@nekzus/liop 2.4.0-alpha.11 → 2.4.0-alpha.13

package/dist/chunk-L6J72C5X.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/utils/mcpCompact.ts","../src/gateway/router.ts"],"names":["selfId","id"],"mappings":";;;;;;;;;;;;AAUO,SAAS,0BAAA,GAAsC;AACrD,EAAA,MAAM,IACL,OAAA,CAAQ,GAAA,CAAI,kCAAA,EAAoC,WAAA,GAAc,IAAA,EAAK;AACpE,EAAA,IAAI,MAAM,GAAA,IAAO,CAAA,KAAM,OAAA,IAAW,CAAA,KAAM,MAAM,OAAO,KAAA;AACrD,EAAA,OAAO,IAAA;AACR;AAKO,SAAS,gCAAgC,WAAA,EAA6B;AAC5E,EAAA,IAAI,CAAA,GAAI,WAAA;AACR,EAAA,MAAM,OAAA,GAAU;AAAA,IACf,qBAAA;AAAA,IACA,yBAAA;AAAA,IACA;AAAA;AAAA,GACD;AACA,EAAA,KAAA,MAAW,KAAK,OAAA,EAAS;AACxB,IAAA,MAAM,CAAA,GAAI,CAAA,CAAE,OAAA,CAAQ,CAAC,CAAA;AACrB,IAAA,IAAI,MAAM,EAAA,EAAI;AACb,MAAA,CAAA,GAAI,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA;AAChB,MAAA;AAAA,IACD;AAAA,EACD;AACA,EAAA,OAAO,EAAE,OAAA,EAAQ;AAClB;;;ACcA,IAAM,oBAAA,GAAuB,GAAA;AAG7B,IAAM,0BAAA,GAA6B,CAAA;AAW5B,IAAM,aAAA,GAAN,MAAM,cAAA,CAAc;AAAA,EA0B1B,WAAA,CACS,UAAA,EACA,QAAA,GAA4B,IAAA,EAC5B,iBAAiB,KAAA,EACxB;AAHO,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AACA,IAAA,IAAA,CAAA,QAAA,GAAA,QAAA;AACA,IAAA,IAAA,CAAA,cAAA,GAAA,cAAA;AAGR,IAAA,IAAI,KAAK,QAAA,EAAU;AAClB,MAAA,IAAA,CAAK,QAAA,CAAS,wBAAwB,MAAM;AAC3C,QAAA,MAAM,cAAc,IAAA,CAAK,UAAA,CAAW,WAAU,CAAE,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,UAC3D,MAAM,CAAA,CAAE,IAAA;AAAA,UACR,aAAa,CAAA,CAAE,WAAA;AAAA,UACf,aAAa,CAAA,CAAE;AAAA,SAChB,CAAE,CAAA;AAEF,QAAA,MAAM,YAAY,IAAA,CAAK,UAAA,CAAW,eAAc,CAAE,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,UAC7D,MAAM,CAAA,CAAE,IAAA;AAAA,UACR,KAAK,CAAA,CAAE,GAAA;AAAA,UACP,aAAa,CAAA,CAAE,WAAA;AAAA,UACf,UAAU,CAAA,CAAE;AAAA,SACb,CAAE,CAAA;AAGF,QAAA,MAAM,YAAA,GAAgB,KAAK,UAAA,CAAmB,MAAA;AAE9C,QAAA,OAAO;AAAA,UACN,MAAA,EAAQ,IAAA,CAAK,QAAA,EAAU,SAAA,EAAU,IAAK,SAAA;AAAA,UACtC,UAAU,IAAA,CAAK,cAAA;AAAA,UACf,KAAA,EAAO,CAAC,GAAG,WAAW,CAAA;AAAA,UACtB,SAAA;AAAA,UACA,UAAA,EAAY,IAAA,CAAK,UAAA,CAAW,aAAA,EAAc;AAAA,UAC1C,YAAA,EAAc,IAAA,CAAK,UAAA,CAAW,YAAA,KAAiB,MAAA;AAAA,UAC/C,WAAW,YAAA,EAAc,SAAA;AAAA,UACzB,QAAA,EAAU,cAAc,QAAA,GACrB;AAAA,YACA,MAAA,EAAQ,YAAA,CAAa,QAAA,CAAS,MAAA,IAAU,gBAAA;AAAA,YACxC,aAAA,EAAe,YAAA,CAAa,QAAA,CAAS,aAAA,IAAiB,CAAA;AAAA,YACtD,cAAA,EAAgB,YAAA,CAAa,QAAA,CAAS,cAAA,IAAkB;AAAC,WAC1D,GACC;AAAA,SACJ;AAAA,MACD,CAAC,CAAA;AAGD,MAAA,IAAA,CAAK,QAAA,CAAS,gBAAA,EAAiB,CAAE,KAAA,CAAM,CAAC,GAAA,KAAiB;AACxD,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,8CAA8C,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,SAC/F;AAAA,MACD,CAAC,CAAA;AAAA,IACF;AAGA,IAAA,IAAI,OAAA,CAAQ,GAAA,CAAI,qBAAA,KAA0B,MAAA,EAAQ;AACjD,MAAA,OAAA,CAAQ,MAAA,CAAO,KAAA;AAAA,QACd;AAAA,OAED;AAAA,IACD;AAAA,EACD;AAAA,EAxDS,UAAA;AAAA,EACA,QAAA;AAAA,EACA,cAAA;AAAA;AAAA,EA3BD,aAAA,uBAGA,GAAA,EAAI;AAAA;AAAA,EAGJ,gBAAA,GAAyC,IAAA;AAAA;AAAA,EAG1C,QAAA,GAAyB,IAAI,YAAA,EAAa;AAAA;AAAA,EAG1C,cAAA;AAAA;AAAA,EAGC,oBAAA,uBAGA,GAAA,EAAI;AAAA,EAEZ,OAAwB,iCAAA,GAAoC,IAAA;AAAA,EAC5D,OAAwB,mCAAmC,CAAA,GAAI,GAAA;AAAA,EAC/D,OAAwB,6BAAA,GAAgC,GAAA;AAAA,EA6DjD,oBAAA,GAA+B;AACrC,IAAA,OAAO,KAAK,aAAA,CAAc,IAAA;AAAA,EAC3B;AAAA,EAEQ,wBAAwB,MAAA,EAAyB;AACxD,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,oBAAA,CAAqB,GAAA,CAAI,MAAM,CAAA;AAClD,IAAA,IAAI,CAAC,OAAO,OAAO,KAAA;AACnB,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,IAAI,GAAA,IAAO,KAAA,CAAM,aAAA,EAAe,OAAO,KAAA;AAEvC,IAAA,IACC,GAAA,GAAM,KAAA,CAAM,aAAA,GACZ,cAAA,CAAc,6BAAA,EACb;AACD,MAAA,GAAA,CAAI,IAAA;AAAA,QACH,CAAA,0CAAA,EAA6C,MAAM,CAAA,kBAAA,EAAqB,IAAA,CAAK,MAAM,KAAA,CAAM,aAAA,GAAgB,GAAA,IAAO,GAAI,CAAC,CAAA,YAAA;AAAA,OACtH;AACA,MAAA,KAAA,CAAM,aAAA,GAAgB,GAAA;AAAA,IACvB;AACA,IAAA,OAAO,IAAA;AAAA,EACR;AAAA,EAEQ,2BAA2B,MAAA,EAAsB;AACxD,IAAA,IAAA,CAAK,oBAAA,CAAqB,OAAO,MAAM,CAAA;AAAA,EACxC;AAAA,EAEQ,2BAA2B,MAAA,EAAsB;AACxD,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,oBAAA,CAAqB,GAAA,CAAI,MAAM,CAAA;AACjD,IAAA,MAAM,QAAA,GAAA,CAAY,IAAA,EAAM,QAAA,IAAY,CAAA,IAAK,CAAA;AACzC,IAAA,MAAM,UAAU,IAAA,CAAK,GAAA;AAAA,MACpB,eAAc,iCAAA,GACb,CAAA,IAAK,KAAK,GAAA,CAAI,CAAA,EAAG,WAAW,CAAC,CAAA;AAAA,MAC9B,cAAA,CAAc;AAAA,KACf;AACA,IAAA,IAAA,CAAK,oBAAA,CAAqB,IAAI,MAAA,EAAQ;AAAA,MACrC,QAAA;AAAA,MACA,eAAe,GAAA,GAAM,OAAA;AAAA,MACrB,aAAA,EAAe;AAAA,KACf,CAAA;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOO,UAAU,OAAA,EAA6B;AAC7C,IAAA,MAAM,SAAS,OAAA,CAAQ,MAAA;AACvB,IAAA,MAAM,OAAO,MAAA,EAAQ,KAAA;AACrB,IAAA,MAAM,OAAA,GAAU,OAAO,yCAAyC,CAAA;AAEhE,IAAA,IAAI,YAAY,oBAAA,EAAsB;AACrC,MAAA,OAAO,QAAA;AAAA,IACR;AAEA,IAAA,IAAI,0BAAA,IAA8B,eAAA,CAAgB,OAAO,CAAA,EAAG;AAC3D,MAAA,OAAO,QAAA;AAAA,IACR;AAEA,IAAA,OAAO,QAAA;AAAA,EACR;AAAA,EAEA,MAAa,QAAA,CACZ,OAAA,EACA,QAAA,EAC8B;AAC9B,IAAA,MAAM,EAAE,MAAA,EAAQ,MAAA,EAAQ,EAAA,EAAG,GAAI,OAAA;AAC/B,IAAA,GAAA,CAAI,IAAA,CAAK,CAAA,0BAAA,EAA6B,MAAM,CAAA,CAAE,CAAA;AAG9C,IAAA,IAAI,IAAA,CAAK,WAAW,YAAA,EAAc;AACjC,MAAA,MAAM,UAAA,GAAa,gBAAA,CAAiB,MAAA,EAAQ,QAAA,IAAY,IAAI,CAAA;AAC5D,MAAA,IAAI,CAAC,WAAW,OAAA,EAAS;AACxB,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,CAAA,6CAAA,EAAgD,MAAM,CAAA,GAAA,EAAM,UAAA,CAAW,MAAM,CAAA;AAAA,SAC9E;AACA,QAAA,OAAO;AAAA,UACN,OAAA,EAAS,KAAA;AAAA,UACT,EAAA;AAAA,UACA,KAAA,EAAO;AAAA,YACN,IAAA,EAAM,MAAA;AAAA;AAAA,YACN,OAAA,EAAS,WAAW,MAAA,IAAU;AAAA;AAC/B,SACD;AAAA,MACD;AAAA,IACD;AAEA,IAAA,QAAQ,MAAA;AAAQ;AAAA,MAEf,KAAK,YAAA,EAAc;AAClB,QAAA,IAAI,CAAC,0BAAA,EAA4B;AAChC,UAAA,OAAO;AAAA,YACN,OAAA,EAAS,KAAA;AAAA,YACT,EAAA;AAAA,YACA,KAAA,EAAO;AAAA,cACN,IAAA,EAAM,MAAA;AAAA,cACN,OAAA,EACC;AAAA;AACF,WACD;AAAA,QACD;AACA,QAAA,GAAA,CAAI,IAAA;AAAA,UACH;AAAA,SACD;AACA,QAAA,OAAO,6BAAA;AAAA,UACN,IAAA,CAAK,WAAW,aAAA,EAAc;AAAA,UAC9B;AAAA,SACD;AAAA,MACD;AAAA;AAAA,MAEA,KAAK,2BAAA;AACJ,QAAA,IAAI,CAAC,4BAA4B,OAAO,IAAA;AAGxC,QAAA,IAAA,CAAK,6BAAA,EAA8B,CAAE,KAAA,CAAM,MAAM;AAAA,QAAC,CAAC,CAAA;AACnD,QAAA,OAAO,IAAA;AAAA,MACR,KAAK,yBAAA;AACJ,QAAA,OAAO,IAAA;AAAA;AAAA,MACR,KAAK,iBAAA;AACJ,QAAA,OAAO;AAAA,UACN,OAAA,EAAS,KAAA;AAAA,UACT,EAAA;AAAA,UACA,MAAA,EAAQ;AAAA,YACP,UAAA,EAAY,UAAA;AAAA,YACZ,mBAAmB,0BAAA,GAChB,CAAC,sBAAsB,2BAA2B,CAAA,GAClD,CAAC,oBAAoB,CAAA;AAAA,YACxB,YAAA,EAAc;AAAA,cACb,KAAA,EAAO,EAAE,WAAA,EAAa,IAAA,EAAK;AAAA,cAC3B,SAAA,EAAW,EAAE,WAAA,EAAa,IAAA,EAAK;AAAA,cAC/B,OAAA,EAAS,EAAE,WAAA,EAAa,IAAA;AAAK,aAC9B;AAAA,YACA,UAAA,EAAY,IAAA,CAAK,UAAA,CAAW,aAAA;AAAc;AAC3C,SACD;AAAA,MACD,KAAK,MAAA;AACJ,QAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,EAAA,EAAI,MAAA,EAAQ,EAAC,EAAE;AAAA,MACzC,KAAK,YAAA,EAAc;AAClB,QAAA,MAAM,UAAA,GAAa,IAAA,CAAK,UAAA,CAAW,SAAA,EAAU;AAC7C,QAAA,MAAM,WAAA,GAAc,MAAM,IAAA,CAAK,cAAA,EAAe;AAE9C,QAAA,MAAM,eAAe,0BAAA,EAA2B,GAC7C,UAAA,CAAW,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,UACvB,GAAG,CAAA;AAAA,UACH,WAAA,EAAa,+BAAA,CAAgC,CAAA,CAAE,WAAA,IAAe,EAAE;AAAA,UAC/D,CAAA,GACD,UAAA;AAEH,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,CAAA,0BAAA,EAA6B,UAAA,CAAW,MAAM,CAAA,QAAA,EAAW,YAAY,MAAM,CAAA,mBAAA;AAAA,SAC5E;AAMA,QAAA,MAAM,cAAA,GAAiB;AAAA,UACtB,IAAA,EAAM,gBAAA;AAAA,UACN,WAAA,EACC,8FAAA;AAAA,UACD,WAAA,EAAa;AAAA,YACZ,IAAA,EAAM,QAAA;AAAA,YACN,YAAY,EAAC;AAAA,YACb,oBAAA,EAAsB;AAAA;AACvB,SACD;AAGA,QAAA,MAAM,WAAW,CAAC,cAAA,EAAgB,GAAG,YAAA,EAAc,GAAG,WAAW,CAAA,CAAE,IAAA;AAAA,UAClE,CAAC,CAAA,EAAG,CAAA,KAAM,EAAE,IAAA,CAAK,aAAA,CAAc,EAAE,IAAI;AAAA,SACtC;AAGA,QAAA,MAAM,SAAA,GAAY,qBAAqB,WAAA,EAAY;AACnD,QAAA,MAAM,YAAA,GAAe,IAAA,CAAK,SAAA,CAAU,QAAQ,CAAA;AAC5C,QAAA,MAAM,uBAAuB,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,UAAU,CAAA;AAC/D,QAAA,SAAA,CAAU,MAAA,CAAO;AAAA,UAChB,IAAA,EAAM,YAAA;AAAA,UACN,MAAA,EAAQ,YAAA;AAAA,UACR,oBAAA,EAAsB,SAAA,CAAU,WAAA,CAAY,YAAY,CAAA;AAAA,UACxD,qBAAA,EAAuB,SAAA,CAAU,WAAA,CAAY,oBAAoB;AAAA,SACjE,CAAA;AAED,QAAA,MAAM,GAAA,GAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAClC,QAAA,IAAI,QAAA,GAAwB;AAAA,UAC3B,OAAA,EAAS,KAAA;AAAA,UACT,EAAA;AAAA,UACA,MAAA,EAAQ;AAAA,YACP,UAAA,EAAY,UAAA;AAAA,YACZ,KAAA,EAAO,GAAA;AAAA,YACP,UAAA,EAAY,QAAA;AAAA,YACZ,KAAA,EAAO;AAAA;AACR,SACD;AAGA,QAAA,IAAI,GAAA,KAAQ,YAAY,0BAAA,EAA4B;AACnD,UAAA,QAAA,GAAW,6BAA6B,QAAQ,CAAA;AAAA,QACjD;AAEA,QAAA,OAAO,QAAA;AAAA,MACR;AAAA,MACA,KAAK,YAAA,EAAc;AAClB,QAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,kBAAA;AAAA,UAC3B,EAAA;AAAA,UACA,MAAA;AAAA,UACA,QAAA,EAAU;AAAA,SACX;AACA,QAAA,IAAI,CAAC,UAAU,OAAO,IAAA;AAEtB,QAAA,MAAM,GAAA,GAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAClC,QAAA,IAAI,GAAA,KAAQ,YAAY,0BAAA,EAA4B;AACnD,UAAA,OAAO,6BAA6B,QAAQ,CAAA;AAAA,QAC7C;AACA,QAAA,IAAI,QAAA,CAAS,MAAA,IAAU,OAAO,QAAA,CAAS,WAAW,QAAA,EAAU;AAC3D,UAAA,MAAM,SAAS,QAAA,CAAS,MAAA;AACxB,UAAA,IAAI,CAAC,OAAO,UAAA,EAAY;AACvB,YAAA,MAAA,CAAO,UAAA,GAAa,UAAA;AAAA,UACrB;AAAA,QACD;AACA,QAAA,OAAO,QAAA;AAAA,MACR;AAAA,MACA,KAAK,gBAAA,EAAkB;AACtB,QAAA,MAAM,cAAA,GAAiB,IAAA,CAAK,UAAA,CAAW,aAAA,EAAc;AACrD,QAAA,MAAM,eAAA,GAAkB,MAAM,IAAA,CAAK,kBAAA,EAAmB;AAEtD,QAAA,MAAM,eAAe,CAAC,GAAG,cAAA,EAAgB,GAAG,eAAe,CAAA,CAAE,IAAA;AAAA,UAC5D,CAAC,CAAA,EAAG,CAAA,KAAM,EAAE,GAAA,CAAI,aAAA,CAAc,EAAE,GAAG;AAAA,SACpC;AAGA,QAAA,MAAM,WAAA,GAAc,qBAAqB,WAAA,EAAY;AACrD,QAAA,MAAM,SAAA,GAAY,IAAA,CAAK,SAAA,CAAU,YAAY,CAAA;AAC7C,QAAA,WAAA,CAAY,MAAA,CAAO;AAAA,UAClB,IAAA,EAAM,eAAA;AAAA,UACN,MAAA,EAAQ,gBAAA;AAAA,UACR,oBAAA,EAAsB,CAAA;AAAA,UACtB,qBAAA,EAAuB,WAAA,CAAY,WAAA,CAAY,SAAS;AAAA,SACxD,CAAA;AAED,QAAA,MAAM,GAAA,GAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAClC,QAAA,IAAI,QAAA,GAAwB;AAAA,UAC3B,OAAA,EAAS,KAAA;AAAA,UACT,EAAA;AAAA,UACA,MAAA,EAAQ;AAAA,YACP,UAAA,EAAY,UAAA;AAAA,YACZ,KAAA,EAAO,GAAA;AAAA,YACP,UAAA,EAAY,QAAA;AAAA,YACZ,SAAA,EAAW;AAAA;AACZ,SACD;AAGA,QAAA,IAAI,GAAA,KAAQ,YAAY,0BAAA,EAA4B;AACnD,UAAA,QAAA,GAAW,6BAA6B,QAAQ,CAAA;AAAA,QACjD;AAEA,QAAA,OAAO,QAAA;AAAA,MACR;AAAA,MACA,KAAK,gBAAA,EAAkB;AACtB,QAAA,MAAM,WAAA,GAAc,MAAA;AACpB,QAAA,IAAI,CAAC,WAAA,EAAa,GAAA;AACjB,UAAA,OAAO;AAAA,YACN,OAAA,EAAS,KAAA;AAAA,YACT,EAAA;AAAA,YACA,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAS,sBAAA;AAAuB,WACxD;AACD,QAAA,IAAI;AACH,UAAA,MAAM,WAAA,GAAc,KAAK,GAAA,EAAI;AAC7B,UAAA,MAAM,SAAS,MAAM,IAAA,CAAK,UAAA,CAAW,YAAA,CAAa,YAAY,GAAG,CAAA;AAGjE,UAAA,MAAM,WAAA,GAAc,qBAAqB,WAAA,EAAY;AACrD,UAAA,MAAM,eAAA,GAAkB,IAAA,CAAK,SAAA,CAAU,MAAM,CAAA;AAC7C,UAAA,WAAA,CAAY,MAAA,CAAO;AAAA,YAClB,IAAA,EAAM,eAAA;AAAA,YACN,MAAA,EAAQ,gBAAA;AAAA,YACR,UAAU,WAAA,CAAY,GAAA;AAAA,YACtB,oBAAA,EAAsB,WAAA,CAAY,WAAA,CAAY,WAAA,CAAY,GAAG,CAAA;AAAA,YAC7D,qBAAA,EAAuB,WAAA,CAAY,WAAA,CAAY,eAAe,CAAA;AAAA,YAC9D,UAAA,EAAY,IAAA,CAAK,GAAA,EAAI,GAAI;AAAA,WACzB,CAAA;AAED,UAAA,MAAM,GAAA,GAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAClC,UAAA,MAAM,SAAA,GACL,OAAO,MAAA,KAAW,QAAA,IAAY,WAAW,IAAA,GACtC;AAAA,YACA,UAAA,EAAY,UAAA;AAAA,YACZ,KAAA,EAAO,GAAA;AAAA,YACP,UAAA,EAAY,SAAA;AAAA,YACZ,GAAG;AAAA,WACJ,GACC;AAAA,YACA,UAAA,EAAY,UAAA;AAAA,YACZ,KAAA,EAAO,GAAA;AAAA,YACP,UAAA,EAAY,SAAA;AAAA,YACZ,QAAA,EAAU;AAAA,WACX;AAEH,UAAA,IAAI,WAAwB,EAAE,OAAA,EAAS,KAAA,EAAO,EAAA,EAAI,QAAQ,SAAA,EAAU;AAGpE,UAAA,IAAI,GAAA,KAAQ,YAAY,0BAAA,EAA4B;AACnD,YAAA,QAAA,GAAW,6BAA6B,QAAQ,CAAA;AAAA,UACjD;AAEA,UAAA,OAAO,QAAA;AAAA,QACR,SAAS,GAAA,EAAc;AAEtB,UAAA,MAAM,YAAY,WAAA,CAAY,GAAA;AAC9B,UAAA,KAAA,MAAW,EAAE,QAAA,EAAS,IAAK,IAAA,CAAK,aAAA,CAAc,QAAO,EAAG;AACvD,YAAA,MAAM,cAAA,GAAiB,SAAS,SAAA,CAAU,IAAA;AAAA,cACzC,CAAC,CAAA,KAAM,CAAA,CAAE,GAAA,KAAQ;AAAA,aAClB;AACA,YAAA,IAAI,cAAA,EAAgB;AACnB,cAAA,GAAA,CAAI,IAAA;AAAA,gBACH,CAAA,gCAAA,EAAmC,SAAS,CAAA,mBAAA,EAAsB,QAAA,CAAS,MAAM,CAAA,CAAA;AAAA,eAClF;AACA,cAAA,MAAM,GAAA,GAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAClC,cAAA,IAAI,QAAA,GAAwB;AAAA,gBAC3B,OAAA,EAAS,KAAA;AAAA,gBACT,EAAA;AAAA,gBACA,MAAA,EAAQ;AAAA,kBACP,UAAA,EAAY,UAAA;AAAA,kBACZ,KAAA,EAAO,GAAA;AAAA,kBACP,UAAA,EAAY,SAAA;AAAA,kBACZ,QAAA,EAAU;AAAA,oBACT;AAAA,sBACC,KAAK,cAAA,CAAe,GAAA;AAAA,sBACpB,QAAA,EAAU,eAAe,QAAA,IAAY,YAAA;AAAA,sBACrC,IAAA,EACC,cAAA,CAAe,IAAA,IACf,cAAA,CAAe,WAAA,IACf;AAAA;AACF;AACD;AACD,eACD;AAGA,cAAA,IAAI,GAAA,KAAQ,YAAY,0BAAA,EAA4B;AACnD,gBAAA,QAAA,GAAW,6BAA6B,QAAQ,CAAA;AAAA,cACjD;AAEA,cAAA,OAAO,QAAA;AAAA,YACR;AAAA,UACD;AAEA,UAAA,OAAO;AAAA,YACN,OAAA,EAAS,KAAA;AAAA,YACT,EAAA;AAAA,YACA,KAAA,EAAO;AAAA,cACN,IAAA,EAAM,KAAA;AAAA,cACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA;AACzD,WACD;AAAA,QACD;AAAA,MACD;AAAA,MACA,KAAK,cAAA,EAAgB;AACpB,QAAA,MAAM,WAAA,GAAc,IAAA,CAAK,UAAA,CACvB,WAAA,GACA,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,IAAA,CAAK,aAAA,CAAc,CAAA,CAAE,IAAI,CAAC,CAAA;AAG7C,QAAA,MAAM,WAAA,GAAc,qBAAqB,WAAA,EAAY;AACrD,QAAA,MAAM,SAAA,GAAY,IAAA,CAAK,SAAA,CAAU,WAAW,CAAA;AAC5C,QAAA,WAAA,CAAY,MAAA,CAAO;AAAA,UAClB,IAAA,EAAM,aAAA;AAAA,UACN,MAAA,EAAQ,cAAA;AAAA,UACR,oBAAA,EAAsB,CAAA;AAAA,UACtB,qBAAA,EAAuB,WAAA,CAAY,WAAA,CAAY,SAAS;AAAA,SACxD,CAAA;AAED,QAAA,MAAM,GAAA,GAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAClC,QAAA,IAAI,QAAA,GAAwB;AAAA,UAC3B,OAAA,EAAS,KAAA;AAAA,UACT,EAAA;AAAA,UACA,MAAA,EAAQ;AAAA,YACP,UAAA,EAAY,UAAA;AAAA,YACZ,KAAA,EAAO,GAAA;AAAA,YACP,UAAA,EAAY,QAAA;AAAA,YACZ,OAAA,EAAS;AAAA;AACV,SACD;AAGA,QAAA,IAAI,GAAA,KAAQ,YAAY,0BAAA,EAA4B;AACnD,UAAA,QAAA,GAAW,6BAA6B,QAAQ,CAAA;AAAA,QACjD;AAEA,QAAA,OAAO,QAAA;AAAA,MACR;AAAA,MACA,KAAK,aAAA,EAAe;AACnB,QAAA,MAAM,WAAA,GAAc,MAAA;AAGpB,QAAA,IAAI,CAAC,WAAA,EAAa,IAAA;AACjB,UAAA,OAAO;AAAA,YACN,OAAA,EAAS,KAAA;AAAA,YACT,EAAA;AAAA,YACA,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAS,qBAAA;AAAsB,WACvD;AACD,QAAA,IAAI;AACH,UAAA,MAAM,WAAA,GAAc,KAAK,GAAA,EAAI;AAC7B,UAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,UAAA,CAAW,SAAA,CAAU;AAAA,YAC9C,MAAM,WAAA,CAAY,IAAA;AAAA,YAClB,SAAA,EAAW,WAAA,CAAY,SAAA,IAAa;AAAC,WACrC,CAAA;AAGD,UAAA,MAAM,WAAA,GAAc,qBAAqB,WAAA,EAAY;AACrD,UAAA,MAAM,cAAA,GAAiB,KAAK,SAAA,CAAU;AAAA,YACrC,MAAM,WAAA,CAAY,IAAA;AAAA,YAClB,WAAW,WAAA,CAAY;AAAA,WACvB,CAAA;AACD,UAAA,MAAM,eAAA,GAAkB,IAAA,CAAK,SAAA,CAAU,MAAM,CAAA;AAC7C,UAAA,WAAA,CAAY,MAAA,CAAO;AAAA,YAClB,IAAA,EAAM,YAAA;AAAA,YACN,MAAA,EAAQ,aAAA;AAAA,YACR,UAAU,WAAA,CAAY,IAAA;AAAA,YACtB,oBAAA,EAAsB,WAAA,CAAY,WAAA,CAAY,cAAc,CAAA;AAAA,YAC5D,qBAAA,EAAuB,WAAA,CAAY,WAAA,CAAY,eAAe,CAAA;AAAA,YAC9D,UAAA,EAAY,IAAA,CAAK,GAAA,EAAI,GAAI;AAAA,WACzB,CAAA;AAED,UAAA,MAAM,GAAA,GAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAClC,UAAA,MAAM,SAAA,GACL,OAAO,MAAA,KAAW,QAAA,IAAY,MAAA,KAAW,IAAA,GACtC,EAAE,UAAA,EAAY,UAAA,EAAY,GAAG,MAAA,EAAO,GACpC,MAAA;AAEJ,UAAA,IAAI,WAAwB,EAAE,OAAA,EAAS,KAAA,EAAO,EAAA,EAAI,QAAQ,SAAA,EAAU;AAGpE,UAAA,IAAI,GAAA,KAAQ,YAAY,0BAAA,EAA4B;AACnD,YAAA,QAAA,GAAW,6BAA6B,QAAQ,CAAA;AAAA,UACjD;AAEA,UAAA,OAAO,QAAA;AAAA,QACR,SAAS,GAAA,EAAc;AACtB,UAAA,OAAO;AAAA,YACN,OAAA,EAAS,KAAA;AAAA,YACT,EAAA;AAAA,YACA,KAAA,EAAO;AAAA,cACN,IAAA,EAAM,KAAA;AAAA,cACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA;AACzD,WACD;AAAA,QACD;AAAA,MACD;AAAA,MACA,KAAK,0BAAA,EAA4B;AAChC,QAAA,MAAM,GAAA,GAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAClC,QAAA,IAAI,QAAA,GAAwB;AAAA,UAC3B,OAAA,EAAS,KAAA;AAAA,UACT,EAAA;AAAA,UACA,MAAA,EAAQ;AAAA,YACP,UAAA,EAAY,UAAA;AAAA,YACZ,KAAA,EAAO,GAAA;AAAA,YACP,UAAA,EAAY,QAAA;AAAA,YACZ,mBAAmB;AAAC;AACrB,SACD;AAGA,QAAA,IAAI,GAAA,KAAQ,YAAY,0BAAA,EAA4B;AACnD,UAAA,QAAA,GAAW,6BAA6B,QAAQ,CAAA;AAAA,QACjD;AAEA,QAAA,OAAO,QAAA;AAAA,MACR;AAAA,MACA,KAAK,sBAAA,EAAwB;AAC5B,QAAA,MAAM,GAAA,GAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAClC,QAAA,IAAI,QAAA,GAAwB;AAAA,UAC3B,OAAA,EAAS,KAAA;AAAA,UACT,EAAA;AAAA,UACA,MAAA,EAAQ;AAAA,YACP,UAAA,EAAY;AAAA;AACb,SACD;AAGA,QAAA,IAAI,GAAA,KAAQ,YAAY,0BAAA,EAA4B;AACnD,UAAA,QAAA,GAAW,6BAA6B,QAAQ,CAAA;AAAA,QACjD;AAEA,QAAA,OAAO,QAAA;AAAA,MACR;AAAA,MACA;AACC,QAAA,OAAO;AAAA,UACN,OAAA,EAAS,KAAA;AAAA,UACT,EAAA;AAAA,UACA,OAAO,EAAE,IAAA,EAAM,QAAQ,OAAA,EAAS,CAAA,kBAAA,EAAqB,MAAM,CAAA,CAAA;AAAG,SAC/D;AAAA;AACF,EACD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,6BAAA,GAA+C;AACtD,IAAA,OAAA,CAAQ,YAAY;AACnB,MAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,MAAM,UAAA,CAAW,CAAA,EAAG,GAAG,CAAC,CAAA;AAC3C,MAAA,MAAM,QAAQ,IAAA,CAAK;AAAA,QAClB,IAAA,CAAK,qBAAqB,IAAI,CAAA;AAAA,QAC9B,IAAI,OAAA,CAAc,CAAC,MAAM,UAAA,CAAW,CAAA,EAAG,IAAM,CAAC;AAAA,OAC9C,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,MAAC,CAAC,CAAA;AAAA,IAClB,CAAA,GAAG;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAa,oBAAA,CAAqB,MAAA,GAAS,KAAA,EAAsB;AAChE,IAAA,IAAI,CAAC,KAAK,QAAA,EAAU;AACpB,IAAA,IAAI,IAAA,CAAK,gBAAA,EAAkB,OAAO,IAAA,CAAK,gBAAA;AAKvC,IAAA,IAAI,CAAC,MAAA,IAAU,IAAA,CAAK,aAAA,CAAc,OAAO,CAAA,EAAG;AAC3C,MAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,MAAA,MAAM,WAAW,KAAA,CAAM,IAAA,CAAK,KAAK,aAAA,CAAc,MAAA,EAAQ,CAAA,CAAE,KAAA;AAAA,QACxD,CAAC,EAAE,QAAA,EAAS,KAAM,GAAA,GAAM,WAAW,oBAAA,GAAuB;AAAA,OAC3D;AACA,MAAA,IAAI,QAAA,EAAU;AAAA,IACf;AAEA,IAAA,IAAA,CAAK,oBAAoB,YAAY;AACpC,MAAA,IAAI;AACH,QAAA,MAAM,YAAY,KAAA,CAAM,IAAA,CAAK,KAAK,aAAA,CAAc,MAAA,EAAQ,CAAA,CAAE,MAAA;AAAA,UACzD,CAAC,GAAA,EAAK,EAAE,UAAS,KAAM,GAAA,GAAM,SAAS,KAAA,CAAM,MAAA;AAAA,UAC5C;AAAA,SACD;AAGA,QAAA,IAAI,IAAA,CAAK,aAAA,CAAc,IAAA,KAAS,CAAA,EAAG;AAClC,UAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,EAAG,CAAA,EAAA,EAAK;AAC3B,YAAA,MAAM,WAAA;AAAA;AAAA,cAEJ,IAAA,CAAK,QAAA,CAAiB,IAAA,EAAM,cAAA,GAAiB,MAAA,IAAU;AAAA,aAAA;AACzD,YAAA,IAAI,cAAc,CAAA,EAAG;AACpB,cAAA,GAAA,CAAI,IAAA;AAAA,gBACH,CAAA,+DAAA;AAAA,eACD;AACA,cAAA;AAAA,YACD;AACA,YAAA,GAAA,CAAI,IAAA;AAAA,cACH,CAAA,mDAAA,EAAsD,IAAI,CAAC,CAAA,OAAA;AAAA,aAC5D;AACA,YAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,MAAM,UAAA,CAAW,CAAA,EAAG,GAAI,CAAC,CAAA;AAAA,UAC7C;AAAA,QACD;AAGA,QAAA,IAAI,cAAwB,EAAC;AAC7B,QAAA,MAAM,iBAAA,GAAoB,IAAA,CAAK,aAAA,CAAc,IAAA,KAAS,IAAI,CAAA,GAAI,CAAA;AAE9D,QAAA,KAAA,IACK,WAAA,GAAc,CAAA,EAClB,WAAA,GAAc,iBAAA,EACd,WAAA,EAAA,EACC;AAED,UAAA,KAAA,IACK,OAAA,GAAU,CAAA,EACd,OAAA,GAAU,0BAAA,EACV,OAAA,EAAA,EACC;AACD,YAAA,WAAA,GACE,MAAM,IAAA,CAAK,QAAA,EAAU,yBAAA,MAAgC,EAAC;AACxD,YAAA,MAAMA,OAAAA,GAAS,IAAA,CAAK,QAAA,EAAU,SAAA,EAAU;AACxC,YAAA,MAAM,YAAY,WAAA,CAAY,MAAA,CAAO,CAAC,EAAA,KAAO,OAAOA,OAAM,CAAA;AAC1D,YAAA,IAAI,SAAA,CAAU,SAAS,CAAA,EAAG;AAC1B,YAAA,IAAI,OAAA,GAAU,6BAA6B,CAAA,EAAG;AAC7C,cAAA,GAAA,CAAI,IAAA;AAAA,gBACH,CAAA,oCAAA,EAAuC,OAAA,GAAU,CAAC,CAAA,CAAA,EAAI,0BAA0B,CAAA,GAAA;AAAA,eACjF;AACA,cAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,MAAM,UAAA,CAAW,CAAA,EAAG,GAAI,CAAC,CAAA;AAAA,YAC7C;AAAA,UACD;AAGA,UAAA,MAAM,WAAA;AAAA;AAAA,YAEJ,IAAA,CAAK,QAAA,CAAiB,IAAA,EACpB,cAAA,EAAe,CAChB,GAAA;AAAA,cAAI,CAAC,CAAA,KACL,CAAA,CAAE,UAAA,CAAW,QAAA;AAAS,iBAClB;AAAC,WAAA;AAER,UAAA,IAAI,WAAA,CAAY,SAAS,CAAA,EAAG;AAC3B,YAAA,WAAA,GAAc,KAAA,CAAM,IAAA,iBAAK,IAAI,GAAA,CAAI,CAAC,GAAG,WAAA,EAAa,GAAG,WAAW,CAAC,CAAC,CAAA;AAAA,UACnE;AAEA,UAAA,MAAM,SAAA,GAAY,IAAA,CAAK,QAAA,EAAU,SAAA,EAAU;AAC3C,UAAA,MAAM,eAAe,WAAA,CAAY,MAAA,CAAO,CAAC,EAAA,KAAO,OAAO,SAAS,CAAA;AAChE,UAAA,IAAI,YAAA,CAAa,SAAS,CAAA,EAAG;AAE7B,UAAA,IAAI,WAAA,GAAc,oBAAoB,CAAA,EAAG;AACxC,YAAA,GAAA,CAAI,IAAA;AAAA,cACH,CAAA,sEAAA,EAAyE,WAAA,GAAc,CAAC,CAAA,CAAA,EAAI,iBAAiB,CAAA,IAAA;AAAA,aAC9G;AACA,YAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,MAAM,UAAA,CAAW,CAAA,EAAG,GAAI,CAAC,CAAA;AAAA,UAC7C;AAAA,QACD;AAEA,QAAA,IAAI,WAAA,CAAY,WAAW,CAAA,EAAG;AAC7B,UAAA,GAAA,CAAI,IAAA;AAAA,YACH,CAAA,6DAAA;AAAA,WACD;AACA,UAAA;AAAA,QACD;AAEA,QAAA,IAAI,CAAC,MAAA,EAAQ;AACZ,UAAA,GAAA,CAAI,IAAA;AAAA,YACH,CAAA,yBAAA,EAA4B,YAAY,MAAM,CAAA,6BAAA;AAAA,WAC/C;AAAA,QACD;AAKA,QAAA,MAAM,iBAAiB,IAAI,GAAA;AAAA;AAAA,UAAA,CAExB,KAAK,QAAA,CAAiB,IAAA,EAAM,cAAA,IAAiB,IAAK,EAAC,EAAG,GAAA;AAAA,YACvD,CAAC,CAAA,KACA,CAAA,CAAE,UAAA,CAAW,QAAA;AAAS;AACxB,SACD;AACA,QAAA,WAAA,GAAc,CAAC,GAAG,WAAW,EAAE,IAAA,CAAK,CAAC,GAAG,CAAA,KAAM;AAC7C,UAAA,MAAM,UAAA,GAAa,cAAA,CAAe,GAAA,CAAI,CAAC,IAAI,CAAA,GAAI,CAAA;AAC/C,UAAA,MAAM,UAAA,GAAa,cAAA,CAAe,GAAA,CAAI,CAAC,IAAI,CAAA,GAAI,CAAA;AAC/C,UAAA,OAAO,UAAA,GAAa,UAAA;AAAA,QACrB,CAAC,CAAA;AAED,QAAA,IAAI,YAAA,GAAe,CAAA;AACnB,QAAA,IAAI,UAAA,GAAa,CAAA;AACjB,QAAA,IAAI,YAAA,GAAe,KAAA;AAGnB,QAAA,MAAM,MAAA,GAAS,IAAA,CAAK,QAAA,EAAU,SAAA,EAAU;AACxC,QAAA,MAAM,aAAA,GAAgB,WAAA,CAAY,MAAA,CAAO,CAAC,MAAA,KAAW;AACpD,UAAA,IAAI,CAAC,IAAA,CAAK,QAAA,EAAU,OAAO,KAAA;AAC3B,UAAA,IAAI,MAAA,KAAW,QAAQ,OAAO,KAAA;AAC9B,UAAA,IAAI,IAAA,CAAK,uBAAA,CAAwB,MAAM,CAAA,EAAG,OAAO,KAAA;AACjD,UAAA,MAAM,MAAA,GAAS,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,MAAM,CAAA;AAC5C,UAAA,IACC,UACA,IAAA,CAAK,GAAA,KAAQ,MAAA,CAAO,QAAA,GAAW,uBAAuB,GAAA,EACrD;AACD,YAAA,YAAA,EAAA;AACA,YAAA,OAAO,KAAA;AAAA,UACR;AACA,UAAA,OAAO,IAAA;AAAA,QACR,CAAC,CAAA;AAGD,QAAA,MAAM,YAAA,GAAe,MAAM,OAAA,CAAQ,UAAA;AAAA,UAClC,aAAA,CAAc,GAAA,CAAI,OAAO,MAAA,KAAW;AACnC,YAAA,IAAI,CAAC,IAAA,CAAK,QAAA,EAAU,OAAO,IAAA;AAC3B,YAAA,GAAA,CAAI,IAAA,CAAK,CAAA,sCAAA,EAAyC,MAAM,CAAA,CAAE,CAAA;AAC1D,YAAA,OAAO;AAAA,cACN,MAAA;AAAA,cACA,QAAA,EAAU,MAAM,IAAA,CAAK,QAAA,CAAS,cAAc,MAAM;AAAA,aACnD;AAAA,UACD,CAAC;AAAA,SACF;AAEA,QAAA,KAAA,MAAW,UAAU,YAAA,EAAc;AAClC,UAAA,IAAI,MAAA,CAAO,MAAA,KAAW,WAAA,IAAe,MAAA,CAAO,OAAO,QAAA,EAAU;AAC5D,YAAA,MAAM,EAAE,MAAA,EAAQ,QAAA,EAAS,GAAI,MAAA,CAAO,KAAA;AAGpC,YAAA,IAAI,QAAA,CAAS,YAAA,IAAgB,QAAA,CAAS,YAAA,EAAc;AACnD,cAAA,MAAM,UAAU,kBAAA,CAAmB,cAAA;AAAA,gBAClC,QAAA;AAAA,gBACA,QAAA,CAAS,YAAA;AAAA,gBACT,QAAA,CAAS;AAAA,eACV;AACA,cAAA,IAAI,CAAC,OAAA,EAAS;AACb,gBAAA,GAAA,CAAI,IAAA;AAAA,kBACH,kEAAwD,MAAM,CAAA,8BAAA;AAAA,iBAC/D;AACA,gBAAA,IAAA,CAAK,2BAA2B,MAAM,CAAA;AACtC,gBAAA,UAAA,EAAA;AACA,gBAAA;AAAA,cACD;AACA,cAAA,GAAA,CAAI,IAAA;AAAA,gBACH,uFAAgF,MAAM,CAAA;AAAA,eACvF;AAAA,YACD;AAEA,YAAA,IAAA,CAAK,aAAA,CAAc,IAAI,MAAA,EAAQ;AAAA,cAC9B,QAAA;AAAA,cACA,QAAA,EAAU,KAAK,GAAA;AAAI,aACnB,CAAA;AACD,YAAA,IAAA,CAAK,2BAA2B,MAAM,CAAA;AACtC,YAAA,YAAA,GAAe,IAAA;AACf,YAAA,YAAA,EAAA;AACA,YAAA,GAAA,CAAI,IAAA;AAAA,cACH,CAAA,qCAAA,EAAwC,MAAM,CAAA,EAAA,EAAK,QAAA,CAAS,MAAM,MAAM,CAAA,OAAA;AAAA,aACzE;AAAA,UACD,CAAA,MAAA,IAAW,MAAA,CAAO,MAAA,KAAW,WAAA,IAAe,OAAO,KAAA,EAAO;AACzD,YAAA,IAAA,CAAK,0BAAA,CAA2B,MAAA,CAAO,KAAA,CAAM,MAAM,CAAA;AACnD,YAAA,UAAA,EAAA;AACA,YAAA,GAAA,CAAI,IAAA;AAAA,cACH,CAAA,+CAAA,EAAkD,MAAA,CAAO,KAAA,CAAM,MAAM,CAAA;AAAA,aACtE;AAAA,UACD,CAAA,MAAA,IAAW,MAAA,CAAO,MAAA,KAAW,UAAA,EAAY;AACxC,YAAA,UAAA,EAAA;AACA,YAAA,GAAA,CAAI,IAAA;AAAA,cACH,CAAA,4CAAA,CAAA;AAAA,cACA,MAAA,CAAO,kBAAkB,KAAA,GACtB,MAAA,CAAO,OAAO,OAAA,GACd,MAAA,CAAO,OAAO,MAAM;AAAA,aACxB;AAAA,UACD;AAAA,QACD;AAIA,QAAC,KAAa,eAAA,GAAkB;AAAA,UAC/B,YAAY,WAAA,CAAY,MAAA;AAAA,UACxB,OAAA,EAAS,YAAA;AAAA,UACT,QAAA,EAAU,UAAA;AAAA,UACV,aAAA,EAAe,KAAK,GAAA;AAAI,SACzB;AAEA,QAAA,IAAI,YAAA,EAAc;AACjB,UAAA,MAAM,WAAW,KAAA,CAAM,IAAA,CAAK,KAAK,aAAA,CAAc,MAAA,EAAQ,CAAA,CAAE,MAAA;AAAA,YACxD,CAAC,GAAA,EAAK,EAAE,UAAS,KAAM,GAAA,GAAM,SAAS,KAAA,CAAM,MAAA;AAAA,YAC5C;AAAA,WACD;AAEA,UAAA,IAAI,QAAA,KAAa,SAAA,IAAa,IAAA,CAAK,cAAA,EAAgB;AAClD,YAAA,OAAA,CAAQ,MAAA,CAAO,KAAA;AAAA,cACd;AAAA,aACD;AACA,YAAA,IAAA,CAAK,cAAA,EAAe;AAAA,UACrB;AAAA,QACD;AAAA,MACD,CAAA,SAAE;AACD,QAAA,IAAA,CAAK,gBAAA,GAAmB,IAAA;AAAA,MACzB;AAAA,IACD,CAAA,GAAG;AAEH,IAAA,OAAO,IAAA,CAAK,gBAAA;AAAA,EACb;AAAA;AAAA;AAAA;AAAA;AAAA,EAMO,YAAA,GAAuB;AAC7B,IAAA,OAAO,KAAK,aAAA,CAAc,IAAA;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,cAAA,GAMZ;AACD,IAAA,MAAM,qBAAqB,MAAA,CAAO,QAAA;AAAA,MACjC,OAAA,CAAQ,IAAI,uBAAA,IAA2B,GAAA;AAAA,MACvC;AAAA,KACD;AAMA,IAAA,IAAI,IAAA,CAAK,aAAA,CAAc,IAAA,GAAO,kBAAA,IAAsB,KAAK,QAAA,EAAU;AAClE,MAAA,MAAM,mBAAmB,MAAA,CAAO,QAAA;AAAA,QAC/B,OAAA,CAAQ,IAAI,iCAAA,IAAqC,MAAA;AAAA,QACjD;AAAA,OACD;AACA,MAAA,MAAM,mBACL,MAAA,CAAO,QAAA,CAAS,gBAAgB,CAAA,IAAK,gBAAA,GAAmB,IACrD,gBAAA,GACA,IAAA;AAEJ,MAAA,MAAM,QAAA,GAAW,IAAA,CAAK,GAAA,EAAI,GAAI,gBAAA;AAC9B,MAAA,IAAI,WAAA,GAAc,CAAA;AAClB,MAAA,IAAI,aAAA,GAAgB,EAAA;AAEpB,MAAA,OAAO,IAAA,CAAK,GAAA,EAAI,GAAI,QAAA,EAAU;AAC7B,QAAA,IAAI,IAAA,CAAK,aAAA,CAAc,IAAA,IAAQ,kBAAA,EAAoB;AAEnD,QAAA,MAAM,QAAQ,IAAA,CAAK;AAAA,UAClB,IAAA,CAAK,qBAAqB,IAAI,CAAA;AAAA,UAC9B,IAAI,OAAA,CAAc,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,GAAI,CAAC;AAAA,SACxD,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,QAAC,CAAC,CAAA;AAEjB,QAAA,IAAI,IAAA,CAAK,aAAA,CAAc,IAAA,IAAQ,kBAAA,EAAoB;AAGnD,QAAA,IAAI,IAAA,CAAK,aAAA,CAAc,IAAA,KAAS,aAAA,EAAe;AAC9C,UAAA,WAAA,EAAA;AACA,UAAA,IAAI,WAAA,IAAe,CAAA,IAAK,IAAA,CAAK,aAAA,CAAc,OAAO,CAAA,EAAG;AACpD,YAAA,GAAA,CAAI,IAAA;AAAA,cACH,CAAA,2CAAA,EAA8C,IAAA,CAAK,aAAA,CAAc,IAAI,IAAI,kBAAkB,CAAA,iCAAA;AAAA,aAC5F;AACA,YAAA;AAAA,UACD;AAAA,QACD,CAAA,MAAO;AACN,UAAA,WAAA,GAAc,CAAA;AACd,UAAA,aAAA,GAAgB,KAAK,aAAA,CAAc,IAAA;AAAA,QACpC;AAGA,QAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,MAAM,UAAA,CAAW,CAAA,EAAG,GAAI,CAAC,CAAA;AAAA,MAC7C;AAGA,MAAA,IAAI,IAAA,CAAK,aAAA,CAAc,IAAA,GAAO,kBAAA,EAAoB;AACjD,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,CAAA,qDAAA,EAA8C,IAAA,CAAK,aAAA,CAAc,IAAI,IAAI,kBAAkB,CAAA,mEAAA;AAAA,SAC5F;AAEA,QAAA,IAAA,CAAK,oBAAA,CAAqB,IAAI,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,QAAC,CAAC,CAAA;AAAA,MAC/C;AAAA,IACD;AAGA,IAAA,MAAM,QAAe,EAAC;AACtB,IAAA,MAAM,SAAA,uBAAgB,GAAA,EAAY;AAClC,IAAA,MAAM,iBAAiB,IAAI,GAAA;AAAA,MAC1B,IAAA,CAAK,WAAW,SAAA,EAAU,CAAE,IAAI,CAAC,CAAA,KAAM,EAAE,IAAI;AAAA,KAC9C;AAEA,IAAA,KAAA,MAAW,CAAC,QAAQ,EAAE,QAAA,EAAU,CAAA,IAAK,IAAA,CAAK,aAAA,CAAc,OAAA,EAAQ,EAAG;AAClE,MAAA,KAAA,MAAW,IAAA,IAAQ,SAAS,KAAA,EAAO;AAElC,QAAA,IAAI,IAAA,CAAK,SAAS,gBAAA,EAAkB;AAOpC,QAAA,IAAI,YAAY,IAAA,CAAK,IAAA;AACrB,QAAA,IAAI,SAAA,CAAU,IAAI,IAAA,CAAK,IAAI,KAAK,cAAA,CAAe,GAAA,CAAI,IAAA,CAAK,IAAI,CAAA,EAAG;AAC9D,UAAA,SAAA,GAAY,GAAG,IAAA,CAAK,IAAI,IAAI,MAAA,CAAO,KAAA,CAAM,EAAE,CAAC,CAAA,CAAA;AAAA,QAC7C;AACA,QAAA,SAAA,CAAU,IAAI,SAAS,CAAA;AAEvB,QAAA,MAAM,YAAA,GAAe,QAAA,CAAS,UAAA,EAAY,IAAA,IAAQ,kBAAA;AAGlD,QAAA,MAAM,QAAA,GAAW,IAAA,CAAK,WAAA,IAAe,CAAA,iBAAA,EAAoB,YAAY,CAAA,CAAA;AACrE,QAAA,MAAM,SAAA,GAIF;AAAA,UACH,IAAA,EAAM,SAAA;AAAA,UACN,WAAA,EAAa,0BAAA,EAA2B,GACrC,+BAAA,CAAgC,QAAQ,CAAA,GACxC,QAAA;AAAA,UACH,WAAA,EAAc,KAAK,WAAA,IAAe;AAAA,YACjC,IAAA,EAAM,QAAA;AAAA,YACN,YAAY;AAAC;AACd,SACD;AAGA,QAAA,IACC,OAAO,SAAA,CAAU,WAAA,KAAgB,YACjC,CAAC,SAAA,CAAU,YAAY,IAAA,EACtB;AACD,UAAA,SAAA,CAAU,YAAY,IAAA,GAAO,QAAA;AAAA,QAC9B;AACA,QAAA,IACC,OAAO,SAAA,CAAU,WAAA,KAAgB,YACjC,CAAC,SAAA,CAAU,YAAY,UAAA,EACtB;AACD,UAAA,SAAA,CAAU,WAAA,CAAY,aAAa,EAAC;AAAA,QACrC;AAEA,QAAA,IAAI,SAAA,GAAY,EAAA;AAChB,QAAA,IAAI,SAAS,QAAA,EAAU;AACtB,UAAA,SAAA,GAAY;AAAA,cAAA,EAAmB,QAAA,CAAS,SAAS,MAAM,CAAA,CAAA,CAAA;AAAA,QACxD;AAIA,QAAA,MAAM,UAAA,GAAc,SAAA,CAAU,WAAA,CAAY,UAAA,IAAc,EAAC;AACzD,QAAA,IAAI,WAAA,GAAc,EAAA;AAClB,QAAA,IAAI,CAAC,0BAAA,EAA2B,IAAK,UAAA,CAAW,OAAA,EAAS;AACxD,UAAA,WAAA,GAAc;AAAA,kCAAA,CAAA;AAAA,QACf;AAGA,QAAA,IACC,CAAC,0BAAA,EAA2B,IAC5B,UAAU,WAAA,CAAY,QAAA,CAAS,yBAAyB,CAAA,EACvD;AACD,UAAA,SAAA,CAAU,WAAA,GAAc,UAAU,WAAA,CAAY,OAAA;AAAA,YAC7C,0BAAA;AAAA,YACA;AAAA,WACD;AAAA,QACD;AAEA,QAAA,MAAM,WAAA,GAAc,4BAA2B,GAC5C;AAAA,OAAA,EAAY,OAAO,KAAA,CAAM,EAAE,CAAC,CAAA,CAAA,EAAI,SAAS,CAAA,CAAA,GACzC;AAAA,SAAA,EAAc,OAAO,KAAA,CAAM,EAAE,CAAC,CAAA,CAAA,EAAI,SAAS,GAAG,WAAW,CAAA,CAAA;AAC5D,QAAA,SAAA,CAAU,WAAA,GAAc,CAAA,EAAG,SAAA,CAAU,WAAW,GAAG,WAAW,CAAA,CAAA;AAE9D,QAAA,KAAA,CAAM,KAAK,SAAS,CAAA;AAAA,MACrB;AAAA,IACD;AAEA,IAAA,OAAO,KAAA;AAAA,EACR;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,kBAAA,GAOZ;AAED,IAAA,IAAI,CAAC,KAAK,gBAAA,EAAkB;AAC3B,MAAA,IAAA,CAAK,oBAAA,CAAqB,IAAI,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,MAAC,CAAC,CAAA;AAAA,IAC/C;AAEA,IAAA,MAAM,YAKD,EAAC;AACN,IAAA,MAAM,QAAA,GAAW,IAAI,GAAA,CAAI,IAAA,CAAK,UAAA,CAAW,aAAA,EAAc,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,GAAG,CAAC,CAAA;AAE1E,IAAA,KAAA,MAAW,CAAC,QAAQ,EAAE,QAAA,EAAU,CAAA,IAAK,IAAA,CAAK,aAAA,CAAc,OAAA,EAAQ,EAAG;AAClE,MAAA,KAAA,MAAW,QAAA,IAAY,SAAS,SAAA,EAAW;AAC1C,QAAA,IAAI,CAAC,QAAA,CAAS,GAAA,CAAI,QAAA,CAAS,GAAG,CAAA,EAAG;AAChC,UAAA,MAAM,iBAAA,GAAoB,EAAE,GAAG,QAAA,EAAS;AACxC,UAAA,MAAM,YAAA,GAAe,QAAA,CAAS,UAAA,EAAY,IAAA,IAAQ,kBAAA;AAElD,UAAA,IAAI,SAAA,GAAY,EAAA;AAChB,UAAA,IAAI,SAAS,QAAA,EAAU;AACtB,YAAA,SAAA,GAAY;;AAAA;AAAA,QAAA,EAA4C,QAAA,CAAS,SAAS,MAAM;AAAA,gBAAA,EAAqB,QAAA,CAAS,SAAS,aAAa,CAAA,CAAA;AACpI,YAAA,IACC,SAAS,QAAA,CAAS,cAAA,IAClB,SAAS,QAAA,CAAS,cAAA,CAAe,SAAS,CAAA,EACzC;AACD,cAAA,SAAA,IAAa;AAAA,iBAAA,EAAsB,QAAA,CAAS,QAAA,CAAS,cAAA,CAAe,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,YAC/E;AAAA,UACD;AAEA,UAAA,MAAM,WAAA,GAAc;;AAAA;AAAA,UAAA,EAA2C,YAAY;AAAA,YAAA,EAAiB,MAAM,GAAG,SAAS,CAAA,CAAA;AAG9G,UAAA,IAAI,iBAAA,CAAkB,GAAA,CAAI,UAAA,CAAW,gBAAgB,CAAA,EAAG;AACvD,YAAA,iBAAA,CAAkB,IAAA,GAAO,CAAA,SAAA,EAAY,iBAAA,CAAkB,IAAI,CAAA,CAAA;AAC3D,YAAA,iBAAA,CAAkB,cAAc,CAAA,kBAAA,EAAqB,iBAAA,CAAkB,WAAA,IAAe,wCAAwC,GAAG,WAAW,CAAA,CAAA;AAAA,UAC7I,CAAA,MAAO;AACN,YAAA,iBAAA,CAAkB,WAAA,GAAc,iBAAA,CAAkB,WAAA,GAC/C,CAAA,EAAG,iBAAA,CAAkB,WAAW,CAAA,EAAG,WAAW,CAAA,CAAA,GAC9C,WAAA,CAAY,IAAA,EAAK;AAAA,UACrB;AAEA,UAAA,SAAA,CAAU,KAAK,iBAAiB,CAAA;AAChC,UAAA,QAAA,CAAS,GAAA,CAAI,SAAS,GAAG,CAAA;AAAA,QAC1B;AAAA,MACD;AAAA,IACD;AAEA,IAAA,OAAO,SAAA;AAAA,EACR;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,sBACP,QAAA,EACsD;AAEtD,IAAA,KAAA,MAAW,CAAC,QAAQ,EAAE,QAAA,EAAU,CAAA,IAAK,IAAA,CAAK,aAAA,CAAc,OAAA,EAAQ,EAAG;AAClE,MAAA,MAAM,IAAA,GAAO,SAAS,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,SAAS,QAAQ,CAAA;AAC3D,MAAA,IAAI,IAAA,EAAM;AACT,QAAA,OAAO;AAAA,UACN,MAAA;AAAA,UACA,gBAAA,EAAkB;AAAA,SACnB;AAAA,MACD;AAAA,IACD;AAGA,IAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA;AAChC,IAAA,IAAI,KAAA,CAAM,SAAS,CAAA,EAAG;AACrB,MAAA,MAAM,MAAA,GAAS,MAAM,GAAA,EAAI;AACzB,MAAA,MAAM,QAAA,GAAW,KAAA,CAAM,IAAA,CAAK,GAAG,CAAA;AAC/B,MAAA,KAAA,MAAW,CAAC,QAAQ,EAAE,QAAA,EAAU,CAAA,IAAK,IAAA,CAAK,aAAA,CAAc,OAAA,EAAQ,EAAG;AAClE,QAAA,IAAI,MAAA,CAAO,QAAA,CAAS,MAAA,IAAU,EAAE,CAAA,EAAG;AAClC,UAAA,MAAM,IAAA,GAAO,SAAS,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,SAAS,QAAQ,CAAA;AAC3D,UAAA,IAAI,IAAA,EAAM;AACT,YAAA,OAAO;AAAA,cACN,MAAA;AAAA,cACA,gBAAA,EAAkB;AAAA,aACnB;AAAA,UACD;AAAA,QACD;AAAA,MACD;AAAA,IACD;AAEA,IAAA,OAAO,IAAA;AAAA,EACR;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,aAAa,MAAA,EAAwB;AAC5C,IAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,qBAAA,IAAyB,UAAA;AACnD,IAAA,IAAI,KAAA,KAAU,QAAQ,OAAO,MAAA;AAC7B,IAAA,OAAO,CAAA,GAAA,EAAM,MAAA,CAAO,KAAA,CAAM,EAAE,CAAC,CAAA,CAAA;AAAA,EAC9B;AAAA,EAEA,MAAc,kBAAA,CACb,EAAA,EACA,MAAA,EACA,KAAA,EAC8B;AAC9B,IAAA,MAAM,WAAW,MAAA,CAAO,IAAA;AAGxB,IAAA,IAAI,aAAa,gBAAA,EAAkB;AAIlC,MAAA,IAAA,CAAK,oBAAA,CAAqB,IAAI,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,MAAC,CAAC,CAAA;AAG9C,MAAA,MAAM,KAAA,GAAS,KAAa,eAAA,IAAmB;AAAA,QAC9C,UAAA,EAAY,CAAA;AAAA,QACZ,OAAA,EAAS,CAAA;AAAA,QACT,QAAA,EAAU;AAAA,OACX;AACA,MAAA,MAAM,aAAA,GAAgB,KAAK,aAAA,CAAc,IAAA;AACzC,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,QAAA,GAAW,QAAA,GAAW,SAAA;AAC7C,MAAA,MAAM,cAAc,KAAA,CAAM,IAAA,CAAK,KAAK,aAAA,CAAc,MAAA,EAAQ,CAAA,CAAE,MAAA;AAAA,QAC3D,CAAC,GAAA,EAAK,EAAE,UAAS,KAAM,GAAA,GAAM,SAAS,KAAA,CAAM,MAAA;AAAA,QAC5C;AAAA,OACD;AACA,MAAA,MAAM,cAAc,IAAA,CAAK,QAAA;AAAA;AAAA,QAEtB,IAAA,CAAK,QAAA,CAAiB,IAAA,EAAM,cAAA,EAAe,CAAE;AAAA,UAC7C,CAAA;AAEH,MAAA,MAAM,iBACL,IAAA,CAAK,QAAA;AAAA,MAEJ,IAAA,CAAK,SAAiB,MAAA,EAAQ,cAAA;AAAA;AAAA,QAE5B,IAAA,CAAK,SAAiB,MAAA,CAAO;AAAA,UAC7B,EAAC;AACL,MAAA,MAAM,iBAAiB,cAAA,CAAe,MAAA;AAEtC,MAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,GAAA,CAAI,qBAAA,IAAyB,UAAA;AACvD,MAAA,MAAM,iBAAiB,SAAA,KAAc,SAAA;AAErC,MAAA,MAAM,aAAA,GAAgB,cAAA,GACnB,cAAA,CACC,GAAA,CAAI,CAAC,IAAA,KAAS;AACd,QAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAC5B,QAAA,MAAMC,GAAAA,GAAK,KAAA,CAAM,KAAA,CAAM,MAAA,GAAS,CAAC,CAAA;AACjC,QAAA,OAAO,YAAOA,GAAAA,GAAKA,GAAAA,CAAG,KAAA,CAAM,EAAE,IAAI,SAAS,CAAA,YAAA,CAAA;AAAA,MAC5C,CAAC,CAAA,CACA,IAAA,CAAK,IAAI,CAAA,GACV,EAAA;AAEH,MAAA,MAAM,mBAAmB,IAAA,CAAK,QAAA;AAAA;AAAA,QAE3B,IAAA,CAAK,SAAiB,mBAAA;AAAoB,UAC1C,CAAA;AAEH,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,QAAA,EAAU,SAAA,EAAU,IAAK,SAAA;AAChD,MAAA,MAAM,cACL,SAAA,KAAc,SAAA,GAAY,SAAA,GAAY,IAAA,CAAK,aAAa,SAAS,CAAA;AAElE,MAAA,MAAM,iBAAiB,KAAA,CAAM,IAAA,CAAK,KAAK,aAAA,CAAc,OAAA,EAAS,CAAA,CAC5D,OAAA;AAAA,QAAQ,CAAC,CAAC,MAAA,EAAQ,EAAE,UAAU,CAAA,KAC9B,SAAS,KAAA,CAAM,GAAA;AAAA,UACd,CAAC,MAAM,CAAA,SAAA,EAAO,CAAA,CAAE,IAAI,CAAA,eAAA,EAAkB,IAAA,CAAK,YAAA,CAAa,MAAM,CAAC,CAAA,CAAA;AAAA;AAChE,OACD,CACC,KAAK,IAAI,CAAA;AAEX,MAAA,MAAM,UAAA,GAAa;AAAA,QAClB,CAAA,kBAAA,EAAqB,SAAA,KAAc,QAAA,GAAW,QAAA,GAAW,SAAS,CAAA,CAAA;AAAA,QAClE,yBAAyB,WAAW,CAAA,CAAA;AAAA,QACpC,CAAA,SAAA,EAAY,WAAW,CAAA,SAAA,EAAY,gBAAgB,iBAAiB,cAAc,CAAA,WAAA,CAAA;AAAA,QAClF,cAAA,IAAkB,iBAAiB,CAAA,GAChC;AAAA;AAAA,EAAyB,aAAa;AAAA,CAAA,GACtC,EAAA;AAAA,QACH,CAAA,WAAA,EAAc,MAAM,UAAU,CAAA,cAAA,EAAiB,MAAM,OAAO,CAAA,MAAA,EAAS,MAAM,QAAQ,CAAA,KAAA,CAAA;AAAA,QACnF,CAAA,SAAA,EAAY,aAAa,CAAA,aAAA,EAAgB,WAAW,CAAA,mBAAA,CAAA;AAAA,QACpD,cAAc,CAAA,GACX;AAAA;AAAA,EAAoD,cAAc,CAAA,CAAA,GAClE,mCAAA;AAAA;AAAA,QAEH,oBAAA,CAAqB,WAAA,EAAY,CAAE,iBAAA;AAAkB,OACtD,CACE,OAAO,CAAC,IAAA,KAAS,SAAS,EAAE,CAAA,CAC5B,KAAK,IAAI,CAAA;AAGX,MAAA,MAAM,aAAA,GAAgB,qBAAqB,WAAA,EAAY;AACvD,MAAA,aAAA,CAAc,MAAA,CAAO;AAAA,QACpB,IAAA,EAAM,YAAA;AAAA,QACN,MAAA,EAAQ,YAAA;AAAA,QACR,QAAA,EAAU,gBAAA;AAAA,QACV,oBAAA,EAAsB,CAAA;AAAA,QACtB,qBAAA,EAAuB,aAAA,CAAc,WAAA,CAAY,UAAU;AAAA,OAC3D,CAAA;AAED,MAAA,OAAO;AAAA,QACN,OAAA,EAAS,KAAA;AAAA,QACT,EAAA;AAAA,QACA,MAAA,EAAQ;AAAA,UACP,OAAA,EAAS;AAAA,YACR;AAAA,cACC,IAAA,EAAM,MAAA;AAAA,cACN,IAAA,EAAM;AAAA;AACP;AACD;AACD,OACD;AAAA,IACD;AAEA,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,UAAA,CACnB,SAAA,EAAU,CACV,KAAK,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,KAAS,QAAQ,CAAA;AAEjC,IAAA,IAAI,CAAC,OAAA,IAAW,IAAA,CAAK,QAAA,EAAU;AAG9B,MAAA,IAAI,MAAA,GAAS,IAAA,CAAK,qBAAA,CAAsB,QAAQ,CAAA;AAGhD,MAAA,IAAI,CAAC,MAAA,EAAQ;AACZ,QAAA,MAAM,KAAK,oBAAA,EAAqB;AAChC,QAAA,MAAA,GAAS,IAAA,CAAK,sBAAsB,QAAQ,CAAA;AAAA,MAC7C;AAEA,MAAA,IAAI,MAAA,EAAQ;AACX,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,0BAA0B,QAAQ,CAAA,2BAAA,EAA8B,OAAO,MAAM,CAAA,YAAA,EAAe,OAAO,gBAAgB,CAAA,CAAA;AAAA,SACpH;AAIA,QAAA,MAAM,aAAA,GAAgB,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,OAAO,MAAM,CAAA;AAC1D,QAAA,IAAI,cAAA,GAAiB,KAAA;AACrB,QAAA,IAAI,aAAA,EAAe,SAAS,YAAA,EAAc;AACzC,UAAA,MAAM,gBACL,KAAA,IAAU,MAAM,IAAA,CAAK,0BAAA,CAA2B,OAAO,MAAM,CAAA;AAC9D,UAAA,IAAI,CAAC,aAAA,EAAe;AACnB,YAAA,MAAM,eACL,aAAA,CAAc,QAAA,CAAS,UAAA,EAAY,IAAA,EAAM,aAAY,IACrD,SAAA;AACD,YAAA,MAAM,IAAA,GAAO,cAAc,QAAA,CAAS,SAAA;AACpC,YAAA,MAAM,UAAU,MAAA,CAAO,MAAA,CAAO,KAAA,CAAM,EAAE,EAAE,WAAA,EAAY;AACpD,YAAA,MAAM,UAAA,GAAa,IAAA,GAChB,CAAA,WAAA,EAAc,IAAI,CAAA,CAAA,GAClB,CAAA,WAAA,EAAc,YAAA,CAAa,WAAA,EAAY,CAAE,OAAA,CAAQ,aAAA,EAAe,GAAG,CAAC,CAAA,CAAA;AACvE,YAAA,OAAO;AAAA,cACN,OAAA,EAAS,KAAA;AAAA,cACT,EAAA;AAAA,cACA,MAAA,EAAQ;AAAA,gBACP,OAAA,EAAS;AAAA,kBACR;AAAA,oBACC,IAAA,EAAM,MAAA;AAAA,oBACN,MAAM,CAAA,8CAAA,EAAiD,YAAY,CAAA,8CAAA,EAAiD,UAAU,kBAAkB,OAAO,CAAA,gDAAA;AAAA;AACxJ,iBACD;AAAA,gBACA,OAAA,EAAS;AAAA;AACV,aACD;AAAA,UACD;AAEA,UAAA,cAAA,GAAiB,aAAA;AAAA,QAClB;AAEA,QAAA,OAAO,IAAA,CAAK,qBAAA;AAAA,UACX,EAAA;AAAA,UACA,MAAA,CAAO,gBAAA;AAAA,UACP,MAAA,CAAO,MAAA;AAAA,UACP,MAAA;AAAA,UACA;AAAA,SACD;AAAA,MACD;AAGA,MAAA,IAAI,YAAsB,EAAC;AAC3B,MAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,EAAG,CAAA,EAAA,EAAK;AAC3B,QAAA,SAAA,GAAY,MAAM,IAAA,CAAK,QAAA,CAAS,aAAA,CAAc,QAAQ,CAAA;AACtD,QAAA,IAAI,SAAA,CAAU,SAAS,CAAA,EAAG;AAC1B,QAAA,IAAI,CAAA,GAAI,CAAA,EAAG,MAAM,IAAI,OAAA,CAAQ,CAAC,CAAA,KAAM,UAAA,CAAW,CAAA,EAAG,GAAI,CAAC,CAAA;AAAA,MACxD;AAEA,MAAA,IAAI,SAAA,CAAU,SAAS,CAAA,EAAG;AACzB,QAAA,OAAO,IAAA,CAAK,qBAAA;AAAA,UACX,EAAA;AAAA,UACA,QAAA;AAAA,UACA,UAAU,CAAC,CAAA;AAAA,UACX,MAAA;AAAA,UACA;AAAA,SACD;AAAA,MACD;AAAA,IACD;AAGA,IAAA,IAAI,OAAA,EAAS;AACZ,MAAA,IAAI;AACH,QAAA,MAAM,cAAA,GAAiB,KAAK,GAAA,EAAI;AAChC,QAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,UAAA,CAAW,QAAA,CAAS;AAAA,UAC7C,IAAA,EAAM,QAAA;AAAA,UACN,SAAA,EAAW,MAAA,CAAO,SAAA,IAAa;AAAC,SAChC,CAAA;AAGD,QAAA,MAAM,cAAA,GAAiB,qBAAqB,WAAA,EAAY;AACxD,QAAA,MAAM,oBAAoB,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,SAAA,IAAa,EAAE,CAAA;AAC/D,QAAA,MAAM,kBAAA,GAAqB,IAAA,CAAK,SAAA,CAAU,MAAM,CAAA;AAChD,QAAA,cAAA,CAAe,MAAA,CAAO;AAAA,UACrB,IAAA,EAAM,WAAA;AAAA,UACN,MAAA,EAAQ,YAAA;AAAA,UACR,QAAA;AAAA,UACA,oBAAA,EAAsB,cAAA,CAAe,WAAA,CAAY,iBAAiB,CAAA;AAAA,UAClE,qBAAA,EAAuB,cAAA,CAAe,WAAA,CAAY,kBAAkB,CAAA;AAAA,UACpE,UAAA,EAAY,IAAA,CAAK,GAAA,EAAI,GAAI;AAAA,SACzB,CAAA;AAED,QAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,EAAA,EAAI,MAAA,EAAO;AAAA,MACrC,SAAS,GAAA,EAAc;AACtB,QAAA,OAAO;AAAA,UACN,OAAA,EAAS,KAAA;AAAA,UACT,EAAA;AAAA,UACA,KAAA,EAAO;AAAA,YACN,IAAA,EAAM,KAAA;AAAA,YACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA;AACzD,SACD;AAAA,MACD;AAAA,IACD;AAEA,IAAA,OAAO;AAAA,MACN,OAAA,EAAS,KAAA;AAAA,MACT,EAAA;AAAA,MACA,KAAA,EAAO;AAAA,QACN,IAAA,EAAM,MAAA;AAAA,QACN,OAAA,EAAS,+BAA+B,QAAQ,CAAA,+DAAA;AAAA;AACjD,KACD;AAAA,EACD;AAAA,EAEA,MAAc,qBAAA,CAEb,EAAA,EACA,QAAA,EACA,MAAA,EAEA,QACA,KAAA,EAEe;AACf,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA;AACT,MAAA,OAAO;AAAA,QACN,OAAA,EAAS,KAAA;AAAA,QACT,EAAA;AAAA,QACA,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAS,oBAAA;AAAqB,OACtD;AAGD,IAAA,IAAI,aAAA,GAAgB,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,MAAM,CAAA;AACjD,IAAA,IAAI,WAAW,IAAA,CAAK,cAAA;AAEpB,IAAA,IAAI,aAAA,EAAe;AAClB,MAAA,QAAA,GAAW,cAAc,QAAA,CAAS,QAAA;AAAA,IACnC,CAAA,MAAO;AAEN,MAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,QAAA,CAAS,cAAc,MAAM,CAAA;AACzD,MAAA,IAAI,QAAA,EAAU;AACb,QAAA,QAAA,GAAW,QAAA,CAAS,QAAA;AACpB,QAAA,IAAA,CAAK,aAAA,CAAc,IAAI,MAAA,EAAQ;AAAA,UAC9B,QAAA;AAAA,UACA,QAAA,EAAU,KAAK,GAAA;AAAI,SACnB,CAAA;AACD,QAAA,aAAA,GAAgB,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,MAAM,CAAA;AAAA,MAC9C;AAAA,IACD;AAGA,IAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,QAAA,CAAS,YAAY,MAAM,CAAA;AAKpD,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,GAAA,CAAI,cAAA,IAAkB,EAAA;AAC/C,IAAA,MAAM,YAAA,GACL,QAAA,CAAS,QAAA,CAAS,iBAAiB,KACnC,QAAA,CAAS,QAAA,CAAS,iBAAiB,CAAA,IACnC,SAAS,QAAA,CAAS,iBAAiB,CAAA,IACnC,QAAA,CAAS,SAAS,iBAAiB,CAAA;AACpC,IAAA,MAAM,eAAe,KAAA,CAAM,IAAA;AAAA,MAC1B,CAAC,CAAA,KACA,CAAA,CAAE,QAAA,CAAS,OAAO,CAAA,IAClB,CAAA,CAAE,QAAA,CAAS,OAAO,CAAA,IAClB,CAAA,CAAE,QAAA,CAAS,OAAO,CAAA,IAClB,CAAA,CAAE,QAAA,CAAS,OAAO,CAAA,IAClB,CAAA,CAAE,QAAA,CAAS,OAAO,CAAA,IAClB,CAAA,CAAE,QAAA,CAAS,OAAO,CAAA,IAClB,CAAA,CAAE,QAAA,CAAS,OAAO;AAAA,KACpB;AACA,IAAA,MAAM,oBAAA,GACL,QAAQ,GAAA,CAAI,6BAAA,KAAkC,OAC9C,OAAA,CAAQ,GAAA,CAAI,oBAAoB,MAAA,IAChC,OAAA,CAAQ,IAAI,aAAA,KAAkB,MAAA,IAC9B,QAAQ,GAAA,CAAI,QAAA,KAAa,iBACzB,OAAA,CAAQ,GAAA,CAAI,QAAA,KAAa,MAAA,IACzB,YAAA,IACA,YAAA;AAED,IAAA,IAAI,oBAAA,EAAsB;AACzB,MAAA,MAAM,eACL,aAAA,EAAe,QAAA,EAAU,UAAA,EAAY,IAAA,EAAM,aAAY,IAAK,EAAA;AAC7D,MAAA,MAAM,EAAA,GAAK,SAAS,WAAA,EAAY;AAChC,MAAA,IAAI,aAAa,QAAA,CAAS,OAAO,KAAK,EAAA,CAAG,QAAA,CAAS,SAAS,CAAA,EAAG;AAC7D,QAAA,QAAA,GAAW,KAAA;AAAA,MACZ,CAAA,MAAA,IAAW,aAAa,QAAA,CAAS,MAAM,KAAK,EAAA,CAAG,QAAA,CAAS,MAAM,CAAA,EAAG;AAChE,QAAA,QAAA,GAAW,KAAA;AAAA,MACZ,CAAA,MAAA,IACC,YAAA,CAAa,QAAA,CAAS,QAAQ,CAAA,IAC9B,EAAA,CAAG,QAAA,CAAS,KAAK,CAAA,IACjB,EAAA,CAAG,QAAA,CAAS,QAAQ,CAAA,EACnB;AACD,QAAA,QAAA,GAAW,KAAA;AAAA,MACZ;AAAA,IACD;AAEA,IAAA,IAAI,UAAA,GAA4B,IAAA;AAGhC,IAAA,IAAI,oBAAA,EAAsB;AACzB,MAAA,UAAA,GAAa,aAAa,QAAQ,CAAA,CAAA;AAAA,IACnC,CAAA,MAAO;AAGN,MAAA,MAAM,EAAA,GAAK,MAAM,OAAO,IAAS,CAAA;AACjC,MAAA,MAAM,eAAA,GAAkB,OAAO,MAAA,CAAO,EAAA,CAAG,mBAAmB,CAAA,CAC1D,MAAK,CACL,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,EAAG,WAAW,MAAM,CAAA,CAClC,IAAI,CAAC,CAAA,KAAM,GAAG,OAAO,CAAA;AAGvB,MAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACzB,QAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAC5B,QAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA;AACjC,QAAA,IAAI,UAAU,EAAA,EAAI;AACjB,UAAA,MAAM,YAAA,GAAe,KAAA,CAAM,KAAA,GAAQ,CAAC,CAAA;AAGpC,UAAA,IACC,YAAA,KAAiB,WAAA,IACjB,eAAA,CAAgB,QAAA,CAAS,YAAY,CAAA,EACpC;AACD,YAAA,UAAA,GAAa,aAAa,QAAQ,CAAA,CAAA;AAClC,YAAA;AAAA,UACD;AAGA,UAAA,IAAI,CAAC,UAAA,EAAY;AAChB,YAAA,UAAA,GAAa,CAAA,EAAG,YAAY,CAAA,CAAA,EAAI,QAAQ,CAAA,CAAA;AAAA,UACzC;AAAA,QACD;AAAA,MACD;AAAA,IACD;AAEA,IAAA,IAAI,CAAC,UAAA,EAAY;AAEhB,MAAA,UAAA,GAAa,aAAa,QAAQ,CAAA,CAAA;AAAA,IACnC;AAEA,IAAA,GAAA,CAAI,IAAA;AAAA,MACH,CAAA,6BAAA,EAAgC,QAAQ,CAAA,IAAA,EAAO,UAAU,aAAa,MAAM,CAAA,CAAA;AAAA,KAC7E;AAEA,IAAA,MAAM,YAAA,GAAe,IAAI,MAAA,CAAO,SAAA;AAAA,MAC/B,UAAA;AAAA,MACA,wBAAA,EAAyB;AAAA,MACzB;AAAA,KACD;AACA,IAAA,OAAO,IAAA,CAAK,kBAAA;AAAA,MACX,EAAA;AAAA,MACA,YAAA;AAAA,MACA,QAAA;AAAA,MACA,MAAA;AAAA,MACA,MAAA;AAAA,MACA;AAAA,KACD;AAAA,EACD;AAAA;AAAA,EAGQ,cAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOR,MAAc,2BACb,MAAA,EAC8B;AAC9B,IAAA,IAAI,MAAA,EAAQ;AACX,MAAA,MAAM,aAAA,GAAgB,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,MAAM,CAAA;AACnD,MAAA,MAAM,eACL,aAAA,EAAe,QAAA,CAAS,UAAA,EAAY,IAAA,EAAM,aAAY,IAAK,EAAA;AAE5D,MAAA,IAAI,SAAA;AAGJ,MAAA,MAAM,IAAA,GAAO,eAAe,QAAA,CAAS,SAAA;AACrC,MAAA,IAAI,IAAA,EAAM;AACT,QAAA,MAAM,MAAA,GAAS,cAAc,IAAI,CAAA,CAAA;AACjC,QAAA,SAAA,GACC,OAAA,CAAQ,IAAI,MAAM,CAAA,IAAK,QAAQ,GAAA,CAAI,CAAA,iBAAA,EAAoB,IAAI,CAAA,CAAE,CAAA;AAC9D,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,CAAA,8BAAA,EAAiC,IAAI,CAAA,QAAA,EAAW,MAAM,CAAA,OAAA,EAAU,CAAC,CAAC,SAAS,CAAA,MAAA,EAAS,MAAA,CAAO,KAAA,CAAM,EAAE,CAAC,CAAA;AAAA,SACrG;AAAA,MACD,CAAA,MAAO;AACN,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,0EAA0E,MAAA,CAAO,KAAA,CAAM,EAAE,CAAC,aAAa,YAAY,CAAA;AAAA,SACpH;AAAA,MACD;AAGA,MAAA,IAAI,CAAC,SAAA,EAAW;AACf,QAAA,MAAM,OAAA,GAAU,MAAA,CAAO,KAAA,CAAM,EAAE,EAAE,WAAA,EAAY;AAC7C,QAAA,SAAA,GACC,OAAA,CAAQ,GAAA,CAAI,CAAA,WAAA,EAAc,OAAO,CAAA,CAAE,KACnC,OAAA,CAAQ,GAAA,CAAI,CAAA,iBAAA,EAAoB,OAAO,CAAA,CAAE,CAAA;AAAA,MAC3C;AAGA,MAAA,IAAI,CAAC,aAAa,YAAA,EAAc;AAC/B,QAAA,MAAM,YAAY,YAAA,CAChB,WAAA,EAAY,CACZ,OAAA,CAAQ,eAAe,GAAG,CAAA;AAC5B,QAAA,SAAA,GACC,OAAA,CAAQ,GAAA,CAAI,CAAA,WAAA,EAAc,SAAS,CAAA,CAAE,KACrC,OAAA,CAAQ,GAAA,CAAI,CAAA,iBAAA,EAAoB,SAAS,CAAA,CAAE,CAAA;AAAA,MAC7C;AAEA,MAAA,IAAI,SAAA,EAAW;AACd,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,uDAAuD,MAAA,CAAO,KAAA,CAAM,EAAE,CAAC,CAAA,EAAA,EAAK,gBAAgB,SAAS,CAAA,CAAA;AAAA,SACtG;AACA,QAAA,OAAO,SAAA;AAAA,MACR;AAAA,IACD;AAEA,IAAA,IAAI,IAAA,CAAK,cAAA,EAAgB,OAAO,IAAA,CAAK,cAAA;AAGrC,IAAA,MAAM,WAAA,GAAc,OAAA,CAAQ,GAAA,CAAI,gBAAA,IAAoB,QAAQ,GAAA,CAAI,UAAA;AAChE,IAAA,IAAI,WAAA,EAAa;AAChB,MAAA,IAAA,CAAK,cAAA,GAAiB,WAAA;AACtB,MAAA,OAAO,IAAA,CAAK,cAAA;AAAA,IACb;AAEA,IAAA,MAAM,QAAA,GAAW,QAAQ,GAAA,CAAI,cAAA;AAC7B,IAAA,IAAI,CAAC,UAAU,OAAO,MAAA;AAEtB,IAAA,MAAM,WACL,OAAA,CAAQ,GAAA,CAAI,oBAAA,IACZ,OAAA,CAAQ,IAAI,cAAA,IACZ,iBAAA;AACD,IAAA,MAAM,eACL,OAAA,CAAQ,GAAA,CAAI,wBAAA,IACZ,OAAA,CAAQ,IAAI,kBAAA,IACZ,sBAAA;AACD,IAAA,MAAM,WACL,OAAA,CAAQ,GAAA,CAAI,mBAAA,IACZ,OAAA,CAAQ,IAAI,aAAA,IACZ,mBAAA;AAED,IAAA,IAAI;AACH,MAAA,MAAM,UAAU,QAAA,CAAS,QAAA,CAAS,OAAO,CAAA,GACtC,QAAA,GACA,GAAG,QAAQ,CAAA,KAAA,CAAA;AACd,MAAA,MAAM,QAAA,GAAW,GAAG,OAAO,CAAA,MAAA,CAAA;AAC3B,MAAA,GAAA,CAAI,IAAA;AAAA,QACH,6DAA6D,QAAQ,CAAA;AAAA,OACtE;AAEA,MAAA,MAAM,MAAA,GAAS,IAAI,eAAA,CAAgB;AAAA,QAClC,UAAA,EAAY,oBAAA;AAAA,QACZ,KAAA,EACC,sFAAA;AAAA,QACD,QAAA,EAAU,QAAA;AAAA,QACV,SAAA,EAAW,QAAA;AAAA,QACX,aAAA,EAAe;AAAA,OACf,CAAA;AAED,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,QAAA,EAAU;AAAA,QACtC,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS;AAAA,UACR,cAAA,EAAgB;AAAA,SACjB;AAAA,QACA,IAAA,EAAM,OAAO,QAAA;AAAS,OACtB,CAAA;AAED,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AACjB,QAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,CAAA,4CAAA,EAA+C,QAAA,CAAS,MAAM,CAAA,CAAA,EAAI,IAAI,CAAA;AAAA,SACvE;AACA,QAAA,OAAO,KAAA,CAAA;AAAA,MACR;AAEA,MAAA,MAAM,IAAA,GAAQ,MAAM,QAAA,CAAS,IAAA,EAAK;AAClC,MAAA,IAAI,KAAK,YAAA,EAAc;AACtB,QAAA,IAAA,CAAK,iBAAiB,IAAA,CAAK,YAAA;AAC3B,QAAA,GAAA,CAAI,IAAA;AAAA,UACH;AAAA,SACD;AACA,QAAA,OAAO,IAAA,CAAK,cAAA;AAAA,MACb;AAAA,IACD,SAAS,GAAA,EAAc;AACtB,MAAA,GAAA,CAAI,IAAA;AAAA,QACH,8CACC,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAChD,CAAA;AAAA,OACD;AAAA,IACD;AACA,IAAA,OAAO,MAAA;AAAA,EACR;AAAA,EAEA,MAAc,kBAAA,CAEb,EAAA,EAEA,QACA,QAAA,EAEA,MAAA,EACA,QACA,KAAA,EAEe;AACf,IAAA,MAAM,cAAA,GAAiB,QAAA;AACvB,IAAA,MAAM,aAAA,GAAgB,IAAA,CAAK,QAAA,GACxB,MAAM,KAAK,QAAA,CAAS,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,cAAc,CAAC,CAAA,GACpD,MAAA,CAAO,IAAA,CAAK,EAAE,CAAA;AAEjB,IAAA,MAAM,oBAAA,GAAuB,KAAK,GAAA,EAAI;AAGtC,IAAA,IAAI,WAAA,GAAc,KAAA;AAClB,IAAA,IAAI,CAAC,WAAA,EAAa;AACjB,MAAA,WAAA,GAAc,MAAM,IAAA,CAAK,0BAAA,CAA2B,MAAM,CAAA;AAAA,IAC3D;AAEA,IAAA,IAAI,MAAA,EAAQ;AACX,MAAA,MAAM,aAAA,GAAgB,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,MAAM,CAAA;AACnD,MAAA,IAAI,aAAA,EAAe,QAAA,CAAS,YAAA,IAAgB,CAAC,WAAA,EAAa;AACzD,QAAA,MAAM,eACL,aAAA,CAAc,QAAA,CAAS,UAAA,EAAY,IAAA,EAAM,aAAY,IAAK,SAAA;AAC3D,QAAA,MAAM,IAAA,GAAO,cAAc,QAAA,CAAS,SAAA;AACpC,QAAA,MAAM,OAAA,GAAU,MAAA,CAAO,KAAA,CAAM,EAAE,EAAE,WAAA,EAAY;AAC7C,QAAA,MAAM,UAAA,GAAa,IAAA,GAChB,CAAA,WAAA,EAAc,IAAI,CAAA,CAAA,GAClB,CAAA,WAAA,EAAc,YAAA,CAAa,WAAA,EAAY,CAAE,OAAA,CAAQ,aAAA,EAAe,GAAG,CAAC,CAAA,CAAA;AAEvE,QAAA,OAAO;AAAA,UACN,OAAA,EAAS,KAAA;AAAA,UACT,EAAA;AAAA,UACA,MAAA,EAAQ;AAAA,YACP,OAAA,EAAS;AAAA,cACR;AAAA,gBACC,IAAA,EAAM,MAAA;AAAA,gBACN,MAAM,CAAA,8CAAA,EAAiD,YAAY,CAAA,8CAAA,EAAiD,UAAU,kBAAkB,OAAO,CAAA,gDAAA;AAAA;AACxJ,aACD;AAAA,YACA,OAAA,EAAS;AAAA;AACV,SACD;AAAA,MACD;AAAA,IACD;AAEA,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY;AAC/B,MAAA,MAAM,QAAA,GAAW,IAAS,IAAA,CAAA,QAAA,EAAS;AACnC,MAAA,IAAI,WAAA,EAAa;AAChB,QAAA,QAAA,CAAS,GAAA,CAAI,eAAA,EAAiB,CAAA,OAAA,EAAU,WAAW,CAAA,CAAE,CAAA;AAAA,MACtD;AAEA,MAAA,MAAA,CAAO,eAAA;AAAA,QACN;AAAA,UACC,WAAW,CAAA,SAAA,EAAY,IAAA,CAAK,QAAA,EAAU,SAAA,MAAe,WAAW,CAAA,CAAA;AAAA,UAChE,eAAA,EAAiB,cAAA;AAAA,UACjB,eAAA,EAAiB;AAAA,SAClB;AAAA,QACA,QAAA;AAAA,QACA,OAAO,KAAmB,QAAA,KAA6B;AACtD,UAAA,IAAI,GAAA,IAAO,CAAC,QAAA,CAAS,QAAA,EAAU;AAC9B,YAAA,IAAI;AACH,cAAA,mBAAA,CAAoB,GAAA,CAAI;AAAA,gBACvB,UAAA,EAAY,QAAA;AAAA,gBACZ,UAAA,EAAY;AAAA,eACZ,CAAA;AAAA,YACF,CAAA,CAAA,MAAQ;AAAA,YAAC;AACT,YAAA,OAAO,OAAA,CAAQ;AAAA,cACd,OAAA,EAAS,KAAA;AAAA,cACT,EAAA;AAAA,cACA,MAAA,EAAQ;AAAA,gBACP,OAAA,EAAS;AAAA,kBACR;AAAA,oBACC,IAAA,EAAM,MAAA;AAAA,oBACN,IAAA,EAAM,CAAA,sBAAA,EAAyB,GAAA,EAAK,OAAA,IAAW,UAAU,CAAA;AAAA;AAC1D,iBACD;AAAA,gBACA,OAAA,EAAS;AAAA;AACV,aACA,CAAA;AAAA,UACF;AAEA,UAAA,MAAM,QAAA,GAAW,YAAY,GAAA,EAAI;AACjC,UAAA,MAAM,EAAE,UAAA,EAAY,YAAA,EAAa,GAChC,MAAM,eAAA,CAAgB,qBAAA;AAAA,YACrB,QAAA,CAAS;AAAA,WACV;AACD,UAAA,MAAM,WAAA,GAAc,WAAA,CAAY,GAAA,EAAI,GAAI,QAAA;AACxC,UAAA,IAAI;AACH,YAAA,sBAAA,CAAuB,OAAA,CAAQ,EAAE,IAAA,EAAM,QAAA,IAAY,WAAW,CAAA;AAC9D,YAAA,kBAAA,CAAmB,GAAA,CAAI;AAAA,cACtB,SAAA,EAAW,YAAA;AAAA,cACX,MAAA,EAAQ;AAAA,aACR,CAAA;AAAA,UACF,CAAA,CAAA,MAAQ;AAAA,UAER;AAGA,UAAA,MAAM,eACL,MAAA,EAAQ,SAAA,KAAc,QAAQ,OAAA,KAAY,MAAA,GAAY,SAAS,EAAC,CAAA;AACjE,UAAA,MAAM,gBAAA,GAAmB,IAAA,CAAK,SAAA,CAAU,YAAY,CAAA;AACpD,UAAA,MAAM,UAAA,GAAa,CAAA,+BAAA,EAAkC,QAAQ,CAAA,wBAAA,EAA2B,gBAAgB,CAAA,GAAA,CAAA;AACxG,UAAA,MAAM,KAAA,GAAe,mBAAY,EAAE,CAAA;AAEnC,UAAA,MAAM,cAAc,IAAA,CAAK,gBAAA;AAAA,YACxB,MAAA,CAAO,KAAK,UAAU,CAAA;AAAA,YACtB,YAAA;AAAA,YACA;AAAA,WACD;AAEA,UAAA,MAAM,YAAA,GAAe,IAAS,IAAA,CAAA,QAAA,EAAS;AACvC,UAAA,IAAI,WAAA,EAAa;AAChB,YAAA,YAAA,CAAa,GAAA,CAAI,eAAA,EAAiB,CAAA,OAAA,EAAU,WAAW,CAAA,CAAE,CAAA;AAAA,UAC1D;AAEA,UAAA,MAAM,OAAO,MAAA,CAAO,YAAA;AAAA,YACnB;AAAA,cACC,eAAe,QAAA,CAAS,aAAA;AAAA,cACxB,WAAA,EAAa,IAAI,UAAA,CAAW,WAAW,CAAA;AAAA,cACvC,QAAQ,EAAC;AAAA,cACT,cAAA,EAAgB,UAAA;AAAA,cAChB,SAAA,EAAW;AAAA,aACZ;AAAA,YACA;AAAA,WACD;AAEA,UAAA,IAAI,UAAA,GAAa,EAAA;AACjB,UAAA,IAAI,YAAA,GAAqC,IAAA;AACzC,UAAA,IAAA,CAAK,EAAA,CAAG,MAAA,EAAQ,CAAC,OAAA,KAA2B;AAC3C,YAAA,UAAA,IAAc,OAAA,CAAQ,iBAAA;AACtB,YAAA,YAAA,GAAe,OAAA;AAAA,UAChB,CAAC,CAAA;AACD,UAAA,IAAA,CAAK,EAAA,CAAG,OAAO,YAAY;AAC1B,YAAA,IAAI;AACH,cAAA,IAAI,YAAA,EAAc;AAIjB,gBAAA,IAAI,CAAC,aAAa,QAAA,EAAU;AAC3B,kBAAA,MAAM,WAAW,MAAA,CAAO,IAAA;AAAA,oBACvB,YAAA,CAAa;AAAA,mBACd,CAAE,SAAS,KAAK,CAAA;AAChB,kBAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,QAAA,CAAS,eAAA;AAAA,oBACnC,MAAA,CAAO,KAAK,UAAU,CAAA;AAAA,oBACtB,QAAA;AAAA,oBACA,MAAA,CAAO,IAAA,CAAK,YAAA,CAAa,UAAU,CAAA;AAAA,oBACnC,MAAA,CAAO,KAAK,YAAY,CAAA;AAAA,oBACxB;AAAA,mBACD;AAEA,kBAAA,IAAI;AACH,oBAAA,oBAAA,CAAqB,GAAA,CAAI;AAAA,sBACxB,MAAA,EAAQ,UAAU,OAAA,GAAU;AAAA,qBAC5B,CAAA;AAAA,kBACF,CAAA,CAAA,MAAQ;AAAA,kBAAC;AAET,kBAAA,IAAI,CAAC,OAAA,EAAS;AACb,oBAAA,IAAI;AACH,sBAAA,mBAAA,CAAoB,GAAA,CAAI;AAAA,wBACvB,UAAA,EAAY,QAAA;AAAA,wBACZ,UAAA,EAAY;AAAA,uBACZ,CAAA;AAAA,oBACF,CAAA,CAAA,MAAQ;AAAA,oBAAC;AACT,oBAAA,OAAO,OAAA,CAAQ;AAAA,sBACd,OAAA,EAAS,KAAA;AAAA,sBACT,EAAA;AAAA,sBACA,MAAA,EAAQ;AAAA,wBACP,OAAA,EAAS;AAAA,0BACR;AAAA,4BACC,IAAA,EAAM,MAAA;AAAA,4BACN,IAAA,EAAM;AAAA;AACP,yBACD;AAAA,wBACA,OAAA,EAAS;AAAA;AACV,qBACA,CAAA;AAAA,kBACF;AAAA,gBACD,CAAA,MAAO;AACN,kBAAA,IAAI;AACH,oBAAA,mBAAA,CAAoB,GAAA,CAAI;AAAA,sBACvB,UAAA,EAAY,QAAA;AAAA,sBACZ,UAAA,EAAY;AAAA,qBACZ,CAAA;AAAA,kBACF,CAAA,CAAA,MAAQ;AAAA,kBAAC;AAAA,gBACV;AAAA,cACD;AAEA,cAAA,MAAM,YAAA,GAAe,IAAA,CAAK,KAAA,CAAM,UAAU,CAAA;AAG1C,cAAA,MAAM,eAAA,GAAkB,qBAAqB,WAAA,EAAY;AACzD,cAAA,eAAA,CAAgB,MAAA,CAAO;AAAA,gBACtB,IAAA,EAAM,WAAA;AAAA,gBACN,MAAA,EAAQ,YAAA;AAAA,gBACR,QAAA;AAAA,gBACA,MAAA;AAAA,gBACA,oBAAA,EACC,eAAA,CAAgB,WAAA,CAAY,gBAAgB,CAAA;AAAA,gBAC7C,qBAAA,EAAuB,eAAA,CAAgB,WAAA,CAAY,UAAU,CAAA;AAAA,gBAC7D,UAAA,EAAY,IAAA,CAAK,GAAA,EAAI,GAAI;AAAA,eACzB,CAAA;AACD,cAAA,IAAI;AACH,gBAAA,oBAAA,CAAqB,GAAA;AAAA,kBACpB,EAAE,YAAY,QAAA,EAAS;AAAA,kBACvB,MAAA,CAAO,WAAW,UAAU;AAAA,iBAC7B;AAAA,cACD,CAAA,CAAA,MAAQ;AAAA,cAAC;AAET,cAAA,OAAA,CAAQ,EAAE,OAAA,EAAS,KAAA,EAAO,EAAA,EAAI,MAAA,EAAQ,cAAc,CAAA;AAAA,YACrD,SAAS,EAAA,EAAI;AACZ,cAAA,OAAA,CAAQ;AAAA,gBACP,OAAA,EAAS,KAAA;AAAA,gBACT,EAAA;AAAA,gBACA,MAAA,EAAQ,EAAE,OAAA,EAAS,CAAC,EAAE,MAAM,MAAA,EAAQ,IAAA,EAAM,UAAA,EAAY,CAAA;AAAE,eACxD,CAAA;AAAA,YACF;AAAA,UACD,CAAC,CAAA;AACD,UAAA,IAAA,CAAK,EAAA,CAAG,OAAA,EAAS,CAAC,CAAA,KAAa;AAC9B,YAAA,IAAI;AACH,cAAA,mBAAA,CAAoB,GAAA,CAAI;AAAA,gBACvB,UAAA,EAAY,QAAA;AAAA,gBACZ,UAAA,EAAY;AAAA,eACZ,CAAA;AAAA,YACF,CAAA,CAAA,MAAQ;AAAA,YAAC;AACT,YAAA,OAAA,CAAQ;AAAA,cACP,OAAA,EAAS,KAAA;AAAA,cACT,EAAA;AAAA,cACA,MAAA,EAAQ;AAAA,gBACP,OAAA,EAAS;AAAA,kBACR,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAM,CAAA,iBAAA,EAAoB,CAAA,CAAE,OAAO,CAAA,CAAA;AAAG,iBACvD;AAAA,gBACA,OAAA,EAAS;AAAA;AACV,aACA,CAAA;AAAA,UACF,CAAC,CAAA;AAAA,QACF;AAAA,OACD;AAAA,IACD,CAAC,CAAA;AAAA,EACF;AAAA,EAEQ,gBAAA,CACP,OAAA,EACA,GAAA,EACA,KAAA,EACS;AACT,IAAA,MAAM,MAAA,GAAgB,MAAA,CAAA,cAAA,CAAe,aAAA,EAAe,GAAA,EAAK,KAAK,CAAA;AAC9D,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,MAAA,CAAO,CAAC,MAAA,CAAO,MAAA,CAAO,OAAO,CAAA,EAAG,MAAA,CAAO,KAAA,EAAO,CAAC,CAAA;AACxE,IAAA,OAAO,OAAO,MAAA,CAAO,CAAC,WAAW,MAAA,CAAO,UAAA,EAAY,CAAC,CAAA;AAAA,EACtD;AACD","file":"chunk-L6J72C5X.js","sourcesContent":["// Copyright 2026 Nekzus Solutions and contributors\n// SPDX-License-Identifier: Apache-2.0\n\n/**\n * MCP UX: compact tool descriptions are ENABLED by default to optimize\n * token consumption for LLM clients (e.g. Claude Desktop).\n *\n * Set LIOP_MCP_COMPACT_TOOL_DESCRIPTIONS=0 to restore verbose descriptions.\n * Full LIOP payload format remains in prompts/get → liop_blind_analyst.\n */\nexport function mcpCompactToolDescriptions(): boolean {\n\tconst v =\n\t\tprocess.env.LIOP_MCP_COMPACT_TOOL_DESCRIPTIONS?.toLowerCase().trim();\n\tif (v === \"0\" || v === \"false\" || v === \"no\") return false;\n\treturn true;\n}\n\n/**\n * Removes SDK-appended LIOP specification blocks from a registered tool description.