@agentunion/fastaun 0.3.5 → 0.4.0

package/dist/aid-store.js

@@ -0,0 +1,539 @@
+/**
+ * AIDStore — AID 管理器，对齐 Python SDK aid_store.py
+ * 持有 keystore 配置，提供 AID 加载/注册/联网管理。
+ */
+import * as http from 'node:http';
+import * as https from 'node:https';
+import { X509Certificate, createPrivateKey, createPublicKey } from 'node:crypto';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { AID } from './aid.js';
+import * as codes from './error-codes.js';
+import { certCommonName, certTimeError, signBytes, verifySignatureWithCert } from './cert-utils.js';
+import { resultErr, resultOk } from './result.js';
+import { FileKeyStore } from './keystore/file.js';
+import { CryptoProvider } from './crypto.js';
+import { AuthFlow } from './auth.js';
+import { GatewayDiscovery } from './discovery.js';
+import { DnsResilientNet } from './net.js';
+import { AUNLogger } from './logger.js';
+import { getDeviceId, normalizeInstanceId } from './config.js';
+import { IdentityConflictError, ValidationError } from './errors.js';
+function resultError(r) {
+    return r.ok ? null : r.error;
+}
+function normalizeSlotId(slotId) {
+    const v = String(slotId ?? 'default').trim();
+    return v || 'default';
+}
+/** 发起 HTTP HEAD 请求，返回 [status, headers] */
+function httpHead(url, verifySsl, timeoutMs = 5000) {
+    return new Promise((resolve, reject) => {
+        const parsed = new URL(url);
+        const mod = parsed.protocol === 'https:' ? https : http;
+        const opts = { method: 'HEAD', timeout: timeoutMs };
+        if (!verifySsl)
+            opts.rejectUnauthorized = false;
+        const req = mod.request(url, opts, (res) => {
+            res.resume();
+            const headers = {};
+            for (const [k, v] of Object.entries(res.headers)) {
+                if (typeof v === 'string')
+                    headers[k] = v;
+                else if (Array.isArray(v))
+                    headers[k] = v[0] ?? '';
+            }
+            resolve([res.statusCode ?? 0, headers]);
+        });
+        req.on('error', reject);
+        req.on('timeout', () => { req.destroy(); reject(new Error(`timeout HEAD ${url}`)); });
+        req.end();
+    });
+}
+/** 发起 HTTP GET 请求，返回 [text, headers, status] */
+function httpGetText(url, verifySsl, headers, timeoutMs = 30000) {
+    return new Promise((resolve, reject) => {
+        const parsed = new URL(url);
+        const mod = parsed.protocol === 'https:' ? https : http;
+        const opts = { timeout: timeoutMs, headers };
+        if (!verifySsl)
+            opts.rejectUnauthorized = false;
+        const req = mod.get(url, opts, (res) => {
+            const chunks = [];
+            res.on('data', (c) => chunks.push(c));
+            res.on('end', () => {
+                const respHeaders = {};
+                for (const [k, v] of Object.entries(res.headers)) {
+                    if (typeof v === 'string')
+                        respHeaders[k] = v;
+                    else if (Array.isArray(v))
+                        respHeaders[k] = v[0] ?? '';
+                }
+                resolve([Buffer.concat(chunks).toString('utf-8'), respHeaders, res.statusCode ?? 0]);
+            });
+            res.on('error', reject);
+        });
+        req.on('error', reject);
+        req.on('timeout', () => { req.destroy(); reject(new Error(`timeout GET ${url}`)); });
+    });
+}
+function pkiCertUrl(gatewayUrl, aid) {
+    const parsed = new URL(gatewayUrl);
+    const scheme = parsed.protocol === 'wss:' ? 'https:' : 'http:';
+    return `${scheme}//${parsed.host}/pki/cert/${encodeURIComponent(aid)}`;
+}
+function agentMdUrl(aid, gatewayUrl, discoveryPort) {
+    const raw = String(gatewayUrl ?? '').trim().toLowerCase();
+    const scheme = raw.startsWith('ws://') ? 'http' : 'https';
+    let host = String(aid ?? '').trim();
+    if (discoveryPort && !host.includes(':'))
+        host = `${host}:${discoveryPort}`;
+    return `${scheme}://${host}/agent.md`;
+}
+export class AIDStore {
+    aunPath;
+    _encryptionSeed;
+    deviceId;
+    slotId;
+    _keystore;
+    _auth;
+    _discovery;
+    _net;
+    _log;
+    _verifySsl;
+    _discoveryPort;
+    _gatewayCache = new Map();
+    _agentMdCache = new Map();
+    constructor(opts) {
+        this.aunPath = String(opts.aunPath ?? join(homedir(), '.aun'));
+        this._encryptionSeed = String(opts.encryptionSeed ?? '');
+        this.deviceId = opts.deviceId ? normalizeInstanceId(opts.deviceId, 'deviceId', { allowEmpty: true }) : getDeviceId(this.aunPath);
+        this.slotId = normalizeSlotId(opts.slotId);
+        this._verifySsl = opts.verifySsl ?? false;
+        this._discoveryPort = opts.discoveryPort ?? null;
+        this._log = new AUNLogger({ debug: opts.debug ?? false, aunPath: this.aunPath });
+        this._log.bindDeviceId(this.deviceId);
+        this._keystore = new FileKeyStore(this.aunPath, {
+            encryptionSeed: this._encryptionSeed || undefined,
+            logger: this._log.for('aun_core.keystore'),
+        });
+        this._net = new DnsResilientNet({ verifySsl: this._verifySsl, logger: this._log.for('aun_core.net') });
+        this._discovery = new GatewayDiscovery({ verifySsl: this._verifySsl, logger: this._log.for('aun_core.discovery'), net: this._net });
+        this._auth = new AuthFlow({
+            keystore: this._keystore,
+            crypto: new CryptoProvider(),
+            deviceId: this.deviceId,
+            slotId: this.slotId,
+            rootCaPath: opts.rootCaPath ?? null,
+            verifySsl: this._verifySsl,
+            logger: this._log.for('aun_core.auth'),
+            net: this._net,
+        });
+    }
+    close() {
+        this._keystore.close();
