octoflow-core 1.0.0

package/dist/adapters/transport/a2a-client-helpers.js

@@ -0,0 +1,95 @@
+import crypto from "node:crypto";
+import { A2AClientError } from "./client-errors.js";
+async function* consumeSse(response) {
+  if (!response.body) {
+    throw new A2AClientError("SSE_CONNECTION_FAILED", "Response body is null");
+  }
+  const reader = response.body.getReader();
+  const decoder = new TextDecoder();
+  let buffer = "";
+  let currentId;
+  try {
+    while (true) {
+      const { done, value } = await reader.read();
+      if (done) break;
+      buffer += decoder.decode(value, { stream: true });
+      const events = buffer.split("\n\n");
+      buffer = events.pop() ?? "";
+      for (const raw of events) {
+        if (!raw.trim()) continue;
+        const lines = raw.split("\n");
+        let id;
+        const dataLines = [];
+        for (const line of lines) {
+          if (line.startsWith("id: ")) id = line.slice(4);
+          if (line.startsWith("data: ")) dataLines.push(line.slice(6));
+        }
+        if (id) currentId = id;
+        const data = dataLines.join("\n");
+        if (data) yield { id: currentId, data };
+      }
+    }
+  } finally {
+    reader.releaseLock();
+  }
+}
+function delay(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+function buildUserMessage(prompt) {
+  return {
+    messageId: crypto.randomUUID(),
+    role: "ROLE_USER",
+    parts: [{ text: prompt }]
+  };
+}
+function isTextPart(part) {
+  return typeof part.text === "string";
+}
+function extractTextFromMessage(message) {
+  if (!message?.parts) return "";
+  return message.parts.filter(isTextPart).map((part) => part.text).join("");
+}
+function extractTextFromArtifact(artifact) {
+  if (!artifact?.parts) return "";
+  return artifact.parts.filter(isTextPart).map((part) => part.text).join("");
+}
+function extractTextFromSendResponse(result) {
+  return result.message ? extractTextFromMessage(result.message) : extractTextFromMessage(result.task?.status.message);
+}
+function extractContextIdFromSendResponse(result) {
+  return result.message?.contextId ?? result.task?.contextId ?? null;
+}
+function isTerminalState(state) {
+  return state === "TASK_STATE_COMPLETED" || state === "TASK_STATE_CANCELED" || state === "TASK_STATE_FAILED" || state === "TASK_STATE_REJECTED" || state === "TASK_STATE_AUTH_REQUIRED";
+}
+function exitCodeForState(state) {
+  return state == null || state === "TASK_STATE_COMPLETED" ? 0 : 1;
+}
+function extractTaskIdFromStream(result) {
+  return result.task?.id ?? result.statusUpdate?.taskId ?? result.artifactUpdate?.taskId;
+}
+function extractContextIdFromStream(result) {
+  return result.message?.contextId ?? result.task?.contextId ?? result.statusUpdate?.contextId ?? result.artifactUpdate?.contextId;
+}
+function extractStateFromStream(result) {
+  if (result.message) return "TASK_STATE_COMPLETED";
+  return result.task?.status.state ?? result.statusUpdate?.status.state;
+}
+function extractTextFromStream(result) {
+  return extractTextFromMessage(result.message) || extractTextFromMessage(result.task?.status.message) || extractTextFromMessage(result.statusUpdate?.status.message) || extractTextFromArtifact(result.artifactUpdate?.artifact);
+}
+export {
+  buildUserMessage,
+  consumeSse,
+  delay,
+  exitCodeForState,
+  extractContextIdFromSendResponse,
+  extractContextIdFromStream,
+  extractStateFromStream,
+  extractTaskIdFromStream,
+  extractTextFromSendResponse,
+  extractTextFromStream,
+  isTerminalState
+};
+//# sourceMappingURL=a2a-client-helpers.js.map

