@nekzus/liop 2.4.0-alpha.11 → 2.4.0-alpha.13

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (36) hide show
  1. package/dist/bin/agent.js +4 -4
  2. package/dist/bridge.d.ts +2 -2
  3. package/dist/bridge.js +2 -2
  4. package/dist/{chunk-TKRX6CFI.js → chunk-3BJ5QQHK.js} +70 -60
  5. package/dist/chunk-3BJ5QQHK.js.map +1 -0
  6. package/dist/{chunk-3L2O2XKG.js → chunk-5SQLODJS.js} +100 -5
  7. package/dist/chunk-5SQLODJS.js.map +1 -0
  8. package/dist/{chunk-EG46XMJT.js → chunk-NFFBJALJ.js} +2 -2
  9. package/dist/{chunk-EG46XMJT.js.map → chunk-NFFBJALJ.js.map} +1 -1
  10. package/dist/{chunk-L6J72C5X.js → chunk-NFPQJCWL.js} +5 -5
  11. package/dist/chunk-NFPQJCWL.js.map +1 -0
  12. package/dist/{chunk-BOISQ45Z.js → chunk-OPYSUDSW.js} +3 -3
  13. package/dist/{chunk-BOISQ45Z.js.map → chunk-OPYSUDSW.js.map} +1 -1
  14. package/dist/{chunk-T7R5HUFD.js → chunk-PXSXQEXO.js} +23 -4
  15. package/dist/chunk-PXSXQEXO.js.map +1 -0
  16. package/dist/{chunk-HD2N3IJX.js → chunk-UWC7OY7K.js} +3 -3
  17. package/dist/{chunk-HD2N3IJX.js.map → chunk-UWC7OY7K.js.map} +1 -1
  18. package/dist/client.d.ts +3 -2
  19. package/dist/client.js +3 -3
  20. package/dist/gateway.d.ts +3 -3
  21. package/dist/gateway.js +4 -4
  22. package/dist/{hybrid-CrKB50nh.d.ts → hybrid-FFII2lHf.d.ts} +4 -3
  23. package/dist/{index-CX43dvMs.d.ts → index-BLu6LG_C.d.ts} +37 -2
  24. package/dist/{index-DoW2gzBZ.d.ts → index-DckIVTsW.d.ts} +1 -1
  25. package/dist/index.d.ts +7 -7
  26. package/dist/index.js +7 -7
  27. package/dist/server.d.ts +2 -2
  28. package/dist/server.js +2 -2
  29. package/dist/{types-lJIxBlWF.d.ts → types-DDiBZWEq.d.ts} +60 -1
  30. package/dist/types.d.ts +1 -1
  31. package/dist/types.js +1 -1
  32. package/package.json +21 -21
  33. package/dist/chunk-3L2O2XKG.js.map +0 -1
  34. package/dist/chunk-L6J72C5X.js.map +0 -1
  35. package/dist/chunk-T7R5HUFD.js.map +0 -1
  36. package/dist/chunk-TKRX6CFI.js.map +0 -1
@@ -1 +1 @@
1
- {"version":3,"sources":["../src/gateway/mcp-compat.ts","../src/types.ts"],"names":[],"mappings":";;;;;AAiBO,IAAM,0BAAA,GAA6B;AAKnC,IAAM,2BAAA,GAA8B;AAKpC,SAAS,6BAAA,CACf,YACA,EAAA,EACc;AACd,EAAA,OAAO;AAAA,IACN,OAAA,EAAS,KAAA;AAAA,IACT,IAAI,EAAA,IAAM,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,MACP,eAAA,EAAiB,2BAAA;AAAA,MACjB,YAAA,EAAc;AAAA,QACb,KAAA,EAAO,EAAE,WAAA,EAAa,IAAA,EAAK;AAAA,QAC3B,SAAA,EAAW,EAAE,WAAA,EAAa,IAAA,EAAK;AAAA,QAC/B,OAAA,EAAS,EAAE,WAAA,EAAa,IAAA;AAAK,OAC9B;AAAA,MACA;AAAA;AACD,GACD;AACD;AAOO,SAAS,gBAAgB,OAAA,EAA8B;AAC7D,EAAA,IACC,OAAA,CAAQ,MAAA,KAAW,YAAA,IACnB,OAAA,CAAQ,WAAW,2BAAA,EAClB;AACD,IAAA,OAAO,IAAA;AAAA,EACR;AAEA,EAAA,MAAM,SAAS,OAAA,CAAQ,MAAA;AACvB,EAAA,MAAM,OAAO,MAAA,EAAQ,KAAA;AACrB,EAAA,MAAM,OAAA,GAAU,OAAO,yCAAyC,CAAA;AAEhE,EAAA,IAAI,CAAC,OAAA,IAAW,OAAA,KAAY,2BAAA,EAA6B;AACxD,IAAA,OAAO,IAAA;AAAA,EACR;AAEA,EAAA,OAAO,KAAA;AACR;AAMO,SAAS,6BACf,QAAA,EACc;AACd,EAAA,IAAI,CAAC,QAAA,CAAS,MAAA,IAAU,OAAO,QAAA,CAAS,WAAW,QAAA,EAAU;AAC5D,IAAA,OAAO,QAAA;AAAA,EACR;AAEA,EAAA,MAAM,SAAA,GAAY,EAAE,GAAI,QAAA,CAAS,MAAA,EAAmC;AAGpE,EAAA,OAAO,SAAA,CAAU,UAAA;AACjB,EAAA,OAAO,SAAA,CAAU,KAAA;AACjB,EAAA,OAAO,SAAA,CAAU,UAAA;AAEjB,EAAA,OAAO;AAAA,IACN,GAAG,QAAA;AAAA,IACH,MAAA,EAAQ;AAAA,GACT;AACD;;;ACpFO,IAAM,oBAAA,GAAuB;AAyD7B,IAAM,UAAA,GAAa,EAAE,MAAA,CAAO;AAAA,EAClC,IAAA,EAAM,EAAE,MAAA,EAAO;AAAA,EACf,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACjC,WAAA,EAAa,EAAE,MAAA,CAAO,CAAA,CAAE,QAAO,EAAG,CAAA,CAAE,SAAS;AAAA;AAC9C,CAAC;AAIM,IAAM,cAAA,GAAiB,EAAE,MAAA,CAAO;AAAA,EACtC,GAAA,EAAK,EAAE,MAAA,EAAO;AAAA,EACd,IAAA,EAAM,EAAE,MAAA,EAAO;AAAA,EACf,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACjC,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AACtB,CAAC;AAIM,IAAM,YAAA,GAAe,EAAE,MAAA,CAAO;AAAA,EACpC,IAAA,EAAM,EAAE,MAAA,EAAO;AAAA,EACf,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACjC,WAAW,CAAA,CACT,KAAA;AAAA,IACA,EAAE,MAAA,CAAO;AAAA,MACR,IAAA,EAAM,EAAE,MAAA,EAAO;AAAA,MACf,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MACjC,QAAA,EAAU,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAA;AAAS,KAC/B;AAAA,IAED,QAAA;AACH,CAAC","file":"chunk-EG46XMJT.js","sourcesContent":["// Copyright 2026 Nekzus Solutions and contributors\n// SPDX-License-Identifier: Apache-2.0\n\nimport type { McpRequest, McpResponse, ServerInfo } from \"../types.js\";\n\n/**\n * @mcp-legacy ENTIRE FILE — MCP 2025-era backward compatibility layer.\n * Remove this file when MCP v1 (2025-11-25) reaches EOL.\n *\n * SUNSET INSTRUCTION: Delete this file, then grep for \"@mcp-legacy\" in the\n * codebase to find and remove all remaining legacy seams.\n */\n\n/**\n * @mcp-legacy Master kill switch for MCP 2025-era backward compatibility.\n * Set to `false` when MCP v1 reaches End-of-Life (EOL) to disable all legacy seams.\n */\nexport const MCP_LEGACY_SUPPORT_ENABLED = true;\n\n/**\n * @mcp-legacy Legacy protocol version constant.\n */\nexport const MCP_PROTOCOL_VERSION_LEGACY = \"2025-11-25\" as const;\n\n/**\n * @mcp-legacy Build the legacy initialize handshake response.\n */\nexport function buildLegacyInitializeResponse(\n\tserverInfo: ServerInfo,\n\tid?: string | number | null,\n): McpResponse {\n\treturn {\n\t\tjsonrpc: \"2.0\",\n\t\tid: id ?? null,\n\t\tresult: {\n\t\t\tprotocolVersion: MCP_PROTOCOL_VERSION_LEGACY,\n\t\t\tcapabilities: {\n\t\t\t\ttools: { listChanged: true },\n\t\t\t\tresources: { listChanged: true },\n\t\t\t\tprompts: { listChanged: true },\n\t\t\t},\n\t\t\tserverInfo,\n\t\t},\n\t};\n}\n\n/**\n * @mcp-legacy Detect if a request is strictly from a 2025-era legacy client.\n * Legacy requests either invoke 'initialize', 'notifications/initialized',\n * or lack modern '_meta' protocol envelopes.\n */\nexport function isLegacyRequest(request: McpRequest): boolean {\n\tif (\n\t\trequest.method === \"initialize\" ||\n\t\trequest.method === \"notifications/initialized\"\n\t) {\n\t\treturn true;\n\t}\n\n\tconst params = request.params as Record<string, unknown> | undefined;\n\tconst meta = params?._meta as Record<string, unknown> | undefined;\n\tconst version = meta?.[\"io.modelcontextprotocol/protocolVersion\"];\n\n\tif (!version || version === MCP_PROTOCOL_VERSION_LEGACY) {\n\t\treturn true;\n\t}\n\n\treturn false;\n}\n\n/**\n * @mcp-legacy Wrap and strip modern-era fields (resultType, ttlMs, cacheScope, etc.)\n * from a response to ensure 100% wire-compatibility with strict 2025 MCP clients.\n */\nexport function adaptResponseForLegacyClient(\n\tresponse: McpResponse,\n): McpResponse {\n\tif (!response.result || typeof response.result !== \"object\") {\n\t\treturn response;\n\t}\n\n\tconst rawResult = { ...(response.result as Record<string, unknown>) };\n\n\t// Strip modern-only envelope tags\n\tdelete rawResult.resultType;\n\tdelete rawResult.ttlMs;\n\tdelete rawResult.cacheScope;\n\n\treturn {\n\t\t...response,\n\t\tresult: rawResult,\n\t};\n}\n","// Copyright 2026 Nekzus Solutions and contributors\n// SPDX-License-Identifier: Apache-2.0\n\nimport { z } from \"zod\";\n\n/**\n * Protocol Version Identifiers\n */\nexport const MCP_PROTOCOL_VERSION = \"2026-07-28\" as const;\n\nexport {\n\tMCP_LEGACY_SUPPORT_ENABLED,\n\tMCP_PROTOCOL_VERSION_LEGACY,\n} from \"./gateway/mcp-compat.js\";\n\n/**\n * Protocol Era Classification\n */\nexport type McpEra = \"legacy\" | \"modern\";\n\n/**\n * Caching Hints for MCP 2026-07-28 Spec\n */\nexport interface CacheableResult {\n\tttlMs?: number;\n\tcacheScope?: \"public\" | \"private\";\n}\n\n/**\n * Multi-Round-Trip Requests (MRTR) Specification Types\n */\nexport interface InputRequest {\n\tid: string;\n\tmessage: string;\n\tschema?: Record<string, unknown>;\n}\n\nexport interface InputResponse {\n\tid: string;\n\tvalue: unknown;\n}\n\nexport interface InputRequiredResult {\n\tresultType: \"input_required\";\n\tinputRequests: InputRequest[];\n\trequestState?: string;\n}\n\n/**\n * Modern Envelope Metadata (_meta)\n */\nexport interface McpRequestMeta {\n\t\"io.modelcontextprotocol/protocolVersion\"?: string;\n\t\"io.modelcontextprotocol/clientInfo\"?: {\n\t\tname: string;\n\t\tversion: string;\n\t};\n\t\"io.modelcontextprotocol/clientCapabilities\"?: Record<string, unknown>;\n\t[key: string]: unknown;\n}\n\n/**\n * Base Protocol Types representing parity with Model Context Protocol\n */\n\nexport const ToolSchema = z.object({\n\tname: z.string(),\n\tdescription: z.string().optional(),\n\tinputSchema: z.record(z.string(), z.unknown()), // Represents a JSON Schema\n});\n\nexport type Tool = z.infer<typeof ToolSchema>;\n\nexport const ResourceSchema = z.object({\n\turi: z.string(),\n\tname: z.string(),\n\tdescription: z.string().optional(),\n\tmimeType: z.string().optional(),\n});\n\nexport type Resource = z.infer<typeof ResourceSchema>;\n\nexport const PromptSchema = z.object({\n\tname: z.string(),\n\tdescription: z.string().optional(),\n\targuments: z\n\t\t.array(\n\t\t\tz.object({\n\t\t\t\tname: z.string(),\n\t\t\t\tdescription: z.string().optional(),\n\t\t\t\trequired: z.boolean().optional(),\n\t\t\t}),\n\t\t)\n\t\t.optional(),\n});\n\nexport type Prompt = z.infer<typeof PromptSchema>;\n\nexport interface CallToolRequest {\n\tname: string;\n\targuments?: Record<string, unknown>;\n}\n\nexport interface CallToolResult {\n\tcontent: Array<{\n\t\ttype: \"text\" | \"image\" | \"resource\";\n\t\ttext?: string;\n\t\tdata?: string;\n\t\tmimeType?: string;\n\t\tresource?: {\n\t\t\turi: string;\n\t\t\ttext?: string;\n\t\t\tblob?: string;\n\t\t};\n\t}>;\n\tisError?: boolean;\n}\n\nexport interface GetPromptRequest {\n\tname: string;\n\targuments?: Record<string, string>;\n}\n\nexport interface GetPromptResult {\n\tdescription?: string;\n\tmessages: Array<{\n\t\trole: \"user\" | \"assistant\";\n\t\tcontent:\n\t\t\t| { type: \"text\"; text: string }\n\t\t\t| { type: \"image\"; data: string; mimeType: string }\n\t\t\t| {\n\t\t\t\t\ttype: \"resource\";\n\t\t\t\t\tresource: { uri: string; text?: string; blob?: string };\n\t\t\t };\n\t}>;\n}\n\nexport interface ServerInfo {\n\tname: string;\n\tversion: string;\n\tcapabilities?: {\n\t\tprompts?: { listChanged?: boolean };\n\t\tresources?: { subscribe?: boolean; listChanged?: boolean };\n\t\ttools?: { listChanged?: boolean };\n\t\t/** @mcp-legacy @deprecated Deprecated in MCP 2026-07-28 spec */\n\t\tlogging?: Record<string, unknown>;\n\t};\n}\n\nexport interface DiscoverResult {\n\tresultType: \"complete\";\n\tsupportedVersions: string[];\n\tcapabilities: ServerInfo[\"capabilities\"];\n\tserverInfo: ServerInfo;\n\tinstructions?: string;\n}\n\nexport interface McpRequest {\n\tmethod: string;\n\tparams?: unknown;\n\tid?: string | number | null;\n\tjsonrpc?: \"2.0\";\n}\n\nexport interface McpResponse {\n\tjsonrpc: \"2.0\";\n\tid?: string | number | null;\n\tresult?: unknown;\n\terror?: {\n\t\tcode: number;\n\t\tmessage: string;\n\t\tdata?: unknown;\n\t};\n}\n\n/**\n * Re-export AuthInfo from the security module for convenience.\n * Compatible with MCP TypeScript SDK AuthInfo interface shape.\n */\nexport type { AuthInfo } from \"./security/jwt-validator.js\";\n"]}
1
+ {"version":3,"sources":["../src/gateway/mcp-compat.ts","../src/types.ts"],"names":[],"mappings":";;;;;AAiBO,IAAM,0BAAA,GAA6B;AAKnC,IAAM,2BAAA,GAA8B;AAKpC,SAAS,6BAAA,CACf,YACA,EAAA,EACc;AACd,EAAA,OAAO;AAAA,IACN,OAAA,EAAS,KAAA;AAAA,IACT,IAAI,EAAA,IAAM,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,MACP,eAAA,EAAiB,2BAAA;AAAA,MACjB,YAAA,EAAc;AAAA,QACb,KAAA,EAAO,EAAE,WAAA,EAAa,IAAA,EAAK;AAAA,QAC3B,SAAA,EAAW,EAAE,WAAA,EAAa,IAAA,EAAK;AAAA,QAC/B,OAAA,EAAS,EAAE,WAAA,EAAa,IAAA;AAAK,OAC9B;AAAA,MACA;AAAA;AACD,GACD;AACD;AAOO,SAAS,gBAAgB,OAAA,EAA8B;AAC7D,EAAA,IACC,OAAA,CAAQ,MAAA,KAAW,YAAA,IACnB,OAAA,CAAQ,WAAW,2BAAA,EAClB;AACD,IAAA,OAAO,IAAA;AAAA,EACR;AAEA,EAAA,MAAM,SAAS,OAAA,CAAQ,MAAA;AACvB,EAAA,MAAM,OAAO,MAAA,EAAQ,KAAA;AACrB,EAAA,MAAM,OAAA,GAAU,OAAO,yCAAyC,CAAA;AAEhE,EAAA,IAAI,CAAC,OAAA,IAAW,OAAA,KAAY,2BAAA,EAA6B;AACxD,IAAA,OAAO,IAAA;AAAA,EACR;AAEA,EAAA,OAAO,KAAA;AACR;AAMO,SAAS,6BACf,QAAA,EACc;AACd,EAAA,IAAI,CAAC,QAAA,CAAS,MAAA,IAAU,OAAO,QAAA,CAAS,WAAW,QAAA,EAAU;AAC5D,IAAA,OAAO,QAAA;AAAA,EACR;AAEA,EAAA,MAAM,SAAA,GAAY,EAAE,GAAI,QAAA,CAAS,MAAA,EAAmC;AAGpE,EAAA,OAAO,SAAA,CAAU,UAAA;AACjB,EAAA,OAAO,SAAA,CAAU,KAAA;AACjB,EAAA,OAAO,SAAA,CAAU,UAAA;AAEjB,EAAA,OAAO;AAAA,IACN,GAAG,QAAA;AAAA,IACH,MAAA,EAAQ;AAAA,GACT;AACD;;;ACpFO,IAAM,oBAAA,GAAuB;AAyD7B,IAAM,UAAA,GAAa,EAAE,MAAA,CAAO;AAAA,EAClC,IAAA,EAAM,EAAE,MAAA,EAAO;AAAA,EACf,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACjC,WAAA,EAAa,EAAE,MAAA,CAAO,CAAA,CAAE,QAAO,EAAG,CAAA,CAAE,SAAS;AAAA;AAC9C,CAAC;AAIM,IAAM,cAAA,GAAiB,EAAE,MAAA,CAAO;AAAA,EACtC,GAAA,EAAK,EAAE,MAAA,EAAO;AAAA,EACd,IAAA,EAAM,EAAE,MAAA,EAAO;AAAA,EACf,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACjC,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AACtB,CAAC;AAIM,IAAM,YAAA,GAAe,EAAE,MAAA,CAAO;AAAA,EACpC,IAAA,EAAM,EAAE,MAAA,EAAO;AAAA,EACf,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACjC,WAAW,CAAA,CACT,KAAA;AAAA,IACA,EAAE,MAAA,CAAO;AAAA,MACR,IAAA,EAAM,EAAE,MAAA,EAAO;AAAA,MACf,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MACjC,QAAA,EAAU,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAA;AAAS,KAC/B;AAAA,IAED,QAAA;AACH,CAAC","file":"chunk-NFFBJALJ.js","sourcesContent":["// Copyright 2026 Nekzus Solutions and contributors\n// SPDX-License-Identifier: Apache-2.0\n\nimport type { McpRequest, McpResponse, ServerInfo } from \"../types.js\";\n\n/**\n * @mcp-legacy ENTIRE FILE — MCP 2025-era backward compatibility layer.\n * Remove this file when MCP v1 (2025-11-25) reaches EOL.\n *\n * SUNSET INSTRUCTION: Delete this file, then grep for \"@mcp-legacy\" in the\n * codebase to find and remove all remaining legacy seams.\n */\n\n/**\n * @mcp-legacy Master kill switch for MCP 2025-era backward compatibility.\n * Set to `false` when MCP v1 reaches End-of-Life (EOL) to disable all legacy seams.\n */\nexport const MCP_LEGACY_SUPPORT_ENABLED = true;\n\n/**\n * @mcp-legacy Legacy protocol version constant.\n */\nexport const MCP_PROTOCOL_VERSION_LEGACY = \"2025-11-25\" as const;\n\n/**\n * @mcp-legacy Build the legacy initialize handshake response.\n */\nexport function buildLegacyInitializeResponse(\n\tserverInfo: ServerInfo,\n\tid?: string | number | null,\n): McpResponse {\n\treturn {\n\t\tjsonrpc: \"2.0\",\n\t\tid: id ?? null,\n\t\tresult: {\n\t\t\tprotocolVersion: MCP_PROTOCOL_VERSION_LEGACY,\n\t\t\tcapabilities: {\n\t\t\t\ttools: { listChanged: true },\n\t\t\t\tresources: { listChanged: true },\n\t\t\t\tprompts: { listChanged: true },\n\t\t\t},\n\t\t\tserverInfo,\n\t\t},\n\t};\n}\n\n/**\n * @mcp-legacy Detect if a request is strictly from a 2025-era legacy client.\n * Legacy requests either invoke 'initialize', 'notifications/initialized',\n * or lack modern '_meta' protocol envelopes.\n */\nexport function isLegacyRequest(request: McpRequest): boolean {\n\tif (\n\t\trequest.method === \"initialize\" ||\n\t\trequest.method === \"notifications/initialized\"\n\t) {\n\t\treturn true;\n\t}\n\n\tconst params = request.params as Record<string, unknown> | undefined;\n\tconst meta = params?._meta as Record<string, unknown> | undefined;\n\tconst version = meta?.[\"io.modelcontextprotocol/protocolVersion\"];\n\n\tif (!version || version === MCP_PROTOCOL_VERSION_LEGACY) {\n\t\treturn true;\n\t}\n\n\treturn false;\n}\n\n/**\n * @mcp-legacy Wrap and strip modern-era fields (resultType, ttlMs, cacheScope, etc.)\n * from a response to ensure 100% wire-compatibility with strict 2025 MCP clients.\n */\nexport function adaptResponseForLegacyClient(\n\tresponse: McpResponse,\n): McpResponse {\n\tif (!response.result || typeof response.result !== \"object\") {\n\t\treturn response;\n\t}\n\n\tconst rawResult = { ...(response.result as Record<string, unknown>) };\n\n\t// Strip modern-only envelope tags\n\tdelete rawResult.resultType;\n\tdelete rawResult.ttlMs;\n\tdelete rawResult.cacheScope;\n\n\treturn {\n\t\t...response,\n\t\tresult: rawResult,\n\t};\n}\n","// Copyright 2026 Nekzus Solutions and contributors\n// SPDX-License-Identifier: Apache-2.0\n\nimport { z } from \"zod\";\n\n/**\n * Protocol Version Identifiers\n */\nexport const MCP_PROTOCOL_VERSION = \"2026-07-28\" as const;\n\nexport {\n\tMCP_LEGACY_SUPPORT_ENABLED,\n\tMCP_PROTOCOL_VERSION_LEGACY,\n} from \"./gateway/mcp-compat.js\";\n\n/**\n * Protocol Era Classification\n */\nexport type McpEra = \"legacy\" | \"modern\";\n\n/**\n * Caching Hints for MCP 2026-07-28 Spec\n */\nexport interface CacheableResult {\n\tttlMs?: number;\n\tcacheScope?: \"public\" | \"private\";\n}\n\n/**\n * Multi-Round-Trip Requests (MRTR) Specification Types\n */\nexport interface InputRequest {\n\tid: string;\n\tmessage: string;\n\tschema?: Record<string, unknown>;\n}\n\nexport interface InputResponse {\n\tid: string;\n\tvalue: unknown;\n}\n\nexport interface InputRequiredResult {\n\tresultType: \"input_required\";\n\tinputRequests: InputRequest[];\n\trequestState?: string;\n}\n\n/**\n * Modern Envelope Metadata (_meta)\n */\nexport interface McpRequestMeta {\n\t\"io.modelcontextprotocol/protocolVersion\"?: string;\n\t\"io.modelcontextprotocol/clientInfo\"?: {\n\t\tname: string;\n\t\tversion: string;\n\t};\n\t\"io.modelcontextprotocol/clientCapabilities\"?: Record<string, unknown>;\n\t[key: string]: unknown;\n}\n\n/**\n * Base Protocol Types representing parity with Model Context Protocol\n */\n\nexport const ToolSchema = z.object({\n\tname: z.string(),\n\tdescription: z.string().optional(),\n\tinputSchema: z.record(z.string(), z.unknown()), // Represents a JSON Schema\n});\n\nexport type Tool = z.infer<typeof ToolSchema>;\n\nexport const ResourceSchema = z.object({\n\turi: z.string(),\n\tname: z.string(),\n\tdescription: z.string().optional(),\n\tmimeType: z.string().optional(),\n});\n\nexport type Resource = z.infer<typeof ResourceSchema>;\n\nexport const PromptSchema = z.object({\n\tname: z.string(),\n\tdescription: z.string().optional(),\n\targuments: z\n\t\t.array(\n\t\t\tz.object({\n\t\t\t\tname: z.string(),\n\t\t\t\tdescription: z.string().optional(),\n\t\t\t\trequired: z.boolean().optional(),\n\t\t\t}),\n\t\t)\n\t\t.optional(),\n});\n\nexport type Prompt = z.infer<typeof PromptSchema>;\n\nexport interface CallToolRequest {\n\tname: string;\n\targuments?: Record<string, unknown>;\n}\n\nexport interface CallToolResult {\n\tcontent: Array<{\n\t\ttype: \"text\" | \"image\" | \"resource\";\n\t\ttext?: string;\n\t\tdata?: string;\n\t\tmimeType?: string;\n\t\tresource?: {\n\t\t\turi: string;\n\t\t\ttext?: string;\n\t\t\tblob?: string;\n\t\t};\n\t}>;\n\tisError?: boolean;\n}\n\nexport interface GetPromptRequest {\n\tname: string;\n\targuments?: Record<string, string>;\n}\n\nexport interface GetPromptResult {\n\tdescription?: string;\n\tmessages: Array<{\n\t\trole: \"user\" | \"assistant\";\n\t\tcontent:\n\t\t\t| { type: \"text\"; text: string }\n\t\t\t| { type: \"image\"; data: string; mimeType: string }\n\t\t\t| {\n\t\t\t\t\ttype: \"resource\";\n\t\t\t\t\tresource: { uri: string; text?: string; blob?: string };\n\t\t\t };\n\t}>;\n}\n\nexport interface ServerInfo {\n\tname: string;\n\tversion: string;\n\tcapabilities?: {\n\t\tprompts?: { listChanged?: boolean };\n\t\tresources?: { subscribe?: boolean; listChanged?: boolean };\n\t\ttools?: { listChanged?: boolean };\n\t\t/** @mcp-legacy @deprecated Deprecated in MCP 2026-07-28 spec */\n\t\tlogging?: Record<string, unknown>;\n\t};\n}\n\nexport interface DiscoverResult {\n\tresultType: \"complete\";\n\tsupportedVersions: string[];\n\tcapabilities: ServerInfo[\"capabilities\"];\n\tserverInfo: ServerInfo;\n\tinstructions?: string;\n}\n\nexport interface McpRequest {\n\tmethod: string;\n\tparams?: unknown;\n\tid?: string | number | null;\n\tjsonrpc?: \"2.0\";\n}\n\nexport interface McpResponse {\n\tjsonrpc: \"2.0\";\n\tid?: string | number | null;\n\tresult?: unknown;\n\terror?: {\n\t\tcode: number;\n\t\tmessage: string;\n\t\tdata?: unknown;\n\t};\n}\n\n/**\n * Re-export Gateway Interceptor types for consumer convenience.\n */\nexport type {\n\tGatewayAdmissionResult,\n\tGatewayInterceptor,\n\tGatewayInterceptorContext,\n\tGatewayInterceptorOptions,\n} from \"./gateway/interceptor.js\";\n/**\n * Re-export AuthInfo from the security module for convenience.\n * Compatible with MCP TypeScript SDK AuthInfo interface shape.\n */\nexport type { AuthInfo } from \"./security/jwt-validator.js\";\n"]}
@@ -2,9 +2,9 @@ import { TokenTelemetryEngine } from './chunk-DZ2FQGJD.js';
2
2
  import { LiopVerifier } from './chunk-PEN3KFLF.js';
3
3
  import { Kyber768Wrapper } from './chunk-7PITYWOV.js';
4
4
  import { authorizeRequest, Dilithium65Wrapper } from './chunk-VH4K4U45.js';
5
- import { liopV1, createChannelCredentials, GRPC_CHANNEL_OPTIONS } from './chunk-TKRX6CFI.js';
5
+ import { liopV1, createChannelCredentials, GRPC_CHANNEL_OPTIONS } from './chunk-3BJ5QQHK.js';
6
6
  import { toolCallErrorsTotal, pqcHandshakeDurationMs, pqcHandshakesTotal, zkVerificationsTotal, wireEgressBytesTotal } from './chunk-PAICJCKJ.js';
7
- import { MCP_PROTOCOL_VERSION, MCP_LEGACY_SUPPORT_ENABLED, isLegacyRequest, adaptResponseForLegacyClient, MCP_PROTOCOL_VERSION_LEGACY, buildLegacyInitializeResponse } from './chunk-EG46XMJT.js';
7
+ import { MCP_PROTOCOL_VERSION, MCP_LEGACY_SUPPORT_ENABLED, isLegacyRequest, adaptResponseForLegacyClient, MCP_PROTOCOL_VERSION_LEGACY, buildLegacyInitializeResponse } from './chunk-NFFBJALJ.js';
8
8
  import { log } from './chunk-HA6YZ42O.js';
9
9
  import * as crypto from 'crypto';
10
10
  import * as grpc from '@grpc/grpc-js';
@@ -1152,7 +1152,7 @@ ${cachedToolList}` : "\nNo remote tools discovered yet.",
1152
1152
  );
1153
1153
  const remoteClient = new liopV1.LogicMesh(
1154
1154
  targetAddr,
1155
- createChannelCredentials(),
1155
+ createChannelCredentials({ insecure: true, suppressWarning: true }),
1156
1156
  GRPC_CHANNEL_OPTIONS
1157
1157
  );
1158
1158
  return this.performTranscoding(
@@ -1473,5 +1473,5 @@ ${cachedToolList}` : "\nNo remote tools discovered yet.",
1473
1473
  };
1474
1474
 
1475
1475
  export { LiopMcpRouter };
1476
- //# sourceMappingURL=chunk-L6J72C5X.js.map
1477
- //# sourceMappingURL=chunk-L6J72C5X.js.map
1476
+ //# sourceMappingURL=chunk-NFPQJCWL.js.map
1477
+ //# sourceMappingURL=chunk-NFPQJCWL.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../src/utils/mcpCompact.ts","../src/gateway/router.ts"],"names":["selfId","id"],"mappings":";;;;;;;;;;;;AAUO,SAAS,0BAAA,GAAsC;AACrD,EAAA,MAAM,IACL,OAAA,CAAQ,GAAA,CAAI,kCAAA,EAAoC,WAAA,GAAc,IAAA,EAAK;AACpE,EAAA,IAAI,MAAM,GAAA,IAAO,CAAA,KAAM,OAAA,IAAW,CAAA,KAAM,MAAM,OAAO,KAAA;AACrD,EAAA,OAAO,IAAA;AACR;AAKO,SAAS,gCAAgC,WAAA,EAA6B;AAC5E,EAAA,IAAI,CAAA,GAAI,WAAA;AACR,EAAA,MAAM,OAAA,GAAU;AAAA,IACf,qBAAA;AAAA,IACA,yBAAA;AAAA,IACA;AAAA;AAAA,GACD;AACA,EAAA,KAAA,MAAW,KAAK,OAAA,EAAS;AACxB,IAAA,MAAM,CAAA,GAAI,CAAA,CAAE,OAAA,CAAQ,CAAC,CAAA;AACrB,IAAA,IAAI,MAAM,EAAA,EAAI;AACb,MAAA,CAAA,GAAI,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA;AAChB,MAAA;AAAA,IACD;AAAA,EACD;AACA,EAAA,OAAO,EAAE,OAAA,EAAQ;AAClB;;;ACcA,IAAM,oBAAA,GAAuB,GAAA;AAG7B,IAAM,0BAAA,GAA6B,CAAA;AAW5B,IAAM,aAAA,GAAN,MAAM,cAAA,CAAc;AAAA,EA0B1B,WAAA,CACS,UAAA,EACA,QAAA,GAA4B,IAAA,EAC5B,iBAAiB,KAAA,EACxB;AAHO,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AACA,IAAA,IAAA,CAAA,QAAA,GAAA,QAAA;AACA,IAAA,IAAA,CAAA,cAAA,GAAA,cAAA;AAGR,IAAA,IAAI,KAAK,QAAA,EAAU;AAClB,MAAA,IAAA,CAAK,QAAA,CAAS,wBAAwB,MAAM;AAC3C,QAAA,MAAM,cAAc,IAAA,CAAK,UAAA,CAAW,WAAU,CAAE,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,UAC3D,MAAM,CAAA,CAAE,IAAA;AAAA,UACR,aAAa,CAAA,CAAE,WAAA;AAAA,UACf,aAAa,CAAA,CAAE;AAAA,SAChB,CAAE,CAAA;AAEF,QAAA,MAAM,YAAY,IAAA,CAAK,UAAA,CAAW,eAAc,CAAE,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,UAC7D,MAAM,CAAA,CAAE,IAAA;AAAA,UACR,KAAK,CAAA,CAAE,GAAA;AAAA,UACP,aAAa,CAAA,CAAE,WAAA;AAAA,UACf,UAAU,CAAA,CAAE;AAAA,SACb,CAAE,CAAA;AAGF,QAAA,MAAM,YAAA,GAAgB,KAAK,UAAA,CAAmB,MAAA;AAE9C,QAAA,OAAO;AAAA,UACN,MAAA,EAAQ,IAAA,CAAK,QAAA,EAAU,SAAA,EAAU,IAAK,SAAA;AAAA,UACtC,UAAU,IAAA,CAAK,cAAA;AAAA,UACf,KAAA,EAAO,CAAC,GAAG,WAAW,CAAA;AAAA,UACtB,SAAA;AAAA,UACA,UAAA,EAAY,IAAA,CAAK,UAAA,CAAW,aAAA,EAAc;AAAA,UAC1C,YAAA,EAAc,IAAA,CAAK,UAAA,CAAW,YAAA,KAAiB,MAAA;AAAA,UAC/C,WAAW,YAAA,EAAc,SAAA;AAAA,UACzB,QAAA,EAAU,cAAc,QAAA,GACrB;AAAA,YACA,MAAA,EAAQ,YAAA,CAAa,QAAA,CAAS,MAAA,IAAU,gBAAA;AAAA,YACxC,aAAA,EAAe,YAAA,CAAa,QAAA,CAAS,aAAA,IAAiB,CAAA;AAAA,YACtD,cAAA,EAAgB,YAAA,CAAa,QAAA,CAAS,cAAA,IAAkB;AAAC,WAC1D,GACC;AAAA,SACJ;AAAA,MACD,CAAC,CAAA;AAGD,MAAA,IAAA,CAAK,QAAA,CAAS,gBAAA,EAAiB,CAAE,KAAA,CAAM,CAAC,GAAA,KAAiB;AACxD,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,8CAA8C,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,SAC/F;AAAA,MACD,CAAC,CAAA;AAAA,IACF;AAGA,IAAA,IAAI,OAAA,CAAQ,GAAA,CAAI,qBAAA,KAA0B,MAAA,EAAQ;AACjD,MAAA,OAAA,CAAQ,MAAA,CAAO,KAAA;AAAA,QACd;AAAA,OAED;AAAA,IACD;AAAA,EACD;AAAA,EAxDS,UAAA;AAAA,EACA,QAAA;AAAA,EACA,cAAA;AAAA;AAAA,EA3BD,aAAA,uBAGA,GAAA,EAAI;AAAA;AAAA,EAGJ,gBAAA,GAAyC,IAAA;AAAA;AAAA,EAG1C,QAAA,GAAyB,IAAI,YAAA,EAAa;AAAA;AAAA,EAG1C,cAAA;AAAA;AAAA,EAGC,oBAAA,uBAGA,GAAA,EAAI;AAAA,EAEZ,OAAwB,iCAAA,GAAoC,IAAA;AAAA,EAC5D,OAAwB,mCAAmC,CAAA,GAAI,GAAA;AAAA,EAC/D,OAAwB,6BAAA,GAAgC,GAAA;AAAA,EA6DjD,oBAAA,GAA+B;AACrC,IAAA,OAAO,KAAK,aAAA,CAAc,IAAA;AAAA,EAC3B;AAAA,EAEQ,wBAAwB,MAAA,EAAyB;AACxD,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,oBAAA,CAAqB,GAAA,CAAI,MAAM,CAAA;AAClD,IAAA,IAAI,CAAC,OAAO,OAAO,KAAA;AACnB,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,IAAI,GAAA,IAAO,KAAA,CAAM,aAAA,EAAe,OAAO,KAAA;AAEvC,IAAA,IACC,GAAA,GAAM,KAAA,CAAM,aAAA,GACZ,cAAA,CAAc,6BAAA,EACb;AACD,MAAA,GAAA,CAAI,IAAA;AAAA,QACH,CAAA,0CAAA,EAA6C,MAAM,CAAA,kBAAA,EAAqB,IAAA,CAAK,MAAM,KAAA,CAAM,aAAA,GAAgB,GAAA,IAAO,GAAI,CAAC,CAAA,YAAA;AAAA,OACtH;AACA,MAAA,KAAA,CAAM,aAAA,GAAgB,GAAA;AAAA,IACvB;AACA,IAAA,OAAO,IAAA;AAAA,EACR;AAAA,EAEQ,2BAA2B,MAAA,EAAsB;AACxD,IAAA,IAAA,CAAK,oBAAA,CAAqB,OAAO,MAAM,CAAA;AAAA,EACxC;AAAA,EAEQ,2BAA2B,MAAA,EAAsB;AACxD,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,oBAAA,CAAqB,GAAA,CAAI,MAAM,CAAA;AACjD,IAAA,MAAM,QAAA,GAAA,CAAY,IAAA,EAAM,QAAA,IAAY,CAAA,IAAK,CAAA;AACzC,IAAA,MAAM,UAAU,IAAA,CAAK,GAAA;AAAA,MACpB,eAAc,iCAAA,GACb,CAAA,IAAK,KAAK,GAAA,CAAI,CAAA,EAAG,WAAW,CAAC,CAAA;AAAA,MAC9B,cAAA,CAAc;AAAA,KACf;AACA,IAAA,IAAA,CAAK,oBAAA,CAAqB,IAAI,MAAA,EAAQ;AAAA,MACrC,QAAA;AAAA,MACA,eAAe,GAAA,GAAM,OAAA;AAAA,MACrB,aAAA,EAAe;AAAA,KACf,CAAA;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOO,UAAU,OAAA,EAA6B;AAC7C,IAAA,MAAM,SAAS,OAAA,CAAQ,MAAA;AACvB,IAAA,MAAM,OAAO,MAAA,EAAQ,KAAA;AACrB,IAAA,MAAM,OAAA,GAAU,OAAO,yCAAyC,CAAA;AAEhE,IAAA,IAAI,YAAY,oBAAA,EAAsB;AACrC,MAAA,OAAO,QAAA;AAAA,IACR;AAEA,IAAA,IAAI,0BAAA,IAA8B,eAAA,CAAgB,OAAO,CAAA,EAAG;AAC3D,MAAA,OAAO,QAAA;AAAA,IACR;AAEA,IAAA,OAAO,QAAA;AAAA,EACR;AAAA,EAEA,MAAa,QAAA,CACZ,OAAA,EACA,QAAA,EAC8B;AAC9B,IAAA,MAAM,EAAE,MAAA,EAAQ,MAAA,EAAQ,EAAA,EAAG,GAAI,OAAA;AAC/B,IAAA,GAAA,CAAI,IAAA,CAAK,CAAA,0BAAA,EAA6B,MAAM,CAAA,CAAE,CAAA;AAG9C,IAAA,IAAI,IAAA,CAAK,WAAW,YAAA,EAAc;AACjC,MAAA,MAAM,UAAA,GAAa,gBAAA,CAAiB,MAAA,EAAQ,QAAA,IAAY,IAAI,CAAA;AAC5D,MAAA,IAAI,CAAC,WAAW,OAAA,EAAS;AACxB,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,CAAA,6CAAA,EAAgD,MAAM,CAAA,GAAA,EAAM,UAAA,CAAW,MAAM,CAAA;AAAA,SAC9E;AACA,QAAA,OAAO;AAAA,UACN,OAAA,EAAS,KAAA;AAAA,UACT,EAAA;AAAA,UACA,KAAA,EAAO;AAAA,YACN,IAAA,EAAM,MAAA;AAAA;AAAA,YACN,OAAA,EAAS,WAAW,MAAA,IAAU;AAAA;AAC/B,SACD;AAAA,MACD;AAAA,IACD;AAEA,IAAA,QAAQ,MAAA;AAAQ;AAAA,MAEf,KAAK,YAAA,EAAc;AAClB,QAAA,IAAI,CAAC,0BAAA,EAA4B;AAChC,UAAA,OAAO;AAAA,YACN,OAAA,EAAS,KAAA;AAAA,YACT,EAAA;AAAA,YACA,KAAA,EAAO;AAAA,cACN,IAAA,EAAM,MAAA;AAAA,cACN,OAAA,EACC;AAAA;AACF,WACD;AAAA,QACD;AACA,QAAA,GAAA,CAAI,IAAA;AAAA,UACH;AAAA,SACD;AACA,QAAA,OAAO,6BAAA;AAAA,UACN,IAAA,CAAK,WAAW,aAAA,EAAc;AAAA,UAC9B;AAAA,SACD;AAAA,MACD;AAAA;AAAA,MAEA,KAAK,2BAAA;AACJ,QAAA,IAAI,CAAC,4BAA4B,OAAO,IAAA;AAGxC,QAAA,IAAA,CAAK,6BAAA,EAA8B,CAAE,KAAA,CAAM,MAAM;AAAA,QAAC,CAAC,CAAA;AACnD,QAAA,OAAO,IAAA;AAAA,MACR,KAAK,yBAAA;AACJ,QAAA,OAAO,IAAA;AAAA;AAAA,MACR,KAAK,iBAAA;AACJ,QAAA,OAAO;AAAA,UACN,OAAA,EAAS,KAAA;AAAA,UACT,EAAA;AAAA,UACA,MAAA,EAAQ;AAAA,YACP,UAAA,EAAY,UAAA;AAAA,YACZ,mBAAmB,0BAAA,GAChB,CAAC,sBAAsB,2BAA2B,CAAA,GAClD,CAAC,oBAAoB,CAAA;AAAA,YACxB,YAAA,EAAc;AAAA,cACb,KAAA,EAAO,EAAE,WAAA,EAAa,IAAA,EAAK;AAAA,cAC3B,SAAA,EAAW,EAAE,WAAA,EAAa,IAAA,EAAK;AAAA,cAC/B,OAAA,EAAS,EAAE,WAAA,EAAa,IAAA;AAAK,aAC9B;AAAA,YACA,UAAA,EAAY,IAAA,CAAK,UAAA,CAAW,aAAA;AAAc;AAC3C,SACD;AAAA,MACD,KAAK,MAAA;AACJ,QAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,EAAA,EAAI,MAAA,EAAQ,EAAC,EAAE;AAAA,MACzC,KAAK,YAAA,EAAc;AAClB,QAAA,MAAM,UAAA,GAAa,IAAA,CAAK,UAAA,CAAW,SAAA,EAAU;AAC7C,QAAA,MAAM,WAAA,GAAc,MAAM,IAAA,CAAK,cAAA,EAAe;AAE9C,QAAA,MAAM,eAAe,0BAAA,EAA2B,GAC7C,UAAA,CAAW,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,UACvB,GAAG,CAAA;AAAA,UACH,WAAA,EAAa,+BAAA,CAAgC,CAAA,CAAE,WAAA,IAAe,EAAE;AAAA,UAC/D,CAAA,GACD,UAAA;AAEH,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,CAAA,0BAAA,EAA6B,UAAA,CAAW,MAAM,CAAA,QAAA,EAAW,YAAY,MAAM,CAAA,mBAAA;AAAA,SAC5E;AAMA,QAAA,MAAM,cAAA,GAAiB;AAAA,UACtB,IAAA,EAAM,gBAAA;AAAA,UACN,WAAA,EACC,8FAAA;AAAA,UACD,WAAA,EAAa;AAAA,YACZ,IAAA,EAAM,QAAA;AAAA,YACN,YAAY,EAAC;AAAA,YACb,oBAAA,EAAsB;AAAA;AACvB,SACD;AAGA,QAAA,MAAM,WAAW,CAAC,cAAA,EAAgB,GAAG,YAAA,EAAc,GAAG,WAAW,CAAA,CAAE,IAAA;AAAA,UAClE,CAAC,CAAA,EAAG,CAAA,KAAM,EAAE,IAAA,CAAK,aAAA,CAAc,EAAE,IAAI;AAAA,SACtC;AAGA,QAAA,MAAM,SAAA,GAAY,qBAAqB,WAAA,EAAY;AACnD,QAAA,MAAM,YAAA,GAAe,IAAA,CAAK,SAAA,CAAU,QAAQ,CAAA;AAC5C,QAAA,MAAM,uBAAuB,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,UAAU,CAAA;AAC/D,QAAA,SAAA,CAAU,MAAA,CAAO;AAAA,UAChB,IAAA,EAAM,YAAA;AAAA,UACN,MAAA,EAAQ,YAAA;AAAA,UACR,oBAAA,EAAsB,SAAA,CAAU,WAAA,CAAY,YAAY,CAAA;AAAA,UACxD,qBAAA,EAAuB,SAAA,CAAU,WAAA,CAAY,oBAAoB;AAAA,SACjE,CAAA;AAED,QAAA,MAAM,GAAA,GAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAClC,QAAA,IAAI,QAAA,GAAwB;AAAA,UAC3B,OAAA,EAAS,KAAA;AAAA,UACT,EAAA;AAAA,UACA,MAAA,EAAQ;AAAA,YACP,UAAA,EAAY,UAAA;AAAA,YACZ,KAAA,EAAO,GAAA;AAAA,YACP,UAAA,EAAY,QAAA;AAAA,YACZ,KAAA,EAAO;AAAA;AACR,SACD;AAGA,QAAA,IAAI,GAAA,KAAQ,YAAY,0BAAA,EAA4B;AACnD,UAAA,QAAA,GAAW,6BAA6B,QAAQ,CAAA;AAAA,QACjD;AAEA,QAAA,OAAO,QAAA;AAAA,MACR;AAAA,MACA,KAAK,YAAA,EAAc;AAClB,QAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,kBAAA;AAAA,UAC3B,EAAA;AAAA,UACA,MAAA;AAAA,UACA,QAAA,EAAU;AAAA,SACX;AACA,QAAA,IAAI,CAAC,UAAU,OAAO,IAAA;AAEtB,QAAA,MAAM,GAAA,GAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAClC,QAAA,IAAI,GAAA,KAAQ,YAAY,0BAAA,EAA4B;AACnD,UAAA,OAAO,6BAA6B,QAAQ,CAAA;AAAA,QAC7C;AACA,QAAA,IAAI,QAAA,CAAS,MAAA,IAAU,OAAO,QAAA,CAAS,WAAW,QAAA,EAAU;AAC3D,UAAA,MAAM,SAAS,QAAA,CAAS,MAAA;AACxB,UAAA,IAAI,CAAC,OAAO,UAAA,EAAY;AACvB,YAAA,MAAA,CAAO,UAAA,GAAa,UAAA;AAAA,UACrB;AAAA,QACD;AACA,QAAA,OAAO,QAAA;AAAA,MACR;AAAA,MACA,KAAK,gBAAA,EAAkB;AACtB,QAAA,MAAM,cAAA,GAAiB,IAAA,CAAK,UAAA,CAAW,aAAA,EAAc;AACrD,QAAA,MAAM,eAAA,GAAkB,MAAM,IAAA,CAAK,kBAAA,EAAmB;AAEtD,QAAA,MAAM,eAAe,CAAC,GAAG,cAAA,EAAgB,GAAG,eAAe,CAAA,CAAE,IAAA;AAAA,UAC5D,CAAC,CAAA,EAAG,CAAA,KAAM,EAAE,GAAA,CAAI,aAAA,CAAc,EAAE,GAAG;AAAA,SACpC;AAGA,QAAA,MAAM,WAAA,GAAc,qBAAqB,WAAA,EAAY;AACrD,QAAA,MAAM,SAAA,GAAY,IAAA,CAAK,SAAA,CAAU,YAAY,CAAA;AAC7C,QAAA,WAAA,CAAY,MAAA,CAAO;AAAA,UAClB,IAAA,EAAM,eAAA;AAAA,UACN,MAAA,EAAQ,gBAAA;AAAA,UACR,oBAAA,EAAsB,CAAA;AAAA,UACtB,qBAAA,EAAuB,WAAA,CAAY,WAAA,CAAY,SAAS;AAAA,SACxD,CAAA;AAED,QAAA,MAAM,GAAA,GAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAClC,QAAA,IAAI,QAAA,GAAwB;AAAA,UAC3B,OAAA,EAAS,KAAA;AAAA,UACT,EAAA;AAAA,UACA,MAAA,EAAQ;AAAA,YACP,UAAA,EAAY,UAAA;AAAA,YACZ,KAAA,EAAO,GAAA;AAAA,YACP,UAAA,EAAY,QAAA;AAAA,YACZ,SAAA,EAAW;AAAA;AACZ,SACD;AAGA,QAAA,IAAI,GAAA,KAAQ,YAAY,0BAAA,EAA4B;AACnD,UAAA,QAAA,GAAW,6BAA6B,QAAQ,CAAA;AAAA,QACjD;AAEA,QAAA,OAAO,QAAA;AAAA,MACR;AAAA,MACA,KAAK,gBAAA,EAAkB;AACtB,QAAA,MAAM,WAAA,GAAc,MAAA;AACpB,QAAA,IAAI,CAAC,WAAA,EAAa,GAAA;AACjB,UAAA,OAAO;AAAA,YACN,OAAA,EAAS,KAAA;AAAA,YACT,EAAA;AAAA,YACA,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAS,sBAAA;AAAuB,WACxD;AACD,QAAA,IAAI;AACH,UAAA,MAAM,WAAA,GAAc,KAAK,GAAA,EAAI;AAC7B,UAAA,MAAM,SAAS,MAAM,IAAA,CAAK,UAAA,CAAW,YAAA,CAAa,YAAY,GAAG,CAAA;AAGjE,UAAA,MAAM,WAAA,GAAc,qBAAqB,WAAA,EAAY;AACrD,UAAA,MAAM,eAAA,GAAkB,IAAA,CAAK,SAAA,CAAU,MAAM,CAAA;AAC7C,UAAA,WAAA,CAAY,MAAA,CAAO;AAAA,YAClB,IAAA,EAAM,eAAA;AAAA,YACN,MAAA,EAAQ,gBAAA;AAAA,YACR,UAAU,WAAA,CAAY,GAAA;AAAA,YACtB,oBAAA,EAAsB,WAAA,CAAY,WAAA,CAAY,WAAA,CAAY,GAAG,CAAA;AAAA,YAC7D,qBAAA,EAAuB,WAAA,CAAY,WAAA,CAAY,eAAe,CAAA;AAAA,YAC9D,UAAA,EAAY,IAAA,CAAK,GAAA,EAAI,GAAI;AAAA,WACzB,CAAA;AAED,UAAA,MAAM,GAAA,GAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAClC,UAAA,MAAM,SAAA,GACL,OAAO,MAAA,KAAW,QAAA,IAAY,WAAW,IAAA,GACtC;AAAA,YACA,UAAA,EAAY,UAAA;AAAA,YACZ,KAAA,EAAO,GAAA;AAAA,YACP,UAAA,EAAY,SAAA;AAAA,YACZ,GAAG;AAAA,WACJ,GACC;AAAA,YACA,UAAA,EAAY,UAAA;AAAA,YACZ,KAAA,EAAO,GAAA;AAAA,YACP,UAAA,EAAY,SAAA;AAAA,YACZ,QAAA,EAAU;AAAA,WACX;AAEH,UAAA,IAAI,WAAwB,EAAE,OAAA,EAAS,KAAA,EAAO,EAAA,EAAI,QAAQ,SAAA,EAAU;AAGpE,UAAA,IAAI,GAAA,KAAQ,YAAY,0BAAA,EAA4B;AACnD,YAAA,QAAA,GAAW,6BAA6B,QAAQ,CAAA;AAAA,UACjD;AAEA,UAAA,OAAO,QAAA;AAAA,QACR,SAAS,GAAA,EAAc;AAEtB,UAAA,MAAM,YAAY,WAAA,CAAY,GAAA;AAC9B,UAAA,KAAA,MAAW,EAAE,QAAA,EAAS,IAAK,IAAA,CAAK,aAAA,CAAc,QAAO,EAAG;AACvD,YAAA,MAAM,cAAA,GAAiB,SAAS,SAAA,CAAU,IAAA;AAAA,cACzC,CAAC,CAAA,KAAM,CAAA,CAAE,GAAA,KAAQ;AAAA,aAClB;AACA,YAAA,IAAI,cAAA,EAAgB;AACnB,cAAA,GAAA,CAAI,IAAA;AAAA,gBACH,CAAA,gCAAA,EAAmC,SAAS,CAAA,mBAAA,EAAsB,QAAA,CAAS,MAAM,CAAA,CAAA;AAAA,eAClF;AACA,cAAA,MAAM,GAAA,GAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAClC,cAAA,IAAI,QAAA,GAAwB;AAAA,gBAC3B,OAAA,EAAS,KAAA;AAAA,gBACT,EAAA;AAAA,gBACA,MAAA,EAAQ;AAAA,kBACP,UAAA,EAAY,UAAA;AAAA,kBACZ,KAAA,EAAO,GAAA;AAAA,kBACP,UAAA,EAAY,SAAA;AAAA,kBACZ,QAAA,EAAU;AAAA,oBACT;AAAA,sBACC,KAAK,cAAA,CAAe,GAAA;AAAA,sBACpB,QAAA,EAAU,eAAe,QAAA,IAAY,YAAA;AAAA,sBACrC,IAAA,EACC,cAAA,CAAe,IAAA,IACf,cAAA,CAAe,WAAA,IACf;AAAA;AACF;AACD;AACD,eACD;AAGA,cAAA,IAAI,GAAA,KAAQ,YAAY,0BAAA,EAA4B;AACnD,gBAAA,QAAA,GAAW,6BAA6B,QAAQ,CAAA;AAAA,cACjD;AAEA,cAAA,OAAO,QAAA;AAAA,YACR;AAAA,UACD;AAEA,UAAA,OAAO;AAAA,YACN,OAAA,EAAS,KAAA;AAAA,YACT,EAAA;AAAA,YACA,KAAA,EAAO;AAAA,cACN,IAAA,EAAM,KAAA;AAAA,cACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA;AACzD,WACD;AAAA,QACD;AAAA,MACD;AAAA,MACA,KAAK,cAAA,EAAgB;AACpB,QAAA,MAAM,WAAA,GAAc,IAAA,CAAK,UAAA,CACvB,WAAA,GACA,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,IAAA,CAAK,aAAA,CAAc,CAAA,CAAE,IAAI,CAAC,CAAA;AAG7C,QAAA,MAAM,WAAA,GAAc,qBAAqB,WAAA,EAAY;AACrD,QAAA,MAAM,SAAA,GAAY,IAAA,CAAK,SAAA,CAAU,WAAW,CAAA;AAC5C,QAAA,WAAA,CAAY,MAAA,CAAO;AAAA,UAClB,IAAA,EAAM,aAAA;AAAA,UACN,MAAA,EAAQ,cAAA;AAAA,UACR,oBAAA,EAAsB,CAAA;AAAA,UACtB,qBAAA,EAAuB,WAAA,CAAY,WAAA,CAAY,SAAS;AAAA,SACxD,CAAA;AAED,QAAA,MAAM,GAAA,GAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAClC,QAAA,IAAI,QAAA,GAAwB;AAAA,UAC3B,OAAA,EAAS,KAAA;AAAA,UACT,EAAA;AAAA,UACA,MAAA,EAAQ;AAAA,YACP,UAAA,EAAY,UAAA;AAAA,YACZ,KAAA,EAAO,GAAA;AAAA,YACP,UAAA,EAAY,QAAA;AAAA,YACZ,OAAA,EAAS;AAAA;AACV,SACD;AAGA,QAAA,IAAI,GAAA,KAAQ,YAAY,0BAAA,EAA4B;AACnD,UAAA,QAAA,GAAW,6BAA6B,QAAQ,CAAA;AAAA,QACjD;AAEA,QAAA,OAAO,QAAA;AAAA,MACR;AAAA,MACA,KAAK,aAAA,EAAe;AACnB,QAAA,MAAM,WAAA,GAAc,MAAA;AAGpB,QAAA,IAAI,CAAC,WAAA,EAAa,IAAA;AACjB,UAAA,OAAO;AAAA,YACN,OAAA,EAAS,KAAA;AAAA,YACT,EAAA;AAAA,YACA,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAS,qBAAA;AAAsB,WACvD;AACD,QAAA,IAAI;AACH,UAAA,MAAM,WAAA,GAAc,KAAK,GAAA,EAAI;AAC7B,UAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,UAAA,CAAW,SAAA,CAAU;AAAA,YAC9C,MAAM,WAAA,CAAY,IAAA;AAAA,YAClB,SAAA,EAAW,WAAA,CAAY,SAAA,IAAa;AAAC,WACrC,CAAA;AAGD,UAAA,MAAM,WAAA,GAAc,qBAAqB,WAAA,EAAY;AACrD,UAAA,MAAM,cAAA,GAAiB,KAAK,SAAA,CAAU;AAAA,YACrC,MAAM,WAAA,CAAY,IAAA;AAAA,YAClB,WAAW,WAAA,CAAY;AAAA,WACvB,CAAA;AACD,UAAA,MAAM,eAAA,GAAkB,IAAA,CAAK,SAAA,CAAU,MAAM,CAAA;AAC7C,UAAA,WAAA,CAAY,MAAA,CAAO;AAAA,YAClB,IAAA,EAAM,YAAA;AAAA,YACN,MAAA,EAAQ,aAAA;AAAA,YACR,UAAU,WAAA,CAAY,IAAA;AAAA,YACtB,oBAAA,EAAsB,WAAA,CAAY,WAAA,CAAY,cAAc,CAAA;AAAA,YAC5D,qBAAA,EAAuB,WAAA,CAAY,WAAA,CAAY,eAAe,CAAA;AAAA,YAC9D,UAAA,EAAY,IAAA,CAAK,GAAA,EAAI,GAAI;AAAA,WACzB,CAAA;AAED,UAAA,MAAM,GAAA,GAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAClC,UAAA,MAAM,SAAA,GACL,OAAO,MAAA,KAAW,QAAA,IAAY,MAAA,KAAW,IAAA,GACtC,EAAE,UAAA,EAAY,UAAA,EAAY,GAAG,MAAA,EAAO,GACpC,MAAA;AAEJ,UAAA,IAAI,WAAwB,EAAE,OAAA,EAAS,KAAA,EAAO,EAAA,EAAI,QAAQ,SAAA,EAAU;AAGpE,UAAA,IAAI,GAAA,KAAQ,YAAY,0BAAA,EAA4B;AACnD,YAAA,QAAA,GAAW,6BAA6B,QAAQ,CAAA;AAAA,UACjD;AAEA,UAAA,OAAO,QAAA;AAAA,QACR,SAAS,GAAA,EAAc;AACtB,UAAA,OAAO;AAAA,YACN,OAAA,EAAS,KAAA;AAAA,YACT,EAAA;AAAA,YACA,KAAA,EAAO;AAAA,cACN,IAAA,EAAM,KAAA;AAAA,cACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA;AACzD,WACD;AAAA,QACD;AAAA,MACD;AAAA,MACA,KAAK,0BAAA,EAA4B;AAChC,QAAA,MAAM,GAAA,GAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAClC,QAAA,IAAI,QAAA,GAAwB;AAAA,UAC3B,OAAA,EAAS,KAAA;AAAA,UACT,EAAA;AAAA,UACA,MAAA,EAAQ;AAAA,YACP,UAAA,EAAY,UAAA;AAAA,YACZ,KAAA,EAAO,GAAA;AAAA,YACP,UAAA,EAAY,QAAA;AAAA,YACZ,mBAAmB;AAAC;AACrB,SACD;AAGA,QAAA,IAAI,GAAA,KAAQ,YAAY,0BAAA,EAA4B;AACnD,UAAA,QAAA,GAAW,6BAA6B,QAAQ,CAAA;AAAA,QACjD;AAEA,QAAA,OAAO,QAAA;AAAA,MACR;AAAA,MACA,KAAK,sBAAA,EAAwB;AAC5B,QAAA,MAAM,GAAA,GAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAClC,QAAA,IAAI,QAAA,GAAwB;AAAA,UAC3B,OAAA,EAAS,KAAA;AAAA,UACT,EAAA;AAAA,UACA,MAAA,EAAQ;AAAA,YACP,UAAA,EAAY;AAAA;AACb,SACD;AAGA,QAAA,IAAI,GAAA,KAAQ,YAAY,0BAAA,EAA4B;AACnD,UAAA,QAAA,GAAW,6BAA6B,QAAQ,CAAA;AAAA,QACjD;AAEA,QAAA,OAAO,QAAA;AAAA,MACR;AAAA,MACA;AACC,QAAA,OAAO;AAAA,UACN,OAAA,EAAS,KAAA;AAAA,UACT,EAAA;AAAA,UACA,OAAO,EAAE,IAAA,EAAM,QAAQ,OAAA,EAAS,CAAA,kBAAA,EAAqB,MAAM,CAAA,CAAA;AAAG,SAC/D;AAAA;AACF,EACD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,6BAAA,GAA+C;AACtD,IAAA,OAAA,CAAQ,YAAY;AACnB,MAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,MAAM,UAAA,CAAW,CAAA,EAAG,GAAG,CAAC,CAAA;AAC3C,MAAA,MAAM,QAAQ,IAAA,CAAK;AAAA,QAClB,IAAA,CAAK,qBAAqB,IAAI,CAAA;AAAA,QAC9B,IAAI,OAAA,CAAc,CAAC,MAAM,UAAA,CAAW,CAAA,EAAG,IAAM,CAAC;AAAA,OAC9C,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,MAAC,CAAC,CAAA;AAAA,IAClB,CAAA,GAAG;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAa,oBAAA,CAAqB,MAAA,GAAS,KAAA,EAAsB;AAChE,IAAA,IAAI,CAAC,KAAK,QAAA,EAAU;AACpB,IAAA,IAAI,IAAA,CAAK,gBAAA,EAAkB,OAAO,IAAA,CAAK,gBAAA;AAKvC,IAAA,IAAI,CAAC,MAAA,IAAU,IAAA,CAAK,aAAA,CAAc,OAAO,CAAA,EAAG;AAC3C,MAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,MAAA,MAAM,WAAW,KAAA,CAAM,IAAA,CAAK,KAAK,aAAA,CAAc,MAAA,EAAQ,CAAA,CAAE,KAAA;AAAA,QACxD,CAAC,EAAE,QAAA,EAAS,KAAM,GAAA,GAAM,WAAW,oBAAA,GAAuB;AAAA,OAC3D;AACA,MAAA,IAAI,QAAA,EAAU;AAAA,IACf;AAEA,IAAA,IAAA,CAAK,oBAAoB,YAAY;AACpC,MAAA,IAAI;AACH,QAAA,MAAM,YAAY,KAAA,CAAM,IAAA,CAAK,KAAK,aAAA,CAAc,MAAA,EAAQ,CAAA,CAAE,MAAA;AAAA,UACzD,CAAC,GAAA,EAAK,EAAE,UAAS,KAAM,GAAA,GAAM,SAAS,KAAA,CAAM,MAAA;AAAA,UAC5C;AAAA,SACD;AAGA,QAAA,IAAI,IAAA,CAAK,aAAA,CAAc,IAAA,KAAS,CAAA,EAAG;AAClC,UAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,EAAG,CAAA,EAAA,EAAK;AAC3B,YAAA,MAAM,WAAA;AAAA;AAAA,cAEJ,IAAA,CAAK,QAAA,CAAiB,IAAA,EAAM,cAAA,GAAiB,MAAA,IAAU;AAAA,aAAA;AACzD,YAAA,IAAI,cAAc,CAAA,EAAG;AACpB,cAAA,GAAA,CAAI,IAAA;AAAA,gBACH,CAAA,+DAAA;AAAA,eACD;AACA,cAAA;AAAA,YACD;AACA,YAAA,GAAA,CAAI,IAAA;AAAA,cACH,CAAA,mDAAA,EAAsD,IAAI,CAAC,CAAA,OAAA;AAAA,aAC5D;AACA,YAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,MAAM,UAAA,CAAW,CAAA,EAAG,GAAI,CAAC,CAAA;AAAA,UAC7C;AAAA,QACD;AAGA,QAAA,IAAI,cAAwB,EAAC;AAC7B,QAAA,MAAM,iBAAA,GAAoB,IAAA,CAAK,aAAA,CAAc,IAAA,KAAS,IAAI,CAAA,GAAI,CAAA;AAE9D,QAAA,KAAA,IACK,WAAA,GAAc,CAAA,EAClB,WAAA,GAAc,iBAAA,EACd,WAAA,EAAA,EACC;AAED,UAAA,KAAA,IACK,OAAA,GAAU,CAAA,EACd,OAAA,GAAU,0BAAA,EACV,OAAA,EAAA,EACC;AACD,YAAA,WAAA,GACE,MAAM,IAAA,CAAK,QAAA,EAAU,yBAAA,MAAgC,EAAC;AACxD,YAAA,MAAMA,OAAAA,GAAS,IAAA,CAAK,QAAA,EAAU,SAAA,EAAU;AACxC,YAAA,MAAM,YAAY,WAAA,CAAY,MAAA,CAAO,CAAC,EAAA,KAAO,OAAOA,OAAM,CAAA;AAC1D,YAAA,IAAI,SAAA,CAAU,SAAS,CAAA,EAAG;AAC1B,YAAA,IAAI,OAAA,GAAU,6BAA6B,CAAA,EAAG;AAC7C,cAAA,GAAA,CAAI,IAAA;AAAA,gBACH,CAAA,oCAAA,EAAuC,OAAA,GAAU,CAAC,CAAA,CAAA,EAAI,0BAA0B,CAAA,GAAA;AAAA,eACjF;AACA,cAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,MAAM,UAAA,CAAW,CAAA,EAAG,GAAI,CAAC,CAAA;AAAA,YAC7C;AAAA,UACD;AAGA,UAAA,MAAM,WAAA;AAAA;AAAA,YAEJ,IAAA,CAAK,QAAA,CAAiB,IAAA,EACpB,cAAA,EAAe,CAChB,GAAA;AAAA,cAAI,CAAC,CAAA,KACL,CAAA,CAAE,UAAA,CAAW,QAAA;AAAS,iBAClB;AAAC,WAAA;AAER,UAAA,IAAI,WAAA,CAAY,SAAS,CAAA,EAAG;AAC3B,YAAA,WAAA,GAAc,KAAA,CAAM,IAAA,iBAAK,IAAI,GAAA,CAAI,CAAC,GAAG,WAAA,EAAa,GAAG,WAAW,CAAC,CAAC,CAAA;AAAA,UACnE;AAEA,UAAA,MAAM,SAAA,GAAY,IAAA,CAAK,QAAA,EAAU,SAAA,EAAU;AAC3C,UAAA,MAAM,eAAe,WAAA,CAAY,MAAA,CAAO,CAAC,EAAA,KAAO,OAAO,SAAS,CAAA;AAChE,UAAA,IAAI,YAAA,CAAa,SAAS,CAAA,EAAG;AAE7B,UAAA,IAAI,WAAA,GAAc,oBAAoB,CAAA,EAAG;AACxC,YAAA,GAAA,CAAI,IAAA;AAAA,cACH,CAAA,sEAAA,EAAyE,WAAA,GAAc,CAAC,CAAA,CAAA,EAAI,iBAAiB,CAAA,IAAA;AAAA,aAC9G;AACA,YAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,MAAM,UAAA,CAAW,CAAA,EAAG,GAAI,CAAC,CAAA;AAAA,UAC7C;AAAA,QACD;AAEA,QAAA,IAAI,WAAA,CAAY,WAAW,CAAA,EAAG;AAC7B,UAAA,GAAA,CAAI,IAAA;AAAA,YACH,CAAA,6DAAA;AAAA,WACD;AACA,UAAA;AAAA,QACD;AAEA,QAAA,IAAI,CAAC,MAAA,EAAQ;AACZ,UAAA,GAAA,CAAI,IAAA;AAAA,YACH,CAAA,yBAAA,EAA4B,YAAY,MAAM,CAAA,6BAAA;AAAA,WAC/C;AAAA,QACD;AAKA,QAAA,MAAM,iBAAiB,IAAI,GAAA;AAAA;AAAA,UAAA,CAExB,KAAK,QAAA,CAAiB,IAAA,EAAM,cAAA,IAAiB,IAAK,EAAC,EAAG,GAAA;AAAA,YACvD,CAAC,CAAA,KACA,CAAA,CAAE,UAAA,CAAW,QAAA;AAAS;AACxB,SACD;AACA,QAAA,WAAA,GAAc,CAAC,GAAG,WAAW,EAAE,IAAA,CAAK,CAAC,GAAG,CAAA,KAAM;AAC7C,UAAA,MAAM,UAAA,GAAa,cAAA,CAAe,GAAA,CAAI,CAAC,IAAI,CAAA,GAAI,CAAA;AAC/C,UAAA,MAAM,UAAA,GAAa,cAAA,CAAe,GAAA,CAAI,CAAC,IAAI,CAAA,GAAI,CAAA;AAC/C,UAAA,OAAO,UAAA,GAAa,UAAA;AAAA,QACrB,CAAC,CAAA;AAED,QAAA,IAAI,YAAA,GAAe,CAAA;AACnB,QAAA,IAAI,UAAA,GAAa,CAAA;AACjB,QAAA,IAAI,YAAA,GAAe,KAAA;AAGnB,QAAA,MAAM,MAAA,GAAS,IAAA,CAAK,QAAA,EAAU,SAAA,EAAU;AACxC,QAAA,MAAM,aAAA,GAAgB,WAAA,CAAY,MAAA,CAAO,CAAC,MAAA,KAAW;AACpD,UAAA,IAAI,CAAC,IAAA,CAAK,QAAA,EAAU,OAAO,KAAA;AAC3B,UAAA,IAAI,MAAA,KAAW,QAAQ,OAAO,KAAA;AAC9B,UAAA,IAAI,IAAA,CAAK,uBAAA,CAAwB,MAAM,CAAA,EAAG,OAAO,KAAA;AACjD,UAAA,MAAM,MAAA,GAAS,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,MAAM,CAAA;AAC5C,UAAA,IACC,UACA,IAAA,CAAK,GAAA,KAAQ,MAAA,CAAO,QAAA,GAAW,uBAAuB,GAAA,EACrD;AACD,YAAA,YAAA,EAAA;AACA,YAAA,OAAO,KAAA;AAAA,UACR;AACA,UAAA,OAAO,IAAA;AAAA,QACR,CAAC,CAAA;AAGD,QAAA,MAAM,YAAA,GAAe,MAAM,OAAA,CAAQ,UAAA;AAAA,UAClC,aAAA,CAAc,GAAA,CAAI,OAAO,MAAA,KAAW;AACnC,YAAA,IAAI,CAAC,IAAA,CAAK,QAAA,EAAU,OAAO,IAAA;AAC3B,YAAA,GAAA,CAAI,IAAA,CAAK,CAAA,sCAAA,EAAyC,MAAM,CAAA,CAAE,CAAA;AAC1D,YAAA,OAAO;AAAA,cACN,MAAA;AAAA,cACA,QAAA,EAAU,MAAM,IAAA,CAAK,QAAA,CAAS,cAAc,MAAM;AAAA,aACnD;AAAA,UACD,CAAC;AAAA,SACF;AAEA,QAAA,KAAA,MAAW,UAAU,YAAA,EAAc;AAClC,UAAA,IAAI,MAAA,CAAO,MAAA,KAAW,WAAA,IAAe,MAAA,CAAO,OAAO,QAAA,EAAU;AAC5D,YAAA,MAAM,EAAE,MAAA,EAAQ,QAAA,EAAS,GAAI,MAAA,CAAO,KAAA;AAGpC,YAAA,IAAI,QAAA,CAAS,YAAA,IAAgB,QAAA,CAAS,YAAA,EAAc;AACnD,cAAA,MAAM,UAAU,kBAAA,CAAmB,cAAA;AAAA,gBAClC,QAAA;AAAA,gBACA,QAAA,CAAS,YAAA;AAAA,gBACT,QAAA,CAAS;AAAA,eACV;AACA,cAAA,IAAI,CAAC,OAAA,EAAS;AACb,gBAAA,GAAA,CAAI,IAAA;AAAA,kBACH,kEAAwD,MAAM,CAAA,8BAAA;AAAA,iBAC/D;AACA,gBAAA,IAAA,CAAK,2BAA2B,MAAM,CAAA;AACtC,gBAAA,UAAA,EAAA;AACA,gBAAA;AAAA,cACD;AACA,cAAA,GAAA,CAAI,IAAA;AAAA,gBACH,uFAAgF,MAAM,CAAA;AAAA,eACvF;AAAA,YACD;AAEA,YAAA,IAAA,CAAK,aAAA,CAAc,IAAI,MAAA,EAAQ;AAAA,cAC9B,QAAA;AAAA,cACA,QAAA,EAAU,KAAK,GAAA;AAAI,aACnB,CAAA;AACD,YAAA,IAAA,CAAK,2BAA2B,MAAM,CAAA;AACtC,YAAA,YAAA,GAAe,IAAA;AACf,YAAA,YAAA,EAAA;AACA,YAAA,GAAA,CAAI,IAAA;AAAA,cACH,CAAA,qCAAA,EAAwC,MAAM,CAAA,EAAA,EAAK,QAAA,CAAS,MAAM,MAAM,CAAA,OAAA;AAAA,aACzE;AAAA,UACD,CAAA,MAAA,IAAW,MAAA,CAAO,MAAA,KAAW,WAAA,IAAe,OAAO,KAAA,EAAO;AACzD,YAAA,IAAA,CAAK,0BAAA,CAA2B,MAAA,CAAO,KAAA,CAAM,MAAM,CAAA;AACnD,YAAA,UAAA,EAAA;AACA,YAAA,GAAA,CAAI,IAAA;AAAA,cACH,CAAA,+CAAA,EAAkD,MAAA,CAAO,KAAA,CAAM,MAAM,CAAA;AAAA,aACtE;AAAA,UACD,CAAA,MAAA,IAAW,MAAA,CAAO,MAAA,KAAW,UAAA,EAAY;AACxC,YAAA,UAAA,EAAA;AACA,YAAA,GAAA,CAAI,IAAA;AAAA,cACH,CAAA,4CAAA,CAAA;AAAA,cACA,MAAA,CAAO,kBAAkB,KAAA,GACtB,MAAA,CAAO,OAAO,OAAA,GACd,MAAA,CAAO,OAAO,MAAM;AAAA,aACxB;AAAA,UACD;AAAA,QACD;AAIA,QAAC,KAAa,eAAA,GAAkB;AAAA,UAC/B,YAAY,WAAA,CAAY,MAAA;AAAA,UACxB,OAAA,EAAS,YAAA;AAAA,UACT,QAAA,EAAU,UAAA;AAAA,UACV,aAAA,EAAe,KAAK,GAAA;AAAI,SACzB;AAEA,QAAA,IAAI,YAAA,EAAc;AACjB,UAAA,MAAM,WAAW,KAAA,CAAM,IAAA,CAAK,KAAK,aAAA,CAAc,MAAA,EAAQ,CAAA,CAAE,MAAA;AAAA,YACxD,CAAC,GAAA,EAAK,EAAE,UAAS,KAAM,GAAA,GAAM,SAAS,KAAA,CAAM,MAAA;AAAA,YAC5C;AAAA,WACD;AAEA,UAAA,IAAI,QAAA,KAAa,SAAA,IAAa,IAAA,CAAK,cAAA,EAAgB;AAClD,YAAA,OAAA,CAAQ,MAAA,CAAO,KAAA;AAAA,cACd;AAAA,aACD;AACA,YAAA,IAAA,CAAK,cAAA,EAAe;AAAA,UACrB;AAAA,QACD;AAAA,MACD,CAAA,SAAE;AACD,QAAA,IAAA,CAAK,gBAAA,GAAmB,IAAA;AAAA,MACzB;AAAA,IACD,CAAA,GAAG;AAEH,IAAA,OAAO,IAAA,CAAK,gBAAA;AAAA,EACb;AAAA;AAAA;AAAA;AAAA;AAAA,EAMO,YAAA,GAAuB;AAC7B,IAAA,OAAO,KAAK,aAAA,CAAc,IAAA;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,cAAA,GAMZ;AACD,IAAA,MAAM,qBAAqB,MAAA,CAAO,QAAA;AAAA,MACjC,OAAA,CAAQ,IAAI,uBAAA,IAA2B,GAAA;AAAA,MACvC;AAAA,KACD;AAMA,IAAA,IAAI,IAAA,CAAK,aAAA,CAAc,IAAA,GAAO,kBAAA,IAAsB,KAAK,QAAA,EAAU;AAClE,MAAA,MAAM,mBAAmB,MAAA,CAAO,QAAA;AAAA,QAC/B,OAAA,CAAQ,IAAI,iCAAA,IAAqC,MAAA;AAAA,QACjD;AAAA,OACD;AACA,MAAA,MAAM,mBACL,MAAA,CAAO,QAAA,CAAS,gBAAgB,CAAA,IAAK,gBAAA,GAAmB,IACrD,gBAAA,GACA,IAAA;AAEJ,MAAA,MAAM,QAAA,GAAW,IAAA,CAAK,GAAA,EAAI,GAAI,gBAAA;AAC9B,MAAA,IAAI,WAAA,GAAc,CAAA;AAClB,MAAA,IAAI,aAAA,GAAgB,EAAA;AAEpB,MAAA,OAAO,IAAA,CAAK,GAAA,EAAI,GAAI,QAAA,EAAU;AAC7B,QAAA,IAAI,IAAA,CAAK,aAAA,CAAc,IAAA,IAAQ,kBAAA,EAAoB;AAEnD,QAAA,MAAM,QAAQ,IAAA,CAAK;AAAA,UAClB,IAAA,CAAK,qBAAqB,IAAI,CAAA;AAAA,UAC9B,IAAI,OAAA,CAAc,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,GAAI,CAAC;AAAA,SACxD,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,QAAC,CAAC,CAAA;AAEjB,QAAA,IAAI,IAAA,CAAK,aAAA,CAAc,IAAA,IAAQ,kBAAA,EAAoB;AAGnD,QAAA,IAAI,IAAA,CAAK,aAAA,CAAc,IAAA,KAAS,aAAA,EAAe;AAC9C,UAAA,WAAA,EAAA;AACA,UAAA,IAAI,WAAA,IAAe,CAAA,IAAK,IAAA,CAAK,aAAA,CAAc,OAAO,CAAA,EAAG;AACpD,YAAA,GAAA,CAAI,IAAA;AAAA,cACH,CAAA,2CAAA,EAA8C,IAAA,CAAK,aAAA,CAAc,IAAI,IAAI,kBAAkB,CAAA,iCAAA;AAAA,aAC5F;AACA,YAAA;AAAA,UACD;AAAA,QACD,CAAA,MAAO;AACN,UAAA,WAAA,GAAc,CAAA;AACd,UAAA,aAAA,GAAgB,KAAK,aAAA,CAAc,IAAA;AAAA,QACpC;AAGA,QAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,MAAM,UAAA,CAAW,CAAA,EAAG,GAAI,CAAC,CAAA;AAAA,MAC7C;AAGA,MAAA,IAAI,IAAA,CAAK,aAAA,CAAc,IAAA,GAAO,kBAAA,EAAoB;AACjD,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,CAAA,qDAAA,EAA8C,IAAA,CAAK,aAAA,CAAc,IAAI,IAAI,kBAAkB,CAAA,mEAAA;AAAA,SAC5F;AAEA,QAAA,IAAA,CAAK,oBAAA,CAAqB,IAAI,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,QAAC,CAAC,CAAA;AAAA,MAC/C;AAAA,IACD;AAGA,IAAA,MAAM,QAAe,EAAC;AACtB,IAAA,MAAM,SAAA,uBAAgB,GAAA,EAAY;AAClC,IAAA,MAAM,iBAAiB,IAAI,GAAA;AAAA,MAC1B,IAAA,CAAK,WAAW,SAAA,EAAU,CAAE,IAAI,CAAC,CAAA,KAAM,EAAE,IAAI;AAAA,KAC9C;AAEA,IAAA,KAAA,MAAW,CAAC,QAAQ,EAAE,QAAA,EAAU,CAAA,IAAK,IAAA,CAAK,aAAA,CAAc,OAAA,EAAQ,EAAG;AAClE,MAAA,KAAA,MAAW,IAAA,IAAQ,SAAS,KAAA,EAAO;AAElC,QAAA,IAAI,IAAA,CAAK,SAAS,gBAAA,EAAkB;AAOpC,QAAA,IAAI,YAAY,IAAA,CAAK,IAAA;AACrB,QAAA,IAAI,SAAA,CAAU,IAAI,IAAA,CAAK,IAAI,KAAK,cAAA,CAAe,GAAA,CAAI,IAAA,CAAK,IAAI,CAAA,EAAG;AAC9D,UAAA,SAAA,GAAY,GAAG,IAAA,CAAK,IAAI,IAAI,MAAA,CAAO,KAAA,CAAM,EAAE,CAAC,CAAA,CAAA;AAAA,QAC7C;AACA,QAAA,SAAA,CAAU,IAAI,SAAS,CAAA;AAEvB,QAAA,MAAM,YAAA,GAAe,QAAA,CAAS,UAAA,EAAY,IAAA,IAAQ,kBAAA;AAGlD,QAAA,MAAM,QAAA,GAAW,IAAA,CAAK,WAAA,IAAe,CAAA,iBAAA,EAAoB,YAAY,CAAA,CAAA;AACrE,QAAA,MAAM,SAAA,GAIF;AAAA,UACH,IAAA,EAAM,SAAA;AAAA,UACN,WAAA,EAAa,0BAAA,EAA2B,GACrC,+BAAA,CAAgC,QAAQ,CAAA,GACxC,QAAA;AAAA,UACH,WAAA,EAAc,KAAK,WAAA,IAAe;AAAA,YACjC,IAAA,EAAM,QAAA;AAAA,YACN,YAAY;AAAC;AACd,SACD;AAGA,QAAA,IACC,OAAO,SAAA,CAAU,WAAA,KAAgB,YACjC,CAAC,SAAA,CAAU,YAAY,IAAA,EACtB;AACD,UAAA,SAAA,CAAU,YAAY,IAAA,GAAO,QAAA;AAAA,QAC9B;AACA,QAAA,IACC,OAAO,SAAA,CAAU,WAAA,KAAgB,YACjC,CAAC,SAAA,CAAU,YAAY,UAAA,EACtB;AACD,UAAA,SAAA,CAAU,WAAA,CAAY,aAAa,EAAC;AAAA,QACrC;AAEA,QAAA,IAAI,SAAA,GAAY,EAAA;AAChB,QAAA,IAAI,SAAS,QAAA,EAAU;AACtB,UAAA,SAAA,GAAY;AAAA,cAAA,EAAmB,QAAA,CAAS,SAAS,MAAM,CAAA,CAAA,CAAA;AAAA,QACxD;AAIA,QAAA,MAAM,UAAA,GAAc,SAAA,CAAU,WAAA,CAAY,UAAA,IAAc,EAAC;AACzD,QAAA,IAAI,WAAA,GAAc,EAAA;AAClB,QAAA,IAAI,CAAC,0BAAA,EAA2B,IAAK,UAAA,CAAW,OAAA,EAAS;AACxD,UAAA,WAAA,GAAc;AAAA,kCAAA,CAAA;AAAA,QACf;AAGA,QAAA,IACC,CAAC,0BAAA,EAA2B,IAC5B,UAAU,WAAA,CAAY,QAAA,CAAS,yBAAyB,CAAA,EACvD;AACD,UAAA,SAAA,CAAU,WAAA,GAAc,UAAU,WAAA,CAAY,OAAA;AAAA,YAC7C,0BAAA;AAAA,YACA;AAAA,WACD;AAAA,QACD;AAEA,QAAA,MAAM,WAAA,GAAc,4BAA2B,GAC5C;AAAA,OAAA,EAAY,OAAO,KAAA,CAAM,EAAE,CAAC,CAAA,CAAA,EAAI,SAAS,CAAA,CAAA,GACzC;AAAA,SAAA,EAAc,OAAO,KAAA,CAAM,EAAE,CAAC,CAAA,CAAA,EAAI,SAAS,GAAG,WAAW,CAAA,CAAA;AAC5D,QAAA,SAAA,CAAU,WAAA,GAAc,CAAA,EAAG,SAAA,CAAU,WAAW,GAAG,WAAW,CAAA,CAAA;AAE9D,QAAA,KAAA,CAAM,KAAK,SAAS,CAAA;AAAA,MACrB;AAAA,IACD;AAEA,IAAA,OAAO,KAAA;AAAA,EACR;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,kBAAA,GAOZ;AAED,IAAA,IAAI,CAAC,KAAK,gBAAA,EAAkB;AAC3B,MAAA,IAAA,CAAK,oBAAA,CAAqB,IAAI,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,MAAC,CAAC,CAAA;AAAA,IAC/C;AAEA,IAAA,MAAM,YAKD,EAAC;AACN,IAAA,MAAM,QAAA,GAAW,IAAI,GAAA,CAAI,IAAA,CAAK,UAAA,CAAW,aAAA,EAAc,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,GAAG,CAAC,CAAA;AAE1E,IAAA,KAAA,MAAW,CAAC,QAAQ,EAAE,QAAA,EAAU,CAAA,IAAK,IAAA,CAAK,aAAA,CAAc,OAAA,EAAQ,EAAG;AAClE,MAAA,KAAA,MAAW,QAAA,IAAY,SAAS,SAAA,EAAW;AAC1C,QAAA,IAAI,CAAC,QAAA,CAAS,GAAA,CAAI,QAAA,CAAS,GAAG,CAAA,EAAG;AAChC,UAAA,MAAM,iBAAA,GAAoB,EAAE,GAAG,QAAA,EAAS;AACxC,UAAA,MAAM,YAAA,GAAe,QAAA,CAAS,UAAA,EAAY,IAAA,IAAQ,kBAAA;AAElD,UAAA,IAAI,SAAA,GAAY,EAAA;AAChB,UAAA,IAAI,SAAS,QAAA,EAAU;AACtB,YAAA,SAAA,GAAY;;AAAA;AAAA,QAAA,EAA4C,QAAA,CAAS,SAAS,MAAM;AAAA,gBAAA,EAAqB,QAAA,CAAS,SAAS,aAAa,CAAA,CAAA;AACpI,YAAA,IACC,SAAS,QAAA,CAAS,cAAA,IAClB,SAAS,QAAA,CAAS,cAAA,CAAe,SAAS,CAAA,EACzC;AACD,cAAA,SAAA,IAAa;AAAA,iBAAA,EAAsB,QAAA,CAAS,QAAA,CAAS,cAAA,CAAe,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,YAC/E;AAAA,UACD;AAEA,UAAA,MAAM,WAAA,GAAc;;AAAA;AAAA,UAAA,EAA2C,YAAY;AAAA,YAAA,EAAiB,MAAM,GAAG,SAAS,CAAA,CAAA;AAG9G,UAAA,IAAI,iBAAA,CAAkB,GAAA,CAAI,UAAA,CAAW,gBAAgB,CAAA,EAAG;AACvD,YAAA,iBAAA,CAAkB,IAAA,GAAO,CAAA,SAAA,EAAY,iBAAA,CAAkB,IAAI,CAAA,CAAA;AAC3D,YAAA,iBAAA,CAAkB,cAAc,CAAA,kBAAA,EAAqB,iBAAA,CAAkB,WAAA,IAAe,wCAAwC,GAAG,WAAW,CAAA,CAAA;AAAA,UAC7I,CAAA,MAAO;AACN,YAAA,iBAAA,CAAkB,WAAA,GAAc,iBAAA,CAAkB,WAAA,GAC/C,CAAA,EAAG,iBAAA,CAAkB,WAAW,CAAA,EAAG,WAAW,CAAA,CAAA,GAC9C,WAAA,CAAY,IAAA,EAAK;AAAA,UACrB;AAEA,UAAA,SAAA,CAAU,KAAK,iBAAiB,CAAA;AAChC,UAAA,QAAA,CAAS,GAAA,CAAI,SAAS,GAAG,CAAA;AAAA,QAC1B;AAAA,MACD;AAAA,IACD;AAEA,IAAA,OAAO,SAAA;AAAA,EACR;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,sBACP,QAAA,EACsD;AAEtD,IAAA,KAAA,MAAW,CAAC,QAAQ,EAAE,QAAA,EAAU,CAAA,IAAK,IAAA,CAAK,aAAA,CAAc,OAAA,EAAQ,EAAG;AAClE,MAAA,MAAM,IAAA,GAAO,SAAS,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,SAAS,QAAQ,CAAA;AAC3D,MAAA,IAAI,IAAA,EAAM;AACT,QAAA,OAAO;AAAA,UACN,MAAA;AAAA,UACA,gBAAA,EAAkB;AAAA,SACnB;AAAA,MACD;AAAA,IACD;AAGA,IAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA;AAChC,IAAA,IAAI,KAAA,CAAM,SAAS,CAAA,EAAG;AACrB,MAAA,MAAM,MAAA,GAAS,MAAM,GAAA,EAAI;AACzB,MAAA,MAAM,QAAA,GAAW,KAAA,CAAM,IAAA,CAAK,GAAG,CAAA;AAC/B,MAAA,KAAA,MAAW,CAAC,QAAQ,EAAE,QAAA,EAAU,CAAA,IAAK,IAAA,CAAK,aAAA,CAAc,OAAA,EAAQ,EAAG;AAClE,QAAA,IAAI,MAAA,CAAO,QAAA,CAAS,MAAA,IAAU,EAAE,CAAA,EAAG;AAClC,UAAA,MAAM,IAAA,GAAO,SAAS,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,SAAS,QAAQ,CAAA;AAC3D,UAAA,IAAI,IAAA,EAAM;AACT,YAAA,OAAO;AAAA,cACN,MAAA;AAAA,cACA,gBAAA,EAAkB;AAAA,aACnB;AAAA,UACD;AAAA,QACD;AAAA,MACD;AAAA,IACD;AAEA,IAAA,OAAO,IAAA;AAAA,EACR;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,aAAa,MAAA,EAAwB;AAC5C,IAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,qBAAA,IAAyB,UAAA;AACnD,IAAA,IAAI,KAAA,KAAU,QAAQ,OAAO,MAAA;AAC7B,IAAA,OAAO,CAAA,GAAA,EAAM,MAAA,CAAO,KAAA,CAAM,EAAE,CAAC,CAAA,CAAA;AAAA,EAC9B;AAAA,EAEA,MAAc,kBAAA,CACb,EAAA,EACA,MAAA,EACA,KAAA,EAC8B;AAC9B,IAAA,MAAM,WAAW,MAAA,CAAO,IAAA;AAGxB,IAAA,IAAI,aAAa,gBAAA,EAAkB;AAIlC,MAAA,IAAA,CAAK,oBAAA,CAAqB,IAAI,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,MAAC,CAAC,CAAA;AAG9C,MAAA,MAAM,KAAA,GAAS,KAAa,eAAA,IAAmB;AAAA,QAC9C,UAAA,EAAY,CAAA;AAAA,QACZ,OAAA,EAAS,CAAA;AAAA,QACT,QAAA,EAAU;AAAA,OACX;AACA,MAAA,MAAM,aAAA,GAAgB,KAAK,aAAA,CAAc,IAAA;AACzC,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,QAAA,GAAW,QAAA,GAAW,SAAA;AAC7C,MAAA,MAAM,cAAc,KAAA,CAAM,IAAA,CAAK,KAAK,aAAA,CAAc,MAAA,EAAQ,CAAA,CAAE,MAAA;AAAA,QAC3D,CAAC,GAAA,EAAK,EAAE,UAAS,KAAM,GAAA,GAAM,SAAS,KAAA,CAAM,MAAA;AAAA,QAC5C;AAAA,OACD;AACA,MAAA,MAAM,cAAc,IAAA,CAAK,QAAA;AAAA;AAAA,QAEtB,IAAA,CAAK,QAAA,CAAiB,IAAA,EAAM,cAAA,EAAe,CAAE;AAAA,UAC7C,CAAA;AAEH,MAAA,MAAM,iBACL,IAAA,CAAK,QAAA;AAAA,MAEJ,IAAA,CAAK,SAAiB,MAAA,EAAQ,cAAA;AAAA;AAAA,QAE5B,IAAA,CAAK,SAAiB,MAAA,CAAO;AAAA,UAC7B,EAAC;AACL,MAAA,MAAM,iBAAiB,cAAA,CAAe,MAAA;AAEtC,MAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,GAAA,CAAI,qBAAA,IAAyB,UAAA;AACvD,MAAA,MAAM,iBAAiB,SAAA,KAAc,SAAA;AAErC,MAAA,MAAM,aAAA,GAAgB,cAAA,GACnB,cAAA,CACC,GAAA,CAAI,CAAC,IAAA,KAAS;AACd,QAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAC5B,QAAA,MAAMC,GAAAA,GAAK,KAAA,CAAM,KAAA,CAAM,MAAA,GAAS,CAAC,CAAA;AACjC,QAAA,OAAO,YAAOA,GAAAA,GAAKA,GAAAA,CAAG,KAAA,CAAM,EAAE,IAAI,SAAS,CAAA,YAAA,CAAA;AAAA,MAC5C,CAAC,CAAA,CACA,IAAA,CAAK,IAAI,CAAA,GACV,EAAA;AAEH,MAAA,MAAM,mBAAmB,IAAA,CAAK,QAAA;AAAA;AAAA,QAE3B,IAAA,CAAK,SAAiB,mBAAA;AAAoB,UAC1C,CAAA;AAEH,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,QAAA,EAAU,SAAA,EAAU,IAAK,SAAA;AAChD,MAAA,MAAM,cACL,SAAA,KAAc,SAAA,GAAY,SAAA,GAAY,IAAA,CAAK,aAAa,SAAS,CAAA;AAElE,MAAA,MAAM,iBAAiB,KAAA,CAAM,IAAA,CAAK,KAAK,aAAA,CAAc,OAAA,EAAS,CAAA,CAC5D,OAAA;AAAA,QAAQ,CAAC,CAAC,MAAA,EAAQ,EAAE,UAAU,CAAA,KAC9B,SAAS,KAAA,CAAM,GAAA;AAAA,UACd,CAAC,MAAM,CAAA,SAAA,EAAO,CAAA,CAAE,IAAI,CAAA,eAAA,EAAkB,IAAA,CAAK,YAAA,CAAa,MAAM,CAAC,CAAA,CAAA;AAAA;AAChE,OACD,CACC,KAAK,IAAI,CAAA;AAEX,MAAA,MAAM,UAAA,GAAa;AAAA,QAClB,CAAA,kBAAA,EAAqB,SAAA,KAAc,QAAA,GAAW,QAAA,GAAW,SAAS,CAAA,CAAA;AAAA,QAClE,yBAAyB,WAAW,CAAA,CAAA;AAAA,QACpC,CAAA,SAAA,EAAY,WAAW,CAAA,SAAA,EAAY,gBAAgB,iBAAiB,cAAc,CAAA,WAAA,CAAA;AAAA,QAClF,cAAA,IAAkB,iBAAiB,CAAA,GAChC;AAAA;AAAA,EAAyB,aAAa;AAAA,CAAA,GACtC,EAAA;AAAA,QACH,CAAA,WAAA,EAAc,MAAM,UAAU,CAAA,cAAA,EAAiB,MAAM,OAAO,CAAA,MAAA,EAAS,MAAM,QAAQ,CAAA,KAAA,CAAA;AAAA,QACnF,CAAA,SAAA,EAAY,aAAa,CAAA,aAAA,EAAgB,WAAW,CAAA,mBAAA,CAAA;AAAA,QACpD,cAAc,CAAA,GACX;AAAA;AAAA,EAAoD,cAAc,CAAA,CAAA,GAClE,mCAAA;AAAA;AAAA,QAEH,oBAAA,CAAqB,WAAA,EAAY,CAAE,iBAAA;AAAkB,OACtD,CACE,OAAO,CAAC,IAAA,KAAS,SAAS,EAAE,CAAA,CAC5B,KAAK,IAAI,CAAA;AAGX,MAAA,MAAM,aAAA,GAAgB,qBAAqB,WAAA,EAAY;AACvD,MAAA,aAAA,CAAc,MAAA,CAAO;AAAA,QACpB,IAAA,EAAM,YAAA;AAAA,QACN,MAAA,EAAQ,YAAA;AAAA,QACR,QAAA,EAAU,gBAAA;AAAA,QACV,oBAAA,EAAsB,CAAA;AAAA,QACtB,qBAAA,EAAuB,aAAA,CAAc,WAAA,CAAY,UAAU;AAAA,OAC3D,CAAA;AAED,MAAA,OAAO;AAAA,QACN,OAAA,EAAS,KAAA;AAAA,QACT,EAAA;AAAA,QACA,MAAA,EAAQ;AAAA,UACP,OAAA,EAAS;AAAA,YACR;AAAA,cACC,IAAA,EAAM,MAAA;AAAA,cACN,IAAA,EAAM;AAAA;AACP;AACD;AACD,OACD;AAAA,IACD;AAEA,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,UAAA,CACnB,SAAA,EAAU,CACV,KAAK,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,KAAS,QAAQ,CAAA;AAEjC,IAAA,IAAI,CAAC,OAAA,IAAW,IAAA,CAAK,QAAA,EAAU;AAG9B,MAAA,IAAI,MAAA,GAAS,IAAA,CAAK,qBAAA,CAAsB,QAAQ,CAAA;AAGhD,MAAA,IAAI,CAAC,MAAA,EAAQ;AACZ,QAAA,MAAM,KAAK,oBAAA,EAAqB;AAChC,QAAA,MAAA,GAAS,IAAA,CAAK,sBAAsB,QAAQ,CAAA;AAAA,MAC7C;AAEA,MAAA,IAAI,MAAA,EAAQ;AACX,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,0BAA0B,QAAQ,CAAA,2BAAA,EAA8B,OAAO,MAAM,CAAA,YAAA,EAAe,OAAO,gBAAgB,CAAA,CAAA;AAAA,SACpH;AAIA,QAAA,MAAM,aAAA,GAAgB,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,OAAO,MAAM,CAAA;AAC1D,QAAA,IAAI,cAAA,GAAiB,KAAA;AACrB,QAAA,IAAI,aAAA,EAAe,SAAS,YAAA,EAAc;AACzC,UAAA,MAAM,gBACL,KAAA,IAAU,MAAM,IAAA,CAAK,0BAAA,CAA2B,OAAO,MAAM,CAAA;AAC9D,UAAA,IAAI,CAAC,aAAA,EAAe;AACnB,YAAA,MAAM,eACL,aAAA,CAAc,QAAA,CAAS,UAAA,EAAY,IAAA,EAAM,aAAY,IACrD,SAAA;AACD,YAAA,MAAM,IAAA,GAAO,cAAc,QAAA,CAAS,SAAA;AACpC,YAAA,MAAM,UAAU,MAAA,CAAO,MAAA,CAAO,KAAA,CAAM,EAAE,EAAE,WAAA,EAAY;AACpD,YAAA,MAAM,UAAA,GAAa,IAAA,GAChB,CAAA,WAAA,EAAc,IAAI,CAAA,CAAA,GAClB,CAAA,WAAA,EAAc,YAAA,CAAa,WAAA,EAAY,CAAE,OAAA,CAAQ,aAAA,EAAe,GAAG,CAAC,CAAA,CAAA;AACvE,YAAA,OAAO;AAAA,cACN,OAAA,EAAS,KAAA;AAAA,cACT,EAAA;AAAA,cACA,MAAA,EAAQ;AAAA,gBACP,OAAA,EAAS;AAAA,kBACR;AAAA,oBACC,IAAA,EAAM,MAAA;AAAA,oBACN,MAAM,CAAA,8CAAA,EAAiD,YAAY,CAAA,8CAAA,EAAiD,UAAU,kBAAkB,OAAO,CAAA,gDAAA;AAAA;AACxJ,iBACD;AAAA,gBACA,OAAA,EAAS;AAAA;AACV,aACD;AAAA,UACD;AAEA,UAAA,cAAA,GAAiB,aAAA;AAAA,QAClB;AAEA,QAAA,OAAO,IAAA,CAAK,qBAAA;AAAA,UACX,EAAA;AAAA,UACA,MAAA,CAAO,gBAAA;AAAA,UACP,MAAA,CAAO,MAAA;AAAA,UACP,MAAA;AAAA,UACA;AAAA,SACD;AAAA,MACD;AAGA,MAAA,IAAI,YAAsB,EAAC;AAC3B,MAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,EAAG,CAAA,EAAA,EAAK;AAC3B,QAAA,SAAA,GAAY,MAAM,IAAA,CAAK,QAAA,CAAS,aAAA,CAAc,QAAQ,CAAA;AACtD,QAAA,IAAI,SAAA,CAAU,SAAS,CAAA,EAAG;AAC1B,QAAA,IAAI,CAAA,GAAI,CAAA,EAAG,MAAM,IAAI,OAAA,CAAQ,CAAC,CAAA,KAAM,UAAA,CAAW,CAAA,EAAG,GAAI,CAAC,CAAA;AAAA,MACxD;AAEA,MAAA,IAAI,SAAA,CAAU,SAAS,CAAA,EAAG;AACzB,QAAA,OAAO,IAAA,CAAK,qBAAA;AAAA,UACX,EAAA;AAAA,UACA,QAAA;AAAA,UACA,UAAU,CAAC,CAAA;AAAA,UACX,MAAA;AAAA,UACA;AAAA,SACD;AAAA,MACD;AAAA,IACD;AAGA,IAAA,IAAI,OAAA,EAAS;AACZ,MAAA,IAAI;AACH,QAAA,MAAM,cAAA,GAAiB,KAAK,GAAA,EAAI;AAChC,QAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,UAAA,CAAW,QAAA,CAAS;AAAA,UAC7C,IAAA,EAAM,QAAA;AAAA,UACN,SAAA,EAAW,MAAA,CAAO,SAAA,IAAa;AAAC,SAChC,CAAA;AAGD,QAAA,MAAM,cAAA,GAAiB,qBAAqB,WAAA,EAAY;AACxD,QAAA,MAAM,oBAAoB,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,SAAA,IAAa,EAAE,CAAA;AAC/D,QAAA,MAAM,kBAAA,GAAqB,IAAA,CAAK,SAAA,CAAU,MAAM,CAAA;AAChD,QAAA,cAAA,CAAe,MAAA,CAAO;AAAA,UACrB,IAAA,EAAM,WAAA;AAAA,UACN,MAAA,EAAQ,YAAA;AAAA,UACR,QAAA;AAAA,UACA,oBAAA,EAAsB,cAAA,CAAe,WAAA,CAAY,iBAAiB,CAAA;AAAA,UAClE,qBAAA,EAAuB,cAAA,CAAe,WAAA,CAAY,kBAAkB,CAAA;AAAA,UACpE,UAAA,EAAY,IAAA,CAAK,GAAA,EAAI,GAAI;AAAA,SACzB,CAAA;AAED,QAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,EAAA,EAAI,MAAA,EAAO;AAAA,MACrC,SAAS,GAAA,EAAc;AACtB,QAAA,OAAO;AAAA,UACN,OAAA,EAAS,KAAA;AAAA,UACT,EAAA;AAAA,UACA,KAAA,EAAO;AAAA,YACN,IAAA,EAAM,KAAA;AAAA,YACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA;AACzD,SACD;AAAA,MACD;AAAA,IACD;AAEA,IAAA,OAAO;AAAA,MACN,OAAA,EAAS,KAAA;AAAA,MACT,EAAA;AAAA,MACA,KAAA,EAAO;AAAA,QACN,IAAA,EAAM,MAAA;AAAA,QACN,OAAA,EAAS,+BAA+B,QAAQ,CAAA,+DAAA;AAAA;AACjD,KACD;AAAA,EACD;AAAA,EAEA,MAAc,qBAAA,CAEb,EAAA,EACA,QAAA,EACA,MAAA,EAEA,QACA,KAAA,EAEe;AACf,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA;AACT,MAAA,OAAO;AAAA,QACN,OAAA,EAAS,KAAA;AAAA,QACT,EAAA;AAAA,QACA,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAS,oBAAA;AAAqB,OACtD;AAGD,IAAA,IAAI,aAAA,GAAgB,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,MAAM,CAAA;AACjD,IAAA,IAAI,WAAW,IAAA,CAAK,cAAA;AAEpB,IAAA,IAAI,aAAA,EAAe;AAClB,MAAA,QAAA,GAAW,cAAc,QAAA,CAAS,QAAA;AAAA,IACnC,CAAA,MAAO;AAEN,MAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,QAAA,CAAS,cAAc,MAAM,CAAA;AACzD,MAAA,IAAI,QAAA,EAAU;AACb,QAAA,QAAA,GAAW,QAAA,CAAS,QAAA;AACpB,QAAA,IAAA,CAAK,aAAA,CAAc,IAAI,MAAA,EAAQ;AAAA,UAC9B,QAAA;AAAA,UACA,QAAA,EAAU,KAAK,GAAA;AAAI,SACnB,CAAA;AACD,QAAA,aAAA,GAAgB,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,MAAM,CAAA;AAAA,MAC9C;AAAA,IACD;AAGA,IAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,QAAA,CAAS,YAAY,MAAM,CAAA;AAKpD,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,GAAA,CAAI,cAAA,IAAkB,EAAA;AAC/C,IAAA,MAAM,YAAA,GACL,QAAA,CAAS,QAAA,CAAS,iBAAiB,KACnC,QAAA,CAAS,QAAA,CAAS,iBAAiB,CAAA,IACnC,SAAS,QAAA,CAAS,iBAAiB,CAAA,IACnC,QAAA,CAAS,SAAS,iBAAiB,CAAA;AACpC,IAAA,MAAM,eAAe,KAAA,CAAM,IAAA;AAAA,MAC1