alibabacloud-agentcore-sdk 0.1.0

package/dist/chunk-QIZO3A4Y.cjs

@@ -0,0 +1,306 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } } function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } async function _asyncNullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return await rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+
+var _chunkRZNQGEGJcjs = require('./chunk-RZNQGEGJ.cjs');
+
+
+var _chunkLE5P3SJWcjs = require('./chunk-LE5P3SJW.cjs');
+
+
+
+
+
+
+var _chunkJSP7ZROScjs = require('./chunk-JSP7ZROS.cjs');
+
+// src/memory/transport.ts
+var _agentcore20260804 = require('@alicloud/agentcore20260804'); var _agentcore202608042 = _interopRequireDefault(_agentcore20260804);
+var _openapicore = require('@alicloud/openapi-core');
+var _typescript = require('@darabonba/typescript'); var Dara = _interopRequireWildcard(_typescript);
+
+var GeneratedClient = typeof _agentcore202608042.default === "function" ? _agentcore202608042.default : _agentcore202608042.default.default;
+var DaraURL = _nullishCoalesce(Dara.URL, () => ( Dara.default.URL));
+var pathComponent = (value) => DaraURL.percentEncode(value);
+var MemoryTransport = class {
+  constructor(store, runtime, logger = _chunkLE5P3SJWcjs.nullLogger) {
+    this.store = store;
+    this.runtime = runtime;
+    this.logger = logger;
+  }
+  
+  
+  
+  async request(operation, method, path, map, body, query) {
+    const runtime = await this.runtime();
+    const credential = await _asyncNullishCoalesce(runtime.accessKeyCredential, async () => ( await _optionalChain([runtime, 'access', _ => _.resourceSTS, 'optionalAccess', _2 => _2.get, 'call', _3 => _3(_chunkRZNQGEGJcjs.HIGH_CODE_SDK_PURPOSE)])));
+    if (!credential) throw new (0, _chunkJSP7ZROScjs.ResourceNotConfiguredError)("AgentCore Memory data-plane credentials are not configured");
+    const url = runtime.endpoint ? new URL(runtime.endpoint.includes("://") ? runtime.endpoint : `https://${runtime.endpoint}`) : void 0;
+    const client = new GeneratedClient(new _openapicore.$OpenApiUtil.Config({
+      accessKeyId: credential.accessKeyId,
+      accessKeySecret: credential.accessKeySecret,
+      securityToken: credential.securityToken,
+      regionId: runtime.regionId,
+      endpoint: _optionalChain([url, 'optionalAccess', _4 => _4.host]),
+      protocol: _optionalChain([url, 'optionalAccess', _5 => _5.protocol, 'access', _6 => _6.slice, 'call', _7 => _7(0, -1)])
+    }));
+    const params = new _openapicore.$OpenApiUtil.Params({
+      action: operation,
+      version: "2026-08-04",
+      protocol: "HTTPS",
+      pathname: `/workspaces/${pathComponent(runtime.workspaceId)}/memorystores/${pathComponent(this.store)}${path}`,
+      method,
+      authType: "AK",
+      style: "ROA",
+      reqBodyType: body === void 0 ? "json" : "formData",
+      bodyType: "json"
+    });
+    const request = new _openapicore.$OpenApiUtil.OpenApiRequest({
+      headers: {},
+      query: _openapicore.OpenApiUtil.query(_nullishCoalesce(query, () => ( {}))),
+      body: body === void 0 ? void 0 : { body: JSON.stringify(body) }
+    });
+    const add = operation === "AddMemories";
+    let raw;
+    this.logger.debug("agentcore.memory.request.started", { operation, memory_store_name: this.store });
+    try {
+      raw = await client.callApi(params, request, new (0, _typescript.RuntimeOptions)({
+        autoretry: false,
+        maxAttempts: 1,
+        connectTimeout: add ? 12e4 : void 0,
+        readTimeout: add ? 12e4 : void 0
+      }));
+    } catch (cause) {
+      const details2 = errorDetails(cause);
+      const error = add && (details2.httpStatusCode === void 0 || details2.httpStatusCode >= 500) ? new (0, _chunkJSP7ZROScjs.AddMemoriesOutcomeUnknownError)(operation, details2) : new (0, _chunkJSP7ZROScjs.MemoryAPIError)(operation, details2);
+      this.logFailure(error);
+      throw error;
+    }
+    const response = record(raw);
+    const payload = record(response.body);
+    const details = {
+      serviceCode: text(payload.code),
+      httpStatusCode: _nullishCoalesce(integer(payload.httpStatusCode), () => ( integer(response.statusCode))),
+      requestId: _nullishCoalesce(text(payload.requestId), () => ( text(record(response.headers)["x-acs-request-id"])))
+    };
+    try {
+      if ((_nullishCoalesce(integer(response.statusCode), () => ( 0))) >= 400 || payload.success === false) {
+        throw add && (_nullishCoalesce(details.httpStatusCode, () => ( 0))) >= 500 ? new (0, _chunkJSP7ZROScjs.AddMemoriesOutcomeUnknownError)(operation, details) : new (0, _chunkJSP7ZROScjs.MemoryAPIError)(operation, details);
+      }
+      if (payload.success !== true) throw new (0, _chunkJSP7ZROScjs.MemoryContractError)(operation, "body.success must be true");
+      return map(payload);
+    } catch (cause) {
+      const error = add && cause instanceof _chunkJSP7ZROScjs.MemoryContractError ? new (0, _chunkJSP7ZROScjs.AddMemoriesOutcomeUnknownError)(operation, details) : cause;
+      if (error instanceof _chunkJSP7ZROScjs.MemoryAPIError || error instanceof _chunkJSP7ZROScjs.MemoryContractError) this.logFailure(error);
+      throw error;
+    }
+  }
+  logFailure(error) {
+    this.logger.warn("agentcore.memory.request.failed", {
+      operation: error.operation,
+      memory_store_name: this.store,
+      error_type: error.name,
+      status: error instanceof _chunkJSP7ZROScjs.MemoryAPIError ? error.httpStatusCode : void 0,
+      service_code: error instanceof _chunkJSP7ZROScjs.MemoryAPIError ? error.serviceCode : void 0,
+      request_id: error instanceof _chunkJSP7ZROScjs.MemoryAPIError ? error.requestId : void 0
+    });
+  }
+};
+function record(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
+function text(value) {
+  return typeof value === "string" && value ? value : void 0;
+}
+function integer(value) {
+  return typeof value === "number" && Number.isInteger(value) ? value : void 0;
+}
+function errorDetails(error) {
+  let current = record(error);
+  const result = {};
+  for (let i = 0; i < 4; i++) {
+    const data = record(current.data);
+    const response = record(current.response);
+    result.serviceCode ??= _nullishCoalesce(_nullishCoalesce(text(current.code), () => ( text(data.code))), () => ( text(data.Code)));
+    result.httpStatusCode ??= _nullishCoalesce(_nullishCoalesce(_nullishCoalesce(integer(current.statusCode), () => ( integer(data.statusCode))), () => ( integer(data.StatusCode))), () => ( integer(response.statusCode)));
+    result.requestId ??= _nullishCoalesce(_nullishCoalesce(_nullishCoalesce(text(current.requestId), () => ( text(data.requestId))), () => ( text(data.RequestId))), () => ( text(record(response.headers)["x-acs-request-id"])));
+    if (!current.innerException) break;
+    current = record(current.innerException);
+  }
+  return result;
+}
+
+// src/memory/client.ts
+var MemoryStore = class {
+  
+  
+  constructor(name, options) {
+    this.memoryStoreName = required(name, "memoryStoreName");
+    this.transport = new MemoryTransport(name, options.runtime, options.logger);
+  }
+  async addMemories(options) {
+    const scope = validateScope(options.scope);
+    const hasText = options.text !== void 0;
+    const hasMessages = options.messages !== void 0;
+    if (hasText === hasMessages) throw new (0, _chunkJSP7ZROScjs.MemoryValidationError)("exactly one of text or messages must be provided");
+    const text2 = hasText ? required(options.text, "text") : void 0;
+    let messages;
+    if (hasMessages) {
+      if (!Array.isArray(options.messages) || !options.messages.length) throw new (0, _chunkJSP7ZROScjs.MemoryValidationError)("messages must be a non-empty array");
+      messages = options.messages.map((message) => ({ role: required(_optionalChain([message, 'optionalAccess', _8 => _8.role]), "messages[].role"), content: required(_optionalChain([message, 'optionalAccess', _9 => _9.content]), "messages[].content") }));
+    }
+    const metadata = validateMetadata(options.metadata);
