@agent-network-protocol/dsh-anp-identity 0.1.6 → 0.1.8

package/lib/host-management-secret.d.ts

@@ -0,0 +1,41 @@
+import type { CredentialProvider } from '@deepseek-ai/dsh-credentials';
+/** The actual Host credential service; reference and environment resolution are deliberately absent. */
+export interface HostManagementSecretContext {
+    readonly credentials?: Pick<CredentialProvider, 'readRecord' | 'modifyRecord'> | undefined;
+}
+/** Stable Host partition and a current observation of protected broker state. */
+export interface HostManagementSecretOptions {
+    context: HostManagementSecretContext;
+    /** Absolute, stable broker ciphertext directory, also checked by hasExistingCiphertext; normalize aliases in the installer. */
+    stateRoot: string;
+    /** Stable Host bootstrap identifier, never a request id; changing it requires an independent broker directory. */
+    bootstrapId: string;
+    /** Recheck actual encrypted broker state while the credential record is exclusively locked. */
+    hasExistingCiphertext(): Promise<boolean>;
+    /** The installer may reject a revoked Host context; service proxies are not generation identifiers. */
+    assertActive?(): void | Promise<void>;
+}
+/** Host-only key access; callers must clear each returned buffer after their cryptographic operation. */
+export interface HostManagementSecret {
+    /** Return a new 32-byte buffer after an exclusive current-record check. */
+    getKey(): Promise<Buffer>;
+    /** Revoke future access and reject an in-flight result before it reaches the broker. */
+    dispose(): void;
+}
+/** Stable failure without provider errors, paths, records or secret material. */
+export declare class HostManagementSecretError extends Error {
+    readonly name = "HostManagementSecretError";
+    readonly code = "credential_unavailable";
+    constructor();
+}
+/**
+ * Resolve one management-broker key through atomic credential-record operations.
+ * The provider must implement exclusive read/decide/write; credentials-local supplies a cross-process lock.
+ * Existing records are never rewritten. Missing keys cannot be recreated over encrypted broker data.
+ * This uses the configured Host provider's protection, not an OS Secret Service guarantee.
+ * The installer must dispose the accessor with its Host context and use assertActive for additional revocation.
+ * @param options - Host service, stable partition and live encrypted-state observation.
+ * @returns A disposable Host-only accessor; each successful request owns a separate key buffer.
+ */
+export declare function createHostManagementSecret(options: HostManagementSecretOptions): HostManagementSecret;
+//# sourceMappingURL=host-management-secret.d.ts.map

package/lib/host-management-secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-management-secret.d.ts","sourceRoot":"","sources":["../src/host-management-secret.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,kBAAkB,EAAoB,MAAM,8BAA8B,CAAA;AAExF,wGAAwG;AACxG,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,kBAAkB,EAAE,YAAY,GAAG,cAAc,CAAC,GAAG,SAAS,CAAA;CAC3F;AAED,iFAAiF;AACjF,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,2BAA2B,CAAA;IACpC,+HAA+H;IAC/H,SAAS,EAAE,MAAM,CAAA;IACjB,kHAAkH;IAClH,WAAW,EAAE,MAAM,CAAA;IACnB,+FAA+F;IAC/F,qBAAqB,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;IACzC,uGAAuG;IACvG,YAAY,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACtC;AAED,yGAAyG;AACzG,MAAM,WAAW,oBAAoB;IACnC,2EAA2E;IAC3E,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;IACzB,wFAAwF;IACxF,OAAO,IAAI,IAAI,CAAA;CAChB;AAED,iFAAiF;AACjF,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,IAAI,+BAA8B;IAC3C,QAAQ,CAAC,IAAI,4BAA2B;;CAKzC;AAgBD;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,2BAA2B,GAAG,oBAAoB,CA8CrG"}

package/lib/host-management-secret.js

@@ -0,0 +1,92 @@
+/** Host-only management-broker encryption keys backed by the credential record seam. */
+import { createHash, randomBytes } from 'node:crypto';
+import { isAbsolute, resolve } from 'node:path';
+import { credentialKey } from '@deepseek-ai/dsh-credentials';
+/** Stable failure without provider errors, paths, records or secret material. */
+export class HostManagementSecretError extends Error {
+    name = 'HostManagementSecretError';
+    code = 'credential_unavailable';
+    constructor() {
+        super('The management credential encryption key is unavailable.');
+    }
+}
+function decodeKey(record) {
+    if (!record || record.kind !== 'api-key'
+        || Object.keys(record).some(key => key !== 'kind' && key !== 'key')
+        || typeof record.key !== 'string' || !/^[A-Za-z0-9_-]{43}$/u.test(record.key)) {
+        throw new HostManagementSecretError();
+    }
+    const bytes = Buffer.from(record.key, 'base64url');
+    if (bytes.length !== 32 || bytes.toString('base64url') !== record.key) {
+        bytes.fill(0);
+        throw new HostManagementSecretError();
+    }
+    return bytes;
+}
+/**
+ * Resolve one management-broker key through atomic credential-record operations.