B,CAAC,CAAA,KACA,CAAA,CAAE,QAAA,CAAS,OAAO,CAAA,IAClB,CAAA,CAAE,QAAA,CAAS,OAAO,CAAA,IAClB,CAAA,CAAE,QAAA,CAAS,OAAO,CAAA,IAClB,CAAA,CAAE,QAAA,CAAS,OAAO,CAAA,IAClB,CAAA,CAAE,QAAA,CAAS,OAAO,CAAA,IAClB,CAAA,CAAE,QAAA,CAAS,OAAO,CAAA,IAClB,CAAA,CAAE,QAAA,CAAS,OAAO;AAAA,KACpB;AACA,IAAA,MAAM,oBAAA,GACL,QAAQ,GAAA,CAAI,6BAAA,KAAkC,OAC9C,OAAA,CAAQ,GAAA,CAAI,oBAAoB,MAAA,IAChC,OAAA,CAAQ,IAAI,aAAA,KAAkB,MAAA,IAC9B,QAAQ,GAAA,CAAI,QAAA,KAAa,iBACzB,OAAA,CAAQ,GAAA,CAAI,QAAA,KAAa,MAAA,IACzB,YAAA,IACA,YAAA;AAED,IAAA,IAAI,oBAAA,EAAsB;AACzB,MAAA,MAAM,eACL,aAAA,EAAe,QAAA,EAAU,UAAA,EAAY,IAAA,EAAM,aAAY,IAAK,EAAA;AAC7D,MAAA,MAAM,EAAA,GAAK,SAAS,WAAA,EAAY;AAChC,MAAA,IAAI,aAAa,QAAA,CAAS,OAAO,KAAK,EAAA,CAAG,QAAA,CAAS,SAAS,CAAA,EAAG;AAC7D,QAAA,QAAA,GAAW,KAAA;AAAA,MACZ,CAAA,MAAA,IAAW,aAAa,QAAA,CAAS,MAAM,KAAK,EAAA,CAAG,QAAA,CAAS,MAAM,CAAA,EAAG;AAChE,QAAA,QAAA,GAAW,KAAA;AAAA,MACZ,CAAA,MAAA,IACC,YAAA,CAAa,QAAA,CAAS,QAAQ,CAAA,IAC9B,EAAA,CAAG,QAAA,CAAS,KAAK,CAAA,IACjB,EAAA,CAAG,QAAA,CAAS,QAAQ,CAAA,EACnB;AACD,QAAA,QAAA,GAAW,KAAA;AAAA,MACZ;AAAA,IACD;AAEA,IAAA,IAAI,UAAA,GAA4B,IAAA;AAGhC,IAAA,IAAI,oBAAA,EAAsB;AACzB,MAAA,UAAA,GAAa,aAAa,QAAQ,CAAA,CAAA;AAAA,IACnC,CAAA,MAAO;AAGN,MAAA,MAAM,EAAA,GAAK,MAAM,OAAO,IAAS,CAAA;AACjC,MAAA,MAAM,eAAA,GAAkB,OAAO,MAAA,CAAO,EAAA,CAAG,mBAAmB,CAAA,CAC1D,MAAK,CACL,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,EAAG,WAAW,MAAM,CAAA,CAClC,IAAI,CAAC,CAAA,KAAM,GAAG,OAAO,CAAA;AAGvB,MAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACzB,QAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAC5B,QAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA;AACjC,QAAA,IAAI,UAAU,EAAA,EAAI;AACjB,UAAA,MAAM,YAAA,GAAe,KAAA,CAAM,KAAA,GAAQ,CAAC,CAAA;AAGpC,UAAA,IACC,YAAA,KAAiB,WAAA,IACjB,eAAA,CAAgB,QAAA,CAAS,YAAY,CAAA,EACpC;AACD,YAAA,UAAA,GAAa,aAAa,QAAQ,CAAA,CAAA;AAClC,YAAA;AAAA,UACD;AAGA,UAAA,IAAI,CAAC,UAAA,EAAY;AAChB,YAAA,UAAA,GAAa,CAAA,EAAG,YAAY,CAAA,CAAA,EAAI,QAAQ,CAAA,CAAA;AAAA,UACzC;AAAA,QACD;AAAA,MACD;AAAA,IACD;AAEA,IAAA,IAAI,CAAC,UAAA,EAAY;AAEhB,MAAA,UAAA,GAAa,aAAa,QAAQ,CAAA,CAAA;AAAA,IACnC;AAEA,IAAA,GAAA,CAAI,IAAA;AAAA,MACH,CAAA,6BAAA,EAAgC,QAAQ,CAAA,IAAA,EAAO,UAAU,aAAa,MAAM,CAAA,CAAA;AAAA,KAC7E;AAEA,IAAA,MAAM,YAAA,GAAe,IAAI,MAAA,CAAO,SAAA;AAAA,MAC/B,UAAA;AAAA,MACA,yBAAyB,EAAE,QAAA,EAAU,IAAA,EAAM,eAAA,EAAiB,MAAM,CAAA;AAAA,MAClE;AAAA,KACD;AACA,IAAA,OAAO,IAAA,CAAK,kBAAA;AAAA,MACX,EAAA;AAAA,MACA,YAAA;AAAA,MACA,QAAA;AAAA,MACA,MAAA;AAAA,MACA,MAAA;AAAA,MACA;AAAA,KACD;AAAA,EACD;AAAA;AAAA,EAGQ,cAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOR,MAAc,2BACb,MAAA,EAC8B;AAC9B,IAAA,IAAI,MAAA,EAAQ;AACX,MAAA,MAAM,aAAA,GAAgB,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,MAAM,CAAA;AACnD,MAAA,MAAM,eACL,aAAA,EAAe,QAAA,CAAS,UAAA,EAAY,IAAA,EAAM,aAAY,IAAK,EAAA;AAE5D,MAAA,IAAI,SAAA;AAGJ,MAAA,MAAM,IAAA,GAAO,eAAe,QAAA,CAAS,SAAA;AACrC,MAAA,IAAI,IAAA,EAAM;AACT,QAAA,MAAM,MAAA,GAAS,cAAc,IAAI,CAAA,CAAA;AACjC,QAAA,SAAA,GACC,OAAA,CAAQ,IAAI,MAAM,CAAA,IAAK,QAAQ,GAAA,CAAI,CAAA,iBAAA,EAAoB,IAAI,CAAA,CAAE,CAAA;AAC9D,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,CAAA,8BAAA,EAAiC,IAAI,CAAA,QAAA,EAAW,MAAM,CAAA,OAAA,EAAU,CAAC,CAAC,SAAS,CAAA,MAAA,EAAS,MAAA,CAAO,KAAA,CAAM,EAAE,CAAC,CAAA;AAAA,SACrG;AAAA,MACD,CAAA,MAAO;AACN,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,0EAA0E,MAAA,CAAO,KAAA,CAAM,EAAE,CAAC,aAAa,YAAY,CAAA;AAAA,SACpH;AAAA,MACD;AAGA,MAAA,IAAI,CAAC,SAAA,EAAW;AACf,QAAA,MAAM,OAAA,GAAU,MAAA,CAAO,KAAA,CAAM,EAAE,EAAE,WAAA,EAAY;AAC7C,QAAA,SAAA,GACC,OAAA,CAAQ,GAAA,CAAI,CAAA,WAAA,EAAc,OAAO,CAAA,CAAE,KACnC,OAAA,CAAQ,GAAA,CAAI,CAAA,iBAAA,EAAoB,OAAO,CAAA,CAAE,CAAA;AAAA,MAC3C;AAGA,MAAA,IAAI,CAAC,aAAa,YAAA,EAAc;AAC/B,QAAA,MAAM,YAAY,YAAA,CAChB,WAAA,EAAY,CACZ,OAAA,CAAQ,eAAe,GAAG,CAAA;AAC5B,QAAA,SAAA,GACC,OAAA,CAAQ,GAAA,CAAI,CAAA,WAAA,EAAc,SAAS,CAAA,CAAE,KACrC,OAAA,CAAQ,GAAA,CAAI,CAAA,iBAAA,EAAoB,SAAS,CAAA,CAAE,CAAA;AAAA,MAC7C;AAEA,MAAA,IAAI,SAAA,EAAW;AACd,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,uDAAuD,MAAA,CAAO,KAAA,CAAM,EAAE,CAAC,CAAA,EAAA,EAAK,gBAAgB,SAAS,CAAA,CAAA;AAAA,SACtG;AACA,QAAA,OAAO,SAAA;AAAA,MACR;AAAA,IACD;AAEA,IAAA,IAAI,IAAA,CAAK,cAAA,EAAgB,OAAO,IAAA,CAAK,cAAA;AAGrC,IAAA,MAAM,WAAA,GAAc,OAAA,CAAQ,GAAA,CAAI,gBAAA,IAAoB,QAAQ,GAAA,CAAI,UAAA;AAChE,IAAA,IAAI,WAAA,EAAa;AAChB,MAAA,IAAA,CAAK,cAAA,GAAiB,WAAA;AACtB,MAAA,OAAO,IAAA,CAAK,cAAA;AAAA,IACb;AAEA,IAAA,MAAM,QAAA,GAAW,QAAQ,GAAA,CAAI,cAAA;AAC7B,IAAA,IAAI,CAAC,UAAU,OAAO,MAAA;AAEtB,IAAA,MAAM,WACL,OAAA,CAAQ,GAAA,CAAI,oBAAA,IACZ,OAAA,CAAQ,IAAI,cAAA,IACZ,iBAAA;AACD,IAAA,MAAM,eACL,OAAA,CAAQ,GAAA,CAAI,wBAAA,IACZ,OAAA,CAAQ,IAAI,kBAAA,IACZ,sBAAA;AACD,IAAA,MAAM,WACL,OAAA,CAAQ,GAAA,CAAI,mBAAA,IACZ,OAAA,CAAQ,IAAI,aAAA,IACZ,mBAAA;AAED,IAAA,IAAI;AACH,MAAA,MAAM,UAAU,QAAA,CAAS,QAAA,CAAS,OAAO,CAAA,GACtC,QAAA,GACA,GAAG,QAAQ,CAAA,KAAA,CAAA;AACd,MAAA,MAAM,QAAA,GAAW,GAAG,OAAO,CAAA,MAAA,CAAA;AAC3B,MAAA,GAAA,CAAI,IAAA;AAAA,QACH,6DAA6D,QAAQ,CAAA;AAAA,OACtE;AAEA,MAAA,MAAM,MAAA,GAAS,IAAI,eAAA,CAAgB;AAAA,QAClC,UAAA,EAAY,oBAAA;AAAA,QACZ,KAAA,EACC,sFAAA;AAAA,QACD,QAAA,EAAU,QAAA;AAAA,QACV,SAAA,EAAW,QAAA;AAAA,QACX,aAAA,EAAe;AAAA,OACf,CAAA;AAED,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,QAAA,EAAU;AAAA,QACtC,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS;AAAA,UACR,cAAA,EAAgB;AAAA,SACjB;AAAA,QACA,IAAA,EAAM,OAAO,QAAA;AAAS,OACtB,CAAA;AAED,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AACjB,QAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,CAAA,4CAAA,EAA+C,QAAA,CAAS,MAAM,CAAA,CAAA,EAAI,IAAI,CAAA;AAAA,SACvE;AACA,QAAA,OAAO,KAAA,CAAA;AAAA,MACR;AAEA,MAAA,MAAM,IAAA,GAAQ,MAAM,QAAA,CAAS,IAAA,EAAK;AAClC,MAAA,IAAI,KAAK,YAAA,EAAc;AACtB,QAAA,IAAA,CAAK,iBAAiB,IAAA,CAAK,YAAA;AAC3B,QAAA,GAAA,CAAI,IAAA;AAAA,UACH;AAAA,SACD;AACA,QAAA,OAAO,IAAA,CAAK,cAAA;AAAA,MACb;AAAA,IACD,SAAS,GAAA,EAAc;AACtB,MAAA,GAAA,CAAI,IAAA;AAAA,QACH,8CACC,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAChD,CAAA;AAAA,OACD;AAAA,IACD;AACA,IAAA,OAAO,MAAA;AAAA,EACR;AAAA,EAEA,MAAc,kBAAA,CAEb,EAAA,EAEA,QACA,QAAA,EAEA,MAAA,EACA,QACA,KAAA,EAEe;AACf,IAAA,MAAM,cAAA,GAAiB,QAAA;AACvB,IAAA,MAAM,aAAA,GAAgB,IAAA,CAAK,QAAA,GACxB,MAAM,KAAK,QAAA,CAAS,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,cAAc,CAAC,CAAA,GACpD,MAAA,CAAO,IAAA,CAAK,EAAE,CAAA;AAEjB,IAAA,MAAM,oBAAA,GAAuB,KAAK,GAAA,EAAI;AAGtC,IAAA,IAAI,WAAA,GAAc,KAAA;AAClB,IAAA,IAAI,CAAC,WAAA,EAAa;AACjB,MAAA,WAAA,GAAc,MAAM,IAAA,CAAK,0BAAA,CAA2B,MAAM,CAAA;AAAA,IAC3D;AAEA,IAAA,IAAI,MAAA,EAAQ;AACX,MAAA,MAAM,aAAA,GAAgB,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,MAAM,CAAA;AACnD,MAAA,IAAI,aAAA,EAAe,QAAA,CAAS,YAAA,IAAgB,CAAC,WAAA,EAAa;AACzD,QAAA,MAAM,eACL,aAAA,CAAc,QAAA,CAAS,UAAA,EAAY,IAAA,EAAM,aAAY,IAAK,SAAA;AAC3D,QAAA,MAAM,IAAA,GAAO,cAAc,QAAA,CAAS,SAAA;AACpC,QAAA,MAAM,OAAA,GAAU,MAAA,CAAO,KAAA,CAAM,EAAE,EAAE,WAAA,EAAY;AAC7C,QAAA,MAAM,UAAA,GAAa,IAAA,GAChB,CAAA,WAAA,EAAc,IAAI,CAAA,CAAA,GAClB,CAAA,WAAA,EAAc,YAAA,CAAa,WAAA,EAAY,CAAE,OAAA,CAAQ,aAAA,EAAe,GAAG,CAAC,CAAA,CAAA;AAEvE,QAAA,OAAO;AAAA,UACN,OAAA,EAAS,KAAA;AAAA,UACT,EAAA;AAAA,UACA,MAAA,EAAQ;AAAA,YACP,OAAA,EAAS;AAAA,cACR;AAAA,gBACC,IAAA,EAAM,MAAA;AAAA,gBACN,MAAM,CAAA,8CAAA,EAAiD,YAAY,CAAA,8CAAA,EAAiD,UAAU,kBAAkB,OAAO,CAAA,gDAAA;AAAA;AACxJ,aACD;AAAA,YACA,OAAA,EAAS;AAAA;AACV,SACD;AAAA,MACD;AAAA,IACD;AAEA,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY;AAC/B,MAAA,MAAM,QAAA,GAAW,IAAS,IAAA,CAAA,QAAA,EAAS;AACnC,MAAA,IAAI,WAAA,EAAa;AAChB,QAAA,QAAA,CAAS,GAAA,CAAI,eAAA,EAAiB,CAAA,OAAA,EAAU,WAAW,CAAA,CAAE,CAAA;AAAA,MACtD;AAEA,MAAA,MAAA,CAAO,eAAA;AAAA,QACN;AAAA,UACC,WAAW,CAAA,SAAA,EAAY,IAAA,CAAK,QAAA,EAAU,SAAA,MAAe,WAAW,CAAA,CAAA;AAAA,UAChE,eAAA,EAAiB,cAAA;AAAA,UACjB,eAAA,EAAiB;AAAA,SAClB;AAAA,QACA,QAAA;AAAA,QACA,OAAO,KAAmB,QAAA,KAA6B;AACtD,UAAA,IAAI,GAAA,IAAO,CAAC,QAAA,CAAS,QAAA,EAAU;AAC9B,YAAA,IAAI;AACH,cAAA,mBAAA,CAAoB,GAAA,CAAI;AAAA,gBACvB,UAAA,EAAY,QAAA;AAAA,gBACZ,UAAA,EAAY;AAAA,eACZ,CAAA;AAAA,YACF,CAAA,CAAA,MAAQ;AAAA,YAAC;AACT,YAAA,OAAO,OAAA,CAAQ;AAAA,cACd,OAAA,EAAS,KAAA;AAAA,cACT,EAAA;AAAA,cACA,MAAA,EAAQ;AAAA,gBACP,OAAA,EAAS;AAAA,kBACR;AAAA,oBACC,IAAA,EAAM,MAAA;AAAA,oBACN,IAAA,EAAM,CAAA,sBAAA,EAAyB,GAAA,EAAK,OAAA,IAAW,UAAU,CAAA;AAAA;AAC1D,iBACD;AAAA,gBACA,OAAA,EAAS;AAAA;AACV,aACA,CAAA;AAAA,UACF;AAEA,UAAA,MAAM,QAAA,GAAW,YAAY,GAAA,EAAI;AACjC,UAAA,MAAM,EAAE,UAAA,EAAY,YAAA,EAAa,GAChC,MAAM,eAAA,CAAgB,qBAAA;AAAA,YACrB,QAAA,CAAS;AAAA,WACV;AACD,UAAA,MAAM,WAAA,GAAc,WAAA,CAAY,GAAA,EAAI,GAAI,QAAA;AACxC,UAAA,IAAI;AACH,YAAA,sBAAA,CAAuB,OAAA,CAAQ,EAAE,IAAA,EAAM,QAAA,IAAY,WAAW,CAAA;AAC9D,YAAA,kBAAA,CAAmB,GAAA,CAAI;AAAA,cACtB,SAAA,EAAW,YAAA;AAAA,cACX,MAAA,EAAQ;AAAA,aACR,CAAA;AAAA,UACF,CAAA,CAAA,MAAQ;AAAA,UAER;AAGA,UAAA,MAAM,eACL,MAAA,EAAQ,SAAA,KAAc,QAAQ,OAAA,KAAY,MAAA,GAAY,SAAS,EAAC,CAAA;AACjE,UAAA,MAAM,gBAAA,GAAmB,IAAA,CAAK,SAAA,CAAU,YAAY,CAAA;AACpD,UAAA,MAAM,UAAA,GAAa,CAAA,+BAAA,EAAkC,QAAQ,CAAA,wBAAA,EAA2B,gBAAgB,CAAA,GAAA,CAAA;AACxG,UAAA,MAAM,KAAA,GAAe,mBAAY,EAAE,CAAA;AAEnC,UAAA,MAAM,cAAc,IAAA,CAAK,gBAAA;AAAA,YACxB,MAAA,CAAO,KAAK,UAAU,CAAA;AAAA,YACtB,YAAA;AAAA,YACA;AAAA,WACD;AAEA,UAAA,MAAM,YAAA,GAAe,IAAS,IAAA,CAAA,QAAA,EAAS;AACvC,UAAA,IAAI,WAAA,EAAa;AAChB,YAAA,YAAA,CAAa,GAAA,CAAI,eAAA,EAAiB,CAAA,OAAA,EAAU,WAAW,CAAA,CAAE,CAAA;AAAA,UAC1D;AAEA,UAAA,MAAM,OAAO,MAAA,CAAO,YAAA;AAAA,YACnB;AAAA,cACC,eAAe,QAAA,CAAS,aAAA;AAAA,cACxB,WAAA,EAAa,IAAI,UAAA,CAAW,WAAW,CAAA;AAAA,cACvC,QAAQ,EAAC;AAAA,cACT,cAAA,EAAgB,UAAA;AAAA,cAChB,SAAA,EAAW;AAAA,aACZ;AAAA,YACA;AAAA,WACD;AAEA,UAAA,IAAI,UAAA,GAAa,EAAA;AACjB,UAAA,IAAI,YAAA,GAAqC,IAAA;AACzC,UAAA,IAAA,CAAK,EAAA,CAAG,MAAA,EAAQ,CAAC,OAAA,KAA2B;AAC3C,YAAA,UAAA,IAAc,OAAA,CAAQ,iBAAA;AACtB,YAAA,YAAA,GAAe,OAAA;AAAA,UAChB,CAAC,CAAA;AACD,UAAA,IAAA,CAAK,EAAA,CAAG,OAAO,YAAY;AAC1B,YAAA,IAAI;AACH,cAAA,IAAI,YAAA,EAAc;AAIjB,gBAAA,IAAI,CAAC,aAAa,QAAA,EAAU;AAC3B,kBAAA,MAAM,WAAW,MAAA,CAAO,IAAA;AAAA,oBACvB,YAAA,CAAa;AAAA,mBACd,CAAE,SAAS,KAAK,CAAA;AAChB,kBAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,QAAA,CAAS,eAAA;AAAA,oBACnC,MAAA,CAAO,KAAK,UAAU,CAAA;AAAA,oBACtB,QAAA;AAAA,oBACA,MAAA,CAAO,IAAA,CAAK,YAAA,CAAa,UAAU,CAAA;AAAA,oBACnC,MAAA,CAAO,KAAK,YAAY,CAAA;AAAA,oBACxB;AAAA,mBACD;AAEA,kBAAA,IAAI;AACH,oBAAA,oBAAA,CAAqB,GAAA,CAAI;AAAA,sBACxB,MAAA,EAAQ,UAAU,OAAA,GAAU;AAAA,qBAC5B,CAAA;AAAA,kBACF,CAAA,CAAA,MAAQ;AAAA,kBAAC;AAET,kBAAA,IAAI,CAAC,OAAA,EAAS;AACb,oBAAA,IAAI;AACH,sBAAA,mBAAA,CAAoB,GAAA,CAAI;AAAA,wBACvB,UAAA,EAAY,QAAA;AAAA,wBACZ,UAAA,EAAY;AAAA,uBACZ,CAAA;AAAA,oBACF,CAAA,CAAA,MAAQ;AAAA,oBAAC;AACT,oBAAA,OAAO,OAAA,CAAQ;AAAA,sBACd,OAAA,EAAS,KAAA;AAAA,sBACT,EAAA;AAAA,sBACA,MAAA,EAAQ;AAAA,wBACP,OAAA,EAAS;AAAA,0BACR;AAAA,4BACC,IAAA,EAAM,MAAA;AAAA,4BACN,IAAA,EAAM;AAAA;AACP,yBACD;AAAA,wBACA,OAAA,EAAS;AAAA;AACV,qBACA,CAAA;AAAA,kBACF;AAAA,gBACD,CAAA,MAAO;AACN,kBAAA,IAAI;AACH,oBAAA,mBAAA,CAAoB,GAAA,CAAI;AAAA,sBACvB,UAAA,EAAY,QAAA;AAAA,sBACZ,UAAA,EAAY;AAAA,qBACZ,CAAA;AAAA,kBACF,CAAA,CAAA,MAAQ;AAAA,kBAAC;AAAA,gBACV;AAAA,cACD;AAEA,cAAA,MAAM,YAAA,GAAe,IAAA,CAAK,KAAA,CAAM,UAAU,CAAA;AAG1C,cAAA,MAAM,eAAA,GAAkB,qBAAqB,WAAA,EAAY;AACzD,cAAA,eAAA,CAAgB,MAAA,CAAO;AAAA,gBACtB,IAAA,EAAM,WAAA;AAAA,gBACN,MAAA,EAAQ,YAAA;AAAA,gBACR,QAAA;AAAA,gBACA,MAAA;AAAA,gBACA,oBAAA,EACC,eAAA,CAAgB,WAAA,CAAY,gBAAgB,CAAA;AAAA,gBAC7C,qBAAA,EAAuB,eAAA,CAAgB,WAAA,CAAY,UAAU,CAAA;AAAA,gBAC7D,UAAA,EAAY,IAAA,CAAK,GAAA,EAAI,GAAI;AAAA,eACzB,CAAA;AACD,cAAA,IAAI;AACH,gBAAA,oBAAA,CAAqB,GAAA;AAAA,kBACpB,EAAE,YAAY,QAAA,EAAS;AAAA,kBACvB,MAAA,CAAO,WAAW,UAAU;AAAA,iBAC7B;AAAA,cACD,CAAA,CAAA,MAAQ;AAAA,cAAC;AAET,cAAA,OAAA,CAAQ,EAAE,OAAA,EAAS,KAAA,EAAO,EAAA,EAAI,MAAA,EAAQ,cAAc,CAAA;AAAA,YACrD,SAAS,EAAA,EAAI;AACZ,cAAA,OAAA,CAAQ;AAAA,gBACP,OAAA,EAAS,KAAA;AAAA,gBACT,EAAA;AAAA,gBACA,MAAA,EAAQ,EAAE,OAAA,EAAS,CAAC,EAAE,MAAM,MAAA,EAAQ,IAAA,EAAM,UAAA,EAAY,CAAA;AAAE,eACxD,CAAA;AAAA,YACF;AAAA,UACD,CAAC,CAAA;AACD,UAAA,IAAA,CAAK,EAAA,CAAG,OAAA,EAAS,CAAC,CAAA,KAAa;AAC9B,YAAA,IAAI;AACH,cAAA,mBAAA,CAAoB,GAAA,CAAI;AAAA,gBACvB,UAAA,EAAY,QAAA;AAAA,gBACZ,UAAA,EAAY;AAAA,eACZ,CAAA;AAAA,YACF,CAAA,CAAA,MAAQ;AAAA,YAAC;AACT,YAAA,OAAA,CAAQ;AAAA,cACP,OAAA,EAAS,KAAA;AAAA,cACT,EAAA;AAAA,cACA,MAAA,EAAQ;AAAA,gBACP,OAAA,EAAS;AAAA,kBACR,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAM,CAAA,iBAAA,EAAoB,CAAA,CAAE,OAAO,CAAA,CAAA;AAAG,iBACvD;AAAA,gBACA,OAAA,EAAS;AAAA;AACV,aACA,CAAA;AAAA,UACF,CAAC,CAAA;AAAA,QACF;AAAA,OACD;AAAA,IACD,CAAC,CAAA;AAAA,EACF;AAAA,EAEQ,gBAAA,CACP,OAAA,EACA,GAAA,EACA,KAAA,EACS;AACT,IAAA,MAAM,MAAA,GAAgB,MAAA,CAAA,cAAA,CAAe,aAAA,EAAe,GAAA,EAAK,KAAK,CAAA;AAC9D,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,MAAA,CAAO,CAAC,MAAA,CAAO,MAAA,CAAO,OAAO,CAAA,EAAG,MAAA,CAAO,KAAA,EAAO,CAAC,CAAA;AACxE,IAAA,OAAO,OAAO,MAAA,CAAO,CAAC,WAAW,MAAA,CAAO,UAAA,EAAY,CAAC,CAAA;AAAA,EACtD;AACD","file":"chunk-NFPQJCWL.js","sourcesContent":["// Copyright 2026 Nekzus Solutions and contributors\n// SPDX-License-Identifier: Apache-2.0\n\n/**\n * MCP UX: compact tool descriptions are ENABLED by default to optimize\n * token consumption for LLM clients (e.g. Claude Desktop).\n *\n * Set LIOP_MCP_COMPACT_TOOL_DESCRIPTIONS=0 to restore verbose descriptions.\n * Full LIOP payload format remains in prompts/get → liop_blind_analyst.\n */\nexport function mcpCompactToolDescriptions(): boolean {\n\tconst v =\n\t\tprocess.env.LIOP_MCP_COMPACT_TOOL_DESCRIPTIONS?.toLowerCase().trim();\n\tif (v === \"0\" || v === \"false\" || v === \"no\") return false;\n\treturn true;\n}\n\n/**\n * Removes SDK-appended LIOP specification blocks from a registered tool description.\n */\nexport function stripVerboseLiopToolDescription(description: string): string {\n\tlet d = description;\n\tconst markers = [\n\t\t\"\\n\\n[LIOP-PROTO-V1:\",\n\t\t\"\\r\\n\\r\\n[LIOP-PROTO-V1:\",\n\t\t\"\\n[LIOP-PROTO-V1:\", // rare\n\t];\n\tfor (const m of markers) {\n\t\tconst i = d.indexOf(m);\n\t\tif (i !== -1) {\n\t\t\td = d.slice(0, i);\n\t\t\tbreak;\n\t\t}\n\t}\n\treturn d.trimEnd();\n}\n","// Copyright 2026 Nekzus Solutions and contributors\n// SPDX-License-Identifier: Apache-2.0\n\nimport * as crypto from \"node:crypto\";\nimport * as grpc from \"@grpc/grpc-js\";\nimport { LiopVerifier } from \"../crypto/verifier.js\";\nimport { TokenTelemetryEngine } from \"../economy/telemetry.js\";\nimport type { LiopManifest, MeshNode } from \"../mesh/index.js\";\nimport {\n\tpqcHandshakeDurationMs,\n\tpqcHandshakesTotal,\n\ttoolCallErrorsTotal,\n\twireEgressBytesTotal,\n\tzkVerificationsTotal,\n} from \"../observability/metrics.js\";\nimport { GRPC_CHANNEL_OPTIONS } from \"../rpc/channel-options.js\";\nimport { Dilithium65Wrapper } from \"../rpc/crypto/dilithium.js\";\nimport { Kyber768Wrapper } from \"../rpc/crypto/kyber.js\";\nimport { liopV1 } from \"../rpc/proto.js\";\nimport { createChannelCredentials } from \"../rpc/tls.js\";\nimport type { IntentResponse, LogicResponse } from \"../rpc/types.js\";\nimport type { AuthInfo } from \"../security/jwt-validator.js\";\nimport { authorizeRequest } from \"../security/rbac.js\";\nimport type { LiopServer } from \"../server/index.js\";\nimport {\n\tMCP_PROTOCOL_VERSION,\n\ttype McpEra,\n\ttype McpRequest,\n\ttype McpResponse,\n} from \"../types.js\";\nimport { log } from \"../utils/logger.js\";\nimport {\n\tmcpCompactToolDescriptions,\n\tstripVerboseLiopToolDescription,\n} from \"../utils/mcpCompact.js\";\nimport {\n\tadaptResponseForLegacyClient,\n\tbuildLegacyInitializeResponse,\n\tisLegacyRequest,\n\tMCP_LEGACY_SUPPORT_ENABLED,\n\tMCP_PROTOCOL_VERSION_LEGACY,\n} from \"./mcp-compat.js\";\n\n/**\n * Time-to-live for cached manifests (seconds).\n * Aligned with libp2p Kademlia DHT TABLE_REFRESH_INTERVAL (5 minutes).\n * Provider records in the DHT are valid for 48 hours (PROVIDERS_VALIDITY),\n * so 300s is a conservative, network-friendly value.\n */\nconst MANIFEST_CACHE_TTL_S = 300;\n\n/** Maximum number of DHT query retries for manifest discovery */\nconst MANIFEST_DISCOVERY_RETRIES = 5;\n\n/**\n * LIOP MCP Router\n *\n * Core logic for routing MCP requests to local or remote LIOP providers.\n * Decoupled from transport (HTTP/Stdio).\n *\n * All tool discovery and port resolution is DYNAMIC via the\n * /liop/manifest/1.0.0 protocol stream over Kademlia DHT.\n */\nexport class LiopMcpRouter {\n\t/** Cached manifests from remote peers. Key = PeerID */\n\tprivate manifestCache: Map<\n\t\tstring,\n\t\t{ manifest: LiopManifest; cachedAt: number }\n\t> = new Map();\n\n\t/** Guards against concurrent discovery storms */\n\tprivate currentDiscovery: Promise<void> | null = null;\n\n\t/** Verifier for Tier-0 integrity checks */\n\tpublic verifier: LiopVerifier = new LiopVerifier();\n\n\t/** Callback when new remote tools are discovered */\n\tpublic onToolsChanged?: () => void;\n\n\t/** Circuit-breaker state for peers that repeatedly fail manifest queries. */\n\tprivate manifestFailureState: Map<\n\t\tstring,\n\t\t{ failures: number; cooldownUntil: number; lastSkipLogAt: number }\n\t> = new Map();\n\n\tprivate static readonly MANIFEST_FAILURE_BASE_COOLDOWN_MS = 15_000;\n\tprivate static readonly MANIFEST_FAILURE_MAX_COOLDOWN_MS = 5 * 60_000;\n\tprivate static readonly MANIFEST_SKIP_LOG_THROTTLE_MS = 30_000;\n\n\tconstructor(\n\t\tprivate liopServer: LiopServer,\n\t\tprivate meshNode: MeshNode | null = null,\n\t\tprivate defaultRpcPort = 50051,\n\t) {\n\t\t// Auto-register manifest handler if mesh node is provided\n\t\tif (this.meshNode) {\n\t\t\tthis.meshNode.registerManifestHandler(() => {\n\t\t\t\tconst remoteTools = this.liopServer.listTools().map((t) => ({\n\t\t\t\t\tname: t.name,\n\t\t\t\t\tdescription: t.description,\n\t\t\t\t\tinputSchema: t.inputSchema as Record<string, unknown>,\n\t\t\t\t}));\n\n\t\t\t\tconst resources = this.liopServer.listResources().map((r) => ({\n\t\t\t\t\tname: r.name,\n\t\t\t\t\turi: r.uri,\n\t\t\t\t\tdescription: r.description,\n\t\t\t\t\tmimeType: r.mimeType,\n\t\t\t\t}));\n\n\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: access private configuration properties\n\t\t\t\tconst serverConfig = (this.liopServer as any).config;\n\n\t\t\t\treturn {\n\t\t\t\t\tpeerId: this.meshNode?.getPeerId() || \"unknown\",\n\t\t\t\t\tgrpcPort: this.defaultRpcPort,\n\t\t\t\t\ttools: [...remoteTools],\n\t\t\t\t\tresources,\n\t\t\t\t\tserverInfo: this.liopServer.getServerInfo(),\n\t\t\t\t\tauthRequired: this.liopServer.jwtValidator !== undefined,\n\t\t\t\t\ttokenSlug: serverConfig?.tokenSlug,\n\t\t\t\t\ttaxonomy: serverConfig?.taxonomy\n\t\t\t\t\t\t? {\n\t\t\t\t\t\t\t\tdomain: serverConfig.taxonomy.domain || \"Unknown Domain\",\n\t\t\t\t\t\t\t\tclearanceTier: serverConfig.taxonomy.clearanceTier ?? 0,\n\t\t\t\t\t\t\t\texecutionTypes: serverConfig.taxonomy.executionTypes || [],\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t: undefined,\n\t\t\t\t};\n\t\t\t});\n\n\t\t\t// Proactively announce manifest capability to the mesh\n\t\t\tthis.meshNode.announceManifest().catch((err: unknown) => {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] Failed to announce manifest: ${err instanceof Error ? err.message : String(err)}`,\n\t\t\t\t);\n\t\t\t});\n\t\t}\n\n\t\t// [OWASP-A01] Startup warning when diagnostic level exposes full topology\n\t\tif (process.env.LIOP_DIAGNOSTIC_LEVEL === \"full\") {\n\t\t\tprocess.stderr.write(\n\t\t\t\t\"⚠️ [LIOP-Security] Diagnostic level set to FULL — \" +\n\t\t\t\t\t\"PeerIDs and network topology are exposed. Do NOT use in production.\\n\",\n\t\t\t);\n\t\t}\n\t}\n\n\tpublic getManifestCacheSize(): number {\n\t\treturn this.manifestCache.size;\n\t}\n\n\tprivate shouldSkipManifestQuery(peerId: string): boolean {\n\t\tconst state = this.manifestFailureState.get(peerId);\n\t\tif (!state) return false;\n\t\tconst now = Date.now();\n\t\tif (now >= state.cooldownUntil) return false;\n\n\t\tif (\n\t\t\tnow - state.lastSkipLogAt >\n\t\t\tLiopMcpRouter.MANIFEST_SKIP_LOG_THROTTLE_MS\n\t\t) {\n\t\t\tlog.info(\n\t\t\t\t`[LIOP-Router] Skipping manifest query for ${peerId} during cooldown (${Math.ceil((state.cooldownUntil - now) / 1000)}s remaining)`,\n\t\t\t);\n\t\t\tstate.lastSkipLogAt = now;\n\t\t}\n\t\treturn true;\n\t}\n\n\tprivate recordManifestQuerySuccess(peerId: string): void {\n\t\tthis.manifestFailureState.delete(peerId);\n\t}\n\n\tprivate recordManifestQueryFailure(peerId: string): void {\n\t\tconst now = Date.now();\n\t\tconst prev = this.manifestFailureState.get(peerId);\n\t\tconst failures = (prev?.failures || 0) + 1;\n\t\tconst backoff = Math.min(\n\t\t\tLiopMcpRouter.MANIFEST_FAILURE_BASE_COOLDOWN_MS *\n\t\t\t\t2 ** Math.max(0, failures - 1),\n\t\t\tLiopMcpRouter.MANIFEST_FAILURE_MAX_COOLDOWN_MS,\n\t\t);\n\t\tthis.manifestFailureState.set(peerId, {\n\t\t\tfailures,\n\t\t\tcooldownUntil: now + backoff,\n\t\t\tlastSkipLogAt: 0,\n\t\t});\n\t}\n\n\t/**\n\t * Detects the protocol era of an incoming request.\n\t * Modern requests carry '_meta' with protocol version \"2026-07-28\" or use modern RPCs.\n\t * Legacy requests use 'initialize' handshake or lack '_meta' envelopes.\n\t */\n\tpublic detectEra(request: McpRequest): McpEra {\n\t\tconst params = request.params as Record<string, unknown> | undefined;\n\t\tconst meta = params?._meta as Record<string, unknown> | undefined;\n\t\tconst version = meta?.[\"io.modelcontextprotocol/protocolVersion\"];\n\n\t\tif (version === MCP_PROTOCOL_VERSION) {\n\t\t\treturn \"modern\";\n\t\t}\n\n\t\tif (MCP_LEGACY_SUPPORT_ENABLED && isLegacyRequest(request)) {\n\t\t\treturn \"legacy\";\n\t\t}\n\n\t\treturn \"modern\";\n\t}\n\n\tpublic async dispatch(\n\t\trequest: McpRequest,\n\t\tauthInfo?: AuthInfo | null,\n\t): Promise<McpResponse | null> {\n\t\tconst { method, params, id } = request;\n\t\tlog.info(`[LIOP-Router] Processing: ${method}`);\n\n\t\t// [SEC] Enforce RBAC scope validation (Least Privilege) only if JWT validation is active\n\t\tif (this.liopServer.jwtValidator) {\n\t\t\tconst authResult = authorizeRequest(method, authInfo ?? null);\n\t\t\tif (!authResult.allowed) {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] RBAC Access Denied for method '${method}': ${authResult.reason}`,\n\t\t\t\t);\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\terror: {\n\t\t\t\t\t\tcode: -32099, // Custom authentication/authorization failure code\n\t\t\t\t\t\tmessage: authResult.reason || \"Access Denied\",\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\n\t\tswitch (method) {\n\t\t\t/** @mcp-legacy Initialize handshake for 2025-era clients. Remove when v1 EOL. */\n\t\t\tcase \"initialize\": {\n\t\t\t\tif (!MCP_LEGACY_SUPPORT_ENABLED) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\tid,\n\t\t\t\t\t\terror: {\n\t\t\t\t\t\t\tcode: -32601,\n\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t\"Method retired: initialize (MCP 2026-07-28 is stateless)\",\n\t\t\t\t\t\t},\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t\tlog.info(\n\t\t\t\t\t\"[LIOP-Router] ⚠️ Legacy MCP client detected (2025-era initialize).\",\n\t\t\t\t);\n\t\t\t\treturn buildLegacyInitializeResponse(\n\t\t\t\t\tthis.liopServer.getServerInfo(),\n\t\t\t\t\tid,\n\t\t\t\t);\n\t\t\t}\n\t\t\t/** @mcp-legacy Initialized notification for 2025-era clients. Remove when v1 EOL. */\n\t\t\tcase \"notifications/initialized\":\n\t\t\t\tif (!MCP_LEGACY_SUPPORT_ENABLED) return null;\n\t\t\t\t// Cloud MCP clients often fire tools/list immediately; kick discovery early\n\t\t\t\t// so manifests populate before (or right after) that call completes.\n\t\t\t\tthis.kickDiscoveryAfterInitialized().catch(() => {});\n\t\t\t\treturn null;\n\t\t\tcase \"notifications/cancelled\":\n\t\t\t\treturn null; // No-op for MCP spec compliance\n\t\t\tcase \"server/discover\":\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\tresult: {\n\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t\tsupportedVersions: MCP_LEGACY_SUPPORT_ENABLED\n\t\t\t\t\t\t\t? [MCP_PROTOCOL_VERSION, MCP_PROTOCOL_VERSION_LEGACY]\n\t\t\t\t\t\t\t: [MCP_PROTOCOL_VERSION],\n\t\t\t\t\t\tcapabilities: {\n\t\t\t\t\t\t\ttools: { listChanged: true },\n\t\t\t\t\t\t\tresources: { listChanged: true },\n\t\t\t\t\t\t\tprompts: { listChanged: true },\n\t\t\t\t\t\t},\n\t\t\t\t\t\tserverInfo: this.liopServer.getServerInfo(),\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\tcase \"ping\":\n\t\t\t\treturn { jsonrpc: \"2.0\", id, result: {} };\n\t\t\tcase \"tools/list\": {\n\t\t\t\tconst localTools = this.liopServer.listTools();\n\t\t\t\tconst remoteTools = await this.getRemoteTools();\n\n\t\t\t\tconst listedLocals = mcpCompactToolDescriptions()\n\t\t\t\t\t? localTools.map((t) => ({\n\t\t\t\t\t\t\t...t,\n\t\t\t\t\t\t\tdescription: stripVerboseLiopToolDescription(t.description ?? \"\"),\n\t\t\t\t\t\t}))\n\t\t\t\t\t: localTools;\n\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] tools/list: ${localTools.length} local, ${remoteTools.length} remote tools found`,\n\t\t\t\t);\n\n\t\t\t\t// Inject a mandatory static diagnostic tool.\n\t\t\t\t// This ensures that the {tools: []} list is never empty on startup.\n\t\t\t\t// Claude Desktop silently hides the connector if it receives an empty array initially,\n\t\t\t\t// which broke the UX due to the ~3s warm-up time of the Kademlia DHT.\n\t\t\t\tconst diagnosticTool = {\n\t\t\t\t\tname: \"LiopMeshStatus\",\n\t\t\t\t\tdescription:\n\t\t\t\t\t\t\"LiopMeshStatus: Returns the current dynamic diagnostic status of the Zero-Trust Neural Mesh.\",\n\t\t\t\t\tinputSchema: {\n\t\t\t\t\t\ttype: \"object\",\n\t\t\t\t\t\tproperties: {},\n\t\t\t\t\t\tadditionalProperties: false,\n\t\t\t\t\t},\n\t\t\t\t};\n\n\t\t\t\t// Deterministic sorting per SEP-2549\n\t\t\t\tconst allTools = [diagnosticTool, ...listedLocals, ...remoteTools].sort(\n\t\t\t\t\t(a, b) => a.name.localeCompare(b.name),\n\t\t\t\t);\n\n\t\t\t\t// [Token Economy] Record telemetry for the tools/list response\n\t\t\t\tconst telemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\tconst toolsPayload = JSON.stringify(allTools);\n\t\t\t\tconst toolsResponsePayload = JSON.stringify({ tools: allTools });\n\t\t\t\ttelemetry.record({\n\t\t\t\t\ttype: \"tools_list\",\n\t\t\t\t\tmethod: \"tools/list\",\n\t\t\t\t\testimatedInputTokens: telemetry.countTokens(toolsPayload),\n\t\t\t\t\testimatedOutputTokens: telemetry.countTokens(toolsResponsePayload),\n\t\t\t\t});\n\n\t\t\t\tconst era = this.detectEra(request);\n\t\t\t\tlet response: McpResponse = {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\tresult: {\n\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t\tttlMs: 300_000,\n\t\t\t\t\t\tcacheScope: \"public\",\n\t\t\t\t\t\ttools: allTools,\n\t\t\t\t\t},\n\t\t\t\t};\n\n\t\t\t\t/** @mcp-legacy Strip modern fields for legacy clients */\n\t\t\t\tif (era === \"legacy\" && MCP_LEGACY_SUPPORT_ENABLED) {\n\t\t\t\t\tresponse = adaptResponseForLegacyClient(response);\n\t\t\t\t}\n\n\t\t\t\treturn response;\n\t\t\t}\n\t\t\tcase \"tools/call\": {\n\t\t\t\tconst response = await this.transcodeMcpToLiop(\n\t\t\t\t\tid,\n\t\t\t\t\tparams as { name: string; arguments?: Record<string, unknown> },\n\t\t\t\t\tauthInfo?.token,\n\t\t\t\t);\n\t\t\t\tif (!response) return null;\n\n\t\t\t\tconst era = this.detectEra(request);\n\t\t\t\tif (era === \"legacy\" && MCP_LEGACY_SUPPORT_ENABLED) {\n\t\t\t\t\treturn adaptResponseForLegacyClient(response);\n\t\t\t\t}\n\t\t\t\tif (response.result && typeof response.result === \"object\") {\n\t\t\t\t\tconst resObj = response.result as Record<string, unknown>;\n\t\t\t\t\tif (!resObj.resultType) {\n\t\t\t\t\t\tresObj.resultType = \"complete\";\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\treturn response;\n\t\t\t}\n\t\t\tcase \"resources/list\": {\n\t\t\t\tconst localResources = this.liopServer.listResources();\n\t\t\t\tconst remoteResources = await this.getRemoteResources();\n\t\t\t\t// Deterministic sorting per SEP-2549\n\t\t\t\tconst allResources = [...localResources, ...remoteResources].sort(\n\t\t\t\t\t(a, b) => a.uri.localeCompare(b.uri),\n\t\t\t\t);\n\n\t\t\t\t// [Token Economy] Record resources/list telemetry\n\t\t\t\tconst rlTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\tconst rlPayload = JSON.stringify(allResources);\n\t\t\t\trlTelemetry.record({\n\t\t\t\t\ttype: \"resource_list\",\n\t\t\t\t\tmethod: \"resources/list\",\n\t\t\t\t\testimatedInputTokens: 0,\n\t\t\t\t\testimatedOutputTokens: rlTelemetry.countTokens(rlPayload),\n\t\t\t\t});\n\n\t\t\t\tconst era = this.detectEra(request);\n\t\t\t\tlet response: McpResponse = {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\tresult: {\n\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t\tttlMs: 300_000,\n\t\t\t\t\t\tcacheScope: \"public\",\n\t\t\t\t\t\tresources: allResources,\n\t\t\t\t\t},\n\t\t\t\t};\n\n\t\t\t\t/** @mcp-legacy Strip modern fields for legacy clients */\n\t\t\t\tif (era === \"legacy\" && MCP_LEGACY_SUPPORT_ENABLED) {\n\t\t\t\t\tresponse = adaptResponseForLegacyClient(response);\n\t\t\t\t}\n\n\t\t\t\treturn response;\n\t\t\t}\n\t\t\tcase \"resources/read\": {\n\t\t\t\tconst typedParams = params as { uri?: string } | undefined;\n\t\t\t\tif (!typedParams?.uri)\n\t\t\t\t\treturn {\n\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\tid,\n\t\t\t\t\t\terror: { code: -32602, message: \"Missing resource uri\" },\n\t\t\t\t\t};\n\t\t\t\ttry {\n\t\t\t\t\tconst rrStartTime = Date.now();\n\t\t\t\t\tconst result = await this.liopServer.readResource(typedParams.uri);\n\n\t\t\t\t\t// [Token Economy] Record resources/read telemetry\n\t\t\t\t\tconst rrTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\t\tconst rrOutputPayload = JSON.stringify(result);\n\t\t\t\t\trrTelemetry.record({\n\t\t\t\t\t\ttype: \"resource_read\",\n\t\t\t\t\t\tmethod: \"resources/read\",\n\t\t\t\t\t\ttoolName: typedParams.uri,\n\t\t\t\t\t\testimatedInputTokens: rrTelemetry.countTokens(typedParams.uri),\n\t\t\t\t\t\testimatedOutputTokens: rrTelemetry.countTokens(rrOutputPayload),\n\t\t\t\t\t\tdurationMs: Date.now() - rrStartTime,\n\t\t\t\t\t});\n\n\t\t\t\t\tconst era = this.detectEra(request);\n\t\t\t\t\tconst rawResult =\n\t\t\t\t\t\ttypeof result === \"object\" && result !