@antseed/antseed-verifier 0.1.0

package/README.md

@@ -0,0 +1,86 @@
+# @antseed/antseed-verifier
+
+Verifier SDK for AntSeed's pluggable verifier system (AIP-3). One package has two halves. A
+**buyer verifier** (default export) challenges a seller. It checks the seller's Intel TDX
+attestation before it routes paid requests. An embedded **seller prover** (`prover` export,
+loaded with `--verifiers antseed-verifier`) answers those challenges before provider
+matching and payment.
+
+```ts
+import verifier, { prover } from '@antseed/antseed-verifier'
+// verifier → default export (type:'verifier', buyer half)
+// prover   → named export   (type:'prover',  seller half)
+```
+
+It attests a menu of independent **capabilities**. Each capability is one claim, namespaced
+`antseed-verifier:<capability>`. The seller offers only the capabilities that its infrastructure
+supports. The buyer's verdict gates on two capabilities and reports the others for policy.
+Provider differences are config only (generic `configfs` or `http` collectors). The SDK carries
+no provider-specific hosts or schemas, and it is self-contained (no peer dependencies).
+
+## Capabilities
+
+| Capability | Proves | Verdict |
+|---|---|---|
+| `seller-node-tee-genuine` | the seller **node** runs in a genuine Intel TDX enclave (DCAP: PCK chain to Intel's root, acceptable TCB, TD10, debug off). The quote binds to this nonce + peerId | **required** |
+| `seller-bound` | the seller's identity key signs the whole evidence bundle for this fresh nonce (the signer recovers to peerId) | **required** |
+| `seller-provider-tee-genuine` | the downstream inference **provider's** TEE is genuine TDX. It is also round-bound when the seller declares a `report_data` scheme | informational |
+| `seller-provider-gpu-cc` | the provider's GPUs run NVIDIA Confidential Computing (NVIDIA NRAS verifies it, nonce-bound) | informational |
+| `seller-provider-measured-image` | the provider quote's MRTD/RTMR match a buyer allow-list | informational |
+| `seller-provider-claims` | named provider claims against a frozen SDK menu. Each claim is `asserted` (self-vouched) or `tdx-quote` (TEE-attested) | informational |
+
+The two required capabilities together prove one thing: *a genuine Intel TDX seller node,
+minted fresh this round and cryptographically tied to the seller's marketplace identity.*
+
+## Params
+
+The **prover** (seller) reads its config from the environment, never from buyer-supplied values:
+
+| Variable | Purpose |
+|---|---|
+| `ANTSEED_TEE_PEER_ID` | the seller's peer id (EVM address, no `0x`) |
+| `ANTSEED_VERIFIER_SIGNING_KEY` | seller identity key (hex) for `seller-bound`. Disabled if its address ≠ peerId |
+| `ANTSEED_VERIFIER_NODE_TEE` | node quote source: `configfs` (default, bare-metal/GCP TDX), `dstack` (Phala and other dstack CVMs), or `http` |
+| `ANTSEED_VERIFIER_DSTACK_SOCKET` | override the dstack guest-agent socket path (default `/var/run/dstack.sock`) |
+| `ANTSEED_VERIFIER_PROVIDER_ADAPTER` | in-process provider adapter id (`chutes`, `aci`). It fetches provider evidence directly, no shim. See [CHUTES.md](./CHUTES.md) or [REDPILL.md](./REDPILL.md) |
+| `ANTSEED_VERIFIER_PROVIDER_EVIDENCE_URL` | generic provider evidence route (`{nonce}` → hex nonce). The manual alternative to an adapter |
+| `ANTSEED_VERIFIER_PROVIDER_TEE_FIELD` | JSON field with the base64 provider quote (default `quote`) |
+| `ANTSEED_VERIFIER_PROVIDER_GPU_FIELD` | JSON field with per-GPU NVIDIA CC evidence → enables `seller-provider-gpu-cc` |
+| `ANTSEED_VERIFIER_PROVIDER_CLAIMS_FIELD` | JSON field with the base64 claims doc → enables `seller-provider-claims` |
+| `ANTSEED_VERIFIER_PROVIDER_BINDING_SCHEME` | frozen `report_data` scheme the provider quote uses (`antseed-rd-v1` \| `nonce-pubkey-sha256-v1`) |
+| `ANTSEED_VERIFIER_PROVIDER_BINDING_PUBKEY_FIELD` | JSON field with the provider's base64 E2E pubkey (the scheme's ingredient) |
+
+The **buyer** needs no special hardware. Optional policy knobs:
+
+| Variable | Purpose |
+|---|---|
+| `ANTSEED_VERIFIER_REQUIRED_CAPS` | comma-separated capabilities that gate the overall `ok` (default `seller-node-tee-genuine,seller-bound`). For example, a provenance buyer sets `seller-provider-tee-genuine,seller-bound` to require the downstream provider's TEE |
+| `ANTSEED_VERIFIER_MEASURED_IMAGE_POLICY` | approved-measurement allow-list (inline JSON or `@/path.json`) for `measured-image` |
+| `ANTSEED_VERIFIER_STRICT_TCB` | `true` requires TCB exactly `UpToDate` (default also accepts `SWHardeningNeeded`) |
+| `ANTSEED_VERIFIER_NRAS_URL` / `_NRAS_JWKS_URL` | override NVIDIA NRAS endpoints for `gpu-cc` |
+
+`seller-node-tee-genuine` runs only on a real Intel TDX VM. `configfs` mints via
+`/sys/kernel/config/tsm/report` (needs root). `dstack` mints via the guest-agent socket
+(Phala and other dstack CVMs, where configfs-tsm is absent). Both bind the same `antseed-rd-v1`
+report_data, so the buyer verifies them identically.
+
+## Appendix: provider adapters
+
+An **in-process adapter** bridges a provider whose evidence API does not match the generic route
+(auth, a different response shape). Select the adapter with `ANTSEED_VERIFIER_PROVIDER_ADAPTER`.
+There is no separate process. The SDK core stays provider-neutral. Each adapter is an isolated
+module that loads lazily. Two adapters are available:
+
+```bash
+export ANTSEED_VERIFIER_PROVIDER_ADAPTER=chutes   # + CHUTES_API_KEY, CHUTES_CHUTE
+export ANTSEED_VERIFIER_PROVIDER_ADAPTER=aci      # + ACI_ATTESTATION_URL (RedPill / dstack ACI)
+```
+
+The adapter fetches the provider's fresh, nonce-bound quote. It declares its frozen `report_data`
+scheme (`nonce-pubkey-sha256-v1` for Chutes, `aci-keyset-v1` for ACI). The buyer verifies the
+scheme unchanged. Full setup: [CHUTES.md](./CHUTES.md) · [REDPILL.md](./REDPILL.md) · [PHALA.md](./PHALA.md)
+(run the seller node in a dstack TDX CVM).
+
+---
+
+`v0.1.0` · GPL-3.0

