@agentunion/fastaun 0.5.26 → 0.5.28

package/dist/risk-control.js

@@ -0,0 +1,344 @@
+import { p256 } from '@noble/curves/nist.js';
+import { StateError } from './errors.js';
+import { canonicalJson } from './v2/crypto/canonical.js';
+function object(value) { return value !== null && typeof value === 'object' && !Array.isArray(value); }
+function integer(value) { return typeof value === 'number' && Number.isSafeInteger(value) && value >= 0; }
+function decodeBase64Url(value, length) {
+    if (!/^[A-Za-z0-9_-]+$/.test(value))
+        throw new Error('risk signature encoding invalid');
+    const bytes = Uint8Array.from(atob(value.replace(/-/g, '+').replace(/_/g, '/') + '='.repeat((4 - value.length % 4) % 4)), (char) => char.charCodeAt(0));
+    if (bytes.length !== length || btoa(String.fromCharCode(...bytes)).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/g, '') !== value)
+        throw new Error('risk signature encoding invalid');
+    return bytes;
+}
+function validatePublicKey(publicKey) {
+    if (publicKey.length !== 65 || publicKey[0] !== 4)
+        throw new Error('risk signing key invalid');
+    p256.Point.fromBytes(publicKey).assertValidity();
+}
+function stableJson(value) { return new TextDecoder().decode(canonicalJson(value)); }
+function scopeMatches(scope, request) {
+    if (!Array.isArray(scope))
+        return false;
+    return scope.some((item) => typeof item === 'string' && (item === request || (item.endsWith('*') && request.startsWith(item.slice(0, -1)))));
+}
+function validateIntegers(value) {
+    if (typeof value === 'number' && !Number.isSafeInteger(value))
+        throw new Error('risk integer required');
+    if (Array.isArray(value))
+        value.forEach(validateIntegers);
+    else if (object(value))
+        Object.values(value).forEach(validateIntegers);
+}
+function validScope(value) {
+    return Array.isArray(value) && value.length > 0 && value.every((scope) => typeof scope === 'string' && /^(rpc|http):(?:\*|[A-Za-z][A-Za-z0-9_./:-]*(?:\*)?)$/.test(scope));
+}
+export class RiskController {
+    options;
+    target = null;
+    keyId = '';
+    publicKey = new Uint8Array();
+    serverTime = 0;
+    configuredAt = 0;
+    snapshots = new Map();
+    inflight = new Map();
+    buckets = new Map();
+    keys = new Map();
+    timer = null;
+    eventState = 'recovered';
+    restoring = false;
+    persistenceTail = Promise.resolve();
+    persistenceFailed = false;
+    constructor(options = {}) {
+        this.options = options;
+    }
+    configure(target, key, serverTimeMs) {
+        if (key.algorithm !== 'ECDSA-P256-SHA256' || !key.key_id || !integer(serverTimeMs))
+            throw new Error('risk signing key invalid');
+        const publicKey = decodeBase64Url(key.public_key, 65);
+        validatePublicKey(publicKey);
+        const identityChanged = this.target?.aid !== target.aid || this.target?.device_id !== target.device_id;
+        if (identityChanged) {
+            this.snapshots.clear();
+            this.keys.clear();
+            this.serverTime = 0;
+            this.buckets.clear();
+        }
+        else if (this.target?.connection_id !== target.connection_id) {
+            for (const [name, snapshot] of this.snapshots)
+                if (snapshot.envelope.subject.type === 'connection')
+                    this.snapshots.delete(name);
+        }
+        this.target = { ...target };
+        this.keyId = key.key_id;
+        this.publicKey = publicKey;
+        this.keys.set(key.key_id, this.publicKey);
+        this.serverTime = Math.max(serverTimeMs, this.serverTime ? this.trustedNow() : serverTimeMs);
+        this.configuredAt = this.now();
+        this.scheduleTransition();
+    }
+    async apply(raw) {
+        const envelope = raw;
+        this.validate(envelope);
+        const { signature, ...unsigned } = envelope;
+        let valid = false;
+        try {
+            valid = p256.verify(decodeBase64Url(signature, 64), canonicalJson(unsigned), this.keys.get(envelope.signing_key_id), { prehash: true, lowS: false, format: 'compact' });
+        }
+        catch {
+            valid = false;
+        }
+        if (!valid)
+            throw new Error('risk signature invalid');
+        const body = stableJson({ issuer: envelope.issuer, subject: envelope.subject, revision: envelope.revision, policies: envelope.policies });
+        const subjectKey = stableJson(envelope.subject);
+        const existing = this.snapshots.get(subjectKey);
+        if (existing && envelope.revision < existing.envelope.revision)
+            return 'received';
+        if (existing && envelope.revision === existing.envelope.revision) {
+            if (body !== existing.body)
+                throw new Error('risk revision conflict');
+            if (this.persistenceFailed)
+                await this.persist();
+            return 'received';
+        }
+        const oldRestricted = this.isRestricted();
+        this.snapshots.set(subjectKey, { envelope: structuredClone(envelope), body });
+        this.scheduleTransition();
+        await this.persist();
+        const restricted = this.isRestricted();