\n */\nexport function stripVerboseLiopToolDescription(description: string): string {\n\tlet d = description;\n\tconst markers = [\n\t\t\"\\n\\n[LIOP-PROTO-V1:\",\n\t\t\"\\r\\n\\r\\n[LIOP-PROTO-V1:\",\n\t\t\"\\n[LIOP-PROTO-V1:\", // rare\n\t];\n\tfor (const m of markers) {\n\t\tconst i = d.indexOf(m);\n\t\tif (i !== -1) {\n\t\t\td = d.slice(0, i);\n\t\t\tbreak;\n\t\t}\n\t}\n\treturn d.trimEnd();\n}\n","// Copyright 2026 Nekzus Solutions and contributors\n// SPDX-License-Identifier: Apache-2.0\n\nimport * as crypto from \"node:crypto\";\nimport * as grpc from \"@grpc/grpc-js\";\nimport { LiopVerifier } from \"../crypto/verifier.js\";\nimport { TokenTelemetryEngine } from \"../economy/telemetry.js\";\nimport type { LiopManifest, MeshNode } from \"../mesh/index.js\";\nimport {\n\tpqcHandshakeDurationMs,\n\tpqcHandshakesTotal,\n\ttoolCallErrorsTotal,\n\twireEgressBytesTotal,\n\tzkVerificationsTotal,\n} from \"../observability/metrics.js\";\nimport { GRPC_CHANNEL_OPTIONS } from \"../rpc/channel-options.js\";\nimport { Dilithium65Wrapper } from \"../rpc/crypto/dilithium.js\";\nimport { Kyber768Wrapper } from \"../rpc/crypto/kyber.js\";\nimport { liopV1 } from \"../rpc/proto.js\";\nimport { createChannelCredentials } from \"../rpc/tls.js\";\nimport type { IntentResponse, LogicResponse } from \"../rpc/types.js\";\nimport type { AuthInfo } from \"../security/jwt-validator.js\";\nimport { authorizeRequest } from \"../security/rbac.js\";\nimport type { LiopServer } from \"../server/index.js\";\nimport {\n\tMCP_PROTOCOL_VERSION,\n\ttype McpEra,\n\ttype McpRequest,\n\ttype McpResponse,\n} from \"../types.js\";\nimport { log } from \"../utils/logger.js\";\nimport {\n\tmcpCompactToolDescriptions,\n\tstripVerboseLiopToolDescription,\n} from \"../utils/mcpCompact.js\";\nimport {\n\tadaptResponseForLegacyClient,\n\tbuildLegacyInitializeResponse,\n\tisLegacyRequest,\n\tMCP_LEGACY_SUPPORT_ENABLED,\n\tMCP_PROTOCOL_VERSION_LEGACY,\n} from \"./mcp-compat.js\";\n\n/**\n * Time-to-live for cached manifests (seconds).\n * Aligned with libp2p Kademlia DHT TABLE_REFRESH_INTERVAL (5 minutes).\n * Provider records in the DHT are valid for 48 hours (PROVIDERS_VALIDITY),\n * so 300s is a conservative, network-friendly value.\n */\nconst MANIFEST_CACHE_TTL_S = 300;\n\n/** Maximum number of DHT query retries for manifest discovery */\nconst MANIFEST_DISCOVERY_RETRIES = 5;\n\n/**\n * LIOP MCP Router\n *\n * Core logic for routing MCP requests to local or remote LIOP providers.\n * Decoupled from transport (HTTP/Stdio).\n *\n * All tool discovery and port resolution is DYNAMIC via the\n * /liop/manifest/1.0.0 protocol stream over Kademlia DHT.\n */\nexport class LiopMcpRouter {\n\t/** Cached manifests from remote peers. Key = PeerID */\n\tprivate manifestCache: Map<\n\t\tstring,\n\t\t{ manifest: LiopManifest; cachedAt: number }\n\t> = new Map();\n\n\t/** Guards against concurrent discovery storms */\n\tprivate currentDiscovery: Promise<void> | null = null;\n\n\t/** Verifier for Tier-0 integrity checks */\n\tpublic verifier: LiopVerifier = new LiopVerifier();\n\n\t/** Callback when new remote tools are discovered */\n\tpublic onToolsChanged?: () => void;\n\n\t/** Circuit-breaker state for peers that repeatedly fail manifest queries. */\n\tprivate manifestFailureState: Map<\n\t\tstring,\n\t\t{ failures: number; cooldownUntil: number; lastSkipLogAt: number }\n\t> = new Map();\n\n\tprivate static readonly MANIFEST_FAILURE_BASE_COOLDOWN_MS = 15_000;\n\tprivate static readonly MANIFEST_FAILURE_MAX_COOLDOWN_MS = 5 * 60_000;\n\tprivate static readonly MANIFEST_SKIP_LOG_THROTTLE_MS = 30_000;\n\n\tconstructor(\n\t\tprivate liopServer: LiopServer,\n\t\tprivate meshNode: MeshNode | null = null,\n\t\tprivate defaultRpcPort = 50051,\n\t) {\n\t\t// Auto-register manifest handler if mesh node is provided\n\t\tif (this.meshNode) {\n\t\t\tthis.meshNode.registerManifestHandler(() => {\n\t\t\t\tconst remoteTools = this.liopServer.listTools().map((t) => ({\n\t\t\t\t\tname: t.name,\n\t\t\t\t\tdescription: t.description,\n\t\t\t\t\tinputSchema: t.inputSchema as Record<string, unknown>,\n\t\t\t\t}));\n\n\t\t\t\tconst resources = this.liopServer.listResources().map((r) => ({\n\t\t\t\t\tname: r.name,\n\t\t\t\t\turi: r.uri,\n\t\t\t\t\tdescription: r.description,\n\t\t\t\t\tmimeType: r.mimeType,\n\t\t\t\t}));\n\n\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: access private configuration properties\n\t\t\t\tconst serverConfig = (this.liopServer as any).config;\n\n\t\t\t\treturn {\n\t\t\t\t\tpeerId: this.meshNode?.getPeerId() || \"unknown\",\n\t\t\t\t\tgrpcPort: this.defaultRpcPort,\n\t\t\t\t\ttools: [...remoteTools],\n\t\t\t\t\tresources,\n\t\t\t\t\tserverInfo: this.liopServer.getServerInfo(),\n\t\t\t\t\tauthRequired: this.liopServer.jwtValidator !== undefined,\n\t\t\t\t\ttokenSlug: serverConfig?.tokenSlug,\n\t\t\t\t\ttaxonomy: serverConfig?.taxonomy\n\t\t\t\t\t\t? {\n\t\t\t\t\t\t\t\tdomain: serverConfig.taxonomy.domain || \"Unknown Domain\",\n\t\t\t\t\t\t\t\tclearanceTier: serverConfig.taxonomy.clearanceTier ?? 0,\n\t\t\t\t\t\t\t\texecutionTypes: serverConfig.taxonomy.executionTypes || [],\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t: undefined,\n\t\t\t\t};\n\t\t\t});\n\n\t\t\t// Proactively announce manifest capability to the mesh\n\t\t\tthis.meshNode.announceManifest().catch((err: unknown) => {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] Failed to announce manifest: ${err instanceof Error ? err.message : String(err)}`,\n\t\t\t\t);\n\t\t\t});\n\t\t}\n\n\t\t// [OWASP-A01] Startup warning when diagnostic level exposes full topology\n\t\tif (process.env.LIOP_DIAGNOSTIC_LEVEL === \"full\") {\n\t\t\tprocess.stderr.write(\n\t\t\t\t\"⚠️ [LIOP-Security] Diagnostic level set to FULL — \" +\n\t\t\t\t\t\"PeerIDs and network topology are exposed. Do NOT use in production.\\n\",\n\t\t\t);\n\t\t}\n\t}\n\n\tpublic getManifestCacheSize(): number {\n\t\treturn this.manifestCache.size;\n\t}\n\n\tprivate shouldSkipManifestQuery(peerId: string): boolean {\n\t\tconst state = this.manifestFailureState.get(peerId);\n\t\tif (!state) return false;\n\t\tconst now = Date.now();\n\t\tif (now >= state.cooldownUntil) return false;\n\n\t\tif (\n\t\t\tnow - state.lastSkipLogAt >\n\t\t\tLiopMcpRouter.MANIFEST_SKIP_LOG_THROTTLE_MS\n\t\t) {\n\t\t\tlog.info(\n\t\t\t\t`[LIOP-Router] Skipping manifest query for ${peerId} during cooldown (${Math.ceil((state.cooldownUntil - now) / 1000)}s remaining)`,\n\t\t\t);\n\t\t\tstate.lastSkipLogAt = now;\n\t\t}\n\t\treturn true;\n\t}\n\n\tprivate recordManifestQuerySuccess(peerId: string): void {\n\t\tthis.manifestFailureState.delete(peerId);\n\t}\n\n\tprivate recordManifestQueryFailure(peerId: string): void {\n\t\tconst now = Date.now();\n\t\tconst prev = this.manifestFailureState.get(peerId);\n\t\tconst failures = (prev?.failures || 0) + 1;\n\t\tconst backoff = Math.min(\n\t\t\tLiopMcpRouter.MANIFEST_FAILURE_BASE_COOLDOWN_MS *\n\t\t\t\t2 ** Math.max(0, failures - 1),\n\t\t\tLiopMcpRouter.MANIFEST_FAILURE_MAX_COOLDOWN_MS,\n\t\t);\n\t\tthis.manifestFailureState.set(peerId, {\n\t\t\tfailures,\n\t\t\tcooldownUntil: now + backoff,\n\t\t\tlastSkipLogAt: 0,\n\t\t});\n\t}\n\n\t/**\n\t * Detects the protocol era of an incoming request.\n\t * Modern requests carry '_meta' with protocol version \"2026-07-28\" or use modern RPCs.\n\t * Legacy requests use 'initialize' handshake or lack '_meta' envelopes.\n\t */\n\tpublic detectEra(request: McpRequest): McpEra {\n\t\tconst params = request.params as Record<string, unknown> | undefined;\n\t\tconst meta = params?._meta as Record<string, unknown> | undefined;\n\t\tconst version = meta?.[\"io.modelcontextprotocol/protocolVersion\"];\n\n\t\tif (version === MCP_PROTOCOL_VERSION) {\n\t\t\treturn \"modern\";\n\t\t}\n\n\t\tif (MCP_LEGACY_SUPPORT_ENABLED && isLegacyRequest(request)) {\n\t\t\treturn \"legacy\";\n\t\t}\n\n\t\treturn \"modern\";\n\t}\n\n\tpublic async dispatch(\n\t\trequest: McpRequest,\n\t\tauthInfo?: AuthInfo | null,\n\t): Promise<McpResponse | null> {\n\t\tconst { method, params, id } = request;\n\t\tlog.info(`[LIOP-Router] Processing: ${method}`);\n\n\t\t// [SEC] Enforce RBAC scope validation (Least Privilege) only if JWT validation is active\n\t\tif (this.liopServer.jwtValidator) {\n\t\t\tconst authResult = authorizeRequest(method, authInfo ?? null);\n\t\t\tif (!authResult.allowed) {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] RBAC Access Denied for method '${method}': ${authResult.reason}`,\n\t\t\t\t);\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\terror: {\n\t\t\t\t\t\tcode: -32099, // Custom authentication/authorization failure code\n\t\t\t\t\t\tmessage: authResult.reason || \"Access Denied\",\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\n\t\tswitch (method) {\n\t\t\t/** @mcp-legacy Initialize handshake for 2025-era clients. Remove when v1 EOL. */\n\t\t\tcase \"initialize\": {\n\t\t\t\tif (!MCP_LEGACY_SUPPORT_ENABLED) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\tid,\n\t\t\t\t\t\terror: {\n\t\t\t\t\t\t\tcode: -32601,\n\t\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\t\"Method retired: initialize (MCP 2026-07-28 is stateless)\",\n\t\t\t\t\t\t},\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t\tlog.info(\n\t\t\t\t\t\"[LIOP-Router] ⚠️ Legacy MCP client detected (2025-era initialize).\",\n\t\t\t\t);\n\t\t\t\treturn buildLegacyInitializeResponse(\n\t\t\t\t\tthis.liopServer.getServerInfo(),\n\t\t\t\t\tid,\n\t\t\t\t);\n\t\t\t}\n\t\t\t/** @mcp-legacy Initialized notification for 2025-era clients. Remove when v1 EOL. */\n\t\t\tcase \"notifications/initialized\":\n\t\t\t\tif (!MCP_LEGACY_SUPPORT_ENABLED) return null;\n\t\t\t\t// Cloud MCP clients often fire tools/list immediately; kick discovery early\n\t\t\t\t// so manifests populate before (or right after) that call completes.\n\t\t\t\tthis.kickDiscoveryAfterInitialized().catch(() => {});\n\t\t\t\treturn null;\n\t\t\tcase \"notifications/cancelled\":\n\t\t\t\treturn null; // No-op for MCP spec compliance\n\t\t\tcase \"server/discover\":\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\tresult: {\n\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t\tsupportedVersions: MCP_LEGACY_SUPPORT_ENABLED\n\t\t\t\t\t\t\t? [MCP_PROTOCOL_VERSION, MCP_PROTOCOL_VERSION_LEGACY]\n\t\t\t\t\t\t\t: [MCP_PROTOCOL_VERSION],\n\t\t\t\t\t\tcapabilities: {\n\t\t\t\t\t\t\ttools: { listChanged: true },\n\t\t\t\t\t\t\tresources: { listChanged: true },\n\t\t\t\t\t\t\tprompts: { listChanged: true },\n\t\t\t\t\t\t},\n\t\t\t\t\t\tserverInfo: this.liopServer.getServerInfo(),\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\tcase \"ping\":\n\t\t\t\treturn { jsonrpc: \"2.0\", id, result: {} };\n\t\t\tcase \"tools/list\": {\n\t\t\t\tconst localTools = this.liopServer.listTools();\n\t\t\t\tconst remoteTools = await this.getRemoteTools();\n\n\t\t\t\tconst listedLocals = mcpCompactToolDescriptions()\n\t\t\t\t\t? localTools.map((t) => ({\n\t\t\t\t\t\t\t...t,\n\t\t\t\t\t\t\tdescription: stripVerboseLiopToolDescription(t.description ?? \"\"),\n\t\t\t\t\t\t}))\n\t\t\t\t\t: localTools;\n\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] tools/list: ${localTools.length} local, ${remoteTools.length} remote tools found`,\n\t\t\t\t);\n\n\t\t\t\t// Inject a mandatory static diagnostic tool.\n\t\t\t\t// This ensures that the {tools: []} list is never empty on startup.\n\t\t\t\t// Claude Desktop silently hides the connector if it receives an empty array initially,\n\t\t\t\t// which broke the UX due to the ~3s warm-up time of the Kademlia DHT.\n\t\t\t\tconst diagnosticTool = {\n\t\t\t\t\tname: \"LiopMeshStatus\",\n\t\t\t\t\tdescription:\n\t\t\t\t\t\t\"LiopMeshStatus: Returns the current dynamic diagnostic status of the Zero-Trust Neural Mesh.\",\n\t\t\t\t\tinputSchema: {\n\t\t\t\t\t\ttype: \"object\",\n\t\t\t\t\t\tproperties: {},\n\t\t\t\t\t\tadditionalProperties: false,\n\t\t\t\t\t},\n\t\t\t\t};\n\n\t\t\t\t// Deterministic sorting per SEP-2549\n\t\t\t\tconst allTools = [diagnosticTool, ...listedLocals, ...remoteTools].sort(\n\t\t\t\t\t(a, b) => a.name.localeCompare(b.name),\n\t\t\t\t);\n\n\t\t\t\t// [Token Economy] Record telemetry for the tools/list response\n\t\t\t\tconst telemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\tconst toolsPayload = JSON.stringify(allTools);\n\t\t\t\tconst toolsResponsePayload = JSON.stringify({ tools: allTools });\n\t\t\t\ttelemetry.record({\n\t\t\t\t\ttype: \"tools_list\",\n\t\t\t\t\tmethod: \"tools/list\",\n\t\t\t\t\testimatedInputTokens: telemetry.countTokens(toolsPayload),\n\t\t\t\t\testimatedOutputTokens: telemetry.countTokens(toolsResponsePayload),\n\t\t\t\t});\n\n\t\t\t\tconst era = this.detectEra(request);\n\t\t\t\tlet response: McpResponse = {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\tresult: {\n\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t\tttlMs: 300_000,\n\t\t\t\t\t\tcacheScope: \"public\",\n\t\t\t\t\t\ttools: allTools,\n\t\t\t\t\t},\n\t\t\t\t};\n\n\t\t\t\t/** @mcp-legacy Strip modern fields for legacy clients */\n\t\t\t\tif (era === \"legacy\" && MCP_LEGACY_SUPPORT_ENABLED) {\n\t\t\t\t\tresponse = adaptResponseForLegacyClient(response);\n\t\t\t\t}\n\n\t\t\t\treturn response;\n\t\t\t}\n\t\t\tcase \"tools/call\": {\n\t\t\t\tconst response = await this.transcodeMcpToLiop(\n\t\t\t\t\tid,\n\t\t\t\t\tparams as { name: string; arguments?: Record<string, unknown> },\n\t\t\t\t\tauthInfo?.token,\n\t\t\t\t);\n\t\t\t\tif (!response) return null;\n\n\t\t\t\tconst era = this.detectEra(request);\n\t\t\t\tif (era === \"legacy\" && MCP_LEGACY_SUPPORT_ENABLED) {\n\t\t\t\t\treturn adaptResponseForLegacyClient(response);\n\t\t\t\t}\n\t\t\t\tif (response.result && typeof response.result === \"object\") {\n\t\t\t\t\tconst resObj = response.result as Record<string, unknown>;\n\t\t\t\t\tif (!resObj.resultType) {\n\t\t\t\t\t\tresObj.resultType = \"complete\";\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\treturn response;\n\t\t\t}\n\t\t\tcase \"resources/list\": {\n\t\t\t\tconst localResources = this.liopServer.listResources();\n\t\t\t\tconst remoteResources = await this.getRemoteResources();\n\t\t\t\t// Deterministic sorting per SEP-2549\n\t\t\t\tconst allResources = [...localResources, ...remoteResources].sort(\n\t\t\t\t\t(a, b) => a.uri.localeCompare(b.uri),\n\t\t\t\t);\n\n\t\t\t\t// [Token Economy] Record resources/list telemetry\n\t\t\t\tconst rlTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\tconst rlPayload = JSON.stringify(allResources);\n\t\t\t\trlTelemetry.record({\n\t\t\t\t\ttype: \"resource_list\",\n\t\t\t\t\tmethod: \"resources/list\",\n\t\t\t\t\testimatedInputTokens: 0,\n\t\t\t\t\testimatedOutputTokens: rlTelemetry.countTokens(rlPayload),\n\t\t\t\t});\n\n\t\t\t\tconst era = this.detectEra(request);\n\t\t\t\tlet response: McpResponse = {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\tresult: {\n\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t\tttlMs: 300_000,\n\t\t\t\t\t\tcacheScope: \"public\",\n\t\t\t\t\t\tresources: allResources,\n\t\t\t\t\t},\n\t\t\t\t};\n\n\t\t\t\t/** @mcp-legacy Strip modern fields for legacy clients */\n\t\t\t\tif (era === \"legacy\" && MCP_LEGACY_SUPPORT_ENABLED) {\n\t\t\t\t\tresponse = adaptResponseForLegacyClient(response);\n\t\t\t\t}\n\n\t\t\t\treturn response;\n\t\t\t}\n\t\t\tcase \"resources/read\": {\n\t\t\t\tconst typedParams = params as { uri?: string } | undefined;\n\t\t\t\tif (!typedParams?.uri)\n\t\t\t\t\treturn {\n\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\tid,\n\t\t\t\t\t\terror: { code: -32602, message: \"Missing resource uri\" },\n\t\t\t\t\t};\n\t\t\t\ttry {\n\t\t\t\t\tconst rrStartTime = Date.now();\n\t\t\t\t\tconst result = await this.liopServer.readResource(typedParams.uri);\n\n\t\t\t\t\t// [Token Economy] Record resources/read telemetry\n\t\t\t\t\tconst rrTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\t\tconst rrOutputPayload = JSON.stringify(result);\n\t\t\t\t\trrTelemetry.record({\n\t\t\t\t\t\ttype: \"resource_read\",\n\t\t\t\t\t\tmethod: \"resources/read\",\n\t\t\t\t\t\ttoolName: typedParams.uri,\n\t\t\t\t\t\testimatedInputTokens: rrTelemetry.countTokens(typedParams.uri),\n\t\t\t\t\t\testimatedOutputTokens: rrTelemetry.countTokens(rrOutputPayload),\n\t\t\t\t\t\tdurationMs: Date.now() - rrStartTime,\n\t\t\t\t\t});\n\n\t\t\t\t\tconst era = this.detectEra(request);\n\t\t\t\t\tconst rawResult =\n\t\t\t\t\t\ttypeof result === \"object\" && result !== null\n\t\t\t\t\t\t\t? {\n\t\t\t\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t\t\t\t\tttlMs: 60_000,\n\t\t\t\t\t\t\t\t\tcacheScope: \"private\",\n\t\t\t\t\t\t\t\t\t...result,\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t: {\n\t\t\t\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t\t\t\t\tttlMs: 60_000,\n\t\t\t\t\t\t\t\t\tcacheScope: \"private\",\n\t\t\t\t\t\t\t\t\tcontents: result,\n\t\t\t\t\t\t\t\t};\n\n\t\t\t\t\tlet response: McpResponse = { jsonrpc: \"2.0\", id, result: rawResult };\n\n\t\t\t\t\t/** @mcp-legacy Strip modern fields for legacy clients */\n\t\t\t\t\tif (era === \"legacy\" && MCP_LEGACY_SUPPORT_ENABLED) {\n\t\t\t\t\t\tresponse = adaptResponseForLegacyClient(response);\n\t\t\t\t\t}\n\n\t\t\t\t\treturn response;\n\t\t\t\t} catch (err: unknown) {\n\t\t\t\t\t// Fallback: Resolve remotely from manifest cache\n\t\t\t\t\tconst targetUri = typedParams.uri;\n\t\t\t\t\tfor (const { manifest } of this.manifestCache.values()) {\n\t\t\t\t\t\tconst remoteResource = manifest.resources.find(\n\t\t\t\t\t\t\t(r) => r.uri === targetUri,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tif (remoteResource) {\n\t\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t\t`[LIOP-Router] Resolved resource ${targetUri} from cache (Peer: ${manifest.peerId})`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tconst era = this.detectEra(request);\n\t\t\t\t\t\t\tlet response: McpResponse = {\n\t\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\tresult: {\n\t\t\t\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t\t\t\t\tttlMs: 60_000,\n\t\t\t\t\t\t\t\t\tcacheScope: \"private\",\n\t\t\t\t\t\t\t\t\tcontents: [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\turi: remoteResource.uri,\n\t\t\t\t\t\t\t\t\t\t\tmimeType: remoteResource.mimeType || \"text/plain\",\n\t\t\t\t\t\t\t\t\t\t\ttext:\n\t\t\t\t\t\t\t\t\t\t\t\tremoteResource.text ||\n\t\t\t\t\t\t\t\t\t\t\t\tremoteResource.description ||\n\t\t\t\t\t\t\t\t\t\t\t\t\"No content provided\",\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t};\n\n\t\t\t\t\t\t\t/** @mcp-legacy Strip modern fields for legacy clients */\n\t\t\t\t\t\t\tif (era === \"legacy\" && MCP_LEGACY_SUPPORT_ENABLED) {\n\t\t\t\t\t\t\t\tresponse = adaptResponseForLegacyClient(response);\n\t\t\t\t\t\t\t}\n\n\t\t\t\t\t\t\treturn response;\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\n\t\t\t\t\treturn {\n\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\tid,\n\t\t\t\t\t\terror: {\n\t\t\t\t\t\t\tcode: -32000,\n\t\t\t\t\t\t\tmessage: err instanceof Error ? err.message : String(err),\n\t\t\t\t\t\t},\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\t\t\tcase \"prompts/list\": {\n\t\t\t\tconst promptsList = this.liopServer\n\t\t\t\t\t.listPrompts()\n\t\t\t\t\t.sort((a, b) => a.name.localeCompare(b.name));\n\n\t\t\t\t// [Token Economy] Record prompts/list telemetry\n\t\t\t\tconst plTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\tconst plPayload = JSON.stringify(promptsList);\n\t\t\t\tplTelemetry.record({\n\t\t\t\t\ttype: \"prompt_list\",\n\t\t\t\t\tmethod: \"prompts/list\",\n\t\t\t\t\testimatedInputTokens: 0,\n\t\t\t\t\testimatedOutputTokens: plTelemetry.countTokens(plPayload),\n\t\t\t\t});\n\n\t\t\t\tconst era = this.detectEra(request);\n\t\t\t\tlet response: McpResponse = {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\tresult: {\n\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t\tttlMs: 300_000,\n\t\t\t\t\t\tcacheScope: \"public\",\n\t\t\t\t\t\tprompts: promptsList,\n\t\t\t\t\t},\n\t\t\t\t};\n\n\t\t\t\t/** @mcp-legacy Strip modern fields for legacy clients */\n\t\t\t\tif (era === \"legacy\" && MCP_LEGACY_SUPPORT_ENABLED) {\n\t\t\t\t\tresponse = adaptResponseForLegacyClient(response);\n\t\t\t\t}\n\n\t\t\t\treturn response;\n\t\t\t}\n\t\t\tcase \"prompts/get\": {\n\t\t\t\tconst typedParams = params as\n\t\t\t\t\t| { name?: string; arguments?: Record<string, string> }\n\t\t\t\t\t| undefined;\n\t\t\t\tif (!typedParams?.name)\n\t\t\t\t\treturn {\n\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\tid,\n\t\t\t\t\t\terror: { code: -32602, message: \"Missing prompt name\" },\n\t\t\t\t\t};\n\t\t\t\ttry {\n\t\t\t\t\tconst pgStartTime = Date.now();\n\t\t\t\t\tconst result = await this.liopServer.getPrompt({\n\t\t\t\t\t\tname: typedParams.name as string,\n\t\t\t\t\t\targuments: typedParams.arguments || {},\n\t\t\t\t\t});\n\n\t\t\t\t\t// [Token Economy] Record prompts/get telemetry\n\t\t\t\t\tconst pgTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\t\tconst pgInputPayload = JSON.stringify({\n\t\t\t\t\t\tname: typedParams.name,\n\t\t\t\t\t\targuments: typedParams.arguments,\n\t\t\t\t\t});\n\t\t\t\t\tconst pgOutputPayload = JSON.stringify(result);\n\t\t\t\t\tpgTelemetry.record({\n\t\t\t\t\t\ttype: \"prompt_get\",\n\t\t\t\t\t\tmethod: \"prompts/get\",\n\t\t\t\t\t\ttoolName: typedParams.name,\n\t\t\t\t\t\testimatedInputTokens: pgTelemetry.countTokens(pgInputPayload),\n\t\t\t\t\t\testimatedOutputTokens: pgTelemetry.countTokens(pgOutputPayload),\n\t\t\t\t\t\tdurationMs: Date.now() - pgStartTime,\n\t\t\t\t\t});\n\n\t\t\t\t\tconst era = this.detectEra(request);\n\t\t\t\t\tconst rawResult =\n\t\t\t\t\t\ttypeof result === \"object\" && result !== null\n\t\t\t\t\t\t\t? { resultType: \"complete\", ...result }\n\t\t\t\t\t\t\t: result;\n\n\t\t\t\t\tlet response: McpResponse = { jsonrpc: \"2.0\", id, result: rawResult };\n\n\t\t\t\t\t/** @mcp-legacy Strip modern fields for legacy clients */\n\t\t\t\t\tif (era === \"legacy\" && MCP_LEGACY_SUPPORT_ENABLED) {\n\t\t\t\t\t\tresponse = adaptResponseForLegacyClient(response);\n\t\t\t\t\t}\n\n\t\t\t\t\treturn response;\n\t\t\t\t} catch (err: unknown) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\tid,\n\t\t\t\t\t\terror: {\n\t\t\t\t\t\t\tcode: -32000,\n\t\t\t\t\t\t\tmessage: err instanceof Error ? err.message : String(err),\n\t\t\t\t\t\t},\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\t\t\tcase \"resources/templates/list\": {\n\t\t\t\tconst era = this.detectEra(request);\n\t\t\t\tlet response: McpResponse = {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\tresult: {\n\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t\tttlMs: 300_000,\n\t\t\t\t\t\tcacheScope: \"public\",\n\t\t\t\t\t\tresourceTemplates: [],\n\t\t\t\t\t},\n\t\t\t\t};\n\n\t\t\t\t/** @mcp-legacy Strip modern fields for legacy clients */\n\t\t\t\tif (era === \"legacy\" && MCP_LEGACY_SUPPORT_ENABLED) {\n\t\t\t\t\tresponse = adaptResponseForLegacyClient(response);\n\t\t\t\t}\n\n\t\t\t\treturn response;\n\t\t\t}\n\t\t\tcase \"subscriptions/listen\": {\n\t\t\t\tconst era = this.detectEra(request);\n\t\t\t\tlet response: McpResponse = {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\tresult: {\n\t\t\t\t\t\tresultType: \"complete\",\n\t\t\t\t\t},\n\t\t\t\t};\n\n\t\t\t\t/** @mcp-legacy Strip modern fields for legacy clients */\n\t\t\t\tif (era === \"legacy\" && MCP_LEGACY_SUPPORT_ENABLED) {\n\t\t\t\t\tresponse = adaptResponseForLegacyClient(response);\n\t\t\t\t}\n\n\t\t\t\treturn response;\n\t\t\t}\n\t\t\tdefault:\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\terror: { code: -32601, message: `Method not found: ${method}` },\n\t\t\t\t};\n\t\t}\n\t}\n\n\t/**\n\t * MCP clients often send notifications/initialized then immediately tools/list.\n\t * Start manifest discovery without blocking the notification handler.\n\t */\n\tprivate kickDiscoveryAfterInitialized(): Promise<void> {\n\t\treturn (async () => {\n\t\t\tawait new Promise((r) => setTimeout(r, 250));\n\t\t\tawait Promise.race([\n\t\t\t\tthis.refreshManifestCache(true),\n\t\t\t\tnew Promise<void>((r) => setTimeout(r, 15_000)),\n\t\t\t]).catch(() => {});\n\t\t})();\n\t}\n\n\t/**\n\t * Discovers and caches manifests from all remote LIOP providers in the mesh.\n\t * Uses Kademlia DHT to find \"liop:manifest\" providers, then opens\n\t * /liop/manifest/1.0.0 protocol streams to retrieve their full metadata.\n\t */\n\tpublic async refreshManifestCache(silent = false): Promise<void> {\n\t\tif (!this.meshNode) return;\n\t\tif (this.currentDiscovery) return this.currentDiscovery;\n\n\t\t// Fast-path: Skip DHT query entirely when cache is fresh and populated.\n\t\t// Only background polls (silent=true) should bypass this to detect new nodes.\n\t\t// Foreground requests (tools/list, tools/call) can safely reuse valid cache.