sealbridge 0.0.1 → 0.2.0

package/dist/packages/relay/dist/worker.js

@@ -0,0 +1,460 @@
+// SPDX-License-Identifier: Apache-2.0
+import { resolveDid, generateKeyPair } from '../../core/dist/edge.js';
+import { beginDurableLongPoll, canonicalRelayPath, createRelayFetchHandler, DEFAULT_MAX_ENVELOPE_BYTES, inboxRecipientFromRequest, InMemoryRelay, relayErrorResponse, relayHttpHeaders, relayLimitsFromEnv, } from './fetch.js';
+import { relayWakeFromEnv } from './notifications.js';
+import { emptyCursor, emptyRelaySnapshot, loadRelayState, planJournal, } from './journal.js';
+/**
+ * One inbox or the registry. Storage is granular: a POST writes the new
+ * envelope, its seen-id slot, and the fixed-size meta record. Write cost does
+ * not grow with the number of queued envelopes or registered agents.
+ */
+export class RelayDurableObject {
+    state;
+    relay;
+    handler;
+    ready;
+    /** Serializes handler mutation, snapshot write, and rollback for every request. */
+    turn = Promise.resolve();
+    persistedVersion = 0;
+    notifications;
+    notificationKey;
+    configuredNotificationKey;
+    committedSnapshot;
+    cursor;
+    constructor(state, env) {
+        this.state = state;
+        this.configuredNotificationKey = typeof env?.ACP_NOTIFICATION_KEY === 'string'
+            ? JSON.parse(env.ACP_NOTIFICATION_KEY) : undefined;
+        this.relay = new InMemoryRelay({ ...relayLimitsFromEnv(env),
+            // Channels are supplied by the embedding operator, never by an HTTP request.
+            wake: env?.ACP_WAKE ?? relayWakeFromEnv(env),
+        });
+        this.handler = createRelayFetchHandler({ relay: this.relay, deferNotifications: true });
+        this.cursor = emptyCursor(this.relay.maxSeenEntries, this.relay.maxAuthSeenEntries);
+        this.committedSnapshot = emptyRelaySnapshot();
+        this.ready = state.blockConcurrencyWhile(() => this.bootstrap());
+    }
+    async bootstrap() {
+        const meta = await this.state.storage.get('meta');
+        const key = this.configuredNotificationKey ?? meta?.notificationKey ?? generateKeyPair();
+        this.notificationKey = key;
+        this.relay.setNotificationKey(key);
+        const loaded = await loadRelayState(this.state.storage, Date.now(), {
+            seenMod: this.relay.maxSeenEntries,
+            authMod: this.relay.maxAuthSeenEntries,
+        });
+        this.cursor = loaded.cursor;
+        if (loaded.snapshot)
+            this.relay.restore(loaded.snapshot);
+        this.committedSnapshot = loaded.snapshot ?? emptyRelaySnapshot();
+        this.persistedVersion = -1;
+        if (loaded.legacy)
+            await this.migrateLegacy(loaded.legacy);
+        await this.writeSnapshot();
+    }
+    /** Rewrite a pre-sharding blob into per-key records once, then drop the blob. */
+    async migrateLegacy(legacy) {
+        const next = this.relay.snapshot();
+        const plan = planJournal(emptyCursor(this.relay.maxSeenEntries, this.relay.maxAuthSeenEntries), emptyRelaySnapshot(), next);
+        await this.commitPlan(plan, next, this.relay.mutationVersion);
+        if (!this.state.storage.delete)
+            return;
+        await this.state.storage.delete('relay-head');
+        for (let i = 0; i < legacy.count; i++)
+            await this.state.storage.delete('relay:' + legacy.generation + ':' + i);
+    }
+    /** Queue one turn. A rejection stays on that turn and does not poison the next one. */
+    enqueue(work) {
+        const run = this.turn.catch(() => undefined).then(work);
+        this.turn = run.then(() => undefined, () => undefined);
+        return run;
+    }
+    /**
+     * Persist the current relay. Caller must already hold the request turn.
+     * A single POST /envelopes or DELETE /envelopes/:id commits a constant
+     * number of keys (the touched envelope, its replay slot, and `meta`).
+     * The fixed-size `meta` record is independent of inbox and registry length.
+     */
+    async writeSnapshot() {
+        this.relay.evictExpired();
+        if (this.persistedVersion === this.relay.mutationVersion) {
+            await this.bestEffortAlarm();
+            return;
+        }
+        const next = this.relay.snapshot();
+        const version = this.relay.mutationVersion;
+        const plan = planJournal(this.cursor, this.committedSnapshot, next);
+        if (plan.puts.length === 0 && plan.deletes.length === 0) {
+            this.cursor = plan.cursor;
+            this.persistedVersion = version;
+            this.committedSnapshot = next;
+            await this.bestEffortAlarm();
+            return;
+        }
+        const rollback = this.committedSnapshot;
+        let committed = false;
+        try {
+            // Item keys first, then meta. A crash before meta leaves unreachable
+            // orphans; the previous meta still describes the last committed inbox.
