@zhin.js/a2a 3.0.13 → 3.0.15

package/lib/workroom-remote-transport.js

@@ -0,0 +1,429 @@
+import { createHash } from 'node:crypto';
+import { lookup } from 'node:dns/promises';
+import * as http from 'node:http';
+import * as https from 'node:https';
+import { isIP } from 'node:net';
+// Keep the Host runtime dependency-neutral while the literal type remains
+// checked against the Agent-owned Workroom protocol contract at compile time.
+const WORKROOM_A2A_EXTENSION_URI_VALUE = 'https://zhin.dev/extensions/workroom-executor/v1';
+/**
+ * Fixed-generation HTTP implementation of the Workroom A2A extension. It
+ * transports immutable envelopes and typed poll snapshots only; Task state
+ * remains owned by the local Workroom Kernel.
+ */
+export class WorkroomA2aHttpRemoteTransport {
+    #authRegistry;
+    #callbackUrl;
+    #bindings;
+    #network;
+    #maxResponseBytes;
+    constructor(options) {
+        if (!options || typeof options !== 'object' || Array.isArray(options)) {
+            throw new Error('Workroom A2A remote transport options must be an object');
+        }
+        this.#authRegistry = options.authRegistry;
+        this.#callbackUrl = canonicalUrl(options.callbackUrl, 'callbackUrl');
+        this.#network = options.network ?? new NodeWorkroomA2aPinnedNetwork();
+        this.#maxResponseBytes = positiveInteger(options.maxResponseBytes ?? 1_048_576, 'maxResponseBytes');
+        if (!Array.isArray(options.bindings) || options.bindings.length === 0) {
+            throw new Error('Workroom A2A remote transport requires endpoint bindings');
+        }
+        const bindings = new Map();
+        for (const input of options.bindings) {
+            exactKeys(input, [
+                'endpointId', 'cardDigest', 'authBindingId', 'dispatchUrl', 'pollUrl',
+                'credential', 'authority', 'enabled',
+            ], 'remote binding');
+            const endpointId = text(input.endpointId, 'endpointId');
+            if (bindings.has(endpointId))
+                throw new Error(`Duplicate Workroom A2A endpoint ${endpointId}`);
+            const callbackAuthority = options.authRegistry.snapshot.bindings.find(candidate => candidate.endpointId === endpointId);
+            if (!callbackAuthority
+                || callbackAuthority.cardDigest !== input.cardDigest
+                || callbackAuthority.authBindingId !== input.authBindingId) {
+                throw new Error(`Workroom A2A endpoint ${endpointId} has no exact callback authority`);
+            }
+            const dispatchUrl = trustedDestinationUrl(input.dispatchUrl, 'dispatchUrl', callbackAuthority.trustDomain);
+            const pollUrl = trustedDestinationUrl(input.pollUrl, 'pollUrl', callbackAuthority.trustDomain);
+            if (new URL(dispatchUrl).origin !== new URL(pollUrl).origin) {
+                throw new Error(`Workroom A2A endpoint ${endpointId} dispatch/poll origin drift`);
+            }
+            const credential = resolveCredential(input.credential, options.secureCredentialProvider);
+            const authority = input.authority === undefined
+                ? undefined
+                : compileEndpointAuthority(input.authority, callbackAuthority, dispatchUrl, pollUrl);
+            bindings.set(endpointId, Object.freeze({
+                endpointId,
+                cardDigest: digest(input.cardDigest, 'cardDigest'),
+                authBindingId: text(input.authBindingId, 'authBindingId'),
+                dispatchUrl,
+                pollUrl,
+                authorization: `Bearer ${credential}`,
+                enabled: boolean(input.enabled, 'enabled'),
+                ...(authority === undefined ? {} : { authority }),
+            }));
+        }
+        this.#bindings = bindings;
+    }
+    resolve(endpointId) {
+        const binding = this.#bindings.get(text(endpointId, 'endpointId'));
+        return binding?.enabled ? binding.authority : undefined;
+    }
+    async dispatch(item, signal, governedBody) {
+        signal.throwIfAborted();
+        if (!governedBody) {
+            throw new Error('Workroom A2A governed disclosure body is unavailable');
+        }
+        const binding = this.#binding(item.envelope.endpoint.id, item.envelope.endpoint.cardDigest, item.envelope.endpoint.authBindingId);
+        const response = await this.#request(binding.dispatchUrl, binding.authorization, {
+            version: 1,
+            callback: {
+                url: this.#callbackUrl,
+                authorization: this.#authRegistry.callbackAuthorization(binding.endpointId),
+            },
+            item,
+            governedPayload: {
+                version: 1,