+        const net = this._net;
+        if (typeof net.close === 'function')
+            net.close();
+    }
+    // ── 离线方法 ──────────────────────────────────────────────────
+    load(aid) {
+        const target = String(aid ?? '').trim();
+        const certPem = this._keystore.loadCert(target);
+        if (!certPem) {
+            return resultErr(codes.CERT_NOT_FOUND, `certificate not found for aid: ${target}`);
+        }
+        let cert;
+        try {
+            cert = new X509Certificate(certPem);
+        }
+        catch (exc) {
+            return resultErr(codes.CERT_PARSE_ERROR, `certificate parse failed for aid: ${target}`, exc);
+        }
+        const timeErr = certTimeError(certPem);
+        if (timeErr === 'expired')
+            return resultErr(codes.CERT_EXPIRED, `certificate expired for aid: ${target}`);
+        if (timeErr === 'not_yet_valid')
+            return resultErr(codes.CERT_NOT_YET_VALID, `certificate not yet valid for aid: ${target}`);
+        const cn = certCommonName(certPem);
+        if (cn && cn !== target) {
+            return resultErr(codes.CERT_CHAIN_BROKEN, `certificate CN mismatch: expected ${target}, got ${cn}`);
+        }
+        const kp = this._keystore.loadKeyPair(target);
+        if (!kp || !kp.private_key_pem) {
+            return resultOk({
+                aid: AID._create({ aid: target, aunPath: this.aunPath, certPem, privateKeyPem: null, certValid: true, privateKeyValid: false, deviceId: this.deviceId, slotId: this.slotId }),
+            });
+        }
+        const privPem = String(kp.private_key_pem);
+        let privKey;
+        try {
+            privKey = createPrivateKey(privPem);
+        }
+        catch (exc) {
+            return resultErr(codes.PRIVATE_KEY_PARSE_ERROR, `private key parse failed for aid: ${target}`, exc);
+        }
+        // 配对自检（对齐 Python aid_store.py:145-150）：
+        // 1) 从私钥导出公钥 DER，与证书公钥 DER 直接比对（不依赖 key.json 的 public_key_der_b64 字段，
+        //    防止该字段缺失时错配私钥蒙混过关）
+        // 2) DER 比对通过后，再做 sign/verify 探针：私钥签名固定 payload，证书公钥验签
+        try {
+            const certPubDer = cert.publicKey.export({ type: 'spki', format: 'der' });
+            const privPubDer = createPublicKey(privKey).export({ type: 'spki', format: 'der' });
+            if (!privPubDer.equals(certPubDer)) {
+                return resultErr(codes.KEYPAIR_MISMATCH, `private key does not match certificate for aid: ${target}`);
+            }
+            const probe = Buffer.from('aun-aidstore-private-key-self-test', 'utf-8');
+            const signature = signBytes(privPem, probe);
+            if (!verifySignatureWithCert(certPem, signature, probe)) {
+                return resultErr(codes.KEYPAIR_MISMATCH, `keypair self-test failed for aid: ${target}`);
+            }
+        }
+        catch (exc) {
+            return resultErr(codes.KEYPAIR_MISMATCH, `keypair self-test failed for aid: ${target}`, exc);
+        }
+        return resultOk({
+            aid: AID._create({ aid: target, aunPath: this.aunPath, certPem, privateKeyPem: privPem, certValid: true, privateKeyValid: true, deviceId: this.deviceId, slotId: this.slotId }),
+        });
+    }
+    list() {
+        try {
+            const aids = this._keystore.listIdentities?.() ?? [];
+            const identities = [];
+            for (const aid of [...aids].sort()) {
+                const loaded = this.load(aid);
+                if (!loaded.ok || !loaded.data)
+                    continue;
+                const item = loaded.data.aid;
+                if (!item.isPrivateKeyValid())
+                    continue;
+                identities.push({
+                    aid: item.aid,
+                    certNotAfter: item.certNotAfter,
+                    certIssuer: item.certIssuer,
+                    certFingerprint: item.certFingerprint,
+                });
+            }
+            return resultOk({ identities });
+        }
+        catch (exc) {
+            return resultErr('LIST_IDENTITIES_FAILED', String(exc), exc);
+        }
+    }
+    changeSeed(oldSeed, newSeed) {
+        if (!oldSeed.trim())
+            return resultErr(codes.PRIVATE_KEY_PARSE_ERROR, 'changeSeed requires a non-empty oldSeed');
+        if (!newSeed.trim())
+            return resultErr(codes.PRIVATE_KEY_PARSE_ERROR, 'changeSeed requires a non-empty newSeed');
+        if (oldSeed === newSeed)
+            return resultErr(codes.PRIVATE_KEY_PARSE_ERROR, 'newSeed must differ from oldSeed');
+        try {
+            const result = this._keystore.changeSeed(oldSeed, newSeed);
+            this._encryptionSeed = newSeed;
+            return resultOk({ changed: true, count: result.migrated ?? 0 });
+        }
+        catch (exc) {
+            return resultErr(codes.PRIVATE_KEY_PARSE_ERROR, String(exc), exc);
+        }
+    }
+    // ── 联网方法 ──────────────────────────────────────────────────
+    async register(aid) {
+        const target = String(aid ?? '').trim();
+        this._log.for('aun_core.aid_store').debug(`register enter: aid=${target || '-'}`);
+        try {
+            const gatewayUrl = await this._resolveGateway(target);
+            await this._auth.registerAid(gatewayUrl, target);
+            return resultOk({ registered: true });
+        }
+        catch (exc) {
+            if (exc instanceof IdentityConflictError) {
+                return resultErr(codes.IDENTITY_CONFLICT, String(exc), exc);
+            }
+            if (exc instanceof ValidationError) {
+                return resultErr(codes.INVALID_AID_FORMAT, String(exc), exc);
+            }
+            const msg = exc instanceof Error ? exc.message : String(exc);
