@atrib/sdk 0.1.0

package/dist/attest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attest.d.ts","sourceRoot":"","sources":["../src/attest.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAC7C,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAA;AAElE;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,sBAAsB,EAAE,MAAM,CAAA;IAC9B,gBAAgB,EAAE,OAAO,CAAA;IACzB,MAAM,EAAE,OAAO,CAAA;CAChB;AAED,0EAA0E;AAC1E,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,WAAW,GAAG,SAAS,CAAA;IAC7B,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAChC;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,0EAA0E;IAC1E,GAAG,CAAC,EAAE,SAAS,CAAA;IACf,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,iEAAiE;IACjE,4BAA4B,CAAC,EAAE,OAAO,CAAA;IACtC,8CAA8C;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,qEAAqE;IACrE,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,2EAA2E;IAC3E,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,eAAe,EAAE,WAAW,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAA;IACtD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,uEAAuE;IACvE,GAAG,EAAE,QAAQ,GAAG,YAAY,GAAG,MAAM,CAAA;IACrC,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,0BAA0B,CAAA;IAChD;;;;OAIG;IACH,cAAc,CAAC,EAAE,mBAAmB,CAAA;CACrC;AAOD;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,KAAK,EAAE,WAAW,EAClB,gBAAgB,CAAC,EAAE,MAAM,GACxB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAkCzB;AAED,kEAAkE;AAClE,MAAM,WAAW,cAAc;IAC7B,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB;AAED,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,cAAc,EACtB,GAAG,EAAE,QAAQ,GAAG,YAAY,EAC5B,aAAa,EAAE,MAAM,EAAE,GACtB,YAAY,CAmBd"}

package/dist/attest.js

@@ -0,0 +1,64 @@
+// SPDX-License-Identifier: Apache-2.0
+const REF_EVENT_TYPE = {
+    annotates: 'annotation',
+    revises: 'revision',
+};
+/**
+ * Map AttestInput to the EmitInput argument shape shared by the daemon's
+ * `emit` tool and `emitInProcess`. Throws TypeError on contradictory input
+ * (the only throw path of the write verb — operational failures degrade).
+ */
+export function buildEmitArgs(input, defaultContextId) {
+    const ref = input.ref;
+    let eventType = input.event_type;
+    if (ref) {
+        const derived = REF_EVENT_TYPE[ref.kind];
+        if (derived === undefined) {
+            throw new TypeError(`atrib: unknown attest ref kind: ${String(ref.kind)}`);
+        }
+        if (eventType !== undefined && eventType !== derived && !eventType.endsWith(`/${derived}`)) {
+            throw new TypeError(`atrib: attest ref kind '${ref.kind}' requires event_type '${derived}', got '${eventType}'`);
+        }
+        eventType = eventType ?? derived;
+    }
+    const contextId = input.context_id ?? defaultContextId;
+    return {
+        event_type: eventType ?? 'observation',
+        content: input.content,
+        ...(contextId !== undefined ? { context_id: contextId } : {}),
+        ...(ref?.kind === 'annotates' ? { annotates: ref.record_hash } : {}),
+        ...(ref?.kind === 'revises' ? { revises: ref.record_hash } : {}),
+        ...(input.informed_by !== undefined ? { informed_by: input.informed_by } : {}),
+        ...(input.allow_unresolved_informed_by !== undefined
+            ? { allow_unresolved_informed_by: input.allow_unresolved_informed_by }
+            : {}),
+        ...(input.chain_root !== undefined ? { chain_root: input.chain_root } : {}),
+        ...(input.provenance_token !== undefined
+            ? { provenance_token: input.provenance_token }
+            : {}),
+        ...(input.tool_name !== undefined ? { tool_name: input.tool_name } : {}),
+        ...(input.args_hash !== undefined ? { args_hash: input.args_hash } : {}),
+        ...(input.result_hash !== undefined ? { result_hash: input.result_hash } : {}),
+    };
+}
+export function attestResultFromEmitOutput(output, via, extraWarnings) {
+    const warnings = [
+        ...extraWarnings,
+        ...(Array.isArray(output.warnings) ? output.warnings.map(String) : []),
+    ];
+    const receiptId = typeof output.receipt_id === 'string' ? output.receipt_id : undefined;
+    return {
+        record_hash: typeof output.record_hash === 'string' && output.record_hash !== ''
+            ? output.record_hash
+            : null,
+        context_id: typeof output.context_id === 'string' ? output.context_id : null,
+        log_index: typeof output.log_index === 'number' ? output.log_index : null,
+        inclusion_proof: Array.isArray(output.inclusion_proof)
+            ? output.inclusion_proof
+            : null,
+        ...(receiptId !== undefined ? { receipt_id: receiptId } : {}),
+        via,
+        warnings,
+    };
+}
+//# sourceMappingURL=attest.js.map