package/dist/adapters/aci.d.ts

@@ -0,0 +1,4 @@
+import type { ProviderAdapter } from './index.js';
+declare const adapter: ProviderAdapter;
+export default adapter;
+//# sourceMappingURL=aci.d.ts.map

package/dist/adapters/aci.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aci.d.ts","sourceRoot":"","sources":["../../src/adapters/aci.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAoB,MAAM,YAAY,CAAA;AAkDnE,QAAA,MAAM,OAAO,EAAE,eAA8C,CAAA;AAC7D,eAAe,OAAO,CAAA"}

package/dist/adapters/aci.js

@@ -0,0 +1,42 @@
+/**
+ * RedPill / ACI provider adapter (in-process). It gets a fresh, nonce-bound attestation from a
+ * Private-AI-Gateway (ACI spec) endpoint, reads the TDX quote, and binds via aci-keyset-v1.
+ * ANTSEED_VERIFIER_PROVIDER_ADAPTER=aci selects it.
+ *
+ * Env: ACI_ATTESTATION_URL (required, e.g. https://<gateway>/v1/aci/attestation), ACI_API_KEY (optional Bearer).
+ */
+const TIMEOUT_MS = 20_000;
+/** Validate ACI's workload_keyset_digest ("sha256:<64 hex>") and return it verbatim. */
+function keysetDigest(raw) {
+    if (typeof raw !== 'string' || !/^sha256:[0-9a-f]{64}$/.test(raw)) {
+        throw new Error('aci report workload_keyset_digest is not "sha256:<64 hex>"');
+    }
+    return raw;
+}
+async function fetchEvidence(nonce, env) {
+    const url = env['ACI_ATTESTATION_URL'];
+    if (!url)
+        throw new Error('ACI_ATTESTATION_URL is required (e.g. https://<gateway>/v1/aci/attestation)');
+    const nonceHex = Buffer.from(nonce).toString('hex');
+    const full = `${url}${url.includes('?') ? '&' : '?'}nonce=${nonceHex}`;
+    const headers = {};
+    const key = env['ACI_API_KEY'];
+    if (key)
+        headers['authorization'] = `Bearer ${key}`;
+    const resp = await fetch(full, { headers, signal: AbortSignal.timeout(TIMEOUT_MS) });
+    if (!resp.ok)
+        throw new Error(`aci attestation HTTP ${resp.status}`);
+    const report = (await resp.json());
+    const quoteHex = report?.attestation?.evidence?.quote;
+    if (typeof quoteHex !== 'string' || quoteHex.length === 0) {
+        throw new Error('aci report has no attestation.evidence.quote');
+    }
+    return {
+        quote: new Uint8Array(Buffer.from(quoteHex.replace(/^0x/, ''), 'hex')),
+        bindingScheme: 'aci-keyset-v1',
+        ingredients: { keysetDigest: keysetDigest(report.workload_keyset_digest) },
+    };
+}
+const adapter = { id: 'aci', fetchEvidence };
+export default adapter;
+//# sourceMappingURL=aci.js.map

