kadi-harness-runtime 0.1.8

package/dist/gateways/artifacts.js

@@ -0,0 +1,128 @@
+import { redactJson, redactObject } from "./redaction.js";
+function makeError(scope, code, category, message, retryable, details = {}) {
+    return { code, category, message, retryable, correlationId: scope.correlationId, details: { sessionId: scope.sessionId, runId: scope.runId, adapterId: scope.adapterId, ...redactObject(details) } };
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isKadiError(value) {
+    return isRecord(value) && typeof value.code === "string" && typeof value.category === "string" && typeof value.message === "string";
+}
+function normalizeError(scope, value, operation) {
+    if (isKadiError(value))
+        return { ...value, correlationId: scope.correlationId, details: redactObject(value.details) };
+    return makeError(scope, "artifact_persistence_error", "service_failure", `${operation} failed`, true);
+}
+function cancellationError(scope) {
+    return makeError(scope, "operation_cancelled", "cancellation", "The scoped operation was cancelled", false);
+}
+async function authorize(options, operation) {
+    if (!options.authorize)
+        return undefined;
+    try {
+        const decision = await options.authorize({ operation, scope: options.scope });
+        if (decision === true || (typeof decision === "object" && decision.ok))
+            return undefined;
+        if (decision === false)
+            return makeError(options.scope, "authorization_denied", "authorization", `Authorization denied for ${operation}`, false, { operation });
+        return decision.error;
+    }
+    catch (caught) {
+        return normalizeError(options.scope, caught, `${operation} authorization`);
+    }
+}
+function unwrap(value) {
+    if (isRecord(value) && value.ok === false)
+        throw value.error;
+    if (isRecord(value) && value.success === false)
+        throw new Error("backend rejected operation");
+    if (isRecord(value) && value.ok === true && "value" in value)
+        return value.value;
+    return value;
+}
+export function normalizeArtifactReference(value, scope) {
+    const source = isRecord(value) && isRecord(value.artifact) ? value.artifact : value;
+    if (!isRecord(source))
+        throw makeError(scope, "invalid_artifact_reference", "service_failure", "Artifact backend returned an invalid reference", false);
+    if (typeof source.id === "string" && typeof source.kind === "string") {
+        return {
+            id: source.id,
+            kind: source.kind,
+            name: typeof source.name === "string" ? source.name : undefined,
+            uri: typeof source.uri === "string" ? source.uri : undefined,
+            mediaType: typeof source.mediaType === "string" ? source.mediaType : undefined,
+            sizeBytes: typeof source.sizeBytes === "number" ? source.sizeBytes : undefined,
+            createdAt: typeof source.createdAt === "string" ? source.createdAt : undefined,
+            redaction: isRecord(source.redaction) ? redactJson(source.redaction) : undefined,
+        };
+    }
+    if (typeof source.artifactId === "string") {
+        return {
+            id: source.artifactId,
+            kind: "file",
+            uri: typeof source.path === "string" ? source.path : undefined,
+            mediaType: typeof source.mimeType === "string" ? source.mimeType : undefined,
+            sizeBytes: typeof source.size === "number" ? source.size : undefined,
+            createdAt: typeof source.created === "string" ? source.created : undefined,
+            redaction: { redacted: false },
+        };
+    }
+    throw makeError(scope, "invalid_artifact_reference", "service_failure", "Artifact backend returned an invalid reference", false);
+}
+/** Scoped artifact facade over session-state storage or another durable backend. */
+export class ArtifactGateway {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async put(request) {
+        const denied = await authorize(this.options, "artifacts.put");
+        if (denied)
+            return { ok: false, error: denied };
+        if (this.options.scope.signal?.aborted)
+            return { ok: false, error: cancellationError(this.options.scope) };
+        try {
+            const safeRequest = { ...request, content: request.content === undefined ? undefined : redactJson(request.content), metadata: request.metadata ? redactJson(request.metadata) : undefined };
+            return { ok: true, value: normalizeArtifactReference(unwrap(await this.options.backend.put(this.options.scope, safeRequest)), this.options.scope) };
+        }
+        catch (caught) {
+            return { ok: false, error: caught && isKadiError(caught) ? caught : normalizeError(this.options.scope, caught, "artifacts.put") };
+        }
+    }
+    async get(reference) {
+        const denied = await authorize(this.options, "artifacts.get");
+        if (denied)
+            return { ok: false, error: denied };
+        if (this.options.scope.signal?.aborted)
+            return { ok: false, error: cancellationError(this.options.scope) };
+        try {
+            const value = unwrap(await this.options.backend.get(this.options.scope, reference));
+            if (value === undefined || value === null || (isRecord(value) && value.found === false))
+                return { ok: true, value: undefined };
+            const source = isRecord(value) && "content" in value ? value : { content: value };
+            return { ok: true, value: { reference: normalizeArtifactReference(source.reference ?? reference, this.options.scope), content: source.content === undefined ? undefined : redactJson(source.content) } };
+        }
+        catch (caught) {
+            return { ok: false, error: caught && isKadiError(caught) ? caught : normalizeError(this.options.scope, caught, "artifacts.get") };
+        }
+    }
+    async list() {
+        const denied = await authorize(this.options, "artifacts.list");
+        if (denied)
+            return { ok: false, error: denied };
+        if (this.options.scope.signal?.aborted)
+            return { ok: false, error: cancellationError(this.options.scope) };
+        try {
+            const value = unwrap(await this.options.backend.list(this.options.scope));
+            const entries = Array.isArray(value) ? value : isRecord(value) && Array.isArray(value.artifacts) ? value.artifacts : [];
+            return { ok: true, value: entries.map((entry) => normalizeArtifactReference(entry, this.options.scope)) };
+        }
+        catch (caught) {
+            return { ok: false, error: caught && isKadiError(caught) ? caught : normalizeError(this.options.scope, caught, "artifacts.list") };
+        }
+    }
+}
+export function createArtifactGateway(options) {
+    return new ArtifactGateway(options);
+}
+//# sourceMappingURL=artifacts.js.map

