agentfootprint 10.3.1 → 10.4.0

package/AGENTS.md

@@ -34,9 +34,9 @@ Two more absences: there is **no runtime force-stop governor** (`routeRecorder()
 only *labels* a spinning run; `maxIterations` is the hard stop), and there is **no
 automatic re-delivery of an ageing skill body** (the inert `refreshPolicy` was removed in 10.0.0 — use `surfaceMode: 'both'`).
 
-## Subpath map — 18 doors
+## Subpath map — 19 doors
 
-`agentfootprint` (main barrel: `Agent`, `LLMCall`, `defineTool`, control flow, patterns, `defineRAG`, pause/resume) · `/providers` (`mock`, `anthropic`, `openai`, `bedrock`, `ollama`, `mcpClient`, embedders — every provider, so bundlers never walk the vendor SDKs from the main barrel) · `/context` (`defineSkill`, `defineFact`, `defineSteering`, `defineInstruction`, `skillGraph`, `skillsFromDir`, the scorers) · `/memory` (`defineMemory`, `InMemoryStore`, `mockEmbedder`, the stores) · `/rag` (stores + loaders; `defineRAG` itself is on the main barrel) · `/observe` (recorders, tracing, `RunStep`) · `/resilience` (provider decorators) · `/reliability` (only the reliability gate's distinct `CircuitOpenError`; rules live on `/resilience`) · `/cache` (prefix-cache strategies, chosen from the provider's declared `promptCaching` by `cacheStrategyFor`) · `/security` · `/hosting` · `/events` · `/skill-graph` (the routing layer with no framework attached, for a host that is not this agent) · `/recipes` (`defineAgentRecipe` — one named, versioned agent setup, applied with `.recipe()`) · `/maps` (`Claim<T>` and the map-engagement vocabulary behind `.maps()`) · `/classify` (the calibrated-classifier port: `Classifier`, `mockClassifier`) · `/ontology` (`defineOntology` — a declared map of the domain, mounted with `.ontology()`) · `/time` (`convertForTool` + `sugarForms` + `granularityMsOf` — the time layer's own answer to whether and how a tool reads a window, for an app outside a run; the steps `convertExact`, `convertWidened`, `periodFactProblem` too). `package.json` `exports` is the complete list; a path not on it does not resolve.
+`agentfootprint` (main barrel: `Agent`, `LLMCall`, `defineTool`, control flow, patterns, `defineRAG`, pause/resume) · `/providers` (`mock`, `anthropic`, `openai`, `bedrock`, `ollama`, `mcpClient`, embedders — every provider, so bundlers never walk the vendor SDKs from the main barrel) · `/context` (`defineSkill`, `defineFact`, `defineSteering`, `defineInstruction`, `skillGraph`, `skillsFromDir`, the scorers) · `/memory` (`defineMemory`, `InMemoryStore`, `mockEmbedder`, the stores) · `/rag` (stores + loaders; `defineRAG` itself is on the main barrel) · `/observe` (recorders, tracing, `RunStep`) · `/resilience` (provider decorators) · `/reliability` (only the reliability gate's distinct `CircuitOpenError`; rules live on `/resilience`) · `/cache` (prefix-cache strategies, chosen from the provider's declared `promptCaching` by `cacheStrategyFor`) · `/security` · `/hosting` · `/events` · `/skill-graph` (the routing layer with no framework attached, for a host that is not this agent) · `/recipes` (`defineAgentRecipe` — one named, versioned agent setup, applied with `.recipe()`) · `/maps` (`Claim<T>` and the map-engagement vocabulary behind `.maps()`) · `/classify` (the calibrated-classifier port: `Classifier`, `mockClassifier`) · `/ontology` (`defineOntology` — a declared map of the domain, mounted with `.ontology()`) · `/time` (`convertForTool` + `sugarForms` + `granularityMsOf` — the time layer's own answer to whether and how a tool reads a window, for an app outside a run; the steps `convertExact`, `convertWidened`, `periodFactProblem` too) · `/ag-ui` (`agUi()` — the AG-UI adapter: `streamHandler({ agent: () => buildAgent(), adapter: agUi(), threads: verifiedThreads(identity), sessions })` from `/hosting` serves agents to any AG-UI frontend, a fresh agent per request, the thread bound to the VERIFIED caller; `agUiSerializer` + `agUiSse` for a transport of your own; framed by the optional peer `@ag-ui/encoder`). `package.json` `exports` is the complete list; a path not on it does not resolve.
 