+            for (const put of plan.puts)
+                await this.state.storage.put(put.key, put.value);
+            await this.state.storage.put('meta', { ...plan.meta, notificationKey: this.notificationKey });
+            this.cursor = plan.cursor;
+            this.persistedVersion = version;
+            this.committedSnapshot = next;
+            committed = true;
+            if (this.state.storage.delete)
+                for (const key of plan.deletes)
+                    await this.state.storage.delete(key);
+        }
+        catch (error) {
+            // A failed put must not leave memory ahead of the last durable meta record.
+            if (!committed && this.relay.mutationVersion === version)
+                this.relay.restore(rollback);
+            throw error;
+        }
+        await this.bestEffortAlarm();
+    }
+    async commitPlan(plan, next, version) {
+        for (const put of plan.puts)
+            await this.state.storage.put(put.key, put.value);
+        await this.state.storage.put('meta', { ...plan.meta, notificationKey: this.notificationKey });
+        this.cursor = plan.cursor;
+        this.persistedVersion = version;
+        this.committedSnapshot = next;
+        if (!this.state.storage.delete)
+            return;
+        for (const key of plan.deletes)
+            await this.state.storage.delete(key);
+    }
+    async bestEffortAlarm() {
+        const setAlarm = this.state.storage.setAlarm;
+        if (!setAlarm)
+            return;
+        try {
+            const next = this.relay.nextExpiry();
+            if (next === undefined) {
+                await this.state.storage.deleteAlarm?.();
+                return;
+            }
+            await setAlarm(next);
+        }
+        catch {
+            /* A committed mutation must not fail because the alarm could not be set. */
+        }
+    }
+    /** Later SSE pulls persist after the request turn has released this lock. */
+    persist() {
+        return this.enqueue(() => this.writeSnapshot());
+    }
+    /** Claims and completions are serialized; external notification delivery never holds the inbox turn. */
+    runNotifications() {
+        if (this.notifications)
+            return this.notifications;
+        this.notifications = (async () => {
+            for (;;) {
+                const attempt = await this.enqueue(async () => {
+                    this.relay.evictExpired();
+                    const next = this.relay.claimWakeNotification();
+                    await this.writeSnapshot();
+                    return next;
+                });
+                if (!attempt)
+                    return;
+                const delivered = await this.relay.deliverWakeNotification(attempt);
+                await this.enqueue(async () => {
+                    this.relay.completeWakeNotification(attempt, delivered);
+                    await this.writeSnapshot();
+                });
+            }
+        })().finally(() => { this.notifications = undefined; });
+        return this.notifications;
+    }
+    scheduleNotifications() {
+        const work = this.runNotifications();
+        this.state.waitUntil?.(work);
+        // A failed storage turn is retried on the next request/alarm, without failing an admitted POST.
+        void work.catch(() => { });
+    }
+    async alarm() {
+        await this.ready;
+        await this.enqueue(() => this.writeSnapshot());
+        await this.runNotifications();
+    }
+    async fetch(request) {
+        await this.ready;
+        if (this.longPollWait(request) !== undefined)
+            return this.handleLongPoll(request);
+        return this.enqueue(() => this.handle(request));
+    }
+    /** Positive waitMs on GET /envelopes. Invalid values stay on the normal handler path. */
+    longPollWait(request) {
+        if (request.method !== 'GET')
+            return undefined;
+        const url = new URL(request.url);
+        const path = canonicalRelayPath(url.pathname);
+        if ((path !== '/envelopes' && !path.startsWith('/inbox/')) ||
+            !url.searchParams.has('waitMs'))
+            return undefined;
+        const ms = Number(url.searchParams.get('waitMs'));
+        if (!Number.isFinite(ms) || ms <= 0)
+            return undefined;
+        return ms;
+    }
+    emptyPoll() {
+        return Response.json({ envelopes: [] }, { headers: relayHttpHeaders('json') });
+    }
+    /**
+     * Authenticate and pop inside the mutation turn, then release that turn while
+     * relay.wait is pending so a POST can wake the poll.
+     */
+    async handleLongPoll(request) {
+        const opened = await this.enqueue(() => this.openLongPoll(request));
+        if (opened.mode === 'response')
+            return opened.response;
+        await this.relay.wait(opened.recipient, opened.waitMs, request.signal, opened.filter);
+        // send() wakes wait before the POST snapshot finishes. A disconnect in that gap must not dequeue.