package/dist/gateways/artifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts.js","sourceRoot":"","sources":["../../src/gateways/artifacts.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAiB1D,SAAS,SAAS,CAAC,KAAmB,EAAE,IAAY,EAAE,QAA+B,EAAE,OAAe,EAAE,SAAkB,EAAE,UAAmC,EAAE;IAC/J,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;AACvM,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC;AACtI,CAAC;AAED,SAAS,cAAc,CAAC,KAAmB,EAAE,KAAc,EAAE,SAAiB;IAC5E,IAAI,WAAW,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,GAAG,KAAK,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;IACtH,OAAO,SAAS,CAAC,KAAK,EAAE,4BAA4B,EAAE,iBAAiB,EAAE,GAAG,SAAS,SAAS,EAAE,IAAI,CAAC,CAAC;AACxG,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAmB;IAC5C,OAAO,SAAS,CAAC,KAAK,EAAE,qBAAqB,EAAE,cAAc,EAAE,oCAAoC,EAAE,KAAK,CAAC,CAAC;AAC9G,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,OAA+B,EAAE,SAA+D;IACvH,IAAI,CAAC,OAAO,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAC9E,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,EAAE,CAAC;YAAE,OAAO,SAAS,CAAC;QACzF,IAAI,QAAQ,KAAK,KAAK;YAAE,OAAO,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,sBAAsB,EAAE,eAAe,EAAE,4BAA4B,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAChK,OAAO,QAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QAChB,OAAO,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,gBAAgB,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,KAAK,KAAK;QAAE,MAAM,KAAK,CAAC,KAAK,CAAC;IAC7D,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC9F,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC;IACjF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc,EAAE,KAAmB;IAC5E,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;IACpF,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,SAAS,CAAC,KAAK,EAAE,4BAA4B,EAAE,iBAAiB,EAAE,gDAAgD,EAAE,KAAK,CAAC,CAAC;IACxJ,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrE,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,IAAI,EAAE,MAAM,CAAC,IAAiC;YAC9C,IAAI,EAAE,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YAC/D,GAAG,EAAE,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;YAC5D,SAAS,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAC9E,SAAS,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAC9E,SAAS,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAC9E,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAA8C,CAAC,CAAC,CAAC,SAAS;SAC9H,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,UAAU;YACrB,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YAC9D,SAAS,EAAE,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;YAC5E,SAAS,EAAE,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YACpE,SAAS,EAAE,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YAC1E,SAAS,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;SAC/B,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,CAAC,KAAK,EAAE,4BAA4B,EAAE,iBAAiB,EAAE,gDAAgD,EAAE,KAAK,CAAC,CAAC;AACnI,CAAC;AAED,oFAAoF;AACpF,MAAM,OAAO,eAAe;IACT,OAAO,CAAyB;IAEjD,YAAmB,OAA+B;QAChD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAEM,KAAK,CAAC,GAAG,CAAC,OAA6B;QAC5C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAC9D,IAAI,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAChD,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3G,IAAI,CAAC;YACH,MAAM,WAAW,GAAyB,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAA0B,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;YAC3O,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,0BAA0B,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACtJ,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,CAAC;QACpI,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,GAAG,CAAC,SAA4B;QAC3C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAC9D,IAAI,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAChD,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3G,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;YACpF,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;YAC/H,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,SAAS,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAClF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,0BAA0B,CAAC,MAAM,CAAC,SAAS,IAAI,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAC3M,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,CAAC;QACpI,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,IAAI;QACf,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAC/D,IAAI,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAChD,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3G,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YACxH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,0BAA0B,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC5G,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACrI,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,qBAAqB,CAAC,OAA+B;IACnE,OAAO,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;AACtC,CAAC"}

