limen-ai 1.0.0

package/dist/substrate/transport/transport_engine.js

@@ -0,0 +1,444 @@
+/**
+ * Core transport engine for LLM HTTP communication.
+ * S ref: §25.4 (LLM Gateway), I-01 (no SDK deps), I-04 (provider independence)
+ *
+ * Phase: 5A (Sprint 5A — Shared Transport Infrastructure)
+ * Implements: createTransportEngine() factory
+ *
+ * Behaviors:
+ *   execute() — non-streaming: fetch + retry (2 retries / 3 total, 120s cap, 60s Retry-After cap)
+ *   executeStream() — streaming: fetch + NO retry after first byte, tiered timeouts
+ *   shutdown() — abort all in-flight requests, reject new requests
+ *
+ * Security constraints enforced:
+ *   C-SEC-P5-06: Response size limit 10MB
+ *   C-SEC-P5-07: JSON parse safety
+ *   C-SEC-P5-15: Circuit breaker checked BEFORE each retry
+ *   C-SEC-P5-19: TLS enforcement for non-local URLs
+ *   C-SEC-P5-20: Shutdown support (GATEWAY_SHUTTING_DOWN)
+ *   CR-1 / C-SEC-P5-04: API key resolved ONCE at adapter creation
+ *   CR-2: Retry-After > 60s → hard error
+ *   CR-3: Streaming timeouts (30s first-byte, 30s stall, 10min total)
+ *
+ * Hard Stop #7: All temporal logic uses TimeProvider.
+ */
+// ─── Constants ───
+/** Maximum number of retries for non-streaming requests (2 retries = 3 total attempts) */
+const MAX_RETRIES = 2;
+/** Total duration cap for non-streaming requests: 120 seconds */
+const DURATION_CAP_MS = 120_000;
+/** Maximum Retry-After value: 60 seconds (CR-2) */
+const MAX_RETRY_AFTER_MS = 60_000;
+/** Response size limit: 10MB (C-SEC-P5-06) */
+const MAX_RESPONSE_BYTES = 10_485_760;
+/** Streaming: first-byte timeout 30s (CR-3) */
+const STREAM_FIRST_BYTE_TIMEOUT_MS = 30_000;
+/** Streaming: stall detection timeout 30s (CR-3) */
+const STREAM_STALL_TIMEOUT_MS = 30_000;
+/** Streaming: total duration cap 10 minutes (CR-3) */
+const STREAM_TOTAL_TIMEOUT_MS = 600_000;
+// ─── Error Helper ───
+class TransportError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.name = 'TransportError';
+        this.code = code;
+    }
+}
+/**
+ * C-SEC-P5-01/02: Scrub potential credentials from error messages.
+ * Removes URL query parameter values that could contain API keys
+ * (e.g., Gemini ?key=AIzaSy...) and Bearer tokens.
+ */
+function scrubErrorMessage(msg) {
+    return msg
+        .replace(/([?&])key=[^&\s]*/gi, '$1key=[REDACTED]')
+        .replace(/Bearer\s+[^\s"']*/gi, 'Bearer [REDACTED]');
+}
+// ─── URL Validation ───
+/**
+ * Check if a URL is a local address (loopback or localhost).
+ * Local URLs are exempt from TLS enforcement.
+ */
+function isLocalUrl(url) {
+    try {
+        const parsed = new URL(url);
+        const hostname = parsed.hostname;
+        return (hostname === 'localhost' ||
+            hostname === '127.0.0.1' ||
+            hostname === '::1' ||
+            hostname === '[::1]' ||
+            hostname.endsWith('.local'));
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * C-SEC-P5-19: TLS enforcement for non-local URLs.
+ * Reject http:// URLs that are not local.
+ */
+function enforceTls(url) {
+    if (url.startsWith('http://') && !isLocalUrl(url)) {
+        throw new TransportError('TRANSPORT_TLS_REQUIRED', 'Non-local URLs must use HTTPS (C-SEC-P5-19)');
+    }
+}
+// ─── Retry-After Parsing ───
+/**
+ * Parse HTTP Retry-After header value.
+ * Supports both seconds format and HTTP-date format.
+ * Returns delay in milliseconds, or null if unparseable.
+ */
+function parseRetryAfter(value, clock) {
+    if (!value)
+        return null;
+    // Try as seconds (integer)
+    const seconds = parseInt(value, 10);
+    if (!isNaN(seconds) && seconds >= 0) {
+        return seconds * 1000;
+    }
+    // Try as HTTP-date
+    const date = Date.parse(value);
+    if (!isNaN(date)) {
+        const delayMs = date - clock.nowMs();
+        return delayMs > 0 ? delayMs : 0;
+    }
+    return null;
+}
+// ─── Response Size Check ───
+/**
+ * C-SEC-P5-06: Check response size from Content-Length header.
+ * Also checked after reading the body.
+ */
+function checkResponseSize(contentLength) {
+    if (contentLength) {
+        const size = parseInt(contentLength, 10);
+        if (!isNaN(size) && size > MAX_RESPONSE_BYTES) {
+            throw new TransportError('TRANSPORT_RESPONSE_TOO_LARGE', `Response size ${size} bytes exceeds limit of ${MAX_RESPONSE_BYTES} bytes (C-SEC-P5-06)`);
+        }
+    }
+}
+// ─── Transport Engine Factory ───
+/**
+ * Create a transport engine instance.
+ * S ref: §25.4, C-07 (Object.freeze)
+ *
+ * @param options - Configuration options including time provider, health updater, circuit breaker
+ */
+export function createTransportEngine(options) {
+    const clock = options?.time ?? { nowISO: () => new Date().toISOString(), nowMs: () => Date.now() };
+    const updateHealth = options?.updateHealth;
+    const isCircuitOpen = options?.isCircuitOpen;
+    /** C-SEC-P5-20: Track in-flight controllers for shutdown */
+    const inFlightControllers = new Set();
+    let shuttingDown = false;
+    /**
+     * Create a composed abort signal from caller signal + timeout.
