autoremediator 0.21.2 → 0.22.0

package/dist/a2a/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/a2a/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EACL,cAAc,EACd,eAAe,EACf,OAAO,GAGR,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,cAAc,EAAa,MAAM,0BAA0B,CAAC;AACpF,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAC/F,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,cAAc,EACd,gBAAgB,GAEjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAE7D,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAE3C,uEAAuE;AACvE,MAAM,KAAK,GAAG;IACZ,KAAK,EAAE,CAAC,MAAM;IACd,cAAc,EAAE,CAAC,MAAM;IACvB,cAAc,EAAE,CAAC,MAAM;IACvB,aAAa,EAAE,CAAC,MAAM;IACtB,YAAY,EAAE,CAAC,MAAM;IACrB,oBAAoB,EAAE,CAAC,MAAM;IAC7B,uBAAuB,EAAE,CAAC,MAAM;IAChC,mBAAmB,EAAE,CAAC,MAAM;CACpB,CAAC;AA6BX,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E,MAAM,SAAS,GAAG,iDAAiD,CAAC;AAEpE;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,GAAyB,EACzB,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,MAAM,UAAU,GAAG,GAAG,CAAC,6BAA6B,CAAC,CAAC;IACtD,IAAI,UAAU;QAAE,OAAO,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;IACpC,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC;AACtE,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,YAAY,CAC1B,GAAyB,EACzB,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;IAC7F,MAAM,GAAG,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACnC,OAAO,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,sBAAsB,CAAC,GAAyB,EAAE,GAAwB;IACxF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,MAAM,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,iFAAiF;AACjF,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEvC,gGAAgG;AAChG,MAAM,KAAK,GAAG,IAAI,SAAS,CAAU;IACnC,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAC1B,KAAK,EAAE,WAAW;CACnB,CAAC,CAAC;AAEH;;;GAGG;AACH,SAAS,YAAY,CAAC,IAAa,EAAE,IAAU,EAAE,KAAa;IAC5D,MAAM,IAAI,GAAY;QACpB,GAAG,IAAI;QACP,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9F,CAAC;IACF,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,cAAc,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/E,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACjD,GAAG,QAAQ;YACX,KAAK,EAAE;gBACL;oBACE,IAAI,EAAE,EAAE,OAAO,EAAE,mEAAmE,EAAE;oBACtF,SAAS,EAAE,eAAe;iBAC3B;aACF;SACF,CAAC,CAAC,CAAC;IACN,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,WAAW,CAAC,IAAa,EAAE,aAAsB;IACxD,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;QAC/F,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IAClC,IAAI,aAAa,KAAK,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC;AAC7D,CAAC;AAQD,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoB,EAAE,CACpD,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEvE,SAAS,QAAQ,CAAC,GAAwB,EAAE,EAAa,EAAE,IAAY,EAAE,OAAe;IACtF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,cAAc,CAAC,KAEvB;IACC,OAAO,KAAK,CAAC,MAAM;SAChB,GAAG,CACF,CAAC,KAAK,EAAE,EAAE,CACR,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAC5F;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,2BAA2B,CAAC,GAAyB;IAC5D,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1C,4FAA4F;IAC5F,8DAA8D;IAC9D,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,oBAAoB,CAAC;AAC/E,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,qCAAqC,CAAC;IACnE,IAAI,OAAO,KAAK,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC;QACxE,OAAO,wCAAwC,CAAC;IAClD,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,WAAW;QAAE,OAAO,kCAAkC,CAAC;IAC7E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,OAAO,6CAA6C,CAAC;IACvD,CAAC;IACD,OAAO,KAA8B,CAAC;AACxC,CAAC;AAED,gFAAgF;AAChF,SAAS,cAAc,CAAC,OAAmB;IACzC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACjC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,QAAQ,EAAE,CAAC;YACxF,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QAChF,CAAC;IACH,CAAC;IACD,OAAO,qEAAqE,CAAC;AAC/E,CAAC;AAED,SAAS,WAAW,CAAC,aAAsB;IACzC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,KAAK,GAAG,aAAa,CAAC,qBAAqB,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,OAAO,KAAK,CAAC,IAAI,CACf,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,eAAe,IAAI,IAAI,KAAK,eAAe,IAAI,IAAI,KAAK,KAAK,CACjF,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,SAAS,SAAS,CAChB,GAAyB,EACzB,GAAwB,EACxB,IAAU,EACV,KAAa;IAEb,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5E,OAAO,QAAQ,CAAC,EAAE,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,GAAyB,EACzB,GAAwB,EACxB,EAAa,EACb,MAAe,EACf,IAAsB,EACtB,UAA0C;IAE1C,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IAChD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACxF,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,QAAQ,CACb,GAAG,EACH,EAAE,EACF,KAAK,CAAC,oBAAoB,EAC1B,mFAAmF,CACpF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;QAC1C,OAAO,QAAQ,CACb,GAAG,EACH,EAAE,EACF,KAAK,CAAC,uBAAuB,EAC7B,QAAQ,eAAe,qBAAqB,CAC7C,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,OAAO,UAAU,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IAC9F,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACvD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,QAAQ,CACb,GAAG,EACH,EAAE,EACF,KAAK,CAAC,aAAa,EACnB,sBAAsB,UAAU,CAAC,SAAS,iBAAiB,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/F,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,aAAa,EAAE,yBAAyB,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,aAAa,EAAE,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAEjG,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,mBAAmB,SAAS,CAAC,IAAI,EAAE,CAAC;QAAE,OAAO;IAE5E,IAAI,QAA4B,CAAC;IACjC,IAAI,CAAC;QACH,QAAQ,GAAG,YAAY,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;IACtF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;YACzC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG;QACX,EAAE,EAAE,UAAU,EAAE;QAChB,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,UAAU,EAAE;QAC5C,OAAO,EAAE,CAAC,OAAO,CAAC;QAClB,QAAQ,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE;KACxC,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE;YAC/C,GAAG,EAAE,EAAE,GAAG,cAAc,EAAE,GAAG,IAAI,EAAE;YACnC,MAAM,EAAE,SAAS;YACjB,cAAc,EAAE,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;SACvC,CAAC,CAAC;QACH,+EAA+E;QAC/E,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC;QAClD,MAAM,IAAI,GAAY,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,GAAG;YACL,GAAG,IAAI;YACP,MAAM,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,SAAS,EAAE;YACpD,SAAS,EAAE;gBACT;oBACE,UAAU,EAAE,UAAU,EAAE;oBACxB,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;iBAC9C;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpE,IAAI,GAAG;YACL,GAAG,IAAI;YACP,MAAM,EAAE;gBACN,KAAK,EAAE,mBAAmB;gBAC1B,OAAO,EAAE;oBACP,SAAS,EAAE,UAAU,EAAE;oBACvB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,IAAI,EAAE,YAAY;oBAClB,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;iBAClB;gBACD,SAAS;aACV;SACF,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;QACjB,OAAO,EAAE,KAAK;QACd,EAAE;QACF,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC,EAAE;KACpE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CACd,GAAyB,EACzB,GAAwB,EACxB,EAAa,EACb,MAAe;IAEf,IAAI,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;QAC5D,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,aAAa,EAAE,gCAAgC,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;IAC5E,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC;QAAE,OAAO;IAC7D,iEAAiE;IACjE,IAAI,MAAM,CAAC,KAAK,KAAK,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;IACjE,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;QACjB,OAAO,EAAE,KAAK;QACd,EAAE;QACF,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;KAC1D,CAAC,CAAC;AACL,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAyB,EACzB,GAAwB,EACxB,IAAI,GAAqB,EAAE;IAE3B,+FAA+F;IAC/F,kDAAkD;IAClD,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,CAAC;QAAE,OAAO;IAExD,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvD,OAAO,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;YAC/B,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACtD,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;gBAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QACD,OAAO,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,IAAI,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;QACvF,OAAO,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,4BAA4B,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QACrD,OAAO,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,mCAAmC,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,OAAO,QAAQ,CACb,GAAG,EACH,EAAE,EACF,KAAK,CAAC,mBAAmB,EACzB,oBAAoB,oBAAoB,eAAe,CACxD,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,aAAa,EAAE,0BAA0B,CAAC,CAAC;IAEjG,QAAQ,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvB,KAAK,aAAa,EAAE,CAAC;YACnB,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,kBAAkB,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CACrE,CAAC;YACF,OAAO,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7D,CAAC;QACD,KAAK,SAAS,EAAE,CAAC;YACf,OAAO,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;QACD,SAAS,CAAC;YACR,OAAO,QAAQ,CACb,GAAG,EACH,EAAE,EACF,KAAK,CAAC,cAAc,EACpB,yBAAyB,IAAI,CAAC,QAAQ,CAAC,mCAAmC,CAC3E,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/a2a/sign.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Agent Card signing (A2A 1.0 section 8.4): a JWS (RFC 7515) over the card canonicalized with the
+ * JSON Canonicalization Scheme (RFC 8785), `signatures` excluded. node:crypto only.
+ */
+import { type KeyObject } from "node:crypto";
+import type { AgentCard } from "./agent-card.js";
+export type JwsAlgorithm = "ES256" | "ES384" | "ES512" | "EdDSA";
+export interface SigningKey {
+    privateKey: KeyObject;
+    alg: JwsAlgorithm;
+    /** RFC 7638 JWK thumbprint of the public key. */
+    kid: string;
+}
+/** RFC 8785: members sorted by UTF-16 code unit, no whitespace, ES6 number and string forms. */
+export declare function canonicalize(value: unknown): string;
+/** Parse a PEM private key (EC P-256/384/521 or Ed25519) into a signing key. */
+export declare function signingKeyFromPem(pem: string): SigningKey;
+/**
+ * The signing key named by `AUTOREMEDIATOR_A2A_SIGNING_KEY` (a path to a PEM private key), or
+ * undefined when it is unset. A set but unusable key throws: a card that should be signed is never
+ * served unsigned.
+ */
+export declare function signingKeyFromEnv(env?: NodeJS.ProcessEnv): SigningKey | undefined;
+/** Return the card with one JWS signature appended to `signatures`. */
+export declare function signAgentCard(card: AgentCard, key: SigningKey): AgentCard;
+/** True when at least one signature on the card verifies with `publicKey`. */
+export declare function verifyAgentCard(card: AgentCard, publicKey: KeyObject): boolean;
+//# sourceMappingURL=sign.d.ts.map

