@nekzus/liop 2.1.0-alpha.4 → 2.1.0-alpha.6

package/dist/chunk-ANFXJGMP.js

@@ -1,2 +0,0 @@
-import e from'crypto';var i=/^\s*@LIOP\{[^}]+\}\n?([\s\S]*?)\n?@END\s*$/;function f(t){let r=t.match(i);return r?.[1]!==void 0?r[1].trim():t.trim()}function c(t){if(t[0]===0&&t[1]===97)return e.createHash("sha256").update(t).digest();let n=Buffer.from(t).toString("utf-8"),s=f(n);return e.createHash("sha256").update(Buffer.from(s,"utf-8")).digest()}export{f as a,c as b};//# sourceMappingURL=chunk-ANFXJGMP.js.map
-//# sourceMappingURL=chunk-ANFXJGMP.js.map

package/dist/chunk-ANFXJGMP.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/crypto/logic-image-id.ts"],"names":["TOP_LEVEL_ENVELOPE","normalizeLogicSource","logicUtf8","match","deriveLogicImageDigest","logicPayload","crypto","text","normalized"],"mappings":"sBAOA,IAAMA,CAAAA,CAAqB,4CAAA,CAEpB,SAASC,CAAAA,CAAqBC,CAAAA,CAA2B,CAC/D,IAAMC,EAAQD,CAAAA,CAAU,KAAA,CAAMF,CAAkB,CAAA,CAChD,OAAIG,CAAAA,GAAQ,CAAC,CAAA,GAAM,MAAA,CACXA,EAAM,CAAC,CAAA,CAAE,IAAA,EAAK,CAEfD,EAAU,IAAA,EAClB,CAGO,SAASE,EAAuBC,CAAAA,CAAkC,CAExE,GADeA,CAAAA,CAAa,CAAC,IAAM,CAAA,EAAQA,CAAAA,CAAa,CAAC,CAAA,GAAM,GAE9D,OAAOC,CAAAA,CAAO,UAAA,CAAW,QAAQ,EAAE,MAAA,CAAOD,CAAY,CAAA,CAAE,MAAA,GAEzD,IAAME,CAAAA,CAAO,MAAA,CAAO,IAAA,CAAKF,CAAY,CAAA,CAAE,QAAA,CAAS,OAAO,CAAA,CACjDG,EAAaP,CAAAA,CAAqBM,CAAI,CAAA,CAC5C,OAAOD,EACL,UAAA,CAAW,QAAQ,CAAA,CACnB,MAAA,CAAO,OAAO,IAAA,CAAKE,CAAAA,CAAY,OAAO,CAAC,CAAA,CACvC,QACH","file":"chunk-ANFXJGMP.js","sourcesContent":["import crypto from \"node:crypto\";\n\n/**\n * Top-level LIOP v1 envelope only. Must NOT use multiline (^/$) mode:\n * proxy logic embeds a full envelope inside JSON strings; `^` per line would\n * incorrectly treat that as the document root and desync ImageID vs the worker.\n */\nconst TOP_LEVEL_ENVELOPE = /^\\s*@LIOP\\{[^}]+\\}\\n?([\\s\\S]*?)\\n?@END\\s*$/;\n\nexport function normalizeLogicSource(logicUtf8: string): string {\n\tconst match = logicUtf8.match(TOP_LEVEL_ENVELOPE);\n\tif (match?.[1] !== undefined) {\n\t\treturn match[1].trim();\n\t}\n\treturn logicUtf8.trim();\n}\n\n/** SHA-256 digest of logic bytes (WASM raw; JS UTF-8 after top-level envelope strip). */\nexport function deriveLogicImageDigest(logicPayload: Uint8Array): Buffer {\n\tconst isWasm = logicPayload[0] === 0x00 && logicPayload[1] === 0x61;\n\tif (isWasm) {\n\t\treturn crypto.createHash(\"sha256\").update(logicPayload).digest();\n\t}\n\tconst text = Buffer.from(logicPayload).toString(\"utf-8\");\n\tconst normalized = normalizeLogicSource(text);\n\treturn crypto\n\t\t.createHash(\"sha256\")\n\t\t.update(Buffer.from(normalized, \"utf-8\"))\n\t\t.digest();\n}\n"]}

package/dist/chunk-CPLE5VZ5.js

@@ -1,33 +0,0 @@
-import {a as a$1}from'./chunk-PWCXZWSE.js';import {a as a$4}from'./chunk-DBXGYHKY.js';import {a as a$2}from'./chunk-SB5XJXKV.js';import {a as a$3,c}from'./chunk-V5MKJT6S.js';import {a}from'./chunk-S6RJHZV2.js';import {metrics}from'@opentelemetry/api';import*as C from'crypto';import*as U from'@grpc/grpc-js';var b=class{name="o200k_base";countFn;constructor(e,s){this.countFn=e,s&&s(1e4);}countTokens(e){return e.length===0?0:this.countFn(e)}},R=class{name="heuristic (chars/4)";countTokens(e){return e.length===0?0:Math.ceil(e.length/4)}};async function V(){try{let T=await import('gpt-tokenizer'),e=new b(T.countTokens,T.setMergeCacheSize);return a.debug("[LIOP-Economy] Token estimator initialized: o200k_base"),e}catch{return a.info("[LIOP-Economy] gpt-tokenizer unavailable, falling back to heuristic estimator"),new R}}function q(){return new R}var Q="@nekzus/liop",Z="1.2.0-alpha.9",X=[1,4,16,64,256,1024,4096,16384,65536,262144,1048576,4194304,16777216,67108864],Y=[.01,.02,.04,.08,.16,.32,.64,1.28,2.56,5.12,10.24,20.48,40.96,81.92],$=class{tokenUsage;operationDuration;active=false;constructor(){try{let e=metrics.getMeter(Q,Z);this.tokenUsage=e.createHistogram("gen_ai.client.token.usage",{description:"Number of tokens used in LIOP Logic-on-Origin operations",unit:"{token}",advice:{explicitBucketBoundaries:X}}),this.operationDuration=e.createHistogram("gen_ai.client.operation.duration",{description:"Duration of LIOP operations",unit:"s",advice:{explicitBucketBoundaries:Y}}),this.active=!0,a.debug("[LIOP-OTel] gen_ai.* metrics bridge initialized");}catch(e){a.debug(`[LIOP-OTel] Bridge disabled: ${e instanceof Error?e.message:String(e)}`);let s={record:()=>{}};this.tokenUsage=s,this.operationDuration=s;}}recordTokens(e,s,o,r){this.tokenUsage.record(e,{"gen_ai.system":"liop","gen_ai.operation.name":o,"gen_ai.token.type":s,"gen_ai.request.model":"liop-mesh",...r?{"liop.tool.name":r}:{}});}recordDuration(e,s,o){this.operationDuration.record(e/1e3,{"gen_ai.system":"liop","gen_ai.operation.name":s,...o?{"error.type":o}:{}});}isActive(){return this.active}};var ee={tools_list:"chat",tool_call:"execute_tool",resource_read:"chat",resource_list:"chat",prompt_get:"chat",prompt_list:"chat",diagnostic:"chat"},I=class T{static instance=null;operations=[];sessionId;startedAt;estimator;otelBridge;constructor(){this.sessionId=crypto.randomUUID(),this.startedAt=Date.now(),this.estimator=q(),this.otelBridge=new $,this.initRealEstimator();}initRealEstimator(){V().then(e=>{this.estimator=e;}).catch(()=>{});}static getInstance(){return T.instance||(T.instance=new T),T.instance}countTokens(e){try{return this.estimator.countTokens(e)}catch{return Math.ceil(e.length/4)}}record(e){let s={...e,timestamp:Date.now()};this.operations.push(s);try{let o=ee[e.type]||"chat";e.estimatedInputTokens>0&&this.otelBridge.recordTokens(e.estimatedInputTokens,"input",o,e.toolName),e.estimatedOutputTokens>0&&this.otelBridge.recordTokens(e.estimatedOutputTokens,"output",o,e.toolName),e.durationMs!==void 0&&this.otelBridge.recordDuration(e.durationMs,o);}catch{}}estimateTokens(e){return this.countTokens(e)}getReport(){return {sessionId:this.sessionId,operations:[...this.operations],totalInputTokens:this.operations.reduce((e,s)=>e+s.estimatedInputTokens,0),totalOutputTokens:this.operations.reduce((e,s)=>e+s.estimatedOutputTokens,0),estimatorName:this.estimator.name,sessionUptimeMs:Date.now()-this.startedAt}}getPerToolReport(){let e=new Map;for(let s of this.operations){let o=s.toolName||s.method,r=e.get(o)||{input:0,output:0,calls:0,avgDurationMs:0},i=r.avgDurationMs*r.calls+(s.durationMs||0),t=r.calls+1;e.set(o,{input:r.input+s.estimatedInputTokens,output:r.output+s.estimatedOutputTokens,calls:t,avgDurationMs:t>0?i/t:0});}return e}formatStatusBlock(){let e=this.getReport();if(e.operations.length===0)return "";let s=this.formatUptime(e.sessionUptimeMs),o=e.totalInputTokens+e.totalOutputTokens,r=new Map;for(let p of e.operations){let h=p.type,g=r.get(h)||{count:0,input:0,output:0};r.set(h,{count:g.count+1,input:g.input+p.estimatedInputTokens,output:g.output+p.estimatedOutputTokens});}let i=Array.from(r.entries()),t=i.map(([p,h],g)=>{let y=g===i.length-1?"\u2502  \u2514\u2500":"\u2502  \u251C\u2500",S=h.output>0?` / ${h.output.toLocaleString()} out`:"";return `${y} ${p} \xD7${h.count} \u2192 ${h.input.toLocaleString()} in${S}`}),n=this.getPerToolReport(),a=Array.from(n.entries()).filter(([p])=>p!=="tools/list"&&p!=="LiopMeshStatus"),m=[];a.length>0&&(m.push("\u251C\u2500 By Tool:"),a.forEach(([p,h],g)=>{let y=g===a.length-1?"\u2502  \u2514\u2500":"\u2502  \u251C\u2500",S=h.output>0?` / ${h.output.toLocaleString()} out`:"",k=h.avgDurationMs>0?` ~${Math.round(h.avgDurationMs)}ms`:"";m.push(`${y} ${p}: ${h.input.toLocaleString()} in${S} (\xD7${h.calls})${k}`);}));let c=e.operations.filter(p=>p.durationMs!==void 0),l=c.length>0?Math.round(c.reduce((p,h)=>p+(h.durationMs||0),0)/c.length):0,u=this.otelBridge.isActive()?"gen_ai.client.token.usage \u2192 active":"disabled";return [`
-Token Economy:`,`\u251C\u2500 Session: ${e.sessionId.slice(0,8)} (${s})`,`\u251C\u2500 Estimator: ${e.estimatorName}`,`\u251C\u2500 Operations: ${e.operations.length}`,...t,`\u251C\u2500 Total: ${e.totalInputTokens.toLocaleString()} in / ${e.totalOutputTokens.toLocaleString()} out (${o.toLocaleString()} combined)`,...m,...l>0?[`\u251C\u2500 Avg Latency: ${l}ms`]:[],`\u2514\u2500 OTel: ${u}`].join(`
-`)}formatUptime(e){let s=Math.floor(e/1e3);if(s<60)return `${s}s`;let o=Math.floor(s/60),r=s%60;if(o<60)return `${o}m ${r}s`;let i=Math.floor(o/60),t=o%60;return `${i}h ${t}m`}reset(){this.operations=[];}static destroy(){T.instance=null;}};function L(){let T=process.env.LIOP_MCP_COMPACT_TOOL_DESCRIPTIONS?.toLowerCase().trim();return !(T==="0"||T==="false"||T==="no")}function D(T){let e=T,s=[`
-
-[LIOP-PROTO-V1:`,`\r
-\r
-[LIOP-PROTO-V1:`,`
-[LIOP-PROTO-V1:`];for(let o of s){let r=e.indexOf(o);if(r!==-1){e=e.slice(0,r);break}}return e.trimEnd()}var K=300,x=5,J=class T{constructor(e,s=null,o=50051){this.liopServer=e;this.meshNode=s;this.defaultRpcPort=o;this.meshNode&&(this.meshNode.registerManifestHandler(()=>{let r=this.liopServer.listTools().map(n=>({name:n.name,description:n.description,inputSchema:n.inputSchema})),i=this.liopServer.listResources().map(n=>({name:n.name,uri:n.uri,description:n.description,mimeType:n.mimeType})),t=this.liopServer.config;return {peerId:this.meshNode?.getPeerId()||"unknown",grpcPort:this.defaultRpcPort,tools:[...r],resources:i,serverInfo:this.liopServer.getServerInfo(),authRequired:this.liopServer.jwtValidator!==void 0,tokenSlug:t?.tokenSlug,taxonomy:t?.taxonomy?{domain:t.taxonomy.domain||"Unknown Domain",clearanceTier:t.taxonomy.clearanceTier??0,executionTypes:t.taxonomy.executionTypes||[]}:void 0}}),this.meshNode.announceManifest().catch(r=>{a.info(`[LIOP-Router] Failed to announce manifest: ${r instanceof Error?r.message:String(r)}`);})),process.env.LIOP_DIAGNOSTIC_LEVEL==="full"&&process.stderr.write(`\u26A0\uFE0F [LIOP-Security] Diagnostic level set to FULL \u2014 PeerIDs and network topology are exposed. Do NOT use in production.
-`);}manifestCache=new Map;currentDiscovery=null;verifier=new a$1;onToolsChanged;manifestFailureState=new Map;static MANIFEST_FAILURE_BASE_COOLDOWN_MS=15e3;static MANIFEST_FAILURE_MAX_COOLDOWN_MS=5*6e4;static MANIFEST_SKIP_LOG_THROTTLE_MS=3e4;shouldSkipManifestQuery(e){let s=this.manifestFailureState.get(e);if(!s)return  false;let o=Date.now();return o>=s.cooldownUntil?false:(o-s.lastSkipLogAt>T.MANIFEST_SKIP_LOG_THROTTLE_MS&&(a.info(`[LIOP-Router] Skipping manifest query for ${e} during cooldown (${Math.ceil((s.cooldownUntil-o)/1e3)}s remaining)`),s.lastSkipLogAt=o),true)}recordManifestQuerySuccess(e){this.manifestFailureState.delete(e);}recordManifestQueryFailure(e){let s=Date.now(),r=(this.manifestFailureState.get(e)?.failures||0)+1,i=Math.min(T.MANIFEST_FAILURE_BASE_COOLDOWN_MS*2**Math.max(0,r-1),T.MANIFEST_FAILURE_MAX_COOLDOWN_MS);this.manifestFailureState.set(e,{failures:r,cooldownUntil:s+i,lastSkipLogAt:0});}async dispatch(e,s){let{method:o,params:r,id:i}=e;if(a.info(`[LIOP-Router] Processing: ${o}`),this.liopServer.jwtValidator){let t=a$2(o,s??null);if(!t.allowed)return a.info(`[LIOP-Router] RBAC Access Denied for method '${o}': ${t.reason}`),{jsonrpc:"2.0",id:i,error:{code:-32099,message:t.reason||"Access Denied"}}}switch(o){case "initialize":return {jsonrpc:"2.0",id:i,result:{protocolVersion:"2025-11-25",capabilities:{tools:{listChanged:true},resources:{listChanged:true},prompts:{listChanged:true}},serverInfo:this.liopServer.getServerInfo()}};case "notifications/initialized":return this.kickDiscoveryAfterInitialized().catch(()=>{}),null;case "notifications/cancelled":return null;case "ping":return {jsonrpc:"2.0",id:i,result:{}};case "tools/list":{let t=this.liopServer.listTools(),n=await this.getRemoteTools(),a$1=L()?t.map(p=>({...p,description:D(p.description??"")})):t;a.info(`[LIOP-Router] tools/list: ${t.length} local, ${n.length} remote tools found`);let c=[{name:"LiopMeshStatus",description:"LiopMeshStatus: Returns the current dynamic diagnostic status of the Zero-Trust Neural Mesh.",inputSchema:{type:"object",properties:{},additionalProperties:false}},...a$1,...n],l=I.getInstance(),u=JSON.stringify(c),f=JSON.stringify({tools:c});return l.record({type:"tools_list",method:"tools/list",estimatedInputTokens:l.countTokens(u),estimatedOutputTokens:l.countTokens(f)}),{jsonrpc:"2.0",id:i,result:{tools:c}}}case "tools/call":return this.transcodeMcpToLiop(i,r,s?.token);case "resources/list":{let t=this.liopServer.listResources(),n=await this.getRemoteResources(),a=[...t,...n],m=I.getInstance(),c=JSON.stringify(a);return m.record({type:"resource_list",method:"resources/list",estimatedInputTokens:0,estimatedOutputTokens:m.countTokens(c)}),{jsonrpc:"2.0",id:i,result:{resources:a}}}case "resources/read":{let t=r;if(!t?.uri)return {jsonrpc:"2.0",id:i,error:{code:-32602,message:"Missing resource uri"}};try{let n=Date.now(),a=await this.liopServer.readResource(t.uri),m=I.getInstance(),c=JSON.stringify(a);return m.record({type:"resource_read",method:"resources/read",toolName:t.uri,estimatedInputTokens:m.countTokens(t.uri),estimatedOutputTokens:m.countTokens(c),durationMs:Date.now()-n}),{jsonrpc:"2.0",id:i,result:a}}catch(n){let a$1=t.uri;for(let{manifest:m}of this.manifestCache.values()){let c=m.resources.find(l=>l.uri===a$1);if(c)return a.info(`[LIOP-Router] Resolved resource ${a$1} from cache (Peer: ${m.peerId})`),{jsonrpc:"2.0",id:i,result:{contents:[{uri:c.uri,mimeType:c.mimeType||"text/plain",text:c.text||c.description||"No content provided"}]}}}return {jsonrpc:"2.0",id:i,error:{code:-32e3,message:n instanceof Error?n.message:String(n)}}}}case "prompts/list":{let t=this.liopServer.listPrompts(),n=I.getInstance(),a=JSON.stringify(t);return n.record({type:"prompt_list",method:"prompts/list",estimatedInputTokens:0,estimatedOutputTokens:n.countTokens(a)}),{jsonrpc:"2.0",id:i,result:{prompts:t}}}case "prompts/get":{let t=r;if(!t?.name)return {jsonrpc:"2.0",id:i,error:{code:-32602,message:"Missing prompt name"}};try{let n=Date.now(),a=await this.liopServer.getPrompt({name:t.name,arguments:t.arguments||{}}),m=I.getInstance(),c=JSON.stringify({name:t.name,arguments:t.arguments}),l=JSON.stringify(a);return m.record({type:"prompt_get",method:"prompts/get",toolName:t.name,estimatedInputTokens:m.countTokens(c),estimatedOutputTokens:m.countTokens(l),durationMs:Date.now()-n}),{jsonrpc:"2.0",id:i,result:a}}catch(n){return {jsonrpc:"2.0",id:i,error:{code:-32e3,message:n instanceof Error?n.message:String(n)}}}}default:return {jsonrpc:"2.0",id:i,error:{code:-32601,message:`Method not found: ${o}`}}}}kickDiscoveryAfterInitialized(){return (async()=>{await new Promise(e=>setTimeout(e,250)),await Promise.race([this.refreshManifestCache(true),new Promise(e=>setTimeout(e,15e3))]).catch(()=>{});})()}async refreshManifestCache(e=false){if(this.meshNode){if(this.currentDiscovery)return this.currentDiscovery;if(!e&&this.manifestCache.size>0){let s=Date.now();if(Array.from(this.manifestCache.values()).every(({cachedAt:r})=>s-r<K*1e3))return}return this.currentDiscovery=(async()=>{try{let s=Array.from(this.manifestCache.values()).reduce((u,{manifest:f})=>u+f.tools.length,0);if(this.manifestCache.size===0)for(let u=0;u<3;u++){if((this.meshNode.node?.getConnections().length||0)>0){a.info("[LIOP-Router] P2P Connection established. Starting discovery...");break}a.info(`[LIOP-Router] Waiting for P2P connections (attempt ${u+1}/10)...`),await new Promise(p=>setTimeout(p,1e3));}let o=[],r=this.manifestCache.size===0?5:1;for(let u=0;u<r;u++){for(let g=0;g<x;g++){o=await this.meshNode?.discoverManifestProviders()||[];let y=this.meshNode?.getPeerId();if(o.filter(k=>k!==y).length>0)break;g<x-1&&(a.info(`[LIOP-Router] DHT discovery attempt ${g+1}/${x}...`),await new Promise(k=>setTimeout(k,1e3)));}let f=this.meshNode.node?.getConnections().map(g=>g.remotePeer.toString())||[];f.length>0&&(o=Array.from(new Set([...o,...f])));let p=this.meshNode?.getPeerId();if(o.filter(g=>g!==p).length>0)break;u<r-1&&(a.info(`[LIOP-Router] Initial discovery failed (0 providers). Retrying in 1s (${u+1}/${r})...`),await new Promise(g=>setTimeout(g,1e3)));}if(o.length===0){a.info("[LIOP-Router] No manifest providers found after all attempts.");return}e||a.info(`[LIOP-Router] Discovered ${o.length} candidate manifest providers`);let i=new Set((this.meshNode.node?.getConnections?.()||[]).map(u=>u.remotePeer.toString()));o=[...o].sort((u,f)=>{let p=i.has(u)?1:0;return (i.has(f)?1:0)-p});let t=0,n=0,a$1=!1,m=this.meshNode?.getPeerId(),c=o.filter(u=>{if(!this.meshNode||u===m||this.shouldSkipManifestQuery(u))return !1;let f=this.manifestCache.get(u);return f&&Date.now()-f.cachedAt<K*1e3?(t++,!1):!0}),l=await Promise.allSettled(c.map(async u=>this.meshNode?(a.info(`[LIOP-Router] Querying manifest from: ${u}`),{peerId:u,manifest:await this.meshNode.queryManifest(u)}):null));for(let u of l)if(u.status==="fulfilled"&&u.value?.manifest){let{peerId:f,manifest:p}=u.value;this.manifestCache.set(f,{manifest:p,cachedAt:Date.now()}),this.recordManifestQuerySuccess(f),a$1=!0,t++,a.info(`[LIOP-Router] Manifest received from ${f} (${p.tools.length} tools)`);}else u.status==="fulfilled"&&u.value?(this.recordManifestQueryFailure(u.value.peerId),n++,a.info(`[LIOP-Router] Manifest query returned NULL for ${u.value.peerId}`)):u.status==="rejected"&&(n++,a.info("[LIOP-Router] Fatal error querying manifest:",u.reason instanceof Error?u.reason.message:String(u.reason)));this._discoveryStats={candidates:o.length,success:t,failures:n,lastDiscovery:Date.now()},a$1&&Array.from(this.manifestCache.values()).reduce((f,{manifest:p})=>f+p.tools.length,0)!==s&&this.onToolsChanged&&(process.stderr.write(`[LIOP-Router] Mesh topology updated! Emitting notifications/tools/list_changed.
-`),this.onToolsChanged());}finally{this.currentDiscovery=null;}})(),this.currentDiscovery}}getCacheSize(){return this.manifestCache.size}async getRemoteTools(){let e=Number.parseInt(process.env.LIOP_EXPECTED_PROVIDERS??"1",10);if(this.manifestCache.size<e&&this.meshNode){let i=Number.parseInt(process.env.LIOP_INITIAL_DISCOVERY_TIMEOUT_MS??"8000",10),t=Number.isFinite(i)&&i>0?i:12e3,n=Date.now()+t,a$1=0,m=-1;for(;Date.now()<n&&!(this.manifestCache.size>=e||(await Promise.race([this.refreshManifestCache(true),new Promise(c=>setTimeout(c,3e3))]).catch(()=>{}),this.manifestCache.size>=e));){if(this.manifestCache.size===m){if(a$1++,a$1>=3&&this.manifestCache.size>0){a.info(`[LIOP-Router] Provider count stabilized at ${this.manifestCache.size}/${e}. Proceeding with available mesh.`);break}}else a$1=0,m=this.manifestCache.size;await new Promise(c=>setTimeout(c,1e3));}this.manifestCache.size<e&&(a.info(`[LIOP-Router] \u26A0\uFE0F Mesh partially available: ${this.manifestCache.size}/${e} providers. Some tools may be unavailable. Check Docker containers.`),this.refreshManifestCache(true).catch(()=>{}));}let s=[],o=new Set,r=new Set(this.liopServer.listTools().map(i=>i.name));for(let[i,{manifest:t}]of this.manifestCache.entries())for(let n of t.tools){if(n.name==="LiopMeshStatus")continue;let a=n.name;(o.has(n.name)||r.has(n.name))&&(a=`${n.name}_${i.slice(-4)}`),o.add(a);let m=t.serverInfo?.name||"Unknown Provider",c=n.description||`Remote tool from ${m}`,l={name:a,description:L()?D(c):c,inputSchema:n.inputSchema||{type:"object",properties:{}}};typeof l.inputSchema=="object"&&!l.inputSchema.type&&(l.inputSchema.type="object"),typeof l.inputSchema=="object"&&!l.inputSchema.properties&&(l.inputSchema.properties={});let u="";t.taxonomy&&(u=`
-[LIOP-DOMAIN: ${t.taxonomy.domain}]`);let f=l.inputSchema.properties||{},p="";!L()&&f.payload&&(p=`
-[REQUIRES: LIOP-PROTO-V1 ENVELOPE]`),!L()&&l.description.includes("STRICT SCHEMA ADHERENCE")&&(l.description=l.description.replace("STRICT SCHEMA ADHERENCE:","[INDUSTRIAL-REQUISITE] STRICT SCHEMA ADHERENCE (MANDATORY):"));let h=L()?`
-(Peer: ${i.slice(-8)})${u}`:`
-(Origin: ${i.slice(-8)})${u}${p}`;l.description=`${l.description}${h}`,s.push(l);}return s}async getRemoteResources(){this.currentDiscovery||this.refreshManifestCache(true).catch(()=>{});let e=[],s=new Set(this.liopServer.listResources().map(o=>o.uri));for(let[o,{manifest:r}]of this.manifestCache.entries())for(let i of r.resources)if(!s.has(i.uri)){let t={...i},n=r.serverInfo?.name||"Unknown Provider",a="";r.taxonomy&&(a=`
-
-[LIOP Zero-Trust Blueprint]
-Domain: ${r.taxonomy.domain}
-Clearance Tier: ${r.taxonomy.clearanceTier}`,r.taxonomy.executionTypes&&r.taxonomy.executionTypes.length>0&&(a+=`
-Execution Types: ${r.taxonomy.executionTypes.join(", ")}`));let m=`
-
-[LIOP Zero-Trust Origin]
-Provider: ${n}
-Network ID: ${o}${a}`;t.uri.startsWith("liop://schema/")?(t.name=`[SCHEMA] ${t.name}`,t.description=`[CRITICAL SCHEMA] ${t.description||"Data Dictionary for Zero-Shot Autonomy"}${m}`):t.description=t.description?`${t.description}${m}`:m.trim(),e.push(t),s.add(i.uri);}return e}resolveManifestTarget(e){for(let[o,{manifest:r}]of this.manifestCache.entries())if(r.tools.find(t=>t.name===e))return {peerId:o,originalToolName:e};let s=e.split("_");if(s.length>1){let o=s.pop(),r=s.join("_");for(let[i,{manifest:t}]of this.manifestCache.entries())if(i.endsWith(o||"")&&t.tools.find(a=>a.name===r))return {peerId:i,originalToolName:r}}return null}redactPeerId(e){return (process.env.LIOP_DIAGNOSTIC_LEVEL||"redacted")==="full"?e:`***${e.slice(-8)}`}async transcodeMcpToLiop(e,s,o){let r=s.name;if(r==="LiopMeshStatus"){this.refreshManifestCache(true).catch(()=>{});let t=this._discoveryStats||{candidates:0,success:0,failures:0},n=this.manifestCache.size,a=this.meshNode?"Active":"Offline",m=Array.from(this.manifestCache.values()).reduce((O,{manifest:v})=>O+v.tools.length,0),c=this.meshNode?this.meshNode.node?.getConnections().length:0,l=this.meshNode&&this.meshNode.config?.bootstrapNodes?this.meshNode.config.bootstrapNodes:[],u=l.length,p=(process.env.LIOP_DIAGNOSTIC_LEVEL||"redacted")!=="minimal",h=p?l.map(O=>{let v=O.split("/"),P=v[v.length-1];return `  \u2022 ${P?P.slice(-8):"Unknown"} (bootstrap)`}).join(`
-`):"",g=this.meshNode?this.meshNode.getRoutingTableSize():0,y=this.meshNode?.getPeerId()||"Offline",S=y==="Offline"?y:this.redactPeerId(y),k=Array.from(this.manifestCache.entries()).flatMap(([O,{manifest:v}])=>v.tools.map(P=>`  \u2022 ${P.name} (from origin: ${this.redactPeerId(O)})`)).join(`