+ * The provider must implement exclusive read/decide/write; credentials-local supplies a cross-process lock.
+ * Existing records are never rewritten. Missing keys cannot be recreated over encrypted broker data.
+ * This uses the configured Host provider's protection, not an OS Secret Service guarantee.
+ * The installer must dispose the accessor with its Host context and use assertActive for additional revocation.
+ * @param options - Host service, stable partition and live encrypted-state observation.
+ * @returns A disposable Host-only accessor; each successful request owns a separate key buffer.
+ */
+export function createHostManagementSecret(options) {
+    if (!isAbsolute(options.stateRoot) || options.bootstrapId.length === 0 || options.bootstrapId.length > 256) {
+        throw new HostManagementSecretError();
+    }
+    const partition = createHash('sha256').update(JSON.stringify([resolve(options.stateRoot), options.bootstrapId])).digest('hex');
+    const key = credentialKey('anp-identity-manager', `management-broker-${partition}`);
+    let disposed = false;
+    let observedKey = false;
+    const assertActive = async () => {
+        if (disposed || !options.context.credentials)
+            throw new HostManagementSecretError();
+        await options.assertActive?.();
+        if (disposed || !options.context.credentials)
+            throw new HostManagementSecretError();
+    };
+    return {
+        async getKey() {
+            let bytes;
+            try {
+                await assertActive();
+                const provider = options.context.credentials;
+                if (!provider)
+                    throw new HostManagementSecretError();
+                // modifyRecord re-reads under the provider's writer lock; readRecord may be a process-local cache.
+                const record = await provider.modifyRecord(key, async (current) => {
+                    await assertActive();
+                    if (current !== undefined) {
+                        const currentBytes = decodeKey(current);
+                        currentBytes.fill(0);
+                        return undefined;
+                    }
+                    if (observedKey || await options.hasExistingCiphertext())
+                        throw new HostManagementSecretError();
+                    await assertActive();
+                    const generated = randomBytes(32);
+                    try {
+                        return { kind: 'api-key', key: generated.toString('base64url') };
+                    }
+                    finally {
+                        generated.fill(0);
+                    }
+                });
+                bytes = decodeKey(record);
+                observedKey = true;
+                await assertActive();
+                return Buffer.from(bytes);
+            }
+            catch {
+                throw new HostManagementSecretError();
+            }
+            finally {
+                bytes?.fill(0);
+            }
+        },
+        dispose() { disposed = true; },
+    };
+}
+//# sourceMappingURL=host-management-secret.js.map

package/lib/host-management-secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-management-secret.js","sourceRoot":"","sources":["../src/host-management-secret.