package/dist/adapters/transport/a2a-client-helpers.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/adapters/transport/a2a-client-helpers.ts"],
+  "sourcesContent": ["import crypto from 'node:crypto';\n\nimport type { RunOptions } from '../../domain/core-client.js';\nimport { A2AClientError } from './client-errors.js';\nimport type {\n  A2AArtifact,\n  A2AMessage,\n  A2APart,\n  A2ASendMessageResponse,\n  A2AStreamResponse,\n  A2ATaskState,\n} from './wire-types.js';\ninterface SseEvent {\n  id?: string;\n  data: string;\n}\n\nexport async function* consumeSse(\n  response: Response\n): AsyncGenerator<SseEvent> {\n  if (!response.body) {\n    throw new A2AClientError('SSE_CONNECTION_FAILED', 'Response body is null');\n  }\n\n  const reader = response.body.getReader();\n  const decoder = new TextDecoder();\n  let buffer = '';\n  let currentId: string | undefined;\n\n  try {\n    while (true) {\n      const { done, value } = await reader.read();\n      if (done) break;\n      buffer += decoder.decode(value, { stream: true });\n\n      const events = buffer.split('\\n\\n');\n      buffer = events.pop() ?? '';\n\n      for (const raw of events) {\n        if (!raw.trim()) continue;\n        const lines = raw.split('\\n');\n        let id: string | undefined;\n        const dataLines: string[] = [];\n        for (const line of lines) {\n          if (line.startsWith('id: ')) id = line.slice(4);\n          if (line.startsWith('data: ')) dataLines.push(line.slice(6));\n        }\n        if (id) currentId = id;\n        const data = dataLines.join('\\n');\n        if (data) yield { id: currentId, data };\n      }\n    }\n  } finally {\n    reader.releaseLock();\n  }\n}\nexport type A2AJsonRpcPayload<T> = {\n  error?: Record<string, unknown>;\n  result?: T;\n};\n\nexport type A2ARunOptions = RunOptions & {\n  contextId?: string;\n};\nexport function delay(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\nexport function buildUserMessage(prompt: string): A2AMessage {\n  return {\n    messageId: crypto.randomUUID(),\n    role: 'ROLE_USER',\n    parts: [{ text: prompt }],\n  };\n}\n\nfunction isTextPart(part: A2APart): part is A2APart & { text: string } {\n  return typeof part.text === 'string';\n}\n\nfunction extractTextFromMessage(message?: A2AMessage): string {\n  if (!message?.parts) return '';\n  return message.parts\n    .filter(isTextPart)\n    .map((part) => part.text)\n    .join('');\n}\n\nfunction extractTextFromArtifact(artifact?: A2AArtifact): string {\n  if (!artifact?.parts) return '';\n  return artifact.parts\n    .filter(isTextPart)\n    .map((part) => part.text)\n    .join('');\n}\n\nexport function extractTextFromSendResponse(\n  result: A2ASendMessageResponse\n): string {\n  return result.message\n    ? extractTextFromMessage(result.message)\n    : extractTextFromMessage(result.task?.status.message);\n}\n\nexport function extractContextIdFromSendResponse(\n  result: A2ASendMessageResponse\n): string | null {\n  return result.message?.contextId ?? result.task?.contextId ?? null;\n}\n\nexport function isTerminalState(state: A2ATaskState | undefined): boolean {\n  return (\n    state === 'TASK_STATE_COMPLETED' ||\n    state === 'TASK_STATE_CANCELED' ||\n    state === 'TASK_STATE_FAILED' ||\n    state === 'TASK_STATE_REJECTED' ||\n    state === 'TASK_STATE_AUTH_REQUIRED'\n  );\n}\n\nexport function exitCodeForState(state: A2ATaskState | undefined): number {\n  return state == null || state === 'TASK_STATE_COMPLETED' ? 0 : 1;\n}\n\nexport function extractTaskIdFromStream(\n  result: A2AStreamResponse\n): string | undefined {\n  return (\n    result.task?.id ??\n    result.statusUpdate?.taskId ??\n    result.artifactUpdate?.taskId\n  );\n}\n\nexport function extractContextIdFromStream(\n  result: A2AStreamResponse\n): string | undefined {\n  return (\n    result.message?.contextId ??\n    result.task?.contextId ??\n    result.statusUpdate?.contextId ??\n    result.artifactUpdate?.contextId\n  );\n}\n\nexport function extractStateFromStream(\n  result: A2AStreamResponse\n): A2ATaskState | undefined {\n  if (result.message) return 'TASK_STATE_COMPLETED';\n  return result.task?.status.state ?? result.statusUpdate?.status.state;\n}\n\nexport function extractTextFromStream(result: A2AStreamResponse): string {\n  return (\n    extractTextFromMessage(result.message) ||\n    extractTextFromMessage(result.task?.status.message) ||\n    extractTextFromMessage(result.statusUpdate?.status.message) ||\n    extractTextFromArtifact(result.artifactUpdate?.artifact)\n  );\n}\n"],
+  "mappings": "AAAA,OAAO,YAAY;AAGnB,SAAS,sBAAsB;AAc/B,gBAAuB,WACrB,UAC0B;AAC1B,MAAI,CAAC,SAAS,MAAM;AAClB,UAAM,IAAI,eAAe,yBAAyB,uBAAuB;AAAA,EAC3E;AAEA,QAAM,SAAS,SAAS,KAAK,UAAU;AACvC,QAAM,UAAU,IAAI,YAAY;AAChC,MAAI,SAAS;AACb,MAAI;AAEJ,MAAI;AACF,WAAO,MAAM;AACX,YAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,UAAI,KAAM;AACV,gBAAU,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;AAEhD,YAAM,SAAS,OAAO,MAAM,MAAM;AAClC,eAAS,OAAO,IAAI,KAAK;AAEzB,iBAAW,OAAO,QAAQ;AACxB,YAAI,CAAC,IAAI,KAAK,EAAG;AACjB,cAAM,QAAQ,IAAI,MAAM,IAAI;AAC5B,YAAI;AACJ,cAAM,YAAsB,CAAC;AAC7B,mBAAW,QAAQ,OAAO;AACxB,cAAI,KAAK,WAAW,MAAM,EAAG,MAAK,KAAK,MAAM,CAAC;AAC9C,cAAI,KAAK,WAAW,QAAQ,EAAG,WAAU,KAAK,KAAK,MAAM,CAAC,CAAC;AAAA,QAC7D;AACA,YAAI,GAAI,aAAY;AACpB,cAAM,OAAO,UAAU,KAAK,IAAI;AAChC,YAAI,KAAM,OAAM,EAAE,IAAI,WAAW,KAAK;AAAA,MACxC;AAAA,IACF;AAAA,EACF,UAAE;AACA,WAAO,YAAY;AAAA,EACrB;AACF;AASO,SAAS,MAAM,IAA2B;AAC/C,SAAO,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AACzD;AAEO,SAAS,iBAAiB,QAA4B;AAC3D,SAAO;AAAA,IACL,WAAW,OAAO,WAAW;AAAA,IAC7B,MAAM;AAAA,IACN,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC;AAAA,EAC1B;AACF;AAEA,SAAS,WAAW,MAAmD;AACrE,SAAO,OAAO,KAAK,SAAS;AAC9B;AAEA,SAAS,uBAAuB,SAA8B;AAC5D,MAAI,CAAC,SAAS,MAAO,QAAO;AAC5B,SAAO,QAAQ,MACZ,OAAO,UAAU,EACjB,IAAI,CAAC,SAAS,KAAK,IAAI,EACvB,KAAK,EAAE;AACZ;AAEA,SAAS,wBAAwB,UAAgC;AAC/D,MAAI,CAAC,UAAU,MAAO,QAAO;AAC7B,SAAO,SAAS,MACb,OAAO,UAAU,EACjB,IAAI,CAAC,SAAS,KAAK,IAAI,EACvB,KAAK,EAAE;AACZ;AAEO,SAAS,4BACd,QACQ;AACR,SAAO,OAAO,UACV,uBAAuB,OAAO,OAAO,IACrC,uBAAuB,OAAO,MAAM,OAAO,OAAO;AACxD;AAEO,SAAS,iCACd,QACe;AACf,SAAO,OAAO,SAAS,aAAa,OAAO,MAAM,aAAa;AAChE;AAEO,SAAS,gBAAgB,OAA0C;AACxE,SACE,UAAU,0BACV,UAAU,yBACV,UAAU,uBACV,UAAU,yBACV,UAAU;AAEd;AAEO,SAAS,iBAAiB,OAAyC;AACxE,SAAO,SAAS,QAAQ,UAAU,yBAAyB,IAAI;AACjE;AAEO,SAAS,wBACd,QACoB;AACpB,SACE,OAAO,MAAM,MACb,OAAO,cAAc,UACrB,OAAO,gBAAgB;AAE3B;AAEO,SAAS,2BACd,QACoB;AACpB,SACE,OAAO,SAAS,aAChB,OAAO,MAAM,aACb,OAAO,cAAc,aACrB,OAAO,gBAAgB;AAE3B;AAEO,SAAS,uBACd,QAC0B;AAC1B,MAAI,OAAO,QAAS,QAAO;AAC3B,SAAO,OAAO,MAAM,OAAO,SAAS,OAAO,cAAc,OAAO;AAClE;AAEO,SAAS,sBAAsB,QAAmC;AACvE,SACE,uBAAuB,OAAO,OAAO,KACrC,uBAAuB,OAAO,MAAM,OAAO,OAAO,KAClD,uBAAuB,OAAO,cAAc,OAAO,OAAO,KAC1D,wBAAwB,OAAO,gBAAgB,QAAQ;AAE3D;",
+  "names": []
+}

package/dist/adapters/transport/a2a-params.d.ts

@@ -0,0 +1,32 @@
+import type { IncomingMessage } from 'node:http';
+import type { OctoFlowConfig, ResolvedOctoFlowConfig } from '../../config/config.js';
+import type { BridgeListTasksOptions, BridgeTaskSnapshotOptions } from '../../domain/bridge-api.js';
+import type { AgentCard, Message } from '../../domain/core-task.js';
+import type { A2AAgentCard, A2ATaskPushNotificationConfig } from './wire.js';
+export declare function getTaskId(params: Record<string, unknown> | undefined): string;
+export declare function toMessage(params: Record<string, unknown> | undefined): Message;
+export declare function toInteger(value: unknown): number | undefined;
+export declare function toTaskSnapshotOptions(params: Record<string, unknown> | undefined): BridgeTaskSnapshotOptions;
+export declare function getStreamAfter(req: IncomingMessage, params: Record<string, unknown> | undefined): string | undefined;
+export declare function toSendParams(params: Record<string, unknown> | undefined): {
+    contextId?: string;
+    historyLength?: number;
+    message: Message;
+    metadata?: Record<string, unknown>;
+    pushNotificationConfig?: A2ATaskPushNotificationConfig;
+    returnImmediately?: boolean;
+    taskId?: string;
+};
+export declare function toListParams(params: Record<string, unknown> | undefined, tenant?: string): BridgeListTasksOptions;
+export declare function getTenant(req: IncomingMessage, params: Record<string, unknown> | undefined): string | undefined;
+export declare function getContextId(params: Record<string, unknown> | undefined, required?: boolean): string | undefined;
+export declare function buildRequestBaseUrl(req: IncomingMessage, fallbackUrl: string): string;
+interface A2AServerCardOptions {
+    agentCard?: Partial<AgentCard>;
+    config?: OctoFlowConfig;
+    host?: string;
+    port?: number;
+}
+export declare function buildAgentCard(options: A2AServerCardOptions | undefined, resolvedConfig: ResolvedOctoFlowConfig): A2AAgentCard;
+export {};
+//# sourceMappingURL=a2a-params.d.ts.map

package/dist/adapters/transport/a2a-params.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"a2a-params.d.ts","sourceRoot":"","sources":["../../../src/adapters/transport/a2a-params.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAEjD,OAAO,KAAK,EACV,cAAc,EACd,sBAAsB,EACvB,MAAM,wBAAwB,CAAC;AAKhC,OAAO,KAAK,EACV,sBAAsB,EACtB,yBAAyB,EAC1B,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AAEpE,OAAO,KAAK,EAAE,YAAY,EAAE,6BAA6B,EAAE,MAAM,WAAW,CAAC;AAO7E,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,MAAM,CAM7E;AAED,wBAAgB,SAAS,CACvB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAC1C,OAAO,CAMT;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAQ5D;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAC1C,yBAAyB,CAW3B;AAED,wBAAgB,cAAc,CAC5B,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAC1C,MAAM,GAAG,SAAS,CAUpB;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,sBAAsB,CAAC,EAAE,6BAA6B,CAAC;IACvD,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAwBA;AAsBD,wBAAgB,YAAY,CAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC3C,MAAM,CAAC,EAAE,MAAM,GACd,sBAAsB,CA6BxB;AAED,wBAAgB,SAAS,CACvB,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAC1C,MAAM,GAAG,SAAS,CASpB;AAED,wBAAgB,YAAY,CAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC3C,QAAQ,UAAQ,GACf,MAAM,GAAG,SAAS,CAOpB;AAED,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,eAAe,EACpB,WAAW,EAAE,MAAM,GAClB,MAAM,CASR;AAED,UAAU,oBAAoB;IAC5B,SAAS,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/B,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,cAAc,CAC5B,OAAO,EAAE,oBAAoB,YAAK,EAClC,cAAc,EAAE,sBAAsB,GACrC,YAAY,CAqEd"}