-`),M=[`LIOP Mesh Status: ${a==="Active"?"Active":"Offline"}`,`Local Agent Identity: ${S}`,`Network: ${c} Conns | ${g} Mesh Nodes | ${u} Bootstraps`,p&&u>0?`
-Active Bootstraps:
-${h}
-`:"",`Discovery: ${t.candidates} Candidates | ${t.success} OK | ${t.failures} FAIL`,`Tooling: ${n} Providers | ${m} Total Remote Tools`,m>0?`
-Discovered Remote Tools (Zero-Trust Origins):
-${k}`:`
-No remote tools discovered yet.`,I.getInstance().formatStatusBlock()].filter(O=>O!=="").join(`
-`),E=I.getInstance();return E.record({type:"diagnostic",method:"tools/call",toolName:"LiopMeshStatus",estimatedInputTokens:0,estimatedOutputTokens:E.countTokens(M)}),{jsonrpc:"2.0",id:e,result:{content:[{type:"text",text:M}]}}}let i=this.liopServer.listTools().some(t=>t.name===r);if(!i&&this.meshNode){let t=this.resolveManifestTarget(r);if(t||(await this.refreshManifestCache(),t=this.resolveManifestTarget(r)),t){a.info(`[LIOP-Router] Resolved ${r} via manifest cache (Peer: ${t.peerId}, Original: ${t.originalToolName})`);let a$1=this.manifestCache.get(t.peerId),m=o;if(a$1?.manifest.authRequired){let c=o||await this.getOrAcquireMeshAgentToken(t.peerId);if(!c){let l=a$1.manifest.serverInfo?.name?.toLowerCase()||"unknown",u=a$1.manifest.tokenSlug,f=t.peerId.slice(-8).toUpperCase(),p=u?`LIOP_TOKEN_${u}`:`LIOP_TOKEN_${l.toUpperCase().replace(/[^A-Z0-9_]/g,"_")}`;return {jsonrpc:"2.0",id:e,result:{content:[{type:"text",text:`Authentication Required: The restricted node (${l}) requires an access token. Please define the ${p} or LIOP_TOKEN_${f} environment variable on your agent/client host.`}],isError:true}}}m=c;}return this.routeToRemoteProvider(e,t.originalToolName,t.peerId,s,m)}let n=[];for(let a=0;a<3&&(n=await this.meshNode.findProviders(r),!(n.length>0));a++)a<2&&await new Promise(m=>setTimeout(m,1e3));if(n.length>0)return this.routeToRemoteProvider(e,r,n[0],s,o)}if(i)try{let t=Date.now(),n=await this.liopServer.callTool({name:r,arguments:s.arguments||{}}),a=I.getInstance(),m=JSON.stringify(s.arguments||{}),c=JSON.stringify(n);return a.record({type:"tool_call",method:"tools/call",toolName:r,estimatedInputTokens:a.countTokens(m),estimatedOutputTokens:a.countTokens(c),durationMs:Date.now()-t}),{jsonrpc:"2.0",id:e,result:n}}catch(t){return {jsonrpc:"2.0",id:e,error:{code:-32e3,message:t instanceof Error?t.message:String(t)}}}return {jsonrpc:"2.0",id:e,error:{code:-32002,message:`No provider found for tool: ${r}. Ensure the provider node is active and connected to the mesh.`}}}async routeToRemoteProvider(e,s,o,r,i){if(!this.meshNode)return {jsonrpc:"2.0",id:e,error:{code:-32603,message:"Mesh Node inactive"}};let t=this.manifestCache.get(o),n=this.defaultRpcPort;if(t)n=t.manifest.grpcPort;else {let p=await this.meshNode.queryManifest(o);p&&(n=p.grpcPort,this.manifestCache.set(o,{manifest:p,cachedAt:Date.now()}),t=this.manifestCache.get(o));}if((process.env.LIOP_USE_PUBLISHED_GRPC_PORTS==="1"||process.env.LIOP_DOCKER_MAP==="true"||process.env.LIOP_DEV_MODE==="true"||process.env.NODE_ENV==="development"||process.env.NODE_ENV==="test")&&t){let p=t.manifest.serverInfo?.name?.toLowerCase()||"";p.includes("vault")?n=13011:p.includes("bank")?n=13021:p.includes("oracle")&&(n=13031);}let m=await this.meshNode.resolvePeer(o),c$1=null,l=await import('os'),u=Object.values(l.networkInterfaces()).flat().filter(p=>p?.family==="IPv4").map(p=>p?.address);for(let p of m){let h=p.split("/"),g=h.indexOf("ip4");if(g!==-1){let y=h[g+1];if(y==="127.0.0.1"||u.includes(y)){c$1=`127.0.0.1:${n}`;break}c$1||(c$1=`${y}:${n}`);}}c$1||(c$1=`127.0.0.1:${n}`),a.info(`[LIOP-Router] Dynamic route: ${s} -> ${c$1} (PeerID: ${o})`);let f=new a$3.LogicMesh(c$1,c());return this.performTranscoding(e,f,s,r,o,i)}meshAgentToken;async getOrAcquireMeshAgentToken(e){if(e){let n=this.manifestCache.get(e),a$1=n?.manifest.serverInfo?.name?.toLowerCase()||"",m,c=n?.manifest.tokenSlug;if(c){let l=`LIOP_TOKEN_${c}`;m=process.env[l]||process.env[`LIOP_OAUTH_TOKEN_${c}`],a.info(`[LIOP-Router] Step0 tokenSlug=${c} envKey=${l} found=${!!m} peer=${e.slice(-8)}`);}else a.info(`[LIOP-Router] Step0 tokenSlug=MISSING (manifest has no tokenSlug) peer=${e.slice(-8)} provider=${a$1}`);if(!m){let l=e.slice(-8).toUpperCase();m=process.env[`LIOP_TOKEN_${l}`]||process.env[`LIOP_OAUTH_TOKEN_${l}`];}if(!m&&a$1){let l=a$1.toUpperCase().replace(/[^A-Z0-9_]/g,"_");m=process.env[`LIOP_TOKEN_${l}`]||process.env[`LIOP_OAUTH_TOKEN_${l}`];}if(m)return a.info(`[LIOP-Router] Resolved node-specific token for peer ${e.slice(-8)} (${a$1||"unknown"})`),m}if(this.meshAgentToken)return this.meshAgentToken;let s=process.env.LIOP_OAUTH_TOKEN||process.env.LIOP_TOKEN;if(s)return this.meshAgentToken=s,this.meshAgentToken;let o=process.env.LIOP_NEXUS_URL;if(!o)return;let r=process.env.LIOP_OAUTH_CLIENT_ID||process.env.LIOP_CLIENT_ID||"liop-mesh-agent",i=process.env.LIOP_OAUTH_CLIENT_SECRET||process.env.LIOP_CLIENT_SECRET||"dev-secret-change-me",t=process.env.LIOP_OAUTH_AUDIENCE||process.env.LIOP_AUDIENCE||"urn:liop:mesh:api";try{let a$1=`${o.endsWith("/oidc")?o:`${o}/oidc`}/token`;a.info(`[LIOP-Router] Proactively acquiring M2M token from Nexus: ${a$1}`);let m=new URLSearchParams({grant_type:"client_credentials",scope:"liop:tools:call liop:tools:list liop:resources:read liop:schema:read liop:mesh:query",resource:t,client_id:r,client_secret:i}),c=await fetch(a$1,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:m.toString()});if(!c.ok){let u=await c.text();a.warn(`[LIOP-Router] M2M Token acquisition failed: ${c.status} ${u}`);return}let l=await c.json();if(l.access_token)return this.meshAgentToken=l.access_token,a.info("[LIOP-Router] M2M Token acquired successfully for router routing."),this.meshAgentToken}catch(n){a.warn(`[LIOP-Router] Failed to acquire M2M token: ${n instanceof Error?n.message:String(n)}`);}}async performTranscoding(e,s,o,r,i,t){let n=o,a=this.meshNode?await this.meshNode.sign(Buffer.from(n)):Buffer.from([]),m=Date.now(),c=t;if(c||(c=await this.getOrAcquireMeshAgentToken(i)),i){let l=this.manifestCache.get(i);if(l?.manifest.authRequired&&!c){let u=l.manifest.serverInfo?.name?.toLowerCase()||"unknown",f=l.manifest.tokenSlug,p=i.slice(-8).toUpperCase(),h=f?`LIOP_TOKEN_${f}`:`LIOP_TOKEN_${u.toUpperCase().replace(/[^A-Z0-9_]/g,"_")}`;return {jsonrpc:"2.0",id:e,result:{content:[{type:"text",text:`Authentication Required: The restricted node (${u}) requires an access token. Please define the ${h} or LIOP_TOKEN_${p} environment variable on your agent/client host.`}],isError:true}}}}return new Promise(l=>{let u=new U.Metadata;c&&u.add("authorization",`Bearer ${c}`),s.negotiateIntent({agent_did:`did:liop:${this.meshNode?.getPeerId()||"mcp-proxy"}`,capability_hash:n,proof_of_intent:a},u,async(f,p)=>{if(f||!p.accepted)return l({jsonrpc:"2.0",id:e,result:{content:[{type:"text",text:`PQC Handshake Failed: ${f?.message||"Rejected"}`}],isError:true}});let{ciphertext:h,sharedSecret:g}=await a$4.encapsulateAsymmetric(p.kyber_public_key),y=JSON.stringify(r.arguments||{}),S=`return { "__liop_proxy_tool": "${o}", "__liop_proxy_args": ${y} };`,k=C.randomBytes(12),M=this.encryptWithNonce(Buffer.from(S),g,k),E=new U.Metadata;c&&E.add("authorization",`Bearer ${c}`);let O=s.executeLogic({session_token:p.session_token,wasm_binary:new Uint8Array(M),inputs:{},pqc_ciphertext:h,aes_nonce:k},E),v="",P=null;O.on("data",_=>{v+=_.semantic_evidence,P=_;}),O.on("end",async()=>{try{if(P&&!P.is_error){let W=Buffer.from(P.cryptographic_proof).toString("hex");if(!await this.verifier.verifyZkReceipt(Buffer.from(S),W,Buffer.from(P.zk_receipt),Buffer.from(g),v))return l({jsonrpc:"2.0",id:e,result:{content:[{type:"text",text:"SECURITY ALERT: Remote response failed cryptographic integrity audit."}],isError:!0}})}let _=JSON.parse(v),A=I.getInstance();A.record({type:"tool_call",method:"tools/call",toolName:o,peerId:i,estimatedInputTokens:A.countTokens(y),estimatedOutputTokens:A.countTokens(v),durationMs:Date.now()-m}),l({jsonrpc:"2.0",id:e,result:_});}catch{l({jsonrpc:"2.0",id:e,result:{content:[{type:"text",text:v}]}});}}),O.on("error",_=>l({jsonrpc:"2.0",id:e,result:{content:[{type:"text",text:`LIOP gRPC Error: ${_.message}`}],isError:true}}));});})}encryptWithNonce(e,s,o){let r=C.createCipheriv("aes-256-gcm",s,o),i=Buffer.concat([r.update(e),r.final()]);return Buffer.concat([i,r.getAuthTag()])}};export{b as a,R as b,V as c,q as d,$ as e,I as f,J as g};//# sourceMappingURL=chunk-CPLE5VZ5.js.map
-//# sourceMappingURL=chunk-CPLE5VZ5.js.map

package/dist/chunk-CPLE5VZ5.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/economy/estimator.ts","../src/economy/otel.ts","../src/economy/telemetry.ts","../src/utils/mcpCompact.ts","../src/gateway/router.ts"],"names":["RealTokenEstimator","countFn","setMergeCacheSizeFn","text","HeuristicTokenEstimator","createTokenEstimator","mod","estimator","log","createSyncTokenEstimator","METER_NAME","METER_VERSION","TOKEN_USAGE_BUCKETS","DURATION_BUCKETS","LiopOTelBridge","meter","metrics","err","noopHistogram","tokens","tokenType","operationName","toolName","durationMs","error","OTEL_OPERATION_MAP","TokenTelemetryEngine","_TokenTelemetryEngine","real","content","metric","fullMetric","otelOp","sum","op","breakdown","key","existing","totalDuration","newCalls","report","uptimeStr","totalCombined","byType","typeEntries","typeLines","type","data","idx","prefix","outputPart","toolReport","toolEntries","toolLines","name","durationPart","timedOps","avgLatency","otelStatus","ms","seconds","minutes","remainingSeconds","hours","remainingMinutes","mcpCompactToolDescriptions","v","stripVerboseLiopToolDescription","description","d","markers","m","i","MANIFEST_CACHE_TTL_S","MANIFEST_DISCOVERY_RETRIES","LiopMcpRouter","_LiopMcpRouter","liopServer","meshNode","defaultRpcPort","remoteTools","t","resources","r","serverConfig","LiopVerifier","peerId","state","now","failures","backoff","request","authInfo","method","params","id","authResult","authorizeRequest","localTools","listedLocals","allTools","telemetry","toolsPayload","toolsResponsePayload","localResources","remoteResources","allResources","rlTelemetry","rlPayload","typedParams","rrStartTime","result","rrTelemetry","rrOutputPayload","targetUri","manifest","remoteResource","promptsList","plTelemetry","plPayload","pgStartTime","pgTelemetry","pgInputPayload","pgOutputPayload","silent","cachedAt","prevCount","acc","providerIds","MAX_COLD_ATTEMPTS","coldAttempt","attempt","selfId","activePeers","c","selfIdEnd","connectedPeers","a","b","aConnected","successCount","errorCount","cacheUpdated","eligiblePeers","cached","queryResults","EXPECTED_PROVIDERS","initialTimeoutMs","boundedTimeoutMs","deadline","stableCount","lastCacheSize","resolve","tools","seenNames","localToolNames","tool","finalName","providerName","baseDesc","cleanTool","blueprint","properties","envelopeDoc","originStamp","seenUris","resource","augmentedResource","parts","suffix","baseName","token","stats","providerCount","meshState","cachedTools","connections","bootstrapNodes","bootstrapCount","showBootstraps","bootstrapList","addr","routingTableSize","rawPeerId","localPeerId","cachedToolList","statusText","line","diagTelemetry","isLocal","target","manifestEntry","effectiveToken","resolvedToken","slug","shortId","primaryVar","providers","localStartTime","localTelemetry","localInputPayload","localOutputPayload","grpcPort","addrs","targetAddr","os","localInterfaces","ipIdx","advertisedIp","remoteClient","liopV1","createChannelCredentials","nodeToken","envKey","cleanName","staticToken","nexusUrl","clientId","clientSecret","audience","tokenUrl","response","client","capabilityHash","proofOfIntent","transcodingStartTime","activeToken","metadata","ciphertext","sharedSecret","Kyber768Wrapper","embeddedArgsJson","proxyLogic","nonce","sealedLogic","metadataCall","call","resultBody","lastResponse","grpcRes","proofHex","parsedResult","remoteTelemetry","e","payload","cipher","encrypted"],"mappings":"oTA0BO,IAAMA,CAAAA,CAAN,KAAmD,CAChD,IAAA,CAAO,aAER,OAAA,CAER,WAAA,CACCC,CAAAA,CACAC,CAAAA,CACC,CACD,IAAA,CAAK,QAAUD,CAAAA,CAEXC,CAAAA,EACHA,EAAoB,GAAM,EAE5B,CAEA,WAAA,CAAYC,CAAAA,CAAsB,CACjC,OAAIA,CAAAA,CAAK,MAAA,GAAW,EAAU,CAAA,CACvB,IAAA,CAAK,QAAQA,CAAI,CACzB,CACD,CAAA,CAQaC,CAAAA,CAAN,KAAwD,CACrD,IAAA,CAAO,qBAAA,CAEhB,YAAYD,CAAAA,CAAsB,CACjC,OAAIA,CAAAA,CAAK,MAAA,GAAW,CAAA,CAAU,EACvB,IAAA,CAAK,IAAA,CAAKA,CAAAA,CAAK,MAAA,CAAS,CAAC,CACjC,CACD,EASA,eAAsBE,GAAgD,CACrE,GAAI,CACH,IAAMC,CAAAA,CAAM,MAAM,OAAO,eAAe,CAAA,CAClCC,EAAY,IAAIP,CAAAA,CACrBM,CAAAA,CAAI,WAAA,CACJA,CAAAA,CAAI,iBACL,EACA,OAAAE,CAAAA,CAAI,KAAA,CAAM,wDAAwD,CAAA,CAC3DD,CACR,MAAQ,CACP,OAAAC,EAAI,IAAA,CACH,+EACD,EACO,IAAIJ,CACZ,CACD,CAOO,SAASK,CAAAA,EAA2C,CAC1D,OAAO,IAAIL,CACZ,CCzFA,IAAMM,CAAAA,CAAa,cAAA,CACbC,CAAAA,CAAgB,eAAA,CAMhBC,EAAsB,CAC3B,CAAA,CAAG,EAAG,EAAA,CAAI,EAAA,CAAI,IAAK,IAAA,CAAM,IAAA,CAAM,KAAA,CAAO,KAAA,CAAO,MAAA,CAAQ,OAAA,CAAS,QAC9D,QAAA,CAAU,QACX,CAAA,CAMMC,CAAAA,CAAmB,CACxB,GAAA,CAAM,IAAM,GAAA,CAAM,GAAA,CAAM,GAAA,CAAM,GAAA,CAAM,GAAA,CAAM,IAAA,CAAM,KAAM,IAAA,CAAM,KAAA,CAAO,MACnE,KAAA,CAAO,KACR,EAeaC,CAAAA,CAAN,KAAqB,CACnB,UAAA,CACA,iBAAA,CACA,MAAA,CAAS,MAEjB,WAAA,EAAc,CACb,GAAI,CACH,IAAMC,CAAAA,CAAQC,QAAQ,QAAA,CAASN,CAAAA,CAAYC,CAAa,CAAA,CAExD,IAAA,CAAK,UAAA,CAAaI,EAAM,eAAA,CAAgB,2BAAA,CAA6B,CACpE,WAAA,CAAa,0DAAA,CACb,KAAM,SAAA,CACN,MAAA,CAAQ,CAAE,wBAAA,CAA0BH,CAAoB,CACzD,CAAC,CAAA,CAED,IAAA,CAAK,iBAAA,CAAoBG,CAAAA,CAAM,eAAA,CAC9B,kCAAA,CACA,CACC,WAAA,CAAa,6BAAA,CACb,IAAA,CAAM,GAAA,CACN,MAAA,CAAQ,CAAE,yBAA0BF,CAAiB,CACtD,CACD,CAAA,CAEA,IAAA,CAAK,OAAS,CAAA,CAAA,CACdL,CAAAA,CAAI,KAAA,CAAM,iDAAiD,EAC5D,CAAA,MAASS,EAAc,CAEtBT,CAAAA,CAAI,KAAA,CACH,CAAA,6BAAA,EAAgCS,CAAAA,YAAe,KAAA,CAAQA,EAAI,OAAA,CAAU,MAAA,CAAOA,CAAG,CAAC,CAAA,CACjF,CAAA,CACA,IAAMC,CAAAA,CAAgB,CACrB,OAAQ,IAAM,CAAC,CAChB,CAAA,CACA,IAAA,CAAK,UAAA,CAAaA,CAAAA,CAClB,IAAA,CAAK,iBAAA,CAAoBA,EAC1B,CACD,CAUA,aACCC,CAAAA,CACAC,CAAAA,CACAC,EACAC,CAAAA,CACO,CACP,IAAA,CAAK,UAAA,CAAW,MAAA,CAAOH,CAAAA,CAAQ,CAC9B,eAAA,CAAiB,MAAA,CACjB,wBAAyBE,CAAAA,CACzB,mBAAA,CAAqBD,EACrB,sBAAA,CAAwB,WAAA,CACxB,GAAIE,CAAAA,CAAW,CAAE,gBAAA,CAAkBA,CAAS,CAAA,CAAI,EACjD,CAAC,EACF,CASA,eACCC,CAAAA,CACAF,CAAAA,CACAG,CAAAA,CACO,CACP,IAAA,CAAK,iBAAA,CAAkB,OAAOD,CAAAA,CAAa,GAAA,CAAM,CAChD,eAAA,CAAiB,MAAA,CACjB,wBAAyBF,CAAAA,CACzB,GAAIG,CAAAA,CAAQ,CAAE,YAAA,CAAcA,CAAM,EAAI,EACvC,CAAC,EACF,CAGA,QAAA,EAAoB,CACnB,OAAO,IAAA,CAAK,MACb,CACD,EC5EA,IAAMC,GAAmE,CACxE,UAAA,CAAY,OACZ,SAAA,CAAW,cAAA,CACX,cAAe,MAAA,CACf,aAAA,CAAe,MAAA,CACf,UAAA,CAAY,MAAA,CACZ,WAAA,CAAa,OACb,UAAA,CAAY,MACb,CAAA,CAWaC,CAAAA,CAAN,MAAMC,CAAqB,CACjC,OAAe,QAAA,CAAwC,IAAA,CAC/C,UAAA,CAAqC,EAAC,CAC7B,UACA,SAAA,CACT,SAAA,CACA,WAEA,WAAA,EAAc,CACrB,KAAK,SAAA,CAAY,MAAA,CAAO,UAAA,EAAW,CACnC,IAAA,CAAK,SAAA,CAAY,KAAK,GAAA,EAAI,CAE1B,IAAA,CAAK,SAAA,CAAYlB,CAAAA,EAAyB,CAC1C,KAAK,UAAA,CAAa,IAAIK,CAAAA,CAEtB,IAAA,CAAK,iBAAA,GACN,CAGQ,iBAAA,EAA0B,CACjCT,GAAqB,CACnB,IAAA,CAAMuB,GAAS,CACf,IAAA,CAAK,SAAA,CAAYA,EAClB,CAAC,CAAA,CACA,MAAM,IAAM,CAEb,CAAC,EACH,CAEA,OAAO,aAAoC,CAC1C,OAAKD,CAAAA,CAAqB,QAAA,GACzBA,CAAAA,CAAqB,QAAA,CAAW,IAAIA,CAAAA,CAAAA,CAE9BA,CAAAA,CAAqB,QAC7B,CAMA,WAAA,CAAYE,EAAyB,CACpC,GAAI,CACH,OAAO,IAAA,CAAK,SAAA,CAAU,YAAYA,CAAO,CAC1C,CAAA,KAAQ,CAEP,OAAO,IAAA,CAAK,KAAKA,CAAAA,CAAQ,MAAA,CAAS,CAAC,CACpC,CACD,CAMA,OAAOC,CAAAA,CAAuD,CAC7D,IAAMC,CAAAA,CAAmC,CACxC,GAAGD,CAAAA,CACH,SAAA,CAAW,IAAA,CAAK,GAAA,EACjB,CAAA,CACA,KAAK,UAAA,CAAW,IAAA,CAAKC,CAAU,CAAA,CAG/B,GAAI,CACH,IAAMC,CAAAA,CAASP,EAAAA,CAAmBK,CAAAA,CAAO,IAAI,CAAA,EAAK,MAAA,CAE9CA,EAAO,oBAAA,CAAuB,CAAA,EACjC,KAAK,UAAA,CAAW,YAAA,CACfA,EAAO,oBAAA,CACP,OAAA,CACAE,CAAAA,CACAF,CAAAA,CAAO,QACR,CAAA,CAEGA,EAAO,qBAAA,CAAwB,CAAA,EAClC,KAAK,UAAA,CAAW,YAAA,CACfA,EAAO,qBAAA,CACP,QAAA,CACAE,CAAAA,CACAF,CAAAA,CAAO,QACR,CAAA,CAEGA,EAAO,UAAA,GAAe,KAAA,CAAA,EACzB,KAAK,UAAA,CAAW,cAAA,CAAeA,EAAO,UAAA,CAAYE,CAAM,EAE1D,CAAA,KAAQ,CAER,CACD,CAKA,cAAA,CAAeH,CAAAA,CAAyB,CACvC,OAAO,IAAA,CAAK,WAAA,CAAYA,CAAO,CAChC,CAGA,SAAA,EAAgC,CAC/B,OAAO,CACN,UAAW,IAAA,CAAK,SAAA,CAChB,WAAY,CAAC,GAAG,KAAK,UAAU,CAAA,CAC/B,gBAAA,CAAkB,IAAA,CAAK,UAAA,CAAW,MAAA,CACjC,CAACI,CAAAA,CAAKC,CAAAA,GAAOD,CAAAA,CAAMC,CAAAA,CAAG,oBAAA,CACtB,CACD,EACA,iBAAA,CAAmB,IAAA,CAAK,UAAA,CAAW,MAAA,CAClC,CAACD,CAAAA,CAAKC,IAAOD,CAAAA,CAAMC,CAAAA,CAAG,sBACtB,CACD,CAAA,CACA,cAAe,IAAA,CAAK,SAAA,CAAU,IAAA,CAC9B,eAAA,CAAiB,IAAA,CAAK,GAAA,GAAQ,IAAA,CAAK,SACpC,CACD,CAGA,gBAAA,EAAoD,CACnD,IAAMC,CAAAA,CAAY,IAAI,GAAA,CAEtB,IAAA,IAAWD,CAAAA,IAAM,IAAA,CAAK,WAAY,CACjC,IAAME,EAAMF,CAAAA,CAAG,QAAA,EAAYA,EAAG,MAAA,CACxBG,CAAAA,CAAWF,CAAAA,CAAU,GAAA,CAAIC,CAAG,CAAA,EAAK,CACtC,KAAA,CAAO,CAAA,CACP,MAAA,CAAQ,CAAA,CACR,KAAA,CAAO,CAAA,CACP,cAAe,CAChB,CAAA,CAEME,CAAAA,CACLD,CAAAA,CAAS,aAAA,CAAgBA,CAAAA,CAAS,OAASH,CAAAA,CAAG,UAAA,EAAc,GACvDK,CAAAA,CAAWF,CAAAA,CAAS,MAAQ,CAAA,CAElCF,CAAAA,CAAU,GAAA,CAAIC,CAAAA,CAAK,CAClB,KAAA,CAAOC,EAAS,KAAA,CAAQH,CAAAA,CAAG,oBAAA,CAC3B,MAAA,CAAQG,CAAAA,CAAS,MAAA,CAASH,EAAG,qBAAA,CAC7B,KAAA,CAAOK,CAAAA,CACP,aAAA,CAAeA,CAAAA,CAAW,CAAA,CAAID,EAAgBC,CAAAA,CAAW,CAC1D,CAAC,EACF,CAEA,OAAOJ,CACR,CAMA,iBAAA,EAA4B,CAC3B,IAAMK,CAAAA,CAAS,KAAK,SAAA,EAAU,CAC9B,GAAIA,CAAAA,CAAO,UAAA,CAAW,MAAA,GAAW,EAAG,OAAO,EAAA,CAE3C,IAAMC,CAAAA,CAAY,IAAA,CAAK,YAAA,CAAaD,EAAO,eAAe,CAAA,CACpDE,EAAgBF,CAAAA,CAAO,gBAAA,CAAmBA,EAAO,iBAAA,CAGjDG,CAAAA,CAAS,IAAI,GAAA,CAInB,IAAA,IAAWT,CAAAA,IAAMM,EAAO,UAAA,CAAY,CACnC,IAAMJ,CAAAA,CAAMF,CAAAA,CAAG,IAAA,CACTG,EAAWM,CAAAA,CAAO,GAAA,CAAIP,CAAG,CAAA,EAAK,CACnC,KAAA,CAAO,EACP,KAAA,CAAO,CAAA,CACP,OAAQ,CACT,CAAA,CACAO,EAAO,GAAA,CAAIP,CAAAA,CAAK,CACf,KAAA,CAAOC,CAAAA,CAAS,KAAA,CAAQ,EACxB,KAAA,CAAOA,CAAAA,CAAS,KAAA,CAAQH,CAAAA,CAAG,oBAAA,CAC3B,MAAA,CAAQG,EAAS,MAAA,CAASH,CAAAA,CAAG,qBAC9B,CAAC,EACF,CAGA,IAAMU,CAAAA,CAAc,KAAA,CAAM,KAAKD,CAAAA,CAAO,OAAA,EAAS,CAAA,CACzCE,CAAAA,CAAYD,CAAAA,CAAY,GAAA,CAAI,CAAC,CAACE,EAAMC,CAAI,CAAA,CAAGC,CAAAA,GAAQ,CACxD,IAAMC,CAAAA,CAASD,IAAQJ,CAAAA,CAAY,MAAA,CAAS,CAAA,CAAI,sBAAA,CAAU,sBAAA,CACpDM,CAAAA,CACLH,EAAK,MAAA,CAAS,CAAA,CAAI,MAAMA,CAAAA,CAAK,MAAA,CAAO,gBAAgB,CAAA,IAAA,CAAA,CAAS,EAAA,CAC9D,OAAO,CAAA,EAAGE,CAAM,IAAIH,CAAI,CAAA,KAAA,EAAKC,CAAAA,CAAK,KAAK,CAAA,QAAA,EAAMA,CAAAA,CAAK,MAAM,cAAA,EAAgB,CAAA,GAAA,EAAMG,CAAU,CAAA,CACzF,CAAC,EAGKC,CAAAA,CAAa,IAAA,CAAK,kBAAiB,CACnCC,CAAAA,CAAc,MAAM,IAAA,CAAKD,CAAAA,CAAW,OAAA,EAAS,CAAA,CAAE,MAAA,CACpD,CAAC,CAACf,CAAG,CAAA,GAAMA,CAAAA,GAAQ,YAAA,EAAgBA,CAAAA,GAAQ,gBAC5C,CAAA,CAEMiB,CAAAA,CAAsB,EAAC,CACzBD,CAAAA,CAAY,MAAA,CAAS,IACxBC,CAAAA,CAAU,IAAA,CAAK,uBAAa,CAAA,CAC5BD,CAAAA,CAAY,QAAQ,CAAC,CAACE,CAAAA,CAAMP,CAAI,CAAA,CAAGC,CAAAA,GAAQ,CAC1C,IAAMC,CAAAA,CAASD,CAAAA,GAAQI,CAAAA,CAAY,MAAA,CAAS,CAAA,CAAI,uBAAU,sBAAA,CACpDF,CAAAA,CACLH,CAAAA,CAAK,MAAA,CAAS,CAAA,CAAI,CAAA,GAAA,EAAMA,EAAK,MAAA,CAAO,cAAA,EAAgB,CAAA,IAAA,CAAA,CAAS,EAAA,CACxDQ,EACLR,CAAAA,CAAK,aAAA,CAAgB,CAAA,CAAI,CAAA,EAAA,EAAK,IAAA,CAAK,KAAA,CAAMA,EAAK,aAAa,CAAC,CAAA,EAAA,CAAA,CAAO,EAAA,CACpEM,CAAAA,CAAU,IAAA,CACT,GAAGJ,CAAM,CAAA,CAAA,EAAIK,CAAI,CAAA,EAAA,EAAKP,CAAAA,CAAK,KAAA,CAAM,gBAAgB,CAAA,GAAA,EAAMG,CAAU,CAAA,MAAA,EAAMH,CAAAA,CAAK,KAAK,CAAA,CAAA,EAAIQ,CAAY,CAAA,CAClG,EACD,CAAC,CAAA,CAAA,CAIF,IAAMC,CAAAA,CAAWhB,CAAAA,CAAO,UAAA,CAAW,MAAA,CACjCN,CAAAA,EAAOA,CAAAA,CAAG,aAAe,MAC3B,CAAA,CACMuB,CAAAA,CACLD,CAAAA,CAAS,MAAA,CAAS,CAAA,CACf,KAAK,KAAA,CACLA,CAAAA,CAAS,OAAO,CAACvB,CAAAA,CAAKC,IAAOD,CAAAA,EAAOC,CAAAA,CAAG,UAAA,EAAc,CAAA,CAAA,CAAI,CAAC,CAAA,CACzDsB,EAAS,MACX,CAAA,CACC,CAAA,CAEEE,CAAAA,CAAa,IAAA,CAAK,UAAA,CAAW,UAAS,CACzC,yCAAA,CACA,UAAA,CAcH,OAZc,CACb;AAAA,cAAA,CAAA,CACA,CAAA,sBAAA,EAAelB,CAAAA,CAAO,SAAA,CAAU,KAAA,CAAM,CAAA,CAAG,CAAC,CAAC,CAAA,EAAA,EAAKC,CAAS,CAAA,CAAA,CAAA,CACzD,CAAA,wBAAA,EAAiBD,CAAAA,CAAO,aAAa,CAAA,CAAA,CACrC,CAAA,yBAAA,EAAkBA,CAAAA,CAAO,UAAA,CAAW,MAAM,CAAA,CAAA,CAC1C,GAAGK,CAAAA,CACH,CAAA,oBAAA,EAAaL,CAAAA,CAAO,gBAAA,CAAiB,cAAA,EAAgB,SAASA,CAAAA,CAAO,iBAAA,CAAkB,cAAA,EAAgB,CAAA,MAAA,EAASE,CAAAA,CAAc,gBAAgB,CAAA,UAAA,CAAA,CAC9I,GAAGW,CAAAA,CACH,GAAII,CAAAA,CAAa,EAAI,CAAC,CAAA,0BAAA,EAAmBA,CAAU,CAAA,EAAA,CAAI,CAAA,CAAI,GAC3D,CAAA,mBAAA,EAAYC,CAAU,CAAA,CACvB,CAAA,CAEa,IAAA,CAAK;AAAA,CAAI,CACvB,CAGQ,YAAA,CAAaC,CAAAA,CAAoB,CACxC,IAAMC,CAAAA,CAAU,IAAA,CAAK,KAAA,CAAMD,CAAAA,CAAK,GAAI,EACpC,GAAIC,CAAAA,CAAU,EAAA,CAAI,OAAO,CAAA,EAAGA,CAAO,IACnC,IAAMC,CAAAA,CAAU,IAAA,CAAK,KAAA,CAAMD,CAAAA,CAAU,EAAE,EACjCE,CAAAA,CAAmBF,CAAAA,CAAU,GACnC,GAAIC,CAAAA,CAAU,GAAI,OAAO,CAAA,EAAGA,CAAO,CAAA,EAAA,EAAKC,CAAgB,CAAA,CAAA,CAAA,CACxD,IAAMC,CAAAA,CAAQ,IAAA,CAAK,KAAA,CAAMF,CAAAA,CAAU,EAAE,CAAA,CAC/BG,EAAmBH,CAAAA,CAAU,EAAA,CACnC,OAAO,CAAA,EAAGE,CAAK,CAAA,EAAA,EAAKC,CAAgB,CAAA,CAAA,CACrC,CAGA,OAAc,CACb,IAAA,CAAK,WAAa,GACnB,CAGA,OAAO,OAAA,EAAgB,CACtBrC,EAAqB,QAAA,CAAW,KACjC,CACD,ECzTO,SAASsC,CAAAA,EAAsC,CACrD,IAAMC,CAAAA,CACL,OAAA,CAAQ,GAAA,CAAI,kCAAA,EAAoC,WAAA,EAAY,CAAE,MAAK,CACpE,OAAI,EAAAA,CAAAA,GAAM,GAAA,EAAOA,CAAAA,GAAM,SAAWA,CAAAA,GAAM,IAAA,CAEzC,CAKO,SAASC,CAAAA,CAAgCC,CAAAA,CAA6B,CAC5E,IAAIC,CAAAA,CAAID,CAAAA,CACFE,CAAAA,CAAU,CACf;;AAAA,eAAA,CAAA,CACA,CAAA;AAAA;AAAA,eAAA,CAAA,CACA;AAAA,eAAA,CACD,EACA,IAAA,IAAWC,CAAAA,IAAKD,EAAS,CACxB,IAAME,EAAIH,CAAAA,CAAE,OAAA,CAAQE,CAAC,CAAA,CACrB,GAAIC,IAAM,EAAA,CAAI,CACbH,EAAIA,CAAAA,CAAE,KAAA,CAAM,EAAGG,CAAC,CAAA,CAChB,KACD,CACD,CACA,OAAOH,CAAAA,CAAE,OAAA,EACV,CCPA,IAAMI,EAAuB,GAAA,CAGvBC,CAAAA,CAA6B,EAWtBC,CAAAA,CAAN,MAAMC,CAAc,CA0B1B,WAAA,CACSC,EACAC,CAAAA,CAA4B,IAAA,CAC5BC,EAAiB,KAAA,CACxB,CAHO,gBAAAF,CAAAA,CACA,IAAA,CAAA,QAAA,CAAAC,EACA,IAAA,CAAA,cAAA,CAAAC,CAAAA,CAGJ,KAAK,QAAA,GACR,IAAA,CAAK,SAAS,uBAAA,CAAwB,IAAM,CAC3C,IAAMC,CAAAA,CAAc,KAAK,UAAA,CAAW,SAAA,GAAY,GAAA,CAAKC,CAAAA,GAAO,CAC3D,IAAA,CAAMA,CAAAA,CAAE,KACR,WAAA,CAAaA,CAAAA,CAAE,YACf,WAAA,CAAaA,CAAAA,CAAE,WAChB,CAAA,CAAE,CAAA,CAEIC,EAAY,IAAA,CAAK,UAAA,CAAW,eAAc,CAAE,GAAA,CAAKC,IAAO,CAC7D,IAAA,CAAMA,EAAE,IAAA,CACR,GAAA,CAAKA,EAAE,GAAA,CACP,WAAA,CAAaA,EAAE,WAAA,CACf,QAAA,CAAUA,EAAE,QACb,CAAA,CAAE,EAGIC,CAAAA,CAAgB,IAAA,CAAK,WAAmB,MAAA,CAE9C,OAAO,CACN,MAAA,CAAQ,IAAA,CAAK,UAAU,SAAA,EAAU,EAAK,UACtC,QAAA,CAAU,IAAA,CAAK,eACf,KAAA,CAAO,CAAC,GAAGJ,CAAW,CAAA,CACtB,UAAAE,CAAAA,CACA,UAAA,CAAY,KAAK,UAAA,CAAW,aAAA,GAC5B,YAAA,CAAc,IAAA,CAAK,WAAW,YAAA,GAAiB,MAAA,CAC/C,UAAWE,CAAAA,EAAc,SAAA,CACzB,SAAUA,CAAAA,EAAc,QAAA,CACrB,CACA,MAAA,CAAQA,CAAAA,CAAa,SAAS,MAAA,EAAU,gBAAA,CACxC,cAAeA,CAAAA,CAAa,QAAA,CAAS,eAAiB,CAAA,CACtD,cAAA,CAAgBA,EAAa,QAAA,CAAS,cAAA,EAAkB,EACzD,CAAA,CACC,MACJ,CACD,CAAC,EAGD,IAAA,CAAK,QAAA,CAAS,kBAAiB,CAAE,KAAA,CAAOnE,GAAiB,CACxDT,CAAAA,CAAI,KACH,CAAA,2CAAA,EAA8CS,CAAAA,YAAe,MAAQA,CAAAA,CAAI,OAAA,CAAU,OAAOA,CAAG,CAAC,EAC/F,EACD,CAAC,GAIE,OAAA,CAAQ,GAAA,CAAI,wBAA0B,MAAA,EACzC,OAAA,CAAQ,OAAO,KAAA,CACd,CAAA;AAAA,CAED,EAEF,CAjFQ,aAAA,CAGJ,IAAI,GAAA,CAGA,iBAAyC,IAAA,CAG1C,QAAA,CAAyB,IAAIoE,GAAAA,CAG7B,eAGC,oBAAA,CAGJ,IAAI,IAER,OAAwB,iCAAA,CAAoC,KAC5D,OAAwB,gCAAA,CAAmC,CAAA,CAAI,GAAA,CAC/D,OAAwB,6BAAA,CAAgC,GAAA,CA6DhD,wBAAwBC,CAAAA,CAAyB,CACxD,IAAMC,CAAAA,CAAQ,IAAA,CAAK,oBAAA,CAAqB,GAAA,CAAID,CAAM,CAAA,CAClD,GAAI,CAACC,CAAAA,CAAO,OAAO,OACnB,IAAMC,CAAAA,CAAM,IAAA,CAAK,GAAA,GACjB,OAAIA,CAAAA,EAAOD,EAAM,aAAA,CAAsB,KAAA,EAGtCC,EAAMD,CAAAA,CAAM,aAAA,CACZX,CAAAA,CAAc,6BAAA,GAEdpE,EAAI,IAAA,CACH,CAAA,0CAAA,EAA6C8E,CAAM,CAAA,kBAAA,EAAqB,IAAA,CAAK,MAAMC,CAAAA,CAAM,aAAA,CAAgBC,CAAAA,EAAO,GAAI,CAAC,CAAA,YAAA,CACtH,CAAA,CACAD,EAAM,aAAA,CAAgBC,CAAAA,CAAAA,CAEhB,KACR,CAEQ,0BAAA,CAA2BF,CAAAA,CAAsB,CACxD,KAAK,oBAAA,CAAqB,MAAA,CAAOA,CAAM,EACxC,CAEQ,2BAA2BA,CAAAA,CAAsB,CACxD,IAAME,CAAAA,CAAM,KAAK,GAAA,EAAI,CAEfC,CAAAA,CAAAA,CADO,IAAA,CAAK,qBAAqB,GAAA,CAAIH,CAAM,CAAA,EACzB,QAAA,EAAY,GAAK,CAAA,CACnCI,CAAAA,CAAU,KAAK,GAAA,CACpBd,CAAAA,CAAc,kCACb,CAAA,EAAK,IAAA,CAAK,GAAA,CAAI,CAAA,CAAGa,EAAW,CAAC,CAAA,CAC9Bb,EAAc,gCACf,CAAA,CACA,KAAK,oBAAA,CAAqB,GAAA,CAAIU,CAAAA,CAAQ,CACrC,SAAAG,CAAAA,CACA,aAAA,CAAeD,EAAME,CAAAA,CACrB,aAAA,CAAe,CAChB,CAAC,EACF,CAEA,MAAa,SACZC,CAAAA,CACAC,CAAAA,CAC8B,CAC9B,GAAM,CAAE,OAAAC,CAAAA,CAAQ,MAAA,CAAAC,CAAAA,CAAQ,EAAA,CAAAC,CAAG,CAAA,CAAIJ,CAAAA,CAI/B,GAHAnF,CAAAA,CAAI,IAAA,CAAK,6BAA6BqF,CAAM,CAAA,CAAE,CAAA,CAG1C,IAAA,CAAK,WAAW,YAAA,CAAc,CACjC,IAAMG,CAAAA,CAAaC,GAAAA,CAAiBJ,EAAQD,CAAAA,EAAY,IAAI,CAAA,CAC5D,GAAI,CAACI,CAAAA,CAAW,OAAA,CACf,OAAAxF,CAAAA,CAAI,IAAA,CACH,gDAAgDqF,CAAM,CAAA,GAAA,EAAMG,CAAAA,CAAW,MAAM,EAC9E,CAAA,CACO,CACN,OAAA,CAAS,KAAA,CACT,GAAAD,CAAAA,CACA,KAAA,CAAO,CACN,IAAA,CAAM,OACN,OAAA,CAASC,CAAAA,CAAW,QAAU,eAC/B,CACD,CAEF,CAEA,OAAQH,CAAAA,EACP,KAAK,YAAA,CACJ,OAAO,CACN,OAAA,CAAS,KAAA,CACT,GAAAE,CAAAA,CACA,MAAA,CAAQ,CACP,eAAA,CAAiB,aACjB,YAAA,CAAc,CACb,MAAO,CAAE,WAAA,CAAa,IAAK,CAAA,CAC3B,SAAA,CAAW,CAAE,WAAA,CAAa,IAAK,CAAA,CAC/B,OAAA,CAAS,CAAE,WAAA,CAAa,IAAK,CAC9B,CAAA,CACA,UAAA,CAAY,IAAA,CAAK,UAAA,CAAW,eAC7B,CACD,EACD,KAAK,2BAAA,CAGJ,YAAK,6BAAA,EAA8B,CAAE,KAAA,CAAM,IAAM,CAAC,CAAC,CAAA,CAC5C,KACR,KAAK,yBAAA,CACJ,OAAO,IAAA,CACR,KAAK,MAAA,CACJ,OAAO,CAAE,OAAA,CAAS,KAAA,CAAO,GAAAA,CAAAA,CAAI,MAAA,CAAQ,EAAG,CAAA,CACzC,KAAK,YAAA,CAAc,CAClB,IAAMG,CAAAA,CAAa,IAAA,CAAK,UAAA,CAAW,WAAU,CACvClB,CAAAA,CAAc,MAAM,IAAA,CAAK,gBAAe,CAExCmB,GAAAA,CAAelC,GAA2B,CAC7CiC,CAAAA,CAAW,IAAKjB,CAAAA,GAAO,CACvB,GAAGA,CAAAA,CACH,YAAad,CAAAA,CAAgCc,CAAAA,CAAE,aAAe,EAAE,CACjE,EAAE,CAAA,CACDiB,CAAAA,CAEH1F,CAAAA,CAAI,IAAA,CACH,6BAA6B0F,CAAAA,CAAW,MAAM,WAAWlB,CAAAA,CAAY,MAAM,qBAC5E,CAAA,CAiBA,IAAMoB,CAAAA,CAAW,CAXM,CACtB,IAAA,CAAM,gBAAA,CACN,YACC,8FAAA,CACD,WAAA,CAAa,CACZ,IAAA,CAAM,QAAA,CACN,UAAA,CAAY,GACZ,oBAAA,CAAsB,KACvB,CACD,CAAA,CAEkC,GAAGD,IAAc,GAAGnB,CAAW,CAAA,CAG3DqB,CAAAA,CAAY3E,EAAqB,WAAA,EAAY,CAC7C4E,EAAe,IAAA,CAAK,SAAA,CAAUF,CAAQ,CAAA,CACtCG,CAAAA,CAAuB,IAAA,CAAK,SAAA,CAAU,CAAE,KAAA,CAAOH,CAAS,CAAC,CAAA,CAC/D,OAAAC,EAAU,MAAA,CAAO,CAChB,IAAA,CAAM,YAAA,CACN,OAAQ,YAAA,CACR,oBAAA,CAAsBA,CAAAA,CAAU,WAAA,CAAYC,CAAY,CAAA,CACxD,qBAAA,CAAuBD,CAAAA,CAAU,WAAA,CAAYE,CAAoB,CAClE,CAAC,EAEM,CACN,OAAA,CAAS,MACT,EAAA,CAAAR,CAAAA,CACA,MAAA,CAAQ,CACP,MAAOK,CACR,CACD,CACD,CACA,KAAK,aACJ,OAAO,IAAA,CAAK,kBAAA,CACXL,CAAAA,CACAD,EACAF,CAAAA,EAAU,KACX,EACD,KAAK,gBAAA,CAAkB,CACtB,IAAMY,CAAAA,CAAiB,IAAA,CAAK,UAAA,CAAW,eAAc,CAC/CC,CAAAA,CAAkB,MAAM,IAAA,CAAK,kBAAA,GAC7BC,CAAAA,CAAe,CAAC,GAAGF,CAAAA,CAAgB,GAAGC,CAAe,CAAA,CAGrDE,EAAcjF,CAAAA,CAAqB,WAAA,GACnCkF,CAAAA,CAAY,IAAA,CAAK,SAAA,CAAUF,CAAY,EAC7C,OAAAC,CAAAA,CAAY,OAAO,CAClB,IAAA,CAAM,gBACN,MAAA,CAAQ,gBAAA,CACR,oBAAA,CAAsB,CAAA,CACtB,sBAAuBA,CAAAA,CAAY,WAAA,CAAYC,CAAS,CACzD,CAAC,EAEM,CACN,OAAA,CAAS,KAAA,CACT,EAAA,CAAAb,EACA,MAAA,CAAQ,CAAE,SAAA,CAAWW,CAAa,CACnC,CACD,CACA,KAAK,gBAAA,CAAkB,CACtB,IAAMG,CAAAA,CAAcf,EACpB,GAAI,CAACe,GAAa,GAAA,CACjB,OAAO,CACN,OAAA,CAAS,MACT,EAAA,CAAAd,CAAAA,CACA,MAAO,CAAE,IAAA,CAAM,OAAQ,OAAA,CAAS,sBAAuB,CACxD,CAAA,CACD,GAAI,CACH,IAAMe,EAAc,IAAA,CAAK,GAAA,GACnBC,CAAAA,CAAS,MAAM,IAAA,CAAK,UAAA,CAAW,aAAaF,CAAAA,CAAY,GAAG,EAG3DG,CAAAA,CAActF,CAAAA,CAAqB,aAAY,CAC/CuF,CAAAA,CAAkB,IAAA,CAAK,SAAA,CAAUF,CAAM,CAAA,CAC7C,OAAAC,EAAY,MAAA,CAAO,CAClB,KAAM,eAAA,CACN,MAAA,CAAQ,gBAAA,CACR,QAAA,CAAUH,EAAY,GAAA,CACtB,oBAAA,CAAsBG,EAAY,WAAA,CAAYH,CAAAA,CAAY,GAAG,CAAA,CAC7D,qBAAA,CAAuBG,CAAAA,CAAY,WAAA,CAAYC,CAAe,CAAA,CAC9D,UAAA,CAAY,KAAK,GAAA,EAAI,CAAIH,CAC1B,CAAC,CAAA,CAEM,CAAE,OAAA,CAAS,MAAO,EAAA,CAAAf,CAAAA,CAAI,MAAA,CAAAgB,CAAO,CACrC,CAAA,MAAS9F,CAAAA,CAAc,CAEtB,IAAMiG,IAAYL,CAAAA,CAAY,GAAA,CAC9B,OAAW,CAAE,QAAA,CAAAM,CAAS,CAAA,GAAK,IAAA,CAAK,aAAA,CAAc,MAAA,GAAU,CACvD,IAAMC,EAAiBD,CAAAA,CAAS,SAAA,CAAU,KACxChC,CAAAA,EAAMA,CAAAA,CAAE,GAAA,GAAQ+B,GAClB,EACA,GAAIE,CAAAA,CACH,OAAA5G,CAAAA,CAAI,IAAA,CACH,mCAAmC0G,GAAS,CAAA,mBAAA,EAAsBC,CAAAA,CAAS,MAAM,GAClF,CAAA,CACO,CACN,QAAS,KAAA,CACT,EAAA,CAAApB,EACA,MAAA,CAAQ,CACP,QAAA,CAAU,CACT,CACC,GAAA,CAAKqB,CAAAA,CAAe,IACpB,QAAA,CAAUA,CAAAA,CAAe,UAAY,YAAA,CACrC,IAAA,CACCA,CAAAA,CAAe,IAAA,EACfA,EAAe,WAAA,EACf,qBACF,CACD,CACD,CACD,CAEF,CAEA,OAAO,CACN,OAAA,CAAS,MACT,EAAA,CAAArB,CAAAA,CACA,MAAO,CACN,IAAA,CAAM,MACN,OAAA,CAAS9E,CAAAA,YAAe,KAAA,CAAQA,CAAAA,CAAI,QAAU,MAAA,CAAOA,CAAG,CACzD,CACD,CACD,CACD,CACA,KAAK,cAAA,CAAgB,CACpB,IAAMoG,CAAAA,CAAc,IAAA,CAAK,WAAW,WAAA,EAAY,CAG1CC,EAAc5F,CAAAA,CAAqB,WAAA,EAAY,CAC/C6F,CAAAA,CAAY,KAAK,SAAA,CAAUF,CAAW,EAC5C,OAAAC,CAAAA,CAAY,OAAO,CAClB,IAAA,CAAM,aAAA,CACN,MAAA,CAAQ,eACR,oBAAA,CAAsB,CAAA,CACtB,sBAAuBA,CAAAA,CAAY,WAAA,CAAYC,CAAS,CACzD,CAAC,CAAA,CAEM,CACN,QAAS,KAAA,CACT,EAAA,CAAAxB,EACA,MAAA,CAAQ,CAAE,QAASsB,CAAY,CAChC,CACD,CACA,KAAK,aAAA,CAAe,CACnB,IAAMR,CAAAA,CAAcf,CAAAA,CAGpB,GAAI,CAACe,CAAAA,EAAa,IAAA,CACjB,OAAO,CACN,OAAA,CAAS,KAAA,CACT,GAAAd,CAAAA,CACA,KAAA,CAAO,CAAE,IAAA,CAAM,MAAA,CAAQ,OAAA,CAAS,qBAAsB,CACvD,CAAA,CACD,GAAI,CACH,IAAMyB,CAAAA,CAAc,KAAK,GAAA,EAAI,CACvBT,CAAAA,CAAS,MAAM,KAAK,UAAA,CAAW,SAAA,CAAU,CAC9C,IAAA,CAAMF,EAAY,IAAA,CAClB,SAAA,CAAWA,CAAAA,CAAY,SAAA,EAAa,EACrC,CAAC,EAGKY,CAAAA,CAAc/F,CAAAA,CAAqB,aAAY,CAC/CgG,CAAAA,CAAiB,IAAA,CAAK,SAAA,CAAU,CACrC,IAAA,CAAMb,CAAAA,CAAY,KAClB,SAAA,CAAWA,CAAAA,CAAY,SACxB,CAAC,CAAA,CACKc,CAAAA,CAAkB,IAAA,CAAK,UAAUZ,CAAM,CAAA,CAC7C,OAAAU,CAAAA,CAAY,MAAA,CAAO,CAClB,IAAA,CAAM,YAAA,CACN,MAAA,CAAQ,aAAA,CACR,SAAUZ,CAAAA,CAAY,IAAA,CACtB,qBAAsBY,CAAAA,CAAY,WAAA,CAAYC,CAAc,CAAA,CAC5D,qBAAA,CAAuBD,CAAAA,CAAY,WAAA,CAAYE,CAAe,CAAA,CAC9D,UAAA,CAAY,KAAK,GAAA,EAAI,CAAIH,CAC1B,CAAC,CAAA,CAEM,CAAE,OAAA,CAAS,MAAO,EAAA,CAAAzB,CAAAA,CAAI,OAAAgB,CAAO,CACrC,OAAS9F,CAAAA,CAAc,CACtB,OAAO,CACN,QAAS,KAAA,CACT,EAAA,CAAA8E,EACA,KAAA,CAAO,CACN,KAAM,KAAA,CACN,OAAA,CAAS9E,CAAAA,YAAe,KAAA,CAAQA,EAAI,OAAA,CAAU,MAAA,CAAOA,CAAG,CACzD,CACD,CACD,CACD,CACA,QACC,OAAO,CACN,OAAA,CAAS,MACT,EAAA,CAAA8E,CAAAA,CACA,MAAO,CAAE,IAAA,CAAM,MAAA,CAAQ,OAAA,CAAS,qBAAqBF,CAAM,CAAA,CAAG,CAC/D,CACF,CACD,CAMQ,6BAAA,EAA+C,CACtD,OAAA,CAAQ,SAAY,CACnB,MAAM,IAAI,QAASV,CAAAA,EAAM,UAAA,CAAWA,EAAG,GAAG,CAAC,CAAA,CAC3C,MAAM,QAAQ,IAAA,CAAK,CAClB,KAAK,oBAAA,CAAqB,IAAI,EAC9B,IAAI,OAAA,CAAeA,CAAAA,EAAM,UAAA,CAAWA,EAAG,IAAM,CAAC,CAC/C,CAAC,CAAA,CAAE,MAAM,IAAM,CAAC,CAAC,EAClB,IACD,CAOA,MAAa,oBAAA,CAAqByC,CAAAA,CAAS,MAAsB,CAChE,GAAK,IAAA,CAAK,QAAA,CACV,IAAI,IAAA,CAAK,gBAAA,CAAkB,OAAO,IAAA,CAAK,gBAAA,CAKvC,GAAI,CAACA,CAAAA,EAAU,IAAA,CAAK,aAAA,CAAc,KAAO,CAAA,CAAG,CAC3C,IAAMpC,CAAAA,CAAM,KAAK,GAAA,EAAI,CAIrB,GAHiB,KAAA,CAAM,KAAK,IAAA,CAAK,aAAA,CAAc,QAAQ,CAAA,CAAE,MACxD,CAAC,CAAE,QAAA,CAAAqC,CAAS,IAAMrC,CAAAA,CAAMqC,CAAAA,CAAWpD,EAAuB,GAC3D,CAAA,CACc,MACf,CAEA,OAAA,IAAA,CAAK,gBAAA,CAAA,CAAoB,SAAY,CACpC,GAAI,CACH,IAAMqD,CAAAA,CAAY,KAAA,CAAM,KAAK,IAAA,CAAK,aAAA,CAAc,MAAA,EAAQ,EAAE,MAAA,CACzD,CAACC,EAAK,CAAE,QAAA,CAAAZ,CAAS,CAAA,GAAMY,CAAAA,CAAMZ,CAAAA,CAAS,KAAA,CAAM,OAC5C,CACD,CAAA,CAGA,GAAI,IAAA,CAAK,aAAA,CAAc,OAAS,CAAA,CAC/B,IAAA,IAAS3C,CAAAA,CAAI,CAAA,CAAGA,EAAI,CAAA,CAAGA,CAAAA,EAAAA,CAAK,CAI3B,GAAA,CADE,IAAA,CAAK,SAAiB,IAAA,EAAM,cAAA,EAAe,CAAE,MAAA,EAAU,GACvC,CAAA,CAAG,CACpBhE,EAAI,IAAA,CACH,iEACD,EACA,KACD,CACAA,CAAAA,CAAI,IAAA,CACH,sDAAsDgE,CAAAA,CAAI,CAAC,CAAA,OAAA,CAC5D,CAAA,CACA,MAAM,IAAI,OAAA,CAASW,CAAAA,EAAM,UAAA,CAAWA,EAAG,GAAI,CAAC,EAC7C,CAID,IAAI6C,EAAwB,EAAC,CACvBC,CAAAA,CAAoB,IAAA,CAAK,cAAc,IAAA,GAAS,CAAA,CAAI,EAAI,CAAA,CAE9D,IAAA,IACKC,EAAc,CAAA,CAClBA,CAAAA,CAAcD,CAAAA,CACdC,CAAAA,EAAAA,CACC,CAED,IAAA,IACKC,CAAAA,CAAU,EACdA,CAAAA,CAAUzD,CAAAA,CACVyD,IACC,CACDH,CAAAA,CACE,MAAM,IAAA,CAAK,UAAU,yBAAA,EAA0B,EAAM,EAAC,CACxD,IAAMI,EAAS,IAAA,CAAK,QAAA,EAAU,SAAA,EAAU,CAExC,GADkBJ,CAAAA,CAAY,MAAA,CAAQjC,GAAOA,CAAAA,GAAOqC,CAAM,EAC5C,MAAA,CAAS,CAAA,CAAG,MACtBD,CAAAA,CAAUzD,EAA6B,CAAA,GAC1ClE,CAAAA,CAAI,KACH,CAAA,oCAAA,EAAuC2H,CAAAA,CAAU,CAAC,CAAA,CAAA,EAAIzD,CAA0B,CAAA,GAAA,CACjF,CAAA,CACA,MAAM,IAAI,OAAA,CAASS,GAAM,UAAA,CAAWA,CAAAA,CAAG,GAAI,CAAC,CAAA,EAE9C,CAGA,IAAMkD,EAEJ,IAAA,CAAK,QAAA,CAAiB,IAAA,EACpB,cAAA,GACD,GAAA,CAAKC,CAAAA,EACLA,CAAAA,CAAE,UAAA,CAAW,UACd,CAAA,EAAK,EAAC,CAEJD,CAAAA,CAAY,OAAS,CAAA,GACxBL,CAAAA,CAAc,KAAA,CAAM,IAAA,CAAK,IAAI,GAAA,CAAI,CAAC,GAAGA,CAAAA,CAAa,GAAGK,CAAW,CAAC,CAAC,CAAA,CAAA,CAGnE,IAAME,EAAY,IAAA,CAAK,QAAA,EAAU,WAAU,CAE3C,GADqBP,EAAY,MAAA,CAAQjC,CAAAA,EAAOA,CAAAA,GAAOwC,CAAS,EAC/C,MAAA,CAAS,CAAA,CAAG,MAEzBL,CAAAA,CAAcD,CAAAA,CAAoB,IACrCzH,CAAAA,CAAI,IAAA,CACH,CAAA,sEAAA,EAAyE0H,CAAAA,CAAc,CAAC,CAAA,CAAA,EAAID,CAAiB,MAC9G,CAAA,CACA,MAAM,IAAI,OAAA,CAAS9C,CAAAA,EAAM,UAAA,CAAWA,CAAAA,CAAG,GAAI,CAAC,CAAA,EAE9C,CAEA,GAAI6C,CAAAA,CAAY,SAAW,CAAA,CAAG,CAC7BxH,CAAAA,CAAI,IAAA,CACH,+DACD,CAAA,CACA,MACD,CAEKoH,CAAAA,EACJpH,CAAAA,CAAI,KACH,CAAA,yBAAA,EAA4BwH,CAAAA,CAAY,MAAM,CAAA,6BAAA,CAC/C,EAMD,IAAMQ,CAAAA,CAAiB,IAAI,GAAA,CAAA,CAExB,KAAK,QAAA,CAAiB,IAAA,EAAM,cAAA,IAAiB,EAAK,EAAC,EAAG,GAAA,CACtDF,GACAA,CAAAA,CAAE,UAAA,CAAW,UACf,CACD,CAAA,CACAN,CAAAA,CAAc,CAAC,GAAGA,CAAW,EAAE,IAAA,CAAK,CAACS,EAAGC,CAAAA,GAAM,CAC7C,IAAMC,CAAAA,CAAaH,EAAe,GAAA,CAAIC,CAAC,EAAI,CAAA,CAAI,CAAA,CAE/C,QADmBD,CAAAA,CAAe,GAAA,CAAIE,CAAC,CAAA,CAAI,EAAI,CAAA,EAC3BC,CACrB,CAAC,CAAA,CAED,IAAIC,EAAe,CAAA,CACfC,CAAAA,CAAa,CAAA,CACbC,GAAAA,CAAe,GAGbV,CAAAA,CAAS,IAAA,CAAK,UAAU,SAAA,EAAU,CAClCW,EAAgBf,CAAAA,CAAY,MAAA,CAAQ1C,CAAAA,EAAW,CAGpD,GAFI,CAAC,IAAA,CAAK,UACNA,CAAAA,GAAW8C,CAAAA,EACX,KAAK,uBAAA,CAAwB9C,CAAM,CAAA,CAAG,OAAO,GACjD,IAAM0D,CAAAA,CAAS,KAAK,aAAA,CAAc,GAAA,CAAI1D,CAAM,CAAA,CAC5C,OACC0D,CAAAA,EACA,IAAA,CAAK,KAAI,CAAIA,CAAAA,CAAO,QAAA,CAAWvE,CAAAA,CAAuB,KAEtDmE,CAAAA,EAAAA,CACO,CAAA,CAAA,EAED,CAAA,CACR,CAAC,EAGKK,CAAAA,CAAe,MAAM,QAAQ,UAAA,CAClCF,CAAAA,CAAc,IAAI,MAAOzD,CAAAA,EACnB,IAAA,CAAK,QAAA,EACV9E,EAAI,IAAA,CAAK,CAAA,sCAAA,EAAyC8E,CAAM,CAAA,CAAE,CAAA,CACnD,CACN,MAAA,CAAAA,CAAAA,CACA,QAAA,CAAU,MAAM,KAAK,QAAA,CAAS,aAAA,CAAcA,CAAM,CACnD,CAAA,EAL2B,IAM3B,CACF,CAAA,CAEA,IAAA,IAAWyB,CAAAA,IAAUkC,EACpB,GAAIlC,CAAAA,CAAO,SAAW,WAAA,EAAeA,CAAAA,CAAO,OAAO,QAAA,CAAU,CAC5D,GAAM,CAAE,OAAAzB,CAAAA,CAAQ,QAAA,CAAA6B,CAAS,CAAA,CAAIJ,CAAAA,CAAO,MACpC,IAAA,CAAK,aAAA,CAAc,GAAA,CAAIzB,CAAAA,CAAQ,CAC9B,QAAA,CAAA6B,CAAAA,CACA,SAAU,IAAA,CAAK,GAAA,EAChB,CAAC,CAAA,CACD,IAAA,CAAK,0BAAA,CAA2B7B,CAAM,CAAA,CACtCwD,GAAAA,CAAe,GACfF,CAAAA,EAAAA,CACApI,CAAAA,CAAI,KACH,CAAA,qCAAA,EAAwC8E,CAAM,CAAA,EAAA,EAAK6B,CAAAA,CAAS,MAAM,MAAM,CAAA,OAAA,CACzE,EACD,CAAA,KAAWJ,CAAAA,CAAO,SAAW,WAAA,EAAeA,CAAAA,CAAO,KAAA,EAClD,IAAA,CAAK,2BAA2BA,CAAAA,CAAO,KAAA,CAAM,MAAM,CAAA,CACnD8B,CAAAA,EAAAA,CACArI,EAAI,IAAA,CACH,CAAA,+CAAA,EAAkDuG,CAAAA,CAAO,KAAA,CAAM,MAAM,CAAA,CACtE,CAAA,EACUA,EAAO,MAAA,GAAW,UAAA,GAC5B8B,IACArI,CAAAA,CAAI,IAAA,CACH,8CAAA,CACAuG,CAAAA,CAAO,kBAAkB,KAAA,CACtBA,CAAAA,CAAO,OAAO,OAAA,CACd,MAAA,CAAOA,EAAO,MAAM,CACxB,CAAA,CAAA,CAMD,IAAA,CAAa,gBAAkB,CAC/B,UAAA,CAAYiB,EAAY,MAAA,CACxB,OAAA,CAASY,EACT,QAAA,CAAUC,CAAAA,CACV,aAAA,CAAe,IAAA,CAAK,KACrB,CAAA,CAEIC,KACc,KAAA,CAAM,IAAA,CAAK,KAAK,aAAA,CAAc,MAAA,EAAQ,CAAA,CAAE,OACxD,CAACf,CAAAA,CAAK,CAAE,QAAA,CAAAZ,CAAS,IAAMY,CAAAA,CAAMZ,CAAAA,CAAS,KAAA,CAAM,MAAA,CAC5C,CACD,CAAA,GAEiBW,CAAAA,EAAa,KAAK,cAAA,GAClC,OAAA,CAAQ,OAAO,KAAA,CACd,CAAA;AAAA,CACD,CAAA,CACA,IAAA,CAAK,cAAA,EAAe,EAGvB,QAAE,CACD,IAAA,CAAK,gBAAA,CAAmB,KACzB,CACD,CAAA,GAAG,CAEI,IAAA,CAAK,gBAAA,CACb,CAMO,YAAA,EAAuB,CAC7B,OAAO,IAAA,CAAK,cAAc,IAC3B,CAKA,MAAc,cAAA,EAMZ,CACD,IAAMoB,CAAAA,CAAqB,MAAA,CAAO,QAAA,CACjC,QAAQ,GAAA,CAAI,uBAAA,EAA2B,GAAA,CACvC,EACD,EAMA,GAAI,IAAA,CAAK,aAAA,CAAc,IAAA,CAAOA,CAAAA,EAAsB,IAAA,CAAK,QAAA,CAAU,CAClE,IAAMC,CAAAA,CAAmB,MAAA,CAAO,QAAA,CAC/B,OAAA,CAAQ,IAAI,iCAAA,EAAqC,MAAA,CACjD,EACD,CAAA,CACMC,EACL,MAAA,CAAO,QAAA,CAASD,CAAgB,CAAA,EAAKA,EAAmB,CAAA,CACrDA,CAAAA,CACA,IAAA,CAEEE,CAAAA,CAAW,KAAK,GAAA,EAAI,CAAID,CAAAA,CAC1BE,GAAAA,CAAc,EACdC,CAAAA,CAAgB,EAAA,CAEpB,KAAO,IAAA,CAAK,KAAI,CAAIF,CAAAA,EACf,EAAA,IAAA,CAAK,aAAA,CAAc,IAAA,EAAQH,CAAAA,GAE/B,MAAM,OAAA,CAAQ,KAAK,CAClB,IAAA,CAAK,oBAAA,CAAqB,IAAI,EAC9B,IAAI,OAAA,CAAeM,CAAAA,EAAY,UAAA,CAAWA,EAAS,GAAI,CAAC,CACzD,CAAC,EAAE,KAAA,CAAM,IAAM,CAAC,CAAC,EAEb,IAAA,CAAK,aAAA,CAAc,IAAA,EAAQN,CAAAA,CAAAA,CAAAA,EARF,CAW7B,GAAI,IAAA,CAAK,aAAA,CAAc,IAAA,GAASK,GAE/B,GADAD,GAAAA,EAAAA,CACIA,GAAAA,EAAe,CAAA,EAAK,IAAA,CAAK,aAAA,CAAc,IAAA,CAAO,CAAA,CAAG,CACpD9I,CAAAA,CAAI,IAAA,CACH,CAAA,2CAAA,EAA8C,IAAA,CAAK,cAAc,IAAI,CAAA,CAAA,EAAI0I,CAAkB,CAAA,iCAAA,CAC5F,EACA,KACD,CAAA,CAAA,KAEAI,GAAAA,CAAc,CAAA,CACdC,EAAgB,IAAA,CAAK,aAAA,CAAc,IAAA,CAIpC,MAAM,IAAI,OAAA,CAASpE,CAAAA,EAAM,UAAA,CAAWA,CAAAA,CAAG,GAAI,CAAC,EAC7C,CAGI,IAAA,CAAK,cAAc,IAAA,CAAO+D,CAAAA,GAC7B1I,CAAAA,CAAI,IAAA,CACH,CAAA,qDAAA,EAA8C,IAAA,CAAK,aAAA,CAAc,IAAI,IAAI0I,CAAkB,CAAA,mEAAA,CAC5F,CAAA,CAEA,IAAA,CAAK,qBAAqB,IAAI,CAAA,CAAE,KAAA,CAAM,IAAM,CAAC,CAAC,CAAA,EAEhD,CAGA,IAAMO,EAAe,EAAC,CAChBC,CAAAA,CAAY,IAAI,IAChBC,CAAAA,CAAiB,IAAI,GAAA,CAC1B,IAAA,CAAK,WAAW,SAAA,EAAU,CAAE,GAAA,CAAK1E,CAAAA,EAAMA,EAAE,IAAI,CAC9C,CAAA,CAEA,IAAA,GAAW,CAACK,CAAAA,CAAQ,CAAE,QAAA,CAAA6B,CAAS,CAAC,CAAA,GAAK,IAAA,CAAK,aAAA,CAAc,SAAQ,CAC/D,IAAA,IAAWyC,CAAAA,IAAQzC,CAAAA,CAAS,MAAO,CAElC,GAAIyC,CAAAA,CAAK,IAAA,GAAS,iBAAkB,SAOpC,IAAIC,CAAAA,CAAYD,CAAAA,CAAK,MACjBF,CAAAA,CAAU,GAAA,CAAIE,CAAAA,CAAK,IAAI,GAAKD,CAAAA,CAAe,GAAA,CAAIC,CAAAA,CAAK,IAAI,KAC3DC,CAAAA,CAAY,CAAA,EAAGD,CAAAA,CAAK,IAAI,CAAA,CAAA,EAAItE,CAAAA,CAAO,KAAA,CAAM,EAAE,CAAC,CAAA,CAAA,CAAA,CAE7CoE,CAAAA,CAAU,GAAA,CAAIG,CAAS,EAEvB,IAAMC,CAAAA,CAAe3C,CAAAA,CAAS,UAAA,EAAY,MAAQ,kBAAA,CAG5C4C,CAAAA,CAAWH,CAAAA,CAAK,WAAA,EAAe,oBAAoBE,CAAY,CAAA,CAAA,CAC/DE,CAAAA,CAIF,CACH,KAAMH,CAAAA,CACN,WAAA,CAAa5F,CAAAA,EAA2B,CACrCE,EAAgC4F,CAAQ,CAAA,CACxCA,CAAAA,CACH,WAAA,CAAcH,EAAK,WAAA,EAAe,CACjC,IAAA,CAAM,QAAA,CACN,UAAA,CAAY,EACb,CACD,EAIC,OAAOI,CAAAA,CAAU,WAAA,EAAgB,QAAA,EACjC,CAACA,CAAAA,CAAU,WAAA,CAAY,IAAA,GAEvBA,CAAAA,CAAU,YAAY,IAAA,CAAO,QAAA,CAAA,CAG7B,OAAOA,CAAAA,CAAU,aAAgB,QAAA,EACjC,CAACA,CAAAA,CAAU,WAAA,CAAY,aAEvBA,CAAAA,CAAU,WAAA,CAAY,UAAA,CAAa,IAGpC,IAAIC,CAAAA,CAAY,EAAA,CACZ9C,CAAAA,CAAS,WACZ8C,CAAAA,CAAY;AAAA,cAAA,EAAmB9C,EAAS,QAAA,CAAS,MAAM,KAKxD,IAAM+C,CAAAA,CAAcF,EAAU,WAAA,CAAY,UAAA,EAAc,EAAC,CACrDG,EAAc,EAAA,CACd,CAAClG,GAA2B,EAAKiG,CAAAA,CAAW,UAC/CC,CAAAA,CAAc;AAAA,kCAAA,CAAA,CAAA,CAKd,CAAClG,CAAAA,EAA2B,EAC5B+F,EAAU,WAAA,CAAY,QAAA,CAAS,yBAAyB,CAAA,GAExDA,CAAAA,CAAU,YAAcA,CAAAA,CAAU,WAAA,CAAY,QAC7C,0BAAA,CACA,6DACD,GAGD,IAAMI,CAAAA,CAAcnG,GAA2B,CAC5C;AAAA,OAAA,EAAYqB,EAAO,KAAA,CAAM,EAAE,CAAC,CAAA,CAAA,EAAI2E,CAAS,CAAA,CAAA,CACzC;AAAA,SAAA,EAAc3E,CAAAA,CAAO,MAAM,EAAE,CAAC,IAAI2E,CAAS,CAAA,EAAGE,CAAW,CAAA,CAAA,CAC5DH,CAAAA,CAAU,YAAc,CAAA,EAAGA,CAAAA,CAAU,WAAW,CAAA,EAAGI,CAAW,GAE9DX,CAAAA,CAAM,IAAA,CAAKO,CAAS,EACrB,CAGD,OAAOP,CACR,CAKA,MAAc,kBAAA,EAOZ,CAEI,KAAK,gBAAA,EACT,IAAA,CAAK,qBAAqB,IAAI,CAAA,CAAE,MAAM,IAAM,CAAC,CAAC,CAAA,CAG/C,IAAMvE,EAKD,EAAC,CACAmF,CAAAA,CAAW,IAAI,GAAA,CAAI,IAAA,CAAK,WAAW,aAAA,EAAc,CAAE,IAAKlF,CAAAA,EAAMA,CAAAA,CAAE,GAAG,CAAC,CAAA,CAE1E,OAAW,CAACG,CAAAA,CAAQ,CAAE,QAAA,CAAA6B,CAAS,CAAC,CAAA,GAAK,IAAA,CAAK,cAAc,OAAA,EAAQ,CAC/D,IAAA,IAAWmD,CAAAA,IAAYnD,CAAAA,CAAS,SAAA,CAC/B,GAAI,CAACkD,CAAAA,CAAS,IAAIC,CAAAA,CAAS,GAAG,EAAG,CAChC,IAAMC,EAAoB,CAAE,GAAGD,CAAS,CAAA,CAClCR,CAAAA,CAAe3C,EAAS,UAAA,EAAY,IAAA,EAAQ,mBAE9C8C,CAAAA,CAAY,EAAA,CACZ9C,CAAAA,CAAS,QAAA,GACZ8C,CAAAA,CAAY;;AAAA;AAAA,QAAA,EAA4C9C,CAAAA,CAAS,SAAS,MAAM;AAAA,gBAAA,EAAqBA,CAAAA,CAAS,QAAA,CAAS,aAAa,CAAA,CAAA,CAEnIA,CAAAA,CAAS,QAAA,CAAS,cAAA,EAClBA,CAAAA,CAAS,QAAA,CAAS,cAAA,CAAe,MAAA,CAAS,CAAA,GAE1C8C,CAAAA,EAAa;AAAA,iBAAA,EAAsB9C,CAAAA,CAAS,SAAS,cAAA,CAAe,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,CAAA,CAAA,CAIhF,IAAMiD,CAAAA,CAAc;;AAAA;AAAA,UAAA,EAA2CN,CAAY;AAAA,YAAA,EAAiBxE,CAAM,CAAA,EAAG2E,CAAS,CAAA,CAAA,CAG1GM,CAAAA,CAAkB,GAAA,CAAI,UAAA,CAAW,gBAAgB,CAAA,EACpDA,CAAAA,CAAkB,IAAA,CAAO,CAAA,SAAA,EAAYA,EAAkB,IAAI,CAAA,CAAA,CAC3DA,CAAAA,CAAkB,WAAA,CAAc,CAAA,kBAAA,EAAqBA,CAAAA,CAAkB,WAAA,EAAe,wCAAwC,GAAGH,CAAW,CAAA,CAAA,EAE5IG,CAAAA,CAAkB,WAAA,CAAcA,CAAAA,CAAkB,WAAA,CAC/C,CAAA,EAAGA,CAAAA,CAAkB,WAAW,CAAA,EAAGH,CAAW,CAAA,CAAA,CAC9CA,CAAAA,CAAY,IAAA,EAAK,CAGrBlF,CAAAA,CAAU,IAAA,CAAKqF,CAAiB,CAAA,CAChCF,CAAAA,CAAS,GAAA,CAAIC,CAAAA,CAAS,GAAG,EAC1B,CAIF,OAAOpF,CACR,CAMQ,qBAAA,CACP5D,CAAAA,CACsD,CAEtD,IAAA,GAAW,CAACgE,CAAAA,CAAQ,CAAE,SAAA6B,CAAS,CAAC,CAAA,GAAK,IAAA,CAAK,aAAA,CAAc,OAAA,EAAQ,CAE/D,GADaA,EAAS,KAAA,CAAM,IAAA,CAAM,CAAA,EAAM,CAAA,CAAE,IAAA,GAAS7F,CAAQ,CAAA,CAE1D,OAAO,CACN,MAAA,CAAAgE,CAAAA,CACA,gBAAA,CAAkBhE,CACnB,CAAA,CAKF,IAAMkJ,CAAAA,CAAQlJ,CAAAA,CAAS,MAAM,GAAG,CAAA,CAChC,GAAIkJ,CAAAA,CAAM,MAAA,CAAS,CAAA,CAAG,CACrB,IAAMC,EAASD,CAAAA,CAAM,GAAA,EAAI,CACnBE,CAAAA,CAAWF,CAAAA,CAAM,IAAA,CAAK,GAAG,CAAA,CAC/B,OAAW,CAAClF,CAAAA,CAAQ,CAAE,QAAA,CAAA6B,CAAS,CAAC,CAAA,GAAK,IAAA,CAAK,cAAc,OAAA,EAAQ,CAC/D,GAAI7B,CAAAA,CAAO,QAAA,CAASmF,CAAAA,EAAU,EAAE,CAAA,EAClBtD,EAAS,KAAA,CAAM,IAAA,CAAMlC,CAAAA,EAAMA,CAAAA,CAAE,IAAA,GAASyF,CAAQ,CAAA,CAE1D,OAAO,CACN,MAAA,CAAApF,CAAAA,CACA,gBAAA,CAAkBoF,CACnB,CAIJ,CAEA,OAAO,IACR,CAQQ,YAAA,CAAapF,CAAAA,CAAwB,CAE5C,OAAA,CADc,OAAA,CAAQ,GAAA,CAAI,qBAAA,EAAyB,UAAA,IACrC,MAAA,CAAeA,CAAAA,CACtB,CAAA,GAAA,EAAMA,CAAAA,CAAO,KAAA,CAAM,EAAE,CAAC,CAAA,CAC9B,CAEA,MAAc,kBAAA,CACbS,CAAAA,CACAD,CAAAA,CACA6E,CAAAA,CAC8B,CAC9B,IAAMrJ,CAAAA,CAAWwE,EAAO,IAAA,CAGxB,GAAIxE,CAAAA,GAAa,gBAAA,CAAkB,CAIlC,IAAA,CAAK,oBAAA,CAAqB,IAAI,EAAE,KAAA,CAAM,IAAM,CAAC,CAAC,CAAA,CAG9C,IAAMsJ,CAAAA,CAAS,IAAA,CAAa,iBAAmB,CAC9C,UAAA,CAAY,CAAA,CACZ,OAAA,CAAS,CAAA,CACT,QAAA,CAAU,CACX,CAAA,CACMC,EAAgB,IAAA,CAAK,aAAA,CAAc,IAAA,CACnCC,CAAAA,CAAY,IAAA,CAAK,QAAA,CAAW,QAAA,CAAW,SAAA,CACvCC,EAAc,KAAA,CAAM,IAAA,CAAK,IAAA,CAAK,aAAA,CAAc,MAAA,EAAQ,CAAA,CAAE,MAAA,CAC3D,CAAChD,CAAAA,CAAK,CAAE,QAAA,CAAAZ,CAAS,CAAA,GAAMY,CAAAA,CAAMZ,CAAAA,CAAS,KAAA,CAAM,OAC5C,CACD,CAAA,CACM6D,CAAAA,CAAc,IAAA,CAAK,QAAA,CAEtB,IAAA,CAAK,QAAA,CAAiB,IAAA,EAAM,gBAAe,CAAE,MAAA,CAC7C,CAAA,CAEGC,CAAAA,CACL,IAAA,CAAK,QAAA,EAEJ,IAAA,CAAK,QAAA,CAAiB,QAAQ,cAAA,CAE5B,IAAA,CAAK,QAAA,CAAiB,MAAA,CAAO,cAAA,CAC7B,EAAC,CACCC,CAAAA,CAAiBD,EAAe,MAAA,CAGhCE,CAAAA,CAAAA,CADY,OAAA,CAAQ,GAAA,CAAI,qBAAA,EAAyB,UAAA,IAClB,SAAA,CAE/BC,CAAAA,CAAgBD,EACnBF,CAAAA,CACC,GAAA,CAAKI,CAAAA,EAAS,CACd,IAAMb,CAAAA,CAAQa,CAAAA,CAAK,KAAA,CAAM,GAAG,CAAA,CACtBtF,CAAAA,CAAKyE,CAAAA,CAAMA,CAAAA,CAAM,MAAA,CAAS,CAAC,CAAA,CACjC,OAAO,YAAOzE,CAAAA,CAAKA,CAAAA,CAAG,KAAA,CAAM,EAAE,CAAA,CAAI,SAAS,CAAA,YAAA,CAC5C,CAAC,EACA,IAAA,CAAK;AAAA,CAAI,CAAA,CACV,EAAA,CAEGuF,CAAAA,CAAmB,IAAA,CAAK,QAAA,CAE3B,IAAA,CAAK,QAAA,CAAiB,mBAAA,EAAoB,CAC1C,CAAA,CAEGC,CAAAA,CAAY,IAAA,CAAK,QAAA,EAAU,WAAU,EAAK,SAAA,CAC1CC,CAAAA,CACLD,CAAAA,GAAc,SAAA,CAAYA,CAAAA,CAAY,IAAA,CAAK,YAAA,CAAaA,CAAS,CAAA,CAE5DE,CAAAA,CAAiB,KAAA,CAAM,IAAA,CAAK,IAAA,CAAK,cAAc,OAAA,EAAS,CAAA,CAC5D,OAAA,CAAQ,CAAC,CAACnG,CAAAA,CAAQ,CAAE,QAAA,CAAA6B,CAAS,CAAC,CAAA,GAC9BA,CAAAA,CAAS,KAAA,CAAM,IACblC,CAAAA,EAAM,CAAA,SAAA,EAAOA,CAAAA,CAAE,IAAI,CAAA,eAAA,EAAkB,IAAA,CAAK,YAAA,CAAaK,CAAM,CAAC,CAAA,CAAA,CAChE,CACD,CAAA,CACC,IAAA,CAAK;AAAA,CAAI,CAAA,CAELoG,EAAa,CAClB,CAAA,kBAAA,EAAqBZ,IAAc,QAAA,CAAW,QAAA,CAAW,SAAS,CAAA,CAAA,CAClE,CAAA,sBAAA,EAAyBU,CAAW,CAAA,CAAA,CACpC,CAAA,SAAA,EAAYR,CAAW,CAAA,SAAA,EAAYM,CAAgB,iBAAiBJ,CAAc,CAAA,WAAA,CAAA,CAClFC,CAAAA,EAAkBD,CAAAA,CAAiB,CAAA,CAChC;AAAA;AAAA,EAAyBE,CAAa;AAAA,CAAA,CACtC,GACH,CAAA,WAAA,EAAcR,CAAAA,CAAM,UAAU,CAAA,cAAA,EAAiBA,EAAM,OAAO,CAAA,MAAA,EAASA,CAAAA,CAAM,QAAQ,QACnF,CAAA,SAAA,EAAYC,CAAa,gBAAgBE,CAAW,CAAA,mBAAA,CAAA,CACpDA,EAAc,CAAA,CACX;AAAA;AAAA,EAAoDU,CAAc,CAAA,CAAA,CAClE;AAAA,+BAAA,CAAA,CAEH/J,CAAAA,CAAqB,WAAA,EAAY,CAAE,iBAAA,EACpC,CAAA,CACE,MAAA,CAAQiK,CAAAA,EAASA,CAAAA,GAAS,EAAE,CAAA,CAC5B,IAAA,CAAK;AAAA,CAAI,EAGLC,CAAAA,CAAgBlK,CAAAA,CAAqB,aAAY,CACvD,OAAAkK,EAAc,MAAA,CAAO,CACpB,IAAA,CAAM,YAAA,CACN,OAAQ,YAAA,CACR,QAAA,CAAU,iBACV,oBAAA,CAAsB,CAAA,CACtB,sBAAuBA,CAAAA,CAAc,WAAA,CAAYF,CAAU,CAC5D,CAAC,CAAA,CAEM,CACN,QAAS,KAAA,CACT,EAAA,CAAA3F,EACA,MAAA,CAAQ,CACP,OAAA,CAAS,CACR,CACC,IAAA,CAAM,MAAA,CACN,KAAM2F,CACP,CACD,CACD,CACD,CACD,CAEA,IAAMG,EAAU,IAAA,CAAK,UAAA,CACnB,WAAU,CACV,IAAA,CAAM,GAAM,CAAA,CAAE,IAAA,GAASvK,CAAQ,CAAA,CAEjC,GAAI,CAACuK,CAAAA,EAAW,KAAK,QAAA,CAAU,CAG9B,IAAIC,CAAAA,CAAS,IAAA,CAAK,qBAAA,CAAsBxK,CAAQ,EAQhD,GALKwK,CAAAA,GACJ,MAAM,IAAA,CAAK,oBAAA,GACXA,CAAAA,CAAS,IAAA,CAAK,qBAAA,CAAsBxK,CAAQ,GAGzCwK,CAAAA,CAAQ,CACXtL,EAAI,IAAA,CACH,CAAA,uBAAA,EAA0Bc,CAAQ,CAAA,2BAAA,EAA8BwK,CAAAA,CAAO,MAAM,CAAA,YAAA,EAAeA,EAAO,gBAAgB,CAAA,CAAA,CACpH,EAIA,IAAMC,GAAAA,CAAgB,KAAK,aAAA,CAAc,GAAA,CAAID,CAAAA,CAAO,MAAM,EACtDE,CAAAA,CAAiBrB,CAAAA,CACrB,GAAIoB,GAAAA,EAAe,QAAA,CAAS,aAAc,CACzC,IAAME,CAAAA,CACLtB,CAAAA,EAAU,MAAM,IAAA,CAAK,0BAAA,CAA2BmB,EAAO,MAAM,CAAA,CAC9D,GAAI,CAACG,CAAAA,CAAe,CACnB,IAAMnC,EACLiC,GAAAA,CAAc,QAAA,CAAS,YAAY,IAAA,EAAM,WAAA,IACzC,SAAA,CACKG,CAAAA,CAAOH,GAAAA,CAAc,QAAA,CAAS,UAC9BI,CAAAA,CAAUL,CAAAA,CAAO,OAAO,KAAA,CAAM,EAAE,EAAE,WAAA,EAAY,CAC9CM,CAAAA,CAAaF,CAAAA,CAChB,cAAcA,CAAI,CAAA,CAAA,CAClB,cAAcpC,CAAAA,CAAa,WAAA,GAAc,OAAA,CAAQ,aAAA,CAAe,GAAG,CAAC,GACvE,OAAO,CACN,QAAS,KAAA,CACT,EAAA,CAAA/D,EACA,MAAA,CAAQ,CACP,QAAS,CACR,CACC,KAAM,MAAA,CACN,IAAA,CAAM,iDAAiD+D,CAAY,CAAA,8CAAA,EAAiDsC,CAAU,CAAA,eAAA,EAAkBD,CAAO,CAAA,gDAAA,CACxJ,CACD,EACA,OAAA,CAAS,IACV,CACD,CACD,CAEAH,EAAiBC,EAClB,CAEA,OAAO,IAAA,CAAK,sBACXlG,CAAAA,CACA+F,CAAAA,CAAO,iBACPA,CAAAA,CAAO,MAAA,CACPhG,EACAkG,CACD,CACD,CAGA,IAAIK,EAAsB,EAAC,CAC3B,QAAS7H,CAAAA,CAAI,CAAA,CAAGA,EAAI,CAAA,GACnB6H,CAAAA,CAAY,MAAM,IAAA,CAAK,SAAS,aAAA,CAAc/K,CAAQ,EAClD,EAAA+K,CAAAA,CAAU,OAAS,CAAA,CAAA,CAAA,CAFD7H,CAAAA,EAAAA,CAGlBA,CAAAA,CAAI,CAAA,EAAG,MAAM,IAAI,OAAA,CAASW,GAAM,UAAA,CAAWA,CAAAA,CAAG,GAAI,CAAC,CAAA,CAGxD,GAAIkH,CAAAA,CAAU,OAAS,CAAA,CACtB,OAAO,KAAK,qBAAA,CACXtG,CAAAA,CACAzE,EACA+K,CAAAA,CAAU,CAAC,CAAA,CACXvG,CAAAA,CACA6E,CACD,CAEF,CAGA,GAAIkB,CAAAA,CACH,GAAI,CACH,IAAMS,CAAAA,CAAiB,KAAK,GAAA,EAAI,CAC1BvF,EAAS