+     * Uses AbortSignal.any() (Node.js >= 22).
+     */
+    function createComposedSignal(callerSignal, timeoutMs, controller) {
+        const signals = [controller.signal];
+        if (callerSignal) {
+            signals.push(callerSignal);
+        }
+        signals.push(AbortSignal.timeout(timeoutMs));
+        return AbortSignal.any(signals);
+    }
+    /**
+     * Extract headers from fetch Response as a plain object.
+     */
+    function extractHeaders(response) {
+        const headers = {};
+        response.headers.forEach((value, key) => {
+            headers[key] = value;
+        });
+        return headers;
+    }
+    /**
+     * Execute a non-streaming LLM request with retry logic.
+     *
+     * Retry policy:
+     * - Maximum 2 retries (3 total attempts)
+     * - 120s total duration cap
+     * - Retry-After > 60s → hard error (CR-2)
+     * - Circuit breaker checked BEFORE each attempt (C-SEC-P5-15)
+     * - Only retryable status codes trigger retry (adapter.isRetryableStatus)
+     */
+    async function execute(adapter, opts) {
+        // C-SEC-P5-20: Reject if shutting down
+        if (shuttingDown) {
+            throw new TransportError('GATEWAY_SHUTTING_DOWN', 'Transport engine is shutting down');
+        }
+        const startTime = clock.nowMs();
+        let lastError = null;
+        let retryCount = 0;
+        for (let attempt = 0; attempt <= MAX_RETRIES; attempt++) {
+            // C-SEC-P5-15: Circuit breaker check BEFORE each attempt
+            if (isCircuitOpen?.(adapter.providerId)) {
+                throw new TransportError('TRANSPORT_CIRCUIT_OPEN', `Circuit breaker open for provider ${adapter.providerId}`);
+            }
+            // Duration cap check
+            const elapsed = clock.nowMs() - startTime;
+            if (elapsed >= DURATION_CAP_MS) {
+                throw new TransportError('TRANSPORT_TIMEOUT', `Total duration cap exceeded: ${elapsed}ms >= ${DURATION_CAP_MS}ms`);
+            }
+            const remainingMs = DURATION_CAP_MS - elapsed;
+            const controller = new AbortController();
+            inFlightControllers.add(controller);
+            try {
+                // C-SEC-P5-20: Check shutdown again after adding controller
+                if (shuttingDown) {
+                    throw new TransportError('GATEWAY_SHUTTING_DOWN', 'Transport engine is shutting down');
+                }
+                const httpRequest = adapter.buildRequest(opts.request, false);
+                // C-SEC-P5-19: TLS enforcement
+                enforceTls(httpRequest.url);
+                const composedSignal = createComposedSignal(opts.signal, remainingMs, controller);
+                const attemptStart = clock.nowMs();
+                const response = await fetch(httpRequest.url, {
+                    method: httpRequest.method,
+                    headers: httpRequest.headers,
+                    body: JSON.stringify(httpRequest.body),
+                    signal: composedSignal,
+                });
+                const attemptLatency = clock.nowMs() - attemptStart;
+                // Check if status is retryable
+                if (!response.ok && adapter.isRetryableStatus(response.status)) {
+                    // Parse Retry-After
+                    const retryAfterMs = parseRetryAfter(response.headers.get('retry-after'), clock);
+                    // CR-2: Retry-After > 60s → hard error
+                    if (retryAfterMs !== null && retryAfterMs > MAX_RETRY_AFTER_MS) {
+                        updateHealth?.(adapter.providerId, false, attemptLatency, `Retry-After too long: ${retryAfterMs}ms`);
+                        throw new TransportError('TRANSPORT_RETRY_AFTER_TOO_LONG', `Retry-After ${retryAfterMs}ms exceeds maximum ${MAX_RETRY_AFTER_MS}ms (CR-2)`);
+                    }
+                    // Update health: failure
+                    updateHealth?.(adapter.providerId, false, attemptLatency, `HTTP ${response.status}`);
+                    if (attempt < MAX_RETRIES) {
+                        retryCount++;
+                        // Wait for Retry-After delay or use exponential backoff
+                        const delay = retryAfterMs ?? Math.min(1000 * Math.pow(2, attempt), 10000);
+                        await new Promise((resolve) => {
+                            const timerId = setTimeout(resolve, delay);
+                            // If aborted during wait, resolve immediately
+                            if (composedSignal.aborted) {
+                                clearTimeout(timerId);
+                                resolve();
+                            }
+                        });
+                        continue;
+                    }
+                    // All retries exhausted
+                    throw new TransportError('TRANSPORT_RETRY_EXHAUSTED', `All ${MAX_RETRIES + 1} attempts failed for provider ${adapter.providerId}. Last status: ${response.status}`);
+                }
+                // Non-retryable error
+                if (!response.ok) {
+                    const attemptLat = clock.nowMs() - attemptStart;
+                    updateHealth?.(adapter.providerId, false, attemptLat, `HTTP ${response.status}`);
+                    throw new TransportError('TRANSPORT_PROVIDER_ERROR', `Provider ${adapter.providerId} returned non-retryable status ${response.status}`);
+                }
+                // C-SEC-P5-06: Check Content-Length
+                checkResponseSize(response.headers.get('content-length'));