+    return this.transport.request("AddMemories", "POST", "/memories", (body) => Object.freeze({ memoryIds: Object.freeze(array(record(body.data).memories, "AddMemories", "data.memories").map((item) => string(record(item).memoryId, "AddMemories", "data.memories[].memoryId", true))) }), { scope, text: text2, messages, metadata });
+  }
+  async searchMemories(query, options = {}) {
+    required(query, "query");
+    const scope = validateScope(options.scope);
+    bounded(options.topK, "topK", 50);
+    const metadata = validateMetadata(options.metadata);
+    if (options.enableRerank !== void 0 && typeof options.enableRerank !== "boolean") throw new (0, _chunkJSP7ZROScjs.MemoryValidationError)("enableRerank must be a boolean");
+    for (const key of ["minScore", "minSimilarity"]) if (options[key] !== void 0 && (typeof options[key] !== "number" || !Number.isFinite(options[key]))) throw new (0, _chunkJSP7ZROScjs.MemoryValidationError)(`${key} must be a finite number`);
+    return this.transport.request("SearchMemories", "POST", "/memories/search", (body) => Object.freeze({ memories: Object.freeze(array(record(body.data).memories, "SearchMemories", "data.memories").map((item) => {
+      const hit = record(item);
+      if (typeof hit.score !== "number" || typeof hit.similarity !== "number") throw new (0, _chunkJSP7ZROScjs.MemoryContractError)("SearchMemories", "score and similarity must be numbers");
+      return Object.freeze({ memory: parseMemory(hit.memory, "SearchMemories"), score: hit.score, similarity: hit.similarity });
+    })) }), { query, scope, topK: options.topK, metadata, enableRerank: options.enableRerank, minScore: options.minScore, minSimilarity: options.minSimilarity });
+  }
+  async listMemories(options = {}) {
+    optionalScopeString(options.userId, "userId");
+    optionalScopeString(options.agentId, "agentId");
+    optionalScopeString(options.sessionId, "sessionId");
+    validatePage(options);
+    return this.transport.request(
+      "ListMemories",
+      "GET",
+      "/memories",
+      (body) => page(body, "ListMemories", (item) => parseMemory(item, "ListMemories")),
+      void 0,
+      { userId: options.userId, agentId: options.agentId, sessionId: options.sessionId, maxResults: options.maxResults, nextToken: options.nextToken }
+    );
+  }
+  async getMemory(memoryId) {
+    required(memoryId, "memoryId");
+    return this.transport.request("GetMemory", "GET", `/memories/${pathComponent(memoryId)}`, (body) => parseMemory(body.data, "GetMemory"));
+  }
+  async updateMemory(memoryId, options) {
+    required(memoryId, "memoryId");
+    if (options.text === void 0 && options.metadata === void 0) throw new (0, _chunkJSP7ZROScjs.MemoryValidationError)("at least one of text or metadata must be provided");
+    optional(options.text, "text");
+    const metadata = validateMetadata(options.metadata);
+    return this.transport.request("UpdateMemory", "PUT", `/memories/${pathComponent(memoryId)}`, (body) => parseMemory(body.data, "UpdateMemory"), { text: options.text, metadata });
+  }
+  async deleteMemory(memoryId) {
+    required(memoryId, "memoryId");
+    return this.transport.request("DeleteMemory", "DELETE", `/memories/${pathComponent(memoryId)}`, () => void 0);
+  }
+  async listMemorySessions(options = {}) {
+    optionalScopeString(options.userId, "userId");
+    optionalScopeString(options.agentId, "agentId");
+    validatePage(options);
+    return this.transport.request("ListMemorySessions", "GET", "/sessions", (body) => page(body, "ListMemorySessions", (item) => {
+      const session = Object.freeze({
+        agentId: optionalString(record(item).agentId, "ListMemorySessions", "items[].agentId"),
+        sessionId: optionalString(record(item).sessionId, "ListMemorySessions", "items[].sessionId"),
+        userId: optionalString(record(item).userId, "ListMemorySessions", "items[].userId")
+      });
+      if (session.userId === void 0 && session.agentId === void 0 && session.sessionId === void 0) throw new (0, _chunkJSP7ZROScjs.MemoryContractError)("ListMemorySessions", "items[] must contain at least one scope field");
+      return session;
+    }), void 0, { userId: options.userId, agentId: options.agentId, maxResults: options.maxResults, nextToken: options.nextToken });
+  }
+  async listMemorySessionMessages(sessionId, options = {}) {
+    required(sessionId, "sessionId");
+    optionalScopeString(sessionId, "sessionId");
+    optionalScopeString(options.userId, "userId");
+    optionalScopeString(options.agentId, "agentId");
+    if (options.userId === void 0 && options.agentId === void 0) throw new (0, _chunkJSP7ZROScjs.MemoryValidationError)("at least one of userId or agentId must be provided");
+    validatePage(options);
+    return this.transport.request(
+      "ListMemorySessionMessages",
+      "GET",
+      "/messages",
+      (body) => page(body, "ListMemorySessionMessages", (item) => Object.freeze({
+        role: string(record(item).role, "ListMemorySessionMessages", "items[].role", true),
+        content: string(record(item).content, "ListMemorySessionMessages", "items[].content", true)
+      })),
+      void 0,
+      { userId: options.userId, agentId: options.agentId, sessionId, maxResults: options.maxResults, nextToken: options.nextToken }
+    );
+  }
+};
+function required(value, field) {
+  if (typeof value !== "string" || !value.trim()) throw new (0, _chunkJSP7ZROScjs.MemoryValidationError)(`${field} must be a non-empty string`);
+  return value;
+}
+function optional(value, field) {
+  if (value !== void 0) required(value, field);
+}
+function bounded(value, field, maximum) {
+  if (value !== void 0 && (typeof value !== "number" || !Number.isInteger(value) || value < 1 || value > maximum)) throw new (0, _chunkJSP7ZROScjs.MemoryValidationError)(`${field} must be an integer from 1 to ${maximum}`);
+}
+function optionalScopeString(value, field) {
+  if (value === void 0) return;
+  if (["*", "__default__"].includes(required(value, field).trim())) throw new (0, _chunkJSP7ZROScjs.MemoryValidationError)(`${field} must not use a reserved scope value`);
+}
+function validateScope(scope) {
+  if (scope === void 0) return void 0;
+  if (!scope || typeof scope !== "object" || Array.isArray(scope)) throw new (0, _chunkJSP7ZROScjs.MemoryValidationError)("scope must be a MemoryScope");
+  optionalScopeString(scope.userId, "scope.userId");
+  optionalScopeString(scope.agentId, "scope.agentId");
+  optionalScopeString(scope.sessionId, "scope.sessionId");
+  return { userId: scope.userId, agentId: scope.agentId, sessionId: scope.sessionId };
+}
+function validateMetadata(value) {
+  if (value === void 0) return void 0;
+  if (!value || typeof value !== "object" || Array.isArray(value) || Object.entries(value).some(([key, item]) => !key.trim() || typeof item !== "string")) throw new (0, _chunkJSP7ZROScjs.MemoryValidationError)("metadata must contain non-empty string keys and string values");
+  return { ...value };
+}
+function validatePage(options) {
+  bounded(options.maxResults, "maxResults", 100);
+  if (options.nextToken !== void 0 && typeof options.nextToken !== "string") throw new (0, _chunkJSP7ZROScjs.MemoryValidationError)("nextToken must be a string");
+}
+function array(value, operation, path) {
+  if (value === void 0 || value === null) return [];
+  if (!Array.isArray(value)) throw new (0, _chunkJSP7ZROScjs.MemoryContractError)(operation, `${path} must be an array`);
+  return value;
+}
+function string(value, operation, path, nonEmpty = false) {
+  if (typeof value !== "string" || nonEmpty && !value.trim()) throw new (0, _chunkJSP7ZROScjs.MemoryContractError)(operation, `${path} must be ${nonEmpty ? "a non-empty" : "a"} string`);
+  return value;
+}
+function optionalString(value, operation, path) {
+  return value === void 0 || value === null ? void 0 : string(value, operation, path);
+}
+function parseMemory(value, operation) {
+  const item = record(value);
+  const scope = record(item.scope);
+  const memoryId = string(item.memoryId, operation, "memory.memoryId", true);
+  const text2 = string(record(item.content).text, operation, "memory.content.text");