package/dist/attest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attest.js","sourceRoot":"","sources":["../src/attest.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAiGtC,MAAM,cAAc,GAAsC;IACxD,SAAS,EAAE,YAAY;IACvB,OAAO,EAAE,UAAU;CACpB,CAAA;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,KAAkB,EAClB,gBAAyB;IAEzB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAA;IACrB,IAAI,SAAS,GAAG,KAAK,CAAC,UAAU,CAAA;IAChC,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACxC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,SAAS,CAAC,mCAAmC,MAAM,CAAE,GAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC3F,CAAC;QACD,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC,EAAE,CAAC;YAC3F,MAAM,IAAI,SAAS,CACjB,2BAA2B,GAAG,CAAC,IAAI,0BAA0B,OAAO,WAAW,SAAS,GAAG,CAC5F,CAAA;QACH,CAAC;QACD,SAAS,GAAG,SAAS,IAAI,OAAO,CAAA;IAClC,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,IAAI,gBAAgB,CAAA;IACtD,OAAO;QACL,UAAU,EAAE,SAAS,IAAI,aAAa;QACtC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,GAAG,EAAE,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,GAAG,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,GAAG,CAAC,KAAK,CAAC,4BAA4B,KAAK,SAAS;YAClD,CAAC,CAAC,EAAE,4BAA4B,EAAE,KAAK,CAAC,4BAA4B,EAAE;YACtE,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS;YACtC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE;YAC9C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/E,CAAA;AACH,CAAC;AAYD,MAAM,UAAU,0BAA0B,CACxC,MAAsB,EACtB,GAA4B,EAC5B,aAAuB;IAEvB,MAAM,QAAQ,GAAG;QACf,GAAG,aAAa;QAChB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAA;IACD,MAAM,SAAS,GAAG,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAA;IACvF,OAAO;QACL,WAAW,EAAE,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,KAAK,EAAE;YAC9E,CAAC,CAAC,MAAM,CAAC,WAAW;YACpB,CAAC,CAAC,IAAI;QACR,UAAU,EAAE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;QAC5E,SAAS,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;QACzE,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;YACpD,CAAC,CAAE,MAAM,CAAC,eAAkD;YAC5D,CAAC,CAAC,IAAI;QACR,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG;QACH,QAAQ;KACT,CAAA;AACH,CAAC"}

package/dist/attribution.d.ts

@@ -0,0 +1,81 @@
+/**
+ * `dev.atrib/attribution` extension receipts (accepted as D141; extension
+ * spec at docs/extensions/dev.atrib-attribution/v0.1.md, conformance at
+ * spec/conformance/mcp-extension/).
+ *
+ * Behind an opt-in flag, the daemon client parses attestation receipts
+ * from tool results' `_meta["dev.atrib/attribution"]`: the propagation
+ * token, a receipt block naming the record the server already signed
+ * locally, and optionally the full signed record for immediate Tier-3
+ * re-verification. `log_submission` is a queue status, never an awaited
+ * proof — submission stays non-blocking per §5.3.5.
+ *
+ * Receipts are advisory extension data: trust derives only from verifying
+ * signed records and inclusion proofs, never from the receipt itself.
+ */
+import { ATTRIBUTION_EXTENSION_ID, type AtribRecord, type AttributionLogSubmissionStatus, type AttributionReceiptVerification } from '@atrib/mcp';
+/**
+ * Alias of `@atrib/mcp`'s `ATTRIBUTION_EXTENSION_ID` — one identifier, one
+ * source of truth (the SEP-2133 extension id is frozen).
+ */
+export declare const ATTRIBUTION_EXTENSION_KEY: typeof ATTRIBUTION_EXTENSION_ID;
+export type { AttributionLogSubmissionStatus };
+export interface AttributionReceipt {
+    record_hash?: string;
+    creator_key?: string;
+    context_id?: string;
+    event_type?: string;
+    chain_root?: string;
+    /** Queue status; unknown future values pass through as strings. */
+    log_submission?: AttributionLogSubmissionStatus | string;
+}
+export interface AttributionReceiptBlock {
+    /** §1.5.2 propagation token for the record the server just signed. */
+    token?: string;
+    receipt?: AttributionReceipt;
+    /** Full signed record; present only when the client accepted 'record'. */
+    record?: AtribRecord;
+}
+/**
+ * The receipt surface the daemon client attaches to attest/recall results:
+ * the leniently parsed block plus the outcome of running `@atrib/mcp`'s
+ * `verifyAttributionReceipt` over the RAW `_meta` block (structural +
+ * internal-consistency check per extension spec §6.2). Verification is
+ * advisory like the receipt itself: an invalid receipt is discarded from
+ * trust, never from the tool result.
+ */
+export interface VerifiedAttributionReceipt {
+    block: AttributionReceiptBlock;
+    verification: AttributionReceiptVerification;
+}
+/**
+ * Extract the extension block from a tool result's `_meta`. Lenient parse
+ * per the extension's degradation posture: anything malformed yields null,
+ * never a throw.
+ */
+export declare function parseAttributionReceiptBlock(meta: unknown): AttributionReceiptBlock | null;
+/** Outcome of checking a receipt against its attached signed record. */
+export interface AttributionReceiptConsistency {
+    /** True iff every receipt claim matches the attached record. */
+    receipt_valid: boolean;
+    /** Receipt fields whose claims contradict the attached record. */
+    mismatched_fields: string[];
+    /** recordHashRef of the attached record (when a record is available). */
+    attached_record_hash?: string;
+    /** The receipt's claimed record_hash (when present). */
+    claimed_record_hash?: string;
+}
+/**
+ * Check a receipt block's claims against the signed record they name
+ * (the attached `block.record`, or a caller-retrieved record). Receipts
+ * are advisory: a mismatch NEVER invalidates the tool result — it means
+ * the receipt must not be trusted or cited (conformance:
+ * spec/conformance/mcp-extension/cases/receipt--*.json).