\n\t\tif (!silent && this.manifestCache.size > 0) {\n\t\t\tconst now = Date.now();\n\t\t\tconst allFresh = Array.from(this.manifestCache.values()).every(\n\t\t\t\t({ cachedAt }) => now - cachedAt < MANIFEST_CACHE_TTL_S * 1000,\n\t\t\t);\n\t\t\tif (allFresh) return;\n\t\t}\n\n\t\tthis.currentDiscovery = (async () => {\n\t\t\ttry {\n\t\t\t\tconst prevCount = Array.from(this.manifestCache.values()).reduce(\n\t\t\t\t\t(acc, { manifest }) => acc + manifest.tools.length,\n\t\t\t\t\t0,\n\t\t\t\t);\n\n\t\t\t\t// Phase 0: Wait for at least one active connection if mesh is empty (Cold Start)\n\t\t\t\tif (this.manifestCache.size === 0) {\n\t\t\t\t\tfor (let i = 0; i < 3; i++) {\n\t\t\t\t\t\tconst connections =\n\t\t\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: access internal nodes for connection count\n\t\t\t\t\t\t\t(this.meshNode as any).node?.getConnections().length || 0;\n\t\t\t\t\t\tif (connections > 0) {\n\t\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t\t`[LIOP-Router] P2P Connection established. Starting discovery...`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\t}\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Waiting for P2P connections (attempt ${i + 1}/10)...`,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tawait new Promise((r) => setTimeout(r, 1000));\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\t// Phase 1: Try DHT discovery + Fallback loop\n\t\t\t\tlet providerIds: string[] = [];\n\t\t\t\tconst MAX_COLD_ATTEMPTS = this.manifestCache.size === 0 ? 5 : 1;\n\n\t\t\t\tfor (\n\t\t\t\t\tlet coldAttempt = 0;\n\t\t\t\t\tcoldAttempt < MAX_COLD_ATTEMPTS;\n\t\t\t\t\tcoldAttempt++\n\t\t\t\t) {\n\t\t\t\t\t// 1.1 Try DHT discovery\n\t\t\t\t\tfor (\n\t\t\t\t\t\tlet attempt = 0;\n\t\t\t\t\t\tattempt < MANIFEST_DISCOVERY_RETRIES;\n\t\t\t\t\t\tattempt++\n\t\t\t\t\t) {\n\t\t\t\t\t\tproviderIds =\n\t\t\t\t\t\t\t(await this.meshNode?.discoverManifestProviders()) || [];\n\t\t\t\t\t\tconst selfId = this.meshNode?.getPeerId();\n\t\t\t\t\t\tconst remoteIds = providerIds.filter((id) => id !== selfId);\n\t\t\t\t\t\tif (remoteIds.length > 0) break;\n\t\t\t\t\t\tif (attempt < MANIFEST_DISCOVERY_RETRIES - 1) {\n\t\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t\t`[LIOP-Router] DHT discovery attempt ${attempt + 1}/${MANIFEST_DISCOVERY_RETRIES}...`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tawait new Promise((r) => setTimeout(r, 1000));\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\n\t\t\t\t\t// 1.2 Aggressively merge all active connections to bypass DHT propagation delays\n\t\t\t\t\tconst activePeers =\n\t\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: access internal nodes\n\t\t\t\t\t\t(this.meshNode as any).node\n\t\t\t\t\t\t\t?.getConnections()\n\t\t\t\t\t\t\t.map((c: { remotePeer: { toString: () => string } }) =>\n\t\t\t\t\t\t\t\tc.remotePeer.toString(),\n\t\t\t\t\t\t\t) || [];\n\n\t\t\t\t\tif (activePeers.length > 0) {\n\t\t\t\t\t\tproviderIds = Array.from(new Set([...providerIds, ...activePeers]));\n\t\t\t\t\t}\n\n\t\t\t\t\tconst selfIdEnd = this.meshNode?.getPeerId();\n\t\t\t\t\tconst remoteIdsEnd = providerIds.filter((id) => id !== selfIdEnd);\n\t\t\t\t\tif (remoteIdsEnd.length > 0) break;\n\n\t\t\t\t\tif (coldAttempt < MAX_COLD_ATTEMPTS - 1) {\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Initial discovery failed (0 providers). Retrying in 1s (${coldAttempt + 1}/${MAX_COLD_ATTEMPTS})...`,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tawait new Promise((r) => setTimeout(r, 1000));\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\tif (providerIds.length === 0) {\n\t\t\t\t\tlog.info(\n\t\t\t\t\t\t`[LIOP-Router] No manifest providers found after all attempts.`,\n\t\t\t\t\t);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\n\t\t\t\tif (!silent) {\n\t\t\t\t\tlog.info(\n\t\t\t\t\t\t`[LIOP-Router] Discovered ${providerIds.length} candidate manifest providers`,\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\t// Prioritize already-connected peers to avoid blocking on stale providers.\n\t\t\t\t// This improves first tools/list latency on Linux/Ubuntu while preserving\n\t\t\t\t// full discovery for slower peers in subsequent refresh cycles.\n\t\t\t\tconst connectedPeers = new Set<string>(\n\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: internal node access for fast peer ordering\n\t\t\t\t\t((this.meshNode as any).node?.getConnections?.() || []).map(\n\t\t\t\t\t\t(c: { remotePeer: { toString: () => string } }) =>\n\t\t\t\t\t\t\tc.remotePeer.toString(),\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t\tproviderIds = [...providerIds].sort((a, b) => {\n\t\t\t\t\tconst aConnected = connectedPeers.has(a) ? 1 : 0;\n\t\t\t\t\tconst bConnected = connectedPeers.has(b) ? 1 : 0;\n\t\t\t\t\treturn bConnected - aConnected;\n\t\t\t\t});\n\n\t\t\t\tlet successCount = 0;\n\t\t\t\tlet errorCount = 0;\n\t\t\t\tlet cacheUpdated = false;\n\n\t\t\t\t// Filter peers eligible for querying\n\t\t\t\tconst selfId = this.meshNode?.getPeerId();\n\t\t\t\tconst eligiblePeers = providerIds.filter((peerId) => {\n\t\t\t\t\tif (!this.meshNode) return false;\n\t\t\t\t\tif (peerId === selfId) return false;\n\t\t\t\t\tif (this.shouldSkipManifestQuery(peerId)) return false;\n\t\t\t\t\tconst cached = this.manifestCache.get(peerId);\n\t\t\t\t\tif (\n\t\t\t\t\t\tcached &&\n\t\t\t\t\t\tDate.now() - cached.cachedAt < MANIFEST_CACHE_TTL_S * 1000\n\t\t\t\t\t) {\n\t\t\t\t\t\tsuccessCount++;\n\t\t\t\t\t\treturn false;\n\t\t\t\t\t}\n\t\t\t\t\treturn true;\n\t\t\t\t});\n\n\t\t\t\t// Parallel manifest queries — eliminates sequential 100ms + retry delays\n\t\t\t\tconst queryResults = await Promise.allSettled(\n\t\t\t\t\teligiblePeers.map(async (peerId) => {\n\t\t\t\t\t\tif (!this.meshNode) return null;\n\t\t\t\t\t\tlog.info(`[LIOP-Router] Querying manifest from: ${peerId}`);\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tpeerId,\n\t\t\t\t\t\t\tmanifest: await this.meshNode.queryManifest(peerId),\n\t\t\t\t\t\t};\n\t\t\t\t\t}),\n\t\t\t\t);\n\n\t\t\t\tfor (const result of queryResults) {\n\t\t\t\t\tif (result.status === \"fulfilled\" && result.value?.manifest) {\n\t\t\t\t\t\tconst { peerId, manifest } = result.value;\n\n\t\t\t\t\t\t// [Phase Beta-2] ML-DSA-65 (FIPS 204) Manifest Attestation Verification\n\t\t\t\t\t\tif (manifest.pqcSignature && manifest.pqcPublicKey) {\n\t\t\t\t\t\t\tconst isValid = Dilithium65Wrapper.verifyManifest(\n\t\t\t\t\t\t\t\tmanifest as unknown as Record<string, unknown>,\n\t\t\t\t\t\t\t\tmanifest.pqcSignature,\n\t\t\t\t\t\t\t\tmanifest.pqcPublicKey,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tif (!isValid) {\n\t\t\t\t\t\t\t\tlog.warn(\n\t\t\t\t\t\t\t\t\t`[LIOP-Router] ⚠️ Tampered manifest rejected for peer ${peerId} (ML-DSA-65 signature invalid)`,\n\t\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\t\tthis.recordManifestQueryFailure(peerId);\n\t\t\t\t\t\t\t\terrorCount++;\n\t\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t\t`[LIOP-Router] 🔒 ML-DSA-65 (FIPS 204) Manifest attestation verified for peer ${peerId}`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t}\n\n\t\t\t\t\t\tthis.manifestCache.set(peerId, {\n\t\t\t\t\t\t\tmanifest,\n\t\t\t\t\t\t\tcachedAt: Date.now(),\n\t\t\t\t\t\t});\n\t\t\t\t\t\tthis.recordManifestQuerySuccess(peerId);\n\t\t\t\t\t\tcacheUpdated = true;\n\t\t\t\t\t\tsuccessCount++;\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Manifest received from ${peerId} (${manifest.tools.length} tools)`,\n\t\t\t\t\t\t);\n\t\t\t\t\t} else if (result.status === \"fulfilled\" && result.value) {\n\t\t\t\t\t\tthis.recordManifestQueryFailure(result.value.peerId);\n\t\t\t\t\t\terrorCount++;\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Manifest query returned NULL for ${result.value.peerId}`,\n\t\t\t\t\t\t);\n\t\t\t\t\t} else if (result.status === \"rejected\") {\n\t\t\t\t\t\terrorCount++;\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Fatal error querying manifest:`,\n\t\t\t\t\t\t\tresult.reason instanceof Error\n\t\t\t\t\t\t\t\t? result.reason.message\n\t\t\t\t\t\t\t\t: String(result.reason),\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\t// Store discovery stats for LiopMeshStatus diagnostics\n\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: private stats for telemetry\n\t\t\t\t(this as any)._discoveryStats = {\n\t\t\t\t\tcandidates: providerIds.length,\n\t\t\t\t\tsuccess: successCount,\n\t\t\t\t\tfailures: errorCount,\n\t\t\t\t\tlastDiscovery: Date.now(),\n\t\t\t\t};\n\n\t\t\t\tif (cacheUpdated) {\n\t\t\t\t\tconst newCount = Array.from(this.manifestCache.values()).reduce(\n\t\t\t\t\t\t(acc, { manifest }) => acc + manifest.tools.length,\n\t\t\t\t\t\t0,\n\t\t\t\t\t);\n\n\t\t\t\t\tif (newCount !== prevCount && this.onToolsChanged) {\n\t\t\t\t\t\tprocess.stderr.write(\n\t\t\t\t\t\t\t\"[LIOP-Router] Mesh topology updated! Emitting notifications/tools/list_changed.\\n\",\n\t\t\t\t\t\t);\n\t\t\t\t\t\tthis.onToolsChanged();\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t} finally {\n\t\t\t\tthis.currentDiscovery = null;\n\t\t\t}\n\t\t})();\n\n\t\treturn this.currentDiscovery;\n\t}\n\n\t/**\n\t * Returns the current manifest cache size for external telemetry.\n\t * Used by the adaptive polling system to detect topology stabilization.\n\t */\n\tpublic getCacheSize(): number {\n\t\treturn this.manifestCache.size;\n\t}\n\n\t/**\n\t * Returns all remote tools discovered via the manifest protocol.\n\t */\n\tprivate async getRemoteTools(): Promise<\n\t\tArray<{\n\t\t\tname: string;\n\t\t\tdescription?: string;\n\t\t\tinputSchema?: Record<string, unknown>;\n\t\t}>\n\t> {\n\t\tconst EXPECTED_PROVIDERS = Number.parseInt(\n\t\t\tprocess.env.LIOP_EXPECTED_PROVIDERS ?? \"1\",\n\t\t\t10,\n\t\t);\n\n\t\t// [Phase 106] Smart Warm-up with Stabilization Detection\n\t\t// Loops until EXPECTED_PROVIDERS are found, the deadline expires, or\n\t\t// the provider count stabilizes (same count for 3 consecutive checks).\n\t\t// This prevents a ~20s block when a node (e.g. Bank) is absent.\n\t\tif (this.manifestCache.size < EXPECTED_PROVIDERS && this.meshNode) {\n\t\t\tconst initialTimeoutMs = Number.parseInt(\n\t\t\t\tprocess.env.LIOP_INITIAL_DISCOVERY_TIMEOUT_MS ?? \"8000\",\n\t\t\t\t10,\n\t\t\t);\n\t\t\tconst boundedTimeoutMs =\n\t\t\t\tNumber.isFinite(initialTimeoutMs) && initialTimeoutMs > 0\n\t\t\t\t\t? initialTimeoutMs\n\t\t\t\t\t: 12000;\n\n\t\t\tconst deadline = Date.now() + boundedTimeoutMs;\n\t\t\tlet stableCount = 0;\n\t\t\tlet lastCacheSize = -1;\n\n\t\t\twhile (Date.now() < deadline) {\n\t\t\t\tif (this.manifestCache.size >= EXPECTED_PROVIDERS) break;\n\n\t\t\t\tawait Promise.race([\n\t\t\t\t\tthis.refreshManifestCache(true),\n\t\t\t\t\tnew Promise<void>((resolve) => setTimeout(resolve, 3000)),\n\t\t\t\t]).catch(() => {});\n\n\t\t\t\tif (this.manifestCache.size >= EXPECTED_PROVIDERS) break;\n\n\t\t\t\t// Stabilization detection: exit early when provider count plateaus\n\t\t\t\tif (this.manifestCache.size === lastCacheSize) {\n\t\t\t\t\tstableCount++;\n\t\t\t\t\tif (stableCount >= 3 && this.manifestCache.size > 0) {\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LIOP-Router] Provider count stabilized at ${this.manifestCache.size}/${EXPECTED_PROVIDERS}. Proceeding with available mesh.`,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\t\t\t\t} else {\n\t\t\t\t\tstableCount = 0;\n\t\t\t\t\tlastCacheSize = this.manifestCache.size;\n\t\t\t\t}\n\n\t\t\t\t// Wait before the next iteration to avoid CPU spin\n\t\t\t\tawait new Promise((r) => setTimeout(r, 1000));\n\t\t\t}\n\n\t\t\t// Diagnostic warning for partial mesh availability\n\t\t\tif (this.manifestCache.size < EXPECTED_PROVIDERS) {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] ⚠️ Mesh partially available: ${this.manifestCache.size}/${EXPECTED_PROVIDERS} providers. Some tools may be unavailable. Check Docker containers.`,\n\t\t\t\t);\n\t\t\t\t// Trigger one more background refresh to catch late joiners\n\t\t\t\tthis.refreshManifestCache(true).catch(() => {});\n\t\t\t}\n\t\t}\n\n\t\t// biome-ignore lint/suspicious/noExplicitAny: Tool schema is polymorphic\n\t\tconst tools: any[] = [];\n\t\tconst seenNames = new Set<string>();\n\t\tconst localToolNames = new Set(\n\t\t\tthis.liopServer.listTools().map((t) => t.name),\n\t\t);\n\n\t\tfor (const [peerId, { manifest }] of this.manifestCache.entries()) {\n\t\t\tfor (const tool of manifest.tools) {\n\t\t\t\t// LiopMeshStatus is a local-only diagnostic — skip remote copies\n\t\t\t\tif (tool.name === \"LiopMeshStatus\") continue;\n\n\t\t\t\t// [LIOP-STABILITY] Allow discovery of ALL remote tools.\n\t\t\t\t// MCP Requires unique names per server session.\n\t\t\t\t// In a P2P mesh, multiple nodes might expose the same tool (e.g. LiopMeshStatus).\n\t\t\t\t// We suffix duplicate names with a short peer hash to ensure\n\t\t\t\t// ALL tools from ALL providers are correctly registered and visible.\n\t\t\t\tlet finalName = tool.name;\n\t\t\t\tif (seenNames.has(tool.name) || localToolNames.has(tool.name)) {\n\t\t\t\t\tfinalName = `${tool.name}_${peerId.slice(-4)}`;\n\t\t\t\t}\n\t\t\t\tseenNames.add(finalName);\n\n\t\t\t\tconst providerName = manifest.serverInfo?.name || \"Unknown Provider\";\n\n\t\t\t\t// [SANITIZATION] Create a clean MCP-compliant tool object\n\t\t\t\tconst baseDesc = tool.description || `Remote tool from ${providerName}`;\n\t\t\t\tconst cleanTool: {\n\t\t\t\t\tname: string;\n\t\t\t\t\tdescription: string;\n\t\t\t\t\tinputSchema: Record<string, unknown>;\n\t\t\t\t} = {\n\t\t\t\t\tname: finalName,\n\t\t\t\t\tdescription: mcpCompactToolDescriptions()\n\t\t\t\t\t\t? stripVerboseLiopToolDescription(baseDesc)\n\t\t\t\t\t\t: baseDesc,\n\t\t\t\t\tinputSchema: (tool.inputSchema || {\n\t\t\t\t\t\ttype: \"object\",\n\t\t\t\t\t\tproperties: {},\n\t\t\t\t\t}) as Record<string, unknown>,\n\t\t\t\t};\n\n\t\t\t\t// Ensure inputSchema has the mandatory 'type: object' for MCP compliance\n\t\t\t\tif (\n\t\t\t\t\ttypeof cleanTool.inputSchema === \"object\" &&\n\t\t\t\t\t!cleanTool.inputSchema.type\n\t\t\t\t) {\n\t\t\t\t\tcleanTool.inputSchema.type = \"object\";\n\t\t\t\t}\n\t\t\t\tif (\n\t\t\t\t\ttypeof cleanTool.inputSchema === \"object\" &&\n\t\t\t\t\t!cleanTool.inputSchema.properties\n\t\t\t\t) {\n\t\t\t\t\tcleanTool.inputSchema.properties = {};\n\t\t\t\t}\n\n\t\t\t\tlet blueprint = \"\";\n\t\t\t\tif (manifest.taxonomy) {\n\t\t\t\t\tblueprint = `\\n[LIOP-DOMAIN: ${manifest.taxonomy.domain}]`;\n\t\t\t\t}\n\n\t\t\t\t// LIOP Logic-on-Origin Detection:\n\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: polymorphic input schema\n\t\t\t\tconst properties = (cleanTool.inputSchema.properties || {}) as any;\n\t\t\t\tlet envelopeDoc = \"\";\n\t\t\t\tif (!mcpCompactToolDescriptions() && properties.payload) {\n\t\t\t\t\tenvelopeDoc = `\\n[REQUIRES: LIOP-PROTO-V1 ENVELOPE]`;\n\t\t\t\t}\n\n\t\t\t\t// INDUSTRIAL REPLICATION: Highlight schema adherence blocks\n\t\t\t\tif (\n\t\t\t\t\t!mcpCompactToolDescriptions() &&\n\t\t\t\t\tcleanTool.description.includes(\"STRICT SCHEMA ADHERENCE\")\n\t\t\t\t) {\n\t\t\t\t\tcleanTool.description = cleanTool.description.replace(\n\t\t\t\t\t\t\"STRICT SCHEMA ADHERENCE:\",\n\t\t\t\t\t\t\"[INDUSTRIAL-REQUISITE] STRICT SCHEMA ADHERENCE (MANDATORY):\",\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\tconst originStamp = mcpCompactToolDescriptions()\n\t\t\t\t\t? `\\n(Peer: ${peerId.slice(-8)})${blueprint}`\n\t\t\t\t\t: `\\n(Origin: ${peerId.slice(-8)})${blueprint}${envelopeDoc}`;\n\t\t\t\tcleanTool.description = `${cleanTool.description}${originStamp}`;\n\n\t\t\t\ttools.push(cleanTool);\n\t\t\t}\n\t\t}\n\n\t\treturn tools;\n\t}\n\n\t/**\n\t * Returns all remote resources discovered via the manifest protocol.\n\t */\n\tprivate async getRemoteResources(): Promise<\n\t\tArray<{\n\t\t\tname: string;\n\t\t\turi: string;\n\t\t\tdescription?: string;\n\t\t\tmimeType?: string;\n\t\t}>\n\t> {\n\t\t// Trigger background refresh if not already discovering\n\t\tif (!this.currentDiscovery) {\n\t\t\tthis.refreshManifestCache(true).catch(() => {});\n\t\t}\n\n\t\tconst resources: Array<{\n\t\t\tname: string;\n\t\t\turi: string;\n\t\t\tdescription?: string;\n\t\t\tmimeType?: string;\n\t\t}> = [];\n\t\tconst seenUris = new Set(this.liopServer.listResources().map((r) => r.uri));\n\n\t\tfor (const [peerId, { manifest }] of this.manifestCache.entries()) {\n\t\t\tfor (const resource of manifest.resources) {\n\t\t\t\tif (!seenUris.has(resource.uri)) {\n\t\t\t\t\tconst augmentedResource = { ...resource };\n\t\t\t\t\tconst providerName = manifest.serverInfo?.name || \"Unknown Provider\";\n\n\t\t\t\t\tlet blueprint = \"\";\n\t\t\t\t\tif (manifest.taxonomy) {\n\t\t\t\t\t\tblueprint = `\\n\\n[LIOP Zero-Trust Blueprint]\\nDomain: ${manifest.taxonomy.domain}\\nClearance Tier: ${manifest.taxonomy.clearanceTier}`;\n\t\t\t\t\t\tif (\n\t\t\t\t\t\t\tmanifest.taxonomy.executionTypes &&\n\t\t\t\t\t\t\tmanifest.taxonomy.executionTypes.length > 0\n\t\t\t\t\t\t) {\n\t\t\t\t\t\t\tblueprint += `\\nExecution Types: ${manifest.taxonomy.executionTypes.join(\", \")}`;\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\n\t\t\t\t\tconst originStamp = `\\n\\n[LIOP Zero-Trust Origin]\\nProvider: ${providerName}\\nNetwork ID: ${peerId}${blueprint}`;\n\n\t\t\t\t\t// INDUSTRIAL REPLICATION: Mark schema resources clearly\n\t\t\t\t\tif (augmentedResource.uri.startsWith(\"liop://schema/\")) {\n\t\t\t\t\t\taugmentedResource.name = `[SCHEMA] ${augmentedResource.name}`;\n\t\t\t\t\t\taugmentedResource.description = `[CRITICAL SCHEMA] ${augmentedResource.description || \"Data Dictionary for Zero-Shot Autonomy\"}${originStamp}`;\n\t\t\t\t\t} else {\n\t\t\t\t\t\taugmentedResource.description = augmentedResource.description\n\t\t\t\t\t\t\t? `${augmentedResource.description}${originStamp}`\n\t\t\t\t\t\t\t: originStamp.trim();\n\t\t\t\t\t}\n\n\t\t\t\t\tresources.push(augmentedResource);\n\t\t\t\t\tseenUris.add(resource.uri);\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\treturn resources;\n\t}\n\n\t/**\n\t * Resolves the gRPC target (host:port) AND the peerId for a given tool name\n\t * by searching the manifest cache. Supports exact names and suffixed names.\n\t */\n\tprivate resolveManifestTarget(\n\t\ttoolName: string,\n\t): { peerId: string; originalToolName: string } | null {\n\t\t// 1. Try exact match\n\t\tfor (const [peerId, { manifest }] of this.manifestCache.entries()) {\n\t\t\tconst tool = manifest.tools.find((t) => t.name === toolName);\n\t\t\tif (tool) {\n\t\t\t\treturn {\n\t\t\t\t\tpeerId,\n\t\t\t\t\toriginalToolName: toolName,\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\n\t\t// 2. Try suffixed match (tool_xxxx)\n\t\tconst parts = toolName.split(\"_\");\n\t\tif (parts.length > 1) {\n\t\t\tconst suffix = parts.pop();\n\t\t\tconst baseName = parts.join(\"_\");\n\t\t\tfor (const [peerId, { manifest }] of this.manifestCache.entries()) {\n\t\t\t\tif (peerId.endsWith(suffix || \"\")) {\n\t\t\t\t\tconst tool = manifest.tools.find((t) => t.name === baseName);\n\t\t\t\t\tif (tool) {\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tpeerId,\n\t\t\t\t\t\t\toriginalToolName: baseName,\n\t\t\t\t\t\t};\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\treturn null;\n\t}\n\n\t/**\n\t * Redacts a PeerID for external-facing diagnostics.\n\t * LIOP_DIAGNOSTIC_LEVEL controls verbosity:\n\t *   - \"redacted\" (default): truncated to last 8 chars\n\t *   - \"full\": complete PeerID (development only)\n\t */\n\tprivate redactPeerId(peerId: string): string {\n\t\tconst level = process.env.LIOP_DIAGNOSTIC_LEVEL || \"redacted\";\n\t\tif (level === \"full\") return peerId;\n\t\treturn `***${peerId.slice(-8)}`;\n\t}\n\n\tprivate async transcodeMcpToLiop(\n\t\tid: string | number | null | undefined,\n\t\tparams: { name: string; arguments?: Record<string, unknown> },\n\t\ttoken?: string,\n\t): Promise<McpResponse | null> {\n\t\tconst toolName = params.name;\n\n\t\t// Intercept the static diagnostic tool\n\t\tif (toolName === \"LiopMeshStatus\") {\n\t\t\t// [INDUSTRIAL-FIX] Proactive warm-up: request a refresh when status is called.\n\t\t\t// This ensures that even if the DHT was cold, the next status call (or tools/list)\n\t\t\t// will have data.\n\t\t\tthis.refreshManifestCache(true).catch(() => {});\n\n\t\t\t// biome-ignore lint/suspicious/noExplicitAny: private stats for telemetry\n\t\t\tconst stats = (this as any)._discoveryStats || {\n\t\t\t\tcandidates: 0,\n\t\t\t\tsuccess: 0,\n\t\t\t\tfailures: 0,\n\t\t\t};\n\t\t\tconst providerCount = this.manifestCache.size;\n\t\t\tconst meshState = this.meshNode ? \"Active\" : \"Offline\";\n\t\t\tconst cachedTools = Array.from(this.manifestCache.values()).reduce(\n\t\t\t\t(acc, { manifest }) => acc + manifest.tools.length,\n\t\t\t\t0,\n\t\t\t);\n\t\t\tconst connections = this.meshNode\n\t\t\t\t? // biome-ignore lint/suspicious/noExplicitAny: access internal nodes\n\t\t\t\t\t(this.meshNode as any).node?.getConnections().length\n\t\t\t\t: 0;\n\n\t\t\tconst bootstrapNodes: string[] =\n\t\t\t\tthis.meshNode &&\n\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: access internal config\n\t\t\t\t(this.meshNode as any).config?.bootstrapNodes\n\t\t\t\t\t? // biome-ignore lint/suspicious/noExplicitAny: access internal config\n\t\t\t\t\t\t(this.meshNode as any).config.bootstrapNodes\n\t\t\t\t\t: [];\n\t\t\tconst bootstrapCount = bootstrapNodes.length;\n\n\t\t\tconst diagLevel = process.env.LIOP_DIAGNOSTIC_LEVEL || \"redacted\";\n\t\t\tconst showBootstraps = diagLevel !== \"minimal\";\n\n\t\t\tconst bootstrapList = showBootstraps\n\t\t\t\t? bootstrapNodes\n\t\t\t\t\t\t.map((addr) => {\n\t\t\t\t\t\t\tconst parts = addr.split(\"/\");\n\t\t\t\t\t\t\tconst id = parts[parts.length - 1];\n\t\t\t\t\t\t\treturn `  • ${id ? id.slice(-8) : \"Unknown\"} (bootstrap)`;\n\t\t\t\t\t\t})\n\t\t\t\t\t\t.join(\"\\n\")\n\t\t\t\t: \"\";\n\n\t\t\tconst routingTableSize = this.meshNode\n\t\t\t\t? // biome-ignore lint/suspicious/noExplicitAny: access internal nodes\n\t\t\t\t\t(this.meshNode as any).getRoutingTableSize()\n\t\t\t\t: 0;\n\n\t\t\tconst rawPeerId = this.meshNode?.getPeerId() || \"Offline\";\n\t\t\tconst localPeerId =\n\t\t\t\trawPeerId === \"Offline\" ? rawPeerId : this.redactPeerId(rawPeerId);\n\n\t\t\tconst cachedToolList = Array.from(this.manifestCache.entries())\n\t\t\t\t.flatMap(([peerId, { manifest }]) =>\n\t\t\t\t\tmanifest.tools.map(\n\t\t\t\t\t\t(t) => `  • ${t.name} (from origin: ${this.redactPeerId(peerId)})`,\n\t\t\t\t\t),\n\t\t\t\t)\n\t\t\t\t.join(\"\\n\");\n\n\t\t\tconst statusText = [\n\t\t\t\t`LIOP Mesh Status: ${meshState === \"Active\" ? \"Active\" : \"Offline\"}`,\n\t\t\t\t`Local Agent Identity: ${localPeerId}`,\n\t\t\t\t`Network: ${connections} Conns | ${routingTableSize} Mesh Nodes | ${bootstrapCount} Bootstraps`,\n\t\t\t\tshowBootstraps && bootstrapCount > 0\n\t\t\t\t\t? `\\nActive Bootstraps:\\n${bootstrapList}\\n`\n\t\t\t\t\t: \"\",\n\t\t\t\t`Discovery: ${stats.candidates} Candidates | ${stats.success} OK | ${stats.failures} FAIL`,\n\t\t\t\t`Tooling: ${providerCount} Providers | ${cachedTools} Total Remote Tools`,\n\t\t\t\tcachedTools > 0\n\t\t\t\t\t? `\\nDiscovered Remote Tools (Zero-Trust Origins):\\n${cachedToolList}`\n\t\t\t\t\t: \"\\nNo remote tools discovered yet.\",\n\t\t\t\t// [Token Economy] Telemetry block (only appears when operations exist)\n\t\t\t\tTokenTelemetryEngine.getInstance().formatStatusBlock(),\n\t\t\t]\n\t\t\t\t.filter((line) => line !== \"\")\n\t\t\t\t.join(\"\\n\");\n\n\t\t\t// [Token Economy] Record diagnostic output telemetry\n\t\t\tconst diagTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\tdiagTelemetry.record({\n\t\t\t\ttype: \"diagnostic\",\n\t\t\t\tmethod: \"tools/call\",\n\t\t\t\ttoolName: \"LiopMeshStatus\",\n\t\t\t\testimatedInputTokens: 0,\n\t\t\t\testimatedOutputTokens: diagTelemetry.countTokens(statusText),\n\t\t\t});\n\n\t\t\treturn {\n\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\tid,\n\t\t\t\tresult: {\n\t\t\t\t\tcontent: [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\ttext: statusText,\n\t\t\t\t\t\t},\n\t\t\t\t\t],\n\t\t\t\t},\n\t\t\t};\n\t\t}\n\n\t\tconst isLocal = this.liopServer\n\t\t\t.listTools()\n\t\t\t.some((t) => t.name === toolName);\n\n\t\tif (!isLocal && this.meshNode) {\n\t\t\t// Phase 1: Cache-first — resolve directly from cached manifests (zero-latency)\n\t\t\t// Per MCP spec, tools don't change between notifications/tools/list_changed.