+            if (msg.includes('network') || msg.includes('connect') || msg.includes('timeout')) {
+                return resultErr(codes.NETWORK_ERROR, msg, exc);
+            }
+            return resultErr(codes.SERVER_ERROR, msg, exc);
+        }
+    }
+    async exists(aid) {
+        const target = String(aid ?? '').trim();
+        try {
+            const gatewayUrl = await this._resolveGateway(target);
+            const url = pkiCertUrl(gatewayUrl, target);
+            const [status] = await httpHead(url, this._verifySsl, 5000);
+            if (status === 200)
+                return resultOk({ exists: true });
+            if (status === 404)
+                return resultOk({ exists: false });
+            return resultErr(codes.NETWORK_ERROR, `unexpected PKI HEAD status ${status}`);
+        }
+        catch (exc) {
+            return resultErr(codes.NETWORK_ERROR, String(exc), exc);
+        }
+    }
+    async resolve(aid, opts) {
+        const target = String(aid ?? '').trim();
+        const forceRefresh = !!(opts?.forceRefresh);
+        const skipAgentMd = !!(opts?.skipAgentMd);
+        try {
+            let peer;
+            let certFromCache = false;
+            const loaded = this.load(target);
+            if (loaded.ok && loaded.data && !forceRefresh) {
+                peer = loaded.data.aid;
+                certFromCache = true;
+            }
+            else {
+                const gatewayUrl = await this._resolveGateway(target);
+                const certPem = await this._auth.fetchPeerCert(gatewayUrl, target);
+                if (!certPem)
+                    return resultErr(codes.CERT_NOT_FOUND, `certificate not found for aid: ${target}`);
+                this._keystore.saveCert(target, certPem);
+                const reloaded = this.load(target);
+                if (!reloaded.ok || !reloaded.data)
+                    return reloaded;
+                peer = reloaded.data.aid;
+            }
+            const source = { cert_from_cache: certFromCache, agent_md_fetched: false };
+            if (skipAgentMd)
+                return resultOk({ aid: peer, source });
+            const agentMd = await this.fetchAgentMd(target);
+            if (!agentMd.ok)
+                return agentMd;
+            source.agent_md_fetched = true;
+            return resultOk({ aid: peer, agent_md: agentMd.data, source });
+        }
+        catch (exc) {
+            return resultErr(codes.NETWORK_ERROR, String(exc), exc);
+        }
+    }
+    async fetchAgentMd(aid) {
+        const target = String(aid ?? '').trim();
+        try {
+            const gatewayUrl = await this._resolveGateway(target);
+            const url = agentMdUrl(target, gatewayUrl, this._discoveryPort);
+            const cached = (this._agentMdCache.get(target) ?? {});
+            const reqHeaders = { Accept: 'text/markdown' };
+            if (cached.etag)
+                reqHeaders['If-None-Match'] = cached.etag;
+            if (cached.last_modified)
+                reqHeaders['If-Modified-Since'] = cached.last_modified;
+            let [content, respHeaders, status] = await httpGetText(url, this._verifySsl, reqHeaders, 30000);
+            if (status === 304 && cached.content) {
+                content = String(cached.content);
+            }
+            else if (status === 404) {
+                return resultErr(codes.AGENTMD_NOT_FOUND, `agent.md not found for aid: ${target}`);
+            }
+            else if (status < 200 || status >= 300) {
+                return resultErr(codes.NETWORK_ERROR, `download agent.md failed: HTTP ${status}`);
+            }
+            // 加载对端证书用于验签
+            let peer;
+            const loaded = this.load(target);
+            if (loaded.ok && loaded.data) {
+                peer = loaded.data.aid;
+            }
+            else {
+                const resolved = await this.resolve(target, { skipAgentMd: true });
+                if (!resolved.ok || !resolved.data)
+                    return resolved;
+                peer = resolved.data.aid;
+            }
+            const verified = peer.verifyAgentMd(content);
+            if (!verified.ok || !verified.data)
+                return verified;
+            const sig = verified.data;
+            const statusText = sig.status ?? 'invalid';
+            const verification = { status: statusText };
+            if (sig.reason)
+                verification.reason = sig.reason;
+            const etag = String(respHeaders['etag'] ?? respHeaders['ETag'] ?? '').trim();
+            const lastModified = String(respHeaders['last-modified'] ?? respHeaders['Last-Modified'] ?? '').trim();
+            this._agentMdCache.set(target, { content, etag, last_modified: lastModified, updated_at: String(Date.now()) });
+            return resultOk({ aid: target, content, verification, signature: sig, cert_pem: peer.certPem, certPem: peer.certPem, etag, last_modified: lastModified, status });
+        }
+        catch (exc) {
+            return resultErr(codes.NETWORK_ERROR, String(exc), exc);
+        }
+    }
+    async headAgentMd(aid) {
+        const target = String(aid ?? '').trim();
+        try {
+            const gatewayUrl = await this._resolveGateway(target);
+            const url = agentMdUrl(target, gatewayUrl, this._discoveryPort);
+            const [status, headers] = await httpHead(url, this._verifySsl, 15000);
+            if (status === 404)
+                return resultErr(codes.AGENTMD_NOT_FOUND, `agent.md not found for aid: ${target}`);
+            if (status < 200 || status >= 300)
+                return resultErr(codes.NETWORK_ERROR, `head agent.md failed: HTTP ${status}`);