+                // Read response body
+                const bodyText = await response.text();
+                // C-SEC-P5-06: Verify actual body size
+                if (bodyText.length > MAX_RESPONSE_BYTES) {
+                    throw new TransportError('TRANSPORT_RESPONSE_TOO_LARGE', `Response body ${bodyText.length} bytes exceeds limit of ${MAX_RESPONSE_BYTES} bytes (C-SEC-P5-06)`);
+                }
+                // Build TransportHttpResponse
+                const httpResponse = {
+                    status: response.status,
+                    headers: extractHeaders(response),
+                    body: bodyText,
+                };
+                // Parse response via adapter (C-SEC-P5-07: JSON parse safety handled here)
+                let result;
+                try {
+                    result = adapter.parseResponse(httpResponse);
+                }
+                catch (parseErr) {
+                    const msg = parseErr instanceof Error ? parseErr.message : String(parseErr);
+                    // Distinguish JSON parse errors from other parse errors
+                    if (msg.includes('JSON') || msg.includes('parse') || msg.includes('Unexpected token')) {
+                        throw new TransportError('TRANSPORT_JSON_PARSE_ERROR', `Failed to parse provider response: ${msg}`);
+                    }
+                    throw parseErr;
+                }
+                const totalMs = clock.nowMs() - startTime;
+                // Update health: success
+                updateHealth?.(adapter.providerId, true, attemptLatency);
+                return {
+                    ...result,
+                    retryCount,
+                    totalMs,
+                };
+            }
+            catch (error) {
+                if (error instanceof TransportError) {
+                    lastError = error;
+                    // Re-throw non-retryable transport errors immediately
+                    if (error.code === 'GATEWAY_SHUTTING_DOWN' ||
+                        error.code === 'TRANSPORT_CIRCUIT_OPEN' ||
+                        error.code === 'TRANSPORT_TIMEOUT' ||
+                        error.code === 'TRANSPORT_TLS_REQUIRED' ||
+                        error.code === 'TRANSPORT_RETRY_AFTER_TOO_LONG' ||
+                        error.code === 'TRANSPORT_PROVIDER_ERROR' ||
+                        error.code === 'TRANSPORT_RESPONSE_TOO_LARGE' ||
+                        error.code === 'TRANSPORT_JSON_PARSE_ERROR' ||
+                        error.code === 'TRANSPORT_RETRY_EXHAUSTED') {
+                        throw error;
+                    }
+                }
+                // Handle abort (caller signal or timeout)
+                if (error instanceof DOMException && error.name === 'AbortError') {
+                    if (shuttingDown) {
+                        throw new TransportError('GATEWAY_SHUTTING_DOWN', 'Request aborted: transport engine shutting down');
+                    }
+                    if (opts.signal?.aborted) {
+                        throw new TransportError('TRANSPORT_ABORTED', 'Request aborted by caller');
+                    }
+                    throw new TransportError('TRANSPORT_TIMEOUT', 'Request timed out');
+                }
+                // Handle TimeoutError (from AbortSignal.timeout)
+                if (error instanceof DOMException && error.name === 'TimeoutError') {
+                    throw new TransportError('TRANSPORT_TIMEOUT', 'Request timed out');
+                }
+                // Network errors — retryable on non-final attempt
+                if (error instanceof TypeError) {
+                    const attemptLat = clock.nowMs() - startTime;
+                    updateHealth?.(adapter.providerId, false, attemptLat, error.message);
+                    lastError = error;
+                    if (attempt < MAX_RETRIES) {
+                        retryCount++;
+                        continue;
+                    }
+                }
+                // Unknown error — don't retry
+                if (lastError && !(lastError instanceof TransportError)) {
+                    throw new TransportError('TRANSPORT_NETWORK_ERROR', `Network error after ${retryCount + 1} attempt(s): ${scrubErrorMessage(lastError.message)}`);
+                }
+                throw lastError ?? error;
+            }
+            finally {
+                inFlightControllers.delete(controller);
+            }
+        }
+        // Should not reach here, but safety net
+        throw lastError ?? new TransportError('TRANSPORT_RETRY_EXHAUSTED', `All attempts exhausted for provider ${adapter.providerId}`);
+    }
+    /**
+     * Execute a streaming LLM request.
+     *
+     * Streaming policy:
+     * - NO retry after first byte received
+     * - 30s first-byte timeout (CR-3)
+     * - 30s stall detection within stream (handled by adapter/parser)
+     * - 10min total duration cap (CR-3)
+     */
+    async function executeStream(adapter, opts) {
+        // C-SEC-P5-20: Reject if shutting down
+        if (shuttingDown) {
+            throw new TransportError('GATEWAY_SHUTTING_DOWN', 'Transport engine is shutting down');
+        }
+        // C-SEC-P5-15: Circuit breaker check
+        if (isCircuitOpen?.(adapter.providerId)) {
+            throw new TransportError('TRANSPORT_CIRCUIT_OPEN', `Circuit breaker open for provider ${adapter.providerId}`);
+        }
+        const controller = new AbortController();
+        inFlightControllers.add(controller);