+        if (restricted || oldRestricted)
+            await this.emit({
+                state: restricted ? (this.shouldDisconnect() ? 'blocked' : 'restricted') : 'recovered', revision: envelope.revision,
+                ...(restricted ? { reason: this.activeReasons()[0], policy_ids: this.activePolicyIds() } : { policy_ids: [] }),
+                ...(this.nextReconnectAt() !== null ? { reconnect_at_ms: this.nextReconnectAt() } : {}),
+            });
+        return 'applied';
+    }
+    acquire(request) {
+        if (!this.target)
+            return () => { };
+        if (this.isRestricted() && ['rpc:gateway.risk_ack', 'rpc:auth.connect', 'rpc:ping', 'rpc:meta.ping', 'rpc:system.ping', 'rpc:gateway.ping', 'rpc:auth.disconnect', 'rpc:gateway.risk_status'].includes(request))
+            return this.acquireControl();
+        const actions = this.activeActions(request);
+        const paused = actions.find(({ action }) => action.type === 'disconnect' || (action.type === 'pause_requests' && this.trustedNow() < Number(action.until_ms)));
+        if (paused)
+            throw new StateError('request blocked by risk policy', { stringCode: 'risk_restricted', retryable: true, data: { policy_id: paused.policy.policy_id } });
+        const limits = actions.filter(({ action }) => action.type === 'limit_requests');
+        const candidates = [];
+        for (const { action, key } of limits) {
+            const currentInflight = this.inflight.get(key) ?? 0;
+            if (integer(action.max_inflight) && action.max_inflight > 0 && currentInflight >= action.max_inflight)
+                throw new StateError('request concurrency limited by risk policy', { stringCode: 'risk_restricted', retryable: true });
+            const now = this.now();
+            const rate = Number(action.rate_per_sec), burst = Number(action.burst);
+            const bucket = this.buckets.get(key) ?? { tokens: burst, at: now };
+            const tokens = Math.min(burst, bucket.tokens + Math.max(0, now - bucket.at) * rate / 1000);
+            if (tokens < 1)
+                throw new StateError('request rate limited by risk policy', { stringCode: 'risk_restricted', retryable: true });
+            candidates.push({ key, tokens: tokens - 1, at: now });
+        }
+        for (const { key, tokens, at } of candidates) {
+            this.buckets.set(key, { tokens: tokens, at });
+            this.inflight.set(key, (this.inflight.get(key) ?? 0) + 1);
+        }
+        let released = false;
+        return () => {
+            if (released)
+                return;
+            released = true;
+            for (const { key } of candidates) {
+                const count = this.inflight.get(key) ?? 0;
+                if (count <= 1)
+                    this.inflight.delete(key);
+                else
+                    this.inflight.set(key, count - 1);
+            }
+        };
+    }
+    check(request) {
+        if (!this.target || ['rpc:gateway.risk_ack', 'rpc:auth.connect', 'rpc:ping', 'rpc:meta.ping', 'rpc:system.ping', 'rpc:gateway.ping', 'rpc:auth.disconnect', 'rpc:gateway.risk_status'].includes(request))
+            return;
+        const paused = this.activeActions(request).find(({ action }) => action.type === 'disconnect' || action.type === 'pause_requests');
+        if (paused)
+            throw new StateError('request blocked by risk policy', { stringCode: 'risk_restricted', retryable: true, data: { policy_id: paused.policy.policy_id } });
+    }
+    reconnectDelayMs() {
+        const deadline = this.nextReconnectAt();
+        return deadline === null ? 0 : Math.max(0, deadline - this.trustedNow());
+    }
+    shouldDisconnect() { return this.activeActions().some(({ action }) => action.type === 'disconnect'); }
+    get state() {
+        const active = this.activeActions();
+        return { state: this.shouldDisconnect() ? 'blocked' : active.length ? 'restricted' : 'recovered', revision: Math.max(0, ...Array.from(this.snapshots.values()).map(({ envelope }) => envelope.revision)), policy_ids: this.activePolicyIds(), ...(this.nextReconnectAt() !== null ? { reconnect_at_ms: this.nextReconnectAt() } : {}) };
+    }
+    exportState(includeConnection = false) {
+        const signingKeys = {};
+        for (const [id, key] of this.keys)
+            signingKeys[id] = Array.from(key);
+        return { issuer: this.target?.aid.slice(this.target.aid.indexOf('.') + 1) ?? '', target: this.target, signing_keys: signingKeys, states: Array.from(this.snapshots.values()).filter(({ envelope }) => includeConnection || envelope.subject.type !== 'connection').map(({ envelope }) => envelope), saved_at_ms: Date.now(), server_time_ms: Math.floor(this.trustedNow()) };
+    }
+    async restore(state) {
+        if (!Array.isArray(state.states))
+            return;
+        if (state.issuer !== this.target?.aid.slice(this.target.aid.indexOf('.') + 1))
+            throw new Error('risk issuer mismatch');
+        if (object(state.signing_keys))
+            for (const [id, bytes] of Object.entries(state.signing_keys)) {
+                if (!this.keys.has(id) && Array.isArray(bytes) && bytes.length === 65 && bytes.every((byte) => integer(byte) && byte <= 255)) {