+  if (!item.scope || typeof item.scope !== "object" || Array.isArray(item.scope)) throw new (0, _chunkJSP7ZROScjs.MemoryContractError)(operation, "memory.scope must be an object");
+  let metadata;
+  if (item.metadata !== void 0 && item.metadata !== null) {
+    if (typeof item.metadata !== "object" || Array.isArray(item.metadata) || Object.entries(item.metadata).some(([key, value2]) => !key.trim() || typeof value2 !== "string")) throw new (0, _chunkJSP7ZROScjs.MemoryContractError)(operation, "memory.metadata must contain string keys and values");
+    metadata = Object.freeze({ ...item.metadata });
+  }
+  return Object.freeze({
+    memoryId,
+    content: Object.freeze({ text: text2 }),
+    scope: Object.freeze({ agentId: optionalString(scope.agentId, operation, "memory.scope.agentId"), sessionId: optionalString(scope.sessionId, operation, "memory.scope.sessionId"), userId: optionalString(scope.userId, operation, "memory.scope.userId") }),
+    metadata,
+    createdAt: optionalString(item.createdAt, operation, "memory.createdAt"),
+    updatedAt: optionalString(item.updatedAt, operation, "memory.updatedAt")
+  });
+}
+function page(body, operation, parse) {
+  for (const key of ["maxResults", "totalCount"]) if (body[key] !== void 0 && body[key] !== null && (typeof body[key] !== "number" || !Number.isInteger(body[key]))) throw new (0, _chunkJSP7ZROScjs.MemoryContractError)(operation, `body.${key} must be an integer`);
+  return Object.freeze({
+    items: Object.freeze(array(body.items, operation, "body.items").map(parse)),
+    maxResults: body.maxResults == null ? void 0 : body.maxResults,
+    totalCount: body.totalCount == null ? void 0 : body.totalCount,
+    nextToken: optionalString(body.nextToken, operation, "body.nextToken") || void 0
+  });
+}
+
+
+
+
+exports.MemoryStore = MemoryStore; exports.validateScope = validateScope;
+//# sourceMappingURL=chunk-QIZO3A4Y.cjs.map

package/dist/chunk-QIZO3A4Y.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/Users/zhuoguang/Documents/Code/collaborate/hiclaw/agentcore-sdk-nodejs/dist/chunk-QIZO3A4Y.cjs","../src/memory/transport.ts","../src/memory/client.ts"],"names":[],"mappings":"AAAA;AACE;AACF,wDAA6B;AAC7B;AACE;AACF,wDAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACA;ACdA,sIAAmB;AACnB,qDAA0C;AAC1C,oGAAsB;AACtB;AAMA,IAAM,gBAAA,EAAkB,OAAO,4BAAA,IAAW,WAAA,EAAa,4BAAA,EAAU,2BAAA,CAAiD,OAAA;AAElH,IAAM,QAAA,mBAAe,IAAA,CAAA,GAAA,UAAqD,IAAA,CAAA,OAAA,CAAQ,KAAA;AAS3E,IAAM,cAAA,EAAgB,CAAC,KAAA,EAAA,GAA0B,OAAA,CAAQ,aAAA,CAAc,KAAK,CAAA;AAG5E,IAAM,gBAAA,EAAN,MAAsB;AAAA,EAC3B,WAAA,CAA6B,KAAA,EAAgC,OAAA,EAAwD,OAAA,EAAiB,4BAAA,EAAY;AAArH,IAAA,IAAA,CAAA,MAAA,EAAA,KAAA;AAAgC,IAAA,IAAA,CAAA,QAAA,EAAA,OAAA;AAAwD,IAAA,IAAA,CAAA,OAAA,EAAA,MAAA;AAAA,EAA8B;AAAA,EAAtH;AAAA,EAAgC;AAAA,EAAwD;AAAA,EACrH,MAAM,OAAA,CAAW,SAAA,EAA4B,MAAA,EAAgB,IAAA,EAAc,GAAA,EACzE,IAAA,EAAgC,KAAA,EAA6C;AAC7E,IAAA,MAAM,QAAA,EAAU,MAAM,IAAA,CAAK,OAAA,CAAQ,CAAA;AACnC,IAAA,MAAM,WAAA,8BAAa,OAAA,CAAQ,mBAAA,gBAAuB,sBAAM,OAAA,mBAAQ,WAAA,6BAAa,GAAA,mBAAI,uCAAqB,KAAA;AACtG,IAAA,GAAA,CAAI,CAAC,UAAA,EAAY,MAAM,IAAI,iDAAA,CAA2B,4DAA4D,CAAA;AAClH,IAAA,MAAM,IAAA,EAAM,OAAA,CAAQ,SAAA,EAAW,IAAI,GAAA,CAAI,OAAA,CAAQ,QAAA,CAAS,QAAA,CAAS,KAAK,EAAA,EAAI,OAAA,CAAQ,SAAA,EAAW,CAAA,QAAA,EAAW,OAAA,CAAQ,QAAQ,CAAA,CAAA;AAC7D,IAAA;AAA0B,MAAA;AAAyC,MAAA;AAClG,MAAA;AAAiC,MAAA;AAAyB,MAAA;AAAyC,MAAA;AAAI,IAAA;AAC5F,IAAA;AAAU,MAAA;AAAoB,MAAA;AAAwB,MAAA;AACiB,MAAA;AAC5G,MAAA;AAAkB,MAAA;AAAa,MAAA;AAAkD,MAAA;AAAsB,MAAA;AAAQ,IAAA;AAEjE,IAAA;AAAY,MAAA;AAAuC,MAAA;AAC7B,MAAA;AAAG,IAAA;AAC/C,IAAA;AACtB,IAAA;AAC8F,IAAA;AAC9F,IAAA;AAE6D,MAAA;AAAa,QAAA;AAAoB,QAAA;AAC9D,QAAA;AAAwC,QAAA;AAAY,MAAA;AACxE,IAAA;AACoB,MAAA;AAE1B,MAAA;AACa,MAAA;AAAS,MAAA;AAChC,IAAA;AAC2B,IAAA;AAAuC,IAAA;AAC9B,IAAA;AAAgC,MAAA;AAAiF,MAAA;AAC5D,MAAA;AAAE,IAAA;AACvF,IAAA;AAC2E,MAAA;AACsC,QAAA;AACnH,MAAA;AACkG,MAAA;AAChF,MAAA;AACJ,IAAA;AACuG,MAAA;AACnB,MAAA;AAC5F,MAAA;AACR,IAAA;AACF,EAAA;AACsE,EAAA;AAChB,IAAA;AAAmB,MAAA;AAAmC,MAAA;AAAyB,MAAA;AAChE,MAAA;AACG,MAAA;AACJ,MAAA;AAAW,IAAA;AAC/E,EAAA;AACF;AACgE;AAA2G,EAAA;AAAG;AAC5H;AAAsD,EAAA;AAAW;AAC9D;AAAwE,EAAA;AAAW;AAC9E;AAC9B,EAAA;AAAuC,EAAA;AACrC,EAAA;AACM,IAAA;AAA2C,IAAA;AACG,IAAA;AAC2C,IAAA;AACJ,IAAA;AACxF,IAAA;AACU,IAAA;AACzC,EAAA;AACO,EAAA;AACT;ADyC6H;AACA;AE3HpG;AACd,EAAA;AACQ,EAAA;AAC8E,EAAA;AACtC,IAAA;AACmB,IAAA;AAC5E,EAAA;AAC2E,EAAA;AAChC,IAAA;AACR,IAAA;AAAoD,IAAA;AAC0B,IAAA;AACvD,IAAA;AACpD,IAAA;AACa,IAAA;AACmF,MAAA;AACkB,MAAA;AACtH,IAAA;AACkD,IAAA;AACmE,IAAA;AAEvH,EAAA;AACwG,EAAA;AAC/E,IAAA;AAA4C,IAAA;AACnC,IAAA;AAAqD,IAAA;AACgC,IAAA;AACa,IAAA;AACX,IAAA;AAC9F,MAAA;AACgF,MAAA;AACgB,MAAA;AACH,IAAA;AACxH,EAAA;AAC6E,EAAA;AAC/B,IAAA;AAAiD,IAAA;AAAqD,IAAA;AAC9H,IAAA;AACE,IAAA;AAAQ,MAAA;AAAgB,MAAA;AAAO,MAAA;AAA6F,MAAA;AAChJ,MAAA;AAA6H,MAAA;AAA8B,IAAA;AAC/J,EAAA;AACmD,EAAA;AACpB,IAAA;AACwF,IAAA;AACvH,EAAA;AACoF,EAAA;AACrD,IAAA;AACqE,IAAA;AACrE,IAAA;AAAqD,IAAA;AACsC,IAAA;AAC1H,EAAA;AACoD,EAAA;AACrB,IAAA;AACkF,IAAA;AACjH,EAAA;AACgG,EAAA;AAClD,IAAA;AAAiD,IAAA;AAAuB,IAAA;AACA,IAAA;AACpF,MAAA;AACyD,QAAA;AACM,QAAA;AACT,QAAA;AACnF,MAAA;AAC+G,MAAA;AACzG,MAAA;AAC6G,IAAA;AACxH,EAAA;AACiI,EAAA;AAChG,IAAA;AAA6C,IAAA;AAChC,IAAA;AAAiD,IAAA;AACM,IAAA;AAC/E,IAAA;AACE,IAAA;AAAQ,MAAA;AAA6B,MAAA;AAAO,MAAA;AACU,MAAA;AACS,QAAA;AACS,QAAA;AAC1F,MAAA;AAAG,MAAA;AAA6H,MAAA;AAAW,IAAA;AACjJ,EAAA;AACF;AAEyD;AAC8D,EAAA;AAC9G,EAAA;AACT;AACuD;AAAgD,EAAA;AAAG;AACnC;AACyD,EAAA;AAChI;AACkE;AACvC,EAAA;AACiF,EAAA;AAC5G;AACuF;AACrD,EAAA;AACiE,EAAA;AACjD,EAAA;AAAqD,EAAA;AAAyD,EAAA;AAC5E,EAAA;AACpF;AACmH;AACjF,EAAA;AACyF,EAAA;AACvG,EAAA;AACpB;AACkD;AACH,EAAA;AACiE,EAAA;AAChH;AACoF;AAC/B,EAAA;AAC2C,EAAA;AACvF,EAAA;AACT;AACoG;AACwB,EAAA;AACnH,EAAA;AACT;AACsG;AAA0F,EAAA;AAAG;AAC1H;AAC9C,EAAA;AAAkC,EAAA;AACc,EAAA;AACM,EAAA;AAC0C,EAAA;AACrH,EAAA;AACuD,EAAA;AAC+D,IAAA;AACjD,IAAA;AACzE,EAAA;AACqB,EAAA;AAAE,IAAA;AAAyC,IAAA;AAAgH,IAAA;AAC9K,IAAA;AAAiF,IAAA;AAA0E,IAAA;AAAG,EAAA;AAClK;AACkH;AACW,EAAA;AACtG,EAAA;AAA4E,IAAA;AAA0D,IAAA;AAClG,IAAA;AAAgG,IAAA;AAAW,EAAA;AACtK;AFkK6H;AACA;AACA;AACA;AACA","file":"/Users/zhuoguang/Documents/Code/collaborate/hiclaw/agentcore-sdk-nodejs/dist/chunk-QIZO3A4Y.cjs","sourcesContent":[null,"import Client from '@alicloud/agentcore20260804';\nimport { $OpenApiUtil, OpenApiUtil } from '@alicloud/openapi-core';\nimport * as Dara from '@darabonba/typescript';\nimport { RuntimeOptions } from '@darabonba/typescript';\nimport type { AccessKeyCredential, CredentialProvider } from '../auth/access-key';\nimport { HIGH_CODE_SDK_PURPOSE } from '../auth/resource-sts';\nimport { AddMemoriesOutcomeUnknownError, MemoryAPIError, MemoryContractError, ResourceNotConfiguredError, type MemoryErrorDetails } from '../errors';\nimport { nullLogger, type Logger } from '../logging';\n\nconst GeneratedClient = typeof Client === 'function' ? Client : (Client as unknown as { default: typeof Client }).default;\n// CJS exposes URL directly; native ESM only exposes it on module.exports/default.\nconst DaraURL = Dara.URL ?? (Dara as unknown as { default: typeof Dara }).default.URL;\nexport interface MemoryRuntime {\n  workspaceId: string;\n  regionId: string;\n  endpoint?: string;\n  accessKeyCredential?: AccessKeyCredential;\n  resourceSTS?: CredentialProvider;\n}\nexport type MemoryOperation = 'AddMemories' | 'SearchMemories' | 'ListMemories' | 'GetMemory' | 'UpdateMemory' | 'DeleteMemory' | 'ListMemorySessions' | 'ListMemorySessionMessages';\nexport const pathComponent = (value: string): string => DaraURL.percentEncode(value);\n\n/** Memory methods absent from the public generated package, using its existing POP transport. */\nexport class MemoryTransport {\n  constructor(private readonly store: string, private readonly runtime: () => Promise<MemoryRuntime>, private readonly logger: Logger = nullLogger) {}\n  async request<T>(operation: MemoryOperation, method: string, path: string, map: (body: Record<string, unknown>) => T,\n    body?: Record<string, unknown>, query?: Record<string, unknown>): Promise<T> {\n    const runtime = await this.runtime();\n    const credential = runtime.accessKeyCredential ?? await runtime.resourceSTS?.get(HIGH_CODE_SDK_PURPOSE);\n    if (!credential) throw new ResourceNotConfiguredError('AgentCore Memory data-plane credentials are not configured');\n    const url = runtime.endpoint ? new URL(runtime.endpoint.includes('://') ? runtime.endpoint : `https://${runtime.endpoint}`) : undefined;\n    const client = new GeneratedClient(new $OpenApiUtil.Config({ accessKeyId: credential.accessKeyId, accessKeySecret: credential.accessKeySecret,\n      securityToken: credential.securityToken, regionId: runtime.regionId, endpoint: url?.host, protocol: url?.protocol.slice(0, -1) }));\n    const params = new $OpenApiUtil.Params({ action: operation, version: '2026-08-04', protocol: 'HTTPS',\n      pathname: `/workspaces/${pathComponent(runtime.workspaceId)}/memorystores/${pathComponent(this.store)}${path}`,\n      method, authType: 'AK', style: 'ROA', reqBodyType: body === undefined ? 