@agentunion/fastaun 0.4.5 → 0.4.7

package/dist/keystore/local-identity-store.js

@@ -0,0 +1,525 @@
+/**
+ * LocalIdentityStore — 基于文件系统 + SQLite 的 KeyStore 实现（含私钥操作）。
+ * AIDStore / RegisterFlow 持有此类型。
+ */
+import * as crypto from 'node:crypto';
+import { existsSync, mkdirSync, readFileSync, writeFileSync, readdirSync, chmodSync, renameSync, unlinkSync, rmSync as fsRmSync, renameSync as fsRenameSync, statSync, } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { homedir } from 'node:os';
+import { AIDDatabase } from './aid-db.js';
+import { getDeviceId } from '../config.js';
+import { certificateSha256Fingerprint } from '../crypto.js';
+import { createDefaultSecretStore } from '../secret-store/index.js';
+import { FileSecretStore } from '../secret-store/file-store.js';
+import { isJsonObject, } from '../types.js';
+const _noopLogger = { error: () => { }, warn: () => { }, info: () => { }, debug: () => { } };
+function secureFilePermissions(path) {
+    if (process.platform !== 'win32') {
+        try {
+            chmodSync(path, 0o600);
+        }
+        catch { /* ignore */ }
+    }
+}
+function replaceFileSync(tmpPath, targetPath) {
+    try {
+        renameSync(tmpPath, targetPath);
+        return;
+    }
+    catch (renameErr) {
+        try {
+            unlinkSync(targetPath);
+        }
+        catch (unlinkErr) {
+            if (unlinkErr.code !== 'ENOENT') {
+                throw new Error(`replace target cleanup failed: ${unlinkErr instanceof Error ? unlinkErr.message : String(unlinkErr)}`);
+            }
+        }
+        renameSync(tmpPath, targetPath);
+    }
+}
+function safeAid(aid) {
+    return aid.replace(/[/\\:]/g, '_');
+}
+export class LocalIdentityStore {
+    _root;
+    _aidsRoot;
+    _secretStore;
+    _aidDBs = new Map();
+    deviceId;
+    _logger;
+    constructor(root, opts) {
+        this._logger = opts?.logger ?? _noopLogger;
+        const preferred = root ?? join(homedir(), '.aun');
+        const fallback = join(process.cwd(), '.aun');
+        this._root = this._prepareRoot(preferred, fallback);
+        this._secretStore = opts?.secretStore ?? createDefaultSecretStore(this._root, opts?.encryptionSeed, undefined, { logger: opts?.secretStoreLogger ?? this._logger });
+        this._aidsRoot = join(this._root, 'AIDs');
+        mkdirSync(this._aidsRoot, { recursive: true });
+        this.deviceId = getDeviceId(this._root);
+    }
+    close() {
+        for (const db of this._aidDBs.values())
+            db.close();
+        this._aidDBs.clear();
+    }
+    static ChangeSeed(root, oldSeed, newSeed) {
+        return FileSecretStore.changeSeed(root, oldSeed, newSeed);
+    }
+    changeSeed(oldSeed, newSeed) {
+        this.close();
+        const result = FileSecretStore.changeSeed(this._root, oldSeed, newSeed, { logger: this._logger });
+        this._secretStore = createDefaultSecretStore(this._root, newSeed, undefined, { logger: this._logger });
+        return result;
+    }
+    _prepareRoot(preferred, fallback) {
+        try {
+            mkdirSync(preferred, { recursive: true });
+            return preferred;
+        }
+        catch {
+            this._logger.warn(`preferred path ${preferred} unavailable, falling back to ${fallback}`);
+            mkdirSync(fallback, { recursive: true });
+            return fallback;
+        }
+    }
+    _getDB(aid) {
+        const safe = safeAid(aid);
+        let db = this._aidDBs.get(safe);
+        if (!db) {
+            const dbPath = join(this._aidsRoot, safe, 'aun.db');
+            try {
+                db = new AIDDatabase(dbPath, this._secretStore, safe, this._logger);
+            }
+            catch (exc) {
+                this._logger.warn(`database corrupted, backing up and rebuilding: aid=${aid} err=${exc instanceof Error ? exc.message : String(exc)}`);
+                const ts = new Date().toISOString().replace(/[:.]/g, '-');
+                const bakPath = dbPath + `.corrupt_${ts}.bak`;
+                try {
+                    renameSync(dbPath, bakPath);
+                }
+                catch (renameErr) {
+                    this._logger.warn(`backup rename failed: ${renameErr instanceof Error ? renameErr.message : String(renameErr)}`);
+                }
+                for (const suffix of ['-wal', '-shm', '-journal']) {
+                    try {
+                        unlinkSync(dbPath + suffix);
+                    }
+                    catch { /* ignore */ }
+                }
+                db = new AIDDatabase(dbPath, this._secretStore, safe, this._logger);
+            }
+            this._aidDBs.set(safe, db);
+        }
+        return db;
+    }
+    // ── KeyPair ──────────────────────────────────────────────
+    loadKeyPair(aid) {
+        const path = this._keyPairPath(aid);
+        if (!existsSync(path))
+            return null;
+        let raw;
+        try {