+                    const publicKey = Uint8Array.from(bytes);
+                    try {
+                        validatePublicKey(publicKey);
+                        this.keys.set(id, publicKey);
+                    }
+                    catch {
+                        continue;
+                    }
+                }
+            }
+        if (integer(state.server_time_ms) && integer(state.saved_at_ms)) {
+            this.serverTime = Math.max(this.serverTime, state.server_time_ms + Math.max(0, Date.now() - state.saved_at_ms));
+            this.configuredAt = this.now();
+        }
+        this.restoring = true;
+        try {
+            for (const raw of state.states)
+                if (object(raw))
+                    await this.apply(raw);
+        }
+        finally {
+            this.restoring = false;
+        }
+        await this.persist();
+    }
+    close() { if (this.timer !== null)
+        clearTimeout(this.timer); this.timer = null; }
+    async restorePinned(state, target) {
+        if (!object(state.target) || state.target.aid !== target.aid || state.target.device_id !== target.device_id || !object(state.signing_keys))
+            throw new Error('risk persisted subject mismatch');
+        const [keyId, bytes] = Object.entries(state.signing_keys)[0] ?? [];
+        if (!keyId || !Array.isArray(bytes) || bytes.length !== 65 || !bytes.every((byte) => integer(byte) && byte <= 255))
+            throw new Error('risk persisted key invalid');
+        validatePublicKey(Uint8Array.from(bytes));
+        const publicKey = btoa(String.fromCharCode(...bytes)).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/g, '');
+        this.configure(target, { key_id: keyId, public_key: publicKey, algorithm: 'ECDSA-P256-SHA256' }, Number(state.server_time_ms));
+        await this.restore(state);
+    }
+    reset() { this.close(); this.target = null; this.snapshots.clear(); this.keys.clear(); this.buckets.clear(); this.inflight.clear(); this.serverTime = 0; this.eventState = 'recovered'; }
+    appliesTo(aid, deviceId) { return this.target?.aid === aid && this.target.device_id === deviceId; }
+    async persist() {
+        if (this.restoring)
+            return;
+        const state = this.exportState();
+        const run = this.persistenceTail.then(async () => {
+            try {
+                await this.options.persist?.(state);
+                this.persistenceFailed = false;
+            }
+            catch {
+                this.persistenceFailed = true;
+            }
+        });
+        this.persistenceTail = run;
+        await run;
+    }
+    async emit(event) {
+        this.eventState = event.state;
+        try {
+            await this.options.onState?.(event);
+        }
+        catch { /* 应用回调不改变已生效限制 */ }
+    }
+    scheduleTransition() {
+        this.close();
+        const now = this.trustedNow();
+        const deadlines = [];
+        for (const snapshot of this.snapshots.values())
+            for (const policy of snapshot.envelope.policies) {
+                for (const deadline of [policy.effective_at_ms, policy.expires_at_ms, ...policy.actions.map((action) => Number(action.until_ms ?? action.not_before_ms ?? 0))])
+                    if (deadline > now)
+                        deadlines.push(deadline);
+            }
+        if (!deadlines.length)
+            return;
+        this.timer = setTimeout(() => {
+            this.timer = null;
+            const state = this.state;
+            if (state.state !== this.eventState)
+                void this.emit(state);
+            void this.persist();
+            this.scheduleTransition();
+        }, Math.min(0x7fffffff, Math.max(1, Math.min(...deadlines) - now)));
+    }
+    validate(e) {
+        validateIntegers(e);
+        if (!object(e) || e.version !== 1 || !integer(e.revision) || !integer(e.server_time_ms)
+            || typeof e.issuer !== 'string' || typeof e.delivery_id !== 'string' || !e.delivery_id || !object(e.subject) || !Array.isArray(e.policies)
+            || !this.keys.has(e.signing_key_id) || typeof e.signature !== 'string' || !this.target)
+            throw new Error('risk envelope invalid');
+        const subject = e.subject;
+        if (!['aid', 'device', 'connection'].includes(subject.type) || e.issuer !== this.target.aid.slice(this.target.aid.indexOf('.') + 1) || subject.aid !== this.target.aid
+            || (subject.type !== 'aid' && subject.device_id !== this.target.device_id)
+            || (subject.type === 'connection' && (subject.slot_id !== this.target.slot_id || subject.connection_id !== this.target.connection_id)))
+            throw new Error('risk subject mismatch');
+        for (const policy of e.policies) {
+            if (!object(policy) || typeof policy.policy_id !== 'string' || typeof policy.incident_id !== 'string' || typeof policy.reason !== 'string'
+                || !integer(policy.issued_at_ms) || !integer(policy.effective_at_ms) || !integer(policy.expires_at_ms) || policy.expires_at_ms <= policy.effective_at_ms || !Array.isArray(policy.actions))
