agentfootprint 10.3.0 → 10.4.0

package/dist/adapters/mcp/agentcoreRuntime/sessionBusy.js

@@ -0,0 +1,117 @@
+"use strict";
+/**
+ * sessionBusy — the retry strategy: AgentCore Runtime's "session operation in
+ * progress", recognised. One small function, on purpose.
+ *
+ * ── What the service says, in its own words ──────────────────────────────────
+ * The AgentCore Runtime MCP protocol contract maps the runtime's exceptions onto
+ * JSON-RPC errors, and exactly one of them is retryable by design:
+ *
+ *   -32005  RetryableConflictException  HTTP 200  "Session operation in progress, please retry"
+ *
+ * returned "when a second operation targets a session while the service is
+ * provisioning or tearing down that session. Because MCP returns HTTP 200 with
+ * the error in the JSON-RPC body, the caller must inspect the response body and
+ * retry with short exponential backoff — MCP clients do not auto-retry it."
+ *
+ * So no status code says it, and the MCP SDK will not wait for it: left alone,
+ * it reaches the model as a failed tool call, a moment after the session it was
+ * waiting for came up.
+ *
+ * ── Why asking again is safe ─────────────────────────────────────────────────
+ * The refusal is the PLATFORM's, about the session, made before the request
+ * reached the MCP server: nothing ran. That is the license a 429 holds, and the
+ * only one `retryingFetchWhen` accepts (see `mcp/throttleRetry.ts` ·
+ * `RetryDecision`).
+ *
+ * ── What it must NOT match ───────────────────────────────────────────────────
+ * `ConflictException` shares the code -32005 ("Resource conflict - Resource
+ * already exists") and is not retryable; the contract tells the two apart only
+ * by the message, so the message is part of the match. Anything else — another
+ * status, an SSE stream, a batch reply, a body that is not JSON — is delivered
+ * as it is.
+ *
+ * ── The API-layer form ───────────────────────────────────────────────────────
+ * `InvokeAgentRuntime`'s API reference gives the same exception as an HTTP 409,
+ * its type in the `x-amzn-errortype` header (the REST protocol's error-type
+ * header; the SigV4 strategy rebuilds exactly that from the SDK's exception,
+ * because the transport's SDK client has its own retry off). It is the same
+ * refusal, so it is the same decision — matched by the type, never by the 409
+ * alone.
+ *
+ * Pattern: Strategy (a `RetryDecision`). Role: outer ring, vendor fact.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isSessionBusyReply = exports.sessionBusy = exports.SESSION_BUSY_CODE = void 0;
+const errorType_js_1 = require("./errorType.js");
+/** The JSON-RPC error code the contract gives `RetryableConflictException`. */
+exports.SESSION_BUSY_CODE = -32005;
+/** The exception's name, as the API layer and the SDK both spell it. */
+const SESSION_BUSY_TYPE = 'RetryableConflictException';
+/**
+ * How the contract's message reads. Matched case-insensitively and as a
+ * fragment, so a trailing "please retry" reworded does not stop the match;
+ * the code is still required, which is what keeps `ConflictException` out.
+ */
+const SESSION_BUSY_MESSAGE = /session operation in progress/i;
+/**
+ * Is this response AgentCore Runtime's session-busy refusal — in either form:
+ * the MCP contract's HTTP 200 with JSON-RPC -32005, or the API's 409
+ * `RetryableConflictException`?
+ *
+ * Reads a CLONE of the body, so the response is delivered intact either way.
+ * Answers `{}` (wait the loop's own backoff, then send the same request again)
+ * or `undefined` (deliver it).
+ */
+async function sessionBusy(response) {
+    if (response.status === 409) {
+        return (0, errorType_js_1.awsErrorType)(response.headers) === SESSION_BUSY_TYPE ? {} : undefined;
+    }
+    if (response.status !== 200)
+        return undefined;
+    if (!isJson(response.headers.get('content-type')))
+        return undefined;
+    let text;
+    try {
+        text = await response.clone().text();
+    }
+    catch {
+        return undefined;
+    }
+    // A cheap gate before parsing: a large tool result does not contain the
+    // code's digits often, and it is the common case.
+    if (!text.includes(String(exports.SESSION_BUSY_CODE)))
+        return undefined;
+    let body;
+    try {
+        body = JSON.parse(text);
+    }
+    catch {
+        return undefined;
+    }
+    return isSessionBusyReply(body) ? {} : undefined;
+}
+exports.sessionBusy = sessionBusy;
+/**
+ * The match itself, over a parsed body: ONE JSON-RPC reply whose error carries
+ * the contract's code and message. A batch is never retried whole — some of
+ * its replies may be the record of work that ran.
