@agent-network-protocol/dsh-anp-identity 0.1.2 → 0.1.3-rc.1

package/BOUNDARY.md

@@ -2,6 +2,12 @@
 
 The DSH package is a policy and lifecycle layer around ANP Identity. It does not replace the native custody boundary.
 
+The v7 ordinary-plugin creation/authorization UI and Host-bound `UserIdentityClient`
+are documented in [V7-MANAGEMENT.md](./V7-MANAGEMENT.md). The legacy
+`IdentityClientLease` below remains a separate compatibility contract. Ordinary
+user consumers cannot acquire it or supply an HTTP transport callback; their
+approved dispatch uses Host-owned transport.
+
 ## Trust zones
 
 - ANP Identity Rust and its Node binding hold Store Root Keys, managed private keys, and decrypted signing material.
@@ -11,6 +17,12 @@ The DSH package is a policy and lifecycle layer around ANP Identity. It does not
 
 Consumer identifiers are soft same-process identities. The allowlists prevent accidental cross-plugin use and provide an auditable policy, but JavaScript in the same process is not a sandbox.
 
+Known unresolved limitation: ordinary facades omit management methods, but the
+shared root service and Host gateway still allow same-process code to reach the
+manager without the approval UI (review F2). Host-side call authentication is not
+part of the current scoped fix. Excluding Host-associated identities from ordinary
+grants does not resolve this manager-entry vulnerability.
+
 ## Secret rules
 
 - The default client surface has no raw ECDH, private-key import, Root Key export, sealed envelope, or Header patch method.
@@ -31,7 +43,7 @@ Consumer identifiers are soft same-process identities. The allowlists prevent ac
 
 ## HTTP dispatcher
 
-The default client API exposes only `dispatch(Request, transport)`:
+The legacy client API exposes `dispatch(Request, transport)`:
 
 - exact HTTPS origins must be authorized by Host configuration and requested by the lease;
 - caller-supplied `Authorization`, `Signature-Input`, `Signature`, and `Content-Digest` are rejected;
@@ -44,4 +56,4 @@ AWiki's Bearer Token cache, challenge processing, and retry policy remain in `ds
 
 ## Out of scope
 
-This package does not provide OS sandboxing, malicious-plugin isolation, DID resolution or publication, remote backup, Store rekey, Root Key rotation, or an end-user approval UI. Root Transfer user-presence confirmation remains an AWiki workflow above the Host Provider lease.
+This package does not provide OS sandboxing, malicious-plugin isolation, DID resolution or publication, remote backup, Store rekey, or Root Key rotation. Its ordinary-plugin approval UI does not replace Root Transfer user-presence confirmation, which remains an AWiki workflow above the Host Provider lease.

package/README.md

@@ -2,7 +2,7 @@
 
 `@agent-network-protocol/dsh-anp-identity` gives DSH applications one shared, multi-DID identity store without making each application implement key custody, DID document lifecycle, crash recovery, or request signing.
 
-Applications use a small TypeScript facade through `ctx.anpIdentity`. The plugin delegates private-key operations to the ANP Identity native module, keeps private keys encrypted at rest, and stores only non-secret DSH metadata—labels, handles, and consumer grants—in its catalog.
+Ordinary plugins use `bindIdentityClient(ctx)` to request user-approved identity creation and use. Trusted Host integrations retain a separate facade through `ctx.anpIdentity`. The plugin delegates private-key operations to the ANP Identity native module, keeps private keys encrypted at rest, and stores only non-secret DSH metadata—labels, handles, and consumer grants—in its catalog.
 
 ## What problem it solves
 
@@ -14,10 +14,11 @@ A DSH installation may host several plugins and several independent DIDs. Those
 - How can a request be authenticated without exposing a reusable signature header patch?
 - How can a Store contain several DIDs while handles and deletion grants remain consistent?
 
-This package supplies that coordination layer. ANP Identity remains the source of truth for identities and encrypted keys. A transactional `catalog-v1` adds DSH-specific ownership metadata. Creation uses a recoverable intent; deletion writes a tombstone before touching the native Store; cross-process mutations use a file lock, generation checks, and atomic rename.
+This package supplies that coordination layer. ANP Identity remains the source of truth for identities and encrypted keys. A transactional catalog adds DSH-specific ownership metadata. Creation uses a recoverable intent; deletion writes a tombstone before touching the native Store; cross-process mutations use a file lock, generation checks, and atomic rename. Management upgrades the catalog to schema v2; see the coordinated upgrade and rollback instructions in [V7-MANAGEMENT.md](./V7-MANAGEMENT.md).
 