+ *
+ * Compared claims: `receipt.record_hash` vs the record's canonical hash,
+ * `token` vs encodeToken(record), and `creator_key` / `context_id` /
+ * `chain_root` / `event_type` (short name or URI, normalized) vs the
+ * record's fields. Absent receipt fields are not mismatches.
+ */
+export declare function checkAttributionReceiptConsistency(block: AttributionReceiptBlock, record?: AtribRecord): AttributionReceiptConsistency;
+//# sourceMappingURL=attribution.d.ts.map

package/dist/attribution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attribution.d.ts","sourceRoot":"","sources":["../src/attribution.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EACL,wBAAwB,EAGxB,KAAK,WAAW,EAChB,KAAK,8BAA8B,EACnC,KAAK,8BAA8B,EACpC,MAAM,YAAY,CAAA;AAGnB;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAE,OAAO,wBAAmD,CAAA;AAElG,YAAY,EAAE,8BAA8B,EAAE,CAAA;AAE9C,MAAM,WAAW,kBAAkB;IACjC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,mEAAmE;IACnE,cAAc,CAAC,EAAE,8BAA8B,GAAG,MAAM,CAAA;CACzD;AAED,MAAM,WAAW,uBAAuB;IACtC,sEAAsE;IACtE,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,kBAAkB,CAAA;IAC5B,0EAA0E;IAC1E,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,uBAAuB,CAAA;IAC9B,YAAY,EAAE,8BAA8B,CAAA;CAC7C;AAWD;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,OAAO,GAAG,uBAAuB,GAAG,IAAI,CA6B1F;AAED,wEAAwE;AACxE,MAAM,WAAW,6BAA6B;IAC5C,gEAAgE;IAChE,aAAa,EAAE,OAAO,CAAA;IACtB,kEAAkE;IAClE,iBAAiB,EAAE,MAAM,EAAE,CAAA;IAC3B,yEAAyE;IACzE,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,wDAAwD;IACxD,mBAAmB,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,uBAAuB,EAC9B,MAAM,CAAC,EAAE,WAAW,GACnB,6BAA6B,CAgD/B"}

package/dist/attribution.js

@@ -0,0 +1,133 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * `dev.atrib/attribution` extension receipts (accepted as D141; extension
+ * spec at docs/extensions/dev.atrib-attribution/v0.1.md, conformance at
+ * spec/conformance/mcp-extension/).
+ *
+ * Behind an opt-in flag, the daemon client parses attestation receipts
+ * from tool results' `_meta["dev.atrib/attribution"]`: the propagation
+ * token, a receipt block naming the record the server already signed
+ * locally, and optionally the full signed record for immediate Tier-3
+ * re-verification. `log_submission` is a queue status, never an awaited
+ * proof — submission stays non-blocking per §5.3.5.
+ *
+ * Receipts are advisory extension data: trust derives only from verifying
+ * signed records and inclusion proofs, never from the receipt itself.
+ */
+import { ATTRIBUTION_EXTENSION_ID, encodeToken, normalizeEventType, } from '@atrib/mcp';
+import { recordHashRef } from './hashes.js';
+/**
+ * Alias of `@atrib/mcp`'s `ATTRIBUTION_EXTENSION_ID` — one identifier, one
+ * source of truth (the SEP-2133 extension id is frozen).
+ */
+export const ATTRIBUTION_EXTENSION_KEY = ATTRIBUTION_EXTENSION_ID;
+const RECEIPT_STRING_FIELDS = [
+    'record_hash',
+    'creator_key',
+    'context_id',
+    'event_type',
+    'chain_root',
+    'log_submission',
+];
+/**
+ * Extract the extension block from a tool result's `_meta`. Lenient parse
+ * per the extension's degradation posture: anything malformed yields null,
+ * never a throw.
+ */
+export function parseAttributionReceiptBlock(meta) {
+    if (typeof meta !== 'object' || meta === null)
+        return null;
+    const raw = meta[ATTRIBUTION_EXTENSION_KEY];
+    if (typeof raw !== 'object' || raw === null)
+        return null;
+    const block = raw;
+    const out = {};
+    if (typeof block['token'] === 'string')
+        out.token = block['token'];
+    const rawReceipt = block['receipt'];
+    if (typeof rawReceipt === 'object' && rawReceipt !== null && !Array.isArray(rawReceipt)) {
+        const receipt = {};
+        let kept = 0;
+        for (const field of RECEIPT_STRING_FIELDS) {
+            const value = rawReceipt[field];
+            if (typeof value === 'string') {
+                receipt[field] = value;
+                kept += 1;
+            }
+        }
+        // A receipt where every field was wrong-typed conveys nothing; treat
+        // it as absent rather than surfacing an empty object.
+        if (kept > 0)
+            out.receipt = receipt;
+    }
+    const rawRecord = block['record'];
+    if (typeof rawRecord === 'object' && rawRecord !== null && !Array.isArray(rawRecord)) {
+        out.record = rawRecord;
+    }
+    return out.token !== undefined || out.receipt !== undefined || out.record !== undefined
+        ? out
+        : null;
+}
+/**
+ * Check a receipt block's claims against the signed record they name
+ * (the attached `block.record`, or a caller-retrieved record). Receipts
+ * are advisory: a mismatch NEVER invalidates the tool result — it means
+ * the receipt must not be trusted or cited (conformance:
+ * spec/conformance/mcp-extension/cases/receipt--*.json).