+            raw = JSON.parse(readFileSync(path, 'utf-8'));
+        }
+        catch {
+            this._logger.warn('key.json read or parse failed, treating as non-existent');
+            return null;
+        }
+        return this._restoreKeyPair(aid, raw, path);
+    }
+    saveKeyPair(aid, keyPair) {
+        this._saveKeyPairAtPath(aid, this._keyPairPath(aid), keyPair);
+    }
+    _saveKeyPairAtPath(aid, path, keyPair) {
+        mkdirSync(dirname(path), { recursive: true });
+        const protected_ = JSON.parse(JSON.stringify(keyPair));
+        const pem = protected_.private_key_pem;
+        if (typeof pem === 'string' && pem) {
+            delete protected_.private_key_pem;
+            const rec = this._secretStore.protect(safeAid(aid), 'identity/private_key', Buffer.from(pem, 'utf-8'));
+            protected_.private_key_protection = rec;
+        }
+        const tmpPath = `${path}.tmp-${process.pid}-${Date.now()}-${crypto.randomBytes(4).toString('hex')}`;
+        writeFileSync(tmpPath, JSON.stringify(protected_, null, 2), { mode: 0o600 });
+        secureFilePermissions(tmpPath);
+        try {
+            replaceFileSync(tmpPath, path);
+        }
+        catch (exc) {
+            try {
+                unlinkSync(tmpPath);
+            }
+            catch { /* ignore */ }
+            throw exc;
+        }
+        secureFilePermissions(path);
+    }
+    _restoreKeyPair(aid, kp, persistPath) {
+        const out = JSON.parse(JSON.stringify(kp));
+        const rec = out.private_key_protection;
+        if (isJsonObject(rec)) {
+            const plain = this._secretStore.reveal(safeAid(aid), 'identity/private_key', rec);
+            if (!plain)
+                throw new Error(`private key decrypt failed for aid ${aid}: seed_password mismatch or key.json corrupted`);
+            out.private_key_pem = plain.toString('utf-8');
+            return out;
+        }
+        if (persistPath && typeof out.private_key_pem === 'string' && out.private_key_pem) {
+            this._saveKeyPairAtPath(aid, persistPath, out);
+        }
+        return out;
+    }
+    // ── Cert ─────────────────────────────────────────────────
+    loadCert(aid, certFingerprint) {
+        try {
+            const norm = this._normalizeCertFingerprint(certFingerprint);
+            if (norm) {
+                const vp = this._certVersionPath(aid, norm);
+                if (existsSync(vp))
+                    return readFileSync(vp, 'utf-8');
+                const active = this._certPath(aid);
+                if (existsSync(active)) {
+                    const certPem = readFileSync(active, 'utf-8');
+                    if (certificateSha256Fingerprint(certPem) === norm)
+                        return certPem;
+                }
+                return null;
+            }
+            const path = this._certPath(aid);
+            return existsSync(path) ? readFileSync(path, 'utf-8') : null;
+        }
+        catch {
+            this._logger.warn('cert.pem read failed, treating as non-existent');
+            return null;
+        }
+    }
+    saveCert(aid, certPem, certFingerprint, opts) {
+        const norm = this._normalizeCertFingerprint(certFingerprint);
+        if (norm) {
+            const vp = this._certVersionPath(aid, norm);
+            mkdirSync(dirname(vp), { recursive: true });
+            writeFileSync(vp, certPem);
+            if (!opts?.makeActive)
+                return;
+        }
+        const path = this._certPath(aid);
+        mkdirSync(dirname(path), { recursive: true });
+        writeFileSync(path, certPem);
+    }
+    _normalizeCertFingerprint(fp) {
+        const v = String(fp ?? '').trim().toLowerCase();
+        if (!v.startsWith('sha256:') || v.length !== 71)
+            return '';
+        if (/[^0-9a-f]/.test(v.slice(7)))
+            return '';
+        return v;
+    }
+    // ── Identity ─────────────────────────────────────────────
+    loadIdentity(aid) {
+        const identityDir = join(this._aidsRoot, safeAid(aid));
+        if (!existsSync(identityDir))
+            return null;
+        const kp = this.loadKeyPair(aid);
+        const cert = this.loadCert(aid);
+        const db = this._getDB(aid);
+        const kv = db.getAllMetadata();
+        const hasMeta = Object.keys(kv).length > 0;
+        if (!kp && !cert && !hasMeta)
+            return null;
+        const identity = {};
+        for (const [k, v] of Object.entries(kv)) {
+            try {
+                identity[k] = JSON.parse(v);
+            }
+            catch {
+                identity[k] = v;
+            }
+        }
+        if (kp)
+            Object.assign(identity, kp);
+        if (cert) {
+            const localPubB64 = kp?.public_key_der_b64;
+            if (typeof localPubB64 === 'string' && localPubB64) {
+                try {
+                    const x = new crypto.X509Certificate(cert);