 ## What it provides
 
+- An optional settings page with Handle/DID details, creation confirmations, an authorization inbox, once or persistent revocable grants, permission details and guarded deletion.
 - Multi-DID create, list, open, delete, and recovery operations.
 - Purpose-based Ed25519 signing and verification.
 - Origin Proof signing.
@@ -78,7 +79,27 @@ those defaults for a different deployment.
 
 ## Use it from another DSH plugin
 
-Declare the Cordis dependency, acquire only the capabilities you need, and dispose the lease with the calling plugin's fiber:
+Ordinary plugins must be configured in `userConsumers` by the Host. They use the loader-bound client below, not a self-declared consumer name or a legacy lease:
+
+```ts
+import { bindIdentityClient } from '@agent-network-protocol/dsh-anp-identity/user-client'
+
+export const inject = ['anpIdentity']
+// Call from the installed plugin's Context after its Loader entry is ready.
+const client = bindIdentityClient(ctx)
+const request = await client.requestCreateIdentity({
+  requestId: 'stable-create-id',
+  purpose: 'Create an identity for this integration',
+  parameters: { label: 'Work', domain: 'example.com', path: '/agents/work' },
+})
+// Query request.id after user confirmation, then request separate use authorization.
+```
+
+Creation does not publish the document, register a Handle, or grant use. Once authorization binds one operation; permanent authorization lasts until revoked. The current MVP grants the full ordinary capability bundle, not individually selected permissions. See [the complete management contract](./V7-MANAGEMENT.md) and the [runnable signed HTTP demo](../../demo/dsh-http/README.md).
+
+### Existing trusted Host consumers
+
+The following legacy facade is for explicitly configured **trusted Host integrations**, not ordinary user-mode plugins. Declare the Cordis dependency, acquire only the capabilities you need, and dispose the lease with the calling plugin's fiber:
 
 ```ts
 import type { Context } from '@deepseek-ai/cordis'
@@ -153,7 +174,7 @@ identity namespace; it does not revoke or modify the remote DID.
 ## Development
 
 ```bash
-npm install --legacy-peer-deps
+npm ci --legacy-peer-deps
 npm run verify
 ```
 
@@ -167,6 +188,10 @@ expected by the workspace:
 npm run test:functional
 ```
 
+After publishing, run `npm run test:functional -- --published` to repeat the
+same real DSH/HTTPS acceptance using the exact plugin version from npm instead
+of a locally packed candidate.
+
 It downloads the exact published native wrapper and host platform package
 pinned by this plugin, packs the DSH plugin from source, and installs them
 into a temporary real DSH profile, then sends signed GET and POST
@@ -174,4 +199,12 @@ requests to an independent HTTPS process backed by the ANP Python verifier. A
 tampered POST must be rejected. The temporary DSH profile, Store, certificate,
 and tarballs are removed after the run.
 
+The management UI tests render the real DSH primitives. Version `0.1.5-rc.1` of
+`@deepseek-ai/dsh-client-ui-primitives` imports syntax-highlighting, Markdown,
+terminal, and styling packages from its entry point but lists them only as its
+own development dependencies. We explicitly include those imports as development
+dependencies here so a clean `npm ci` can load the same components without
+relying on a parent workspace's `node_modules`. They are test-environment
+dependencies; the browser build continues to use the host-provided UI primitives.
+
 Licensed under Apache-2.0.

package/README.zh.md

@@ -2,7 +2,7 @@
 
 `@agent-network-protocol/dsh-anp-identity` 为 DSH 应用提供共享的多 DID 身份 Store。应用不需要各自实现私钥托管、DID Document 生命周期、崩溃恢复和请求签名。
 
-普通插件通过 `ctx.anpIdentity` 使用精简的 TypeScript Facade。私钥操作由 ANP Identity 原生模块完成；私钥在磁盘上加密保存。DSH catalog 只记录 label、handle 和 consumer grant 等非秘密元数据。
+普通插件通过 `bindIdentityClient(ctx)` 申请创建身份和使用授权；`ctx.anpIdentity` 的旧 lease 接口保留给可信 Host 集成。私钥操作由 ANP Identity 原生模块完成；私钥在磁盘上加密保存。DSH catalog 只记录 label、handle 和 consumer grant 等非秘密元数据。
 
 ## 它解决什么问题
 
@@ -14,7 +14,7 @@
 - HTTP 请求如何完成身份认证，同时不把可复用 Header patch 交给调用方；
 - 多 DID、通用 handle、consumer grant 和删除保护如何保持一致。
 
