agentfootprint 10.3.1 → 10.4.0

package/dist/hosting/streamHandler.js

@@ -0,0 +1,497 @@
+"use strict";
+/**
+ * streamHandler — one run per request, streamed in a wire protocol, as a
+ * framework-agnostic Fetch-API handler: `(request: Request) => Promise<Response>`.
+ *
+ * Pattern: Template method over a {@link ProtocolAdapter} (the protocol is a
+ *          strategy; AG-UI is one). Everything HTTP happens here once — the
+ *          door guard, the body ceiling, the JSON parse, binding the
+ *          conversation to its caller, keeping it between requests, the client
+ *          hanging up, a failure that is never the process's — so an adapter
+ *          only reads its request, plans the turn and translates.
+ * Role:    the host for a protocol whose response is a STREAM OF EVENTS rather
+ *          than text pieces (`httpHost`'s port). It mounts in anything that
+ *          speaks `Request`/`Response` — a framework's route handler, an edge
+ *          or serverless runtime, or Node through any fetch adapter.
+ *          Deliberately names no vendor, like every file in this folder.
+ *
+ * THE REQUEST IS UNTRUSTED. A body is what anybody could send. It decides
+ * nothing the server owns:
+ *   - WHO is calling and WHICH conversation is theirs come from the app's
+ *     {@link ThreadBinder} (`threads`), from the request's headers — the id a
+ *     request names is format-checked caller data and never a key;
+ *   - WHAT WAS SAID BEFORE comes from the server: the session store
+ *     (`sessions`), or the agent's own memory keyed by the bound session;
+ *   - WHAT A PAUSED RUN WAITS ON is the stored run's own record — an answer is
+ *     matched to it by the adapter, never taken on the request's word;
+ *   - identity, credentials and redaction settings never come from a request.
+ *
+ * NOTHING IS SHARED BETWEEN REQUESTS. Every request builds a FRESH runner
+ * (`agent`, a factory): footprintjs runs one executor per run and a runner
+ * holds one run's context, so a request can neither see another's events nor
+ * leave anything behind for one — no shared listener, recorder, buffer or tool
+ * session. A factory that hands back a runner it handed back before is refused.
+ * The handler's own state is KEYS, never content: the bound conversations
+ * with a turn in flight and who holds each (a second turn on one conversation
+ * is refused rather than racing the first for the stored state), and the
+ * runners already used (by identity, held weakly).
+ *
+ * ONE TURN PER THREAD IS A PER-PROCESS GUARD. Two instances of the handler
+ * (several serverless instances, several workers) do not see each other's
+ * turns: route a thread to one instance (sticky sessions), or a double-sent
+ * answer can resume one paused run twice and a later persist can overwrite an
+ * earlier one. The session store port has no compare-and-set yet.
+ *
+ * The laws it keeps from `httpHost`:
+ *   - The door guard runs first, on the headers alone (`doorGuard.ts`): a Host
+ *     not configured (421), a browser origin not allowed (403), a POST that
+ *     does not say it is JSON (415). A refused body is never read.
+ *   - A body over `maxBodyBytes` is refused at the byte that crosses it (413).
+ *   - A refusal answers with its own status and code (`refusalStatus.ts`);
+ *     anything else is a 500 that names nothing the caller sent and no thrown
+ *     message.
+ *   - Nothing in a request's lifecycle is the process's failure: every step is
+ *     caught, and a stream always ends.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.streamHandler = exports.DEFAULT_STREAM_HEARTBEAT_MS = exports.DEFAULT_STREAM_MAX_BODY_BYTES = void 0;
+const eventMeta_js_1 = require("../bridge/eventMeta.js");
+const pause_js_1 = require("../core/pause.js");
+const wireJson_js_1 = require("../lib/wireJson.js");
+const doorGuard_js_1 = require("./doorGuard.js");
+const envelope_js_1 = require("./envelope.js");
+const errors_js_1 = require("./errors.js");
+const pendingAsk_js_1 = require("./pendingAsk.js");
+const refusalStatus_js_1 = require("./refusalStatus.js");
+/** The default body ceiling — 1 MiB, the same as `nodeHost`. */
+exports.DEFAULT_STREAM_MAX_BODY_BYTES = 1_048_576;
+/** The default keep-alive interval: an SSE comment every 15 s of silence. */
+exports.DEFAULT_STREAM_HEARTBEAT_MS = 15_000;
+/**
+ * Serve runs in `adapter`'s protocol: POST a protocol request, read a stream
+ * of the protocol's events.
+ *
+ * @throws TypeError at construction for options that cannot be served, and
+ *   when the adapter's framing cannot be built (an optional peer missing) —
+ *   refused at boot, never mid-request.
+ *
+ * @example A route handler that speaks `Request`/`Response`
+ * ```ts
+ * import { memorySessions, streamHandler } from 'agentfootprint/hosting';
+ * import { agUi } from 'agentfootprint/ag-ui';
+ *
+ * export const POST = streamHandler({
+ *   agent: ({ tools }) => buildAgent(tools), // a fresh agent per request
+ *   adapter: agUi(),
+ *   threads: { bind: ({ conversation, headers }) => bindToUser(conversation, headers) },
+ *   sessions: memorySessions(),
+ * });
+ * ```
+ */
+function streamHandler(options) {
+    const { adapter, threads, sessions } = options;
+    const name = options.name ?? `${adapter.name} stream`;
+    if (typeof options.agent !== 'function') {
+        throw new TypeError(`[hosting] '${name}': agent must be a function that builds a FRESH runner for every ` +
+            `request — a runner holds one run's context, and one shared between requests would ` +
+            `hand one caller's run to another.`);
+    }
+    if (sessions !== undefined && threads === undefined) {
+        throw new TypeError(`[hosting] '${name}': sessions needs threads. A conversation is kept under the key the ` +
+            `app binds to its caller (threads.bind), never under the id a request names.`);
+    }
+    const limit = positive(options.maxBodyBytes, exports.DEFAULT_STREAM_MAX_BODY_BYTES, 'maxBodyBytes', name);
+    const heartbeatMs = options.heartbeatMs ?? exports.DEFAULT_STREAM_HEARTBEAT_MS;
+    if (!Number.isFinite(heartbeatMs) || heartbeatMs < 0) {
+        throw new TypeError(`[hosting] '${name}': heartbeatMs must be 0 (off) or a positive number.`);
+    }
+    const guard = (0, doorGuard_js_1.doorGuard)({ ...options, name });
+    const framing = adapter.framing();
+    const bytes = new TextEncoder();
+    /**
+     * Bound conversations with a turn in flight — the key, and who holds it (so
+     * anybody else hears "not found", never "busy").