package/dist/adapters/aci.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aci.js","sourceRoot":"","sources":["../../src/adapters/aci.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AAEH,MAAM,UAAU,GAAG,MAAM,CAAA;AAOzB,wFAAwF;AACxF,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAA;IAC/E,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,KAAiB,EAAE,GAAuC;IACrF,MAAM,GAAG,GAAG,GAAG,CAAC,qBAAqB,CAAC,CAAA;IACtC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAA;IAExG,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IACnD,MAAM,IAAI,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,QAAQ,EAAE,CAAA;IACtE,MAAM,OAAO,GAA2B,EAAE,CAAA;IAC1C,MAAM,GAAG,GAAG,GAAG,CAAC,aAAa,CAAC,CAAA;IAC9B,IAAI,GAAG;QAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,GAAG,EAAE,CAAA;IAEnD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;IACpF,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;IAEpE,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAc,CAAA;IAC/C,MAAM,QAAQ,GAAG,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAA;IACrD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IACjE,CAAC;IACD,OAAO;QACL,KAAK,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QACtE,aAAa,EAAE,eAAe;QAC9B,WAAW,EAAE,EAAE,YAAY,EAAE,YAAY,CAAC,MAAM,CAAC,sBAAsB,CAAC,EAAE;KAC3E,CAAA;AACH,CAAC;AAED,MAAM,OAAO,GAAoB,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,CAAA;AAC7D,eAAe,OAAO,CAAA"}

package/dist/adapters/chutes.d.ts

@@ -0,0 +1,4 @@
+import type { ProviderAdapter } from './index.js';
+declare const adapter: ProviderAdapter;
+export default adapter;
+//# sourceMappingURL=chutes.d.ts.map

package/dist/adapters/chutes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chutes.d.ts","sourceRoot":"","sources":["../../src/adapters/chutes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAoB,MAAM,YAAY,CAAA;AAiFnE,QAAA,MAAM,OAAO,EAAE,eAAiD,CAAA;AAChE,eAAe,OAAO,CAAA"}