-ANP Identity Store 是身份与加密密钥的真值。插件增加事务化的 `catalog-v1`：创建前写 intent，删除前写 tombstone；跨进程修改使用文件锁、generation 检查和原子 rename。异常重启后流程会继续完成，未知身份只会成为无授权的 `Unclaimed`，不会猜测所有者。
+ANP Identity Store 是身份与加密密钥的真值。插件增加事务化的 catalog：创建前写 intent，删除前写 tombstone；跨进程修改使用文件锁、generation 检查和原子 rename。异常重启后流程会继续完成，未知身份只会成为无授权的 `Unclaimed`，不会猜测所有者。管理功能将 catalog 升级为 v2，升级和回滚必须遵循 [V7-MANAGEMENT.md](./V7-MANAGEMENT.md) 的停写与一致性要求。
 
 ## 主要能力
 
@@ -72,6 +72,14 @@ keyring 的 `rootKeyProviderId` 格式为 `service/account`；env 模式填写
 
 ## 其他 DSH 插件如何使用
 
+普通插件由 Host 加入 `userConsumers`，通过 `bindIdentityClient(ctx)` 提交请求，等待创建确认，再单独申请使用授权。创建不会发布 DID 文档、注册 Handle 或自动授予使用权。支持单次授权和持续到撤销的永久授权；当前默认授予全部普通使用权限，暂不支持逐项选择。
+
+完整 API 与边界见 [管理说明](./V7-MANAGEMENT.md)；可运行示例见 [HTTP 签名 demo](../../demo/dsh-http/README.md)。设置页包含 Handle/DID、授权请求、权限详情和撤销入口。
+
+### 既有可信 Host 集成
+
+以下旧 lease 示例仅适用于明确配置的可信 Host 集成，不适用于普通 user-mode 插件。
+
 调用插件声明 `inject = ['anpIdentity']`，申请最小 capability，并让 lease 随自己的 Cordis fiber 释放：
 
 ```ts

package/V7-MANAGEMENT.md

@@ -0,0 +1,90 @@
+# Identity management and ordinary plugin authorization
+
+This implementation adds an optional DSH settings section, a shared approval overlay and a Host-owned persistent authorization boundary. It does not change the ANP identity, signature or HTTP wire protocols. Real native Desktop acceptance is a separate integration gate; package tests are not that evidence.
+
+## Installation and authority
+
+Load the existing service/provider patch. Configure `allowConsumers` with exact installed loader package identifiers and put ordinary plugins in `userConsumers`. Provider consumers cannot also be user consumers. Configure each plugin's exact HTTPS `httpAllowedOrigins`; the full ordinary capability bundle contains public identity reads, non-management signing, and Host-controlled authenticated HTTP.
+
+Load the optional `./management-remote` Host plugin and `./client` browser contribution through the DSH loader. The browser uses `settings.section` and `shell.overlay`; it never imports the native provider. `./remote` describes only manager queries and decisions, not signing or transport APIs.
+
+```ts
+// Host configuration, not a value supplied by an ordinary request.
+{
+  allowConsumers: ['example-consumer', 'trusted-provider'],
+  userConsumers: ['example-consumer'],
+  allowProviderConsumers: ['trusted-provider'],
+  httpAllowedOrigins: { 'example-consumer': ['https://api.example.com'] },
+}
+```
+
+The Host resolves ordinary callers by the actual installed Cordis fiber and loader entry. Unknown, disabled and mismatched contexts fail closed. Normal user-mode proxies cannot acquire legacy or Provider leases by claiming a different allowed consumer string. Ordinary facades do not contain manager methods. This is cooperative same-process policy, not a sandbox.
+
+**Unresolved security limitation (review F2):** the proxy check does not authenticate
+the origin of a call made through `ctx.root.get('anpIdentity')`. Same-process plugins
+can also reach the shared management Remote through the Host gateway. The approval
+UI is therefore not an enforced isolation boundary against such plugins. Host-side
+management-call authentication is explicitly outside this fix's scope; do not report
+F2 as resolved or these changes as complete malicious-plugin isolation.
+
+## Ordinary consumer flow
+
+```ts
+import { bindIdentityClient } from '@agent-network-protocol/dsh-anp-identity/user-client'
+
+const identity = bindIdentityClient(ctx)
+const creation = await identity.requestCreateIdentity({
+  requestId: 'stable-create-id',
+  purpose: 'Create the identity used by this integration',
+  parameters: { label: 'Work', handle: 'work.example', domain: 'example.com', path: '/agents/work' },
+})
+// Return immediately to the plugin's caller. Query this ID after notification.
+const result = await identity.getCreateRequest(creation.id)
+if (result.kind === 'create' && result.executionStatus === 'succeeded') {
+  const access = await identity.requestAccess({
+    requestId: 'stable-operation-id',
+    purpose: 'Read my remote profile',
+    identity: result.result!.reference,
+    operation: { action: 'http', request: new Request('https://api.example.com/profile') },
+  })
+  // After the user approves, query the authoritative request again.
+  const approved = await identity.getAccessRequest(access.id)
+  if (approved.kind === 'access' && approved.status === 'approved' && approved.grantId) {
+    const client = await identity.openAuthorizedIdentity(approved.grantId)
+    await client.authenticatedHttp.dispatch(new Request('https://api.example.com/profile'), 'execution-id')
+  }
+}
+```
+