+        if (request.signal.aborted)
+            return this.emptyPoll();
+        return this.enqueue(() => this.finishLongPoll(opened.receive, request.signal));
+    }
+    async openLongPoll(request) {
+        const started = beginDurableLongPoll(this.relay, request);
+        if (started.mode === 'response') {
+            if (started.response.ok)
+                await this.writeSnapshot();
+            return started;
+        }
+        await this.writeSnapshot();
+        return started;
+    }
+    async finishLongPoll(receive, signal) {
+        // Abort can land while this turn waits behind the POST storage.put.
+        if (signal.aborted)
+            return this.emptyPoll();
+        const envelopes = [];
+        try {
+            let envelope;
+            while ((envelope = receive()))
+                envelopes.push(envelope);
+        }
+        catch (error) {
+            return relayErrorResponse(error, this.relay);
+        }
+        await this.writeSnapshot();
+        return Response.json({ envelopes }, { headers: relayHttpHeaders('json') });
+    }
+    async handle(request) {
+        const response = await this.handler(request);
+        const path = canonicalRelayPath(new URL(request.url).pathname);
+        if (!response.ok)
+            return response;
+        if (request.method === 'GET' && path === '/stream' && response.body) {
+            await this.writeSnapshot();
+            const reader = response.body.getReader();
+            const persist = () => this.persist();
+            return new Response(new ReadableStream({
+                async pull(controller) {
+                    const { value, done } = await reader.read();
+                    if (done)
+                        controller.close();
+                    else {
+                        await persist();
+                        controller.enqueue(value);
+                    }
+                },
+                async cancel() {
+                    await reader.cancel();
+                },
+            }), { status: response.status, headers: response.headers });
+        }
+        if ((request.method === 'POST' && ['/agents', '/envelopes'].includes(path)) ||
+            (request.method === 'DELETE' &&
+                (path === '/envelopes' || path.startsWith('/envelopes/'))) ||
+            (request.method === 'GET' && (path === '/envelopes' || path.startsWith('/inbox/'))) ||
+            this.persistedVersion !== this.relay.mutationVersion)
+            await this.writeSnapshot();
+        this.scheduleNotifications();
+        return response;
+    }
+}
+export const DEFAULT_RATE_LIMIT_MAX = 300;
+export const DEFAULT_RATE_LIMIT_WINDOW_MS = 60_000;
+const buckets = new Map();
+/** Test hook. Production isolates keep this map for the life of the isolate. */
+export function resetRelayRateLimits() {
+    buckets.clear();
+}
+function envString(env, key) {
+    const value = env?.[key];
+    return typeof value === 'string' ? value : undefined;
+}
+function envInt(env, key, fallback) {
+    const value = envString(env, key);
+    if (value === undefined || value === '')
+        return fallback;
+    const parsed = Number(value);
+    return Number.isSafeInteger(parsed) && parsed >= 1 ? parsed : fallback;
+}
+/** CF-Connecting-IP wins. X-Forwarded-For is only a fallback for local tests. */
+export function clientIp(request) {
+    const cf = request.headers.get('cf-connecting-ip')?.trim();
+    if (cf)
+        return cf;
+    const forwarded = request.headers.get('x-forwarded-for');
+    if (forwarded) {
+        const first = forwarded.split(',')[0]?.trim();
+        if (first)
+            return first;
+    }
+    return 'unknown';
+}
+function rateBucket(method, path) {
+    if (path === '/wake' || path === '/delivery-status')
+        return 'notifications';
+    if (method === 'POST' && path === '/envelopes')
+        return 'post-envelope';
+    if (method === 'GET' && (path === '/envelopes' || path.startsWith('/inbox/')))
+        return 'get-envelope';
+    if (method === 'POST' && path === '/agents')
+        return 'post-agent';
+    return undefined;
+}
+function slidingWindow(key, max, windowMs, now) {
+    const fresh = (buckets.get(key) ?? []).filter((stamp) => now - stamp < windowMs);
+    if (fresh.length >= max) {
+        buckets.set(key, fresh);
+        const retryAfterSeconds = Math.max(1, Math.ceil((fresh[0] + windowMs - now) / 1000));
+        return { allowed: false, retryAfterSeconds };
+    }