+ *
+ * Compared claims: `receipt.record_hash` vs the record's canonical hash,
+ * `token` vs encodeToken(record), and `creator_key` / `context_id` /
+ * `chain_root` / `event_type` (short name or URI, normalized) vs the
+ * record's fields. Absent receipt fields are not mismatches.
+ */
+export function checkAttributionReceiptConsistency(block, record) {
+    const attached = record ?? block.record;
+    const receipt = block.receipt;
+    const claimed = receipt?.record_hash;
+    if (!attached) {
+        return {
+            receipt_valid: false,
+            mismatched_fields: ['record'],
+            ...(claimed !== undefined ? { claimed_record_hash: claimed } : {}),
+        };
+    }
+    const mismatched = [];
+    let attachedHash;
+    let token;
+    try {
+        attachedHash = recordHashRef(attached);
+        token = encodeToken(attached);
+    }
+    catch {
+        // A record that cannot be canonicalized/hashed cannot back a receipt.
+        return {
+            receipt_valid: false,
+            mismatched_fields: ['record'],
+            ...(claimed !== undefined ? { claimed_record_hash: claimed } : {}),
+        };
+    }
+    if (claimed !== undefined && claimed !== attachedHash)
+        mismatched.push('record_hash');
+    if (block.token !== undefined && block.token !== token)
+        mismatched.push('token');
+    if (receipt?.creator_key !== undefined && receipt.creator_key !== attached.creator_key) {
+        mismatched.push('creator_key');
+    }
+    if (receipt?.context_id !== undefined && receipt.context_id !== attached.context_id) {
+        mismatched.push('context_id');
+    }
+    if (receipt?.chain_root !== undefined && receipt.chain_root !== attached.chain_root) {
+        mismatched.push('chain_root');
+    }
+    if (receipt?.event_type !== undefined &&
+        normalizeEventType(receipt.event_type) !== normalizeEventType(attached.event_type)) {
+        mismatched.push('event_type');
+    }
+    return {
+        receipt_valid: mismatched.length === 0,
+        mismatched_fields: mismatched,
+        attached_record_hash: attachedHash,
+        ...(claimed !== undefined ? { claimed_record_hash: claimed } : {}),
+    };
+}
+//# sourceMappingURL=attribution.js.map

package/dist/attribution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attribution.js","sourceRoot":"","sources":["../src/attribution.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EACL,wBAAwB,EACxB,WAAW,EACX,kBAAkB,GAInB,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAE3C;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoC,wBAAwB,CAAA;AAmClG,MAAM,qBAAqB,GAAG;IAC5B,aAAa;IACb,aAAa;IACb,YAAY;IACZ,YAAY;IACZ,YAAY;IACZ,gBAAgB;CACR,CAAA;AAEV;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAAC,IAAa;IACxD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC1D,MAAM,GAAG,GAAI,IAAgC,CAAC,yBAAyB,CAAC,CAAA;IACxE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IACxD,MAAM,KAAK,GAAG,GAA8B,CAAA;IAC5C,MAAM,GAAG,GAA4B,EAAE,CAAA;IACvC,IAAI,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,QAAQ;QAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAA;IAClE,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,CAAA;IACnC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACxF,MAAM,OAAO,GAAuB,EAAE,CAAA;QACtC,IAAI,IAAI,GAAG,CAAC,CAAA;QACZ,KAAK,MAAM,KAAK,IAAI,qBAAqB,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAI,UAAsC,CAAC,KAAK,CAAC,CAAA;YAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,CAAA;gBACtB,IAAI,IAAI,CAAC,CAAA;YACX,CAAC;QACH,CAAC;QACD,qEAAqE;QACrE,sDAAsD;QACtD,IAAI,IAAI,GAAG,CAAC;YAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAA;IACrC,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAA;IACjC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACrF,GAAG,CAAC,MAAM,GAAG,SAAwB,CAAA;IACvC,CAAC;IACD,OAAO,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;QACrF,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,IAAI,CAAA;AACV,CAAC;AAcD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kCAAkC,CAChD,KAA8B,EAC9B,MAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,IAAI,KAAK,CAAC,MAAM,CAAA;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;IAC7B,MAAM,OAAO,GAAG,OAAO,EAAE,WAAW,CAAA;IACpC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,aAAa,EAAE,KAAK;YACpB,iBAAiB,EAAE,CAAC,QAAQ,CAAC;YAC7B,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE,CAAA;IACH,CAAC;IACD,MAAM,UAAU,GAAa,EAAE,CAAA;IAC/B,IAAI,YAAgC,CAAA;IACpC,IAAI,KAAyB,CAAA;IAC7B,IAAI,CAAC;QACH,YAAY,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;QACtC,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,OAAO;YACL,aAAa,EAAE,KAAK;YACpB,iBAAiB,EAAE,CAAC,QAAQ,CAAC;YAC7B,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE,CAAA;IACH,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,YAAY;QAAE,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IACrF,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;QAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAChF,IAAI,OAAO,EAAE,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC;QACvF,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IAChC,CAAC;IACD,IAAI,OAAO,EAAE,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;QACpF,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IAC/B,CAAC;IACD,IAAI,OAAO,EAAE,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;QACpF,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IAC/B,CAAC;IACD,IACE,OAAO,EAAE,UAAU,KAAK,SAAS;QACjC,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,kBAAkB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAClF,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IAC/B,CAAC;IACD,OAAO;QACL,aAAa,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;QACtC,iBAAiB,EAAE,UAAU;QAC7B,oBAAoB,EAAE,YAAY;QAClC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnE,CAAA;AACH,CAAC"}

package/dist/client.d.ts

@@ -0,0 +1,18 @@
+import { type AttestInput, type AttestResult } from './attest.js';
+import { type AtribClientConfig } from './config.js';
+import { type RecallOutcome, type RecallQuery } from './recall.js';
+export interface AtribClient {
+    /** Single write verb. Never throws on operational failure (§5.8). */
+    attest(input: AttestInput): Promise<AttestResult>;
+    /** Single read verb. Never throws on operational failure (§5.8). */
+    recall<T = unknown>(query: RecallQuery): Promise<RecallOutcome<T>>;
+    /**
+     * Await all in-flight anchor fan-out legs (D138). For tests and shutdown
+     * hooks only — the attest path itself never awaits anchoring (§5.3.5).