+Creation and use are separate decisions. Creation does not grant use, publish a document, register a Handle, or disclose keys. The optional `parameters.handle` is supplied by the requesting plugin, normalized using the existing catalog rules, frozen with the other creation parameters, and displayed read-only for confirmation. Approval reserves and persists it through the existing create intent and local uniqueness checks, including crash reconciliation. Omission remains compatible with older plugins; existing identities are not backfilled. The saved Handle is local metadata, not proof of registration or ownership on an external service. A request's purpose is plugin-declared text, not verified business intent.
+
+The ordinary HTTP API does **not** accept a consumer transport callback: the Host dispatches exactly one attempt with manual redirects, validates the fixed operation, signs internally, and does not return signed outbound headers. The confirmation summary explicitly marks a query-bearing URL without storing query names or values; the fingerprint still binds the full URL and body. Permanent mode leads with the persistent full-use scope rather than a single-operation summary. Legacy Host APIs keep their previous transport contract. Raw non-management signatures can still be used outside the website list, as stated in the confirmation UI.
+
+## Persistence and revocation
+
+- Once is the default user choice and binds one immutable operation. The Host fingerprints actual normalized bytes; a consumer cannot supply the fingerprint. The ledger atomically consumes once admission before execution. Multiple objects/processes cannot create extra admissions. Native-key/parameter preflight failures do not consume; admitted failures or uncertain results never refund. An execution ID is a status-query key, not a replay instruction.
+- Once expires unused after five minutes. A permanent grant lasts until revoked, but each opened object lasts five minutes. Permanent execution uses the approved capability/purpose/Origin snapshot intersected with current Host policy. Upgrades do not expand approval.
+- The manager must echo the displayed `reviewedSnapshot` on access approval. A changed Host policy rejects that decision and requires a refreshed review; it cannot silently broaden a pending confirmation after restart.
+- Revocation requires a confirmation showing the plugin and identity before the versioned manager call. A cancelled dialog makes no mutation, and externally invalidated grants close a stale confirmation. Revocation is persisted and checked on every operation and before HTTP transport. In-flight operations may already have executed; neither revocation nor identity deletion logs out external servers.
+- Creation results keep stable operation provenance and deletion tombstones. Uncertain creation is reconciled with the native journal, never blindly recreated. Concurrent creation/recovery uses the same native-create lock.
+- Processed creation records provide a read-only result/reconciliation action, not another creation approval. Startup completes previously fenced deletion tombstones only after confirming absence from both the native Store and catalog. Ordinary requests wait for Provider readiness before taking an authorization transaction, avoiding a startup lock inversion.
+- Denial/revocation suppresses automatic re-prompting even with changed request IDs or wording. The manager's explicit history re-request creates a new record. Disable/uninstall events cancel pending requests; a transient frontend disconnect or ordinary Host restart does not.
+- Public JSON inspection never fetches a remote document. Deletion is forbidden while effective ordinary grants or legacy/Host associations remain; unknown old Provider ownership fails conservatively.
+- Ordinary access uses the same conservative Host-association exclusion. It is enforced during request validation, approval, opening and execution, not just in the identity selector. The selector omits incompatible identities; the management inventory still shows them. User-created ordinary identities remain shareable across plugins through separate user grants.
+- Native policy reads and deletion reconciliation run outside the shared authorization lock. Their ledger changes commit under a generation CAS; conflicts re-read and revalidate, and sustained contention fails closed with `authorization_conflict`. Host association changes advance the same epoch so stale ordinary snapshots cannot commit across them. The transaction callback must not perform external mutations because it may be retried.
+- Deletion persists its fence before releasing the ledger lock for native I/O, then finalizes against fresh ledger state. A separate per-identity cross-process lock serializes duplicate delete executions. Uncertain failures retain the fence for reconciliation; unrelated ledger work is not blocked by native deletion. The short catalog preparation still runs under the shared ledger lock.
+
+## Upgrade and rollback
+