 ## Core Concepts
 

package/CAPABILITIES.md

@@ -20,6 +20,10 @@ not in this table, search `src/index.ts` for the nearest noun before writing cod
 
 | If you are about to build… | It is | Where | Since |
 |---|---|---|---|
+| running the same composition (Sequence / Parallel / Conditional / Loop / workflow / graph, nested) for many users at once without their member agents sharing memory or identity — the caller's identity passed once to the composition and handed to every member at any depth; with none, each run is its own conversation; a mounted agent no run reaches refused by name, never run under a placeholder or its instance's last caller | `Sequence.run({ message, identity })` (and every composition's input) + `MemberIdentityError` | `src/core/memberRun.ts` | 10.4.0 |
+| keeping a memory write out of a managed service's long-term extraction, or filing what it derives under one tenant's namespace — vendor-neutral write options on the `MemoryStore` port (`put`/`putMany`/`putIfVersion`), declared per store and REFUSED BY NAME where not honoured (never dropped), bound by `defineMemory` to every write AND search of a memory (the scope comes only from the run's identity; a per-call scope, an empty one, a search namespace that does not hold it segment for segment, or one that omits the person's actor is refused; `requireNamespaceScope` refuses unscoped access) and checked before the first turn; AgentCore maps them to `CreateEvent`'s `extractionMode: 'SKIP'` and `extractionConfig.namespaceVariables` only when its client and SDK can carry them, checks AgentCore's variable domain first, and ships a one-to-one tenant encoder into its alphabet | `MemoryWriteOptions` (`extraction: 'skip'`, `namespaceScope`) + `MemoryStore.writeOptions` + `defineMemory({ writeOptions, namespaceScope })` + `SearchOptions.namespaceScope` + `UnsupportedMemoryWriteOptionError` + `refuseUnhonouredWriteOptions` + `agentCoreNamespaceValue` (`agentfootprint/memory`) | `src/memory/store/writeOptions.ts` | 10.4.0 |
+| calling an MCP server somebody deployed TO AWS Bedrock AgentCore Runtime (`--protocol MCP`) — through `InvokeAgentRuntime` with SigV4, or a bearer token over the documented HTTPS endpoint (the SDK has no bearer scheme); a fresh runtime session per call by default (`'per-call'` carries no session id, so one client can serve every user) or one per client (`'reuse'` keys each client's connection — its `runtimeSessionId` and the server's `Mcp-Session-Id` — by a handle the transport issues); what the MCP client reads of a failure rewritten from fixed sentences and safe ids (status, a plain error type, a JSON-RPC code), never the service's text (which can quote the signed request); a bearer token vended as a machine token only; the runtime's "Session operation in progress" refusal (JSON-RPC -32005 inside an HTTP 200, which MCP clients never retry; or the API's 409 `RetryableConflictException`) retried with bounded backoff by the SAME loop as the 429 retry, one small decision function — and nothing else re-sent: the SDK client's own retry is off, so a 5xx or a dropped connection is never replayed | `agentCoreRuntimeMcpTransport` + `agentCoreRuntimeUrl` + `AGENTCORE_RUNTIME_SESSION_HEADER` (`agentfootprint/providers`) | `src/adapters/mcp/agentcoreRuntime/` | 10.4.0 |
+| serving agents to AG-UI frontends (CopilotKit, the AG-UI Dojo, an `@ag-ui/client` app) from any framework with no glue code — POST a `RunAgentInput`, stream AG-UI events back; the request is untrusted browser input: only the newest user message is conversation (the page's copy is never read), a system/developer message refused, an answer taken only for the pause the server keeps, frontend tools only by the app's name allow-list with its own contract (they run in the page, no server privilege), `state`/`context` only through the app's validators, no identity/credential/redaction from a request; a fresh runner per request, the thread bound to the caller the app authenticates, the conversation and paused runs kept server-side, one turn per thread, door guard, body ceiling, SSE keep-alive | `streamHandler` + `ProtocolAdapter` + `verifiedThreads` (`agentfootprint/hosting`) + `agUi` (`agentfootprint/ag-ui`) | `src/hosting/streamHandler.ts` | 10.4.0 |
 | checking forced tool choice per model without changing the existing boolean wire declaration; explicit requests refuse before transport, classifiers keep their strict parse alternative, wrappers preserve and fallback pairs intersect | `LLMProvider.supportsForcedToolChoice` + `forcedToolChoiceFor` + `UnsupportedToolChoiceError` (`agentfootprint/providers`) | `src/provider-contract/forcedToolChoice.ts` | 10.1.0 |
 | a typed answer constrained by the PROVIDER'S OWN structured output instead of asked for in prose — the schema sent as Anthropic's `output_config.format`, the agent keeping its tools; one function builds the API-compatible wire copy (objects closed, unsupported constraints moved into the description, recursion / external `$ref` / complex enums / open values / open-keyed maps refused at build by node), the parser still judges; per-model capability with unknown ids read as the newest generation, refused by name at run start and before transport; a `'refusal'` / `'max_tokens'` stop fails the attempt by name even when it parses; `_findings` allowed on the format when the ledger is armed | `.outputSchema(parser, { strategy: 'native', jsonSchema })` + `LLMProvider.carriesNativeOutputSchema` / `supportsNativeOutputSchema` + `nativeOutputSchemaFor` + `UnsupportedNativeOutputError` (`agentfootprint/providers`) + `answerGuarantee: 'native'` + `OutputAttempt.stopReason` | `src/provider-contract/nativeOutputSchema.ts` | 10.3.0 |
 | replaying Anthropic thinking in its original content order; refusing known unsafe active-tool replay, observing each permitted completed-turn omission before sending, and retaining that decision across checkpoints | `LLMMessage.replay` + `UnsafeThinkingReplayError` + `LLMCallHooks.onReplayPrepared` + `agentfootprint.agent.thinking_omitted` | `src/adapters/llm/anthropicThinkingReplay.ts` | 10.1.0 |
@@ -134,6 +138,8 @@ not in this table, search `src/index.ts` for the nearest noun before writing cod
 | a per-request deadline on your gateway provider, so a gateway that never answers (or a stream that goes silent) fails typed instead of hanging the run: bounds the response headers, a `complete()` body and EACH stream read (first chunk, then every gap — a stream that keeps talking is never cut off); a miss aborts the request and raises `reason: 'timeout'`, `retryable: true` (withRetry re-opens it while no chunk reached the caller); the caller's `req.signal` still wins; omitted = the fetch gets exactly `req.signal` as before | `timeoutMs` + `invokeModelGateway` + `InvokeModelGatewayError` (`reason: 'timeout'`) | `src/adapters/llm/InvokeModelGatewayProvider.ts` | 9.130.0 |
 | Replay a saved complete domain-event batch with the same fork grouping and nested drill projection as live run steps | `ingestDomainEvents` + `getSteps` + `clear` | `src/recorders/observability/RunStepRecorder.ts` | 10.0.0 |
 | experimental, not yet validated in real use: additive saved-record shapes for scoped historical verification observations; paired checkpoint readers and writers validate retained evidence and counters without judging old observations again, and native continuation refuses an unarmed evidence carrier; protocol only — no runtime verifier, model declaration parser or answer badge is enabled | `FindingsRow` + optional `AgentRunCheckpoint.claimVerification` | `src/core/` | 10.2.0 |
+| an AG-UI frontend (`@ag-ui/client`, CopilotKit, the AG-UI Dojo) reading an agentfootprint run with no glue code — the run's served events translated into AG-UI 1.0 events: streamed text, tool calls with arguments and results, reasoning, ReAct iterations and compositions as steps, a nested agent (a `Sequence` step, a `Parallel` branch) as a sub-agent with its parent links, a pause as an interrupt, a failure as `RUN_ERROR` in the record's words; `CUSTOM` an allow-list of events with projected fields (`AG_UI_CUSTOM_EVENTS`), reasoning only on request; ids minted from the record's address under the request's run id (unique across a thread when branches reuse a provider's tool-call id); nothing a redaction policy hides on the wire, at any depth; framed by the official `@ag-ui/encoder` (optional peer, loaded only when a framing is built) | `agUiSerializer` + `agUiSse` + `AG_UI_CUSTOM_EVENTS` (`agentfootprint/ag-ui`) + `RunTranslation` / `RunSettlement` (the port, `agentfootprint/hosting`) | `src/ag-ui/` | 10.4.0 |
+| writing a run's Server-Sent Events in a different frame shape — the framing is a strategy: `toSSE({ framing })`, default the frames it always wrote | `SseFraming` + `agentfootprintSse` (`agentfootprint/observe`) | `src/hosting/stream.ts` | 10.4.0 |
 