package/dist/adapters/transport/a2a-params.js

@@ -0,0 +1,176 @@
+import {
+  resolveAgentCardConfig,
+  resolveServerConfig
+} from "../../config/config.js";
+import { RpcFailure } from "./jsonrpc-wire.js";
+import {
+  fromA2AInputMessage,
+  fromA2ATaskState,
+  toA2AAgentCard
+} from "./wire.js";
+function getTaskId(params) {
+  const taskId = params?.taskId ?? params?.id;
+  if (typeof taskId !== "string" || taskId.length === 0) {
+    throw new RpcFailure(400, -32602, "taskId is required");
+  }
+  return taskId;
+}
+function toMessage(params) {
+  const message = params?.message;
+  if (typeof message === "object" && message !== null) {
+    return fromA2AInputMessage(message);
+  }
+  throw new RpcFailure(400, -32602, "structured message is required");
+}
+function toInteger(value) {
+  if (typeof value === "number" && Number.isFinite(value)) {
+    return Math.trunc(value);
+  }
+  if (typeof value === "string" && /^-?\d+$/.test(value)) {
+    return Number.parseInt(value, 10);
+  }
+  return void 0;
+}
+function toTaskSnapshotOptions(params) {
+  const historyLength = toInteger(params?.historyLength);
+  return {
+    contextId: typeof params?.contextId === "string" ? params.contextId : void 0,
+    historyLength,
+    includeArtifacts: typeof params?.includeArtifacts === "boolean" ? params.includeArtifacts : void 0
+  };
+}
+function getStreamAfter(req, params) {
+  const candidates = [params?.after, params?.afterEventId, params?.lastEventId];
+  for (const candidate of candidates) {
+    if (typeof candidate === "string" && candidate.length > 0) return candidate;
+  }
+  const header = req.headers["last-event-id"];
+  if (typeof header === "string" && header.length > 0) return header;
+  return Array.isArray(header) ? header.find((value) => typeof value === "string" && value.length > 0) : void 0;
+}
+function toSendParams(params) {
+  const configuration = typeof params?.configuration === "object" && params.configuration !== null ? params.configuration : void 0;
+  return {
+    message: toMessage(params),
+    contextId: typeof params?.contextId === "string" ? params.contextId : void 0,
+    taskId: typeof params?.taskId === "string" ? params.taskId : void 0,
+    historyLength: toInteger(configuration?.historyLength),
+    metadata: typeof params?.metadata === "object" && params.metadata !== null ? params.metadata : void 0,
+    pushNotificationConfig: toTaskPushNotificationConfig(
+      params?.taskPushNotificationConfig ?? configuration?.taskPushNotificationConfig
+    ),
+    returnImmediately: typeof configuration?.returnImmediately === "boolean" ? configuration.returnImmediately : false
+  };
+}
+function toTaskPushNotificationConfig(input) {
+  if (typeof input !== "object" || input === null) return void 0;
+  const config = input;
+  const pushNotificationConfig = config.pushNotificationConfig;
+  if (typeof config.taskId !== "string" || typeof pushNotificationConfig !== "object" || pushNotificationConfig === null) {
+    return void 0;
+  }
+  return {
+    taskId: config.taskId,
+    pushNotificationConfig
+  };
+}
+function toListParams(params, tenant) {
+  const rawStatus = params?.status ?? params?.state;
+  const state = Array.isArray(rawStatus) ? rawStatus.map((item) => fromA2ATaskState(item)) : rawStatus != null ? fromA2ATaskState(rawStatus) : void 0;
+  return {
+    contextId: typeof params?.contextId === "string" ? params.contextId : void 0,
+    cursor: typeof params?.pageToken === "string" ? params.pageToken : typeof params?.cursor === "string" ? params.cursor : void 0,
+    historyLength: toInteger(params?.historyLength),
+    includeArtifacts: typeof params?.includeArtifacts === "boolean" ? params.includeArtifacts : void 0,
+    limit: toInteger(params?.pageSize ?? params?.limit),
+    state,
+    statusTimestampAfter: typeof params?.statusTimestampAfter === "string" ? params.statusTimestampAfter : void 0,
+    tenant
+  };
+}
+function getTenant(req, params) {
+  if (typeof params?.tenant === "string" && params.tenant.length > 0) {
+    return params.tenant;
+  }
+  const rawHeader = req.headers["x-tenant-id"];
+  const headerValue = Array.isArray(rawHeader) ? rawHeader[0] : rawHeader;
+  return typeof headerValue === "string" && headerValue.length > 0 ? headerValue : void 0;
+}
+function getContextId(params, required = false) {
+  const contextId = typeof params?.contextId === "string" ? params.contextId : void 0;
+  if (required && !contextId) {
+    throw new RpcFailure(400, -32602, "contextId is required");
+  }
+  return contextId;
+}
+function buildRequestBaseUrl(req, fallbackUrl) {
+  const host = req.headers.host;
+  if (!host) return fallbackUrl;
+  const protocol = "encrypted" in req.socket && req.socket.encrypted ? "https" : "http";
+  return `${protocol}://${host}`;
+}
+function buildAgentCard(options = {}, resolvedConfig) {
+  const serverConfig = resolveServerConfig(resolvedConfig);
+  const configCard = resolveAgentCardConfig(resolvedConfig);
+  const baseUrl = options.agentCard?.url ?? configCard.url ?? serverConfig.baseUrl ?? `http://${options.host ?? serverConfig.host}:${options.port ?? serverConfig.port}`;
+  let defaultSecuritySchemes;
+  let defaultSecurityRequirements;
+  if (serverConfig.auth.mode === "bearer") {
+    defaultSecuritySchemes = {
+      bearerAuth: {
+        httpAuthSecurityScheme: {
+          scheme: "Bearer",
+          description: "Bearer token required for A2A RPC access."
+        }
+      }
+    };
+    defaultSecurityRequirements = [{ schemes: { bearerAuth: [] } }];
+  } else if (serverConfig.auth.mode === "mtls") {
+    defaultSecuritySchemes = {
+      mtlsAuth: {
+        mtlsSecurityScheme: {
+          description: "Mutual TLS client certificate required for A2A RPC access."
+        }
+      }
+    };
+    defaultSecurityRequirements = [{ schemes: { mtlsAuth: [] } }];
+  }
+  return toA2AAgentCard({
+    name: options.agentCard?.name ?? configCard.name ?? "octoflow-core",
+    description: options.agentCard?.description ?? configCard.description,
+    version: options.agentCard?.version ?? configCard.version,
+    defaultInputModes: options.agentCard?.defaultInputModes ?? configCard.defaultInputModes ?? ["text/plain"],
+    defaultOutputModes: options.agentCard?.defaultOutputModes ?? configCard.defaultOutputModes ?? ["text/plain"],
+    supportedInterfaces: options.agentCard?.supportedInterfaces ?? configCard.supportedInterfaces ?? [
+      {
+        url: `${baseUrl}/rpc`,
+        protocolBinding: "JSONRPC",
+        protocolVersion: options.agentCard?.protocolVersion ?? configCard.protocolVersion ?? serverConfig.a2aVersion
+      }
+    ],
+    capabilities: {
+      streaming: true,
+      pushNotifications: true,
+      extendedAgentCard: true,
+      ...configCard.capabilities ?? {},
+      ...options.agentCard?.capabilities ?? {}
+    },
+    securitySchemes: options.agentCard?.securitySchemes ?? configCard.securitySchemes ?? defaultSecuritySchemes,
+    skills: options.agentCard?.skills ?? configCard.skills,
+    securityRequirements: options.agentCard?.securityRequirements ?? configCard.securityRequirements ?? defaultSecurityRequirements
+  });
+}
+export {
+  buildAgentCard,
+  buildRequestBaseUrl,
+  getContextId,
+  getStreamAfter,
+  getTaskId,
+  getTenant,
+  toInteger,
+  toListParams,
+  toMessage,
+  toSendParams,
+  toTaskSnapshotOptions
+};
+//# sourceMappingURL=a2a-params.js.map