\n\t\t\tlet target = this.resolveManifestTarget(toolName);\n\n\t\t\t// Phase 2: If not cached, trigger DHT refresh and retry\n\t\t\tif (!target) {\n\t\t\t\tawait this.refreshManifestCache();\n\t\t\t\ttarget = this.resolveManifestTarget(toolName);\n\t\t\t}\n\n\t\t\tif (target) {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] Resolved ${toolName} via manifest cache (Peer: ${target.peerId}, Original: ${target.originalToolName})`,\n\t\t\t\t);\n\n\t\t\t\t// Proactive auth check: block locally if the remote node requires authentication\n\t\t\t\t// and no token can be resolved — avoids unnecessary network calls to resolvePeer/gRPC\n\t\t\t\tconst manifestEntry = this.manifestCache.get(target.peerId);\n\t\t\t\tlet effectiveToken = token;\n\t\t\t\tif (manifestEntry?.manifest.authRequired) {\n\t\t\t\t\tconst resolvedToken =\n\t\t\t\t\t\ttoken || (await this.getOrAcquireMeshAgentToken(target.peerId));\n\t\t\t\t\tif (!resolvedToken) {\n\t\t\t\t\t\tconst providerName =\n\t\t\t\t\t\t\tmanifestEntry.manifest.serverInfo?.name?.toLowerCase() ||\n\t\t\t\t\t\t\t\"unknown\";\n\t\t\t\t\t\tconst slug = manifestEntry.manifest.tokenSlug;\n\t\t\t\t\t\tconst shortId = target.peerId.slice(-8).toUpperCase();\n\t\t\t\t\t\tconst primaryVar = slug\n\t\t\t\t\t\t\t? `LIOP_TOKEN_${slug}`\n\t\t\t\t\t\t\t: `LIOP_TOKEN_${providerName.toUpperCase().replace(/[^A-Z0-9_]/g, \"_\")}`;\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\tresult: {\n\t\t\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\t\t\t\ttext: `Authentication Required: The restricted node (${providerName}) requires an access token. Please define the ${primaryVar} or LIOP_TOKEN_${shortId} environment variable on your agent/client host.`,\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\tisError: true,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t};\n\t\t\t\t\t}\n\t\t\t\t\t// Forward the resolved token instead of the original (potentially undefined) caller token\n\t\t\t\t\teffectiveToken = resolvedToken;\n\t\t\t\t}\n\n\t\t\t\treturn this.routeToRemoteProvider(\n\t\t\t\t\tid,\n\t\t\t\t\ttarget.originalToolName,\n\t\t\t\t\ttarget.peerId,\n\t\t\t\t\tparams,\n\t\t\t\t\teffectiveToken,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\t// Phase 2: Try DHT-based dynamic provider discovery (fallback for unsuffixed names)\n\t\t\tlet providers: string[] = [];\n\t\t\tfor (let i = 0; i < 3; i++) {\n\t\t\t\tproviders = await this.meshNode.findProviders(toolName);\n\t\t\t\tif (providers.length > 0) break;\n\t\t\t\tif (i < 2) await new Promise((r) => setTimeout(r, 1000));\n\t\t\t}\n\n\t\t\tif (providers.length > 0) {\n\t\t\t\treturn this.routeToRemoteProvider(\n\t\t\t\t\tid,\n\t\t\t\t\ttoolName,\n\t\t\t\t\tproviders[0],\n\t\t\t\t\tparams,\n\t\t\t\t\ttoken,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\n\t\t// If no remote provider found, try local execution\n\t\tif (isLocal) {\n\t\t\ttry {\n\t\t\t\tconst localStartTime = Date.now();\n\t\t\t\tconst result = await this.liopServer.callTool({\n\t\t\t\t\tname: toolName,\n\t\t\t\t\targuments: params.arguments || {},\n\t\t\t\t});\n\n\t\t\t\t// [Token Economy] Record local tool call telemetry\n\t\t\t\tconst localTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\tconst localInputPayload = JSON.stringify(params.arguments || {});\n\t\t\t\tconst localOutputPayload = JSON.stringify(result);\n\t\t\t\tlocalTelemetry.record({\n\t\t\t\t\ttype: \"tool_call\",\n\t\t\t\t\tmethod: \"tools/call\",\n\t\t\t\t\ttoolName,\n\t\t\t\t\testimatedInputTokens: localTelemetry.countTokens(localInputPayload),\n\t\t\t\t\testimatedOutputTokens: localTelemetry.countTokens(localOutputPayload),\n\t\t\t\t\tdurationMs: Date.now() - localStartTime,\n\t\t\t\t});\n\n\t\t\t\treturn { jsonrpc: \"2.0\", id, result };\n\t\t\t} catch (err: unknown) {\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\terror: {\n\t\t\t\t\t\tcode: -32000,\n\t\t\t\t\t\tmessage: err instanceof Error ? err.message : String(err),\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\n\t\treturn {\n\t\t\tjsonrpc: \"2.0\",\n\t\t\tid,\n\t\t\terror: {\n\t\t\t\tcode: -32002,\n\t\t\t\tmessage: `No provider found for tool: ${toolName}. Ensure the provider node is active and connected to the mesh.`,\n\t\t\t},\n\t\t};\n\t}\n\n\tprivate async routeToRemoteProvider(\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t\tid: any,\n\t\ttoolName: string,\n\t\tpeerId: string,\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t\tparams: any,\n\t\ttoken?: string,\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t): Promise<any> {\n\t\tif (!this.meshNode)\n\t\t\treturn {\n\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\tid,\n\t\t\t\terror: { code: -32603, message: \"Mesh Node inactive\" },\n\t\t\t};\n\n\t\t// Dynamic gRPC port resolution from manifest cache\n\t\tlet manifestEntry = this.manifestCache.get(peerId);\n\t\tlet grpcPort = this.defaultRpcPort;\n\n\t\tif (manifestEntry) {\n\t\t\tgrpcPort = manifestEntry.manifest.grpcPort;\n\t\t} else {\n\t\t\t// Try to query the manifest directly\n\t\t\tconst manifest = await this.meshNode.queryManifest(peerId);\n\t\t\tif (manifest) {\n\t\t\t\tgrpcPort = manifest.grpcPort;\n\t\t\t\tthis.manifestCache.set(peerId, {\n\t\t\t\t\tmanifest,\n\t\t\t\t\tcachedAt: Date.now(),\n\t\t\t\t});\n\t\t\t\tmanifestEntry = this.manifestCache.get(peerId);\n\t\t\t}\n\t\t}\n\n\t\t// Resolve IP from active connections\n\t\tconst addrs = await this.meshNode.resolvePeer(peerId);\n\n\t\t// Docker Demo convenience (opt-in or auto-detected):\n\t\t// Docker Desktop setups publish gRPC ports on the host as 13011/13021/13031.\n\t\t// Container-internal gRPC ports (50051) and 172.20.0.x IPs are unreachable directly from the host.\n\t\tconst nexusUrl = process.env.LIOP_NEXUS_URL || \"\";\n\t\tconst isDockerDemo =\n\t\t\tnexusUrl.includes(\"127.0.0.1:13000\") ||\n\t\t\tnexusUrl.includes(\"localhost:13000\") ||\n\t\t\tnexusUrl.includes(\"127.0.0.1:13001\") ||\n\t\t\tnexusUrl.includes(\"localhost:13001\");\n\t\tconst isDockerPort = addrs.some(\n\t\t\t(a) =>\n\t\t\t\ta.includes(\"13001\") ||\n\t\t\t\ta.includes(\"13003\") ||\n\t\t\t\ta.includes(\"13004\") ||\n\t\t\t\ta.includes(\"13005\") ||\n\t\t\t\ta.includes(\"13011\") ||\n\t\t\t\ta.includes(\"13021\") ||\n\t\t\t\ta.includes(\"13031\"),\n\t\t);\n\t\tconst shouldRemapGrpcPorts =\n\t\t\tprocess.env.LIOP_USE_PUBLISHED_GRPC_PORTS === \"1\" ||\n\t\t\tprocess.env.LIOP_DOCKER_MAP === \"true\" ||\n\t\t\tprocess.env.LIOP_DEV_MODE === \"true\" ||\n\t\t\tprocess.env.NODE_ENV === \"development\" ||\n\t\t\tprocess.env.NODE_ENV === \"test\" ||\n\t\t\tisDockerDemo ||\n\t\t\tisDockerPort;\n\n\t\tif (shouldRemapGrpcPorts) {\n\t\t\tconst providerName =\n\t\t\t\tmanifestEntry?.manifest?.serverInfo?.name?.toLowerCase() || \"\";\n\t\t\tconst tn = toolName.toLowerCase();\n\t\t\tif (providerName.includes(\"vault\") || tn.includes(\"medical\")) {\n\t\t\t\tgrpcPort = 13011;\n\t\t\t} else if (providerName.includes(\"bank\") || tn.includes(\"bank\")) {\n\t\t\t\tgrpcPort = 13021;\n\t\t\t} else if (\n\t\t\t\tproviderName.includes(\"oracle\") ||\n\t\t\t\ttn.includes(\"hft\") ||\n\t\t\t\ttn.includes(\"market\")\n\t\t\t) {\n\t\t\t\tgrpcPort = 13031;\n\t\t\t}\n\t\t}\n\n\t\tlet targetAddr: string | null = null;\n\n\t\t// If running in Docker mapped mode, always route to 127.0.0.1 on the published host port\n\t\tif (shouldRemapGrpcPorts) {\n\t\t\ttargetAddr = `127.0.0.1:${grpcPort}`;\n\t\t} else {\n\t\t\t// [LIOP-ALPHA] Check if the peer is running on the same physical machine\n\t\t\t// by comparing its advertised IPs against our local OS interfaces.\n\t\t\tconst os = await import(\"node:os\");\n\t\t\tconst localInterfaces = Object.values(os.networkInterfaces())\n\t\t\t\t.flat()\n\t\t\t\t.filter((i) => i?.family === \"IPv4\")\n\t\t\t\t.map((i) => i?.address);\n\n\t\t\t// Loop through all advertised addresses to find the optimal target\n\t\t\tfor (const addr of addrs) {\n\t\t\t\tconst parts = addr.split(\"/\");\n\t\t\t\tconst ipIdx = parts.indexOf(\"ip4\");\n\t\t\t\tif (ipIdx !== -1) {\n\t\t\t\t\tconst advertisedIp = parts[ipIdx + 1];\n\n\t\t\t\t\t// Loopback priority or Same-Machine detection\n\t\t\t\t\tif (\n\t\t\t\t\t\tadvertisedIp === \"127.0.0.1\" ||\n\t\t\t\t\t\tlocalInterfaces.includes(advertisedIp)\n\t\t\t\t\t) {\n\t\t\t\t\t\ttargetAddr = `127.0.0.1:${grpcPort}`;\n\t\t\t\t\t\tbreak; // Supreme priority for local execution\n\t\t\t\t\t}\n\n\t\t\t\t\t// Default to first discovered valid external IP\n\t\t\t\t\tif (!targetAddr) {\n\t\t\t\t\t\ttargetAddr = `${advertisedIp}:${grpcPort}`;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tif (!targetAddr) {\n\t\t\t// Fallback to localhost with the dynamically resolved port\n\t\t\ttargetAddr = `127.0.0.1:${grpcPort}`;\n\t\t}\n\n\t\tlog.info(\n\t\t\t`[LIOP-Router] Dynamic route: ${toolName} -> ${targetAddr} (PeerID: ${peerId})`,\n\t\t);\n\n\t\tconst remoteClient = new liopV1.LogicMesh(\n\t\t\ttargetAddr,\n\t\t\tcreateChannelCredentials(),\n\t\t\tGRPC_CHANNEL_OPTIONS,\n\t\t);\n\t\treturn this.performTranscoding(\n\t\t\tid,\n\t\t\tremoteClient,\n\t\t\ttoolName,\n\t\t\tparams,\n\t\t\tpeerId,\n\t\t\ttoken,\n\t\t);\n\t}\n\n\t/** Cached M2M token for dynamic gateway-to-node routing */\n\tprivate meshAgentToken?: string;\n\n\t/**\n\t * Dynamically acquires an M2M access token from the Nexus Authorization Server.\n\t * If peerId is provided, checks if there are node-specific environment tokens\n\t * before falling back to the global static token or Nexus acquisition.\n\t */\n\tprivate async getOrAcquireMeshAgentToken(\n\t\tpeerId?: string,\n\t): Promise<string | undefined> {\n\t\tif (peerId) {\n\t\t\tconst manifestEntry = this.manifestCache.get(peerId);\n\t\t\tconst providerName =\n\t\t\t\tmanifestEntry?.manifest.serverInfo?.name?.toLowerCase() || \"\";\n\n\t\t\tlet nodeToken: string | undefined;\n\n\t\t\t// 0. Deterministic tokenSlug resolution (highest priority, zero heuristic)\n\t\t\tconst slug = manifestEntry?.manifest.tokenSlug;\n\t\t\tif (slug) {\n\t\t\t\tconst envKey = `LIOP_TOKEN_${slug}`;\n\t\t\t\tnodeToken =\n\t\t\t\t\tprocess.env[envKey] || process.env[`LIOP_OAUTH_TOKEN_${slug}`];\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] Step0 tokenSlug=${slug} envKey=${envKey} found=${!!nodeToken} peer=${peerId.slice(-8)}`,\n\t\t\t\t);\n\t\t\t} else {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] Step0 tokenSlug=MISSING (manifest has no tokenSlug) peer=${peerId.slice(-8)} provider=${providerName}`,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\t// 1. PeerID-specific resolution: LIOP_TOKEN_<last 8 chars of PeerID in uppercase>\n\t\t\tif (!nodeToken) {\n\t\t\t\tconst shortId = peerId.slice(-8).toUpperCase();\n\t\t\t\tnodeToken =\n\t\t\t\t\tprocess.env[`LIOP_TOKEN_${shortId}`] ||\n\t\t\t\t\tprocess.env[`LIOP_OAUTH_TOKEN_${shortId}`];\n\t\t\t}\n\n\t\t\t// 2. Provider-name resolution: LIOP_TOKEN_<CLEAN_PROVIDER_NAME_UPPERCASE>\n\t\t\tif (!nodeToken && providerName) {\n\t\t\t\tconst cleanName = providerName\n\t\t\t\t\t.toUpperCase()\n\t\t\t\t\t.replace(/[^A-Z0-9_]/g, \"_\");\n\t\t\t\tnodeToken =\n\t\t\t\t\tprocess.env[`LIOP_TOKEN_${cleanName}`] ||\n\t\t\t\t\tprocess.env[`LIOP_OAUTH_TOKEN_${cleanName}`];\n\t\t\t}\n\n\t\t\tif (nodeToken) {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-Router] Resolved node-specific token for peer ${peerId.slice(-8)} (${providerName || \"unknown\"})`,\n\t\t\t\t);\n\t\t\t\treturn nodeToken;\n\t\t\t}\n\t\t}\n\n\t\tif (this.meshAgentToken) return this.meshAgentToken;\n\n\t\t// Support static pre-generated Access Tokens from environment\n\t\tconst staticToken = process.env.LIOP_OAUTH_TOKEN || process.env.LIOP_TOKEN;\n\t\tif (staticToken) {\n\t\t\tthis.meshAgentToken = staticToken;\n\t\t\treturn this.meshAgentToken;\n\t\t}\n\n\t\tconst nexusUrl = process.env.LIOP_NEXUS_URL;\n\t\tif (!nexusUrl) return undefined;\n\n\t\tconst clientId =\n\t\t\tprocess.env.LIOP_OAUTH_CLIENT_ID ||\n\t\t\tprocess.env.LIOP_CLIENT_ID ||\n\t\t\t\"liop-mesh-agent\";\n\t\tconst clientSecret =\n\t\t\tprocess.env.LIOP_OAUTH_CLIENT_SECRET ||\n\t\t\tprocess.env.LIOP_CLIENT_SECRET ||\n\t\t\t\"dev-secret-change-me\";\n\t\tconst audience =\n\t\t\tprocess.env.LIOP_OAUTH_AUDIENCE ||\n\t\t\tprocess.env.LIOP_AUDIENCE ||\n\t\t\t\"urn:liop:mesh:api\";\n\n\t\ttry {\n\t\t\tconst baseUrl = nexusUrl.endsWith(\"/oidc\")\n\t\t\t\t? nexusUrl\n\t\t\t\t: `${nexusUrl}/oidc`;\n\t\t\tconst tokenUrl = `${baseUrl}/token`;\n\t\t\tlog.info(\n\t\t\t\t`[LIOP-Router] Proactively acquiring M2M token from Nexus: ${tokenUrl}`,\n\t\t\t);\n\n\t\t\tconst params = new URLSearchParams({\n\t\t\t\tgrant_type: \"client_credentials\",\n\t\t\t\tscope:\n\t\t\t\t\t\"liop:tools:call liop:tools:list liop:resources:read liop:schema:read liop:mesh:query\",\n\t\t\t\tresource: audience,\n\t\t\t\tclient_id: clientId,\n\t\t\t\tclient_secret: clientSecret,\n\t\t\t});\n\n\t\t\tconst response = await fetch(tokenUrl, {\n\t\t\t\tmethod: \"POST\",\n\t\t\t\theaders: {\n\t\t\t\t\t\"Content-Type\": \"application/x-www-form-urlencoded\",\n\t\t\t\t},\n\t\t\t\tbody: params.toString(),\n\t\t\t});\n\n\t\t\tif (!response.ok) {\n\t\t\t\tconst text = await response.text();\n\t\t\t\tlog.warn(\n\t\t\t\t\t`[LIOP-Router] M2M Token acquisition failed: ${response.status} ${text}`,\n\t\t\t\t);\n\t\t\t\treturn undefined;\n\t\t\t}\n\n\t\t\tconst data = (await response.json()) as { access_token: string };\n\t\t\tif (data.access_token) {\n\t\t\t\tthis.meshAgentToken = data.access_token;\n\t\t\t\tlog.info(\n\t\t\t\t\t\"[LIOP-Router] M2M Token acquired successfully for router routing.\",\n\t\t\t\t);\n\t\t\t\treturn this.meshAgentToken;\n\t\t\t}\n\t\t} catch (err: unknown) {\n\t\t\tlog.warn(\n\t\t\t\t`[LIOP-Router] Failed to acquire M2M token: ${\n\t\t\t\t\terr instanceof Error ? err.message : String(err)\n\t\t\t\t}`,\n\t\t\t);\n\t\t}\n\t\treturn undefined;\n\t}\n\n\tprivate async performTranscoding(\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t\tid: any,\n\t\t// biome-ignore lint/suspicious/noExplicitAny: gRPC client from dynamic proto-loader\n\t\tclient: any,\n\t\ttoolName: string,\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t\tparams: any,\n\t\tpeerId?: string,\n\t\ttoken?: string,\n\t\t// biome-ignore lint/suspicious/noExplicitAny: MCP polymorphic\n\t): Promise<any> {\n\t\tconst capabilityHash = toolName;\n\t\tconst proofOfIntent = this.meshNode\n\t\t\t? await this.meshNode.sign(Buffer.from(capabilityHash))\n\t\t\t: Buffer.from([]);\n\n\t\tconst transcodingStartTime = Date.now();\n\n\t\t// Auto-acquire self-identity M2M token if client did not supply one but a Nexus AS is configured\n\t\tlet activeToken = token;\n\t\tif (!activeToken) {\n\t\t\tactiveToken = await this.getOrAcquireMeshAgentToken(peerId);\n\t\t}\n\n\t\tif (peerId) {\n\t\t\tconst manifestEntry = this.manifestCache.get(peerId);\n\t\t\tif (manifestEntry?.manifest.authRequired && !activeToken) {\n\t\t\t\tconst providerName =\n\t\t\t\t\tmanifestEntry.manifest.serverInfo?.name?.toLowerCase() || \"unknown\";\n\t\t\t\tconst slug = manifestEntry.manifest.tokenSlug;\n\t\t\t\tconst shortId = peerId.slice(-8).toUpperCase();\n\t\t\t\tconst primaryVar = slug\n\t\t\t\t\t? `LIOP_TOKEN_${slug}`\n\t\t\t\t\t: `LIOP_TOKEN_${providerName.toUpperCase().replace(/[^A-Z0-9_]/g, \"_\")}`;\n\n\t\t\t\treturn {\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid,\n\t\t\t\t\tresult: {\n\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\t\ttext: `Authentication Required: The restricted node (${providerName}) requires an access token. Please define the ${primaryVar} or LIOP_TOKEN_${shortId} environment variable on your agent/client host.`,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t],\n\t\t\t\t\t\tisError: true,\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\n\t\treturn new Promise((resolve) => {\n\t\t\tconst metadata = new grpc.Metadata();\n\t\t\tif (activeToken) {\n\t\t\t\tmetadata.add(\"authorization\", `Bearer ${activeToken}`);\n\t\t\t}\n\n\t\t\tclient.negotiateIntent(\n\t\t\t\t{\n\t\t\t\t\tagent_did: `did:liop:${this.meshNode?.getPeerId() || \"mcp-proxy\"}`,\n\t\t\t\t\tcapability_hash: capabilityHash,\n\t\t\t\t\tproof_of_intent: proofOfIntent,\n\t\t\t\t},\n\t\t\t\tmetadata,\n\t\t\t\tasync (err: Error | null, response: IntentResponse) => {\n\t\t\t\t\tif (err || !response.accepted) {\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\ttoolCallErrorsTotal.inc({\n\t\t\t\t\t\t\t\tcapability: toolName,\n\t\t\t\t\t\t\t\terror_type: \"handshake_failed\",\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t} catch {}\n\t\t\t\t\t\treturn resolve({\n\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\tresult: {\n\t\t\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\t\t\t\ttext: `PQC Handshake Failed: ${err?.message || \"Rejected\"}`,\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\tisError: true,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t});\n\t\t\t\t\t}\n\n\t\t\t\t\tconst pqcStart = performance.now();\n\t\t\t\t\tconst { ciphertext, sharedSecret } =\n\t\t\t\t\t\tawait Kyber768Wrapper.encapsulateAsymmetric(\n\t\t\t\t\t\t\tresponse.kyber_public_key,\n\t\t\t\t\t\t);\n\t\t\t\t\tconst pqcDuration = performance.now() - pqcStart;\n\t\t\t\t\ttry {\n\t\t\t\t\t\tpqcHandshakeDurationMs.observe({ tool: toolName }, pqcDuration);\n\t\t\t\t\t\tpqcHandshakesTotal.inc({\n\t\t\t\t\t\t\talgorithm: \"ml-kem-768\",\n\t\t\t\t\t\t\tstatus: \"success\",\n\t\t\t\t\t\t});\n\t\t\t\t\t} catch {\n\t\t\t\t\t\t// Metrics observation failure must never disrupt handshake\n\t\t\t\t\t}\n\t\t\t\t\t// SECURITY: Avoid AES-GCM nonce reuse across multiple ciphertexts.\n\t\t\t\t\t// We embed arguments directly into the proxy logic so we only encrypt ONE payload per session/nonce.\n\t\t\t\t\tconst embeddedArgs =\n\t\t\t\t\t\tparams?.arguments ?? (params?.payload !== undefined ? params : {});\n\t\t\t\t\tconst embeddedArgsJson = JSON.stringify(embeddedArgs);\n\t\t\t\t\tconst proxyLogic = `return { \"__liop_proxy_tool\": \"${toolName}\", \"__liop_proxy_args\": ${embeddedArgsJson} };`;\n\t\t\t\t\tconst nonce = crypto.randomBytes(12);\n\n\t\t\t\t\tconst sealedLogic = this.encryptWithNonce(\n\t\t\t\t\t\tBuffer.from(proxyLogic),\n\t\t\t\t\t\tsharedSecret,\n\t\t\t\t\t\tnonce,\n\t\t\t\t\t);\n\n\t\t\t\t\tconst metadataCall = new grpc.Metadata();\n\t\t\t\t\tif (activeToken) {\n\t\t\t\t\t\tmetadataCall.add(\"authorization\", `Bearer ${activeToken}`);\n\t\t\t\t\t}\n\n\t\t\t\t\tconst call = client.executeLogic(\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tsession_token: response.session_token,\n\t\t\t\t\t\t\twasm_binary: new Uint8Array(sealedLogic),\n\t\t\t\t\t\t\tinputs: {},\n\t\t\t\t\t\t\tpqc_ciphertext: ciphertext,\n\t\t\t\t\t\t\taes_nonce: nonce,\n\t\t\t\t\t\t},\n\t\t\t\t\t\tmetadataCall,\n\t\t\t\t\t);\n\n\t\t\t\t\tlet resultBody = \"\";\n\t\t\t\t\tlet lastResponse: LogicResponse | null = null;\n\t\t\t\t\tcall.on(\"data\", (grpcRes: LogicResponse) => {\n\t\t\t\t\t\tresultBody += grpcRes.semantic_evidence;\n\t\t\t\t\t\tlastResponse = grpcRes;\n\t\t\t\t\t});\n\t\t\t\t\tcall.on(\"end\", async () => {\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tif (lastResponse) {\n\t\t\t\t\t\t\t\t// Only verify ZK-Receipt if the remote execution succeeded.\n\t\t\t\t\t\t\t\t// If the remote execution failed due to a policy error (e.g. Egress Shield),\n\t\t\t\t\t\t\t\t// the ZK proof is empty and we should bypass validation to propagate the original error.\n\t\t\t\t\t\t\t\tif (!lastResponse.is_error) {\n\t\t\t\t\t\t\t\t\tconst proofHex = Buffer.from(\n\t\t\t\t\t\t\t\t\t\tlastResponse.cryptographic_proof,\n\t\t\t\t\t\t\t\t\t).toString(\"hex\");\n\t\t\t\t\t\t\t\t\tconst isValid = await this.verifier.verifyZkReceipt(\n\t\t\t\t\t\t\t\t\t\tBuffer.from(proxyLogic),\n\t\t\t\t\t\t\t\t\t\tproofHex,\n\t\t\t\t\t\t\t\t\t\tBuffer.from(lastResponse.zk_receipt),\n\t\t\t\t\t\t\t\t\t\tBuffer.from(sharedSecret),\n\t\t\t\t\t\t\t\t\t\tresultBody,\n\t\t\t\t\t\t\t\t\t);\n\n\t\t\t\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\t\t\t\tzkVerificationsTotal.inc({\n\t\t\t\t\t\t\t\t\t\t\tstatus: isValid ? \"valid\" : \"invalid\",\n\t\t\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t\t} catch {}\n\n\t\t\t\t\t\t\t\t\tif (!isValid) {\n\t\t\t\t\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\t\t\t\t\ttoolCallErrorsTotal.inc({\n\t\t\t\t\t\t\t\t\t\t\t\tcapability: toolName,\n\t\t\t\t\t\t\t\t\t\t\t\terror_type: \"cryptographic_audit_failed\",\n\t\t\t\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t\t\t} catch {}\n\t\t\t\t\t\t\t\t\t\treturn resolve({\n\t\t\t\t\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\t\t\t\tresult: {\n\t\t\t\t\t\t\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\ttext: \"SECURITY ALERT: Remote response failed cryptographic integrity audit.\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\t\t\t\t\tisError: true,\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t} else {\n\t\t\t\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\t\t\t\ttoolCallErrorsTotal.inc({\n\t\t\t\t\t\t\t\t\t\t\tcapability: toolName,\n\t\t\t\t\t\t\t\t\t\t\terror_type: \"remote_execution_error\",\n\t\t\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t\t} catch {}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\n\t\t\t\t\t\t\tconst parsedResult = JSON.parse(resultBody);\n\n\t\t\t\t\t\t\t// [Token Economy & Wire Telemetry] Record remote tool call telemetry\n\t\t\t\t\t\t\tconst remoteTelemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\t\t\t\tremoteTelemetry.record({\n\t\t\t\t\t\t\t\ttype: \"tool_call\",\n\t\t\t\t\t\t\t\tmethod: \"tools/call\",\n\t\t\t\t\t\t\t\ttoolName,\n\t\t\t\t\t\t\t\tpeerId,\n\t\t\t\t\t\t\t\testimatedInputTokens:\n\t\t\t\t\t\t\t\t\tremoteTelemetry.countTokens(embeddedArgsJson),\n\t\t\t\t\t\t\t\testimatedOutputTokens: remoteTelemetry.countTokens(resultBody),\n\t\t\t\t\t\t\t\tdurationMs: Date.now() - transcodingStartTime,\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\t\twireEgressBytesTotal.inc(\n\t\t\t\t\t\t\t\t\t{ capability: toolName },\n\t\t\t\t\t\t\t\t\tBuffer.byteLength(resultBody),\n\t\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\t} catch {}\n\n\t\t\t\t\t\t\tresolve({ jsonrpc: \"2.0\", id, result: parsedResult });\n\t\t\t\t\t\t} catch (_e) {\n\t\t\t\t\t\t\tresolve({\n\t\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\tresult: { content: [{ type: \"text\", text: resultBody }] },\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t}\n\t\t\t\t\t});\n\t\t\t\t\tcall.on(\"error\", (e: Error) => {\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\ttoolCallErrorsTotal.inc({\n\t\t\t\t\t\t\t\tcapability: toolName,\n\t\t\t\t\t\t\t\terror_type: \"grpc_stream_error\",\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t} catch {}\n\t\t\t\t\t\tresolve({\n\t\t\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\tresult: {\n\t\t\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t\t\t{ type: \"text\", text: `LIOP gRPC Error: ${e.message}` },\n\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\tisError: true,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t});\n\t\t\t\t\t});\n\t\t\t\t},\n\t\t\t);\n\t\t});\n\t}\n\n\tprivate encryptWithNonce(\n\t\tpayload: Buffer,\n\t\tkey: Uint8Array,\n\t\tnonce: Buffer,\n\t): Buffer {\n\t\tconst cipher = crypto.createCipheriv(\"aes-256-gcm\", key, nonce);\n\t\tconst encrypted = Buffer.concat([cipher.update(payload), cipher.final()]);\n\t\treturn Buffer.concat([encrypted, cipher.getAuthTag()]);\n\t}\n}\n"]}