package/dist/a2a/sign.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.d.ts","sourceRoot":"","sources":["../../src/a2a/sign.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAML,KAAK,SAAS,EACf,MAAM,aAAa,CAAC;AAGrB,OAAO,KAAK,EAAE,SAAS,EAAsB,MAAM,iBAAiB,CAAC;AAErE,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAEjE,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,SAAS,CAAC;IACtB,GAAG,EAAE,YAAY,CAAC;IAClB,iDAAiD;IACjD,GAAG,EAAE,MAAM,CAAC;CACb;AAQD,gGAAgG;AAChG,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAoBnD;AAyBD,gFAAgF;AAChF,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAIzD;AAID;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,UAAU,GAAG,SAAS,CAgB9F;AAYD,uEAAuE;AACvE,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,GAAG,SAAS,CAUzE;AAED,8EAA8E;AAC9E,wBAAgB,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAkB9E"}

package/dist/a2a/sign.js

@@ -0,0 +1,123 @@
+/**
+ * Agent Card signing (A2A 1.0 section 8.4): a JWS (RFC 7515) over the card canonicalized with the
+ * JSON Canonicalization Scheme (RFC 8785), `signatures` excluded. node:crypto only.
+ */
+import { createHash, createPrivateKey, createPublicKey, sign as cryptoSign, verify as cryptoVerify, } from "node:crypto";
+import { readFileSync } from "node:fs";
+const EC_CURVES = {
+    prime256v1: { alg: "ES256", hash: "sha256" },
+    secp384r1: { alg: "ES384", hash: "sha384" },
+    secp521r1: { alg: "ES512", hash: "sha512" },
+};
+/** RFC 8785: members sorted by UTF-16 code unit, no whitespace, ES6 number and string forms. */
+export function canonicalize(value) {
+    if (value === null || typeof value === "string" || typeof value === "boolean") {
+        return JSON.stringify(value);
+    }
+    if (typeof value === "number") {
+        if (!Number.isFinite(value))
+            throw new Error("Cannot canonicalize a non-finite number");
+        return JSON.stringify(value);
+    }
+    if (Array.isArray(value)) {
+        return `[${value.map((item) => canonicalize(item === undefined ? null : item)).join(",")}]`;
+    }
+    if (typeof value === "object") {
+        const record = value;
+        const members = Object.keys(record)
+            .filter((key) => record[key] !== undefined)
+            .toSorted()
+            .map((key) => `${JSON.stringify(key)}:${canonicalize(record[key])}`);
+        return `{${members.join(",")}}`;
+    }
+    throw new Error(`Cannot canonicalize a value of type ${typeof value}`);
+}
+function base64url(data) {
+    return Buffer.from(data).toString("base64url");
+}
+/** RFC 7638 thumbprint: SHA-256 over the required JWK members in lexicographic order. */
+function thumbprint(publicKey) {
+    const jwk = publicKey.export({ format: "jwk" });
+    const members = jwk.kty === "EC"
+        ? { crv: jwk.crv, kty: jwk.kty, x: jwk.x, y: jwk.y }
+        : { crv: jwk.crv, kty: jwk.kty, x: jwk.x };
+    return createHash("sha256").update(canonicalize(members)).digest("base64url");
+}
+function algorithmFor(key) {
+    if (key.asymmetricKeyType === "ed25519")
+        return { alg: "EdDSA", hash: null };
+    if (key.asymmetricKeyType === "ec") {
+        const curve = EC_CURVES[key.asymmetricKeyDetails?.namedCurve ?? ""];
+        if (curve)
+            return curve;
+    }
+    throw new Error("Signing key must be an EC key (P-256, P-384 or P-521) or an Ed25519 key");
+}
+/** Parse a PEM private key (EC P-256/384/521 or Ed25519) into a signing key. */
+export function signingKeyFromPem(pem) {
+    const privateKey = createPrivateKey(pem);
+    const { alg } = algorithmFor(privateKey);
+    return { privateKey, alg, kid: thumbprint(createPublicKey(privateKey)) };
+}
+const keyCache = new Map();
+/**
+ * The signing key named by `AUTOREMEDIATOR_A2A_SIGNING_KEY` (a path to a PEM private key), or
+ * undefined when it is unset. A set but unusable key throws: a card that should be signed is never
+ * served unsigned.
+ */
+export function signingKeyFromEnv(env = process.env) {
+    const path = env["AUTOREMEDIATOR_A2A_SIGNING_KEY"];
+    if (!path)
+        return undefined;
+    const cached = keyCache.get(path);
+    if (cached)
+        return cached;
+    let key;
+    try {
+        key = signingKeyFromPem(readFileSync(path, "utf8"));
+    }
+    catch (error) {
+        throw new Error(`AUTOREMEDIATOR_A2A_SIGNING_KEY could not be used: ${error instanceof Error ? error.message : String(error)}`, { cause: error });
+    }
+    keyCache.set(path, key);
+    return key;
+}
+function withoutSignatures(card) {
+    const { signatures: _signatures, ...rest } = card;
+    return rest;
+}
+function signingInput(protectedHeader, card) {
+    const payload = base64url(canonicalize(withoutSignatures(card)));
+    return Buffer.from(`${protectedHeader}.${payload}`, "ascii");
+}
+/** Return the card with one JWS signature appended to `signatures`. */
+export function signAgentCard(card, key) {
+    const { hash } = algorithmFor(key.privateKey);
+    const protectedHeader = base64url(JSON.stringify({ alg: key.alg, typ: "JOSE", kid: key.kid }));
+    const input = signingInput(protectedHeader, card);
+    const signature = hash === null
+        ? cryptoSign(null, input, key.privateKey)
+        : cryptoSign(hash, input, { key: key.privateKey, dsaEncoding: "ieee-p1363" });
+    const entry = { protected: protectedHeader, signature: base64url(signature) };
+    return { ...card, signatures: [...(card.signatures ?? []), entry] };
+}
+/** True when at least one signature on the card verifies with `publicKey`. */
+export function verifyAgentCard(card, publicKey) {
+    return (card.signatures ?? []).some((entry) => {
+        try {
+            const header = JSON.parse(Buffer.from(entry.protected, "base64url").toString("utf8"));
+            const { alg, hash } = algorithmFor(publicKey);
+            if (header.alg !== alg || header.kid !== thumbprint(publicKey))
+                return false;
+            const input = signingInput(entry.protected, card);
+            const signature = Buffer.from(entry.signature, "base64url");
+            return hash === null
+                ? cryptoVerify(null, input, publicKey, signature)
+                : cryptoVerify(hash, input, { key: publicKey, dsaEncoding: "ieee-p1363" }, signature);
+        }
+        catch {
+            return false;
+        }
+    });
+}
+//# sourceMappingURL=sign.js.map