+            const etag = String(headers['etag'] ?? headers['ETag'] ?? '').trim();
+            const lastModified = String(headers['last-modified'] ?? headers['Last-Modified'] ?? '').trim();
+            const contentLength = parseInt(String(headers['content-length'] ?? '0'), 10) || 0;
+            const cached = (this._agentMdCache.get(target) ?? {});
+            this._agentMdCache.set(target, { ...cached, etag, last_modified: lastModified, remote_checked_at: Date.now() });
+            return resultOk({ aid: target, found: true, etag, last_modified: lastModified, content_length: contentLength, status });
+        }
+        catch (exc) {
+            return resultErr(codes.NETWORK_ERROR, String(exc), exc);
+        }
+    }
+    async checkAgentMd(aid, ttlDays = 1) {
+        const target = String(aid ?? '').trim();
+        const cached = (this._agentMdCache.get(target) ?? {});
+        const head = await this.headAgentMd(target);
+        let remote;
+        if (!head.ok || !head.data) {
+            if (resultError(head)?.code === codes.AGENTMD_NOT_FOUND) {
+                remote = { aid: target, found: false, etag: '', last_modified: '', content_length: 0, status: 404 };
+            }
+            else {
+                return head;
+            }
+        }
+        else {
+            remote = head.data;
+        }
+        const localEtag = String(cached.etag ?? '').trim();
+        const localFound = !!(cached.content);
+        const remoteFound = !!(remote.found);
+        const remoteEtag = String(remote.etag ?? '').trim();
+        const needsUpdate = remoteFound && (!localFound || (!!remoteEtag && remoteEtag !== localEtag));
+        return resultOk({ aid: target, local_found: localFound, remote_found: remoteFound, local_etag: localEtag, remote_etag: remoteEtag, needs_update: needsUpdate, ttl_days: ttlDays });
+    }
+    async diagnose(aid) {
+        const target = String(aid ?? '').trim();
+        const loaded = this.load(target);
+        const existsResult = await this.exists(target);
+        const remoteError = resultError(existsResult);
+        const remoteRegistered = !!(existsResult.ok && existsResult.data?.exists);
+        const remoteChecked = !!(existsResult.ok && existsResult.data != null);
+        let localCert = false;
+        let localPrivateKey = false;
+        let localError = null;
+        let localAid = null;
+        if (loaded.ok && loaded.data) {
+            localAid = loaded.data.aid;
+            localCert = localAid.isCertValid();
+            localPrivateKey = localAid.isPrivateKeyValid();
+        }
+        else {
+            localError = resultError(loaded);
+        }
+        const localValid = localCert && localPrivateKey;
+        const suggestions = [];
+        if (!localValid)
+            suggestions.push('load or register a local identity with a valid private key');
+        if (!remoteRegistered)
+            suggestions.push('register the AID before using it on the network');
+        if (remoteError)
+            suggestions.push(`remote registration check failed: ${remoteError.message}`);
+        let status;
+        if (localPrivateKey && remoteRegistered)
+            status = 'ready';
+        else if (!localPrivateKey && remoteChecked && !remoteRegistered)
+            status = 'available';
+        else if (remoteRegistered)
+            status = 'registered_remote';
+        else
+            status = 'unknown';
+        return resultOk({
+            aid: target, status, local_valid: localValid, localValid: localValid,
+            remote_registered: remoteRegistered, remoteRegistered,
+            suggestions,
+            local: { cert: localCert, private_key: localPrivateKey, error: localError },
+            remote: { checked: remoteChecked, exists: remoteChecked ? remoteRegistered : null, error: remoteError },
+        });
+    }
+    async renewCert(aid) {
+        const target = String(aid ?? '').trim();
+        const loaded = this.load(target);
+        if (!loaded.ok || !loaded.data || !loaded.data.aid.isPrivateKeyValid()) {
+            return resultErr(codes.PRIVATE_KEY_REQUIRED, `private key required for aid: ${target}`);
+        }
+        try {
+            const gatewayUrl = await this._resolveGateway(target);
+            // 通过 AuthFlow 短连接 RPC 完成续签
+            const aidObj = loaded.data.aid;
+            const clientNonce = new CryptoProvider().newClientNonce();
+            const phase1 = await this._auth._shortRpc(gatewayUrl, 'auth.aid_login1', {
+                aid: target, cert: aidObj.certPem, client_nonce: clientNonce,
+            });
+            const signResult = aidObj.sign(String(phase1.nonce));
+            if (!signResult.ok || !signResult.data) {
+                return resultErr(codes.CERT_RENEWAL_FAILED, resultError(signResult)?.message ?? 'sign failed');
+            }
+            const response = await this._auth._shortRpc(gatewayUrl, 'auth.renew_cert', {
+                aid: target, request_id: String(phase1.request_id), nonce: String(phase1.nonce), signature: signResult.data.signature,
+            });
+            const certPem = String(response.cert ?? response.cert_pem ?? '').trim();
+            if (!certPem)
+                return resultErr(codes.CERT_RENEWAL_FAILED, 'server response missing certificate');
+            this._keystore.saveCert(target, certPem);
+            const refreshed = this.load(target);
+            if (!refreshed.ok || !refreshed.data)
+                return resultErr(codes.CERT_RENEWAL_FAILED, 'renewed certificate reload failed');
+            const refreshedAid = refreshed.data.aid;
+            return resultOk({ renewed: true, new_cert_not_after: refreshedAid.certNotAfter, new_fingerprint: refreshedAid.certFingerprint });
+        }
+        catch (exc) {
+            return resultErr(codes.CERT_RENEWAL_FAILED, String(exc), exc);
+        }
+    }
+    async rekey(aid) {
+        const target = String(aid ?? '').trim();
+        const loaded = this.load(target);
+        if (!loaded.ok || !loaded.data || !loaded.data.aid.isPrivateKeyValid()) {
+            return resultErr(codes.PRIVATE_KEY_REQUIRED, `private key required for aid: ${target}`);
+        }
+        try {
+            const oldAid = loaded.data.aid;
+            const crypto = new CryptoProvider();
+            const newIdentity = crypto.generateIdentity();
+            const gatewayUrl = await this._resolveGateway(target);
+            const clientNonce = crypto.newClientNonce();
+            const phase1 = await this._auth._shortRpc(gatewayUrl, 'auth.aid_login1', {
+                aid: target, cert: oldAid.certPem, client_nonce: clientNonce,
+            });
+            const signPayload = Buffer.from(`${phase1.nonce}${newIdentity.public_key_der_b64}`, 'utf-8');
+            const signResult = oldAid.sign(signPayload);
+            if (!signResult.ok || !signResult.data) {
+                return resultErr(codes.REKEY_FAILED, resultError(signResult)?.message ?? 'sign failed');
+            }
+            const response = await this._auth._shortRpc(gatewayUrl, 'auth.rekey', {
+                aid: target, request_id: String(phase1.request_id), nonce: String(phase1.nonce),
+                new_public_key: newIdentity.public_key_der_b64, signature: signResult.data.signature,
+            });
+            const certPem = String(response.cert ?? response.cert_pem ?? '').trim();
+            if (!certPem)
+                return resultErr(codes.REKEY_FAILED, 'server response missing certificate');
+            this._keystore.saveIdentity(target, { aid: target, ...newIdentity, cert: certPem });
+            const refreshed = this.load(target);
+            if (!refreshed.ok || !refreshed.data)
+                return resultErr(codes.REKEY_FAILED, 'rekeyed identity reload failed');
+            const refreshedAid = refreshed.data.aid;
+            return resultOk({ rekeyed: true, new_fingerprint: refreshedAid.certFingerprint, new_cert_not_after: refreshedAid.certNotAfter });
+        }
+        catch (exc) {
+            return resultErr(codes.REKEY_FAILED, String(exc), exc);
+        }
+    }
+    // ── 内部辅助 ──────────────────────────────────────────────────
+    async _resolveGateway(aid) {
+        const dotIdx = aid.indexOf('.');
+        const issuerDomain = dotIdx >= 0 ? aid.slice(dotIdx + 1) : aid;
+        const cached = this._gatewayCache.get(issuerDomain);
+        if (cached)
+            return cached;
+        const port = this._discoveryPort ? `:${this._discoveryPort}` : '';
+        const gatewayUrl = `https://gateway.${issuerDomain}${port}/.well-known/aun-gateway`;
+        const discovered = await this._discovery.discover(gatewayUrl);
+        this._gatewayCache.set(issuerDomain, discovered);
+        return discovered;
+    }
+}
+//# sourceMappingURL=aid-store.js.map

package/dist/aid-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aid-store.js","sourceRoot":"","sources":["../src/aid-store.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,KAAK,KAAK,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAEpG,OAAO,EAAe,SAAS,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAcrE,SAAS,WAAW,CAAI,CAAY;IAClC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC/B,CAAC;AAED,SAAS,eAAe,CAAC,MAAe;IACtC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,OAAO,CAAC,IAAI,SAAS,CAAC;AACxB,CAAC;AAED,2CAA2C;AAC3C,SAAS,QAAQ,CAAC,GAAW,EAAE,SAAkB,EAAE,SAAS,GAAG,IAAI;IACjE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACxD,MAAM,IAAI,GAAyB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QAC1E,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC;QAChD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE;YACzC,GAAG,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjD,IAAI,OAAO,CAAC,KAAK,QAAQ;oBAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;qBACrC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;oBAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACrD,CAAC;YACD,OAAO,CAAC,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtF,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gDAAgD;AAChD,SAAS,WAAW,CAAC,GAAW,EAAE,SAAkB,EAAE,OAAgC,EAAE,SAAS,GAAG,KAAK;IACvG,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACxD,MAAM,IAAI,GAAyB,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;QACnE,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC;QAChD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE;YACrC,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,MAAM,WAAW,GAA2B,EAAE,CAAC;gBAC/C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;oBACjD,IAAI,OAAO,CAAC,KAAK,QAAQ;wBAAE,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;yBACzC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;wBAAE,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACzD,CAAC;gBACD,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;YACvF,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,eAAe,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,UAAkB,EAAE,GAAW;IACjD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;IAC/D,OAAO,GAAG,MAAM,KAAK,MAAM,CAAC,IAAI,aAAa,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,UAAkB,EAAE,aAA6B;IAChF,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAC1D,IAAI,IAAI,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,aAAa,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,IAAI,GAAG,GAAG,IAAI,IAAI,aAAa,EAAE