package/dist/adapters/transport/a2a-params.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/adapters/transport/a2a-params.ts"],
+  "sourcesContent": ["import type { IncomingMessage } from 'node:http';\n\nimport type {\n  OctoFlowConfig,\n  ResolvedOctoFlowConfig,\n} from '../../config/config.js';\nimport {\n  resolveAgentCardConfig,\n  resolveServerConfig,\n} from '../../config/config.js';\nimport type {\n  BridgeListTasksOptions,\n  BridgeTaskSnapshotOptions,\n} from '../../domain/bridge-api.js';\nimport type { AgentCard, Message } from '../../domain/core-task.js';\nimport { RpcFailure } from './jsonrpc-wire.js';\nimport type { A2AAgentCard, A2ATaskPushNotificationConfig } from './wire.js';\nimport {\n  fromA2AInputMessage,\n  fromA2ATaskState,\n  toA2AAgentCard,\n} from './wire.js';\n\nexport function getTaskId(params: Record<string, unknown> | undefined): string {\n  const taskId = params?.taskId ?? params?.id;\n  if (typeof taskId !== 'string' || taskId.length === 0) {\n    throw new RpcFailure(400, -32602, 'taskId is required');\n  }\n  return taskId;\n}\n\nexport function toMessage(\n  params: Record<string, unknown> | undefined\n): Message {\n  const message = params?.message;\n  if (typeof message === 'object' && message !== null) {\n    return fromA2AInputMessage(message);\n  }\n  throw new RpcFailure(400, -32602, 'structured message is required');\n}\n\nexport function toInteger(value: unknown): number | undefined {\n  if (typeof value === 'number' && Number.isFinite(value)) {\n    return Math.trunc(value);\n  }\n  if (typeof value === 'string' && /^-?\\d+$/.test(value)) {\n    return Number.parseInt(value, 10);\n  }\n  return undefined;\n}\n\nexport function toTaskSnapshotOptions(\n  params: Record<string, unknown> | undefined\n): BridgeTaskSnapshotOptions {\n  const historyLength = toInteger(params?.historyLength);\n  return {\n    contextId:\n      typeof params?.contextId === 'string' ? params.contextId : undefined,\n    historyLength,\n    includeArtifacts:\n      typeof params?.includeArtifacts === 'boolean'\n        ? params.includeArtifacts\n        : undefined,\n  };\n}\n\nexport function getStreamAfter(\n  req: IncomingMessage,\n  params: Record<string, unknown> | undefined\n): string | undefined {\n  const candidates = [params?.after, params?.afterEventId, params?.lastEventId];\n  for (const candidate of candidates) {\n    if (typeof candidate === 'string' && candidate.length > 0) return candidate;\n  }\n  const header = req.headers['last-event-id'];\n  if (typeof header === 'string' && header.length > 0) return header;\n  return Array.isArray(header)\n    ? header.find((value) => typeof value === 'string' && value.length > 0)\n    : undefined;\n}\n\nexport function toSendParams(params: Record<string, unknown> | undefined): {\n  contextId?: string;\n  historyLength?: number;\n  message: Message;\n  metadata?: Record<string, unknown>;\n  pushNotificationConfig?: A2ATaskPushNotificationConfig;\n  returnImmediately?: boolean;\n  taskId?: string;\n} {\n  const configuration =\n    typeof params?.configuration === 'object' && params.configuration !== null\n      ? (params.configuration as Record<string, unknown>)\n      : undefined;\n  return {\n    message: toMessage(params),\n    contextId:\n      typeof params?.contextId === 'string' ? params.contextId : undefined,\n    taskId: typeof params?.taskId === 'string' ? params.taskId : undefined,\n    historyLength: toInteger(configuration?.historyLength),\n    metadata:\n      typeof params?.metadata === 'object' && params.metadata !== null\n        ? (params.metadata as Record<string, unknown>)\n        : undefined,\n    pushNotificationConfig: toTaskPushNotificationConfig(\n      params?.taskPushNotificationConfig ??\n        configuration?.taskPushNotificationConfig\n    ),\n    returnImmediately:\n      typeof configuration?.returnImmediately === 'boolean'\n        ? configuration.returnImmediately\n        : false,\n  };\n}\n\nfunction toTaskPushNotificationConfig(\n  input: unknown\n): A2ATaskPushNotificationConfig | undefined {\n  if (typeof input !== 'object' || input === null) return undefined;\n  const config = input as Record<string, unknown>;\n  const pushNotificationConfig = config.pushNotificationConfig;\n  if (\n    typeof config.taskId !== 'string' ||\n    typeof pushNotificationConfig !== 'object' ||\n    pushNotificationConfig === null\n  ) {\n    return undefined;\n  }\n  return {\n    taskId: config.taskId,\n    pushNotificationConfig:\n      pushNotificationConfig as A2ATaskPushNotificationConfig['pushNotificationConfig'],\n  };\n}\n\nexport function toListParams(\n  params: Record<string, unknown> | undefined,\n  tenant?: string\n): BridgeListTasksOptions {\n  const rawStatus = params?.status ?? params?.state;\n  const state = Array.isArray(rawStatus)\n    ? rawStatus.map((item) => fromA2ATaskState(item))\n    : rawStatus != null\n      ? fromA2ATaskState(rawStatus)\n      : undefined;\n  return {\n    contextId:\n      typeof params?.contextId === 'string' ? params.contextId : undefined,\n    cursor:\n      typeof params?.pageToken === 'string'\n        ? params.pageToken\n        : typeof params?.cursor === 'string'\n          ? params.cursor\n          : undefined,\n    historyLength: toInteger(params?.historyLength),\n    includeArtifacts:\n      typeof params?.includeArtifacts === 'boolean'\n        ? params.includeArtifacts\n        : undefined,\n    limit: toInteger(params?.pageSize ?? params?.limit),\n    state,\n    statusTimestampAfter:\n      typeof params?.statusTimestampAfter === 'string'\n        ? params.statusTimestampAfter\n        : undefined,\n    tenant,\n  };\n}\n\nexport function getTenant(\n  req: IncomingMessage,\n  params: Record<string, unknown> | undefined\n): string | undefined {\n  if (typeof params?.tenant === 'string' && params.tenant.length > 0) {\n    return params.tenant;\n  }\n  const rawHeader = req.headers['x-tenant-id'];\n  const headerValue = Array.isArray(rawHeader) ? rawHeader[0] : rawHeader;\n  return typeof headerValue === 'string' && headerValue.length > 0\n    ? headerValue\n    : undefined;\n}\n\nexport function getContextId(\n  params: Record<string, unknown> | undefined,\n  required = false\n): string | undefined {\n  const contextId =\n    typeof params?.contextId === 'string' ? params.contextId : undefined;\n  if (required && !contextId) {\n    throw new RpcFailure(400, -32602, 'contextId is required');\n  }\n  return contextId;\n}\n\nexport function buildRequestBaseUrl(\n  req: IncomingMessage,\n  fallbackUrl: string\n): string {\n  const host = req.headers.host;\n  if (!host) return fallbackUrl;\n  const protocol =\n    'encrypted' in req.socket &&\n    (req.socket as { encrypted?: boolean }).encrypted\n      ? 