()) as { access_token: string };\n\t\t\tif (data.access_token) {\n\t\t\t\tthis.meshAgentToken = data.access_token;\n\t\t\t\tlog.info(\n\t\t\t\t\t\"[LIOP-Router] M2M Token acquired successfully for router routing.\",\n\t\t\t\t);\n\t\t\t\treturn this.meshAgentToken;\n\t\t\t}\n\t\t} catch (err: unknown) {\n\t\t\tlog.warn(\n\t\t\t\t`[LIOP-Router] Failed to acquire M2M token: ${\n\t\t\t\t\terr instanceof Error ? err.message : String(err)\n\t\t\t\t}`,\n\t\t\t);\n\t\t}\n\t\treturn undefined;\n\t}\n\n\tprivate async performTranscoding(\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t\tid: any,\n\t\t// biome-ignore lint/suspicious/noExplicitAny: gRPC client from dynamic proto-loader\n\t\tclient: any,\n\t\ttoolName: string,\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t\tparams: any,\n\t\tpeerId?: string,\n\t\ttoken?: string,\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t): Promise<any> {\n\t\tconst capabilityHash = toolName;\n\t\tconst proofOfIntent = this.meshNode\n\t\t\t? await this.meshNode.sign(Buffer.from(capabilityHash))\n\t\t\t: Buffer.from([]);\n\n\t\tconst transcodingStartTime = Date.now();\n\n\t\t// Auto-acquire self-identity M2M token if client did not supply one but a Nexus AS is configured\n\t\tlet activeToken = token;\n\t\tif (!activeToken) {\n\t\t\tactiveToken = await this.getOrAcquireMeshAgentToken(peerId);\n\t\t}\n\n\t\tif (peerId) {\n\t\t\tconst manifestEntry = this.manifestCache.get(peerId);\n\t\t\tif (manifestEntry?.manifest.authRequired && !activeToken) {\n\t\t\t\tconst providerName =\n\t\t\t\t\tmanifestEntry.manifest.serverInfo?.name?.toLowerCase() || \"unknown\";\n\t\t\t\tconst slug = manifestEntry.manifest.tokenSlug;\n\t\t\t\tconst shortId = peerId.slice(-8).toUpperCase();\n\t\t\t\tconst primaryVar = slug\n\t\t\t\t\t? `LIOP_TOKEN_${slug}`\n\t\t\t\t\t: `LIOP_TOKEN_${providerName.toUpperCase().replace(/[^A-Z0-9_]/g, \"_\")}`;\n\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\tresult: {\n\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\t\ttext: `Authentication Required: The restricted node (${providerName}) requires an access token. Please define the ${primaryVar} or LIOP_TOKEN_${shortId} environment variable on your agent/client host.`,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t],\n\t\t\t\t\t\tisError: true,\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\n\t\treturn new Promise((resolve) => {\n\t\t\tconst metadata = new grpc.Metadata();\n\t\t\tif (activeToken) {\n\t\t\t\tmetadata.add(\"authorization\", `Bearer ${activeToken}`);\n\t\t\t}\n\n\t\t\tclient.negotiateIntent(\n\t\t\t\t{\n\t\t\t\t\tagent_did: `did:liop:${this.meshNode?.getPeerId() || \"mcp-proxy\"}`,\n\t\t\t\t\tcapability_hash: capabilityHash,\n\t\t\t\t\tproof_of_intent: proofOfIntent,\n\t\t\t\t},\n\t\t\t\tmetadata,\n\t\t\t\tasync (err: Error | null, response: IntentResponse) => {\n\t\t\t\t\tif (err || !response.accepted) {\n\t\t\t\t\t\treturn resolve({\n\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\tresult: {\n\t\t\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\t\t\t\ttext: `PQC Handshake Failed: ${err?.message || \"Rejected\"}`,\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\tisError: true,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t});\n\t\t\t\t\t}\n\n\t\t\t\t\tconst { ciphertext, sharedSecret } =\n\t\t\t\t\t\tawait Kyber768Wrapper.encapsulateAsymmetric(\n\t\t\t\t\t\t\tresponse.kyber_public_key,\n\t\t\t\t\t\t);\n\t\t\t\t\t// SECURITY: Avoid AES-GCM nonce reuse across multiple ciphertexts.\n\t\t\t\t\t// We embed arguments directly into the proxy logic so we only encrypt ONE payload per session/nonce.