+        try {
+            if (shuttingDown) {
+                throw new TransportError('GATEWAY_SHUTTING_DOWN', 'Transport engine is shutting down');
+            }
+            const httpRequest = adapter.buildRequest(opts.request, true);
+            // C-SEC-P5-19: TLS enforcement
+            enforceTls(httpRequest.url);
+            // First-byte timeout: 30s
+            const firstByteSignal = createComposedSignal(opts.signal, STREAM_FIRST_BYTE_TIMEOUT_MS, controller);
+            const streamStart = clock.nowMs();
+            const response = await fetch(httpRequest.url, {
+                method: httpRequest.method,
+                headers: httpRequest.headers,
+                body: JSON.stringify(httpRequest.body),
+                signal: firstByteSignal,
+            });
+            if (!response.ok) {
+                const attemptLat = clock.nowMs() - streamStart;
+                updateHealth?.(adapter.providerId, false, attemptLat, `HTTP ${response.status}`);
+                throw new TransportError('TRANSPORT_PROVIDER_ERROR', `Provider ${adapter.providerId} returned status ${response.status} for streaming request`);
+            }
+            if (!response.body) {
+                throw new TransportError('TRANSPORT_STREAM_ERROR', 'Streaming response has no body');
+            }
+            // Delegate to adapter for stream parsing
+            // The adapter handles thinking block aggregation internally
+            const streamResult = adapter.parseStream(response.body, controller.signal);
+            // Wrap the stream to add total timeout and health update on completion
+            const startMs = streamStart;
+            async function* wrappedStream() {
+                try {
+                    for await (const chunk of streamResult.stream) {
+                        // CR-3: total duration cap
+                        if (clock.nowMs() - startMs > STREAM_TOTAL_TIMEOUT_MS) {
+                            throw new TransportError('TRANSPORT_STREAM_TOTAL_TIMEOUT', `Streaming total duration exceeded ${STREAM_TOTAL_TIMEOUT_MS}ms (CR-3)`);
+                        }
+                        yield chunk;
+                    }
+                    const totalLat = clock.nowMs() - startMs;
+                    updateHealth?.(adapter.providerId, true, totalLat);
+                }
+                catch (error) {
+                    const totalLat = clock.nowMs() - startMs;
+                    const msg = error instanceof Error ? error.message : String(error);
+                    updateHealth?.(adapter.providerId, false, totalLat, msg);
+                    throw error;
+                }
+                finally {
+                    inFlightControllers.delete(controller);
+                }
+            }
+            return {
+                stream: wrappedStream(),
+                getDeliberation: () => streamResult.getDeliberation(),
+                getTotalMs: () => clock.nowMs() - startMs,
+            };
+        }
+        catch (error) {
+            inFlightControllers.delete(controller);
+            if (error instanceof TransportError) {
+                throw error;
+            }
+            if (error instanceof DOMException && (error.name === 'AbortError' || error.name === 'TimeoutError')) {
+                if (shuttingDown) {
+                    throw new TransportError('GATEWAY_SHUTTING_DOWN', 'Stream aborted: transport engine shutting down');
+                }
+                if (opts.signal?.aborted) {
+                    throw new TransportError('TRANSPORT_ABORTED', 'Stream aborted by caller');
+                }
+                throw new TransportError('TRANSPORT_FIRST_BYTE_TIMEOUT', 'Streaming first-byte timeout exceeded (30s)');
+            }
+            throw new TransportError('TRANSPORT_NETWORK_ERROR', `Network error during stream setup: ${scrubErrorMessage(error instanceof Error ? error.message : String(error))}`);
+        }
+    }
+    /**
+     * C-SEC-P5-20: Initiate graceful shutdown.
+     * All in-flight requests are aborted. New requests are rejected.
+     */
+    function shutdown() {
+        shuttingDown = true;
+        for (const controller of inFlightControllers) {
+            controller.abort();
+        }
+        inFlightControllers.clear();
+    }
+    const engine = {
+        execute,
+        executeStream,
+        shutdown,
+    };
+    return Object.freeze(engine);
+}
+// ─── Exports ───
+export { TransportError, MAX_RETRIES, DURATION_CAP_MS, MAX_RETRY_AFTER_MS, MAX_RESPONSE_BYTES };
+export { STREAM_FIRST_BYTE_TIMEOUT_MS, STREAM_STALL_TIMEOUT_MS, STREAM_TOTAL_TIMEOUT_MS };
+//# sourceMappingURL=transport_engine.js.map

package/dist/substrate/transport/transport_engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport_engine.js","sourceRoot":"","sources":["../../../src/substrate/transport/transport_engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAcH,oBAAoB;AAEpB,0FAA0F;AAC1F,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB,iEAAiE;AACjE,MAAM,eAAe,GAAG,OAAO,CAAC;AAEhC,mDAAmD;AACnD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,8CAA8C;AAC9C,MAAM,kBAAkB,GAAG,UAAU,CAAC;AAEtC,+CAA+C;AAC/C,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAE5C,oDAAoD;AACpD,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAEvC,sDAAsD;AACtD,MAAM,uBAAuB,GAAG,OAAO,CAAC;AAExC,uBAAuB;AAEvB,MAAM,cAAe,SAAQ,KAAK;IACvB,IAAI,CAAqB;IAClC,YAAY,IAAwB,EAAE,OAAe;QACnD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,GAAG;SACP,OAAO,CAAC,qBAAqB,EAAE,kBAAkB,CAAC;SAClD,