+                manifestDigest: item.envelope.disclosureManifest.manifest.digest,
+                mediaType: 'application/octet-stream',
+                encoding: 'base64',
+                body: Buffer.from(governedBody).toString('base64'),
+            },
+        }, signal);
+        if (response.status >= 400 && response.status < 500) {
+            return Object.freeze({
+                outcome: 'failed',
+                receiptId: `workroom-http-rejected:v1:${encodeURIComponent(item.dispatchId)}:${response.status}`,
+                reason: `remote_http_${response.status}`,
+            });
+        }
+        if (!response.ok)
+            throw new Error(`Workroom A2A dispatch HTTP ${response.status}`);
+        const value = await this.#json(response, 'dispatch receipt');
+        exactKeys(value, ['version', 'receiptId', 'remoteTaskId', 'remoteContextId'], 'dispatch receipt');
+        if (value.version !== 1)
+            throw new Error('Workroom A2A dispatch receipt version is unsupported');
+        return Object.freeze({
+            outcome: 'delivered',
+            receiptId: text(value.receiptId, 'receiptId'),
+            remoteTaskId: text(value.remoteTaskId, 'remoteTaskId'),
+            remoteContextId: text(value.remoteContextId, 'remoteContextId'),
+        });
+    }
+    async poll(request, signal) {
+        signal.throwIfAborted();
+        const binding = this.#binding(request.endpointId, request.cardDigest, request.authBindingId);
+        const response = await this.#request(binding.pollUrl, binding.authorization, request, signal);
+        if (!response.ok)
+            throw new Error(`Workroom A2A poll HTTP ${response.status}`);
+        return await this.#json(response, 'poll snapshot');
+    }
+    #binding(endpointId, cardDigest, authBindingId) {
+        const binding = this.#bindings.get(endpointId);
+        if (!binding || !binding.enabled
+            || binding.cardDigest !== cardDigest
+            || binding.authBindingId !== authBindingId) {
+            throw new Error('Workroom A2A endpoint authority does not match the active transport generation');
+        }
+        return binding;
+    }
+    async #request(url, authorization, body, signal) {
+        signal.throwIfAborted();
+        const parsed = new URL(url);
+        const addresses = isIP(parsed.hostname)
+            ? [{ address: parsed.hostname, family: isIP(parsed.hostname) }]
+            : await this.#network.resolve(parsed.hostname);
+        if (addresses.length === 0) {
+            throw new Error(`Workroom A2A DNS returned no address for ${parsed.hostname}`);
+        }
+        const loopbackDestination = isLoopbackHostname(parsed.hostname);
+        for (const entry of addresses) {
+            if ((entry.family !== 4 && entry.family !== 6) || isIP(entry.address) !== entry.family) {
+                throw new Error(`Workroom A2A DNS returned an invalid address for ${parsed.hostname}`);
+            }
+            if (isBlockedIpAddress(entry.address)
+                && !(loopbackDestination && isLoopbackAddress(entry.address))) {
+                throw new Error(`Workroom A2A DNS target ${entry.address} is private or dangerous`);
+            }
+        }
+        const selected = addresses[0];
+        return await this.#network.request({
+            url: parsed,
+            address: selected.address,
+            family: selected.family,
+            headers: Object.freeze({
+                authorization,
+                'content-type': 'application/json',
+                'x-zhin-workroom-extension': 'https://zhin.dev/extensions/workroom-executor/v1',
+            }),
+            body: JSON.stringify(body),
+            signal,
+            maxResponseBytes: this.#maxResponseBytes,
+        });
+    }
+    async #json(response, label) {
+        const declared = response.headers.get('content-length');
+        if (declared !== null && Number(declared) > this.#maxResponseBytes) {
+            await response.body?.cancel();
+            throw new Error(`Workroom A2A ${label} exceeds ${this.#maxResponseBytes} bytes`);
+        }
+        if (!response.body)
+            throw new Error(`Workroom A2A ${label} has no response body`);
+        const reader = response.body.getReader();
+        const chunks = [];
+        let total = 0;
+        for (;;) {
+            const chunk = await reader.read();
+            if (chunk.done)
+                break;
+            total += chunk.value.byteLength;
+            if (total > this.#maxResponseBytes) {
+                await reader.cancel();
+                throw new Error(`Workroom A2A ${label} exceeds ${this.#maxResponseBytes} bytes`);