,MAAM,IAAA,CAAK,WAAW,QAAA,CAAS,CAC7C,KAAMzF,CAAAA,CACN,SAAA,CAAWwE,CAAAA,CAAO,SAAA,EAAa,EAChC,CAAC,EAGKyG,CAAAA,CAAiB7K,CAAAA,CAAqB,aAAY,CAClD8K,CAAAA,CAAoB,IAAA,CAAK,SAAA,CAAU1G,EAAO,SAAA,EAAa,EAAE,CAAA,CACzD2G,CAAAA,CAAqB,KAAK,SAAA,CAAU1F,CAAM,CAAA,CAChD,OAAAwF,EAAe,MAAA,CAAO,CACrB,KAAM,WAAA,CACN,MAAA,CAAQ,aACR,QAAA,CAAAjL,CAAAA,CACA,oBAAA,CAAsBiL,CAAAA,CAAe,YAAYC,CAAiB,CAAA,CAClE,sBAAuBD,CAAAA,CAAe,WAAA,CAAYE,CAAkB,CAAA,CACpE,UAAA,CAAY,IAAA,CAAK,GAAA,GAAQH,CAC1B,CAAC,EAEM,CAAE,OAAA,CAAS,MAAO,EAAA,CAAAvG,CAAAA,CAAI,MAAA,CAAAgB,CAAO,CACrC,CAAA,MAAS9F,CAAAA,CAAc,CACtB,OAAO,CACN,QAAS,KAAA,CACT,EAAA,CAAA8E,CAAAA,CACA,KAAA,CAAO,CACN,IAAA,CAAM,KAAA,CACN,QAAS9E,CAAAA,YAAe,KAAA,CAAQA,EAAI,OAAA,CAAU,MAAA,CAAOA,CAAG,CACzD,CACD,CACD,CAGD,OAAO,CACN,OAAA,CAAS,KAAA,CACT,GAAA8E,CAAAA,CACA,KAAA,CAAO,CACN,IAAA,CAAM,OACN,OAAA,CAAS,CAAA,4BAAA,EAA+BzE,CAAQ,CAAA,+DAAA,CACjD,CACD,CACD,CAEA,MAAc,qBAAA,CAEbyE,CAAAA,CACAzE,EACAgE,CAAAA,CAEAQ,CAAAA,CACA6E,EAEe,CACf,GAAI,CAAC,IAAA,CAAK,QAAA,CACT,OAAO,CACN,QAAS,KAAA,CACT,EAAA,CAAA5E,EACA,KAAA,CAAO,CAAE,KAAM,MAAA,CAAQ,OAAA,CAAS,oBAAqB,CACtD,EAGD,IAAIgG,CAAAA,CAAgB,KAAK,aAAA,CAAc,GAAA,CAAIzG,CAAM,CAAA,CAC7CoH,CAAAA,CAAW,IAAA,CAAK,cAAA,CAEpB,GAAIX,CAAAA,CACHW,CAAAA,CAAWX,EAAc,QAAA,CAAS,QAAA,CAAA,KAC5B,CAEN,IAAM5E,CAAAA,CAAW,MAAM,IAAA,CAAK,SAAS,aAAA,CAAc7B,CAAM,EACrD6B,CAAAA,GACHuF,CAAAA,CAAWvF,EAAS,QAAA,CACpB,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI7B,EAAQ,CAC9B,QAAA,CAAA6B,EACA,QAAA,CAAU,IAAA,CAAK,KAChB,CAAC,CAAA,CACD4E,CAAAA,CAAgB,KAAK,aAAA,CAAc,GAAA,CAAIzG,CAAM,CAAA,EAE/C,CAaA,IALC,OAAA,CAAQ,GAAA,CAAI,6BAAA,GAAkC,GAAA,EAC9C,QAAQ,GAAA,CAAI,eAAA,GAAoB,QAChC,OAAA,CAAQ,GAAA,CAAI,gBAAkB,MAAA,EAC9B,OAAA,CAAQ,GAAA,CAAI,QAAA,GAAa,eACzB,OAAA,CAAQ,GAAA,CAAI,WAAa,MAAA,GACEyG,CAAAA,CAAe,CAC1C,IAAMjC,CAAAA,CACLiC,CAAAA,CAAc,QAAA,CAAS,YAAY,IAAA,EAAM,WAAA,IAAiB,EAAA,CACvDjC,CAAAA,CAAa,SAAS,OAAO,CAAA,CAAG4C,CAAAA,CAAW,KAAA,CACtC5C,EAAa,QAAA,CAAS,MAAM,EAAG4C,CAAAA,CAAW,KAAA,CAC1C5C,EAAa,QAAA,CAAS,QAAQ,CAAA,GAAG4C,CAAAA,CAAW,OACtD,CAGA,IAAMC,EAAQ,MAAM,IAAA,CAAK,SAAS,WAAA,CAAYrH,CAAM,CAAA,CAChDsH,GAAAA,CAA4B,KAI1BC,CAAAA,CAAK,aAAa,IAAS,CAAA,CAC3BC,EAAkB,MAAA,CAAO,MAAA,CAAOD,CAAAA,CAAG,iBAAA,EAAmB,CAAA,CAC1D,IAAA,GACA,MAAA,CAAQrI,CAAAA,EAAMA,GAAG,MAAA,GAAW,MAAM,EAClC,GAAA,CAAKA,CAAAA,EAAMA,GAAG,OAAO,CAAA,CAGvB,QAAW6G,CAAAA,IAAQsB,CAAAA,CAAO,CACzB,IAAMnC,CAAAA,CAAQa,CAAAA,CAAK,KAAA,CAAM,GAAG,CAAA,CACtB0B,CAAAA,CAAQvC,EAAM,OAAA,CAAQ,KAAK,EACjC,GAAIuC,CAAAA,GAAU,EAAA,CAAI,CACjB,IAAMC,CAAAA,CAAexC,CAAAA,CAAMuC,EAAQ,CAAC,CAAA,CAGpC,GACCC,CAAAA,GAAiB,WAAA,EACjBF,CAAAA,CAAgB,QAAA,CAASE,CAAY,CAAA,CACpC,CACDJ,IAAa,CAAA,UAAA,EAAaF,CAAQ,GAClC,KACD,CAGKE,GAAAA,GACJA,GAAAA,CAAa,GAAGI,CAAY,CAAA,CAAA,EAAIN,CAAQ,CAAA,CAAA,EAE1C,CACD,CAEKE,GAAAA,GAEJA,GAAAA,CAAa,CAAA,UAAA,EAAaF,CAAQ,IAGnClM,CAAAA,CAAI,IAAA,CACH,gCAAgCc,CAAQ,CAAA,IAAA,EAAOsL,GAAU,CAAA,UAAA,EAAatH,CAAM,CAAA,CAAA,CAC7E,CAAA,CAEA,IAAM2H,CAAAA,CAAe,IAAIC,IAAO,SAAA,CAC/BN,GAAAA,CACAO,GACD,CAAA,CACA,OAAO,IAAA,CAAK,mBACXpH,CAAAA,CACAkH,CAAAA,CACA3L,EACAwE,CAAAA,CACAR,CAAAA,CACAqF,CACD,CACD,CAGQ,eAOR,MAAc,0BAAA,CACbrF,EAC8B,CAC9B,GAAIA,EAAQ,CACX,IAAMyG,EAAgB,IAAA,CAAK,aAAA,CAAc,GAAA,CAAIzG,CAAM,EAC7CwE,GAAAA,CACLiC,CAAAA,EAAe,SAAS,UAAA,EAAY,IAAA,EAAM,aAAY,EAAK,EAAA,CAExDqB,CAAAA,CAGElB,CAAAA,CAAOH,GAAe,QAAA,CAAS,SAAA,CACrC,GAAIG,CAAAA,CAAM,CACT,IAAMmB,CAAAA,CAAS,CAAA,WAAA,EAAcnB,CAAI,CAAA,CAAA,CACjCkB,EACC,OAAA,CAAQ,GAAA,CAAIC,CAAM,CAAA,EAAK,OAAA,CAAQ,IAAI,CAAA,iBAAA,EAAoBnB,CAAI,CAAA,CAAE,CAAA,CAC9D1L,EAAI,IAAA,CACH,CAAA,8BAAA,EAAiC0L,CAAI,CAAA,QAAA,EAAWmB,CAAM,UAAU,CAAC,CAACD,CAAS,CAAA,MAAA,EAAS9H,EAAO,KAAA,CAAM,EAAE,CAAC,CAAA,CACrG,EACD,MACC9E,CAAAA,CAAI,IAAA,CACH,CAAA,uEAAA,EAA0E8E,CAAAA,CAAO,MAAM,EAAE,CAAC,aAAawE,GAAY,CAAA,CACpH,EAID,GAAI,CAACsD,CAAAA,CAAW,CACf,IAAMjB,CAAAA,CAAU7G,CAAAA,CAAO,MAAM,EAAE,CAAA,CAAE,aAAY,CAC7C8H,CAAAA,CACC,QAAQ,GAAA,CAAI,CAAA,WAAA,EAAcjB,CAAO,CAAA,CAAE,CAAA,EACnC,QAAQ,GAAA,CAAI,CAAA,iBAAA,EAAoBA,CAAO,CAAA,CAAE,EAC3C,CAGA,GAAI,CAACiB,CAAAA,EAAatD,GAAAA,CAAc,CAC/B,IAAMwD,CAAAA,CAAYxD,IAChB,WAAA,EAAY,CACZ,OAAA,CAAQ,aAAA,CAAe,GAAG,CAAA,CAC5BsD,CAAAA,CACC,QAAQ,GAAA,CAAI,CAAA,WAAA,EAAcE,CAAS,CAAA,CAAE,CAAA,EACrC,OAAA,CAAQ,GAAA,CAAI,oBAAoBA,CAAS,CAAA,CAAE,EAC7C,CAEA,GAAIF,EACH,OAAA5M,CAAAA,CAAI,IAAA,CACH,CAAA,oDAAA,EAAuD8E,EAAO,KAAA,CAAM,EAAE,CAAC,CAAA,EAAA,EAAKwE,GAAAA,EAAgB,SAAS,CAAA,CAAA,CACtG,CAAA,CACOsD,CAET,CAEA,GAAI,IAAA,CAAK,cAAA,CAAgB,OAAO,IAAA,CAAK,cAAA,CAGrC,IAAMG,CAAAA,CAAc,OAAA,CAAQ,GAAA,CAAI,gBAAA,EAAoB,QAAQ,GAAA,CAAI,UAAA,CAChE,GAAIA,CAAAA,CACH,OAAA,IAAA,CAAK,eAAiBA,CAAAA,CACf,IAAA,CAAK,cAAA,CAGb,IAAMC,EAAW,OAAA,CAAQ,GAAA,CAAI,eAC7B,GAAI,CAACA,EAAU,OAEf,IAAMC,CAAAA,CACL,OAAA,CAAQ,IAAI,oBAAA,EACZ,OAAA,CAAQ,IAAI,cAAA,EACZ,iBAAA,CACKC,EACL,OAAA,CAAQ,GAAA,CAAI,wBAAA,EACZ,OAAA,CAAQ,IAAI,kBAAA,EACZ,sBAAA,CACKC,EACL,OAAA,CAAQ,GAAA,CAAI,qBACZ,OAAA,CAAQ,GAAA,CAAI,aAAA,EACZ,mBAAA,CAED,GAAI,CAIH,IAAMC,IAAW,CAAA,EAHDJ,CAAAA,CAAS,SAAS,OAAO,CAAA,CACtCA,CAAAA,CACA,CAAA,EAAGA,CAAQ,CAAA,KAAA,CACa,CAAA,MAAA,CAAA,CAC3BhN,EAAI,IAAA,CACH,CAAA,0DAAA,EAA6DoN,GAAQ,CAAA,CACtE,CAAA,CAEA,IAAM9H,CAAAA,CAAS,IAAI,eAAA,CAAgB,CAClC,WAAY,oBAAA,CACZ,KAAA,CACC,uFACD,QAAA,CAAU6H,CAAAA,CACV,SAAA,CAAWF,CAAAA,CACX,cAAeC,CAChB,CAAC,EAEKG,CAAAA,CAAW,MAAM,MAAMD,GAAAA,CAAU,CACtC,MAAA,CAAQ,MAAA,CACR,QAAS,CACR,cAAA,CAAgB,mCACjB,CAAA,CACA,IAAA,CAAM9H,EAAO,QAAA,EACd,CAAC,CAAA,CAED,GAAI,CAAC+H,CAAAA,CAAS,GAAI,CACjB,IAAM1N,EAAO,MAAM0N,CAAAA,CAAS,MAAK,CACjCrN,CAAAA,CAAI,KACH,CAAA,4CAAA,EAA+CqN,CAAAA,CAAS,MAAM,CAAA,CAAA,EAAI1N,CAAI,EACvE,CAAA,CACA,MACD,CAEA,IAAM4C,EAAQ,MAAM8K,CAAAA,CAAS,MAAK,CAClC,GAAI9K,EAAK,YAAA,CACR,OAAA,IAAA,CAAK,cAAA,CAAiBA,CAAAA,CAAK,aAC3BvC,CAAAA,CAAI,IAAA,CACH,mEACD,CAAA,CACO,IAAA,CAAK,cAEd,CAAA,MAASS,CAAAA,CAAc,CACtBT,CAAAA,CAAI,KACH,CAAA,2CAAA,EACCS,CAAAA,YAAe,MAAQA,CAAAA,CAAI,OAAA,CAAU,OAAOA,CAAG,CAChD,CAAA,CACD,EACD,CAED,CAEA,MAAc,mBAEb8E,CAAAA,CAEA+H,CAAAA,CACAxM,EAEAwE,CAAAA,CACAR,CAAAA,CACAqF,CAAAA,CAEe,CACf,IAAMoD,CAAAA,CAAiBzM,CAAAA,CACjB0M,EAAgB,IAAA,CAAK,QAAA,CACxB,MAAM,IAAA,CAAK,QAAA,CAAS,IAAA,CAAK,MAAA,CAAO,KAAKD,CAAc,CAAC,EACpD,MAAA,CAAO,IAAA,CAAK,EAAE,CAAA,CAEXE,CAAAA,CAAuB,IAAA,CAAK,KAAI,CAGlCC,CAAAA,CAAcvD,EAKlB,GAJKuD,CAAAA,GACJA,EAAc,MAAM,IAAA,CAAK,2BAA2B5I,CAAM,CAAA,CAAA,CAGvDA,EAAQ,CACX,IAAMyG,EAAgB,IAAA,CAAK,aAAA,CAAc,IAAIzG,CAAM,CAAA,CACnD,GAAIyG,CAAAA,EAAe,SAAS,YAAA,EAAgB,CAACmC,EAAa,CACzD,IAAMpE,EACLiC,CAAAA,CAAc,QAAA,CAAS,UAAA,EAAY,IAAA,EAAM,aAAY,EAAK,SAAA,CACrDG,EAAOH,CAAAA,CAAc,QAAA,CAAS,UAC9BI,CAAAA,CAAU7G,CAAAA,CAAO,KAAA,CAAM,EAAE,EAAE,WAAA,EAAY,CACvC8G,EAAaF,CAAAA,CAChB,CAAA,WAAA,EAAcA,CAAI,CAAA,CAAA,CAClB,CAAA,WAAA,EAAcpC,CAAAA,CAAa,WAAA,GAAc,OAAA,CAAQ,aAAA,CAAe,GAAG,CAAC,CAAA,CAAA,CAEvE,OAAO,CACN,OAAA,CAAS,KAAA,CACT,EAAA,CAAA/D,EACA,MAAA,CAAQ,CACP,QAAS,CACR,CACC,KAAM,MAAA,CACN,IAAA,CAAM,CAAA,8CAAA,EAAiD+D,CAAY,iDAAiDsC,CAAU,CAAA,eAAA,EAAkBD,CAAO,CAAA,gDAAA,CACxJ,CACD,EACA,OAAA,CAAS,IACV,CACD,CACD,CACD,CAEA,OAAO,IAAI,OAAA,CAAS3C,CAAAA,EAAY,CAC/B,IAAM2E,CAAAA,CAAW,IAAS,CAAA,CAAA,QAAA,CACtBD,CAAAA,EACHC,EAAS,GAAA,CAAI,eAAA,CAAiB,UAAUD,CAAW,CAAA,CAAE,EAGtDJ,CAAAA,CAAO,eAAA,CACN,CACC,SAAA,CAAW,YAAY,IAAA,CAAK,QAAA,EAAU,WAAU,EAAK,WAAW,GAChE,eAAA,CAAiBC,CAAAA,CACjB,eAAA,CAAiBC,CAClB,EACAG,CAAAA,CACA,MAAOlN,EAAmB4M,CAAAA,GAA6B,CACtD,GAAI5M,CAAAA,EAAO,CAAC4M,CAAAA,CAAS,QAAA,CACpB,OAAOrE,CAAAA,CAAQ,CACd,QAAS,KAAA,CACT,EAAA,CAAAzD,EACA,MAAA,CAAQ,CACP,OAAA,CAAS,CACR,CACC,IAAA,CAAM,MAAA,CACN,KAAM,CAAA,sBAAA,EAAyB9E,CAAAA,EAAK,SAAW,UAAU,CAAA,CAC1D,CACD,CAAA,CACA,QAAS,IACV,CACD,CAAC,CAAA,CAGF,GAAM,CAAE,UAAA,CAAAmN,CAAAA,CAAY,YAAA,CAAAC,CAAa,EAChC,MAAMC,GAAAA,CAAgB,sBACrBT,CAAAA,CAAS,gBACV,EAGKU,CAAAA,CAAmB,IAAA,CAAK,SAAA,CAAUzI,CAAAA,CAAO,WAAa,EAAE,EACxD0I,CAAAA,CAAa,CAAA,+BAAA,EAAkClN,CAAQ,CAAA,wBAAA,EAA2BiN,CAAgB,MAClGE,CAAAA,CAAe,CAAA,CAAA,WAAA,CAAY,EAAE,CAAA,CAE7BC,CAAAA,CAAc,KAAK,gBAAA,CACxB,MAAA,CAAO,KAAKF,CAAU,CAAA,CACtBH,CAAAA,CACAI,CACD,EAEME,CAAAA,CAAe,IAAS,WAC1BT,CAAAA,EACHS,CAAAA,CAAa,IAAI,eAAA,CAAiB,CAAA,OAAA,EAAUT,CAAW,CAAA,CAAE,EAG1D,IAAMU,CAAAA,CAAOd,EAAO,YAAA,CACnB,CACC,cAAeD,CAAAA,CAAS,aAAA,CACxB,WAAA,CAAa,IAAI,WAAWa,CAAW,CAAA,CACvC,OAAQ,EAAC,CACT,eAAgBN,CAAAA,CAChB,SAAA,CAAWK,CACZ,CAAA,CACAE,CACD,CAAA,CAEIE,CAAAA,CAAa,GACbC,CAAAA,CAAqC,IAAA,CACzCF,EAAK,EAAA,CAAG,MAAA,CAASG,CAAAA,EAA2B,CAC3CF,GAAcE,CAAAA,CAAQ,iBAAA,CACtBD,EAAeC,EAChB,CAAC,EACDH,CAAAA,CAAK,EAAA,CAAG,KAAA,CAAO,SAAY,CAC1B,GAAI,CACH,GAAIE,CAAAA,EAIC,CAACA,EAAa,QAAA,CAAU,CAC3B,IAAME,CAAAA,CAAW,OAAO,IAAA,CACvBF,CAAAA,CAAa,mBACd,CAAA,CAAE,QAAA,CAAS,KAAK,CAAA,CAShB,GAAI,CARY,MAAM,IAAA,CAAK,SAAS,eAAA,CACnC,MAAA,CAAO,KAAKN,CAAU,CAAA,CACtBQ,EACA,MAAA,CAAO,IAAA,CAAKF,CAAAA,CAAa,UAAU,EACnC,MAAA,CAAO,IAAA,CAAKT,CAAY,CAAA,CACxBQ,CACD,EAGC,OAAOrF,CAAAA,CAAQ,CACd,OAAA,CAAS,MACT,EAAA,CAAAzD,CAAAA,CACA,OAAQ,CACP,OAAA,CAAS,CACR,CACC,IAAA,CAAM,MAAA,CACN,IAAA,CAAM,uEACP,CACD,CAAA,CACA,QAAS,CAAA,CACV,CACD,CAAC,CAEH,CAGD,IAAMkJ,CAAAA,CAAe,KAAK,KAAA,CAAMJ,CAAU,EAGpCK,CAAAA,CAAkBxN,CAAAA,CAAqB,aAAY,CACzDwN,CAAAA,CAAgB,MAAA,CAAO,CACtB,KAAM,WAAA,CACN,MAAA,CAAQ,aACR,QAAA,CAAA5N,CAAAA,CACA,OAAAgE,CAAAA,CACA,oBAAA,CACC4J,CAAAA,CAAgB,WAAA,CAAYX,CAAgB,CAAA,CAC7C,qBAAA,CAAuBW,EAAgB,WAAA,CAAYL,CAAU,EAC7D,UAAA,CAAY,IAAA,CAAK,GAAA,EAAI,CAAIZ,CAC1B,CAAC,CAAA,CAEDzE,EAAQ,CAAE,OAAA,CAAS,MAAO,EAAA,CAAAzD,CAAAA,CAAI,OAAQkJ,CAAa,CAAC,EACrD,CAAA,KAAa,CACZzF,EAAQ,CACP,OAAA,CAAS,MACT,EAAA,CAAAzD,CAAAA,CACA,MAAA,CAAQ,CAAE,QAAS,CAAC,CAAE,KAAM,MAAA,CAAQ,IAAA,CAAM8I,CAAW,CAAC,CAAE,CACzD,CAAC,EACF,CACD,CAAC,EACDD,CAAAA,CAAK,EAAA,CAAG,QAAUO,CAAAA,EACjB3F,CAAAA,CAAQ,CACP,OAAA,CAAS,MACT,EAAA,CAAAzD,CAAAA,CACA,OAAQ,CACP,OAAA,CAAS,CACR,CAAE,IAAA,CAAM,MAAA,CAAQ,IAAA,CAAM,oBAAoBoJ,CAAAA,CAAE,OAAO,EAAG,CACvD,CAAA,CACA,QAAS,IACV,CACD,CAAC,CACF,EACD,CACD,EACD,CAAC,CACF,CAEQ,iBACPC,CAAAA,CACAhN,CAAAA,CACAqM,CAAAA,CACS,CACT,IAAMY,CAAAA,CAAgB,CAAA,CAAA,cAAA,CAAe,cAAejN,CAAAA,CAAKqM,CAAK,EACxDa,CAAAA,CAAY,MAAA,CAAO,MAAA,CAAO,CAACD,EAAO,MAAA,CAAOD,CAAO,EAAGC,CAAAA,CAAO,KAAA,EAAO,CAAC,CAAA,CACxE,OAAO,MAAA,CAAO,MAAA,CAAO,CAACC,CAAAA,CAAWD,CAAAA,CAAO,YAAY,CAAC,CACtD,CACD","file":"chunk-CPLE5VZ5.js","sourcesContent":["import { log } from \"../utils/logger.js\";\n\n/**\n * TokenEstimator — Pluggable strategy for counting tokens in text content.\n *\n * Implementations range from exact BPE tokenization to lightweight heuristics,\n * allowing the SDK to choose the best trade-off for the runtime environment.\n */\nexport interface TokenEstimator {\n\t/** Count the number of tokens in the given text */\n\tcountTokens(text: string): number;\n\t/** Human-readable name of the estimation strategy */\n\treadonly name: string;\n}\n\n/**\n * Exact BPE tokenizer using o200k_base encoding.\n *\n * o200k_base is the standard encoding for all modern OpenAI models\n * (GPT-4o, GPT-4.1, o1, o3, o4) and provides a reasonable baseline\n * for Anthropic/Google models as well (~±5% variance).\n *\n * - Synchronous: safe for hot-path usage without async overhead\n * - Merge cache reduced to 10K entries for long-running server processes\n * - Zero runtime dependencies beyond gpt-tokenizer itself\n */\nexport class RealTokenEstimator implements TokenEstimator {\n\treadonly name = \"o200k_base\";\n\n\tprivate countFn: (text: string) => number;\n\n\tconstructor(\n\t\tcountFn: (text: string) => number,\n\t\tsetMergeCacheSizeFn?: (size: number) => void,\n\t) {\n\t\tthis.countFn = countFn;\n\t\t// Reduce merge cache from default 100K to 10K for server processes\n\t\tif (setMergeCacheSizeFn) {\n\t\t\tsetMergeCacheSizeFn(10_000);\n\t\t}\n\t}\n\n\tcountTokens(text: string): number {\n\t\tif (text.length === 0) return 0;\n\t\treturn this.countFn(text);\n\t}\n}\n\n/**\n * Fallback heuristic estimator: ~4 characters per token.\n *\n * Industry-standard approximation (±10% for English/code content).\n * Used only when gpt-tokenizer fails to load in constrained environments.\n */\nexport class HeuristicTokenEstimator implements TokenEstimator {\n\treadonly name = \"heuristic (chars/4)\";\n\n\tcountTokens(text: string): number {\n\t\tif (text.length === 0) return 0;\n\t\treturn Math.ceil(text.length / 4);\n\t}\n}\n\n/**\n * Factory: creates a RealTokenEstimator with gpt-tokenizer,\n * falling back to HeuristicTokenEstimator if the import fails.\n *\n * Uses dynamic import to avoid blocking SDK initialization and to\n * gracefully degrade in environments where gpt-tokenizer is unavailable.\n */\nexport async function createTokenEstimator(): Promise<TokenEstimator> {\n\ttry {\n\t\tconst mod = await import(\"gpt-tokenizer\");\n\t\tconst estimator = new RealTokenEstimator(\n\t\t\tmod.countTokens,\n\t\t\tmod.setMergeCacheSize,\n\t\t);\n\t\tlog.debug(\"[LIOP-Economy] Token estimator initialized: o200k_base\");\n\t\treturn estimator;\n\t} catch {\n\t\tlog.info(\n\t\t\t\"[LIOP-Economy] gpt-tokenizer unavailable, falling back to heuristic estimator\",\n\t\t);\n\t\treturn new HeuristicTokenEstimator();\n\t}\n}\n\n/**\n * Synchronous factory: creates a HeuristicTokenEstimator immediately.\n * Used when the async factory cannot be awaited (e.g., constructor contexts).\n * The engine should upgrade to the real estimator via setEstimator() later.\n */\nexport function createSyncTokenEstimator(): TokenEstimator {\n\treturn new HeuristicTokenEstimator();\n}\n","import type { Histogram } from \"@opentelemetry/api\";\nimport { metrics } from \"@opentelemetry/api\";\nimport { log } from \"../utils/logger.js\";\n\n/** SDK identifier for the OTel Meter */\nconst METER_NAME = \"@nekzus/liop\";\nconst METER_VERSION = \"1.2.0-alpha.9\";\n\n/**\n * gen_ai.client.token.usage — Recommended explicit bucket boundaries.\n * Source: OpenTelemetry Generative AI Semantic Conventions (experimental).\n */\nconst TOKEN_USAGE_BUCKETS = [\n\t1, 4, 16, 64, 256, 1024, 4096, 16384, 65536, 262144, 1048576, 4194304,\n\t16777216, 67108864,\n];\n\n/**\n * gen_ai.client.operation.duration — Recommended bucket boundaries (seconds).\n * Source: OpenTelemetry Generative AI Semantic Conventions.\n */\nconst DURATION_BUCKETS = [\n\t0.01, 0.02, 0.04, 0.08, 0.16, 0.32, 0.64, 1.28, 2.56, 5.12, 10.24, 20.48,\n\t40.96, 81.92,\n];\n\n/**\n * LiopOTelBridge — OpenTelemetry gen_ai.* metric emitter.\n *\n * Pattern: Library Instrumentation (uses global MeterProvider only).\n * Per official OTel JS documentation:\n * - Libraries MUST NOT create their own MeterProvider\n * - Libraries SHOULD use metrics.getMeter() from the global API\n * - If no MeterProvider is registered by the application, all operations are NoOp\n *   with zero runtime overhead (confirmed by OTel JS source: NoopMeterProvider)\n *\n * Follows OpenTelemetry Generative AI Semantic Conventions (Development status).\n * @see https://opentelemetry.io/docs/specs/semconv/gen-ai/\n */\nexport class LiopOTelBridge {\n\tprivate tokenUsage: Histogram;\n\tprivate operationDuration: Histogram;\n\tprivate active = false;\n\n\tconstructor() {\n\t\ttry {\n\t\t\tconst meter = metrics.getMeter(METER_NAME, METER_VERSION);\n\n\t\t\tthis.tokenUsage = meter.createHistogram(\"gen_ai.client.token.usage\", {\n\t\t\t\tdescription: \"Number of tokens used in LIOP Logic-on-Origin operations\",\n\t\t\t\tunit: \"{token}\",\n\t\t\t\tadvice: { explicitBucketBoundaries: TOKEN_USAGE_BUCKETS },\n\t\t\t});\n\n\t\t\tthis.operationDuration = meter.createHistogram(\n\t\t\t\t\"gen_ai.client.operation.duration\",\n\t\t\t\t{\n\t\t\t\t\tdescription: \"Duration of LIOP operations\",\n\t\t\t\t\tunit: \"s\",\n\t\t\t\t\tadvice: { explicitBucketBoundaries: DURATION_BUCKETS },\n\t\t\t\t},\n\t\t\t);\n\n\t\t\tthis.active = true;\n\t\t\tlog.debug(\"[LIOP-OTel] gen_ai.* metrics bridge initialized\");\n\t\t} catch (err: unknown) {\n\t\t\t// OTel API failed to load — degrade gracefully without affecting protocol\n\t\t\tlog.debug(\n\t\t\t\t`[LIOP-OTel] Bridge disabled: ${err instanceof Error ? err.message : String(err)}`,\n\t\t\t);\n\t\t\tconst noopHistogram = {\n\t\t\t\trecord: () => {},\n\t\t\t} as unknown as Histogram;\n\t\t\tthis.tokenUsage = noopHistogram;\n\t\t\tthis.operationDuration = noopHistogram;\n\t\t}\n\t}\n\n\t/**\n\t * Record token usage with gen_ai.* standard attributes.\n\t *\n\t * @param tokens - Number of tokens consumed\n\t * @param tokenType - \"input\" or \"output\" (gen_ai.token.type)\n\t * @param operationName - gen_ai.operation.name (e.g., \"execute_tool\", \"chat\")\n\t * @param toolName - Optional LIOP-specific tool name for attribution\n\t */\n\trecordTokens(\n\t\ttokens: number,\n\t\ttokenType: \"input\" | \"output\",\n\t\toperationName: string,\n\t\ttoolName?: string,\n\t): void {\n\t\tthis.tokenUsage.record(tokens, {\n\t\t\t\"gen_ai.system\": \"liop\",\n\t\t\t\"gen_ai.operation.name\": operationName,\n\t\t\t\"gen_ai.token.type\": tokenType,\n\t\t\t\"gen_ai.request.model\": \"liop-mesh\",\n\t\t\t...(toolName ? { \"liop.tool.name\": toolName } : {}),\n\t\t});\n\t}\n\n\t/**\n\t * Record operation duration with gen_ai.* standard attributes.\n\t *\n\t * @param durationMs - Duration in milliseconds (converted to seconds for OTel)\n\t * @param operationName - gen_ai.operation.name\n\t * @param error - Optional error type string if the operation failed\n\t */\n\trecordDuration(\n\t\tdurationMs: number,\n\t\toperationName: string,\n\t\terror?: string,\n\t): void {\n\t\tthis.operationDuration.record(durationMs / 1000, {\n\t\t\t\"gen_ai.system\": \"liop\",\n\t\t\t\"gen_ai.operation.name\": operationName,\n\t\t\t...(error ? { \"error.type\": error } : {}),\n\t\t});\n\t}\n\n\t/** Whether the OTel bridge is actively connected to a MeterProvider */\n\tisActive(): boolean {\n\t\treturn this.active;\n\t}\n}\n","import {\n\tcreateSyncTokenEstimator,\n\tcreateTokenEstimator,\n\ttype TokenEstimator,\n} from \"./estimator.js\";\nimport { LiopOTelBridge } from \"./otel.js\";\n\n/** Single MCP operation token footprint */\nexport interface TokenOperationMetric {\n\treadonly type:\n\t\t| \"tools_list\"\n\t\t| \"tool_call\"\n\t\t| \"resource_read\"\n\t\t| \"resource_list\"\n\t\t| \"prompt_get\"\n\t\t| \"prompt_list\"\n\t\t| \"diagnostic\";\n\treadonly method: string;\n\treadonly estimatedInputTokens: number;\n\treadonly estimatedOutputTokens: number;\n\treadonly timestamp: number;\n\treadonly toolName?: string;\n\treadonly peerId?: string;\n\treadonly durationMs?: number;\n}\n\n/** Session-level aggregate report */\nexport interface TokenSessionReport {\n\treadonly sessionId: string;\n\treadonly operations: ReadonlyArray<TokenOperationMetric>;\n\treadonly totalInputTokens: number;\n\treadonly totalOutputTokens: number;\n\treadonly estimatorName: string;\n\treadonly sessionUptimeMs: number;\n}\n\n/** Per-tool aggregate breakdown */\nexport interface ToolTokenBreakdown {\n\treadonly input: number;\n\treadonly output: number;\n\treadonly calls: number;\n\treadonly avgDurationMs: number;\n}\n\n/**\n * Maps operation types to OTel gen_ai.operation.name values.\n * @see https://opentelemetry.io/docs/specs/semconv/gen-ai/\n */\nconst OTEL_OPERATION_MAP: Record<TokenOperationMetric[\"type\"], string> = {\n\ttools_list: \"chat\",\n\ttool_call: \"execute_tool\",\n\tresource_read: \"chat\",\n\tresource_list: \"chat\",\n\tprompt_get: \"chat\",\n\tprompt_list: \"chat\",\n\tdiagnostic: \"chat\",\n};\n\n/**\n * TokenTelemetryEngine — Full-spectrum observational singleton for token cost measurement.\n *\n * Design principles:\n * - Pure observer pattern: NEVER mutates MCP payloads or protocol flow.\n * - Real tokenization: o200k_base BPE via gpt-tokenizer (async init, sync counting).\n * - OTel gen_ai.* emission: standard metrics via @opentelemetry/api (NoOp if no provider).\n * - Error isolation: telemetry failures never propagate to protocol operations.\n */\nexport class TokenTelemetryEngine {\n\tprivate static instance: TokenTelemetryEngine | null = null;\n\tprivate operations: TokenOperationMetric[] = [];\n\tprivate readonly sessionId: string;\n\tprivate readonly startedAt: number;\n\tprivate estimator: TokenEstimator;\n\tprivate otelBridge: LiopOTelBridge;\n\n\tprivate constructor() {\n\t\tthis.sessionId = crypto.randomUUID();\n\t\tthis.startedAt = Date.now();\n\t\t// Start with sync heuristic estimator (available immediately)\n\t\tthis.estimator = createSyncTokenEstimator();\n\t\tthis.otelBridge = new LiopOTelBridge();\n\t\t// Upgrade to real tokenizer asynchronously\n\t\tthis.initRealEstimator();\n\t}\n\n\t/** Async upgrade from heuristic to real BPE tokenizer */\n\tprivate initRealEstimator(): void {\n\t\tcreateTokenEstimator()\n\t\t\t.then((real) => {\n\t\t\t\tthis.estimator = real;\n\t\t\t})\n\t\t\t.catch(() => {\n\t\t\t\t// Keep heuristic fallback — already assigned in constructor\n\t\t\t});\n\t}\n\n\tstatic getInstance(): TokenTelemetryEngine {\n\t\tif (!TokenTelemetryEngine.instance) {\n\t\t\tTokenTelemetryEngine.instance = new TokenTelemetryEngine();\n\t\t}\n\t\treturn TokenTelemetryEngine.instance;\n\t}\n\n\t/**\n\t * Count tokens in a string using the active estimator.\n\t * Delegates to o200k_base BPE tokenizer (or heuristic fallback).\n\t */\n\tcountTokens(content: string): number {\n\t\ttry {\n\t\t\treturn this.estimator.countTokens(content);\n\t\t} catch {\n\t\t\t// Fallback: never let counting failures break protocol flow\n\t\t\treturn Math.ceil(content.length / 4);\n\t\t}\n\t}\n\n\t/**\n\t * Record a single MCP operation's token footprint.\n\t * Emits both internal metrics and OTel gen_ai.* histograms.\n\t */\n\trecord(metric: Omit<TokenOperationMetric, \"timestamp\">): void {\n\t\tconst fullMetric: TokenOperationMetric = {\n\t\t\t...metric,\n\t\t\ttimestamp: Date.now(),\n\t\t};\n\t\tthis.operations.push(fullMetric);\n\n\t\t// Emit to OTel bridge (NoOp if no MeterProvider configured)\n\t\ttry {\n\t\t\tconst otelOp = OTEL_OPERATION_MAP[metric.type] || \"chat\";\n\n\t\t\tif (metric.estimatedInputTokens > 0) {\n\t\t\t\tthis.otelBridge.recordTokens(\n\t\t\t\t\tmetric.estimatedInputTokens,\n\t\t\t\t\t\"input\",\n\t\t\t\t\totelOp,\n\t\t\t\t\tmetric.toolName,\n\t\t\t\t);\n\t\t\t}\n\t\t\tif (metric.estimatedOutputTokens > 0) {\n\t\t\t\tthis.otelBridge.recordTokens(\n\t\t\t\t\tmetric.estimatedOutputTokens,\n\t\t\t\t\t\"output\",\n\t\t\t\t\totelOp,\n\t\t\t\t\tmetric.toolName,\n\t\t\t\t);\n\t\t\t}\n\t\t\tif (metric.durationMs !