== null\n\t\t\t\t\t\t\t? {\n\t\t\t\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t\t\t\t\tttlMs: 60_000,\n\t\t\t\t\t\t\t\t\tcacheScope: \"private\",\n\t\t\t\t\t\t\t\t\t...result,\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t: {\n\t\t\t\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t\t\t\t\tttlMs: 60_000,\n\t\t\t\t\t\t\t\t\tcacheScope: \"private\",\n\t\t\t\t\t\t\t\t\tcontents: result,\n\t\t\t\t\t\t\t\t};\n\n\t\t\t\t\tlet response: McpResponse = { jsonrpc: \"2.0\", id, result: rawResult };\n\n\t\t\t\t\t/** @mcp-legacy Strip modern fields for legacy clients */\n\t\t\t\t\tif (era === \"legacy\" && MCP_LEGACY_SUPPORT_ENABLED) {\n\t\t\t\t\t\tresponse = adaptResponseForLegacyClient(response);\n\t\t\t\t\t}\n\n\t\t\t\t\treturn response;\n\t\t\t\t} catch (err: unknown) {\n\t\t\t\t\t// Fallback: Resolve remotely from manifest cache\n\t\t\t\t\tconst targetUri = typedParams.uri;\n\t\t\t\t\tfor (const { manifest } of this.manifestCache.values()) {\n\t\t\t\t\t\tconst remoteResource = manifest.resources.find(\n\t\t\t\t\t\t\t(r) => r.uri === targetUri,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tif (remoteResource) {\n\t\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t\t`[LIOP-Router] Resolved resource ${targetUri} from cache (Peer: ${manifest.peerId})`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tconst era = this.detectEra(request);\n\t\t\t\t\t\t\tlet response: McpResponse = {\n\t\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\tresult: {\n\t\t\t\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t\t\t\t\tttlMs: 60_000,\n\t\t\t\t\t\t\t\t\tcacheScope: \"private\",\n\t\t\t\t\t\t\t\t\tcontents: [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\turi: remoteResource.uri,\n\t\t\t\t\t\t\t\t\t\t\tmimeType: remoteResource.mimeType || \"text/plain\",\n\t\t\t\t\t\t\t\t\t\t\ttext:\n\t\t\t\t\t\t\t\t\t\t\t\tremoteResource.text ||\n\t\t\t\t\t\t\t\t\t\t\t\tremoteResource.description ||\n\t\t\t\t\t\t\t\t\t\t\t\t\"No content provided\",\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t};\n\n\t\t\t\t\t\t\t/** @mcp-legacy Strip modern fields for legacy clients */\n\t\t\t\t\t\t\tif (era === \"legacy\" && MCP_LEGACY_SUPPORT_ENABLED) {\n\t\t\t\t\t\t\t\tresponse = adaptResponseForLegacyClient(response);\n\t\t\t\t\t\t\t}\n\n\t\t\t\t\t\t\treturn response;\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\n\t\t\t\t\treturn {\n\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\tid,\n\t\t\t\t\t\terror: {\n\t\t\t\t\t\t\tcode: -32000,\n\t\t\t\t\t\t\tmessage: err instanceof Error ? err.message : String(err),\n\t\t\t\t\t\t},\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\t\t\tcase \"prompts/list\": {\n\t\t\t\tconst promptsList = this.liopServer\n\t\t\t\t\t.listPrompts()\n\t\t\t\t\t.sort((a, b) => a.name.localeCompare(b.name));\n\n\t\t\t\t// [Token Economy] Record prompts/list telemetry\n\t\t\t\tconst plTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\tconst plPayload = JSON.stringify(promptsList);\n\t\t\t\tplTelemetry.record({\n\t\t\t\t\ttype: \"prompt_list\",\n\t\t\t\t\tmethod: \"prompts/list\",\n\t\t\t\t\testimatedInputTokens: 0,\n\t\t\t\t\testimatedOutputTokens: plTelemetry.countTokens(plPayload),\n\t\t\t\t});\n\n\t\t\t\tconst era = this.detectEra(request);\n\t\t\t\tlet response: McpResponse = {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\tresult: {\n\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t\tttlMs: 300_000,\n\t\t\t\t\t\tcacheScope: \"public\",\n\t\t\t\t\t\tprompts: promptsList,\n\t\t\t\t\t},\n\t\t\t\t};\n\n\t\t\t\t/** @mcp-legacy Strip modern fields for legacy clients */\n\t\t\t\tif (era === \"legacy\" && MCP_LEGACY_SUPPORT_ENABLED) {\n\t\t\t\t\tresponse = adaptResponseForLegacyClient(response);\n\t\t\t\t}\n\n\t\t\t\treturn response;\n\t\t\t}\n\t\t\tcase \"prompts/get\": {\n\t\t\t\tconst typedParams = params as\n\t\t\t\t\t| { name?: string; arguments?: Record<string, string> }\n\t\t\t\t\t| undefined;\n\t\t\t\tif (!typedParams?.name)\n\t\t\t\t\treturn {\n\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\tid,\n\t\t\t\t\t\terror: { code: -32602, message: \"Missing prompt name\" },\n\t\t\t\t\t};\n\t\t\t\ttry {\n\t\t\t\t\tconst pgStartTime = Date.now();\n\t\t\t\t\tconst result = await this.liopServer.getPrompt({\n\t\t\t\t\t\tname: typedParams.name as string,\n\t\t\t\t\t\targuments: typedParams.arguments || {},\n\t\t\t\t\t});\n\n\t\t\t\t\t// [Token Economy] Record prompts/get telemetry\n\t\t\t\t\tconst pgTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\t\tconst pgInputPayload = JSON.stringify({\n\t\t\t\t\t\tname: typedParams.name,\n\t\t\t\t\t\targuments: typedParams.arguments,\n\t\t\t\t\t});\n\t\t\t\t\tconst pgOutputPayload = JSON.stringify(result);\n\t\t\t\t\tpgTelemetry.record({\n\t\t\t\t\t\ttype: \"prompt_get\",\n\t\t\t\t\t\tmethod: \"prompts/get\",\n\t\t\t\t\t\ttoolName: typedParams.name,\n\t\t\t\t\t\testimatedInputTokens: pgTelemetry.countTokens(pgInputPayload),\n\t\t\t\t\t\testimatedOutputTokens: pgTelemetry.countTokens(pgOutputPayload),\n\t\t\t\t\t\tdurationMs: Date.now() - pgStartTime,\n\t\t\t\t\t});\n\n\t\t\t\t\tconst era = this.detectEra(request);\n\t\t\t\t\tconst rawResult =\n\t\t\t\t\t\ttypeof result === \"object\" && result !== null\n\t\t\t\t\t\t\t? { resultType: \"complete\", ...result }\n\t\t\t\t\t\t\t: result;\n\n\t\t\t\t\tlet response: McpResponse = { jsonrpc: \"2.0\", id, result: rawResult };\n\n\t\t\t\t\t/** @mcp-legacy Strip modern fields for legacy clients */\n\t\t\t\t\tif (era === \"legacy\" && MCP_LEGACY_SUPPORT_ENABLED) {\n\t\t\t\t\t\tresponse = adaptResponseForLegacyClient(response);\n\t\t\t\t\t}\n\n\t\t\t\t\treturn response;\n\t\t\t\t} catch (err: unknown) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\tid,\n\t\t\t\t\t\terror: {\n\t\t\t\t\t\t\tcode: -32000,\n\t\t\t\t\t\t\tmessage: err instanceof Error ? err.message : String(err),\n\t\t\t\t\t\t},\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\t\t\tcase \"resources/templates/list\": {\n\t\t\t\tconst era = this.detectEra(request);\n\t\t\t\tlet response: McpResponse = {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\tresult: {\n\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t\tttlMs: 300_000,\n\t\t\t\t\t\tcacheScope: \"public\",\n\t\t\t\t\t\tresourceTemplates: [],\n\t\t\t\t\t},\n\t\t\t\t};\n\n\t\t\t\t/** @mcp-legacy Strip modern fields for legacy clients */\n\t\t\t\tif (era === \"legacy\" && MCP_LEGACY_SUPPORT_ENABLED) {\n\t\t\t\t\tresponse = adaptResponseForLegacyClient(response);\n\t\t\t\t}\n\n\t\t\t\treturn response;\n\t\t\t}\n\t\t\tcase \"subscriptions/listen\": {\n\t\t\t\tconst era = this.detectEra(request);\n\t\t\t\tlet response: McpResponse = {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\tresult: {\n\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t},\n\t\t\t\t};\n\n\t\t\t\t/** @mcp-legacy Strip modern fields for legacy clients */\n\t\t\t\tif (era === \"legacy\" && MCP_LEGACY_SUPPORT_ENABLED) {\n\t\t\t\t\tresponse = adaptResponseForLegacyClient(response);\n\t\t\t\t}\n\n\t\t\t\treturn response;\n\t\t\t}\n\t\t\tdefault:\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\terror: { code: -32601, message: `Method not found: ${method}` },\n\t\t\t\t};\n\t\t}\n\t}\n\n\t/**\n\t * MCP clients often send notifications/initialized then immediately tools/list.\n\t * Start manifest discovery without blocking the notification handler.\n\t */\n\tprivate kickDiscoveryAfterInitialized(): Promise<void> {\n\t\treturn (async () => {\n\t\t\tawait new Promise((r) => setTimeout(r, 250));\n\t\t\tawait Promise.race([\n\t\t\t\tthis.refreshManifestCache(true),\n\t\t\t\tnew Promise<void>((r) => setTimeout(r, 15_000)),\n\t\t\t]).catch(() => {});\n\t\t})();\n\t}\n\n\t/**\n\t * Discovers and caches manifests from all remote LIOP providers in the mesh.\n\t * Uses Kademlia DHT to find \"liop:manifest\" providers, then opens\n\t * /liop/manifest/1.0.0 protocol streams to retrieve their full metadata.\n\t */\n\tpublic async refreshManifestCache(silent = false): Promise<void> {\n\t\tif (!this.meshNode) return;\n\t\tif (this.currentDiscovery) return this.currentDiscovery;\n\n\t\t// Fast-path: Skip DHT query entirely when cache is fresh and populated.\n\t\t// Only background polls (silent=true) should bypass this to detect new nodes.\n\t\t// Foreground requests (tools/list, tools/call) can safely reuse valid cache.\n\t\tif (!silent && this.manifestCache.size > 0) {\n\t\t\tconst now = Date.now();\n\t\t\tconst allFresh = Array.from(this.manifestCache.values()).every(\n\t\t\t\t({ cachedAt }) => now - cachedAt < MANIFEST_CACHE_TTL_S * 1000,\n\t\t\t);\n\t\t\tif (allFresh) return;\n\t\t}\n\n\t\tthis.currentDiscovery = (async () => {\n\t\t\ttry {\n\t\t\t\tconst prevCount = Array.from(this.manifestCache.values()).reduce(\n\t\t\t\t\t(acc, { manifest }) => acc + manifest.tools.length,\n\t\t\t\t\t0,\n\t\t\t\t);\n\n\t\t\t\t// Phase 0: Wait for at least one active connection if mesh is empty (Cold Start)\n\t\t\t\tif (this.manifestCache.size === 0) {\n\t\t\t\t\tfor (let i = 0; i < 3; i++) {\n\t\t\t\t\t\tconst connections =\n\t\t\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: access internal nodes for connection count\n\t\t\t\t\t\t\t(this.meshNode as any).node?.getConnections().length || 0;\n\t\t\t\t\t\tif (connections > 0) {\n\t\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t\t`[LIOP-Router] P2P Connection established. Starting discovery...`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\t}\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Waiting for P2P connections (attempt ${i + 1}/10)...`,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tawait new Promise((r) => setTimeout(r, 1000));\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\t// Phase 1: Try DHT discovery + Fallback loop\n\t\t\t\tlet providerIds: string[] = [];\n\t\t\t\tconst MAX_COLD_ATTEMPTS = this.manifestCache.size === 0 ? 5 : 1;\n\n\t\t\t\tfor (\n\t\t\t\t\tlet coldAttempt = 0;\n\t\t\t\t\tcoldAttempt < MAX_COLD_ATTEMPTS;\n\t\t\t\t\tcoldAttempt++\n\t\t\t\t) {\n\t\t\t\t\t// 1.1 Try DHT discovery\n\t\t\t\t\tfor (\n\t\t\t\t\t\tlet attempt = 0;\n\t\t\t\t\t\tattempt < MANIFEST_DISCOVERY_RETRIES;\n\t\t\t\t\t\tattempt++\n\t\t\t\t\t) {\n\t\t\t\t\t\tproviderIds =\n\t\t\t\t\t\t\t(await this.meshNode?.discoverManifestProviders()) || [];\n\t\t\t\t\t\tconst selfId = this.meshNode?.getPeerId();\n\t\t\t\t\t\tconst remoteIds = providerIds.filter((id) => id !== selfId);\n\t\t\t\t\t\tif (remoteIds.length > 0) break;\n\t\t\t\t\t\tif (attempt < MANIFEST_DISCOVERY_RETRIES - 1) {\n\t\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t\t`[LIOP-Router] DHT discovery attempt ${attempt + 1}/${MANIFEST_DISCOVERY_RETRIES}...`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tawait new Promise((r) => setTimeout(r, 1000));\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\n\t\t\t\t\t// 1.2 Aggressively merge all active connections to bypass DHT propagation delays\n\t\t\t\t\tconst activePeers =\n\t\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: access internal nodes\n\t\t\t\t\t\t(this.meshNode as any).node\n\t\t\t\t\t\t\t?.getConnections()\n\t\t\t\t\t\t\t.map((c: { remotePeer: { toString: () => string } }) =>\n\t\t\t\t\t\t\t\tc.remotePeer.toString(),\n\t\t\t\t\t\t\t) || [];\n\n\t\t\t\t\tif (activePeers.length > 0) {\n\t\t\t\t\t\tproviderIds = Array.from(new Set([...providerIds, ...activePeers]));\n\t\t\t\t\t}\n\n\t\t\t\t\tconst selfIdEnd = this.meshNode?.getPeerId();\n\t\t\t\t\tconst remoteIdsEnd = providerIds.filter((id) => id !== selfIdEnd);\n\t\t\t\t\tif (remoteIdsEnd.length > 0) break;\n\n\t\t\t\t\tif (coldAttempt < MAX_COLD_ATTEMPTS - 1) {\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Initial discovery failed (0 providers). Retrying in 1s (${coldAttempt + 1}/${MAX_COLD_ATTEMPTS})...`,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tawait new Promise((r) => setTimeout(r, 1000));\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\tif (providerIds.length === 0) {\n\t\t\t\t\tlog.info(\n\t\t\t\t\t\t`[LIOP-Router] No manifest providers found after all attempts.`,\n\t\t\t\t\t);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\n\t\t\t\tif (!silent) {\n\t\t\t\t\tlog.info(\n\t\t\t\t\t\t`[LIOP-Router] Discovered ${providerIds.length} candidate manifest providers`,\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\t// Prioritize already-connected peers to avoid blocking on stale providers.\n\t\t\t\t// This improves first tools/list latency on Linux/Ubuntu while preserving\n\t\t\t\t// full discovery for slower peers in subsequent refresh cycles.\n\t\t\t\tconst connectedPeers = new Set<string>(\n\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: internal node access for fast peer ordering\n\t\t\t\t\t((this.meshNode as any).node?.getConnections?.() || []).map(\n\t\t\t\t\t\t(c: { remotePeer: { toString: () => string } }) =>\n\t\t\t\t\t\t\tc.remotePeer.toString(),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t\tproviderIds = [...providerIds].sort((a, b) => {\n\t\t\t\t\tconst aConnected = connectedPeers.has(a) ? 1 : 0;\n\t\t\t\t\tconst bConnected = connectedPeers.has(b) ? 1 : 0;\n\t\t\t\t\treturn bConnected - aConnected;\n\t\t\t\t});\n\n\t\t\t\tlet successCount = 0;\n\t\t\t\tlet errorCount = 0;\n\t\t\t\tlet cacheUpdated = false;\n\n\t\t\t\t// Filter peers eligible for querying\n\t\t\t\tconst selfId = this.meshNode?.getPeerId();\n\t\t\t\tconst eligiblePeers = providerIds.filter((peerId) => {\n\t\t\t\t\tif (!this.meshNode) return false;\n\t\t\t\t\tif (peerId === selfId) return false;\n\t\t\t\t\tif (this.shouldSkipManifestQuery(peerId)) return false;\n\t\t\t\t\tconst cached = this.manifestCache.get(peerId);\n\t\t\t\t\tif (\n\t\t\t\t\t\tcached &&\n\t\t\t\t\t\tDate.now() - cached.cachedAt < MANIFEST_CACHE_TTL_S * 1000\n\t\t\t\t\t) {\n\t\t\t\t\t\tsuccessCount++;\n\t\t\t\t\t\treturn false;\n\t\t\t\t\t}\n\t\t\t\t\treturn true;\n\t\t\t\t});\n\n\t\t\t\t// Parallel manifest queries — eliminates sequential 100ms + retry delays\n\t\t\t\tconst queryResults = await Promise.allSettled(\n\t\t\t\t\teligiblePeers.map(async (peerId) => {\n\t\t\t\t\t\tif (!this.meshNode) return null;\n\t\t\t\t\t\tlog.info(`[LIOP-Router] Querying manifest from: ${peerId}`);\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tpeerId,\n\t\t\t\t\t\t\tmanifest: await this.meshNode.queryManifest(peerId),\n\t\t\t\t\t\t};\n\t\t\t\t\t}),\n\t\t\t\t);\n\n\t\t\t\tfor (const result of queryResults) {\n\t\t\t\t\tif (result.status === \"fulfilled\" && result.value?.manifest) {\n\t\t\t\t\t\tconst { peerId, manifest } = result.value;\n\n\t\t\t\t\t\t// [Phase Beta-2] ML-DSA-65 (FIPS 204) Manifest Attestation Verification\n\t\t\t\t\t\tif (manifest.pqcSignature && manifest.pqcPublicKey) {\n\t\t\t\t\t\t\tconst isValid = Dilithium65Wrapper.verifyManifest(\n\t\t\t\t\t\t\t\tmanifest as unknown as Record<string, unknown>,\n\t\t\t\t\t\t\t\tmanifest.pqcSignature,\n\t\t\t\t\t\t\t\tmanifest.pqcPublicKey,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tif (!isValid) {\n\t\t\t\t\t\t\t\tlog.warn(\n\t\t\t\t\t\t\t\t\t`[LIOP-Router] ⚠️ Tampered manifest rejected for peer ${peerId} (ML-DSA-65 signature invalid)`,\n\t\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\t\tthis.recordManifestQueryFailure(peerId);\n\t\t\t\t\t\t\t\terrorCount++;\n\t\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t\t`[LIOP-Router] 🔒 ML-DSA-65 (FIPS 204) Manifest attestation verified for peer ${peerId}`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t}\n\n\t\t\t\t\t\tthis.manifestCache.set(peerId, {\n\t\t\t\t\t\t\tmanifest,\n\t\t\t\t\t\t\tcachedAt: Date.now(),\n\t\t\t\t\t\t});\n\t\t\t\t\t\tthis.recordManifestQuerySuccess(peerId);\n\t\t\t\t\t\tcacheUpdated = true;\n\t\t\t\t\t\tsuccessCount++;\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Manifest received from ${peerId} (${manifest.tools.length} tools)`,\n\t\t\t\t\t\t);\n\t\t\t\t\t} else if (result.status === \"fulfilled\" && result.value) {\n\t\t\t\t\t\tthis.recordManifestQueryFailure(result.value.peerId);\n\t\t\t\t\t\terrorCount++;\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Manifest query returned NULL for ${result.value.peerId}`,\n\t\t\t\t\t\t);\n\t\t\t\t\t} else if (result.status === \"rejected\") {\n\t\t\t\t\t\terrorCount++;\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Fatal error querying manifest:`,\n\t\t\t\t\t\t\tresult.reason instanceof Error\n\t\t\t\t\t\t\t\t? result.reason.message\n\t\t\t\t\t\t\t\t: String(result.reason),\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\t// Store discovery stats for LiopMeshStatus diagnostics\n\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: private stats for telemetry\n\t\t\t\t(this as any)._discoveryStats = {\n\t\t\t\t\tcandidates: providerIds.length,\n\t\t\t\t\tsuccess: successCount,\n\t\t\t\t\tfailures: errorCount,\n\t\t\t\t\tlastDiscovery: Date.now(),\n\t\t\t\t};\n\n\t\t\t\tif (cacheUpdated) {\n\t\t\t\t\tconst newCount = Array.from(this.manifestCache.values()).reduce(\n\t\t\t\t\t\t(acc, { manifest }) => acc + manifest.tools.length,\n\t\t\t\t\t\t0,\n\t\t\t\t\t);\n\n\t\t\t\t\tif (newCount !== prevCount && this.onToolsChanged) {\n\t\t\t\t\t\tprocess.stderr.write(\n\t\t\t\t\t\t\t\"[LIOP-Router] Mesh topology updated! Emitting notifications/tools/list_changed.\\n\",\n\t\t\t\t\t\t);\n\t\t\t\t\t\tthis.onToolsChanged();\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t} finally {\n\t\t\t\tthis.currentDiscovery = null;\n\t\t\t}\n\t\t})();\n\n\t\treturn this.currentDiscovery;\n\t}\n\n\t/**\n\t * Returns the current manifest cache size for external telemetry.\n\t * Used by the adaptive polling system to detect topology stabilization.\n\t */\n\tpublic getCacheSize(): number {\n\t\treturn this.manifestCache.size;\n\t}\n\n\t/**\n\t * Returns all remote tools discovered via the manifest protocol.\n\t */\n\tprivate async getRemoteTools(): Promise<\n\t\tArray<{\n\t\t\tname: string;\n\t\t\tdescription?: string;\n\t\t\tinputSchema?: Record<string, unknown>;\n\t\t}>\n\t> {\n\t\tconst EXPECTED_PROVIDERS = Number.parseInt(\n\t\t\tprocess.env.LIOP_EXPECTED_PROVIDERS ?? \"1\",\n\t\t\t10,\n\t\t);\n\n\t\t// [Phase 106] Smart Warm-up with Stabilization Detection\n\t\t// Loops until EXPECTED_PROVIDERS are found, the deadline expires, or\n\t\t// the provider count stabilizes (same count for 3 consecutive checks).\n\t\t// This prevents a ~20s block when a node (e.g. Bank) is absent.\n\t\tif (this.manifestCache.size < EXPECTED_PROVIDERS && this.meshNode) {\n\t\t\tconst initialTimeoutMs = Number.parseInt(\n\t\t\t\tprocess.env.LIOP_INITIAL_DISCOVERY_TIMEOUT_MS ?? \"8000\",\n\t\t\t\t10,\n\t\t\t);\n\t\t\tconst boundedTimeoutMs =\n\t\t\t\tNumber.isFinite(initialTimeoutMs) && initialTimeoutMs > 0\n\t\t\t\t\t? initialTimeoutMs\n\t\t\t\t\t: 12000;\n\n\t\t\tconst deadline = Date.now() + boundedTimeoutMs;\n\t\t\tlet stableCount = 0;\n\t\t\tlet lastCacheSize = -1;\n\n\t\t\twhile (Date.now() < deadline) {\n\t\t\t\tif (this.manifestCache.size >= EXPECTED_PROVIDERS) break;\n\n\t\t\t\tawait Promise.race([\n\t\t\t\t\tthis.refreshManifestCache(true),\n\t\t\t\t\tnew Promise<void>((resolve) => setTimeout(resolve, 3000)),\n\t\t\t\t]).catch(() => {});\n\n\t\t\t\tif (this.manifestCache.size >= EXPECTED_PROVIDERS) break;\n\n\t\t\t\t// Stabilization detection: exit early when provider count plateaus\n\t\t\t\tif (this.manifestCache.size === lastCacheSize) {\n\t\t\t\t\tstableCount++;\n\t\t\t\t\tif (stableCount >= 3 && this.manifestCache.size > 0) {\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Provider count stabilized at ${this.manifestCache.size}/${EXPECTED_PROVIDERS}. Proceeding with available mesh.`,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\t\t\t\t} else {\n\t\t\t\t\tstableCount = 0;\n\t\t\t\t\tlastCacheSize = this.manifestCache.size;\n\t\t\t\t}\n\n\t\t\t\t// Wait before the next iteration to avoid CPU spin\n\t\t\t\tawait new Promise((r) => setTimeout(r, 1000));\n\t\t\t}\n\n\t\t\t// Diagnostic warning for partial mesh availability\n\t\t\tif (this.manifestCache.size < EXPECTED_PROVIDERS) {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] ⚠️ Mesh partially available: ${this.manifestCache.size}/${EXPECTED_PROVIDERS} providers. Some tools may be unavailable. Check Docker containers.`,\n\t\t\t\t);\n\t\t\t\t// Trigger one more background refresh to catch late joiners\n\t\t\t\tthis.refreshManifestCache(true).catch(() => {});\n\t\t\t}\n\t\t}\n\n\t\t// biome-ignore lint/suspicious/noExplicitAny: Tool schema is polymorphic\n\t\tconst tools: any[] = [];\n\t\tconst seenNames = new Set<string>();\n\t\tconst localToolNames = new Set(\n\t\t\tthis.liopServer.listTools().map((t) => t.name),\n\t\t);\n\n\t\tfor (const [peerId, { manifest }] of this.manifestCache.entries()) {\n\t\t\tfor (const tool of manifest.tools) {\n\t\t\t\t// LiopMeshStatus is a local-only diagnostic — skip remote copies\n\t\t\t\tif (tool.name === \"LiopMeshStatus\") continue;\n\n\t\t\t\t// [LIOP-STABILITY] Allow discovery of ALL remote tools.\n\t\t\t\t// MCP Requires unique names per server session.\n\t\t\t\t// In a P2P mesh, multiple nodes might expose the same tool (e.g. LiopMeshStatus).\n\t\t\t\t// We suffix duplicate names with a short peer hash to ensure\n\t\t\t\t// ALL tools from ALL providers are correctly registered and visible.\n\t\t\t\tlet finalName = tool.name;\n\t\t\t\tif (seenNames.has(tool.name) || localToolNames.has(tool.name)) {\n\t\t\t\t\tfinalName = `${tool.name}_${peerId.slice(-4)}`;\n\t\t\t\t}\n\t\t\t\tseenNames.add(finalName);\n\n\t\t\t\tconst providerName = manifest.serverInfo?.name || \"Unknown Provider\";\n\n\t\t\t\t// [SANITIZATION] Create a clean MCP-compliant tool object\n\t\t\t\tconst baseDesc = tool.description || `Remote tool from ${providerName}`;\n\t\t\t\tconst cleanTool: {\n\t\t\t\t\tname: string;\n\t\t\t\t\tdescription: string;\n\t\t\t\t\tinputSchema: Record<string, unknown>;\n\t\t\t\t} = {\n\t\t\t\t\tname: finalName,\n\t\t\t\t\tdescription: mcpCompactToolDescriptions()\n\t\t\t\t\t\t? stripVerboseLiopToolDescription(baseDesc)\n\t\t\t\t\t\t: baseDesc,\n\t\t\t\t\tinputSchema: (tool.inputSchema || {\n\t\t\t\t\t\ttype: \"object\",\n\t\t\t\t\t\tproperties: {},\n\t\t\t\t\t}) as Record<string, unknown>,\n\t\t\t\t};\n\n\t\t\t\t// Ensure inputSchema has the mandatory 'type: object' for MCP compliance\n\t\t\t\tif (\n\t\t\t\t\ttypeof cleanTool.inputSchema === \"object\" &&\n\t\t\t\t\t!cleanTool.inputSchema.type\n\t\t\t\t) {\n\t\t\t\t\tcleanTool.inputSchema.type = \"object\";\n\t\t\t\t}\n\t\t\t\tif (\n\t\t\t\t\ttypeof cleanTool.inputSchema === \"object\" &&\n\t\t\t\t\t!cleanTool.inputSchema.properties\n\t\t\t\t) {\n\t\t\t\t\tcleanTool.inputSchema.properties = {};\n\t\t\t\t}\n\n\t\t\t\tlet blueprint = \"\";\n\t\t\t\tif (manifest.taxonomy) {\n\t\t\t\t\tblueprint = `\\n[LIOP-DOMAIN: ${manifest.taxonomy.domain}]`;\n\t\t\t\t}\n\n\t\t\t\t// LIOP Logic-on-Origin Detection:\n\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: polymorphic input schema\n\t\t\t\tconst properties = (cleanTool.inputSchema.properties || {}) as any;\n\t\t\t\tlet envelopeDoc = \"\";\n\t\t\t\tif (!mcpCompactToolDescriptions() && properties.payload) {\n\t\t\t\t\tenvelopeDoc = `\\n[REQUIRES: LIOP-PROTO-V1 ENVELOPE]`;\n\t\t\t\t}\n\n\t\t\t\t// INDUSTRIAL REPLICATION: Highlight schema adherence blocks\n\t\t\t\tif (\n\t\t\t\t\t!mcpCompactToolDescriptions() &&\n\t\t\t\t\tcleanTool.description.includes(\"STRICT SCHEMA ADHERENCE\")\n\t\t\t\t) {\n\t\t\t\t\tcleanTool.description = cleanTool.description.replace(\n\t\t\t\t\t\t\"STRICT SCHEMA ADHERENCE:\",\n\t\t\t\t\t\t\"[INDUSTRIAL-REQUISITE] STRICT SCHEMA ADHERENCE (MANDATORY):\",\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\tconst originStamp = mcpCompactToolDescriptions()\n\t\t\t\t\t? `\\n(Peer: ${peerId.slice(-8)})${blueprint}`\n\t\t\t\t\t: `\\n(Origin: ${peerId.slice(-8)})${blueprint}${envelopeDoc}`;\n\t\t\t\tcleanTool.description = `${cleanTool.description}${originStamp}`;\n\n\t\t\t\ttools.push(cleanTool);\n\t\t\t}\n\t\t}\n\n\t\treturn tools;\n\t}\n\n\t/**\n\t * Returns all remote resources discovered via the manifest protocol.\n\t */\n\tprivate async getRemoteResources(): Promise<\n\t\tArray<{\n\t\t\tname: string;\n\t\t\turi: string;\n\t\t\tdescription?: string;\n\t\t\tmimeType?: string;\n\t\t}>\n\t> {\n\t\t// Trigger background refresh if not already discovering\n\t\tif (!this.currentDiscovery) {\n\t\t\tthis.refreshManifestCache(true).catch(() => {});\n\t\t}\n\n\t\tconst resources: Array<{\n\t\t\tname: string;\n\t\t\turi: string;\n\t\t\tdescription?: string;\n\t\t\tmimeType?: string;\n\t\t}> = [];\n\t\tconst seenUris = new Set(this.liopServer.listResources().map((r) => r.uri));\n\n\t\tfor (const [peerId, { manifest }] of this.manifestCache.entries()) {\n\t\t\tfor (const resource of manifest.resources) {\n\t\t\t\tif (!seenUris.has(resource.uri)) {\n\t\t\t\t\tconst augmentedResource = { ...resource };\n\t\t\t\t\tconst providerName = manifest.serverInfo?.name || \"Unknown Provider\";\n\n\t\t\t\t\tlet blueprint = \"\";\n\t\t\t\t\tif (manifest.taxonomy) {\n\t\t\t\t\t\tblueprint = `\\n\\n[LIOP Zero-Trust Blueprint]\\nDomain: ${manifest.taxonomy.domain}\\nClearance Tier: ${manifest.taxonomy.clearanceTier}`;\n\t\t\t\t\t\tif (\n\t\t\t\t\t\t\tmanifest.taxonomy.executionTypes &&\n\t\t\t\t\t\t\tmanifest.taxonomy.executionTypes.length > 0\n\t\t\t\t\t\t) {\n\t\t\t\t\t\t\tblueprint += `\\nExecution Types: ${manifest.taxonomy.executionTypes.join(\", \")}`;\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\n\t\t\t\t\tconst originStamp = `\\n\\n[LIOP Zero-Trust Origin]\\nProvider: ${providerName}\\nNetwork ID: ${peerId}${blueprint}`;\n\n\t\t\t\t\t// INDUSTRIAL REPLICATION: Mark schema resources clearly\n\t\t\t\t\tif (augmentedResource.uri.startsWith(\"liop://schema/\")) {\n\t\t\t\t\t\taugmentedResource.name = `[SCHEMA] ${augmentedResource.name}`;\n\t\t\t\t\t\taugmentedResource.description = `[CRITICAL SCHEMA] ${augmentedResource.description || \"Data Dictionary for Zero-Shot Autonomy\"}${originStamp}`;\n\t\t\t\t\t} else {\n\t\t\t\t\t\taugmentedResource.description = augmentedResource.description\n\t\t\t\t\t\t\t? `${augmentedResource.description}${originStamp}`\n\t\t\t\t\t\t\t: originStamp.trim();\n\t\t\t\t\t}\n\n\t\t\t\t\tresources.push(augmentedResource);\n\t\t\t\t\tseenUris.add(resource.uri);\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\treturn resources;\n\t}\n\n\t/**\n\t * Resolves the gRPC target (host:port) AND the peerId for a given tool name\n\t * by searching the manifest cache. Supports exact names and suffixed names.\n\t */\n\tprivate resolveManifestTarget(\n\t\ttoolName: string,\n\t): { peerId: string; originalToolName: string } | null {\n\t\t// 1. Try exact match\n\t\tfor (const [peerId, { manifest }] of this.manifestCache.entries()) {\n\t\t\tconst tool = manifest.tools.find((t) => t.name === toolName);\n\t\t\tif (tool) {\n\t\t\t\treturn {\n\t\t\t\t\tpeerId,\n\t\t\t\t\toriginalToolName: toolName,\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\n\t\t// 2. Try suffixed match (tool_xxxx)\n\t\tconst parts = toolName.split(\"_\");\n\t\tif (parts.length > 1) {\n\t\t\tconst suffix = parts.pop();\n\t\t\tconst baseName = parts.join(\"_\");\n\t\t\tfor (const [peerId, { manifest }] of this.manifestCache.entries()) {\n\t\t\t\tif (peerId.endsWith(suffix || \"\")) {\n\t\t\t\t\tconst tool = manifest.tools.find((t) => t.name === baseName);\n\t\t\t\t\tif (tool) {\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tpeerId,\n\t\t\t\t\t\t\toriginalToolName: baseName,\n\t\t\t\t\t\t};\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\treturn null;\n\t}\n\n\t/**\n\t * Redacts a PeerID for external-facing diagnostics.\n\t * LIOP_DIAGNOSTIC_LEVEL controls verbosity:\n\t * - \"redacted\" (default): truncated to last 8 chars\n\t * - \"full\": complete PeerID (development only)\n\t */\n\tprivate redactPeerId(peerId: string): string {\n\t\tconst level = process.env.LIOP_DIAGNOSTIC_LEVEL || \"redacted\";\n\t\tif (level === \"full\") return peerId;\n\t\treturn `***${peerId.slice(-8)}`;\n\t}\n\n\tprivate async transcodeMcpToLiop(\n\t\tid: string | number | null | undefined,\n\t\tparams: { name: string; arguments?: Record<string, unknown> },\n\t\ttoken?: string,\n\t): Promise<McpResponse | null> {\n\t\tconst toolName = params.name;\n\n\t\t// Intercept the static diagnostic tool\n\t\tif (toolName === \"LiopMeshStatus\") {\n\t\t\t// [INDUSTRIAL-FIX] Proactive warm-up: request a refresh when status is called.\n\t\t\t// This ensures that even if the DHT was cold, the next status call (or tools/list)\n\t\t\t// will have data.\n\t\t\tthis.refreshManifestCache(true).catch(() => {});\n\n\t\t\t// biome-ignore lint/suspicious/noExplicitAny: private stats for telemetry\n\t\t\tconst stats = (this as any)._discoveryStats || {\n\t\t\t\tcandidates: 0,\n\t\t\t\tsuccess: 0,\n\t\t\t\tfailures: 0,\n\t\t\t};\n\t\t\tconst providerCount = this.manifestCache.size;\n\t\t\tconst meshState = this.meshNode ? \"Active\" : \"Offline\";\n\t\t\tconst cachedTools = Array.from(this.manifestCache.values()).reduce(\n\t\t\t\t(acc, { manifest }) => acc + manifest.tools.length,\n\t\t\t\t0,\n\t\t\t);\n\t\t\tconst connections = this.meshNode\n\t\t\t\t? // biome-ignore lint/suspicious/noExplicitAny: access internal nodes\n\t\t\t\t\t(this.meshNode as any).node?.getConnections().length\n\t\t\t\t: 0;\n\n\t\t\tconst bootstrapNodes: string[] =\n\t\t\t\tthis.meshNode &&\n\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: access internal config\n\t\t\t\t(this.meshNode as any).config?.bootstrapNodes\n\t\t\t\t\t? // biome-ignore lint/suspicious/noExplicitAny: access internal config\n\t\t\t\t\t\t(this.meshNode as any).config.bootstrapNodes\n\t\t\t\t\t: [];\n\t\t\tconst bootstrapCount = bootstrapNodes.length;\n\n\t\t\tconst diagLevel = process.env.LIOP_DIAGNOSTIC_LEVEL || \"redacted\";\n\t\t\tconst showBootstraps = diagLevel !