+Stop old writers before upgrade. The existing catalog file is migrated in-place to schema `anp-identity-catalog/2`, with a synced `.before-v2` backup and preserved legacy associations. Backup publication uses temp-file sync, atomic rename and directory sync before the live catalog upgrade. Under the catalog lock, a validated live v1 catalog repairs partial/mismatched backups left by an interrupted older writer; corrupt live catalogs and already-v2 catalogs never replace that backup. Legacy associations do not become user grants. A separate non-secret authorization ledger contains requests, snapshots, operation fingerprints and execution status, never signature payloads, HTTP bodies, private keys or login tokens.
+
+Old processes cannot parse the v2 catalog; mixed-version writes are unsupported. Rollback requires coordinated stopped writers and restoration of matching catalog, authorization and native state, not deletion of just one metadata file. Do not use corrupt-catalog recovery to downgrade a newer schema.
+
+## Verification
+
+Run `npm run verify` after building the matching native Node binding. Tests cover real native Store creation/signatures, caller context, Host HTTP, restart and deletion, plus cross-process ledger contention and UI component/controller behavior. The native binding requires the declared compatible sibling ANP Rust dependency; an older unrelated checkout is not an equivalent build baseline.
+
+DSH native-window, live ordinary-consumer product integration, and real-service checks must be reported separately. No publication, Handle registration, key lifecycle or recovery controls are added to this MVP.
+# Local presentation integration
+
+The optional `settings.nav.icon` contribution provides a contact-card glyph only for the settings menu. Identity list entries remain text-only. The shell owns that root-scoped list slot; ANP registers the glyph under `anp-identity`, matching its settings-section id. Older shells without the slot continue to render the page with their default navigation glyph. This presentation extension does not grant identity access or alter protocol behavior.

package/cordis.patch.yml

@@ -8,6 +8,7 @@
       config:
         stateRoot: !!js process.env.DSH_ANP_IDENTITY_STATE_ROOT
         allowConsumers: !!js JSON.parse(process.env.DSH_ANP_IDENTITY_ALLOW_CONSUMERS ?? '["@awiki/dsh-plugin"]')
+        userConsumers: !!js JSON.parse(process.env.DSH_ANP_IDENTITY_USER_CONSUMERS ?? '[]')
         allowProviderConsumers: !!js JSON.parse(process.env.DSH_ANP_IDENTITY_ALLOW_PROVIDER_CONSUMERS ?? '["@awiki/dsh-plugin"]')
         httpAllowedOrigins: !!js JSON.parse(process.env.DSH_ANP_IDENTITY_HTTP_ALLOWED_ORIGINS ?? '{}')
         recoveryOnOpen: true
@@ -19,3 +20,6 @@
         rootKeyProvider: !!js process.env.DSH_ANP_IDENTITY_ROOT_KEY_PROVIDER ?? 'keyring'
         rootKeyProviderId: !!js process.env.DSH_ANP_IDENTITY_ROOT_KEY_PROVIDER_ID ?? 'anp-identity/dsh'
         keyringFallbackToLocalFile: false
+
+    - id: anp-identity-manager
+      name: '@agent-network-protocol/dsh-anp-identity/management-remote'

package/lib/authorization-types.d.ts

@@ -0,0 +1,150 @@
+import type { IdentityReference } from '@agent-network-protocol/anp-identity';
+/** Only the Host may construct this from the installed plugin context. */
+export interface VerifiedCaller {
+    readonly consumer: string;
+    readonly displayName: string;
+}
+export type OrdinaryCapability = 'identity:read' | 'identity:sign' | 'identity:http-auth';
+export interface CapabilitySnapshot {
+    readonly version: string;
+    readonly capabilities: readonly OrdinaryCapability[];
+    readonly signingPurposes: readonly string[];
+    readonly httpOrigins: readonly string[];
+}
+export type AuthorizationMode = 'once' | 'permanent';
+export type RequestStatus = 'pending' | 'approved' | 'denied' | 'cancelled' | 'expired';
+export interface ControlledOperation {
+    readonly capability: OrdinaryCapability;
+    readonly fingerprint: string;
+    /** Host-produced safe summary, never a signature payload or HTTP body. */
+    readonly summary: string;
+    readonly signingPurpose?: string;
+    readonly httpOrigin?: string;
+}
+export interface CreateParameters {
+    readonly label: string;
+    readonly domain: string;
+    readonly path: string;
+    readonly handle?: string;
+}
+export interface CreateResult {
+    readonly reference: IdentityReference;
+    readonly label: string;
+}
+interface RequestBase {
+    readonly id: string;
+    readonly caller: VerifiedCaller;
+    readonly purpose: string;
+    readonly version: number;
+    readonly status: RequestStatus;
+    readonly createdAt: number;
+    readonly expiresAt: number;
+    readonly fingerprint: string;
+    readonly prompted: boolean;
+    readonly decidedAt?: number;
+    readonly retryOf?: string;
+}
+export interface CreateAuthorizationRequest extends RequestBase {
+    readonly kind: 'create';
+    readonly parameters: CreateParameters;