+                    const certPubDer = x.publicKey.export({ type: 'spki', format: 'der' });
+                    const localPubDer = Buffer.from(localPubB64, 'base64');
+                    if (!certPubDer.equals(localPubDer)) {
+                        this._logger.error('key.json public key does not match cert.pem public key, discarding cert');
+                    }
+                    else {
+                        identity.cert = cert;
+                    }
+                }
+                catch {
+                    identity.cert = cert;
+                }
+            }
+            else {
+                identity.cert = cert;
+            }
+        }
+        return identity;
+    }
+    saveIdentity(aid, identity) {
+        const kp = {};
+        for (const k of ['private_key_pem', 'public_key_der_b64', 'curve']) {
+            if (k in identity)
+                kp[k] = identity[k];
+        }
+        if (Object.keys(kp).length > 0)
+            this.saveKeyPair(aid, kp);
+        if (typeof identity.cert === 'string' && identity.cert)
+            this.saveCert(aid, identity.cert);
+        const db = this._getDB(aid);
+        const skip = new Set(['private_key_pem', 'public_key_der_b64', 'curve', 'cert']);
+        for (const [k, v] of Object.entries(identity)) {
+            if (skip.has(k))
+                continue;
+            db.setMetadata(k, JSON.stringify(v));
+        }
+    }
+    loadAnyIdentity() {
+        if (!existsSync(this._aidsRoot))
+            return null;
+        for (const entry of readdirSync(this._aidsRoot, { withFileTypes: true })) {
+            if (!entry.isDirectory() || entry.name.startsWith('_'))
+                continue;
+            const identity = this.loadIdentity(entry.name);
+            if (identity)
+                return identity;
+        }
+        return null;
+    }
+    listIdentities() {
+        if (!existsSync(this._aidsRoot))
+            return [];
+        const aids = [];
+        for (const entry of readdirSync(this._aidsRoot, { withFileTypes: true })) {
+            if (!entry.isDirectory() || entry.name.startsWith('_'))
+                continue;
+            aids.push(entry.name);
+        }
+        return aids;
+    }
+    loadMetadata(aid) {
+        try {
+            const dbPath = join(this._aidsRoot, safeAid(aid), 'aun.db');
+            if (!existsSync(dbPath))
+                return null;
+            const kv = this._getDB(aid).getAllMetadata();
+            if (Object.keys(kv).length === 0)
+                return null;
+            const result = {};
+            for (const [k, v] of Object.entries(kv)) {
+                try {
+                    result[k] = JSON.parse(v);
+                }
+                catch {
+                    result[k] = v;
+                }
+            }
+            return result;
+        }
+        catch {
+            return null;
+        }
+    }
+    saveMetadata(aid, metadata) {
+        const db = this._getDB(aid);
+        for (const [k, v] of Object.entries(metadata)) {
+            if (v === undefined) {
+                db.deleteMetadata(k);
+                continue;
+            }
+            db.setMetadata(k, JSON.stringify(v));
+        }
+    }
+    // ── Instance State ───────────────────────────────────────
+    loadInstanceState(aid, deviceId, slotId = '') {
+        return this._getDB(aid).loadInstanceState(deviceId, slotId);
+    }
+    saveInstanceState(aid, deviceId, slotId, state) {
+        this._getDB(aid).saveInstanceState(deviceId, slotId, state);
+    }
+    // ── Seq Tracker ───────────────────────────────────────────
+    saveSeq(aid, deviceId, slotId, namespace, contiguousSeq) {
+        this._getDB(aid).saveSeq(deviceId, slotId, namespace, contiguousSeq);
+    }
+    loadSeq(aid, deviceId, slotId, namespace) {
+        return this._getDB(aid).loadSeq(deviceId, slotId, namespace);
+    }
+    loadAllSeqs(aid, deviceId, slotId) {
+        return this._getDB(aid).loadAllSeqs(deviceId, slotId);
+    }
+    // ── 信任根管理 ─────────────────────────────────────────────
+    trustRootDir() {
+        const dir = join(this._root, 'CA', 'root');
+        mkdirSync(dir, { recursive: true });
+        return dir;
+    }
+    trustRootBundlePath() {
+        return join(this.trustRootDir(), 'trust-roots.pem');
+    }
+    saveTrustRoots(trustList, rootCerts) {
+        const dir = this.trustRootDir();
+        for (let i = 0; i < rootCerts.length; i++) {
+            const item = rootCerts[i];
+            const certId = item.id || item.fingerprint_sha256 || `root-${i + 1}`;
+            writeFileSync(join(dir, `${certId.replace(/[^A-Za-z0-9_.-]+/g, '_').slice(0, 120)}.crt`), item.cert_pem, 'utf-8');
+        }
+        const bundlePath = this.trustRootBundlePath();
+        writeFileSync(bundlePath, rootCerts.map(i => i.cert_pem.trim()).join('\n') + '\n', 'utf-8');
+        writeFileSync(join(dir, 'trust-roots.json'), JSON.stringify(trustList, null, 2), 'utf-8');