package/dist/gateways/authorization.d.ts

@@ -0,0 +1,38 @@
+import { type AuthorizationCheckRequest, type AuthorizationDecision, type PrincipalRef, type ScopedAuthorizationService, type ServiceResult } from "@kadi.build/kadi-harness-contracts";
+import type { GatewayScope } from "./tools.js";
+export interface AuthorizationScope extends GatewayScope {
+    readonly principal: PrincipalRef;
+    readonly expiresAt: string;
+}
+export type AuthorizationPolicy = (request: AuthorizationCheckRequest, principal: PrincipalRef) => AuthorizationDecision | Promise<AuthorizationDecision>;
+export interface AuthorizationGatewayOptions {
+    readonly scope: GatewayScope;
+    readonly principal: PrincipalRef;
+    readonly ttlMs?: number;
+    readonly now?: () => number;
+    readonly policy?: AuthorizationPolicy;
+}
+export interface AuthorizationGatewayStatus {
+    readonly active: boolean;
+    readonly expiresAt: string;
+    readonly principalId: string;
+    readonly sessionId: string;
+    readonly runId: string;
+}
+/** Runtime-owned per-run authorization facade with expiry and revocation. */
+export declare class AuthorizationGateway implements ScopedAuthorizationService {
+    private readonly options;
+    private readonly scope;
+    private readonly now;
+    private readonly principalValid;
+    private revoked;
+    constructor(options: AuthorizationGatewayOptions);
+    getAuthorizationScope(): AuthorizationScope;
+    getStatus(): AuthorizationGatewayStatus;
+    revoke(): void;
+    close(): Promise<void>;
+    check(request: AuthorizationCheckRequest): Promise<ServiceResult<AuthorizationDecision>>;
+    private isActive;
+}
+export declare function createAuthorizationGateway(options: AuthorizationGatewayOptions): AuthorizationGateway;
+//# sourceMappingURL=authorization.d.ts.map

package/dist/gateways/authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../../src/gateways/authorization.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,yBAAyB,EAC9B,KAAK,qBAAqB,EAE1B,KAAK,YAAY,EACjB,KAAK,0BAA0B,EAC/B,KAAK,aAAa,EACnB,MAAM,oCAAoC,CAAC;AAG5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,WAAW,kBAAmB,SAAQ,YAAY;IACtD,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,mBAAmB,GAAG,CAChC,OAAO,EAAE,yBAAyB,EAClC,SAAS,EAAE,YAAY,KACpB,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAE5D,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,CAAC;CACvC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAwDD,6EAA6E;AAC7E,qBAAa,oBAAqB,YAAW,0BAA0B;IACrE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8B;IACtD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqB;IAC3C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAU;IACzC,OAAO,CAAC,OAAO,CAAS;gBAEL,OAAO,EAAE,2BAA2B;IAUhD,qBAAqB,IAAI,kBAAkB;IAI3C,SAAS,IAAI,0BAA0B;IAUvC,MAAM,IAAI,IAAI;IAIR,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAItB,KAAK,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,aAAa,CAAC,qBAAqB,CAAC,CAAC;IA4BrG,OAAO,CAAC,QAAQ;CAGjB;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,2BAA2B,GAAG,oBAAoB,CAErG"}