+     */
+    const inFlight = new Map();
+    /** Runners already used, by identity — so a factory that shares one is caught. */
+    const used = new WeakSet();
+    /** One answer for "none", "another's" and "nobody's" — a caller learns no ids. */
+    const notFound = () => new errors_js_1.WireRequestRefusal('ERR_SESSION_NOT_FOUND', `'${name}': that conversation is not one you can open.`, 404);
+    /** Bind the conversation the request names to its caller — the app's port decides. */
+    async function bind(request, headers) {
+        if (threads === undefined)
+            return undefined;
+        const thread = await threads.bind({ conversation: adapter.conversation(request), headers });
+        if (thread === null || typeof thread !== 'object' || typeof thread.sessionId !== 'string') {
+            throw new TypeError('threads.bind returned no session');
+        }
+        const bad = (0, doorGuard_js_1.checkSessionId)(thread.sessionId, name);
+        if (bad !== undefined)
+            throw bad;
+        return thread;
+    }
+    /**
+     * The stored conversation, when it is the caller's — refusing one that is not.
+     * Asked BEFORE anything about the conversation's activity, so a caller it is
+     * not learns "not found" and never "busy" — and never holds its turn.
+     */
+    async function ownersOnly(thread) {
+        if (sessions === undefined || thread === undefined)
+            return undefined;
+        await sessions.onWake?.(thread.sessionId, 'invoke');
+        const stored = await sessions.hydrate(thread.sessionId);
+        // Whose conversation this is, before a line of it is read. One answer for
+        // "none", "another's" and "nobody's", so a caller learns no ids.
+        if (stored !== undefined && (0, envelope_js_1.envelopeOwner)(stored) !== thread.identity?.principal)
+            throw notFound();
+        return stored;
+    }
+    /** Read what the server holds for the bound conversation — under the turn's claim. */
+    async function hold(thread) {
+        const stored = await ownersOnly(thread);
+        if (stored === undefined)
+            return { view: { continues: false } };
+        if (stored.format === 'flowchart-v1') {
+            const paused = (0, envelope_js_1.readPausedRun)(stored);
+            const record = paused.wire?.protocol === adapter.name ? paused.wire.record : undefined;
+            return {
+                paused,
+                view: {
+                    continues: false,
+                    awaiting: {
+                        pending: paused.pending,
+                        ...(record !== undefined && { suspension: record }),
+                    },
+                },
+            };
+        }
+        const prior = (0, envelope_js_1.readEnvelope)(stored);
+        return { prior, view: { continues: true } };
+    }
+    /** A fresh runner for this request — never one the factory handed out before. */
+    function build(context) {
+        const runner = options.agent(context);
+        if (runner === null ||
+            typeof runner !== 'object' ||
+            typeof runner.on !== 'function' ||
+            typeof runner.run !== 'function') {
+            throw new TypeError('agent returned no runner');
+        }
+        if (used.has(runner)) {
+            throw new errors_js_1.WireRequestRefusal('ERR_RUNNER_REUSED', `'${name}': the agent factory returned a runner it returned before. Every ` +
+                `request needs a FRESH runner — a shared one hands one caller's run to another.`, 500);
+        }
+        used.add(runner);
+        return runner;
+    }
+    /** Keep what the run left behind, then say how it ended — kept FIRST, told after. */
+    async function keep(turn, out, recordRunId) {
+        const { thread, runner, held, translation } = turn;
+        const store = thread === undefined ? undefined : sessions;
+        if ((0, pause_js_1.isPaused)(out)) {
+            const awaiting = adapter.awaitsCaller?.(out.pauseData) === true ? 'caller' : 'person';
+            if (store !== undefined && thread !== undefined) {
+                const record = translation.suspension?.(awaiting);
+                const conversation = runner.checkpoint?.() ?? noConversation(turn, recordRunId, thread.identity);
+                await store.persist(thread.sessionId, (0, envelope_js_1.toPausedEnvelope)({
+                    checkpoint: out.checkpoint,
+                    conversation,
+                    pending: (0, pendingAsk_js_1.describePause)(out, thread.sessionId),
+                    ...(record !== undefined && { wire: { protocol: adapter.name, record } }),
+                }));
+            }
+            return { kind: 'paused', awaiting };
+        }
+        if (store !== undefined && thread !== undefined) {
+            const conversation = runner.checkpoint?.();
+            if (conversation !== undefined)
+                await store.persist(thread.sessionId, (0, envelope_js_1.toEnvelope)(conversation));
+            // A runner that keeps no conversation still clears the pause it continued.
+            else if (held.paused !== undefined)
+                await store.persist(thread.sessionId, (0, envelope_js_1.toEnvelope)(noConversation(turn, recordRunId, thread.identity)));
+        }
+        return { kind: 'finished' };
+    }
+    /** Run the turn; every event the run serves goes through the translation; settle once. */
+    async function serve(turn, write, signal, release) {
+        const { plan, held, thread, runner, translation } = turn;
+        // A translation that throws is a fault in the adapter, never the run's: the
+        // run goes on, and the stream still ends.
+        const safely = (produce) => {
+            try {
+                write(produce());
+            }
+            catch {
+                // nothing more this request can be told
+            }
+        };
+        let runId;
+        let off;
+        let settlement;
+        try {
+            // The runner is this request's alone; the run filter still holds a fact a
+            // shared resource stamped for another run or session out of the stream.
+            off = runner.on('*', (event) => {
+                const named = event.meta?.runId;
+                if (runId === undefined && typeof named === 'string' && named !== eventMeta_js_1.CONSUMER_SCOPE_RUN_ID)
+                    runId = named;
+                if (!(0, eventMeta_js_1.eventBelongsToRun)(event.meta, { runId: runId ?? '', sessionId: thread?.sessionId }))
+                    return;
+                safely(() => translation.event(event));
+            });
+            if (signal.aborted)
+                throw new Error('the caller left before the run started');
+            const runOptions = {
+                signal,
+                ...(thread !== undefined && { sessionId: thread.sessionId }),
+                ...(thread?.identity !== undefined && { identity: thread.identity }),
+            };
+            const out = plan.turn.kind === 'answer'
+                ? await runner.resume(held.paused.checkpoint, plan.turn.answer, runOptions)
+                : await runner.run((typeof runner.checkpoint === 'function' && held.prior !== undefined
+                    ? { message: plan.turn.message, continueFrom: held.prior }
+                    : { message: plan.turn.message }), runOptions);
+            settlement = await keep(turn, out, runId);
+        }
+        catch {
+            settlement = { kind: signal.aborted ? 'cancelled' : 'failed' };
+        }
+        finally {
+            // The conversation is free BEFORE the caller hears the end — and before
+            // anything else that could throw: a client that answers on RUN_FINISHED
+            // must not find its own turn still running, ever.
+            release();
+            try {
+                if (typeof off === 'function')
+                    off();
+            }
+            catch {
+                // a runner that cannot unsubscribe is thrown away with this request
+            }
+        }
+        safely(() => translation.settle(settlement));
+        // Tool sessions this request's runner opened close with it; a strategy the
+        // app shares between runners is drained, never stopped.
+        void runner.shutdown?.({ stop: false })?.catch(() => undefined);
+    }
+    function respond(turn, request, release) {
+        const abort = new AbortController();
+        const hangUp = () => abort.abort();
+        // A caller already gone never starts its run.