package/dist/adapters/chutes.js

@@ -0,0 +1,72 @@
+/**
+ * Chutes provider adapter (in-process). Chutes splits the evidence across two Bearer-authed
+ * endpoints. `/e2e/instances/{chute}` returns the per-instance E2E pubkey (the report_data
+ * ingredient). `/chutes/{chute}/evidence?nonce={hex}` returns the per-instance TDX quote and
+ * GPU evidence, bound to the nonce. The adapter joins them by instance_id, decodes the base64
+ * quote, and reshapes the flat GPU evidence into the NRAS shape.
+ * ANTSEED_VERIFIER_PROVIDER_ADAPTER=chutes selects it.
+ *
+ * Env: CHUTES_API_KEY (required), CHUTES_CHUTE (required), CHUTES_API_BASE (default https://api.chutes.ai).
+ */
+const DEFAULT_BASE = 'https://api.chutes.ai';
+const TIMEOUT_MS = 20_000;
+/** Reshape Chutes' flat GPU evidence [{arch, evidence, certificate}] → NRAS { arch, evidence_list }. */
+function reshapeGpu(gpu) {
+    if (!gpu)
+        return undefined;
+    if (Array.isArray(gpu)) {
+        if (gpu.length === 0)
+            return undefined;
+        const first = gpu[0];
+        return {
+            arch: String(first.arch),
+            evidence_list: gpu.map((g) => {
+                const item = g;
+                return { evidence: String(item.evidence), certificate: String(item.certificate) };
+            }),
+        };
+    }
+    return gpu;
+}
+async function fetchEvidence(nonce, env) {
+    const base = (env['CHUTES_API_BASE'] ?? DEFAULT_BASE).replace(/\/+$/, '');
+    const key = env['CHUTES_API_KEY'];
+    const chute = env['CHUTES_CHUTE'];
+    if (!key)
+        throw new Error('CHUTES_API_KEY is required');
+    if (!chute)
+        throw new Error('CHUTES_CHUTE is required');
+    const headers = { authorization: `Bearer ${key}` };
+    const chuteEnc = encodeURIComponent(chute);
+    const get = async (path) => {
+        const resp = await fetch(`${base}${path}`, { headers, signal: AbortSignal.timeout(TIMEOUT_MS) });
+        if (!resp.ok)
+            throw new Error(`chutes ${path.split('?')[0]} HTTP ${resp.status}`);
+        return resp.json();
+    };
+    // E2E pubkey per instance (the report_data binding ingredient).
+    const instBody = (await get(`/e2e/instances/${chuteEnc}`));
+    const pubkeys = new Map();
+    for (const i of instBody.instances ?? []) {
+        if (i.instance_id && typeof i.e2e_pubkey === 'string' && i.e2e_pubkey.length > 0)
+            pubkeys.set(i.instance_id, i.e2e_pubkey);
+    }
+    // TDX quote and GPU evidence per instance, bound to this nonce.
+    const nonceHex = Buffer.from(nonce).toString('hex');
+    const evBody = (await get(`/chutes/${chuteEnc}/evidence?nonce=${nonceHex}`));
+    const inst = (evBody.evidence ?? []).find((e) => typeof e.quote === 'string' && e.quote.length > 0 && !!e.instance_id && pubkeys.has(e.instance_id));
+    if (!inst?.quote || !inst.instance_id)
+        throw new Error('no chutes instance had both a quote and an e2e_pubkey');
+    const evidence = {
+        quote: new Uint8Array(Buffer.from(inst.quote, 'base64')),
+        bindingScheme: 'nonce-pubkey-sha256-v1',
+        ingredients: { e2ePubkey: pubkeys.get(inst.instance_id) },
+    };
+    const gpu = reshapeGpu(inst.gpu_evidence);
+    if (gpu)
+        evidence.gpuEvidence = gpu;
+    return evidence;
+}
+const adapter = { id: 'chutes', fetchEvidence };
+export default adapter;
+//# sourceMappingURL=chutes.js.map

package/dist/adapters/chutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chutes.js","sourceRoot":"","sources":["../../src/adapters/chutes.ts"],"names":[],"mappings":"AAGA;;;;;;;;;GASG;AAEH,MAAM,YAAY,GAAG,uBAAuB,CAAA;AAC5C,MAAM,UAAU,GAAG,MAAM,CAAA;AASzB,wGAAwG;AACxG,SAAS,UAAU,CAAC,GAAY;IAC9B,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAA;IAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAA;QACtC,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAsB,CAAA;QACzC,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;YACxB,aAAa,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC3B,MAAM,IAAI,GAAG,CAAgD,CAAA;gBAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAA;YACnF,CAAC,CAAC;SACH,CAAA;IACH,CAAC;IACD,OAAO,GAAwB,CAAA;AACjC,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,KAAiB,EAAE,GAAuC;IACrF,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,YAAY,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACzE,MAAM,GAAG,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAA;IACjC,MAAM,KAAK,GAAG,GAAG,CAAC,cAAc,CAAC,CAAA;IACjC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IACvD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;IACvD,MAAM,OAAO,GAAG,EAAE,aAAa,EAAE,UAAU,GAAG,EAAE,EAAE,CAAA;IAClD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAA;IAE1C,MAAM,GAAG,GAAG,KAAK,EAAE,IAAY,EAAoB,EAAE;QACnD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QAChG,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;QACjF,OAAO,IAAI,CAAC,IAAI,EAAE,CAAA;IACpB,CAAC,CAAA;IAED,gEAAgE;IAChE,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,kBAAkB,QAAQ,EAAE,CAAC,CAAsB,CAAA;IAC/E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAA;IACzC,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;QACzC,IAAI,CAAC,CAAC,WAAW,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC,CAAA;IAC5H,CAAC;IAED,gEAAgE;IAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IACnD,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,WAAW,QAAQ,mBAAmB,QAAQ,EAAE,CAAC,CAAqB,CAAA;IAChG,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CACvC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAC1G,CAAA;IACD,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;IAE/G,MAAM,QAAQ,GAAqB;QACjC,KAAK,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACxD,aAAa,EAAE,wBAAwB;QACvC,WAAW,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE;KAC1D,CAAA;IACD,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IACzC,IAAI,GAAG;QAAE,QAAQ,CAAC,WAAW,GAAG,GAAG,CAAA;IACnC,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,OAAO,GAAoB,EAAE,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAA;AAChE,eAAe,OAAO,CAAA"}