package/dist/a2a/sign.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.js","sourceRoot":"","sources":["../../src/a2a/sign.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,eAAe,EACf,IAAI,IAAI,UAAU,EAClB,MAAM,IAAI,YAAY,GAEvB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAavC,MAAM,SAAS,GAAwD;IACrE,UAAU,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC5C,SAAS,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC3C,SAAS,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE;CAC5C,CAAC;AAEF,gGAAgG;AAChG,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9E,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACxF,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC9F,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;aAChC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC;aAC1C,QAAQ,EAAE;aACV,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QACvE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,uCAAuC,OAAO,KAAK,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,SAAS,CAAC,IAAqB;IACtC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACjD,CAAC;AAED,yFAAyF;AACzF,SAAS,UAAU,CAAC,SAAoB;IACtC,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAChD,MAAM,OAAO,GACX,GAAG,CAAC,GAAG,KAAK,IAAI;QACd,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE;QACpD,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;IAC/C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,YAAY,CAAC,GAAc;IAClC,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS;QAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC7E,IAAI,GAAG,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,oBAAoB,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;QACpE,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;AAC7F,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACzC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAsB,CAAC;AAE/C;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IACpE,MAAM,IAAI,GAAG,GAAG,CAAC,gCAAgC,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,IAAI,GAAe,CAAC;IACpB,IAAI,CAAC;QACH,GAAG,GAAG,iBAAiB,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,qDAAqD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC7G,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;IACD,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAe;IACxC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IAClD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,eAAuB,EAAE,IAAe;IAC5D,MAAM,OAAO,GAAG,SAAS,CAAC,YAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjE,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,eAAe,IAAI,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;AAC/D,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,aAAa,CAAC,IAAe,EAAE,GAAe;IAC5D,MAAM,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9C,MAAM,eAAe,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC/F,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IAClD,MAAM,SAAS,GACb,IAAI,KAAK,IAAI;QACX,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,UAAU,CAAC;QACzC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC;IAClF,MAAM,KAAK,GAAuB,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;IAClG,OAAO,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,IAAe,EAAE,SAAoB;IACnE,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QAC5C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAGnF,CAAC;YACF,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;YAC9C,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,UAAU,CAAC,SAAS,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC7E,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAClD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC5D,OAAO,IAAI,KAAK,IAAI;gBAClB,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC;gBACjD,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE,SAAS,CAAC,CAAC;QAC1F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/a2a/task-store.d.ts