+        if (request.signal?.aborted === true)
+            abort.abort();
+        else
+            request.signal?.addEventListener('abort', hangUp, { once: true });
+        let closed = false;
+        let heartbeat;
+        const stop = () => {
+            closed = true;
+            if (heartbeat !== undefined)
+                clearInterval(heartbeat);
+            request.signal?.removeEventListener('abort', hangUp);
+        };
+        const body = new ReadableStream({
+            start(controller) {
+                const send = (text) => {
+                    if (closed)
+                        return;
+                    try {
+                        controller.enqueue(bytes.encode(text));
+                    }
+                    catch {
+                        stop(); // the stream went away under us
+                    }
+                };
+                const write = (events) => {
+                    for (const event of events)
+                        send(framing.frame(event));
+                };
+                if (heartbeatMs > 0) {
+                    heartbeat = setInterval(() => send(': ping\n\n'), heartbeatMs);
+                    heartbeat.unref?.();
+                }
+                const end = () => {
+                    if (closed)
+                        return;
+                    stop();
+                    try {
+                        controller.close();
+                    }
+                    catch {
+                        // already closed by the reader
+                    }
+                };
+                void serve(turn, write, abort.signal, release).then(end, end);
+            },
+            cancel() {
+                stop();
+                abort.abort();
+            },
+        });
+        return new Response(body, {
+            status: 200,
+            headers: {
+                'content-type': framing.contentType,
+                'cache-control': 'no-cache, no-transform',
+                'x-accel-buffering': 'no',
+            },
+        });
+    }
+    return async (request) => {
+        /** The conversation this request holds while it is in flight — released exactly once. */
+        let claimed;
+        const release = () => {
+            if (claimed !== undefined)
+                inFlight.delete(claimed);
+            claimed = undefined;
+        };
+        try {
+            if (request.method !== 'POST') {
+                return refusal(405, `[hosting] '${name}' answers POST only.`, 'ERR_METHOD_NOT_ALLOWED', {
+                    allow: 'POST',
+                });
+            }
+            const headers = headersOf(request);
+            const refused = guard.check({ method: request.method, headers });
+            if (refused !== undefined)
+                return refusal(refused.status, refused.message, refused.code);
+            const text = await readBody(request, limit, name);
+            let body;
+            try {
+                body = text.trim() === '' ? {} : JSON.parse(text);
+            }
+            catch {
+                return refusal(400, `[hosting] '${name}': the request body is not JSON.`, 'ERR_INVALID_JSON');
+            }
+            const read = adapter.readRequest({ body, headers });
+            const thread = await bind(read, headers);
+            if (thread !== undefined) {
+                // Ownership first: a caller the conversation is not answered "not
+                // found" whether or not a turn is running, and never claims it.
+                await ownersOnly(thread);
+                const principal = thread.identity?.principal;
+                if (inFlight.has(thread.sessionId)) {
+                    // Even before a first turn has stored anything: the claimant is the owner.
+                    if (inFlight.get(thread.sessionId) !== principal)
+                        throw notFound();
+                    return refusal(409, `[hosting] '${name}': a turn of that conversation is already in flight. Send the ` +
+                        `next turn when it ends.`, 'ERR_CONCURRENT_RUN');
+                }
+                inFlight.set(thread.sessionId, principal);
+                claimed = thread.sessionId;
+            }
+            const held = await hold(thread);
+            const plan = adapter.plan(read, held.view, {
+                headers,
+                ...(thread !== undefined && { thread }),
+                keepsConversation: threads !== undefined,
+                keepsPauses: threads !== undefined && sessions !== undefined,
+            });
+            const runner = build({
+                tools: plan.tools ?? [],
+                accepted: plan.accepted ?? {},
+                ...(thread !== undefined && { thread }),
+            });
+            const translation = adapter.open(read, plan.turn.kind === 'answer' ? held.view.awaiting?.suspension : undefined);
+            // The stream owns the claim from here: released when the run ends.
+            const owned = claimed;
+            claimed = undefined;
+            return respond({ plan, held, ...(thread !== undefined && { thread }), runner, translation }, request, () => {
+                if (owned !== undefined)
+                    inFlight.delete(owned);
+            });
+        }
+        catch (err) {
+            return failure(err, name);
+        }
+        finally {
+            release();
+        }
+    };
+}
+exports.streamHandler = streamHandler;
+/**
+ * A conversation record for a runner that keeps none (an `LLMCall`, a
+ * composition): no history, only what a stored session needs — the run, the
+ * message, and whose it is.
+ */
+function noConversation(turn, recordRunId, identity) {
+    const message = turn.plan.turn.kind === 'message'
+        ? turn.plan.turn.message
+        : turn.held.paused?.conversation.originalInput.message ?? '';
+    return {
+        version: 1,
+        runId: recordRunId ?? 'unknown',
+        history: [],
+        lastCompletedIteration: 0,
+        originalInput: { message },
+        checkpointedAt: Date.now(),
+        ...(identity !== undefined && { identity }),
+    };
+}
+/** The refusal an error means — its own status and code, or a 500 that quotes nothing. */
+function failure(err, name) {
+    if (err instanceof errors_js_1.RequestTooLargeError)
+        return refusal(413, err.message, err.code);
+    if (err instanceof errors_js_1.WireRequestRefusal)
+        return refusal(err.status, err.message, err.code);
+    const code = err?.code;
+    if (err instanceof Error && typeof code === 'string' && refusalStatus_js_1.REFUSAL_STATUS[code] !== undefined) {
+        return refusal(refusalStatus_js_1.REFUSAL_STATUS[code], err.message, code);
+    }
+    // Never the thrown message: it is the author's note to their own logs.