package/dist/gateways/authorization.js

@@ -0,0 +1,118 @@
+import { PrincipalRefSchema, } from "@kadi.build/kadi-harness-contracts";
+import { redactJson, redactObject } from "../policy/redaction.js";
+const DEFAULT_TTL_MS = 60 * 60 * 1000;
+const OPERATION_SCOPE = {
+    tools: "run",
+    events: "run",
+    authorization: "run",
+    sessions: "session",
+    artifacts: "run",
+    scheduling: "session",
+};
+function makeError(scope, code, category, message, retryable, details = {}) {
+    return {
+        code,
+        category,
+        message,
+        retryable,
+        correlationId: scope.correlationId,
+        details: {
+            sessionId: scope.sessionId,
+            runId: scope.runId,
+            adapterId: scope.adapterId,
+            ...redactObject(details),
+        },
+    };
+}
+function operationName(action) {
+    return action.trim().toLowerCase();
+}
+function requiredScopeFor(operation) {
+    const [service] = operation.split(".");
+    return service ? OPERATION_SCOPE[service] : undefined;
+}
+function scopeAllows(principal, operation) {
+    const required = requiredScopeFor(operation);
+    if (!required)
+        return principal.scopes.includes("*") || principal.scopes.includes(operation);
+    return principal.scopes.some((scope) => scope === "*" || scope === required || scope === operation || (scope.endsWith(".*") && operation.startsWith(scope.slice(0, -1))));
+}
+function invalidPrincipalError(scope, principal) {
+    return makeError(scope, "invalid_principal", "validation", "Caller principal is invalid", false, {
+        principalType: typeof principal === "object" && principal !== null && "type" in principal ? principal.type : undefined,
+    });
+}
+/** Runtime-owned per-run authorization facade with expiry and revocation. */
+export class AuthorizationGateway {
+    options;
+    scope;
+    now;
+    principalValid;
+    revoked = false;
+    constructor(options) {
+        this.options = options;
+        this.now = options.now ?? Date.now;
+        const parsed = PrincipalRefSchema.safeParse(options.principal);
+        this.principalValid = parsed.success && options.scope.sessionId.length > 0 && options.scope.runId.length > 0 && options.scope.adapterId.length > 0;
+        const expiresAt = this.now() + Math.max(1, options.ttlMs ?? DEFAULT_TTL_MS);
+        this.scope = { ...options.scope, principal: options.principal, expiresAt: new Date(expiresAt).toISOString() };
+        options.scope.signal?.addEventListener("abort", () => this.revoke(), { once: true });
+    }
+    getAuthorizationScope() {
+        return this.scope;
+    }
+    getStatus() {
+        return {
+            active: this.isActive(),
+            expiresAt: this.scope.expiresAt,
+            principalId: this.scope.principal.id,
+            sessionId: this.scope.sessionId,
+            runId: this.scope.runId,
+        };
+    }
+    revoke() {
+        this.revoked = true;
+    }
+    async close() {
+        this.revoke();
+    }
+    async check(request) {
+        if (!this.principalValid)
+            return { ok: false, error: invalidPrincipalError(this.scope, this.scope.principal) };
+        if (this.options.scope.signal?.aborted)
+            return { ok: false, error: makeError(this.scope, "operation_cancelled", "cancellation", "The authorization scope was cancelled", false) };
+        if (this.revoked)
+            return { ok: false, error: makeError(this.scope, "authorization_scope_revoked", "authorization", "The authorization scope has been revoked", false) };
+        if (this.now() >= Date.parse(this.scope.expiresAt))
+            return { ok: false, error: makeError(this.scope, "authorization_scope_expired", "authorization", "The authorization scope has expired", false, { expiresAt: this.scope.expiresAt }) };
+        const operation = operationName(request.action);
+        if (!operation)
+            return { ok: false, error: makeError(this.scope, "invalid_authorization_request", "validation", "Authorization action is required", false) };
+        if (!scopeAllows(this.scope.principal, operation)) {
+            return { ok: true, value: { allowed: false, reason: "Principal scope does not permit this operation", scopes: this.scope.principal.scopes } };
+        }
+        if (!this.options.policy)
+            return { ok: true, value: { allowed: true, scopes: this.scope.principal.scopes } };
+        try {
+            const decision = await this.options.policy({ ...request, action: operation }, this.scope.principal);
+            return {
+                ok: true,
+                value: {
+                    allowed: decision.allowed,
+                    reason: decision.reason === undefined ? undefined : String(redactJson(decision.reason)),
+                    scopes: decision.scopes.length > 0 ? decision.scopes : this.scope.principal.scopes,
+                },
+            };
+        }
+        catch {
+            return { ok: false, error: makeError(this.scope, "authorization_policy_error", "authorization", "Authorization policy failed", true) };
+        }
+    }
+    isActive() {
+        return this.principalValid && !this.revoked && !this.options.scope.signal?.aborted && this.now() < Date.parse(this.scope.expiresAt);
+    }
+}
+export function createAuthorizationGateway(options) {
+    return new AuthorizationGateway(options);
+}
+//# sourceMappingURL=authorization.js.map