+            }
+            chunks.push(chunk.value);
+        }
+        const bytes = new Uint8Array(total);
+        let offset = 0;
+        for (const chunk of chunks) {
+            bytes.set(chunk, offset);
+            offset += chunk.byteLength;
+        }
+        let value;
+        try {
+            value = JSON.parse(new TextDecoder().decode(bytes));
+        }
+        catch (error) {
+            throw new Error(`Workroom A2A ${label} is not valid JSON`, { cause: error });
+        }
+        if (!value || typeof value !== 'object' || Array.isArray(value)) {
+            throw new Error(`Workroom A2A ${label} must be an object`);
+        }
+        return value;
+    }
+}
+class NodeWorkroomA2aPinnedNetwork {
+    async resolve(hostname) {
+        const addresses = await lookup(hostname, { all: true, verbatim: true });
+        return addresses.map(entry => Object.freeze({
+            address: entry.address,
+            family: entry.family,
+        }));
+    }
+    request(input) {
+        const requester = input.url.protocol === 'https:' ? https : http;
+        return new Promise((resolve, reject) => {
+            const request = requester.request({
+                protocol: input.url.protocol,
+                hostname: input.address,
+                family: input.family,
+                port: input.url.port || undefined,
+                path: `${input.url.pathname}${input.url.search}`,
+                method: 'POST',
+                headers: {
+                    ...input.headers,
+                    Host: input.url.host,
+                    'Accept-Encoding': 'identity',
+                    'Content-Length': String(Buffer.byteLength(input.body)),
+                },
+                signal: input.signal,
+                ...(input.url.protocol === 'https:' && !isIP(input.url.hostname)
+                    ? { servername: input.url.hostname }
+                    : {}),
+            }, response => {
+                const chunks = [];
+                let size = 0;
+                response.on('data', (chunk) => {
+                    const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+                    size += buffer.length;
+                    if (size > input.maxResponseBytes) {
+                        response.destroy(new Error(`Workroom A2A response exceeds ${input.maxResponseBytes} bytes`));
+                        return;
+                    }
+                    chunks.push(buffer);
+                });
+                response.once('error', reject);
+                response.once('end', () => resolve(new Response(Buffer.concat(chunks), {
+                    status: response.statusCode ?? 500,
+                    statusText: response.statusMessage,
+                    headers: response.headers,
+                })));
+            });
+            request.once('error', reject);
+            request.end(input.body);
+        });
+    }
+}
+function compileEndpointAuthority(input, callback, dispatchUrl, pollUrl) {
+    exactKeys(input, [
+        'workroomExtension', 'idempotentDispatch', 'typedCompletionEnvelope',
+        'workspaceProviders',
+    ], 'remote endpoint authority');
+    if (input.workroomExtension !== WORKROOM_A2A_EXTENSION_URI_VALUE
+        || input.idempotentDispatch !== true
+        || input.typedCompletionEnvelope !== true) {
+        throw new Error('Workroom A2A remote endpoint authority lacks the v1 execution contract');
+    }
+    const expectedExtensionDigest = `sha256:${createHash('sha256')
+        .update(WORKROOM_A2A_EXTENSION_URI_VALUE).digest('hex')}`;
+    if (callback.extensionDigest !== expectedExtensionDigest) {
+        throw new Error('Workroom A2A remote endpoint extension digest drift');
+    }
+    if (!Array.isArray(input.workspaceProviders) || input.workspaceProviders.length === 0) {
+        throw new Error('Workroom A2A remote endpoint requires Workspace providers');
+    }
+    const workspaceProviders = [...new Set(input.workspaceProviders.map(provider => text(provider, 'workspaceProvider')))].sort((left, right) => left.localeCompare(right));
+    if (workspaceProviders.length !== input.workspaceProviders.length) {
+        throw new Error('Workroom A2A remote endpoint Workspace providers contain duplicates');
+    }
+    const transportProjection = {
+        version: 1,
+        generation: callback.generation,
+        endpointId: callback.endpointId,
+        cardDigest: callback.cardDigest,
+        authBindingId: callback.authBindingId,
+        extensionDigest: callback.extensionDigest,
+        credentialIdDigest: callback.credentialIdDigest,