+    return refusal(500, `[hosting] '${name}' could not serve the request.`, 'ERR_INTERNAL');
+}
+/** A JSON refusal: `{ error, code }` under the refusal's own status. */
+function refusal(status, message, code, headers = {}) {
+    return new Response((0, wireJson_js_1.toWireJson)({ error: message, code }), {
+        status,
+        headers: { 'content-type': 'application/json', ...headers },
+    });
+}
+/** The request's headers, names lower-cased (the door guard's and an adapter's view). */
+function headersOf(request) {
+    const out = {};
+    request.headers.forEach((value, key) => {
+        out[key.toLowerCase()] = value;
+    });
+    return out;
+}
+/** The body as text, refused at the byte that crosses `limit`. */
+async function readBody(request, limit, name) {
+    const declared = Number(request.headers.get('content-length'));
+    if (Number.isFinite(declared) && declared > limit)
+        throw new errors_js_1.RequestTooLargeError(limit, name);
+    if (request.body === null)
+        return '';
+    const reader = request.body.getReader();
+    const chunks = [];
+    let size = 0;
+    for (;;) {
+        const { done, value } = await reader.read();
+        if (done)
+            break;
+        size += value.byteLength;
+        if (size > limit) {
+            await reader.cancel().catch(() => undefined);
+            throw new errors_js_1.RequestTooLargeError(limit, name);
+        }
+        chunks.push(value);
+    }
+    const all = new Uint8Array(size);
+    let at = 0;
+    for (const chunk of chunks) {
+        all.set(chunk, at);
+        at += chunk.byteLength;
+    }
+    return new TextDecoder().decode(all);
+}
+function positive(value, fallback, field, name) {
+    if (value === undefined)
+        return fallback;
+    if (!Number.isInteger(value) || value <= 0) {
+        throw new TypeError(`[hosting] '${name}': ${field} must be a positive whole number of bytes.`);
+    }
+    return value;
+}
+//# sourceMappingURL=streamHandler.js.map

package/dist/hosting/streamHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"streamHandler.js","sourceRoot":"","sources":["../../src/hosting/streamHandler.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;;;AAEH,yDAAkF;AAClF,+CAAqE;AAGrE,oDAAgD;AAChD,iDAAkF;AAClF,+CAMuB;AACvB,2CAAuE;AACvE,mDAAgD;AAWhD,yDAAoD;AAGpD,gEAAgE;AACnD,QAAA,6BAA6B,GAAG,SAAS,CAAC;AAEvD,6EAA6E;AAChE,QAAA,2BAA2B,GAAG,MAAM,CAAC;AAoElD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAgB,aAAa,CAC3B,OAA+C;IAE/C,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,SAAS,CAAC;IACtD,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACxC,MAAM,IAAI,SAAS,CACjB,cAAc,IAAI,mEAAmE;YACnF,oFAAoF;YACpF,mCAAmC,CACtC,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACpD,MAAM,IAAI,SAAS,CACjB,cAAc,IAAI,sEAAsE;YACtF,6EAA6E,CAChF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,qCAA6B,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAClG,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,mCAA2B,CAAC;IACvE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,SAAS,CAAC,cAAc,IAAI,sDAAsD,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,KAAK,GAAG,IAAA,wBAAS,EAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC;IAChC;;;OAGG;IACH,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA8B,CAAC;IACvD,kFAAkF;IAClF,MAAM,IAAI,GAAG,IAAI,OAAO,EAAU,CAAC;IAEnC,kFAAkF;IAClF,MAAM,QAAQ,GAAG,GAAuB,EAAE,CACxC,IAAI,8BAAkB,CACpB,uBAAuB,EACvB,IAAI,IAAI,+CAA+C,EACvD,GAAG,CACJ,CAAC;IAEJ,sFAAsF;IACtF,KAAK,UAAU,IAAI,CAAC,OAAiB,EAAE,OAAyC;QAC9E,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5F,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC1F,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,GAAG,GAAG,IAAA,6BAAc,EAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,GAAG,CAAC;QACjC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACH,KAAK,UAAU,UAAU,CAAC,MAAiC;QACzD,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACrE,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxD,0EAA0E;QAC1E,iEAAiE;QACjE,IAAI,MAAM,KAAK,SAAS,IAAI,IAAA,2BAAa,EAAC,MAAM,CAAC,KAAK,MAAM,CAAC,QAAQ,EAAE,SAAS;YAC9E,MAAM,QAAQ,EAAE,CAAC;QACnB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,sFAAsF;IACtF,KAAK,UAAU,IAAI,CAAC,MAAiC;QACnD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;QAChE,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,IAAA,2BAAa,EAAC,MAAM,CAAC,CAAC;YACrC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YACvF,OAAO;gBACL,MAAM;gBACN,IAAI,EAAE;oBACJ,SAAS,EAAE,KAAK;oBAChB,QAAQ,EAAE;wBACR,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;qBACpD;iBACF;aACF,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,IAAA,0BAAY,EAAC,MAAM,CAAC,CAAC;QACnC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;IAC9C,CAAC;IAED,iFAAiF;IACjF,SAAS,KAAK,CAAC,OAAyB;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,IACE,MAAM,KAAK,IAAI;YACf,OAAO,MAAM,KAAK,QAAQ;YAC1B,OAAO,MAAM,CAAC,EAAE,KAAK,UAAU;YAC/B,OAAO,MAAM,CAAC,GAAG,KAAK,UAAU,EAChC,CAAC;YACD,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,8BAAkB,CAC1B,mBAAmB,EACnB,IAAI,IAAI,mEAAmE;gBACzE,gFAAgF,EAClF,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,qFAAqF;IACrF,KAAK,UAAU,IAAI,CACjB,IAAkB,EAClB,GAAY,EACZ,WAA+B;QAE/B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;QACnD,MAAM,KAAK,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC1D,IAAI,IAAA,mBAAQ,EAAC,GAAG,CAAC,EAAE,CAAC;YAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;YACtF,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBAChD,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAC;gBAClD,MAAM,YAAY,GAChB,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC9E,MAAM,KAAK,CAAC,OAAO,CACjB,MAAM,CAAC,SAAS,EAChB,IAAA,8BAAgB,EAAC;oBACf,UAAU,EAAE,GAAG,CAAC,UAAU;oBAC1B,YAAY;oBACZ,OAAO,EAAE,IAAA,6BAAa,EAAC,GAAyB,EAAE,MAAM,CAAC,SAAS,CAAC;oBACnE,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC;iBAC1E,CAAC,CACH,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;QACtC,CAAC;QACD,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAChD,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;YAC3C,IAAI,YAAY,KAAK,SAAS;gBAC5B,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,IAAA,wBAAU,EAAC,YAAY,CAAC,CAAC,CAAC;YAClE,2EAA2E;iBACtE,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;gBAChC,MAAM,KAAK,CAAC,OAAO,CACjB,MAAM,CAAC,SAAS,EAChB,IAAA,wBAAU,EAAC,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAC/D,CAAC;QACN,