package/dist/gateways/authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.js","sourceRoot":"","sources":["../../src/gateways/authorization.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,GAOnB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AA8BlE,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACtC,MAAM,eAAe,GAAqC;IACxD,KAAK,EAAE,KAAK;IACZ,MAAM,EAAE,KAAK;IACb,aAAa,EAAE,KAAK;IACpB,QAAQ,EAAE,SAAS;IACnB,SAAS,EAAE,KAAK;IAChB,UAAU,EAAE,SAAS;CACtB,CAAC;AAEF,SAAS,SAAS,CAChB,KAAmB,EACnB,IAAY,EACZ,QAA+B,EAC/B,OAAe,EACf,SAAkB,EAClB,UAAmC,EAAE;IAErC,OAAO;QACL,IAAI;QACJ,QAAQ;QACR,OAAO;QACP,SAAS;QACT,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,OAAO,EAAE;YACP,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG,YAAY,CAAC,OAAO,CAAC;SACzB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB;IACzC,MAAM,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACxD,CAAC;AAED,SAAS,WAAW,CAAC,SAAuB,EAAE,SAAiB;IAC7D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC7C,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC7F,OAAO,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5K,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAmB,EAAE,SAAkB;IACpE,OAAO,SAAS,CAAC,KAAK,EAAE,mBAAmB,EAAE,YAAY,EAAE,6BAA6B,EAAE,KAAK,EAAE;QAC/F,aAAa,EAAE,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,IAAI,MAAM,IAAI,SAAS,CAAC,CAAC,CAAE,SAAgC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;KAC/I,CAAC,CAAC;AACL,CAAC;AAED,6EAA6E;AAC7E,MAAM,OAAO,oBAAoB;IACd,OAAO,CAA8B;IACrC,KAAK,CAAqB;IAC1B,GAAG,CAAe;IAClB,cAAc,CAAU;IACjC,OAAO,GAAG,KAAK,CAAC;IAExB,YAAmB,OAAoC;QACrD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACnC,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC/D,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;QACnJ,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,IAAI,cAAc,CAAC,CAAC;QAC5E,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC9G,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACvF,CAAC;IAEM,qBAAqB;QAC1B,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAEM,SAAS;QACd,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE;YACvB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS;YAC/B,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;YACpC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS;YAC/B,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK;SACxB,CAAC;IACJ,CAAC;IAEM,MAAM;QACX,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACtB,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;IAEM,KAAK,CAAC,KAAK,CAAC,OAAkC;QACnD,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/G,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,qBAAqB,EAAE,cAAc,EAAE,uCAAuC,EAAE,KAAK,CAAC,EAAE,CAAC;QAClL,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,6BAA6B,EAAE,eAAe,EAAE,0CAA0C,EAAE,KAAK,CAAC,EAAE,CAAC;QACxK,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,6BAA6B,EAAE,eAAe,EAAE,qCAAqC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;QAE1O,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,+BAA+B,EAAE,YAAY,EAAE,kCAAkC,EAAE,KAAK,CAAC,EAAE,CAAC;QAC7J,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;YAClD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,gDAAgD,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;QAChJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7G,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACpG,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,KAAK,EAAE;oBACL,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBACvF,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM;iBACnF;aACF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,4BAA4B,EAAE,eAAe,EAAE,6BAA6B,EAAE,IAAI,CAAC,EAAE,CAAC;QACzI,CAAC;IACH,CAAC;IAEO,QAAQ;QACd,OAAO,IAAI,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtI,CAAC;CACF;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAoC;IAC7E,OAAO,IAAI,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC"}