+        dispatchUrl,
+        pollUrl,
+    };
+    return Object.freeze({
+        generation: callback.generation,
+        transportBindingDigest: `sha256:${createHash('sha256')
+            .update(JSON.stringify(transportProjection)).digest('hex')}`,
+        endpoint: Object.freeze({
+            id: callback.endpointId,
+            owner: callback.tenantId,
+            cardDigest: callback.cardDigest,
+            authBindingId: callback.authBindingId,
+            workroomExtension: WORKROOM_A2A_EXTENSION_URI_VALUE,
+            idempotentDispatch: true,
+            typedCompletionEnvelope: true,
+            workspaceProviders: Object.freeze(workspaceProviders),
+        }),
+    });
+}
+function resolveCredential(reference, provider) {
+    if (!reference || typeof reference !== 'object' || Array.isArray(reference)) {
+        throw new Error('Workroom A2A remote credential reference must be an object');
+    }
+    if (reference.source === 'config') {
+        exactKeys(reference, ['source', 'value'], 'remote config credential');
+        return credential(reference.value);
+    }
+    if (reference.source === 'secure_provider') {
+        exactKeys(reference, ['source', 'secretRef'], 'remote secure credential');
+        const secretRef = text(reference.secretRef, 'secretRef');
+        if (!provider)
+            throw new Error('Workroom A2A remote secure credential provider is required');
+        return credential(provider.resolve(secretRef));
+    }
+    throw new Error('Workroom A2A remote credential source is unsupported');
+}
+function canonicalUrl(value, field) {
+    const raw = text(value, field);
+    let url;
+    try {
+        url = new URL(raw);
+    }
+    catch (error) {
+        throw new Error(`Workroom A2A ${field} is not a valid URL`, { cause: error });
+    }
+    const loopback = url.hostname === '127.0.0.1' || url.hostname === 'localhost' || url.hostname === '::1';
+    if (url.protocol !== 'https:' && !(url.protocol === 'http:' && loopback)) {
+        throw new Error(`Workroom A2A ${field} must use HTTPS or loopback HTTP`);
+    }
+    if (url.username || url.password || url.hash) {
+        throw new Error(`Workroom A2A ${field} must not embed credentials or fragments`);
+    }
+    return url.toString();
+}
+function trustedDestinationUrl(value, field, trustDomainValue) {
+    const canonical = canonicalUrl(value, field);
+    const url = new URL(canonical);
+    const trustDomain = text(trustDomainValue, 'trustDomain').toLowerCase();
+    if (url.hostname.toLowerCase() !== trustDomain) {
+        throw new Error(`Workroom A2A ${field} host is outside the trusted destination`);
+    }
+    const loopback = ['127.0.0.1', 'localhost', '::1'].includes(url.hostname);
+    if (url.protocol === 'https:' && url.port && url.port !== '443') {
+        throw new Error(`Workroom A2A ${field} uses an unapproved HTTPS port`);
+    }
+    if (url.protocol === 'http:' && !loopback) {
+        throw new Error(`Workroom A2A ${field} uses non-loopback HTTP`);
+    }
+    if (isIP(url.hostname) && isBlockedIpAddress(url.hostname) && !loopback) {
+        throw new Error(`Workroom A2A ${field} host is private or dangerous`);
+    }
+    return canonical;
+}
+function isLoopbackHostname(hostname) {
+    return ['127.0.0.1', 'localhost', '::1'].includes(hostname.toLowerCase());
+}
+function isLoopbackAddress(address) {
+    const normalized = address.toLowerCase();
+    return normalized === '::1' || normalized.startsWith('127.');
+}
+function isBlockedIpAddress(address) {
+    const normalized = address.toLowerCase().replace(/^\[|\]$/gu, '');
+    if (isIP(normalized) === 4) {
+        const [a, b] = normalized.split('.').map(Number);
+        return a === 0
+            || a === 10
+            || a === 127
+            || (a === 100 && b >= 64 && b <= 127)
+            || (a === 169 && b === 254)
+            || (a === 172 && b >= 16 && b <= 31)
+            || (a === 192 && b === 0)
+            || (a === 192 && b === 168)
+            || (a === 198 && (b === 18 || b === 19))
+            || a >= 224;
+    }
+    if (isIP(normalized) === 6) {
+        if (normalized === '::' || normalized === '::1')
+            return true;
+        const mapped = /^::ffff:(\d+\.\d+\.\d+\.\d+)$/iu.exec(normalized)?.[1];
+        if (mapped)
+            return isBlockedIpAddress(mapped);
+        return /^(?:fc|fd)/iu.test(normalized)
+            || /^fe[89ab]/iu.test(normalized)
+            || /^ff/iu.test(normalized);
+    }
+    return true;
+}
+function exactKeys(value, keys, label) {
+    const unexpected = Object.keys(value).find(key => !keys.includes(key));
+    if (unexpected)