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC9B,CAAC;IAED,0FAA0F;IAC1F,KAAK,UAAU,KAAK,CAClB,IAAkB,EAClB,KAA0C,EAC1C,MAAmB,EACnB,OAAmB;QAEnB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;QACzD,4EAA4E;QAC5E,0CAA0C;QAC1C,MAAM,MAAM,GAAG,CAAC,OAAgC,EAAQ,EAAE;YACxD,IAAI,CAAC;gBACH,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,wCAAwC;YAC1C,CAAC;QACH,CAAC,CAAC;QACF,IAAI,KAAyB,CAAC;QAC9B,IAAI,GAAY,CAAC;QACjB,IAAI,UAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,0EAA0E;YAC1E,wEAAwE;YACxE,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;gBAChC,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,oCAAqB;oBACrF,KAAK,GAAG,KAAK,CAAC;gBAChB,IAAI,CAAC,IAAA,gCAAiB,EAAC,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;oBACtF,OAAO;gBACT,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YACzC,CAAC,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC9E,MAAM,UAAU,GAAG;gBACjB,MAAM;gBACN,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;gBAC5D,GAAG,CAAC,MAAM,EAAE,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;aACrE,CAAC;YACF,MAAM,GAAG,GACP,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ;gBACzB,CAAC,CAAC,MAAM,MAAM,CAAC,MAAM,CAChB,IAAI,CAAC,MAAoB,CAAC,UAAmB,EAC9C,IAAI,CAAC,IAAI,CAAC,MAAe,EACzB,UAAmB,CACpB;gBACH,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CACd,CAAC,OAAO,MAAM,CAAC,UAAU,KAAK,UAAU,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;oBAClE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,EAAE;oBAC1D,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAU,EAC5C,UAAmB,CACpB,CAAC;YACR,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,UAAU,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACjE,CAAC;gBAAS,CAAC;YACT,wEAAwE;YACxE,wEAAwE;YACxE,kDAAkD;YAClD,OAAO,EAAE,CAAC;YACV,IAAI,CAAC;gBACH,IAAI,OAAO,GAAG,KAAK,UAAU;oBAAE,GAAG,EAAE,CAAC;YACvC,CAAC;YAAC,MAAM,CAAC;gBACP,oEAAoE;YACtE,CAAC;QACH,CAAC;QACD,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAC7C,2EAA2E;QAC3E,wDAAwD;QACxD,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAClE,CAAC;IAED,SAAS,OAAO,CAAC,IAAkB,EAAE,OAAgB,EAAE,OAAmB;QACxE,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,GAAS,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzC,8CAA8C;QAC9C,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI;YAAE,KAAK,CAAC,KAAK,EAAE,CAAC;;YAC/C,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvE,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,SAAqD,CAAC;QAC1D,MAAM,IAAI,GAAG,GAAS,EAAE;YACtB,MAAM,GAAG,IAAI,CAAC;YACd,IAAI,SAAS,KAAK,SAAS;gBAAE,aAAa,CAAC,SAAS,CAAC,CAAC;YACtD,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACvD,CAAC,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,cAAc,CAAa;YAC1C,KAAK,CAAC,UAAU;gBACd,MAAM,IAAI,GAAG,CAAC,IAAY,EAAQ,EAAE;oBAClC,IAAI,MAAM;wBAAE,OAAO;oBACnB,IAAI,CAAC;wBACH,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;oBACzC,CAAC;oBAAC,MAAM,CAAC;wBACP,IAAI,EAAE,CAAC,CAAC,gCAAgC;oBAC1C,CAAC;gBACH,CAAC,CAAC;gBACF,MAAM,KAAK,GAAG,CAAC,MAAyB,EAAQ,EAAE;oBAChD,KAAK,MAAM,KAAK,IAAI,MAAM;wBAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;gBACzD,CAAC,CAAC;gBACF,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;oBACpB,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,WAAW,CAAC,CAAC;oBAC9D,SAAoC,CAAC,KAAK,EAAE,EAAE,CAAC;gBAClD,CAAC;gBACD,MAAM,GAAG,GAAG,GAAS,EAAE;oBACrB,IAAI,MAAM;wBAAE,OAAO;oBACnB,IAAI,EAAE,CAAC;oBACP,IAAI,CAAC;wBACH,UAAU,CAAC,KAAK,EAAE,CAAC;oBACrB,CAAC;oBAAC,MAAM,CAAC;wBACP,+BAA+B;oBACjC,CAAC;gBACH,CAAC,CAAC;gBACF,KAAK,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAChE,CAAC;YACD,MAAM;gBACJ,IAAI,EAAE,CAAC;gBACP,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,CAAC;SACF,CAAC,CAAC;QACH,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;YACxB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,cAAc,EAAE,OAAO,CAAC,WAAW;gBACnC,eAAe,EAAE,wBAAwB;gBACzC,mBAAmB,EAAE,IAAI;aAC1B;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,yFAAyF;QACzF,IAAI,OAA2B,CAAC;QAChC,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,IAAI,OAAO,KAAK,SAAS;gBAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACpD,OAAO,GAAG,SAAS,CAAC;QACtB,CAAC,CAAC;QACF,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC9B,OAAO,OAAO,CAAC,GAAG,EAAE,cAAc,IAAI,sBAAsB,EAAE,wBAAwB,EAAE;oBACtF,KAAK,EAAE,MAAM;iBACd,CAAC,CAAC;YACL,CAAC;YACD,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;YACnC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YACjE,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACzF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YAClD,IAAI,IAAa,CAAC;YAClB,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,OAAO,CACZ,GAAG,EACH,cAAc,IAAI,kCAAkC,EACpD,kBAAkB,CACnB,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACzC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,kEAAkE;gBAClE,gEAAgE;gBAChE,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;gBACzB,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC;gBAC7C,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;oBACnC,2EAA2E;oBAC3E,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,SAAS;wBAAE,MAAM,QAAQ,EAAE,CAAC;oBACnE,OAAO,OAAO,CACZ,GAAG,EACH,cAAc,IAAI,gEAAgE;wBAChF,yBAAyB,EAC3B,oBAAoB,CACrB,CAAC;gBACJ,CAAC;gBACD,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;gBAC1C,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC;YAC7B,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;YAChC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;gBACzC,OAAO;gBACP,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;gBACvC,iBAAiB,EAAE,OAAO,KAAK,SAAS;gBACxC,WAAW,EAAE,OAAO,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS;aAC7D,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,KAAK,CAAC;gBACnB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;gBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE;gBAC7B,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;aACxC,CAAC,CAAC;YACH,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAC9B,IAAI,EACJ,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CACzE,CAAC;YACF,mEAAmE;YACnE,MAAM,KAAK,GAAG,OAAO,CAAC;YACtB,OAAO,GAAG,SAAS,CAAC;YACpB,OAAO,OAAO,CACZ,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAC5E,OAAO,EACP,GAAG,EAAE;gBACH,IAAI,KAAK,KAAK,SAAS;oBAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAClD,CAAC,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5B,CAAC;gBAAS,CAAC;YACT,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAzWD,sCAyWC;AAED;;;;GAIG;AACH,SAAS,cAAc,CACrB,IAAmB,EACnB,WAA+B,EAC/B,QAAmC;IAEnC,MAAM,OAAO,GACX,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;QAC/B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO;QACxB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,aAAa,CAAC,OAAO,IAAI,EAAE,CAAC;IACjE,OAAO;QACL,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,WAAW,IAAI,SAAS;QAC/B,OAAO,EAAE,EAAE;QACX,sBAAsB,EAAE,CAAC;QACzB,aAAa,EAAE,EAAE,OAAO,EAAE;QAC1B,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE;QAC1B,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,0FAA0F;AAC1F,SAAS,OAAO,CAAC,GAAY,EAAE,IAAY;IACzC,IAAI,GAAG,YAAY,gCAAoB;QAAE,OAAO,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACpF,IAAI,GAAG,YAAY,8BAAkB;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACzF,MAAM,IAAI,GAAI,GAAiC,EAAE,IAAI,CAAC;IACtD,IAAI,GAAG,YAAY,KAAK,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,iCAAc,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;QAC3F,OAAO,OAAO,CAAC,iCAAc,CAAC,IAAI,CAAW,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACpE,CAAC;IACD,uEAAuE;IACvE,OAAO,OAAO,CAAC,GAAG,EAAE,cAAc,IAAI,gCAAgC,EAAE,cAAc,CAAC,CAAC;AAC1F,CAAC;AAED,wEAAwE;AACxE,SAAS,OAAO,CACd,MAAc,EACd,OAAe,EACf,IAAY,EACZ,UAA4C,EAAE;IAE9C,OAAO,IAAI,QAAQ,CAAC,IAAA,wBAAU,EAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE;QACxD,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,OAAO,EAAE;KAC5D,CAAC,CAAC;AACL,CAAC;AAED,yFAAyF;AACzF,SAAS,SAAS,CAAC,OAAgB;IACjC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACrC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC;IACjC,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kEAAkE;AAClE,KAAK,UAAU,QAAQ,CAAC,OAAgB,EAAE,KAAa,EAAE,IAAY;IACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC/D,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,KAAK;QAAE,MAAM,IAAI,gCAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC/F,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACxC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,SAAS,CAAC;QACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI;YAAE,MAAM;QAChB,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;QACzB,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;YACjB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC7C,MAAM,IAAI,gCAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnB,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC;IACzB,CAAC;IACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,QAAQ,CACf,KAAyB,EACzB,QAAgB,EAChB,KAAa,EACb,IAAY;IAEZ,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,SAAS,CAAC,cAAc,IAAI,MAAM,KAAK,4CAA4C,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/hosting/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/hosting/types.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;;AAoxCH;;;;;;;GAOG;AACU,QAAA,mBAAmB,GAAG,IAAI,CAAC;AA2QxC;;;;;GAKG;AACU,QAAA,gCAAgC,GAAG,CAAC,CAAC;AAElD;iFACiF;AACpE,QAAA,2BAA2B,GAAG,GAAG,CAAC;AAE/C;;;;;;;;GAQG;AACU,QAAA,yBAAyB,GAAG,KAAK,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/hosting/types.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;;AAoyCH;;;;;;;GAOG;AACU,QAAA,mBAAmB,GAAG,IAAI,CAAC;AA2QxC;;;;;GAKG;AACU,QAAA,gCAAgC,GAAG,CAAC,CAAC;AAElD;iFACiF;AACpE,QAAA,2BAA2B,GAAG,GAAG,CAAC;AAE/C;;;;;;;;GAQG;AACU,QAAA,yBAAyB,GAAG,KAAK,CAAC"}

package/dist/hosting/verifiedThreads.js

@@ -0,0 +1,50 @@
+"use strict";
+/**
+ * verifiedThreads — the {@link ThreadBinder} that binds a thread to a VERIFIED
+ * caller, so the secure binding is the one-line one.
+ *
+ * A request names a thread; naming one proves nothing. This binder checks the
+ * caller's credential with the door's own identity verification
+ * (`verifyRequestIdentity` — the bearer token, through your verifier), never a
+ * header read as a name, and keys the conversation by WHO
+ * plus WHICH: the same thread id from two people is two conversations. The
+ * run's `identity` names the verified person, so a stored conversation records
+ * its owner and a later request from anyone else is refused as not found.
+ *
+ * A caller with no credential is REFUSED (401), even at a door that allows
+ * anonymous requests elsewhere: a thread with no owner would be anybody's who
+ * guessed its id.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifiedThreads = void 0;
+const errors_js_1 = require("./errors.js");
+const identityVerification_js_1 = require("./identityVerification.js");
+/**
+ * Bind every thread to the caller `identity` verifies.
+ *
+ * @example
+ * ```ts
+ * import { jwksIdentity } from 'agentfootprint/security';
+ * const threads = verifiedThreads(jwksIdentity({ jwksUrl, issuer, audience }));
+ * streamHandler({ agent, adapter: agUi(), threads, sessions: memorySessions() });
+ * ```
+ */
+function verifiedThreads(identity) {
+    const binder = {
+        async bind({ conversation, headers }) {
+            const who = await (0, identityVerification_js_1.verifyRequestIdentity)(identity, headers, undefined);
+            if (who === undefined)
+                throw new errors_js_1.IdentityNotVerifiedError('no-token', false);
+            return {
+                // Injective, and visible ASCII whatever the name (`josé`, `John Smith`):
+                // both halves are percent-encoded, the separator included, so no
+                // (who, which) pair spells another's key.
+                sessionId: `${encodeURIComponent(who.userId)}/${encodeURIComponent(conversation)}`,
+                identity: { principal: who.userId, conversationId: conversation },
+            };
+        },
+    };
+    return Object.freeze(binder);
+}
+exports.verifiedThreads = verifiedThreads;
+//# sourceMappingURL=verifiedThreads.js.map

package/dist/hosting/verifiedThreads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifiedThreads.js","sourceRoot":"","sources":["../../src/hosting/verifiedThreads.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;AAEH,2CAAuD;AACvD,uEAAoG;AAGpG;;;;;;;;;GASG;AACH,SAAgB,eAAe,CAAC,QAAqC;IACnE,MAAM,MAAM,GAAiB;QAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE;YAClC,MAAM,GAAG,GAAG,MAAM,IAAA,+CAAqB,EAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;YACtE,IAAI,GAAG,KAAK,SAAS;gBAAE,MAAM,IAAI,oCAAwB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAC7E,OAAO;gBACL,yEAAyE;gBACzE,iEAAiE;gBACjE,0CAA0C;gBAC1C,SAAS,EAAE,GAAG,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,kBAAkB,CAAC,YAAY,CAAC,EAAE;gBAClF,QAAQ,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE;aAClE,CAAC;QACJ,CAAC;KACF,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAfD,0CAeC"}