package/dist/gateways/events.d.ts

@@ -0,0 +1,31 @@
+import type { EventFilter, EventSubscription, HarnessEvent, KadiError, ScopedEventService, ServiceResult } from "@kadi.build/kadi-harness-contracts";
+import type { EventObserveOptions, EventPublishResult } from "../event-bus.js";
+import { type GatewayAuthorizer, type GatewayScope } from "./tools.js";
+export interface EventGatewaySubscription {
+    readonly events: AsyncIterable<HarnessEvent>;
+    close(): Promise<void>;
+}
+/** The smallest publication/subscription surface required by EventBus or a KADI broker bridge. */
+export interface EventBackend {
+    publish(event: HarnessEvent): Promise<EventPublishResult | void>;
+    subscribe(runId: string, options: EventObserveOptions): EventGatewaySubscription;
+}
+export interface EventGatewayOptions {
+    readonly scope: GatewayScope;
+    readonly backend: EventBackend;
+    readonly authorize?: GatewayAuthorizer;
+}
+/** Scoped facade over normalized event publication and streaming. */
+export declare class EventGateway implements ScopedEventService {
+    private readonly options;
+    constructor(options: EventGatewayOptions);
+    publish(event: HarnessEvent): Promise<ServiceResult<void>>;
+    subscribe(filter?: EventFilter): Promise<ServiceResult<EventSubscription>>;
+    private filterScopedEvents;
+}
+export declare class EventGatewayError extends Error {
+    readonly error: KadiError;
+    constructor(error: KadiError);
+}
+export declare function createEventGateway(options: EventGatewayOptions): ScopedEventService;
+//# sourceMappingURL=events.d.ts.map

package/dist/gateways/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/gateways/events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EACjB,YAAY,EACZ,SAAS,EACT,kBAAkB,EAClB,aAAa,EACd,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAE/E,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,YAAY,EAElB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;IAC7C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,kGAAkG;AAClG,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IACjE,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,wBAAwB,CAAC;CAClF;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC;CACxC;AAiFD,qEAAqE;AACrE,qBAAa,YAAa,YAAW,kBAAkB;IACrD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsB;gBAE3B,OAAO,EAAE,mBAAmB;IAIlC,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IAiB1D,SAAS,CAAC,MAAM,GAAE,WAAgB,GAAG,OAAO,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;YAa5E,kBAAkB;CAUlC;AAED,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,SAAgB,KAAK,EAAE,SAAS,CAAC;gBAEd,KAAK,EAAE,SAAS;CAKpC;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,kBAAkB,CAEnF"}

package/dist/gateways/events.js

@@ -0,0 +1,135 @@
+import { redactJson, redactObject } from "./redaction.js";
+function makeError(scope, code, category, message, retryable, details = {}) {
+    return {
+        code,
+        category,
+        message,
+        retryable,
+        correlationId: scope.correlationId,
+        details: {
+            sessionId: scope.sessionId,
+            runId: scope.runId,
+            adapterId: scope.adapterId,
+            ...redactObject(details),
+        },
+    };
+}
+function isKadiError(value) {
+    if (typeof value !== "object" || value === null)
+        return false;
+    const candidate = value;
+    return typeof candidate.code === "string" && typeof candidate.category === "string" && typeof candidate.message === "string";
+}
+function normalizeError(scope, value, operation) {
+    if (isKadiError(value)) {
+        return {
+            ...value,
+            correlationId: scope.correlationId,
+            details: redactObject(value.details),
+            cause: value.cause ? { code: value.cause.code, message: value.cause.message } : undefined,
+        };
+    }
+    const message = value instanceof Error ? value.message : String(value);
+    return makeError(scope, "event_transport_error", "service_failure", `${operation} failed: ${message}`, true);
+}
+async function authorize(options, request) {
+    if (!options.authorize)
+        return undefined;
+    try {
+        const decision = await options.authorize(request);
+        if (decision === true || (typeof decision === "object" && decision.ok))
+            return undefined;
+        if (decision === false)
+            return makeError(options.scope, "authorization_denied", "authorization", `Authorization denied for ${request.operation}`, false, { operation: request.operation, eventType: request.eventType });
+        return decision.error;
+    }
+    catch (caught) {
+        return normalizeError(options.scope, caught, `${request.operation} authorization`);
+    }
+}
+function scopedEvent(scope, event) {
+    if (event.contractVersion !== scope.contractVersion) {
+        return { ok: false, error: makeError(scope, "contract_incompatible", "contract_incompatible", "Event contract version does not match the run scope", false, { eventContractVersion: event.contractVersion }) };
+    }
+    if (event.sessionId !== scope.sessionId || event.runId !== scope.runId || event.adapterId !== scope.adapterId) {
+        return { ok: false, error: makeError(scope, "event_scope_violation", "authorization", "Event scope does not match the current run", false, { eventSessionId: event.sessionId, eventRunId: event.runId, eventAdapterId: event.adapterId }) };
+    }
+    return {
+        ok: true,
+        value: {
+            ...event,
+            correlation: { ...event.correlation, requestId: scope.correlationId },
+            payload: event.payload ? redactJson(event.payload) : undefined,
+            native: event.native ? { namespace: event.native.namespace, payload: redactJson(event.native.payload) } : undefined,
+        },
+    };
+}
+function cancellationError(scope) {
+    return makeError(scope, "operation_cancelled", "cancellation", "The scoped operation was cancelled", false);
+}
+/** Scoped facade over normalized event publication and streaming. */
+export class EventGateway {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async publish(event) {
+        const denied = await authorize(this.options, { operation: "events.publish", scope: this.options.scope, eventType: event.type });
+        if (denied)
+            return { ok: false, error: denied };
+        if (this.options.scope.signal?.aborted)
+            return { ok: false, error: cancellationError(this.options.scope) };
+        const scoped = scopedEvent(this.options.scope, event);
+        if (!scoped.ok)
+            return scoped;
+        try {
+            const result = await this.options.backend.publish(scoped.value);
+            if (result && "accepted" in result && !result.accepted && result.reason === "terminal_closed") {
+                return { ok: false, error: makeError(this.options.scope, "event_stream_closed", "service_failure", "The run event stream is already terminal", false) };
+            }
+            return { ok: true, value: undefined };
+        }
+        catch (caught) {
+            return { ok: false, error: normalizeError(this.options.scope, caught, "events.publish") };
+        }
+    }
+    async subscribe(filter = {}) {
+        const denied = await authorize(this.options, { operation: "events.subscribe", scope: this.options.scope });
+        if (denied)
+            return { ok: false, error: denied };
+        if (this.options.scope.signal?.aborted)
+            return { ok: false, error: cancellationError(this.options.scope) };
+        try {
+            const source = this.options.backend.subscribe(this.options.scope.runId, { ...filter, signal: this.options.scope.signal });
+            const events = this.filterScopedEvents(source.events);
+            return { ok: true, value: { events, close: source.close } };
+        }
+        catch (caught) {
+            return { ok: false, error: normalizeError(this.options.scope, caught, "events.subscribe") };
+        }
+    }
+    async *filterScopedEvents(events) {
+        try {
+            for await (const event of events) {
+                const scoped = scopedEvent(this.options.scope, event);
+                if (scoped.ok)
+                    yield scoped.value;
+            }
+        }
+        catch (caught) {
+            throw new EventGatewayError(normalizeError(this.options.scope, caught, "events.stream"));
+        }
+    }
+}
+export class EventGatewayError extends Error {
+    error;
+    constructor(error) {
+        super(error.message);
+        this.name = "EventGatewayError";
+        this.error = error;
+    }
+}
+export function createEventGateway(options) {
+    return new EventGateway(options);
+}
+//# sourceMappingURL=events.js.map