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAA;AA6B5D,iFAAiF;AACjF,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACzC,IAAI,GAAG,2BAA2B,CAAA;IAClC,IAAI,GAAG,wBAAwB,CAAA;IAExC;QACE,KAAK,CAAC,0DAA0D,CAAC,CAAA;IACnE,CAAC;CACF;AAED,SAAS,SAAS,CAAC,MAAoC;IACrD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;WACnC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC;WAChE,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,yBAAyB,EAAE,CAAA;IACvC,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;IAClD,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC;QACtE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACb,MAAM,IAAI,yBAAyB,EAAE,CAAA;IACvC,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAoC;IAC7E,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC3G,MAAM,IAAI,yBAAyB,EAAE,CAAA;IACvC,CAAC;IACD,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC9H,MAAM,GAAG,GAAG,aAAa,CAAC,sBAAsB,EAAE,qBAAqB,SAAS,EAAE,CAAC,CAAA;IACnF,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,IAAI,WAAW,GAAG,KAAK,CAAA;IACvB,MAAM,YAAY,GAAG,KAAK,IAAI,EAAE;QAC9B,IAAI,QAAQ,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW;YAAE,MAAM,IAAI,yBAAyB,EAAE,CAAA;QACnF,MAAM,OAAO,CAAC,YAAY,EAAE,EAAE,CAAA;QAC9B,IAAI,QAAQ,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW;YAAE,MAAM,IAAI,yBAAyB,EAAE,CAAA;IACrF,CAAC,CAAA;IACD,OAAO;QACL,KAAK,CAAC,MAAM;YACV,IAAI,KAAyB,CAAA;YAC7B,IAAI,CAAC;gBACH,MAAM,YAAY,EAAE,CAAA;gBACpB,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAA;gBAC5C,IAAI,CAAC,QAAQ;oBAAE,MAAM,IAAI,yBAAyB,EAAE,CAAA;gBACpD,mGAAmG;gBACnG,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;oBAC9D,MAAM,YAAY,EAAE,CAAA;oBACpB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;wBAC1B,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,CAAA;wBACvC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;wBACpB,OAAO,SAAS,CAAA;oBAClB,CAAC;oBACD,IAAI,WAAW,IAAI,MAAM,OAAO,CAAC,qBAAqB,EAAE;wBAAE,MAAM,IAAI,yBAAyB,EAAE,CAAA;oBAC/F,MAAM,YAAY,EAAE,CAAA;oBACpB,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAA;oBACjC,IAAI,CAAC;wBAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAA;oBAAC,CAAC;4BAChE,CAAC;wBAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;oBAAC,CAAC;gBAC/B,CAAC,CAAC,CAAA;gBACF,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;gBACzB,WAAW,GAAG,IAAI,CAAA;gBAClB,MAAM,YAAY,EAAE,CAAA;gBACpB,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,yBAAyB,EAAE,CAAA;YACvC,CAAC;oBAAS,CAAC;gBACT,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;YAChB,CAAC;QACH,CAAC;QACD,OAAO,KAAW,QAAQ,GAAG,IAAI,CAAA,CAAC,CAAC;KACpC,CAAA;AACH,CAAC"}

package/lib/index.d.ts

@@ -1,6 +1,11 @@
-/** Host-only ANP Identity service for DeepSeek Harness. */
+import type { RegistrationServiceSettings, UpdateRegistrationServiceSettings } from './registration-service-types.js';
+import type { PapCallbackManagementOperations } from './pap-callback.js';
+import { type ManagementCredentialBroker, type LocalRegistrationInput } from './management-driver.js';
+import type { ProtocolUsePolicy, ProtocolIdentityClient, PapHostConsumer } from './protocol-client.js';
+import type { PublicationBackend } from './publication-types.js';
 import { Service, type Context } from '@deepseek-ai/cordis';
 import z from '@deepseek-ai/schemastery';
+import type { IdentityReference } from '@agent-network-protocol/anp-identity';
 import type { UserIdentityClient } from './user-client.js';
 import type { IdentityManagement } from './management-types.js';
 import { type AnpIdentityService as AnpIdentityServiceContract, type HostProviderLease, type ProviderRequest } from './provider-api.js';
@@ -17,26 +22,34 @@ declare module '@deepseek-ai/cordis' {
     }
 }
 export interface Config {
+    readonly signerMode?: 'local';
     /** Absolute ANP Identity Store root. Defaults below DSH_HOME. */
     readonly stateRoot?: string;
     /** Exact same-process consumer names permitted to acquire leases. */
     readonly allowConsumers?: string[];
     /** Narrow Host-only consumers permitted to acquire Provider leases. */
     readonly allowProviderConsumers?: string[];
-    /** Exact HTTPS origins permitted per consumer for authenticated HTTP. */
+    /** HTTPS origins per consumer; explicit User consumers may opt into '*' with user approval. */