== \"minimal\";\n\n\t\t\tconst bootstrapList = showBootstraps\n\t\t\t\t? bootstrapNodes\n\t\t\t\t\t\t.map((addr) => {\n\t\t\t\t\t\t\tconst parts = addr.split(\"/\");\n\t\t\t\t\t\t\tconst id = parts[parts.length - 1];\n\t\t\t\t\t\t\treturn ` • ${id ? id.slice(-8) : \"Unknown\"} (bootstrap)`;\n\t\t\t\t\t\t})\n\t\t\t\t\t\t.join(\"\\n\")\n\t\t\t\t: \"\";\n\n\t\t\tconst routingTableSize = this.meshNode\n\t\t\t\t? // biome-ignore lint/suspicious/noExplicitAny: access internal nodes\n\t\t\t\t\t(this.meshNode as any).getRoutingTableSize()\n\t\t\t\t: 0;\n\n\t\t\tconst rawPeerId = this.meshNode?.getPeerId() || \"Offline\";\n\t\t\tconst localPeerId =\n\t\t\t\trawPeerId === \"Offline\" ? rawPeerId : this.redactPeerId(rawPeerId);\n\n\t\t\tconst cachedToolList = Array.from(this.manifestCache.entries())\n\t\t\t\t.flatMap(([peerId, { manifest }]) =>\n\t\t\t\t\tmanifest.tools.map(\n\t\t\t\t\t\t(t) => ` • ${t.name} (from origin: ${this.redactPeerId(peerId)})`,\n\t\t\t\t\t),\n\t\t\t\t)\n\t\t\t\t.join(\"\\n\");\n\n\t\t\tconst statusText = [\n\t\t\t\t`LIOP Mesh Status: ${meshState === \"Active\" ? \"Active\" : \"Offline\"}`,\n\t\t\t\t`Local Agent Identity: ${localPeerId}`,\n\t\t\t\t`Network: ${connections} Conns | ${routingTableSize} Mesh Nodes | ${bootstrapCount} Bootstraps`,\n\t\t\t\tshowBootstraps && bootstrapCount > 0\n\t\t\t\t\t? `\\nActive Bootstraps:\\n${bootstrapList}\\n`\n\t\t\t\t\t: \"\",\n\t\t\t\t`Discovery: ${stats.candidates} Candidates | ${stats.success} OK | ${stats.failures} FAIL`,\n\t\t\t\t`Tooling: ${providerCount} Providers | ${cachedTools} Total Remote Tools`,\n\t\t\t\tcachedTools > 0\n\t\t\t\t\t? `\\nDiscovered Remote Tools (Zero-Trust Origins):\\n${cachedToolList}`\n\t\t\t\t\t: \"\\nNo remote tools discovered yet.\",\n\t\t\t\t// [Token Economy] Telemetry block (only appears when operations exist)\n\t\t\t\tTokenTelemetryEngine.getInstance().formatStatusBlock(),\n\t\t\t]\n\t\t\t\t.filter((line) => line !== \"\")\n\t\t\t\t.join(\"\\n\");\n\n\t\t\t// [Token Economy] Record diagnostic output telemetry\n\t\t\tconst diagTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\tdiagTelemetry.record({\n\t\t\t\ttype: \"diagnostic\",\n\t\t\t\tmethod: \"tools/call\",\n\t\t\t\ttoolName: \"LiopMeshStatus\",\n\t\t\t\testimatedInputTokens: 0,\n\t\t\t\testimatedOutputTokens: diagTelemetry.countTokens(statusText),\n\t\t\t});\n\n\t\t\treturn {\n\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\tid,\n\t\t\t\tresult: {\n\t\t\t\t\tcontent: [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\ttext: statusText,\n\t\t\t\t\t\t},\n\t\t\t\t\t],\n\t\t\t\t},\n\t\t\t};\n\t\t}\n\n\t\tconst isLocal = this.liopServer\n\t\t\t.listTools()\n\t\t\t.some((t) => t.name === toolName);\n\n\t\tif (!isLocal && this.meshNode) {\n\t\t\t// Phase 1: Cache-first — resolve directly from cached manifests (zero-latency)\n\t\t\t// Per MCP spec, tools don't change between notifications/tools/list_changed.\n\t\t\tlet target = this.resolveManifestTarget(toolName);\n\n\t\t\t// Phase 2: If not cached, trigger DHT refresh and retry\n\t\t\tif (!target) {\n\t\t\t\tawait this.refreshManifestCache();\n\t\t\t\ttarget = this.resolveManifestTarget(toolName);\n\t\t\t}\n\n\t\t\tif (target) {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] Resolved ${toolName} via manifest cache (Peer: ${target.peerId}, Original: ${target.originalToolName})`,\n\t\t\t\t);\n\n\t\t\t\t// Proactive auth check: block locally if the remote node requires authentication\n\t\t\t\t// and no token can be resolved — avoids unnecessary network calls to resolvePeer/gRPC\n\t\t\t\tconst manifestEntry = this.manifestCache.get(target.peerId);\n\t\t\t\tlet effectiveToken = token;\n\t\t\t\tif (manifestEntry?.manifest.authRequired) {\n\t\t\t\t\tconst resolvedToken =\n\t\t\t\t\t\ttoken || (await this.getOrAcquireMeshAgentToken(target.peerId));\n\t\t\t\t\tif (!resolvedToken) {\n\t\t\t\t\t\tconst providerName =\n\t\t\t\t\t\t\tmanifestEntry.manifest.serverInfo?.name?.toLowerCase() ||\n\t\t\t\t\t\t\t\"unknown\";\n\t\t\t\t\t\tconst slug = manifestEntry.manifest.tokenSlug;\n\t\t\t\t\t\tconst shortId = target.peerId.slice(-8).toUpperCase();\n\t\t\t\t\t\tconst primaryVar = slug\n\t\t\t\t\t\t\t? `LIOP_TOKEN_${slug}`\n\t\t\t\t\t\t\t: `LIOP_TOKEN_${providerName.toUpperCase().replace(/[^A-Z0-9_]/g, \"_\")}`;\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\tresult: {\n\t\t\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\t\t\t\ttext: `Authentication Required: The restricted node (${providerName}) requires an access token. Please define the ${primaryVar} or LIOP_TOKEN_${shortId} environment variable on your agent/client host.`,\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\tisError: true,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t};\n\t\t\t\t\t}\n\t\t\t\t\t// Forward the resolved token instead of the original (potentially undefined) caller token\n\t\t\t\t\teffectiveToken = resolvedToken;\n\t\t\t\t}\n\n\t\t\t\treturn this.routeToRemoteProvider(\n\t\t\t\t\tid,\n\t\t\t\t\ttarget.originalToolName,\n\t\t\t\t\ttarget.peerId,\n\t\t\t\t\tparams,\n\t\t\t\t\teffectiveToken,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\t// Phase 2: Try DHT-based dynamic provider discovery (fallback for unsuffixed names)\n\t\t\tlet providers: string[] = [];\n\t\t\tfor (let i = 0; i < 3; i++) {\n\t\t\t\tproviders = await this.meshNode.findProviders(toolName);\n\t\t\t\tif (providers.length > 0) break;\n\t\t\t\tif (i < 2) await new Promise((r) => setTimeout(r, 1000));\n\t\t\t}\n\n\t\t\tif (providers.length > 0) {\n\t\t\t\treturn this.routeToRemoteProvider(\n\t\t\t\t\tid,\n\t\t\t\t\ttoolName,\n\t\t\t\t\tproviders[0],\n\t\t\t\t\tparams,\n\t\t\t\t\ttoken,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\n\t\t// If no remote provider found, try local execution\n\t\tif (isLocal) {\n\t\t\ttry {\n\t\t\t\tconst localStartTime = Date.now();\n\t\t\t\tconst result = await this.liopServer.callTool({\n\t\t\t\t\tname: toolName,\n\t\t\t\t\targuments: params.arguments || {},\n\t\t\t\t});\n\n\t\t\t\t// [Token Economy] Record local tool call telemetry\n\t\t\t\tconst localTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\tconst localInputPayload = JSON.stringify(params.arguments || {});\n\t\t\t\tconst localOutputPayload = JSON.stringify(result);\n\t\t\t\tlocalTelemetry.record({\n\t\t\t\t\ttype: \"tool_call\",\n\t\t\t\t\tmethod: \"tools/call\",\n\t\t\t\t\ttoolName,\n\t\t\t\t\testimatedInputTokens: localTelemetry.countTokens(localInputPayload),\n\t\t\t\t\testimatedOutputTokens: localTelemetry.countTokens(localOutputPayload),\n\t\t\t\t\tdurationMs: Date.now() - localStartTime,\n\t\t\t\t});\n\n\t\t\t\treturn { jsonrpc: \"2.0\", id, result };\n\t\t\t} catch (err: unknown) {\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\terror: {\n\t\t\t\t\t\tcode: -32000,\n\t\t\t\t\t\tmessage: err instanceof Error ? err.message : String(err),\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\n\t\treturn {\n\t\t\tjsonrpc: \"2.0\",\n\t\t\tid,\n\t\t\terror: {\n\t\t\t\tcode: -32002,\n\t\t\t\tmessage: `No provider found for tool: ${toolName}. Ensure the provider node is active and connected to the mesh.`,\n\t\t\t},\n\t\t};\n\t}\n\n\tprivate async routeToRemoteProvider(\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t\tid: any,\n\t\ttoolName: string,\n\t\tpeerId: string,\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t\tparams: any,\n\t\ttoken?: string,\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t): Promise<any> {\n\t\tif (!this.meshNode)\n\t\t\treturn {\n\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\tid,\n\t\t\t\terror: { code: -32603, message: \"Mesh Node inactive\" },\n\t\t\t};\n\n\t\t// Dynamic gRPC port resolution from manifest cache\n\t\tlet manifestEntry = this.manifestCache.get(peerId);\n\t\tlet grpcPort = this.defaultRpcPort;\n\n\t\tif (manifestEntry) {\n\t\t\tgrpcPort = manifestEntry.manifest.grpcPort;\n\t\t} else {\n\t\t\t// Try to query the manifest directly\n\t\t\tconst manifest = await this.meshNode.queryManifest(peerId);\n\t\t\tif (manifest) {\n\t\t\t\tgrpcPort = manifest.grpcPort;\n\t\t\t\tthis.manifestCache.set(peerId, {\n\t\t\t\t\tmanifest,\n\t\t\t\t\tcachedAt: Date.now(),\n\t\t\t\t});\n\t\t\t\tmanifestEntry = this.manifestCache.get(peerId);\n\t\t\t}\n\t\t}\n\n\t\t// Resolve IP from active connections\n\t\tconst addrs = await this.meshNode.resolvePeer(peerId);\n\n\t\t// Docker Demo convenience (opt-in or auto-detected):\n\t\t// Docker Desktop setups publish gRPC ports on the host as 13011/13021/13031.\n\t\t// Container-internal gRPC ports (50051) and 172.20.0.x IPs are unreachable directly from the host.\n\t\tconst nexusUrl = process.env.LIOP_NEXUS_URL || \"\";\n\t\tconst isDockerDemo =\n\t\t\tnexusUrl.includes(\"127.0.0.1:13000\") ||\n\t\t\tnexusUrl.includes(\"localhost:13000\") ||\n\t\t\tnexusUrl.includes(\"127.0.0.1:13001\") ||\n\t\t\tnexusUrl.includes(\"localhost:13001\");\n\t\tconst isDockerPort = addrs.some(\n\t\t\t(a) =>\n\t\t\t\ta.includes(\"13001\") ||\n\t\t\t\ta.includes(\"13003\") ||\n\t\t\t\ta.includes(\"13004\") ||\n\t\t\t\ta.includes(\"13005\") ||\n\t\t\t\ta.includes(\"13011\") ||\n\t\t\t\ta.includes(\"13021\") ||\n\t\t\t\ta.includes(\"13031\"),\n\t\t);\n\t\tconst shouldRemapGrpcPorts =\n\t\t\tprocess.env.LIOP_USE_PUBLISHED_GRPC_PORTS === \"1\" ||\n\t\t\tprocess.env.LIOP_DOCKER_MAP === \"true\" ||\n\t\t\tprocess.env.LIOP_DEV_MODE === \"true\" ||\n\t\t\tprocess.env.NODE_ENV === \"development\" ||\n\t\t\tprocess.env.NODE_ENV === \"test\" ||\n\t\t\tisDockerDemo ||\n\t\t\tisDockerPort;\n\n\t\tif (shouldRemapGrpcPorts) {\n\t\t\tconst providerName =\n\t\t\t\tmanifestEntry?.manifest?.serverInfo?.name?.toLowerCase() || \"\";\n\t\t\tconst tn = toolName.toLowerCase();\n\t\t\tif (providerName.includes(\"vault\") || tn.includes(\"medical\")) {\n\t\t\t\tgrpcPort = 13011;\n\t\t\t} else if (providerName.includes(\"bank\") || tn.includes(\"bank\")) {\n\t\t\t\tgrpcPort = 13021;\n\t\t\t} else if (\n\t\t\t\tproviderName.includes(\"oracle\") ||\n\t\t\t\ttn.includes(\"hft\") ||\n\t\t\t\ttn.includes(\"market\")\n\t\t\t) {\n\t\t\t\tgrpcPort = 13031;\n\t\t\t}\n\t\t}\n\n\t\tlet targetAddr: string | null = null;\n\n\t\t// If running in Docker mapped mode, always route to 127.0.0.1 on the published host port\n\t\tif (shouldRemapGrpcPorts) {\n\t\t\ttargetAddr = `127.0.0.1:${grpcPort}`;\n\t\t} else {\n\t\t\t// [LIOP-ALPHA] Check if the peer is running on the same physical machine\n\t\t\t// by comparing its advertised IPs against our local OS interfaces.\n\t\t\tconst os = await import(\"node:os\");\n\t\t\tconst localInterfaces = Object.values(os.networkInterfaces())\n\t\t\t\t.flat()\n\t\t\t\t.filter((i) => i?.family === \"IPv4\")\n\t\t\t\t.map((i) => i?.address);\n\n\t\t\t// Loop through all advertised addresses to find the optimal target\n\t\t\tfor (const addr of addrs) {\n\t\t\t\tconst parts = addr.split(\"/\");\n\t\t\t\tconst ipIdx = parts.indexOf(\"ip4\");\n\t\t\t\tif (ipIdx !== -1) {\n\t\t\t\t\tconst advertisedIp = parts[ipIdx + 1];\n\n\t\t\t\t\t// Loopback priority or Same-Machine detection\n\t\t\t\t\tif (\n\t\t\t\t\t\tadvertisedIp === \"127.0.0.1\" ||\n\t\t\t\t\t\tlocalInterfaces.includes(advertisedIp)\n\t\t\t\t\t) {\n\t\t\t\t\t\ttargetAddr = `127.0.0.1:${grpcPort}`;\n\t\t\t\t\t\tbreak; // Supreme priority for local execution\n\t\t\t\t\t}\n\n\t\t\t\t\t// Default to first discovered valid external IP\n\t\t\t\t\tif (!targetAddr) {\n\t\t\t\t\t\ttargetAddr = `${advertisedIp}:${grpcPort}`;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tif (!targetAddr) {\n\t\t\t// Fallback to localhost with the dynamically resolved port\n\t\t\ttargetAddr = `127.0.0.1:${grpcPort}`;\n\t\t}\n\n\t\tlog.info(\n\t\t\t`[LIOP-Router] Dynamic route: ${toolName} -> ${targetAddr} (PeerID: ${peerId})`,\n\t\t);\n\n\t\tconst remoteClient = new liopV1.LogicMesh(\n\t\t\ttargetAddr,\n\t\t\tcreateChannelCredentials({ insecure: true, suppressWarning: true }),\n\t\t\tGRPC_CHANNEL_OPTIONS,\n\t\t);\n\t\treturn this.performTranscoding(\n\t\t\tid,\n\t\t\tremoteClient,\n\t\t\ttoolName,\n\t\t\tparams,\n\t\t\tpeerId,\n\t\t\ttoken,\n\t\t);\n\t}\n\n\t/** Cached M2M token for dynamic gateway-to-node routing */\n\tprivate meshAgentToken?: string;\n\n\t/**\n\t * Dynamically acquires an M2M access token from the Nexus Authorization Server.\n\t * If peerId is provided, checks if there are node-specific environment tokens\n\t * before falling back to the global static token or Nexus acquisition.\n\t */\n\tprivate async getOrAcquireMeshAgentToken(\n\t\tpeerId?: string,\n\t): Promise<string | undefined> {\n\t\tif (peerId) {\n\t\t\tconst manifestEntry = this.manifestCache.get(peerId);\n\t\t\tconst providerName =\n\t\t\t\tmanifestEntry?.manifest.serverInfo?.name?.toLowerCase() || \"\";\n\n\t\t\tlet nodeToken: string | undefined;\n\n\t\t\t// 0. Deterministic tokenSlug resolution (highest priority, zero heuristic)\n\t\t\tconst slug = manifestEntry?.manifest.tokenSlug;\n\t\t\tif (slug) {\n\t\t\t\tconst envKey = `LIOP_TOKEN_${slug}`;\n\t\t\t\tnodeToken =\n\t\t\t\t\tprocess.env[envKey] || process.env[`LIOP_OAUTH_TOKEN_${slug}`];\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] Step0 tokenSlug=${slug} envKey=${envKey} found=${!!nodeToken} peer=${peerId.slice(-8)}`,\n\t\t\t\t);\n\t\t\t} else {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] Step0 tokenSlug=MISSING (manifest has no tokenSlug) peer=${peerId.slice(-8)} provider=${providerName}`,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\t// 1. PeerID-specific resolution: LIOP_TOKEN_<last 8 chars of PeerID in uppercase>\n\t\t\tif (!nodeToken) {\n\t\t\t\tconst shortId = peerId.slice(-8).toUpperCase();\n\t\t\t\tnodeToken =\n\t\t\t\t\tprocess.env[`LIOP_TOKEN_${shortId}`] ||\n\t\t\t\t\tprocess.env[`LIOP_OAUTH_TOKEN_${shortId}`];\n\t\t\t}\n\n\t\t\t// 2. Provider-name resolution: LIOP_TOKEN_<CLEAN_PROVIDER_NAME_UPPERCASE>\n\t\t\tif (!nodeToken && providerName) {\n\t\t\t\tconst cleanName = providerName\n\t\t\t\t\t.toUpperCase()\n\t\t\t\t\t.replace(/[^A-Z0-9_]/g, \"_\");\n\t\t\t\tnodeToken =\n\t\t\t\t\tprocess.env[`LIOP_TOKEN_${cleanName}`] ||\n\t\t\t\t\tprocess.env[`LIOP_OAUTH_TOKEN_${cleanName}`];\n\t\t\t}\n\n\t\t\tif (nodeToken) {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] Resolved node-specific token for peer ${peerId.slice(-8)} (${providerName || \"unknown\"})`,\n\t\t\t\t);\n\t\t\t\treturn nodeToken;\n\t\t\t}\n\t\t}\n\n\t\tif (this.meshAgentToken) return this.meshAgentToken;\n\n\t\t// Support static pre-generated Access Tokens from environment\n\t\tconst staticToken = process.env.LIOP_OAUTH_TOKEN || process.env.LIOP_TOKEN;\n\t\tif (staticToken) {\n\t\t\tthis.meshAgentToken = staticToken;\n\t\t\treturn this.meshAgentToken;\n\t\t}\n\n\t\tconst nexusUrl = process.env.LIOP_NEXUS_URL;\n\t\tif (!nexusUrl) return undefined;\n\n\t\tconst clientId =\n\t\t\tprocess.env.LIOP_OAUTH_CLIENT_ID ||\n\t\t\tprocess.env.LIOP_CLIENT_ID ||\n\t\t\t\"liop-mesh-agent\";\n\t\tconst clientSecret =\n\t\t\tprocess.env.LIOP_OAUTH_CLIENT_SECRET ||\n\t\t\tprocess.env.LIOP_CLIENT_SECRET ||\n\t\t\t\"dev-secret-change-me\";\n\t\tconst audience =\n\t\t\tprocess.env.LIOP_OAUTH_AUDIENCE ||\n\t\t\tprocess.env.LIOP_AUDIENCE ||\n\t\t\t\"urn:liop:mesh:api\";\n\n\t\ttry {\n\t\t\tconst baseUrl = nexusUrl.endsWith(\"/oidc\")\n\t\t\t\t? nexusUrl\n\t\t\t\t: `${nexusUrl}/oidc`;\n\t\t\tconst tokenUrl = `${baseUrl}/token`;\n\t\t\tlog.info(\n\t\t\t\t`[LIOP-Router] Proactively acquiring M2M token from Nexus: ${tokenUrl}`,\n\t\t\t);\n\n\t\t\tconst params = new URLSearchParams({\n\t\t\t\tgrant_type: \"client_credentials\",\n\t\t\t\tscope:\n\t\t\t\t\t\"liop:tools:call liop:tools:list liop:resources:read liop:schema:read liop:mesh:query\",\n\t\t\t\tresource: audience,\n\t\t\t\tclient_id: clientId,\n\t\t\t\tclient_secret: clientSecret,\n\t\t\t});\n\n\t\t\tconst response = await fetch(tokenUrl, {\n\t\t\t\tmethod: \"POST\",\n\t\t\t\theaders: {\n\t\t\t\t\t\"Content-Type\": \"application/x-www-form-urlencoded\",\n\t\t\t\t},\n\t\t\t\tbody: params.toString(),\n\t\t\t});\n\n\t\t\tif (!response.ok) {\n\t\t\t\tconst text = await response.text();\n\t\t\t\tlog.warn(\n\t\t\t\t\t`[LIOP-Router] M2M Token acquisition failed: ${response.status} ${text}`,\n\t\t\t\t);\n\t\t\t\treturn undefined;\n\t\t\t}\n\n\t\t\tconst data = (await response.json()) as { access_token: string };\n\t\t\tif (data.access_token) {\n\t\t\t\tthis.meshAgentToken = data.access_token;\n\t\t\t\tlog.info(\n\t\t\t\t\t\"[LIOP-Router] M2M Token acquired successfully for router routing.\",\n\t\t\t\t);\n\t\t\t\treturn this.meshAgentToken;\n\t\t\t}\n\t\t} catch (err: unknown) {\n\t\t\tlog.warn(\n\t\t\t\t`[LIOP-Router] Failed to acquire M2M token: ${\n\t\t\t\t\terr instanceof Error ? err.message : String(err)\n\t\t\t\t}`,\n\t\t\t);\n\t\t}\n\t\treturn undefined;\n\t}\n\n\tprivate async performTranscoding(\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t\tid: any,\n\t\t// biome-ignore lint/suspicious/noExplicitAny: gRPC client from dynamic proto-loader\n\t\tclient: any,\n\t\ttoolName: string,\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t\tparams: any,\n\t\tpeerId?: string,\n\t\ttoken?: string,\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t): Promise<any> {\n\t\tconst capabilityHash = toolName;\n\t\tconst proofOfIntent = this.meshNode\n\t\t\t? await this.meshNode.sign(Buffer.from(capabilityHash))\n\t\t\t: Buffer.from([]);\n\n\t\tconst transcodingStartTime = Date.now();\n\n\t\t// Auto-acquire self-identity M2M token if client did not supply one but a Nexus AS is configured\n\t\tlet activeToken = token;\n\t\tif (!activeToken) {\n\t\t\tactiveToken = await this.getOrAcquireMeshAgentToken(peerId);\n\t\t}\n\n\t\tif (peerId) {\n\t\t\tconst manifestEntry = this.manifestCache.get(peerId);\n\t\t\tif (manifestEntry?.manifest.authRequired && !activeToken) {\n\t\t\t\tconst providerName =\n\t\t\t\t\tmanifestEntry.manifest.serverInfo?.name?.toLowerCase() || \"unknown\";\n\t\t\t\tconst slug = manifestEntry.manifest.tokenSlug;\n\t\t\t\tconst shortId = peerId.slice(-8).toUpperCase();\n\t\t\t\tconst primaryVar = slug\n\t\t\t\t\t? `LIOP_TOKEN_${slug}`\n\t\t\t\t\t: `LIOP_TOKEN_${providerName.toUpperCase().replace(/[^A-Z0-9_]/g, \"_\")}`;\n\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\tresult: {\n\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\t\ttext: `Authentication Required: The restricted node (${providerName}) requires an access token. Please define the ${primaryVar} or LIOP_TOKEN_${shortId} environment variable on your agent/client host.`,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t],\n\t\t\t\t\t\tisError: true,\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\n\t\treturn new Promise((resolve) => {\n\t\t\tconst metadata = new grpc.Metadata();\n\t\t\tif (activeToken) {\n\t\t\t\tmetadata.add(\"authorization\", `Bearer ${activeToken}`);\n\t\t\t}\n\n\t\t\tclient.negotiateIntent(\n\t\t\t\t{\n\t\t\t\t\tagent_did: `did:liop:${this.meshNode?.getPeerId() || \"mcp-proxy\"}`,\n\t\t\t\t\tcapability_hash: capabilityHash,\n\t\t\t\t\tproof_of_intent: proofOfIntent,\n\t\t\t\t},\n\t\t\t\tmetadata,\n\t\t\t\tasync (err: Error | null, response: IntentResponse) => {\n\t\t\t\t\tif (err || !response.accepted) {\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\ttoolCallErrorsTotal.inc({\n\t\t\t\t\t\t\t\tcapability: toolName,\n\t\t\t\t\t\t\t\terror_type: \"handshake_failed\",\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t} catch {}\n\t\t\t\t\t\treturn resolve({\n\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\tresult: {\n\t\t\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\t\t\t\ttext: `PQC Handshake Failed: ${err?.message || \"Rejected\"}`,\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\tisError: true,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t});\n\t\t\t\t\t}\n\n\t\t\t\t\tconst pqcStart = performance.now();\n\t\t\t\t\tconst { ciphertext, sharedSecret } =\n\t\t\t\t\t\tawait Kyber768Wrapper.encapsulateAsymmetric(\n\t\t\t\t\t\t\tresponse.kyber_public_key,\n\t\t\t\t\t\t);\n\t\t\t\t\tconst pqcDuration = performance.now() - pqcStart;\n\t\t\t\t\ttry {\n\t\t\t\t\t\tpqcHandshakeDurationMs.observe({ tool: toolName }, pqcDuration);\n\t\t\t\t\t\tpqcHandshakesTotal.inc({\n\t\t\t\t\t\t\talgorithm: \"ml-kem-768\",\n\t\t\t\t\t\t\tstatus: \"success\",\n\t\t\t\t\t\t});\n\t\t\t\t\t} catch {\n\t\t\t\t\t\t// Metrics observation failure must never disrupt handshake\n\t\t\t\t\t}\n\t\t\t\t\t// SECURITY: Avoid AES-GCM nonce reuse across multiple ciphertexts.\n\t\t\t\t\t// We embed arguments directly into the proxy logic so we only encrypt ONE payload per session/nonce.\n\t\t\t\t\tconst embeddedArgs =\n\t\t\t\t\t\tparams?.arguments ?? (params?.payload !== undefined ? params : {});\n\t\t\t\t\tconst embeddedArgsJson = JSON.stringify(embeddedArgs);\n\t\t\t\t\tconst proxyLogic = `return { \"__liop_proxy_tool\": \"${toolName}\", \"__liop_proxy_args\": ${embeddedArgsJson} };`;\n\t\t\t\t\tconst nonce = crypto.randomBytes(12);\n\n\t\t\t\t\tconst sealedLogic = this.encryptWithNonce(\n\t\t\t\t\t\tBuffer.from(proxyLogic),\n\t\t\t\t\t\tsharedSecret,\n\t\t\t\t\t\tnonce,\n\t\t\t\t\t);\n\n\t\t\t\t\tconst metadataCall = new grpc.Metadata();\n\t\t\t\t\tif (activeToken) {\n\t\t\t\t\t\tmetadataCall.add(\"authorization\", `Bearer ${activeToken}`);\n\t\t\t\t\t}\n\n\t\t\t\t\tconst call = client.executeLogic(\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tsession_token: response.session_token,\n\t\t\t\t\t\t\twasm_binary: new Uint8Array(sealedLogic),\n\t\t\t\t\t\t\tinputs: {},\n\t\t\t\t\t\t\tpqc_ciphertext: ciphertext,\n\t\t\t\t\t\t\taes_nonce: nonce,\n\t\t\t\t\t\t},\n\t\t\t\t\t\tmetadataCall,\n\t\t\t\t\t);\n\n\t\t\t\t\tlet resultBody = \"\";\n\t\t\t\t\tlet lastResponse: LogicResponse | null = null;\n\t\t\t\t\tcall.on(\"data\", (grpcRes: LogicResponse) => {\n\t\t\t\t\t\tresultBody += grpcRes.semantic_evidence;\n\t\t\t\t\t\tlastResponse = grpcRes;\n\t\t\t\t\t});\n\t\t\t\t\tcall.on(\"end\", async () => {\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tif (lastResponse) {\n\t\t\t\t\t\t\t\t// Only verify ZK-Receipt if the remote execution succeeded.\n\t\t\t\t\t\t\t\t// If the remote execution failed due to a policy error (e.g. Egress Shield),\n\t\t\t\t\t\t\t\t// the ZK proof is empty and we should bypass validation to propagate the original error.\n\t\t\t\t\t\t\t\tif (!lastResponse.is_error) {\n\t\t\t\t\t\t\t\t\tconst proofHex = Buffer.from(\n\t\t\t\t\t\t\t\t\t\tlastResponse.cryptographic_proof,\n\t\t\t\t\t\t\t\t\t).toString(\"hex\");\n\t\t\t\t\t\t\t\t\tconst isValid = await this.verifier.verifyZkReceipt(\n\t\t\t\t\t\t\t\t\t\tBuffer.from(proxyLogic),\n\t\t\t\t\t\t\t\t\t\tproofHex,\n\t\t\t\t\t\t\t\t\t\tBuffer.from(lastResponse.zk_receipt),\n\t\t\t\t\t\t\t\t\t\tBuffer.from(sharedSecret),\n\t\t\t\t\t\t\t\t\t\tresultBody,\n\t\t\t\t\t\t\t\t\t);\n\n\t\t\t\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\t\t\t\tzkVerificationsTotal.inc({\n\t\t\t\t\t\t\t\t\t\t\tstatus: isValid ? \"valid\" : \"invalid\",\n\t\t\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t\t} catch {}\n\n\t\t\t\t\t\t\t\t\tif (!isValid) {\n\t\t\t\t\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\t\t\t\t\ttoolCallErrorsTotal.inc({\n\t\t\t\t\t\t\t\t\t\t\t\tcapability: toolName,\n\t\t\t\t\t\t\t\t\t\t\t\terror_type: \"cryptographic_audit_failed\",\n\t\t\t\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t\t\t} catch {}\n\t\t\t\t\t\t\t\t\t\treturn resolve({\n\t\t\t\t\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\t\t\t\tresult: {\n\t\t\t\t\t\t\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\ttext: \"SECURITY ALERT: Remote response failed cryptographic integrity audit.\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\t\t\t\t\tisError: true,\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t} else {\n\t\t\t\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\t\t\t\ttoolCallErrorsTotal.inc({\n\t\t\t\t\t\t\t\t\t\t\tcapability: toolName,\n\t\t\t\t\t\t\t\t\t\t\terror_type: \"remote_execution_error\",\n\t\t\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t\t} catch {}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\n\t\t\t\t\t\t\tconst parsedResult = JSON.parse(resultBody);\n\n\t\t\t\t\t\t\t// [Token Economy & Wire Telemetry] Record remote tool call telemetry\n\t\t\t\t\t\t\tconst remoteTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\t\t\t\tremoteTelemetry.record({\n\t\t\t\t\t\t\t\ttype: \"tool_call\",\n\t\t\t\t\t\t\t\tmethod: \"tools/call\",\n\t\t\t\t\t\t\t\ttoolName,\n\t\t\t\t\t\t\t\tpeerId,\n\t\t\t\t\t\t\t\testimatedInputTokens:\n\t\t\t\t\t\t\t\t\tremoteTelemetry.countTokens(embeddedArgsJson),\n\t\t\t\t\t\t\t\testimatedOutputTokens: remoteTelemetry.countTokens(resultBody),\n\t\t\t\t\t\t\t\tdurationMs: Date.now() - transcodingStartTime,\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\t\twireEgressBytesTotal.inc(\n\t\t\t\t\t\t\t\t\t{ capability: toolName },\n\t\t\t\t\t\t\t\t\tBuffer.byteLength(resultBody),\n\t\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\t} catch {}\n\n\t\t\t\t\t\t\tresolve({ jsonrpc: \"2.0\", id, result: parsedResult });\n\t\t\t\t\t\t} catch (_e) {\n\t\t\t\t\t\t\tresolve({\n\t\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\tresult: { content: [{ type: \"text\", text: resultBody }] },\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t}\n\t\t\t\t\t});\n\t\t\t\t\tcall.on(\"error\", (e: Error) => {\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\ttoolCallErrorsTotal.inc({\n\t\t\t\t\t\t\t\tcapability: toolName,\n\t\t\t\t\t\t\t\terror_type: \"grpc_stream_error\",\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t} catch {}\n\t\t\t\t\t\tresolve({\n\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\tresult: {\n\t\t\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t\t\t{ type: \"text\", text: `LIOP gRPC Error: ${e.message}` },\n\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\tisError: true,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t});\n\t\t\t\t\t});\n\t\t\t\t},\n\t\t\t);\n\t\t});\n\t}\n\n\tprivate encryptWithNonce(\n\t\tpayload: Buffer,\n\t\tkey: Uint8Array,\n\t\tnonce: Buffer,\n\t): Buffer {\n\t\tconst cipher = crypto.createCipheriv(\"aes-256-gcm\", key, nonce);\n\t\tconst encrypted = Buffer.concat([cipher.update(payload), cipher.final()]);\n\t\treturn Buffer.concat([encrypted, cipher.getAuthTag()]);\n\t}\n}\n"]}
@@ -1,4 +1,4 @@
1
- import { MCP_LEGACY_SUPPORT_ENABLED, isLegacyRequest, MCP_PROTOCOL_VERSION_LEGACY, MCP_PROTOCOL_VERSION } from './chunk-EG46XMJT.js';
1
+ import { MCP_LEGACY_SUPPORT_ENABLED, isLegacyRequest, MCP_PROTOCOL_VERSION_LEGACY, MCP_PROTOCOL_VERSION } from './chunk-NFFBJALJ.js';
2
2
  import { log } from './chunk-HA6YZ42O.js';
3
3
  import { randomUUID } from 'crypto';
4
4
  import { serve } from '@hono/node-server';
@@ -554,5 +554,5 @@ var LiopMcpBridge = class {
554
554
  };
555
555
 
556
556
  export { LiopMcpBridge, LiopStreamBridge };
557
- //# sourceMappingURL=chunk-BOISQ45Z.js.map
558
- //# sourceMappingURL=chunk-BOISQ45Z.js.map
557
+ //# sourceMappingURL=chunk-OPYSUDSW.js.map
558
+ //# sourceMappingURL=chunk-OPYSUDSW.js.map
@@ -1 +1 @@
1