package/dist/chunk-T7R5HUFD.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/rpc/client.ts","../src/rpc/crypto/aes.ts","../src/client/index.ts"],"names":[],"mappings":";;;;;;;;;;;;AAsBO,IAAM,gBAAN,MAAoB;AAAA;AAAA,EAElB,MAAA;AAAA,EACA,KAAA;AAAA,EACA,iBAAA;AAAA,EACQ,OAAA;AAAA,EAEhB,WAAA,CAAY,OAAA,EAAiB,GAAA,EAAsB,KAAA,EAAuB;AACzE,IAAA,MAAM,WAAA,GAAc,yBAAyB,GAAG,CAAA;AAChD,IAAA,IAAA,CAAK,MAAA,GAAS,IAAI,MAAA,CAAO,SAAA;AAAA,MACxB,OAAA;AAAA,MACA,WAAA;AAAA,MACA;AAAA,KACD;AACA,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AACb,IAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC9B,MAAA,IAAA,CAAK,iBAAA,GAAoB,KAAA;AAAA,IAC1B;AACA,IAAA,IAAA,CAAK,OAAA,GAAU,OAAA;AAAA,EAChB;AAAA,EAEO,SAAS,KAAA,EAA6B;AAC5C,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AACb,IAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC9B,MAAA,IAAA,CAAK,iBAAA,GAAoB,KAAA;AAAA,IAC1B;AAAA,EACD;AAAA,EAEA,MAAc,YAAA,GAA4C;AACzD,IAAA,IAAI,OAAO,IAAA,CAAK,KAAA,KAAU,UAAA,EAAY;AACrC,MAAA,IAAA,CAAK,iBAAA,GAAoB,MAAM,IAAA,CAAK,KAAA,EAAM;AAC1C,MAAA,OAAO,IAAA,CAAK,iBAAA;AAAA,IACb;AACA,IAAA,IAAA,CAAK,oBAAoB,IAAA,CAAK,KAAA;AAC9B,IAAA,OAAO,IAAA,CAAK,KAAA;AAAA,EACb;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAa,gBACZ,OAAA,EAC0B;AAC1B,IAAA,MAAM,WAAA,GAAc,MAAM,IAAA,CAAK,YAAA,EAAa;AAC5C,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACvC,MAAA,MAAM,QAAA,GAAW,IAAS,IAAA,CAAA,QAAA,EAAS;AACnC,MAAA,IAAI,WAAA,EAAa;AAChB,QAAA,QAAA,CAAS,GAAA,CAAI,eAAA,EAAiB,CAAA,OAAA,EAAU,WAAW,CAAA,CAAE,CAAA;AAAA,MACtD;AACA,MAAA,IAAA,CAAK,MAAA,CAAO,eAAA;AAAA,QACX,OAAA;AAAA,QACA,QAAA;AAAA,QACA,CAAC,OAAiC,QAAA,KAA6B;AAC9D,UAAA,IAAI,KAAA,EAAO;AACV,YAAA,MAAA,CAAO,KAAK,CAAA;AAAA,UACb,CAAA,MAAO;AACN,YAAA,OAAA,CAAQ,QAAQ,CAAA;AAAA,UACjB;AAAA,QACD;AAAA,OACD;AAAA,IACD,CAAC,CAAA;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMO,aACN,OAAA,EAC2C;AAC3C,IAAA,MAAM,QAAA,GAAW,IAAS,IAAA,CAAA,QAAA,EAAS;AACnC,IAAA,MAAM,WAAA,GACL,KAAK,iBAAA,KACJ,OAAO,KAAK,KAAA,KAAU,QAAA,GAAW,KAAK,KAAA,GAAQ,MAAA,CAAA;AAChD,IAAA,IAAI,WAAA,EAAa;AAChB,MAAA,QAAA,CAAS,GAAA,CAAI,eAAA,EAAiB,CAAA,OAAA,EAAU,WAAW,CAAA,CAAE,CAAA;AAAA,IACtD;AACA,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,YAAA,CAAa,OAAA,EAAS,QAAQ,CAAA;AAAA,EAClD;AAAA,EAEO,KAAA,GAAc;AACpB,IAAA,IAAA,CAAK,OAAO,KAAA,EAAM;AAAA,EACnB;AACD;AChGO,IAAM,aAAA,GAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQ5B,cAAA,CACC,SACA,YAAA,EAIC;AACD,IAAA,IAAI,YAAA,CAAa,WAAW,EAAA,EAAI;AAC/B,MAAA,MAAM,IAAI,MAAM,oDAAoD,CAAA;AAAA,IACrE;AAGA,IAAA,MAAM,KAAA,GAAQ,YAAY,EAAE,CAAA;AAE5B,IAAA,MAAM,MAAA,GAAS,cAAA,CAAe,aAAA,EAAe,YAAA,EAAc,KAAK,CAAA;AAGhE,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,MAAA,CAAO,CAAC,MAAA,CAAO,MAAA,CAAO,OAAO,CAAA,EAAG,MAAA,CAAO,KAAA,EAAO,CAAC,CAAA;AACxE,IAAA,MAAM,OAAA,GAAU,OAAO,UAAA,EAAW;AAIlC,IAAA,MAAM,kBAAkB,MAAA,CAAO,MAAA,CAAO,CAAC,SAAA,EAAW,OAAO,CAAC,CAAA;AAE1D,IAAA,OAAO;AAAA,MACN,UAAA,EAAY,eAAA;AAAA,MACZ;AAAA,KACD;AAAA,EACD,CAAA;AAAA;AAAA;AAAA;AAAA,EAKA,cAAA,CACC,gBAAA,EACA,KAAA,EACA,YAAA,EACS;AACT,IAAA,IAAI,gBAAA,CAAiB,SAAS,EAAA,EAAI;AACjC,MAAA,MAAM,IAAI,KAAA;AAAA,QACT;AAAA,OACD;AAAA,IACD;AAGA,IAAA,MAAM,aAAA,GAAgB,gBAAA,CAAiB,QAAA,CAAS,CAAA,EAAG,GAAG,CAAA;AACtD,IAAA,MAAM,OAAA,GAAU,gBAAA,CAAiB,QAAA,CAAS,GAAG,CAAA;AAE7C,IAAA,MAAM,QAAA,GAAW,gBAAA,CAAiB,aAAA,EAAe,YAAA,EAAc,KAAK,CAAA;AACpE,IAAA,QAAA,CAAS,WAAW,OAAO,CAAA;AAE3B,IAAA,OAAO,MAAA,CAAO,MAAA,CAAO,CAAC,QAAA,CAAS,MAAA,CAAO,aAAa,CAAA,EAAG,QAAA,CAAS,KAAA,EAAO,CAAC,CAAA;AAAA,EACxE;AACD;;;AChCO,IAAM,aAAN,MAAiB;AAAA,EACf,QAAA,GAA4B,IAAA;AAAA,EAC5B,UAAA,uBAA6C,GAAA,EAAI;AAAA,EACjD,SAAA,uBAA2C,GAAA,EAAI;AAAA,EAC/C,UAAA;AAAA,EACA,UAAA;AAAA,EACD,QAAA,GAAyB,IAAI,YAAA,EAAa;AAAA,EACzC,UAAA;AAAA,EACA,YAAA;AAAA;AAAA,EAGD,GAAA,GAAc,QAAA;AAAA;AAAA,EAEd,eAAA,GAA0B,oBAAA;AAAA,EAEjC,YAAY,GAAA,EAAsB;AACjC,IAAA,IAAA,CAAK,UAAA,GAAa,GAAA;AAAA,EACnB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAa,OAAA,CACZ,OAAA,EACA,OAAA,EAWgB;AAEhB,IAAA,MAAM,QAAA,GACL,SAAS,IAAA,EAAM,QAAA,IACf,QAAQ,GAAA,CAAI,oBAAA,IACZ,QAAQ,GAAA,CAAI,cAAA;AACb,IAAA,MAAM,YAAA,GACL,SAAS,IAAA,EAAM,YAAA,IACf,QAAQ,GAAA,CAAI,wBAAA,IACZ,QAAQ,GAAA,CAAI,kBAAA;AACb,IAAA,MAAM,WACL,OAAA,EAAS,IAAA,EAAM,QAAA,IACf,OAAA,CAAQ,IAAI,cAAA,IACZ,uBAAA;AACD,IAAA,MAAM,WACL,OAAA,EAAS,IAAA,EAAM,QAAA,IACf,OAAA,CAAQ,IAAI,mBAAA,IACZ,mBAAA;AACD,IAAA,MAAM,QACL,OAAA,EAAS,IAAA,EAAM,KAAA,IACf,OAAA,CAAQ,IAAI,gBAAA,IACZ,sFAAA;AAED,IAAA,IAAA,CAAK,UAAA,GACJ,SAAS,IAAA,EAAM,KAAA,IACf,QAAQ,GAAA,CAAI,gBAAA,IACZ,QAAQ,GAAA,CAAI,UAAA;AAEb,IAAA,IAAI,YAAY,YAAA,EAAc;AAC7B,MAAA,MAAM,OAAA,GAAA,CAAW,QAAY,EAAyB,QAAA,CAAS,OAAO,IACnE,QAAY,GACZ,CAAA,EAAG,QAAmC,CAAA,KAAA,CAAA;AACzC,MAAA,MAAM,aAAA,GAAgB,GAAG,OAAO,CAAA,MAAA,CAAA;AAEhC,MAAA,IAAA,CAAK,YAAA,GAAe,IAAI,YAAA,CAAa;AAAA,QACpC,aAAA;AAAA,QACA,QAAA;AAAA,QACA,YAAA;AAAA,QACA,QAAA;AAAA,QACA,MAAA,EAAQ;AAAA,OACR,CAAA;AAED,MAAA,IAAI;AACH,QAAA,IAAA,CAAK,UAAA,GAAa,MAAM,IAAA,CAAK,YAAA,CAAa,QAAA,EAAS;AACnD,QAAA,GAAA,CAAI,IAAA;AAAA,UACH;AAAA,SACD;AAAA,MACD,SAAS,GAAA,EAAc;AACtB,QAAA,GAAA,CAAI,KAAA;AAAA,UACH,mDACC,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAChD,CAAA;AAAA,SACD;AAAA,MAED;AAAA,IACD;AAEA,IAAA,IAAA,CAAK,QAAA,GAAW,IAAI,QAAA,CAAS,OAAA,EAAS,UAAU,CAAA;AAChD,IAAA,MAAM,IAAA,CAAK,SAAS,KAAA,EAAM;AAC1B,IAAA,GAAA,CAAI,IAAA;AAAA,MACH,CAAA,6CAAA,EAAgD,IAAA,CAAK,QAAA,CAAS,SAAA,EAAW,CAAA;AAAA,KAC1E;AAEA,IAAA,IAAI,OAAA,EAAS;AACZ,MAAA,MAAM,gBAAgB,YAAY;AACjC,QAAA,IAAI,KAAK,YAAA,EAAc;AACtB,UAAA,OAAO,MAAM,IAAA,CAAK,YAAA,CAAa,QAAA,EAAS;AAAA,QACzC;AACA,QAAA,OAAO,IAAA,CAAK,UAAA;AAAA,MACb,CAAA;AACA,MAAA,IAAA,CAAK,UAAA,CAAW,GAAA;AAAA,QACf,QAAA;AAAA,QACA,IAAI,aAAA,CAAc,OAAA,EAAS,IAAA,CAAK,YAAY,aAAa;AAAA,OAC1D;AACA,MAAA,IAAA,CAAK,aAAa,EAAE,IAAA,EAAM,eAAe,OAAO,CAAA,CAAA,CAAA,EAAK,SAAS,OAAA,EAAQ;AACtE,MAAA,GAAA,CAAI,IAAA,CAAK,CAAA,yCAAA,EAA4C,OAAO,CAAA,CAAE,CAAA;AAAA,IAC/D,CAAA,MAAO;AACN,MAAA,IAAA,CAAK,UAAA,GAAa,EAAE,IAAA,EAAM,yBAAA,EAA2B,SAAS,OAAA,EAAQ;AAAA,IACvE;AAAA,EACD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,gBAAgB,KAAA,EAAgC;AAEvD,IAAA,KAAA,MAAW,SAAS,KAAA,EAAO;AAC1B,MAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,KAAA,CAAM,GAAG,CAAA;AAC7B,MAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA;AACjC,MAAA,IAAI,KAAA,KAAU,EAAA,IAAM,KAAA,GAAQ,CAAA,GAAI,MAAM,MAAA,EAAQ;AAC7C,QAAA,MAAM,EAAA,GAAK,KAAA,CAAM,KAAA,GAAQ,CAAC,CAAA;AAC1B,QAAA,IACC,EAAA,KAAO,WAAA,IACP,CAAC,EAAA,CAAG,UAAA,CAAW,MAAM,CAAA,IACrB,EAAA,KAAO,SAAA,IACP,EAAA,KAAO,WAAA,EACN;AACD,UAAA,OAAO,EAAA;AAAA,QACR;AAAA,MACD;AAAA,IACD;AAGA,IAAA,KAAA,MAAW,SAAS,KAAA,EAAO;AAC1B,MAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,KAAA,CAAM,GAAG,CAAA;AAC7B,MAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA;AACjC,MAAA,IAAI,KAAA,KAAU,EAAA,IAAM,KAAA,GAAQ,CAAA,GAAI,MAAM,MAAA,EAAQ;AAC7C,QAAA,OAAO,KAAA,CAAM,QAAQ,CAAC,CAAA;AAAA,MACvB;AAAA,IACD;AAEA,IAAA,OAAO,IAAA;AAAA,EACR;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAa,kBAAkB,QAAA,EAAmC;AACjE,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA;AACT,MAAA,MAAM,IAAI,KAAA;AAAA,QACT;AAAA,OACD;AAED,IAAA,GAAA,CAAI,IAAA,CAAK,CAAA,6CAAA,EAAgD,QAAQ,CAAA,GAAA,CAAK,CAAA;AACtE,IAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,QAAA,CAAS,cAAc,QAAQ,CAAA;AAE5D,IAAA,IAAI,SAAA,CAAU,WAAW,CAAA,EAAG;AAC3B,MAAA,MAAM,IAAI,KAAA;AAAA,QACT,qDAAqD,QAAQ,CAAA;AAAA,OAC9D;AAAA,IACD;AAEA,IAAA,MAAM,UAAA,GAAa,UAAU,CAAC,CAAA;AAC9B,IAAA,GAAA,CAAI,IAAA,CAAK,CAAA,+CAAA,EAAkD,UAAU,CAAA,CAAE,CAAA;AAEvE,IAAA,IAAI,QAAA,GAAW,KAAA;AACf,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,QAAA,CAAS,cAAc,UAAU,CAAA;AAC7D,IAAA,IAAI,QAAA,EAAU;AACb,MAAA,QAAA,GAAW,QAAA,CAAS,QAAA;AACpB,MAAA,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,UAAA,EAAY,QAAQ,CAAA;AACvC,MAAA,GAAA,CAAI,IAAA;AAAA,QACH,CAAA,0CAAA,EAA6C,QAAQ,CAAA,6BAAA,EAAgC,UAAU,CAAA;AAAA,OAChG;AAAA,IACD;AAEA,IAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,QAAA,CAAS,YAAY,UAAU,CAAA;AACxD,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,eAAA,CAAgB,KAAK,CAAA;AAC5C,IAAA,IAAI,SAAA,EAAW;AACd,MAAA,MAAM,QAAA,GAAW,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI,QAAQ,CAAA,CAAA;AACzC,MAAA,GAAA,CAAI,IAAA;AAAA,QACH,6DAA6D,QAAQ,CAAA;AAAA,OACtE;AACA,MAAA,OAAO,QAAA;AAAA,IACR;AAEA,IAAA,OAAO,aAAa,QAAQ,CAAA,CAAA;AAAA,EAC7B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAa,oBAAoB,MAAA,EAI9B;AACF,IAAA,IAAI;AACH,MAAA,MAAM,OAAA,GAAkC;AAAA,QACvC,cAAA,EAAgB,kBAAA;AAAA,QAChB,YAAA,EAAc;AAAA,OACf;AACA,MAAA,IAAI,KAAK,UAAA,EAAY;AACpB,QAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,IAAA,CAAK,UAAU,CAAA,CAAA;AAAA,MAClD;AAEA,MAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,MAAA,EAAQ;AAAA,QAC/B,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA;AAAA,QACA,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,UACpB,OAAA,EAAS,KAAA;AAAA,UACT,EAAA,EAAI,CAAA;AAAA,UACJ,MAAA,EAAQ,iBAAA;AAAA,UACR,QAAQ;AAAC,SACT;AAAA,OACD,CAAA;AAED,MAAA,IAAI,IAAI,EAAA,EAAI;AACX,QAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAG7B,QAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,EAAQ,iBAAA,IAAqB,EAAC;AACrD,QAAA,IAAI,SAAA,CAAU,QAAA,CAAS,oBAAoB,CAAA,EAAG;AAC7C,UAAA,IAAA,CAAK,GAAA,GAAM,QAAA;AACX,UAAA,IAAA,CAAK,eAAA,GAAkB,oBAAA;AACvB,UAAA,OAAO;AAAA,YACN,GAAA,EAAK,QAAA;AAAA,YACL,eAAA,EAAiB,oBAAA;AAAA,YACjB,iBAAA,EAAmB;AAAA,WACpB;AAAA,QACD;AAAA,MACD;AAAA,IACD,SAAS,IAAA,EAAM;AAAA,IAEf;AAGA,IAAA,IAAI,0BAAA,EAA4B;AAC/B,MAAA,IAAA,CAAK,GAAA,GAAM,QAAA;AACX,MAAA,IAAA,CAAK,eAAA,GAAkB,2BAAA;AACvB,MAAA,OAAO;AAAA,QACN,GAAA,EAAK,QAAA;AAAA,QACL,eAAA,EAAiB,2BAAA;AAAA,QACjB,iBAAA,EAAmB,CAAC,2BAA2B;AAAA,OAChD;AAAA,IACD;AAEA,IAAA,MAAM,IAAI,KAAA;AAAA,MACT;AAAA,KACD;AAAA,EACD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAa,aAAA,CACZ,YAAA,GAAe,KAAA,EACqC;AACpD,IAAA,IAAI,CAAC,KAAK,QAAA,EAAU;AACnB,MAAA,MAAM,IAAI,MAAM,oDAAoD,CAAA;AAAA,IACrE;AAEA,IAAA,MAAM,kBAAA,GAAqB,KAAK,GAAA,EAAI;AAEpC,IAAA,GAAA,CAAI,IAAA;AAAA,MACH,iDAAiD,YAAY,CAAA,IAAA;AAAA,KAC9D;AACA,IAAA,MAAM,WAAA,GAAc,MAAM,IAAA,CAAK,QAAA,CAAS,yBAAA,EAA0B;AAClE,IAAA,MAAM,QAAkD,EAAC;AACzD,IAAA,MAAM,SAAA,uBAAgB,GAAA,EAAY;AAElC,IAAA,KAAA,MAAW,UAAU,WAAA,EAAa;AACjC,MAAA,IAAI;AACH,QAAA,IAAI,WAA4C,CAAC,YAAA,GAC9C,KAAK,SAAA,CAAU,GAAA,CAAI,MAAM,CAAA,GACzB,KAAA,CAAA;AAEH,QAAA,IAAI,CAAC,QAAA,EAAU;AACd,UAAA,GAAA,CAAI,IAAA,CAAK,CAAA,qCAAA,EAAwC,MAAM,CAAA,CAAE,CAAA;AACzD,UAAA,QAAA,GAAW,MAAM,IAAA,CAAK,QAAA,CAAS,aAAA,CAAc,MAAM,CAAA;AACnD,UAAA,IAAI,QAAA,EAAU;AACb,YAAA,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,MAAA,EAAQ,QAAQ,CAAA;AAAA,UACpC;AAAA,QACD,CAAA,MAAO;AACN,UAAA,GAAA,CAAI,IAAA,CAAK,CAAA,wCAAA,EAA2C,MAAM,CAAA,CAAE,CAAA;AAAA,QAC7D;AAEA,QAAA,IAAI,QAAA,EAAU;AACb,UAAA,KAAA,MAAW,IAAA,IAAQ,SAAS,KAAA,EAAO;AAClC,YAAA,IAAI,CAAC,SAAA,CAAU,GAAA,CAAI,IAAA,CAAK,IAAI,CAAA,EAAG;AAC9B,cAAA,KAAA,CAAM,IAAA,CAAK,EAAE,IAAA,EAAM,IAAA,CAAK,MAAM,WAAA,EAAa,IAAA,CAAK,aAAa,CAAA;AAC7D,cAAA,SAAA,CAAU,GAAA,CAAI,KAAK,IAAI,CAAA;AAAA,YACxB;AAAA,UACD;AAAA,QACD;AAAA,MACD,SAAS,GAAA,EAAc;AACtB,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,6CAA6C,MAAM,CAAA,CAAA,CAAA;AAAA,UACnD,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,SAChD;AAAA,MACD;AAAA,IACD;AAEA,IAAA,GAAA,CAAI,IAAA;AAAA,MACH,CAAA,uCAAA,EAA0C,MAAM,MAAM,CAAA,cAAA;AAAA,KACvD;AAGA,IAAA,IAAI;AACH,MAAA,MAAM,SAAA,GAAY,qBAAqB,WAAA,EAAY;AACnD,MAAA,MAAM,YAAA,GAAe,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA;AACzC,MAAA,MAAM,oBAAA,GAAuB,IAAA,CAAK,SAAA,CAAU,EAAE,OAAO,CAAA;AACrD,MAAA,SAAA,CAAU,MAAA,CAAO;AAAA,QAChB,IAAA,EAAM,YAAA;AAAA,QACN,MAAA,EAAQ,eAAA;AAAA,QACR,oBAAA,EAAsB,SAAA,CAAU,WAAA,CAAY,YAAY,CAAA;AAAA,QACxD,qBAAA,EAAuB,SAAA,CAAU,WAAA,CAAY,oBAAoB,CAAA;AAAA,QACjE,UAAA,EAAY,IAAA,CAAK,GAAA,EAAI,GAAI;AAAA,OACzB,CAAA;AAAA,IACF,CAAA,CAAA,MAAQ;AAAA,IAER;AAEA,IAAA,OAAO,KAAA;AAAA,EACR;AAAA;AAAA;AAAA;AAAA,EAKA,MAAa,QAAA,CACZ,OAAA,EACA,YAAA,EAC0B;AAC1B,IAAA,IAAI,CAAC,KAAK,QAAA,EAAU;AACnB,MAAA,MAAM,IAAI,MAAM,gDAAgD,CAAA;AAAA,IACjE;AAEA,IAAA,MAAM,aAAA,GAAgB,KAAK,GAAA,EAAI;AAC/B,IAAA,MAAM,WAAW,OAAA,CAAQ,IAAA;AACzB,IAAA,GAAA,CAAI,IAAA,CAAK,CAAA,6BAAA,EAAgC,QAAQ,CAAA,CAAE,CAAA;AAGnD,IAAA,IAAI,SAAA,GAAY,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,QAAQ,CAAA;AAC5C,IAAA,IAAI,eAAA,GAAkB,QAAA;AAEtB,IAAA,IAAI,CAAC,SAAA,EAAW;AAEf,MAAA,IAAI,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,QAAQ,CAAA,EAAG;AAClC,QAAA,SAAA,GAAY,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,QAAQ,CAAA;AACxC,QAAA,eAAA,GAAkB,QAAA;AAAA,MACnB;AAAA,IACD;AAEA,IAAA,IAAI,CAAC,SAAA,EAAW;AAEf,MAAA,IAAI,YAAA,GAA8B,IAAA;AAClC,MAAA,KAAA,MAAW,CAAC,MAAA,EAAQ,QAAQ,KAAK,IAAA,CAAK,SAAA,CAAU,SAAQ,EAAG;AAC1D,QAAA,IAAI,QAAA,CAAS,MAAM,IAAA,CAAK,CAAC,MAAM,CAAA,CAAE,IAAA,KAAS,QAAQ,CAAA,EAAG;AAEpD,UAAA,IAAI,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,MAAM,CAAA,EAAG;AAChC,YAAA,SAAA,GAAY,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,MAAM,CAAA;AACtC,YAAA,eAAA,GAAkB,MAAA;AAClB,YAAA;AAAA,UACD;AAEA,UAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,QAAA,CAAS,YAAY,MAAM,CAAA;AACpD,UAAA,MAAM,SAAA,GAAY,IAAA,CAAK,eAAA,CAAgB,KAAK,CAAA;AAC5C,UAAA,IAAI,SAAA,EAAW;AACd,YAAA,YAAA,GAAe,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI,QAAA,CAAS,QAAQ,CAAA,CAAA;AAChD,YAAA,GAAA,CAAI,IAAA;AAAA,cACH,CAAA,iCAAA,EAAoC,QAAQ,CAAA,uCAAA,EAA0C,YAAY,CAAA;AAAA,aACnG;AACA,YAAA,eAAA,GAAkB,MAAA;AAClB,YAAA,SAAA,GAAY,IAAA,CAAK,oBAAA,CAAqB,MAAA,EAAQ,YAAY,CAAA;AAC1D,YAAA;AAAA,UACD;AAAA,QACD;AAAA,MACD;AAEA,MAAA,IAAI,CAAC,SAAA,EAAW;AACf,QAAA,MAAM,cAAA,GAAiB,MAAM,IAAA,CAAK,iBAAA,CAAkB,QAAQ,CAAA;AAC5D,QAAA,eAAA,GAAkB,QAAA;AAClB,QAAA,SAAA,GAAY,IAAA,CAAK,oBAAA,CAAqB,QAAA,EAAU,cAAc,CAAA;AAAA,MAC/D;AAAA,IACD,CAAA,MAAO;AACN,MAAA,eAAA,GAAkB,QAAA;AAClB,MAAA,GAAA,CAAI,IAAA;AAAA,QACH,0DAA0D,QAAQ,CAAA,CAAA;AAAA,OACnE;AAAA,IACD;AAEA,IAAA,GAAA,CAAI,IAAA,CAAK,CAAA,oCAAA,EAAuC,QAAQ,CAAA,GAAA,CAAK,CAAA;AAC7D,IAAA,MAAM,QAAA,GAAW,KAAK,QAAA,GACnB,CAAA,SAAA,EAAY,KAAK,QAAA,CAAS,SAAA,EAAW,CAAA,CAAA,GACrC,oBAAA;AACH,IAAA,MAAM,aAAA,GAAgB,OAAO,IAAA,CAAK,CAAA,EAAG,QAAQ,CAAA,CAAA,EAAI,IAAA,CAAK,GAAA,EAAK,CAAA,CAAE,CAAA;AAC7D,IAAA,MAAM,aAAA,GAAgB,KAAK,QAAA,GACxB,MAAM,KAAK,QAAA,CAAS,IAAA,CAAK,aAAa,CAAA,GACtC,aAAA;AAEH,IAAA,IAAI,cAAA;AASJ,IAAA,IAAI;AACH,MAAA,cAAA,GAAkB,MAAM,UAAU,eAAA,CAAgB;AAAA,QACjD,SAAA,EAAW,QAAA;AAAA,QACX,eAAA,EAAiB,QAAA;AAAA,QACjB,eAAA,EAAiB;AAAA,OACjB,CAAA;AAAA,IACF,SAAS,GAAA,EAAc;AACtB,MAAA,MAAM,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAC9D,MAAA,IACC,KAAK,YAAA,KACJ,MAAA,CAAO,QAAA,CAAS,iBAAiB,KACjC,MAAA,CAAO,QAAA,CAAS,aAAa,CAAA,IAC7B,OAAO,QAAA,CAAS,wBAAwB,KACxC,MAAA,CAAO,QAAA,CAAS,SAAS,CAAA,CAAA,EACzB;AACD,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,kDAAkD,QAAQ,CAAA,qEAAA;AAAA,SAC3D;AACA,QAAA,IAAA,CAAK,aAAa,UAAA,EAAW;AAC7B,QAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,YAAA,CAAa,QAAA,EAAS;AACpD,QAAA,IAAA,CAAK,UAAA,GAAa,UAAA;AAClB,QAAA,SAAA,CAAU,SAAS,UAAU,CAAA;AAC7B,QAAA,cAAA,GAAkB,MAAM,UAAU,eAAA,CAAgB;AAAA,UACjD,SAAA,EAAW,QAAA;AAAA,UACX,eAAA,EAAiB,QAAA;AAAA,UACjB,eAAA,EAAiB;AAAA,SACjB,CAAA;AAAA,MACF,CAAA,MAAO;AACN,QAAA,MAAM,GAAA;AAAA,MACP;AAAA,IACD;AAEA,IAAA,IAAI,CAAC,eAAe,QAAA,EAAU;AAC7B,MAAA,IACC,IAAA,CAAK,iBACJ,cAAA,CAAe,aAAA,EAAe,SAAS,OAAO,CAAA,IAC9C,eAAe,aAAA,EAAe,QAAA,CAAS,iBAAiB,CAAA,IACxD,cAAA,CAAe,eAAe,QAAA,CAAS,SAAS,KAChD,cAAA,CAAe,aAAA,EAAe,QAAA,CAAS,wBAAwB,CAAA,CAAA,EAC/D;AACD,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,CAAA,+CAAA,EAAkD,eAAe,aAAa,CAAA,mCAAA;AAAA,SAC/E;AACA,QAAA,IAAA,CAAK,aAAa,UAAA,EAAW;AAC7B,QAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,YAAA,CAAa,QAAA,EAAS;AACpD,QAAA,IAAA,CAAK,UAAA,GAAa,UAAA;AAClB,QAAA,SAAA,CAAU,SAAS,UAAU,CAAA;AAC7B,QAAA,cAAA,GAAkB,MAAM,UAAU,eAAA,CAAgB;AAAA,UACjD,SAAA,EAAW,QAAA;AAAA,UACX,eAAA,EAAiB,QAAA;AAAA,UACjB,eAAA,EAAiB;AAAA,SACjB,CAAA;AAAA,MACF;AACA,MAAA,IAAI,CAAC,eAAe,QAAA,EAAU;AAC7B,QAAA,MAAM,IAAI,KAAA;AAAA,UACT,CAAA,uBAAA,EAA0B,eAAe,aAAa,CAAA;AAAA,SACvD;AAAA,MACD;AAAA,IACD;AAGA,IAAA,MAAM,SAAA,GACL,cAAA,CAAe,gBAAA,IAAoB,cAAA,CAAe,cAAA;AACnD,IAAA,MAAM,YAAA,GACL,cAAA,CAAe,aAAA,IAAiB,cAAA,CAAe,YAAA;AAEhD,IAAA,IAAI,CAAC,SAAA,EAAW;AACf,MAAA,GAAA,CAAI,IAAA;AAAA,QACH,4EAAA;AAAA,QACA;AAAA,OACD;AACA,MAAA,IAAI;AACH,QAAA,kBAAA,CAAmB,GAAA,CAAI;AAAA,UACtB,SAAA,EAAW,YAAA;AAAA,UACX,MAAA,EAAQ;AAAA,SACR,CAAA;AAAA,MACF,CAAA,CAAA,MAAQ;AAAA,MAAC;AACT,MAAA,MAAM,IAAI,KAAA;AAAA,QACT;AAAA,OACD;AAAA,IACD;AAGA,IAAA,GAAA,CAAI,IAAA;AAAA,MACH,CAAA,0DAAA,EAA6D,QAAQ,IAAI,CAAA,GAAA;AAAA,KAC1E;AACA,IAAA,MAAM,QAAA,GAAW,YAAY,GAAA,EAAI;AACjC,IAAA,IAAI,eAAA;AACJ,IAAA,IAAI,YAAA;AACJ,IAAA,IAAI;AACH,MAAA,MAAM,GAAA,GAAM,MAAM,eAAA,CAAgB,qBAAA,CAAsB,SAAS,CAAA;AACjE,MAAA,eAAA,GAAkB,GAAA,CAAI,UAAA;AACtB,MAAA,YAAA,GAAe,GAAA,CAAI,YAAA;AACnB,MAAA,MAAM,WAAA,GAAc,WAAA,CAAY,GAAA,EAAI,GAAI,QAAA;AACxC,MAAA,sBAAA,CAAuB,QAAQ,EAAE,IAAA,EAAM,OAAA,CAAQ,IAAA,IAAQ,WAAW,CAAA;AAClE,MAAA,kBAAA,CAAmB,GAAA,CAAI;AAAA,QACtB,SAAA,EAAW,YAAA;AAAA,QACX,MAAA,EAAQ;AAAA,OACR,CAAA;AAAA,IACF,SAAS,UAAA,EAAY;AACpB,MAAA,IAAI;AACH,QAAA,kBAAA,CAAmB,GAAA,CAAI;AAAA,UACtB,SAAA,EAAW,YAAA;AAAA,UACX,MAAA,EAAQ;AAAA,SACR,CAAA;AAAA,MACF,CAAA,CAAA,MAAQ;AAAA,MAAC;AACT,MAAA,MAAM,UAAA;AAAA,IACP;AAGA,IAAA,GAAA,CAAI,KAAK,CAAA,+CAAA,CAAiD,CAAA;AAE1D,IAAA,MAAM,YAAA,GAAe,YAAA,IAAgB,MAAA,CAAO,IAAA,CAAK,EAAE,CAAA;AAGnD,IAAA,MAAM,EAAE,YAAY,aAAA,EAAe,KAAA,EAAO,UAAS,GAClD,aAAA,CAAc,cAAA,CAAe,YAAA,EAAc,YAAY,CAAA;AAGxD,IAAA,MAAM,kBAA8C,EAAC;AACrD,IAAA,MAAM,MAAA,GAAS,MAAM,OAAO,QAAa,CAAA;AACzC,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,QAAQ,OAAA,CAAQ,SAAA,IAAa,EAAE,CAAA,EAAG;AACnE,MAAA,MAAM,UAAA,GAAa,MAAA,CAAO,WAAA,CAAY,EAAE,CAAA;AACxC,MAAA,MAAM,SAAS,MAAA,CAAO,cAAA;AAAA,QACrB,aAAA;AAAA,QACA,YAAA;AAAA,QACA;AAAA,OACD;AACA,MAAA,MAAM,SAAA,GAAY,OAAO,MAAA,CAAO;AAAA,QAC/B,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA;AAAA,QACnC,OAAO,KAAA;AAAM,OACb,CAAA;AACD,MAAA,MAAM,OAAA,GAAU,OAAO,UAAA,EAAW;AAElC,MAAA,eAAA,CAAgB,GAAG,IAAI,MAAA,CAAO,MAAA,CAAO,CAAC,UAAA,EAAY,SAAA,EAAW,OAAO,CAAC,CAAA;AAAA,IACtE;AAGA,IAAA,MAAM,YAAA,GAA6B;AAAA,MAClC,aAAA,EAAe,YAAA;AAAA,MACf,WAAA,EAAa,aAAA;AAAA,MACb,MAAA,EAAQ,eAAA;AAAA,MACR,cAAA,EAAgB,eAAA;AAAA,MAChB,SAAA,EAAW;AAAA,KACZ;AAEA,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACvC,MAAA,MAAM,MAAA,GAAS,SAAA,CAAU,YAAA,CAAa,YAAY,CAAA;AAClD,MAAA,IAAI,CAAC,MAAA,EAAQ;AACZ,QAAA,MAAA,CAAO,IAAI,KAAA,CAAM,oDAAoD,CAAC,CAAA;AACtE,QAAA;AAAA,MACD;AACA,MAAA,IAAI,eAAA,GAAkB,KAAA;AACtB,MAAA,IAAI,eAAA,GAAkB,KAAA;AAEtB,MAAA,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,OAAO,QAAA,KAA4B;AACpD,QAAA,IAAI,eAAA,EAAiB;AACrB,QAAA,eAAA,GAAkB,IAAA;AAElB,QAAA,GAAA,CAAI,KAAK,0DAA0D,CAAA;AAEnE,QAAA,IAAI;AAIH,UAAA,IAAI,CAAC,SAAS,QAAA,EAAU;AACvB,YAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,QAAA,CAAS,eAAA;AAAA,cACnC,YAAA;AAAA,cACA,OAAO,IAAA,CAAK,QAAA,CAAS,mBAAmB,CAAA,CAAE,SAAS,KAAK,CAAA;AAAA,cACxD,MAAA,CAAO,IAAA,CAAK,QAAA,CAAS,UAAU,CAAA;AAAA,cAC/B,MAAA,CAAO,KAAK,YAAY,CAAA;AAAA,cACxB,QAAA,CAAS;AAAA,aACV;AAEA,YAAA,IAAI;AACH,cAAA,oBAAA,CAAqB,GAAA,CAAI;AAAA,gBACxB,MAAA,EAAQ,UAAU,OAAA,GAAU;AAAA,eAC5B,CAAA;AAAA,YACF,CAAA,CAAA,MAAQ;AAAA,YAER;AAEA,YAAA,IAAI,CAAC,OAAA,EAAS;AACb,cAAA,IAAI;AACH,gBAAA,mBAAA,CAAoB,GAAA,CAAI;AAAA,kBACvB,UAAA,EAAY,QAAA;AAAA,kBACZ,UAAA,EAAY;AAAA,iBACZ,CAAA;AAAA,cACF,CAAA,CAAA,MAAQ;AAAA,cAAC;AACT,cAAA,MAAA;AAAA,gBACC,IAAI,KAAA;AAAA,kBACH;AAAA;AACD,eACD;AACA,cAAA;AAAA,YACD;AAAA,UACD,CAAA,MAAO;AACN,YAAA,IAAI;AACH,cAAA,mBAAA,CAAoB,GAAA,CAAI;AAAA,gBACvB,UAAA,EAAY,QAAA;AAAA,gBACZ,UAAA,EAAY;AAAA,eACZ,CAAA;AAAA,YACF,CAAA,CAAA,MAAQ;AAAA,YAAC;AAAA,UACV;AAEA,UAAA,eAAA,GAAkB,IAAA;AAGlB,UAAA,IAAI;AACH,YAAA,MAAM,SAAA,GAAY,qBAAqB,WAAA,EAAY;AACnD,YAAA,MAAM,eAAe,IAAA,CAAK,SAAA,CAAU,OAAA,CAAQ,SAAA,IAAa,EAAE,CAAA;AAC3D,YAAA,SAAA,CAAU,MAAA,CAAO;AAAA,cAChB,IAAA,EAAM,WAAA;AAAA,cACN,MAAA,EAAQ,UAAA;AAAA,cACR,QAAA;AAAA,cACA,MAAA,EACC,eAAA,KAAoB,QAAA,GAAW,eAAA,GAAkB,KAAA,CAAA;AAAA,cAClD,oBAAA,EAAsB,SAAA,CAAU,WAAA,CAAY,YAAY,CAAA;AAAA,cACxD,uBAAuB,SAAA,CAAU,WAAA;AAAA,gBAChC,QAAA,CAAS;AAAA,eACV;AAAA,cACA,UAAA,EAAY,IAAA,CAAK,GAAA,EAAI,GAAI;AAAA,aACzB,CAAA;AAED,YAAA,MAAM,cACL,MAAA,CAAO,UAAA,CAAW,QAAA,CAAS,iBAAA,IAAqB,EAAE,CAAA,IACjD,QAAA,CAAS,mBAAA,GACP,QAAA,CAAS,oBAAoB,MAAA,GAC7B,CAAA,CAAA,IACF,SAAS,UAAA,GAAa,QAAA,CAAS,WAAW,MAAA,GAAS,CAAA,CAAA;AACrD,YAAA,oBAAA,CAAqB,GAAA,CAAI,EAAE,UAAA,EAAY,QAAA,IAAY,WAAW,CAAA;AAAA,UAC/D,CAAA,CAAA,MAAQ;AAAA,UAER;AAEA,UAAA,OAAA,CAAQ;AAAA,YACP,OAAA,EAAS;AAAA,cACR;AAAA,gBACC,IAAA,EAAM,MAAA;AAAA,gBACN,MAAM,QAAA,CAAS;AAAA;AAChB,aACD;AAAA,YACA,SAAS,QAAA,CAAS;AAAA,WAClB,CAAA;AAAA,QACF,SAAS,GAAA,EAAK;AACb,UAAA,IAAI;AACH,YAAA,mBAAA,CAAoB,GAAA,CAAI;AAAA,cACvB,UAAA,EAAY,QAAA;AAAA,cACZ,UAAA,EAAY;AAAA,aACZ,CAAA;AAAA,UACF,CAAA,CAAA,MAAQ;AAAA,UAAC;AACT,UAAA,MAAA,CAAO,GAAG,CAAA;AAAA,QACX;AAAA,MACD,CAAC,CAAA;AAED,MAAA,MAAA,CAAO,EAAA,CAAG,OAAA,EAAS,CAAC,GAAA,KAAQ;AAE3B,QAAA,IAAA,CAAK,UAAA,CAAW,OAAO,eAAe,CAAA;AACtC,QAAA,IAAA,CAAK,UAAA,CAAW,OAAO,QAAQ,CAAA;AAC/B,QAAA,IAAI;AACH,UAAA,mBAAA,CAAoB,GAAA,CAAI;AAAA,YACvB,UAAA,EAAY,QAAA;AAAA,YACZ,UAAA,EAAY;AAAA,WACZ,CAAA;AAAA,QACF,CAAA,CAAA,MAAQ;AAAA,QAAC;AACT,QAAA,IAAI,eAAA,EAAiB;AACrB,QAAA,GAAA,CAAI,KAAA,CAAM,8BAA8B,GAAG,CAAA;AAC3C,QAAA,MAAA,CAAO,GAAG,CAAA;AAAA,MACX,CAAC,CAAA;AAED,MAAA,MAAA,CAAO,EAAA,CAAG,OAAO,MAAM;AAGtB,QAAA,IAAI,CAAC,eAAA,IAAmB,CAAC,eAAA,EAAiB;AACzC,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,gDAAgD,CAAC,CAAA;AAAA,QACnE;AAAA,MACD,CAAC,CAAA;AAAA,IACF,CAAC,CAAA;AAAA,EACF;AAAA,EAEQ,oBAAA,CAAqB,QAAgB,OAAA,EAAgC;AAC5E,IAAA,IAAI,MAAA,GAAS,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,MAAM,CAAA;AACvC,IAAA,IAAI,CAAC,MAAA,EAAQ;AACZ,MAAA,IAAI,QAAA,GAAW,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,MAAM,CAAA;AACxC,MAAA,IAAI,UAAA,GAAa,MAAA;AAIjB,MAAA,IAAI,CAAC,QAAA,EAAU;AACd,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,wBAAwB,MAAM,CAAA,+EAAA;AAAA,SAC/B;AACA,QAAA,KAAA,MAAW,CAAC,GAAA,EAAK,CAAC,KAAK,IAAA,CAAK,SAAA,CAAU,SAAQ,EAAG;AAChD,UAAA,IAAI,CAAA,CAAE,MAAM,IAAA,CAAK,CAAC,MAAM,CAAA,CAAE,IAAA,KAAS,MAAM,CAAA,EAAG;AAC3C,YAAA,QAAA,GAAW,CAAA;AACX,YAAA,UAAA,GAAa,GAAA;AACb,YAAA,GAAA,CAAI,IAAA;AAAA,cACH,+BAA+B,MAAM,CAAA,sBAAA,EAAyB,GAAA,CAAI,KAAA,CAAM,EAAE,CAAC,CAAA,sBAAA;AAAA,aAC5E;AACA,YAAA;AAAA,UACD;AAAA,QACD;AAAA,MACD;AAEA,MAAA,MAAM,YAAA,GAAe,QAAA,EAAU,UAAA,EAAY,IAAA,EAAM,aAAY,IAAK,EAAA;AAClE,MAAA,IAAI,QAAA;AAGJ,MAAA,MAAM,OAAO,QAAA,EAAU,SAAA;AACvB,MAAA,IAAI,IAAA,EAAM;AACT,QAAA,QAAA,GACC,OAAA,CAAQ,GAAA,CAAI,CAAA,WAAA,EAAc,IAAI,CAAA,CAAE,KAChC,OAAA,CAAQ,GAAA,CAAI,CAAA,iBAAA,EAAoB,IAAI,CAAA,CAAE,CAAA;AACvC,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,wCAAwC,IAAI,CAAA,cAAA,EAAiB,IAAI,CAAA,YAAA,EAAe,CAAC,CAAC,QAAQ,CAAA;AAAA,SAC3F;AAAA,MACD,CAAA,MAAO;AACN,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,gDAAgD,UAAA,CAAW,KAAA,CAAM,EAAE,CAAC,2BAA2B,KAAA,CAAM,IAAA;AAAA,YACpG,IAAA,CAAK,UAAU,IAAA;AAAK,WACrB,CACE,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,KAAA,CAAM,EAAE,CAAC,CAAA,CACtB,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,SACb;AAAA,MACD;AAGA,MAAA,IAAI,CAAC,YAAY,UAAA,EAAY;AAC5B,QAAA,MAAM,OAAA,GAAU,UAAA,CAAW,KAAA,CAAM,EAAE,EAAE,WAAA,EAAY;AACjD,QAAA,QAAA,GACC,OAAA,CAAQ,GAAA,CAAI,CAAA,WAAA,EAAc,OAAO,CAAA,CAAE,KACnC,OAAA,CAAQ,GAAA,CAAI,CAAA,iBAAA,EAAoB,OAAO,CAAA,CAAE,CAAA;AAAA,MAC3C;AAGA,MAAA,IAAI,CAAC,YAAY,YAAA,EAAc;AAC9B,QAAA,MAAM,YAAY,YAAA,CAChB,WAAA,EAAY,CACZ,OAAA,CAAQ,eAAe,GAAG,CAAA;AAC5B,QAAA,QAAA,GACC,OAAA,CAAQ,GAAA,CAAI,CAAA,WAAA,EAAc,SAAS,CAAA,CAAE,KACrC,OAAA,CAAQ,GAAA,CAAI,CAAA,iBAAA,EAAoB,SAAS,CAAA,CAAE,CAAA;AAAA,MAC7C;AAEA,MAAA,IAAI,QAAA,EAAU;AACb,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,sDAAsD,UAAA,CAAW,KAAA,CAAM,EAAE,CAAC,CAAA,EAAA,EAAK,gBAAgB,SAAS,CAAA,CAAA;AAAA,SACzG;AAAA,MACD;AAEA,MAAA,MAAM,gBAAgB,YAAY;AACjC,QAAA,IAAI,UAAU,OAAO,QAAA;AACrB,QAAA,IAAI,KAAK,YAAA,EAAc;AACtB,UAAA,OAAO,MAAM,IAAA,CAAK,YAAA,CAAa,QAAA,EAAS;AAAA,QACzC;AACA,QAAA,OAAO,IAAA,CAAK,UAAA;AAAA,MACb,CAAA;AAEA,MAAA,MAAA,GAAS,IAAI,aAAA,CAAc,OAAA,EAAS,IAAA,CAAK,YAAY,aAAa,CAAA;AAClE,MAAA,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,MAAA,EAAQ,MAAM,CAAA;AAAA,IACnC;AACA,IAAA,OAAO,MAAA;AAAA,EACR;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAa,aAAa,GAAA,EAEvB;AACF,IAAA,IAAI,CAAC,KAAK,QAAA,EAAU;AACnB,MAAA,MAAM,IAAI,MAAM,oDAAoD,CAAA;AAAA,IACrE;AACA,IAAA,MAAM,aAAA,GAAgB,KAAK,GAAA,EAAI;AAC/B,IAAA,GAAA,CAAI,IAAA,CAAK,CAAA,yCAAA,EAA4C,GAAG,CAAA,GAAA,CAAK,CAAA;AAG7D,IAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,QAAA,CAAS,cAAc,GAAG,CAAA;AACvD,IAAA,IAAI,SAAA,CAAU,WAAW,CAAA,EAAG;AAC3B,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,sCAAA,EAAyC,GAAG,CAAA,CAAE,CAAA;AAAA,IAC/D;AAGA,IAAA,MAAM,WAAW,MAAM,IAAA,CAAK,SAAS,aAAA,CAAc,SAAA,CAAU,CAAC,CAAC,CAAA;AAC/D,IAAA,IAAI,CAAC,QAAA,EAAU;AACd,MAAA,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAAA,IACpE;AAGA,IAAA,MAAM,WAAA,GAAc,SAAS,SAAA,EAAW,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,QAAQ,GAAG,CAAA;AACjE,IAAA,IAAI,CAAC,WAAA,EAAa;AACjB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,SAAA,EAAY,GAAG,CAAA,+BAAA,CAAiC,CAAA;AAAA,IACjE;AAGA,IAAA,MAAM,MAAA,GAAS;AAAA,MACd,QAAA,EAAU;AAAA,QACT;AAAA,UACC,GAAA;AAAA,UACA,QAAA,EAAU,YAAY,QAAA,IAAY,kBAAA;AAAA,UAClC,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,WAAA,EAAa,MAAM,CAAC;AAAA;AAC1C;AACD,KACD;AAGA,IAAA,IAAI;AACH,MAAA,MAAM,SAAA,GAAY,qBAAqB,WAAA,EAAY;AACnD,MAAA,MAAM,aAAA,GAAgB,IAAA,CAAK,SAAA,CAAU,MAAM,CAAA;AAC3C,MAAA,SAAA,CAAU,MAAA,CAAO;AAAA,QAChB,IAAA,EAAM,eAAA;AAAA,QACN,MAAA,EAAQ,cAAA;AAAA,QACR,QAAA,EAAU,GAAA;AAAA,QACV,MAAA,EAAQ,UAAU,CAAC,CAAA;AAAA,QACnB,oBAAA,EAAsB,SAAA,CAAU,WAAA,CAAY,GAAG,CAAA;AAAA,QAC/C,qBAAA,EAAuB,SAAA,CAAU,WAAA,CAAY,aAAa,CAAA;AAAA,QAC1D,UAAA,EAAY,IAAA,CAAK,GAAA,EAAI,GAAI;AAAA,OACzB,CAAA;AAAA,IACF,CAAA,CAAA,MAAQ;AAAA,IAER;AAEA,IAAA,OAAO,MAAA;AAAA,EACR;AAAA,EAEO,aAAA,GAA+D;AACrE,IAAA,OAAO,IAAA,CAAK,UAAA;AAAA,EACb;AAAA;AAAA;AAAA;AAAA,EAKA,MAAa,KAAA,GAAuB;AACnC,IAAA,IAAI,KAAK,QAAA,EAAU;AAClB,MAAA,MAAM,IAAA,CAAK,SAAS,IAAA,EAAK;AAAA,IAC1B;AAAA,EACD;AACD","file":"chunk-T7R5HUFD.js","sourcesContent":["// Copyright 2026 Nekzus Solutions and contributors\n// SPDX-License-Identifier: Apache-2.0\n\nimport * as grpc from \"@grpc/grpc-js\";\nimport { GRPC_CHANNEL_OPTIONS } from \"./channel-options.js\";\nimport { liopV1 } from \"./proto.js\";\nimport { createChannelCredentials, type LiopTlsOptions } from \"./tls.js\";\nimport type {\n\tIntentRequest,\n\tIntentResponse,\n\tLogicRequest,\n\tLogicResponse,\n} from \"./types.js\";\n\nexport type TokenProvider =\n\t| string\n\t| (() => Promise<string | undefined> | string | undefined);\n\n/**\n * LIOP gRPC Client Implementation\n * Provides a high-level interface for secure intent negotiation and logic execution.\n */\nexport class LiopRpcClient {\n\t// biome-ignore lint/suspicious/noExplicitAny: internal gRPC client type\n\tprivate client: any;\n\tprivate token?: TokenProvider;\n\tprivate lastResolvedToken?: string;\n\tpublic readonly address: string;\n\n\tconstructor(address: string, tls?: LiopTlsOptions, token?: TokenProvider) {\n\t\tconst credentials = createChannelCredentials(tls);\n\t\tthis.client = new liopV1.LogicMesh(\n\t\t\taddress,\n\t\t\tcredentials,\n\t\t\tGRPC_CHANNEL_OPTIONS,\n\t\t);\n\t\tthis.token = token;\n\t\tif (typeof token === \"string\") {\n\t\t\tthis.lastResolvedToken = token;\n\t\t}\n\t\tthis.address = address;\n\t}\n\n\tpublic setToken(token?: TokenProvider): void {\n\t\tthis.token = token;\n\t\tif (typeof token === \"string\") {\n\t\t\tthis.lastResolvedToken = token;\n\t\t}\n\t}\n\n\tprivate async resolveToken(): Promise<string | undefined> {\n\t\tif (typeof this.token === \"function\") {\n\t\t\tthis.lastResolvedToken = await this.token();\n\t\t\treturn this.lastResolvedToken;\n\t\t}\n\t\tthis.lastResolvedToken = this.token;\n\t\treturn this.token;\n\t}\n\n\t/**\n\t * Negotiates intent with the remote host.