+        throw new Error(`Workroom A2A ${label} contains unsupported field ${unexpected}`);
+}
+function text(value, field) {
+    if (typeof value !== 'string' || !value.trim())
+        throw new Error(`Workroom A2A ${field} is required`);
+    if (/\r|\n/u.test(value))
+        throw new Error(`Workroom A2A ${field} contains control characters`);
+    return value.trim();
+}
+function credential(value) {
+    const result = text(value, 'credential');
+    if (result.length > 8_192)
+        throw new Error('Workroom A2A credential is too large');
+    return result;
+}
+function digest(value, field) {
+    const result = text(value, field);
+    if (!/^sha256:[a-f0-9]{64}$/u.test(result))
+        throw new Error(`Workroom A2A ${field} is invalid`);
+    return result;
+}
+function boolean(value, field) {
+    if (typeof value !== 'boolean')
+        throw new Error(`Workroom A2A ${field} must be boolean`);
+    return value;
+}
+function positiveInteger(value, field) {
+    if (!Number.isSafeInteger(value) || Number(value) < 1) {
+        throw new Error(`Workroom A2A ${field} must be a positive safe integer`);
+    }
+    return Number(value);
+}
+//# sourceMappingURL=workroom-remote-transport.js.map

package/lib/workroom-remote-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-remote-transport.js","sourceRoot":"","sources":["../src/workroom-remote-transport.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAQhC,0EAA0E;AAC1E,8EAA8E;AAC9E,MAAM,gCAAgC,GACpC,kDAAkD,CAAC;AA2DrD;;;;GAIG;AACH,MAAM,OAAO,8BAA8B;IAEhC,aAAa,CAA0B;IACvC,YAAY,CAAS;IACrB,SAAS,CAA6C;IACtD,QAAQ,CAA+B;IACvC,iBAAiB,CAAS;IAEnC,YAAY,OAA8C;QACxD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;QAC1C,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACrE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,4BAA4B,EAAE,CAAC;QACtE,IAAI,CAAC,iBAAiB,GAAG,eAAe,CAAC,OAAO,CAAC,gBAAgB,IAAI,SAAS,EAAE,kBAAkB,CAAC,CAAC;QACpG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAiC,CAAC;QAC1D,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrC,SAAS,CAAC,KAAK,EAAE;gBACf,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS;gBACrE,YAAY,EAAE,WAAW,EAAE,SAAS;aACrC,EAAE,gBAAgB,CAAC,CAAC;YACrB,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;YACxD,IAAI,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,UAAU,EAAE,CAAC,CAAC;YAC/F,MAAM,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CACnE,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,KAAK,UAAU,CACjD,CAAC;YACF,IAAI,CAAC,iBAAiB;mBACjB,iBAAiB,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;mBACjD,iBAAiB,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CAAC,yBAAyB,UAAU,kCAAkC,CAAC,CAAC;YACzF,CAAC;YACD,MAAM,WAAW,GAAG,qBAAqB,CACvC,KAAK,CAAC,WAAW,EACjB,aAAa,EACb,iBAAiB,CAAC,WAAW,CAC9B,CAAC;YACF,MAAM,OAAO,GAAG,qBAAqB,CACnC,KAAK,CAAC,OAAO,EACb,SAAS,EACT,iBAAiB,CAAC,WAAW,CAC9B,CAAC;YACF,IAAI,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;gBAC5D,MAAM,IAAI,KAAK,CAAC,yBAAyB,UAAU,6BAA6B,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC;YACzF,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,KAAK,SAAS;gBAC7C,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,wBAAwB,CACtB,KAAK,CAAC,SAAS,EACf,iBAAiB,EACjB,WAAW,EACX,OAAO,CACR,CAAC;YACN,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC;gBACrC,UAAU;gBACV,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC;gBAClD,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,CAAC;gBACzD,WAAW;gBACX,OAAO;gBACP,aAAa,EAAE,UAAU,UAAU,EAAE;gBACrC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC;gBAC1C,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;aAClD,CAAC,CAAC,CAAC;QACN,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC5B,CAAC;IAED,OAAO,CAAC,UAAkB;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;QACnE,OAAO,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,IAAsC,EACtC,MAAmB,EACnB,YAAyB;QAEzB,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAC3B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EACzB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,EACjC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CACrC,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,aAAa,EAAE;YAC/E,OAAO,EAAE,CAAC;YACV,QAAQ,EAAE;gBACR,GAAG,EAAE,IAAI,CAAC,YAAY;gBACtB,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,qBAAqB,CAAC,OAAO,CAAC,UAAU,CAAC;aAC5E;YACD,IAAI;YACJ,eAAe,EAAE;gBACf,OAAO,EAAE,CAAC;gBACV,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,QAAQ,CAAC,MAAM;gBAChE,SAAS,EAAE,0BAA0B;gBACrC,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;aACnD;SACF,EAAE,MAAM,CAAC,CAAC;QACX,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACpD,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,