package/dist/gateways/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/gateways/events.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAwB1D,SAAS,SAAS,CAChB,KAAmB,EACnB,IAAY,EACZ,QAA+B,EAC/B,OAAe,EACf,SAAkB,EAClB,UAAmC,EAAE;IAErC,OAAO;QACL,IAAI;QACJ,QAAQ;QACR,OAAO;QACP,SAAS;QACT,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,OAAO,EAAE;YACP,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG,YAAY,CAAC,OAAO,CAAC;SACzB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,OAAO,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,CAAC;AAC/H,CAAC;AAED,SAAS,cAAc,CAAC,KAAmB,EAAE,KAAc,EAAE,SAAiB;IAC5E,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,GAAG,KAAK;YACR,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC;YACpC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS;SAC1F,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,SAAS,CAAC,KAAK,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,GAAG,SAAS,YAAY,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;AAC/G,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,OAA4B,EAC5B,OAAoC;IAEpC,IAAI,CAAC,OAAO,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,EAAE,CAAC;YAAE,OAAO,SAAS,CAAC;QACzF,IAAI,QAAQ,KAAK,KAAK;YAAE,OAAO,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,sBAAsB,EAAE,eAAe,EAAE,4BAA4B,OAAO,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACzN,OAAO,QAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QAChB,OAAO,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,gBAAgB,CAAC,CAAC;IACrF,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAmB,EAAE,KAAmB;IAC3D,IAAI,KAAK,CAAC,eAAe,KAAK,KAAK,CAAC,eAAe,EAAE,CAAC;QACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,qDAAqD,EAAE,KAAK,EAAE,EAAE,oBAAoB,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,EAAE,CAAC;IACjN,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;QAC9G,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,uBAAuB,EAAE,eAAe,EAAE,4CAA4C,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,EAAE,cAAc,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;IAC9O,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,GAAG,KAAK;YACR,WAAW,EAAE,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,aAAa,EAAE;YACrE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAA0B,CAAC,CAAC,CAAC,SAAS;YACvF,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;SACpH;KACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAmB;IAC5C,OAAO,SAAS,CAAC,KAAK,EAAE,qBAAqB,EAAE,cAAc,EAAE,oCAAoC,EAAE,KAAK,CAAC,CAAC;AAC9G,CAAC;AAED,qEAAqE;AACrE,MAAM,OAAO,YAAY;IACN,OAAO,CAAsB;IAE9C,YAAmB,OAA4B;QAC7C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,KAAmB;QACtC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAChI,IAAI,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAChD,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3G,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChE,IAAI,MAAM,IAAI,UAAU,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;gBAC9F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,0CAA0C,EAAE,KAAK,CAAC,EAAE,CAAC;YAC1J,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QACxC,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAAE,CAAC;QAC5F,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,SAAS,CAAC,SAAsB,EAAE;QAC7C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3G,IAAI,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAChD,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3G,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1H,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;QAC9D,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,kBAAkB,CAAC,EAAE,CAAC;QAC9F,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,CAAC,kBAAkB,CAAC,MAAmC;QACnE,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBACjC,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBACtD,IAAI,MAAM,CAAC,EAAE;oBAAE,MAAM,MAAM,CAAC,KAAK,CAAC;YACpC,CAAC;QACH,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,iBAAiB,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1B,KAAK,CAAY;IAEjC,YAAmB,KAAgB;QACjC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAED,MAAM,UAAU,kBAAkB,CAAC,OAA4B;IAC7D,OAAO,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC"}