package/dist/adapters/index.d.ts

@@ -0,0 +1,26 @@
+import type { BindingIngredients } from '../report-data.js';
+import type { NvidiaGpuEvidence } from '../nras.js';
+/**
+ * Provider evidence in the SDK's neutral shape, produced by an in-process adapter. The prover
+ * maps this onto the provider capabilities (tee / gpu). A foreign provider's API is bridged
+ * with no provider specifics in the core: the adapter is the only provider-aware code, and the
+ * SDK loads it lazily — by id, only when ANTSEED_VERIFIER_PROVIDER_ADAPTER selects it.
+ */
+export interface ProviderEvidence {
+    /** The provider's raw TDX quote bytes. */
+    quote: Uint8Array;
+    /** Frozen report_data scheme the quote binds (e.g. 'nonce-pubkey-sha256-v1', 'aci-keyset-v1'). */
+    bindingScheme?: string;
+    /** The scheme's ingredients (e.g. { e2ePubkey } for Chutes, { keysetDigest } for ACI). */
+    ingredients?: Pick<BindingIngredients, 'peerId' | 'e2ePubkey' | 'keysetDigest'>;
+    /** Provider GPU CC evidence for seller-provider-gpu-cc, when the provider offers it. */
+    gpuEvidence?: NvidiaGpuEvidence;
+}
+/** A provider adapter. It uses the buyer nonce and the process env to fetch the provider's evidence. */
+export interface ProviderAdapter {
+    id: string;
+    fetchEvidence(nonce: Uint8Array, env: Record<string, string | undefined>): Promise<ProviderEvidence>;
+}
+export declare function adapterIds(): string[];
+export declare function loadAdapter(id: string): Promise<ProviderAdapter>;
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/adapters/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAC3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAEnD;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,0CAA0C;IAC1C,KAAK,EAAE,UAAU,CAAA;IACjB,kGAAkG;IAClG,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,0FAA0F;IAC1F,WAAW,CAAC,EAAE,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,WAAW,GAAG,cAAc,CAAC,CAAA;IAC/E,wFAAwF;IACxF,WAAW,CAAC,EAAE,iBAAiB,CAAA;CAChC;AAED,wGAAwG;AACxG,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,aAAa,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;CACrG;AAYD,wBAAgB,UAAU,IAAI,MAAM,EAAE,CAErC;AAED,wBAAsB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAItE"}

package/dist/adapters/index.js

@@ -0,0 +1,19 @@
+/**
+ * Allowlisted lazy registry — the one place adapter ids map to modules. The env only selects
+ * a key here (never a path), so a hostile value cannot dynamic-import an arbitrary file. To add a
+ * provider, add its module and one line here; the core verify/collect path never changes.
+ */
+const REGISTRY = {
+    chutes: () => import('./chutes.js'),
+    aci: () => import('./aci.js'),
+};
+export function adapterIds() {
+    return Object.keys(REGISTRY);
+}
+export async function loadAdapter(id) {
+    const load = REGISTRY[id];
+    if (!load)
+        throw new Error(`unknown provider adapter "${id}" (known: ${adapterIds().join(', ') || 'none'})`);
+    return (await load()).default;
+}
+//# sourceMappingURL=index.js.map

package/dist/adapters/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/adapters/index.ts"],"names":[],"mappings":"AA0BA;;;;GAIG;AACH,MAAM,QAAQ,GAAgE;IAC5E,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC;IACnC,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC;CAC9B,CAAA;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,EAAU;IAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IACzB,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,EAAE,aAAa,UAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG,CAAC,CAAA;IAC5G,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,OAAO,CAAA;AAC/B,CAAC"}