+    fresh.push(now);
+    buckets.set(key, fresh);
+    if (buckets.size > 20000) {
+        const oldest = buckets.keys().next().value;
+        if (oldest !== undefined)
+            buckets.delete(oldest);
+    }
+    return { allowed: true, retryAfterSeconds: 0 };
+}
+function tooMany(retryAfterSeconds) {
+    return Response.json({ error: 'RATE_LIMITED' }, {
+        status: 429,
+        headers: { ...relayHttpHeaders('json'), 'retry-after': String(retryAfterSeconds) },
+    });
+}
+async function applyRateLimit(request, env, bucket) {
+    const ip = clientIp(request);
+    const decision = slidingWindow(bucket + '\n' + ip, envInt(env, 'ACP_RATE_LIMIT_MAX', DEFAULT_RATE_LIMIT_MAX), envInt(env, 'ACP_RATE_LIMIT_WINDOW_MS', DEFAULT_RATE_LIMIT_WINDOW_MS), Date.now());
+    if (!decision.allowed)
+        return tooMany(decision.retryAfterSeconds);
+    const limiter = env?.RATE_LIMITER;
+    if (!limiter)
+        return undefined;
+    try {
+        const result = await limiter.limit({ key: ip + ':' + bucket });
+        if (!result.success)
+            return tooMany(60);
+    }
+    catch {
+        return Response.json({ error: 'RATE_LIMITER_UNAVAILABLE' }, { status: 503, headers: relayHttpHeaders('json') });
+    }
+    return undefined;
+}
+function recipientOf(value) {
+    if (!value || typeof value !== 'object')
+        return undefined;
+    const payload = value.payload;
+    if (!payload || typeof payload !== 'object')
+        return undefined;
+    const did = payload.recipientDid;
+    return typeof did === 'string' ? did : undefined;
+}
+async function readBody(request, limit) {
+    if (Number(request.headers.get('content-length')) > limit)
+        throw new Error('BODY_TOO_LARGE');
+    const reader = request.body?.getReader();
+    if (!reader)
+        throw new Error('MISSING_BODY');
+    const chunks = [];
+    let size = 0;
+    try {
+        while (true) {
+            const { value, done } = await reader.read();
+            if (done)
+                break;
+            size += value.byteLength;
+            if (size > limit) {
+                await reader.cancel();
+                throw new Error('BODY_TOO_LARGE');
+            }
+            chunks.push(value);
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    return Buffer.concat(chunks).toString('utf8');
+}
+function forward(request, body) {
+    const url = new URL(request.url);
+    url.pathname = canonicalRelayPath(url.pathname);
+    if (body === undefined)
+        return new Request(url, request);
+    return new Request(url, { method: request.method, headers: request.headers, body });
+}
+function inboxRoutes(method, path) {
+    if (path === '/wake' || path === '/delivery-status')
+        return true;
+    if (method === 'POST' && path === '/envelopes')
+        return true;
+    if (method === 'GET' &&
+        (path === '/envelopes' || path === '/stream' || path.startsWith('/inbox/')))
+        return true;
+    return method === 'DELETE' && (path === '/envelopes' || path.startsWith('/envelopes/'));
+}
+const localHandler = createRelayFetchHandler();
+export async function handleRelayEdge(request, env) {
+    const url = new URL(request.url);
+    const path = canonicalRelayPath(url.pathname);
+    if (request.method === 'GET' && path === '/health')
+        return Response.json({ status: 'ok' }, { headers: relayHttpHeaders('json') });
+    const bucket = rateBucket(request.method, path);
+    if (bucket) {
+        const limited = await applyRateLimit(request, env, bucket);
+        if (limited)
+            return limited;
+    }
+    if (!env?.RELAY)
+        return localHandler(request);
+    try {
+        if (!inboxRoutes(request.method, path))
+            return env.RELAY.get(env.RELAY.idFromName('registry')).fetch(forward(request));
+        let body;
+        let recipient = '';
+        if (request.method === 'POST' && path === '/envelopes') {
+            body = await readBody(request, envInt(env, 'ACP_MAX_ENVELOPE_BYTES', DEFAULT_MAX_ENVELOPE_BYTES));
+            let parsed;
+            try {
+                parsed = JSON.parse(body);
+            }
+            catch {
+                throw new Error('INVALID_ENVELOPE');
+            }
+            recipient = recipientOf(parsed) ?? '';
+        }
+        else
+            recipient = inboxRecipientFromRequest(path, url) ?? url.searchParams.get('recipient') ?? '';
+        // Validate before idFromName so a missing or forged DID cannot mint an object.