- {"version":3,"sources":["../src/bridge/stream.ts","../src/bridge/index.ts"],"names":[],"mappings":";;;;;;;AAoCA,IAAM,2BAAA,GAA8B,EAAA;AACpC,IAAM,0BAAA,GAA6B,KAAK,EAAA,GAAK,GAAA;AAC7C,IAAM,uBAAuB,EAAA,GAAK,GAAA;AAgB3B,IAAM,mBAAN,MAAuB;AAAA,EAS7B,WAAA,CACC,cAAA,EACQ,OAAA,GAAmC,EAAC,EAC3C;AADO,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAER,IAAA,IAAA,CAAK,GAAA,GAAM,IAAI,IAAA,EAAK;AACpB,IAAA,IAAA,CAAK,WAAA,GAAc,IAAI,aAAA,CAAc,cAAc,CAAA;AACnD,IAAA,IAAA,CAAK,cAAA,uBAAqB,GAAA,EAAI;AAC9B,IAAA,IAAA,CAAK,gBAAA,GACJ,QAAQ,gBAAA,IAAoB,2BAAA;AAC7B,IAAA,IAAA,CAAK,gBAAA,GACJ,QAAQ,gBAAA,IAAoB,0BAAA;AAE7B,IAAA,IAAA,CAAK,WAAA,EAAY;AAAA,EAClB;AAAA,EAXS,OAAA;AAAA,EAVD,GAAA;AAAA,EACA,UAAA,GAA8C,IAAA;AAAA,EAC9C,WAAA;AAAA,EACA,cAAA;AAAA,EACA,aAAA,GAAuD,IAAA;AAAA,EACvD,gBAAA;AAAA,EACA,gBAAA;AAAA;AAAA;AAAA;AAAA,EAoBR,MAAc,uBACb,QAAA,EACoD;AACpD,IAAA,MAAM,EAAE,wCAAA,EAAyC,GAAI,MAAM,OAC1D,+DACD,CAAA;AACA,IAAA,MAAM,SAAA,GAAY,IAAI,wCAAA,CAAyC;AAAA,MAC9D,kBAAA,EAAoB,MAAM,UAAA,EAAW;AAAA,MACrC,oBAAA,EAAsB,CAAC,SAAA,KAAsB;AAC5C,QAAA,IAAA,CAAK,cAAA,CAAe,IAAI,SAAA,EAAW;AAAA,UAClC,SAAA;AAAA,UACA,YAAA,EAAc,KAAK,GAAA,EAAI;AAAA,UACvB;AAAA,SACA,CAAA;AACD,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,CAAA,oCAAA,EAAuC,SAAS,CAAA,MAAA,EAAS,QAAQ,CAAA,CAAA;AAAA,SAClE;AAAA,MACD;AAAA,KACA,CAAA;AAGD,IAAA,SAAA,CAAU,SAAA,GAAY,OAAO,OAAA,KAA4B;AAExD,MAAA,IAAI,UAAU,SAAA,EAAW;AACxB,QAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,cAAA,CAAe,GAAA,CAAI,UAAU,SAAS,CAAA;AACzD,QAAA,IAAI,KAAA,EAAO,KAAA,CAAM,YAAA,GAAe,IAAA,CAAK,GAAA,EAAI;AAAA,MAC1C;AAEA,MAAA,IAAI;AACH,QAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,WAAA,CAAY,oBAAA;AAAA,UACrC;AAAA,SACD;AAEA,QAAA,IAAI,WAAW,KAAA,CAAA,EAAW;AACzB,UAAA,MAAM,SAAA,CAAU,KAAK,MAAwB,CAAA;AAAA,QAC9C;AAAA,MACD,SAAS,GAAA,EAAc;AACtB,QAAA,GAAA,CAAI,IAAA,CAAK,qCAAA,EAAwC,GAAA,CAAc,OAAO,CAAA;AAAA,MACvE;AAAA,IACD,CAAA;AAEA,IAAA,SAAA,CAAU,UAAU,MAAM;AACzB,MAAA,IAAI,UAAU,SAAA,EAAW;AACxB,QAAA,IAAA,CAAK,cAAA,CAAe,MAAA,CAAO,SAAA,CAAU,SAAS,CAAA;AAC9C,QAAA,GAAA,CAAI,IAAA,CAAK,CAAA,oCAAA,EAAuC,SAAA,CAAU,SAAS,CAAA,CAAE,CAAA;AAAA,MACtE;AAAA,IACD,CAAA;AAEA,IAAA,OAAO,SAAA;AAAA,EACR;AAAA;AAAA;AAAA;AAAA,EAKQ,kBAAkB,EAAA,EAAoB;AAC7C,IAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,IAAA,KAAA,MAAW,KAAA,IAAS,IAAA,CAAK,cAAA,CAAe,MAAA,EAAO,EAAG;AACjD,MAAA,IAAI,KAAA,CAAM,aAAa,EAAA,EAAI,KAAA,EAAA;AAAA,IAC5B;AACA,IAAA,OAAO,KAAA;AAAA,EACR;AAAA;AAAA;AAAA;AAAA,EAKQ,YAAY,CAAA,EAET;AACV,IAAA,OACC,EAAE,GAAA,CAAI,MAAA,CAAO,iBAAiB,CAAA,EAAG,MAAM,GAAG,CAAA,CAAE,CAAC,CAAA,EAAG,MAAK,IACrD,CAAA,CAAE,GAAA,CAAI,MAAA,CAAO,WAAW,CAAA,IACxB,SAAA;AAAA,EAEF;AAAA;AAAA;AAAA;AAAA,EAKQ,iBAAA,GAA0B;AACjC,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,KAAA,MAAW,CAAC,SAAA,EAAW,KAAK,CAAA,IAAK,KAAK,cAAA,EAAgB;AACrD,MAAA,IAAI,GAAA,GAAM,KAAA,CAAM,YAAA,GAAe,IAAA,CAAK,gBAAA,EAAkB;AACrD,QAAA,GAAA,CAAI,IAAA,CAAK,CAAA,2CAAA,EAA8C,SAAS,CAAA,CAAE,CAAA;AAClE,QAAA,KAAA,CAAM,SAAA,CAAU,KAAA,EAAM,CAAE,KAAA,CAAM,MAAM;AAAA,QAEpC,CAAC,CAAA;AACD,QAAA,IAAA,CAAK,cAAA,CAAe,OAAO,SAAS,CAAA;AAAA,MACrC;AAAA,IACD;AAAA,EACD;AAAA,EAEQ,WAAA,GAAc;AACrB,IAAA,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,GAAA,EAAK,IAAA,EAAM,CAAA;AAGxB,IAAA,IAAI,CAAC,OAAA,CAAQ,GAAA,CAAI,gBAAA,EAAkB;AAClC,MAAA,OAAA,CAAQ,GAAA,CAAI,mBAAmB,UAAA,EAAW;AAC1C,MAAA,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,EAAE,CAAC,CAAA;AACvB,MAAA,GAAA,CAAI,KAAK,0DAAsC,CAAA;AAC/C,MAAA,GAAA,CAAI,KAAK,2CAA2C,CAAA;AACpD,MAAA,GAAA,CAAI,KAAK,+DAA+D,CAAA;AACxE,MAAA,GAAA,CAAI,IAAA,CAAK,CAAA,OAAA,EAAU,OAAA,CAAQ,GAAA,CAAI,gBAAgB,CAAA,CAAE,CAAA;AACjD,MAAA,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,EAAE,CAAC,CAAA;AAAA,IACxB;AAGA,IAAA,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,MAAA,EAAQ,OAAO,GAAG,IAAA,KAAS;AACvC,MAAA,MAAM,IAAA,GAAO,CAAA,CAAE,GAAA,CAAI,MAAA,CAAO,eAAe,CAAA;AACzC,MAAA,IAAI,CAAC,IAAA,EAAM,UAAA,CAAW,SAAS,CAAA,EAAG;AACjC,QAAA,OAAO,CAAA,CAAE,IAAA;AAAA,UACR,EAAE,OAAO,+CAAA,EAAgD;AAAA,UACzD;AAAA,SACD;AAAA,MACD;AAEA,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA;AAC1B,MAAA,MAAM,aAAA,GAAgB,QAAQ,GAAA,CAAI,gBAAA;AAGlC,MAAA,IAAI,aAAA,IAAiB,UAAU,aAAA,EAAe;AAC7C,QAAA,MAAM,IAAA,EAAK;AACX,QAAA;AAAA,MACD;AAGA,MAAA,MAAM,YAAA,GAAe,IAAA,CAAK,WAAA,CAAY,SAAA,EAAU,EAAG,YAAA;AACnD,MAAA,IAAI,YAAA,EAAc;AACjB,QAAA,IAAI;AACH,UAAA,MAAM,YAAA,CAAa,SAAS,KAAK,CAAA;AACjC,UAAA,MAAM,IAAA,EAAK;AACX,UAAA;AAAA,QACD,SAAS,CAAA,EAAY;AACpB,UAAA,GAAA,CAAI,IAAA;AAAA,YACH,CAAA,2CAAA,EAA+C,EAAY,OAAO,CAAA;AAAA,WACnE;AACA,UAAA,OAAO,CAAA,CAAE,IAAA;AAAA,YACR;AAAA,cACC,KAAA,EAAO,CAAA,sCAAA,EAA0C,CAAA,CAAY,OAAO,CAAA;AAAA,aACrE;AAAA,YACA;AAAA,WACD;AAAA,QACD;AAAA,MACD;AAEA,MAAA,GAAA,CAAI,IAAA;AAAA,QACH;AAAA,OACD;AACA,MAAA,OAAO,CAAA,CAAE,IAAA;AAAA,QACR,EAAE,OAAO,+CAAA,EAAgD;AAAA,QACzD;AAAA,OACD;AAAA,IACD,CAAC,CAAA;AAGD,IAAA,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,MAAA,EAAQ,OAAO,CAAA,KAAM;AACjC,MAAA,MAAM,SAAA,GAAY,CAAA,CAAE,GAAA,CAAI,MAAA,CAAO,gBAAgB,CAAA;AAG/C,MAAA,IAAI,SAAA,EAAW;AAEd,QAAA,IAAI,CAAC,0BAAA,EAA4B;AAChC,UAAA,OAAO,CAAA,CAAE,IAAA;AAAA,YACR;AAAA,cACC,KAAA,EACC;AAAA,aACF;AAAA,YACA;AAAA,WACD;AAAA,QACD;AAEA,QAAA,MAAM,QAAA,GAAW,IAAA,CAAK,cAAA,CAAe,GAAA,CAAI,SAAS,CAAA;AAClD,QAAA,IAAI,CAAC,QAAA,EAAU;AACd,UAAA,OAAO,EAAE,IAAA,CAAK,EAAE,KAAA,EAAO,mBAAA,IAAuB,GAAG,CAAA;AAAA,QAClD;AAEA,QAAA,QAAA,CAAS,YAAA,GAAe,KAAK,GAAA,EAAI;AAEjC,QAAA,MAAM,WAAW,MAAM,QAAA,CAAS,UAAU,aAAA,CAAc,CAAA,CAAE,IAAI,GAAG,CAAA;AAIjE,QAAA,IAAI,CAAA,CAAE,GAAA,CAAI,MAAA,KAAW,QAAA,EAAU;AAC9B,UAAA,IAAA,CAAK,cAAA,CAAe,OAAO,SAAS,CAAA;AACpC,UAAA,GAAA,CAAI,IAAA,CAAK,CAAA,6CAAA,EAAgD,SAAS,CAAA,CAAE,CAAA;AAAA,QACrE;AAEA,QAAA,OAAO,QAAA;AAAA,MACR;AAGA,MAAA,MAAM,WAAA,GAAc,CAAA,CAAE,GAAA,CAAI,MAAA,CAAO,cAAc,CAAA,IAAK,EAAA;AACpD,MAAA,IAAI,EAAE,GAAA,CAAI,MAAA,KAAW,UAAU,WAAA,CAAY,QAAA,CAAS,kBAAkB,CAAA,EAAG;AACxE,QAAA,IAAI;AACH,UAAA,MAAM,IAAA,GAAQ,MAAM,CAAA,CAAE,GAAA,CAAI,IAAA,EAAK;AAE/B,UAAA,IACC,KAAK,MAAA,KAAW,iBAAA,IACf,KAAK,MAAA,EAAoC,KAAA,IAC1C,CAAC,0BAAA,EACA;AACD,YAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,WAAA,CAAY,qBAAqB,IAAI,CAAA;AAC/D,YAAA,IAAI,WAAW,KAAA,CAAA,EAAW;AACzB,cAAA,OAAO,CAAA,CAAE,KAAK,MAAM,CAAA;AAAA,YACrB;AACA,YAAA,OAAO,CAAA,CAAE,IAAA,CAAK,IAAA,EAAM,GAAG,CAAA;AAAA,UACxB;AAAA,QACD,CAAA,CAAA,MAAQ;AAAA,QAER;AAAA,MACD;AAIA,MAAA,IAAI,CAAC,0BAAA,EAA4B;AAChC,QAAA,OAAO,CAAA,CAAE,IAAA;AAAA,UACR;AAAA,YACC,KAAA,EACC;AAAA,WACF;AAAA,UACA;AAAA,SACD;AAAA,MACD;AAEA,MAAA,MAAM,QAAA,GAAW,IAAA,CAAK,WAAA,CAAY,CAAC,CAAA;AACnC,MAAA,MAAM,eAAA,GAAkB,IAAA,CAAK,iBAAA,CAAkB,QAAQ,CAAA;AACvD,MAAA,IAAI,eAAA,IAAmB,KAAK,gBAAA,EAAkB;AAC7C,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,CAAA,2CAAA,EAA8C,QAAQ,CAAA,EAAA,EAAK,eAAe,CAAA,UAAA;AAAA,SAC3E;AACA,QAAA,OAAO,EAAE,IAAA,CAAK,EAAE,KAAA,EAAO,wCAAA,IAA4C,GAAG,CAAA;AAAA,MACvE;AAEA,MAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,sBAAA,CAAuB,QAAQ,CAAA;AAC5D,MAAA,OAAO,MAAM,SAAA,CAAU,aAAA,CAAc,CAAA,CAAE,IAAI,GAAG,CAAA;AAAA,IAC/C,CAAC,CAAA;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAa,MAAM,IAAA,EAA8B;AAChD,IAAA,MAAM,UAAA,GAAa,IAAA,IAAQ,IAAA,CAAK,OAAA,CAAQ,IAAA,IAAQ,GAAA;AAGhD,IAAA,IAAA,CAAK,aAAA,GAAgB,WAAA;AAAA,MACpB,MAAM,KAAK,iBAAA,EAAkB;AAAA,MAC7B;AAAA,KACD;AAEA,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY;AAC/B,MAAA,IAAA,CAAK,UAAA,GAAa,KAAA;AAAA,QACjB;AAAA,UACC,KAAA,EAAO,KAAK,GAAA,CAAI,KAAA;AAAA,UAChB,IAAA,EAAM;AAAA,SACP;AAAA,QACA,CAAC,IAAA,KAAS;AACT,UAAA,GAAA,CAAI,IAAA;AAAA,YACH,CAAA,gEAAA,EAAmE,KAAK,IAAI,CAAA,IAAA;AAAA,WAC7E;AACA,UAAA,OAAA,EAAQ;AAAA,QACT;AAAA,OACD;AAAA,IACD,CAAC,CAAA;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAa,IAAA,GAAsB;AAClC,IAAA,IAAI,KAAK,aAAA,EAAe;AACvB,MAAA,aAAA,CAAc,KAAK,aAAa,CAAA;AAChC,MAAA,IAAA,CAAK,aAAA,GAAgB,IAAA;AAAA,IACtB;AAEA,IAAA,KAAA,MAAW,CAAC,EAAA,EAAI,KAAK,CAAA,IAAK,KAAK,cAAA,EAAgB;AAC9C,MAAA,MAAM,KAAA,CAAM,UAAU,KAAA,EAAM;AAC5B,MAAA,IAAA,CAAK,cAAA,CAAe,OAAO,EAAE,CAAA;AAAA,IAC9B;AAEA,IAAA,IAAI,KAAK,UAAA,EAAY;AACpB,MAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AACtB,MAAA,GAAA,CAAI,KAAK,0CAA0C,CAAA;AAAA,IACpD;AAAA,EACD;AACD;;;AC7UO,IAAM,gBAAN,MAAoB;AAAA,EAG1B,WAAA,CAEC,MAAA,EACQ,OAAA,GAA6B,EAAC,EACrC;AADO,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAIR,IAAA,IAAI,MAAA,EAAQ,WAAA,EAAa,IAAA,KAAS,YAAA,EAAc;AAC/C,MAAA,IAAA,CAAK,UAAA,GAAa,MAAA;AAClB,MAAA,GAAA,CAAI,KAAK,gDAAgD,CAAA;AAAA,IAC1D,CAAA,MAAA,IAAW,MAAA,EAAQ,WAAA,EAAa,IAAA,KAAS,WAAA,EAAa;AACrD,MAAA,IAAA,CAAK,eAAA,GAAkB,MAAA;AACvB,MAAA,GAAA,CAAI,KAAK,oDAAoD,CAAA;AAAA,IAC9D,CAAA,MAAO;AAEN,MAAA,IAAA,CAAK,eAAA,GAAkB,MAAA;AACvB,MAAA,GAAA,CAAI,KAAK,6DAA6D,CAAA;AAAA,IACvE;AAAA,EACD;AAAA,EAfS,OAAA;AAAA,EALD,UAAA,GAAgC,IAAA;AAAA,EAChC,eAAA,GAAoC,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAyB5C,MAAa,qBACZ,OAAA,EACmB;AACnB,IAAA,MAAM,KAAK,OAAA,CAAQ,EAAA;AACnB,IAAA,MAAM,SAAS,OAAA,CAAQ,MAAA;AACvB,IAAA,MAAM,SAAS,OAAA,CAAQ,MAAA;AAEvB,IAAA,IAAI,OAAA,CAAQ,YAAY,KAAA,EAAO;AAC9B,MAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,MAAA,EAAQ,iBAAiB,CAAA;AAAA,IACxD;AAGA,IAAA,IAAI,KAAK,UAAA,EAAY;AACpB,MAAA,OAAO,IAAA,CAAK,eAAA,CAAgB,EAAA,EAAI,MAAA,EAAQ,MAAM,CAAA;AAAA,IAC/C;AAGA,IAAA,IAAI,IAAA,CAAK,eAAA,IAAmB,IAAA,CAAK,UAAA,EAAY;AAC5C,MAAA,OAAO,IAAA,CAAK,eAAA,CAAgB,EAAA,EAAI,MAAA,EAAQ,MAAM,CAAA;AAAA,IAC/C;AAEA,IAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,MAAA,EAAQ,8BAA8B,CAAA;AAAA,EACrE;AAAA,EAEA,MAAc,eAAA,CACb,EAAA,EACA,MAAA,EACA,MAAA,EACmB;AACnB,IAAA,IAAI,CAAC,IAAA,CAAK,UAAA,EAAY,OAAO,IAAA;AAE7B,IAAA,MAAM,WACL,0BAAA,IAA8B,eAAA,CAAgB,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAI,CAAA;AAErE,IAAA,IAAI,WAAW,YAAA,EAAc;AAE5B,MAAA,IAAI,CAAC,0BAAA,EAA4B;AAChC,QAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,MAAA,EAAQ,4BAA4B,CAAA;AAAA,MACnE;AACA,MAAA,OAAO,IAAA,CAAK,gBAAgB,EAAA,EAAI;AAAA,QAC/B,eAAA,EAAiB,2BAAA;AAAA,QACjB,YAAA,EAAc;AAAA,UACb,OAAA,EAAS,EAAE,WAAA,EAAa,IAAA,EAAK;AAAA,UAC7B,SAAA,EAAW,EAAE,WAAA,EAAa,IAAA,EAAK;AAAA,UAC/B,KAAA,EAAO,EAAE,WAAA,EAAa,IAAA;AAAK,SAC5B;AAAA,QACA,UAAA,EAAY,IAAA,CAAK,UAAA,CAAW,aAAA;AAAc,OAC1C,CAAA;AAAA,IACF;AAEA,IAAA,IAAI,WAAW,iBAAA,EAAmB;AACjC,MAAA,OAAO,IAAA,CAAK,gBAAgB,EAAA,EAAI;AAAA,QAC/B,UAAA,EAAY,UAAA;AAAA,QACZ,mBAAmB,0BAAA,GAChB,CAAC,sBAAsB,2BAA2B,CAAA,GAClD,CAAC,oBAAoB,CAAA;AAAA,QACxB,YAAA,EAAc;AAAA,UACb,OAAA,EAAS,EAAE,WAAA,EAAa,IAAA,EAAK;AAAA,UAC7B,SAAA,EAAW,EAAE,WAAA,EAAa,IAAA,EAAK;AAAA,UAC/B,KAAA,EAAO,EAAE,WAAA,EAAa,IAAA;AAAK,SAC5B;AAAA,QACA,UAAA,EAAY,IAAA,CAAK,UAAA,CAAW,aAAA;AAAc,OAC1C,CAAA;AAAA,IACF;AAEA,IAAA,IAAI,MAAA,KAAW,6BAA6B,OAAO,MAAA;AACnD,IAAA,IAAI,WAAW,MAAA,EAAQ,OAAO,KAAK,eAAA,CAAgB,EAAA,EAAI,EAAE,CAAA;AAEzD,IAAA,IAAI,WAAW,YAAA,EAAc;AAC5B,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,UAAA,CACjB,SAAA,GACA,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,IAAA,CAAK,aAAA,CAAc,CAAA,CAAE,IAAI,CAAC,CAAA;AAC7C,MAAA,OAAO,IAAA,CAAK,eAAA;AAAA,QACX,EAAA;AAAA,QACA,QAAA,GACG,EAAE,KAAA,EAAM,GACR;AAAA,UACA,UAAA,EAAY,UAAA;AAAA,UACZ,KAAA,EAAO,GAAA;AAAA,UACP,UAAA,EAAY,QAAA;AAAA,UACZ;AAAA;AACD,OACH;AAAA,IACD;AAEA,IAAA,IAAI,WAAW,gBAAA,EAAkB;AAChC,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,UAAA,CACrB,aAAA,GACA,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,GAAA,CAAI,aAAA,CAAc,CAAA,CAAE,GAAG,CAAC,CAAA;AAC3C,MAAA,OAAO,IAAA,CAAK,eAAA;AAAA,QACX,EAAA;AAAA,QACA,QAAA,GACG,EAAE,SAAA,EAAU,GACZ;AAAA,UACA,UAAA,EAAY,UAAA;AAAA,UACZ,KAAA,EAAO,GAAA;AAAA,UACP,UAAA,EAAY,QAAA;AAAA,UACZ;AAAA;AACD,OACH;AAAA,IACD;AAEA,IAAA,IAAI,WAAW,cAAA,EAAgB;AAC9B,MAAA,MAAM,OAAA,GAAU,IAAA,CAAK,UAAA,CACnB,WAAA,GACA,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,IAAA,CAAK,aAAA,CAAc,CAAA,CAAE,IAAI,CAAC,CAAA;AAC7C,MAAA,OAAO,IAAA,CAAK,eAAA;AAAA,QACX,EAAA;AAAA,QACA,QAAA,GACG,EAAE,OAAA,EAAQ,GACV;AAAA,UACA,UAAA,EAAY,UAAA;AAAA,UACZ,KAAA,EAAO,GAAA;AAAA,UACP,UAAA,EAAY,QAAA;AAAA,UACZ;AAAA;AACD,OACH;AAAA,IACD;AAEA,IAAA,IAAI,WAAW,aAAA,EAAe;AAC7B,MAAA,IAAI,CAAC,QAAQ,IAAA,EAAM;AAClB,QAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,MAAA,EAAQ,qBAAqB,CAAA;AAAA,MAC5D;AACA,MAAA,IAAI;AACH,QAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,UAAA,CAAW,SAAA,CAAU;AAAA,UAC9C,MAAM,MAAA,CAAO,IAAA;AAAA,UACb,WAAW,MAAA,CAAO;AAAA,SAClB,CAAA;AACD,QAAA,OAAO,IAAA,CAAK,eAAA;AAAA,UACX,EAAA;AAAA,UACA,QAAA,IAAY,OAAO,MAAA,KAAW,QAAA,IAAY,MAAA,KAAW,IAAA,GAClD,MAAA,GACA,EAAE,UAAA,EAAY,UAAA,EAAY,GAAG,MAAA;AAAO,SACxC;AAAA,MACD,SAAS,GAAA,EAAc;AACtB,QAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,KAAA,EAAS,IAAc,OAAO,CAAA;AAAA,MAC7D;AAAA,IACD;AAEA,IAAA,IAAI,WAAW,gBAAA,EAAkB;AAChC,MAAA,IAAI,CAAC,QAAQ,GAAA,EAAK;AACjB,QAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,MAAA,EAAQ,sBAAsB,CAAA;AAAA,MAC7D;AACA,MAAA,IAAI;AACH,QAAA,MAAM,SAAS,MAAM,IAAA,CAAK,UAAA,CAAW,YAAA,CAAa,OAAO,GAAa,CAAA;AACtE,QAAA,OAAO,IAAA,CAAK,eAAA;AAAA,UACX,EAAA;AAAA,UACA,WACG,MAAA,GACA,OAAO,MAAA,KAAW,QAAA,IAAY,WAAW,IAAA,GACxC;AAAA,YACA,UAAA,EAAY,UAAA;AAAA,YACZ,KAAA,EAAO,GAAA;AAAA,YACP,UAAA,EAAY,SAAA;AAAA,YACZ,GAAG;AAAA,WACJ,GACC;AAAA,YACA,UAAA,EAAY,UAAA;AAAA,YACZ,KAAA,EAAO,GAAA;AAAA,YACP,UAAA,EAAY,SAAA;AAAA,YACZ,QAAA,EAAU;AAAA;AACX,SACJ;AAAA,MACD,SAAS,GAAA,EAAc;AACtB,QAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,KAAA,EAAS,IAAc,OAAO,CAAA;AAAA,MAC7D;AAAA,IACD;AAEA,IAAA,IAAI,WAAW,YAAA,EAAc;AAC5B,MAAA,IAAI,CAAC,QAAQ,IAAA,EAAM;AAClB,QAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,MAAA,EAAQ,mBAAmB,CAAA;AAAA,MAC1D;AACA,MAAA,MAAM,OAAA,GAA2B;AAAA,QAChC,MAAM,MAAA,CAAO,IAAA;AAAA,QACb,SAAA,EAAY,MAAA,CAAO,SAAA,IAAyC;AAAC,OAC9D;AAEA,MAAA,IAAI;AACH,QAAA,MAAM,MAAA,GAAyB,MAAM,IAAA,CAAK,UAAA,CAAW,SAAS,OAAO,CAAA;AAGrE,QAAA,MAAM,UAAA,GAAa,OAAO,OAAA,GACvB,IAAA,GACA,MAAM,IAAA,CAAK,eAAA,CAAgB,SAAS,MAAM,CAAA;AAE7C,QAAA,IAAI,CAAC,UAAA,EAAY;AAChB,UAAA,OAAO,IAAA,CAAK,gBAAgB,EAAA,EAAI;AAAA,YAC/B,OAAA,EAAS;AAAA,cACR;AAAA,gBACC,IAAA,EAAM,MAAA;AAAA,gBACN,IAAA,EAAM;AAAA;AACP,aACD;AAAA,YACA,OAAA,EAAS;AAAA,WACT,CAAA;AAAA,QACF;AAEA,QAAA,OAAO,IAAA,CAAK,eAAA;AAAA,UACX,EAAA;AAAA,UACA,WACG,MAAA,GACA;AAAA,YACA,UAAA,EAAY,UAAA;AAAA,YACZ,GAAG;AAAA;AACJ,SACH;AAAA,MACD,SAAS,GAAA,EAAc;AACtB,QAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,KAAA,EAAS,IAAc,OAAO,CAAA;AAAA,MAC7D;AAAA,IACD;AAEA,IAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,MAAA,EAAQ,kBAAkB,CAAA;AAAA,EACzD;AAAA,EAEQ,eAAA,CACP,IACA,MAAA,EACC;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,EAAA,EAAI,MAAA,EAAO;AAAA,EACrC;AAAA,EAEQ,aAAA,CAAc,EAAA,EAAqB,IAAA,EAAc,OAAA,EAAiB;AACzE,IAAA,OAAO,EAAE,SAAS,KAAA,EAAO,EAAA,EAAI,OAAO,EAAE,IAAA,EAAM,SAAQ,EAAE;AAAA,EACvD;AAAA,EAEA,MAAc,eAAA,CACb,OAAA,EACA,MAAA,EACmB;AACnB,IAAA,IACC,CAAC,QAAQ,SAAA,EAAW,OAAA,IACpB,OAAO,OAAA,CAAQ,SAAA,CAAU,YAAY,QAAA,EACpC;AACD,MAAA,OAAO,IAAA;AAAA,IACR;AAEA,IAAA,IAAI;AACH,MAAA,MAAM,OAAA,GAAU,QAAQ,SAAA,CAAU,OAAA;AAClC,MAAA,MAAM,WAAA,GAAc,MAAA,CAAO,OAAA,CAAQ,CAAC,CAAA,EAAG,IAAA;AAEvC,MAAA,IAAI,WAAA,IAAe,OAAO,WAAA,KAAgB,QAAA,EAAU;AACnD,QAAA,IAAI;AACH,UAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,WAAW,CAAA;AAEnC,UAAA,IAAI,IAAA,CAAK,QAAA,IAAY,IAAA,CAAK,UAAA,EAAY;AAErC,YAAA,MAAM,EAAE,YAAA,EAAa,GAAI,MAAM,OAAO,wBAAuB,CAAA;AAC7D,YAAA,MAAM,QAAA,GAAW,IAAI,YAAA,EAAa;AAGlC,YAAA,MAAM,WAAA,GAAc,MAAM,QAAA,CAAS,eAAA;AAAA,cAClC,MAAA,CAAO,IAAA,CAAK,OAAA,EAAS,OAAO,CAAA;AAAA,cAC5B,IAAA,CAAK,QAAA;AAAA,cACL,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,UAAA,IAAc,IAAI,QAAQ,CAAA;AAAA,cAC3C,KAAA,CAAA;AAAA,cACA,IAAA,CAAK;AAAA,aACN;AAEA,YAAA,IAAI,CAAC,WAAA,EAAa;AACjB,cAAA,OAAO,KAAA;AAAA,YACR;AAEA,YAAA,IAAA,CAAK,YAAA,GACJ,yEAAA;AACD,YAAA,MAAA,CAAO,QAAQ,CAAC,CAAA,CAAE,IAAA,GAAO,IAAA,CAAK,UAAU,IAAI,CAAA;AAAA,UAC7C;AAAA,QACD,CAAA,CAAA,MAAQ;AAAA,QAER;AAAA,MACD;AACA,MAAA,OAAO,IAAA;AAAA,IACR,SAAS,CAAA,EAAG;AACX,MAAA,GAAA,CAAI,IAAA,CAAK,sCAAsC,CAAC,CAAA;AAChD,MAAA,OAAO,KAAA;AAAA,IACR;AAAA,EACD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAa,OAAA,GAAyB;AAErC,IAAA,IAAI,KAAK,eAAA,EAAiB;AACzB,MAAA,MAAM,EAAE,UAAA,EAAW,GAAI,MAAM,OAAO,aAAoB,CAAA;AACxD,MAAA,IAAA,CAAK,aAAa,IAAI,UAAA;AAAA,QACrB,IAAA,CAAK,QAAQ,UAAA,IAAc;AAAA,UAC1B,IAAA,EAAM,aAAA;AAAA,UACN,OAAA,EAAS;AAAA,SACV;AAAA,QACA,EAAE,QAAA,EAAU,IAAA,CAAK,OAAA,CAAQ,QAAA;AAAS,OACnC;AAEA,MAAA,IAAI,IAAA,CAAK,QAAQ,aAAA,EAAe;AAC/B,QAAA,MAAM,IAAA,CAAK,WAAW,OAAA,EAAQ;AAI9B,QAAA,MAAM,SAAS,IAAA,CAAK,eAAA;AAGpB,QAAA,IAAI,OAAO,gBAAA,EAAkB;AAC5B,UAAA,KAAA,MAAW,CAAC,MAAM,IAAI,CAAA,IAAK,OAAO,OAAA,CAAQ,MAAA,CAAO,gBAAgB,CAAA,EAAG;AAEnE,YAAA,MAAM,CAAA,GAAI,IAAA;AACV,YAAA,IAAA,CAAK,UAAA,CAAW,IAAA;AAAA,cACf,IAAA;AAAA,cACA,EAAE,WAAA,IAAe,EAAA;AAAA,cACjB,CAAA,CAAE,eAAe,EAAC;AAAA;AAAA,cAElB,OAAO,IAAA,KAAc;AACpB,gBAAA,OAAO,MAAM,CAAA,CAAE,OAAA,CAAQ,IAAI,CAAA;AAAA,cAC5B;AAAA,aACD;AAAA,UACD;AAAA,QACD;AAGA,QAAA,IAAI,OAAO,oBAAA,EAAsB;AAChC,UAAA,KAAA,MAAW,CAAC,GAAA,EAAK,QAAQ,CAAA,IAAK,MAAA,CAAO,OAAA;AAAA,YACpC,MAAA,CAAO;AAAA,WACR,EAAG;AAEF,YAAA,MAAM,CAAA,GAAI,QAAA;AACV,YAAA,IAAA,CAAK,UAAA,CAAW,QAAA;AAAA,cACf,CAAA,CAAE,IAAA;AAAA,cACF,GAAA;AAAA,cACA,CAAA,CAAE,UAAU,WAAA,IAAe,EAAA;AAAA,cAC3B,CAAA,CAAE,UAAU,QAAA,IAAY,0BAAA;AAAA,cACxB,YAAY;AACX,gBAAA,MAAM,MAAM,MAAM,CAAA,CAAE,aAAa,IAAI,GAAA,CAAI,GAAG,CAAC,CAAA;AAC7C,gBAAA,OAAO,GAAA,CAAI,QAAA,CAAS,CAAC,CAAA,CAAE,IAAA;AAAA,cACxB;AAAA,aACD;AAAA,UACD;AAAA,QACD;AAAA,MACD;AACA,MAAA;AAAA,IACD;AAGA,IAAA,MAAM,QAAA,GAAW,MAAM,OAAO,UAAe,CAAA;AAC7C,IAAA,MAAM,EAAA,GAAK,SAAS,eAAA,CAAgB;AAAA,MACnC,OAAO,OAAA,CAAQ,KAAA;AAAA,MACf,QAAQ,OAAA,CAAQ,MAAA;AAAA,MAChB,QAAA,EAAU;AAAA,KACV,CAAA;AAED,IAAA,MAAM,WAAW,YAAY;AAC5B,MAAA,GAAA,CAAI,KAAK,wCAAwC,CAAA;AACjD,MAAA,IAAI,IAAA,CAAK,UAAA,EAAY,MAAM,IAAA,CAAK,WAAW,KAAA,EAAM;AACjD,MAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,IACf,CAAA;AAEA,IAAA,EAAA,CAAG,EAAA,CAAG,SAAS,QAAQ,CAAA;AACvB,IAAA,OAAA,CAAQ,EAAA,CAAG,UAAU,QAAQ,CAAA;AAC7B,IAAA,OAAA,CAAQ,EAAA,CAAG,WAAW,QAAQ,CAAA;AAE9B,IAAA,EAAA,CAAG,EAAA,CAAG,MAAA,EAAQ,OAAO,IAAA,KAAS;AAC7B,MAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAK,EAAG;AAClB,MAAA,IAAI;AACH,QAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC/B,QAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,oBAAA,CAAqB,OAAO,CAAA;AACxD,QAAA,IAAI,QAAA,EAAU;AACb,UAAA,OAAA,CAAQ,OAAO,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,SAAA,CAAU,QAAQ,CAAC;AAAA,CAAI,CAAA;AAAA,QACrD;AAAA,MACD,SAAS,CAAA,EAAY;AACpB,QAAA,GAAA,CAAI,KAAA,CAAM,CAAA,qBAAA,EAAyB,CAAA,CAAY,OAAO,CAAA,CAAE,CAAA;AAAA,MACzD;AAAA,IACD,CAAC,CAAA;AAAA,EACF;AAAA,EAEO,SAAA,GAA+B;AACrC,IAAA,OAAO,IAAA,CAAK,UAAA;AAAA,EACb;AACD","file":"chunk-BOISQ45Z.js","sourcesContent":["// Copyright 2026 Nekzus Solutions and contributors\n// SPDX-License-Identifier: Apache-2.0\n\nimport { randomUUID } from \"node:crypto\";\nimport { serve } from \"@hono/node-server\";\nimport type { WebStandardStreamableHTTPServerTransport } from \"@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js\";\nimport type { JSONRPCMessage } from \"@modelcontextprotocol/sdk/types.js\";\nimport { Hono } from \"hono\";\nimport { cors } from \"hono/cors\";\nimport { MCP_LEGACY_SUPPORT_ENABLED } from \"../gateway/mcp-compat.js\";\nimport type { LiopServer } from \"../server/index.js\";\nimport { log } from \"../utils/logger.js\";\nimport { LiopMcpBridge } from \"./index.js\";\n\n/**\n * Configuration options for LiopStreamBridge.\n */\nexport interface LiopStreamBridgeOptions {\n\t/** Port to listen on (default: 3000) */\n\tport?: number;\n\t/** Max concurrent sessions per IP (default: 5) */\n\tmaxSessionsPerIp?: number;\n\t/** Session idle timeout in milliseconds (default: 30 min) */\n\tsessionTimeoutMs?: number;\n}\n\n/**\n * @mcp-legacy Internal metadata for tracked legacy sessions (2025-era).\n * Remove when v1 EOL.\n */\ninterface SessionEntry {\n\ttransport: WebStandardStreamableHTTPServerTransport;\n\tlastActivity: number;\n\tclientIp: string;\n}\n\nconst DEFAULT_MAX_SESSIONS_PER_IP = 10;\nconst DEFAULT_SESSION_TIMEOUT_MS = 30 * 60 * 1000; // 30 minutes\nconst EVICTION_INTERVAL_MS = 60 * 1000; // Check every minute\n\n/**\n * LiopStreamBridge\n *\n * Exposes a LiopServer over a remote HTTP network using the industry-standard\n * MCP Streamable HTTP Transport + Hono JS.\n *\n * Supports concurrent multi-client connections via per-session transport instances (Map pattern).\n * External agents connect using only a URL + Bearer Token (Zero-Trust).\n *\n * Security hardening:\n * - Zero-Trust Bearer Token enforcement\n * - Per-IP rate limiting on session creation\n * - Automatic eviction of idle sessions (TTL)\n */\nexport class LiopStreamBridge {\n\tprivate app: Hono;\n\tprivate httpServer: ReturnType<typeof serve> | null = null;\n\tprivate bridgeLogic: LiopMcpBridge;\n\tprivate activeSessions: Map<string, SessionEntry>;\n\tprivate evictionTimer: ReturnType<typeof setInterval> | null = null;\n\tprivate maxSessionsPerIp: number;\n\tprivate sessionTimeoutMs: number;\n\n\tconstructor(\n\t\tinternalServer: LiopServer,\n\t\tprivate options: LiopStreamBridgeOptions = {},\n\t) {\n\t\tthis.app = new Hono();\n\t\tthis.bridgeLogic = new LiopMcpBridge(internalServer);\n\t\tthis.activeSessions = new Map();\n\t\tthis.maxSessionsPerIp =\n\t\t\toptions.maxSessionsPerIp ?? DEFAULT_MAX_SESSIONS_PER_IP;\n\t\tthis.sessionTimeoutMs =\n\t\t\toptions.sessionTimeoutMs ?? DEFAULT_SESSION_TIMEOUT_MS;\n\n\t\tthis.setupRoutes();\n\t}\n\n\t/**\n\t * Creates a new per-session transport instance and wires it to the LIOPMcpBridge logic.\n\t */\n\tprivate async createSessionTransport(\n\t\tclientIp: string,\n\t): Promise<WebStandardStreamableHTTPServerTransport> {\n\t\tconst { WebStandardStreamableHTTPServerTransport } = await import(\n\t\t\t\"@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js\"\n\t\t);\n\t\tconst transport = new WebStandardStreamableHTTPServerTransport({\n\t\t\tsessionIdGenerator: () => randomUUID(),\n\t\t\tonsessioninitialized: (sessionId: string) => {\n\t\t\t\tthis.activeSessions.set(sessionId, {\n\t\t\t\t\ttransport,\n\t\t\t\t\tlastActivity: Date.now(),\n\t\t\t\t\tclientIp,\n\t\t\t\t});\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-StreamBridge] Session opened: ${sessionId} (IP: ${clientIp})`,\n\t\t\t\t);\n\t\t\t},\n\t\t});\n\n\t\t// Wire the transport's incoming messages to the LiopMcpBridge JSON-RPC router\n\t\ttransport.onmessage = async (message: JSONRPCMessage) => {\n\t\t\t// Touch activity timestamp on every message\n\t\t\tif (transport.sessionId) {\n\t\t\t\tconst entry = this.activeSessions.get(transport.sessionId);\n\t\t\t\tif (entry) entry.lastActivity = Date.now();\n\t\t\t}\n\n\t\t\ttry {\n\t\t\t\tconst result = await this.bridgeLogic.handleJsonRpcRequest(\n\t\t\t\t\tmessage as unknown as Record<string, unknown>,\n\t\t\t\t);\n\t\t\t\t// Notifications return undefined — no response needed\n\t\t\t\tif (result !== undefined) {\n\t\t\t\t\tawait transport.send(result as JSONRPCMessage);\n\t\t\t\t}\n\t\t\t} catch (err: unknown) {\n\t\t\t\tlog.info(\"[LIOP-StreamBridge] JSON-RPC error:\", (err as Error).message);\n\t\t\t}\n\t\t};\n\n\t\ttransport.onclose = () => {\n\t\t\tif (transport.sessionId) {\n\t\t\t\tthis.activeSessions.delete(transport.sessionId);\n\t\t\t\tlog.info(`[LIOP-StreamBridge] Session closed: ${transport.sessionId}`);\n\t\t\t}\n\t\t};\n\n\t\treturn transport;\n\t}\n\n\t/**\n\t * Returns the number of active sessions for a given IP.\n\t */\n\tprivate countSessionsByIp(ip: string): number {\n\t\tlet count = 0;\n\t\tfor (const entry of this.activeSessions.values()) {\n\t\t\tif (entry.clientIp === ip) count++;\n\t\t}\n\t\treturn count;\n\t}\n\n\t/**\n\t * Extracts client IP from the request (supports X-Forwarded-For for reverse proxies).\n\t */\n\tprivate getClientIp(c: {\n\t\treq: { header: (name: string) => string | undefined };\n\t}): string {\n\t\treturn (\n\t\t\tc.req.header(\"x-forwarded-for\")?.split(\",\")[0]?.trim() ||\n\t\t\tc.req.header(\"x-real-ip\") ||\n\t\t\t\"unknown\"\n\t\t);\n\t}\n\n\t/**\n\t * Evicts sessions that have been idle longer than the configured timeout.\n\t */\n\tprivate evictIdleSessions(): void {\n\t\tconst now = Date.now();\n\t\tfor (const [sessionId, entry] of this.activeSessions) {\n\t\t\tif (now - entry.lastActivity > this.sessionTimeoutMs) {\n\t\t\t\tlog.info(`[LIOP-StreamBridge] Evicting idle session: ${sessionId}`);\n\t\t\t\tentry.transport.close().catch(() => {\n\t\t\t\t\t/* Swallow close errors */\n\t\t\t\t});\n\t\t\t\tthis.activeSessions.delete(sessionId);\n\t\t\t}\n\t\t}\n\t}\n\n\tprivate setupRoutes() {\n\t\tthis.app.use(\"*\", cors());\n\n\t\t// Initialize strict zero-trust token if not provided\n\t\tif (!process.env.ZERO_TRUST_TOKEN) {\n\t\t\tprocess.env.ZERO_TRUST_TOKEN = randomUUID();\n\t\t\tlog.info(\"=\".repeat(60));\n\t\t\tlog.info(\"⚠️ STRICT ZERO-TRUST MODE ENABLED ⚠️\");\n\t\t\tlog.info(\"No ZERO_TRUST_TOKEN found in environment.\");\n\t\t\tlog.info(\"A secure ephemeral token has been generated for this session:\");\n\t\t\tlog.info(`Token: ${process.env.ZERO_TRUST_TOKEN}`);\n\t\t\tlog.info(\"=\".repeat(60));\n\t\t}\n\n\t\t// ZTA (Zero-Trust Architecture) Security Middleware\n\t\tthis.app.use(\"/mcp\", async (c, next) => {\n\t\t\tconst auth = c.req.header(\"Authorization\");\n\t\t\tif (!auth?.startsWith(\"Bearer \")) {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{ error: \"Unauthorized: LIOP Zero-Trust Policy Enforced\" },\n\t\t\t\t\t401,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tconst token = auth.slice(7);\n\t\t\tconst expectedToken = process.env.ZERO_TRUST_TOKEN;\n\n\t\t\t// Check static token fallback first (retrocompatibility)\n\t\t\tif (expectedToken && token === expectedToken) {\n\t\t\t\tawait next();\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\t// Validate with JWT Validator if configured on the server\n\t\t\tconst jwtValidator = this.bridgeLogic.getServer()?.jwtValidator;\n\t\t\tif (jwtValidator) {\n\t\t\t\ttry {\n\t\t\t\t\tawait jwtValidator.validate(token);\n\t\t\t\t\tawait next();\n\t\t\t\t\treturn;\n\t\t\t\t} catch (e: unknown) {\n\t\t\t\t\tlog.info(\n\t\t\t\t\t\t`[LIOP-StreamBridge] JWT Validation failed: ${(e as Error).message}`,\n\t\t\t\t\t);\n\t\t\t\t\treturn c.json(\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\terror: `Unauthorized: JWT Validation failed - ${(e as Error).message}`,\n\t\t\t\t\t\t},\n\t\t\t\t\t\t401,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tlog.info(\n\t\t\t\t\"[LIOP-StreamBridge] ALERT: Access denied - Invalid Zero-Trust token.\",\n\t\t\t);\n\t\t\treturn c.json(\n\t\t\t\t{ error: \"Unauthorized: LIOP Zero-Trust Policy Enforced\" },\n\t\t\t\t401,\n\t\t\t);\n\t\t});\n\n\t\t// MCP Streamable HTTP & Stateless Handler\n\t\tthis.app.all(\"/mcp\", async (c) => {\n\t\t\tconst sessionId = c.req.header(\"mcp-session-id\");\n\n\t\t\t// Route to existing session if legacy session ID is present\n\t\t\tif (sessionId) {\n\t\t\t\t/** @mcp-legacy Route to session if legacy session ID present. Remove when v1 EOL. */\n\t\t\t\tif (!MCP_LEGACY_SUPPORT_ENABLED) {\n\t\t\t\t\treturn c.json(\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\terror:\n\t\t\t\t\t\t\t\t\"Session-based routing is retired. Use stateless MCP 2026-07-28 requests.\",\n\t\t\t\t\t\t},\n\t\t\t\t\t\t404,\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\tconst existing = this.activeSessions.get(sessionId);\n\t\t\t\tif (!existing) {\n\t\t\t\t\treturn c.json({ error: \"Session not found\" }, 404);\n\t\t\t\t}\n\t\t\t\t// Touch activity on every routed request\n\t\t\t\texisting.lastActivity = Date.now();\n\n\t\t\t\tconst response = await existing.transport.handleRequest(c.req.raw);\n\n\t\t\t\t// If DELETE, the transport closes internally but onclose may not fire.\n\t\t\t\t// Explicitly clean up the session from the Map.\n\t\t\t\tif (c.req.method === \"DELETE\") {\n\t\t\t\t\tthis.activeSessions.delete(sessionId);\n\t\t\t\t\tlog.info(`[LIOP-StreamBridge] Session closed (DELETE): ${sessionId}`);\n\t\t\t\t}\n\n\t\t\t\treturn response;\n\t\t\t}\n\n\t\t\t// Stateless direct JSON-RPC POST (MCP v2 modern era)\n\t\t\tconst contentType = c.req.header(\"content-type\") || \"\";\n\t\t\tif (c.req.method === \"POST\" && contentType.includes(\"application/json\")) {\n\t\t\t\ttry {\n\t\t\t\t\tconst body = (await c.req.json()) as Record<string, unknown>;\n\t\t\t\t\t// If this is a modern request or non-session JSON-RPC\n\t\t\t\t\tif (\n\t\t\t\t\t\tbody.method === \"server/discover\" ||\n\t\t\t\t\t\t(body.params as Record<string, unknown>)?._meta ||\n\t\t\t\t\t\t!MCP_LEGACY_SUPPORT_ENABLED\n\t\t\t\t\t) {\n\t\t\t\t\t\tconst result = await this.bridgeLogic.handleJsonRpcRequest(body);\n\t\t\t\t\t\tif (result !== undefined) {\n\t\t\t\t\t\t\treturn c.json(result);\n\t\t\t\t\t\t}\n\t\t\t\t\t\treturn c.body(null, 204);\n\t\t\t\t\t}\n\t\t\t\t} catch {\n\t\t\t\t\t// Fall through to legacy transport if JSON parsing fails or payload is streaming handshake\n\t\t\t\t}\n\t\t\t}\n\n\t\t\t// No session ID → Legacy Client initializing via WebStandardStreamableHTTPServerTransport\n\t\t\t/** @mcp-legacy Create legacy session transport. Remove when v1 EOL. */\n\t\t\tif (!MCP_LEGACY_SUPPORT_ENABLED) {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{\n\t\t\t\t\t\terror:\n\t\t\t\t\t\t\t\"Stateless MCP 2026-07-28 is active. Direct JSON-RPC POST required.\",\n\t\t\t\t\t},\n\t\t\t\t\t400,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tconst clientIp = this.getClientIp(c);\n\t\t\tconst currentSessions = this.countSessionsByIp(clientIp);\n\t\t\tif (currentSessions >= this.maxSessionsPerIp) {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-StreamBridge] Rate limit hit for IP: ${clientIp} (${currentSessions} sessions)`,\n\t\t\t\t);\n\t\t\t\treturn c.json({ error: \"Too Many Sessions: Rate limit exceeded\" }, 429);\n\t\t\t}\n\n\t\t\tconst transport = await this.createSessionTransport(clientIp);\n\t\t\treturn await transport.handleRequest(c.req.raw);\n\t\t});\n\t}\n\n\t/**\n\t * Starts the LiopStreamBridge HTTP server and session eviction timer.\n\t */\n\tpublic async start(port?: number): Promise<void> {\n\t\tconst listenPort = port ?? this.options.port ?? 3000;\n\n\t\t// Start the idle session eviction timer\n\t\tthis.evictionTimer = setInterval(\n\t\t\t() => this.evictIdleSessions(),\n\t\t\tEVICTION_INTERVAL_MS,\n\t\t);\n\n\t\treturn new Promise((resolve) => {\n\t\t\tthis.httpServer = serve(\n\t\t\t\t{\n\t\t\t\t\tfetch: this.app.fetch,\n\t\t\t\t\tport: listenPort,\n\t\t\t\t},\n\t\t\t\t(info) => {\n\t\t\t\t\tlog.info(\n\t\t\t\t\t\t`[LIOP-StreamBridge] Streamable HTTP Gateway on http://localhost:${info.port}/mcp`,\n\t\t\t\t\t);\n\t\t\t\t\tresolve();\n\t\t\t\t},\n\t\t\t);\n\t\t});\n\t}\n\n\t/**\n\t * Graceful shutdown — closes all active sessions, stops timers, and releases port.\n\t */\n\tpublic async stop(): Promise<void> {\n\t\tif (this.evictionTimer) {\n\t\t\tclearInterval(this.evictionTimer);\n\t\t\tthis.evictionTimer = null;\n\t\t}\n\n\t\tfor (const [id, entry] of this.activeSessions) {\n\t\t\tawait entry.transport.close();\n\t\t\tthis.activeSessions.delete(id);\n\t\t}\n\n\t\tif (this.httpServer) {\n\t\t\tthis.httpServer.close();\n\t\t\tlog.info(\"[LIOP-StreamBridge] HTTP ports released.\");\n\t\t}\n\t}\n}\n","// Copyright 2026 Nekzus Solutions and contributors\n// SPDX-License-Identifier: Apache-2.0\n\nimport type { McpServer } from \"@modelcontextprotocol/sdk/server/mcp.js\";\nimport {\n\tisLegacyRequest,\n\tMCP_LEGACY_SUPPORT_ENABLED,\n\tMCP_PROTOCOL_VERSION_LEGACY,\n} from \"../gateway/mcp-compat.js\";\nimport type { LiopServer, LiopServerOptions } from \"../server/index.js\";\nimport {\n\ttype CallToolRequest,\n\ttype CallToolResult,\n\tMCP_PROTOCOL_VERSION,\n} from \"../types.js\";\nimport { log } from \"../utils/logger.js\";\n\nexport interface LiopBridgeOptions {\n\tpublishToMesh?: boolean;\n\tmeshIdentity?: string;\n\tserverInfo?: {\n\t\tname: string;\n\t\tversion: string;\n\t};\n\tsecurity?: LiopServerOptions[\"security\"];\n}\n\n/**\n * LIOP MCP Bridge\n * A bi-directional bridge that allows legacy MCP servers to join the LIOP mesh,\n * or exposes a LIOP server as an MCP-compatible stdio process for tools like Claude Desktop.\n */\nexport class LiopMcpBridge {\n\tprivate liopServer: LiopServer | null = null;\n\tprivate legacyMcpServer: McpServer | null = null;\n\tconstructor(\n\t\t// biome-ignore lint/suspicious/noExplicitAny: polymorphic source detection\n\t\tsource: LiopServer | McpServer | any,\n\t\tprivate options: LiopBridgeOptions = {},\n\t) {\n\t\t// Determine mode: Exposing LIOP to MCP (Claude) or Wrapping MCP to LIOP (Mesh)\n\t\t// We use constructor name check to avoid hard dependency on optional SDK at runtime start\n\t\tif (source?.constructor?.name === \"LiopServer\") {\n\t\t\tthis.liopServer = source as LiopServer;\n\t\t\tlog.info(\"[LIOP-Bridge] Mode: EXPOSE (LIOP -> MCP Stdio)\");\n\t\t} else if (source?.constructor?.name === \"McpServer\") {\n\t\t\tthis.legacyMcpServer = source as McpServer;\n\t\t\tlog.info(\"[LIOP-Bridge] Mode: WRAP (Legacy MCP -> LIOP Mesh)\");\n\t\t} else {\n\t\t\t// Fallback for inferred legacy MCP servers\n\t\t\tthis.legacyMcpServer = source as McpServer;\n\t\t\tlog.info(\"[LIOP-Bridge] Mode: WRAP (Inferred Legacy MCP -> LIOP Mesh)\");\n\t\t}\n\t}\n\n\t/**\n\t * Handles an incoming standard MCP JSON-RPC 2.0 payload.\n\t * Pipes it to the underlying server (LIOP or Legacy MCP).\n\t */\n\tpublic async handleJsonRpcRequest(\n\t\tpayload: Record<string, unknown>,\n\t): Promise<unknown> {\n\t\tconst id = payload.id as string | number;\n\t\tconst method = payload.method as string;\n\t\tconst params = payload.params as Record<string, unknown> | undefined;\n\n\t\tif (payload.jsonrpc !== \"2.0\") {\n\t\t\treturn this.errorResponse(id, -32600, \"Invalid Request\");\n\t\t}\n\n\t\t// Mode: EXPOSE (Standard behavior used by Claude Desktop)\n\t\tif (this.liopServer) {\n\t\t\treturn this.handleLiopToMcp(id, method, params);\n\t\t}\n\n\t\t// Mode: WRAP (Redirecting via internal LiopServer after connect())\n\t\tif (this.legacyMcpServer && this.liopServer) {\n\t\t\treturn this.handleLiopToMcp(id, method, params);\n\t\t}\n\n\t\treturn this.errorResponse(id, -32601, \"Bridge source not configured\");\n\t}\n\n\tprivate async handleLiopToMcp(\n\t\tid: string | number,\n\t\tmethod: string,\n\t\tparams: Record<string, unknown> | undefined,\n\t): Promise<unknown> {\n\t\tif (!this.liopServer) return null;\n\n\t\tconst isLegacy =\n\t\t\tMCP_LEGACY_SUPPORT_ENABLED && isLegacyRequest({ method, params, id });\n\n\t\tif (method === \"initialize\") {\n\t\t\t/** @mcp-legacy Initialize for stdio bridge. Remove when v1 EOL. */\n\t\t\tif (!MCP_LEGACY_SUPPORT_ENABLED) {\n\t\t\t\treturn this.errorResponse(id, -32601, \"Method retired: initialize\");\n\t\t\t}\n\t\t\treturn this.successResponse(id, {\n\t\t\t\tprotocolVersion: MCP_PROTOCOL_VERSION_LEGACY,\n\t\t\t\tcapabilities: {\n\t\t\t\t\tprompts: { listChanged: true },\n\t\t\t\t\tresources: { listChanged: true },\n\t\t\t\t\ttools: { listChanged: true },\n\t\t\t\t},\n\t\t\t\tserverInfo: this.liopServer.getServerInfo(),\n\t\t\t});\n\t\t}\n\n\t\tif (method === \"server/discover\") {\n\t\t\treturn this.successResponse(id, {\n\t\t\t\tresultType: \"complete\",\n\t\t\t\tsupportedVersions: MCP_LEGACY_SUPPORT_ENABLED\n\t\t\t\t\t? [MCP_PROTOCOL_VERSION, MCP_PROTOCOL_VERSION_LEGACY]\n\t\t\t\t\t: [MCP_PROTOCOL_VERSION],\n\t\t\t\tcapabilities: {\n\t\t\t\t\tprompts: { listChanged: true },\n\t\t\t\t\tresources: { listChanged: true },\n\t\t\t\t\ttools: { listChanged: true },\n\t\t\t\t},\n\t\t\t\tserverInfo: this.liopServer.getServerInfo(),\n\t\t\t});\n\t\t}\n\n\t\tif (method === \"notifications/initialized\") return undefined;\n\t\tif (method === \"ping\") return this.successResponse(id, {});\n\n\t\tif (method === \"tools/list\") {\n\t\t\tconst tools = this.liopServer\n\t\t\t\t.listTools()\n\t\t\t\t.sort((a, b) => a.name.localeCompare(b.name));\n\t\t\treturn this.successResponse(\n\t\t\t\tid,\n\t\t\t\tisLegacy\n\t\t\t\t\t? { tools }\n\t\t\t\t\t: {\n\t\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t\t\tttlMs: 300_000,\n\t\t\t\t\t\t\tcacheScope: \"public\",\n\t\t\t\t\t\t\ttools,\n\t\t\t\t\t\t},\n\t\t\t);\n\t\t}\n\n\t\tif (method === \"resources/list\") {\n\t\t\tconst resources = this.liopServer\n\t\t\t\t.listResources()\n\t\t\t\t.sort((a, b) => a.uri.localeCompare(b.uri));\n\t\t\treturn this.successResponse(\n\t\t\t\tid,\n\t\t\t\tisLegacy\n\t\t\t\t\t? { resources }\n\t\t\t\t\t: {\n\t\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t\t\tttlMs: 300_000,\n\t\t\t\t\t\t\tcacheScope: \"public\",\n\t\t\t\t\t\t\tresources,\n\t\t\t\t\t\t},\n\t\t\t);\n\t\t}\n\n\t\tif (method === \"prompts/list\") {\n\t\t\tconst prompts = this.liopServer\n\t\t\t\t.listPrompts()\n\t\t\t\t.sort((a, b) => a.name.localeCompare(b.name));\n\t\t\treturn this.successResponse(\n\t\t\t\tid,\n\t\t\t\tisLegacy\n\t\t\t\t\t? { prompts }\n\t\t\t\t\t: {\n\t\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t\t\tttlMs: 300_000,\n\t\t\t\t\t\t\tcacheScope: \"public\",\n\t\t\t\t\t\t\tprompts,\n\t\t\t\t\t\t},\n\t\t\t);\n\t\t}\n\n\t\tif (method === \"prompts/get\") {\n\t\t\tif (!params?.name) {\n\t\t\t\treturn this.errorResponse(id, -32602, \"Missing prompt name\");\n\t\t\t}\n\t\t\ttry {\n\t\t\t\tconst result = await this.liopServer.getPrompt({\n\t\t\t\t\tname: params.name as string,\n\t\t\t\t\targuments: params.arguments as Record<string, string> | undefined,\n\t\t\t\t});\n\t\t\t\treturn this.successResponse(\n\t\t\t\t\tid,\n\t\t\t\t\tisLegacy || typeof result !== \"object\" || result === null\n\t\t\t\t\t\t? result\n\t\t\t\t\t\t: { resultType: \"complete\", ...result },\n\t\t\t\t);\n\t\t\t} catch (err: unknown) {\n\t\t\t\treturn this.errorResponse(id, -32000, (err as Error).message);\n\t\t\t}\n\t\t}\n\n\t\tif (method === \"resources/read\") {\n\t\t\tif (!params?.uri) {\n\t\t\t\treturn this.errorResponse(id, -32602, \"Missing resource URI\");\n\t\t\t}\n\t\t\ttry {\n\t\t\t\tconst result = await this.liopServer.readResource(params.uri as string);\n\t\t\t\treturn this.successResponse(\n\t\t\t\t\tid,\n\t\t\t\t\tisLegacy\n\t\t\t\t\t\t? result\n\t\t\t\t\t\t: typeof result === \"object\" && result !== null\n\t\t\t\t\t\t\t? {\n\t\t\t\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t\t\t\t\tttlMs: 60_000,\n\t\t\t\t\t\t\t\t\tcacheScope: \"private\",\n\t\t\t\t\t\t\t\t\t...result,\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t: {\n\t\t\t\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t\t\t\t\tttlMs: 60_000,\n\t\t\t\t\t\t\t\t\tcacheScope: \"private\",\n\t\t\t\t\t\t\t\t\tcontents: result,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t);\n\t\t\t} catch (err: unknown) {\n\t\t\t\treturn this.errorResponse(id, -32000, (err as Error).message);\n\t\t\t}\n\t\t}\n\n\t\tif (method === \"tools/call\") {\n\t\t\tif (!params?.name) {\n\t\t\t\treturn this.errorResponse(id, -32602, \"Missing tool name\");\n\t\t\t}\n\t\t\tconst request: CallToolRequest = {\n\t\t\t\tname: params.name as string,\n\t\t\t\targuments: (params.arguments as Record<string, unknown>) || {},\n\t\t\t};\n\n\t\t\ttry {\n\t\t\t\tconst result: CallToolResult = await this.liopServer.callTool(request);\n\t\t\t\t// If the tool execution returned an error (e.g. policy violation), we bypass\n\t\t\t\t// ZK-Receipt verification because no cryptographic proof is generated for errors.\n\t\t\t\tconst isVerified = result.isError\n\t\t\t\t\t? true\n\t\t\t\t\t: await this.verifyZkReceipt(request, result);\n\n\t\t\t\tif (!isVerified) {\n\t\t\t\t\treturn this.successResponse(id, {\n\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\t\ttext: \"ALERT [LIOP ZERO-TRUST SHIELD] ZK Verification Failed. The mathematical ImageID does not match the original payload.\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t],\n\t\t\t\t\t\tisError: true,\n\t\t\t\t\t});\n\t\t\t\t}\n\n\t\t\t\treturn this.successResponse(\n\t\t\t\t\tid,\n\t\t\t\t\tisLegacy\n\t\t\t\t\t\t? result\n\t\t\t\t\t\t: {\n\t\t\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t\t\t\t...result,\n\t\t\t\t\t\t\t},\n\t\t\t\t);\n\t\t\t} catch (err: unknown) {\n\t\t\t\treturn this.errorResponse(id, -32000, (err as Error).message);\n\t\t\t}\n\t\t}\n\n\t\treturn this.errorResponse(id, -32601, \"Method not found\");\n\t}\n\n\tprivate successResponse(\n\t\tid: string | number | null | undefined,\n\t\tresult: unknown,\n\t) {\n\t\treturn { jsonrpc: \"2.0\", id, result };\n\t}\n\n\tprivate errorResponse(id: string | number, code: number, message: string) {\n\t\treturn { jsonrpc: \"2.0\", id, error: { code, message } };\n\t}\n\n\tprivate async verifyZkReceipt(\n\t\trequest: CallToolRequest,\n\t\tresult: CallToolResult,\n\t): Promise<boolean> {\n\t\tif (\n\t\t\t!request.arguments?.payload ||\n\t\t\ttypeof request.arguments.payload !== \"string\"\n\t\t) {\n\t\t\treturn true;\n\t\t}\n\n\t\ttry {\n\t\t\tconst payload = request.arguments.payload as string;\n\t\t\tconst contentText = result.content[0]?.text;\n\n\t\t\tif (contentText && typeof contentText === \"string\") {\n\t\t\t\ttry {\n\t\t\t\t\tconst data = JSON.parse(contentText);\n\n\t\t\t\t\tif (data.image_id || data.zk_receipt) {\n\t\t\t\t\t\t// 1. Instantiate the Industrial Verifier ( backed by Piscina Worker Pool )\n\t\t\t\t\t\tconst { LiopVerifier } = await import(\"../crypto/verifier.js\");\n\t\t\t\t\t\tconst verifier = new LiopVerifier();\n\n\t\t\t\t\t\t// 2. Delegate the heavy mathematical check (ZK Journal + Seal)\n\t\t\t\t\t\tconst isAuthentic = await verifier.verifyZkReceipt(\n\t\t\t\t\t\t\tBuffer.from(payload, \"utf-8\"),\n\t\t\t\t\t\t\tdata.image_id,\n\t\t\t\t\t\t\tBuffer.from(data.zk_receipt || \"\", \"base64\"),\n\t\t\t\t\t\t\tundefined,\n\t\t\t\t\t\t\tdata.computation_result,\n\t\t\t\t\t\t);\n\n\t\t\t\t\t\tif (!isAuthentic) {\n\t\t\t\t\t\t\treturn false;\n\t\t\t\t\t\t}\n\n\t\t\t\t\t\tdata.audit_status =\n\t\t\t\t\t\t\t\"VERIFIED: ZK-Receipt & ImageID Mathematically Verified by LiopMcpBridge\";\n\t\t\t\t\t\tresult.content[0].text = JSON.stringify(data);\n\t\t\t\t\t}\n\t\t\t\t} catch {\n\t\t\t\t\t// Output not JSON\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn true;\n\t\t} catch (e) {\n\t\t\tlog.info(\"[LIOP-Bridge] ZK-Verifier Failure:\", e);\n\t\t\treturn false;\n\t\t}\n\t}\n\n\t/**\n\t * Connects the bridge via stdio or Mesh depending on mode.\n\t */\n\tpublic async connect(): Promise<void> {\n\t\t// In WRAP mode, we actually need to create a LiopServer and join the mesh\n\t\tif (this.legacyMcpServer) {\n\t\t\tconst { LiopServer } = await import(\"../server/index.js\");\n\t\t\tthis.liopServer = new LiopServer(\n\t\t\t\tthis.options.serverInfo || {\n\t\t\t\t\tname: \"liop-bridge\",\n\t\t\t\t\tversion: \"1.0.0\",\n\t\t\t\t},\n\t\t\t\t{ security: this.options.security },\n\t\t\t);\n\n\t\t\tif (this.options.publishToMesh) {\n\t\t\t\tawait this.liopServer.connect();\n\n\t\t\t\t// Automatically Bridge Legacy Capabilities to LIOP Mesh\n\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: Internal legacy MCP properties are completely opaque and unexported\n\t\t\t\tconst legacy = this.legacyMcpServer as any;\n\n\t\t\t\t// 1. Sync Tools\n\t\t\t\tif (legacy._registeredTools) {\n\t\t\t\t\tfor (const [name, tool] of Object.entries(legacy._registeredTools)) {\n\t\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: Opaque legacy structure\n\t\t\t\t\t\tconst t = tool as any;\n\t\t\t\t\t\tthis.liopServer.tool(\n\t\t\t\t\t\t\tname,\n\t\t\t\t\t\t\tt.description || \"\",\n\t\t\t\t\t\t\tt.inputSchema || {},\n\t\t\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: Opaque legacy callback args\n\t\t\t\t\t\t\tasync (args: any) => {\n\t\t\t\t\t\t\t\treturn await t.handler(args);\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\t// 2. Sync Resources\n\t\t\t\tif (legacy._registeredResources) {\n\t\t\t\t\tfor (const [uri, resource] of Object.entries(\n\t\t\t\t\t\tlegacy._registeredResources,\n\t\t\t\t\t)) {\n\t\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: Opaque legacy structure\n\t\t\t\t\t\tconst r = resource as any;\n\t\t\t\t\t\tthis.liopServer.resource(\n\t\t\t\t\t\t\tr.name,\n\t\t\t\t\t\t\turi,\n\t\t\t\t\t\t\tr.metadata?.description || \"\",\n\t\t\t\t\t\t\tr.metadata?.mimeType || \"application/octet-stream\",\n\t\t\t\t\t\t\tasync () => {\n\t\t\t\t\t\t\t\tconst res = await r.readCallback(new URL(uri));\n\t\t\t\t\t\t\t\treturn res.contents[0].text;\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn;\n\t\t}\n\n\t\t// In EXPOSE mode, listen to stdio (Claude Desktop)\n\t\tconst readline = await import(\"node:readline\");\n\t\tconst rl = readline.createInterface({\n\t\t\tinput: process.stdin,\n\t\t\toutput: process.stdout,\n\t\t\tterminal: false,\n\t\t});\n\n\t\tconst shutdown = async () => {\n\t\t\tlog.info(\"[LIOP-Bridge] Disconnecting session...\");\n\t\t\tif (this.liopServer) await this.liopServer.close();\n\t\t\tprocess.exit(0);\n\t\t};\n\n\t\trl.on(\"close\", shutdown);\n\t\tprocess.on(\"SIGINT\", shutdown);\n\t\tprocess.on(\"SIGTERM\", shutdown);\n\n\t\trl.on(\"line\", async (line) => {\n\t\t\tif (!line.trim()) return;\n\t\t\ttry {\n\t\t\t\tconst payload = JSON.parse(line);\n\t\t\t\tconst response = await this.handleJsonRpcRequest(payload);\n\t\t\t\tif (response) {\n\t\t\t\t\tprocess.stdout.write(`${JSON.stringify(response)}\\n`);\n\t\t\t\t}\n\t\t\t} catch (e: unknown) {\n\t\t\t\tlog.error(`[LIOP-Bridge] Error: ${(e as Error).message}`);\n\t\t\t}\n\t\t});\n\t}\n\n\tpublic getServer(): LiopServer | null {\n\t\treturn this.liopServer;\n\t}\n}\n\nexport * from \"./stream.js\";\n"]}
1
+ {"version":3,"sources":["../src/bridge/stream.ts","../src/bridge/index.ts"],"names":[],"mappings":";;;;;;;AAoCA,IAAM,2BAAA,GAA8B,EAAA;AACpC,IAAM,0BAAA,GAA6B,KAAK,EAAA,GAAK,GAAA;AAC7C,IAAM,uBAAuB,EAAA,GAAK,GAAA;AAgB3B,IAAM,mBAAN,MAAuB;AAAA,EAS7B,WAAA,CACC,cAAA,EACQ,OAAA,GAAmC,EAAC,EAC3C;AADO,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAER,IAAA,IAAA,CAAK,GAAA,GAAM,IAAI,IAAA,EAAK;AACpB,IAAA,IAAA,CAAK,WAAA,GAAc,IAAI,aAAA,CAAc,cAAc,CAAA;AACnD,IAAA,IAAA,CAAK,cAAA,uBAAqB,GAAA,EAAI;AAC9B,IAAA,IAAA,CAAK,gBAAA,GACJ,QAAQ,gBAAA,IAAoB,2BAAA;AAC7B,IAAA,IAAA,CAAK,gBAAA,GACJ,QAAQ,gBAAA,IAAoB,0BAAA;AAE7B,IAAA,IAAA,CAAK,WAAA,EAAY;AAAA,EAClB;AAAA,EAXS,OAAA;AAAA,EAVD,GAAA;AAAA,EACA,UAAA,GAA8C,IAAA;AAAA,EAC9C,WAAA;AAAA,EACA,cAAA;AAAA,EACA,aAAA,GAAuD,IAAA;AAAA,EACvD,gBAAA;AAAA,EACA,gBAAA;AAAA;AAAA;AAAA;AAAA,EAoBR,MAAc,uBACb,QAAA,EACoD;AACpD,IAAA,MAAM,EAAE,wCAAA,EAAyC,GAAI,MAAM,OAC1D,+DACD,CAAA;AACA,IAAA,MAAM,SAAA,GAAY,IAAI,wCAAA,CAAyC;AAAA,MAC9D,kBAAA,EAAoB,MAAM,UAAA,EAAW;AAAA,MACrC,oBAAA,EAAsB,CAAC,SAAA,KAAsB;AAC5C,QAAA,IAAA,CAAK,cAAA,CAAe,IAAI,SAAA,EAAW;AAAA,UAClC,SAAA;AAAA,UACA,YAAA,EAAc,KAAK,GAAA,EAAI;AAAA,UACvB;AAAA,SACA,CAAA;AACD,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,CAAA,oCAAA,EAAuC,SAAS,CAAA,MAAA,EAAS,QAAQ,CAAA,CAAA;AAAA,SAClE;AAAA,MACD;AAAA,KACA,CAAA;AAGD,IAAA,SAAA,CAAU,SAAA,GAAY,OAAO,OAAA,KAA4B;AAExD,MAAA,IAAI,UAAU,SAAA,EAAW;AACxB,QAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,cAAA,CAAe,GAAA,CAAI,UAAU,SAAS,CAAA;AACzD,QAAA,IAAI,KAAA,EAAO,KAAA,CAAM,YAAA,GAAe,IAAA,CAAK,GAAA,EAAI;AAAA,MAC1C;AAEA,MAAA,IAAI;AACH,QAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,WAAA,CAAY,oBAAA;AAAA,UACrC;AAAA,SACD;AAEA,QAAA,IAAI,WAAW,KAAA,CAAA,EAAW;AACzB,UAAA,MAAM,SAAA,CAAU,KAAK,MAAwB,CAAA;AAAA,QAC9C;AAAA,MACD,SAAS,GAAA,EAAc;AACtB,QAAA,GAAA,CAAI,IAAA,CAAK,qCAAA,EAAwC,GAAA,CAAc,OAAO,CAAA;AAAA,MACvE;AAAA,IACD,CAAA;AAEA,IAAA,SAAA,CAAU,UAAU,MAAM;AACzB,MAAA,IAAI,UAAU,SAAA,EAAW;AACxB,QAAA,IAAA,CAAK,cAAA,CAAe,MAAA,CAAO,SAAA,CAAU,SAAS,CAAA;AAC9C,QAAA,GAAA,CAAI,IAAA,CAAK,CAAA,oCAAA,EAAuC,SAAA,CAAU,SAAS,CAAA,CAAE,CAAA;AAAA,MACtE;AAAA,IACD,CAAA;AAEA,IAAA,OAAO,SAAA;AAAA,EACR;AAAA;AAAA;AAAA;AAAA,EAKQ,kBAAkB,EAAA,EAAoB;AAC7C,IAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,IAAA,KAAA,MAAW,KAAA,IAAS,IAAA,CAAK,cAAA,CAAe,MAAA,EAAO,EAAG;AACjD,MAAA,IAAI,KAAA,CAAM,aAAa,EAAA,EAAI,KAAA,EAAA;AAAA,IAC5B;AACA,IAAA,OAAO,KAAA;AAAA,EACR;AAAA;AAAA;AAAA;AAAA,EAKQ,YAAY,CAAA,EAET;AACV,IAAA,OACC,EAAE,GAAA,CAAI,MAAA,CAAO,iBAAiB,CAAA,EAAG,MAAM,GAAG,CAAA,CAAE,CAAC,CAAA,EAAG,MAAK,IACrD,CAAA,CAAE,GAAA,CAAI,MAAA,CAAO,WAAW,CAAA,IACxB,SAAA;AAAA,EAEF;AAAA;AAAA;AAAA;AAAA,EAKQ,iBAAA,GAA0B;AACjC,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,KAAA,MAAW,CAAC,SAAA,EAAW,KAAK,CAAA,IAAK,KAAK,cAAA,EAAgB;AACrD,MAAA,IAAI,GAAA,GAAM,KAAA,CAAM,YAAA,GAAe,IAAA,CAAK,gBAAA,EAAkB;AACrD,QAAA,GAAA,CAAI,IAAA,CAAK,CAAA,2CAAA,EAA8C,SAAS,CAAA,CAAE,CAAA;AAClE,QAAA,KAAA,CAAM,SAAA,CAAU,KAAA,EAAM,CAAE,KAAA,CAAM,MAAM;AAAA,QAEpC,CAAC,CAAA;AACD,QAAA,IAAA,CAAK,cAAA,CAAe,OAAO,SAAS,CAAA;AAAA,MACrC;AAAA,IACD;AAAA,EACD;AAAA,EAEQ,WAAA,GAAc;AACrB,IAAA,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,GAAA,EAAK,IAAA,EAAM,CAAA;AAGxB,IAAA,IAAI,CAAC,OAAA,CAAQ,GAAA,CAAI,gBAAA,EAAkB;AAClC,MAAA,OAAA,CAAQ,GAAA,CAAI,mBAAmB,UAAA,EAAW;AAC1C,MAAA,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,EAAE,CAAC,CAAA;AACvB,MAAA,GAAA,CAAI,KAAK,0DAAsC,CAAA;AAC/C,MAAA,GAAA,CAAI,KAAK,2CAA2C,CAAA;AACpD,MAAA,GAAA,CAAI,KAAK,+DAA+D,CAAA;AACxE,MAAA,GAAA,CAAI,IAAA,CAAK,CAAA,OAAA,EAAU,OAAA,CAAQ,GAAA,CAAI,gBAAgB,CAAA,CAAE,CAAA;AACjD,MAAA,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,EAAE,CAAC,CAAA;AAAA,IACxB;AAGA,IAAA,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,MAAA,EAAQ,OAAO,GAAG,IAAA,KAAS;AACvC,MAAA,MAAM,IAAA,GAAO,CAAA,CAAE,GAAA,CAAI,MAAA,CAAO,eAAe,CAAA;AACzC,MAAA,IAAI,CAAC,IAAA,EAAM,UAAA,CAAW,SAAS,CAAA,EAAG;AACjC,QAAA,OAAO,CAAA,CAAE,IAAA;AAAA,UACR,EAAE,OAAO,+CAAA,EAAgD;AAAA,UACzD;AAAA,SACD;AAAA,MACD;AAEA,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA;AAC1B,MAAA,MAAM,aAAA,GAAgB,QAAQ,GAAA,CAAI,gBAAA;AAGlC,MAAA,IAAI,aAAA,IAAiB,UAAU,aAAA,EAAe;AAC7C,QAAA,MAAM,IAAA,EAAK;AACX,QAAA;AAAA,MACD;AAGA,MAAA,MAAM,YAAA,GAAe,IAAA,CAAK,WAAA,CAAY,SAAA,EAAU,EAAG,YAAA;AACnD,MAAA,IAAI,YAAA,EAAc;AACjB,QAAA,IAAI;AACH,UAAA,MAAM,YAAA,CAAa,SAAS,KAAK,CAAA;AACjC,UAAA,MAAM,IAAA,EAAK;AACX,UAAA;AAAA,QACD,SAAS,CAAA,EAAY;AACpB,UAAA,GAAA,CAAI,IAAA;AAAA,YACH,CAAA,2CAAA,EAA+C,EAAY,OAAO,CAAA;AAAA,WACnE;AACA,UAAA,OAAO,CAAA,CAAE,IAAA;AAAA,YACR;AAAA,cACC,KAAA,EAAO,CAAA,sCAAA,EAA0C,CAAA,CAAY,OAAO,CAAA;AAAA,aACrE;AAAA,YACA;AAAA,WACD;AAAA,QACD;AAAA,MACD;AAEA,MAAA,GAAA,CAAI,IAAA;AAAA,QACH;AAAA,OACD;AACA,MAAA,OAAO,CAAA,CAAE,IAAA;AAAA,QACR,EAAE,OAAO,+CAAA,EAAgD;AAAA,QACzD;AAAA,OACD;AAAA,IACD,CAAC,CAAA;AAGD,IAAA,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,MAAA,EAAQ,OAAO,CAAA,KAAM;AACjC,MAAA,MAAM,SAAA,GAAY,CAAA,CAAE,GAAA,CAAI,MAAA,CAAO,gBAAgB,CAAA;AAG/C,MAAA,IAAI,SAAA,EAAW;AAEd,QAAA,IAAI,CAAC,0BAAA,EAA4B;AAChC,UAAA,OAAO,CAAA,CAAE,IAAA;AAAA,YACR;AAAA,cACC,KAAA,EACC;AAAA,aACF;AAAA,YACA;AAAA,WACD;AAAA,QACD;AAEA,QAAA,MAAM,QAAA,GAAW,IAAA,CAAK,cAAA,CAAe,GAAA,CAAI,SAAS,CAAA;AAClD,QAAA,IAAI,CAAC,QAAA,EAAU;AACd,UAAA,OAAO,EAAE,IAAA,CAAK,EAAE,KAAA,EAAO,mBAAA,IAAuB,GAAG,CAAA;AAAA,QAClD;AAEA,QAAA,QAAA,CAAS,YAAA,GAAe,KAAK,GAAA,EAAI;AAEjC,QAAA,MAAM,WAAW,MAAM,QAAA,CAAS,UAAU,aAAA,CAAc,CAAA,CAAE,IAAI,GAAG,CAAA;AAIjE,QAAA,IAAI,CAAA,CAAE,GAAA,CAAI,MAAA,KAAW,QAAA,EAAU;AAC9B,UAAA,IAAA,CAAK,cAAA,CAAe,OAAO,SAAS,CAAA;AACpC,UAAA,GAAA,CAAI,IAAA,CAAK,CAAA,6CAAA,EAAgD,SAAS,CAAA,CAAE,CAAA;AAAA,QACrE;AAEA,QAAA,OAAO,QAAA;AAAA,MACR;AAGA,MAAA,MAAM,WAAA,GAAc,CAAA,CAAE,GAAA,CAAI,MAAA,CAAO,cAAc,CAAA,IAAK,EAAA;AACpD,MAAA,IAAI,EAAE,GAAA,CAAI,MAAA,KAAW,UAAU,WAAA,CAAY,QAAA,CAAS,kBAAkB,CAAA,EAAG;AACxE,QAAA,IAAI;AACH,UAAA,MAAM,IAAA,GAAQ,MAAM,CAAA,CAAE,GAAA,CAAI,IAAA,EAAK;AAE/B,UAAA,IACC,KAAK,MAAA,KAAW,iBAAA,IACf,KAAK,MAAA,EAAoC,KAAA,IAC1C,CAAC,0BAAA,EACA;AACD,YAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,WAAA,CAAY,qBAAqB,IAAI,CAAA;AAC/D,YAAA,IAAI,WAAW,KAAA,CAAA,EAAW;AACzB,cAAA,OAAO,CAAA,CAAE,KAAK,MAAM,CAAA;AAAA,YACrB;AACA,YAAA,OAAO,CAAA,CAAE,IAAA,CAAK,IAAA,EAAM,GAAG,CAAA;AAAA,UACxB;AAAA,QACD,CAAA,CAAA,MAAQ;AAAA,QAER;AAAA,MACD;AAIA,MAAA,IAAI,CAAC,0BAAA,EAA4B;AAChC,QAAA,OAAO,CAAA,CAAE,IAAA;AAAA,UACR;AAAA,YACC,KAAA,EACC;AAAA,WACF;AAAA,UACA;AAAA,SACD;AAAA,MACD;AAEA,MAAA,MAAM,QAAA,GAAW,IAAA,CAAK,WAAA,CAAY,CAAC,CAAA;AACnC,MAAA,MAAM,eAAA,GAAkB,IAAA,CAAK,iBAAA,CAAkB,QAAQ,CAAA;AACvD,MAAA,IAAI,eAAA,IAAmB,KAAK,gBAAA,EAAkB;AAC7C,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,CAAA,2CAAA,EAA8C,QAAQ,CAAA,EAAA,EAAK,eAAe,CAAA,UAAA;AAAA,SAC3E;AACA,QAAA,OAAO,EAAE,IAAA,CAAK,EAAE,KAAA,EAAO,wCAAA,IAA4C,GAAG,CAAA;AAAA,MACvE;AAEA,MAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,sBAAA,CAAuB,QAAQ,CAAA;AAC5D,MAAA,OAAO,MAAM,SAAA,CAAU,aAAA,CAAc,CAAA,CAAE,IAAI,GAAG,CAAA;AAAA,IAC/C,CAAC,CAAA;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAa,MAAM,IAAA,EAA8B;AAChD,IAAA,MAAM,UAAA,GAAa,IAAA,IAAQ,IAAA,CAAK,OAAA,CAAQ,IAAA,IAAQ,GAAA;AAGhD,IAAA,IAAA,CAAK,aAAA,GAAgB,WAAA;AAAA,MACpB,MAAM,KAAK,iBAAA,EAAkB;AAAA,MAC7B;AAAA,KACD;AAEA,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY;AAC/B,MAAA,IAAA,CAAK,UAAA,GAAa,KAAA;AAAA,QACjB;AAAA,UACC,KAAA,EAAO,KAAK,GAAA,CAAI,KAAA;AAAA,UAChB,IAAA,EAAM;AAAA,SACP;AAAA,QACA,CAAC,IAAA,KAAS;AACT,UAAA,GAAA,CAAI,IAAA;AAAA,YACH,CAAA,gEAAA,EAAmE,KAAK,IAAI,CAAA,IAAA;AAAA,WAC7E;AACA,UAAA,OAAA,EAAQ;AAAA,QACT;AAAA,OACD;AAAA,IACD,CAAC,CAAA;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAa,IAAA,GAAsB;AAClC,IAAA,IAAI,KAAK,aAAA,EAAe;AACvB,MAAA,aAAA,CAAc,KAAK,aAAa,CAAA;AAChC,MAAA,IAAA,CAAK,aAAA,GAAgB,IAAA;AAAA,IACtB;AAEA,IAAA,KAAA,MAAW,CAAC,EAAA,EAAI,KAAK,CAAA,IAAK,KAAK,cAAA,EAAgB;AAC9C,MAAA,MAAM,KAAA,CAAM,UAAU,KAAA,EAAM;AAC5B,MAAA,IAAA,CAAK,cAAA,CAAe,OAAO,EAAE,CAAA;AAAA,IAC9B;AAEA,IAAA,IAAI,KAAK,UAAA,EAAY;AACpB,MAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AACtB,MAAA,GAAA,CAAI,KAAK,0CAA0C,CAAA;AAAA,IACpD;AAAA,EACD;AACD;;;AC7UO,IAAM,gBAAN,MAAoB;AAAA,EAG1B,WAAA,CAEC,MAAA,EACQ,OAAA,GAA6B,EAAC,EACrC;AADO,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAIR,IAAA,IAAI,MAAA,EAAQ,WAAA,EAAa,IAAA,KAAS,YAAA,EAAc;AAC/C,MAAA,IAAA,CAAK,UAAA,GAAa,MAAA;AAClB,MAAA,GAAA,CAAI,KAAK,gDAAgD,CAAA;AAAA,IAC1D,CAAA,MAAA,IAAW,MAAA,EAAQ,WAAA,EAAa,IAAA,KAAS,WAAA,EAAa;AACrD,MAAA,IAAA,CAAK,eAAA,GAAkB,MAAA;AACvB,MAAA,GAAA,CAAI,KAAK,oDAAoD,CAAA;AAAA,IAC9D,CAAA,MAAO;AAEN,MAAA,IAAA,CAAK,eAAA,GAAkB,MAAA;AACvB,MAAA,GAAA,CAAI,KAAK,6DAA6D,CAAA;AAAA,IACvE;AAAA,EACD;AAAA,EAfS,OAAA;AAAA,EALD,UAAA,GAAgC,IAAA;AAAA,EAChC,eAAA,GAAoC,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAyB5C,MAAa,qBACZ,OAAA,EACmB;AACnB,IAAA,MAAM,KAAK,OAAA,CAAQ,EAAA;AACnB,IAAA,MAAM,SAAS,OAAA,CAAQ,MAAA;AACvB,IAAA,MAAM,SAAS,OAAA,CAAQ,MAAA;AAEvB,IAAA,IAAI,OAAA,CAAQ,YAAY,KAAA,EAAO;AAC9B,MAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,MAAA,EAAQ,iBAAiB,CAAA;AAAA,IACxD;AAGA,IAAA,IAAI,KAAK,UAAA,EAAY;AACpB,MAAA,OAAO,IAAA,CAAK,eAAA,CAAgB,EAAA,EAAI,MAAA,EAAQ,MAAM,CAAA;AAAA,IAC/C;AAGA,IAAA,IAAI,IAAA,CAAK,eAAA,IAAmB,IAAA,CAAK,UAAA,EAAY;AAC5C,MAAA,OAAO,IAAA,CAAK,eAAA,CAAgB,EAAA,EAAI,MAAA,EAAQ,MAAM,CAAA;AAAA,IAC/C;AAEA,IAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,MAAA,EAAQ,8BAA8B,CAAA;AAAA,EACrE;AAAA,EAEA,MAAc,eAAA,CACb,EAAA,EACA,MAAA,EACA,MAAA,EACmB;AACnB,IAAA,IAAI,CAAC,IAAA,CAAK,UAAA,EAAY,OAAO,IAAA;AAE7B,IAAA,MAAM,WACL,0BAAA,IAA8B,eAAA,CAAgB,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAI,CAAA;AAErE,IAAA,IAAI,WAAW,YAAA,EAAc;AAE5B,MAAA,IAAI,CAAC,0BAAA,EAA4B;AAChC,QAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,MAAA,EAAQ,4BAA4B,CAAA;AAAA,MACnE;AACA,MAAA,OAAO,IAAA,CAAK,gBAAgB,EAAA,EAAI;AAAA,QAC/B,eAAA,EAAiB,2BAAA;AAAA,QACjB,YAAA,EAAc;AAAA,UACb,OAAA,EAAS,EAAE,WAAA,EAAa,IAAA,EAAK;AAAA,UAC7B,SAAA,EAAW,EAAE,WAAA,EAAa,IAAA,EAAK;AAAA,UAC/B,KAAA,EAAO,EAAE,WAAA,EAAa,IAAA;AAAK,SAC5B;AAAA,QACA,UAAA,EAAY,IAAA,CAAK,UAAA,CAAW,aAAA;AAAc,OAC1C,CAAA;AAAA,IACF;AAEA,IAAA,IAAI,WAAW,iBAAA,EAAmB;AACjC,MAAA,OAAO,IAAA,CAAK,gBAAgB,EAAA,EAAI;AAAA,QAC/B,UAAA,EAAY,UAAA;AAAA,QACZ,mBAAmB,0BAAA,GAChB,CAAC,sBAAsB,2BAA2B,CAAA,GAClD,CAAC,oBAAoB,CAAA;AAAA,QACxB,YAAA,EAAc;AAAA,UACb,OAAA,EAAS,EAAE,WAAA,EAAa,IAAA,EAAK;AAAA,UAC7B,SAAA,EAAW,EAAE,WAAA,EAAa,IAAA,EAAK;AAAA,UAC/B,KAAA,EAAO,EAAE,WAAA,EAAa,IAAA;AAAK,SAC5B;AAAA,QACA,UAAA,EAAY,IAAA,CAAK,UAAA,CAAW,aAAA;AAAc,OAC1C,CAAA;AAAA,IACF;AAEA,IAAA,IAAI,MAAA,KAAW,6BAA6B,OAAO,MAAA;AACnD,IAAA,IAAI,WAAW,MAAA,EAAQ,OAAO,KAAK,eAAA,CAAgB,EAAA,EAAI,EAAE,CAAA;AAEzD,IAAA,IAAI,WAAW,YAAA,EAAc;AAC5B,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,UAAA,CACjB,SAAA,GACA,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,IAAA,CAAK,aAAA,CAAc,CAAA,CAAE,IAAI,CAAC,CAAA;AAC7C,MAAA,OAAO,IAAA,CAAK,eAAA;AAAA,QACX,EAAA;AAAA,QACA,QAAA,GACG,EAAE,KAAA,EAAM,GACR;AAAA,UACA,UAAA,EAAY,UAAA;AAAA,UACZ,KAAA,EAAO,GAAA;AAAA,UACP,UAAA,EAAY,QAAA;AAAA,UACZ;AAAA;AACD,OACH;AAAA,IACD;AAEA,IAAA,IAAI,WAAW,gBAAA,EAAkB;AAChC,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,UAAA,CACrB,aAAA,GACA,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,GAAA,CAAI,aAAA,CAAc,CAAA,CAAE,GAAG,CAAC,CAAA;AAC3C,MAAA,OAAO,IAAA,CAAK,eAAA;AAAA,QACX,EAAA;AAAA,QACA,QAAA,GACG,EAAE,SAAA,EAAU,GACZ;AAAA,UACA,UAAA,EAAY,UAAA;AAAA,UACZ,KAAA,EAAO,GAAA;AAAA,UACP,UAAA,EAAY,QAAA;AAAA,UACZ;AAAA;AACD,OACH;AAAA,IACD;AAEA,IAAA,IAAI,WAAW,cAAA,EAAgB;AAC9B,MAAA,MAAM,OAAA,GAAU,IAAA,CAAK,UAAA,CACnB,WAAA,GACA,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,IAAA,CAAK,aAAA,CAAc,CAAA,CAAE,IAAI,CAAC,CAAA;AAC7C,MAAA,OAAO,IAAA,CAAK,eAAA;AAAA,QACX,EAAA;AAAA,QACA,QAAA,GACG,EAAE,OAAA,EAAQ,GACV;AAAA,UACA,UAAA,EAAY,UAAA;AAAA,UACZ,KAAA,EAAO,GAAA;AAAA,UACP,UAAA,EAAY,QAAA;AAAA,UACZ;AAAA;AACD,OACH;AAAA,IACD;AAEA,IAAA,IAAI,WAAW,aAAA,EAAe;AAC7B,MAAA,IAAI,CAAC,QAAQ,IAAA,EAAM;AAClB,QAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,MAAA,EAAQ,qBAAqB,CAAA;AAAA,MAC5D;AACA,MAAA,IAAI;AACH,QAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,UAAA,CAAW,SAAA,CAAU;AAAA,UAC9C,MAAM,MAAA,CAAO,IAAA;AAAA,UACb,WAAW,MAAA,CAAO;AAAA,SAClB,CAAA;AACD,QAAA,OAAO,IAAA,CAAK,eAAA;AAAA,UACX,EAAA;AAAA,UACA,QAAA,IAAY,OAAO,MAAA,KAAW,QAAA,IAAY,MAAA,KAAW,IAAA,GAClD,MAAA,GACA,EAAE,UAAA,EAAY,UAAA,EAAY,GAAG,MAAA;AAAO,SACxC;AAAA,MACD,SAAS,GAAA,EAAc;AACtB,QAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,KAAA,EAAS,IAAc,OAAO,CAAA;AAAA,MAC7D;AAAA,IACD;AAEA,IAAA,IAAI,WAAW,gBAAA,EAAkB;AAChC,MAAA,IAAI,CAAC,QAAQ,GAAA,EAAK;AACjB,QAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,MAAA,EAAQ,sBAAsB,CAAA;AAAA,MAC7D;AACA,MAAA,IAAI;AACH,QAAA,MAAM,SAAS,MAAM,IAAA,CAAK,UAAA,CAAW,YAAA,CAAa,OAAO,GAAa,CAAA;AACtE,QAAA,OAAO,IAAA,CAAK,eAAA;AAAA,UACX,EAAA;AAAA,UACA,WACG,MAAA,GACA,OAAO,MAAA,KAAW,QAAA,IAAY,WAAW,IAAA,GACxC;AAAA,YACA,UAAA,EAAY,UAAA;AAAA,YACZ,KAAA,EAAO,GAAA;AAAA,YACP,UAAA,EAAY,SAAA;AAAA,YACZ,GAAG;AAAA,WACJ,GACC;AAAA,YACA,UAAA,EAAY,UAAA;AAAA,YACZ,KAAA,EAAO,GAAA;AAAA,YACP,UAAA,EAAY,SAAA;AAAA,YACZ,QAAA,EAAU;AAAA;AACX,SACJ;AAAA,MACD,SAAS,GAAA,EAAc;AACtB,QAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,KAAA,EAAS,IAAc,OAAO,CAAA;AAAA,MAC7D;AAAA,IACD;AAEA,IAAA,IAAI,WAAW,YAAA,EAAc;AAC5B,MAAA,IAAI,CAAC,QAAQ,IAAA,EAAM;AAClB,QAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,MAAA,EAAQ,mBAAmB,CAAA;AAAA,MAC1D;AACA,MAAA,MAAM,OAAA,GAA2B;AAAA,QAChC,MAAM,MAAA,CAAO,IAAA;AAAA,QACb,SAAA,EAAY,MAAA,CAAO,SAAA,IAAyC;AAAC,OAC9D;AAEA,MAAA,IAAI;AACH,QAAA,MAAM,MAAA,GAAyB,MAAM,IAAA,CAAK,UAAA,CAAW,SAAS,OAAO,CAAA;AAGrE,QAAA,MAAM,UAAA,GAAa,OAAO,OAAA,GACvB,IAAA,GACA,MAAM,IAAA,CAAK,eAAA,CAAgB,SAAS,MAAM,CAAA;AAE7C,QAAA,IAAI,CAAC,UAAA,EAAY;AAChB,UAAA,OAAO,IAAA,CAAK,gBAAgB,EAAA,EAAI;AAAA,YAC/B,OAAA,EAAS;AAAA,cACR;AAAA,gBACC,IAAA,EAAM,MAAA;AAAA,gBACN,IAAA,EAAM;AAAA;AACP,aACD;AAAA,YACA,OAAA,EAAS;AAAA,WACT,CAAA;AAAA,QACF;AAEA,QAAA,OAAO,IAAA,CAAK,eAAA;AAAA,UACX,EAAA;AAAA,UACA,WACG,MAAA,GACA;AAAA,YACA,UAAA,EAAY,UAAA;AAAA,YACZ,GAAG;AAAA;AACJ,SACH;AAAA,MACD,SAAS,GAAA,EAAc;AACtB,QAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,KAAA,EAAS,IAAc,OAAO,CAAA;AAAA,MAC7D;AAAA,IACD;AAEA,IAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,MAAA,EAAQ,kBAAkB,CAAA;AAAA,EACzD;AAAA,EAEQ,eAAA,CACP,IACA,MAAA,EACC;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,EAAA,EAAI,MAAA,EAAO;AAAA,EACrC;AAAA,EAEQ,aAAA,CAAc,EAAA,EAAqB,IAAA,EAAc,OAAA,EAAiB;AACzE,IAAA,OAAO,EAAE,SAAS,KAAA,EAAO,EAAA,EAAI,OAAO,EAAE,IAAA,EAAM,SAAQ,EAAE;AAAA,EACvD;AAAA,EAEA,MAAc,eAAA,CACb,OAAA,EACA,MAAA,EACmB;AACnB,IAAA,IACC,CAAC,QAAQ,SAAA,EAAW,OAAA,IACpB,OAAO,OAAA,CAAQ,SAAA,CAAU,YAAY,QAAA,EACpC;AACD,MAAA,OAAO,IAAA;AAAA,IACR;AAEA,IAAA,IAAI;AACH,MAAA,MAAM,OAAA,GAAU,QAAQ,SAAA,CAAU,OAAA;AAClC,MAAA,MAAM,WAAA,GAAc,MAAA,CAAO,OAAA,CAAQ,CAAC,CAAA,EAAG,IAAA;AAEvC,MAAA,IAAI,WAAA,IAAe,OAAO,WAAA,KAAgB,QAAA,EAAU;AACnD,QAAA,IAAI;AACH,UAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,WAAW,CAAA;AAEnC,UAAA,IAAI,IAAA,CAAK,QAAA,IAAY,IAAA,CAAK,UAAA,EAAY;AAErC,YAAA,MAAM,EAAE,YAAA,EAAa,GAAI,MAAM,OAAO,wBAAuB,CAAA;AAC7D,YAAA,MAAM,QAAA,GAAW,IAAI,YAAA,EAAa;AAGlC,YAAA,MAAM,WAAA,GAAc,MAAM,QAAA,CAAS,eAAA;AAAA,cAClC,MAAA,CAAO,IAAA,CAAK,OAAA,EAAS,OAAO,CAAA;AAAA,cAC5B,IAAA,CAAK,QAAA;AAAA,cACL,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,UAAA,IAAc,IAAI,QAAQ,CAAA;AAAA,cAC3C,KAAA,CAAA;AAAA,cACA,IAAA,CAAK;AAAA,aACN;AAEA,YAAA,IAAI,CAAC,WAAA,EAAa;AACjB,cAAA,OAAO,KAAA;AAAA,YACR;AAEA,YAAA,IAAA,CAAK,YAAA,GACJ,yEAAA;AACD,YAAA,MAAA,CAAO,QAAQ,CAAC,CAAA,CAAE,IAAA,GAAO,IAAA,CAAK,UAAU,IAAI,CAAA;AAAA,UAC7C;AAAA,QACD,CAAA,CAAA,MAAQ;AAAA,QAER;AAAA,MACD;AACA,MAAA,OAAO,IAAA;AAAA,IACR,SAAS,CAAA,EAAG;AACX,MAAA,GAAA,CAAI,IAAA,CAAK,sCAAsC,CAAC,CAAA;AAChD,MAAA,OAAO,KAAA;AAAA,IACR;AAAA,EACD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAa,OAAA,GAAyB;AAErC,IAAA,IAAI,KAAK,eAAA,EAAiB;AACzB,MAAA,MAAM,EAAE,UAAA,EAAW,GAAI,MAAM,OAAO,aAAoB,CAAA;AACxD,MAAA,IAAA,CAAK,aAAa,IAAI,UAAA;AAAA,QACrB,IAAA,CAAK,QAAQ,UAAA,IAAc;AAAA,UAC1B,IAAA,EAAM,aAAA;AAAA,UACN,OAAA,EAAS;AAAA,SACV;AAAA,QACA,EAAE,QAAA,EAAU,IAAA,CAAK,OAAA,CAAQ,QAAA;AAAS,OACnC;AAEA,MAAA,IAAI,IAAA,CAAK,QAAQ,aAAA,EAAe;AAC/B,QAAA,MAAM,IAAA,CAAK,WAAW,OAAA,EAAQ;AAI9B,QAAA,MAAM,SAAS,IAAA,CAAK,eAAA;AAGpB,QAAA,IAAI,OAAO,gBAAA,EAAkB;AAC5B,UAAA,KAAA,MAAW,CAAC,MAAM,IAAI,CAAA,IAAK,OAAO,OAAA,CAAQ,MAAA,CAAO,gBAAgB,CAAA,EAAG;AAEnE,YAAA,MAAM,CAAA,GAAI,IAAA;AACV,YAAA,IAAA,CAAK,UAAA,CAAW,IAAA;AAAA,cACf,IAAA;AAAA,cACA,EAAE,WAAA,IAAe,EAAA;AAAA,cACjB,CAAA,CAAE,eAAe,EAAC;AAAA;AAAA,cAElB,OAAO,IAAA,KAAc;AACpB,gBAAA,OAAO,MAAM,CAAA,CAAE,OAAA,CAAQ,IAAI,CAAA;AAAA,cAC5B;AAAA,aACD;AAAA,UACD;AAAA,QACD;AAGA,QAAA,IAAI,OAAO,oBAAA,EAAsB;AAChC,UAAA,KAAA,MAAW,CAAC,GAAA,EAAK,QAAQ,CAAA,IAAK,MAAA,CAAO,OAAA;AAAA,YACpC,MAAA,CAAO;AAAA,WACR,EAAG;AAEF,YAAA,MAAM,CAAA,GAAI,QAAA;AACV,YAAA,IAAA,CAAK,UAAA,CAAW,QAAA;AAAA,cACf,CAAA,CAAE,IAAA;AAAA,cACF,GAAA;AAAA,cACA,CAAA,CAAE,UAAU,WAAA,IAAe,EAAA;AAAA,cAC3B,CAAA,CAAE,UAAU,QAAA,IAAY,0BAAA;AAAA,cACxB,YAAY;AACX,gBAAA,MAAM,MAAM,MAAM,CAAA,CAAE,aAAa,IAAI,GAAA,CAAI,GAAG,CAAC,CAAA;AAC7C,gBAAA,OAAO,GAAA,CAAI,QAAA,CAAS,CAAC,CAAA,CAAE,IAAA;AAAA,cACxB;AAAA,aACD;AAAA,UACD;AAAA,QACD;AAAA,MACD;AACA,MAAA;AAAA,IACD;AAGA,IAAA,MAAM,QAAA,GAAW,MAAM,OAAO,UAAe,CAAA;AAC7C,IAAA,MAAM,EAAA,GAAK,SAAS,eAAA,CAAgB;AAAA,MACnC,OAAO,OAAA,CAAQ,KAAA;AAAA,MACf,QAAQ,OAAA,CAAQ,MAAA;AAAA,MAChB,QAAA,EAAU;AAAA,KACV,CAAA;AAED,IAAA,MAAM,WAAW,YAAY;AAC5B,MAAA,GAAA,CAAI,KAAK,wCAAwC,CAAA;AACjD,MAAA,IAAI,IAAA,CAAK,UAAA,EAAY,MAAM,IAAA,CAAK,WAAW,KAAA,EAAM;AACjD,MAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,IACf,CAAA;AAEA,IAAA,EAAA,CAAG,EAAA,CAAG,SAAS,QAAQ,CAAA;AACvB,IAAA,OAAA,CAAQ,EAAA,CAAG,UAAU,QAAQ,CAAA;AAC7B,IAAA,OAAA,CAAQ,EAAA,CAAG,WAAW,QAAQ,CAAA;AAE9B,IAAA,EAAA,CAAG,EAAA,CAAG,MAAA,EAAQ,OAAO,IAAA,KAAS;AAC7B,MAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAK,EAAG;AAClB,MAAA,IAAI;AACH,QAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC/B,QAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,oBAAA,CAAqB,OAAO,CAAA;AACxD,QAAA,IAAI,QAAA,EAAU;AACb,UAAA,OAAA,CAAQ,OAAO,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,SAAA,CAAU,QAAQ,CAAC;AAAA,CAAI,CAAA;AAAA,QACrD;AAAA,MACD,SAAS,CAAA,EAAY;AACpB,QAAA,GAAA,CAAI,KAAA,CAAM,CAAA,qBAAA,EAAyB,CAAA,CAAY,OAAO,CAAA,CAAE,CAAA;AAAA,MACzD;AAAA,IACD,CAAC,CAAA;AAAA,EACF;AAAA,EAEO,SAAA,GAA+B;AACrC,IAAA,OAAO,IAAA,CAAK,UAAA;AAAA,EACb;AACD","file":"chunk-OPYSUDSW.js","sourcesContent":["// Copyright 2026 Nekzus Solutions and contributors\n// SPDX-License-Identifier: Apache-2.0\n\nimport { randomUUID } from \"node:crypto\";\nimport { serve } from \"@hono/node-server\";\nimport type { WebStandardStreamableHTTPServerTransport } from \"@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js\";\nimport type { JSONRPCMessage } from \"@modelcontextprotocol/sdk/types.js\";\nimport { Hono } from \"hono\";\nimport { cors } from \"hono/cors\";\nimport { MCP_LEGACY_SUPPORT_ENABLED } from \"../gateway/mcp-compat.js\";\nimport type { LiopServer } from \"../server/index.js\";\nimport { log } from \"../utils/logger.js\";\nimport { LiopMcpBridge } from \"./index.js\";\n\n/**\n * Configuration options for LiopStreamBridge.