+                throw new Error('risk policy invalid');
+            for (const action of policy.actions) {
+                if (!object(action) || typeof action.type !== 'string')
+                    throw new Error('risk action invalid');
+                if (action.type === 'pause_requests' && (!Array.isArray(action.request_scope) || !integer(action.until_ms)))
+                    throw new Error('risk action invalid');
+                if (action.type === 'limit_requests' && (!Array.isArray(action.request_scope) || !integer(action.rate_per_sec) || action.rate_per_sec < 1 || !integer(action.burst) || action.burst < 1 || !integer(action.max_inflight)))
+                    throw new Error('risk action invalid');
+                if (action.type === 'reconnect_after' && !integer(action.not_before_ms))
+                    throw new Error('risk action invalid');
+                if (!['pause_requests', 'limit_requests', 'reconnect_after', 'disconnect'].includes(action.type))
+                    throw new Error('risk action invalid');
+                if (['pause_requests', 'limit_requests'].includes(action.type) && !validScope(action.request_scope))
+                    throw new Error('risk scope invalid');
+            }
+        }
+    }
+    activeActions(request) {
+        const now = this.trustedNow();
+        const result = [];
+        for (const [subjectKey, snapshot] of this.snapshots) {
+            for (const policy of snapshot.envelope.policies) {
+                if (now < policy.effective_at_ms || now >= policy.expires_at_ms)
+                    continue;
+                for (const [index, action] of policy.actions.entries()) {
+                    if (action.type === 'pause_requests' && Number(action.until_ms) <= now)
+                        continue;
+                    if (action.type === 'reconnect_after' && Number(action.not_before_ms) <= now)
+                        continue;
+                    if (request === undefined || action.type === 'disconnect' || scopeMatches(action.request_scope, request))
+                        result.push({ policy, action, key: `${subjectKey}:${policy.policy_id}:${index}` });
+                }
+            }
+        }
+        return result;
+    }
+    activeReasons() { return Array.from(new Set(this.activeActions().map(({ policy }) => policy.reason))); }
+    activePolicyIds() { return Array.from(new Set(this.activeActions().map(({ policy }) => policy.policy_id))); }
+    isRestricted() { return this.activeReasons().length > 0; }
+    nextReconnectAt() {
+        const deadlines = this.activeActions().filter(({ action }) => action.type === 'reconnect_after' || action.type === 'disconnect').map(({ action, policy }) => Math.min(policy.expires_at_ms, action.type === 'disconnect' ? policy.expires_at_ms : Number(action.not_before_ms)));
+        return deadlines.length ? Math.max(...deadlines) : null;
+    }
+    trustedNow() { return this.serverTime + Math.max(0, this.now() - this.configuredAt); }
+    acquireControl() {
+        const now = this.now();
+        const bucket = this.buckets.get('sdk-control') ?? { tokens: 4, at: now };
+        bucket.tokens = Math.min(4, bucket.tokens + Math.max(0, now - bucket.at) * 2 / 1000);
+        bucket.at = now;
+        this.buckets.set('sdk-control', bucket);
+        if (bucket.tokens < 1)
+            throw new StateError('risk control budget exhausted', { stringCode: 'risk_restricted', retryable: true });
+        bucket.tokens -= 1;
+        return () => { };
+    }
+    now() { return this.options.monotonicNow?.() ?? (typeof performance !== 'undefined' ? performance.now() : Date.now()); }
+}
+//# sourceMappingURL=risk-control.js.map

package/dist/risk-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk-control.js","sourceRoot":"","sources":["../src/risk-control.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAUzD,SAAS,MAAM,CAAC,KAAc,IAAsC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAClJ,SAAS,OAAO,CAAC,KAAc,IAAqB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;AACpI,SAAS,eAAe,CAAC,KAAa,EAAE,MAAc;IACpD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACxF,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACxJ,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC7L,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,iBAAiB,CAAC,SAAqB;IAC9C,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC/F,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,CAAC;AACnD,CAAC;AACD,SAAS,UAAU,CAAC,KAAc,IAAY,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACtG,SAAS,YAAY,CAAC,KAAc,EAAE,OAAe;IACnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/I,CAAC;AACD,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACxG,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;SACrD,IAAI,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;AACzE,CAAC;AACD,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,sDAAsD,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7K,CAAC;AAID,MAAM,OAAO,cAAc;IAgBI;IAfrB,MAAM,GAAsB,IAAI,CAAC;IACjC,KAAK,GAAG,EAAE,CAAC;IACX,SAAS,GAAe,IAAI,UAAU,EAAE,CAAC;IACzC,UAAU,GAAG,CAAC,CAAC;IACf,YAAY,GAAG,CAAC,CAAC;IACR,SAAS,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC9C,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IACrC,OAAO,GAAG,IAAI,GAAG,EAA0C,CAAC;IAC5D,IAAI,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC9C,KAAK,GAAyC,IAAI,CAAC;IACnD,UAAU,GAAG,WAAW,CAAC;IACzB,SAAS,GAAG,KAAK,CAAC;IAClB,eAAe,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3D,iBAAiB,GAAG,KAAK,CAAC;IAE1B,YAA6B,UAIzB,EAAE;QAJuB,YAAO,GAAP,OAAO,CAI9B;IAAG,CAAC;IAEV,SAAS,CAAC,MAAkB,EAAE,GAA8D,EAAE,YAAoB;QAChH,IAAI,GAAG,CAAC,SAAS,KAAK,mBAAmB,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAChI,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACtD,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC7B,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC;QACvG,IAAI,eAAe,EAAE,CAAC;YAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;aACzG,IAAI,IAAI,CAAC,MAAM,EAAE,aAAa,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;YAC7D,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,SAAS;gBAAE,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,YAAY;oBAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClI,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAC7F,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAe;QACzB,MAAM,QAAQ,GAAG,GAA8B,CAAC;QAChD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC;QAC5C,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,KAAK,GAAG,KAAK,CAAC;QAAC,CAAC;QAC1M,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1I,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,QAAQ,IAAI,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ;YAAE,OAAO,UAAU,CAAC;QAClF,IAAI,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACjE,IAAI,IAAI,KAAK,QAAQ,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACtE,IAAI,IAAI,CAAC,iBAAiB;gBAAE,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACjD,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9E,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1B,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACvC,IAAI,UAAU,IAAI,aAAa;YAAE,MAAM,IAAI,CAAC,IAAI,CAAC;gBAC/C,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBACnH,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;gBAC9G,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzF,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,CAAC,OAAe;QACrB,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,sBAAsB,EAAE,kBAAkB,EAAE,UAAU,EAAE,eAAe,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,yBAAyB,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;QAC9O,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,gBAAgB,IAAI,IAAI,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC/J,IAAI,MAAM;YAAE,MAAM,IAAI,UAAU,CAAC,gCAAgC,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACrK,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;QAChF,MAAM,UAAU,GAAmD,EAAE,CAAC;QACtE,KAAK,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,MAAM,EAAE,CAAC;YACrC,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACpD,IAAI,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC,IAAI,eAAe,IAAI,MAAM,CAAC,YAAY;gBAAE,MAAM,IAAI,UAAU,CAAC,4CAA4C,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9N,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;YACnE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;YAC3F,IAAI,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,UAAU,CAAC,qCAAqC,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChI,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,KAAK,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,UAAU,EAAE,CAAC;YAC7C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAO,EAAE,EAAE,EAAE,CAAC,CAAC;YAC/C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,OAAO,GAAG,EAAE;YACV,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,UAAU,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC1C,IAAI,KAAK,IAAI,CAAC;oBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;;oBAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACpF,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAe;QACnB,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,sBAAsB,EAAE,kBAAkB,EAAE,UAAU,EAAE,eAAe,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,yBAAyB,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO;QACjN,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;QAClI,IAAI,MAAM;YAAE,MAAM,IAAI,UAAU,CAAC,gCAAgC,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACvK,CAAC;IAED,gBAAgB;QACd,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACxC,OAAO,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,gBAAgB,KAAc,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC;IAE/G,IAAI,KAAK;QACP,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACpC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,eAAe,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC3U,CAAC;IAED,WAAW,CAAC,iBAAiB,GAAG,KAAK;QACnC,MAAM,WAAW,GAAe,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI;YAAE,WAAW,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAA+B,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,iBAAiB,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAiC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;IACja,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAiB;QAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,OAAO;QACzC,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACvH,IAAI,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;YAAE,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC7F,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;oBAC7H,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,KAAiB,CAAC,CAAC;oBACrD,IAAI,CAAC;wBAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;wBAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC;wBAAC,SAAS;oBAAC,CAAC;gBACzF,CAAC;YACH,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;YAChH,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC;YAAC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,MAAM;gBAAE,IAAI,MAAM,CAAC,GAAG,CAAC;oBAAE,MAAM,IAAI,CAAC,KAAK,CAAC,GAAiB,CAAC,CAAC;QAAC,CAAC;gBACrF,CAAC;YAAC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QAAC,CAAC;QACnC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,KAAW,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI;QAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC;IACvF,KAAK,CAAC,aAAa,CAAC,KAAiB,EAAE,MAAkB;QACvD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAC/L,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACnE,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAClK,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,KAAiB,CAAC,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,KAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9H,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,mBAAmB,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QAC/H,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,KAAK,KAAW,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC;IAE/L,SAAS,CAAC,GAAW,EAAE,QAAgB,IAAa,OAAO,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC;IAEpH,KAAK,CAAC,OAAO;QACnB,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAC/C,IAAI,CAAC;gBAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;gBAAC,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC;YAAC,CAAC;YAC5E,MAAM,CAAC;gBAAC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC;QAC3B,MAAM,GAAG,CAAC;IACZ,CAAC;IACO,KAAK,CAAC,IAAI,CAAC,KAAqB;QACtC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC;YAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAC3E,CAAC;IACO,kBAAkB;QACxB,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE;YAAE,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBAChG,KAAK,MAAM,QAAQ,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,aAAa,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC,CAAC;oBAAE,IAAI,QAAQ,GAAG,GAAG;wBAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC/M,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,MAAM;YAAE,OAAO;QAC9B,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC3B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACzB,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,UAAU;gBAAE,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3D,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC5B,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;IAEO,QAAQ,CAAC,CAAe;QAC9B,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;eAClF,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;eACvI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACnI,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;QAC1B,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,GAAG;eACjK,CAAC,OAAO,CAAC,IAAI,KAAK,KAAK,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;eACvE,CAAC,OAAO,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,aAAa,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACnL,KAAK,MAAM,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;mBACrI,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACrO,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;gBAC/F,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;gBACpJ,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;gBAClQ,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;gBAChH,IAAI,CAAC,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;gBACzI,IAAI,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAC7I,CAAC;QACH,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,OAAgB;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAC9B,MAAM,MAAM,GAA8D,EAAE,CAAC;QAC7E,KAAK,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACpD,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBAChD,IAAI,GAAG,GAAG,MAAM,CAAC,eAAe,IAAI,GAAG,IAAI,MAAM,CAAC,aAAa;oBAAE,SAAS;gBAC1E,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;oBACvD,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG;wBAAE,SAAS;oBACjF,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,GAAG;wBAAE,SAAS;oBACvF,IAAI,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,YAAY,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC;wBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,UAAU,IAAI,MAAM,CAAC,SAAS,IAAI,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC/L,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACO,aAAa,KAAe,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClH,eAAe,KAAe,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvH,YAAY,KAAc,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