+ */
+function isSessionBusyReply(body) {
+    if (body === null || typeof body !== 'object' || Array.isArray(body))
+        return false;
+    const error = body.error;
+    if (error === null || typeof error !== 'object')
+        return false;
+    const { code, message } = error;
+    return (code === exports.SESSION_BUSY_CODE && typeof message === 'string' && SESSION_BUSY_MESSAGE.test(message));
+}
+exports.isSessionBusyReply = isSessionBusyReply;
+/** `application/json`, with or without parameters, in any case. */
+function isJson(contentType) {
+    if (contentType === null)
+        return false;
+    const essence = contentType.split(';')[0]?.trim().toLowerCase();
+    return essence === 'application/json';
+}
+//# sourceMappingURL=sessionBusy.js.map

package/dist/adapters/mcp/agentcoreRuntime/sessionBusy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionBusy.js","sourceRoot":"","sources":["../../../../src/adapters/mcp/agentcoreRuntime/sessionBusy.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;;;AAGH,iDAA8C;AAE9C,+EAA+E;AAClE,QAAA,iBAAiB,GAAG,CAAC,KAAK,CAAC;AAExC,wEAAwE;AACxE,MAAM,iBAAiB,GAAG,4BAA4B,CAAC;AAEvD;;;;GAIG;AACH,MAAM,oBAAoB,GAAG,gCAAgC,CAAC;AAE9D;;;;;;;;GAQG;AACI,KAAK,UAAU,WAAW,CAAC,QAAkB;IAClD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,OAAO,IAAA,2BAAY,EAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACpE,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,wEAAwE;IACxE,kDAAkD;IAClD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,yBAAiB,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAChE,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACnD,CAAC;AAtBD,kCAsBC;AAED;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,IAAa;IAC9C,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACnF,MAAM,KAAK,GAAI,IAAqC,CAAC,KAAK,CAAC;IAC3D,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAgE,CAAC;IAC3F,OAAO,CACL,IAAI,KAAK,yBAAiB,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAChG,CAAC;AACJ,CAAC;AARD,gDAQC;AAED,mEAAmE;AACnE,SAAS,MAAM,CAAC,WAA0B;IACxC,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChE,OAAO,OAAO,KAAK,kBAAkB,CAAC;AACxC,CAAC"}

package/dist/adapters/mcp/agentcoreRuntime/strictJson.js

@@ -0,0 +1,220 @@
+"use strict";
+/**
+ * strictJson — ONE reading of a JSON text, with every ambiguity refused.
+ *
+ * `JSON.parse` resolves ambiguity silently: a duplicated key keeps its LAST
+ * value, while another reader may keep the first. A check that reads a body one
+ * way and a consumer that reads it another is a parser differential — a crafted
+ * answer passes the check and is used as something else. So the transport reads
+ * an answer once, here, refusing what two readers could disagree on, and hands
+ * the client the canonical re-serialization of exactly the value it checked.
+ *
+ * Refused, by name: a duplicated object key, trailing data after the value, a
+ * leading byte-order mark, nesting deeper than {@link MAX_DEPTH}, a number
+ * out of range (its re-serialization would be `null`), and anything that is
+ * not RFC 8259 JSON.
+ *
+ * Objects are built with own properties only (a `__proto__` key is data, never
+ * a prototype).
+ *
+ * Pattern: recursive-descent parser. Role: outer ring, the one reader.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseStrictJson = exports.MAX_DEPTH = exports.AmbiguousJsonError = void 0;
+/** Why a text was refused. */
+class AmbiguousJsonError extends Error {
+    reason;
+    constructor(reason) {
+        super(`ambiguous JSON: ${reason}`);
+        this.reason = reason;
+        this.name = 'AmbiguousJsonError';
+    }
+}
+exports.AmbiguousJsonError = AmbiguousJsonError;
+/** How deep a value may nest. */
+exports.MAX_DEPTH = 256;
+/**
+ * The one value `text` holds.
+ *
+ * @throws AmbiguousJsonError when the text is not exactly one unambiguous value.