package/dist/gateways/redaction.d.ts

@@ -0,0 +1,2 @@
+export { isSensitiveKey, redactJson, redactObject } from "../policy/redaction.js";
+//# sourceMappingURL=redaction.d.ts.map

package/dist/gateways/redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../../src/gateways/redaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/gateways/redaction.js

@@ -0,0 +1,2 @@
+export { isSensitiveKey, redactJson, redactObject } from "../policy/redaction.js";
+//# sourceMappingURL=redaction.js.map

package/dist/gateways/redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../../src/gateways/redaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/gateways/sessions.d.ts

@@ -0,0 +1,27 @@
+import { type ScopedSessionService, type ServiceResult, type SessionSnapshot, type SessionTimelineEntry } from "@kadi.build/kadi-harness-contracts";
+import type { GatewayAuthorizer } from "./tools.js";
+import type { GatewayScope } from "./tools.js";
+export interface SessionLoadOptions {
+    readonly includeRuns?: boolean;
+    readonly includeArtifacts?: boolean;
+}
+export interface SessionStateBackend {
+    save(scope: GatewayScope, snapshot: SessionSnapshot): Promise<unknown> | unknown;
+    load(scope: GatewayScope, sessionId: string, options?: SessionLoadOptions): Promise<unknown> | unknown;
+    appendTimeline?(scope: GatewayScope, entry: SessionTimelineEntry): Promise<unknown> | unknown;
+}
+export interface SessionGatewayOptions {
+    readonly scope: GatewayScope;
+    readonly backend: SessionStateBackend;
+    readonly authorize?: GatewayAuthorizer;
+}
+/** Scoped session-state facade over the session-state ability or another durable backend. */
+export declare class SessionGateway implements ScopedSessionService {
+    private readonly options;
+    constructor(options: SessionGatewayOptions);
+    load(sessionId: string): Promise<ServiceResult<SessionSnapshot | undefined>>;
+    save(snapshot: SessionSnapshot): Promise<ServiceResult<void>>;
+    appendTimeline(entry: SessionTimelineEntry): Promise<ServiceResult<void>>;
+}
+export declare function createSessionGateway(options: SessionGatewayOptions): SessionGateway;
+//# sourceMappingURL=sessions.d.ts.map

package/dist/gateways/sessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../src/gateways/sessions.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,oBAAoB,EACzB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EAC1B,MAAM,oCAAoC,CAAC;AAE5C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAI/C,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;CACrC;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IACjF,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IACvG,cAAc,CAAC,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CAC/F;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC;CACxC;AAkGD,6FAA6F;AAC7F,qBAAa,cAAe,YAAW,oBAAoB;IACzD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;gBAE7B,OAAO,EAAE,qBAAqB;IAIpC,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,eAAe,GAAG,SAAS,CAAC,CAAC;IAc5E,IAAI,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IAmB7D,cAAc,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;CAavF;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,GAAG,cAAc,CAEnF"}