== undefined) {\n\t\t\t\tthis.otelBridge.recordDuration(metric.durationMs, otelOp);\n\t\t\t}\n\t\t} catch {\n\t\t\t// OTel emission failure must never affect protocol operations\n\t\t}\n\t}\n\n\t/**\n\t * @deprecated Use countTokens() instead. Kept for backward compatibility.\n\t */\n\testimateTokens(content: string): number {\n\t\treturn this.countTokens(content);\n\t}\n\n\t/** Generate the full session report */\n\tgetReport(): TokenSessionReport {\n\t\treturn {\n\t\t\tsessionId: this.sessionId,\n\t\t\toperations: [...this.operations],\n\t\t\ttotalInputTokens: this.operations.reduce(\n\t\t\t\t(sum, op) => sum + op.estimatedInputTokens,\n\t\t\t\t0,\n\t\t\t),\n\t\t\ttotalOutputTokens: this.operations.reduce(\n\t\t\t\t(sum, op) => sum + op.estimatedOutputTokens,\n\t\t\t\t0,\n\t\t\t),\n\t\t\testimatorName: this.estimator.name,\n\t\t\tsessionUptimeMs: Date.now() - this.startedAt,\n\t\t};\n\t}\n\n\t/** Get per-tool token breakdown for diagnostic display */\n\tgetPerToolReport(): Map<string, ToolTokenBreakdown> {\n\t\tconst breakdown = new Map<string, ToolTokenBreakdown>();\n\n\t\tfor (const op of this.operations) {\n\t\t\tconst key = op.toolName || op.method;\n\t\t\tconst existing = breakdown.get(key) || {\n\t\t\t\tinput: 0,\n\t\t\t\toutput: 0,\n\t\t\t\tcalls: 0,\n\t\t\t\tavgDurationMs: 0,\n\t\t\t};\n\n\t\t\tconst totalDuration =\n\t\t\t\texisting.avgDurationMs * existing.calls + (op.durationMs || 0);\n\t\t\tconst newCalls = existing.calls + 1;\n\n\t\t\tbreakdown.set(key, {\n\t\t\t\tinput: existing.input + op.estimatedInputTokens,\n\t\t\t\toutput: existing.output + op.estimatedOutputTokens,\n\t\t\t\tcalls: newCalls,\n\t\t\t\tavgDurationMs: newCalls > 0 ? totalDuration / newCalls : 0,\n\t\t\t});\n\t\t}\n\n\t\treturn breakdown;\n\t}\n\n\t/**\n\t * Format a rich, human-readable summary block for LiopMeshStatus diagnostic.\n\t * Returns empty string when no operations have been recorded.\n\t */\n\tformatStatusBlock(): string {\n\t\tconst report = this.getReport();\n\t\tif (report.operations.length === 0) return \"\";\n\n\t\tconst uptimeStr = this.formatUptime(report.sessionUptimeMs);\n\t\tconst totalCombined = report.totalInputTokens + report.totalOutputTokens;\n\n\t\t// Aggregate operations by type\n\t\tconst byType = new Map<\n\t\t\tstring,\n\t\t\t{ count: number; input: number; output: number }\n\t\t>();\n\t\tfor (const op of report.operations) {\n\t\t\tconst key = op.type;\n\t\t\tconst existing = byType.get(key) || {\n\t\t\t\tcount: 0,\n\t\t\t\tinput: 0,\n\t\t\t\toutput: 0,\n\t\t\t};\n\t\t\tbyType.set(key, {\n\t\t\t\tcount: existing.count + 1,\n\t\t\t\tinput: existing.input + op.estimatedInputTokens,\n\t\t\t\toutput: existing.output + op.estimatedOutputTokens,\n\t\t\t});\n\t\t}\n\n\t\t// Build type breakdown lines\n\t\tconst typeEntries = Array.from(byType.entries());\n\t\tconst typeLines = typeEntries.map(([type, data], idx) => {\n\t\t\tconst prefix = idx === typeEntries.length - 1 ? \"│  └─\" : \"│  ├─\";\n\t\t\tconst outputPart =\n\t\t\t\tdata.output > 0 ? ` / ${data.output.toLocaleString()} out` : \"\";\n\t\t\treturn `${prefix} ${type} ×${data.count} → ${data.input.toLocaleString()} in${outputPart}`;\n\t\t});\n\n\t\t// Build per-tool breakdown\n\t\tconst toolReport = this.getPerToolReport();\n\t\tconst toolEntries = Array.from(toolReport.entries()).filter(\n\t\t\t([key]) => key !== \"tools/list\" && key !== \"LiopMeshStatus\",\n\t\t);\n\n\t\tconst toolLines: string[] = [];\n\t\tif (toolEntries.length > 0) {\n\t\t\ttoolLines.push(\"├─ By Tool:\");\n\t\t\ttoolEntries.forEach(([name, data], idx) => {\n\t\t\t\tconst prefix = idx === toolEntries.length - 1 ? \"│  └─\" : \"│  ├─\";\n\t\t\t\tconst outputPart =\n\t\t\t\t\tdata.output > 0 ? ` / ${data.output.toLocaleString()} out` : \"\";\n\t\t\t\tconst durationPart =\n\t\t\t\t\tdata.avgDurationMs > 0 ? ` ~${Math.round(data.avgDurationMs)}ms` : \"\";\n\t\t\t\ttoolLines.push(\n\t\t\t\t\t`${prefix} ${name}: ${data.input.toLocaleString()} in${outputPart} (×${data.calls})${durationPart}`,\n\t\t\t\t);\n\t\t\t});\n\t\t}\n\n\t\t// Calculate average latency across all timed operations\n\t\tconst timedOps = report.operations.filter(\n\t\t\t(op) => op.durationMs !== undefined,\n\t\t);\n\t\tconst avgLatency =\n\t\t\ttimedOps.length > 0\n\t\t\t\t? Math.round(\n\t\t\t\t\t\ttimedOps.reduce((sum, op) => sum + (op.durationMs || 0), 0) /\n\t\t\t\t\t\t\ttimedOps.length,\n\t\t\t\t\t)\n\t\t\t\t: 0;\n\n\t\tconst otelStatus = this.otelBridge.isActive()\n\t\t\t? \"gen_ai.client.token.usage → active\"\n\t\t\t: \"disabled\";\n\n\t\tconst lines = [\n\t\t\t\"\\nToken Economy:\",\n\t\t\t`├─ Session: ${report.sessionId.slice(0, 8)} (${uptimeStr})`,\n\t\t\t`├─ Estimator: ${report.estimatorName}`,\n\t\t\t`├─ Operations: ${report.operations.length}`,\n\t\t\t...typeLines,\n\t\t\t`├─ Total: ${report.totalInputTokens.toLocaleString()} in / ${report.totalOutputTokens.toLocaleString()} out (${totalCombined.toLocaleString()} combined)`,\n\t\t\t...toolLines,\n\t\t\t...(avgLatency > 0 ? [`├─ Avg Latency: ${avgLatency}ms`] : []),\n\t\t\t`└─ OTel: ${otelStatus}`,\n\t\t];\n\n\t\treturn lines.join(\"\\n\");\n\t}\n\n\t/** Format milliseconds into human-readable uptime string */\n\tprivate formatUptime(ms: number): string {\n\t\tconst seconds = Math.floor(ms / 1000);\n\t\tif (seconds < 60) return `${seconds}s`;\n\t\tconst minutes = Math.floor(seconds / 60);\n\t\tconst remainingSeconds = seconds % 60;\n\t\tif (minutes < 60) return `${minutes}m ${remainingSeconds}s`;\n\t\tconst hours = Math.floor(minutes / 60);\n\t\tconst remainingMinutes = minutes % 60;\n\t\treturn `${hours}h ${remainingMinutes}m`;\n\t}\n\n\t/** Reset all recorded metrics (used in tests) */\n\treset(): void {\n\t\tthis.operations = [];\n\t}\n\n\t/** Destroy the singleton (used in tests to guarantee isolation) */\n\tstatic destroy(): void {\n\t\tTokenTelemetryEngine.instance = null;\n\t}\n}\n","/**\n * MCP UX: compact tool descriptions are ENABLED by default to optimize\n * token consumption for LLM clients (e.g. Claude Desktop).\n *\n * Set LIOP_MCP_COMPACT_TOOL_DESCRIPTIONS=0 to restore verbose descriptions.\n * Full LIOP payload format remains in prompts/get → liop_blind_analyst.\n */\nexport function mcpCompactToolDescriptions(): boolean {\n\tconst v =\n\t\tprocess.env.LIOP_MCP_COMPACT_TOOL_DESCRIPTIONS?.toLowerCase().trim();\n\tif (v === \"0\" || v === \"false\" || v === \"no\") return false;\n\treturn true;\n}\n\n/**\n * Removes SDK-appended LIOP specification blocks from a registered tool description.\n */\nexport function stripVerboseLiopToolDescription(description: string): string {\n\tlet d = description;\n\tconst markers = [\n\t\t\"\\n\\n[LIOP-PROTO-V1:\",\n\t\t\"\\r\\n\\r\\n[LIOP-PROTO-V1:\",\n\t\t\"\\n[LIOP-PROTO-V1:\", // rare\n\t];\n\tfor (const m of markers) {\n\t\tconst i = d.indexOf(m);\n\t\tif (i !== -1) {\n\t\t\td = d.slice(0, i);\n\t\t\tbreak;\n\t\t}\n\t}\n\treturn d.trimEnd();\n}\n","import * as crypto from \"node:crypto\";\nimport * as grpc from \"@grpc/grpc-js\";\nimport { LiopVerifier } from \"../crypto/verifier.js\";\nimport { TokenTelemetryEngine } from \"../economy/telemetry.js\";\nimport type { LiopManifest, MeshNode } from \"../mesh/index.js\";\nimport { Kyber768Wrapper } from \"../rpc/crypto/kyber.js\";\nimport { liopV1 } from \"../rpc/proto.js\";\nimport { createChannelCredentials } from \"../rpc/tls.js\";\nimport type { IntentResponse, LogicResponse } from \"../rpc/types.js\";\nimport type { AuthInfo } from \"../security/jwt-validator.js\";\nimport { authorizeRequest } from \"../security/rbac.js\";\nimport type { LiopServer } from \"../server/index.js\";\nimport type { McpRequest, McpResponse } from \"../types.js\";\nimport { log } from \"../utils/logger.js\";\nimport {\n\tmcpCompactToolDescriptions,\n\tstripVerboseLiopToolDescription,\n} from \"../utils/mcpCompact.js\";\n\n/**\n * Time-to-live for cached manifests (seconds).\n * Aligned with libp2p Kademlia DHT TABLE_REFRESH_INTERVAL (5 minutes).\n * Provider records in the DHT are valid for 48 hours (PROVIDERS_VALIDITY),\n * so 300s is a conservative, network-friendly value.\n */\nconst MANIFEST_CACHE_TTL_S = 300;\n\n/** Maximum number of DHT query retries for manifest discovery */\nconst MANIFEST_DISCOVERY_RETRIES = 5;\n\n/**\n * LIOP MCP Router\n *\n * Core logic for routing MCP requests to local or remote LIOP providers.\n * Decoupled from transport (HTTP/Stdio).\n *\n * All tool discovery and port resolution is DYNAMIC via the\n * /liop/manifest/1.0.0 protocol stream over Kademlia DHT.\n */\nexport class LiopMcpRouter {\n\t/** Cached manifests from remote peers. Key = PeerID */\n\tprivate manifestCache: Map<\n\t\tstring,\n\t\t{ manifest: LiopManifest; cachedAt: number }\n\t> = new Map();\n\n\t/** Guards against concurrent discovery storms */\n\tprivate currentDiscovery: Promise<void> | null = null;\n\n\t/** Verifier for Tier-0 integrity checks */\n\tpublic verifier: LiopVerifier = new LiopVerifier();\n\n\t/** Callback when new remote tools are discovered */\n\tpublic onToolsChanged?: () => void;\n\n\t/** Circuit-breaker state for peers that repeatedly fail manifest queries. */\n\tprivate manifestFailureState: Map<\n\t\tstring,\n\t\t{ failures: number; cooldownUntil: number; lastSkipLogAt: number }\n\t> = new Map();\n\n\tprivate static readonly MANIFEST_FAILURE_BASE_COOLDOWN_MS = 15_000;\n\tprivate static readonly MANIFEST_FAILURE_MAX_COOLDOWN_MS = 5 * 60_000;\n\tprivate static readonly MANIFEST_SKIP_LOG_THROTTLE_MS = 30_000;\n\n\tconstructor(\n\t\tprivate liopServer: LiopServer,\n\t\tprivate meshNode: MeshNode | null = null,\n\t\tprivate defaultRpcPort = 50051,\n\t) {\n\t\t// Auto-register manifest handler if mesh node is provided\n\t\tif (this.meshNode) {\n\t\t\tthis.meshNode.registerManifestHandler(() => {\n\t\t\t\tconst remoteTools = this.liopServer.listTools().map((t) => ({\n\t\t\t\t\tname: t.name,\n\t\t\t\t\tdescription: t.description,\n\t\t\t\t\tinputSchema: t.inputSchema as Record<string, unknown>,\n\t\t\t\t}));\n\n\t\t\t\tconst resources = this.liopServer.listResources().map((r) => ({\n\t\t\t\t\tname: r.name,\n\t\t\t\t\turi: r.uri,\n\t\t\t\t\tdescription: r.description,\n\t\t\t\t\tmimeType: r.mimeType,\n\t\t\t\t}));\n\n\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: access private configuration properties\n\t\t\t\tconst serverConfig = (this.liopServer as any).config;\n\n\t\t\t\treturn {\n\t\t\t\t\tpeerId: this.meshNode?.getPeerId() || \"unknown\",\n\t\t\t\t\tgrpcPort: this.defaultRpcPort,\n\t\t\t\t\ttools: [...remoteTools],\n\t\t\t\t\tresources,\n\t\t\t\t\tserverInfo: this.liopServer.getServerInfo(),\n\t\t\t\t\tauthRequired: this.liopServer.jwtValidator !== undefined,\n\t\t\t\t\ttokenSlug: serverConfig?.tokenSlug,\n\t\t\t\t\ttaxonomy: serverConfig?.taxonomy\n\t\t\t\t\t\t? {\n\t\t\t\t\t\t\t\tdomain: serverConfig.taxonomy.domain || \"Unknown Domain\",\n\t\t\t\t\t\t\t\tclearanceTier: serverConfig.taxonomy.clearanceTier ?? 0,\n\t\t\t\t\t\t\t\texecutionTypes: serverConfig.taxonomy.executionTypes || [],\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t: undefined,\n\t\t\t\t};\n\t\t\t});\n\n\t\t\t// Proactively announce manifest capability to the mesh\n\t\t\tthis.meshNode.announceManifest().catch((err: unknown) => {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] Failed to announce manifest: ${err instanceof Error ? err.message : String(err)}`,\n\t\t\t\t);\n\t\t\t});\n\t\t}\n\n\t\t// [OWASP-A01] Startup warning when diagnostic level exposes full topology\n\t\tif (process.env.LIOP_DIAGNOSTIC_LEVEL === \"full\") {\n\t\t\tprocess.stderr.write(\n\t\t\t\t\"⚠️ [LIOP-Security] Diagnostic level set to FULL — \" +\n\t\t\t\t\t\"PeerIDs and network topology are exposed. Do NOT use in production.\\n\",\n\t\t\t);\n\t\t}\n\t}\n\n\tprivate shouldSkipManifestQuery(peerId: string): boolean {\n\t\tconst state = this.manifestFailureState.get(peerId);\n\t\tif (!state) return false;\n\t\tconst now = Date.now();\n\t\tif (now >= state.cooldownUntil) return false;\n\n\t\tif (\n\t\t\tnow - state.lastSkipLogAt >\n\t\t\tLiopMcpRouter.MANIFEST_SKIP_LOG_THROTTLE_MS\n\t\t) {\n\t\t\tlog.info(\n\t\t\t\t`[LIOP-Router] Skipping manifest query for ${peerId} during cooldown (${Math.ceil((state.cooldownUntil - now) / 1000)}s remaining)`,\n\t\t\t);\n\t\t\tstate.lastSkipLogAt = now;\n\t\t}\n\t\treturn true;\n\t}\n\n\tprivate recordManifestQuerySuccess(peerId: string): void {\n\t\tthis.manifestFailureState.delete(peerId);\n\t}\n\n\tprivate recordManifestQueryFailure(peerId: string): void {\n\t\tconst now = Date.now();\n\t\tconst prev = this.manifestFailureState.get(peerId);\n\t\tconst failures = (prev?.failures || 0) + 1;\n\t\tconst backoff = Math.min(\n\t\t\tLiopMcpRouter.MANIFEST_FAILURE_BASE_COOLDOWN_MS *\n\t\t\t\t2 ** Math.max(0, failures - 1),\n\t\t\tLiopMcpRouter.MANIFEST_FAILURE_MAX_COOLDOWN_MS,\n\t\t);\n\t\tthis.manifestFailureState.set(peerId, {\n\t\t\tfailures,\n\t\t\tcooldownUntil: now + backoff,\n\t\t\tlastSkipLogAt: 0,\n\t\t});\n\t}\n\n\tpublic async dispatch(\n\t\trequest: McpRequest,\n\t\tauthInfo?: AuthInfo | null,\n\t): Promise<McpResponse | null> {\n\t\tconst { method, params, id } = request;\n\t\tlog.info(`[LIOP-Router] Processing: ${method}`);\n\n\t\t// [SEC] Enforce RBAC scope validation (Least Privilege) only if JWT validation is active\n\t\tif (this.liopServer.jwtValidator) {\n\t\t\tconst authResult = authorizeRequest(method, authInfo ?? null);\n\t\t\tif (!authResult.allowed) {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] RBAC Access Denied for method '${method}': ${authResult.reason}`,\n\t\t\t\t);\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\terror: {\n\t\t\t\t\t\tcode: -32099, // Custom authentication/authorization failure code\n\t\t\t\t\t\tmessage: authResult.reason || \"Access Denied\",\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\n\t\tswitch (method) {\n\t\t\tcase \"initialize\":\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\tresult: {\n\t\t\t\t\t\tprotocolVersion: \"2025-11-25\",\n\t\t\t\t\t\tcapabilities: {\n\t\t\t\t\t\t\ttools: { listChanged: true },\n\t\t\t\t\t\t\tresources: { listChanged: true },\n\t\t\t\t\t\t\tprompts: { listChanged: true },\n\t\t\t\t\t\t},\n\t\t\t\t\t\tserverInfo: this.liopServer.getServerInfo(),\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\tcase \"notifications/initialized\":\n\t\t\t\t// Cloud MCP clients often fire tools/list immediately; kick discovery early\n\t\t\t\t// so manifests populate before (or right after) that call completes.\n\t\t\t\tthis.kickDiscoveryAfterInitialized().catch(() => {});\n\t\t\t\treturn null;\n\t\t\tcase \"notifications/cancelled\":\n\t\t\t\treturn null; // No-op for MCP spec compliance\n\t\t\tcase \"ping\":\n\t\t\t\treturn { jsonrpc: \"2.0\", id, result: {} };\n\t\t\tcase \"tools/list\": {\n\t\t\t\tconst localTools = this.liopServer.listTools();\n\t\t\t\tconst remoteTools = await this.getRemoteTools();\n\n\t\t\t\tconst listedLocals = mcpCompactToolDescriptions()\n\t\t\t\t\t? localTools.map((t) => ({\n\t\t\t\t\t\t\t...t,\n\t\t\t\t\t\t\tdescription: stripVerboseLiopToolDescription(t.description ?? \"\"),\n\t\t\t\t\t\t}))\n\t\t\t\t\t: localTools;\n\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] tools/list: ${localTools.length} local, ${remoteTools.length} remote tools found`,\n\t\t\t\t);\n\n\t\t\t\t// Inject a mandatory static diagnostic tool.\n\t\t\t\t// This ensures that the {tools: []} list is never empty on startup.\n\t\t\t\t// Claude Desktop silently hides the connector if it receives an empty array initially,\n\t\t\t\t// which broke the UX due to the ~3s warm-up time of the Kademlia DHT.\n\t\t\t\tconst diagnosticTool = {\n\t\t\t\t\tname: \"LiopMeshStatus\",\n\t\t\t\t\tdescription:\n\t\t\t\t\t\t\"LiopMeshStatus: Returns the current dynamic diagnostic status of the Zero-Trust Neural Mesh.\",\n\t\t\t\t\tinputSchema: {\n\t\t\t\t\t\ttype: \"object\",\n\t\t\t\t\t\tproperties: {},\n\t\t\t\t\t\tadditionalProperties: false,\n\t\t\t\t\t},\n\t\t\t\t};\n\n\t\t\t\tconst allTools = [diagnosticTool, ...listedLocals, ...remoteTools];\n\n\t\t\t\t// [Token Economy] Record telemetry for the tools/list response\n\t\t\t\tconst telemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\tconst toolsPayload = JSON.stringify(allTools);\n\t\t\t\tconst toolsResponsePayload = JSON.stringify({ tools: allTools });\n\t\t\t\ttelemetry.record({\n\t\t\t\t\ttype: \"tools_list\",\n\t\t\t\t\tmethod: \"tools/list\",\n\t\t\t\t\testimatedInputTokens: telemetry.countTokens(toolsPayload),\n\t\t\t\t\testimatedOutputTokens: telemetry.countTokens(toolsResponsePayload),\n\t\t\t\t});\n\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\tresult: {\n\t\t\t\t\t\ttools: allTools,\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\t\t\tcase \"tools/call\":\n\t\t\t\treturn this.transcodeMcpToLiop(\n\t\t\t\t\tid,\n\t\t\t\t\tparams as { name: string; arguments?: Record<string, unknown> },\n\t\t\t\t\tauthInfo?.token,\n\t\t\t\t);\n\t\t\tcase \"resources/list\": {\n\t\t\t\tconst localResources = this.liopServer.listResources();\n\t\t\t\tconst remoteResources = await this.getRemoteResources();\n\t\t\t\tconst allResources = [...localResources, ...remoteResources];\n\n\t\t\t\t// [Token Economy] Record resources/list telemetry\n\t\t\t\tconst rlTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\tconst rlPayload = JSON.stringify(allResources);\n\t\t\t\trlTelemetry.record({\n\t\t\t\t\ttype: \"resource_list\",\n\t\t\t\t\tmethod: \"resources/list\",\n\t\t\t\t\testimatedInputTokens: 0,\n\t\t\t\t\testimatedOutputTokens: rlTelemetry.countTokens(rlPayload),\n\t\t\t\t});\n\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\tresult: { resources: allResources },\n\t\t\t\t};\n\t\t\t}\n\t\t\tcase \"resources/read\": {\n\t\t\t\tconst typedParams = params as { uri?: string } | undefined;\n\t\t\t\tif (!typedParams?.uri)\n\t\t\t\t\treturn {\n\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\tid,\n\t\t\t\t\t\terror: { code: -32602, message: \"Missing resource uri\" },\n\t\t\t\t\t};\n\t\t\t\ttry {\n\t\t\t\t\tconst rrStartTime = Date.now();\n\t\t\t\t\tconst result = await this.liopServer.readResource(typedParams.uri);\n\n\t\t\t\t\t// [Token Economy] Record resources/read telemetry\n\t\t\t\t\tconst rrTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\t\tconst rrOutputPayload = JSON.stringify(result);\n\t\t\t\t\trrTelemetry.record({\n\t\t\t\t\t\ttype: \"resource_read\",\n\t\t\t\t\t\tmethod: \"resources/read\",\n\t\t\t\t\t\ttoolName: typedParams.uri,\n\t\t\t\t\t\testimatedInputTokens: rrTelemetry.countTokens(typedParams.uri),\n\t\t\t\t\t\testimatedOutputTokens: rrTelemetry.countTokens(rrOutputPayload),\n\t\t\t\t\t\tdurationMs: Date.now() - rrStartTime,\n\t\t\t\t\t});\n\n\t\t\t\t\treturn { jsonrpc: \"2.0\", id, result };\n\t\t\t\t} catch (err: unknown) {\n\t\t\t\t\t// Fallback: Resolve remotely from manifest cache\n\t\t\t\t\tconst targetUri = typedParams.uri;\n\t\t\t\t\tfor (const { manifest } of this.manifestCache.values()) {\n\t\t\t\t\t\tconst remoteResource = manifest.resources.find(\n\t\t\t\t\t\t\t(r) => r.uri === targetUri,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tif (remoteResource) {\n\t\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t\t`[LIOP-Router] Resolved resource ${targetUri} from cache (Peer: ${manifest.peerId})`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\tresult: {\n\t\t\t\t\t\t\t\t\tcontents: [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\turi: remoteResource.uri,\n\t\t\t\t\t\t\t\t\t\t\tmimeType: remoteResource.mimeType || \"text/plain\",\n\t\t\t\t\t\t\t\t\t\t\ttext:\n\t\t\t\t\t\t\t\t\t\t\t\tremoteResource.text ||\n\t\t\t\t\t\t\t\t\t\t\t\tremoteResource.description ||\n\t\t\t\t\t\t\t\t\t\t\t\t\"No content provided\",\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t};\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\n\t\t\t\t\treturn {\n\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\tid,\n\t\t\t\t\t\terror: {\n\t\t\t\t\t\t\tcode: -32000,\n\t\t\t\t\t\t\tmessage: err instanceof Error ? err.message : String(err),\n\t\t\t\t\t\t},\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\t\t\tcase \"prompts/list\": {\n\t\t\t\tconst promptsList = this.liopServer.listPrompts();\n\n\t\t\t\t// [Token Economy] Record prompts/list telemetry\n\t\t\t\tconst plTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\tconst plPayload = JSON.stringify(promptsList);\n\t\t\t\tplTelemetry.record({\n\t\t\t\t\ttype: \"prompt_list\",\n\t\t\t\t\tmethod: \"prompts/list\",\n\t\t\t\t\testimatedInputTokens: 0,\n\t\t\t\t\testimatedOutputTokens: plTelemetry.countTokens(plPayload),\n\t\t\t\t});\n\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\tresult: { prompts: promptsList },\n\t\t\t\t};\n\t\t\t}\n\t\t\tcase \"prompts/get\": {\n\t\t\t\tconst typedParams = params as\n\t\t\t\t\t| { name?: string; arguments?: Record<string, string> }\n\t\t\t\t\t| undefined;\n\t\t\t\tif (!typedParams?.name)\n\t\t\t\t\treturn {\n\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\tid,\n\t\t\t\t\t\terror: { code: -32602, message: \"Missing prompt name\" },\n\t\t\t\t\t};\n\t\t\t\ttry {\n\t\t\t\t\tconst pgStartTime = Date.now();\n\t\t\t\t\tconst result = await this.liopServer.getPrompt({\n\t\t\t\t\t\tname: typedParams.name as string,\n\t\t\t\t\t\targuments: typedParams.arguments || {},\n\t\t\t\t\t});\n\n\t\t\t\t\t// [Token Economy] Record prompts/get telemetry\n\t\t\t\t\tconst pgTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\t\tconst pgInputPayload = JSON.stringify({\n\t\t\t\t\t\tname: typedParams.name,\n\t\t\t\t\t\targuments: typedParams.arguments,\n\t\t\t\t\t});\n\t\t\t\t\tconst pgOutputPayload = JSON.stringify(result);\n\t\t\t\t\tpgTelemetry.record({\n\t\t\t\t\t\ttype: \"prompt_get\",\n\t\t\t\t\t\tmethod: \"prompts/get\",\n\t\t\t\t\t\ttoolName: typedParams.name,\n\t\t\t\t\t\testimatedInputTokens: pgTelemetry.countTokens(pgInputPayload),\n\t\t\t\t\t\testimatedOutputTokens: pgTelemetry.countTokens(pgOutputPayload),\n\t\t\t\t\t\tdurationMs: Date.now() - pgStartTime,\n\t\t\t\t\t});\n\n\t\t\t\t\treturn { jsonrpc: \"2.0\", id, result };\n\t\t\t\t} catch (err: unknown) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\tid,\n\t\t\t\t\t\terror: {\n\t\t\t\t\t\t\tcode: -32000,\n\t\t\t\t\t\t\tmessage: err instanceof Error ? err.message : String(err),\n\t\t\t\t\t\t},\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\t\t\tdefault:\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\terror: { code: -32601, message: `Method not found: ${method}` },\n\t\t\t\t};\n\t\t}\n\t}\n\n\t/**\n\t * MCP clients often send notifications/initialized then immediately tools/list.