+ */
+function parseStrictJson(text) {
+    if (text.charCodeAt(0) === 0xfeff)
+        throw new AmbiguousJsonError('a leading byte-order mark');
+    const reader = new Reader(text);
+    reader.space();
+    const value = reader.value(0);
+    reader.space();
+    if (!reader.done())
+        throw new AmbiguousJsonError('trailing data after the value');
+    return value;
+}
+exports.parseStrictJson = parseStrictJson;
+const NUMBER = /-?(?:0|[1-9]\d*)(?:\.\d+)?(?:[eE][+-]?\d+)?/y;
+/** Characters a string may hold as they are: not a quote, a backslash or a control character. */
+// eslint-disable-next-line no-control-regex
+const PLAIN_RUN = /[^"\\\u0000-\u001f]+/y;
+class Reader {
+    text;
+    at = 0;
+    constructor(text) {
+        this.text = text;
+    }
+    done() {
+        return this.at >= this.text.length;
+    }
+    space() {
+        while (this.at < this.text.length) {
+            const c = this.text.charCodeAt(this.at);
+            if (c !== 0x20 && c !== 0x09 && c !== 0x0a && c !== 0x0d)
+                return;
+            this.at++;
+        }
+    }
+    value(depth) {
+        if (depth > exports.MAX_DEPTH)
+            throw new AmbiguousJsonError('nesting too deep');
+        const c = this.text[this.at];
+        if (c === '{')
+            return this.object(depth);
+        if (c === '[')
+            return this.array(depth);
+        if (c === '"')
+            return this.string();
+        if (this.word('true'))
+            return true;
+        if (this.word('false'))
+            return false;
+        if (this.word('null'))
+            return null;
+        return this.number();
+    }
+    object(depth) {
+        this.at++; // {
+        const out = {};
+        const seen = new Set();
+        this.space();
+        if (this.text[this.at] === '}') {
+            this.at++;
+            return out;
+        }
+        for (;;) {
+            this.space();
+            if (this.text[this.at] !== '"')
+                throw new AmbiguousJsonError('an object key that is not a string');
+            const key = this.string();
+            // The key is not named: it is the answer's text, and a refusal repeats none.
+            if (seen.has(key))
+                throw new AmbiguousJsonError('a duplicated object key');
+            seen.add(key);
+            this.space();
+            this.expect(':');
+            this.space();
+            Object.defineProperty(out, key, {
+                value: this.value(depth + 1),
+                enumerable: true,
+                writable: true,
+                configurable: true,
+            });
+            this.space();
+            if (this.text[this.at] === ',') {
+                this.at++;
+                continue;
+            }
+            this.expect('}');
+            return out;
+        }
+    }
+    array(depth) {
+        this.at++; // [
+        const out = [];
+        this.space();
+        if (this.text[this.at] === ']') {
+            this.at++;
+            return out;
+        }
+        for (;;) {
+            this.space();
+            out.push(this.value(depth + 1));
+            this.space();
+            if (this.text[this.at] === ',') {
+                this.at++;
+                continue;
+            }
+            this.expect(']');
+            return out;
+        }
+    }
+    string() {
+        this.at++; // opening quote
+        let out = '';
+        for (;;) {
+            if (this.at >= this.text.length)
+                throw new AmbiguousJsonError('an unterminated string');
+            const c = this.text[this.at];
+            const code = c.charCodeAt(0);
+            if (c === '"') {
+                this.at++;
+                return out;
+            }
+            if (code < 0x20)
+                throw new AmbiguousJsonError('a control character inside a string');
+            if (c !== '\\') {
+                // A run of plain characters at once — a large string is read in slices.
+                PLAIN_RUN.lastIndex = this.at;
+                const run = PLAIN_RUN.exec(this.text)?.[0] ?? c;
+                out += run;
+                this.at += run.length;
+                continue;
+            }
+            const e = this.text[this.at + 1];
+            this.at += 2;
+            if (e === 'u') {
+                const hex = this.text.slice(this.at, this.at + 4);
+                if (!/^[0-9a-fA-F]{4}$/.test(hex))
+                    throw new AmbiguousJsonError('a malformed \\u escape');
+                out += String.fromCharCode(parseInt(hex, 16));
+                this.at += 4;
+                continue;
+            }
+            const simple = ESCAPES[e ?? ''];
+            if (simple === undefined)
+                throw new AmbiguousJsonError('an unknown escape');
+            out += simple;
+        }
+    }
+    number() {
+        NUMBER.lastIndex = this.at;
+        const match = NUMBER.exec(this.text);
+        if (match === null || match[0] === '')
+            throw new AmbiguousJsonError('a value that is not JSON');
+        this.at += match[0].length;
+        const value = Number(match[0]);
+        // Re-serialized, a number out of range would become `null` — another value.