 **Maintaining this table:** a new public capability adds a row, in the same
 change that adds the capability. `test/docs/capability-index.test.ts` fails if a

package/README.md

@@ -228,6 +228,50 @@ Build the entire app against in-memory mocks with **zero API cost**, then swap r
 
 The flowchart, recorders, and tests don't change between dev and prod.
 
+## Any AG-UI frontend — no glue code
+
+AG-UI frontends (CopilotKit, the AG-UI Dojo, any `@ag-ui/client` app) all speak one protocol: POST a `RunAgentInput`, read a stream of typed events. An agentfootprint run is already a stream of typed events, so the only missing piece is the adapter between them — `agUi()`. Hand it to `streamHandler`, a plain `(request) => Promise<Response>` that mounts in Next.js, Hono, Bun, Deno or Workers, and the frontend shows streamed text, tool calls with their results, steps and sub-agents.
+
+A browser request is untrusted, so the handler decides nothing on its word: it builds a fresh agent for every request, binds the thread to the caller *your* verifier proves (`verifiedThreads` — a checked bearer token or sign-in, never a header read as a name), keeps the conversation on the server (`sessions`) and takes only the person's newest message from the page. It reads only what the run *serves*, so anything your redaction policy hides never reaches the browser.
+
+```ts
+// npm install agentfootprint @ag-ui/core @ag-ui/encoder
+import { Agent } from 'agentfootprint';
+import { mock } from 'agentfootprint/providers';
+import { memorySessions, streamHandler, verifiedThreads } from 'agentfootprint/hosting';
+import { agUi } from 'agentfootprint/ag-ui';
+
+// Who is calling — PROVEN, not claimed. A real app: jwksIdentity({ jwksUrl, issuer, audience })
+// from 'agentfootprint/security'. This demo verifier knows one token.
+const verify = async (token: string) => {
+  if (token !== 'demo-token-for-ada') throw new Error('unknown token');
+  return { userId: 'ada' };
+};
+
+const handler = streamHandler({
+  // A fresh agent per request — nothing one caller's run leaves behind reaches another.
+  agent: () =>
+    Agent.create({ provider: mock({ reply: 'Hello from agentfootprint.' }), model: 'mock' })
+      .system('Be brief.')
+      .build(),
+  adapter: agUi(),
+  threads: verifiedThreads({ verify }), // no valid token → 401; the thread is the caller's own
+  sessions: memorySessions(), // the conversation lives on the server (one turn per thread, per process)
+}); // Next.js: export const POST = handler;
+
+// What an AG-UI frontend sends, and what it reads back:
+const response = await handler(
+  new Request('http://localhost/agent', {
+    method: 'POST',
+    headers: { 'content-type': 'application/json', authorization: 'Bearer demo-token-for-ada' },
+    body: JSON.stringify({ threadId: 't1', runId: 'r1', messages: [{ id: 'u1', role: 'user', content: 'Hi' }] }),
+  }),
+);
+console.log(await response.text()); // data: {"type":"RUN_STARTED",…} … data: {"type":"RUN_FINISHED",…}
+```
+
+Two turns with a tool call, end to end: [`examples/deploy/ag-ui.ts`](examples/deploy/ag-ui.ts) · frontend tools, interrupts, what a page may not decide, and what goes out: [AG-UI frontends](https://agentfootprint.dev/docs/infrastructure/ag-ui/).
+
 ## Building with an AI coding assistant
 