\n\t * Start manifest discovery without blocking the notification handler.\n\t */\n\tprivate kickDiscoveryAfterInitialized(): Promise<void> {\n\t\treturn (async () => {\n\t\t\tawait new Promise((r) => setTimeout(r, 250));\n\t\t\tawait Promise.race([\n\t\t\t\tthis.refreshManifestCache(true),\n\t\t\t\tnew Promise<void>((r) => setTimeout(r, 15_000)),\n\t\t\t]).catch(() => {});\n\t\t})();\n\t}\n\n\t/**\n\t * Discovers and caches manifests from all remote LIOP providers in the mesh.\n\t * Uses Kademlia DHT to find \"liop:manifest\" providers, then opens\n\t * /liop/manifest/1.0.0 protocol streams to retrieve their full metadata.\n\t */\n\tpublic async refreshManifestCache(silent = false): Promise<void> {\n\t\tif (!this.meshNode) return;\n\t\tif (this.currentDiscovery) return this.currentDiscovery;\n\n\t\t// Fast-path: Skip DHT query entirely when cache is fresh and populated.\n\t\t// Only background polls (silent=true) should bypass this to detect new nodes.\n\t\t// Foreground requests (tools/list, tools/call) can safely reuse valid cache.\n\t\tif (!silent && this.manifestCache.size > 0) {\n\t\t\tconst now = Date.now();\n\t\t\tconst allFresh = Array.from(this.manifestCache.values()).every(\n\t\t\t\t({ cachedAt }) => now - cachedAt < MANIFEST_CACHE_TTL_S * 1000,\n\t\t\t);\n\t\t\tif (allFresh) return;\n\t\t}\n\n\t\tthis.currentDiscovery = (async () => {\n\t\t\ttry {\n\t\t\t\tconst prevCount = Array.from(this.manifestCache.values()).reduce(\n\t\t\t\t\t(acc, { manifest }) => acc + manifest.tools.length,\n\t\t\t\t\t0,\n\t\t\t\t);\n\n\t\t\t\t// Phase 0: Wait for at least one active connection if mesh is empty (Cold Start)\n\t\t\t\tif (this.manifestCache.size === 0) {\n\t\t\t\t\tfor (let i = 0; i < 3; i++) {\n\t\t\t\t\t\tconst connections =\n\t\t\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: access internal nodes for connection count\n\t\t\t\t\t\t\t(this.meshNode as any).node?.getConnections().length || 0;\n\t\t\t\t\t\tif (connections > 0) {\n\t\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t\t`[LIOP-Router] P2P Connection established. Starting discovery...`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\t}\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Waiting for P2P connections (attempt ${i + 1}/10)...`,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tawait new Promise((r) => setTimeout(r, 1000));\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\t// Phase 1: Try DHT discovery + Fallback loop\n\t\t\t\tlet providerIds: string[] = [];\n\t\t\t\tconst MAX_COLD_ATTEMPTS = this.manifestCache.size === 0 ? 5 : 1;\n\n\t\t\t\tfor (\n\t\t\t\t\tlet coldAttempt = 0;\n\t\t\t\t\tcoldAttempt < MAX_COLD_ATTEMPTS;\n\t\t\t\t\tcoldAttempt++\n\t\t\t\t) {\n\t\t\t\t\t// 1.1 Try DHT discovery\n\t\t\t\t\tfor (\n\t\t\t\t\t\tlet attempt = 0;\n\t\t\t\t\t\tattempt < MANIFEST_DISCOVERY_RETRIES;\n\t\t\t\t\t\tattempt++\n\t\t\t\t\t) {\n\t\t\t\t\t\tproviderIds =\n\t\t\t\t\t\t\t(await this.meshNode?.discoverManifestProviders()) || [];\n\t\t\t\t\t\tconst selfId = this.meshNode?.getPeerId();\n\t\t\t\t\t\tconst remoteIds = providerIds.filter((id) => id !== selfId);\n\t\t\t\t\t\tif (remoteIds.length > 0) break;\n\t\t\t\t\t\tif (attempt < MANIFEST_DISCOVERY_RETRIES - 1) {\n\t\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t\t`[LIOP-Router] DHT discovery attempt ${attempt + 1}/${MANIFEST_DISCOVERY_RETRIES}...`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tawait new Promise((r) => setTimeout(r, 1000));\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\n\t\t\t\t\t// 1.2 Aggressively merge all active connections to bypass DHT propagation delays\n\t\t\t\t\tconst activePeers =\n\t\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: access internal nodes\n\t\t\t\t\t\t(this.meshNode as any).node\n\t\t\t\t\t\t\t?.getConnections()\n\t\t\t\t\t\t\t.map((c: { remotePeer: { toString: () => string } }) =>\n\t\t\t\t\t\t\t\tc.remotePeer.toString(),\n\t\t\t\t\t\t\t) || [];\n\n\t\t\t\t\tif (activePeers.length > 0) {\n\t\t\t\t\t\tproviderIds = Array.from(new Set([...providerIds, ...activePeers]));\n\t\t\t\t\t}\n\n\t\t\t\t\tconst selfIdEnd = this.meshNode?.getPeerId();\n\t\t\t\t\tconst remoteIdsEnd = providerIds.filter((id) => id !== selfIdEnd);\n\t\t\t\t\tif (remoteIdsEnd.length > 0) break;\n\n\t\t\t\t\tif (coldAttempt < MAX_COLD_ATTEMPTS - 1) {\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Initial discovery failed (0 providers). Retrying in 1s (${coldAttempt + 1}/${MAX_COLD_ATTEMPTS})...`,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tawait new Promise((r) => setTimeout(r, 1000));\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\tif (providerIds.length === 0) {\n\t\t\t\t\tlog.info(\n\t\t\t\t\t\t`[LIOP-Router] No manifest providers found after all attempts.`,\n\t\t\t\t\t);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\n\t\t\t\tif (!silent) {\n\t\t\t\t\tlog.info(\n\t\t\t\t\t\t`[LIOP-Router] Discovered ${providerIds.length} candidate manifest providers`,\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\t// Prioritize already-connected peers to avoid blocking on stale providers.\n\t\t\t\t// This improves first tools/list latency on Linux/Ubuntu while preserving\n\t\t\t\t// full discovery for slower peers in subsequent refresh cycles.\n\t\t\t\tconst connectedPeers = new Set<string>(\n\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: internal node access for fast peer ordering\n\t\t\t\t\t((this.meshNode as any).node?.getConnections?.() || []).map(\n\t\t\t\t\t\t(c: { remotePeer: { toString: () => string } }) =>\n\t\t\t\t\t\t\tc.remotePeer.toString(),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t\tproviderIds = [...providerIds].sort((a, b) => {\n\t\t\t\t\tconst aConnected = connectedPeers.has(a) ? 1 : 0;\n\t\t\t\t\tconst bConnected = connectedPeers.has(b) ? 1 : 0;\n\t\t\t\t\treturn bConnected - aConnected;\n\t\t\t\t});\n\n\t\t\t\tlet successCount = 0;\n\t\t\t\tlet errorCount = 0;\n\t\t\t\tlet cacheUpdated = false;\n\n\t\t\t\t// Filter peers eligible for querying\n\t\t\t\tconst selfId = this.meshNode?.getPeerId();\n\t\t\t\tconst eligiblePeers = providerIds.filter((peerId) => {\n\t\t\t\t\tif (!this.meshNode) return false;\n\t\t\t\t\tif (peerId === selfId) return false;\n\t\t\t\t\tif (this.shouldSkipManifestQuery(peerId)) return false;\n\t\t\t\t\tconst cached = this.manifestCache.get(peerId);\n\t\t\t\t\tif (\n\t\t\t\t\t\tcached &&\n\t\t\t\t\t\tDate.now() - cached.cachedAt < MANIFEST_CACHE_TTL_S * 1000\n\t\t\t\t\t) {\n\t\t\t\t\t\tsuccessCount++;\n\t\t\t\t\t\treturn false;\n\t\t\t\t\t}\n\t\t\t\t\treturn true;\n\t\t\t\t});\n\n\t\t\t\t// Parallel manifest queries — eliminates sequential 100ms + retry delays\n\t\t\t\tconst queryResults = await Promise.allSettled(\n\t\t\t\t\teligiblePeers.map(async (peerId) => {\n\t\t\t\t\t\tif (!this.meshNode) return null;\n\t\t\t\t\t\tlog.info(`[LIOP-Router] Querying manifest from: ${peerId}`);\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tpeerId,\n\t\t\t\t\t\t\tmanifest: await this.meshNode.queryManifest(peerId),\n\t\t\t\t\t\t};\n\t\t\t\t\t}),\n\t\t\t\t);\n\n\t\t\t\tfor (const result of queryResults) {\n\t\t\t\t\tif (result.status === \"fulfilled\" && result.value?.manifest) {\n\t\t\t\t\t\tconst { peerId, manifest } = result.value;\n\t\t\t\t\t\tthis.manifestCache.set(peerId, {\n\t\t\t\t\t\t\tmanifest,\n\t\t\t\t\t\t\tcachedAt: Date.now(),\n\t\t\t\t\t\t});\n\t\t\t\t\t\tthis.recordManifestQuerySuccess(peerId);\n\t\t\t\t\t\tcacheUpdated = true;\n\t\t\t\t\t\tsuccessCount++;\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Manifest received from ${peerId} (${manifest.tools.length} tools)`,\n\t\t\t\t\t\t);\n\t\t\t\t\t} else if (result.status === \"fulfilled\" && result.value) {\n\t\t\t\t\t\tthis.recordManifestQueryFailure(result.value.peerId);\n\t\t\t\t\t\terrorCount++;\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Manifest query returned NULL for ${result.value.peerId}`,\n\t\t\t\t\t\t);\n\t\t\t\t\t} else if (result.status === \"rejected\") {\n\t\t\t\t\t\terrorCount++;\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Fatal error querying manifest:`,\n\t\t\t\t\t\t\tresult.reason instanceof Error\n\t\t\t\t\t\t\t\t? result.reason.message\n\t\t\t\t\t\t\t\t: String(result.reason),\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\t// Store discovery stats for LiopMeshStatus diagnostics\n\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: private stats for telemetry\n\t\t\t\t(this as any)._discoveryStats = {\n\t\t\t\t\tcandidates: providerIds.length,\n\t\t\t\t\tsuccess: successCount,\n\t\t\t\t\tfailures: errorCount,\n\t\t\t\t\tlastDiscovery: Date.now(),\n\t\t\t\t};\n\n\t\t\t\tif (cacheUpdated) {\n\t\t\t\t\tconst newCount = Array.from(this.manifestCache.values()).reduce(\n\t\t\t\t\t\t(acc, { manifest }) => acc + manifest.tools.length,\n\t\t\t\t\t\t0,\n\t\t\t\t\t);\n\n\t\t\t\t\tif (newCount !== prevCount && this.onToolsChanged) {\n\t\t\t\t\t\tprocess.stderr.write(\n\t\t\t\t\t\t\t\"[LIOP-Router] Mesh topology updated! Emitting notifications/tools/list_changed.\\n\",\n\t\t\t\t\t\t);\n\t\t\t\t\t\tthis.onToolsChanged();\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t} finally {\n\t\t\t\tthis.currentDiscovery = null;\n\t\t\t}\n\t\t})();\n\n\t\treturn this.currentDiscovery;\n\t}\n\n\t/**\n\t * Returns the current manifest cache size for external telemetry.\n\t * Used by the adaptive polling system to detect topology stabilization.\n\t */\n\tpublic getCacheSize(): number {\n\t\treturn this.manifestCache.size;\n\t}\n\n\t/**\n\t * Returns all remote tools discovered via the manifest protocol.\n\t */\n\tprivate async getRemoteTools(): Promise<\n\t\tArray<{\n\t\t\tname: string;\n\t\t\tdescription?: string;\n\t\t\tinputSchema?: Record<string, unknown>;\n\t\t}>\n\t> {\n\t\tconst EXPECTED_PROVIDERS = Number.parseInt(\n\t\t\tprocess.env.LIOP_EXPECTED_PROVIDERS ?? \"1\",\n\t\t\t10,\n\t\t);\n\n\t\t// [Phase 106] Smart Warm-up with Stabilization Detection\n\t\t// Loops until EXPECTED_PROVIDERS are found, the deadline expires, or\n\t\t// the provider count stabilizes (same count for 3 consecutive checks).\n\t\t// This prevents a ~20s block when a node (e.g. Bank) is absent.\n\t\tif (this.manifestCache.size < EXPECTED_PROVIDERS && this.meshNode) {\n\t\t\tconst initialTimeoutMs = Number.parseInt(\n\t\t\t\tprocess.env.LIOP_INITIAL_DISCOVERY_TIMEOUT_MS ?? \"8000\",\n\t\t\t\t10,\n\t\t\t);\n\t\t\tconst boundedTimeoutMs =\n\t\t\t\tNumber.isFinite(initialTimeoutMs) && initialTimeoutMs > 0\n\t\t\t\t\t? initialTimeoutMs\n\t\t\t\t\t: 12000;\n\n\t\t\tconst deadline = Date.now() + boundedTimeoutMs;\n\t\t\tlet stableCount = 0;\n\t\t\tlet lastCacheSize = -1;\n\n\t\t\twhile (Date.now() < deadline) {\n\t\t\t\tif (this.manifestCache.size >= EXPECTED_PROVIDERS) break;\n\n\t\t\t\tawait Promise.race([\n\t\t\t\t\tthis.refreshManifestCache(true),\n\t\t\t\t\tnew Promise<void>((resolve) => setTimeout(resolve, 3000)),\n\t\t\t\t]).catch(() => {});\n\n\t\t\t\tif (this.manifestCache.size >= EXPECTED_PROVIDERS) break;\n\n\t\t\t\t// Stabilization detection: exit early when provider count plateaus\n\t\t\t\tif (this.manifestCache.size === lastCacheSize) {\n\t\t\t\t\tstableCount++;\n\t\t\t\t\tif (stableCount >= 3 && this.manifestCache.size > 0) {\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Provider count stabilized at ${this.manifestCache.size}/${EXPECTED_PROVIDERS}. Proceeding with available mesh.`,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\t\t\t\t} else {\n\t\t\t\t\tstableCount = 0;\n\t\t\t\t\tlastCacheSize = this.manifestCache.size;\n\t\t\t\t}\n\n\t\t\t\t// Wait before the next iteration to avoid CPU spin\n\t\t\t\tawait new Promise((r) => setTimeout(r, 1000));\n\t\t\t}\n\n\t\t\t// Diagnostic warning for partial mesh availability\n\t\t\tif (this.manifestCache.size < EXPECTED_PROVIDERS) {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] ⚠️ Mesh partially available: ${this.manifestCache.size}/${EXPECTED_PROVIDERS} providers. Some tools may be unavailable. Check Docker containers.`,\n\t\t\t\t);\n\t\t\t\t// Trigger one more background refresh to catch late joiners\n\t\t\t\tthis.refreshManifestCache(true).catch(() => {});\n\t\t\t}\n\t\t}\n\n\t\t// biome-ignore lint/suspicious/noExplicitAny: Tool schema is polymorphic\n\t\tconst tools: any[] = [];\n\t\tconst seenNames = new Set<string>();\n\t\tconst localToolNames = new Set(\n\t\t\tthis.liopServer.listTools().map((t) => t.name),\n\t\t);\n\n\t\tfor (const [peerId, { manifest }] of this.manifestCache.entries()) {\n\t\t\tfor (const tool of manifest.tools) {\n\t\t\t\t// LiopMeshStatus is a local-only diagnostic — skip remote copies\n\t\t\t\tif (tool.name === \"LiopMeshStatus\") continue;\n\n\t\t\t\t// [LIOP-STABILITY] Allow discovery of ALL remote tools.\n\t\t\t\t// MCP Requires unique names per server session.\n\t\t\t\t// In a P2P mesh, multiple nodes might expose the same tool (e.g. LiopMeshStatus).\n\t\t\t\t// We suffix duplicate names with a short peer hash to ensure\n\t\t\t\t// ALL tools from ALL providers are correctly registered and visible.\n\t\t\t\tlet finalName = tool.name;\n\t\t\t\tif (seenNames.has(tool.name) || localToolNames.has(tool.name)) {\n\t\t\t\t\tfinalName = `${tool.name}_${peerId.slice(-4)}`;\n\t\t\t\t}\n\t\t\t\tseenNames.add(finalName);\n\n\t\t\t\tconst providerName = manifest.serverInfo?.name || \"Unknown Provider\";\n\n\t\t\t\t// [SANITIZATION] Create a clean MCP-compliant tool object\n\t\t\t\tconst baseDesc = tool.description || `Remote tool from ${providerName}`;\n\t\t\t\tconst cleanTool: {\n\t\t\t\t\tname: string;\n\t\t\t\t\tdescription: string;\n\t\t\t\t\tinputSchema: Record<string, unknown>;\n\t\t\t\t} = {\n\t\t\t\t\tname: finalName,\n\t\t\t\t\tdescription: mcpCompactToolDescriptions()\n\t\t\t\t\t\t? stripVerboseLiopToolDescription(baseDesc)\n\t\t\t\t\t\t: baseDesc,\n\t\t\t\t\tinputSchema: (tool.inputSchema || {\n\t\t\t\t\t\ttype: \"object\",\n\t\t\t\t\t\tproperties: {},\n\t\t\t\t\t}) as Record<string, unknown>,\n\t\t\t\t};\n\n\t\t\t\t// Ensure inputSchema has the mandatory 'type: object' for MCP compliance\n\t\t\t\tif (\n\t\t\t\t\ttypeof cleanTool.inputSchema === \"object\" &&\n\t\t\t\t\t!cleanTool.inputSchema.type\n\t\t\t\t) {\n\t\t\t\t\tcleanTool.inputSchema.type = \"object\";\n\t\t\t\t}\n\t\t\t\tif (\n\t\t\t\t\ttypeof cleanTool.inputSchema === \"object\" &&\n\t\t\t\t\t!cleanTool.inputSchema.properties\n\t\t\t\t) {\n\t\t\t\t\tcleanTool.inputSchema.properties = {};\n\t\t\t\t}\n\n\t\t\t\tlet blueprint = \"\";\n\t\t\t\tif (manifest.taxonomy) {\n\t\t\t\t\tblueprint = `\\n[LIOP-DOMAIN: ${manifest.taxonomy.domain}]`;\n\t\t\t\t}\n\n\t\t\t\t// LIOP Logic-on-Origin Detection:\n\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: polymorphic input schema\n\t\t\t\tconst properties = (cleanTool.inputSchema.properties || {}) as any;\n\t\t\t\tlet envelopeDoc = \"\";\n\t\t\t\tif (!mcpCompactToolDescriptions() && properties.payload) {\n\t\t\t\t\tenvelopeDoc = `\\n[REQUIRES: LIOP-PROTO-V1 ENVELOPE]`;\n\t\t\t\t}\n\n\t\t\t\t// INDUSTRIAL REPLICATION: Highlight schema adherence blocks\n\t\t\t\tif (\n\t\t\t\t\t!mcpCompactToolDescriptions() &&\n\t\t\t\t\tcleanTool.description.includes(\"STRICT SCHEMA ADHERENCE\")\n\t\t\t\t) {\n\t\t\t\t\tcleanTool.description = cleanTool.description.replace(\n\t\t\t\t\t\t\"STRICT SCHEMA ADHERENCE:\",\n\t\t\t\t\t\t\"[INDUSTRIAL-REQUISITE] STRICT SCHEMA ADHERENCE (MANDATORY):\",\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\tconst originStamp = mcpCompactToolDescriptions()\n\t\t\t\t\t? `\\n(Peer: ${peerId.slice(-8)})${blueprint}`\n\t\t\t\t\t: `\\n(Origin: ${peerId.slice(-8)})${blueprint}${envelopeDoc}`;\n\t\t\t\tcleanTool.description = `${cleanTool.description}${originStamp}`;\n\n\t\t\t\ttools.push(cleanTool);\n\t\t\t}\n\t\t}\n\n\t\treturn tools;\n\t}\n\n\t/**\n\t * Returns all remote resources discovered via the manifest protocol.\n\t */\n\tprivate async getRemoteResources(): Promise<\n\t\tArray<{\n\t\t\tname: string;\n\t\t\turi: string;\n\t\t\tdescription?: string;\n\t\t\tmimeType?: string;\n\t\t}>\n\t> {\n\t\t// Trigger background refresh if not already discovering\n\t\tif (!this.currentDiscovery) {\n\t\t\tthis.refreshManifestCache(true).catch(() => {});\n\t\t}\n\n\t\tconst resources: Array<{\n\t\t\tname: string;\n\t\t\turi: string;\n\t\t\tdescription?: string;\n\t\t\tmimeType?: string;\n\t\t}> = [];\n\t\tconst seenUris = new Set(this.liopServer.listResources().map((r) => r.uri));\n\n\t\tfor (const [peerId, { manifest }] of this.manifestCache.entries()) {\n\t\t\tfor (const resource of manifest.resources) {\n\t\t\t\tif (!seenUris.has(resource.uri)) {\n\t\t\t\t\tconst augmentedResource = { ...resource };\n\t\t\t\t\tconst providerName = manifest.serverInfo?.name || \"Unknown Provider\";\n\n\t\t\t\t\tlet blueprint = \"\";\n\t\t\t\t\tif (manifest.taxonomy) {\n\t\t\t\t\t\tblueprint = `\\n\\n[LIOP Zero-Trust Blueprint]\\nDomain: ${manifest.taxonomy.domain}\\nClearance Tier: ${manifest.taxonomy.clearanceTier}`;\n\t\t\t\t\t\tif (\n\t\t\t\t\t\t\tmanifest.taxonomy.executionTypes &&\n\t\t\t\t\t\t\tmanifest.taxonomy.executionTypes.length > 0\n\t\t\t\t\t\t) {\n\t\t\t\t\t\t\tblueprint += `\\nExecution Types: ${manifest.taxonomy.executionTypes.join(\", \")}`;\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\n\t\t\t\t\tconst originStamp = `\\n\\n[LIOP Zero-Trust Origin]\\nProvider: ${providerName}\\nNetwork ID: ${peerId}${blueprint}`;\n\n\t\t\t\t\t// INDUSTRIAL REPLICATION: Mark schema resources clearly\n\t\t\t\t\tif (augmentedResource.uri.startsWith(\"liop://schema/\")) {\n\t\t\t\t\t\taugmentedResource.name = `[SCHEMA] ${augmentedResource.name}`;\n\t\t\t\t\t\taugmentedResource.description = `[CRITICAL SCHEMA] ${augmentedResource.description || \"Data Dictionary for Zero-Shot Autonomy\"}${originStamp}`;\n\t\t\t\t\t} else {\n\t\t\t\t\t\taugmentedResource.description = augmentedResource.description\n\t\t\t\t\t\t\t? `${augmentedResource.description}${originStamp}`\n\t\t\t\t\t\t\t: originStamp.trim();\n\t\t\t\t\t}\n\n\t\t\t\t\tresources.push(augmentedResource);\n\t\t\t\t\tseenUris.add(resource.uri);\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\treturn resources;\n\t}\n\n\t/**\n\t * Resolves the gRPC target (host:port) AND the peerId for a given tool name\n\t * by searching the manifest cache. Supports exact names and suffixed names.\n\t */\n\tprivate resolveManifestTarget(\n\t\ttoolName: string,\n\t): { peerId: string; originalToolName: string } | null {\n\t\t// 1. Try exact match\n\t\tfor (const [peerId, { manifest }] of this.manifestCache.entries()) {\n\t\t\tconst tool = manifest.tools.find((t) => t.name === toolName);\n\t\t\tif (tool) {\n\t\t\t\treturn {\n\t\t\t\t\tpeerId,\n\t\t\t\t\toriginalToolName: toolName,\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\n\t\t// 2. Try suffixed match (tool_xxxx)\n\t\tconst parts = toolName.split(\"_\");\n\t\tif (parts.length > 1) {\n\t\t\tconst suffix = parts.pop();\n\t\t\tconst baseName = parts.join(\"_\");\n\t\t\tfor (const [peerId, { manifest }] of this.manifestCache.entries()) {\n\t\t\t\tif (peerId.endsWith(suffix || \"\")) {\n\t\t\t\t\tconst tool = manifest.tools.find((t) => t.name === baseName);\n\t\t\t\t\tif (tool) {\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tpeerId,\n\t\t\t\t\t\t\toriginalToolName: baseName,\n\t\t\t\t\t\t};\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\treturn null;\n\t}\n\n\t/**\n\t * Redacts a PeerID for external-facing diagnostics.\n\t * LIOP_DIAGNOSTIC_LEVEL controls verbosity:\n\t *   - \"redacted\" (default): truncated to last 8 chars\n\t *   - \"full\": complete PeerID (development only)\n\t */\n\tprivate redactPeerId(peerId: string): string {\n\t\tconst level = process.env.LIOP_DIAGNOSTIC_LEVEL || \"redacted\";\n\t\tif (level === \"full\") return peerId;\n\t\treturn `***${peerId.slice(-8)}`;\n\t}\n\n\tprivate async transcodeMcpToLiop(\n\t\tid: string | number | null | undefined,\n\t\tparams: { name: string; arguments?: Record<string, unknown> },\n\t\ttoken?: string,\n\t): Promise<McpResponse | null> {\n\t\tconst toolName = params.name;\n\n\t\t// Intercept the static diagnostic tool\n\t\tif (toolName === \"LiopMeshStatus\") {\n\t\t\t// [INDUSTRIAL-FIX] Proactive warm-up: request a refresh when status is called.\n\t\t\t// This ensures that even if the DHT was cold, the next status call (or tools/list)\n\t\t\t// will have data.\n\t\t\tthis.refreshManifestCache(true).catch(() => {});\n\n\t\t\t// biome-ignore lint/suspicious/noExplicitAny: private stats for telemetry\n\t\t\tconst stats = (this as any)._discoveryStats || {\n\t\t\t\tcandidates: 0,\n\t\t\t\tsuccess: 0,\n\t\t\t\tfailures: 0,\n\t\t\t};\n\t\t\tconst providerCount = this.manifestCache.size;\n\t\t\tconst meshState = this.meshNode ? \"Active\" : \"Offline\";\n\t\t\tconst cachedTools = Array.from(this.manifestCache.values()).reduce(\n\t\t\t\t(acc, { manifest }) => acc + manifest.tools.length,\n\t\t\t\t0,\n\t\t\t);\n\t\t\tconst connections = this.meshNode\n\t\t\t\t? // biome-ignore lint/suspicious/noExplicitAny: access internal nodes\n\t\t\t\t\t(this.meshNode as any).node?.getConnections().length\n\t\t\t\t: 0;\n\n\t\t\tconst bootstrapNodes: string[] =\n\t\t\t\tthis.meshNode &&\n\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: access internal config\n\t\t\t\t(this.meshNode as any).config?.bootstrapNodes\n\t\t\t\t\t? // biome-ignore lint/suspicious/noExplicitAny: access internal config\n\t\t\t\t\t\t(this.meshNode as any).config.bootstrapNodes\n\t\t\t\t\t: [];\n\t\t\tconst bootstrapCount = bootstrapNodes.length;\n\n\t\t\tconst diagLevel = process.env.LIOP_DIAGNOSTIC_LEVEL || \"redacted\";\n\t\t\tconst showBootstraps = diagLevel !