'https'\n      : 'http';\n  return `${protocol}://${host}`;\n}\n\ninterface A2AServerCardOptions {\n  agentCard?: Partial<AgentCard>;\n  config?: OctoFlowConfig;\n  host?: string;\n  port?: number;\n}\n\nexport function buildAgentCard(\n  options: A2AServerCardOptions = {},\n  resolvedConfig: ResolvedOctoFlowConfig\n): A2AAgentCard {\n  const serverConfig = resolveServerConfig(resolvedConfig);\n  const configCard = resolveAgentCardConfig(resolvedConfig);\n  const baseUrl =\n    options.agentCard?.url ??\n    configCard.url ??\n    serverConfig.baseUrl ??\n    `http://${options.host ?? serverConfig.host}:${options.port ?? serverConfig.port}`;\n  let defaultSecuritySchemes: AgentCard['securitySchemes'];\n  let defaultSecurityRequirements: AgentCard['securityRequirements'];\n\n  if (serverConfig.auth.mode === 'bearer') {\n    defaultSecuritySchemes = {\n      bearerAuth: {\n        httpAuthSecurityScheme: {\n          scheme: 'Bearer',\n          description: 'Bearer token required for A2A RPC access.',\n        },\n      },\n    };\n    defaultSecurityRequirements = [{ schemes: { bearerAuth: [] } }];\n  } else if (serverConfig.auth.mode === 'mtls') {\n    defaultSecuritySchemes = {\n      mtlsAuth: {\n        mtlsSecurityScheme: {\n          description:\n            'Mutual TLS client certificate required for A2A RPC access.',\n        },\n      },\n    };\n    defaultSecurityRequirements = [{ schemes: { mtlsAuth: [] } }];\n  }\n\n  return toA2AAgentCard({\n    name: options.agentCard?.name ?? configCard.name ?? 'octoflow-core',\n    description: options.agentCard?.description ?? configCard.description,\n    version: options.agentCard?.version ?? configCard.version,\n    defaultInputModes: options.agentCard?.defaultInputModes ??\n      configCard.defaultInputModes ?? ['text/plain'],\n    defaultOutputModes: options.agentCard?.defaultOutputModes ??\n      configCard.defaultOutputModes ?? ['text/plain'],\n    supportedInterfaces: options.agentCard?.supportedInterfaces ??\n      configCard.supportedInterfaces ?? [\n        {\n          url: `${baseUrl}/rpc`,\n          protocolBinding: 'JSONRPC',\n          protocolVersion:\n            options.agentCard?.protocolVersion ??\n            configCard.protocolVersion ??\n            serverConfig.a2aVersion,\n        },\n      ],\n    capabilities: {\n      streaming: true,\n      pushNotifications: true,\n      extendedAgentCard: true,\n      ...(configCard.capabilities ?? {}),\n      ...(options.agentCard?.capabilities ?? {}),\n    },\n    securitySchemes:\n      options.agentCard?.securitySchemes ??\n      configCard.securitySchemes ??\n      defaultSecuritySchemes,\n    skills: options.agentCard?.skills ?? configCard.skills,\n    securityRequirements:\n      options.agentCard?.securityRequirements ??\n      configCard.securityRequirements ??\n      defaultSecurityRequirements,\n  });\n}\n"],
+  "mappings": "AAMA;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAMP,SAAS,kBAAkB;AAE3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,SAAS,UAAU,QAAqD;AAC7E,QAAM,SAAS,QAAQ,UAAU,QAAQ;AACzC,MAAI,OAAO,WAAW,YAAY,OAAO,WAAW,GAAG;AACrD,UAAM,IAAI,WAAW,KAAK,QAAQ,oBAAoB;AAAA,EACxD;AACA,SAAO;AACT;AAEO,SAAS,UACd,QACS;AACT,QAAM,UAAU,QAAQ;AACxB,MAAI,OAAO,YAAY,YAAY,YAAY,MAAM;AACnD,WAAO,oBAAoB,OAAO;AAAA,EACpC;AACA,QAAM,IAAI,WAAW,KAAK,QAAQ,gCAAgC;AACpE;AAEO,SAAS,UAAU,OAAoC;AAC5D,MAAI,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,GAAG;AACvD,WAAO,KAAK,MAAM,KAAK;AAAA,EACzB;AACA,MAAI,OAAO,UAAU,YAAY,UAAU,KAAK,KAAK,GAAG;AACtD,WAAO,OAAO,SAAS,OAAO,EAAE;AAAA,EAClC;AACA,SAAO;AACT;AAEO,SAAS,sBACd,QAC2B;AAC3B,QAAM,gBAAgB,UAAU,QAAQ,aAAa;AACrD,SAAO;AAAA,IACL,WACE,OAAO,QAAQ,cAAc,WAAW,OAAO,YAAY;AAAA,IAC7D;AAAA,IACA,kBACE,OAAO,QAAQ,qBAAqB,YAChC,OAAO,mBACP;AAAA,EACR;AACF;AAEO,SAAS,eACd,KACA,QACoB;AACpB,QAAM,aAAa,CAAC,QAAQ,OAAO,QAAQ,cAAc,QAAQ,WAAW;AAC5E,aAAW,aAAa,YAAY;AAClC,QAAI,OAAO,cAAc,YAAY,UAAU,SAAS,EAAG,QAAO;AAAA,EACpE;AACA,QAAM,SAAS,IAAI,QAAQ,eAAe;AAC1C,MAAI,OAAO,WAAW,YAAY,OAAO,SAAS,EAAG,QAAO;AAC5D,SAAO,MAAM,QAAQ,MAAM,IACvB,OAAO,KAAK,CAAC,UAAU,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC,IACpE;AACN;AAEO,SAAS,aAAa,QAQ3B;AACA,QAAM,gBACJ,OAAO,QAAQ,kBAAkB,YAAY,OAAO,kBAAkB,OACjE,OAAO,gBACR;AACN,SAAO;AAAA,IACL,SAAS,UAAU,MAAM;AAAA,IACzB,WACE,OAAO,QAAQ,cAAc,WAAW,OAAO,YAAY;AAAA,IAC7D,QAAQ,OAAO,QAAQ,WAAW,WAAW,OAAO,SAAS;AAAA,IAC7D,eAAe,UAAU,eAAe,aAAa;AAAA,IACrD,UACE,OAAO,QAAQ,aAAa,YAAY,OAAO,aAAa,OACvD,OAAO,WACR;AAAA,IACN,wBAAwB;AAAA,MACtB,QAAQ,8BACN,eAAe;AAAA,IACnB;AAAA,IACA,mBACE,OAAO,eAAe,sBAAsB,YACxC,cAAc,oBACd;AAAA,EACR;AACF;AAEA,SAAS,6BACP,OAC2C;AAC3C,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,SAAS;AACf,QAAM,yBAAyB,OAAO;AACtC,MACE,OAAO,OAAO,WAAW,YACzB,OAAO,2BAA2B,YAClC,2BAA2B,MAC3B;AACA,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,QAAQ,OAAO;AAAA,IACf;AAAA,EAEF;AACF;AAEO,SAAS,aACd,QACA,QACwB;AACxB,QAAM,YAAY,QAAQ,UAAU,QAAQ;AAC5C,QAAM,QAAQ,MAAM,QAAQ,SAAS,IACjC,UAAU,IAAI,CAAC,SAAS,iBAAiB,IAAI,CAAC,IAC9C,aAAa,OACX,iBAAiB,SAAS,IAC1B;AACN,SAAO;AAAA,IACL,WACE,OAAO,QAAQ,cAAc,WAAW,OAAO,YAAY;AAAA,IAC7D,QACE,OAAO,QAAQ,cAAc,WACzB,OAAO,YACP,OAAO,QAAQ,WAAW,WACxB,OAAO,SACP;AAAA,IACR,eAAe,UAAU,QAAQ,aAAa;AAAA,IAC9C,kBACE,OAAO,QAAQ,qBAAqB,YAChC,OAAO,mBACP;AAAA,IACN,OAAO,UAAU,QAAQ,YAAY,QAAQ,KAAK;AAAA,IAClD;AAAA,IACA,sBACE,OAAO,QAAQ,yBAAyB,WACpC,OAAO,uBACP;AAAA,IACN;AAAA,EACF;AACF;AAEO,SAAS,UACd,KACA,QACoB;AACpB,MAAI,OAAO,QAAQ,WAAW,YAAY,OAAO,OAAO,SAAS,GAAG;AAClE,WAAO,OAAO;AAAA,EAChB;AACA,QAAM,YAAY,IAAI,QAAQ,aAAa;AAC3C,QAAM,cAAc,MAAM,QAAQ,SAAS,IAAI,UAAU,CAAC,IAAI;AAC9D,SAAO,OAAO,gBAAgB,YAAY,YAAY,SAAS,IAC3D,cACA;AACN;AAEO,SAAS,aACd,QACA,WAAW,OACS;AACpB,QAAM,YACJ,OAAO,QAAQ,cAAc,WAAW,OAAO,YAAY;AAC7D,MAAI,YAAY,CAAC,WAAW;AAC1B,UAAM,IAAI,WAAW,KAAK,QAAQ,uBAAuB;AAAA,EAC3D;AACA,SAAO;AACT;AAEO,SAAS,oBACd,KACA,aACQ;AACR,QAAM,OAAO,IAAI,QAAQ;AACzB,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,WACJ,eAAe,IAAI,UAClB,IAAI,OAAmC,YACpC,UACA;AACN,SAAO,GAAG,QAAQ,MAAM,IAAI;AAC9B;AASO,SAAS,eACd,UAAgC,CAAC,GACjC,gBACc;AACd,QAAM,eAAe,oBAAoB,cAAc;AACvD,QAAM,aAAa,uBAAuB,cAAc;AACxD,QAAM,UACJ,QAAQ,WAAW,OACnB,WAAW,OACX,aAAa,WACb,UAAU,QAAQ,QAAQ,aAAa,IAAI,IAAI,QAAQ,QAAQ,aAAa,IAAI;AAClF,MAAI;AACJ,MAAI;AAEJ,MAAI,aAAa,KAAK,SAAS,UAAU;AACvC,6BAAyB;AAAA,MACvB,YAAY;AAAA,QACV,wBAAwB;AAAA,UACtB,QAAQ;AAAA,UACR,aAAa;AAAA,QACf;AAAA,MACF;AAAA,IACF;AACA,kCAA8B,CAAC,EAAE,SAAS,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC;AAAA,EAChE,WAAW,aAAa,KAAK,SAAS,QAAQ;AAC5C,6BAAyB;AAAA,MACvB,UAAU;AAAA,QACR,oBAAoB;AAAA,UAClB,aACE;AAAA,QACJ;AAAA,MACF;AAAA,IACF;AACA,kCAA8B,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC;AAAA,EAC9D;AAEA,SAAO,eAAe;AAAA,IACpB,MAAM,QAAQ,WAAW,QAAQ,WAAW,QAAQ;AAAA,IACpD,aAAa,QAAQ,WAAW,eAAe,WAAW;AAAA,IAC1D,SAAS,QAAQ,WAAW,WAAW,WAAW;AAAA,IAClD,mBAAmB,QAAQ,WAAW,qBACpC,WAAW,qBAAqB,CAAC,YAAY;AAAA,IAC/C,oBAAoB,QAAQ,WAAW,sBACrC,WAAW,sBAAsB,CAAC,YAAY;AAAA,IAChD,qBAAqB,QAAQ,WAAW,uBACtC,WAAW,uBAAuB;AAAA,MAChC;AAAA,QACE,KAAK,GAAG,OAAO;AAAA,QACf,iBAAiB;AAAA,QACjB,iBACE,QAAQ,WAAW,mBACnB,WAAW,mBACX,aAAa;AAAA,MACjB;AAAA,IACF;AAAA,IACF,cAAc;AAAA,MACZ,WAAW;AAAA,MACX,mBAAmB;AAAA,MACnB,mBAAmB;AAAA,MACnB,GAAI,WAAW,gBAAgB,CAAC;AAAA,MAChC,GAAI,QAAQ,WAAW,gBAAgB,CAAC;AAAA,IAC1C;AAAA,IACA,iBACE,QAAQ,WAAW,mBACnB,WAAW,mBACX;AAAA,IACF,QAAQ,QAAQ,WAAW,UAAU,WAAW;AAAA,IAChD,sBACE,QAAQ,WAAW,wBACnB,WAAW,wBACX;AAAA,EACJ,CAAC;AACH;",
+  "names": []
+}