+        resolveDid(recipient);
+        return env.RELAY.get(env.RELAY.idFromName('inbox:' + recipient)).fetch(forward(request, body));
+    }
+    catch (error) {
+        return relayErrorResponse(error);
+    }
+}
+export default {
+    fetch(request, env) {
+        return handleRelayEdge(request, env);
+    },
+};
+//# sourceMappingURL=worker.js.map

package/dist/packages/relay/dist/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAE7D,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,uBAAuB,EACvB,0BAA0B,EAC1B,yBAAyB,EACzB,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGtD,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,WAAW,GACZ,MAAM,cAAc,CAAC;AAetB;;;;GAIG;AACH,MAAM,OAAO,kBAAkB;IAanB;IAZF,KAAK,CAAgB;IACrB,OAAO,CAA0C;IACjD,KAAK,CAAgB;IAC7B,mFAAmF;IAC3E,IAAI,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3C,gBAAgB,GAAG,CAAC,CAAC;IACrB,aAAa,CAAiB;IAC9B,eAAe,CAAW;IAC1B,yBAAyB,CAAW;IACpC,iBAAiB,CAAgB;IACjC,MAAM,CAAgB;IAC9B,YACU,KAAmB,EAC3B,GAA6B;QADrB,UAAK,GAAL,KAAK,CAAc;QAG3B,IAAI,CAAC,yBAAyB,GAAG,OAAO,GAAG,EAAE,oBAAoB,KAAK,QAAQ;YAC5E,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAChE,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,EAAE,GAAG,kBAAkB,CAAC,GAAG,CAAC;YACzD,6EAA6E;YAC7E,IAAI,EAAG,GAAG,EAAE,QAAyC,IAAI,gBAAgB,CAAC,GAAG,CAAC;SAC/E,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,uBAAuB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;QACxF,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACpF,IAAI,CAAC,iBAAiB,GAAG,kBAAkB,EAAE,CAAC;QAC9C,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,qBAAqB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACnE,CAAC;IACO,KAAK,CAAC,SAAS;QACrB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAY,MAAM,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,yBAAyB,IAAI,IAAI,EAAE,eAAe,IAAI,eAAe,EAAE,CAAC;QACzF,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE;YAClE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc;YAClC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,kBAAkB;SACvC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,MAAM,CAAC,QAAQ;YAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzD,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,QAAQ,IAAI,kBAAkB,EAAE,CAAC;QACjE,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC;QAC3B,IAAI,MAAM,CAAC,MAAM;YAAE,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;IAC7B,CAAC;IACD,iFAAiF;IACzE,KAAK,CAAC,aAAa,CAAC,MAA6C;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,WAAW,CACtB,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,EACrE,kBAAkB,EAAE,EACpB,IAAI,CACL,CAAC;QACF,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO;QACvC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE;YACnC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,UAAU,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,uFAAuF;IAC/E,OAAO,CAAI,IAAsB;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAClB,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACF,OAAO,GAAG,CAAC;IACb,CAAC;IACD;;;;;OAKG;IACK,KAAK,CAAC,aAAa;QACzB,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QAC1B,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;YACzD,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;YAC7B,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;QAC3C,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;QACpE,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC1B,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;YAChC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAC9B,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;YAC7B,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC;QACxC,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,CAAC;YACH,qEAAqE;YACrE,uEAAuE;YACvE,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;YAC9E,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;YAC9F,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC1B,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;YAChC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAC9B,SAAS,GAAG,IAAI,CAAC;YACjB,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM;gBAC3B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO;oBAAE,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,4EAA4E;YAC5E,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,eAAe,KAAK,OAAO;gBAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACvF,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;IAC/B,CAAC;IACO,KAAK,CAAC,UAAU,CAAC,IAAiB,EAAE,IAAmB,EAAE,OAAe;QAC9E,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9E,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;QAC9F,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;QAChC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO;QACvC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvE,CAAC;IACO,KAAK,CAAC,eAAe;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC7C,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YACrC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;gBACzC,OAAO;YACT,CAAC;YACD,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;QAC9E,CAAC;IACH,CAAC;IACD,6EAA6E;IACrE,OAAO;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,wGAAwG;IAChG,gBAAgB;QACtB,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC,aAAa,CAAC;QAClD,IAAI,CAAC,aAAa,GAAG,CAAC,KAAK,IAAI,EAAE;YAC/B,SAAS,CAAC;gBACR,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;oBAC5C,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;oBAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAAE,CAAC;oBAChD,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;oBAC3B,OAAO,IAAI,CAAC;gBACd,CAAC,CAAC,CAAC;gBACH,IAAI,CAAC,OAAO;oBAAE,OAAO;gBACrB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;gBACpE,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;oBAC5B,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;oBACxD,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;gBAC7B,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IACO,qBAAqB;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC;QAC7B,gGAAgG;QAChG,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,KAAK,CAAC;QACjB,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QAC/C,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAChC,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,OAAgB;QAC1B,MAAM,IAAI,CAAC,KAAK,CAAC;QACjB,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,yFAAyF;IACjF,YAAY,CAAC,OAAgB;QACnC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK;YAAE,OAAO,SAAS,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9C,IACE,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACtD,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;YAE/B,OAAO,SAAS,CAAC;QACnB,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QACtD,OAAO,EAAE,CAAC;IACZ,CAAC;IACO,SAAS;QACf,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;IACD;;;OAGG;IACK,KAAK,CAAC,cAAc,CAAC,OAAgB;QAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;QACvD,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACtF,kGAAkG;QAClG,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;QACpD,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACjF,CAAC;IACO,KAAK,CAAC,YAAY,CAAC,OAAgB;QACzC,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC1D,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAChC,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;YACpD,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC;IACjB,CAAC;IACO,KAAK,CAAC,cAAc,CAC1B,OAAyC,EACzC,MAAmB;QAEnB,oEAAoE;QACpE,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAqB,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,IAAI,QAAoC,CAAC;YACzC,OAAO,CAAC,QAAQ,GAAG,OAAO,EAAE,CAAC;gBAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3B,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IACO,KAAK,CAAC,MAAM,CAAC,OAAgB;QACnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,QAAQ,CAAC;QAClC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YACpE,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACrC,OAAO,IAAI,QAAQ,CACjB,IAAI,cAAc,CAAa;gBAC7B,KAAK,CAAC,IAAI,CAAC,UAAU;oBACnB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;oBAC5C,IAAI,IAAI;wBAAE,UAAU,CAAC,KAAK,EAAE,CAAC;yBACxB,CAAC;wBACJ,MAAM,OAAO,EAAE,CAAC;wBAChB,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBAC5B,CAAC;gBACH,CAAC;gBACD,KAAK,CAAC,MAAM;oBACV,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gBACxB,CAAC;aACF,CAAC,EACF,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CACvD,CAAC;QACJ,CAAC;QACD,IACE,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACvE,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ;gBAC1B,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;YAC5D,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;YACnF,IAAI,CAAC,gBAAgB,KAAK,IAAI,CAAC,KAAK,CAAC,eAAe;YAEpD,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC7B,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC7B,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAC1C,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAYnD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;AAE5C,gFAAgF;AAChF,MAAM,UAAU,oBAAoB;IAClC,OAAO,CAAC,KAAK,EAAE,CAAC;AAClB,CAAC;AAED,SAAS,SAAS,CAAC,GAA6B,EAAE,GAAW;IAC3D,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AACD,SAAS,MAAM,CAAC,GAA6B,EAAE,GAAW,EAAE,QAAgB;IAC1E,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IACzD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;AACzE,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,QAAQ,CAAC,OAAgB;IACvC,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,CAAC;IAC3D,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IAClB,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACzD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAC9C,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,UAAU,CAAC,MAAc,EAAE,IAAY;IAC9C,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,kBAAkB;QAAE,OAAO,eAAe,CAAC;IAC5E,IAAI,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,YAAY;QAAE,OAAO,eAAe,CAAC;IACvE,IAAI,MAAM,KAAK,KAAK,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3E,OAAO,cAAc,CAAC;IACxB,IAAI,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC;IACjE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa,CACpB,GAAW,EACX,GAAW,EACX,QAAgB,EAChB,GAAW;IAEX,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,GAAG,QAAQ,CAAC,CAAC;IACjF,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACxB,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,QAAQ,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QACtF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC/C,