 agentfootprint is written to be used — and maintained — by coding agents.

package/ai-instructions/claude-code/SKILL.md

@@ -34,9 +34,9 @@ Two more absences: there is **no runtime force-stop governor** (`routeRecorder()
 only *labels* a spinning run; `maxIterations` is the hard stop), and there is **no
 automatic re-delivery of an ageing skill body** (the inert `refreshPolicy` was removed in 10.0.0 — use `surfaceMode: 'both'`).
 
-## Subpath map — 18 doors
+## Subpath map — 19 doors
 
-`agentfootprint` (main barrel: `Agent`, `LLMCall`, `defineTool`, control flow, patterns, `defineRAG`, pause/resume) · `/providers` (`mock`, `anthropic`, `openai`, `bedrock`, `ollama`, `mcpClient`, embedders — every provider, so bundlers never walk the vendor SDKs from the main barrel) · `/context` (`defineSkill`, `defineFact`, `defineSteering`, `defineInstruction`, `skillGraph`, `skillsFromDir`, the scorers) · `/memory` (`defineMemory`, `InMemoryStore`, `mockEmbedder`, the stores) · `/rag` (stores + loaders; `defineRAG` itself is on the main barrel) · `/observe` (recorders, tracing, `RunStep`) · `/resilience` (provider decorators) · `/reliability` (only the reliability gate's distinct `CircuitOpenError`; rules live on `/resilience`) · `/cache` (prefix-cache strategies, chosen from the provider's declared `promptCaching` by `cacheStrategyFor`) · `/security` · `/hosting` · `/events` · `/skill-graph` (the routing layer with no framework attached, for a host that is not this agent) · `/recipes` (`defineAgentRecipe` — one named, versioned agent setup, applied with `.recipe()`) · `/maps` (`Claim<T>` and the map-engagement vocabulary behind `.maps()`) · `/classify` (the calibrated-classifier port: `Classifier`, `mockClassifier`) · `/ontology` (`defineOntology` — a declared map of the domain, mounted with `.ontology()`) · `/time` (`convertForTool` + `sugarForms` + `granularityMsOf` — the time layer's own answer to whether and how a tool reads a window, for an app outside a run; the steps `convertExact`, `convertWidened`, `periodFactProblem` too). `package.json` `exports` is the complete list; a path not on it does not resolve.
+`agentfootprint` (main barrel: `Agent`, `LLMCall`, `defineTool`, control flow, patterns, `defineRAG`, pause/resume) · `/providers` (`mock`, `anthropic`, `openai`, `bedrock`, `ollama`, `mcpClient`, embedders — every provider, so bundlers never walk the vendor SDKs from the main barrel) · `/context` (`defineSkill`, `defineFact`, `defineSteering`, `defineInstruction`, `skillGraph`, `skillsFromDir`, the scorers) · `/memory` (`defineMemory`, `InMemoryStore`, `mockEmbedder`, the stores) · `/rag` (stores + loaders; `defineRAG` itself is on the main barrel) · `/observe` (recorders, tracing, `RunStep`) · `/resilience` (provider decorators) · `/reliability` (only the reliability gate's distinct `CircuitOpenError`; rules live on `/resilience`) · `/cache` (prefix-cache strategies, chosen from the provider's declared `promptCaching` by `cacheStrategyFor`) · `/security` · `/hosting` · `/events` · `/skill-graph` (the routing layer with no framework attached, for a host that is not this agent) · `/recipes` (`defineAgentRecipe` — one named, versioned agent setup, applied with `.recipe()`) · `/maps` (`Claim<T>` and the map-engagement vocabulary behind `.maps()`) · `/classify` (the calibrated-classifier port: `Classifier`, `mockClassifier`) · `/ontology` (`defineOntology` — a declared map of the domain, mounted with `.ontology()`) · `/time` (`convertForTool` + `sugarForms` + `granularityMsOf` — the time layer's own answer to whether and how a tool reads a window, for an app outside a run; the steps `convertExact`, `convertWidened`, `periodFactProblem` too) · `/ag-ui` (`agUi()` — the AG-UI adapter: `streamHandler({ agent: () => buildAgent(), adapter: agUi(), threads: verifiedThreads(identity), sessions })` from `/hosting` serves agents to any AG-UI frontend, a fresh agent per request, the thread bound to the VERIFIED caller; `agUiSerializer` + `agUiSse` for a transport of your own; framed by the optional peer `@ag-ui/encoder`). `package.json` `exports` is the complete list; a path not on it does not resolve.
 