+     */
+    flushAnchors(): Promise<void>;
+    /** Close the daemon transport (if one was opened). */
+    close(): Promise<void>;
+}
+export declare function createAtribClient(config?: AtribClientConfig): AtribClient;
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AA0BA,OAAO,EAIL,KAAK,WAAW,EAChB,KAAK,YAAY,EAElB,MAAM,aAAa,CAAA;AAEpB,OAAO,EAAsC,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAExF,OAAO,EAIL,KAAK,aAAa,EAClB,KAAK,WAAW,EACjB,MAAM,aAAa,CAAA;AAEpB,MAAM,WAAW,WAAW;IAC1B,qEAAqE;IACrE,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IACjD,oEAAoE;IACpE,MAAM,CAAC,CAAC,GAAG,OAAO,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAA;IAClE;;;OAGG;IACH,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7B,sDAAsD;IACtD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AA8BD,wBAAgB,iBAAiB,CAAC,MAAM,GAAE,iBAAsB,GAAG,WAAW,CAqO7E"}

package/dist/client.js

@@ -0,0 +1,244 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * createAtribClient(): the consolidated client over attest/recall.
+ *
+ * Daemon-first per D120/the SDK brief: writes and reads prefer the local
+ * primitives runtime over MCP Streamable HTTP (one host-owned process,
+ * one key owner, one mirror), falling back to in-process engines.
+ * `@atrib/emit` is a hard dependency (the write fallback must always
+ * work); `@atrib/recall` and `@atrib/verify-mcp` are OPTIONAL peer
+ * dependencies loaded lazily, mirroring the P047 pattern — when absent,
+ * the corresponding recall shapes degrade to a typed unavailable outcome
+ * per §5.8 rather than failing to import.
+ *
+ * Operational failures never throw (§5.8); they degrade into `warnings`
+ * on the result. The only throw paths are contradictory inputs
+ * (programmer error).
+ */
+import { emitInProcess, resolveKey } from '@atrib/emit';
+import { createAnchorFanout, readMirrorTail, resolveEnvContextId, } from '@atrib/mcp';
+import { attestResultFromEmitOutput, buildEmitArgs, } from './attest.js';
+import { recordHashRef } from './hashes.js';
+import { DEFAULT_PRODUCER, resolveAnchorSet } from './config.js';
+import { DaemonClient } from './daemon.js';
+import { SHAPE_TO_TOOL, shapeOf, toToolArgs, } from './recall.js';
+let recallModulePromise = null;
+function loadRecallModule() {
+    recallModulePromise ??= import('@atrib/recall').then((mod) => mod, () => null);
+    return recallModulePromise;
+}
+let verifyModulePromise = null;
+function loadVerifyModule() {
+    verifyModulePromise ??= import('@atrib/verify-mcp').then((mod) => mod, () => null);
+    return verifyModulePromise;
+}
+export function createAtribClient(config = {}) {
+    const daemonMode = config.daemon?.mode ?? 'prefer';
+    const daemon = daemonMode === 'off'
+        ? null
+        : new DaemonClient(config.daemon, {
+            attributionReceipts: config.attributionReceipts === true,
+        });
+    const producer = config.producer ?? DEFAULT_PRODUCER;
+    const anchorSet = resolveAnchorSet(config.anchors, config.allowSingleAnchor);
+    const anchorWarnings = anchorSet.warnings;
+    const logEndpoint = anchorSet.primaryLogEndpoint;
+    // One D138 anchor fan-out per client, built lazily on the first
+    // in-process attest. The daemon attest path never consults it: the
+    // daemon owns its own anchors.
+    let fanout = null;
+    const getFanout = () => {
+        fanout ??= createAnchorFanout({ config: anchorSet.config });
+        return fanout;
+    };
+    // Lazily resolve the in-process signing key once. `config.key === null`
+    // is an explicit pass-through request; undefined defers to resolveKey().
+    let keyPromise = null;
+    const resolveClientKey = () => {
+        if (Object.prototype.hasOwnProperty.call(config, 'key')) {
+            return Promise.resolve(config.key ?? null);
+        }
+        keyPromise ??= resolveKey().catch((error) => {
+            console.warn(`atrib: key resolution failed: ${String(error)}`);
+            return null;
+        });
+        return keyPromise;
+    };
+    const defaultContextId = () => config.contextId ?? resolveEnvContextId();
+    async function attest(input) {
+        // Throws TypeError on contradictory input — the only throw path.