@@ -0,0 +1,55 @@
+/**
+ * In-memory store of finished A2A tasks. Bounded three ways (count, age and total bytes) so a caller
+ * with a low-privilege token cannot fill the server's memory, and every task is bound to the caller
+ * that ran it.
+ */
+import type { Role } from "../platform/http-auth.js";
+export interface TaskLimits {
+    maxTasks: number;
+    maxBytes: number;
+    ttlMs: number;
+}
+export interface StoredTask<T> {
+    task: T;
+    /** The role that ran it: reading the result needs the same. */
+    role: Role;
+    /** Who ran it (`callerIdentity`): nobody else may read it, whatever their role. */
+    owner: string;
+    storedAt: number;
+    bytes: number;
+}
+export declare class TaskStore<T extends {
+    id: string;
+}> {
+    private readonly entries;
+    private total;
+    private readonly limits;
+    constructor(limits: TaskLimits);
+    get size(): number;
+    get bytes(): number;
+    private drop;
+    /** Keep `task`; returns false (storing nothing) when it alone is bigger than the whole byte budget. */
+    remember(task: T, role: Role, owner: string, now?: number): boolean;
+    get(id: string, now?: number): StoredTask<T> | undefined;
+}
+interface MessagePart {
+    text?: string;
+    data?: unknown;
+    mediaType?: string;
+}
+interface MessageLike {
+    messageId?: string;
+    contextId?: string;
+    taskId?: string;
+    role?: string;
+    parts: MessagePart[];
+}
+export declare const MAX_KEPT_MESSAGE_BYTES = 2048;
+/**
+ * A short copy of a caller's message for the task record: the ids and role, then text and data parts
+ * in order until the byte budget is spent. Text is cut, data that does not fit is replaced by a
+ * marker, and anything else (files, raw bytes, URLs) is dropped.
+ */
+export declare function truncateMessage<M extends MessageLike>(message: M, maxBytes?: number): M;
+export {};
+//# sourceMappingURL=task-store.d.ts.map

package/dist/a2a/task-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-store.d.ts","sourceRoot":"","sources":["../../src/a2a/task-store.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAC;AAErD,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,UAAU,CAAC,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC;IACR,+DAA+D;IAC/D,IAAI,EAAE,IAAI,CAAC;IACX,mFAAmF;IACnF,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,SAAS,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE;IAC7C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,OAAO,CAAC,KAAK,CAAK;IAClB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IAEpC,YAAY,MAAM,EAAE,UAAU,EAE7B;IAED,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,IAAI,KAAK,IAAI,MAAM,CAElB;IAED,OAAO,CAAC,IAAI;IAOZ,uGAAuG;IACvG,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,OAAO,CAetE;IAED,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,SAAS,CAQ3D;CACF;AAED,UAAU,WAAW;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,UAAU,WAAW;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,WAAW,EAAE,CAAC;CACtB;AAED,eAAO,MAAM,sBAAsB,OAAO,CAAC;AAI3C;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,CAAC,SAAS,WAAW,EACnD,OAAO,EAAE,CAAC,EACV,QAAQ,SAAyB,GAChC,CAAC,CA+BH"}