package/dist/index.js

@@ -27,9 +27,10 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.StaleDecisionError = exports.DecisionRequiredError = exports.pauseDemandsDecision = exports.isAskPause = exports.isCheckInPause = exports.isPaused = exports.isPauseRequest = exports.isInputPause = exports.requestInput = exports.askHuman = exports.pauseHere = exports.makeRunId = exports.RunnerBase = exports.BASELINE_SOURCES = exports.ENGINEERED_SOURCES = exports.isBaselineSource = exports.isEngineeredSource = exports.contextEngineering = exports.COMPOSITION_KEYS = exports.UNGAPPED_FIELDS = exports.SERVED_GAPS = exports.TRANSFORM_HASH_PREFIX = exports.RECEIPT_BOUNDARY = exports.transformHashOf = exports.servedViews = exports.servedAt = exports.receiptHash = exports.receiptAt = exports.toolDigestInput = exports.messageDigestInput = exports.keyedFold = exports.epochLocations = exports.epochAt = exports.milestoneStopsStrategy = exports.milestoneStops = exports.milestoneOf = exports.isReservedSubflowSegment = exports.RESERVED_SUBFLOW_PREFIX = exports.milestoneFromTags = exports.milestoneTagsFor = exports.milestoneTags = exports.milestoneTag = exports.MILESTONE_LABEL_TAG_PREFIX = exports.MILESTONE_TAG_PREFIX = exports.MILESTONE_KINDS = exports.milestoneFor = exports.stageRole = exports.isInjectionKey = exports.injectionKeyForSlot = exports.INJECTION_KEYS = void 0;
 exports.PRIOR_TURN_EVIDENCE_CEILING = exports.assertResultColumns = exports.COLUMN_TYPES = exports.readRowset = exports.COLUMN_TYPE_CEILING = exports.EMPTY_LOOKUP_CEILING = exports.isTruncatedToolResult = exports.LIBRARY_NOTE_OPENING = exports.LIBRARY_AUTHORED_PREFIXES = exports.isSaidByPerson = exports.isLibraryAuthoredFrame = exports.tokenBudget = exports.summarizeOldest = exports.slidingWindow = exports.isDropNotice = exports.isCompactedSummary = exports.foldedSpanFor = exports.foldedMessages = exports.DROP_NOTICE_PREFIX = exports.COMPACTED_FRAME_PREFIX = exports.CompactionUnmeasurableError = exports.AgentBuilder = exports.Agent = exports.buildAgentMessageApiChart = exports.LLMCallBuilder = exports.LLMCall = exports.selectCommentaryKey = exports.renderCommentary = exports.extractCommentaryVars = exports.extractAgentName = exports.defaultCommentaryTemplates = exports.CheckInRecorder = exports.minimalEvidenceAssembler = exports.standardEvidenceAssembler = exports.lexicalDriverScorer = exports.isCheckInDecision = exports.checkInDeclined = exports.checkInApproved = exports.ACT_KEYS = exports.actKeyFor = exports.LOOP_MOMENTS = exports.MessageDeniedError = exports.deny = exports.ask = exports.allow = exports.InvalidAskComponentError = exports.assertAskComponent = exports.readAskComponent = exports.InputRequestError = exports.PauseAnswerRequiredError = void 0;
-exports.TOOL_RESULT_STATUSES = exports.readToolResultEnvelope = exports.explainStatusOnlyNearMiss = exports.warnIfInvalidToolName = exports.assertValidToolName = exports.assertGates = exports.assertComposedOf = exports.assertResultKind = exports.assertResultClass = exports.assertResultCeiling = exports.defineTool = exports.verdictRowsOf = exports.VERDICT_RENDER_NOTE = exports.RunbookAbsenceSignal = exports.runbookAsTool = exports.renderVerdictTable = exports.recordingDispatch = exports.projectWalk = exports.probeDispatch = exports.PANEL_RENDER_NOTE = exports.DEFAULT_WALK_CAP = exports.DEFAULT_RECORDING_MAX_BYTES = exports.DEFAULT_MAX_ROWS = exports.DECLINED_VERDICT = exports.absenceSignalOf = exports.flowchartAsTool = exports.RunInFlightError = exports.ResumeRedactionError = exports.ResumeIdentityConflictError = exports.PendingQuestionError = exports.NoConversationError = exports.isContextWindowExceeded = exports.ERR_CONTEXT_WINDOW_EXCEEDED = exports.ContextWindowExceededError = exports.DEFAULT_SESSION_STORAGE_KEY = exports.browserSessionId = exports.RunCheckpointError = exports.ConversationMismatchError = exports.canResume = exports.UnsupportedValuesError = exports.EVIDENCE_CHECK_FRAME_PREFIX = exports.isSchemaCheckMessage = exports.SCHEMA_TOOL_NAME = exports.SCHEMA_CHECK_FRAME_PREFIX = exports.InvalidRunInputError = exports.TOOL_CHOICE_QUESTION = exports.ALWAYS_SERVED_TOOLS = exports.RESERVED_ARGUMENT = exports.applyOutputSchema = exports.OutputSchemaError = void 0;
-exports.InvalidArtifactError = exports.inMemoryArtifacts = exports.gcsArtifacts = exports.fileArtifacts = exports.DEFAULT_IN_MEMORY_ARTIFACT_RETENTION = exports.UnserializableRecordingError = exports.chartWalkPutInput = exports.CHART_WALK_ARTIFACT_KIND = exports.recordingPutInput = exports.RECORDING_MEDIA_TYPE = exports.RECORDING_ARTIFACT_KIND = exports.bindArtifacts = exports.ArtifactIntegrityError = exports.ARTIFACT_REF_PREFIX = exports.formatToolContractCheckup = exports.toolContractCheckup = exports.TOOL_SESSIONS = exports.toolSessionsOf = exports.codeRunsOf = exports.codeShape = exports.codeRunnerTool = exports.TOOL_TEARDOWN_TIMEOUT_MS = exports.ToolTeardownTimeoutError = exports.hashSessionKey = exports.toolSessionKey = exports.semanticsForModel = exports.SEMANTICS_NOTE = exports.SEMANTICS_MARKER = exports.RESULT_CLASSES = exports.readSemantics = exports.isCounterLookingAggregation = exports.explainSemantics = exports.describedResult = exports.COUNTER_AGGREGATION_WORDS = exports.composeNotCovered = exports.IN_PROGRESS_WIRE = exports.IN_PROGRESS_SECTION_LABEL = exports.IN_PROGRESS_CLAUSE = exports.periodVerdict = exports.PERIOD_WIRE = exports.readCoverageResult = exports.readCoverageLedger = exports.readAbsence = exports.COVERAGE_NOTE = exports.COVERAGE_MARKER = exports.COVERAGE_BLOCK_HEADING = exports.coverage = exports.absent = exports.ABSENCE_NOTE = exports.ABSENCE_MARKER = void 0;
-exports.AnswerValidationError = exports.topK = exports.indexDocuments = exports.DEFAULT_CORPUS_IDENTITY = exports.defineRAG = exports.providerFromEnv = exports.Graph = exports.graph = exports.Workflow = exports.workflow = exports.LoopBuilder = exports.Loop = exports.ConditionalBuilder = exports.Conditional = exports.ParallelBuilder = exports.Parallel = exports.SequenceBuilder = exports.Sequence = exports.PRESENT_TOOL_NAME = exports.placedResultKind = exports.isPlacedToolResult = exports.assertToolWants = exports.runArtifactStoreConformance = exports.runArtifactStoreCase = exports.formatArtifactStoreReport = exports.artifactStoreConformance = exports.canStreamArtifacts = exports.canPutArtifactStream = exports.canGetArtifactStream = exports.elicitationOf = exports.answerFromElicitation = exports.defaultTimeAskMessages = exports.englishTimeReader = exports.TIME_AXIS_UNITS = exports.TIME_AXIS_AGGREGATES = exports.timeAxisIssues = exports.readTimeAxis = exports.normaliseInstants = exports.describeTimeAxis = exports.stageDatasetArtifacts = exports.withDatasetArtifacts = exports.UnreadableArtifactStoreError = exports.UnreadableArtifactFileError = exports.UnknownParentRefError = exports.unconfiguredArtifacts = exports.sqliteArtifacts = exports.s3Artifacts = exports.mintArtifactRef = exports.isArtifactRef = void 0;