 ## Core Concepts
 

package/dist/adapters/mcp/agentcoreRuntime/errorType.js

@@ -0,0 +1,24 @@
+"use strict";
+/**
+ * errorType — the error type an AWS REST answer names in its
+ * `x-amzn-errortype` header, trimmed to the bare name.
+ *
+ * The header may carry a `:` suffix (a URL) or a `namespace#` prefix; both are
+ * removed, so `aws.protocols#AccessDeniedException:http://…` reads
+ * `AccessDeniedException` — the name the SDK gives the same exception.
+ *
+ * Pattern: pure helper. Role: outer ring, vendor fact.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.awsErrorType = void 0;
+/** The bare error type, or `undefined` when the answer names none. */
+function awsErrorType(headers) {
+    const raw = headers.get('x-amzn-errortype');
+    if (raw === null)
+        return undefined;
+    const withoutSuffix = raw.split(':')[0] ?? '';
+    const name = withoutSuffix.slice(withoutSuffix.lastIndexOf('#') + 1).trim();
+    return name === '' ? undefined : name;
+}
+exports.awsErrorType = awsErrorType;
+//# sourceMappingURL=errorType.js.map

package/dist/adapters/mcp/agentcoreRuntime/errorType.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errorType.js","sourceRoot":"","sources":["../../../../src/adapters/mcp/agentcoreRuntime/errorType.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAEH,sEAAsE;AACtE,SAAgB,YAAY,CAAC,OAAgB;IAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC5C,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACnC,MAAM,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5E,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AACxC,CAAC;AAND,oCAMC"}