'json' : 'formData', bodyType: 'json' });\n    // The generated Python contract wraps JSON in the form field `body`.\n    const request = new $OpenApiUtil.OpenApiRequest({ headers: {}, query: OpenApiUtil.query(query ?? {}),\n      body: body === undefined ? undefined : { body: JSON.stringify(body) } });\n    const add = operation === 'AddMemories';\n    let raw: unknown;\n    this.logger.debug('agentcore.memory.request.started', { operation, memory_store_name: this.store });\n    try {\n      // httpx also uses connectTimeout as socket inactivity timeout while awaiting the response.\n      raw = await client.callApi(params, request, new RuntimeOptions({ autoretry: false, maxAttempts: 1,\n        connectTimeout: add ? 120_000 : undefined, readTimeout: add ? 120_000 : undefined }));\n    } catch (cause) {\n      const details = errorDetails(cause);\n      const error = add && (details.httpStatusCode === undefined || details.httpStatusCode >= 500)\n        ? new AddMemoriesOutcomeUnknownError(operation, details) : new MemoryAPIError(operation, details);\n      this.logFailure(error); throw error;\n    }\n    const response = record(raw); const payload = record(response.body);\n    const details: MemoryErrorDetails = { serviceCode: text(payload.code), httpStatusCode: integer(payload.httpStatusCode) ?? integer(response.statusCode),\n      requestId: text(payload.requestId) ?? text(record(response.headers)['x-acs-request-id']) };\n    try {\n      if ((integer(response.statusCode) ?? 0) >= 400 || payload.success === false) {\n        throw add && (details.httpStatusCode ?? 0) >= 500 ? new AddMemoriesOutcomeUnknownError(operation, details) : new MemoryAPIError(operation, details);\n      }\n      if (payload.success !== true) throw new MemoryContractError(operation, 'body.success must be true');\n      return map(payload);\n    } catch (cause) {\n      const error = add && cause instanceof MemoryContractError ? new AddMemoriesOutcomeUnknownError(operation, details) : cause;\n      if (error instanceof MemoryAPIError || error instanceof MemoryContractError) this.logFailure(error);\n      throw error;\n    }\n  }\n  private logFailure(error: MemoryAPIError | MemoryContractError): void {\n    this.logger.warn('agentcore.memory.request.failed', { operation: error.operation, memory_store_name: this.store, error_type: error.name,\n      status: error instanceof MemoryAPIError ? error.httpStatusCode : undefined,\n      service_code: error instanceof MemoryAPIError ? error.serviceCode : undefined,\n      request_id: error instanceof MemoryAPIError ? error.requestId : undefined });\n  }\n}\nexport function record(value: unknown): Record<string, unknown> { return value && typeof value === 'object' && !Array.isArray(value) ? value as Record<string, unknown> : {}; }\nfunction text(value: unknown): string | undefined { return typeof value === 'string' && value ? value : undefined; }\nfunction integer(value: unknown): number | undefined { return typeof value === 'number' && Number.isInteger(value) ? value : undefined; }\nfunction errorDetails(error: unknown): MemoryErrorDetails {\n  let current = record(error); const result: MemoryErrorDetails = {};\n  for (let i = 0; i < 4; i++) {\n    const data = record(current.data); const response = record(current.response);\n    result.serviceCode ??= text(current.code) ?? text(data.code) ?? text(data.Code);\n    result.httpStatusCode ??= integer(current.statusCode) ?? integer(data.statusCode) ?? integer(data.StatusCode) ?? integer(response.statusCode);\n    result.requestId ??= text(current.requestId) ?? text(data.requestId) ?? text(data.RequestId) ?? text(record(response.headers)['x-acs-request-id']);\n    if (!current.innerException) break;\n    current = record(current.innerException);\n  }\n  return result;\n}\n","import { MemoryContractError, MemoryValidationError } from '../errors';\nimport type { Logger } from '../logging';\nimport { MemoryTransport, pathComponent, record, type MemoryRuntime, type MemoryOperation } from './transport';\nimport type { AddMemoriesOptions, AddMemoriesResult, ListMemoriesOptions, ListMemorySessionsOptions, ListMemorySessionMessagesOptions, Memory, MemoryMessage, MemoryScope, MemorySession,\n  Page, PageOptions, SearchMemoriesOptions, SearchMemoriesResult, UpdateMemoryOptions } from './models';\n\n/** A local binding to an existing MemoryStore. No lookup or creation at construction. */\nexport class MemoryStore {\n  readonly memoryStoreName: string;\n  private readonly transport: MemoryTransport;\n  constructor(name: string, options: { runtime: () => Promise<MemoryRuntime>; logger?: Logger }) {\n    this.memoryStoreName = required(name, 'memoryStoreName');\n    this.transport = new MemoryTransport(name, options.runtime, options.logger);\n  }\n  async addMemories(options: AddMemoriesOptions): Promise<AddMemoriesResult> {\n    const scope = validateScope(options.scope);\n    const hasText = options.text !== undefined; const hasMessages = options.messages !== undefined;\n    if (hasText === hasMessages) throw new MemoryValidationError('exactly one of text or messages must be provided');\n    const text = hasText ? required(options.text, 'text') : undefined;\n    let messages: MemoryMessage[] | undefined;\n    if (hasMessages) {\n      if (!Array.isArray(options.messages) || !options.messages.length) throw new MemoryValidationError('messages must be a non-empty array');\n      messages = options.messages.map((message) => ({ role: required(message?.role, 'messages[].role'), content: required(message?.content, 'messages[].content') }));\n    }\n    const metadata = validateMetadata(options.metadata);\n    return this.transport.request('AddMemories', 'POST', '/memories', (body) => Object.freeze({ memoryIds: Object.freeze(array(record(body.data).memories, 'AddMemories', 'data.memories').map((item) =>\n      string(record(item).memoryId, 'AddMemories', 'data.memories[].memoryId', true))) }), { scope, text, messages, metadata });\n  }\n  async searchMemories(query: string, options: SearchMemoriesOptions = {}): Promise<SearchMemoriesResult> {\n    required(query, 'query'); const scope = validateScope(options.scope);\n    bounded(options.topK, 'topK', 50); const metadata = validateMetadata(options.metadata);\n    if (options.enableRerank !== undefined && typeof options.enableRerank !== 'boolean') throw new MemoryValidationError('enableRerank must be a boolean');\n    for (const key of ['minScore', 'minSimilarity'] as const) if (options[key] !== undefined && (typeof options[key] !== 'number' || !Number.isFinite(options[key]))) throw new MemoryValidationError(`${key} must be a finite number`);\n    return this.transport.request('SearchMemories', 'POST', '/memories/search', (body) => Object.freeze({ memories: Object.freeze(array(record(body.data).memories, 'SearchMemories', 'data.memories').map((item) => {\n      const hit = record(item);\n      if (typeof hit.score !== 'number' || typeof hit.similarity !