== \"minimal\";\n\n\t\t\tconst bootstrapList = showBootstraps\n\t\t\t\t? bootstrapNodes\n\t\t\t\t\t\t.map((addr) => {\n\t\t\t\t\t\t\tconst parts = addr.split(\"/\");\n\t\t\t\t\t\t\tconst id = parts[parts.length - 1];\n\t\t\t\t\t\t\treturn `  • ${id ? id.slice(-8) : \"Unknown\"} (bootstrap)`;\n\t\t\t\t\t\t})\n\t\t\t\t\t\t.join(\"\\n\")\n\t\t\t\t: \"\";\n\n\t\t\tconst routingTableSize = this.meshNode\n\t\t\t\t? // biome-ignore lint/suspicious/noExplicitAny: access internal nodes\n\t\t\t\t\t(this.meshNode as any).getRoutingTableSize()\n\t\t\t\t: 0;\n\n\t\t\tconst rawPeerId = this.meshNode?.getPeerId() || \"Offline\";\n\t\t\tconst localPeerId =\n\t\t\t\trawPeerId === \"Offline\" ? rawPeerId : this.redactPeerId(rawPeerId);\n\n\t\t\tconst cachedToolList = Array.from(this.manifestCache.entries())\n\t\t\t\t.flatMap(([peerId, { manifest }]) =>\n\t\t\t\t\tmanifest.tools.map(\n\t\t\t\t\t\t(t) => `  • ${t.name} (from origin: ${this.redactPeerId(peerId)})`,\n\t\t\t\t\t),\n\t\t\t\t)\n\t\t\t\t.join(\"\\n\");\n\n\t\t\tconst statusText = [\n\t\t\t\t`LIOP Mesh Status: ${meshState === \"Active\" ? \"Active\" : \"Offline\"}`,\n\t\t\t\t`Local Agent Identity: ${localPeerId}`,\n\t\t\t\t`Network: ${connections} Conns | ${routingTableSize} Mesh Nodes | ${bootstrapCount} Bootstraps`,\n\t\t\t\tshowBootstraps && bootstrapCount > 0\n\t\t\t\t\t? `\\nActive Bootstraps:\\n${bootstrapList}\\n`\n\t\t\t\t\t: \"\",\n\t\t\t\t`Discovery: ${stats.candidates} Candidates | ${stats.success} OK | ${stats.failures} FAIL`,\n\t\t\t\t`Tooling: ${providerCount} Providers | ${cachedTools} Total Remote Tools`,\n\t\t\t\tcachedTools > 0\n\t\t\t\t\t? `\\nDiscovered Remote Tools (Zero-Trust Origins):\\n${cachedToolList}`\n\t\t\t\t\t: \"\\nNo remote tools discovered yet.\",\n\t\t\t\t// [Token Economy] Telemetry block (only appears when operations exist)\n\t\t\t\tTokenTelemetryEngine.getInstance().formatStatusBlock(),\n\t\t\t]\n\t\t\t\t.filter((line) => line !== \"\")\n\t\t\t\t.join(\"\\n\");\n\n\t\t\t// [Token Economy] Record diagnostic output telemetry\n\t\t\tconst diagTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\tdiagTelemetry.record({\n\t\t\t\ttype: \"diagnostic\",\n\t\t\t\tmethod: \"tools/call\",\n\t\t\t\ttoolName: \"LiopMeshStatus\",\n\t\t\t\testimatedInputTokens: 0,\n\t\t\t\testimatedOutputTokens: diagTelemetry.countTokens(statusText),\n\t\t\t});\n\n\t\t\treturn {\n\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\tid,\n\t\t\t\tresult: {\n\t\t\t\t\tcontent: [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\ttext: statusText,\n\t\t\t\t\t\t},\n\t\t\t\t\t],\n\t\t\t\t},\n\t\t\t};\n\t\t}\n\n\t\tconst isLocal = this.liopServer\n\t\t\t.listTools()\n\t\t\t.some((t) => t.name === toolName);\n\n\t\tif (!isLocal && this.meshNode) {\n\t\t\t// Phase 1: Cache-first — resolve directly from cached manifests (zero-latency)\n\t\t\t// Per MCP spec, tools don't change between notifications/tools/list_changed.\n\t\t\tlet target = this.resolveManifestTarget(toolName);\n\n\t\t\t// Phase 2: If not cached, trigger DHT refresh and retry\n\t\t\tif (!target) {\n\t\t\t\tawait this.refreshManifestCache();\n\t\t\t\ttarget = this.resolveManifestTarget(toolName);\n\t\t\t}\n\n\t\t\tif (target) {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] Resolved ${toolName} via manifest cache (Peer: ${target.peerId}, Original: ${target.originalToolName})`,\n\t\t\t\t);\n\n\t\t\t\t// Proactive auth check: block locally if the remote node requires authentication\n\t\t\t\t// and no token can be resolved — avoids unnecessary network calls to resolvePeer/gRPC\n\t\t\t\tconst manifestEntry = this.manifestCache.get(target.peerId);\n\t\t\t\tlet effectiveToken = token;\n\t\t\t\tif (manifestEntry?.manifest.authRequired) {\n\t\t\t\t\tconst resolvedToken =\n\t\t\t\t\t\ttoken || (await this.getOrAcquireMeshAgentToken(target.peerId));\n\t\t\t\t\tif (!resolvedToken) {\n\t\t\t\t\t\tconst providerName =\n\t\t\t\t\t\t\tmanifestEntry.manifest.serverInfo?.name?.toLowerCase() ||\n\t\t\t\t\t\t\t\"unknown\";\n\t\t\t\t\t\tconst slug = manifestEntry.manifest.tokenSlug;\n\t\t\t\t\t\tconst shortId = target.peerId.slice(-8).toUpperCase();\n\t\t\t\t\t\tconst primaryVar = slug\n\t\t\t\t\t\t\t? `LIOP_TOKEN_${slug}`\n\t\t\t\t\t\t\t: `LIOP_TOKEN_${providerName.toUpperCase().replace(/[^A-Z0-9_]/g, \"_\")}`;\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\tresult: {\n\t\t\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\t\t\t\ttext: `Authentication Required: The restricted node (${providerName}) requires an access token. Please define the ${primaryVar} or LIOP_TOKEN_${shortId} environment variable on your agent/client host.`,\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\tisError: true,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t};\n\t\t\t\t\t}\n\t\t\t\t\t// Forward the resolved token instead of the original (potentially undefined) caller token\n\t\t\t\t\teffectiveToken = resolvedToken;\n\t\t\t\t}\n\n\t\t\t\treturn this.routeToRemoteProvider(\n\t\t\t\t\tid,\n\t\t\t\t\ttarget.originalToolName,\n\t\t\t\t\ttarget.peerId,\n\t\t\t\t\tparams,\n\t\t\t\t\teffectiveToken,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\t// Phase 2: Try DHT-based dynamic provider discovery (fallback for unsuffixed names)\n\t\t\tlet providers: string[] = [];\n\t\t\tfor (let i = 0; i < 3; i++) {\n\t\t\t\tproviders = await this.meshNode.findProviders(toolName);\n\t\t\t\tif (providers.length > 0) break;\n\t\t\t\tif (i < 2) await new Promise((r) => setTimeout(r, 1000));\n\t\t\t}\n\n\t\t\tif (providers.length > 0) {\n\t\t\t\treturn this.routeToRemoteProvider(\n\t\t\t\t\tid,\n\t\t\t\t\ttoolName,\n\t\t\t\t\tproviders[0],\n\t\t\t\t\tparams,\n\t\t\t\t\ttoken,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\n\t\t// If no remote provider found, try local execution\n\t\tif (isLocal) {\n\t\t\ttry {\n\t\t\t\tconst localStartTime = Date.now();\n\t\t\t\tconst result = await this.liopServer.callTool({\n\t\t\t\t\tname: toolName,\n\t\t\t\t\targuments: params.arguments || {},\n\t\t\t\t});\n\n\t\t\t\t// [Token Economy] Record local tool call telemetry\n\t\t\t\tconst localTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\tconst localInputPayload = JSON.stringify(params.arguments || {});\n\t\t\t\tconst localOutputPayload = JSON.stringify(result);\n\t\t\t\tlocalTelemetry.record({\n\t\t\t\t\ttype: \"tool_call\",\n\t\t\t\t\tmethod: \"tools/call\",\n\t\t\t\t\ttoolName,\n\t\t\t\t\testimatedInputTokens: localTelemetry.countTokens(localInputPayload),\n\t\t\t\t\testimatedOutputTokens: localTelemetry.countTokens(localOutputPayload),\n\t\t\t\t\tdurationMs: Date.now() - localStartTime,\n\t\t\t\t});\n\n\t\t\t\treturn { jsonrpc: \"2.0\", id, result };\n\t\t\t} catch (err: unknown) {\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\terror: {\n\t\t\t\t\t\tcode: -32000,\n\t\t\t\t\t\tmessage: err instanceof Error ? err.message : String(err),\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\n\t\treturn {\n\t\t\tjsonrpc: \"2.0\",\n\t\t\tid,\n\t\t\terror: {\n\t\t\t\tcode: -32002,\n\t\t\t\tmessage: `No provider found for tool: ${toolName}. Ensure the provider node is active and connected to the mesh.`,\n\t\t\t},\n\t\t};\n\t}\n\n\tprivate async routeToRemoteProvider(\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t\tid: any,\n\t\ttoolName: string,\n\t\tpeerId: string,\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t\tparams: any,\n\t\ttoken?: string,\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t): Promise<any> {\n\t\tif (!this.meshNode)\n\t\t\treturn {\n\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\tid,\n\t\t\t\terror: { code: -32603, message: \"Mesh Node inactive\" },\n\t\t\t};\n\n\t\t// Dynamic gRPC port resolution from manifest cache\n\t\tlet manifestEntry = this.manifestCache.get(peerId);\n\t\tlet grpcPort = this.defaultRpcPort;\n\n\t\tif (manifestEntry) {\n\t\t\tgrpcPort = manifestEntry.manifest.grpcPort;\n\t\t} else {\n\t\t\t// Try to query the manifest directly\n\t\t\tconst manifest = await this.meshNode.queryManifest(peerId);\n\t\t\tif (manifest) {\n\t\t\t\tgrpcPort = manifest.grpcPort;\n\t\t\t\tthis.manifestCache.set(peerId, {\n\t\t\t\t\tmanifest,\n\t\t\t\t\tcachedAt: Date.now(),\n\t\t\t\t});\n\t\t\t\tmanifestEntry = this.manifestCache.get(peerId);\n\t\t\t}\n\t\t}\n\n\t\t// Docker Demo convenience (opt-in):\n\t\t// Docker Desktop setups publish gRPC ports on the host as 13011/13021/13031.\n\t\t// Container-internal gRPC ports (50051) are unreachable from the host.\n\t\t// Activated by any Docker-mapping flag: LIOP_DOCKER_MAP, LIOP_DEV_MODE,\n\t\t// LIOP_USE_PUBLISHED_GRPC_PORTS, or NODE_ENV=development/test.\n\t\tconst shouldRemapGrpcPorts =\n\t\t\tprocess.env.LIOP_USE_PUBLISHED_GRPC_PORTS === \"1\" ||\n\t\t\tprocess.env.LIOP_DOCKER_MAP === \"true\" ||\n\t\t\tprocess.env.LIOP_DEV_MODE === \"true\" ||\n\t\t\tprocess.env.NODE_ENV === \"development\" ||\n\t\t\tprocess.env.NODE_ENV === \"test\";\n\t\tif (shouldRemapGrpcPorts && manifestEntry) {\n\t\t\tconst providerName =\n\t\t\t\tmanifestEntry.manifest.serverInfo?.name?.toLowerCase() || \"\";\n\t\t\tif (providerName.includes(\"vault\")) grpcPort = 13011;\n\t\t\telse if (providerName.includes(\"bank\")) grpcPort = 13021;\n\t\t\telse if (providerName.includes(\"oracle\")) grpcPort = 13031;\n\t\t}\n\n\t\t// Resolve IP from active connections\n\t\tconst addrs = await this.meshNode.resolvePeer(peerId);\n\t\tlet targetAddr: string | null = null;\n\n\t\t// [LIOP-ALPHA] Check if the peer is running on the same physical machine\n\t\t// by comparing its advertised IPs against our local OS interfaces.\n\t\tconst os = await import(\"node:os\");\n\t\tconst localInterfaces = Object.values(os.networkInterfaces())\n\t\t\t.flat()\n\t\t\t.filter((i) => i?.family === \"IPv4\")\n\t\t\t.map((i) => i?.address);\n\n\t\t// Loop through all advertised addresses to find the optimal target\n\t\tfor (const addr of addrs) {\n\t\t\tconst parts = addr.split(\"/\");\n\t\t\tconst ipIdx = parts.indexOf(\"ip4\");\n\t\t\tif (ipIdx !== -1) {\n\t\t\t\tconst advertisedIp = parts[ipIdx + 1];\n\n\t\t\t\t// Loopback priority or Same-Machine detection\n\t\t\t\tif (\n\t\t\t\t\tadvertisedIp === \"127.0.0.1\" ||\n\t\t\t\t\tlocalInterfaces.includes(advertisedIp)\n\t\t\t\t) {\n\t\t\t\t\ttargetAddr = `127.0.0.1:${grpcPort}`;\n\t\t\t\t\tbreak; // Supreme priority for local execution\n\t\t\t\t}\n\n\t\t\t\t// Default to first discovered valid external IP\n\t\t\t\tif (!targetAddr) {\n\t\t\t\t\ttargetAddr = `${advertisedIp}:${grpcPort}`;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tif (!targetAddr) {\n\t\t\t// Fallback to localhost with the dynamically resolved port\n\t\t\ttargetAddr = `127.0.0.1:${grpcPort}`;\n\t\t}\n\n\t\tlog.info(\n\t\t\t`[LIOP-Router] Dynamic route: ${toolName} -> ${targetAddr} (PeerID: ${peerId})`,\n\t\t);\n\n\t\tconst remoteClient = new liopV1.LogicMesh(\n\t\t\ttargetAddr,\n\t\t\tcreateChannelCredentials(),\n\t\t);\n\t\treturn this.performTranscoding(\n\t\t\tid,\n\t\t\tremoteClient,\n\t\t\ttoolName,\n\t\t\tparams,\n\t\t\tpeerId,\n\t\t\ttoken,\n\t\t);\n\t}\n\n\t/** Cached M2M token for dynamic gateway-to-node routing */\n\tprivate meshAgentToken?: string;\n\n\t/**\n\t * Dynamically acquires an M2M access token from the Nexus Authorization Server.\n\t * If peerId is provided, checks if there are node-specific environment tokens\n\t * before falling back to the global static token or Nexus acquisition.\n\t */\n\tprivate async getOrAcquireMeshAgentToken(\n\t\tpeerId?: string,\n\t): Promise<string | undefined> {\n\t\tif (peerId) {\n\t\t\tconst manifestEntry = this.manifestCache.get(peerId);\n\t\t\tconst providerName =\n\t\t\t\tmanifestEntry?.manifest.serverInfo?.name?.toLowerCase() || \"\";\n\n\t\t\tlet nodeToken: string | undefined;\n\n\t\t\t// 0. Deterministic tokenSlug resolution (highest priority, zero heuristic)\n\t\t\tconst slug = manifestEntry?.manifest.tokenSlug;\n\t\t\tif (slug) {\n\t\t\t\tconst envKey = `LIOP_TOKEN_${slug}`;\n\t\t\t\tnodeToken =\n\t\t\t\t\tprocess.env[envKey] || process.env[`LIOP_OAUTH_TOKEN_${slug}`];\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] Step0 tokenSlug=${slug} envKey=${envKey} found=${!!nodeToken} peer=${peerId.slice(-8)}`,\n\t\t\t\t);\n\t\t\t} else {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] Step0 tokenSlug=MISSING (manifest has no tokenSlug) peer=${peerId.slice(-8)} provider=${providerName}`,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\t// 1. PeerID-specific resolution: LIOP_TOKEN_<last 8 chars of PeerID in uppercase>\n\t\t\tif (!nodeToken) {\n\t\t\t\tconst shortId = peerId.slice(-8).toUpperCase();\n\t\t\t\tnodeToken =\n\t\t\t\t\tprocess.env[`LIOP_TOKEN_${shortId}`] ||\n\t\t\t\t\tprocess.env[`LIOP_OAUTH_TOKEN_${shortId}`];\n\t\t\t}\n\n\t\t\t// 2. Provider-name resolution: LIOP_TOKEN_<CLEAN_PROVIDER_NAME_UPPERCASE>\n\t\t\tif (!nodeToken && providerName) {\n\t\t\t\tconst cleanName = providerName\n\t\t\t\t\t.toUpperCase()\n\t\t\t\t\t.replace(/[^A-Z0-9_]/g, \"_\");\n\t\t\t\tnodeToken =\n\t\t\t\t\tprocess.env[`LIOP_TOKEN_${cleanName}`] ||\n\t\t\t\t\tprocess.env[`LIOP_OAUTH_TOKEN_${cleanName}`];\n\t\t\t}\n\n\t\t\tif (nodeToken) {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] Resolved node-specific token for peer ${peerId.slice(-8)} (${providerName || \"unknown\"})`,\n\t\t\t\t);\n\t\t\t\treturn nodeToken;\n\t\t\t}\n\t\t}\n\n\t\tif (this.meshAgentToken) return this.meshAgentToken;\n\n\t\t// Support static pre-generated Access Tokens from environment\n\t\tconst staticToken = process.env.LIOP_OAUTH_TOKEN || process.env.LIOP_TOKEN;\n\t\tif (staticToken) {\n\t\t\tthis.meshAgentToken = staticToken;\n\t\t\treturn this.meshAgentToken;\n\t\t}\n\n\t\tconst nexusUrl = process.env.LIOP_NEXUS_URL;\n\t\tif (!nexusUrl) return undefined;\n\n\t\tconst clientId =\n\t\t\tprocess.env.LIOP_OAUTH_CLIENT_ID ||\n\t\t\tprocess.env.LIOP_CLIENT_ID ||\n\t\t\t\"liop-mesh-agent\";\n\t\tconst clientSecret =\n\t\t\tprocess.env.LIOP_OAUTH_CLIENT_SECRET ||\n\t\t\tprocess.env.LIOP_CLIENT_SECRET ||\n\t\t\t\"dev-secret-change-me\";\n\t\tconst audience =\n\t\t\tprocess.env.LIOP_OAUTH_AUDIENCE ||\n\t\t\tprocess.env.LIOP_AUDIENCE ||\n\t\t\t\"urn:liop:mesh:api\";\n\n\t\ttry {\n\t\t\tconst baseUrl = nexusUrl.endsWith(\"/oidc\")\n\t\t\t\t? nexusUrl\n\t\t\t\t: `${nexusUrl}/oidc`;\n\t\t\tconst tokenUrl = `${baseUrl}/token`;\n\t\t\tlog.info(\n\t\t\t\t`[LIOP-Router] Proactively acquiring M2M token from Nexus: ${tokenUrl}`,\n\t\t\t);\n\n\t\t\tconst params = new URLSearchParams({\n\t\t\t\tgrant_type: \"client_credentials\",\n\t\t\t\tscope:\n\t\t\t\t\t\"liop:tools:call liop:tools:list liop:resources:read liop:schema:read liop:mesh:query\",\n\t\t\t\tresource: audience,\n\t\t\t\tclient_id: clientId,\n\t\t\t\tclient_secret: clientSecret,\n\t\t\t});\n\n\t\t\tconst response = await fetch(tokenUrl, {\n\t\t\t\tmethod: \"POST\",\n\t\t\t\theaders: {\n\t\t\t\t\t\"Content-Type\": \"application/x-www-form-urlencoded\",\n\t\t\t\t},\n\t\t\t\tbody: params.toString(),\n\t\t\t});\n\n\t\t\tif (!response.ok) {\n\t\t\t\tconst text = await response.text();\n\t\t\t\tlog.warn(\n\t\t\t\t\t`[LIOP-Router] M2M Token acquisition failed: ${response.status} ${text}`,\n\t\t\t\t);\n\t\t\t\treturn undefined;\n\t\t\t}\n\n\t\t\tconst data = (await response.json()) as { access_token: string };\n\t\t\tif (data.access_token) {\n\t\t\t\tthis.meshAgentToken = data.access_token;\n\t\t\t\tlog.info(\n\t\t\t\t\t\"[LIOP-Router] M2M Token acquired successfully for router routing.\",\n\t\t\t\t);\n\t\t\t\treturn this.meshAgentToken;\n\t\t\t}\n\t\t} catch (err: unknown) {\n\t\t\tlog.warn(\n\t\t\t\t`[LIOP-Router] Failed to acquire M2M token: ${\n\t\t\t\t\terr instanceof Error ? err.message : String(err)\n\t\t\t\t}`,\n\t\t\t);\n\t\t}\n\t\treturn undefined;\n\t}\n\n\tprivate async performTranscoding(\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t\tid: any,\n\t\t// biome-ignore lint/suspicious/noExplicitAny: gRPC client from dynamic proto-loader\n\t\tclient: any,\n\t\ttoolName: string,\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t\tparams: any,\n\t\tpeerId?: string,\n\t\ttoken?: string,\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t): Promise<any> {\n\t\tconst capabilityHash = toolName;\n\t\tconst proofOfIntent = this.meshNode\n\t\t\t? await this.meshNode.sign(Buffer.from(capabilityHash))\n\t\t\t: Buffer.from([]);\n\n\t\tconst transcodingStartTime = Date.now();\n\n\t\t// Auto-acquire self-identity M2M token if client did not supply one but a Nexus AS is configured\n\t\tlet activeToken = token;\n\t\tif (!activeToken) {\n\t\t\tactiveToken = await this.getOrAcquireMeshAgentToken(peerId);\n\t\t}\n\n\t\tif (peerId) {\n\t\t\tconst manifestEntry = this.manifestCache.get(peerId);\n\t\t\tif (manifestEntry?.manifest.authRequired && !activeToken) {\n\t\t\t\tconst providerName =\n\t\t\t\t\tmanifestEntry.manifest.serverInfo?.name?.toLowerCase() || \"unknown\";\n\t\t\t\tconst slug = manifestEntry.manifest.tokenSlug;\n\t\t\t\tconst shortId = peerId.slice(-8).toUpperCase();\n\t\t\t\tconst primaryVar = slug\n\t\t\t\t\t? `LIOP_TOKEN_${slug}`\n\t\t\t\t\t: `LIOP_TOKEN_${providerName.toUpperCase().replace(/[^A-Z0-9_]/g, \"_\")}`;\n\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\tresult: {\n\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\t\ttext: `Authentication Required: The restricted node (${providerName}) requires an access token. Please define the ${primaryVar} or LIOP_TOKEN_${shortId} environment variable on your agent/client host.`,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t],\n\t\t\t\t\t\tisError: true,\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\n\t\treturn new Promise((resolve) => {\n\t\t\tconst metadata = new grpc.Metadata();\n\t\t\tif (activeToken) {\n\t\t\t\tmetadata.add(\"authorization\", `Bearer ${activeToken}`);\n\t\t\t}\n\n\t\t\tclient.negotiateIntent(\n\t\t\t\t{\n\t\t\t\t\tagent_did: `did:liop:${this.meshNode?.getPeerId() || \"mcp-proxy\"}`,\n\t\t\t\t\tcapability_hash: capabilityHash,\n\t\t\t\t\tproof_of_intent: proofOfIntent,\n\t\t\t\t},\n\t\t\t\tmetadata,\n\t\t\t\tasync (err: Error | null, response: IntentResponse) => {\n\t\t\t\t\tif (err || !response.accepted) {\n\t\t\t\t\t\treturn resolve({\n\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\tresult: {\n\t\t\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\t\t\t\ttext: `PQC Handshake Failed: ${err?.message || \"Rejected\"}`,\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\tisError: true,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t});\n\t\t\t\t\t}\n\n\t\t\t\t\tconst { ciphertext, sharedSecret } =\n\t\t\t\t\t\tawait Kyber768Wrapper.encapsulateAsymmetric(\n\t\t\t\t\t\t\tresponse.kyber_public_key,\n\t\t\t\t\t\t);\n\t\t\t\t\t// SECURITY: Avoid AES-GCM nonce reuse across multiple ciphertexts.\n\t\t\t\t\t// We embed arguments directly into the proxy logic so we only encrypt ONE payload per session/nonce.\n\t\t\t\t\tconst embeddedArgsJson = JSON.stringify(params.arguments || {});\n\t\t\t\t\tconst proxyLogic = `return { \"__liop_proxy_tool\": \"${toolName}\", \"__liop_proxy_args\": ${embeddedArgsJson} };`;\n\t\t\t\t\tconst nonce = crypto.randomBytes(12);\n\n\t\t\t\t\tconst sealedLogic = this.encryptWithNonce(\n\t\t\t\t\t\tBuffer.from(proxyLogic),\n\t\t\t\t\t\tsharedSecret,\n\t\t\t\t\t\tnonce,\n\t\t\t\t\t);\n\n\t\t\t\t\tconst metadataCall = new grpc.Metadata();\n\t\t\t\t\tif (activeToken) {\n\t\t\t\t\t\tmetadataCall.add(\"authorization\", `Bearer ${activeToken}`);\n\t\t\t\t\t}\n\n\t\t\t\t\tconst call = client.executeLogic(\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tsession_token: response.session_token,\n\t\t\t\t\t\t\twasm_binary: new Uint8Array(sealedLogic),\n\t\t\t\t\t\t\tinputs: {},\n\t\t\t\t\t\t\tpqc_ciphertext: ciphertext,\n\t\t\t\t\t\t\taes_nonce: nonce,\n\t\t\t\t\t\t},\n\t\t\t\t\t\tmetadataCall,\n\t\t\t\t\t);\n\n\t\t\t\t\tlet resultBody = \"\";\n\t\t\t\t\tlet lastResponse: LogicResponse | null = null;\n\t\t\t\t\tcall.on(\"data\", (grpcRes: LogicResponse) => {\n\t\t\t\t\t\tresultBody += grpcRes.semantic_evidence;\n\t\t\t\t\t\tlastResponse = grpcRes;\n\t\t\t\t\t});\n\t\t\t\t\tcall.on(\"end\", async () => {\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tif (lastResponse) {\n\t\t\t\t\t\t\t\t// Only verify ZK-Receipt if the remote execution succeeded.\n\t\t\t\t\t\t\t\t// If the remote execution failed due to a policy error (e.g. Egress Shield),\n\t\t\t\t\t\t\t\t// the ZK proof is empty and we should bypass validation to propagate the original error.\n\t\t\t\t\t\t\t\tif (!lastResponse.is_error) {\n\t\t\t\t\t\t\t\t\tconst proofHex = Buffer.from(\n\t\t\t\t\t\t\t\t\t\tlastResponse.cryptographic_proof,\n\t\t\t\t\t\t\t\t\t).toString(\"hex\");\n\t\t\t\t\t\t\t\t\tconst isValid = await this.verifier.verifyZkReceipt(\n\t\t\t\t\t\t\t\t\t\tBuffer.from(proxyLogic),\n\t\t\t\t\t\t\t\t\t\tproofHex,\n\t\t\t\t\t\t\t\t\t\tBuffer.from(lastResponse.zk_receipt),\n\t\t\t\t\t\t\t\t\t\tBuffer.from(sharedSecret),\n\t\t\t\t\t\t\t\t\t\tresultBody,\n\t\t\t\t\t\t\t\t\t);\n\n\t\t\t\t\t\t\t\t\tif (!isValid) {\n\t\t\t\t\t\t\t\t\t\treturn resolve({\n\t\t\t\t\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\t\t\t\tresult: {\n\t\t\t\t\t\t\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\ttext: \"SECURITY ALERT: Remote response failed cryptographic integrity audit.\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\t\t\t\t\tisError: true,\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\n\t\t\t\t\t\t\tconst parsedResult = JSON.parse(resultBody);\n\n\t\t\t\t\t\t\t// [Token Economy] Record remote tool call telemetry\n\t\t\t\t\t\t\tconst remoteTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\t\t\t\tremoteTelemetry.record({\n\t\t\t\t\t\t\t\ttype: \"tool_call\",\n\t\t\t\t\t\t\t\tmethod: \"tools/call\",\n\t\t\t\t\t\t\t\ttoolName,\n\t\t\t\t\t\t\t\tpeerId,\n\t\t\t\t\t\t\t\testimatedInputTokens:\n\t\t\t\t\t\t\t\t\tremoteTelemetry.countTokens(embeddedArgsJson),\n\t\t\t\t\t\t\t\testimatedOutputTokens: remoteTelemetry.countTokens(resultBody),\n\t\t\t\t\t\t\t\tdurationMs: Date.now() - transcodingStartTime,\n\t\t\t\t\t\t\t});\n\n\t\t\t\t\t\t\tresolve({ jsonrpc: \"2.0\", id, result: parsedResult });\n\t\t\t\t\t\t} catch (_e) {\n\t\t\t\t\t\t\tresolve({\n\t\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\tresult: { content: [{ type: \"text\", text: resultBody }] },\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t}\n\t\t\t\t\t});\n\t\t\t\t\tcall.on(\"error\", (e: Error) =>\n\t\t\t\t\t\tresolve({\n\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\tresult: {\n\t\t\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t\t\t{ type: \"text\", text: `LIOP gRPC Error: ${e.message}` },\n\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\tisError: true,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t\t},\n\t\t\t);\n\t\t});\n\t}\n\n\tprivate encryptWithNonce(\n\t\tpayload: Buffer,\n\t\tkey: Uint8Array,\n\t\tnonce: Buffer,\n\t): Buffer {\n\t\tconst cipher = crypto.createCipheriv(\"aes-256-gcm\", key, nonce);\n\t\tconst encrypted = Buffer.concat([cipher.update(payload), cipher.final()]);\n\t\treturn Buffer.concat([encrypted, cipher.getAuthTag()]);\n\t}\n}\n"]}