package/dist/adapters/mcp/agentcoreRuntime/invoke.js

@@ -0,0 +1,265 @@
+"use strict";
+/**
+ * invoke — the SigV4 auth strategy: Streamable HTTP, carried by the AWS SDK's
+ * `InvokeAgentRuntime`.
+ *
+ * The MCP client speaks HTTP — a POST, a few headers, a JSON body — and the SDK
+ * operation carries exactly that, field for field. This file is the mapping and
+ * nothing else. Every name in it is the SDK's own (`InvokeAgentRuntimeRequest`
+ * / `InvokeAgentRuntimeResponse` in `@aws-sdk/client-bedrock-agentcore`), read
+ * off an installed package rather than recalled:
+ *
+ *   request                                       InvokeAgentRuntimeRequest
+ *   ─────────────────────────────────────────────  ────────────────────────
+ *   body                                          payload (bytes)
+ *   content-type                                  contentType
+ *   accept                                        accept
+ *   mcp-session-id                                mcpSessionId
+ *   mcp-protocol-version                          mcpProtocolVersion
+ *   x-amzn-bedrock-agentcore-runtime-session-id   runtimeSessionId
+ *   (the runtime, from options)                   agentRuntimeArn, qualifier, accountId
+ *
+ *   InvokeAgentRuntimeResponse                    response
+ *   ─────────────────────────────────────────────  ────────────────────────
+ *   statusCode                                    status
+ *   contentType                                   content-type
+ *   mcpSessionId                                  mcp-session-id
+ *   mcpProtocolVersion                            mcp-protocol-version
+ *   runtimeSessionId                              x-amzn-bedrock-agentcore-runtime-session-id
+ *   response (a stream)                           body
+ *
+ * The signature is the SDK's: `send` signs every attempt with the client's own
+ * credentials, so no credential passes through this file.
+ *
+ * ── The SDK's own retry is OFF ───────────────────────────────────────────────
+ * The client built here has `maxAttempts: 1`. The SDK's standard policy would
+ * re-send a `tools/call` after a 5xx or a dropped connection — a call that may
+ * already have run, in the same pinned session — which is the one thing a retry
+ * here must never do. Every retry goes through the transport's single loop
+ * instead, which repeats only refusals the service made before running
+ * anything. A `client` you pass keeps ITS policy: build it with
+ * `maxAttempts: 1` for the same guarantee.
+ *
+ * ── A service exception is an ANSWER ─────────────────────────────────────────
+ * When the service answers with a non-2xx status, the SDK throws instead of
+ * returning — `RetryableConflictException` (409), `ThrottlingException` (429),
+ * or a hosted server's own 404 as `Unknown`. Each is handed on as the `Response`
+ * an HTTPS caller would have read: its status, its error type in
+ * `x-amzn-errortype`, `retry-after` when the service sent one, and as the body
+ * the server's own JSON-RPC error when it sent one (the SDK spreads a body it
+ * cannot model onto the exception) — never the exception's message, which can
+ * quote the signed request. What the MCP client may read of it is decided
+ * once, by `safeAnswer.ts`. So the transport's retry decision sees the 409,
+ * `mcpClient`'s 429 retry sees the 429, and the MCP client reports the
+ * status. A failure with no status — the
+ * network, an abort — never reached the service as an answer, and is thrown as
+ * it is.
+ *
+ * ── What the operation cannot carry ──────────────────────────────────────────
+ * Any method but POST. A GET (the optional server-message stream) and a DELETE
+ * (ending a session) are answered HERE with 405, which the MCP Streamable HTTP
+ * spec defines as "not offered" for both, so the MCP client carries on. And any
+ * header the operation does not model — it has no field to put one in.
+ *
+ * Pattern: Adapter (fetch ↔ command). Role: outer ring, lazy AWS peer dep.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.invokeFetch = exports.invokeSdk = void 0;
+const lazyRequire_js_1 = require("../../../lib/lazyRequire.js");
+const sdkLoadFailure_js_1 = require("../../../mcp/sdkLoadFailure.js");
+const session_js_1 = require("./session.js");
+const MCP_PROTOCOL_VERSION_HEADER = 'Mcp-Protocol-Version';
+const SDK_PACKAGE = '@aws-sdk/client-bedrock-agentcore';
+/**
+ * The client and the command constructor this strategy sends with.
+ *
+ * Loaded when the transport is BUILT, not at the first call, so a missing peer
+ * dependency is refused where the transport is declared rather than mid-run.
+ *
+ * @throws when the SDK cannot be loaded, or when it lacks what is needed.
+ */
+function invokeSdk(options) {
+    const mod = options.sdk ?? loadSdk();
+    const Command = mod.InvokeAgentRuntimeCommand;
+    if (!Command) {
+        throw new Error(`agentCoreRuntimeMcpTransport: \`${SDK_PACKAGE}\` is installed but has no ` +
+            '`InvokeAgentRuntimeCommand`. Upgrade the SDK.');
+    }
+    if (options.client)
+        return { client: options.client, InvokeAgentRuntimeCommand: Command };
+    if (!mod.BedrockAgentCoreClient) {
+        throw new Error(`agentCoreRuntimeMcpTransport: \`${SDK_PACKAGE}\` is installed but has no ` +
+            '`BedrockAgentCoreClient`. Upgrade the SDK.');
+    }
+    return {
+        // The SDK's own retry OFF: it would re-send work that may have run.
+        client: new mod.BedrockAgentCoreClient({ region: options.region, maxAttempts: 1 }),
+        InvokeAgentRuntimeCommand: Command,
+    };
+}
+exports.invokeSdk = invokeSdk;
+function loadSdk() {
+    try {
+        return (0, lazyRequire_js_1.lazyRequire)('@aws-sdk/client-bedrock-agentcore');
+    }
+    catch (err) {
+        throw new Error((0, sdkLoadFailure_js_1.sdkLoadFailure)(err, {
+            notInstalled: `agentCoreRuntimeMcpTransport (auth: 'sigv4') requires the \`${SDK_PACKAGE}\` peer ` +
+                'dependency.\n' +
+                `  Install:  npm install ${SDK_PACKAGE}\n` +
+                '  Or use `auth: { bearer }` for a runtime with OAuth inbound auth — that path is plain\n' +
+                '  HTTPS and loads no AWS SDK.',
+            caller: 'agentCoreRuntimeMcpTransport',
+            specifier: SDK_PACKAGE,
+            instead: 'SigV4 signs with AWS credentials, which belong on a server. From a browser, use ' +
+                '`auth: { bearer }` — plain HTTPS, no AWS SDK.',
+        }));
+    }
+}
+/** Statuses whose response may not carry a body, by the Fetch standard. */
+const NULL_BODY_STATUS = new Set([204, 205, 304]);
+/**