== 'number') throw new MemoryContractError('SearchMemories', 'score and similarity must be numbers');\n      return Object.freeze({ memory: parseMemory(hit.memory, 'SearchMemories'), score: hit.score, similarity: hit.similarity });\n    })) }), { query, scope, topK: options.topK, metadata, enableRerank: options.enableRerank, minScore: options.minScore, minSimilarity: options.minSimilarity });\n  }\n  async listMemories(options: ListMemoriesOptions = {}): Promise<Page<Memory>> {\n    optionalScopeString(options.userId, 'userId'); optionalScopeString(options.agentId, 'agentId'); optionalScopeString(options.sessionId, 'sessionId');\n    validatePage(options);\n    return this.transport.request('ListMemories', 'GET', '/memories', (body) => page(body, 'ListMemories', (item) => parseMemory(item, 'ListMemories')),\n      undefined, { userId: options.userId, agentId: options.agentId, sessionId: options.sessionId, maxResults: options.maxResults, nextToken: options.nextToken });\n  }\n  async getMemory(memoryId: string): Promise<Memory> {\n    required(memoryId, 'memoryId');\n    return this.transport.request('GetMemory', 'GET', `/memories/${pathComponent(memoryId)}`, (body) => parseMemory(body.data, 'GetMemory'));\n  }\n  async updateMemory(memoryId: string, options: UpdateMemoryOptions): Promise<Memory> {\n    required(memoryId, 'memoryId');\n    if (options.text === undefined && options.metadata === undefined) throw new MemoryValidationError('at least one of text or metadata must be provided');\n    optional(options.text, 'text'); const metadata = validateMetadata(options.metadata);\n    return this.transport.request('UpdateMemory', 'PUT', `/memories/${pathComponent(memoryId)}`, (body) => parseMemory(body.data, 'UpdateMemory'), { text: options.text, metadata });\n  }\n  async deleteMemory(memoryId: string): Promise<void> {\n    required(memoryId, 'memoryId');\n    return this.transport.request('DeleteMemory', 'DELETE', `/memories/${pathComponent(memoryId)}`, () => undefined);\n  }\n  async listMemorySessions(options: ListMemorySessionsOptions = {}): Promise<Page<MemorySession>> {\n    optionalScopeString(options.userId, 'userId'); optionalScopeString(options.agentId, 'agentId'); validatePage(options);\n    return this.transport.request('ListMemorySessions', 'GET', '/sessions', (body) => page(body, 'ListMemorySessions', (item) => {\n      const session = Object.freeze({\n        agentId: optionalString(record(item).agentId, 'ListMemorySessions', 'items[].agentId'),\n        sessionId: optionalString(record(item).sessionId, 'ListMemorySessions', 'items[].sessionId'),\n        userId: optionalString(record(item).userId, 'ListMemorySessions', 'items[].userId'),\n      });\n      if (session.userId === undefined && session.agentId === undefined && session.sessionId === undefined) throw new MemoryContractError('ListMemorySessions', 'items[] must contain at least one scope field');\n      return session;\n    }), undefined, { userId: options.userId, agentId: options.agentId, maxResults: options.maxResults, nextToken: options.nextToken });\n  }\n  async listMemorySessionMessages(sessionId: string, options: ListMemorySessionMessagesOptions = {}): Promise<Page<MemoryMessage>> {\n    required(sessionId, 'sessionId'); optionalScopeString(sessionId, 'sessionId');\n    optionalScopeString(options.userId, 'userId'); optionalScopeString(options.agentId, 'agentId');\n    if (options.userId === undefined && options.agentId === undefined) throw new MemoryValidationError('at least one of userId or agentId must be provided');\n    validatePage(options);\n    return this.transport.request('ListMemorySessionMessages', 'GET', '/messages',\n      (body) => page(body, 'ListMemorySessionMessages', (item) => Object.freeze({\n        role: string(record(item).role, 'ListMemorySessionMessages', 'items[].role', true),\n        content: string(record(item).content, 'ListMemorySessionMessages', 'items[].content', true),\n      })), undefined, { userId: options.userId, agentId: options.agentId, sessionId, maxResults: options.maxResults, nextToken: options.nextToken });\n  }\n}\n\nfunction required(value: unknown, field: string): string {\n  if (typeof value !== 'string' || !value.trim()) throw new MemoryValidationError(`${field} must be a non-empty string`);\n  return value;\n}\nfunction optional(value: unknown, field: string): void { if (value !== undefined) required(value, field); }\nfunction bounded(value: unknown, field: string, maximum: number): void {\n  if (value !== undefined && (typeof value !== 'number' || !Number.isInteger(value) || value < 1 || value > maximum)) throw new MemoryValidationError(`${field} must be an integer from 1 to ${maximum}`);\n}\nfunction optionalScopeString(value: unknown, field: string): void {\n  if (value === undefined) return;\n  if (['*', '__default__'].includes(required(value, field).trim())) throw new MemoryValidationError(`${field} must not use a reserved scope value`);\n}\nexport function validateScope(scope: MemoryScope | undefined): MemoryScope | undefined {\n  if (scope === undefined) return undefined;\n  if (!scope || typeof scope !== 'object' || Array.isArray(scope)) throw new MemoryValidationError('scope must be a MemoryScope');\n  optionalScopeString(scope.userId, 'scope.userId'); optionalScopeString(scope.agentId, 'scope.agentId'); optionalScopeString(scope.sessionId, 'scope.sessionId');\n  return { userId: scope.userId, agentId: scope.agentId, sessionId: scope.sessionId };\n}\nfunction validateMetadata(value: Readonly<Record<string, string>> | undefined): Record<string, string> | undefined {\n  if (value === undefined) return undefined;\n  if (!value || typeof value !== 'object' || Array.isArray(value) || Object.entries(value).some(([key, item]) => !key.trim() || typeof item !== 'string')) throw new MemoryValidationError('metadata must contain non-empty string keys and string values');\n  return { ...value };\n}\nfunction validatePage(options: PageOptions): void {\n  bounded(options.maxResults, 'maxResults', 100);\n  if (options.nextToken !== undefined && typeof options.nextToken !== 'string') throw new MemoryValidationError('nextToken must be a string');\n}\nfunction array(value: unknown, operation: MemoryOperation, path: string): unknown[] {\n  if (value === undefined || value === null) return [];\n  if (!Array.isArray(value)) throw new MemoryContractError(operation, `${path} must be an array`);\n  return value;\n}\nfunction string(value: unknown, operation: MemoryOperation, path: string, nonEmpty = false): string {\n  if (typeof value !== 'string' || (nonEmpty && !value.trim())) throw new MemoryContractError(operation, `${path} must be ${nonEmpty ? 'a non-empty' : 'a'} string`);\n  return value;\n}\nfunction optionalString(value: unknown, operation: MemoryOperation, path: string): string | undefined { return value === undefined || value === null ? undefined : string(value, operation, path); }\nfunction parseMemory(value: unknown, operation: MemoryOperation): Memory {\n  const item = record(value); const scope = record(item.scope);\n  const memoryId = string(item.memoryId, operation, 'memory.memoryId', true);\n  const text = string(record(item.content).text, operation, 'memory.content.text');\n  if (!item.scope || typeof item.scope !== 'object' || Array.isArray(item.scope)) throw new MemoryContractError(operation, 'memory.scope must be an object');\n  let metadata: Readonly<Record<string, string>> | undefined;\n  if (item.metadata !== undefined && item.metadata !== null) {\n    if (typeof item.metadata !== 'object' || Array.isArray(item.metadata) || Object.entries(item.metadata).some(([key, value]) => !key.trim() || typeof value !== 'string')) throw new MemoryContractError(operation, 'memory.metadata must contain string keys and values');\n    metadata = Object.freeze({ ...item.metadata as Record<string, string> });\n  }\n  return Object.freeze({ memoryId, content: Object.freeze({ text }), scope: Object.freeze({ agentId: optionalString(scope.agentId, operation, 'memory.scope.agentId'), sessionId: optionalString(scope.sessionId, operation, 'memory.scope.sessionId'), userId: optionalString(scope.userId, operation, 'memory.scope.userId') }),\n    metadata, createdAt: optionalString(item.createdAt, operation, 'memory.createdAt'), updatedAt: optionalString(item.updatedAt, operation, 'memory.updatedAt') });\n}\nfunction page<T>(body: Record<string, unknown>, operation: MemoryOperation, parse: (item: unknown) => T): Page<T> {\n  for (const key of ['maxResults', 'totalCount']) if (body[key] !== undefined && body[key] !== null && (typeof body[key] !== 'number' || !Number.isInteger(body[key]))) throw new MemoryContractError(operation, `body.${key} must be an integer`);\n  return Object.freeze({ items: Object.freeze(array(body.items, operation, 'body.items').map(parse)), maxResults: body.maxResults == null ? undefined : body.maxResults as number,\n    totalCount: body.totalCount == null ? undefined : body.totalCount as number, nextToken: optionalString(body.nextToken, operation, 'body.nextToken') || undefined });\n}\n"]}