OAAO,CAAC,qBAAqB,EAAE,mBAAmB,CAAC,CAAC;AACzD,CAAC;AAED,yBAAyB;AAEzB;;;GAGG;AACH,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,OAAO,CACL,QAAQ,KAAK,WAAW;YACxB,QAAQ,KAAK,WAAW;YACxB,QAAQ,KAAK,KAAK;YAClB,QAAQ,KAAK,OAAO;YACpB,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAC5B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,cAAc,CACtB,wBAAwB,EACxB,6CAA6C,CAC9C,CAAC;IACJ,CAAC;AACH,CAAC;AAED,8BAA8B;AAE9B;;;;GAIG;AACH,SAAS,eAAe,CAAC,KAAoB,EAAE,KAAmB;IAChE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,2BAA2B;IAC3B,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACpC,OAAO,OAAO,GAAG,IAAI,CAAC;IACxB,CAAC;IAED,mBAAmB;IACnB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;QACrC,OAAO,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8BAA8B;AAE9B;;;GAGG;AACH,SAAS,iBAAiB,CAAC,aAA4B;IACrD,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,kBAAkB,EAAE,CAAC;YAC9C,MAAM,IAAI,cAAc,CACtB,8BAA8B,EAC9B,iBAAiB,IAAI,2BAA2B,kBAAkB,sBAAsB,CACzF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,mCAAmC;AAEnC;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAgC;IACpE,MAAM,KAAK,GAAG,OAAO,EAAE,IAAI,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IACnG,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,CAAC;IAC3C,MAAM,aAAa,GAAG,OAAO,EAAE,aAAa,CAAC;IAE7C,4DAA4D;IAC5D,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAmB,CAAC;IACvD,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB;;;OAGG;IACH,SAAS,oBAAoB,CAC3B,YAAqC,EACrC,SAAiB,EACjB,UAA2B;QAE3B,MAAM,OAAO,GAAkB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7C,OAAO,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,SAAS,cAAc,CAAC,QAAkB;QACxC,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACtC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,UAAU,OAAO,CACpB,OAAwB,EACxB,IAA6B;QAE7B,uCAAuC;QACvC,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,IAAI,cAAc,CAAC,uBAAuB,EAAE,mCAAmC,CAAC,CAAC;QACzF,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,SAAS,GAAiB,IAAI,CAAC;QACnC,IAAI,UAAU,GAAG,CAAC,CAAC;QAEnB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;YACxD,yDAAyD;YACzD,IAAI,aAAa,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,cAAc,CACtB,wBAAwB,EACxB,qCAAqC,OAAO,CAAC,UAAU,EAAE,CAC1D,CAAC;YACJ,CAAC;YAED,qBAAqB;YACrB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,SAAS,CAAC;YAC1C,IAAI,OAAO,IAAI,eAAe,EAAE,CAAC;gBAC/B,MAAM,IAAI,cAAc,CACtB,mBAAmB,EACnB,gCAAgC,OAAO,SAAS,eAAe,IAAI,CACpE,CAAC;YACJ,CAAC;YAED,MAAM,WAAW,GAAG,eAAe,GAAG,OAAO,CAAC;YAC9C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAEpC,IAAI,CAAC;gBACH,4DAA4D;gBAC5D,IAAI,YAAY,EAAE,CAAC;oBACjB,MAAM,IAAI,cAAc,CAAC,uBAAuB,EAAE,mCAAmC,CAAC,CAAC;gBACzF,CAAC;gBAED,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBAE9D,+BAA+B;gBAC/B,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;gBAE5B,MAAM,cAAc,GAAG,oBAAoB,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;gBAElF,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;gBACnC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE;oBAC5C,MAAM,EAAE,WAAW,CAAC,MAAM;oBAC1B,OAAO,EAAE,WAAW,CAAC,OAAO;oBAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC;oBACtC,MAAM,EAAE,cAAc;iBACvB,CAAC,CAAC;gBAEH,MAAM,cAAc,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,YAAY,CAAC;gBAEpD,+BAA+B;gBAC/B,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC/D,oBAAoB;oBACpB,MAAM,YAAY,GAAG,eAAe,CAClC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EACnC,KAAK,CACN,CAAC;oBAEF,uCAAuC;oBACvC,IAAI,YAAY,KAAK,IAAI,IAAI,YAAY,GAAG,kBAAkB,EAAE,CAAC;wBAC/D,YAAY,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,cAAc,EAAE,yBAAyB,YAAY,IAAI,CAAC,CAAC;wBACrG,MAAM,IAAI,cAAc,CACtB,gCAAgC,EAChC,eAAe,YAAY,sBAAsB,kBAAkB,WAAW,CAC/E,CAAC;oBACJ,CAAC;oBAED,yBAAyB;oBACzB,YAAY,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;oBAErF,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;wBAC1B,UAAU,EAAE,CAAC;wBACb,wDAAwD;wBACxD,MAAM,KAAK,GAAG,YAAY,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;wBAC3E,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;4BAClC,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;4BAC3C,8CAA8C;4BAC9C,IAAI,cAAc,CAAC,OAAO,EAAE,CAAC;gCAC3B,YAAY,CAAC,OAAO,CAAC,CAAC;gCACtB,OAAO,EAAE,CAAC;4BACZ,CAAC;wBACH,CAAC,CAAC,CAAC;wBACH,SAAS;oBACX,CAAC;oBAED,wBAAwB;oBACxB,MAAM,IAAI,cAAc,CACtB,2BAA2B,EAC3B,OAAO,WAAW,GAAG,CAAC,iCAAiC,OAAO,CAAC,UAAU,kBAAkB,QAAQ,CAAC,MAAM,EAAE,CAC7G,CAAC;gBACJ,CAAC;gBAED,sBAAsB;gBACtB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,YAAY,CAAC;oBAChD,YAAY,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;oBACjF,MAAM,IAAI,cAAc,CACtB,0BAA0B,EAC1B,YAAY,OAAO,CAAC,UAAU,kCAAkC,QAAQ,CAAC,MAAM,EAAE,CAClF,CAAC;gBACJ,CAAC;gBAED,oCAAoC;gBACpC,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBAE1D,qBAAqB;gBACrB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAEvC,uCAAuC;gBACvC,IAAI,QAAQ,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;oBACzC,MAAM,IAAI,cAAc,CACtB,8BAA8B,EAC9B,iBAAiB,QAAQ,CAAC,MAAM,2BAA2B,kBAAkB,sBAAsB,CACpG,CAAC;gBACJ,CAAC;gBAED,8BAA8B;gBAC9B,MAAM,YAAY,GAA0B;oBAC1C,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,OAAO,EAAE,cAAc,CAAC,QAAQ,CAAC;oBACjC,IAAI,EAAE,QAAQ;iBACf,CAAC;gBAEF,2EAA2E;gBAC3E,IAAI,MAAuB,CAAC;gBAC5B,IAAI,CAAC;oBACH,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;gBAC/C,CAAC;gBAAC,OAAO,QAAQ,EAAE,CAAC;oBAClB,MAAM,GAAG,GAAG,QAAQ,YAAY,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC5E,wDAAwD;oBACxD,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;wBACtF,MAAM,IAAI,cAAc,CACtB,4BAA4B,EAC5B,sCAAsC,GAAG,EAAE,CAC5C,CAAC;oBACJ,CAAC;oBACD,MAAM,QAAQ,CAAC;gBACjB,CAAC;gBAED,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,SAAS,CAAC;gBAE1C,yBAAyB;gBACzB,YAAY,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;gBAEzD,OAAO;oBACL,GAAG,MAAM;oBACT,UAAU;oBACV,OAAO;iBACR,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;oBACpC,SAAS,GAAG,KAAK,CAAC;oBAClB,sDAAsD;oBACtD,IACE,KAAK,CAAC,IAAI,KAAK,uBAAuB;wBACtC,KAAK,CAAC,IAAI,KAAK,wBAAwB;wBACvC,KAAK,CAAC,IAAI,KAAK,mBAAmB;wBAClC,KAAK,CAAC,IAAI,KAAK,wBAAwB;wBACvC,KAAK,CAAC,IAAI,KAAK,gCAAgC;wBAC/C,KAAK,CAAC,IAAI,KAAK,0BAA0B;wBACzC,KAAK,CAAC,IAAI,KAAK,8BAA8B;wBAC7C,KAAK,CAAC,IAAI,KAAK,4BAA4B;wBAC3C,KAAK,CAAC,IAAI,KAAK,2BAA2B,EAC1C,CAAC;wBACD,MAAM,KAAK,CAAC;oBACd,CAAC;gBACH,CAAC;gBAED,0CAA0C;gBAC1C,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBACjE,IAAI,YAAY,EAAE,CAAC;wBACjB,MAAM,IAAI,cAAc,CAAC,uBAAuB,EAAE,iDAAiD,CAAC,CAAC;oBACvG,CAAC;oBACD,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;wBACzB,MAAM,IAAI,cAAc,CAAC,mBAAmB,EAAE,2BAA2B,CAAC,CAAC;oBAC7E,CAAC;oBACD,MAAM,IAAI,cAAc,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;gBACrE,CAAC;gBAED,iDAAiD;gBACjD,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;oBACnE,MAAM,IAAI,cAAc,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;gBACrE,CAAC;gBAED,kDAAkD;gBAClD,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;oBAC/B,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,SAAS,CAAC;oBAC7C,YAAY,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;oBACrE,SAAS,GAAG,KAAK,CAAC;oBAElB,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;wBAC1B,UAAU,EAAE,CAAC;wBACb,SAAS;oBACX,CAAC;gBACH,CAAC;gBAED,8BAA8B;gBAC9B,IAAI,SAAS,IAAI,CAAC,CAAC,SAAS,YAAY,cAAc,CAAC,EAAE,CAAC;oBACxD,MAAM,IAAI,cAAc,CACtB,yBAAyB,EACzB,uBAAuB,UAAU,GAAG,CAAC,gBAAgB,iBAAiB,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAC5F,CAAC;gBACJ,CAAC;gBAED,MAAM,SAAS,IAAI,KAAK,CAAC;YAC3B,CAAC;oBAAS,CAAC;gBACT,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QAED,wCAAwC;QACxC,MAAM,SAAS,IAAI,IAAI,cAAc,CACnC,2BAA2B,EAC3B,uCAAuC,OAAO,CAAC,UAAU,EAAE,CAC5D,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,UAAU,aAAa,CAC1B,OAAwB,EACxB,IAA6B;QAE7B,uCAAuC;QACvC,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,IAAI,cAAc,CAAC,uBAAuB,EAAE,mCAAmC,CAAC,CAAC;QACzF,CAAC;QAED,qCAAqC;QACrC,IAAI,aAAa,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,cAAc,CACtB,wBAAwB,EACxB,qCAAqC,OAAO,CAAC,UAAU,EAAE,CAC1D,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAEpC,IAAI,CAAC;YACH,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,IAAI,cAAc,CAAC,uBAAuB,EAAE,mCAAmC,CAAC,CAAC;YACzF,CAAC;YAED,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAE7D,+BAA+B;YAC/B,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAE5B,0BAA0B;YAC1B,MAAM,eAAe,GAAG,oBAAoB,CAAC,IAAI,CAAC,MAAM,EAAE,4BAA4B,EAAE,UAAU,CAAC,CAAC;YAEpG,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE;gBAC5C,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC;gBACtC,MAAM,EAAE,eAAe;aACxB,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,WAAW,CAAC;gBAC/C,YAAY,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBACjF,MAAM,IAAI,cAAc,CACtB,0BAA0B,EAC1B,YAAY,OAAO,CAAC,UAAU,oBAAoB,QAAQ,CAAC,MAAM,wBAAwB,CAC1F,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnB,MAAM,IAAI,cAAc,CACtB,wBAAwB,EACxB,gCAAgC,CACjC,CAAC;YACJ,CAAC;YAED,yCAAyC;YACzC,4DAA4D;YAC5D,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;YAE3E,uEAAuE;YACvE,MAAM,OAAO,GAAG,WAAW,CAAC;YAE5B,KAAK,SAAS,CAAC,CAAC,aAAa;gBAC3B,IAAI,CAAC;oBACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;wBAC9C,2BAA2B;wBAC3B,IAAI,KAAK,CAAC,KAAK,EAAE,GAAG,OAAO,GAAG,uBAAuB,EAAE,CAAC;4BACtD,MAAM,IAAI,cAAc,CACtB,gCAAgC,EAChC,qCAAqC,uBAAuB,WAAW,CACxE,CAAC;wBACJ,CAAC;wBACD,MAAM,KAAK,CAAC;oBACd,CAAC;oBACD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC;oBACzC,YAAY,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;gBACrD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC;oBACzC,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACnE,YAAY,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;oBACzD,MAAM,KAAK,CAAC;gBACd,CAAC;wBAAS,CAAC;oBACT,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBACzC,CAAC;YACH,CAAC;YAED,OAAO;gBACL,MAAM,EAAE,aAAa,EAAE;gBACvB,eAAe,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE;gBACrD,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,OAAO;aAC1C,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAEvC,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;gBACpC,MAAM,KAAK,CAAC;YACd,CAAC;YAED,IAAI,KAAK,YAAY,YAAY,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC,EAAE,CAAC;gBACpG,IAAI,YAAY,EAAE,CAAC;oBACjB,MAAM,IAAI,cAAc,CAAC,uBAAuB,EAAE,gDAAgD,CAAC,CAAC;gBACtG,CAAC;gBACD,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;oBACzB,MAAM,IAAI,cAAc,CAAC,mBAAmB,EAAE,0BAA0B,CAAC,CAAC;gBAC5E,CAAC;gBACD,MAAM,IAAI,cAAc,CAAC,8BAA8B,EAAE,6CAA6C,CAAC,CAAC;YAC1G,CAAC;YAED,MAAM,IAAI,cAAc,CACtB,yBAAyB,EACzB,sCAAsC,iBAAiB,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAClH,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,SAAS,QAAQ;QACf,YAAY,GAAG,IAAI,CAAC;QACpB,KAAK,MAAM,UAAU,IAAI,mBAAmB,EAAE,CAAC;YAC7C,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QACD,mBAAmB,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,MAAM,GAAoB;QAC9B,OAAO;QACP,aAAa;QACb,QAAQ;KACT,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,kBAAkB;AAClB,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,CAAC;AAChG,OAAO,EAAE,4BAA4B,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,CAAC"}

package/dist/substrate/transport/transport_types.d.ts

@@ -0,0 +1,207 @@
+/**
+ * Transport layer types for LLM HTTP communication.