OAAO,EAAE,QAAQ;gBACjB,SAAS,EAAE,6BAA6B,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE;gBAChG,MAAM,EAAE,eAAe,QAAQ,CAAC,MAAM,EAAE;aACzC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QAC7D,SAAS,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,iBAAiB,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAClG,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QACjG,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,WAAW;YACpB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC;YAC7C,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC;YACtD,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,iBAAiB,CAAC;SAChE,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CACR,OAAkC,EAClC,MAAmB;QAEnB,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;QAC7F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9F,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/E,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,eAAe,CAA0C,CAAC;IAC9F,CAAC;IAED,QAAQ,CAAC,UAAkB,EAAE,UAAkB,EAAE,aAAqB;QACpE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO;eAC3B,OAAO,CAAC,UAAU,KAAK,UAAU;eACjC,OAAO,CAAC,aAAa,KAAK,aAAa,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;QACpG,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,GAAW,EACX,aAAqB,EACrB,IAAa,EACb,MAAmB;QAEnB,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YACrC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAU,EAAE,CAAC;YACxE,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,4CAA4C,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChE,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9B,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;gBACvF,MAAM,IAAI,KAAK,CAAC,oDAAoD,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YACzF,CAAC;YACD,IAAI,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC;mBAChC,CAAC,CAAC,mBAAmB,IAAI,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAChE,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC;QAC/B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YACjC,GAAG,EAAE,MAAM;YACX,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;gBACrB,aAAa;gBACb,cAAc,EAAE,kBAAkB;gBAClC,2BAA2B,EAAE,kDAAkD;aAChF,CAAC;YACF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM;YACN,gBAAgB,EAAE,IAAI,CAAC,iBAAiB;SACzC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,QAAkB,EAAE,KAAa;QAC3C,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACxD,IAAI,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACnE,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,YAAY,IAAI,CAAC,iBAAiB,QAAQ,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,uBAAuB,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,KAAK,CAAC,IAAI;gBAAE,MAAM;YACtB,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;YAChC,IAAI,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACnC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,YAAY,IAAI,CAAC,iBAAiB,QAAQ,CAAC,CAAC;YACnF,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;QAC7B,CAAC;QACD,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,oBAAoB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,oBAAoB,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,KAAgC,CAAC;IAC1C,CAAC;CACF;AAED,MAAM,4BAA4B;IAChC,KAAK,CAAC,OAAO,CAAC,QAAgB;QAC5B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;YAC1C,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,MAAe;SAC9B,CAAC,CAAC,CAAC;IACN,CAAC;IAED,OAAO,CAAC,KAA+B;QACrC,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACjE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;gBAChC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ;gBAC5B,QAAQ,EAAE,KAAK,CAAC,OAAO;gBACvB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,SAAS;gBACjC,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE;gBAChD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,GAAG,KAAK,CAAC,OAAO;oBAChB,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI;oBACpB,iBAAiB,EAAE,UAAU;oBAC7B,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;iBACxD;gBACD,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAC9D,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE;oBACpC,CAAC,CAAC,EAAE,CAAC;aACR,EAAE,QAAQ,CAAC,EAAE;gBACZ,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;gBACb,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;oBAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACnE,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC;oBACtB,IAAI,IAAI,GAAG,KAAK,CAAC,gBAAgB,EAAE,CAAC;wBAClC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CACxB,iCAAiC,KAAK,CAAC,gBAAgB,QAAQ,CAChE,CAAC,CAAC;wBACH,OAAO;oBACT,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACtB,CAAC,CAAC,CAAC;gBACH,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC/B,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;oBACrE,MAAM,EAAE,QAAQ,CAAC,UAAU,IAAI,GAAG;oBAClC,UAAU,EAAE,QAAQ,CAAC,aAAa;oBAClC,OAAO,EAAE,QAAQ,CAAC,OAAsB;iBACzC,CAAC,CAAC,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,wBAAwB,CAC/B,KAAuE,EACvE,QAAkD,EAClD,WAAmB,EACnB,OAAe;IAEf,SAAS,CAAC,KAAK,EAAE;QACf,mBAAmB,EAAE,oBAAoB,EAAE,yBAAyB;QACpE,oBAAoB;KACrB,EAAE,2BAA2B,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,iBAAiB,KAAK,gCAAgC;WAC3D,KAAK,CAAC,kBAAkB,KAAK,IAAI;WACjC,KAAK,CAAC,uBAAuB,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,uBAAuB,GAAG,UAAU,UAAU,CAAC,QAAQ,CAAC;SAC3D,MAAM,CAAC,gCAAgC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC5D,IAAI,QAAQ,CAAC,eAAe,KAAK,uBAAuB,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAC7E,IAAI,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1F,IAAI,kBAAkB,CAAC,MAAM,KAAK,KAAK,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,mBAAmB,GAAG;QAC1B,OAAO,EAAE,CAAC;QACV,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,eAAe,EAAE,QAAQ,CAAC,eAAe;QACzC,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;QAC/C,WAAW;QACX,OAAO;KACR,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,sBAAsB,EAAE,UAAU,UAAU,CAAC,QAAQ,CAAC;aACnD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QAC9D,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;YACtB,EAAE,EAAE,QAAQ,CAAC,UAAU;YACvB,KAAK,EAAE,QAAQ,CAAC,QAAQ;YACxB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,iBAAiB,EAAE,gCAAgC;YACnD,kBAAkB,EAAE,IAAI;YACxB,uBAAuB,EAAE,IAAI;YAC7B,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC;SACtD,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CACxB,SAAyC,EACzC,QAAyD;IAEzD,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClC,SAAS,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,0BAA0B,CAAC,CAAC;QACtE,OAAO,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QAC3C,SAAS,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,0BAA0B,CAAC,CAAC;QAC1E,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAC7F,OAAO,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,KAAa;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/B,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,qBAAqB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC;IACxG,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,kCAAkC,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,0CAA0C,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc,EAAE,KAAa,EAAE,gBAAwB;IACpF,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;IACxE,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,WAAW,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,0CAA0C,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1E,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,gCAAgC,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,yBAAyB,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,+BAA+B,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,OAAO,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe;IACxC,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACzC,OAAO,UAAU,KAAK,KAAK,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe;IACzC,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAClE,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjD,OAAO,CAAC,KAAK,CAAC;eACT,CAAC,KAAK,EAAE;eACR,CAAC,KAAK,GAAG;eACT,CAAC,CAAC,KAAK,GAAG,IAAI,CAAE,IAAI,EAAE,IAAI,CAAE,IAAI,GAAG,CAAC;eACpC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;eACxB,CAAC,CAAC,KAAK,GAAG,IAAI,CAAE,IAAI,EAAE,IAAI,CAAE,IAAI,EAAE,CAAC;eACnC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;eACtB,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;eACxB,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;eACrC,CAAE,IAAI,GAAG,CAAC;IACjB,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAC7D,MAAM,MAAM,GAAG,iCAAiC,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACvE,IAAI,MAAM;YAAE,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC9C,OAAO,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC;eACjC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC;eAC9B,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,IAAuB,EAAE,KAAa;IACtE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACvE,IAAI,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,+BAA+B,UAAU,EAAE,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,KAAa;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,cAAc,CAAC,CAAC;IACrG,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,8BAA8B,CAAC,CAAC;IAC/F,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,MAAM,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACnF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAClC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,aAAa,CAAC,CAAC;IAChG,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,KAAa;IAC5C,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,kBAAkB,CAAC,CAAC;IACzF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,KAAa;IACpD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,kCAAkC,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zhin.js/a2a",