+ * A `fetch` that sends each request as one `InvokeAgentRuntimeCommand`.
+ *
+ * The URL the MCP client passes is ignored on purpose: it names the endpoint for
+ * reports and errors, while the invocation goes to `target` — the SDK resolves
+ * the endpoint itself, from the client's region.
+ */
+function invokeFetch(target, client, InvokeAgentRuntimeCommand) {
+    return async (_input, init) => {
+        const method = (init?.method ?? 'GET').toUpperCase();
+        if (method !== 'POST') {
+            return new Response(null, { status: 405, statusText: 'Method Not Allowed' });
+        }
+        const headers = new Headers(init?.headers);
+        const command = new InvokeAgentRuntimeCommand({
+            agentRuntimeArn: target.agentRuntimeArn,
+            ...(target.qualifier !== undefined && { qualifier: target.qualifier }),
+            ...(target.accountId !== undefined && { accountId: target.accountId }),
+            payload: payloadOf(init?.body),
+            ...field('contentType', headers.get('content-type')),
+            ...field('accept', headers.get('accept')),
+            ...field('mcpSessionId', headers.get(session_js_1.MCP_SESSION_HEADER)),
+            ...field('mcpProtocolVersion', headers.get(MCP_PROTOCOL_VERSION_HEADER)),
+            ...field('runtimeSessionId', headers.get(session_js_1.AGENTCORE_RUNTIME_SESSION_HEADER)),
+        });
+        let answer;
+        try {
+            answer = ((await client.send(command, init?.signal ? { abortSignal: init.signal } : undefined)) ?? {});
+        }
+        catch (err) {
+            const answered = serviceAnswerOf(err);
+            if (answered === undefined)
+                throw err;
+            return answered;
+        }
+        return responseOf(answer);
+    };
+}
+exports.invokeFetch = invokeFetch;
+/**
+ * An SDK service exception as the `Response` the service sent: its status, its
+ * error type, its `retry-after`. `undefined` for anything that carries no
+ * status — that failure never came back from the service as an answer.
+ */
+function serviceAnswerOf(err) {
+    if (err === null || typeof err !== 'object')
+        return undefined;
+    const failure = err;
+    const status = failure.$metadata?.httpStatusCode;
+    if (typeof status !== 'number' || !Number.isInteger(status) || status < 400 || status > 599) {
+        return undefined;
+    }
+    const headers = new Headers({ 'content-type': 'application/json' });
+    if (typeof failure.name === 'string' && failure.name !== '') {
+        headers.set('x-amzn-errortype', failure.name);
+    }
+    const retryAfter = failure.$response?.headers?.['retry-after'];
+    if (typeof retryAfter === 'string')
+        headers.set('retry-after', retryAfter);
+    // The server's own JSON-RPC error when it sent one (a stateful server's 404
+    // "Session not found"), for its code. The exception's message is never put
+    // in the answer: it can quote the signed request. What the client reads of
+    // either is decided by `safeAnswer.ts`, outside the retry.
+    const error = failure.error;
+    const body = error !== null && typeof error === 'object' && !Array.isArray(error)
+        ? { jsonrpc: failure.jsonrpc ?? '2.0', id: failure.id ?? null, error }
+        : {};
+    return new Response(JSON.stringify(body), { status, headers });
+}
+/** An optional request field: present only when the header was. */
+function field(name, value) {
+    return value === null || value === '' ? {} : { [name]: value };
+}
+/**
+ * The request body as the bytes `payload` takes. The MCP client always sends a
+ * JSON string; the other forms are accepted because they are bytes already.
+ * A stream or a form is refused by name — re-reading one is not this file's to
+ * do, and dropping it would send an empty request.
+ */
+function payloadOf(body) {
+    if (body === undefined || body === null)
+        return new Uint8Array();
+    if (typeof body === 'string')
+        return new TextEncoder().encode(body);
+    if (body instanceof Uint8Array)
+        return body;
+    if (body instanceof ArrayBuffer)
+        return new Uint8Array(body);
+    if (ArrayBuffer.isView(body)) {
+        return new Uint8Array(body.buffer, body.byteOffset, body.byteLength);
+    }
+    throw new TypeError('agentCoreRuntimeMcpTransport: a request body must be a string or bytes to travel as ' +
+        "InvokeAgentRuntime's `payload`; got a stream or form body, which this transport does " +
+        'not read.');
+}
+/** The SDK's answer as the `Response` the MCP client reads. */
+async function responseOf(answer) {
+    const status = answer.statusCode ?? 200;
+    const headers = new Headers();
+    if (answer.contentType)
+        headers.set('content-type', answer.contentType);
+    if (answer.mcpSessionId)
+        headers.set(session_js_1.MCP_SESSION_HEADER, answer.mcpSessionId);
+    if (answer.mcpProtocolVersion)
+        headers.set(MCP_PROTOCOL_VERSION_HEADER, answer.mcpProtocolVersion);
+    if (answer.runtimeSessionId) {
+        headers.set(session_js_1.AGENTCORE_RUNTIME_SESSION_HEADER, answer.runtimeSessionId);
+    }
+    if (NULL_BODY_STATUS.has(status)) {
+        await release(answer.response);
+        return new Response(null, { status, headers });
+    }
+    return new Response(await bodyOf(answer.response), { status, headers });
+}
+/**
+ * The SDK's streaming body, kept streaming where it can be: an SSE reply then
+ * reaches the MCP client event by event, as it would over plain HTTP.
+ */
+async function bodyOf(stream) {
+    if (stream === undefined || stream === null)
+        return null;
+    if (typeof stream === 'string' || stream instanceof Uint8Array)
+        return stream;
+    const sdkStream = stream;
+    if (typeof sdkStream.transformToWebStream === 'function') {
+        return sdkStream.transformToWebStream();
+    }
+    if (typeof sdkStream.transformToByteArray === 'function') {
+        return sdkStream.transformToByteArray();
+    }
+    throw new TypeError('agentCoreRuntimeMcpTransport: InvokeAgentRuntime answered with a `response` that is ' +
+        'neither bytes nor an SDK stream (no transformToWebStream / transformToByteArray). ' +
+        'Upgrade @aws-sdk/client-bedrock-agentcore.');
+}
+/** Drain a body nobody will read, so the SDK's socket is released. Never throws. */
+async function release(stream) {
+    try {
+        const sdkStream = stream;
+        await sdkStream?.transformToByteArray?.();
+    }
+    catch {
+        // A body that will not drain is not worth failing a delivered reply over.
+    }
+}
+//# sourceMappingURL=invoke.js.map