+        const args = buildEmitArgs(input, defaultContextId());
+        const warnings = [...anchorWarnings];
+        if (daemon) {
+            const outcome = await daemon.callTool('emit', args);
+            const attribution = outcome.ok ? outcome.attribution : undefined;
+            const emitOutput = outcome.ok && typeof outcome.value === 'object' && outcome.value !== null
+                ? outcome.value
+                : null;
+            // A structurally-garbage daemon result (no record_hash string) is a
+            // daemon FAILURE, not a silent all-null success — fall through so
+            // the in-process path can still sign.
+            if (emitOutput !== null && typeof emitOutput.record_hash === 'string') {
+                const result = attestResultFromEmitOutput(emitOutput, 'daemon', warnings);
+                return attribution !== undefined
+                    ? { ...result, attribution_receipt: attribution }
+                    : result;
+            }
+            const reason = outcome.ok
+                ? 'daemon returned an emit result without a record_hash'
+                : outcome.reason;
+            warnings.push(`atrib: daemon attest failed: ${reason}`);
+            if (daemonMode === 'require') {
+                return {
+                    record_hash: null,
+                    context_id: null,
+                    log_index: null,
+                    inclusion_proof: null,
+                    via: 'none',
+                    warnings,
+                };
+            }
+        }
+        const key = await resolveClientKey();
+        if (key === null) {
+            warnings.push('atrib: no signing key available; operating in pass-through mode (§5.8), no record emitted');
+            return {
+                record_hash: null,
+                context_id: null,
+                log_index: null,
+                inclusion_proof: null,
+                via: 'none',
+                warnings,
+            };
+        }
+        try {
+            const output = await emitInProcess(args, {
+                key,
+                producer,
+                ...(logEndpoint !== undefined ? { logEndpoint } : {}),
+            });
+            const result = attestResultFromEmitOutput(output, 'in-process', warnings);
+            await fanOutToAnchors(result);
+            return result;
+        }
+        catch (error) {
+            // emitInProcess throws only on input-shape validation; surface it as
+            // the caller's programmer error.
+            throw error instanceof Error ? error : new Error(String(error));
+        }
+    }
+    /**
+     * D138 anchor fan-out for the in-process path. Reads the freshly signed
+     * record back from the local mirror (§5.9) and hands it to every
+     * configured anchor. Fire-and-forget per §5.3.5: the fan-out ticket's
+     * outcomes are NEVER awaited here — only submission handoff is. The
+     * primary atrib-log anchor may receive the record twice (once via
+     * emitInProcess's own §2.6.1 queue, once via the fan-out); duplicate
+     * submission is idempotent-safe per §2.6.1 step 6 (the log returns the
+     * existing proof bundle for an already-committed record_hash).
+     * §5.8-safe: every failure degrades into a warning on the result.
+     */
+    async function fanOutToAnchors(result) {
+        if (result.record_hash === null)
+            return;
+        try {
+            const fan = getFanout();
+            const posture = {
+                effective_anchor_count: fan.posture.effective_anchor_count,
+                used_default_set: fan.posture.used_default_set,
+                warned: fan.posture.warn,
+            };
+            result.anchor_posture = posture;
+            // The freshly-written mirror tail is the expected match: emitInProcess
+            // mirrors the signed record before returning.
+            const mirrorPath = process.env['ATRIB_MIRROR_FILE'];
+            const record = mirrorPath !== undefined && mirrorPath !== ''
+                ? await readMirrorTail({
+                    path: mirrorPath,
+                    ...(result.context_id !== null ? { contextId: result.context_id } : {}),
+                })
+                : null;
+            if (record === null || recordHashRef(record) !== result.record_hash) {
+                result.warnings.push('atrib: anchor fan-out skipped — signed record not found at the mirror tail (ATRIB_MIRROR_FILE)');
+                return;
+            }
+            fan.submitToAnchors(record);
+        }
+        catch (error) {
+            result.warnings.push(`atrib: anchor fan-out failed: ${String(error)}`);
+        }
+    }
+    async function recall(query) {
+        const shape = shapeOf(query);
+        const tool = SHAPE_TO_TOOL[shape];
+        if (tool === undefined) {
+            throw new TypeError(`atrib: unknown recall shape: ${String(shape)}`);
+        }
+        const args = toToolArgs(query);
+        if (shape === 'session_chain' || shape === 'orphans') {
+            if (args['context_id'] === undefined) {
+                const contextId = defaultContextId();
+                if (contextId !== undefined)