package/dist/adapters/transport/auth.d.ts

@@ -0,0 +1,10 @@
+import type { IncomingMessage } from 'node:http';
+import type { ResolvedOctoFlowServerConfig } from '../../config/config.js';
+import type { AuthorizedRequest } from './jsonrpc-wire.js';
+export declare function hashIdentity(value: string): string;
+export declare function constantTimeMatch(candidate: string, secrets: string[]): boolean;
+export declare function expandIpv6(address: string): string[];
+export declare function normalizeIp(address: string | undefined, ipv6SubnetBits: number): string;
+export declare function getRemoteIdentity(req: IncomingMessage, ipv6SubnetBits: number): string;
+export declare function authorizeRequest(req: IncomingMessage, route: 'rpc' | 'agent-card', serverConfig: ResolvedOctoFlowServerConfig): AuthorizedRequest;
+//# sourceMappingURL=auth.d.ts.map

package/dist/adapters/transport/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/adapters/transport/auth.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAGjD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AAC3E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAc3D,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAElD;AAED,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EAAE,GAChB,OAAO,CAYT;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAUpD;AAED,wBAAgB,WAAW,CACzB,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,cAAc,EAAE,MAAM,GACrB,MAAM,CAaR;AAED,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,eAAe,EACpB,cAAc,EAAE,MAAM,GACrB,MAAM,CAER;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,eAAe,EACpB,KAAK,EAAE,KAAK,GAAG,YAAY,EAC3B,YAAY,EAAE,4BAA4B,GACzC,iBAAiB,CA0CnB"}

package/dist/adapters/transport/auth.js

@@ -0,0 +1,95 @@
+import { createHash, timingSafeEqual } from "node:crypto";
+import { isIP } from "node:net";
+import { errorResponse } from "./jsonrpc-wire.js";
+function getBearerToken(req, headerName) {
+  const rawHeader = req.headers[headerName.toLowerCase()];
+  const headerValue = Array.isArray(rawHeader) ? rawHeader[0] : rawHeader;
+  if (typeof headerValue !== "string") return null;
+  const match = headerValue.match(/^Bearer\s+(.+)$/i);
+  return match?.[1] ?? null;
+}
+function hashIdentity(value) {
+  return createHash("sha256").update(value).digest("hex");
+}
+function constantTimeMatch(candidate, secrets) {
+  const candidateBuf = Buffer.from(candidate, "utf8");
+  let match = false;
+  for (const secret of secrets) {
+    const secretBuf = Buffer.from(secret, "utf8");
+    if (candidateBuf.length === secretBuf.length) {
+      if (timingSafeEqual(candidateBuf, secretBuf)) {
+        match = true;
+      }
+    }
+  }
+  return match;
+}
+function expandIpv6(address) {
+  const [left, right] = address.toLowerCase().split("::");
+  const leftParts = left ? left.split(":").filter(Boolean) : [];
+  const rightParts = right ? right.split(":").filter(Boolean) : [];
+  const missing = Math.max(0, 8 - (leftParts.length + rightParts.length));
+  return [
+    ...leftParts,
+    ...Array.from({ length: missing }, () => "0"),
+    ...rightParts
+  ].map((part) => part.padStart(4, "0"));
+}
+function normalizeIp(address, ipv6SubnetBits) {
+  if (!address) return "unknown";
+  const normalized = address.startsWith("::ffff:") && isIP(address.slice(7)) === 4 ? address.slice(7) : address;
+  if (isIP(normalized) !== 6) return normalized;
+  const parts = expandIpv6(normalized);
+  const visibleHextets = Math.max(
+    1,
+    Math.min(8, Math.floor(Math.max(16, ipv6SubnetBits) / 16))
+  );
+  return `${parts.slice(0, visibleHextets).join(":")}::/${visibleHextets * 16}`;
+}
+function getRemoteIdentity(req, ipv6SubnetBits) {
+  return `ip:${normalizeIp(req.socket.remoteAddress, ipv6SubnetBits)}`;
+}
+function authorizeRequest(req, route, serverConfig) {
+  const auth = serverConfig.auth;
+  const remoteIdentity = getRemoteIdentity(
+    req,
+    serverConfig.rateLimit.ipv6SubnetBits
+  );
+  if (route === "agent-card" && serverConfig.agentCardVisibility === "public") {
+    return { error: null, principal: remoteIdentity };
+  }
+  if (auth.mode === "none") {
+    return { error: null, principal: remoteIdentity };
+  }
+  if (auth.mode === "mtls") {
+    const socket = req.socket;
+    if (socket.authorized) {
+      const fingerprint = socket.getPeerCertificate?.().fingerprint256;
+      return {
+        error: null,
+        principal: fingerprint ? `mtls:${fingerprint}` : remoteIdentity
+      };
+    }
+    return {
+      error: errorResponse(null, -32010, "Unauthorized"),
+      principal: remoteIdentity
+    };
+  }
+  const token = getBearerToken(req, auth.headerName);
+  if (token && constantTimeMatch(token, auth.bearerTokens)) {
+    return { error: null, principal: `bearer:${hashIdentity(token)}` };
+  }
+  return {
+    error: errorResponse(null, -32010, "Unauthorized"),
+    principal: remoteIdentity
+  };
+}
+export {
+  authorizeRequest,
+  constantTimeMatch,
+  expandIpv6,
+  getRemoteIdentity,
+  hashIdentity,
+  normalizeIp
+};
+//# sourceMappingURL=auth.js.map

package/dist/adapters/transport/auth.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/adapters/transport/auth.ts"],
+  "sourcesContent": ["/**\n * Auth, identity, and cryptographic comparison helpers for the A2A server.\n * Extracted from helpers.ts to respect the 400-line file limit.\n */\nimport { createHash, timingSafeEqual } from 'node:crypto';\nimport type { IncomingMessage } from 'node:http';\nimport { isIP } from 'node:net';\n\nimport type { ResolvedOctoFlowServerConfig } from '../../config/config.js';\nimport type { AuthorizedRequest } from './jsonrpc-wire.js';\nimport { errorResponse } from './jsonrpc-wire.js';\n\nfunction getBearerToken(\n  req: IncomingMessage,\n  headerName: string\n): string | null {\n  const rawHeader = req.headers[headerName.toLowerCase()];\n  const headerValue = Array.isArray(rawHeader) ? rawHeader[0] : rawHeader;\n  if (typeof headerValue !== 'string') return null;\n  const match = headerValue.match(/^Bearer\\s+(.+)$/i);\n  return match?.[1] ?? null;\n}\n\nexport function hashIdentity(value: string): string {\n  return createHash('sha256').update(value).digest('hex');\n}\n\nexport function constantTimeMatch(\n  candidate: string,\n  secrets: string[]\n): boolean {\n  const candidateBuf = Buffer.from(candidate, 'utf8');\n  let match = false;\n  for (const secret of secrets) {\n    const secretBuf = Buffer.from(secret, 'utf8');\n    if (candidateBuf.length === secretBuf.length) {\n      if (timingSafeEqual(candidateBuf, secretBuf)) {\n        match = true;\n      }\n    }\n  }\n  return match;\n}\n\nexport function expandIpv6(address: string): string[] {\n  const [left, right] = address.toLowerCase().split('::');\n  const leftParts = left ? left.split(':').filter(Boolean) : [];\n  const rightParts = right ? right.split(':').filter(Boolean) : [];\n  const missing = Math.max(0, 8 - (leftParts.length + rightParts.length));\n  return [\n    ...leftParts,\n    ...Array.from({ length: missing }, () => '0'),\n    ...rightParts,\n  ].map((part) => part.padStart(4, '0'));\n}\n\nexport function normalizeIp(\n  address: string | undefined,\n  ipv6SubnetBits: number\n): string {\n  if (!address) return 'unknown';\n  const normalized =\n    address.startsWith('::ffff:') && isIP(address.slice(7)) === 4\n      ? address.slice(7)\n      : address;\n  if (isIP(normalized) !== 6) return normalized;\n  const parts = expandIpv6(normalized);\n  const visibleHextets = Math.max(\n    1,\n    Math.min(8, Math.floor(Math.max(16, ipv6SubnetBits) / 16))\n  );\n  return `${parts.slice(0, visibleHextets).join(':')}::/${visibleHextets * 16}`;\n}\n\nexport function getRemoteIdentity(\n  req: IncomingMessage,\n  ipv6SubnetBits: number\n): string {\n  return `ip:${normalizeIp(req.socket.remoteAddress, ipv6SubnetBits)}`;\n}\n\nexport function authorizeRequest(\n  req: IncomingMessage,\n  route: 'rpc' | 'agent-card',\n  serverConfig: ResolvedOctoFlowServerConfig\n): AuthorizedRequest {\n  const auth = serverConfig.auth;\n  const remoteIdentity = getRemoteIdentity(\n    req,\n    serverConfig.rateLimit.ipv6SubnetBits\n  );\n\n  if (route === 'agent-card' && serverConfig.agentCardVisibility === 'public') {\n    return { error: null, principal: remoteIdentity };\n  }\n\n  if (auth.mode === 'none') {\n    return { error: null, principal: remoteIdentity };\n  }\n\n  if (auth.mode === 'mtls') {\n    const socket = req.socket as typeof req.socket & {\n      authorized?: boolean;\n      getPeerCertificate?: () => { fingerprint256?: string };\n    };\n    if (socket.authorized) {\n      const fingerprint = socket.getPeerCertificate?.().fingerprint256;\n      return {\n        error: null,\n        principal: fingerprint ? `mtls:${fingerprint}` : remoteIdentity,\n      };\n    }\n    return {\n      error: errorResponse(null, -32010, 'Unauthorized'),\n      principal: remoteIdentity,\n    };\n  }\n\n  const token = getBearerToken(req, auth.headerName);\n  if (token && constantTimeMatch(token, auth.bearerTokens)) {\n    return { error: null, principal: `bearer:${hashIdentity(token)}` };\n  }\n\n  return {\n    error: errorResponse(null, -32010, 'Unauthorized'),\n    principal: remoteIdentity,\n  };\n}\n"],
+  "mappings": "AAIA,SAAS,YAAY,uBAAuB;AAE5C,SAAS,YAAY;AAIrB,SAAS,qBAAqB;AAE9B,SAAS,eACP,KACA,YACe;AACf,QAAM,YAAY,IAAI,QAAQ,WAAW,YAAY,CAAC;AACtD,QAAM,cAAc,MAAM,QAAQ,SAAS,IAAI,UAAU,CAAC,IAAI;AAC9D,MAAI,OAAO,gBAAgB,SAAU,QAAO;AAC5C,QAAM,QAAQ,YAAY,MAAM,kBAAkB;AAClD,SAAO,QAAQ,CAAC,KAAK;AACvB;AAEO,SAAS,aAAa,OAAuB;AAClD,SAAO,WAAW,QAAQ,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK;AACxD;AAEO,SAAS,kBACd,WACA,SACS;AACT,QAAM,eAAe,OAAO,KAAK,WAAW,MAAM;AAClD,MAAI,QAAQ;AACZ,aAAW,UAAU,SAAS;AAC5B,UAAM,YAAY,OAAO,KAAK,QAAQ,MAAM;AAC5C,QAAI,aAAa,WAAW,UAAU,QAAQ;AAC5C,UAAI,gBAAgB,cAAc,SAAS,GAAG;AAC5C,gBAAQ;AAAA,MACV;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,WAAW,SAA2B;AACpD,QAAM,CAAC,MAAM,KAAK,IAAI,QAAQ,YAAY,EAAE,MAAM,IAAI;AACtD,QAAM,YAAY,OAAO,KAAK,MAAM,GAAG,EAAE,OAAO,OAAO,IAAI,CAAC;AAC5D,QAAM,aAAa,QAAQ,MAAM,MAAM,GAAG,EAAE,OAAO,OAAO,IAAI,CAAC;AAC/D,QAAM,UAAU,KAAK,IAAI,GAAG,KAAK,UAAU,SAAS,WAAW,OAAO;AACtE,SAAO;AAAA,IACL,GAAG;AAAA,IACH,GAAG,MAAM,KAAK,EAAE,QAAQ,QAAQ,GAAG,MAAM,GAAG;AAAA,IAC5C,GAAG;AAAA,EACL,EAAE,IAAI,CAAC,SAAS,KAAK,SAAS,GAAG,GAAG,CAAC;AACvC;AAEO,SAAS,YACd,SACA,gBACQ;AACR,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,aACJ,QAAQ,WAAW,SAAS,KAAK,KAAK,QAAQ,MAAM,CAAC,CAAC,MAAM,IACxD,QAAQ,MAAM,CAAC,IACf;AACN,MAAI,KAAK,UAAU,MAAM,EAAG,QAAO;AACnC,QAAM,QAAQ,WAAW,UAAU;AACnC,QAAM,iBAAiB,KAAK;AAAA,IAC1B;AAAA,IACA,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,IAAI,IAAI,cAAc,IAAI,EAAE,CAAC;AAAA,EAC3D;AACA,SAAO,GAAG,MAAM,MAAM,GAAG,cAAc,EAAE,KAAK,GAAG,CAAC,MAAM,iBAAiB,EAAE;AAC7E;AAEO,SAAS,kBACd,KACA,gBACQ;AACR,SAAO,MAAM,YAAY,IAAI,OAAO,eAAe,cAAc,CAAC;AACpE;AAEO,SAAS,iBACd,KACA,OACA,cACmB;AACnB,QAAM,OAAO,aAAa;AAC1B,QAAM,iBAAiB;AAAA,IACrB;AAAA,IACA,aAAa,UAAU;AAAA,EACzB;AAEA,MAAI,UAAU,gBAAgB,aAAa,wBAAwB,UAAU;AAC3E,WAAO,EAAE,OAAO,MAAM,WAAW,eAAe;AAAA,EAClD;AAEA,MAAI,KAAK,SAAS,QAAQ;AACxB,WAAO,EAAE,OAAO,MAAM,WAAW,eAAe;AAAA,EAClD;AAEA,MAAI,KAAK,SAAS,QAAQ;AACxB,UAAM,SAAS,IAAI;AAInB,QAAI,OAAO,YAAY;AACrB,YAAM,cAAc,OAAO,qBAAqB,EAAE;AAClD,aAAO;AAAA,QACL,OAAO;AAAA,QACP,WAAW,cAAc,QAAQ,WAAW,KAAK;AAAA,MACnD;AAAA,IACF;AACA,WAAO;AAAA,MACL,OAAO,cAAc,MAAM,QAAQ,cAAc;AAAA,MACjD,WAAW;AAAA,IACb;AAAA,EACF;AAEA,QAAM,QAAQ,eAAe,KAAK,KAAK,UAAU;AACjD,MAAI,SAAS,kBAAkB,OAAO,KAAK,YAAY,GAAG;AACxD,WAAO,EAAE,OAAO,MAAM,WAAW,UAAU,aAAa,KAAK,CAAC,GAAG;AAAA,EACnE;AAEA,SAAO;AAAA,IACL,OAAO,cAAc,MAAM,QAAQ,cAAc;AAAA,IACjD,WAAW;AAAA,EACb;AACF;",
+  "names": []
+}