     readonly httpAllowedOrigins?: Record<string, string[]>;
     /** Run native Store recovery when a Provider opens. */
     readonly recoveryOnOpen?: boolean;
     /** Installed plugin identifiers requiring explicit user decisions instead of legacy access. */
+    readonly oauthAllowedAudiences?: Record<string, string[]>;
     readonly userConsumers?: string[];
+    readonly protocolPolicies?: ProtocolUsePolicy[];
 }
 export declare const Config: z<Config>;
 /** One multi-DID ANP Identity service with a replaceable native Provider. */
 export declare class AnpIdentityService extends Service implements AnpIdentityServiceContract {
     static Config: z<Config>;
     private readonly resolvedConfig;
+    private readonly registrationSettings;
     private readonly catalogStore;
     private providerSlot;
+    private readonly publications;
+    private readonly publicationBackends;
+    private readonly papCallbackAuthorities;
+    private readonly protocols;
     private readonly users;
     private readonly hostContext;
     private readonly disabledFences;
@@ -70,8 +83,55 @@ export declare class AnpIdentityService extends Service implements AnpIdentitySe
     private awaitProvider;
     /** Host-bound ordinary facade; request inputs never select a caller. */
     bindUserConsumer(context: Context): UserIdentityClient;
+    bindProtocolConsumer(context: Context): ProtocolIdentityClient;
+    /** Bind the actual installed PAP Host. Private callback access additionally requires its current opaque target.
+     * @param context - Original Loader-installed PAP plugin Context.
+     * @returns Public identity selection and target-bound, closed callback operations.
+     */
+    bindPapHostConsumer(context: Context): PapHostConsumer;
+    /** Install a real device-authorized backend; the document id comes from authenticated resolve. */
+    configureManagedPublicationBackend(context: Context, name: string, input: {
+        reference: IdentityReference;
+        origin: string;
+        credentials: ManagementCredentialBroker;
+        fetch?: typeof fetch;
+    }): Promise<{
+        backend: string;
+        documentId: string;
+        callbackManagement: PapCallbackManagementOperations;
+        dispose: () => void;
+    }>;
+    /** Register the public local Manifest through User Service and persist its verified management credential. */
+    registerLocalIdentity(context: Context, input: {
+        reference: IdentityReference;
+        origin: string;
+        credentials: ManagementCredentialBroker;
+        registration: LocalRegistrationInput;
+        managementAudience?: string;
+        handleDomain?: string;
+        fetch?: typeof fetch;
+        /** Optional tighter Host lifecycle fence, never a source of management authority. */
+        assertActive?: () => void;
+    }): Promise<{
+        did: string;
+        deviceId: string;
+        state: 'registered';
+    }>;
+    /** Manager-only registration preferences; ordinary consumer capabilities never expose these methods. */
+    registrationServiceSettings(context: Context): Promise<RegistrationServiceSettings>;
+    configureRegistrationService(context: Context, input: UpdateRegistrationServiceSettings): Promise<RegistrationServiceSettings>;
+    resolveRegistrationServiceOrigin(context: Context, key: string, fingerprint: string): Promise<string>;
+    /** Pin the actual ready provider for an approved local identity and the original manager Context.
+     * @param context - Original root-installed manager Context.
+     * @param reference - Local identity whose current provider is being pinned.
+     * @param additionalCheck - Optional stricter Host lifecycle check.
+     * @returns A synchronous fence that never switches to a replacement provider.