+    readonly operationId?: string;
+    readonly executionStatus?: 'running' | 'succeeded' | 'unknown' | 'deleted';
+    readonly result?: CreateResult;
+}
+export interface AccessAuthorizationRequest extends RequestBase {
+    readonly kind: 'access';
+    readonly identity?: IdentityReference;
+    readonly operation?: ControlledOperation;
+    readonly mode?: AuthorizationMode;
+    readonly grantId?: string;
+}
+export type AuthorizationRequest = CreateAuthorizationRequest | AccessAuthorizationRequest;
+export interface AuthorizationGrant {
+    readonly id: string;
+    readonly requestId: string;
+    readonly caller: VerifiedCaller;
+    readonly identity: IdentityReference;
+    readonly snapshot: CapabilitySnapshot;
+    readonly mode: AuthorizationMode;
+    readonly version: number;
+    readonly approvedAt: number;
+    readonly status: 'active' | 'consumed' | 'revoked' | 'expired';
+    readonly expiresAt?: number;
+    readonly operation?: ControlledOperation;
+    readonly executionId?: string;
+    readonly revokedAt?: number;
+}
+export interface AuthorizedLease {
+    readonly grantId: string;
+    readonly consumer: string;
+    readonly identity: IdentityReference;
+    readonly grantVersion: number;
+    readonly expiresAt: number;
+}
+export interface AuthorizationExecution {
+    readonly id: string;
+    readonly grantId: string;
+    readonly consumer: string;
+    readonly fingerprint: string;
+    readonly admittedAt: number;
+    readonly grantVersion: number;
+    readonly operation: ControlledOperation;
+    readonly status: 'admitted' | 'succeeded' | 'failed' | 'unknown';
+    readonly finishedAt?: number;
+}
+export interface AuthorizationState {
+    readonly schema: 'anp-identity-authorization/1';
+    generation: number;
+    requests: AuthorizationRequest[];
+    grants: AuthorizationGrant[];
+    executions: AuthorizationExecution[];
+    deletedIdentities: IdentityReference[];
+    deletingIdentities: IdentityReference[];
+    suppressions: {
+        consumer: string;
+        kind: 'create' | 'access';
+        identity?: IdentityReference;
+        requestId: string;
+    }[];
+}
+export interface RequestCreateInput {
+    readonly requestId: string;
+    readonly purpose: string;
+    readonly parameters: CreateParameters;
+}
+export interface RequestAccessInput {
+    readonly requestId: string;
+    readonly purpose: string;
+    readonly identity?: IdentityReference;
+    readonly operation?: ControlledOperation;
+}
+export interface AuthorizationDecision {
+    readonly requestId: string;
+    readonly expectedVersion: number;
+    readonly decision: 'approve' | 'deny';
+    readonly identity?: IdentityReference;
+    readonly mode?: AuthorizationMode;
+    /** Exact scope shown for the selected identity; access approvals must echo it. */
+    readonly reviewedSnapshot?: CapabilitySnapshot;
+}
+export interface DeletionReconciliation {
+    /** Host-sourced durable catalog deletion fences, never arbitrary missing identities. */
+    readonly catalogFences: readonly IdentityReference[];
+    /** Must positively verify this exact reference is absent from both native storage and catalog. */
+    readonly isAbsent: (reference: IdentityReference) => Promise<boolean>;
+}
+export interface AuthorizationOptions {
+    readonly validateCaller: (caller: VerifiedCaller) => Promise<void>;
+    readonly resolveSnapshot: (caller: VerifiedCaller, identity: IdentityReference) => Promise<CapabilitySnapshot>;
+    /** Must use the native durable create journal and never implicitly grant use. */
+    readonly createIdentity: (operationId: string, caller: VerifiedCaller, parameters: CreateParameters) => Promise<CreateResult>;
+    /** Only recover an existing operation; undefined must not trigger creation. */
+    readonly reconcileCreation?: (operationId: string, caller: VerifiedCaller, parameters: CreateParameters) => Promise<CreateResult | undefined>;
+    readonly now?: () => number;
+    readonly requestTtlMs?: number;
+    readonly onceTtlMs?: number;
+    readonly leaseTtlMs?: number;
+    readonly fault?: (point: 'before_rename' | 'after_rename') => void;
+}
+export {};
+//# sourceMappingURL=authorization-types.d.ts.map