+ * S ref: §25.4 (LLM Gateway), I-01 (no SDK deps), I-04 (provider independence)
+ *
+ * Phase: 5A (Sprint 5A — Shared Transport Infrastructure)
+ * Implements: All composition types for the transport engine and provider adapters.
+ *
+ * This file is TYPES ONLY — no runtime logic.
+ *
+ * Design Source: Phase 5 Design Source Output 2 (Type Architecture)
+ */
+import type { TimeProvider } from '../../kernel/interfaces/time.js';
+import type { LlmRequest, LlmResponse, LlmStreamChunk } from '../interfaces/substrate.js';
+/**
+ * Transport-layer error codes. Each maps to a specific failure scenario.
+ * S ref: §25.4, FM-06 (provider dependency), FM-12 (failover cascade)
+ */
+export type TransportErrorCode = 'TRANSPORT_TIMEOUT' | 'TRANSPORT_RETRY_EXHAUSTED' | 'TRANSPORT_CIRCUIT_OPEN' | 'TRANSPORT_RESPONSE_TOO_LARGE' | 'TRANSPORT_JSON_PARSE_ERROR' | 'TRANSPORT_TLS_REQUIRED' | 'TRANSPORT_PROVIDER_ERROR' | 'TRANSPORT_NETWORK_ERROR' | 'TRANSPORT_ABORTED' | 'TRANSPORT_STREAM_ERROR' | 'TRANSPORT_RETRY_AFTER_TOO_LONG' | 'GATEWAY_SHUTTING_DOWN' | 'TRANSPORT_MISSING_API_KEY' | 'TRANSPORT_FIRST_BYTE_TIMEOUT' | 'TRANSPORT_STALL_DETECTED' | 'TRANSPORT_STREAM_TOTAL_TIMEOUT' | 'TRANSPORT_SSE_LINE_TOO_LONG' | 'TRANSPORT_SSE_MAX_EVENTS' | 'TRANSPORT_NDJSON_LINE_TOO_LONG';
+/**
+ * A parsed Server-Sent Event.
+ * S ref: §27 (streaming protocol)
+ */
+export interface SSEEvent {
+    /** The event type field (empty string if not specified) */
+    readonly event: string;
+    /** The data field (may span multiple lines, joined with \n) */
+    readonly data: string;
+    /** The id field (if present) */
+    readonly id?: string;
+    /** The retry field in milliseconds (if present) */
+    readonly retry?: number;
+}
+/**
+ * A provider-specific HTTP request, built by the adapter.
+ * S ref: I-01 (fetch-based, no SDK), I-04 (provider independence)
+ */
+export interface TransportHttpRequest {
+    /** Full URL for the HTTP request */
+    readonly url: string;
+    /** HTTP method (always POST for LLM APIs) */
+    readonly method: 'POST';
+    /** HTTP headers (includes auth, content-type, provider-specific headers) */
+    readonly headers: Readonly<Record<string, string>>;
+    /** JSON-serializable request body */
+    readonly body: Record<string, unknown>;
+    /** Whether this request expects a streaming response */
+    readonly stream: boolean;
+}
+/**
+ * Raw HTTP response before provider-specific parsing.
+ */
+export interface TransportHttpResponse {
+    /** HTTP status code */
+    readonly status: number;
+    /** HTTP headers */
+    readonly headers: Readonly<Record<string, string>>;
+    /** Response body as string (for non-streaming) */
+    readonly body: string;
+}
+/**
+ * Deliberation metrics extracted from provider responses.
+ * Tracks thinking/reasoning token usage for cost accounting.
+ * S ref: §25.6 (resource accounting — deliberation columns)
+ *
+ * CR-5: The Anthropic adapter handles thinking blocks → deliberation.
+ *       OpenAI reasoning_tokens subtraction is NOT included (that is OpenAI-specific).
+ */
+export interface DeliberationMetrics {
+    /** Number of deliberation/thinking tokens consumed */
+    readonly deliberationTokens: number;
+    /** Whether deliberation data is authoritative (from provider) or estimated */
+    readonly accountingMode: 'provider_authoritative' | 'estimated';
+    /** Raw provider-reported thinking token count, or null if not applicable */
+    readonly providerReportedThinkingTokens: number | null;
+}
+/**
+ * Result from a non-streaming transport execution.
+ * Includes both the LLM response and transport-level metadata.