+     */
+    pinManagementContext(context: Context, reference: IdentityReference, additionalCheck?: () => void): Promise<() => void>;
     /** Host-only manager; the ordinary consumer facade never exposes this object. */
-    acquireManagement(): IdentityManagement;
+    registerPublicationBackend(context: Context, name: string, backend: PublicationBackend): () => void;
+    private assertManagementContext;
+    acquireManagement(context?: Context, additionalCheck?: () => void): IdentityManagement;
     private assertNoHostAssociations;
     private managementIdentities;
     private installedEntries;
@@ -81,6 +141,8 @@ export declare class AnpIdentityService extends Service implements AnpIdentitySe
     private assertLegacyConsumer;
     private assertLegacyCallerContext;
     private withUserNative;
+    private withProtocolNative;
+    private withPublicationNative;
     private userSnapshot;
     private createConfirmed;
     private reconcileConfirmed;
@@ -89,4 +151,12 @@ export declare class AnpIdentityService extends Service implements AnpIdentitySe
     private disposeSlot;
 }
 export default AnpIdentityService;
+export { createPublicationBackend } from './publication-http.js';
+export type { PublicationConfig, PublicationBackend, OAuthClientIdentity } from './publication-types.js';
+export { EncryptedManagementCredentialBroker } from './management-credentials.js';
+export { createManagedPublicationDriver, registerLocalIdentity } from './management-driver.js';
+export type { ManagementCredentialBroker, DeviceManagementCredential, LocalRegistrationInput } from './management-driver.js';
+export type { PapHostConsumer } from './protocol-client.js';
+export { PapCallbackManagementError } from './pap-callback.js';
+export type { PapCallbackRegistration, PapCallbackClaim, PapCallbackRegistrationResult, PapCallbackClaimResult, PapCallbackRegisterOperation, PapCallbackClaimOperation, PapCallbackManagementOperations, PapCallbackManagementErrorCode } from './pap-callback.js';
 //# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAK3D,OAAO,EAAE,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,CAAC,MAAM,0BAA0B,CAAA;AA0BxC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAE1D,OAAO,KAAK,EAAE,kBAAkB,EAA0B,MAAM,uBAAuB,CAAA;AACvF,OAAO,EAIL,KAAK,kBAAkB,IAAI,0BAA0B,EACrD,KAAK,iBAAiB,EAGtB,KAAK,eAAe,EACrB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,KAAK,EACV,iBAAiB,EAEjB,aAAa,EAIb,mBAAmB,EAMpB,MAAM,YAAY,CAAA;AAEnB,mBAAmB,YAAY,CAAA;AAC/B,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACpD,YAAY,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAA;AAC7D,OAAO,EACL,gCAAgC,GACjC,MAAM,gBAAgB,CAAA;AACvB,OAAO,EACL,8BAA8B,EAC9B,6BAA6B,GAC9B,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EACV,kBAAkB,IAAI,0BAA0B,EAChD,iBAAiB,EACjB,eAAe,GAChB,MAAM,mBAAmB,CAAA;AAE1B,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,WAAW,EAAE,0BAA0B,CAAA;KACxC;CACF;AAED,MAAM,WAAW,MAAM;IACrB,iEAAiE;IACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,qEAAqE;IACrE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IAClC,uEAAuE;IACvE,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC1C,yEAAyE;IACzE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IACtD,uDAAuD;IACvD,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAA;IACjC,+FAA+F;IAC/F,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;CAClC;AAED,eAAO,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAO3B,CAAA;AAgGF,6EAA6E;AAC7E,qBAAa,kBAAmB,SAAQ,OAAQ,YAAW