\n\t * Returns the ephemeral Kyber public key for payload encryption.\n\t */\n\tpublic async negotiateIntent(\n\t\trequest: IntentRequest,\n\t): Promise<IntentResponse> {\n\t\tconst activeToken = await this.resolveToken();\n\t\treturn new Promise((resolve, reject) => {\n\t\t\tconst metadata = new grpc.Metadata();\n\t\t\tif (activeToken) {\n\t\t\t\tmetadata.add(\"authorization\", `Bearer ${activeToken}`);\n\t\t\t}\n\t\t\tthis.client.NegotiateIntent(\n\t\t\t\trequest,\n\t\t\t\tmetadata,\n\t\t\t\t(error: grpc.ServiceError | null, response: IntentResponse) => {\n\t\t\t\t\tif (error) {\n\t\t\t\t\t\treject(error);\n\t\t\t\t\t} else {\n\t\t\t\t\t\tresolve(response);\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t);\n\t\t});\n\t}\n\n\t/**\n\t * Pushes the encrypted Logic-on-Origin payload to the origin.\n\t * Returns a stream of semantic responses and ZK proofs.\n\t */\n\tpublic executeLogic(\n\t\trequest: LogicRequest,\n\t): grpc.ClientReadableStream<LogicResponse> {\n\t\tconst metadata = new grpc.Metadata();\n\t\tconst activeToken =\n\t\t\tthis.lastResolvedToken ||\n\t\t\t(typeof this.token === \"string\" ? this.token : undefined);\n\t\tif (activeToken) {\n\t\t\tmetadata.add(\"authorization\", `Bearer ${activeToken}`);\n\t\t}\n\t\treturn this.client.ExecuteLogic(request, metadata);\n\t}\n\n\tpublic close(): void {\n\t\tthis.client.close();\n\t}\n}\n","// Copyright 2026 Nekzus Solutions and contributors\n// SPDX-License-Identifier: Apache-2.0\n\nimport { createCipheriv, createDecipheriv, randomBytes } from \"node:crypto\";\n\n/**\n * LIOP Symmetric Payload Encryption Wrapper\n * Uses AES-256-GCM to secure WASM Code transport over Zero-Trust networks.\n * Fully compatible with the `aes-gcm` Rust crate used by Wasmtime.\n */\nexport const AesGcmWrapper = {\n\t/**\n\t * Encrypts a raw WASM payload using the shared secret negotiated via Kyber768.\n\t *\n\t * @param payload Raw incoming WASM byte array or string.\n\t * @param sharedSecret A perfectly derived 32-byte (256-bit) shared secret array\n\t * @returns The encrypted buffer to push to the GRPc stream, along with the 12-byte initialization vector natively generated.\n\t */\n\tencryptPayload(\n\t\tpayload: Uint8Array | Buffer,\n\t\tsharedSecret: Uint8Array,\n\t): {\n\t\tciphertext: Buffer;\n\t\tnonce: Buffer;\n\t} {\n\t\tif (sharedSecret.length !== 32) {\n\t\t\tthrow new Error(\"Symmetric Key must be exactly 32 bytes (256 bits).\");\n\t\t}\n\n\t\t// LIOP standard demands 96-bit (12 byte) IVs/Nonces for AES-GCM\n\t\tconst nonce = randomBytes(12);\n\n\t\tconst cipher = createCipheriv(\"aes-256-gcm\", sharedSecret, nonce);\n\n\t\t// Encrypt the payload and seal the tag\n\t\tconst encrypted = Buffer.concat([cipher.update(payload), cipher.final()]);\n\t\tconst authTag = cipher.getAuthTag(); // 16 bytes for GCM integrity\n\n\t\t// In LIOP, the auth tag is strictly appended to the end of the ciphertext bytes\n\t\t// mirroring the default serialization logic within `aes_gcm::Aes256Gcm` in Rust\n\t\tconst finalCiphertext = Buffer.concat([encrypted, authTag]);\n\n\t\treturn {\n\t\t\tciphertext: finalCiphertext,\n\t\t\tnonce: nonce,\n\t\t};\n\t},\n\n\t/**\n\t * Decrypts a remote Zero-Knowledge receipt using AES-256-GCM.\n\t */\n\tdecryptPayload(\n\t\tciphertextBuffer: Buffer,\n\t\tnonce: Buffer,\n\t\tsharedSecret: Uint8Array,\n\t): Buffer {\n\t\tif (ciphertextBuffer.length < 16) {\n\t\t\tthrow new Error(\n\t\t\t\t\"Invalid GCM Ciphertext; missing authentication tag length\",\n\t\t\t);\n\t\t}\n\n\t\t// The last 16 bytes represent the AuthTag appended by rust-aes-gcm\n\t\tconst encryptedData = ciphertextBuffer.subarray(0, -16);\n\t\tconst authTag = ciphertextBuffer.subarray(-16);\n\n\t\tconst decipher = createDecipheriv(\"aes-256-gcm\", sharedSecret, nonce);\n\t\tdecipher.setAuthTag(authTag);\n\n\t\treturn Buffer.concat([decipher.update(encryptedData), decipher.final()]);\n\t},\n};\n","// Copyright 2026 Nekzus Solutions and contributors\n// SPDX-License-Identifier: Apache-2.0\n\nimport { LiopVerifier } from \"../crypto/verifier.js\";\nimport { TokenTelemetryEngine } from \"../economy/telemetry.js\";\nimport {\n\tMCP_LEGACY_SUPPORT_ENABLED,\n\tMCP_PROTOCOL_VERSION_LEGACY,\n} from \"../gateway/mcp-compat.js\";\nimport {\n\ttype LiopManifest,\n\tMeshNode,\n\ttype MeshNodeConfig,\n} from \"../mesh/node.js\";\nimport {\n\tpqcHandshakeDurationMs,\n\tpqcHandshakesTotal,\n\ttoolCallErrorsTotal,\n\twireEgressBytesTotal,\n\tzkVerificationsTotal,\n} from \"../observability/metrics.js\";\nimport { LiopRpcClient } from \"../rpc/client.js\";\nimport { AesGcmWrapper } from \"../rpc/crypto/aes.js\";\nimport { Kyber768Wrapper } from \"../rpc/crypto/kyber.js\";\nimport type { LiopTlsOptions } from \"../rpc/tls.js\";\nimport type { LogicRequest, LogicResponse } from \"../rpc/types.js\";\nimport { TokenManager } from \"../runtime/token-manager.js\";\nimport {\n\ttype CallToolRequest,\n\ttype CallToolResult,\n\tMCP_PROTOCOL_VERSION,\n\ttype McpEra,\n} from \"../types.js\";\nimport { log } from \"../utils/logger.js\";\n\n/**\n * LIOP Client\n * High-level orchestration for discovery and execution in the Logic-Injection-on-Origin mesh.\n */\nexport class LiopClient {\n\tprivate meshNode: MeshNode | null = null;\n\tprivate rpcClients: Map<string, LiopRpcClient> = new Map();\n\tprivate manifests: Map<string, LiopManifest> = new Map();\n\tprivate tlsOptions?: LiopTlsOptions;\n\tprivate serverInfo?: { name: string; version: string };\n\tpublic verifier: LiopVerifier = new LiopVerifier();\n\tprivate oauthToken?: string;\n\tprivate tokenManager?: TokenManager;\n\n\t/** Protocol negotiation era */\n\tpublic era: McpEra = \"modern\";\n\t/** Negotiated protocol version */\n\tpublic protocolVersion: string = MCP_PROTOCOL_VERSION;\n\n\tconstructor(tls?: LiopTlsOptions) {\n\t\tthis.tlsOptions = tls;\n\t}\n\n\t/**\n\t * Discovers and connects to the target server or mesh capability.\n\t * If address is omitted, it sets up the MeshNode to act purely dynamically.\n\t */\n\tpublic async connect(\n\t\taddress?: string,\n\t\toptions?: {\n\t\t\tmeshConfig?: MeshNodeConfig;\n\t\t\tauth?: {\n\t\t\t\tclientId?: string;\n\t\t\t\tclientSecret?: string;\n\t\t\t\tnexusUrl?: string;\n\t\t\t\taudience?: string;\n\t\t\t\tscope?: string;\n\t\t\t\ttoken?: string;\n\t\t\t};\n\t\t},\n\t): Promise<void> {\n\t\t// Attempt to acquire OAuth M2M access token if credentials are provided\n\t\tconst clientId =\n\t\t\toptions?.auth?.clientId ||\n\t\t\tprocess.env.LIOP_OAUTH_CLIENT_ID ||\n\t\t\tprocess.env.LIOP_CLIENT_ID;\n\t\tconst clientSecret =\n\t\t\toptions?.auth?.clientSecret ||\n\t\t\tprocess.env.LIOP_OAUTH_CLIENT_SECRET ||\n\t\t\tprocess.env.LIOP_CLIENT_SECRET;\n\t\tconst nexusUrl =\n\t\t\toptions?.auth?.nexusUrl ||\n\t\t\tprocess.env.LIOP_NEXUS_URL ||\n\t\t\t\"http://localhost:3000\";\n\t\tconst audience =\n\t\t\toptions?.auth?.audience ||\n\t\t\tprocess.env.LIOP_OAUTH_AUDIENCE ||\n\t\t\t\"urn:liop:mesh:api\";\n\t\tconst scope =\n\t\t\toptions?.auth?.scope ||\n\t\t\tprocess.env.LIOP_OAUTH_SCOPE ||\n\t\t\t\"liop:tools:call liop:tools:list liop:resources:read liop:schema:read liop:mesh:query\";\n\n\t\tthis.oauthToken =\n\t\t\toptions?.auth?.token ||\n\t\t\tprocess.env.LIOP_OAUTH_TOKEN ||\n\t\t\tprocess.env.LIOP_TOKEN;\n\n\t\tif (clientId && clientSecret) {\n\t\t\tconst baseUrl = (nexusUrl || \"http://127.0.0.1:3000\").endsWith(\"/oidc\")\n\t\t\t\t? nexusUrl || \"http://127.0.0.1:3000\"\n\t\t\t\t: `${nexusUrl || \"http://127.0.0.1:3000\"}/oidc`;\n\t\t\tconst tokenEndpoint = `${baseUrl}/token`;\n\n\t\t\tthis.tokenManager = new TokenManager({\n\t\t\t\ttokenEndpoint,\n\t\t\t\tclientId,\n\t\t\t\tclientSecret,\n\t\t\t\taudience,\n\t\t\t\tscopes: scope,\n\t\t\t});\n\n\t\t\ttry {\n\t\t\t\tthis.oauthToken = await this.tokenManager.getToken();\n\t\t\t\tlog.info(\n\t\t\t\t\t\"[LiopClient] Dynamic TokenManager configured and initial token acquired.\",\n\t\t\t\t);\n\t\t\t} catch (err: unknown) {\n\t\t\t\tlog.error(\n\t\t\t\t\t`[LiopClient] Failed to acquire OAuth M2M Token: ${\n\t\t\t\t\t\terr instanceof Error ? err.message : String(err)\n\t\t\t\t\t}`,\n\t\t\t\t);\n\t\t\t\t// In development or when using static local token, allow connection to proceed\n\t\t\t}\n\t\t}\n\n\t\tthis.meshNode = new MeshNode(options?.meshConfig);\n\t\tawait this.meshNode.start();\n\t\tlog.info(\n\t\t\t`[LiopClient] Mesh Node synchronized. PeerID: ${this.meshNode.getPeerId()}`,\n\t\t);\n\n\t\tif (address) {\n\t\t\tconst tokenResolver = async () => {\n\t\t\t\tif (this.tokenManager) {\n\t\t\t\t\treturn await this.tokenManager.getToken();\n\t\t\t\t}\n\t\t\t\treturn this.oauthToken;\n\t\t\t};\n\t\t\tthis.rpcClients.set(\n\t\t\t\t\"static\",\n\t\t\t\tnew LiopRpcClient(address, this.tlsOptions, tokenResolver),\n\t\t\t);\n\t\t\tthis.serverInfo = { name: `LiopServer (${address})`, version: \"1.0.0\" };\n\t\t\tlog.info(`[LiopClient] Static gRPC configured for: ${address}`);\n\t\t} else {\n\t\t\tthis.serverInfo = { name: \"LiopServer (Mesh Alpha)\", version: \"1.0.0\" };\n\t\t}\n\t}\n\n\t/**\n\t * Selects the optimal IP from an array of multiaddrs.\n\t * Prioritizes routable non-loopback IPv4 addresses (e.g. Docker bridge, LAN, WAN)\n\t * over loopback (127.0.0.1) to prevent inter-container connection failures.\n\t */\n\tprivate selectOptimalIp(addrs: string[]): string | null {\n\t\t// Pass 1: Non-loopback, routable IPv4 addresses\n\t\tfor (const maddr of addrs) {\n\t\t\tconst parts = maddr.split(\"/\");\n\t\t\tconst ipIdx = parts.indexOf(\"ip4\");\n\t\t\tif (ipIdx !== -1 && ipIdx + 1 < parts.length) {\n\t\t\t\tconst ip = parts[ipIdx + 1];\n\t\t\t\tif (\n\t\t\t\t\tip !== \"127.0.0.1\" &&\n\t\t\t\t\t!ip.startsWith(\"127.\") &&\n\t\t\t\t\tip !== \"0.0.0.0\" &&\n\t\t\t\t\tip !== \"localhost\"\n\t\t\t\t) {\n\t\t\t\t\treturn ip;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\t// Pass 2: Fallback to loopback if no external IP is announced\n\t\tfor (const maddr of addrs) {\n\t\t\tconst parts = maddr.split(\"/\");\n\t\t\tconst ipIdx = parts.indexOf(\"ip4\");\n\t\t\tif (ipIdx !== -1 && ipIdx + 1 < parts.length) {\n\t\t\t\treturn parts[ipIdx + 1];\n\t\t\t}\n\t\t}\n\n\t\treturn null;\n\t}\n\n\t/**\n\t * Dynamically queries Kademlia DHT to find the optimal PeerID providing the Capability\n\t * and returns the physical gRPC target (host:port) resolved from the provider's manifest.\n\t */\n\tpublic async resolveCapability(toolName: string): Promise<string> {\n\t\tif (!this.meshNode)\n\t\t\tthrow new Error(\n\t\t\t\t\"Client must be connected to Mesh to resolve capabilities.\",\n\t\t\t);\n\n\t\tlog.info(`[LiopClient] Querying Mesh DHT for Provider: ${toolName}...`);\n\t\tconst providers = await this.meshNode.findProviders(toolName);\n\n\t\tif (providers.length === 0) {\n\t\t\tthrow new Error(\n\t\t\t\t`Kademlia DHT found zero providers for capability: ${toolName}`,\n\t\t\t);\n\t\t}\n\n\t\tconst providerId = providers[0];\n\t\tlog.info(`[LiopClient] Identified Alpha Provider PeerID: ${providerId}`);\n\n\t\tlet grpcPort = 50051;\n\t\tconst manifest = await this.meshNode.queryManifest(providerId);\n\t\tif (manifest) {\n\t\t\tgrpcPort = manifest.grpcPort;\n\t\t\tthis.manifests.set(providerId, manifest);\n\t\t\tlog.info(\n\t\t\t\t`[LiopClient] Manifest resolved: gRPC port ${grpcPort}. Cached manifest for PeerID ${providerId}`,\n\t\t\t);\n\t\t}\n\n\t\tconst addrs = await this.meshNode.resolvePeer(providerId);\n\t\tconst optimalIp = this.selectOptimalIp(addrs);\n\t\tif (optimalIp) {\n\t\t\tconst grpcHost = `${optimalIp}:${grpcPort}`;\n\t\t\tlog.info(\n\t\t\t\t`[LiopClient] Translated Multiaddr to optimal gRPC Target: ${grpcHost}`,\n\t\t\t);\n\t\t\treturn grpcHost;\n\t\t}\n\n\t\treturn `127.0.0.1:${grpcPort}`;\n\t}\n\n\t/**\n\t * Probes a remote MCP endpoint using 'server/discover' to negotiate protocol era.\n\t * Falls back to legacy initialize handshake if server/discover fails.\n\t */\n\tpublic async probeServerDiscover(mcpUrl: string): Promise<{\n\t\tera: McpEra;\n\t\tprotocolVersion: string;\n\t\tsupportedVersions: string[];\n\t}> {\n\t\ttry {\n\t\t\tconst headers: Record<string, string> = {\n\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t\"Mcp-Method\": \"server/discover\",\n\t\t\t};\n\t\t\tif (this.oauthToken) {\n\t\t\t\theaders.Authorization = `Bearer ${this.oauthToken}`;\n\t\t\t}\n\n\t\t\tconst res = await fetch(mcpUrl, {\n\t\t\t\tmethod: \"POST\",\n\t\t\t\theaders,\n\t\t\t\tbody: JSON.stringify({\n\t\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\t\tid: 1,\n\t\t\t\t\tmethod: \"server/discover\",\n\t\t\t\t\tparams: {},\n\t\t\t\t}),\n\t\t\t});\n\n\t\t\tif (res.ok) {\n\t\t\t\tconst json = (await res.json()) as {\n\t\t\t\t\tresult?: { supportedVersions?: string[] };\n\t\t\t\t};\n\t\t\t\tconst supported = json.result?.supportedVersions || [];\n\t\t\t\tif (supported.includes(MCP_PROTOCOL_VERSION)) {\n\t\t\t\t\tthis.era = \"modern\";\n\t\t\t\t\tthis.protocolVersion = MCP_PROTOCOL_VERSION;\n\t\t\t\t\treturn {\n\t\t\t\t\t\tera: \"modern\",\n\t\t\t\t\t\tprotocolVersion: MCP_PROTOCOL_VERSION,\n\t\t\t\t\t\tsupportedVersions: supported,\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\t\t} catch (_err) {\n\t\t\t// Ignore discovery network probe failures and fallback to legacy if enabled\n\t\t}\n\n\t\t/** @mcp-legacy Fallback to legacy era. Remove when v1 EOL. */\n\t\tif (MCP_LEGACY_SUPPORT_ENABLED) {\n\t\t\tthis.era = \"legacy\";\n\t\t\tthis.protocolVersion = MCP_PROTOCOL_VERSION_LEGACY;\n\t\t\treturn {\n\t\t\t\tera: \"legacy\",\n\t\t\t\tprotocolVersion: MCP_PROTOCOL_VERSION_LEGACY,\n\t\t\t\tsupportedVersions: [MCP_PROTOCOL_VERSION_LEGACY],\n\t\t\t};\n\t\t}\n\n\t\tthrow new Error(\n\t\t\t\"Server does not support MCP 2026-07-28 and legacy support is disabled.\",\n\t\t);\n\t}\n\n\t/**\n\t * Discovers remote capabilities via the LIOP Manifest Protocol.\n\t * Utilizes a memory cache to avoid redundant network dials against live peers.\n\t */\n\tpublic async discoverTools(\n\t\tforceRefresh = false,\n\t): Promise<{ name: string; description?: string }[]> {\n\t\tif (!this.meshNode) {\n\t\t\tthrow new Error(\"Client must be connected before discovering tools.\");\n\t\t}\n\n\t\tconst discoveryStartTime = Date.now();\n\n\t\tlog.info(\n\t\t\t`[LiopClient] Discovery started (forceRefresh: ${forceRefresh})...`,\n\t\t);\n\t\tconst providerIds = await this.meshNode.discoverManifestProviders();\n\t\tconst tools: { name: string; description?: string }[] = [];\n\t\tconst seenNames = new Set<string>();\n\n\t\tfor (const peerId of providerIds) {\n\t\t\ttry {\n\t\t\t\tlet manifest: LiopManifest | null | undefined = !forceRefresh\n\t\t\t\t\t? this.manifests.get(peerId)\n\t\t\t\t\t: undefined;\n\n\t\t\t\tif (!manifest) {\n\t\t\t\t\tlog.info(`[LiopClient] Querying manifest from: ${peerId}`);\n\t\t\t\t\tmanifest = await this.meshNode.queryManifest(peerId);\n\t\t\t\t\tif (manifest) {\n\t\t\t\t\t\tthis.manifests.set(peerId, manifest);\n\t\t\t\t\t}\n\t\t\t\t} else {\n\t\t\t\t\tlog.info(`[LiopClient] Using cached manifest for: ${peerId}`);\n\t\t\t\t}\n\n\t\t\t\tif (manifest) {\n\t\t\t\t\tfor (const tool of manifest.tools) {\n\t\t\t\t\t\tif (!seenNames.has(tool.name)) {\n\t\t\t\t\t\t\ttools.push({ name: tool.name, description: tool.description });\n\t\t\t\t\t\t\tseenNames.add(tool.name);\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t} catch (err: unknown) {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LiopClient] Error querying manifest from ${peerId}:`,\n\t\t\t\t\terr instanceof Error ? err.message : String(err),\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\n\t\tlog.info(\n\t\t\t`[LiopClient] Discovery finished. Found ${tools.length} unique tools.`,\n\t\t);\n\n\t\t// [Token Economy] Record telemetry for discoverTools\n\t\ttry {\n\t\t\tconst telemetry = TokenTelemetryEngine.getInstance();\n\t\t\tconst toolsPayload = JSON.stringify(tools);\n\t\t\tconst toolsResponsePayload = JSON.stringify({ tools });\n\t\t\ttelemetry.record({\n\t\t\t\ttype: \"tools_list\",\n\t\t\t\tmethod: \"discoverTools\",\n\t\t\t\testimatedInputTokens: telemetry.countTokens(toolsPayload),\n\t\t\t\testimatedOutputTokens: telemetry.countTokens(toolsResponsePayload),\n\t\t\t\tdurationMs: Date.now() - discoveryStartTime,\n\t\t\t});\n\t\t} catch {\n\t\t\t// Telemetry error isolation\n\t\t}\n\n\t\treturn tools;\n\t}\n\n\t/**\n\t * Invokes a tool.\n\t */\n\tpublic async callTool(\n\t\trequest: CallToolRequest,\n\t\t_wasmPayload?: Buffer,\n\t): Promise<CallToolResult> {\n\t\tif (!this.meshNode) {\n\t\t\tthrow new Error(\"Client must be connected before calling tools.\");\n\t\t}\n\n\t\tconst callStartTime = Date.now();\n\t\tconst toolName = request.name;\n\t\tlog.info(`[LiopClient] Resolving Tool: ${toolName}`);\n\n\t\t// [ALPHA-FIX] Bypass DHT discovery if we are already statically connected to a provider (Enterprise/Test mode)\n\t\tlet rpcClient = this.rpcClients.get(\"static\");\n\t\tlet targetClientKey = toolName;\n\n\t\tif (!rpcClient) {\n\t\t\t// 1. If an RPC client was already registered for this toolName, reuse it\n\t\t\tif (this.rpcClients.has(toolName)) {\n\t\t\t\trpcClient = this.rpcClients.get(toolName);\n\t\t\t\ttargetClientKey = toolName;\n\t\t\t}\n\t\t}\n\n\t\tif (!rpcClient) {\n\t\t\t// 2. Fast-path: Check if capability already exists in cached manifests to bypass DHT walk\n\t\t\tlet resolvedHost: string | null = null;\n\t\t\tfor (const [peerId, manifest] of this.manifests.entries()) {\n\t\t\t\tif (manifest.tools.some((t) => t.name === toolName)) {\n\t\t\t\t\t// If we already have a client registered for this peerId, reuse it immediately\n\t\t\t\t\tif (this.rpcClients.has(peerId)) {\n\t\t\t\t\t\trpcClient = this.rpcClients.get(peerId);\n\t\t\t\t\t\ttargetClientKey = peerId;\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\n\t\t\t\t\tconst addrs = await this.meshNode.resolvePeer(peerId);\n\t\t\t\t\tconst optimalIp = this.selectOptimalIp(addrs);\n\t\t\t\t\tif (optimalIp) {\n\t\t\t\t\t\tresolvedHost = `${optimalIp}:${manifest.grpcPort}`;\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LiopClient] Fast-path: Resolved ${toolName} from manifest cache to optimal target ${resolvedHost}`,\n\t\t\t\t\t\t);\n\t\t\t\t\t\ttargetClientKey = peerId;\n\t\t\t\t\t\trpcClient = this.getOrCreateRpcClient(peerId, resolvedHost);\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif (!rpcClient) {\n\t\t\t\tconst dynamicAddress = await this.resolveCapability(toolName);\n\t\t\t\ttargetClientKey = toolName;\n\t\t\t\trpcClient = this.getOrCreateRpcClient(toolName, dynamicAddress);\n\t\t\t}\n\t\t} else {\n\t\t\ttargetClientKey = \"static\";\n\t\t\tlog.info(\n\t\t\t\t`[LiopClient] Using existing static gRPC connection for ${toolName}.`,\n\t\t\t);\n\t\t}\n\n\t\tlog.info(`[LiopClient] Negotiating intent for ${toolName}...`);\n\t\tconst agentDid = this.meshNode\n\t\t\t? `did:liop:${this.meshNode.getPeerId()}`\n\t\t\t: \"did:liop:ephemeral\";\n\t\tconst intentPayload = Buffer.from(`${toolName}:${Date.now()}`);\n\t\tconst proofOfIntent = this.meshNode\n\t\t\t? await this.meshNode.sign(intentPayload)\n\t\t\t: intentPayload;\n\n\t\tlet intentResponse: {\n\t\t\taccepted: boolean;\n\t\t\terror_message: string;\n\t\t\tkyber_public_key: Uint8Array;\n\t\t\tkyberPublicKey: Uint8Array;\n\t\t\tsession_token: string;\n\t\t\tsessionToken: string;\n\t\t};\n\n\t\ttry {\n\t\t\tintentResponse = (await rpcClient.negotiateIntent({\n\t\t\t\tagent_did: agentDid,\n\t\t\t\tcapability_hash: toolName,\n\t\t\t\tproof_of_intent: proofOfIntent,\n\t\t\t})) as unknown as typeof intentResponse;\n\t\t} catch (err: unknown) {\n\t\t\tconst errMsg = err instanceof Error ? err.message : String(err);\n\t\t\tif (\n\t\t\t\tthis.tokenManager &&\n\t\t\t\t(errMsg.includes(\"UNAUTHENTICATED\") ||\n\t\t\t\t\terrMsg.includes(\"Invalid JWT\") ||\n\t\t\t\t\terrMsg.includes(\"timestamp check failed\") ||\n\t\t\t\t\terrMsg.includes(\"expired\"))\n\t\t\t) {\n\t\t\t\tlog.warn(\n\t\t\t\t\t`[LiopClient] Token expired/unauthenticated for ${toolName}. Preemptively refreshing OAuth token and retrying negotiateIntent...`,\n\t\t\t\t);\n\t\t\t\tthis.tokenManager.invalidate();\n\t\t\t\tconst freshToken = await this.tokenManager.getToken();\n\t\t\t\tthis.oauthToken = freshToken;\n\t\t\t\trpcClient.setToken(freshToken);\n\t\t\t\tintentResponse = (await rpcClient.negotiateIntent({\n\t\t\t\t\tagent_did: agentDid,\n\t\t\t\t\tcapability_hash: toolName,\n\t\t\t\t\tproof_of_intent: proofOfIntent,\n\t\t\t\t})) as unknown as typeof intentResponse;\n\t\t\t} else {\n\t\t\t\tthrow err;\n\t\t\t}\n\t\t}\n\n\t\tif (!intentResponse.accepted) {\n\t\t\tif (\n\t\t\t\tthis.tokenManager &&\n\t\t\t\t(intentResponse.error_message?.includes(\"token\") ||\n\t\t\t\t\tintentResponse.error_message?.includes(\"UNAUTHENTICATED\") ||\n\t\t\t\t\tintentResponse.error_message?.includes(\"expired\") ||\n\t\t\t\t\tintentResponse.error_message?.includes(\"timestamp check failed\"))\n\t\t\t) {\n\t\t\t\tlog.warn(\n\t\t\t\t\t`[LiopClient] Intent rejected with auth error: \"${intentResponse.error_message}\". Refreshing token and retrying...`,\n\t\t\t\t);\n\t\t\t\tthis.tokenManager.invalidate();\n\t\t\t\tconst freshToken = await this.tokenManager.getToken();\n\t\t\t\tthis.oauthToken = freshToken;\n\t\t\t\trpcClient.setToken(freshToken);\n\t\t\t\tintentResponse = (await rpcClient.negotiateIntent({\n\t\t\t\t\tagent_did: agentDid,\n\t\t\t\t\tcapability_hash: toolName,\n\t\t\t\t\tproof_of_intent: proofOfIntent,\n\t\t\t\t})) as unknown as typeof intentResponse;\n\t\t\t}\n\t\t\tif (!intentResponse.accepted) {\n\t\t\t\tthrow new Error(\n\t\t\t\t\t`Intent denied by host: ${intentResponse.error_message}`,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\n\t\t// LIOP Robust Field Extraction (Supports both snake_case and camelCase via gRPC-JS)\n\t\tconst publicKey =\n\t\t\tintentResponse.kyber_public_key || intentResponse.kyberPublicKey;\n\t\tconst sessionToken =\n\t\t\tintentResponse.session_token || intentResponse.sessionToken;\n\n\t\tif (!publicKey) {\n\t\t\tlog.info(\n\t\t\t\t\"[LiopClient] Critical Error: Kyber Public Key not found in IntentResponse.\",\n\t\t\t\tintentResponse,\n\t\t\t);\n\t\t\ttry {\n\t\t\t\tpqcHandshakesTotal.inc({\n\t\t\t\t\talgorithm: \"ml-kem-768\",\n\t\t\t\t\tstatus: \"failure\",\n\t\t\t\t});\n\t\t\t} catch {}\n\t\t\tthrow new Error(\n\t\t\t\t\"Handshake failed: Remote host did not provide a valid Kyber Public Key.\",\n\t\t\t);\n\t\t}\n\n\t\t// 2. Post-Quantum Encapsulation (ML-KEM-768)\n\t\tlog.info(\n\t\t\t`[LiopClient] Encapsulating Post-Quantum Shared Secret for ${request.name}...`,\n\t\t);\n\t\tconst pqcStart = performance.now();\n\t\tlet kyberCiphertext: Uint8Array;\n\t\tlet sharedSecret: Uint8Array;\n\t\ttry {\n\t\t\tconst res = await Kyber768Wrapper.encapsulateAsymmetric(publicKey);\n\t\t\tkyberCiphertext = res.ciphertext;\n\t\t\tsharedSecret = res.sharedSecret;\n\t\t\tconst pqcDuration = performance.now() - pqcStart;\n\t\t\tpqcHandshakeDurationMs.observe({ tool: request.name }, pqcDuration);\n\t\t\tpqcHandshakesTotal.inc({\n\t\t\t\talgorithm: \"ml-kem-768\",\n\t\t\t\tstatus: \"success\",\n\t\t\t});\n\t\t} catch (encapError) {\n\t\t\ttry {\n\t\t\t\tpqcHandshakesTotal.inc({\n\t\t\t\t\talgorithm: \"ml-kem-768\",\n\t\t\t\t\tstatus: \"failure\",\n\t\t\t\t});\n\t\t\t} catch {}\n\t\t\tthrow encapError;\n\t\t}\n\n\t\t// 3. Symmetric Sealing (AES-256-GCM)\n\t\tlog.info(`[LiopClient] Sealing WASM Payload and Inputs...`);\n\n\t\tconst _safePayload = _wasmPayload || Buffer.from(\"\");\n\n\t\t// Encrypt WASM binary\n\t\tconst { ciphertext: encryptedWasm, nonce: aesNonce } =\n\t\t\tAesGcmWrapper.encryptPayload(_safePayload, sharedSecret);\n\n\t\t// Encrypt inputs using a fresh random nonce per input to prevent AES-GCM nonce reuse\n\t\tconst encryptedInputs: Record<string, Uint8Array> = {};\n\t\tconst crypto = await import(\"node:crypto\");\n\t\tfor (const [key, value] of Object.entries(request.arguments || {})) {\n\t\t\tconst inputNonce = crypto.randomBytes(12);\n\t\t\tconst cipher = crypto.createCipheriv(\n\t\t\t\t\"aes-256-gcm\",\n\t\t\t\tsharedSecret,\n\t\t\t\tinputNonce,\n\t\t\t);\n\t\t\tconst encrypted = Buffer.concat([\n\t\t\t\tcipher.update(JSON.stringify(value)),\n\t\t\t\tcipher.final(),\n\t\t\t]);\n\t\t\tconst authTag = cipher.getAuthTag();\n\t\t\t// Prepend the 12-byte nonce to the ciphertext\n\t\t\tencryptedInputs[key] = Buffer.concat([inputNonce, encrypted, authTag]);\n\t\t}\n\n\t\t// 4. Assemble and Execute gRPC LogicRequest\n\t\tconst logicRequest: LogicRequest = {\n\t\t\tsession_token: sessionToken,\n\t\t\twasm_binary: encryptedWasm,\n\t\t\tinputs: encryptedInputs,\n\t\t\tpqc_ciphertext: kyberCiphertext,\n\t\t\taes_nonce: aesNonce,\n\t\t};\n\n\t\treturn new Promise((resolve, reject) => {\n\t\t\tconst stream = rpcClient.executeLogic(logicRequest);\n\t\t\tif (!stream) {\n\t\t\t\treject(new Error(\"RPC Client unavailable or failed to create stream.