\n */\nexport interface LiopStreamBridgeOptions {\n\t/** Port to listen on (default: 3000) */\n\tport?: number;\n\t/** Max concurrent sessions per IP (default: 5) */\n\tmaxSessionsPerIp?: number;\n\t/** Session idle timeout in milliseconds (default: 30 min) */\n\tsessionTimeoutMs?: number;\n}\n\n/**\n * @mcp-legacy Internal metadata for tracked legacy sessions (2025-era).\n * Remove when v1 EOL.\n */\ninterface SessionEntry {\n\ttransport: WebStandardStreamableHTTPServerTransport;\n\tlastActivity: number;\n\tclientIp: string;\n}\n\nconst DEFAULT_MAX_SESSIONS_PER_IP = 10;\nconst DEFAULT_SESSION_TIMEOUT_MS = 30 * 60 * 1000; // 30 minutes\nconst EVICTION_INTERVAL_MS = 60 * 1000; // Check every minute\n\n/**\n * LiopStreamBridge\n *\n * Exposes a LiopServer over a remote HTTP network using the industry-standard\n * MCP Streamable HTTP Transport + Hono JS.\n *\n * Supports concurrent multi-client connections via per-session transport instances (Map pattern).\n * External agents connect using only a URL + Bearer Token (Zero-Trust).\n *\n * Security hardening:\n * - Zero-Trust Bearer Token enforcement\n * - Per-IP rate limiting on session creation\n * - Automatic eviction of idle sessions (TTL)\n */\nexport class LiopStreamBridge {\n\tprivate app: Hono;\n\tprivate httpServer: ReturnType<typeof serve> | null = null;\n\tprivate bridgeLogic: LiopMcpBridge;\n\tprivate activeSessions: Map<string, SessionEntry>;\n\tprivate evictionTimer: ReturnType<typeof setInterval> | null = null;\n\tprivate maxSessionsPerIp: number;\n\tprivate sessionTimeoutMs: number;\n\n\tconstructor(\n\t\tinternalServer: LiopServer,\n\t\tprivate options: LiopStreamBridgeOptions = {},\n\t) {\n\t\tthis.app = new Hono();\n\t\tthis.bridgeLogic = new LiopMcpBridge(internalServer);\n\t\tthis.activeSessions = new Map();\n\t\tthis.maxSessionsPerIp =\n\t\t\toptions.maxSessionsPerIp ?? DEFAULT_MAX_SESSIONS_PER_IP;\n\t\tthis.sessionTimeoutMs =\n\t\t\toptions.sessionTimeoutMs ?? DEFAULT_SESSION_TIMEOUT_MS;\n\n\t\tthis.setupRoutes();\n\t}\n\n\t/**\n\t * Creates a new per-session transport instance and wires it to the LIOPMcpBridge logic.\n\t */\n\tprivate async createSessionTransport(\n\t\tclientIp: string,\n\t): Promise<WebStandardStreamableHTTPServerTransport> {\n\t\tconst { WebStandardStreamableHTTPServerTransport } = await import(\n\t\t\t\"@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js\"\n\t\t);\n\t\tconst transport = new WebStandardStreamableHTTPServerTransport({\n\t\t\tsessionIdGenerator: () => randomUUID(),\n\t\t\tonsessioninitialized: (sessionId: string) => {\n\t\t\t\tthis.activeSessions.set(sessionId, {\n\t\t\t\t\ttransport,\n\t\t\t\t\tlastActivity: Date.now(),\n\t\t\t\t\tclientIp,\n\t\t\t\t});\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-StreamBridge] Session opened: ${sessionId} (IP: ${clientIp})`,\n\t\t\t\t);\n\t\t\t},\n\t\t});\n\n\t\t// Wire the transport's incoming messages to the LiopMcpBridge JSON-RPC router\n\t\ttransport.onmessage = async (message: JSONRPCMessage) => {\n\t\t\t// Touch activity timestamp on every message\n\t\t\tif (transport.sessionId) {\n\t\t\t\tconst entry = this.activeSessions.get(transport.sessionId);\n\t\t\t\tif (entry) entry.lastActivity = Date.now();\n\t\t\t}\n\n\t\t\ttry {\n\t\t\t\tconst result = await this.bridgeLogic.handleJsonRpcRequest(\n\t\t\t\t\tmessage as unknown as Record<string, unknown>,\n\t\t\t\t);\n\t\t\t\t// Notifications return undefined — no response needed\n\t\t\t\tif (result !== undefined) {\n\t\t\t\t\tawait transport.send(result as JSONRPCMessage);\n\t\t\t\t}\n\t\t\t} catch (err: unknown) {\n\t\t\t\tlog.info(\"[LIOP-StreamBridge] JSON-RPC error:\", (err as Error).message);\n\t\t\t}\n\t\t};\n\n\t\ttransport.onclose = () => {\n\t\t\tif (transport.sessionId) {\n\t\t\t\tthis.activeSessions.delete(transport.sessionId);\n\t\t\t\tlog.info(`[LIOP-StreamBridge] Session closed: ${transport.sessionId}`);\n\t\t\t}\n\t\t};\n\n\t\treturn transport;\n\t}\n\n\t/**\n\t * Returns the number of active sessions for a given IP.\n\t */\n\tprivate countSessionsByIp(ip: string): number {\n\t\tlet count = 0;\n\t\tfor (const entry of this.activeSessions.values()) {\n\t\t\tif (entry.clientIp === ip) count++;\n\t\t}\n\t\treturn count;\n\t}\n\n\t/**\n\t * Extracts client IP from the request (supports X-Forwarded-For for reverse proxies).\n\t */\n\tprivate getClientIp(c: {\n\t\treq: { header: (name: string) => string | undefined };\n\t}): string {\n\t\treturn (\n\t\t\tc.req.header(\"x-forwarded-for\")?.split(\",\")[0]?.trim() ||\n\t\t\tc.req.header(\"x-real-ip\") ||\n\t\t\t\"unknown\"\n\t\t);\n\t}\n\n\t/**\n\t * Evicts sessions that have been idle longer than the configured timeout.\n\t */\n\tprivate evictIdleSessions(): void {\n\t\tconst now = Date.now();\n\t\tfor (const [sessionId, entry] of this.activeSessions) {\n\t\t\tif (now - entry.lastActivity > this.sessionTimeoutMs) {\n\t\t\t\tlog.info(`[LIOP-StreamBridge] Evicting idle session: ${sessionId}`);\n\t\t\t\tentry.transport.close().catch(() => {\n\t\t\t\t\t/* Swallow close errors */\n\t\t\t\t});\n\t\t\t\tthis.activeSessions.delete(sessionId);\n\t\t\t}\n\t\t}\n\t}\n\n\tprivate setupRoutes() {\n\t\tthis.app.use(\"*\", cors());\n\n\t\t// Initialize strict zero-trust token if not provided\n\t\tif (!process.env.ZERO_TRUST_TOKEN) {\n\t\t\tprocess.env.ZERO_TRUST_TOKEN = randomUUID();\n\t\t\tlog.info(\"=\".repeat(60));\n\t\t\tlog.info(\"⚠️ STRICT ZERO-TRUST MODE ENABLED ⚠️\");\n\t\t\tlog.info(\"No ZERO_TRUST_TOKEN found in environment.\");\n\t\t\tlog.info(\"A secure ephemeral token has been generated for this session:\");\n\t\t\tlog.info(`Token: ${process.env.ZERO_TRUST_TOKEN}`);\n\t\t\tlog.info(\"=\".repeat(60));\n\t\t}\n\n\t\t// ZTA (Zero-Trust Architecture) Security Middleware\n\t\tthis.app.use(\"/mcp\", async (c, next) => {\n\t\t\tconst auth = c.req.header(\"Authorization\");\n\t\t\tif (!auth?.startsWith(\"Bearer \")) {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{ error: \"Unauthorized: LIOP Zero-Trust Policy Enforced\" },\n\t\t\t\t\t401,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tconst token = auth.slice(7);\n\t\t\tconst expectedToken = process.env.ZERO_TRUST_TOKEN;\n\n\t\t\t// Check static token fallback first (retrocompatibility)\n\t\t\tif (expectedToken && token === expectedToken) {\n\t\t\t\tawait next();\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\t// Validate with JWT Validator if configured on the server\n\t\t\tconst jwtValidator = this.bridgeLogic.getServer()?.jwtValidator;\n\t\t\tif (jwtValidator) {\n\t\t\t\ttry {\n\t\t\t\t\tawait jwtValidator.validate(token);\n\t\t\t\t\tawait next();\n\t\t\t\t\treturn;\n\t\t\t\t} catch (e: unknown) {\n\t\t\t\t\tlog.info(\n\t\t\t\t\t\t`[LIOP-StreamBridge] JWT Validation failed: ${(e as Error).message}`,\n\t\t\t\t\t);\n\t\t\t\t\treturn c.json(\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\terror: `Unauthorized: JWT Validation failed - ${(e as Error).message}`,\n\t\t\t\t\t\t},\n\t\t\t\t\t\t401,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tlog.info(\n\t\t\t\t\"[LIOP-StreamBridge] ALERT: Access denied - Invalid Zero-Trust token.\",\n\t\t\t);\n\t\t\treturn c.json(\n\t\t\t\t{ error: \"Unauthorized: LIOP Zero-Trust Policy Enforced\" },\n\t\t\t\t401,\n\t\t\t);\n\t\t});\n\n\t\t// MCP Streamable HTTP & Stateless Handler\n\t\tthis.app.all(\"/mcp\", async (c) => {\n\t\t\tconst sessionId = c.req.header(\"mcp-session-id\");\n\n\t\t\t// Route to existing session if legacy session ID is present\n\t\t\tif (sessionId) {\n\t\t\t\t/** @mcp-legacy Route to session if legacy session ID present. Remove when v1 EOL. */\n\t\t\t\tif (!MCP_LEGACY_SUPPORT_ENABLED) {\n\t\t\t\t\treturn c.json(\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\terror:\n\t\t\t\t\t\t\t\t\"Session-based routing is retired. Use stateless MCP 2026-07-28 requests.\",\n\t\t\t\t\t\t},\n\t\t\t\t\t\t404,\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\tconst existing = this.activeSessions.get(sessionId);\n\t\t\t\tif (!existing) {\n\t\t\t\t\treturn c.json({ error: \"Session not found\" }, 404);\n\t\t\t\t}\n\t\t\t\t// Touch activity on every routed request\n\t\t\t\texisting.lastActivity = Date.now();\n\n\t\t\t\tconst response = await existing.transport.handleRequest(c.req.raw);\n\n\t\t\t\t// If DELETE, the transport closes internally but onclose may not fire.\n\t\t\t\t// Explicitly clean up the session from the Map.\n\t\t\t\tif (c.req.method === \"DELETE\") {\n\t\t\t\t\tthis.activeSessions.delete(sessionId);\n\t\t\t\t\tlog.info(`[LIOP-StreamBridge] Session closed (DELETE): ${sessionId}`);\n\t\t\t\t}\n\n\t\t\t\treturn response;\n\t\t\t}\n\n\t\t\t// Stateless direct JSON-RPC POST (MCP v2 modern era)\n\t\t\tconst contentType = c.req.header(\"content-type\") || \"\";\n\t\t\tif (c.req.method === \"POST\" && contentType.includes(\"application/json\")) {\n\t\t\t\ttry {\n\t\t\t\t\tconst body = (await c.req.json()) as Record<string, unknown>;\n\t\t\t\t\t// If this is a modern request or non-session JSON-RPC\n\t\t\t\t\tif (\n\t\t\t\t\t\tbody.method === \"server/discover\" ||\n\t\t\t\t\t\t(body.params as Record<string, unknown>)?._meta ||\n\t\t\t\t\t\t!MCP_LEGACY_SUPPORT_ENABLED\n\t\t\t\t\t) {\n\t\t\t\t\t\tconst result = await this.bridgeLogic.handleJsonRpcRequest(body);\n\t\t\t\t\t\tif (result !== undefined) {\n\t\t\t\t\t\t\treturn c.json(result);\n\t\t\t\t\t\t}\n\t\t\t\t\t\treturn c.body(null, 204);\n\t\t\t\t\t}\n\t\t\t\t} catch {\n\t\t\t\t\t// Fall through to legacy transport if JSON parsing fails or payload is streaming handshake\n\t\t\t\t}\n\t\t\t}\n\n\t\t\t// No session ID → Legacy Client initializing via WebStandardStreamableHTTPServerTransport\n\t\t\t/** @mcp-legacy Create legacy session transport. Remove when v1 EOL. */\n\t\t\tif (!MCP_LEGACY_SUPPORT_ENABLED) {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{\n\t\t\t\t\t\terror:\n\t\t\t\t\t\t\t\"Stateless MCP 2026-07-28 is active. Direct JSON-RPC POST required.\",\n\t\t\t\t\t},\n\t\t\t\t\t400,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tconst clientIp = this.getClientIp(c);\n\t\t\tconst currentSessions = this.countSessionsByIp(clientIp);\n\t\t\tif (currentSessions >= this.maxSessionsPerIp) {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-StreamBridge] Rate limit hit for IP: ${clientIp} (${currentSessions} sessions)`,\n\t\t\t\t);\n\t\t\t\treturn c.json({ error: \"Too Many Sessions: Rate limit exceeded\" }, 429);\n\t\t\t}\n\n\t\t\tconst transport = await this.createSessionTransport(clientIp);\n\t\t\treturn await transport.handleRequest(c.req.raw);\n\t\t});\n\t}\n\n\t/**\n\t * Starts the LiopStreamBridge HTTP server and session eviction timer.\n\t */\n\tpublic async start(port?: number): Promise<void> {\n\t\tconst listenPort = port ?? this.options.port ?? 3000;\n\n\t\t// Start the idle session eviction timer\n\t\tthis.evictionTimer = setInterval(\n\t\t\t() => this.evictIdleSessions(),\n\t\t\tEVICTION_INTERVAL_MS,\n\t\t);\n\n\t\treturn new Promise((resolve) => {\n\t\t\tthis.httpServer = serve(\n\t\t\t\t{\n\t\t\t\t\tfetch: this.app.fetch,\n\t\t\t\t\tport: listenPort,\n\t\t\t\t},\n\t\t\t\t(info) => {\n\t\t\t\t\tlog.info(\n\t\t\t\t\t\t`[LIOP-StreamBridge] Streamable HTTP Gateway on http://localhost:${info.port}/mcp`,\n\t\t\t\t\t);\n\t\t\t\t\tresolve();\n\t\t\t\t},\n\t\t\t);\n\t\t});\n\t}\n\n\t/**\n\t * Graceful shutdown — closes all active sessions, stops timers, and releases port.\n\t */\n\tpublic async stop(): Promise<void> {\n\t\tif (this.evictionTimer) {\n\t\t\tclearInterval(this.evictionTimer);\n\t\t\tthis.evictionTimer = null;\n\t\t}\n\n\t\tfor (const [id, entry] of this.activeSessions) {\n\t\t\tawait entry.transport.close();\n\t\t\tthis.activeSessions.delete(id);\n\t\t}\n\n\t\tif (this.httpServer) {\n\t\t\tthis.httpServer.close();\n\t\t\tlog.info(\"[LIOP-StreamBridge] HTTP ports released.\");\n\t\t}\n\t}\n}\n","// Copyright 2026 Nekzus Solutions and contributors\n// SPDX-License-Identifier: Apache-2.0\n\nimport type { McpServer } from \"@modelcontextprotocol/sdk/server/mcp.js\";\nimport {\n\tisLegacyRequest,\n\tMCP_LEGACY_SUPPORT_ENABLED,\n\tMCP_PROTOCOL_VERSION_LEGACY,\n} from \"../gateway/mcp-compat.js\";\nimport type { LiopServer, LiopServerOptions } from \"../server/index.js\";\nimport {\n\ttype CallToolRequest,\n\ttype CallToolResult,\n\tMCP_PROTOCOL_VERSION,\n} from \"../types.js\";\nimport { log } from \"../utils/logger.js\";\n\nexport interface LiopBridgeOptions {\n\tpublishToMesh?: boolean;\n\tmeshIdentity?: string;\n\tserverInfo?: {\n\t\tname: string;\n\t\tversion: string;\n\t};\n\tsecurity?: LiopServerOptions[\"security\"];\n}\n\n/**\n * LIOP MCP Bridge\n * A bi-directional bridge that allows legacy MCP servers to join the LIOP mesh,\n * or exposes a LIOP server as an MCP-compatible stdio process for tools like Claude Desktop.\n */\nexport class LiopMcpBridge {\n\tprivate liopServer: LiopServer | null = null;\n\tprivate legacyMcpServer: McpServer | null = null;\n\tconstructor(\n\t\t// biome-ignore lint/suspicious/noExplicitAny: polymorphic source detection\n\t\tsource: LiopServer | McpServer | any,\n\t\tprivate options: LiopBridgeOptions = {},\n\t) {\n\t\t// Determine mode: Exposing LIOP to MCP (Claude) or Wrapping MCP to LIOP (Mesh)\n\t\t// We use constructor name check to avoid hard dependency on optional SDK at runtime start\n\t\tif (source?.constructor?.name === \"LiopServer\") {\n\t\t\tthis.liopServer = source as LiopServer;\n\t\t\tlog.info(\"[LIOP-Bridge] Mode: EXPOSE (LIOP -> MCP Stdio)\");\n\t\t} else if (source?.constructor?.name === \"McpServer\") {\n\t\t\tthis.legacyMcpServer = source as McpServer;\n\t\t\tlog.info(\"[LIOP-Bridge] Mode: WRAP (Legacy MCP -> LIOP Mesh)\");\n\t\t} else {\n\t\t\t// Fallback for inferred legacy MCP servers\n\t\t\tthis.legacyMcpServer = source as McpServer;\n\t\t\tlog.info(\"[LIOP-Bridge] Mode: WRAP (Inferred Legacy MCP -> LIOP Mesh)\");\n\t\t}\n\t}\n\n\t/**\n\t * Handles an incoming standard MCP JSON-RPC 2.0 payload.\n\t * Pipes it to the underlying server (LIOP or Legacy MCP).\n\t */\n\tpublic async handleJsonRpcRequest(\n\t\tpayload: Record<string, unknown>,\n\t): Promise<unknown> {\n\t\tconst id = payload.id as string | number;\n\t\tconst method = payload.method as string;\n\t\tconst params = payload.params as Record<string, unknown> | undefined;\n\n\t\tif (payload.jsonrpc !== \"2.0\") {\n\t\t\treturn this.errorResponse(id, -32600, \"Invalid Request\");\n\t\t}\n\n\t\t// Mode: EXPOSE (Standard behavior used by Claude Desktop)\n\t\tif (this.liopServer) {\n\t\t\treturn this.handleLiopToMcp(id, method, params);\n\t\t}\n\n\t\t// Mode: WRAP (Redirecting via internal LiopServer after connect())\n\t\tif (this.legacyMcpServer && this.liopServer) {\n\t\t\treturn this.handleLiopToMcp(id, method, params);\n\t\t}\n\n\t\treturn this.errorResponse(id, -32601, \"Bridge source not configured\");\n\t}\n\n\tprivate async handleLiopToMcp(\n\t\tid: string | number,\n\t\tmethod: string,\n\t\tparams: Record<string, unknown> | undefined,\n\t): Promise<unknown> {\n\t\tif (!this.liopServer) return null;\n\n\t\tconst isLegacy =\n\t\t\tMCP_LEGACY_SUPPORT_ENABLED && isLegacyRequest({ method, params, id });\n\n\t\tif (method === \"initialize\") {\n\t\t\t/** @mcp-legacy Initialize for stdio bridge. Remove when v1 EOL. */\n\t\t\tif (!MCP_LEGACY_SUPPORT_ENABLED) {\n\t\t\t\treturn this.errorResponse(id, -32601, \"Method retired: initialize\");\n\t\t\t}\n\t\t\treturn this.successResponse(id, {\n\t\t\t\tprotocolVersion: MCP_PROTOCOL_VERSION_LEGACY,\n\t\t\t\tcapabilities: {\n\t\t\t\t\tprompts: { listChanged: true },\n\t\t\t\t\tresources: { listChanged: true },\n\t\t\t\t\ttools: { listChanged: true },\n\t\t\t\t},\n\t\t\t\tserverInfo: this.liopServer.getServerInfo(),\n\t\t\t});\n\t\t}\n\n\t\tif (method === \"server/discover\") {\n\t\t\treturn this.successResponse(id, {\n\t\t\t\tresultType: \"complete\",\n\t\t\t\tsupportedVersions: MCP_LEGACY_SUPPORT_ENABLED\n\t\t\t\t\t? [MCP_PROTOCOL_VERSION, MCP_PROTOCOL_VERSION_LEGACY]\n\t\t\t\t\t: [MCP_PROTOCOL_VERSION],\n\t\t\t\tcapabilities: {\n\t\t\t\t\tprompts: { listChanged: true },\n\t\t\t\t\tresources: { listChanged: true },\n\t\t\t\t\ttools: { listChanged: true },\n\t\t\t\t},\n\t\t\t\tserverInfo: this.liopServer.getServerInfo(),\n\t\t\t});\n\t\t}\n\n\t\tif (method === \"notifications/initialized\") return undefined;\n\t\tif (method === \"ping\") return this.successResponse(id, {});\n\n\t\tif (method === \"tools/list\") {\n\t\t\tconst tools = this.liopServer\n\t\t\t\t.listTools()\n\t\t\t\t.sort((a, b) => a.name.localeCompare(b.name));\n\t\t\treturn this.successResponse(\n\t\t\t\tid,\n\t\t\t\tisLegacy\n\t\t\t\t\t? { tools }\n\t\t\t\t\t: {\n\t\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t\t\tttlMs: 300_000,\n\t\t\t\t\t\t\tcacheScope: \"public\",\n\t\t\t\t\t\t\ttools,\n\t\t\t\t\t\t},\n\t\t\t);\n\t\t}\n\n\t\tif (method === \"resources/list\") {\n\t\t\tconst resources = this.liopServer\n\t\t\t\t.listResources()\n\t\t\t\t.sort((a, b) => a.uri.localeCompare(b.uri));\n\t\t\treturn this.successResponse(\n\t\t\t\tid,\n\t\t\t\tisLegacy\n\t\t\t\t\t? { resources }\n\t\t\t\t\t: {\n\t\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t\t\tttlMs: 300_000,\n\t\t\t\t\t\t\tcacheScope: \"public\",\n\t\t\t\t\t\t\tresources,\n\t\t\t\t\t\t},\n\t\t\t);\n\t\t}\n\n\t\tif (method === \"prompts/list\") {\n\t\t\tconst prompts = this.liopServer\n\t\t\t\t.listPrompts()\n\t\t\t\t.sort((a, b) => a.name.localeCompare(b.name));\n\t\t\treturn this.successResponse(\n\t\t\t\tid,\n\t\t\t\tisLegacy\n\t\t\t\t\t? { prompts }\n\t\t\t\t\t: {\n\t\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t\t\tttlMs: 300_000,\n\t\t\t\t\t\t\tcacheScope: \"public\",\n\t\t\t\t\t\t\tprompts,\n\t\t\t\t\t\t},\n\t\t\t);\n\t\t}\n\n\t\tif (method === \"prompts/get\") {\n\t\t\tif (!params?.name) {\n\t\t\t\treturn this.errorResponse(id, -32602, \"Missing prompt name\");\n\t\t\t}\n\t\t\ttry {\n\t\t\t\tconst result = await this.liopServer.getPrompt({\n\t\t\t\t\tname: params.name as string,\n\t\t\t\t\targuments: params.arguments as Record<string, string> | undefined,\n\t\t\t\t});\n\t\t\t\treturn this.successResponse(\n\t\t\t\t\tid,\n\t\t\t\t\tisLegacy || typeof result !== \"object\" || result === null\n\t\t\t\t\t\t? result\n\t\t\t\t\t\t: { resultType: \"complete\", ...result },\n\t\t\t\t);\n\t\t\t} catch (err: unknown) {\n\t\t\t\treturn this.errorResponse(id, -32000, (err as Error).message);\n\t\t\t}\n\t\t}\n\n\t\tif (method === \"resources/read\") {\n\t\t\tif (!params?.uri) {\n\t\t\t\treturn this.errorResponse(id, -32602, \"Missing resource URI\");\n\t\t\t}\n\t\t\ttry {\n\t\t\t\tconst result = await this.liopServer.readResource(params.uri as string);\n\t\t\t\treturn this.successResponse(\n\t\t\t\t\tid,\n\t\t\t\t\tisLegacy\n\t\t\t\t\t\t? result\n\t\t\t\t\t\t: typeof result === \"object\" && result !== null\n\t\t\t\t\t\t\t? {\n\t\t\t\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t\t\t\t\tttlMs: 60_000,\n\t\t\t\t\t\t\t\t\tcacheScope: \"private\",\n\t\t\t\t\t\t\t\t\t...result,\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t: {\n\t\t\t\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t\t\t\t\tttlMs: 60_000,\n\t\t\t\t\t\t\t\t\tcacheScope: \"private\",\n\t\t\t\t\t\t\t\t\tcontents: result,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t);\n\t\t\t} catch (err: unknown) {\n\t\t\t\treturn this.errorResponse(id, -32000, (err as Error).message);\n\t\t\t}\n\t\t}\n\n\t\tif (method === \"tools/call\") {\n\t\t\tif (!params?.name) {\n\t\t\t\treturn this.errorResponse(id, -32602, \"Missing tool name\");\n\t\t\t}\n\t\t\tconst request: CallToolRequest = {\n\t\t\t\tname: params.name as string,\n\t\t\t\targuments: (params.arguments as Record<string, unknown>) || {},\n\t\t\t};\n\n\t\t\ttry {\n\t\t\t\tconst result: CallToolResult = await this.liopServer.callTool(request);\n\t\t\t\t// If the tool execution returned an error (e.g. policy violation), we bypass\n\t\t\t\t// ZK-Receipt verification because no cryptographic proof is generated for errors.\n\t\t\t\tconst isVerified = result.isError\n\t\t\t\t\t? true\n\t\t\t\t\t: await this.verifyZkReceipt(request, result);\n\n\t\t\t\tif (!isVerified) {\n\t\t\t\t\treturn this.successResponse(id, {\n\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\t\ttext: \"ALERT [LIOP ZERO-TRUST SHIELD] ZK Verification Failed. The mathematical ImageID does not match the original payload.\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t],\n\t\t\t\t\t\tisError: true,\n\t\t\t\t\t});\n\t\t\t\t}\n\n\t\t\t\treturn this.successResponse(\n\t\t\t\t\tid,\n\t\t\t\t\tisLegacy\n\t\t\t\t\t\t? result\n\t\t\t\t\t\t: {\n\t\t\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t\t\t\t...result,\n\t\t\t\t\t\t\t},\n\t\t\t\t);\n\t\t\t} catch (err: unknown) {\n\t\t\t\treturn this.errorResponse(id, -32000, (err as Error).message);\n\t\t\t}\n\t\t}\n\n\t\treturn this.errorResponse(id, -32601, \"Method not found\");\n\t}\n\n\tprivate successResponse(\n\t\tid: string | number | null | undefined,\n\t\tresult: unknown,\n\t) {\n\t\treturn { jsonrpc: \"2.0\", id, result };\n\t}\n\n\tprivate errorResponse(id: string | number, code: number, message: string) {\n\t\treturn { jsonrpc: \"2.0\", id, error: { code, message } };\n\t}\n\n\tprivate async verifyZkReceipt(\n\t\trequest: CallToolRequest,\n\t\tresult: CallToolResult,\n\t): Promise<boolean> {\n\t\tif (\n\t\t\t!request.arguments?.payload ||\n\t\t\ttypeof request.arguments.payload !== \"string\"\n\t\t) {\n\t\t\treturn true;\n\t\t}\n\n\t\ttry {\n\t\t\tconst payload = request.arguments.payload as string;\n\t\t\tconst contentText = result.content[0]?.text;\n\n\t\t\tif (contentText && typeof contentText === \"string\") {\n\t\t\t\ttry {\n\t\t\t\t\tconst data = JSON.parse(contentText);\n\n\t\t\t\t\tif (data.image_id || data.zk_receipt) {\n\t\t\t\t\t\t// 1. Instantiate the Industrial Verifier ( backed by Piscina Worker Pool )\n\t\t\t\t\t\tconst { LiopVerifier } = await import(\"../crypto/verifier.js\");\n\t\t\t\t\t\tconst verifier = new LiopVerifier();\n\n\t\t\t\t\t\t// 2. Delegate the heavy mathematical check (ZK Journal + Seal)\n\t\t\t\t\t\tconst isAuthentic = await verifier.verifyZkReceipt(\n\t\t\t\t\t\t\tBuffer.from(payload, \"utf-8\"),\n\t\t\t\t\t\t\tdata.image_id,\n\t\t\t\t\t\t\tBuffer.from(data.zk_receipt || \"\", \"base64\"),\n\t\t\t\t\t\t\tundefined,\n\t\t\t\t\t\t\tdata.computation_result,\n\t\t\t\t\t\t);\n\n\t\t\t\t\t\tif (!isAuthentic) {\n\t\t\t\t\t\t\treturn false;\n\t\t\t\t\t\t}\n\n\t\t\t\t\t\tdata.audit_status =\n\t\t\t\t\t\t\t\"VERIFIED: ZK-Receipt & ImageID Mathematically Verified by LiopMcpBridge\";\n\t\t\t\t\t\tresult.content[0].text = JSON.stringify(data);\n\t\t\t\t\t}\n\t\t\t\t} catch {\n\t\t\t\t\t// Output not JSON\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn true;\n\t\t} catch (e) {\n\t\t\tlog.info(\"[LIOP-Bridge] ZK-Verifier Failure:\", e);\n\t\t\treturn false;\n\t\t}\n\t}\n\n\t/**\n\t * Connects the bridge via stdio or Mesh depending on mode.\n\t */\n\tpublic async connect(): Promise<void> {\n\t\t// In WRAP mode, we actually need to create a LiopServer and join the mesh\n\t\tif (this.legacyMcpServer) {\n\t\t\tconst { LiopServer } = await import(\"../server/index.js\");\n\t\t\tthis.liopServer = new LiopServer(\n\t\t\t\tthis.options.serverInfo || {\n\t\t\t\t\tname: \"liop-bridge\",\n\t\t\t\t\tversion: \"1.0.0\",\n\t\t\t\t},\n\t\t\t\t{ security: this.options.security },\n\t\t\t);\n\n\t\t\tif (this.options.publishToMesh) {\n\t\t\t\tawait this.liopServer.connect();\n\n\t\t\t\t// Automatically Bridge Legacy Capabilities to LIOP Mesh\n\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: Internal legacy MCP properties are completely opaque and unexported\n\t\t\t\tconst legacy = this.legacyMcpServer as any;\n\n\t\t\t\t// 1. Sync Tools\n\t\t\t\tif (legacy._registeredTools) {\n\t\t\t\t\tfor (const [name, tool] of Object.entries(legacy._registeredTools)) {\n\t\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: Opaque legacy structure\n\t\t\t\t\t\tconst t = tool as any;\n\t\t\t\t\t\tthis.liopServer.tool(\n\t\t\t\t\t\t\tname,\n\t\t\t\t\t\t\tt.description || \"\",\n\t\t\t\t\t\t\tt.inputSchema || {},\n\t\t\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: Opaque legacy callback args\n\t\t\t\t\t\t\tasync (args: any) => {\n\t\t\t\t\t\t\t\treturn await t.handler(args);\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\t// 2. Sync Resources\n\t\t\t\tif (legacy._registeredResources) {\n\t\t\t\t\tfor (const [uri, resource] of Object.entries(\n\t\t\t\t\t\tlegacy._registeredResources,\n\t\t\t\t\t)) {\n\t\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: Opaque legacy structure\n\t\t\t\t\t\tconst r = resource as any;\n\t\t\t\t\t\tthis.liopServer.resource(\n\t\t\t\t\t\t\tr.name,\n\t\t\t\t\t\t\turi,\n\t\t\t\t\t\t\tr.metadata?.description || \"\",\n\t\t\t\t\t\t\tr.metadata?.mimeType || \"application/octet-stream\",\n\t\t\t\t\t\t\tasync () => {\n\t\t\t\t\t\t\t\tconst res = await r.readCallback(new URL(uri));\n\t\t\t\t\t\t\t\treturn res.contents[0].text;\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn;\n\t\t}\n\n\t\t// In EXPOSE mode, listen to stdio (Claude Desktop)\n\t\tconst readline = await import(\"node:readline\");\n\t\tconst rl = readline.createInterface({\n\t\t\tinput: process.stdin,\n\t\t\toutput: process.stdout,\n\t\t\tterminal: false,\n\t\t});\n\n\t\tconst shutdown = async () => {\n\t\t\tlog.info(\"[LIOP-Bridge] Disconnecting session...\");\n\t\t\tif (this.liopServer) await this.liopServer.close();\n\t\t\tprocess.exit(0);\n\t\t};\n\n\t\trl.on(\"close\", shutdown);\n\t\tprocess.on(\"SIGINT\", shutdown);\n\t\tprocess.on(\"SIGTERM\", shutdown);\n\n\t\trl.on(\"line\", async (line) => {\n\t\t\tif (!line.trim()) return;\n\t\t\ttry {\n\t\t\t\tconst payload = JSON.parse(line);\n\t\t\t\tconst response = await this.handleJsonRpcRequest(payload);\n\t\t\t\tif (response) {\n\t\t\t\t\tprocess.stdout.write(`${JSON.stringify(response)}\\n`);\n\t\t\t\t}\n\t\t\t} catch (e: unknown) {\n\t\t\t\tlog.error(`[LIOP-Bridge] Error: ${(e as Error).message}`);\n\t\t\t}\n\t\t});\n\t}\n\n\tpublic getServer(): LiopServer | null {\n\t\treturn this.liopServer;\n\t}\n}\n\nexport * from \"./stream.js\";\n"]}