+                    args['context_id'] = contextId;
+            }
+        }
+        const warnings = [];
+        if (daemon) {
+            const outcome = await daemon.callTool(tool, args);
+            if (outcome.ok) {
+                const result = {
+                    shape,
+                    via: 'daemon',
+                    data: outcome.value,
+                    warnings,
+                };
+                return outcome.attribution !== undefined
+                    ? { ...result, attribution_receipt: outcome.attribution }
+                    : result;
+            }
+            warnings.push(`atrib: daemon recall (${tool}) failed: ${outcome.reason}`);
+            if (daemonMode === 'require') {
+                return { shape, via: 'none', data: null, warnings };
+            }
+        }
+        try {
+            if (shape === 'history') {
+                const mod = await loadRecallModule();
+                if (mod === null) {
+                    warnings.push("atrib: in-process history fallback unavailable — install the optional peer '@atrib/recall'");
+                    return { shape, via: 'none', data: null, warnings };
+                }
+                const data = await mod.recall(args);
+                return { shape, via: 'in-process', data: data, warnings };
+            }
+            if (shape === 'verify') {
+                const mod = await loadVerifyModule();
+                if (mod === null) {
+                    warnings.push("atrib: in-process verify fallback unavailable — install the optional peer '@atrib/verify-mcp'");
+                    return { shape, via: 'none', data: null, warnings };
+                }
+                const data = await mod.handleAtribVerify(args);
+                return { shape, via: 'in-process', data: data, warnings };
+            }
+        }
+        catch (error) {
+            warnings.push(`atrib: in-process recall (${shape}) failed: ${String(error)}`);
+            return { shape, via: 'none', data: null, warnings };
+        }
+        warnings.push(`atrib: recall shape '${shape}' has no in-process fallback in @atrib/sdk v0; start the primitives runtime or use the ${tool} tool directly`);
+        return { shape, via: 'none', data: null, warnings };
+    }
+    return {
+        attest,
+        recall,
+        flushAnchors: async () => {
+            if (fanout)
+                await fanout.flush();
+        },
+        close: async () => {
+            if (daemon)
+                await daemon.close();
+        },
+    };
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,aAAa,EAAE,UAAU,EAAoB,MAAM,aAAa,CAAA;AACzE,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,mBAAmB,GAEpB,MAAM,YAAY,CAAA;AACnB,OAAO,EACL,0BAA0B,EAC1B,aAAa,GAKd,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAA0B,MAAM,aAAa,CAAA;AACxF,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EACL,aAAa,EACb,OAAO,EACP,UAAU,GAGX,MAAM,aAAa,CAAA;AA0BpB,IAAI,mBAAmB,GAAwC,IAAI,CAAA;AACnE,SAAS,gBAAgB;IACvB,mBAAmB,KAAK,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAClD,CAAC,GAAG,EAAE,EAAE,CAAC,GAA8B,EACvC,GAAG,EAAE,CAAC,IAAI,CACX,CAAA;IACD,OAAO,mBAAmB,CAAA;AAC5B,CAAC;AAED,IAAI,mBAAmB,GAAwC,IAAI,CAAA;AACnE,SAAS,gBAAgB;IACvB,mBAAmB,KAAK,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,CACtD,CAAC,GAAG,EAAE,EAAE,CAAC,GAA8B,EACvC,GAAG,EAAE,CAAC,IAAI,CACX,CAAA;IACD,OAAO,mBAAmB,CAAA;AAC5B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,SAA4B,EAAE;IAC9D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,QAAQ,CAAA;IAClD,MAAM,MAAM,GACV,UAAU,KAAK,KAAK;QAClB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE;YAC9B,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,KAAK,IAAI;SACzD,CAAC,CAAA;IACR,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,gBAAgB,CAAA;IACpD,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAA;IAC5E,MAAM,cAAc,GAAG,SAAS,CAAC,QAAQ,CAAA;IACzC,MAAM,WAAW,GAAG,SAAS,CAAC,kBAAkB,CAAA;IAEhD,gEAAgE;IAChE,mEAAmE;IACnE,+BAA+B;IAC/B,IAAI,MAAM,GAAwB,IAAI,CAAA;IACtC,MAAM,SAAS,GAAG,GAAiB,EAAE;QACnC,MAAM,KAAK,kBAAkB,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAA;QAC3D,OAAO,MAAM,CAAA;IACf,CAAC,CAAA;IAED,wEAAwE;IACxE,yEAAyE;IACzE,IAAI,UAAU,GAAuC,IAAI,CAAA;IACzD,MAAM,gBAAgB,GAAG,GAAgC,EAAE;QACzD,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;YACxD,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,CAAA;QAC5C,CAAC;QACD,UAAU,KAAK,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACnD,OAAO,CAAC,IAAI,CAAC,iCAAiC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YAC9D,OAAO,IAAI,CAAA;QACb,CAAC,CAAC,CAAA;QACF,OAAO,UAAU,CAAA;IACnB,CAAC,CAAA;IAED,MAAM,gBAAgB,GAAG,GAAuB,EAAE,CAChD,MAAM,CAAC,SAAS,IAAI,mBAAmB,EAAE,CAAA;IAE3C,KAAK,UAAU,MAAM,CAAC,KAAkB;QACtC,iEAAiE;QACjE,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAA;QACrD,MAAM,QAAQ,GAAG,CAAC,GAAG,cAAc,CAAC,CAAA;QAEpC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YACnD,MAAM,WAAW,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAA;YAChE,MAAM,UAAU,GACd,OAAO,CAAC,EAAE,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI;gBACvE,CAAC,CAAE,OAAO,CAAC,KAAwB;gBACnC,CAAC,CAAC,IAAI,CAAA;YACV,oEAAoE;YACpE,kEAAkE;YAClE,sCAAsC;YACtC,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,UAAU,