package/lib/authorization-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-types.d.ts","sourceRoot":"","sources":["../src/authorization-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAA;AAE7E,0EAA0E;AAC1E,MAAM,WAAW,cAAc;IAAG,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE;AAC3F,MAAM,MAAM,kBAAkB,GAAG,eAAe,GAAG,eAAe,GAAG,oBAAoB,CAAA;AACzF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,YAAY,EAAE,SAAS,kBAAkB,EAAE,CAAA;IACpD,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3C,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAA;CACxC;AACD,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,WAAW,CAAA;AACpD,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,CAAA;AACvF,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAA;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAC7B;AACD,MAAM,WAAW,gBAAgB;IAAG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE;AACtI,MAAM,WAAW,YAAY;IAAG,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAC/F,UAAU,WAAW;IACnB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAC1B;AACD,MAAM,WAAW,0BAA2B,SAAQ,WAAW;IAC7D,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAA;IACrC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,CAAA;IAC1E,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAA;CAC/B;AACD,MAAM,WAAW,0BAA2B,SAAQ,WAAW;IAC7D,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAA;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAA;IACxC,QAAQ,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAA;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAC1B;AACD,MAAM,MAAM,oBAAoB,GAAG,0BAA0B,GAAG,0BAA0B,CAAA;AAC1F,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;IAC/B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAA;IACpC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAA;IACrC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAA;IAC9D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAA;IACxC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC5B;AACD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAA;IACpC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AACD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAA;IACvC,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAA;IAChE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAC7B;AACD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAA;IAC/C,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,oBAAoB,EAAE,CAAA;IAChC,MAAM,EAAE,kBAAkB,EAAE,CAAA;IAC5B,UAAU,EAAE,sBAAsB,EAAE,CAAA;IACpC,iBAAiB,EAAE,iBAAiB,EAAE,CAAA;IACtC,kBAAkB,EAAE,iBAAiB,EAAE,CAAA;IACvC,YAAY,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;QAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CACjH;AACD,MAAM,WAAW,kBAAkB;IAAG,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAA;CAAE;AACnI,MAAM,WAAW,kBAAkB;IAAG,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAA;CAAE;AAC7K,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,QAAQ,EAAE,SAAS,GAAG,MAAM,CAAA;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAA;IACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAA;IACjC,kFAAkF;IAClF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,kBAAkB,CAAA;CAC/C;AACD,MAAM,WAAW,sBAAsB;IACrC,wFAAwF;IACxF,QAAQ,CAAC,aAAa,EAAE,SAAS,iBAAiB,EAAE,CAAA;IACpD,kGAAkG;IAClG,QAAQ,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,iBAAiB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CACtE;AACD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAClE,QAAQ,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,iBAAiB,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAC9G,iFAAiF;IACjF,QAAQ,CAAC,cAAc,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,gBAAgB,KAAK,OAAO,CAAC,YAAY,CAAC,CAAA;IAC7H,+EAA+E;IAC/E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,gBAAgB,KAAK,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAA;IAC7I,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,GAAG,cAAc,KAAK,IAAI,CAAA;CACnE"}

package/lib/authorization-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=authorization-types.js.map

package/lib/authorization-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-types.js","sourceRoot":"","sources":["../src/authorization-types.ts"],"names":[],"mappings":""}

package/lib/authorization.d.ts

@@ -0,0 +1,45 @@
+import type { IdentityReference } from '@agent-network-protocol/anp-identity';
+import type { AccessAuthorizationRequest, AuthorizationDecision, AuthorizationExecution, AuthorizationGrant, AuthorizationOptions, AuthorizationRequest, AuthorizedLease, ControlledOperation, CreateAuthorizationRequest, DeletionReconciliation, RequestAccessInput, RequestCreateInput, VerifiedCaller } from './authorization-types.js';
+export * from './authorization-types.js';
+export declare class AuthorizationError extends Error {
+    readonly code: string;
+    constructor(code: string);
+}
+/** Compute at the Host boundary from the actual immutable operation, not a plugin-provided digest. */
+export declare function freezeOperation(descriptor: Omit<ControlledOperation, 'fingerprint'>, canonicalPayload: unknown): ControlledOperation;
+/** Persistent non-secret authorization ledger. Caller authentication belongs to the Host. */
+export declare class AuthorizationEngine {
+    #private;
+    readonly stateRoot: string;
+    readonly options: AuthorizationOptions;
+    readonly statePath: string;
+    constructor(stateRoot: string, options: AuthorizationOptions);
+    initialize(): Promise<void>;
+    subscribeRequestChanges(listener: () => void): () => void;