-  "version": "3.0.13",
+  "version": "3.0.15",
   "description": "A2A Protocol server for Zhin.js — multi-agent Agent Cards and task delegation",
   "type": "module",
   "main": "./lib/index.js",
@@ -36,21 +36,21 @@
   },
   "dependencies": {
     "@a2a-js/sdk": "1.0.0-beta.0",
-    "@zhin.js/core": "1.5.11",
+    "@zhin.js/core": "1.5.13",
     "@zhin.js/host-http-contract": "1.0.1",
     "@zhin.js/logger": "1.0.76"
   },
   "peerDependencies": {
-    "@zhin.js/agent": "1.1.13",
-    "zhin.js": "6.0.11"
+    "@zhin.js/agent": "1.1.15",
+    "zhin.js": "6.0.13"
   },
   "devDependencies": {
     "@types/node": "^26.1.2",
     "rimraf": "^6.1.3",
     "typescript": "^6.0.3",
-    "@zhin.js/agent": "1.1.13",
-    "@zhin.js/host-http": "1.0.10",
-    "zhin.js": "6.0.11"
+    "@zhin.js/agent": "1.1.15",
+    "@zhin.js/host-http": "1.0.12",
+    "zhin.js": "6.0.13"
   },
   "files": [
     "src",

package/src/agent-executor.ts

@@ -169,6 +169,7 @@ function createA2aTurnRequest(
   return Object.freeze({
     identity: Object.freeze({ traceId: context.taskId, turnId: randomUUID() }),
     origin: Object.freeze({ kind: 'a2a' as const, taskId: context.taskId }),
+    intent: Object.freeze({ kind: 'new' as const }),
     principal: Object.freeze({ subjectId: 'a2a-client', roles: Object.freeze(['user']) }),
     input: Object.freeze({ text }),
     session: Object.freeze({ key: `a2a:${context.contextId}` }),

package/src/index.ts

@@ -8,6 +8,11 @@ export {
   installRuntimeA2a,
   type InstallRuntimeA2aOptions,
   type RuntimeA2aConfig,
+  type RuntimeWorkroomCallbackConfig,
+  type RuntimeWorkroomRemoteExecutorsConfig,
 } from './runtime.js';
 export type { RuntimeA2aConfig as A2aConfig } from './runtime.js';
 export { verifyA2aBearer } from './auth.js';
+export * from './workroom-auth-registry.js';
+export * from './workroom-callback-runtime.js';
+export * from './workroom-remote-transport.js';

package/src/runtime.ts

@@ -10,12 +10,32 @@ import { buildAgentCardForBinding } from './card-builder.js';
 import { ZhinA2AExecutor } from './agent-executor.js';
 import { handleAgentCard, handleJsonRpc, handleRest } from './http-handlers.js';
 import { verifyA2aBearer } from './auth.js';
+import type { WorkroomA2aAuthBindingInput } from './workroom-auth-registry.js';
+import type { WorkroomA2aRemoteTransportBindingInput } from './workroom-remote-transport.js';
+
+export interface RuntimeWorkroomCallbackConfig {
+  readonly enabled?: boolean;
+  /** Must remain outside the ordinary `/a2a/{agent}/*` route tree. */
+  readonly path?: string;
+  readonly maxBodyBytes?: number;
+  readonly maxSequenceGap?: number;
+  readonly bindings: readonly WorkroomA2aAuthBindingInput[];
+}
+
+export interface RuntimeWorkroomRemoteExecutorsConfig {
+  readonly enabled?: boolean;
+  readonly maxResponseBytes?: number;
+  readonly bindings: readonly WorkroomA2aRemoteTransportBindingInput[];
+}
 
 export interface RuntimeA2aConfig {
   readonly enabled?: boolean;
   readonly path?: string;
   readonly token?: string;
   readonly publicUrl?: string;
+  readonly workroomCallbacks?: RuntimeWorkroomCallbackConfig;
+  /** Transport endpoints only. Project/Workroom topology remains in the persistent Catalog. */
+  readonly workroomRemoteExecutors?: RuntimeWorkroomRemoteExecutorsConfig;
 }
 
 export interface InstallRuntimeA2aOptions {
@@ -139,3 +159,25 @@ function normalizePath(path: string): string {
   const leading = path.startsWith('/') ? path : `/${path}`;
   return trimTrailingSlashes(leading) || '/a2a';
 }
+
+export {
+  installRuntimeWorkroomCallbacks,
+  type InstallRuntimeWorkroomCallbacksOptions,
+  type RuntimeWorkroomCallbackDependencies,
+  type RuntimeWorkroomCallbackInstallation,
+  type RuntimeWorkroomCallbackRecoverySummary,
+} from './workroom-callback-runtime.js';
+export {
+  WorkroomA2aAuthRegistry,
+  WorkroomA2aAuthenticationError,
+  type WorkroomA2aAuthRegistryOptions,
+  type WorkroomA2aEndpointAuthoritySnapshot,
+} from './workroom-auth-registry.js';
+export {
+  WorkroomA2aHttpRemoteTransport,
+  type WorkroomA2aHttpRemoteTransportOptions,
+  type WorkroomA2aPinnedNetworkPort,
+  type WorkroomA2aPinnedRequest,
+  type WorkroomA2aResolvedAddress,
+  type WorkroomA2aRemoteTransportBindingInput,
+} from './workroom-remote-transport.js';