package/dist/a2a/task-store.js

@@ -0,0 +1,90 @@
+export class TaskStore {
+    entries = new Map();
+    total = 0;
+    limits;
+    constructor(limits) {
+        this.limits = limits;
+    }
+    get size() {
+        return this.entries.size;
+    }
+    get bytes() {
+        return this.total;
+    }
+    drop(id) {
+        const entry = this.entries.get(id);
+        if (!entry)
+            return;
+        this.total -= entry.bytes;
+        this.entries.delete(id);
+    }
+    /** Keep `task`; returns false (storing nothing) when it alone is bigger than the whole byte budget. */
+    remember(task, role, owner, now = Date.now()) {
+        const bytes = Buffer.byteLength(JSON.stringify(task));
+        if (bytes > this.limits.maxBytes)
+            return false;
+        this.drop(task.id);
+        // Oldest first: a Map iterates in insertion order.
+        for (const [id, entry] of this.entries) {
+            const expired = now - entry.storedAt > this.limits.ttlMs;
+            const full = this.entries.size >= this.limits.maxTasks || this.total + bytes > this.limits.maxBytes;
+            if (!expired && !full)
+                break;
+            this.drop(id);
+        }
+        this.entries.set(task.id, { task, role, owner, storedAt: now, bytes });
+        this.total += bytes;
+        return true;
+    }
+    get(id, now = Date.now()) {
+        const entry = this.entries.get(id);
+        if (!entry)
+            return undefined;
+        if (now - entry.storedAt > this.limits.ttlMs) {
+            this.drop(id);
+            return undefined;
+        }
+        return entry;
+    }
+}
+export const MAX_KEPT_MESSAGE_BYTES = 2048;
+const byteLength = (value) => Buffer.byteLength(JSON.stringify(value));
+/**
+ * A short copy of a caller's message for the task record: the ids and role, then text and data parts
+ * in order until the byte budget is spent. Text is cut, data that does not fit is replaced by a
+ * marker, and anything else (files, raw bytes, URLs) is dropped.
+ */
+export function truncateMessage(message, maxBytes = MAX_KEPT_MESSAGE_BYTES) {
+    const { parts } = message;
+    const head = {};
+    for (const key of ["messageId", "contextId", "taskId", "role"]) {
+        const value = message[key];
+        if (typeof value === "string")
+            head[key] = value.slice(0, 200);
+    }
+    let remaining = maxBytes - byteLength({ ...head, parts: [] });
+    const kept = [];
+    for (const part of parts) {
+        if (typeof part !== "object" || part === null)
+            continue;
+        const mediaType = typeof part.mediaType === "string" ? { mediaType: part.mediaType.slice(0, 100) } : {};
+        if (typeof part.text === "string") {
+            const budget = Math.max(0, remaining - 64);
+            const text = part.text.length > budget ? `${part.text.slice(0, budget)}...[truncated]` : part.text;
+            const copy = { text, ...mediaType };
+            kept.push(copy);
+            remaining -= byteLength(copy) + 1;
+        }
+        else if ("data" in part) {
+            const whole = { data: part.data, ...mediaType };
+            const size = byteLength(whole);
+            const copy = size <= remaining ? whole : { data: { truncated: true, bytes: size }, ...mediaType };
+            kept.push(copy);
+            remaining -= byteLength(copy) + 1;
+        }
+        if (remaining <= 0)
+            break;
+    }
+    return { ...head, parts: kept };
+}
+//# sourceMappingURL=task-store.js.map

package/dist/a2a/task-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-store.js","sourceRoot":"","sources":["../../src/a2a/task-store.ts"],"names":[],"mappings":"AAuBA,MAAM,OAAO,SAAS;IACH,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IACpD,KAAK,GAAG,CAAC,CAAC;IACD,MAAM,CAAa;IAEpC,YAAY,MAAkB;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAEO,IAAI,CAAC,EAAU;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC;IAED,uGAAuG;IACvG,QAAQ,CAAC,IAAO,EAAE,IAAU,EAAE,KAAa,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACtD,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC/C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,mDAAmD;QACnD,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,GAAG,GAAG,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YACzD,MAAM,IAAI,GACR,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,GAAG,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YACzF,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI;gBAAE,MAAM;YAC7B,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,GAAG,CAAC,EAAU,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,IAAI,GAAG,GAAG,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACd,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAgBD,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAE3C,MAAM,UAAU,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAExF;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAU,EACV,QAAQ,GAAG,sBAAsB;IAEjC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAC1B,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAU,EAAE,CAAC;QACxE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAkB,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS;QACxD,MAAM,SAAS,GACb,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,EAAE,CAAC,CAAC;YAC3C,MAAM,IAAI,GACR,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACxF,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;aAAM,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YAC/B,MAAM,IAAI,GACR,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,SAAS,EAAE,CAAC;YACvF,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM;IAC5B,CAAC;IACD,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,IAAI,EAAkB,CAAC;AAClD,CAAC"}