,0BAA0B;IACnF,MAAM,CAAC,MAAM,YAAS;IAEtB,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAgB;IAC/C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAc;IAC3C,OAAO,CAAC,YAAY,CAA0B;IAC9C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqB;IAC3C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoB;IACnD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA2B;gBAExC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM;IA0CzC,MAAM,IAAI,OAAO,CAAC,iBAAiB,CAAC;IA0B1C,OAAO,CAAC,gBAAgB;IAyBlB,aAAa,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA8BvE,eAAe,CAAC,KAAK,EAAE,eAAe,GAAG,iBAAiB;YA6B5C,aAAa;YAwBb,eAAe;YAgDf,YAAY;YAMZ,eAAe;YAyBf,gBAAgB;YAUhB,kBAAkB;YAwBlB,mBAAmB;YAOnB,0BAA0B;YAW1B,aAAa;YAqBb,cAAc;YAmBd,aAAa;YA6Cb,aAAa;YA4Bb,wBAAwB;IAyBtC,OAAO,CAAC,WAAW;YAIL,cAAc;YAsBd,SAAS;YAoGT,iBAAiB;YAcjB,WAAW;IAWzB,OAAO,CAAC,qBAAqB;IAK7B,OAAO,CAAC,WAAW;IAMnB,OAAO,CAAC,UAAU;YAIJ,aAAa;IAY3B,wEAAwE;IACxE,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,kBAAkB;IAItD,iFAAiF;IACjF,iBAAiB,IAAI,kBAAkB;IAoFvC,OAAO,CAAC,wBAAwB;YAOlB,oBAAoB;IAyBlC,OAAO,CAAC,gBAAgB;IAOxB,OAAO,CAAC,sBAAsB;IAO9B,OAAO,CAAC,qBAAqB;IAO7B,OAAO,CAAC,sBAAsB;IAa9B,OAAO,CAAC,oBAAoB;IAI5B,OAAO,CAAC,yBAAyB;YASnB,cAAc;YAQd,YAAY;YAeZ,eAAe;YA8Bf,kBAAkB;YAQlB,sBAAsB;YAkBtB,4BAA4B;YAM5B,WAAW;CAO1B;AA6aD,eAAe,kBAAkB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,2BAA2B,EAAE,iCAAiC,EAAE,MAAM,iCAAiC,CAAA;AACrH,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,mBAAmB,CAAA;AACxE,OAAO,EAAyD,KAAK,0BAA0B,EAAE,KAAK,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AAG5J,OAAO,KAAK,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAKtG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAA;AAMhE,OAAO,EAAE,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,CAAC,MAAM,0BAA0B,CAAA;AACxC,OAAO,KAAK,EAGV,iBAAiB,EAMlB,MAAM,sCAAsC,CAAA;AAgB7C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAE1D,OAAO,KAAK,EAAE,kBAAkB,EAA0B,MAAM,uBAAuB,CAAA;AACvF,OAAO,EAIL,KAAK,kBAAkB,IAAI,0BAA0B,EACrD,KAAK,iBAAiB,EAGtB,KAAK,eAAe,EACrB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,KAAK,EACV,iBAAiB,EAEjB,aAAa,EAIb,mBAAmB,EAMpB,MAAM,YAAY,CAAA;AAEnB,mBAAmB,YAAY,CAAA;AAC/B,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACpD,YAAY,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAA;AAC7D,OAAO,EACL,gCAAgC,GACjC,MAAM,gBAAgB,CAAA;AACvB,OAAO,EACL,8BAA8B,EAC9B,6BAA6B,GAC9B,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EACV,kBAAkB,IAAI,0BAA0B,EAChD,iBAAiB,EACjB,eAAe,GAChB,MAAM,mBAAmB,CAAA;AAE1B,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,WAAW,EAAE,0BAA0B,CAAA;KACxC;CACF;AAED,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;IAC7B,iEAAiE;IACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,qEAAqE;IACrE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IAClC,uEAAuE;IACvE,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC1C,+FAA+F;IAC/F,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IACtD,uDAAuD;IACvD,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAA;IACjC,+FAA+F;IAC/F,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IACzD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,iBAAiB,EAAE,CAAA;CAChD;AAED,eAAO,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAU3B,CAAA;AAiGF,6EAA6E;AAC7E,qBAAa,kBAAmB,SAAQ,OAAQ,YAAW,0BAA0B;IACnF,MAAM,CAAC,MAAM,YAAS;IAEtB,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAgB;IAC/C,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAkC;IACvE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAc;IAC3C,OAAO,CAAC,YAAY,CAA0B;IAC9C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAwB;IACrD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAwC;IAC5E,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAA+G;IACtJ,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA2B;IACrD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqB;IAC3C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoB;IACnD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA2B;gBAExC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM;IAgDzC,MAAM,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAuC1C,OAAO,CAAC,gBAAgB;IAyBlB,aAAa,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA8BvE,eAAe,CAAC,KAAK,EAAE,eAAe,GAAG,iBAAiB;YA6B5C,aAAa;YAwBb,eAAe;YAgDf,YAAY;YAMZ,eAAe;YAyBf,gBAAgB;YAUhB,kBAAkB;YAwBlB,mBAAmB;YAOnB,0BAA0B;YAW1B,aAAa;YAqBb,cAAc;YAmBd,aAAa;YA6Cb,aAAa;YA4Bb,wBAAwB;IAyBtC,OAAO,CAAC,WAAW;YAIL,cAAc;YAsBd,SAAS;YAoGT,iBAAiB;YAcjB,WAAW;IAWzB,OAAO,CAAC,qBAAqB;IAK7B,OAAO,CAAC,WAAW;IAMnB,OAAO,CAAC,UAAU;YAIJ,aAAa;IAY3B,wEAAwE;IACxE,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,kBAAkB;IAItD,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,sBAAsB;IAE9D;;;OAGG;IACH,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,eAAe;IAUtD,kGAAkG;IAC5F,kCAAkC,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE;QAC9E,SAAS,EAAE,iBAAiB,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,0BAA0B,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;KAC5G,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,kBAAkB,EAAE,+BAA+B,CAAC;QAAC,OAAO,EAAE,MAAM,IAAI,CAAA;KAAE,CAAC;IAwD9H,8GAA8G;IACxG,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE;QACnD,SAAS,EAAE,iBAAiB,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,0BAA0B,CAAC;QAAC,YAAY,EAAE,sBAAsB,CAAC;QAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;QACrM,qFAAqF;QACrF,YAAY,CAAC,EAAE,MAAM,IAAI,CAAA;KAC1B,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,YAAY,CAAA;KAAE,CAAC;IAanE,wGAAwG;IACxG,2BAA2B,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAGnF,4BAA4B,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,iCAAiC,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAG9H,gCAAgC,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIrG;;;;;OAKG;IACG,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,eAAe,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC;IAe7H,iFAAiF;IACjF,0BAA0B,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,GAAG,MAAM,IAAI;IAQnG,OAAO,CAAC,uBAAuB;IAO/B,iBAAiB,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,eAAe,CAAC,EAAE,MAAM,IAAI,GAAG,kBAAkB;IAkHtF,OAAO,CAAC,wBAAwB;YAOlB,oBAAoB;IAyBlC,OAAO,CAAC,gBAAgB;IAOxB,OAAO,CAAC,sBAAsB;IAO9B,OAAO,CAAC,qBAAqB;IAO7B,OAAO,CAAC,sBAAsB;IAa9B,OAAO,CAAC,oBAAoB;IAI5B,OAAO,CAAC,yBAAyB;YAUnB,cAAc;YAQd,kBAAkB;YAiBlB,qBAAqB;YAYrB,YAAY;YAoBZ,eAAe;YA4Cf,kBAAkB;YAQlB,sBAAsB;YAkBtB,4BAA4B;YAM5B,WAAW;CAO1B;AAsbD,eAAe,kBAAkB,CAAA;AA2QjC,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAChE,YAAY,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAExG,OAAO,EAAE,mCAAmC,EAAE,MAAM,6BAA6B,CAAA;AACjF,OAAO,EAAE,8BAA8B,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9F,YAAY,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AAC5H,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAE3D,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAA;AAC9D,YAAY,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,6BAA6B,EAAE,sBAAsB,EAC5G,4BAA4B,EAAE,yBAAyB,EAAE,+BAA+B,EAAE,8BAA8B,EAAE,MAAM,mBAAmB,CAAA"}