package/dist/antseed-node-types.d.ts

@@ -0,0 +1,55 @@
+/**
+ * The AntSeed plugin contract this SDK implements, vendored so the published package is
+ * self-contained (no external type dependency, no peer dependency to build). These interfaces
+ * mirror the AntSeed runtime's plugin surface, which loads this SDK's default and `prover` exports
+ * structurally. Keep them in sync if that contract changes.
+ */
+export interface AntseedPluginBase {
+    name: string;
+    displayName: string;
+    version: string;
+    description: string;
+}
+/** One capability's verdict. `claim` is a namespaced id, e.g. 'antseed-verifier:seller-bound'. */
+export interface ClaimResult {
+    claim: string;
+    ok: boolean;
+    detail?: string;
+}
+/** Overall verify result; the buyer applies its own required-vs-optional policy. */
+export interface VerifyResult {
+    ok: boolean;
+    claims: ClaimResult[];
+}
+/** A request the verifier sends to the seller over the existing buyer↔seller comms. */
+export interface SellerRequest {
+    method: string;
+    path: string;
+    headers?: Record<string, string>;
+    body?: Uint8Array;
+}
+export interface SellerResponse {
+    statusCode: number;
+    headers: Record<string, string>;
+    body: Uint8Array;
+}
+export interface VerifyContext {
+    peerId: string;
+    /** Verifier id selected by the buyer; must match this SDK's name. */
+    verifierId: string;
+    /** Seller prover path for this verifier. */
+    attestPath: string;
+    fetchFromSeller(req: SellerRequest): Promise<SellerResponse>;
+    signal?: AbortSignal;
+}
+/** Buyer half (the default export). */
+export interface AntseedVerifierPlugin extends AntseedPluginBase {
+    type: 'verifier';
+    verify(ctx: VerifyContext): VerifyResult | Promise<VerifyResult>;
+}
+/** Seller half (the `prover` export) — serves reserved attestation requests. */
+export interface Prover extends AntseedPluginBase {
+    type: 'prover';
+    prove(req: SellerRequest): SellerResponse | Promise<SellerResponse>;
+}
+//# sourceMappingURL=antseed-node-types.d.ts.map

package/dist/antseed-node-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"antseed-node-types.d.ts","sourceRoot":"","sources":["../src/antseed-node-types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,kGAAkG;AAClG,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,oFAAoF;AACpF,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,WAAW,EAAE,CAAA;CACtB;AAED,uFAAuF;AACvF,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,IAAI,CAAC,EAAE,UAAU,CAAA;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,IAAI,EAAE,UAAU,CAAA;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAA;IAClB,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAA;IAClB,eAAe,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;IAC5D,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB;AAED,uCAAuC;AACvC,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC9D,IAAI,EAAE,UAAU,CAAA;IAChB,MAAM,CAAC,GAAG,EAAE,aAAa,GAAG,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;CACjE;AAED,gFAAgF;AAChF,MAAM,WAAW,MAAO,SAAQ,iBAAiB;IAC/C,IAAI,EAAE,QAAQ,CAAA;IACd,KAAK,CAAC,GAAG,EAAE,aAAa,GAAG,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;CACpE"}

package/dist/antseed-node-types.js

@@ -0,0 +1,8 @@
+/**
+ * The AntSeed plugin contract this SDK implements, vendored so the published package is
+ * self-contained (no external type dependency, no peer dependency to build). These interfaces
+ * mirror the AntSeed runtime's plugin surface, which loads this SDK's default and `prover` exports
+ * structurally. Keep them in sync if that contract changes.
+ */
+export {};
+//# sourceMappingURL=antseed-node-types.js.map

package/dist/antseed-node-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"antseed-node-types.js","sourceRoot":"","sources":["../src/antseed-node-types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/capability.d.ts

@@ -0,0 +1,50 @@
+import type { ClaimResult } from './antseed-node-types.js';
+/**
+ * A Capability is one independent seller attestation. The SDK offers a menu of them.
+ * A seller produces evidence for the caps its infra supports (collect), and a buyer
+ * verifies each one (verify) into a single ClaimResult. Caps are generic — no provider
+ * hostnames or schemas. Provider differences live only in config-driven collectors.
+ */
+/** Input to a capability's buyer-side check. */
+export interface CapabilityVerifyInput {
+    /** The buyer's fresh nonce for this attestation round. */
+    nonce: Uint8Array;
+    /** The seller's peer id (EVM address, normalized by the caller). */
+    peerId: string;
+    /** This capability's own evidence bytes, if the seller returned any. */
+    evidence?: Uint8Array;
+    /**
+     * The already-DCAP-verified TDX quote this cap consumes (a ParsedTdxQuote from
+     * caps/tee-tdx). A TDX cap reads its own; a derived cap (measured-image) reads the
+     * quote it targets. `unknown` keeps this core module free of any cap-specific type.
+     */
+    parsedQuote?: unknown;
+    /** Buyer policy for this capability (e.g. approved measurements). Data, never fetched. */
+    policy?: unknown;
+    /**
+     * The full per-cap evidence map returned this round. seller-bound digests it (minus its
+     * own entry) to verify one seller signature covers the entire bundle.
+     */
+    evidenceBundle?: Record<string, Uint8Array>;
+}
+/** Input to a capability's seller-side evidence collection. */
+export interface CapabilityCollectInput {
+    nonce: Uint8Array;
+    peerId: string;
+    /** Generic, provider-neutral config (source, url, field path, prior evidence, ...). */
+    config: Record<string, string>;
+    /** Signs a 32-byte digest with the seller's identity key; absent when unavailable. */
+    sign?: (msg: Uint8Array) => Promise<Uint8Array>;
+}
+export interface Capability {
+    id: string;
+    /** Most caps yield one ClaimResult; a granular cap (provider-claims) yields one per sub-claim. */
+    verify(input: CapabilityVerifyInput): ClaimResult | ClaimResult[] | Promise<ClaimResult | ClaimResult[]>;
+    /** Present only for caps a seller can produce evidence for. A throw means "not offered". */
+    collect?(input: CapabilityCollectInput): Promise<Uint8Array>;
+}
+export declare function registerCapability(cap: Capability): void;
+export declare function getCapability(id: string): Capability | undefined;
+export declare function listCapabilities(): Capability[];
+export declare function capabilityIds(): string[];
+//# sourceMappingURL=capability.d.ts.map