package/dist/adapters/mcp/agentcoreRuntime/invoke.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invoke.js","sourceRoot":"","sources":["../../../../src/adapters/mcp/agentcoreRuntime/invoke.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+DG;;;AAEH,gEAA0D;AAC1D,sEAAgE;AAEhE,6CAAoF;AAEpF,MAAM,2BAA2B,GAAG,sBAAsB,CAAC;AAC3D,MAAM,WAAW,GAAG,mCAAmC,CAAC;AAmCxD;;;;;;;GAOG;AACH,SAAgB,SAAS,CAAC,OAAyB;IAIjD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,GAAG,CAAC,yBAAyB,CAAC;IAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,mCAAmC,WAAW,6BAA6B;YACzE,+CAA+C,CAClD,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,yBAAyB,EAAE,OAAO,EAAE,CAAC;IAC1F,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,mCAAmC,WAAW,6BAA6B;YACzE,4CAA4C,CAC/C,CAAC;IACJ,CAAC;IACD,OAAO;QACL,oEAAoE;QACpE,MAAM,EAAE,IAAI,GAAG,CAAC,sBAAsB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;QAClF,yBAAyB,EAAE,OAAO;KACnC,CAAC;AACJ,CAAC;AAxBD,8BAwBC;AAED,SAAS,OAAO;IACd,IAAI,CAAC;QACH,OAAO,IAAA,4BAAW,EAAmC,mCAAmC,CAAC,CAAC;IAC5F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,IAAA,kCAAc,EAAC,GAAG,EAAE;YAClB,YAAY,EACV,+DAA+D,WAAW,UAAU;gBACpF,eAAe;gBACf,2BAA2B,WAAW,IAAI;gBAC1C,0FAA0F;gBAC1F,+BAA+B;YACjC,MAAM,EAAE,8BAA8B;YACtC,SAAS,EAAE,WAAW;YACtB,OAAO,EACL,kFAAkF;gBAClF,+CAA+C;SAClD,CAAC,CACH,CAAC;IACJ,CAAC;AACH,CAAC;AAYD,2EAA2E;AAC3E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAElD;;;;;;GAMG;AACH,SAAgB,WAAW,CACzB,MAAoB,EACpB,MAAiC,EACjC,yBAA0D;IAE1D,OAAO,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QAC5B,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACrD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,yBAAyB,CAAC;YAC5C,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;YACtE,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;YACtE,OAAO,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC;YAC9B,GAAG,KAAK,CAAC,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACpD,GAAG,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACzC,GAAG,KAAK,CAAC,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,+BAAkB,CAAC,CAAC;YACzD,GAAG,KAAK,CAAC,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;YACxE,GAAG,KAAK,CAAC,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,6CAAgC,CAAC,CAAC;SAC5E,CAAC,CAAC;QACH,IAAI,MAAoB,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAC1B,OAAO,EACP,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CACxD,CAAC,IAAI,EAAE,CAAiB,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,QAAQ,KAAK,SAAS;gBAAE,MAAM,GAAG,CAAC;YACtC,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC,CAAC;AACJ,CAAC;AAnCD,kCAmCC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,GAAY;IACnC,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,OAAO,GAAG,GAUf,CAAC;IACF,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,cAAc,CAAC;IACjD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;QAC5F,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACpE,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,aAAa,CAAC,CAAC;IAC/D,IAAI,OAAO,UAAU,KAAK,QAAQ;QAAE,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IAC3E,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,2DAA2D;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,IAAI,GACR,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAClE,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,IAAI,EAAE,KAAK,EAAE;QACtE,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,mEAAmE;AACnE,SAAS,KAAK,CAAC,IAAY,EAAE,KAAoB;IAC/C,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,SAAS,SAAS,CAAC,IAAqC;IACtD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,UAAU,EAAE,CAAC;IACjE,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpE,IAAI,IAAI,YAAY,UAAU;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,IAAI,YAAY,WAAW;QAAE,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7D,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,IAAI,SAAS,CACjB,sFAAsF;QACpF,uFAAuF;QACvF,WAAW,CACd,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,KAAK,UAAU,UAAU,CAAC,MAAoB;IAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,IAAI,GAAG,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,IAAI,MAAM,CAAC,WAAW;QAAE,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,YAAY;QAAE,OAAO,CAAC,GAAG,CAAC,+BAAkB,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IAC9E,IAAI,MAAM,CAAC,kBAAkB;QAC3B,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACtE,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,6CAAgC,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/B,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,QAAQ,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,MAAM,CAAC,MAAe;IACnC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACzD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,YAAY,UAAU;QAAE,OAAO,MAAM,CAAC;IAC9E,MAAM,SAAS,GAAG,MAGjB,CAAC;IACF,IAAI,OAAO,SAAS,CAAC,oBAAoB,KAAK,UAAU,EAAE,CAAC;QACzD,OAAO,SAAS,CAAC,oBAAoB,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,SAAS,CAAC,oBAAoB,KAAK,UAAU,EAAE,CAAC;QACzD,OAAO,SAAS,CAAC,oBAAoB,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,IAAI,SAAS,CACjB,sFAAsF;QACpF,oFAAoF;QACpF,4CAA4C,CAC/C,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,KAAK,UAAU,OAAO,CAAC,MAAe;IACpC,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAA0E,CAAC;QAC7F,MAAM,SAAS,EAAE,oBAAoB,EAAE,EAAE,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;IAC5E,CAAC;AACH,CAAC"}