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxB,IAAI,OAAO,CAAC,IAAI,GAAG,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;QAC3C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,OAAO,CAAC,iBAAyB;IACxC,OAAO,QAAQ,CAAC,IAAI,CAClB,EAAE,KAAK,EAAE,cAAc,EAAE,EACzB;QACE,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,iBAAiB,CAAC,EAAE;KACnF,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,OAAgB,EAChB,GAA6B,EAC7B,MAAc;IAEd,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,QAAQ,GAAG,aAAa,CAC5B,MAAM,GAAG,IAAI,GAAG,EAAE,EAClB,MAAM,CAAC,GAAG,EAAE,oBAAoB,EAAE,sBAAsB,CAAC,EACzD,MAAM,CAAC,GAAG,EAAE,0BAA0B,EAAE,4BAA4B,CAAC,EACrE,IAAI,CAAC,GAAG,EAAE,CACX,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,GAAG,EAAE,YAAY,CAAC;IAClC,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,GAAG,GAAG,MAAM,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC,IAAI,CAClB,EAAE,KAAK,EAAE,0BAA0B,EAAE,EACrC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,CACnD,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,OAAO,GAAI,KAA+B,CAAC,OAAO,CAAC;IACzD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,GAAG,GAAI,OAAsC,CAAC,YAAY,CAAC;IACjE,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,OAAgB,EAAE,KAAa;IACrD,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;IACzC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;YACzB,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;gBACjB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACpC,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,OAAO,CAAC,OAAgB,EAAE,IAAa;IAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,GAAG,CAAC,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACzD,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,WAAW,CAAC,MAAc,EAAE,IAAY;IAC/C,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACjE,IAAI,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IAC5D,IACE,MAAM,KAAK,KAAK;QAChB,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAE3E,OAAO,IAAI,CAAC;IACd,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,YAAY,GAAG,uBAAuB,EAAE,CAAC;AAE/C,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAgB,EAChB,GAAkB;IAElB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,SAAS;QAChD,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAChD,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,GAAG,EAAE,KAAK;QAAE,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC;YACpC,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QACjF,IAAI,IAAwB,CAAC;QAC7B,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YACvD,IAAI,GAAG,MAAM,QAAQ,CACnB,OAAO,EACP,MAAM,CAAC,GAAG,EAAE,wBAAwB,EAAE,0BAA0B,CAAC,CAClE,CAAC;YACF,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACtC,CAAC;YACD,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACxC,CAAC;;YAAM,SAAS,GAAG,yBAAyB,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACnG,+EAA+E;QAC/E,UAAU,CAAC,SAAS,CAAC,CAAC;QACtB,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IACjG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;AACH,CAAC;AAED,eAAe;IACb,KAAK,CAAC,OAAgB,EAAE,GAAkB;QACxC,OAAO,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC;CACF,CAAC"}

package/dist/packages/runtime/dist/a2a.d.ts

@@ -0,0 +1,8 @@
+import type { AgentCard, Task, Message, Artifact } from '@a2a-js/sdk';
+import type { KeyPair, SignedEnvelope, State } from '@acp/core';
+export type { AgentCard, Task, Message, Artifact } from '@a2a-js/sdk';
+export declare function agentCard(name: string, url: string): AgentCard;
+export declare function a2aTask(taskId: string, state: State, data?: Record<string, unknown>): Task;
+export declare function a2aMessage(taskId: string, messageId: string, data: Record<string, unknown>): Message;
+export declare function wrapA2A(wire: Task | Message | Artifact, taskId: string, recipientDid: string, seq: number, key: KeyPair): SignedEnvelope;
+export declare function unwrapA2A(envelope: SignedEnvelope, recipientDid: string): Task | Message | Artifact;

package/dist/packages/runtime/dist/a2a.js

@@ -0,0 +1,69 @@
+import { signEnvelope, verifyEnvelope } from '../../core/dist/index.js';
+export function agentCard(name, url) {
+    return {
+        name,
+        description: 'Sealbridge owner gateway',
+        url,
+        version: '0.2.0',
+        protocolVersion: '0.3.0',
+        capabilities: { streaming: false },
+        defaultInputModes: ['application/json'],
+        defaultOutputModes: ['application/json'],
+        skills: [
+            {
+                id: 'acp-task',
+                name: 'Contract-bound collaboration',
+                description: 'Signed contracts and capability-constrained execution',
+                tags: ['acp'],
+            },
+        ],
+    };
+}
+const states = {
+    PROPOSED: 'submitted',
+    ACCEPTED: 'submitted',
+    IN_PROGRESS: 'working',
+    DELIVERED: 'input-required',
+    VERIFY_ACCEPT: 'input-required',
+    VERIFY_REJECT: 'rejected',
+    SETTLED: 'completed',
+    CANCELLED: 'canceled',
+    DISPUTED: 'input-required',
+};
+export function a2aTask(taskId, state, data) {
+    return {
+        kind: 'task',
+        id: taskId,
+        contextId: taskId,
+        status: { state: states[state] },
+        ...(data
+            ? { artifacts: [{ artifactId: taskId + '-report', parts: [{ kind: 'data', data }] }] }