package/dist/chunk-RBAY4MO2.js

@@ -0,0 +1,202 @@
+import {
+  AGENT_IDENTITY_DATA_PURPOSE
+} from "./chunk-IUCLCPVV.js";
+import {
+  ControllerClient
+} from "./chunk-UBP5CHU7.js";
+import {
+  nullLogger
+} from "./chunk-NZL3VPJ2.js";
+import {
+  AuthenticationError,
+  ConfigError,
+  CredentialExchangeError,
+  WorkloadAccessTokenRejectedError,
+  WorkloadIdentityNotConfiguredError
+} from "./chunk-MZ5UWGXS.js";
+
+// src/auth/workload-access-token.ts
+var WorkloadAccessTokenProvider = class {
+  controller;
+  #token;
+  pending;
+  constructor(endpoint, source, options = {}) {
+    this.controller = new ControllerClient(endpoint, source, options);
+  }
+  async get() {
+    if (this.#token !== void 0) return this.#token;
+    if (this.pending) return this.pending;
+    const request = this.exchange();
+    this.pending = request;
+    try {
+      this.#token = await request;
+      return this.#token;
+    } finally {
+      this.pending = void 0;
+    }
+  }
+  async invalidate(token) {
+    if (this.pending) await this.pending.catch(() => void 0);
+    if (token === void 0 || token === this.#token) this.#token = void 0;
+  }
+  close() {
+    this.controller.close();
+    this.#token = void 0;
+  }
+  async exchange() {
+    const response = await this.controller.post("/api/v1/workload/token");
+    if (response.status === 404) throw new WorkloadIdentityNotConfiguredError("the current Agent has no configured Workload Identity");
+    if (response.status < 200 || response.status >= 300) throw new AuthenticationError(`Controller workload token request failed with HTTP ${response.status}`);
+    const payload = response.payload;
+    const token = payload && typeof payload === "object" && "workloadAccessToken" in payload ? payload.workloadAccessToken : void 0;
+    if (typeof token !== "string" || !token.trim()) throw new AuthenticationError("Controller returned an empty workload access token");
+    return token.trim();
+  }
+};
+
+// src/auth/bound-credentials.ts
+import { inspect } from "util";
+import Client, { GetResourceAPIKeyRequest } from "@alicloud/agentidentitydata20251127";
+import { $OpenApiUtil } from "@alicloud/openapi-core";
+import { RuntimeOptions } from "@darabonba/typescript";
+var GeneratedClient = typeof Client === "function" ? Client : Client.default;
+var WAT_ERRORS = /* @__PURE__ */ new Set(["WORKLOAD_ACCESS_TOKEN_EXPIRED", "WORKLOAD_ACCESS_TOKEN_INVALID"]);
+var BoundCredential = class {
+  constructor(providerName, value, metadata) {
+    this.metadata = metadata;
+    this.providerName = providerName;
+    this.#value = value;
+  }
+  metadata;
+  providerName;
+  #value;
+  get value() {
+    return this.#value;
+  }
+  get credentialType() {
+    return this.metadata.credentialType;
+  }
+  asHeaders() {
+    if (this.credentialType !== "mcpHeader") throw new ConfigError("Credential must have type mcpHeader to read headers");
+    let data;
+    try {
+      data = JSON.parse(this.#value);
+    } catch {
+      throw new ConfigError("Invalid MCP Header credential payload");
+    }
+    const entries = fields(data).headers;
+    if (!Array.isArray(entries) || !entries.length) throw new ConfigError("MCP Header credential must contain a non-empty headers array");
+    const headers = {};
+    for (const entry of entries) {
+      const { name, value } = fields(entry);
+      if (typeof name !== "string" || !/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/.test(name)) throw new ConfigError("Invalid credential header name");
+      if (typeof value !== "string" || /[\x00-\x1f\x7f]/.test(value)) throw new ConfigError("Invalid credential header value");
+      const folded = name.toLowerCase();
+      if (Object.hasOwn(headers, folded)) throw new ConfigError("Duplicate credential header name");
+      Object.defineProperty(headers, folded, { value, enumerable: true, configurable: true, writable: true });
+    }
+    return headers;
+  }
+  [inspect.custom]() {
+    return `BoundCredential(providerName=${JSON.stringify(this.providerName)}, <redacted>)`;
+  }
+  toJSON() {
+    return this[inspect.custom]();
+  }
+};
+var BoundCredentials = class {
+  constructor(runtime, logger = nullLogger) {
+    this.runtime = runtime;
+    this.logger = logger;
+  }
+  runtime;
+  logger;
+  async get(credentialName) {
+    return this.resolve(credentialName);
+  }
+  /** @internal Bind only after validating the credential's MCP application scope. */
+  async getForMCP(credentialName, serverId) {
+    return this.resolve(credentialName, serverId);
+  }
+  async resolve(credentialName, serverId) {
+    credentialName = credentialName.trim();
+    if (!credentialName) throw new TypeError("credential name must not be empty");
+    const { workspaceId, regionId, workloadAccessToken: wat, resourceSTS: sts, controlPlane } = await this.runtime();
+    if (!wat || !sts) throw new CredentialExchangeError("AgentCore credential runtime is not configured");
+    const metadata = await controlPlane.resolveCredential(credentialName);
+    if (serverId !== void 0) {
+      if (metadata.credentialType !== "mcpHeader") throw new ConfigError("MCP credential must have type mcpHeader");
+      if (!(metadata.resourceScope === "ALL" || metadata.resourceScope === "SPECIFIED" && metadata.resourceRefs.some((ref) => ref.resourceType === "mcpServer" && ref.resourceId === serverId))) {
+        throw new ConfigError("MCP credential does not allow the selected MCP server");
+      }
+    }
+    const providerName = `${workspaceId}-${credentialName}`;
+    this.logger.info("agentcore.credential.resolve.started", { workspace_id: workspaceId, credential_name: credentialName });
+    const credential = await sts.get(AGENT_IDENTITY_DATA_PURPOSE);
+    let token = await wat.get();
+    let value;
+    try {
+      value = await this.getAPIKey(regionId, credential, providerName, token);
+    } catch (error) {
+      if (!(error instanceof WorkloadAccessTokenRejectedError)) throw error;
+      this.logger.warn("agentcore.credential.resolve.wat_rejected", { workspace_id: workspaceId, credential_name: credentialName, retry: true });
+      await wat.invalidate(token);
+      token = await wat.get();
+      value = await this.getAPIKey(regionId, credential, providerName, token);
+    }
+    this.logger.info("agentcore.credential.resolve.succeeded", { workspace_id: workspaceId, credential_name: credentialName });
+    return new BoundCredential(providerName, value, metadata);
+  }
+  async getAPIKey(regionId, credential, providerName, token) {
+    const endpoint = `agentidentitydata.${regionId}.aliyuncs.com`;
+    const client = new GeneratedClient(new $OpenApiUtil.Config({
+      accessKeyId: credential.accessKeyId,
+      accessKeySecret: credential.accessKeySecret,
+      securityToken: credential.securityToken,
+      regionId,
+      endpoint,
+      protocol: "https"
+    }));
+    try {
+      const response = await client.getResourceAPIKeyWithOptions(new GetResourceAPIKeyRequest({
+        resourceCredentialProviderName: providerName,
+        workloadAccessToken: token
+      }), new RuntimeOptions({ autoretry: false, connectTimeout: 1e4, readTimeout: 3e4 }));
+      const value = response.body?.APIKey;
+      if (typeof value !== "string" || !value) throw new CredentialExchangeError("Agent Identity Data returned an empty or invalid API key");
+      return value;