IACnE,eAAe;QACrB,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,iBAAiB,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACjR,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,CAAC;IACO,UAAU,KAAa,OAAO,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC9F,cAAc;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;QACzE,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QACrF,MAAM,CAAC,EAAE,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,+BAA+B,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjI,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;QACnB,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAClB,CAAC;IACO,GAAG,KAAa,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,CAAC,OAAO,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;CACzI"}

package/dist/semantic-facade.d.ts

@@ -0,0 +1,176 @@
+import type { CredentialSigner } from './org-protocol.js';
+import { type AID, type AuthorizationRequest, type AuthenticatedAUNContext, type CredentialLineageEntry, type CredentialPackage, type CredentialRevisionRef, type CredentialStatusProof, type DecisionInput, type Digest, type JsonObject, type PolicyRef, type RecordVerificationContext, type SemanticCredential, type SemanticErrorData, type SemanticFacadeInput, type SemanticGetParams, type SemanticGetResult, type SemanticRegisterParams, type SemanticRegisterResult, type SemanticReviseParams, type SemanticReviseResult, type SemanticRevokeParams, type SemanticRevokeResult, type SemanticRevocationListParams, type SemanticRevocationPage, type SemanticStatusParams, type SemanticUsageInput, type SemanticVerificationReport, type SignatureDomain, type SignedJsonBytes, type StateCheckPolicy, type UsageTransitionReceipt, type VerifiedBody, type UsageAllocation, type AllocationStatusProof, type AUNEvidenceLocator, type EvidenceRef, type EvidenceResolver, type SemanticMessageArchive, type SemanticMessageVerificationContext } from './semantic-protocol.js';
+export type { SemanticMessageArchive, SemanticMessageVerificationContext } from './semantic-protocol.js';
+type Raw = Record<string, any>;
+export interface SemanticPersistentState {
+    sequences?: Record<string, {
+        state_seq: number;
+        status: string;
+        revision: CredentialRevisionRef;
+    }>;
+    revoked?: Record<string, true>;
+    scopes?: Record<string, {
+        after_event_seq: number;
+        upper_event_seq: number;
+        next_cursor: string | null;
+    }>;
+    requests?: Record<string, {
+        request_hash: Digest;
+        nonce: string;
+        expires_at: number;
+        accepted?: boolean;
+    }>;
+    nonces?: Record<string, {
+        request_id: string;
+        request_hash: Digest;
+        expires_at: number;
+    }>;
+    mergedPages?: Record<string, true>;
+    allocations?: Record<string, {
+        allocation_hash: Digest;
+        state_seq: number;
+        state: AllocationStatusProof['state'];
+    }>;
+    proofs?: Record<string, true>;
+}
+export interface SemanticFacadeClient {
+    call(method: string, params: any): Promise<any>;
+    readonly aid?: string | null;
+    readonly currentAid?: CredentialSigner | null;
+    _semanticServiceAid?(): string | Promise<string>;
+    _semanticContextKey?(): string;
+    _semanticVerificationContext?(): RecordVerificationContext;
+    _semanticMessageVerificationContext?(): SemanticMessageVerificationContext;
+    _loadSemanticState?(): SemanticPersistentState | Promise<SemanticPersistentState>;
+    _saveSemanticState?(state: SemanticPersistentState): void | Promise<void>;
+}
+export interface SemanticFacadeOptions {
+    serviceAid?: string;
+    verificationContext?: RecordVerificationContext;
+    monotonicNow?: () => number;
+}
+export interface SemanticOperationOptions {
+    serviceAid?: string;
+    verificationContext?: RecordVerificationContext;
+}
+export interface SemanticPackageVerificationContext extends Partial<RecordVerificationContext> {
+    audience: AID;
+    expectedServiceAid?: AID;
+    originalSigner?: (entry: CredentialLineageEntry) => AID | Promise<AID>;
+    serviceFor?: (cid: string) => AID | Promise<AID>;
+    legacyVerifier?: (entry: CredentialLineageEntry, audience: AID, now: number) => void | Promise<void>;
+    statePolicy?: StateCheckPolicy;
+    elapsedSeconds?: number;
+    queries?: Record<string, {
+        request_hash: Digest;
+        nonce: string;
+    }>;
+}
+export interface SemanticAllocationVerificationContext extends Partial<RecordVerificationContext> {
+    parent: CredentialLineageEntry;
+    child: CredentialLineageEntry;
+    audience: AID;
+}
+export interface SemanticAllocationStatusVerificationContext extends Partial<RecordVerificationContext> {
+    allocation: UsageAllocation;
+    query: {
+        request_hash: Digest;
+        nonce: string;
+    };
+    elapsedSeconds: number;
+}
+export declare class SemanticRPCFailure extends Error {
+    readonly data: SemanticErrorData;
+    readonly code = -32000;
+    readonly retryable: boolean;
+    constructor(message: string, data: SemanticErrorData);
+}
+export declare class SemanticCredentialFacade {
+    private readonly client;