+exports.explainStatusOnlyNearMiss = exports.warnIfInvalidToolName = exports.assertValidToolName = exports.assertGates = exports.assertComposedOf = exports.assertResultKind = exports.assertResultClass = exports.assertResultCeiling = exports.defineTool = exports.verdictRowsOf = exports.VERDICT_RENDER_NOTE = exports.RunbookAbsenceSignal = exports.runbookAsTool = exports.renderVerdictTable = exports.recordingDispatch = exports.projectWalk = exports.probeDispatch = exports.PANEL_RENDER_NOTE = exports.DEFAULT_WALK_CAP = exports.DEFAULT_RECORDING_MAX_BYTES = exports.DEFAULT_MAX_ROWS = exports.DECLINED_VERDICT = exports.absenceSignalOf = exports.flowchartAsTool = exports.ParentRunRefusedError = exports.MemberIdentityError = exports.RunInFlightError = exports.ResumeRedactionError = exports.ResumeIdentityConflictError = exports.PendingQuestionError = exports.NoConversationError = exports.isContextWindowExceeded = exports.ERR_CONTEXT_WINDOW_EXCEEDED = exports.ContextWindowExceededError = exports.DEFAULT_SESSION_STORAGE_KEY = exports.browserSessionId = exports.RunCheckpointError = exports.ConversationMismatchError = exports.canResume = exports.UnsupportedValuesError = exports.EVIDENCE_CHECK_FRAME_PREFIX = exports.isSchemaCheckMessage = exports.SCHEMA_TOOL_NAME = exports.SCHEMA_CHECK_FRAME_PREFIX = exports.InvalidRunInputError = exports.TOOL_CHOICE_QUESTION = exports.ALWAYS_SERVED_TOOLS = exports.RESERVED_ARGUMENT = exports.applyOutputSchema = exports.OutputSchemaError = void 0;
+exports.gcsArtifacts = exports.fileArtifacts = exports.DEFAULT_IN_MEMORY_ARTIFACT_RETENTION = exports.UnserializableRecordingError = exports.chartWalkPutInput = exports.CHART_WALK_ARTIFACT_KIND = exports.recordingPutInput = exports.RECORDING_MEDIA_TYPE = exports.RECORDING_ARTIFACT_KIND = exports.bindArtifacts = exports.ArtifactIntegrityError = exports.ARTIFACT_REF_PREFIX = exports.formatToolContractCheckup = exports.toolContractCheckup = exports.TOOL_SESSIONS = exports.toolSessionsOf = exports.codeRunsOf = exports.codeShape = exports.codeRunnerTool = exports.TOOL_TEARDOWN_TIMEOUT_MS = exports.ToolTeardownTimeoutError = exports.hashSessionKey = exports.toolSessionKey = exports.semanticsForModel = exports.SEMANTICS_NOTE = exports.SEMANTICS_MARKER = exports.RESULT_CLASSES = exports.readSemantics = exports.isCounterLookingAggregation = exports.explainSemantics = exports.describedResult = exports.COUNTER_AGGREGATION_WORDS = exports.composeNotCovered = exports.IN_PROGRESS_WIRE = exports.IN_PROGRESS_SECTION_LABEL = exports.IN_PROGRESS_CLAUSE = exports.periodVerdict = exports.PERIOD_WIRE = exports.readCoverageResult = exports.readCoverageLedger = exports.readAbsence = exports.COVERAGE_NOTE = exports.COVERAGE_MARKER = exports.COVERAGE_BLOCK_HEADING = exports.coverage = exports.absent = exports.ABSENCE_NOTE = exports.ABSENCE_MARKER = exports.TOOL_RESULT_STATUSES = exports.readToolResultEnvelope = void 0;
+exports.topK = exports.indexDocuments = exports.DEFAULT_CORPUS_IDENTITY = exports.defineRAG = exports.providerFromEnv = exports.Graph = exports.graph = exports.Workflow = exports.workflow = exports.LoopBuilder = exports.Loop = exports.ConditionalBuilder = exports.Conditional = exports.ParallelBuilder = exports.Parallel = exports.SequenceBuilder = exports.Sequence = exports.PRESENT_TOOL_NAME = exports.placedResultKind = exports.isPlacedToolResult = exports.assertToolWants = exports.runArtifactStoreConformance = exports.runArtifactStoreCase = exports.formatArtifactStoreReport = exports.artifactStoreConformance = exports.canStreamArtifacts = exports.canPutArtifactStream = exports.canGetArtifactStream = exports.elicitationOf = exports.answerFromElicitation = exports.defaultTimeAskMessages = exports.englishTimeReader = exports.TIME_AXIS_UNITS = exports.TIME_AXIS_AGGREGATES = exports.timeAxisIssues = exports.readTimeAxis = exports.normaliseInstants = exports.describeTimeAxis = exports.stageDatasetArtifacts = exports.withDatasetArtifacts = exports.UnreadableArtifactStoreError = exports.UnreadableArtifactFileError = exports.UnknownParentRefError = exports.unconfiguredArtifacts = exports.sqliteArtifacts = exports.s3Artifacts = exports.mintArtifactRef = exports.isArtifactRef = exports.InvalidArtifactError = exports.inMemoryArtifacts = void 0;
+exports.AnswerValidationError = void 0;
 // Adapter interfaces (ports)
 __exportStar(require("./provider-contract/types.js"), exports);
 // Injection keys + recorder authoring helpers — needed by anyone writing
@@ -406,6 +407,11 @@ Object.defineProperty(exports, "PendingQuestionError", { enumerable: true, get:
 Object.defineProperty(exports, "ResumeIdentityConflictError", { enumerable: true, get: function () { return conversation_js_1.ResumeIdentityConflictError; } });
 Object.defineProperty(exports, "ResumeRedactionError", { enumerable: true, get: function () { return conversation_js_1.ResumeRedactionError; } });
 Object.defineProperty(exports, "RunInFlightError", { enumerable: true, get: function () { return conversation_js_1.RunInFlightError; } });
+// A composition member runs for the run that mounted it; one no run reached is
+// refused by name (`core/memberRun.ts`).
+var memberRun_js_1 = require("./core/memberRun.js");
+Object.defineProperty(exports, "MemberIdentityError", { enumerable: true, get: function () { return memberRun_js_1.MemberIdentityError; } });
+Object.defineProperty(exports, "ParentRunRefusedError", { enumerable: true, get: function () { return memberRun_js_1.ParentRunRefusedError; } });
 var flowchartAsTool_js_1 = require("./core/flowchartAsTool.js");
 Object.defineProperty(exports, "flowchartAsTool", { enumerable: true, get: function () { return flowchartAsTool_js_1.flowchartAsTool; } });
 // runbookAsTool (9.76.0) — the STANDARD bridge from a footprintjs procedure