package/dist/capability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability.d.ts","sourceRoot":"","sources":["../src/capability.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAE1D;;;;;GAKG;AAEH,gDAAgD;AAChD,MAAM,WAAW,qBAAqB;IACpC,0DAA0D;IAC1D,KAAK,EAAE,UAAU,CAAA;IACjB,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAA;IACd,wEAAwE;IACxE,QAAQ,CAAC,EAAE,UAAU,CAAA;IACrB;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,0FAA0F;IAC1F,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;CAC5C;AAED,+DAA+D;AAC/D,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,UAAU,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,uFAAuF;IACvF,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC9B,sFAAsF;IACtF,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAA;CAChD;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,kGAAkG;IAClG,MAAM,CAAC,KAAK,EAAE,qBAAqB,GAAG,WAAW,GAAG,WAAW,EAAE,GAAG,OAAO,CAAC,WAAW,GAAG,WAAW,EAAE,CAAC,CAAA;IACxG,4FAA4F;IAC5F,OAAO,CAAC,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;CAC7D;AAKD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,UAAU,GAAG,IAAI,CAExD;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAEhE;AAED,wBAAgB,gBAAgB,IAAI,UAAU,EAAE,CAE/C;AAED,wBAAgB,aAAa,IAAI,MAAM,EAAE,CAExC"}

package/dist/capability.js

@@ -0,0 +1,15 @@
+/** Registry — insertion order defines the menu order and the buyer's verify order. */
+const registry = new Map();
+export function registerCapability(cap) {
+    registry.set(cap.id, cap);
+}
+export function getCapability(id) {
+    return registry.get(id);
+}
+export function listCapabilities() {
+    return [...registry.values()];
+}
+export function capabilityIds() {
+    return [...registry.keys()];
+}
+//# sourceMappingURL=capability.js.map

package/dist/capability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability.js","sourceRoot":"","sources":["../src/capability.ts"],"names":[],"mappings":"AAkDA,sFAAsF;AACtF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAsB,CAAA;AAE9C,MAAM,UAAU,kBAAkB,CAAC,GAAe;IAChD,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAU;IACtC,OAAO,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;AACzB,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;AAC/B,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;AAC7B,CAAC"}