+    private readonly options;
+    private state;
+    private tail;
+    private readonly proofFirstSeen;
+    private readonly allocationProofFirstSeen;
+    private readonly statusCache;
+    constructor(client: SemanticFacadeClient, options?: SemanticFacadeOptions);
+    configure(options: SemanticFacadeOptions): void;
+    private clock;
+    private monotonic;
+    private identity;
+    private guard;
+    private service;
+    private context;
+    private mutate;
+    private invoke;
+    private responseRecord;
+    private registered;
+    private revisionHeads;
+    register(input: SemanticFacadeInput<SemanticRegisterParams>, options?: SemanticOperationOptions): Promise<SemanticRegisterResult>;
+    revise(input: SemanticFacadeInput<SemanticReviseParams>, options?: SemanticOperationOptions): Promise<SemanticReviseResult>;
+    prepareUsage(input: SemanticUsageInput<'usage_prepare'>, options?: SemanticOperationOptions): Promise<UsageTransitionReceipt>;
+    commitUsage(input: SemanticUsageInput<'usage_commit'>, options?: SemanticOperationOptions): Promise<UsageTransitionReceipt>;
+    abortUsage(input: SemanticUsageInput<'usage_abort'>, options?: SemanticOperationOptions): Promise<UsageTransitionReceipt>;
+    get(input: SemanticFacadeInput<SemanticGetParams>, options?: SemanticOperationOptions): Promise<SemanticGetResult>;
+    private proofIdentity;
+    private rememberProof;
+    private observe;
+    status(input: SemanticFacadeInput<SemanticStatusParams>, options?: SemanticOperationOptions): Promise<CredentialStatusProof>;
+    revoke(input: SemanticFacadeInput<SemanticRevokeParams>, options?: SemanticOperationOptions): Promise<SemanticRevokeResult>;
+    revocations(input: SemanticFacadeInput<SemanticRevocationListParams>, options?: SemanticOperationOptions): Promise<SemanticRevocationPage>;
+    private signer;
+    signCredential(value: unknown, signer?: CredentialSigner, options?: {
+        timestamp?: number;
+    }): Promise<SignedJsonBytes>;
+    signMetadata(value: unknown, signer?: CredentialSigner, options?: {
+        timestamp?: number;
+    }): Promise<SignedJsonBytes>;
+    verifyAllocation(value: unknown, context: SemanticAllocationVerificationContext): Promise<SemanticVerificationReport>;
+    signAllocation(value: unknown, signer?: CredentialSigner, options?: {
+        timestamp?: number;
+    }): Promise<SignedJsonBytes>;
+    signUsageRecord(domain: SignatureDomain, value: unknown, signer?: CredentialSigner, options?: {
+        timestamp?: number;
+    }): Promise<SignedJsonBytes>;
+    verifyAllocationStatus(value: unknown, context: SemanticAllocationStatusVerificationContext): Promise<SemanticVerificationReport>;
+    verifyUsageRecord(domain: SignatureDomain, value: unknown, context?: Partial<RecordVerificationContext>): Promise<SemanticVerificationReport>;
+    verifyOriginal(value: unknown, context?: Partial<RecordVerificationContext>): Promise<SemanticVerificationReport>;
+    verifyMetadata(value: unknown, context?: Partial<RecordVerificationContext>): Promise<SemanticVerificationReport>;
+    verifyReceipt(value: unknown, context?: Partial<RecordVerificationContext>): Promise<SemanticVerificationReport>;
+    verifyStatus(value: unknown, context?: Partial<RecordVerificationContext> & {
+        expectedServiceAid?: string;
+        policy?: StateCheckPolicy;
+        elapsedSeconds?: number;
+        query?: {
+            request_hash: Digest;
+            nonce: string;
+        };
+    }): Promise<SemanticVerificationReport>;
+    buildPackage(lineage: CredentialLineageEntry[]): Promise<CredentialPackage>;
+    private effective;
+    private lineageBindings;
+    verifyPackage(value: CredentialPackage, context: SemanticPackageVerificationContext): Promise<SemanticVerificationReport>;
+    requestHash(request: Omit<AuthorizationRequest, 'request_binding'> | AuthorizationRequest): Promise<Digest>;
+    buildRequest(input: Omit<AuthorizationRequest, 'params_hash' | 'request_binding'>, options?: {
+        now?: number;
+    }): Promise<AuthorizationRequest>;
+    private requestShape;
+    private rememberRequest;
+    verifyRequest(request: AuthorizationRequest, authentication: AuthenticatedAUNContext, options?: {
+        now?: number;
+        representedActor?: (actor: string, sub: string) => boolean | Promise<boolean>;
+    }): Promise<{
+        request_hash: Digest;
+        checked: string[];
+        required: string[];
+    }>;
+    buildDecisionInput(request: AuthorizationRequest, bodies: VerifiedBody[], facts: JsonObject, policy: PolicyRef): Promise<DecisionInput>;
+    createEvidenceRef(bytes: Uint8Array, profile: string, locator?: AUNEvidenceLocator): Promise<EvidenceRef>;
+    resolveEvidence(ref: EvidenceRef, resolvers?: Record<string, EvidenceResolver>): Promise<Uint8Array>;
+    archiveMessage(envelope: Uint8Array | string | Raw, received: {
+        received_by: string;
+        received_at: number;
+        source: string;
+    }): Promise<SemanticMessageArchive>;
+    verifyMessageBody(value: SemanticCredential | SignedJsonBytes, context?: Partial<SemanticMessageVerificationContext>): Promise<VerifiedBody>;
+}