package/dist/adapters/transport/client-errors.d.ts

@@ -0,0 +1,24 @@
+/**
+ * A2A client error classes.
+ *
+ * Extracted out of `client.ts` so that `a2a-client-helpers.ts` can depend on
+ * these types without importing the A2A client module itself (which would
+ * introduce a circular dependency between `client.ts` and
+ * `a2a-client-helpers.ts`).
+ */
+import { OctoFlowError } from '../../domain/errors/base.js';
+export type A2AClientErrorCode = 'SSE_CONNECTION_FAILED' | 'SSE_HTTP_ERROR' | 'SSE_RECONNECT_EXHAUSTED' | 'REMOTE_ERROR' | 'HTTP_ERROR' | 'CONTRACT_VIOLATION';
+export declare class A2AClientError extends OctoFlowError {
+    constructor(code: A2AClientErrorCode, message: string);
+}
+/**
+ * Thrown when an A2A server response violates the wire contract. Most common
+ * case: a `SendMessage` / `SendStreamingMessage` response that omits
+ * `contextId` on the inner message/task. A2A multi-turn continuity breaks
+ * silently without it, so we fail loudly instead.
+ */
+export declare class A2AContractError extends A2AClientError {
+    readonly field: string;
+    constructor(field: string, message: string);
+}
+//# sourceMappingURL=client-errors.d.ts.map

package/dist/adapters/transport/client-errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-errors.d.ts","sourceRoot":"","sources":["../../../src/adapters/transport/client-errors.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE5D,MAAM,MAAM,kBAAkB,GAC1B,uBAAuB,GACvB,gBAAgB,GAChB,yBAAyB,GACzB,cAAc,GACd,YAAY,GACZ,oBAAoB,CAAC;AAEzB,qBAAa,cAAe,SAAQ,aAAa;gBACnC,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM;CAItD;AAED;;;;;GAKG;AACH,qBAAa,gBAAiB,SAAQ,cAAc;IAClD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBAEX,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAK3C"}

package/dist/adapters/transport/client-errors.js

@@ -0,0 +1,20 @@
+import { OctoFlowError } from "../../domain/errors/base.js";
+class A2AClientError extends OctoFlowError {
+  constructor(code, message) {
+    super(code, message);
+    this.name = "A2AClientError";
+  }
+}
+class A2AContractError extends A2AClientError {
+  field;
+  constructor(field, message) {
+    super("CONTRACT_VIOLATION", message);
+    this.name = "A2AContractError";
+    this.field = field;
+  }
+}
+export {
+  A2AClientError,
+  A2AContractError
+};
+//# sourceMappingURL=client-errors.js.map

package/dist/adapters/transport/client-errors.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/adapters/transport/client-errors.ts"],
+  "sourcesContent": ["/**\n * A2A client error classes.\n *\n * Extracted out of `client.ts` so that `a2a-client-helpers.ts` can depend on\n * these types without importing the A2A client module itself (which would\n * introduce a circular dependency between `client.ts` and\n * `a2a-client-helpers.ts`).\n */\n\nimport { OctoFlowError } from '../../domain/errors/base.js';\n\nexport type A2AClientErrorCode =\n  | 'SSE_CONNECTION_FAILED'\n  | 'SSE_HTTP_ERROR'\n  | 'SSE_RECONNECT_EXHAUSTED'\n  | 'REMOTE_ERROR'\n  | 'HTTP_ERROR'\n  | 'CONTRACT_VIOLATION';\n\nexport class A2AClientError extends OctoFlowError {\n  constructor(code: A2AClientErrorCode, message: string) {\n    super(code, message);\n    this.name = 'A2AClientError';\n  }\n}\n\n/**\n * Thrown when an A2A server response violates the wire contract. Most common\n * case: a `SendMessage` / `SendStreamingMessage` response that omits\n * `contextId` on the inner message/task. A2A multi-turn continuity breaks\n * silently without it, so we fail loudly instead.\n */\nexport class A2AContractError extends A2AClientError {\n  readonly field: string;\n\n  constructor(field: string, message: string) {\n    super('CONTRACT_VIOLATION', message);\n    this.name = 'A2AContractError';\n    this.field = field;\n  }\n}\n"],
+  "mappings": "AASA,SAAS,qBAAqB;AAUvB,MAAM,uBAAuB,cAAc;AAAA,EAChD,YAAY,MAA0B,SAAiB;AACrD,UAAM,MAAM,OAAO;AACnB,SAAK,OAAO;AAAA,EACd;AACF;AAQO,MAAM,yBAAyB,eAAe;AAAA,EAC1C;AAAA,EAET,YAAY,OAAe,SAAiB;AAC1C,UAAM,sBAAsB,OAAO;AACnC,SAAK,OAAO;AACZ,SAAK,QAAQ;AAAA,EACf;AACF;",
+  "names": []
+}

package/dist/adapters/transport/client.d.ts

@@ -0,0 +1,38 @@
+import type { Client, ClientSession, RunOptions, RunResult, StreamCallback } from '../../domain/core-client.js';
+export type { A2AClientErrorCode } from './client-errors.js';
+export { A2AClientError, A2AContractError } from './client-errors.js';
+export interface A2AClientOptions {
+    url: string;
+    apiKey?: string;
+    headers?: Record<string, string>;
+    timeoutMs?: number;
+    maxReconnectAttempts?: number;
+    reconnectDelayMs?: number;
+}
+export declare class A2ASession implements ClientSession {
+    private readonly client;
+    private readonly opts?;
+    private contextId;
+    private turnCount;
+    constructor(client: A2AClient, opts?: RunOptions | undefined);
+    get turns(): number;
+    get id(): string | null;
+    send(prompt: string, opts?: RunOptions): Promise<RunResult>;
+    stream(prompt: string, onEvent: StreamCallback, opts?: RunOptions): Promise<RunResult>;
+    reset(): void;
+}
+export declare class A2AClient implements Client {
+    private readonly url;
+    private readonly apiKey?;
+    private readonly customHeaders;
+    private readonly timeoutMs;
+    private readonly maxReconnectAttempts;
+    private readonly reconnectDelayMs;
+    constructor(options: A2AClientOptions);
+    isReady(): Promise<boolean>;
+    run(prompt: string, opts?: RunOptions): Promise<RunResult>;
+    stream(prompt: string, onEvent: StreamCallback, opts?: RunOptions): Promise<RunResult>;
+    session(opts?: RunOptions): A2ASession;
+    private buildHeaders;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/adapters/transport/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/adapters/transport/client.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,MAAM,EACN,aAAa,EACb,UAAU,EACV,SAAS,EACT,cAAc,EACf,MAAM,6BAA6B,CAAC;AA0BrC,YAAY,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtE,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AA4DD,qBAAa,UAAW,YAAW,aAAa;IAK5C,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IALxB,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,SAAS,CAAK;gBAGH,MAAM,EAAE,SAAS,EACjB,IAAI,CAAC,EAAE,UAAU,YAAA;IAGpC,IAAI,KAAK,IAAI,MAAM,CAElB;IACD,IAAI,EAAE,IAAI,MAAM,GAAG,IAAI,CAEtB;IAEK,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAU3D,MAAM,CACV,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,cAAc,EACvB,IAAI,CAAC,EAAE,UAAU,GAChB,OAAO,CAAC,SAAS,CAAC;IAUrB,KAAK,IAAI,IAAI;CAId;AAMD,qBAAa,SAAU,YAAW,MAAM;IACtC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAyB;IACvD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IAC9C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;gBAE9B,OAAO,EAAE,gBAAgB;IAS/B,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC;IAa3B,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAyD1D,MAAM,CACV,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,cAAc,EACvB,IAAI,CAAC,EAAE,UAAU,GAChB,OAAO,CAAC,SAAS,CAAC;IA0IrB,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,GAAG,UAAU;IAItC,OAAO,CAAC,YAAY;CAOrB"}