+        if (!Number.isFinite(value))
+            throw new AmbiguousJsonError('a number out of range');
+        return value;
+    }
+    word(word) {
+        if (!this.text.startsWith(word, this.at))
+            return false;
+        this.at += word.length;
+        return true;
+    }
+    expect(c) {
+        if (this.text[this.at] !== c)
+            throw new AmbiguousJsonError(`a missing '${c}'`);
+        this.at++;
+    }
+}
+const ESCAPES = {
+    '"': '"',
+    '\\': '\\',
+    '/': '/',
+    b: '\b',
+    f: '\f',
+    n: '\n',
+    r: '\r',
+    t: '\t',
+};
+//# sourceMappingURL=strictJson.js.map

package/dist/adapters/mcp/agentcoreRuntime/strictJson.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strictJson.js","sourceRoot":"","sources":["../../../../src/adapters/mcp/agentcoreRuntime/strictJson.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;;AAEH,8BAA8B;AAC9B,MAAa,kBAAmB,SAAQ,KAAK;IACtB;IAArB,YAAqB,MAAc;QACjC,KAAK,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;QADhB,WAAM,GAAN,MAAM,CAAQ;QAEjC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AALD,gDAKC;AAED,iCAAiC;AACpB,QAAA,SAAS,GAAG,GAAG,CAAC;AAW7B;;;;GAIG;AACH,SAAgB,eAAe,CAAC,IAAY;IAC1C,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,MAAM;QAAE,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,CAAC,KAAK,EAAE,CAAC;IACf,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,CAAC,KAAK,EAAE,CAAC;IACf,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,kBAAkB,CAAC,+BAA+B,CAAC,CAAC;IAClF,OAAO,KAAK,CAAC;AACf,CAAC;AARD,0CAQC;AAED,MAAM,MAAM,GAAG,8CAA8C,CAAC;AAE9D,iGAAiG;AACjG,4CAA4C;AAC5C,MAAM,SAAS,GAAG,uBAAuB,CAAC;AAE1C,MAAM,MAAM;IAGmB;IAFrB,EAAE,GAAG,CAAC,CAAC;IAEf,YAA6B,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IAE7C,IAAI;QACF,OAAO,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;IACrC,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAClC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI;gBAAE,OAAO;YACjE,IAAI,CAAC,EAAE,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAa;QACjB,IAAI,KAAK,GAAG,iBAAS;YAAE,MAAM,IAAI,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;QACxE,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QACrC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;IAEO,MAAM,CAAC,KAAa;QAC1B,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI;QACf,MAAM,GAAG,GAA8B,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;YAC/B,IAAI,CAAC,EAAE,EAAE,CAAC;YACV,OAAO,GAAG,CAAC;QACb,CAAC;QACD,SAAS,CAAC;YACR,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,GAAG;gBAC5B,MAAM,IAAI,kBAAkB,CAAC,oCAAoC,CAAC,CAAC;YACrE,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1B,6EAA6E;YAC7E,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,kBAAkB,CAAC,yBAAyB,CAAC,CAAC;YAC3E,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjB,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE;gBAC9B,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;gBAC5B,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,IAAI;gBACd,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC/B,IAAI,CAAC,EAAE,EAAE,CAAC;gBACV,SAAS;YACX,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjB,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAa;QACzB,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI;QACf,MAAM,GAAG,GAAgB,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;YAC/B,IAAI,CAAC,EAAE,EAAE,CAAC;YACV,OAAO,GAAG,CAAC;QACb,CAAC;QACD,SAAS,CAAC;YACR,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;YAChC,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC/B,IAAI,CAAC,EAAE,EAAE,CAAC;gBACV,SAAS;YACX,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjB,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IAEO,MAAM;QACZ,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB;QAC3B,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,SAAS,CAAC;YACR,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,kBAAkB,CAAC,wBAAwB,CAAC,CAAC;YACxF,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAW,CAAC;YACvC,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAC7B,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;gBACd,IAAI,CAAC,EAAE,EAAE,CAAC;gBACV,OAAO,GAAG,CAAC;YACb,CAAC;YACD,IAAI,IAAI,GAAG,IAAI;gBAAE,MAAM,IAAI,kBAAkB,CAAC,qCAAqC,CAAC,CAAC;YACrF,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;gBACf,wEAAwE;gBACxE,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC;gBAC9B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAChD,GAAG,IAAI,GAAG,CAAC;gBACX,IAAI,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC;gBACtB,SAAS;YACX,CAAC;YACD,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;YACb,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;gBACd,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBAClD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;oBAAE,MAAM,IAAI,kBAAkB,CAAC,wBAAwB,CAAC,CAAC;gBAC1F,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;gBAC9C,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;gBACb,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAChC,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM,IAAI,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;YAC5E,GAAG,IAAI,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAEO,MAAM;QACZ,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE;YAAE,MAAM,IAAI,kBAAkB,CAAC,0BAA0B,CAAC,CAAC;QAChG,IAAI,CAAC,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,4EAA4E;QAC5E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;QACnF,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,IAAI,CAAC,IAAY;QACvB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;QACvD,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,MAAM,CAAC,CAAS;QACtB,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,kBAAkB,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAC/E,IAAI,CAAC,EAAE,EAAE,CAAC;IACZ,CAAC;CACF;AAED,MAAM,OAAO,GAAqC;IAChD,GAAG,EAAE,GAAG;IACR,IAAI,EAAE,IAAI;IACV,GAAG,EAAE,GAAG;IACR,CAAC,EAAE,IAAI;IACP,CAAC,EAAE,IAAI;IACP,CAAC,EAAE,IAAI;IACP,CAAC,EAAE,IAAI;IACP,CAAC,EAAE,IAAI;CACR,CAAC"}

package/dist/adapters/mcp/agentcoreRuntime/transport.js

@@ -0,0 +1,204 @@
+"use strict";
+/**
+ * agentCoreRuntimeMcpTransport — an MCP server hosted on AWS Bedrock
+ * **AgentCore Runtime**, reached as an ordinary MCP transport.
+ *
+ *   const orders = await mcpClient({
+ *     name: 'orders',
+ *     transport: agentCoreRuntimeMcpTransport({
+ *       agentRuntimeArn: 'arn:aws:bedrock-agentcore:us-west-2:123456789012:runtime/orders_mcp-a1b2c3',
+ *       region: 'us-west-2',
+ *     }),
+ *   });
+ *
+ * ── Why this exists ──────────────────────────────────────────────────────────
+ * `agentCoreGatewayTransport` reaches a Gateway; `agentCoreRuntimeHost` hosts
+ * OUR agent on Runtime. Neither calls an MCP server somebody deployed TO
+ * Runtime, and that server is not reachable as a plain URL: every request goes
+ * through `InvokeAgentRuntime`, it lands in a runtime SESSION that has to be
+ * carried from call to call, and the platform answers a request that arrives
+ * while that session is still coming up with an HTTP 200 whose body says
+ * "Session operation in progress, please retry" — which no MCP client retries.
+ *
+ * ── What it is: one port, three strategies ───────────────────────────────────
+ * The port is the existing one: this returns an `http` member of
+ * `McpTransport`, so `mcpClient` builds it like any other Streamable HTTP
+ * server and knows nothing about AgentCore. Everything AgentCore-specific sits
+ * in the `fetch` it carries, composed from three choices, one file each:
+ *
+ *   session (`session.ts`)      'per-call' (the default: a session per request),
+ *                               or 'reuse' (one session per MCP client, keyed by
+ *                               a handle the transport issues)
+ *   retry   (`sessionBusy.ts`)  the session-busy refusal, retried with bounded
+ *                               backoff by the SAME loop `mcpClient` uses for a
+ *                               429 (`mcp/throttleRetry.ts` · `retryingFetchWhen`)
+ *   auth    (`invoke.ts`)       'sigv4' through the AWS SDK's InvokeAgentRuntime,
+ *                               or a bearer token over the documented HTTPS
+ *                               endpoint — the SDK has no bearer scheme, and the
+ *                               API reference says an OAuth caller must use HTTPS
+ *
+ * in that order, outermost first: the session is applied once per request, so
+ * every attempt of it lands in the same runtime session, and every attempt is
+ * signed (or vended) afresh, the ordering `mcp/throttleRetry.ts` requires.
+ * What the MCP client reads of a failure is rewritten from the library's own
+ * fixed sentences and safe ids (`safeAnswer.ts`), never the service's text.
+ * `mcpClient`'s own 429 retry still wraps the whole thing.
+ *
+ * ── What it does NOT do ──────────────────────────────────────────────────────
+ * Deploy or manage a runtime (a control-plane job), or host one (that is
+ * `agentCoreRuntimeHost`). This is the CLIENT side of a server somebody already
+ * deployed with `--protocol MCP`.