+    } catch (error) {
+      if (watRejection(error)) throw new WorkloadAccessTokenRejectedError("Agent Identity Data rejected the Workload Access Token");
+      const details = fields(error);
+      const data = fields(details.data);
+      this.logger.warn("agentcore.credential.api.failed", {
+        endpoint: `https://${endpoint}/`,
+        provider_name: providerName,
+        error_type: error instanceof Error ? error.name : "Error",
+        request_id: String(details.requestId ?? data.RequestId ?? data.requestId ?? "")
+      });
+      if (error instanceof CredentialExchangeError) throw error;
+      throw new CredentialExchangeError("Agent Identity Data API key request failed");
+    }
+  }
+};
+function fields(value) {
+  return value && typeof value === "object" ? value : {};
+}
+function watRejection(error) {
+  let current = fields(error);
+  for (let depth = 0; depth < 3; depth++) {
+    const data = fields(current.data);
+    if ([current.code, data.Code, data.code].some((code) => typeof code === "string" && WAT_ERRORS.has(code.toUpperCase()))) return true;
+    if (!current.innerException) return false;
+    current = fields(current.innerException);
+  }
+  return false;
+}
+
+export {
+  WorkloadAccessTokenProvider,
+  BoundCredential,
+  BoundCredentials
+};
+//# sourceMappingURL=chunk-RBAY4MO2.js.map

package/dist/chunk-RBAY4MO2.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/auth/workload-access-token.ts","../src/auth/bound-credentials.ts"],"sourcesContent":["import { AuthenticationError, WorkloadIdentityNotConfiguredError } from '../errors';\nimport type { AgentSATokenSource } from './agent-sa-token';\nimport { ControllerClient, type ControllerOptions } from './controller';\n\nexport class WorkloadAccessTokenProvider {\n  private readonly controller: ControllerClient;\n  #token?: string;\n  private pending?: Promise<string>;\n\n  constructor(endpoint: string, source: AgentSATokenSource, options: ControllerOptions = {}) {\n    this.controller = new ControllerClient(endpoint, source, options);\n  }\n  async get(): Promise<string> {\n    if (this.#token !== undefined) return this.#token;\n    if (this.pending) return this.pending;\n    const request = this.exchange();\n    this.pending = request;\n    try { this.#token = await request; return this.#token; }\n    finally { this.pending = undefined; }\n  }\n  async invalidate(token?: string): Promise<void> {\n    // Serialize invalidation after an exchange, including an initially empty cache.\n    if (this.pending) await this.pending.catch(() => undefined);\n    if (token === undefined || token === this.#token) this.#token = undefined;\n  }\n  close(): void { this.controller.close(); this.#token = undefined; }\n\n  private async exchange(): Promise<string> {\n    const response = await this.controller.post('/api/v1/workload/token');\n    if (response.status === 404) throw new WorkloadIdentityNotConfiguredError('the current Agent has no configured Workload Identity');\n    if (response.status < 200 || response.status >= 300) throw new AuthenticationError(`Controller workload token request failed with HTTP ${response.status}`);\n    const payload = response.payload;\n    const token = payload && typeof payload === 'object' && 'workloadAccessToken' in payload ? payload.workloadAccessToken : undefined;\n    if (typeof token !== 'string' || !token.trim()) throw new AuthenticationError('Controller returned an empty workload access token');\n    return token.trim();\n  }\n}\n","import { inspect } from 'node:util';\nimport Client, { GetResourceAPIKeyRequest } from '@alicloud/agentidentitydata20251127';\nimport { $OpenApiUtil } from '@alicloud/openapi-core';\nimport { RuntimeOptions } from '@darabonba/typescript';\nimport { ConfigError, CredentialExchangeError, WorkloadAccessTokenRejectedError } from '../errors';\nimport type { AgentCoreControlPlane, CredentialMetadata } from '../controlplane/client';\nimport { nullLogger, type Logger } from '../logging';\nimport type { AccessKeyCredential, CredentialProvider } from './access-key';\nimport { AGENT_IDENTITY_DATA_PURPOSE } from './resource-sts';\n\nconst GeneratedClient = typeof Client === 'function' ? Client : (Client as unknown as { default: typeof Client }).default;\nconst WAT_ERRORS = new Set(['WORKLOAD_ACCESS_TOKEN_EXPIRED', 'WORKLOAD_ACCESS_TOKEN_INVALID']);\ninterface CredentialRuntime {\n  workspaceId: string;\n  regionId: string;\n  controlPlane: AgentCoreControlPlane;\n  resourceSTS?: CredentialProvider;\n  workloadAccessToken?: { get(): Promise<string>; invalidate(token: string): Promise<void> };\n}\n\nexport class BoundCredential {\n  readonly providerName: string;\n  #value: string;\n  constructor(providerName: string, value: string, readonly metadata: CredentialMetadata) { this.providerName = providerName; this.#value = value; }\n  get value(): string { return this.#value; }\n  get credentialType(): string { return this.metadata.credentialType; }\n  asHeaders(): Record<string, string> {\n    if (this.credentialType !== 'mcpHeader') throw new ConfigError('Credential must have type mcpHeader to read headers');\n    let data: unknown;\n    try { data = JSON.parse(this.#value); } catch { throw new ConfigError('Invalid MCP Header credential payload'); }\n    const entries = fields(data).headers;\n    if (!Array.isArray(entries) || !entries.length) throw new ConfigError('MCP Header credential must contain a non-empty headers array');\n    const headers: Record<string, string> = {};\n    for (const entry of entries) {\n      const { name, value } = fields(entry);\n      if (typeof name !== 'string' || !/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/.test(name)) throw new ConfigError('Invalid credential header name');\n      if (typeof value !== 'string' || /[\\x00-\\x1f\\x7f]/.test(value)) throw new ConfigError('Invalid credential header value');\n      const folded = name.toLowerCase();\n      if (Object.hasOwn(headers, folded)) throw new ConfigError('Duplicate credential header name');\n      Object.defineProperty(headers, folded, { value, enumerable: true, configurable: true, writable: true });\n    }\n    return headers;\n  }\n  [inspect.custom](): string { return `BoundCredential(providerName=${JSON.stringify(this.providerName)}, <redacted>)`; }\n  toJSON(): string { return this[inspect.custom](); }\n}\n\n/** Resolve metadata by name, then fetch the secret from AgentIdentity. WAT/STS cache independently. */\nexport class BoundCredentials {\n  constructor(private readonly runtime: () => Promise<CredentialRuntime>, private readonly logger: Logger = nullLogger) {}\n  async get(credentialName: string): Promise<BoundCredential> {\n    return this.resolve(credentialName);\n  }\n  /** @internal Bind only after validating the credential's MCP application scope. */\n  async getForMCP(credentialName: string, serverId: string): Promise<BoundCredential> {\n    return this.resolve(credentialName, serverId);\n  }\n  private async resolve(credentialName: string, serverId?: string): Promise<BoundCredential> {\n    credentialName = credentialName.trim();\n    if (!credentialName) throw new TypeError('credential name must not be empty');\n    const { workspaceId, regionId, workloadAccessToken: wat, resourceSTS: sts, controlPlane } = await this.runtime();\n    if (!wat || !sts) throw new CredentialExchangeError('AgentCore credential runtime is not configured');\n    const metadata = await controlPlane.resolveCredential(credentialName);\n    if (serverId !== undefined) {\n      if (metadata.credentialType !== 'mcpHeader') throw new ConfigError('MCP credential must have type mcpHeader');\n      if (!(metadata.resourceScope === 'ALL' || (metadata.resourceScope === 'SPECIFIED' &&\n        metadata.resourceRefs.some((ref) => ref.resourceType === 'mcpServer' && ref.resourceId === serverId)))) {\n        throw new ConfigError('MCP credential does not allow the selected MCP server');\n      }\n    }\n    // Matches the control plane's CreateCredential provider naming contract.