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;gBACtE,MAAM,MAAM,GAAG,0BAA0B,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAA;gBACzE,OAAO,WAAW,KAAK,SAAS;oBAC9B,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,mBAAmB,EAAE,WAAW,EAAE;oBACjD,CAAC,CAAC,MAAM,CAAA;YACZ,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,EAAE;gBACvB,CAAC,CAAC,sDAAsD;gBACxD,CAAC,CAAC,OAAO,CAAC,MAAM,CAAA;YAClB,QAAQ,CAAC,IAAI,CAAC,gCAAgC,MAAM,EAAE,CAAC,CAAA;YACvD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,OAAO;oBACL,WAAW,EAAE,IAAI;oBACjB,UAAU,EAAE,IAAI;oBAChB,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE,IAAI;oBACrB,GAAG,EAAE,MAAM;oBACX,QAAQ;iBACT,CAAA;YACH,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,gBAAgB,EAAE,CAAA;QACpC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,QAAQ,CAAC,IAAI,CACX,2FAA2F,CAC5F,CAAA;YACD,OAAO;gBACL,WAAW,EAAE,IAAI;gBACjB,UAAU,EAAE,IAAI;gBAChB,SAAS,EAAE,IAAI;gBACf,eAAe,EAAE,IAAI;gBACrB,GAAG,EAAE,MAAM;gBACX,QAAQ;aACT,CAAA;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE;gBACvC,GAAG;gBACH,QAAQ;gBACR,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtD,CAAC,CAAA;YACF,MAAM,MAAM,GAAG,0BAA0B,CAAC,MAAwB,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAA;YAC3F,MAAM,eAAe,CAAC,MAAM,CAAC,CAAA;YAC7B,OAAO,MAAM,CAAA;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,qEAAqE;YACrE,iCAAiC;YACjC,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QACjE,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,UAAU,eAAe,CAAC,MAAoB;QACjD,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI;YAAE,OAAM;QACvC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,SAAS,EAAE,CAAA;YACvB,MAAM,OAAO,GAAwB;gBACnC,sBAAsB,EAAE,GAAG,CAAC,OAAO,CAAC,sBAAsB;gBAC1D,gBAAgB,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB;gBAC9C,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI;aACzB,CAAA;YACD,MAAM,CAAC,cAAc,GAAG,OAAO,CAAA;YAE/B,uEAAuE;YACvE,8CAA8C;YAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;YACnD,MAAM,MAAM,GACV,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,EAAE;gBAC3C,CAAC,CAAC,MAAM,cAAc,CAAC;oBACnB,IAAI,EAAE,UAAU;oBAChB,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxE,CAAC;gBACJ,CAAC,CAAC,IAAI,CAAA;YACV,IAAI,MAAM,KAAK,IAAI,IAAI,aAAa,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;gBACpE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAClB,gGAAgG,CACjG,CAAA;gBACD,OAAM;YACR,CAAC;YACD,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,CAAA;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,iCAAiC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACxE,CAAC;IACH,CAAC;IAED,KAAK,UAAU,MAAM,CAAc,KAAkB;QACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAA;QACjC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,SAAS,CAAC,gCAAgC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACtE,CAAC;QACD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;QAC9B,IAAI,KAAK,KAAK,eAAe,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACrD,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,SAAS,EAAE,CAAC;gBACrC,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAA;gBACpC,IAAI,SAAS,KAAK,SAAS;oBAAE,IAAI,CAAC,YAAY,CAAC,GAAG,SAAS,CAAA;YAC7D,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAa,EAAE,CAAA;QAE7B,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YACjD,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,MAAM,GAAqB;oBAC/B,KAAK;oBACL,GAAG,EAAE,QAAQ;oBACb,IAAI,EAAE,OAAO,CAAC,KAAU;oBACxB,QAAQ;iBACT,CAAA;gBACD,OAAO,OAAO,CAAC,WAAW,KAAK,SAAS;oBACtC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,mBAAmB,EAAE,OAAO,CAAC,WAAW,EAAE;oBACzD,CAAC,CAAC,MAAM,CAAA;YACZ,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,yBAAyB,IAAI,aAAa,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;YACzE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;YACrD,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,GAAG,GAAG,MAAM,gBAAgB,EAAE,CAAA;gBACpC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;oBACjB,QAAQ,CAAC,IAAI,CACX,4FAA4F,CAC7F,CAAA;oBACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;gBACrD,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;gBACnC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,IAAS,EAAE,QAAQ,EAAE,CAAA;YAChE,CAAC;YACD,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACvB,MAAM,GAAG,GAAG,MAAM,gBAAgB,EAAE,CAAA;gBACpC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;oBACjB,QAAQ,CAAC,IAAI,CACX,+FAA+F,CAChG,CAAA;oBACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;gBACrD,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;gBAC9C,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,IAAS,EAAE,QAAQ,EAAE,CAAA;YAChE,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC,6BAA6B,KAAK,aAAa,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YAC7E,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;QACrD,CAAC;QAED,QAAQ,CAAC,IAAI,CACX,wBAAwB,KAAK,0FAA0F,IAAI,gBAAgB,CAC5I,CAAA;QACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;IACrD,CAAC;IAED,OAAO;QACL,MAAM;QACN,MAAM;QACN,YAAY,EAAE,KAAK,IAAI,EAAE;YACvB,IAAI,MAAM;gBAAE,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QAClC,CAAC;QACD,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,IAAI,MAAM;gBAAE,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QAClC,CAAC;KACF,CAAA;AACH,CAAC"}