+ *
+ * Pattern: Facade over three Strategies. Role: outer ring, vendor adapter.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.agentCoreRuntimeUrl = exports.agentCoreRuntimeMcpTransport = void 0;
+const gatewayTransport_js_1 = require("../../../mcp/gatewayTransport.js");
+const throttleRetry_js_1 = require("../../../mcp/throttleRetry.js");
+const invoke_js_1 = require("./invoke.js");
+const safeAnswer_js_1 = require("./safeAnswer.js");
+const session_js_1 = require("./session.js");
+const sessionBusy_js_1 = require("./sessionBusy.js");
+/** The session-busy retry's own ceilings, when the caller set none. */
+const DEFAULT_RETRY = { maxAttempts: 5, maxWaitMs: 10_000 };
+/** What a bearer token is vended for, unless the caller names another service. */
+const DEFAULT_BEARER_SERVICE = 'runtime';
+/** A region is a DNS label run, nothing more — it is spliced into a hostname. */
+const REGION_SHAPE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+/**
+ * An MCP transport for a server hosted on AgentCore Runtime.
+ *
+ * @throws when the runtime or region is missing, when a strategy is unknown,
+ *   when `client` is given beside `{ bearer }`, or — for `'sigv4'` — when the
+ *   AWS SDK peer dependency cannot be loaded.
+ */
+function agentCoreRuntimeMcpTransport(options) {
+    const url = agentCoreRuntimeUrl(options);
+    const send = authStrategy(options, url);
+    const retried = (0, throttleRetry_js_1.retryingFetchWhen)(send, retryConfig(options.retry), sessionBusy_js_1.sessionBusy) ?? send;
+    const session = (0, session_js_1.sessionStrategy)(options.session ?? 'per-call');
+    // The session is applied ONCE per request the MCP client makes, outside the
+    // retry: every attempt of one request goes to the same runtime session (a
+    // busy refusal is about THAT session coming up), and only the final answer
+    // binds anything.
+    const sessioned = async (input, init) => {
+        const headers = new Headers(init?.headers);
+        const step = session.request(headers, (init?.method ?? 'GET').toUpperCase());
+        if ('answer' in step)
+            return step.answer;
+        const response = await retried(input, { ...init, headers });
+        // What the MCP client may read of a failure is rewritten from safe parts —
+        // ONE rule for both auth paths, after the retry has read the original.
+        return step.settle(await (0, safeAnswer_js_1.safeAnswer)(response));
+    };
+    return { transport: 'http', url, fetch: sessioned };
+}
+exports.agentCoreRuntimeMcpTransport = agentCoreRuntimeMcpTransport;
+/**
+ * The HTTPS endpoint of a runtime's MCP server:
+ * `https://bedrock-agentcore.{region}.amazonaws.com/runtimes/{url-encoded ARN}/invocations`,
+ * with `qualifier` / `accountId` as query parameters when given — the request
+ * line of `InvokeAgentRuntime`, and the URL AgentCore's own MCP examples dial.
+ *
+ * @throws when `agentRuntimeArn` or `region` is missing, or the region is not
+ *   shaped like one (it becomes part of a hostname).
+ */
+function agentCoreRuntimeUrl(options) {
+    const { agentRuntimeArn, region, qualifier, accountId } = options;
+    if (!agentRuntimeArn || !region) {
+        throw new TypeError('agentCoreRuntimeUrl: both `agentRuntimeArn` and `region` are required — the runtime ' +
+            'is named by the first and reached through the second.');
+    }
+    if (!REGION_SHAPE.test(region)) {
+        throw new TypeError(`agentCoreRuntimeUrl: \`region\` ${JSON.stringify(region)} is not a region name ` +
+            "(lowercase letters, digits and '-', e.g. 'us-west-2'). It becomes part of the " +
+            'hostname, so it is refused rather than spliced in.');
+    }
+    const query = new URLSearchParams();
+    if (qualifier)
+        query.set('qualifier', qualifier);
+    if (accountId)
+        query.set('accountId', accountId);
+    const base = `https://bedrock-agentcore.${region}.amazonaws.com/runtimes/` +
+        `${encodeURIComponent(agentRuntimeArn)}/invocations`;
+    const search = query.toString();
+    return search === '' ? base : `${base}?${search}`;
+}
+exports.agentCoreRuntimeUrl = agentCoreRuntimeUrl;