package/dist/chunk-DBXGYHKY.js

@@ -1,2 +0,0 @@
-import {createMlKem768}from'mlkem';var a=null;async function n(){return a||(a=await createMlKem768()),a}var m={importPublicKey(e){if(e.length!==1184)throw new Error(`Kyber768 Public Key must be exactly 1184 bytes (Received: ${e.length})`);return e},async encapsulateAsymmetric(e){try{if(e.length!==1184)throw new Error("Kyber768 Public Key must be exactly 1184 bytes.");let r=await n(),[t,c]=r.encap(e);return {ciphertext:t,sharedSecret:c}}catch(r){throw new Error(`Failed to perform PQC encapsulation: ${r.message}`)}},async generateKeyPair(){let e=await n(),[r,t]=e.generateKeyPair();return {publicKey:r,secretKey:t}},async decapsulateSymmetric(e,r){return (await n()).decap(e,r)}};export{m as a};//# sourceMappingURL=chunk-DBXGYHKY.js.map
-//# sourceMappingURL=chunk-DBXGYHKY.js.map

package/dist/chunk-DBXGYHKY.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/rpc/crypto/kyber.ts"],"names":["kemInstance","getKemInstance","createMlKem768","Kyber768Wrapper","buffer","publicKey","kem","ct","ss","error","pk","sk","ciphertext","secretKey"],"mappings":"mCAcA,IAAIA,CAAAA,CAAiE,IAAA,CAErE,eAAeC,CAAAA,EAAiB,CAC/B,OAAKD,CAAAA,GACJA,CAAAA,CAAc,MAAME,cAAAA,EAAe,CAAA,CAE7BF,CACR,CAEO,IAAMG,CAAAA,CAAkB,CAK9B,eAAA,CAAgBC,CAAAA,CAAgC,CAC/C,GAAIA,CAAAA,CAAO,MAAA,GAAW,IAAA,CACrB,MAAM,IAAI,KAAA,CACT,CAAA,0DAAA,EAA6DA,CAAAA,CAAO,MAAM,CAAA,CAAA,CAC3E,CAAA,CAED,OAAOA,CACR,CAAA,CAMA,MAAM,qBAAA,CAAsBC,CAAAA,CAGzB,CACF,GAAI,CACH,GAAIA,CAAAA,CAAU,MAAA,GAAW,IAAA,CACxB,MAAM,IAAI,KAAA,CAAM,iDAAiD,CAAA,CAGlE,IAAMC,CAAAA,CAAM,MAAML,CAAAA,EAAe,CAC3B,CAACM,CAAAA,CAAIC,CAAE,EAAIF,CAAAA,CAAI,KAAA,CAAMD,CAAS,CAAA,CAEpC,OAAO,CACN,UAAA,CAAYE,CAAAA,CACZ,YAAA,CAAcC,CACf,CACD,CAAA,MAASC,CAAAA,CAAO,CACf,MAAM,IAAI,KAAA,CACT,CAAA,qCAAA,EAAyCA,CAAAA,CAAgB,OAAO,CAAA,CACjE,CACD,CACD,CAAA,CAKA,MAAM,eAAA,EAGH,CACF,IAAMH,CAAAA,CAAM,MAAML,CAAAA,EAAe,CAC3B,CAACS,CAAAA,CAAIC,CAAE,CAAA,CAAIL,CAAAA,CAAI,eAAA,EAAgB,CACrC,OAAO,CACN,SAAA,CAAWI,CAAAA,CACX,SAAA,CAAWC,CACZ,CACD,CAAA,CAMA,MAAM,oBAAA,CACLC,CAAAA,CACAC,CAAAA,CACsB,CAEtB,OAAA,CADY,MAAMZ,CAAAA,EAAe,EACtB,KAAA,CAAMW,CAAAA,CAAYC,CAAS,CACvC,CACD","file":"chunk-DBXGYHKY.js","sourcesContent":["import { createMlKem768 } from \"mlkem\";\n\n/**\n * LIOP Post-Quantum Cryptography Wrapper\n * Implements ML-KEM-768 (NIST FIPS 203) for Zero-Trust secure key encapsulation\n * directly compatible with `pqcrypto-kyber` on the Mesh-Node Backend.\n *\n * Uses the `mlkem` package which provides:\n * - FIPS 203 compliance (ML-KEM standard)\n * - Constant-time validation (KyberSlash patched)\n * - ~3.5x performance improvement over legacy crystals-kyber\n */\n\n/** Lazy-initialized singleton for the ML-KEM-768 engine */\nlet kemInstance: Awaited<ReturnType<typeof createMlKem768>> | null = null;\n\nasync function getKemInstance() {\n\tif (!kemInstance) {\n\t\tkemInstance = await createMlKem768();\n\t}\n\treturn kemInstance;\n}\n\nexport const Kyber768Wrapper = {\n\t/**\n\t * Extracts and validates the 1184-byte Public Key from the Rust LIOP Data Node\n\t * @param buffer Raw buffer sent via gRPC IntentResponse\n\t */\n\timportPublicKey(buffer: Uint8Array): Uint8Array {\n\t\tif (buffer.length !== 1184) {\n\t\t\tthrow new Error(\n\t\t\t\t`Kyber768 Public Key must be exactly 1184 bytes (Received: ${buffer.length})`,\n\t\t\t);\n\t\t}\n\t\treturn buffer;\n\t},\n\n\t/**\n\t * Encapsulates a shared secret using the server's public key.\n\t * Returns the 1088-byte ciphertext to be sent back, and the 32-byte shared AES secret.\n\t */\n\tasync encapsulateAsymmetric(publicKey: Uint8Array): Promise<{\n\t\tciphertext: Uint8Array;\n\t\tsharedSecret: Uint8Array;\n\t}> {\n\t\ttry {\n\t\t\tif (publicKey.length !== 1184) {\n\t\t\t\tthrow new Error(\"Kyber768 Public Key must be exactly 1184 bytes.\");\n\t\t\t}\n\n\t\t\tconst kem = await getKemInstance();\n\t\t\tconst [ct, ss] = kem.encap(publicKey);\n\n\t\t\treturn {\n\t\t\t\tciphertext: ct,\n\t\t\t\tsharedSecret: ss,\n\t\t\t};\n\t\t} catch (error) {\n\t\t\tthrow new Error(\n\t\t\t\t`Failed to perform PQC encapsulation: ${(error as Error).message}`,\n\t\t\t);\n\t\t}\n\t},\n\n\t/**\n\t * Generates a Kyber768 KeyPair for the server to accept intents.\n\t */\n\tasync generateKeyPair(): Promise<{\n\t\tpublicKey: Uint8Array;\n\t\tsecretKey: Uint8Array;\n\t}> {\n\t\tconst kem = await getKemInstance();\n\t\tconst [pk, sk] = kem.generateKeyPair();\n\t\treturn {\n\t\t\tpublicKey: pk,\n\t\t\tsecretKey: sk,\n\t\t};\n\t},\n\n\t/**\n\t * Decapsulates the shared secret using the server's secret key.\n\t * Zero-fills the shared secret buffer after extraction for side-channel protection.\n\t */\n\tasync decapsulateSymmetric(\n\t\tciphertext: Uint8Array,\n\t\tsecretKey: Uint8Array,\n\t): Promise<Uint8Array> {\n\t\tconst kem = await getKemInstance();\n\t\treturn kem.decap(ciphertext, secretKey);\n\t},\n};\n"]}

package/dist/chunk-DQ6UW6L7.js

@@ -1,2 +0,0 @@
-import {a}from'./chunk-S6RJHZV2.js';import*as P from'fs/promises';import*as w from'path';import {noise}from'@chainsafe/libp2p-noise';import {yamux}from'@chainsafe/libp2p-yamux';import {bootstrap}from'@libp2p/bootstrap';import {identify}from'@libp2p/identify';import {kadDHT}from'@libp2p/kad-dht';import {ping}from'@libp2p/ping';import {tcp}from'@libp2p/tcp';import {webSockets}from'@libp2p/websockets';import {multiaddr}from'@multiformats/multiaddr';import {pipe}from'it-pipe';import {createLibp2p}from'libp2p';import {CID}from'multiformats/cid';import {sha256}from'multiformats/hashes/sha2';var q=["/dnsaddr/bootstrap.libp2p.io/p2p/QmNnooDuVkcruPhcoXdia1vAHm1qrCEYWvmqVkMBjeEbFR","/dnsaddr/bootstrap.libp2p.io/p2p/QmQCU2EcMqAqQPR2i9bChDtGNJchTbq5TbXJJ16u19uLTa","/dnsaddr/bootstrap.libp2p.io/p2p/QmbLHAnMoJPWSCR5Zhtx6BHJX9KiKNN6tpvbUcqanj75Nb","/dnsaddr/bootstrap.libp2p.io/p2p/QmcZf59bWwK5XFi76CZX8cbJ4BhTzzA3gU1ZjWZcYW7dwt"],S="/liop/manifest/1.0.0",O="liop:manifest",E=class v{node=null;config;manifestDialFailureState=new Map;static MANIFEST_DIAL_BASE_COOLDOWN_MS=1e4;static MANIFEST_DIAL_MAX_COOLDOWN_MS=2*6e4;static MANIFEST_DIAL_SKIP_LOG_THROTTLE_MS=3e4;announcedCapabilities=new Set;reannouncing=false;manifestProvider=null;manifestProtocolRegistered=false;localPrivateKey=null;constructor(t={}){this.config={listenAddresses:t.listenAddresses||["/ip4/0.0.0.0/tcp/0/ws","/ip4/0.0.0.0/tcp/0"],bootstrapNodes:t.bootstrapNodes||[],identityPath:t.identityPath,enableWAN:t.enableWAN??false,dhtStoragePath:t.dhtStoragePath,addressMapper:t.addressMapper};}shouldSkipManifestDial(t){let e=this.manifestDialFailureState.get(t);if(!e)return  false;let n=Date.now();return n>=e.cooldownUntil?false:(n-e.lastSkipLogAt>v.MANIFEST_DIAL_SKIP_LOG_THROTTLE_MS&&(a.info(`[LIOP-Mesh] Skipping manifest dial for ${t} during cooldown (${Math.ceil((e.cooldownUntil-n)/1e3)}s remaining)`),e.lastSkipLogAt=n),true)}recordManifestDialFailure(t){let e=Date.now(),r=(this.manifestDialFailureState.get(t)?.failures||0)+1,o=Math.min(v.MANIFEST_DIAL_BASE_COOLDOWN_MS*2**Math.max(0,r-1),v.MANIFEST_DIAL_MAX_COOLDOWN_MS);this.manifestDialFailureState.set(t,{failures:r,cooldownUntil:e+o,lastSkipLogAt:0});}clearManifestDialFailure(t){this.manifestDialFailureState.delete(t);}async loadOrCreateIdentity(){try{let{generateKeyPair:t,privateKeyFromProtobuf:e}=await import('@libp2p/crypto/keys'),n=await import('uint8arrays');if(this.config.identityPath){let o=w.resolve(this.config.identityPath);try{let d=await P.readFile(o,"utf-8"),s=JSON.parse(d),l=n.fromString(s.privKey,"base64");try{let a$1=e(l);return a.info(`[LIOP-Mesh] Loaded persistent identity from ${o}`),{privateKey:a$1,isNew:!1}}catch(a$1){a.error(`[LIOP-Mesh] Persistent identity at ${o} is invalid or corrupt. Generating new one. Error: ${a$1 instanceof Error?a$1.message:String(a$1)}`);}}catch(d){let s=d;s.code!=="ENOENT"&&a.error(`[LIOP-Mesh] Error loading identity: ${s.message}`);}}return {privateKey:await t("Ed25519"),isNew:!0}}catch(t){a.error(`[LIOP-Mesh] Critical error in identity management: ${t}. Falling back to ephemeral identity.`);try{let{generateKeyPair:e}=await import('@libp2p/crypto/keys');return {privateKey:await e("Ed25519"),isNew:!0}}catch(e){throw new Error(`Identity system failure: ${e}`)}}}async saveIdentity(t){if(!(!this.config.identityPath||!this.node))try{let e=w.resolve(this.config.identityPath),{privateKeyToProtobuf:n}=await import('@libp2p/crypto/keys'),r=await import('uint8arrays'),o=n(t),d=(r.toString||r.default.toString)(o,"base64"),s={id:this.node.peerId.toString(),privKey:d};await P.mkdir(w.dirname(e),{recursive:!0}),await P.writeFile(e,JSON.stringify(s,null,2)),a.info(`[LIOP-Mesh] Identity persisted to ${e}`);}catch(e){a.error(`[LIOP-Mesh] FAILED to persist identity: ${e}`);}}async capabilityToCID(t){let e=await sha256.digest(new TextEncoder().encode(t));return CID.create(1,85,e)}async reannounceAll(){if(!(this.reannouncing||!this.node||this.announcedCapabilities.size===0)){this.reannouncing=true;try{if(await new Promise(t=>setTimeout(t,500)),!this.node)return;a.info(`[LIOP-Mesh] Re-announcing ${this.announcedCapabilities.size} capabilities to updated routing table...`);for(let t of this.announcedCapabilities)try{let e=await this.capabilityToCID(t);await this.node.contentRouting.provide(e),a.info(`[LIOP-Mesh] Re-announced: ${t}`);}catch(e){a.info(`[LIOP-Mesh] Re-announce failed for ${t}: ${e}`);}}finally{this.reannouncing=false;}}}async start(){if(this.node)return;let t=await this.loadOrCreateIdentity();if(!t)throw new Error("Could not initialize P2P Identity");let{privateKey:e,isNew:n}=t;this.localPrivateKey=e;let r=this.config.bootstrapNodes||[];r.length===0&&this.config.enableWAN&&(r=q);let o=r.length>0?[bootstrap({list:r})]:void 0,d=this.config.enableWAN?"/ipfs/kad/1.0.0":"/ipfs/lan/kad/1.0.0";if(this.node=await createLibp2p({privateKey:e,addresses:{listen:this.config.listenAddresses},transports:[tcp(),webSockets()],connectionEncrypters:[noise()],streamMuxers:[yamux()],services:{identify:identify(),ping:ping(),dht:kadDHT({protocol:d,clientMode:false,allowQueryWithZeroPeers:true,peerInfoMapper:s=>s})},peerDiscovery:o}),this.node.addEventListener("peer:discovery",s=>{let l=s.detail.id;if(a.info(`[LIOP-Mesh] Discovered peer: ${l.toString()}`),this.node){let a=l;if(this.config.addressMapper&&s.detail.multiaddrs.length>0){let c=s.detail.multiaddrs.map(u=>{let m=this.config.addressMapper(u.toString());return m?multiaddr(m):null}).filter(u=>u!==null).find(u=>u.toString().includes("/tcp/")&&!u.toString().includes("/ws"));c&&(a=c);}this.node.dial(a).catch(()=>{});}}),this.node.addEventListener("peer:connect",s=>{let l=s.detail;if(a.info(`[LIOP-Mesh] Connected to peer: ${l.toString()}`),!this.node)return;let a$1=this.node.services.dht;a$1?.routingTable&&(a.info(`[LIOP-Mesh] Adding ${l.toString()} to DHT Routing Table`),a$1.routingTable.add(l).catch(f=>{a.info(`[LIOP-Mesh] Failed to add peer to routing table: ${f instanceof Error?f.message:String(f)}`);})),this.reannounceAll().catch(f=>{a.info(`[LIOP-Mesh] Re-announce error: ${f instanceof Error?f.message:String(f)}`);});}),await this.node.start(),await this.loadRoutingTable(),this.applyHandlers(),n&&this.config.identityPath&&await this.saveIdentity(e),a.info(`[LIOP-Mesh] Node started with id: ${this.node.peerId.toString()}`),this.node.getMultiaddrs().forEach(s=>{a.info(`[LIOP-Mesh] Listening on: ${s.toString()}`);}),r.length>0){a.info(`[LIOP-Mesh] Forcing direct P2P dial to ${r.length} bootstrap nodes...`);let s=5;for(let l of r){let a$1=false,f=1;for(;f<=s&&!a$1;)try{await this.node.dial(multiaddr(l)),a.info(`[LIOP-Mesh] \u2705 Successfully dialed ${l}`),a$1=!0;}catch{let u=Math.min(1e3*2**(f-1),3e3);a.warn(`[LIOP-Mesh] \u26A0\uFE0F Dial attempt ${f}/${s} to ${l} failed. Retrying in ${u/1e3}s...`),f<s?await new Promise(m=>setTimeout(m,u)):a.error(`[LIOP-Mesh] \u274C Could not connect to bootstrap ${l} after ${s} attempts. Continuing...`),f++;}}}}async stop(){this.node&&(await this.saveRoutingTable(),await this.node.stop(),a.info("[LIOP-Mesh] Node stopped"));}async loadRoutingTable(){if(!(!this.config.dhtStoragePath||!this.node))try{let t=w.resolve(this.config.dhtStoragePath),e=await P.readFile(t,"utf-8"),n=JSON.parse(e),{peerIdFromString:r}=await import('@libp2p/peer-id'),o=0;for(let d of n)if(!(!d.id||!d.addresses))try{let s=r(d.id),l=d.addresses.map(f=>multiaddr(f));await this.node.peerStore.save(s,{multiaddrs:l});let a=this.node.services.dht;a?.routingTable&&a.routingTable.add(s).catch(()=>{}),o++;}catch{}a.info(`[LIOP-Mesh] Loaded ${o} peers from DHT storage`);}catch(t){let e=t;e.code!=="ENOENT"&&a.error(`[LIOP-Mesh] Failed to load DHT table: ${e.message}`);}}async saveRoutingTable(){if(!(!this.config.dhtStoragePath||!this.node))try{let t=w.resolve(this.config.dhtStoragePath),e=await this.node.peerStore.all(),n=[];for(let r of e)r.addresses.length>0&&n.push({id:r.id.toString(),addresses:r.addresses.map(o=>o.multiaddr.toString())});await P.mkdir(w.dirname(t),{recursive:!0}),await P.writeFile(t,JSON.stringify(n,null,2)),a.info(`[LIOP-Mesh] Saved ${n.length} peers to DHT storage`);}catch(t){a.error(`[LIOP-Mesh] FAILED to save DHT routing table: ${t}`);}}applyHandlers(){!this.node||this.manifestProtocolRegistered||this.manifestProvider&&(this.manifestProtocolRegistered=true,this.announceCapability(O).catch(t=>{a.info(`[LIOP-Mesh] Initial manifest announcement failed: ${t}`);}),this.node.handle(S,async(t,e)=>{let n=t?.stream??t,o=(t?.connection??e)?.remotePeer?.toString()||"unknown";a.info(`[LIOP-Mesh] Incoming manifest request from ${o}.`);try{let d=this.manifestProvider?.();if(!d||!n){a.info("[LIOP-Mesh] Skipping manifest request (no provider or stream)");try{typeof n?.close=="function"&&await n.close();}catch{}return}let s=JSON.stringify(d),l=new TextEncoder().encode(s),a$1=Buffer.alloc(4);a$1.writeUInt32BE(l.length,0);let f=Buffer.concat([a$1,Buffer.from(l)]);a.info(`[LIOP-Mesh] Serving manifest (${f.length} bytes) to ${o} [Tools: ${d.tools.map(c=>c.name).join(", ")}]`);try{if(typeof n.send=="function"){if(!n.send(f)&&typeof n.onDrain=="function")try{await n.onDrain({signal:AbortSignal.timeout(5e3)});}catch(u){a.info(`[LIOP-Mesh] WARN: Drain timeout for ${o}: ${u instanceof Error?u.message:String(u)}`);}}else await pipe([f],n);a.info(`[LIOP-Mesh] Manifest sent successfully to ${o}`);}catch(c){a.info(`[LIOP-Mesh] Write error serving manifest to ${o}: ${c instanceof Error?c.message:String(c)}`);}finally{try{typeof n.close=="function"&&await n.close();}catch{}}return}catch(d){a.info(`[LIOP-Mesh] Error serving manifest to ${o}: ${d instanceof Error?d.message:String(d)}`);}}),a.info(`[LIOP-Mesh] Manifest Protocol registered: ${S}`));}registerManifestHandler(t){this.manifestProvider=t,this.node&&this.applyHandlers();}async queryManifest(t){if(!this.node)throw new Error("Mesh Node is not running");if(t===this.node.peerId.toString())return a.info(`[LIOP-Mesh] Loopback: Returning local manifest directly for ${t}`),this.manifestProvider?.()||null;if(this.shouldSkipManifestDial(t))return null;let e=3;for(let n=1;n<=e;n++)try{let r=null,d=this.node.getConnections().find(h=>h.remotePeer.toString()===t);if(d)r=d.remotePeer;else {let p=(await this.node.peerStore.all()).find(g=>g.id.toString()===t);if(p)r=p.id;else {let{peerIdFromString:g}=await import('@libp2p/peer-id');r=g(t);}}let l=r;if(this.config.addressMapper&&this.node){let h=this.config.addressMapper,p=await this.node.peerStore.get(r);if(p&&p.addresses.length>0){let g=p.addresses.map(y=>{let C=y.multiaddr.toString(),T=h(C);return T?{isCertified:y.isCertified,multiaddr:multiaddr(T)}:null}).filter(y=>y!==null),L=g.find(y=>y.multiaddr.toString().includes("/tcp/")&&!y.multiaddr.toString().includes("/ws"));L&&(l=L.multiaddr,a.info(`[LIOP-Mesh] \u26A1 Direct dial to translated addr: ${l.toString()}`)),await this.node.peerStore.save(r,{multiaddrs:g.map(y=>y.multiaddr)});}}let a$1;try{let h=await this.node.dialProtocol(l,S).catch(p=>{throw String(p).includes("toMultihash")?new Error("INCOMPATIBLE_PEER_ID_INTERFACE"):p});a$1=h.stream||h;}catch(h){if(n===e)return a.info(`[LIOP-Mesh] Dial error for ${t} after ${e} attempts: ${h}`),null;let p=500*2**n;a.info(`[LIOP-Mesh] Dial error for ${t} (Attempt ${n}). Retrying in ${p}ms...`),await new Promise(g=>setTimeout(g,p));continue}let f=a$1.source??(typeof a$1[Symbol.asyncIterator]=="function"?a$1:null);if(!f)throw new Error("Target stream has no AsyncIterable source");let c=[],u=0,m=-1,M,A=new Promise((h,p)=>{M=setTimeout(()=>p(new Error("Manifest read timeout (5.0s)")),5e3);});try{await Promise.race([(async()=>{for await(let h of f){if(!h)continue;let p=typeof h.subarray=="function"?h.subarray():h instanceof Uint8Array?h:new Uint8Array(0),g=Buffer.from(p.buffer,p.byteOffset,p.byteLength);if(g.length>0&&(c.push(g),u+=g.length,m<0&&u>=4&&(m=Buffer.concat(c).readUInt32BE(0)),m>=0&&u>=4+m))break}})(),A]);}catch(h){if(c.length===0)throw h;a.info(`[LIOP-Mesh] Partial manifest read from ${t}: ${h instanceof Error?h.message:String(h)}`);}finally{M&&clearTimeout(M);}let I=Buffer.concat(c);if(I.length<4)throw new Error("Received empty/invalid manifest (too short)");let D=I.readUInt32BE(0),N=I.subarray(4,4+D).toString("utf-8"),$=JSON.parse(N);return a.info(`[LIOP-Mesh] Received manifest from ${t}: ${$.tools.length} tools`),this.clearManifestDialFailure(t),$}catch(r){if(n===e)return this.recordManifestDialFailure(t),a.info(`[LIOP-Mesh] Failed to query manifest from ${t} after ${e} attempts: ${r instanceof Error?r.message:String(r)}`),null;let o=500*2**n;a.info(`[LIOP-Mesh] Query error for ${t} (Attempt ${n}): ${r instanceof Error?r.message:String(r)}. Retrying in ${o}ms...`),await new Promise(d=>setTimeout(d,o));}return null}async discoverManifestProviders(){return this.findProviders(O)}async announceManifest(){await this.announceCapability(O);}getRoutingTableSize(){return this.node&&this.node.services.dht?.routingTable?.size||0}getPeerId(){if(!this.node)throw new Error("Mesh Node is not running");return this.node.peerId.toString()}async sign(t){if(!this.localPrivateKey)throw new Error("Local identity not loaded or initialized");return Buffer.from(await this.localPrivateKey.sign(t))}getMultiaddrs(){if(!this.node)throw new Error("Mesh Node is not running");return this.node.getMultiaddrs().map(t=>t.toString())}async announceCapability(t){if(!this.node)throw new Error("Mesh Node is not running");this.announcedCapabilities.add(t);try{let e=await this.capabilityToCID(t);a.info(`[LIOP-Mesh] Announcing capability: ${t} (CID: ${e.toString()})`),await this.node.contentRouting.provide(e),a.info(`[LIOP-Mesh] Successfully announced capability: ${t}`);let n=this.node.peerId.toString();for await(let r of this.node.contentRouting.findProviders(e))if(r.id.toString()===n){a.info(`[LIOP-Mesh] Self-verification success: Node is providing ${t}`);break}}catch(e){a.error(`[LIOP-Mesh] Failed to announce capability: ${e}`);}}async findProviders(t){if(!this.node)throw new Error("Mesh Node is not running");let e=[];try{let n=await this.capabilityToCID(t);a.info(`[LIOP-Mesh] Querying DHT for ${t} (CID: ${n.toString()})...`);let r=!1,o=this.node.getConnections?.()?.length||0,d=o>1?1500:3e3;a.info(`[LIOP-Mesh] Starting DHT search with intelligent idle-timeout of ${d}ms (Active connections: ${o})`);let s=this.node.contentRouting.findProviders(n)[Symbol.asyncIterator](),l=!1;for(;!l;){let a$1=s.next(),f=new Promise(c=>setTimeout(()=>c({timeout:!0}),d));try{let c=await Promise.race([a$1,f]);if(c&&typeof c=="object"&&"timeout"in c){a.info("[LIOP-Mesh] DHT discovery idle-timeout reached. Stopping search early."),typeof s.return=="function"&&s.return().catch(()=>{}),l=!0;break}let u=c;if(u.done){l=!0;break}r=!0;let M=u.value.id.toString();a.info(`[LIOP-Mesh] Found provider: ${M}`),e.includes(M)||e.push(M);}catch(c){a.warn(`[LIOP-Mesh] DHT iteration error: ${c instanceof Error?c.message:String(c)}`),l=!0;break}}if(!r){let f=this.node.services.dht?.routingTable?.size||0;a.info(`[LIOP-Mesh] DHT search for ${t} returned zero results (routing table size: ${f})`);}if(this.announcedCapabilities.has(t)){let a$1=this.node.peerId.toString();e.includes(a$1)||(a.info(`[LIOP-Mesh] Including local node (${a$1}) in results for ${t}`),e.push(a$1));}}catch(n){a.info(`[LIOP-Mesh] Error finding providers for ${t}: ${n instanceof Error?n.message:String(n)}`);}return a.info(`[LIOP-Mesh] DHT search for ${t} finished. Found ${e.length} providers.`),e}async resolvePeer(t){if(!this.node)throw new Error("Mesh Node is not running");try{let e=this.node.getConnections();for(let r of e)if(r.remotePeer.toString()===t){let o=r.remoteAddr.toString();return a.info(`[LIOP-Mesh] Resolved peer ${t} via active connection: ${o}`),[o]}let n=await this.node.peerStore.all();for(let r of n)if(r.id.toString()===t&&r.addresses.length>0){let o=r.addresses.map(d=>d.multiaddr.toString());return a.info(`[LIOP-Mesh] Resolved peer ${t} via peerStore: ${o[0]}`),o}a.info(`[LIOP-Mesh] Peer ${t} not found in connections or peerStore`);}catch(e){a.info(`[LIOP-Mesh] Failed to resolve peer ${t}: ${e}`);}return []}};export{E as a};//# sourceMappingURL=chunk-DQ6UW6L7.js.map
-//# sourceMappingURL=chunk-DQ6UW6L7.js.map