\n    const providerName = `${workspaceId}-${credentialName}`;\n    this.logger.info('agentcore.credential.resolve.started', { workspace_id: workspaceId, credential_name: credentialName });\n    const credential = await sts.get(AGENT_IDENTITY_DATA_PURPOSE);\n    let token = await wat.get(); let value: string;\n    try { value = await this.getAPIKey(regionId, credential, providerName, token); }\n    catch (error) {\n      if (!(error instanceof WorkloadAccessTokenRejectedError)) throw error;\n      this.logger.warn('agentcore.credential.resolve.wat_rejected', { workspace_id: workspaceId, credential_name: credentialName, retry: true });\n      await wat.invalidate(token); token = await wat.get();\n      value = await this.getAPIKey(regionId, credential, providerName, token);\n    }\n    this.logger.info('agentcore.credential.resolve.succeeded', { workspace_id: workspaceId, credential_name: credentialName });\n    return new BoundCredential(providerName, value, metadata);\n  }\n  private async getAPIKey(regionId: string, credential: AccessKeyCredential, providerName: string, token: string): Promise<string> {\n    const endpoint = `agentidentitydata.${regionId}.aliyuncs.com`;\n    const client = new GeneratedClient(new $OpenApiUtil.Config({\n      accessKeyId: credential.accessKeyId, accessKeySecret: credential.accessKeySecret, securityToken: credential.securityToken,\n      regionId, endpoint, protocol: 'https',\n    }));\n    try {\n      const response = await client.getResourceAPIKeyWithOptions(new GetResourceAPIKeyRequest({\n        resourceCredentialProviderName: providerName, workloadAccessToken: token,\n      }), new RuntimeOptions({ autoretry: false, connectTimeout: 10_000, readTimeout: 30_000 }));\n      const value = response.body?.APIKey;\n      if (typeof value !== 'string' || !value) throw new CredentialExchangeError('Agent Identity Data returned an empty or invalid API key');\n      return value;\n    } catch (error) {\n      if (watRejection(error)) throw new WorkloadAccessTokenRejectedError('Agent Identity Data rejected the Workload Access Token');\n      const details = fields(error); const data = fields(details.data);\n      this.logger.warn('agentcore.credential.api.failed', { endpoint: `https://${endpoint}/`, provider_name: providerName,\n        error_type: error instanceof Error ? error.name : 'Error', request_id: String(details.requestId ?? data.RequestId ?? data.requestId ?? '') });\n      if (error instanceof CredentialExchangeError) throw error;\n      // Generated SDK errors may contain a credential-bearing request; do not attach them.\n      throw new CredentialExchangeError('Agent Identity Data API key request failed');\n    }\n  }\n}\nfunction fields(value: unknown): Record<string, unknown> { return value && typeof value === 'object' ? value as Record<string, unknown> : {}; }\nfunction watRejection(error: unknown): boolean {\n  let current = fields(error);\n  for (let depth = 0; depth < 3; depth++) {\n    const data = fields(current.data);\n    if ([current.code, data.Code, data.code].some((code) => typeof code === 'string' && WAT_ERRORS.has(code.toUpperCase()))) return true;\n    if (!current.innerException) return false;\n    current = fields(current.innerException);\n  }\n  return false;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAIO,IAAM,8BAAN,MAAkC;AAAA,EACtB;AAAA,EACjB;AAAA,EACQ;AAAA,EAER,YAAY,UAAkB,QAA4B,UAA6B,CAAC,GAAG;AACzF,SAAK,aAAa,IAAI,iBAAiB,UAAU,QAAQ,OAAO;AAAA,EAClE;AAAA,EACA,MAAM,MAAuB;AAC3B,QAAI,KAAK,WAAW,OAAW,QAAO,KAAK;AAC3C,QAAI,KAAK,QAAS,QAAO,KAAK;AAC9B,UAAM,UAAU,KAAK,SAAS;AAC9B,SAAK,UAAU;AACf,QAAI;AAAE,WAAK,SAAS,MAAM;AAAS,aAAO,KAAK;AAAA,IAAQ,UACvD;AAAU,WAAK,UAAU;AAAA,IAAW;AAAA,EACtC;AAAA,EACA,MAAM,WAAW,OAA+B;AAE9C,QAAI,KAAK,QAAS,OAAM,KAAK,QAAQ,MAAM,MAAM,MAAS;AAC1D,QAAI,UAAU,UAAa,UAAU,KAAK,OAAQ,MAAK,SAAS;AAAA,EAClE;AAAA,EACA,QAAc;AAAE,SAAK,WAAW,MAAM;AAAG,SAAK,SAAS;AAAA,EAAW;AAAA,EAElE,MAAc,WAA4B;AACxC,UAAM,WAAW,MAAM,KAAK,WAAW,KAAK,wBAAwB;AACpE,QAAI,SAAS,WAAW,IAAK,OAAM,IAAI,mCAAmC,uDAAuD;AACjI,QAAI,SAAS,SAAS,OAAO,SAAS,UAAU,IAAK,OAAM,IAAI,oBAAoB,sDAAsD,SAAS,MAAM,EAAE;AAC1J,UAAM,UAAU,SAAS;AACzB,UAAM,QAAQ,WAAW,OAAO,YAAY,YAAY,yBAAyB,UAAU,QAAQ,sBAAsB;AACzH,QAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,EAAG,OAAM,IAAI,oBAAoB,oDAAoD;AAClI,WAAO,MAAM,KAAK;AAAA,EACpB;AACF;;;ACpCA,SAAS,eAAe;AACxB,OAAO,UAAU,gCAAgC;AACjD,SAAS,oBAAoB;AAC7B,SAAS,sBAAsB;AAO/B,IAAM,kBAAkB,OAAO,WAAW,aAAa,SAAU,OAAiD;AAClH,IAAM,aAAa,oBAAI,IAAI,CAAC,iCAAiC,+BAA+B,CAAC;AAStF,IAAM,kBAAN,MAAsB;AAAA,EAG3B,YAAY,cAAsB,OAAwB,UAA8B;AAA9B;AAAgC,SAAK,eAAe;AAAc,SAAK,SAAS;AAAA,EAAO;AAAA,EAAvF;AAAA,EAFjD;AAAA,EACT;AAAA,EAEA,IAAI,QAAgB;AAAE,WAAO,KAAK;AAAA,EAAQ;AAAA,EAC1C,IAAI,iBAAyB;AAAE,WAAO,KAAK,SAAS;AAAA,EAAgB;AAAA,EACpE,YAAoC;AAClC,QAAI,KAAK,mBAAmB,YAAa,OAAM,IAAI,YAAY,qDAAqD;AACpH,QAAI;AACJ,QAAI;AAAE,aAAO,KAAK,MAAM,KAAK,MAAM;AAAA,IAAG,QAAQ;AAAE,YAAM,IAAI,YAAY,uCAAuC;AAAA,IAAG;AAChH,UAAM,UAAU,OAAO,IAAI,EAAE;AAC7B,QAAI,CAAC,MAAM,QAAQ,OAAO,KAAK,CAAC,QAAQ,OAAQ,OAAM,IAAI,YAAY,8DAA8D;AACpI,UAAM,UAAkC,CAAC;AACzC,eAAW,SAAS,SAAS;AAC3B,YAAM,EAAE,MAAM,MAAM,IAAI,OAAO,KAAK;AACpC,UAAI,OAAO,SAAS,YAAY,CAAC,gCAAgC,KAAK,IAAI,EAAG,OAAM,IAAI,YAAY,gCAAgC;AACnI,UAAI,OAAO,UAAU,YAAY,kBAAkB,KAAK,KAAK,EAAG,OAAM,IAAI,YAAY,iCAAiC;AACvH,YAAM,SAAS,KAAK,YAAY;AAChC,UAAI,OAAO,OAAO,SAAS,MAAM,EAAG,OAAM,IAAI,YAAY,kCAAkC;AAC5F,aAAO,eAAe,SAAS,QAAQ,EAAE,OAAO,YAAY,MAAM,cAAc,MAAM,UAAU,KAAK,CAAC;AAAA,IACxG;AACA,WAAO;AAAA,EACT;AAAA,EACA,CAAC,QAAQ,MAAM,IAAY;AAAE,WAAO,gCAAgC,KAAK,UAAU,KAAK,YAAY,CAAC;AAAA,EAAiB;AAAA,EACtH,SAAiB;AAAE,WAAO,KAAK,QAAQ,MAAM,EAAE;AAAA,EAAG;AACpD;AAGO,IAAM,mBAAN,MAAuB;AAAA,EAC5B,YAA6B,SAA4D,SAAiB,YAAY;AAAzF;AAA4D;AAAA,EAA8B;AAAA,EAA1F;AAAA,EAA4D;AAAA,EACzF,MAAM,IAAI,gBAAkD;AAC1D,WAAO,KAAK,QAAQ,cAAc;AAAA,EACpC;AAAA;AAAA,EAEA,MAAM,UAAU,gBAAwB,UAA4C;AAClF,WAAO,KAAK,QAAQ,gBAAgB,QAAQ;AAAA,EAC9C;AAAA,EACA,MAAc,QAAQ,gBAAwB,UAA6C;AACzF,qBAAiB,eAAe,KAAK;AACrC,QAAI,CAAC,eAAgB,OAAM,IAAI,UAAU,mCAAmC;AAC5E,UAAM,EAAE,aAAa,UAAU,qBAAqB,KAAK,aAAa,KAAK,aAAa,IAAI,MAAM,KAAK,QAAQ;AAC/G,QAAI,CAAC,OAAO,CAAC,IAAK,OAAM,IAAI,wBAAwB,gDAAgD;AACpG,UAAM,WAAW,MAAM,aAAa,kBAAkB,cAAc;AACpE,QAAI,aAAa,QAAW;AAC1B,UAAI,SAAS,mBAAmB,YAAa,OAAM,IAAI,YAAY,yCAAyC;AAC5G,UAAI,EAAE,SAAS,kBAAkB,SAAU,SAAS,kBAAkB,eACpE,SAAS,aAAa,KAAK,CAAC,QAAQ,IAAI,iBAAiB,eAAe,IAAI,eAAe,QAAQ,IAAK;AACxG,cAAM,IAAI,YAAY,uDAAuD;AAAA,MAC/E;AAAA,IACF;AAEA,UAAM,eAAe,GAAG,WAAW,IAAI,cAAc;AACrD,SAAK,OAAO,KAAK,wCAAwC,EAAE,cAAc,aAAa,iBAAiB,eAAe,CAAC;AACvH,UAAM,aAAa,MAAM,IAAI,IAAI,2BAA2B;AAC5D,QAAI,QAAQ,MAAM,IAAI,IAAI;AAAG,QAAI;AACjC,QAAI;AAAE,cAAQ,MAAM,KAAK,UAAU,UAAU,YAAY,cAAc,KAAK;AAAA,IAAG,SACxE,OAAO;AACZ,UAAI,EAAE,iBAAiB,kCAAmC,OAAM;AAChE,WAAK,OAAO,KAAK,6CAA6C,EAAE,cAAc,aAAa,iBAAiB,gBAAgB,OAAO,KAAK,CAAC;AACzI,YAAM,IAAI,WAAW,KAAK;AAAG,cAAQ,MAAM,IAAI,IAAI;AACnD,cAAQ,MAAM,KAAK,UAAU,UAAU,YAAY,cAAc,KAAK;AAAA,IACxE;AACA,SAAK,OAAO,KAAK,0CAA0C,EAAE,cAAc,aAAa,iBAAiB,eAAe,CAAC;AACzH,WAAO,IAAI,gBAAgB,cAAc,OAAO,QAAQ;AAAA,EAC1D;AAAA,EACA,MAAc,UAAU,UAAkB,YAAiC,cAAsB,OAAgC;AAC/H,UAAM,WAAW,qBAAqB,QAAQ;AAC9C,UAAM,SAAS,IAAI,gBAAgB,IAAI,aAAa,OAAO;AAAA,MACzD,aAAa,WAAW;AAAA,MAAa,iBAAiB,WAAW;AAAA,MAAiB,eAAe,WAAW;AAAA,MAC5G;AAAA,MAAU;AAAA,MAAU,UAAU;AAAA,IAChC,CAAC,CAAC;AACF,QAAI;AACF,YAAM,WAAW,MAAM,OAAO,6BAA6B,IAAI,yBAAyB;AAAA,QACtF,gCAAgC;AAAA,QAAc,qBAAqB;AAAA,MACrE,CAAC,GAAG,IAAI,eAAe,EAAE,WAAW,OAAO,gBAAgB,KAAQ,aAAa,IAAO,CAAC,CAAC;AACzF,YAAM,QAAQ,SAAS,MAAM;AAC7B,UAAI,OAAO,UAAU,YAAY,CAAC,MAAO,OAAM,IAAI,wBAAwB,0DAA0D;AACrI,aAAO;AAAA,IACT,SAAS,OAAO;AACd,UAAI,aAAa,KAAK,EAAG,OAAM,IAAI,iCAAiC,wDAAwD;AAC5H,YAAM,UAAU,OAAO,KAAK;AAAG,YAAM,OAAO,OAAO,QAAQ,IAAI;AAC/D,WAAK,OAAO,KAAK,mCAAmC;AAAA,QAAE,UAAU,WAAW,QAAQ;AAAA,QAAK,eAAe;AAAA,QACrG,YAAY,iBAAiB,QAAQ,MAAM,OAAO;AAAA,QAAS,YAAY,OAAO,QAAQ,aAAa,KAAK,aAAa,KAAK,aAAa,EAAE;AAAA,MAAE,CAAC;AAC9I,UAAI,iBAAiB,wBAAyB,OAAM;AAEpD,YAAM,IAAI,wBAAwB,4CAA4C;AAAA,IAChF;AAAA,EACF;AACF;AACA,SAAS,OAAO,OAAyC;AAAE,SAAO,SAAS,OAAO,UAAU,WAAW,QAAmC,CAAC;AAAG;AAC9I,SAAS,aAAa,OAAyB;AAC7C,MAAI,UAAU,OAAO,KAAK;AAC1B,WAAS,QAAQ,GAAG,QAAQ,GAAG,SAAS;AACtC,UAAM,OAAO,OAAO,QAAQ,IAAI;AAChC,QAAI,CAAC,QAAQ,MAAM,KAAK,MAAM,KAAK,IAAI,EAAE,KAAK,CAAC,SAAS,OAAO,SAAS,YAAY,WAAW,IAAI,KAAK,YAAY,CAAC,CAAC,EAAG,QAAO;AAChI,QAAI,CAAC,QAAQ,eAAgB,QAAO;AACpC,cAAU,OAAO,QAAQ,cAAc;AAAA,EACzC;AACA,SAAO;AACT;","names":[]}