+// ── The auth strategy ─────────────────────────────────────────────────
+/** The innermost `fetch`: the one that authenticates and sends. */
+function authStrategy(options, url) {
+    const auth = options.auth ?? 'sigv4';
+    if (auth === 'sigv4') {
+        const { client, InvokeAgentRuntimeCommand } = (0, invoke_js_1.invokeSdk)({
+            region: options.region,
+            ...(options.client !== undefined && { client: options.client }),
+            ...(options._sdk !== undefined && { sdk: options._sdk }),
+        });
+        return (0, invoke_js_1.invokeFetch)({
+            agentRuntimeArn: options.agentRuntimeArn,
+            ...(options.qualifier !== undefined && { qualifier: options.qualifier }),
+            ...(options.accountId !== undefined && { accountId: options.accountId }),
+        }, client, InvokeAgentRuntimeCommand);
+    }
+    if (auth !== null && typeof auth === 'object' && auth.bearer !== undefined) {
+        if (typeof auth.bearer.getCredential !== 'function') {
+            throw new TypeError('agentCoreRuntimeMcpTransport: `auth.bearer` must be a CredentialProvider (an object ' +
+                'with getCredential — agentCoreIdentity(), staticTokens(), your own), not the token ' +
+                'itself: a token is vended per request so it can rotate, and is never held here.');
+        }
+        if (options.client !== undefined) {
+            throw new TypeError('agentCoreRuntimeMcpTransport: `client` is the SigV4 strategy’s AWS SDK client, and ' +
+                '`auth: { bearer }` sends no AWS SDK request — the SDK cannot carry a bearer token, ' +
+                'so this path is plain HTTPS. Remove `client`, or use `auth: "sigv4"`.');
+        }
+        if (auth.mode !== undefined && auth.mode !== 'machine') {
+            // The vending request names no user: it carries `service`, `scopes` and
+            // `mode`, never an identity or the user's own token. A user-delegated
+            // token asked for that way belongs to nobody in particular — and would be
+            // sent for whoever calls through the client.
+            throw new TypeError(`agentCoreRuntimeMcpTransport: \`auth.mode\` must be 'machine' — got ${describe(auth.mode)}. ` +
+                'This transport asks its provider for a token without naming any user, so a ' +
+                'user-delegated token would be sent for whoever calls through the client. Leave ' +
+                '`mode` unset for the client credential; for a token per user, build a transport per ' +
+                'user whose `bearer` provider vends that user’s token.');
+        }
+        // The Gateway's vending fetch, reused as is: the token is vended per
+        // request, applied to that one request, and dropped.
+        return (0, gatewayTransport_js_1.createVendingFetch)((0, gatewayTransport_js_1.gatewayTransport)({
+            url,
+            credentials: auth.bearer,
+            service: auth.service ?? DEFAULT_BEARER_SERVICE,
+            ...(auth.scopes !== undefined && { scopes: auth.scopes }),
+            ...(auth.mode !== undefined && { mode: auth.mode }),
+        }), auth.fetch);
+    }
+    throw new TypeError(`agentCoreRuntimeMcpTransport: \`auth\` must be 'sigv4' or { bearer: <CredentialProvider> } ` +
+        `— got ${describe(auth)}. Which one is decided by the runtime's inbound auth: IAM is ` +
+        "'sigv4', an OAuth (JWT) authorizer is a bearer token.");
+}
+// ── The retry strategy's configuration ────────────────────────────────
+function retryConfig(retry) {
+    if (retry === false)
+        return false;
+    const given = typeof retry === 'object' && retry !== null ? retry : {};
+    // An explicitly `undefined` field means "not set" — it must fall back to this
+    // transport's default, not erase it (and land on the loop's own default).
+    const set = Object.fromEntries(Object.entries(given).filter(([, v]) => v !== undefined));
+    return { ...DEFAULT_RETRY, ...set };
+}
+/**
+ * A refused value, described by SHAPE — never echoed. A mistyped `auth` can be
+ * the token itself (`auth: process.env.RUNTIME_TOKEN`), and an error message is
+ * the last place it should land.