,CAAC;IAC5E,OAAO,GAAG,MAAM,MAAM,IAAI,WAAW,CAAC;AACxC,CAAC;AAED,MAAM,OAAO,QAAQ;IACV,OAAO,CAAS;IACjB,eAAe,CAAS;IACvB,QAAQ,CAAS;IACjB,MAAM,CAAS;IAEhB,SAAS,CAAe;IACxB,KAAK,CAAW;IAChB,UAAU,CAAmB;IAC7B,IAAI,CAAkB;IACtB,IAAI,CAAY;IAChB,UAAU,CAAU;IACpB,cAAc,CAAgB;IAC9B,aAAa,GAAwB,IAAI,GAAG,EAAE,CAAC;IAC/C,aAAa,GAAyC,IAAI,GAAG,EAAE,CAAC;IAExE,YAAY,IASX;QACC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjI,IAAI,CAAC,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;QAC1C,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC;QAEjD,IAAI,CAAC,IAAI,GAAG,IAAI,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACjF,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEtC,IAAI,CAAC,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE;YAC9C,cAAc,EAAE,IAAI,CAAC,eAAe,IAAI,SAAS;YACjD,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC;SAC3C,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,GAAG,IAAI,eAAe,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QACvG,IAAI,CAAC,UAAU,GAAG,IAAI,gBAAgB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAEpI,IAAI,CAAC,KAAK,GAAG,IAAI,QAAQ,CAAC;YACxB,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,MAAM,EAAE,IAAI,cAAc,EAAE;YAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;YACnC,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC;YACtC,GAAG,EAAE,IAAI,CAAC,IAAI;SACf,CAAC,CAAC;IACL,CAAC;IAED,KAAK;QACH,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAyC,CAAC;QAC3D,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,UAAU;YAAE,GAAG,CAAC,KAAK,EAAE,CAAC;IACnD,CAAC;IAED,6DAA6D;IAE7D,IAAI,CAAC,GAAW;QACd,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,KAAK,CAAC,cAAc,EAAE,kCAAkC,MAAM,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,IAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,KAAK,CAAC,gBAAgB,EAAE,qCAAqC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/F,CAAC;QAED,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE,gCAAgC,MAAM,EAAE,CAAC,CAAC;QAC1G,IAAI,OAAO,KAAK,eAAe;YAAE,OAAO,SAAS,CAAC,KAAK,CAAC,kBAAkB,EAAE,sCAAsC,MAAM,EAAE,CAAC,CAAC;QAE5H,MAAM,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,EAAE,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC,KAAK,CAAC,iBAAiB,EAAE,qCAAqC,MAAM,SAAS,EAAE,EAAE,CAAC,CAAC;QACtG,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC;YAC/B,OAAO,QAAQ,CAAC;gBACd,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;aAC9K,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC;QAC3C,IAAI,OAA4C,CAAC;QACjD,IAAI,CAAC;YACH,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,KAAK,CAAC,uBAAuB,EAAE,qCAAqC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QACtG,CAAC;QAED,wCAAwC;QACxC,sEAAsE;QACtE,uBAAuB;QACvB,uDAAuD;QACvD,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAW,CAAC;YACpF,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAW,CAAC;YAC9F,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;gBACnC,OAAO,SAAS,CAAC,KAAK,CAAC,gBAAgB,EAAE,mDAAmD,MAAM,EAAE,CAAC,CAAC;YACxG,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE,OAAO,CAAC,CAAC;YACzE,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC5C,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;gBACxD,OAAO,SAAS,CAAC,KAAK,CAAC,gBAAgB,EAAE,qCAAqC,MAAM,EAAE,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,KAAK,CAAC,gBAAgB,EAAE,qCAAqC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/F,CAAC;QAED,OAAO,QAAQ,CAAC;YACd,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;SAChL,CAAC,CAAC;IACL,CAAC;IAED,IAAI;QACF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,CAAC;YACrD,MAAM,UAAU,GAAc,EAAE,CAAC;YACjC,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;gBACnC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC9B,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;oBAAE,SAAS;gBACzC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC7B,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;oBAAE,SAAS;gBACxC,UAAU,CAAC,IAAI,CAAC;oBACd,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,eAAe,EAAE,IAAI,CAAC,eAAe;iBACtC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,wBAAwB,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,UAAU,CAAC,OAAe,EAAE,OAAe;QACzC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,OAAO,SAAS,CAAC,KAAK,CAAC,uBAAuB,EAAE,yCAAyC,CAAC,CAAC;QAChH,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,OAAO,SAAS,CAAC,KAAK,CAAC,uBAAuB,EAAE,yCAAyC,CAAC,CAAC;QAChH,IAAI,OAAO,KAAK,OAAO;YAAE,OAAO,SAAS,CAAC,KAAK,CAAC,uBAAuB,EAAE,kCAAkC,CAAC,CAAC;QAC7G,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC3D,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC;YAC/B,OAAO,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,KAAK,CAAC,uBAAuB,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,6DAA6D;IAE7D,KAAK,CAAC,QAAQ,CAAC,GAAW;QACxB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,KAAK,CAAC,uBAAuB,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QAClF,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACjD,OAAO,QAAQ,CAAC,EAAE,UAAU,EAAE,IAAa,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,qBAAqB,EAAE,CAAC;gBACzC,OAAO,SAAS,CAAC,KAAK,CAAC,iBAAiB,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;gBACnC,OAAO,SAAS,CAAC,KAAK,CAAC,kBAAkB,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/D,CAAC;YACD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBAClF,OAAO,SAAS,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAClD,CAAC;YACD,OAAO,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YACtD,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAC3C,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAC5D,IAAI,MAAM,KAAK,GAAG;gBAAE,OAAO,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,IAAI,MAAM,KAAK,GAAG;gBAAE,OAAO,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACvD,OAAO,SAAS,CAAC,KAAK,CAAC,aAAa,EAAE,8BAA8B,MAAM,EAAE,CAAC,CAAC;QAChF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,IAAkB;QAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,YAAY,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,IAAI,IAAS,CAAC;YACd,IAAI,aAAa,GAAG,KAAK,CAAC;YAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC9C,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;gBACvB,aAAa,GAAG,IAAI,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;gBACtD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;gBACnE,IAAI,CAAC,OAAO;oBAAE,OAAO,SAAS,CAAC,KAAK,CAAC,cAAc,EAAE,kCAAkC,MAAM,EAAE,CAAC,CAAC;gBACjG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACnC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;oBAAE,OAAO,QAAyB,CAAC;gBACrE,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;YAC3B,CAAC;YACD,MAAM,MAAM,GAAG,EAAE,eAAe,EAAE,aAAa,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;YAC3E,IAAI,WAAW;gBAAE,OAAO,QAAQ,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YACxD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAChD,IAAI,CAAC,OAAO,CAAC,EAAE;gBAAE,OAAO,OAAwB,CAAC;YACjD,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAC/B,OAAO,QAAQ,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAW;QAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YACtD,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;YAChE,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAA2B,CAAC;YAChF,MAAM,UAAU,GAA2B,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;YACvE,IAAI,MAAM,CAAC,IAAI;gBAAE,UAAU,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;YAC3D,IAAI,MAAM,CAAC,aAAa;gBAAE,UAAU,CAAC,mBAAmB,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC;YAEjF,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;YAChG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACrC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACnC,CAAC;iBAAM,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC1B,OAAO,SAAS,CAAC,KAAK,CAAC,iBAAiB,EAAE,+BAA+B,MAAM,EAAE,CAAC,CAAC;YACrF,CAAC;iBAAM,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;gBACzC,OAAO,SAAS,CAAC,KAAK,CAAC,aAAa,EAAE,kCAAkC,MAAM,EAAE,CAAC,CAAC;YACpF,CAAC;YAED,aAAa;YACb,IAAI,IAAS,CAAC;YACd,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC7B,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnE,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;oBAAE,OAAO,QAAyB,CAAC;gBACrE,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAU,CAAC;YAClC,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YAC7C,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;gBAAE,OAAO,QAAyB,CAAC;YACrE,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC;YAC1B,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,IAAI,SAAS,CAAC;YAC3C,MAAM,YAAY,GAA2B,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YACpE,IAAI,GAAG,CAAC,MAAM;gBAAE,YAAY,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YAEjD,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7E,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,IAAI,WAAW,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACvG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAE/G,OAAO,QAAQ,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;QACpK,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,GAAW;QAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YACtD,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;YAChE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YACtE,IAAI,MAAM,KAAK,GAAG;gBAAE,OAAO,SAAS,CAAC,KAAK,CAAC,iBAAiB,EAAE,+BAA+B,MAAM,EAAE,CAAC,CAAC;YACvG,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,GAAG;gBAAE,OAAO,SAAS,CAAC,KAAK,CAAC,aAAa,EAAE,8BAA8B,MAAM,EAAE,CAAC,CAAC;YACjH,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACrE,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/F,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YAClF,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAA4B,CAAC;YACjF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAChH,OAAO,QAAQ,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1H,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAW,EAAE,OAAO,GAAG,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAA4B,CAAC;QACjF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,MAA+B,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,KAAK,KAAK,CAAC,iBAAiB,EAAE,CAAC;gBACxD,MAAM,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;YACtG,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAqB,CAAC;YAC/B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC;QACrB,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,WAAW,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,MAAM,WAAW,GAAG,WAAW,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC;QAC/F,OAAO,QAAQ,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IACrL,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAW;QACxB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;QAC9C,MAAM,gBAAgB,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1E,MAAM,aAAa,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,YAAY,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;QAEvE,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,IAAI,UAAU,GAAY,IAAI,CAAC;QAC/B,IAAI,QAAQ,GAAe,IAAI,CAAC;QAChC,IAAI,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAC7B,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YAC3B,SAAS,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;YACnC,eAAe,GAAG,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,UAAU,GAAG,SAAS,IAAI,eAAe,CAAC;QAChD,MAAM,WAAW,GAAa,EAAE,CAAC;QACjC,IAAI,CAAC,UAAU;YAAE,WAAW,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;QAChG,IAAI,CAAC,gBAAgB;YAAE,WAAW,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