\"));\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tlet resultFulfilled = false;\n\t\t\tlet hasReceivedData = false;\n\n\t\t\tstream.on(\"data\", async (response: LogicResponse) => {\n\t\t\t\tif (resultFulfilled) return;\n\t\t\t\thasReceivedData = true;\n\n\t\t\t\tlog.info(\"[LiopClient] Logic Executed. Verification in progress...\");\n\n\t\t\t\ttry {\n\t\t\t\t\t// Only verify ZK-Receipt if the remote execution succeeded.\n\t\t\t\t\t// If the remote execution failed due to a policy error (e.g. Egress Shield),\n\t\t\t\t\t// the ZK proof is empty and we should bypass validation to propagate the original error.\n\t\t\t\t\tif (!response.is_error) {\n\t\t\t\t\t\tconst isValid = await this.verifier.verifyZkReceipt(\n\t\t\t\t\t\t\t_safePayload,\n\t\t\t\t\t\t\tBuffer.from(response.cryptographic_proof).toString(\"hex\"),\n\t\t\t\t\t\t\tBuffer.from(response.zk_receipt),\n\t\t\t\t\t\t\tBuffer.from(sharedSecret),\n\t\t\t\t\t\t\tresponse.semantic_evidence,\n\t\t\t\t\t\t);\n\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tzkVerificationsTotal.inc({\n\t\t\t\t\t\t\t\tstatus: isValid ? \"valid\" : \"invalid\",\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t} catch {\n\t\t\t\t\t\t\t// Metrics isolation\n\t\t\t\t\t\t}\n\n\t\t\t\t\t\tif (!isValid) {\n\t\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\t\ttoolCallErrorsTotal.inc({\n\t\t\t\t\t\t\t\t\tcapability: toolName,\n\t\t\t\t\t\t\t\t\terror_type: \"zk_verification_failed\",\n\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t} catch {}\n\t\t\t\t\t\t\treject(\n\t\t\t\t\t\t\t\tnew Error(\n\t\t\t\t\t\t\t\t\t\"PROTOCOL INTEGRITY VIOLATION: ZK-Receipt verification failed.\",\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\treturn;\n\t\t\t\t\t\t}\n\t\t\t\t\t} else {\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\ttoolCallErrorsTotal.inc({\n\t\t\t\t\t\t\t\tcapability: toolName,\n\t\t\t\t\t\t\t\terror_type: \"remote_execution_error\",\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t} catch {}\n\t\t\t\t\t}\n\n\t\t\t\t\tresultFulfilled = true;\n\n\t\t\t\t\t// [Token Economy & Wire Telemetry] Record telemetry for callTool\n\t\t\t\t\ttry {\n\t\t\t\t\t\tconst telemetry = TokenTelemetryEngine.getInstance();\n\t\t\t\t\t\tconst inputPayload = JSON.stringify(request.arguments ?? {});\n\t\t\t\t\t\ttelemetry.record({\n\t\t\t\t\t\t\ttype: \"tool_call\",\n\t\t\t\t\t\t\tmethod: \"callTool\",\n\t\t\t\t\t\t\ttoolName,\n\t\t\t\t\t\t\tpeerId:\n\t\t\t\t\t\t\t\ttargetClientKey !== toolName ? targetClientKey : undefined,\n\t\t\t\t\t\t\testimatedInputTokens: telemetry.countTokens(inputPayload),\n\t\t\t\t\t\t\testimatedOutputTokens: telemetry.countTokens(\n\t\t\t\t\t\t\t\tresponse.semantic_evidence,\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\tdurationMs: Date.now() - callStartTime,\n\t\t\t\t\t\t});\n\n\t\t\t\t\t\tconst egressBytes =\n\t\t\t\t\t\t\tBuffer.byteLength(response.semantic_evidence || \"\") +\n\t\t\t\t\t\t\t(response.cryptographic_proof\n\t\t\t\t\t\t\t\t? response.cryptographic_proof.length\n\t\t\t\t\t\t\t\t: 0) +\n\t\t\t\t\t\t\t(response.zk_receipt ? response.zk_receipt.length : 0);\n\t\t\t\t\t\twireEgressBytesTotal.inc({ capability: toolName }, egressBytes);\n\t\t\t\t\t} catch {\n\t\t\t\t\t\t// Telemetry error isolation\n\t\t\t\t\t}\n\n\t\t\t\t\tresolve({\n\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\t\ttext: response.semantic_evidence,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t],\n\t\t\t\t\t\tisError: response.is_error,\n\t\t\t\t\t});\n\t\t\t\t} catch (err) {\n\t\t\t\t\ttry {\n\t\t\t\t\t\ttoolCallErrorsTotal.inc({\n\t\t\t\t\t\t\tcapability: toolName,\n\t\t\t\t\t\t\terror_type: \"verification_exception\",\n\t\t\t\t\t\t});\n\t\t\t\t\t} catch {}\n\t\t\t\t\treject(err);\n\t\t\t\t}\n\t\t\t});\n\n\t\t\tstream.on(\"error\", (err) => {\n\t\t\t\t// Evict faulted client from cache so subsequent requests reconnect cleanly\n\t\t\t\tthis.rpcClients.delete(targetClientKey);\n\t\t\t\tthis.rpcClients.delete(toolName);\n\t\t\t\ttry {\n\t\t\t\t\ttoolCallErrorsTotal.inc({\n\t\t\t\t\t\tcapability: toolName,\n\t\t\t\t\t\terror_type: \"stream_error\",\n\t\t\t\t\t});\n\t\t\t\t} catch {}\n\t\t\t\tif (resultFulfilled) return;\n\t\t\t\tlog.error(\"[LiopClient] Stream Error:\", err);\n\t\t\t\treject(err);\n\t\t\t});\n\n\t\t\tstream.on(\"end\", () => {\n\t\t\t\t// We don't throw here if we already received a response block that is currently\n\t\t\t\t// undergoing ZK Verification in the Piscina worker pool.\n\t\t\t\tif (!hasReceivedData && !resultFulfilled) {\n\t\t\t\t\treject(new Error(\"Logic-on-Origin stream closed without results.\"));\n\t\t\t\t}\n\t\t\t});\n\t\t});\n\t}\n\n\tprivate getOrCreateRpcClient(peerId: string, address: string): LiopRpcClient {\n\t\tlet client = this.rpcClients.get(peerId);\n\t\tif (!client) {\n\t\t\tlet manifest = this.manifests.get(peerId);\n\t\t\tlet realPeerId = peerId;\n\n\t\t\t// If peerId is actually a toolName (which happens when called from callTool),\n\t\t\t// resolve the real PeerID and its manifest from the manifest cache.\n\t\t\tif (!manifest) {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LiopClient] PeerID \"${peerId}\" not found in manifest cache as PeerID. Searching tools in cached manifests...`,\n\t\t\t\t);\n\t\t\t\tfor (const [pId, m] of this.manifests.entries()) {\n\t\t\t\t\tif (m.tools.some((t) => t.name === peerId)) {\n\t\t\t\t\t\tmanifest = m;\n\t\t\t\t\t\trealPeerId = pId;\n\t\t\t\t\t\tlog.info(\n\t\t\t\t\t\t\t`[LiopClient] Resolved tool \"${peerId}\" to provider PeerID \"${pId.slice(-8)}\" from manifest cache.`,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tconst providerName = manifest?.serverInfo?.name?.toLowerCase() || \"\";\n\t\t\tlet envToken: string | undefined;\n\n\t\t\t// 0. Deterministic tokenSlug resolution (highest priority, zero heuristic)\n\t\t\tconst slug = manifest?.tokenSlug;\n\t\t\tif (slug) {\n\t\t\t\tenvToken =\n\t\t\t\t\tprocess.env[`LIOP_TOKEN_${slug}`] ||\n\t\t\t\t\tprocess.env[`LIOP_OAUTH_TOKEN_${slug}`];\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LiopClient] Resolved via tokenSlug \"${slug}\" (LIOP_TOKEN_${slug}) -> found: ${!!envToken}`,\n\t\t\t\t);\n\t\t\t} else {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LiopClient] No tokenSlug available for peer ${realPeerId.slice(-8)}. Available cache keys: ${Array.from(\n\t\t\t\t\t\tthis.manifests.keys(),\n\t\t\t\t\t)\n\t\t\t\t\t\t.map((k) => k.slice(-8))\n\t\t\t\t\t\t.join(\", \")}`,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\t// 1. PeerID-specific resolution: LIOP_TOKEN_<last 8 chars of PeerID in uppercase>\n\t\t\tif (!envToken && realPeerId) {\n\t\t\t\tconst shortId = realPeerId.slice(-8).toUpperCase();\n\t\t\t\tenvToken =\n\t\t\t\t\tprocess.env[`LIOP_TOKEN_${shortId}`] ||\n\t\t\t\t\tprocess.env[`LIOP_OAUTH_TOKEN_${shortId}`];\n\t\t\t}\n\n\t\t\t// 2. Provider-name resolution: LIOP_TOKEN_<CLEAN_PROVIDER_NAME_UPPERCASE>\n\t\t\tif (!envToken && providerName) {\n\t\t\t\tconst cleanName = providerName\n\t\t\t\t\t.toUpperCase()\n\t\t\t\t\t.replace(/[^A-Z0-9_]/g, \"_\");\n\t\t\t\tenvToken =\n\t\t\t\t\tprocess.env[`LIOP_TOKEN_${cleanName}`] ||\n\t\t\t\t\tprocess.env[`LIOP_OAUTH_TOKEN_${cleanName}`];\n\t\t\t}\n\n\t\t\tif (envToken) {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LiopClient] Resolved node-specific token for peer ${realPeerId.slice(-8)} (${providerName || \"unknown\"})`,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tconst tokenResolver = async () => {\n\t\t\t\tif (envToken) return envToken;\n\t\t\t\tif (this.tokenManager) {\n\t\t\t\t\treturn await this.tokenManager.getToken();\n\t\t\t\t}\n\t\t\t\treturn this.oauthToken;\n\t\t\t};\n\n\t\t\tclient = new LiopRpcClient(address, this.tlsOptions, tokenResolver);\n\t\t\tthis.rpcClients.set(peerId, client);\n\t\t}\n\t\treturn client;\n\t}\n\n\t/**\n\t * Reads a specific resource by URI.\n\t * In LIOP, resources can be static definitions or dynamic streams.\n\t */\n\tpublic async readResource(uri: string): Promise<{\n\t\tcontents: Array<{ uri: string; mimeType?: string; text: string }>;\n\t}> {\n\t\tif (!this.meshNode) {\n\t\t\tthrow new Error(\"Client must be connected before reading resources.\");\n\t\t}\n\t\tconst readStartTime = Date.now();\n\t\tlog.info(`[LiopClient] Querying Mesh for Resource: ${uri}...`);\n\n\t\t// We search for the peer hosting the resource in the P2P Mesh\n\t\tconst providers = await this.meshNode.findProviders(uri);\n\t\tif (providers.length === 0) {\n\t\t\tthrow new Error(`No mesh providers found for resource: ${uri}`);\n\t\t}\n\n\t\t// Query the remote peer's manifest\n\t\tconst manifest = await this.meshNode.queryManifest(providers[0]);\n\t\tif (!manifest) {\n\t\t\tthrow new Error(\"Target peer did not return a valid LIOP Manifest.\");\n\t\t}\n\n\t\t// Locate the exact resource metadata\n\t\tconst resourceDef = manifest.resources?.find((r) => r.uri === uri);\n\t\tif (!resourceDef) {\n\t\t\tthrow new Error(`Resource ${uri} not listed in remote manifest.`);\n\t\t}\n\n\t\t// Return the declarative metadata (Logic-Injection is required for actual data extraction)\n\t\tconst result = {\n\t\t\tcontents: [\n\t\t\t\t{\n\t\t\t\t\turi,\n\t\t\t\t\tmimeType: resourceDef.mimeType || \"application/json\",\n\t\t\t\t\ttext: JSON.stringify(resourceDef, null, 2),\n\t\t\t\t},\n\t\t\t],\n\t\t};\n\n\t\t// [Token Economy] Record telemetry for readResource\n\t\ttry {\n\t\t\tconst telemetry = TokenTelemetryEngine.getInstance();\n\t\t\tconst outputPayload = JSON.stringify(result);\n\t\t\ttelemetry.record({\n\t\t\t\ttype: \"resource_read\",\n\t\t\t\tmethod: \"readResource\",\n\t\t\t\ttoolName: uri,\n\t\t\t\tpeerId: providers[0],\n\t\t\t\testimatedInputTokens: telemetry.countTokens(uri),\n\t\t\t\testimatedOutputTokens: telemetry.countTokens(outputPayload),\n\t\t\t\tdurationMs: Date.now() - readStartTime,\n\t\t\t});\n\t\t} catch {\n\t\t\t// Telemetry error isolation\n\t\t}\n\n\t\treturn result;\n\t}\n\n\tpublic getServerInfo(): { name: string; version: string } | undefined {\n\t\treturn this.serverInfo;\n\t}\n\n\t/**\n\t * Destroys the active Mesh Node resources.\n\t */\n\tpublic async close(): Promise<void> {\n\t\tif (this.meshNode) {\n\t\t\tawait this.meshNode.stop();\n\t\t}\n\t}\n}\n"]}

package/dist/chunk-TKRX6CFI.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/rpc/channel-options.ts","../src/rpc/proto.ts","../src/rpc/tls.ts"],"names":["__filename","__dirname","fs","grpc"],"mappings":";;;;;;;;AAUO,IAAM,oBAAA,GAAkE;AAAA,EAC9E,wBAAA,EAA0B,GAAA;AAAA,EAC1B,2BAAA,EAA6B,GAAA;AAAA,EAC7B,qCAAA,EAAuC,CAAA;AAAA,EACvC,8BAAA,EAAgC,EAAA;AAAA,EAChC,iCAAA,EAAmC,EAAA;AAAA,EACnC,qBAAA,EAAuB;AACxB;ACTA,IAAMA,WAAAA,GAAa,aAAA,CAAc,MAAA,CAAA,IAAA,CAAY,GAAG,CAAA;AAChD,IAAMC,UAAAA,GAAY,IAAA,CAAK,OAAA,CAAQD,WAAU,CAAA;AAMzC,IAAM,UAAA,GAAa;AAAA,EAClB,IAAA,CAAK,OAAA,CAAQC,UAAAA,EAAW,4BAA4B,CAAA;AAAA;AAAA,EACpD,IAAA,CAAK,OAAA,CAAQA,UAAAA,EAAW,6BAA6B;AAAA;AACtD,CAAA;AAEA,IAAM,iBAAiB,IAAA,CAAK,OAAA;AAAA,EAC3BA,UAAAA;AAAA,EACA;AACD,CAAA;AAGA,IAAM,UAAA,GAAa,WAAW,IAAA,CAAK,CAAC,MAASC,GAAA,CAAA,UAAA,CAAW,CAAC,CAAC,CAAA,IAAK,cAAA;AAE/D,IAAI,CAAIA,GAAA,CAAA,UAAA,CAAW,UAAU,CAAA,EAAG;AAC/B,EAAA,GAAA,CAAI,KAAA,CAAM,CAAA,+CAAA,EAAkD,UAAU,CAAA,CAAE,CAAA;AACzE;AAMA,IAAM,iBAAA,GAAgC,qBAAS,UAAA,EAAY;AAAA,EAC1D,QAAA,EAAU,IAAA;AAAA,EACV,KAAA,EAAO,MAAA;AAAA,EACP,KAAA,EAAO,MAAA;AAAA,EACP,QAAA,EAAU,IAAA;AAAA,EACV,MAAA,EAAQ;AACT,CAAC,CAAA;AAGM,IAAM,SAAA,GAAiBC,4BAAsB,iBAAiB,CAAA;AAC9D,IAAM,MAAA,GAAS,UAAU,IAAA,CAAK;ACRrC,IAAM,aAAA,GAAgB,MACrB,OAAA,CAAQ,GAAA,CAAI,aAAa,YAAA,IACzB,OAAA,CAAQ,IAAI,gBAAA,KAAqB,MAAA;AAO3B,SAAS,wBACf,GAAA,EACyB;AAEzB,EAAA,IAAI,GAAA,EAAK,aAAa,CAAC,GAAA,CAAI,YAAY,CAAC,GAAA,CAAI,WAAA,EAAa,WAAA,EAAY,EAAG;AACvE,IAAA,MAAM,IAAI,KAAA;AAAA,MACT;AAAA,KACD;AAAA,EACD;AAGA,EAAA,IAAI,KAAK,WAAA,EAAa;AACrB,IAAA,IAAI;AACH,MAAA,MAAM,SAAA,GAAY,GAAA,CAAI,WAAA,CAAY,YAAA,EAAa;AAC/C,MAAA,MAAM,UAAA,GAAa,GAAA,CAAI,WAAA,CAAY,aAAA,EAAc;AACjD,MAAA,MAAM,QAAA,GAAW,GAAA,CAAI,WAAA,CAAY,WAAA,EAAY;AAE7C,MAAA,IAAI,GAAA,CAAI,SAAA,IAAa,CAAC,QAAA,EAAU;AAC/B,QAAA,MAAM,IAAI,KAAA;AAAA,UACT;AAAA,SACD;AAAA,MACD;AAEA,MAAA,OAAY,KAAA,CAAA,iBAAA,CAAkB,SAAA;AAAA,QAC7B,QAAA;AAAA,QACA,CAAC,EAAE,UAAA,EAAY,SAAA,EAAW,WAAA,EAAa,YAAY,CAAA;AAAA,QACnD,OAAA,CAAQ,IAAI,SAAS;AAAA,OACtB;AAAA,IACD,SAAS,KAAA,EAAO;AACf,MAAA,IAAI,eAAc,EAAG;AACpB,QAAA,MAAM,IAAI,KAAA;AAAA,UACT,qFAAqF,KAAK,CAAA;AAAA,SAC3F;AAAA,MACD;AACA,MAAA,GAAA,CAAI,IAAA;AAAA,QACH,4DAA4D,KAAK,CAAA;AAAA,OAClE;AACA,MAAA,OAAY,wBAAkB,cAAA,EAAe;AAAA,IAC9C;AAAA,EACD;AAEA,EAAA,IAAI,CAAC,GAAA,EAAK,SAAA,IAAa,CAAC,KAAK,UAAA,EAAY;AACxC,IAAA,IAAI,eAAc,EAAG;AACpB,MAAA,MAAM,IAAI,KAAA;AAAA,QACT;AAAA,OACD;AAAA,IACD;AACA,IAAA,GAAA,CAAI,IAAA;AAAA,MACH;AAAA,KACD;AACA,IAAA,OAAY,wBAAkB,cAAA,EAAe;AAAA,EAC9C;AAEA,EAAA,IAAI;AACH,IAAA,MAAM,WAAW,GAAA,CAAI,QAAA,GAAc,GAAA,CAAA,YAAA,CAAa,GAAA,CAAI,QAAQ,CAAA,GAAI,IAAA;AAChE,IAAA,MAAM,SAAA,GAAe,GAAA,CAAA,YAAA,CAAa,GAAA,CAAI,SAAS,CAAA;AAC/C,IAAA,MAAM,UAAA,GAAgB,GAAA,CAAA,YAAA,CAAa,GAAA,CAAI,UAAU,CAAA;AAEjD,IAAA,IAAI,GAAA,CAAI,SAAA,IAAa,CAAC,QAAA,EAAU;AAC/B,MAAA,MAAM,IAAI,KAAA;AAAA,QACT;AAAA,OACD;AAAA,IACD;AAEA,IAAA,OAAY,KAAA,CAAA,iBAAA,CAAkB,SAAA;AAAA,MAC7B,QAAA;AAAA,MACA,CAAC,EAAE,UAAA,EAAY,SAAA,EAAW,WAAA,EAAa,YAAY,CAAA;AAAA,MACnD,OAAA,CAAQ,IAAI,SAAS;AAAA,KACtB;AAAA,EACD,SAAS,KAAA,EAAO;AACf,IAAA,IAAI,eAAc,EAAG;AACpB,MAAA,MAAM,IAAI,KAAA;AAAA,QACT,iJAC8D,KAAK,CAAA;AAAA,OACpE;AAAA,IACD;AACA,IAAA,GAAA,CAAI,IAAA;AAAA,MACH,sFAAsF,KAAK,CAAA;AAAA,KAC5F;AACA,IAAA,OAAY,wBAAkB,cAAA,EAAe;AAAA,EAC9C;AACD;AAMO,SAAS,yBACf,GAAA,EAC0B;AAE1B,EAAA,IAAI,KAAK,WAAA,EAAa;AACrB,IAAA,IAAI;AACH,MAAA,MAAM,QAAA,GAAW,GAAA,CAAI,WAAA,CAAY,WAAA,EAAY;AAC7C,MAAA,IAAI,CAAC,QAAA,EAAU;AACd,QAAA,MAAM,IAAI,KAAA;AAAA,UACT;AAAA,SACD;AAAA,MACD;AACA,MAAA,MAAM,SAAA,GAAY,GAAA,CAAI,WAAA,CAAY,YAAA,EAAa;AAC/C,MAAA,MAAM,UAAA,GAAa,GAAA,CAAI,WAAA,CAAY,aAAA,EAAc;AACjD,MAAA,OAAY,KAAA,CAAA,WAAA,CAAY,SAAA,CAAU,QAAA,EAAU,UAAA,EAAY,SAAS,CAAA;AAAA,IAClE,SAAS,KAAA,EAAO;AACf,MAAA,IAAI,eAAc,EAAG;AACpB,QAAA,MAAM,IAAI,KAAA;AAAA,UACT,0EAA0E,KAAK,CAAA;AAAA,SAChF;AAAA,MACD;AACA,MAAA,GAAA,CAAI,IAAA;AAAA,QACH,oEAAoE,KAAK,CAAA;AAAA,OAC1E;AACA,MAAA,OAAY,kBAAY,cAAA,EAAe;AAAA,IACxC;AAAA,EACD;AAEA,EAAA,IAAI,CAAC,KAAK,QAAA,EAAU;AACnB,IAAA,IAAI,eAAc,EAAG;AACpB,MAAA,MAAM,IAAI,KAAA;AAAA,QACT;AAAA,OACD;AAAA,IACD;AACA,IAAA,GAAA,CAAI,IAAA;AAAA,MACH;AAAA,KACD;AACA,IAAA,OAAY,kBAAY,cAAA,EAAe;AAAA,EACxC;AAEA,EAAA,IAAI;AACH,IAAA,MAAM,QAAA,GAAc,GAAA,CAAA,YAAA,CAAa,GAAA,CAAI,QAAQ,CAAA;AAC7C,IAAA,MAAM,YAAY,GAAA,CAAI,SAAA,GAChB,GAAA,CAAA,YAAA,CAAa,GAAA,CAAI,SAAS,CAAA,GAC7B,KAAA,CAAA;AACH,IAAA,MAAM,aAAa,GAAA,CAAI,UAAA,GACjB,GAAA,CAAA,YAAA,CAAa,GAAA,CAAI,UAAU,CAAA,GAC9B,KAAA,CAAA;AAEH,IAAA,OAAY,KAAA,CAAA,WAAA,CAAY,SAAA,CAAU,QAAA,EAAU,UAAA,EAAY,SAAS,CAAA;AAAA,EAClE,SAAS,KAAA,EAAO;AACf,IAAA,IAAI,eAAc,EAAG;AACpB,MAAA,MAAM,IAAI,KAAA;AAAA,QACT,kJAC8D,KAAK,CAAA;AAAA,OACpE;AAAA,IACD;AACA,IAAA,GAAA,CAAI,IAAA;AAAA,MACH,uFAAuF,KAAK,CAAA;AAAA,KAC7F;AACA,IAAA,OAAY,kBAAY,cAAA,EAAe;AAAA,EACxC;AACD","file":"chunk-TKRX6CFI.js","sourcesContent":["// Copyright 2026 Nekzus Solutions and contributors\n// SPDX-License-Identifier: Apache-2.0\n\n/**\n * LIOP Production-Grade gRPC Channel Options\n *\n * Enforces bidirectional symmetry between LiopRpcServer, LiopRpcClient,\n * and gateway proxy channels per NIST SP 800-207 continuous verification.\n * Prevents silent disconnections behind corporate stateful firewalls and NAT gateways.\n */\nexport const GRPC_CHANNEL_OPTIONS: Readonly<Record<string, string | number>> = {\n\t\"grpc.keepalive_time_ms\": 30_000,\n\t\"grpc.keepalive_timeout_ms\": 10_000,\n\t\"grpc.keepalive_permit_without_calls\": 1,\n\t\"grpc.max_send_message_length\": -1,\n\t\"grpc.max_receive_message_length\": -1,\n\t\"grpc.enable_retries\": 1,\n};\n","// Copyright 2026 Nekzus Solutions and contributors\n// SPDX-License-Identifier: Apache-2.0\n\nimport path from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport * as grpc from \"@grpc/grpc-js\";\nimport * as protoLoader from \"@grpc/proto-loader\";\n\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = path.dirname(__filename);\n\nimport * as fs from \"node:fs\";\nimport { log } from \"../utils/logger.js\";\n\n// Selection logic: support both flat dist/ and original src/ structure\nconst PROD_PATHS = [\n\tpath.resolve(__dirname, \"./protocol/liop_core.proto\"), // Flat dist/ (tsup)\n\tpath.resolve(__dirname, \"../protocol/liop_core.proto\"), // dist/rpc/ (tsc)\n];\n\nconst DEV_PROTO_PATH = path.resolve(\n\t__dirname,\n\t\"../../../../protocol/proto/liop_core.proto\",\n);\n\n// Selection logic\nconst PROTO_PATH = PROD_PATHS.find((p) => fs.existsSync(p)) || DEV_PROTO_PATH;\n\nif (!fs.existsSync(PROTO_PATH)) {\n\tlog.error(`[LIOP-Proto] CRITICAL: Proto file not found at ${PROTO_PATH}`);\n}\n\n/**\n * LIOP Proto Loader\n * Loads the core gRPC definitions for the Logic-Injection-on-Origin Protocol.\n */\nconst packageDefinition = protoLoader.loadSync(PROTO_PATH, {\n\tkeepCase: true,\n\tlongs: String,\n\tenums: String,\n\tdefaults: true,\n\toneofs: true,\n});\n\n// biome-ignore lint/suspicious/noExplicitAny: gRPC dynamic loading requires any for the service definition map\nexport const liopProto = grpc.loadPackageDefinition(packageDefinition) as any;\nexport const liopV1 = liopProto.liop.v1;\n","// Copyright 2026 Nekzus Solutions and contributors\n// SPDX-License-Identifier: Apache-2.0\n\n/**\n * LIOP TLS Configuration\n *\n * Provides conditional TLS credential factories for gRPC connections.\n * When TLS options are provided, connections are secured with mutual TLS.\n * Otherwise, falls back to insecure credentials (alpha/development mode).\n *\n * Production Hardening (Phase 128):\n * - When NODE_ENV=production and TLS is configured but certificate loading\n *   fails, the system throws a fatal error instead of silently degrading\n *   to insecure credentials. This prevents MITM/eavesdropping attacks\n *   caused by misconfigured certificate paths going unnoticed.\n * - Reference: gRPC-node official docs — \"Using insecure credentials in\n *   production poses significant security risks including eavesdropping,\n *   MITM attacks, and lack of authentication.\"\n */\n\nimport * as fs from \"node:fs\";\nimport * as grpc from \"@grpc/grpc-js\";\nimport type { CertManager } from \"../security/cert-manager.js\";\nimport { log } from \"../utils/logger.js\";\n\nexport interface LiopTlsOptions {\n\t/** Path to the root CA certificate (PEM format) */\n\trootCert?: string;\n\t/** Path to the server/client certificate (PEM format) */\n\tcertChain?: string;\n\t/** Path to the private key (PEM format) */\n\tprivateKey?: string;\n\t/** Require mutual TLS (mTLS): verify client certificate against root CA */\n\tmutualTls?: boolean;\n\t/** Optional CertManager instance for automated certificate management and hot reloading */\n\tcertManager?: CertManager;\n}\n\nconst isTlsEnforced = () =>\n\tprocess.env.NODE_ENV === \"production\" ||\n\tprocess.env.LIOP_ENFORCE_TLS === \"true\";\n\n/**\n * Creates gRPC server credentials from TLS options.\n * In production or when LIOP_ENFORCE_TLS=true, refuses to fall back to insecure.\n * When mutualTls=true, enforces client certificate authentication against root CA.\n */\nexport function createServerCredentials(\n\ttls?: LiopTlsOptions,\n): grpc.ServerCredentials {\n\t// Mutual TLS requires a root CA certificate to authenticate clients\n\tif (tls?.mutualTls && !tls.rootCert && !tls.certManager?.getRootCert()) {\n\t\tthrow new Error(\n\t\t\t\"[LIOP-TLS] FATAL: Mutual TLS (mTLS) enabled but no root CA certificate (rootCert) provided to verify client certificates.\",\n\t\t);\n\t}\n\n\t// If CertManager is provided, use its in-memory cached buffers\n\tif (tls?.certManager) {\n\t\ttry {\n\t\t\tconst certChain = tls.certManager.getCertChain();\n\t\t\tconst privateKey = tls.certManager.getPrivateKey();\n\t\t\tconst rootCert = tls.certManager.getRootCert();\n\n\t\t\tif (tls.mutualTls && !rootCert) {\n\t\t\t\tthrow new Error(\n\t\t\t\t\t\"[LIOP-TLS] FATAL: Mutual TLS (mTLS) enabled but CertManager has no root CA certificate loaded.\",\n\t\t\t\t);\n\t\t\t}\n\n\t\t\treturn grpc.ServerCredentials.createSsl(\n\t\t\t\trootCert,\n\t\t\t\t[{ cert_chain: certChain, private_key: privateKey }],\n\t\t\t\tBoolean(tls.mutualTls),\n\t\t\t);\n\t\t} catch (error) {\n\t\t\tif (isTlsEnforced()) {\n\t\t\t\tthrow new Error(\n\t\t\t\t\t`[LIOP-TLS] FATAL: CertManager server credential creation failed in enforced mode: ${error}`,\n\t\t\t\t);\n\t\t\t}\n\t\t\tlog.warn(\n\t\t\t\t`[LIOP-TLS] CertManager failed, falling back to insecure: ${error}`,\n\t\t\t);\n\t\t\treturn grpc.ServerCredentials.createInsecure();\n\t\t}\n\t}\n\n\tif (!tls?.certChain || !tls?.privateKey) {\n\t\tif (isTlsEnforced()) {\n\t\t\tthrow new Error(\n\t\t\t\t\"[LIOP-TLS] FATAL: TLS certificates required in production or when LIOP_ENFORCE_TLS=true.\",\n\t\t\t);\n\t\t}\n\t\tlog.warn(\n\t\t\t\"[LIOP-TLS] No TLS certificates configured — using insecure server credentials\",\n\t\t);\n\t\treturn grpc.ServerCredentials.createInsecure();\n\t}\n\n\ttry {\n\t\tconst rootCert = tls.rootCert ? fs.readFileSync(tls.rootCert) : null;\n\t\tconst certChain = fs.readFileSync(tls.certChain);\n\t\tconst privateKey = fs.readFileSync(tls.privateKey);\n\n\t\tif (tls.mutualTls && !rootCert) {\n\t\t\tthrow new Error(\n\t\t\t\t\"[LIOP-TLS] FATAL: Mutual TLS (mTLS) enabled but no root CA certificate (rootCert) provided to verify client certificates.\",\n\t\t\t);\n\t\t}\n\n\t\treturn grpc.ServerCredentials.createSsl(\n\t\t\trootCert,\n\t\t\t[{ cert_chain: certChain, private_key: privateKey }],\n\t\t\tBoolean(tls.mutualTls),\n\t\t);\n\t} catch (error) {\n\t\tif (isTlsEnforced()) {\n\t\t\tthrow new Error(\n\t\t\t\t`[LIOP-TLS] FATAL: Server certificate loading failed in production or enforced mode. ` +\n\t\t\t\t\t`Refusing insecure fallback to prevent MITM/eavesdropping: ${error}`,\n\t\t\t);\n\t\t}\n\t\tlog.warn(\n\t\t\t`[LIOP-TLS] Server certificate loading failed, falling back to insecure (dev mode): ${error}`,\n\t\t);\n\t\treturn grpc.ServerCredentials.createInsecure();\n\t}\n}\n\n/**\n * Creates gRPC channel credentials from TLS options.\n * In production or when LIOP_ENFORCE_TLS=true, refuses to fall back to insecure.\n */\nexport function createChannelCredentials(\n\ttls?: LiopTlsOptions,\n): grpc.ChannelCredentials {\n\t// If CertManager is provided, use its in-memory cached credentials\n\tif (tls?.certManager) {\n\t\ttry {\n\t\t\tconst rootCert = tls.certManager.getRootCert();\n\t\t\tif (!rootCert) {\n\t\t\t\tthrow new Error(\n\t\t\t\t\t\"[LIOP-TLS] FATAL: Channel TLS requires a root CA certificate in CertManager.\",\n\t\t\t\t);\n\t\t\t}\n\t\t\tconst certChain = tls.certManager.getCertChain();\n\t\t\tconst privateKey = tls.certManager.getPrivateKey();\n\t\t\treturn grpc.credentials.createSsl(rootCert, privateKey, certChain);\n\t\t} catch (error) {\n\t\t\tif (isTlsEnforced()) {\n\t\t\t\tthrow new Error(\n\t\t\t\t\t`[LIOP-TLS] FATAL: Channel certificate loading failed in enforced mode: ${error}`,\n\t\t\t\t);\n\t\t\t}\n\t\t\tlog.warn(\n\t\t\t\t`[LIOP-TLS] Channel CertManager failed, falling back to insecure: ${error}`,\n\t\t\t);\n\t\t\treturn grpc.credentials.createInsecure();\n\t\t}\n\t}\n\n\tif (!tls?.rootCert) {\n\t\tif (isTlsEnforced()) {\n\t\t\tthrow new Error(\n\t\t\t\t\"[LIOP-TLS] FATAL: TLS root certificate required in production or when LIOP_ENFORCE_TLS=true.\",\n\t\t\t);\n\t\t}\n\t\tlog.warn(\n\t\t\t\"[LIOP-TLS] No TLS root certificate configured — using insecure channel credentials\",\n\t\t);\n\t\treturn grpc.credentials.createInsecure();\n\t}\n\n\ttry {\n\t\tconst rootCert = fs.readFileSync(tls.rootCert);\n\t\tconst certChain = tls.certChain\n\t\t\t? fs.readFileSync(tls.certChain)\n\t\t\t: undefined;\n\t\tconst privateKey = tls.privateKey\n\t\t\t? fs.readFileSync(tls.privateKey)\n\t\t\t: undefined;\n\n\t\treturn grpc.credentials.createSsl(rootCert, privateKey, certChain);\n\t} catch (error) {\n\t\tif (isTlsEnforced()) {\n\t\t\tthrow new Error(\n\t\t\t\t`[LIOP-TLS] FATAL: Channel certificate loading failed in production or enforced mode. ` +\n\t\t\t\t\t`Refusing insecure fallback to prevent MITM/eavesdropping: ${error}`,\n\t\t\t);\n\t\t}\n\t\tlog.warn(\n\t\t\t`[LIOP-TLS] Channel certificate loading failed, falling back to insecure (dev mode): ${error}`,\n\t\t);\n\t\treturn grpc.credentials.createInsecure();\n\t}\n}\n"]}