+ */
+export interface TransportResult {
+    /** The parsed LLM response */
+    readonly response: LlmResponse;
+    /** Deliberation metrics for accounting */
+    readonly deliberation: DeliberationMetrics;
+    /** Number of retry attempts made */
+    readonly retryCount: number;
+    /** Total wall clock time including retries */
+    readonly totalMs: number;
+}
+/**
+ * Result from a streaming transport execution.
+ * The stream is an async iterable of LlmStreamChunks.
+ */
+export interface TransportStreamResult {
+    /** The async iterable stream of chunks */
+    readonly stream: AsyncIterable<LlmStreamChunk>;
+    /** Deliberation metrics — populated after stream completes */
+    readonly getDeliberation: () => DeliberationMetrics;
+    /** Total wall clock time — populated after stream completes */
+    readonly getTotalMs: () => number;
+}
+/**
+ * Provider adapter interface. Each provider (Anthropic, OpenAI, Ollama)
+ * implements this interface to translate between Limen's internal
+ * LlmRequest/LlmResponse and the provider's HTTP API.
+ *
+ * S ref: I-04 (provider independence), I-01 (no SDK deps)
+ *
+ * Key constraints:
+ * - C-SEC-P5-01/02: API key NEVER appears in logs or error messages
+ * - C-SEC-P5-22: Provider output is untrusted input
+ * - C-SEC-P5-23: Tool call structural validation
+ * - CR-1 / C-SEC-P5-04: API key resolved ONCE at creation, NOT per-request
+ */
+export interface ProviderAdapter {
+    /** Provider identifier (e.g., 'anthropic', 'openai', 'ollama') */
+    readonly providerId: string;
+    /**
+     * Build provider-specific HTTP request from Limen LlmRequest.
+     * API key is embedded in headers at this point (resolved at adapter creation).
+     */
+    buildRequest(request: LlmRequest, streaming: boolean): TransportHttpRequest;
+    /**
+     * Parse provider-specific HTTP response into Limen LlmResponse.
+     * C-SEC-P5-22: Provider output is untrusted — validate structure.
+     * C-SEC-P5-23: Tool calls must have non-empty id, valid name, object input.
+     */
+    parseResponse(httpResponse: TransportHttpResponse): TransportResult;
+    /**
+     * Parse a streaming response into an async iterable of LlmStreamChunks.
+     * Thinking blocks are aggregated internally and NOT emitted as LlmStreamChunk.
+     * Deliberation metrics are available via getDeliberation() after stream completes.
+     */
+    parseStream(body: ReadableStream<Uint8Array>, signal?: AbortSignal): TransportStreamResult;
+    /** Whether this adapter supports streaming responses */
+    supportsStreaming(): boolean;
+    /**
+     * Whether the given HTTP status code is retryable for this provider.
+     * S ref: FM-12 (failover), DL-1 (circuit breaker)
+     */
+    isRetryableStatus(status: number): boolean;
+}
+/**
+ * Transport engine options for a single request.
+ */
+export interface TransportExecuteOptions {
+    /** The original LLM request (for logging and metadata) */
+    readonly request: LlmRequest;
+    /** Optional caller-provided abort signal */
+    readonly signal?: AbortSignal;
+}
+/**
+ * Transport engine — executes HTTP requests against LLM providers.
+ * Handles retry logic, circuit breaker integration, timeouts, and health updates.
+ *
+ * S ref: §25.4 (LLM Gateway), I-01 (fetch-based), I-04 (provider independence)
+ *
+ * Key behaviors:
+ * - Non-streaming: 2 retries (3 total), 120s duration cap, Retry-After parsing
+ * - Streaming: NO retry after first byte, 30s first-byte timeout, 30s stall, 10min total
+ * - Circuit breaker checked BEFORE each attempt (C-SEC-P5-15)
+ * - Response size limit 10MB (C-SEC-P5-06)
+ * - TLS enforcement for non-local URLs (C-SEC-P5-19)
+ * - Shutdown support via AbortController tracking (C-SEC-P5-20)
+ */
+export interface TransportEngine {
+    /**
+     * Execute a non-streaming LLM request with retry logic.
+     * Returns TransportResult on success, or rejects with a transport error.
+     */
+    execute(adapter: ProviderAdapter, options: TransportExecuteOptions): Promise<TransportResult>;
+    /**
+     * Execute a streaming LLM request.
+     * No retry after first byte received.
+     * Returns TransportStreamResult on success, or rejects with a transport error.
+     */
+    executeStream(adapter: ProviderAdapter, options: TransportExecuteOptions): Promise<TransportStreamResult>;
+    /**
+     * Initiate graceful shutdown. All in-flight requests are aborted
+     * with GATEWAY_SHUTTING_DOWN. New requests are rejected immediately.
+     * C-SEC-P5-20: Shutdown support.
+     */
+    shutdown(): void;
+}
+/**
+ * Function type for updating provider health after each request attempt.
+ * S ref: DL-1 (circuit breaker), §25.4 (provider health tracking)
+ */
+export type UpdateProviderHealthFn = (providerId: string, success: boolean, latencyMs: number, errorMessage?: string) => void;
+/**
+ * Function type for checking circuit breaker state before a request.
+ * Returns true if the circuit is OPEN (request should NOT proceed).
+ * S ref: C-SEC-P5-15, DL-1
+ */
+export type IsCircuitOpenFn = (providerId: string) => boolean;
+/**
+ * Options for creating a transport engine instance.
+ */
+export interface TransportEngineOptions {
+    /** Time provider for clock injection (Hard Stop #7) */
+    readonly time?: TimeProvider;
+    /** Function to update provider health after attempts */
+    readonly updateHealth?: UpdateProviderHealthFn;
+    /** Function to check circuit breaker state */
+    readonly isCircuitOpen?: IsCircuitOpenFn;
+}
+//# sourceMappingURL=transport_types.d.ts.map