\n\t\t\t\t\tconst embeddedArgsJson = JSON.stringify(params.arguments || {});\n\t\t\t\t\tconst proxyLogic = `return { \"__liop_proxy_tool\": \"${toolName}\", \"__liop_proxy_args\": ${embeddedArgsJson} };`;\n\t\t\t\t\tconst nonce = crypto.randomBytes(12);\n\n\t\t\t\t\tconst sealedLogic = this.encryptWithNonce(\n\t\t\t\t\t\tBuffer.from(proxyLogic),\n\t\t\t\t\t\tsharedSecret,\n\t\t\t\t\t\tnonce,\n\t\t\t\t\t);\n\n\t\t\t\t\tconst metadataCall = new grpc.Metadata();\n\t\t\t\t\tif (activeToken) {\n\t\t\t\t\t\tmetadataCall.add(\"authorization\", `Bearer ${activeToken}`);\n\t\t\t\t\t}\n\n\t\t\t\t\tconst call = client.executeLogic(\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tsession_token: response.session_token,\n\t\t\t\t\t\t\twasm_binary: new Uint8Array(sealedLogic),\n\t\t\t\t\t\t\tinputs: {},\n\t\t\t\t\t\t\tpqc_ciphertext: ciphertext,\n\t\t\t\t\t\t\taes_nonce: nonce,\n\t\t\t\t\t\t},\n\t\t\t\t\t\tmetadataCall,\n\t\t\t\t\t);\n\n\t\t\t\t\tlet resultBody = \"\";\n\t\t\t\t\tlet lastResponse: LogicResponse | null = null;\n\t\t\t\t\tcall.on(\"data\", (grpcRes: LogicResponse) => {\n\t\t\t\t\t\tresultBody += grpcRes.semantic_evidence;\n\t\t\t\t\t\tlastResponse = grpcRes;\n\t\t\t\t\t});\n\t\t\t\t\tcall.on(\"end\", async () => {\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tif (lastResponse) {\n\t\t\t\t\t\t\t\t// Only verify ZK-Receipt if the remote execution succeeded.\n\t\t\t\t\t\t\t\t// If the remote execution failed due to a policy error (e.g. Egress Shield),\n\t\t\t\t\t\t\t\t// the ZK proof is empty and we should bypass validation to propagate the original error.\n\t\t\t\t\t\t\t\tif (!lastResponse.is_error) {\n\t\t\t\t\t\t\t\t\tconst proofHex = Buffer.from(\n\t\t\t\t\t\t\t\t\t\tlastResponse.cryptographic_proof,\n\t\t\t\t\t\t\t\t\t).toString(\"hex\");\n\t\t\t\t\t\t\t\t\tconst isValid = await this.verifier.verifyZkReceipt(\n\t\t\t\t\t\t\t\t\t\tBuffer.from(proxyLogic),\n\t\t\t\t\t\t\t\t\t\tproofHex,\n\t\t\t\t\t\t\t\t\t\tBuffer.from(lastResponse.zk_receipt),\n\t\t\t\t\t\t\t\t\t\tBuffer.from(sharedSecret),\n\t\t\t\t\t\t\t\t\t);\n\n\t\t\t\t\t\t\t\t\tif (!isValid) {\n\t\t\t\t\t\t\t\t\t\treturn resolve({\n\t\t\t\t\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\t\t\t\tresult: {\n\t\t\t\t\t\t\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\ttext: \"SECURITY ALERT: Remote response failed cryptographic integrity audit.\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\t\t\t\t\tisError: true,\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\n\t\t\t\t\t\t\tconst parsedResult = JSON.parse(resultBody);\n\n\t\t\t\t\t\t\t// [Token Economy] Record remote tool call telemetry\n\t\t\t\t\t\t\tconst remoteTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\t\t\t\tremoteTelemetry.record({\n\t\t\t\t\t\t\t\ttype: \"tool_call\",\n\t\t\t\t\t\t\t\tmethod: \"tools/call\",\n\t\t\t\t\t\t\t\ttoolName,\n\t\t\t\t\t\t\t\tpeerId,\n\t\t\t\t\t\t\t\testimatedInputTokens:\n\t\t\t\t\t\t\t\t\tremoteTelemetry.countTokens(embeddedArgsJson),\n\t\t\t\t\t\t\t\testimatedOutputTokens: remoteTelemetry.countTokens(resultBody),\n\t\t\t\t\t\t\t\tdurationMs: Date.now() - transcodingStartTime,\n\t\t\t\t\t\t\t});\n\n\t\t\t\t\t\t\tresolve({ jsonrpc: \"2.0\", id, result: parsedResult });\n\t\t\t\t\t\t} catch (_e) {\n\t\t\t\t\t\t\tresolve({\n\t\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\tresult: { content: [{ type: \"text\", text: resultBody }] },\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t}\n\t\t\t\t\t});\n\t\t\t\t\tcall.on(\"error\", (e: Error) =>\n\t\t\t\t\t\tresolve({\n\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\tresult: {\n\t\t\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t\t\t{ type: \"text\", text: `LIOP gRPC Error: ${e.message}` },\n\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\tisError: true,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t\t},\n\t\t\t);\n\t\t});\n\t}\n\n\tprivate encryptWithNonce(\n\t\tpayload: Buffer,\n\t\tkey: Uint8Array,\n\t\tnonce: Buffer,\n\t): Buffer {\n\t\tconst cipher = crypto.createCipheriv(\"aes-256-gcm\", key, nonce);\n\t\tconst encrypted = Buffer.concat([cipher.update(payload), cipher.final()]);\n\t\treturn Buffer.concat([encrypted, cipher.getAuthTag()]);\n\t}\n}\n"]}
@@ -1,2 +0,0 @@
1
- export{a as LiopVerifier}from'./chunk-SW53FNSN.js';import'./chunk-ANFXJGMP.js';import'./chunk-S6RJHZV2.js';import'./chunk-4C666HHU.js';//# sourceMappingURL=verifier-Z26UC7M4.js.map
2
- //# sourceMappingURL=verifier-Z26UC7M4.js.map