+            : {}),
+    };
+}
+export function a2aMessage(taskId, messageId, data) {
+    return {
+        kind: 'message',
+        messageId,
+        taskId,
+        contextId: taskId,
+        role: 'agent',
+        parts: [{ kind: 'data', data }],
+    };
+}
+export function wrapA2A(wire, taskId, recipientDid, seq, key) {
+    return signEnvelope({ taskId, recipientDid, seq, eventType: 'A2A', payload: wire }, key);
+}
+export function unwrapA2A(envelope, recipientDid) {
+    if (!verifyEnvelope(envelope, recipientDid) || envelope.payload.eventType !== 'A2A')
+        throw new Error('INVALID_A2A_ENVELOPE');
+    const p = envelope.payload.payload;
+    if (!p || typeof p !== 'object' || (!('kind' in p) && !('artifactId' in p)))
+        throw new Error('INVALID_A2A_WIRE');
+    if ('kind' in p && p.kind === 'task' && (p.id !== envelope.payload.taskId || !p.status))
+        throw new Error('INVALID_A2A_TASK');
+    if ('kind' in p && p.kind === 'message' && p.taskId !== envelope.payload.taskId)
+        throw new Error('INVALID_A2A_MESSAGE');
+    return p;
+}
+//# sourceMappingURL=a2a.js.map

package/dist/packages/runtime/dist/a2a.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"a2a.js","sourceRoot":"","sources":["../src/a2a.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAGzD,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,GAAW;IACjD,OAAO;QACL,IAAI;QACJ,WAAW,EAAE,0BAA0B;QACvC,GAAG;QACH,OAAO,EAAE,OAAO;QAChB,eAAe,EAAE,OAAO;QACxB,YAAY,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;QAClC,iBAAiB,EAAE,CAAC,kBAAkB,CAAC;QACvC,kBAAkB,EAAE,CAAC,kBAAkB,CAAC;QACxC,MAAM,EAAE;YACN;gBACE,EAAE,EAAE,UAAU;gBACd,IAAI,EAAE,8BAA8B;gBACpC,WAAW,EAAE,uDAAuD;gBACpE,IAAI,EAAE,CAAC,KAAK,CAAC;aACd;SACF;KACF,CAAC;AACJ,CAAC;AACD,MAAM,MAAM,GAA6B;IACvC,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,WAAW;IACrB,WAAW,EAAE,SAAS;IACtB,SAAS,EAAE,gBAAgB;IAC3B,aAAa,EAAE,gBAAgB;IAC/B,aAAa,EAAE,UAAU;IACzB,OAAO,EAAE,WAAW;IACpB,SAAS,EAAE,UAAU;IACrB,QAAQ,EAAE,gBAAgB;CAC3B,CAAC;AACF,MAAM,UAAU,OAAO,CAAC,MAAc,EAAE,KAAY,EAAE,IAA8B;IAClF,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,MAAM;QACV,SAAS,EAAE,MAAM;QACjB,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;QAChC,GAAG,CAAC,IAAI;YACN,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE;YACtF,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,UAAU,CACxB,MAAc,EACd,SAAiB,EACjB,IAA6B;IAE7B,OAAO;QACL,IAAI,EAAE,SAAS;QACf,SAAS;QACT,MAAM;QACN,SAAS,EAAE,MAAM;QACjB,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;KAChC,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,OAAO,CACrB,IAA+B,EAC/B,MAAc,EACd,YAAoB,EACpB,GAAW,EACX,GAAY;IAEZ,OAAO,YAAY,CACjB,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,IAAuB,EAAE,EACjF,GAAG,CACJ,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,SAAS,CACvB,QAAwB,EACxB,YAAoB;IAEpB,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,YAAY,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,SAAS,KAAK,KAAK;QACjF,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,OAA+C,CAAC;IAC3E,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACtC,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACtC,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,OAAO,CAAC,MAAM;QAC7E,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACzC,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/packages/runtime/dist/adapter.d.ts

@@ -0,0 +1,51 @@
+import type { AgentSkill, Json, TaskManifest } from '@acp/core';
+import type { SandboxBoundaryMetadata } from '@acp/sandbox';
+export interface UsageMetrics {
+    inputTokens: number;
+    outputTokens: number;
+    totalTokens: number;
+    toolCalls: number;
+    wallTimeMs: number;
+}
+export interface ProgressMetrics {
+    inputTokens?: number;
+    outputTokens?: number;
+    toolInvocations?: number;
+    elapsedMs?: number;
+}
+export interface ProgressPayload {
+    percent?: number;
+    step: string;
+    message?: string;
+    metrics?: ProgressMetrics;
+}
+export interface ProtocolEnvelope<T> {
+    taskId: string;
+    seq: number;
+    eventType: string;
+    senderDid: string;
+    recipientDid: string;
+    payload: T;
+}
+export interface AgentTaskContext {
+    taskId: string;
+    manifest: TaskManifest;
+    input: Json;
+    callTool: (tool: string, args: Json) => Promise<Json>;
+    reportUsage: (delta: Partial<UsageMetrics>) => void;
+    reportProgress?: (progress: ProgressPayload) => void | Promise<void>;
+    signal: AbortSignal;
+    workspaceDir: string;
+    /**
+     * Host-reported isolation. `level` is the path that ran (`subprocess_restricted`
+     * or `oci_container`), not a label chosen by task code. `boundary` is set by
+     * the sandbox runner: Node's permission model does not set `kernelNetworkIsolated`.
+     */
+    reportIsolation?: (level: string, boundary?: SandboxBoundaryMetadata) => void;
+}
+export interface AgentAdapter {
+    id: string;
+    name: string;
+    skills: AgentSkill[];
+    executeTask(context: AgentTaskContext): Promise<Json>;
+}

package/dist/packages/runtime/dist/adapter.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=adapter.js.map

package/dist/packages/runtime/dist/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":""}