+        return bundlePath;
+    }
+    saveIssuerRootCert(issuer, certPem, fingerprintSha256 = '') {
+        const dir = this.trustRootDir();
+        const issuersDir = join(dir, 'issuers');
+        mkdirSync(issuersDir, { recursive: true });
+        const certPath = join(issuersDir, `${(issuer || 'issuer').replace(/[^A-Za-z0-9_.-]+/g, '_').slice(0, 120)}.root.crt`);
+        const normalizedPem = certPem.trim() + '\n';
+        writeFileSync(certPath, normalizedPem, 'utf-8');
+        const bundlePath = this.trustRootBundlePath();
+        const existingPems = new Map();
+        try {
+            for (const pem of readFileSync(bundlePath, 'utf-8').split(/(?<=-----END CERTIFICATE-----)\s*/).map(s => s.trim()).filter(s => s.startsWith('-----BEGIN CERTIFICATE-----'))) {
+                existingPems.set(this._pemFingerprint(pem), pem);
+            }
+        }
+        catch { /* ignore */ }
+        const newFp = fingerprintSha256 ? fingerprintSha256.toLowerCase().replace(/^sha256:/, '') : this._pemFingerprint(normalizedPem);
+        existingPems.set(newFp, normalizedPem);
+        writeFileSync(bundlePath, Array.from(existingPems.values()).map(p => p.trim()).join('\n') + '\n', 'utf-8');
+        return [certPath, bundlePath];
+    }
+    _pemFingerprint(pem) {
+        try {
+            const der = pem.replace(/-----[A-Z ]+-----/g, '').replace(/\s/g, '');
+            return crypto.createHash('sha256').update(Buffer.from(der, 'base64')).digest('hex');
+        }
+        catch {
+            return crypto.createHash('sha256').update(pem, 'utf-8').digest('hex');
+        }
+    }
+    // ── Pending 身份管理 ─────────────────────────────────────
+    pendingIdentityDir(aid) {
+        const nonce = crypto.randomBytes(4).toString('hex');
+        const ts = Math.floor(Date.now() / 1000);
+        const dir = join(this._pendingRoot(), `${safeAid(aid)}-${nonce}-${ts}`);
+        mkdirSync(join(dir, 'private'), { recursive: true });
+        mkdirSync(join(dir, 'public'), { recursive: true });
+        return dir;
+    }
+    listPendingIdentityDirs(aid) {
+        const root = this._pendingRoot();
+        if (!existsSync(root))
+            return [];
+        const prefix = `${safeAid(aid)}-`;
+        const items = [];
+        for (const entry of readdirSync(root, { withFileTypes: true })) {
+            if (!entry.isDirectory() || !entry.name.startsWith(prefix))
+                continue;
+            const path = join(root, entry.name);
+            try {
+                items.push({ path, mtimeMs: statSync(path).mtimeMs });
+            }
+            catch { /* ignore */ }
+        }
+        return items.sort((a, b) => b.mtimeMs - a.mtimeMs).map(item => item.path);
+    }
+    savePendingKeyPair(pendingDir, aid, keyPair) {
+        this._saveKeyPairAtPath(aid, join(pendingDir, 'private', 'key.json'), keyPair);
+    }
+    loadPendingKeyPair(pendingDir, aid) {
+        const keyPath = join(pendingDir, 'private', 'key.json');
+        if (!existsSync(keyPath))
+            return null;
+        let raw;
+        try {
+            raw = JSON.parse(readFileSync(keyPath, 'utf-8'));
+        }
+        catch {
+            return null;
+        }
+        return this._restoreKeyPair(aid, raw, keyPath);
+    }
+    savePendingCert(pendingDir, certPem) {
+        const certPath = join(pendingDir, 'public', 'cert.pem');
+        mkdirSync(dirname(certPath), { recursive: true });
+        writeFileSync(certPath, certPem, { encoding: 'utf-8', mode: 0o600 });
+    }
+    promotePendingIdentity(pendingDir, aid) {
+        this._ensurePendingKeyPairProtected(pendingDir, aid);
+        const target = join(this._aidsRoot, safeAid(aid));
+        if (existsSync(target))
+            throw new Error(`promotePendingIdentity: target exists: ${target}`);
+        const safe = safeAid(aid);
+        const db = this._aidDBs.get(safe);
+        if (db) {
+            try {
+                db.close();
+            }
+            catch { /* ignore */ }
+            this._aidDBs.delete(safe);
+        }
+        mkdirSync(this._aidsRoot, { recursive: true });
+        fsRenameSync(pendingDir, target);
+        return target;
+    }
+    discardPendingIdentity(pendingDir) {
+        fsRmSync(pendingDir, { recursive: true, force: true });
+    }
+    cleanupPendingDirs(maxAgeMs = 600_000) {
+        const root = this._pendingRoot();
+        if (!existsSync(root))
+            return 0;
+        let removed = 0;
+        const now = Date.now();
+        try {
+            for (const entry of readdirSync(root, { withFileTypes: true })) {
+                if (!entry.isDirectory())
+                    continue;
+                const path = join(root, entry.name);
+                try {
+                    if (now - statSync(path).mtimeMs < maxAgeMs)
+                        continue;
+                    fsRmSync(path, { recursive: true, force: true });