package/dist/api/assess/index.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Public SDK API: assessUpgrade and findVulnerableSymbols.
+ *
+ * Both download the two published versions from the configured npm registry (integrity-verified),
+ * read them in memory, and change nothing in the project.
+ */
+import { type AssessUpgradeResult, type ImpactDeps, type VulnerableSymbolsResult } from "../../remediation/impact/assess.js";
+export type { AssessUpgradeResult, ImpactDeps, VulnerableSymbolsResult };
+export type { Breakability, FindingEvidence, ImpactFinding, UpgradeImpact, } from "../../remediation/impact/impact.js";
+export { IMPACT_POINTS, MEDIUM_THRESHOLD } from "../../remediation/impact/impact.js";
+export type { CandidateBasis, ChangedInternal, FixDiff, VulnerableSymbolCandidate, } from "../../remediation/impact/fix-diff.js";
+export type { CallSite } from "../../remediation/impact/types.js";
+export interface AssessUpgradeInput {
+    packageName: string;
+    /** Version currently installed. */
+    from: string;
+    /** Version being considered. */
+    to: string;
+    /** Project root whose source is scanned and whose `.npmrc` selects the registry. */
+    cwd?: string;
+}
+export interface FindVulnerableSymbolsInput {
+    packageName: string;
+    /** The vulnerable version. */
+    from: string;
+    /** The version that fixes it. */
+    to: string;
+    cwd?: string;
+    /** Advisory summary or details; used only to rank candidates. */
+    advisoryText?: string;
+    /** CWE identifiers (`CWE-1333`); used only to rank candidates. */
+    cwes?: string[];
+    /** Largest number of candidates returned (default 25). */
+    limit?: number;
+    /** Check each candidate against the project's source (default true). */
+    checkReachability?: boolean;
+}
+/** How likely is moving `packageName` from `from` to `to` to break the project at `cwd`? */
+export declare function assessUpgrade(input: AssessUpgradeInput, deps?: ImpactDeps): Promise<AssessUpgradeResult>;
+/**
+ * Candidate vulnerable symbols: the exports that changed between a vulnerable version and its fix,
+ * ranked, with project reachability. A heuristic; see `docs/guides/upgrade-impact.md`.
+ */
+export declare function findVulnerableSymbols(input: FindVulnerableSymbolsInput, deps?: ImpactDeps): Promise<VulnerableSymbolsResult>;
+//# sourceMappingURL=index.d.ts.map

package/dist/api/assess/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/assess/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAIL,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,uBAAuB,EAC7B,MAAM,oCAAoC,CAAC;AAE5C,YAAY,EAAE,mBAAmB,EAAE,UAAU,EAAE,uBAAuB,EAAE,CAAC;AACzE,YAAY,EACV,YAAY,EACZ,eAAe,EACf,aAAa,EACb,aAAa,GACd,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AACrF,YAAY,EACV,cAAc,EACd,eAAe,EACf,OAAO,EACP,yBAAyB,GAC1B,MAAM,sCAAsC,CAAC;AAC9C,YAAY,EAAE,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAElE,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,gCAAgC;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,oFAAoF;IACpF,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,8BAA8B;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,0DAA0D;IAC1D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,4FAA4F;AAC5F,wBAAsB,aAAa,CACjC,KAAK,EAAE,kBAAkB,EACzB,IAAI,GAAE,UAA8B,GACnC,OAAO,CAAC,mBAAmB,CAAC,CAE9B;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,0BAA0B,EACjC,IAAI,GAAE,UAA8B,GACnC,OAAO,CAAC,uBAAuB,CAAC,CAGlC"}

package/dist/api/assess/index.js

@@ -0,0 +1,21 @@
+/**
+ * Public SDK API: assessUpgrade and findVulnerableSymbols.
+ *
+ * Both download the two published versions from the configured npm registry (integrity-verified),
+ * read them in memory, and change nothing in the project.
+ */
+import { assessUpgrade as assess, defaultImpactDeps, findVulnerableSymbolsInUpgrade, } from "../../remediation/impact/assess.js";
+export { IMPACT_POINTS, MEDIUM_THRESHOLD } from "../../remediation/impact/impact.js";
+/** How likely is moving `packageName` from `from` to `to` to break the project at `cwd`? */
+export async function assessUpgrade(input, deps = defaultImpactDeps) {
+    return assess(input.packageName, input.from, input.to, { cwd: input.cwd }, deps);
+}
+/**
+ * Candidate vulnerable symbols: the exports that changed between a vulnerable version and its fix,
+ * ranked, with project reachability. A heuristic; see `docs/guides/upgrade-impact.md`.
+ */
+export async function findVulnerableSymbols(input, deps = defaultImpactDeps) {
+    const { packageName, from, to, ...options } = input;
+    return findVulnerableSymbolsInUpgrade(packageName, from, to, options, deps);
+}
+//# sourceMappingURL=index.js.map

package/dist/api/assess/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/assess/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,aAAa,IAAI,MAAM,EACvB,iBAAiB,EACjB,8BAA8B,GAI/B,MAAM,oCAAoC,CAAC;AAS5C,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAoCrF,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAyB,EACzB,IAAI,GAAe,iBAAiB;IAEpC,OAAO,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;AACnF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAiC,EACjC,IAAI,GAAe,iBAAiB;IAEpC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC;IACpD,OAAO,8BAA8B,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AAC9E,CAAC"}