+ */
+function describe(value) {
+    if (value === null)
+        return 'null';
+    if (typeof value === 'string')
+        return `a string of ${value.length} characters`;
+    if (typeof value === 'object')
+        return `an object with keys [${Object.keys(value).join(', ')}]`;
+    return typeof value;
+}
+//# sourceMappingURL=transport.js.map

package/dist/adapters/mcp/agentcoreRuntime/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../../../src/adapters/mcp/agentcoreRuntime/transport.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;;;AAEH,0EAI0C;AAC1C,oEAKuC;AAGvC,2CAKqB;AACrB,mDAA6C;AAC7C,6CAA6E;AAC7E,qDAA+C;AAmG/C,uEAAuE;AACvE,MAAM,aAAa,GAAiC,EAAE,WAAW,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AAE1F,kFAAkF;AAClF,MAAM,sBAAsB,GAAG,SAAS,CAAC;AAEzC,iFAAiF;AACjF,MAAM,YAAY,GAAG,4BAA4B,CAAC;AAElD;;;;;;GAMG;AACH,SAAgB,4BAA4B,CAC1C,OAA4C;IAE5C,MAAM,GAAG,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,IAAA,oCAAiB,EAAC,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,4BAAW,CAAC,IAAI,IAAI,CAAC;IACzF,MAAM,OAAO,GAAG,IAAA,4BAAe,EAAC,OAAO,CAAC,OAAO,IAAI,UAAU,CAAC,CAAC;IAE/D,4EAA4E;IAC5E,0EAA0E;IAC1E,2EAA2E;IAC3E,kBAAkB;IAClB,MAAM,SAAS,GAAkB,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACrD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC7E,IAAI,QAAQ,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5D,2EAA2E;QAC3E,uEAAuE;QACvE,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,IAAA,0BAAU,EAAC,QAAQ,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC;IAEF,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AACtD,CAAC;AAvBD,oEAuBC;AAUD;;;;;;;;GAQG;AACH,SAAgB,mBAAmB,CAAC,OAAmC;IACrE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAClE,IAAI,CAAC,eAAe,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,IAAI,SAAS,CACjB,sFAAsF;YACpF,uDAAuD,CAC1D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,SAAS,CACjB,mCAAmC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,wBAAwB;YAC/E,gFAAgF;YAChF,oDAAoD,CACvD,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,IAAI,SAAS;QAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACjD,IAAI,SAAS;QAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACjD,MAAM,IAAI,GACR,6BAA6B,MAAM,0BAA0B;QAC7D,GAAG,kBAAkB,CAAC,eAAe,CAAC,cAAc,CAAC;IACvD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;IAChC,OAAO,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC;AACpD,CAAC;AAvBD,kDAuBC;AAED,yEAAyE;AAEzE,mEAAmE;AACnE,SAAS,YAAY,CAAC,OAA4C,EAAE,GAAW;IAC7E,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC;IACrC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,MAAM,EAAE,MAAM,EAAE,yBAAyB,EAAE,GAAG,IAAA,qBAAS,EAAC;YACtD,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;YAC/D,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;SACzD,CAAC,CAAC;QACH,OAAO,IAAA,uBAAW,EAChB;YACE,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;YACxE,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;SACzE,EACD,MAAM,EACN,yBAAyB,CAC1B,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC3E,IAAI,OAAQ,IAAI,CAAC,MAAsC,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;YACrF,MAAM,IAAI,SAAS,CACjB,sFAAsF;gBACpF,qFAAqF;gBACrF,iFAAiF,CACpF,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,SAAS,CACjB,qFAAqF;gBACnF,qFAAqF;gBACrF,uEAAuE,CAC1E,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACvD,wEAAwE;YACxE,sEAAsE;YACtE,0EAA0E;YAC1E,6CAA6C;YAC7C,MAAM,IAAI,SAAS,CACjB,uEAAuE,QAAQ,CAC7E,IAAI,CAAC,IAAI,CACV,IAAI;gBACH,6EAA6E;gBAC7E,iFAAiF;gBACjF,sFAAsF;gBACtF,uDAAuD,CAC1D,CAAC;QACJ,CAAC;QACD,qEAAqE;QACrE,qDAAqD;QACrD,OAAO,IAAA,wCAAkB,EACvB,IAAA,sCAAgB,EAAC;YACf,GAAG;YACH,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,sBAAsB;YAC/C,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YACzD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;SACpD,CAAC,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,SAAS,CACjB,6FAA6F;QAC3F,SAAS,QAAQ,CAAC,IAAI,CAAC,+DAA+D;QACtF,uDAAuD,CAC1D,CAAC;AACJ,CAAC;AAED,yEAAyE;AAEzE,SAAS,WAAW,CAAC,KAAmD;IACtE,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAClC,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,8EAA8E;IAC9E,0EAA0E;IAC1E,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC;IACzF,OAAO,EAAE,GAAG,aAAa,EAAE,GAAG,GAAG,EAAE,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,eAAe,KAAK,CAAC,MAAM,aAAa,CAAC;IAC/E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,wBAAwB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IAC/F,OAAO,OAAO,KAAK,CAAC;AACtB,CAAC"}