+                    removed++;
+                }
+                catch (e) {
+                    this._logger.warn(`cleanupPendingDirs entry failed: ${path} err=${e instanceof Error ? e.message : String(e)}`);
+                }
+            }
+        }
+        catch (e) {
+            this._logger.warn(`cleanupPendingDirs read root failed: ${root} err=${e instanceof Error ? e.message : String(e)}`);
+        }
+        return removed;
+    }
+    _ensurePendingKeyPairProtected(pendingDir, aid) {
+        const keyPath = join(pendingDir, 'private', 'key.json');
+        if (!existsSync(keyPath))
+            throw new Error(`pending identity missing key pair for ${aid}`);
+        const raw = JSON.parse(readFileSync(keyPath, 'utf-8'));
+        if (typeof raw.private_key_pem === 'string' && raw.private_key_pem)
+            throw new Error(`pending identity private key is plaintext for ${aid}`);
+        if (!isJsonObject(raw.private_key_protection))
+            throw new Error(`pending identity private key is not encrypted for ${aid}`);
+    }
+    _pendingRoot() {
+        return join(this._aidsRoot, '_pending');
+    }
+    // ── 路径辅助 ─────────────────────────────────────────────
+    _keyPairPath(aid) {
+        return join(this._aidsRoot, safeAid(aid), 'private', 'key.json');
+    }
+    _certPath(aid) {
+        return join(this._aidsRoot, safeAid(aid), 'public', 'cert.pem');
+    }
+    _certVersionPath(aid, fp) {
+        return join(this._aidsRoot, safeAid(aid), 'public', 'certs', `${fp.replace(/:/g, '_')}.pem`);
+    }
+}
+//# sourceMappingURL=local-identity-store.js.map

package/dist/keystore/local-identity-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-identity-store.js","sourceRoot":"","sources":["../../src/keystore/local-identity-store.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,EACL,UAAU,EACV,SAAS,EACT,YAAY,EACZ,aAAa,EACb,WAAW,EACX,SAAS,EACT,UAAU,EACV,UAAU,EACV,MAAM,IAAI,QAAQ,EAClB,UAAU,IAAI,YAAY,EAC1B,QAAQ,GACT,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAKlC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,eAAe,EAAyB,MAAM,+BAA+B,CAAC;AACvF,OAAO,EACL,YAAY,GAKb,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,GAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC;AAEvG,SAAS,qBAAqB,CAAC,IAAY;IACzC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC;YAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,UAAkB;IAC1D,IAAI,CAAC;QACH,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAChC,OAAO;IACT,CAAC;IAAC,OAAO,SAAS,EAAE,CAAC;QACnB,IAAI,CAAC;YAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;YACjD,IAAK,SAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,MAAM,IAAI,KAAK,CAAC,kCAAkC,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC1H,CAAC;QACH,CAAC;QACD,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,OAAO,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,OAAO,kBAAkB;IACrB,KAAK,CAAS;IACd,SAAS,CAAS;IAClB,YAAY,CAAc;IAC1B,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IACxC,QAAQ,CAAS;IAClB,OAAO,CAAe;IAE9B,YACE,IAAa,EACb,IAKC;QAED,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,MAAM,IAAI,WAAW,CAAC;QAC3C,MAAM,SAAS,GAAG,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC,YAAY,GAAG,IAAI,EAAE,WAAW,IAAI,wBAAwB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACpK,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1C,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK;QACH,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YAAE,EAAE,CAAC,KAAK,EAAE,CAAC;QACnD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,UAAU,CAAC,IAAY,EAAE,OAAe,EAAE,OAAe;QAC9D,OAAO,eAAe,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED,UAAU,CAAC,OAAe,EAAE,OAAe;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAClG,IAAI,CAAC,YAAY,GAAG,wBAAwB,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACvG,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,YAAY,CAAC,SAAiB,EAAE,QAAgB;QACtD,IAAI,CAAC;YACH,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,SAAS,iCAAiC,QAAQ,EAAE,CAAC,CAAC;YAC1F,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,GAAW;QACxB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YACpD,IAAI,CAAC;gBACH,EAAE,GAAG,IAAI,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACtE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,sDAAsD,GAAG,QAAQ,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACvI,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBAC1D,MAAM,OAAO,GAAG,MAAM,GAAG,YAAY,EAAE,MAAM,CAAC;gBAC9C,IAAI,CAAC;oBAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAAC,CAAC;gBAAC,OAAO,SAAS,EAAE,CAAC;oBACtD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBACnH,CAAC;gBACD,KAAK,MAAM,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;oBAClD,IAAI,CAAC;wBAAC,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;gBAC7D,CAAC;gBACD,EAAE,GAAG,IAAI,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,4DAA4D;IAE5D,WAAW,CAAC,GAAW;