package/dist/caps/gpu-nvidia.d.ts

@@ -0,0 +1,66 @@
+import type { JWTVerifyGetKey } from 'jose';
+import type { Capability } from '../capability.js';
+import { type NrasSubmitFn } from '../nras.js';
+/**
+ * Capability 'seller-provider-gpu-cc': proves the inference provider's GPUs run NVIDIA
+ * Confidential Computing, via NVIDIA's Remote Attestation Service (NRAS). The buyer submits
+ * the provider's per-GPU CC evidence and the buyer's nonce to NRAS, then verifies the returned
+ * EAR (signed JWT): the signature is valid against NVIDIA's JWKS, the overall result is success,
+ * the CC mode is on, and the nonce binds this round.
+ *
+ * Informational, not required: a CPU-only seller (no GPUs) must still verify, so this cap is
+ * never in the buyer's required set. The seller offers it only when it configures a provider
+ * evidence route and a GPU evidence field; otherwise it omits the cap. The buyer-side check goes
+ * through an injectable GpuVerifyFn (see below) so an offline verifier can replace it.
+ */
+export declare const GPU_CAP_ID = "seller-provider-gpu-cc";
+/** Result of a GPU-CC check — the cap maps this into a ClaimResult. */
+export interface GpuVerification {
+    ok: boolean;
+    detail: string;
+    /** Set on network or service errors (NRAS unreachable). These are retryable, not a real verdict. */
+    transient?: boolean;
+}
+/**
+ * The injectable seam: verify a provider's GPU-CC evidence against the buyer's nonce. The
+ * default is NRAS. A localGpuVerify implements the offline path behind the same type, so a
+ * swap needs no cap change. Tests inject a stub to exercise the cap's policy.
+ */
+export type GpuVerifyFn = (evidence: Uint8Array, nonce: Uint8Array) => Promise<GpuVerification>;
+/** Config for the NRAS verifier. All fields are optional, so production uses NVIDIA defaults and real JWKS. */
+export interface NrasOptions {
+    nrasUrl?: string;
+    jwksUrl?: string;
+    /** Injectable NRAS submit (default POSTs to NRAS). */
+    submit?: NrasSubmitFn;
+    /** Injectable jose key resolver (default fetches NVIDIA's JWKS). */
+    getKey?: JWTVerifyGetKey;
+}
+/**
+ * Build a NRAS-backed GpuVerifyFn. It submits the provider evidence and nonce to NRAS and
+ * verifies the EAR. Network or service errors are marked transient (retryable). Anything else
+ * (malformed evidence, bad signature, failed claim, nonce mismatch) fails closed as a real
+ * verdict. jose is imported lazily (only here) so the seller half and CPU-only buyers never load it.
+ */
+export declare function makeNrasGpuVerify(opts?: NrasOptions): GpuVerifyFn;
+/** Default NRAS verifier (production). */
+export declare const nrasGpuVerify: GpuVerifyFn;
+/**
+ * Offline GPU verifier — reserved for the nvtrust-style local path (report + device cert chain
+ * + RIM, no external service). Not implemented: it returns a clear, non-transient error so an
+ * operator who sets ANTSEED_VERIFIER_GPU_MODE=local gets an explicit "not implemented", not silence.
+ */
+export declare const localGpuVerify: GpuVerifyFn;
+/** Dispatch on ANTSEED_VERIFIER_GPU_MODE: 'nras' or 'local'. An unknown mode fails closed. */
+export declare const defaultGpuVerify: GpuVerifyFn;
+/** Config-key convention for this cap's collector settings (mirrors tee-tdx's tdxConfigKey). */
+export declare function gpuConfigKey(key: string): string;
+/**
+ * Mint the GPU-CC capability. `gpuVerify` is the injected buyer-side check (default: NRAS);
+ * tests pass a stub. collect fetches the provider's GPU evidence from the same provider
+ * evidence route as the TDX quote (config-supplied url and field). It throws when either is
+ * absent, so the cap is omitted.
+ */
+export declare function makeGpuNvidiaCap(gpuVerify?: GpuVerifyFn): Capability;
+export declare const gpuNvidiaCapability: Capability;
+//# sourceMappingURL=gpu-nvidia.d.ts.map

package/dist/caps/gpu-nvidia.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gpu-nvidia.d.ts","sourceRoot":"","sources":["../../src/caps/gpu-nvidia.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,MAAM,CAAA;AAE3C,OAAO,KAAK,EAAE,UAAU,EAAiD,MAAM,kBAAkB,CAAA;AAKjG,OAAO,EAML,KAAK,YAAY,EAElB,MAAM,YAAY,CAAA;AAEnB;;;;;;;;;;;GAWG;AAEH,eAAO,MAAM,UAAU,2BAA2B,CAAA;AAQlD,uEAAuE;AACvE,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,oGAAoG;IACpG,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAED;;;;GAIG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,KAAK,OAAO,CAAC,eAAe,CAAC,CAAA;AAO/F,+GAA+G;AAC/G,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,sDAAsD;IACtD,MAAM,CAAC,EAAE,YAAY,CAAA;IACrB,oEAAoE;IACpE,MAAM,CAAC,EAAE,eAAe,CAAA;CACzB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,GAAE,WAAgB,GAAG,WAAW,CA6BrE;AAED,0CAA0C;AAC1C,eAAO,MAAM,aAAa,EAAE,WAAiC,CAAA;AAE7D;;;;GAIG;AACH,eAAO,MAAM,cAAc,EAAE,WAG3B,CAAA;AAEF,8FAA8F;AAC9F,eAAO,MAAM,gBAAgB,EAAE,WAK9B,CAAA;AAED,gGAAgG;AAChG,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AA0BD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,GAAE,WAA8B,GAAG,UAAU,CAuBtF;AAED,eAAO,MAAM,mBAAmB,YAAqB,CAAA"}