+    requestCreate(verifiedCaller: VerifiedCaller, input: RequestCreateInput): Promise<CreateAuthorizationRequest>;
+    requestAccess(verifiedCaller: VerifiedCaller, input: RequestAccessInput): Promise<AccessAuthorizationRequest>;
+    getRequest(verifiedCaller: VerifiedCaller, requestId: string): Promise<AuthorizationRequest>;
+    listRequests(): Promise<AuthorizationRequest[]>;
+    markPrompted(requestId: string, expectedVersion?: number): Promise<void>;
+    cancel(verifiedCaller: VerifiedCaller, requestId: string, expectedVersion: number): Promise<AuthorizationRequest>;
+    decide(input: AuthorizationDecision): Promise<AuthorizationRequest>;
+    reconcileCreation(requestId: string): Promise<CreateAuthorizationRequest>;
+    listGrants(identity?: IdentityReference): Promise<AuthorizationGrant[]>;
+    revoke(grantId: string, expectedVersion: number): Promise<AuthorizationGrant>;
+    /** Manager-only explicit user retry. The old request and decision remain immutable history. */
+    reauthorize(requestId: string, expectedVersion: number): Promise<AuthorizationRequest>;
+    /** Call only for an authoritative disable/uninstall, never for a transient connection loss. */
+    cancelPendingForConsumer(consumer: string): Promise<void>;
+    /** Host-only bridge for legacy catalog grants, serialized against deletion and ordinary approvals. */
+    withIdentityAccess<T>(identity: IdentityReference, callback: () => Promise<T>): Promise<T>;
+    open(verifiedCaller: VerifiedCaller, grantId: string): Promise<AuthorizedLease>;
+    admit(verifiedCaller: VerifiedCaller, lease: AuthorizedLease, requestedOperation: ControlledOperation, executionId: string): Promise<AuthorizationExecution>;
+    assertExecutionActive(verifiedCaller: VerifiedCaller, lease: AuthorizedLease, executionId: string): Promise<void>;
+    recordExecution(verifiedCaller: VerifiedCaller, executionId: string, status: 'succeeded' | 'failed' | 'unknown'): Promise<AuthorizationExecution>;
+    getExecution(verifiedCaller: VerifiedCaller, executionId: string): Promise<AuthorizationExecution>;
+    /** Prepare checks associations and may set the catalog deletion fence before native execution. */
+    withIdentityDeletion(identity: IdentityReference, prepare: () => Promise<void>, execute: () => Promise<void>): Promise<void>;
+    /** Host-only recovery of previously fenced deletions; absence alone never authorizes deletion. */
+    reconcileDeletions(input: DeletionReconciliation): Promise<void>;
+}
+//# sourceMappingURL=authorization.d.ts.map

package/lib/authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../src/authorization.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAA;AAC7E,OAAO,KAAK,EACV,0BAA0B,EAAE,qBAAqB,EAAE,sBAAsB,EACzE,kBAAkB,EAAE,oBAAoB,EAAE,oBAAoB,EAC9D,eAAe,EAAsB,mBAAmB,EAAE,0BAA0B,EACpD,sBAAsB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,cAAc,EAC/G,MAAM,0BAA0B,CAAA;AAEjC,cAAc,0BAA0B,CAAA;AAMxC,qBAAa,kBAAmB,SAAQ,KAAK;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM;CAClC;AA0DD,sGAAsG;AACtG,wBAAgB,eAAe,CAC7B,UAAU,EAAE,IAAI,CAAC,mBAAmB,EAAE,aAAa,CAAC,EACpD,gBAAgB,EAAE,OAAO,GACxB,mBAAmB,CAErB;AAED,6FAA6F;AAC7F,qBAAa,mBAAmB;;IAKlB,QAAQ,CAAC,SAAS,EAAE,MAAM;IAAE,QAAQ,CAAC,OAAO,EAAE,oBAAoB;IAJ9E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;gBAIL,SAAS,EAAE,MAAM,EAAW,OAAO,EAAE,oBAAoB;IASxE,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAUjC,uBAAuB,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;IAKnD,aAAa,CAAC,cAAc,EAAE,cAAc,EAAE,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAY7G,aAAa,CAAC,cAAc,EAAE,cAAc,EAAE,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAwC7G,UAAU,CAAC,cAAc,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAQ5F,YAAY,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAI/C,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQxE,MAAM,CAAC,cAAc,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAWjH,MAAM,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAwDnE,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAwBzE,UAAU,CAAC,QAAQ,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAIvE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAYnF,+FAA+F;IACzF,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAiB5F,+FAA+F;IACzF,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ/D,sGAAsG;IAChG,kBAAkB,CAAC,CAAC,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAW1F,IAAI,CAAC,cAAc,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAa/E,KAAK,CAAC,cAAc,EAAE,cAAc,EAAE,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAmB5J,qBAAqB,CAAC,cAAc,EAAE,cAAc,EAAE,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAajH,eAAe,CAAC,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAiBjJ,YAAY,CAAC,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IASxG,kGAAkG;IAC5F,oBAAoB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IA0BlI,kGAAkG;IAC5F,kBAAkB,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;CA8KvE"}