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,GAAe,CAAC;QACpB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAe,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;YAC7E,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9C,CAAC;IAED,WAAW,CAAC,GAAW,EAAE,OAAsB;QAC7C,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC;IAEO,kBAAkB,CAAC,GAAW,EAAE,IAAY,EAAE,OAAsB;QAC1E,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAkB,CAAC;QACxE,MAAM,GAAG,GAAG,UAAU,CAAC,eAAe,CAAC;QACvC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,EAAE,CAAC;YACnC,OAAO,UAAU,CAAC,eAAe,CAAC;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;YACvG,UAAU,CAAC,sBAAsB,GAAG,GAAG,CAAC;QAC1C,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7E,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC;gBAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YACnD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAEO,eAAe,CAAC,GAAW,EAAE,EAAc,EAAE,WAAoB;QACvE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAkB,CAAC;QAC5D,MAAM,GAAG,GAAI,GAAkB,CAAC,sBAAsB,CAAC;QACvD,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,sBAAsB,EAAE,GAAU,CAAC,CAAC;YACzF,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,GAAG,gDAAgD,CAAC,CAAC;YACvH,GAAG,CAAC,eAAe,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC9C,OAAO,GAAG,CAAC;QACb,CAAC;QACD,IAAI,WAAW,IAAI,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ,IAAI,GAAG,CAAC,eAAe,EAAE,CAAC;YAClF,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,4DAA4D;IAE5D,QAAQ,CAAC,GAAW,EAAE,eAAwB;QAC5C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,yBAAyB,CAAC,eAAe,CAAC,CAAC;YAC7D,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAC5C,IAAI,UAAU,CAAC,EAAE,CAAC;oBAAE,OAAO,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;gBACrD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBACvB,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;oBAC9C,IAAI,4BAA4B,CAAC,OAAO,CAAC,KAAK,IAAI;wBAAE,OAAO,OAAO,CAAC;gBACrE,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACjC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;YACpE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,GAAW,EAAE,OAAe,EAAE,eAAwB,EAAE,IAA+B;QAC9F,MAAM,IAAI,GAAG,IAAI,CAAC,yBAAyB,CAAC,eAAe,CAAC,CAAC;QAC7D,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC5C,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5C,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC3B,IAAI,CAAC,IAAI,EAAE,UAAU;gBAAE,OAAO;QAChC,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACjC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IAEO,yBAAyB,CAAC,EAAW;QAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAChD,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QAC3D,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QAC5C,OAAO,CAAC,CAAC;IACX,CAAC;IAED,4DAA4D;IAE5D,YAAY,CAAC,GAAW;QACtB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,OAAO,IAAI,CAAC;QAE1C,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,EAAE,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE1C,MAAM,QAAQ,GAAmB,EAAE,CAAC;QACpC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC;gBAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC;QACjE,CAAC;QACD,IAAI,EAAE;YAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpC,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,WAAW,GAAG,EAAE,EAAE,kBAAkB,CAAC;YAC3C,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,EAAE,CAAC;gBACnD,IAAI,CAAC;oBACH,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;oBAC3C,MAAM,UAAU,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;oBACvE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;oBACvD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;wBACpC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,yEAAyE,CAAC,CAAC;oBAChG,CAAC;yBAAM,CAAC;wBACN,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC;oBACvB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC;gBAAC,CAAC;YACnC,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC;YACvB,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,YAAY,CAAC,GAAW,EAAE,QAAwB;QAChD,MAAM,EAAE,GAAkB,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,oBAAoB,EAAE,OAAO,CAAU,EAAE,CAAC;YAC5E,IAAI,CAAC,IAAI,QAAQ;gBAAE,EAAE,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAW,CAAC;QACnD,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC1D,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1F,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,iBAAiB,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QACjF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9C,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,SAAS;YAC1B,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,eAAe;QACb,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7C,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACzE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAC;QAChC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,cAAc;QACZ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACzE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YACjE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,YAAY,CAAC,GAAW;QACtB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC5D,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC;YACrC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,CAAC;YAC7C,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC9C,MAAM,MAAM,GAA4B,EAAE,CAAC;YAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;gBACxC,IAAI,CAAC;oBAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAAC,CAAC;YAC7D,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IAC1B,CAAC;IAED,YAAY,CAAC,GAAW,EAAE,QAAiC;QACzD,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;gBAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YACxD,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,4DAA4D;IAE5D,iBAAiB,CAAC,GAAW,EAAE,QAAgB,EAAE,MAAM,GAAG,EAAE;QAC1D,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAA0B,CAAC;IACvF,CAAC;IAED,iBAAiB,CAAC,GAAW,EAAE,QAAgB,EAAE,MAAc,EAAE,KAAqB;QACpF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9D,CAAC;IAED,6DAA6D;IAE7D,OAAO,CAAC,GAAW,EAAE,QAAgB,EAAE,MAAc,EAAE,SAAiB,EAAE,aAAqB;QAC7F,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;IACvE,CAAC;IAED,OAAO,CAAC,GAAW,EAAE,QAAgB,EAAE,MAAc,EAAE,SAAiB;QACtE,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC/D,CAAC;IAED,WAAW,CAAC,GAAW,EAAE,QAAgB,EAAE,MAAc;QACvD,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IAED,yDAAyD;IAEzD,YAAY;QACV,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3C,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,mBAAmB;QACjB,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACtD,CAAC;IAED,cAAc,CAAC,SAAkC,EAAE,SAAgF;QACjI,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,kBAAkB,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACrE,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACpH,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC9C,aAAa,CAAC,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5F,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC1F,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,kBAAkB,CAAC,MAAc,EAAE,OAAe,EAAE,iBAAiB,GAAG,EAAE;QACxE,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACxC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,IAAI,QAAQ,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;QACtH,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC;QAC5C,aAAa,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC9C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC/C,IAAI,CAAC;YACH,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC;gBAC3K,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACxB,MAAM,KAAK,GAAG,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;QAChI,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QACvC,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3G,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAChC,CAAC;IAEO,eAAe,CAAC,GAAW;QACjC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACrE,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,wDAAwD;IAExD,kBAAkB,CAAC,GAAW;QAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC;QACxE,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,uBAAuB,CAAC,GAAW;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACjC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;QAClC,MAAM,KAAK,GAA6C,EAAE,CAAC;QAC3D,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAC/D,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,SAAS;YACrE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5E,CAAC;IAED,kBAAkB,CAAC,UAAkB,EAAE,GAAW,EAAE,OAAsB;QACxE,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;IACjF,CAAC;IAED,kBAAkB,CAAC,UAAkB,EAAE,GAAW;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QACxD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,IAAI,GAAe,CAAC;QACpB,IAAI,CAAC;YAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAe,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC9F,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IAED,eAAe,CAAC,UAAkB,EAAE,OAAe;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QACxD,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,sBAAsB,CAAC,UAAkB,EAAE,GAAW;QACpD,IAAI,CAAC,8BAA8B,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAClD,IAAI,UAAU,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,MAAM,EAAE,CAAC,CAAC;QAC5F,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,EAAE,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QACjF,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,sBAAsB,CAAC,UAAkB;QACvC,QAAQ,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,kBAAkB,CAAC,QAAQ,GAAG,OAAO;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACjC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC;QAChC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC/D,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;oBAAE,SAAS;gBACnC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBACpC,IAAI,CAAC;oBACH,IAAI,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,QAAQ;wBAAE,SAAS;oBACtD,QAAQ,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;oBACjD,OAAO,EAAE,CAAC;gBACZ,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oCAAoC,IAAI,QAAQ,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAClH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,wCAAwC,IAAI,QAAQ,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACtH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,8BAA8B,CAAC,UAAkB,EAAE,GAAW;QACpE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QACxD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,GAAG,EAAE,CAAC,CAAC;QAC1F,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAe,CAAC;QACrE,IAAI,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ,IAAI,GAAG,CAAC,eAAe;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,GAAG,EAAE,CAAC,CAAC;QAC5I,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,sBAAsB,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,GAAG,EAAE,CAAC,CAAC;IAC7H,CAAC;IAEO,YAAY;QAClB,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAC1C,CAAC;IAED,wDAAwD;IAEhD,YAAY,CAAC,GAAW;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACnE,CAAC;IAEO,SAAS,CAAC,GAAW;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAClE,CAAC;IAEO,gBAAgB,CAAC,GAAW,EAAE,EAAU;QAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/F,CAAC;CACF"}

package/dist/keystore/local-token-store.d.ts

@@ -0,0 +1,68 @@
+/**
+ * LocalTokenStore — 基于 SQLite 的 TokenStore 实现（不含私钥操作）。
+ * AUNClient / AuthFlow 持有此类型。
+ */
+import type { TokenStore } from './index.js';
+import type { SecretStore } from '../secret-store/index.js';
+import type { ModuleLogger } from '../logger.js';
+import { V2KeyStore } from '../v2/session/keystore.js';
+import { type SeedChangeResult } from '../secret-store/file-store.js';
+import type { MetadataRecord } from '../types.js';
+export declare class LocalTokenStore implements TokenStore {
+    private _root;
+    private _aidsRoot;
+    private _secretStore;
+    private _aidDBs;
+    readonly deviceId: string;
+    private _logger;
+    constructor(root?: string, opts?: {
+        secretStore?: SecretStore;
+        encryptionSeed?: string;
+        logger?: ModuleLogger;
+        secretStoreLogger?: ModuleLogger;
+    });
+    close(): void;
+    static ChangeSeed(root: string, oldSeed: string, newSeed: string): SeedChangeResult;
+    changeSeed(oldSeed: string, newSeed: string): SeedChangeResult;
+    private _prepareRoot;
+    private _getDB;
+    loadCert(aid: string, certFingerprint?: string): string | null;
+    saveCert(aid: string, certPem: string, certFingerprint?: string, opts?: {
+        makeActive?: boolean;
+    }): void;
+    loadInstanceState(aid: string, deviceId: string, slotId?: string): MetadataRecord | null;
+    saveInstanceState(aid: string, deviceId: string, slotId: string, state: MetadataRecord): void;
+    updateInstanceState(aid: string, deviceId: string, slotId: string, updater: (state: MetadataRecord) => MetadataRecord | void): MetadataRecord;
+    saveSeq(aid: string, deviceId: string, slotId: string, namespace: string, contiguousSeq: number): void;
+    loadSeq(aid: string, deviceId: string, slotId: string, namespace: string): number;
+    loadAllSeqs(aid: string, deviceId: string, slotId: string): Record<string, number>;
+    deleteSeq(aid: string, deviceId: string, slotId: string, namespace: string): void;
+    loadMetadata(aid: string): Record<string, unknown> | null;
+    saveMetadata(aid: string, metadata: Record<string, unknown>): void;
+    trustRootDir(): string;
+    trustRootBundlePath(): string;
+    saveTrustRoots(trustList: Record<string, unknown>, rootCerts: Array<{
+        id?: string;
+        cert_pem: string;
+        fingerprint_sha256?: string;
+    }>): string;
+    saveIssuerRootCert(issuer: string, certPem: string, fingerprintSha256?: string): [string, string];
+    private _pemFingerprint;
+    saveE2EEPrekey(aid: string, prekeyId: string, prekeyData: Record<string, unknown>, deviceId?: string): Promise<void>;
+    loadE2EEPrekeys(aid: string, deviceId?: string): Promise<Record<string, Record<string, unknown>>>;
+    listGroupSecretIds(aid: string): Promise<string[]>;
+    loadGroupSecretEpoch(aid: string, groupId: string, epoch?: number | null): Promise<Record<string, unknown> | null>;
+    storeGroupSecretTransition(aid: string, groupId: string, opts: {
+        epoch: number;
+        secret: string;
+        commitment: string;
+        memberAids?: string[];
+        oldEpochRetentionMs?: number;
+    }): Promise<boolean>;
+    saveE2EESession(aid: string, sessionId: string, data: Record<string, unknown>): Promise<void>;
+    loadE2EESessions(aid: string): Promise<Array<Record<string, unknown>>>;
+    /** 获取指定 AID 的 V2KeyStore（共享同一 SQLite 连接）。 */
+    getV2KeyStore(aid: string): V2KeyStore;
+    private _certPath;
+    private _certVersionPath;
+}