package/dist/api/autonomy/index.d.ts

@@ -0,0 +1,65 @@
+import type { CapInfo, NextPromotion, OutcomeFacts, Transition, WindowStats } from "../../autonomy/compute.js";
+import { TRACK_RECORD_PATH } from "../../autonomy/record.js";
+import { type AutonomyConfig, type AutonomyLevel, LEVEL_NAMES, type NewTrackEvent, type TrackEvent } from "../../autonomy/types.js";
+import type { AutonomySummary } from "../../platform/types.js";
+export type { AutonomyConfig, AutonomyLevel, AutonomySummary, NewTrackEvent, TrackEvent, Transition, WindowStats, };
+export { LEVEL_NAMES, TRACK_RECORD_PATH };
+export interface GetAutonomyOptions {
+    /** Project directory (default: process.cwd()). */
+    cwd?: string;
+    /** Policy file path or inline policy (default: `.github/autoremediator.yml`). */
+    policy?: string;
+}
+export interface AutonomyStatus {
+    /** The policy has an `autonomy` key. When false, behaviour is unchanged and nothing is recorded. */
+    configured: boolean;
+    message: string;
+    cwd: string;
+    recordPath: string;
+    /** The record exists but cannot be read; the level is then L0 until a person fixes it. */
+    recordError?: string;
+    level?: AutonomyLevel;
+    levelName?: string;
+    ceiling?: AutonomyLevel;
+    earned?: AutonomyLevel;
+    allows?: {
+        plan: boolean;
+        apply: boolean;
+    };
+    settings?: AutonomyConfig;
+    /** Counts over the recent window, and the size of the whole record. */
+    evidence?: WindowStats & {
+        events: number;
+        lastEvent?: Pick<TrackEvent, "seq" | "at" | "type" | "runId">;
+    };
+    reasons?: string[];
+    cap?: CapInfo;
+    /** Every promotion and demotion, each citing the event or cooldown behind it. */
+    history?: Transition[];
+    nextPromotion?: NextPromotion;
+}
+/** Thrown when the level in force does not permit the operation. Nothing was changed. */
+export declare class AutonomyRefusedError extends Error {
+    readonly level: AutonomyLevel;
+    constructor(message: string, level: AutonomyLevel);
+}
+export declare function getAutonomy(options?: GetAutonomyOptions, now?: Date): AutonomyStatus;
+/**
+ * Refuse an operation the level in force does not permit. A no-op when autonomy is not configured.
+ * Call before anything is changed.
+ */
+export declare function assertAutonomyAllows(cwd: string, policy: string | undefined, action: "apply" | "plan", what: string, now?: Date): void;
+/** The level and its signals for a report; undefined when autonomy is not configured. */
+export declare function summarizeAutonomy(cwd: string, policy: string | undefined, facts?: OutcomeFacts, now?: Date, 
+/** The level the result was produced under, when it differs from the level now (a run can promote itself). */
+producedAt?: AutonomyLevel): AutonomySummary | undefined;
+/**
+ * Add outcomes to the track record, when autonomy is configured. Best effort by design: a record
+ * that cannot be written must never fail or undo the run that produced the outcome, so the problem
+ * is returned for the caller to log and nothing is thrown.
+ */
+export declare function recordAutonomyEvents(cwd: string, policy: string | undefined, events: readonly NewTrackEvent[]): Promise<{
+    recorded: number;
+    problem?: string;
+}>;
+//# sourceMappingURL=index.d.ts.map

package/dist/api/autonomy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/autonomy/index.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EACV,OAAO,EACP,aAAa,EACb,YAAY,EACZ,UAAU,EACV,WAAW,EACZ,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAIL,iBAAiB,EAElB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,aAAa,EAElB,WAAW,EAEX,KAAK,aAAa,EAElB,KAAK,UAAU,EAChB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE/D,YAAY,EACV,cAAc,EACd,aAAa,EACb,eAAe,EACf,aAAa,EACb,UAAU,EACV,UAAU,EACV,WAAW,GACZ,CAAC;AACF,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;AAE1C,MAAM,WAAW,kBAAkB;IACjC,kDAAkD;IAClD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,iFAAiF;IACjF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,oGAAoG;IACpG,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,0FAA0F;IAC1F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;IAC3C,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,uEAAuE;IACvE,QAAQ,CAAC,EAAE,WAAW,GAAG;QACvB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,GAAG,IAAI,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;KAC/D,CAAC;IACF,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,iFAAiF;IACjF,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC;IACvB,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED,yFAAyF;AACzF,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,YAAY,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAIhD;CACF;AAuCD,wBAAgB,WAAW,CACzB,OAAO,GAAE,kBAAuB,EAChC,GAAG,GAAE,IAAiB,GACrB,cAAc,CAoDhB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,MAAM,EAAE,OAAO,GAAG,MAAM,EACxB,IAAI,EAAE,MAAM,EACZ,GAAG,GAAE,IAAiB,GACrB,IAAI,CAiBN;AAED,yFAAyF;AACzF,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,KAAK,CAAC,EAAE,YAAY,EACpB,GAAG,GAAE,IAAiB;AACtB,8GAA8G;AAC9G,UAAU,CAAC,EAAE,aAAa,GACzB,eAAe,GAAG,SAAS,CAwB7B;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,MAAM,EAAE,SAAS,aAAa,EAAE,GAC/B,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CASjD"}