;QAC3F,IAAI,WAAW;YAAE,WAAW,CAAC,IAAI,CAAC,qCAAqC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAE9F,IAAI,MAAc,CAAC;QACnB,IAAI,eAAe,IAAI,gBAAgB;YAAE,MAAM,GAAG,OAAO,CAAC;aACrD,IAAI,CAAC,eAAe,IAAI,aAAa,IAAI,CAAC,gBAAgB;YAAE,MAAM,GAAG,WAAW,CAAC;aACjF,IAAI,gBAAgB;YAAE,MAAM,GAAG,mBAAmB,CAAC;;YACnD,MAAM,GAAG,SAAS,CAAC;QAExB,OAAO,QAAQ,CAAC;YACd,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;YACpE,iBAAiB,EAAE,gBAAgB,EAAE,gBAAgB;YACrD,WAAW;YACX,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,EAAE;YAC3E,MAAM,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE;SACxG,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAW;QACzB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,EAAE,CAAC;YACvE,OAAO,SAAS,CAAC,KAAK,CAAC,oBAAoB,EAAE,iCAAiC,MAAM,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YACtD,2BAA2B;YAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YAC/B,MAAM,WAAW,GAAG,IAAI,cAAc,EAAE,CAAC,cAAc,EAAE,CAAC;YAC1D,MAAM,MAAM,GAAG,MAAO,IAAI,CAAC,KAAa,CAAC,SAAS,CAAC,UAAU,EAAE,iBAAiB,EAAE;gBAChF,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW;aAC7D,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACrD,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;gBACvC,OAAO,SAAS,CAAC,KAAK,CAAC,mBAAmB,EAAE,WAAW,CAAC,UAAU,CAAC,EAAE,OAAO,IAAI,aAAa,CAAC,CAAC;YACjG,CAAC;YACD,MAAM,QAAQ,GAAG,MAAO,IAAI,CAAC,KAAa,CAAC,SAAS,CAAC,UAAU,EAAE,iBAAiB,EAAE;gBAClF,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,SAAS;aACtH,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACxE,IAAI,CAAC,OAAO;gBAAE,OAAO,SAAS,CAAC,KAAK,CAAC,mBAAmB,EAAE,qCAAqC,CAAC,CAAC;YACjG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACzC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI;gBAAE,OAAO,SAAS,CAAC,KAAK,CAAC,mBAAmB,EAAE,mCAAmC,CAAC,CAAC;YACvH,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;YACxC,OAAO,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,YAAY,CAAC,YAAY,EAAE,eAAe,EAAE,YAAY,CAAC,eAAe,EAAE,CAAC,CAAC;QACnI,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,KAAK,CAAC,mBAAmB,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAW;QACrB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,EAAE,CAAC;YACvE,OAAO,SAAS,CAAC,KAAK,CAAC,oBAAoB,EAAE,iCAAiC,MAAM,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YAC/B,MAAM,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;YACpC,MAAM,WAAW,GAAG,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC9C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YACtD,MAAM,WAAW,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;YAC5C,MAAM,MAAM,GAAG,MAAO,IAAI,CAAC,KAAa,CAAC,SAAS,CAAC,UAAU,EAAE,iBAAiB,EAAE;gBAChF,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW;aAC7D,CAAC,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,GAAG,WAAW,CAAC,kBAAkB,EAAE,EAAE,OAAO,CAAC,CAAC;YAC7F,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC5C,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;gBACvC,OAAO,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE,WAAW,CAAC,UAAU,CAAC,EAAE,OAAO,IAAI,aAAa,CAAC,CAAC;YAC1F,CAAC;YACD,MAAM,QAAQ,GAAG,MAAO,IAAI,CAAC,KAAa,CAAC,SAAS,CAAC,UAAU,EAAE,YAAY,EAAE;gBAC7E,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC/E,cAAc,EAAE,WAAW,CAAC,kBAAkB,EAAE,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,SAAS;aACrF,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACxE,IAAI,CAAC,OAAO;gBAAE,OAAO,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE,qCAAqC,CAAC,CAAC;YAC1F,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YACpF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI;gBAAE,OAAO,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE,gCAAgC,CAAC,CAAC;YAC7G,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;YACxC,OAAO,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,YAAY,CAAC,eAAe,EAAE,kBAAkB,EAAE,YAAY,CAAC,YAAY,EAAE,CAAC,CAAC;QACnI,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,6DAA6D;IAErD,KAAK,CAAC,eAAe,CAAC,GAAW;QACvC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,MAAM,UAAU,GAAG,mBAAmB,YAAY,GAAG,IAAI,0BAA0B,CAAC;QACpF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC9D,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QACjD,OAAO,UAAU,CAAC;IACpB,CAAC;CACF"}

package/dist/aid.d.ts

@@ -0,0 +1,52 @@
+/**
+ * AID 值对象 — 对齐 Python SDK aid.py
+ * 不可变，持有证书 + 可选私钥，提供密码学操作。
+ */
+import { type Result } from './result.js';
+export interface VerifyResult {
+    status: 'verified' | 'invalid' | 'unsigned';
+    payload: string;
+    aid?: string;
+    cert_fingerprint?: string;
+    timestamp?: number;
+    reason?: string;
+}
+export declare class AID {
+    readonly aid: string;
+    readonly aunPath: string;
+    readonly certPem: string;
+    readonly deviceId: string;
+    readonly slotId: string;
+    private readonly _privateKeyPem;
+    private readonly _certValid;
+    private readonly _privateKeyValid;
+    private constructor();
+    static _create(params: {
+        aid: string;
+        aunPath: string;
+        certPem: string;
+        privateKeyPem: string | null;
+        certValid: boolean;
+        privateKeyValid: boolean;
+        deviceId?: string;
+        slotId?: string;
+    }): AID;
+    get publicKey(): string;
+    get certSubject(): string;
+    get certNotBefore(): Date;
+    get certNotAfter(): Date;
+    get certIssuer(): string;
+    get certFingerprint(): string;
+    isCertValid(): boolean;
+    isPrivateKeyValid(): boolean;
+    sign(payload: Buffer | string): Result<{
+        signature: string;
+    }>;
+    verify(payload: Buffer | string, signature: string): Result<{
+        valid: boolean;
+    }>;
+    signAgentMd(content: string): Result<{
+        signed: string;
+    }>;
+    verifyAgentMd(content: string): Result<VerifyResult>;
+}