@bitspark/archon-sdk 0.13.0 → 0.14.0

package/dist/src/enroll-token.d.ts

@@ -0,0 +1,91 @@
+import { type EnrollRequest } from "./enroll.js";
+/** The first byte of an intent in format 1. */
+export declare const ENROLL_INTENT_FORMAT = 1;
+/** The shortest blind: 128 bits, so the digest cannot confirm a guess. */
+export declare const ENROLL_MIN_BLIND_SIZE = 16;
+/** The longest blind. */
+export declare const ENROLL_MAX_BLIND_SIZE = 64;
+/** The longest account id, account name, purpose or restriction, in bytes. */
+export declare const ENROLL_MAX_TEXT_SIZE = 255;
+/** The most restrictions an intent holds. */
+export declare const ENROLL_MAX_RESTRICTIONS = 32;
+/** The challenge token's prefix. */
+export declare const ENROLL_CHALLENGE_PREFIX = "archon-enroll-challenge-1:";
+/** The proof token's prefix. */
+export declare const ENROLL_PROOF_PREFIX = "archon-enroll-proof-1:";
+/** The longest token, in bytes of text, surrounding whitespace excluded. */
+export declare const ENROLL_MAX_TOKEN_SIZE = 65536;
+/** The longest nonce a challenge token carries. */
+export declare const ENROLL_MAX_NONCE_SIZE = 255;
+/** The longest intent a challenge token carries. */
+export declare const ENROLL_MAX_INTENT_SIZE = 65535;
+/** The possession signature's length. */
+export declare const ENROLL_PROOF_SIZE = 64;
+/** 9999-12-31T23:59:59Z in Unix seconds: every lane renders it, and it fits in 53 bits. */
+export declare const ENROLL_MAX_DEADLINE = 253402300799;
+/**
+ * An enrollment intent in format 1. The service builds it from its own validated records; the
+ * command decodes it and shows it. Every text field is 1..=255 bytes of UTF-8 with no
+ * display-unsafe code point (`displayUnsafe`).
+ */
+export interface EnrollIntent {
+    /** 16..=64 bytes from a CSPRNG, fresh for every intent. */
+    blind: Uint8Array;
+    /** The service's identifier for the account. */
+    accountId: string;
+    /** The account's unique name, such as its sign-in handle: never a free display name. */
+    accountName: string;
+    /** The binding's purpose. */
+    purpose: string;
+    /** 0..=32 lines, in order. */
+    restrictions: string[];
+}
+/** The challenge token's content. `intent` is the exact intent bytes; the token's codec checks
+ *  only its own fields, and `enrollChallengeRequest` decodes the intent. */
+export interface EnrollChallenge {
+    audience: string;
+    /** 1..=255 bytes. */
+    transaction: Uint8Array;
+    /** 16..=255 bytes. */
+    nonce: Uint8Array;
+    /** The key the record enrolls. */
+    newKey: Uint8Array;
+    /** 1..=65535 bytes. */
+    intent: Uint8Array;
+    /** The record's expiry in whole Unix seconds, 0..=ENROLL_MAX_DEADLINE. */
+    deadline: number;
+}
+/** The proof token's content: what the command prints and the service reads back. */
+export interface EnrollProof {
+    /** 1..=255 bytes. */
+    transaction: Uint8Array;
+    /** The key that proved. */
+    newKey: Uint8Array;
+    /** The possession signature, 64 bytes. */
+    proof: Uint8Array;
+}
+/** Writes `intent` in format 1, refusing any field outside its bounds. */
+export declare function encodeEnrollIntent(intent: EnrollIntent): Uint8Array;
+/** Reads an intent in format 1. Refuses an unknown format, any field outside its bounds,
+ *  display-unsafe or non-UTF-8 text, and any byte left over. */
+export declare function decodeEnrollIntent(bytes: Uint8Array): EnrollIntent;
+/** Writes `challenge` as a challenge token. */
+export declare function encodeEnrollChallenge(challenge: EnrollChallenge): string;
+/** Reads a challenge token. Surrounding tabs, line feeds, carriage returns and spaces are
+ *  ignored; anything else that is not exactly the prefix and lowercase hex of the fields, with
+ *  no byte left over, is refused. */
+export declare function decodeEnrollChallenge(text: string): EnrollChallenge;
+/**
+ * The enrollment request a challenge token yields (docs/enroll.md §3): the token's nonce,
+ * transaction and new key, the intent's purpose, and SHA-256 of the token's intent bytes, with
+ * the decoded intent. Refuses an intent that is not format 1. It is the one derivation of what
+ * an `archon enroll` proof binds, so what the command shows is what it binds.
+ */
+export declare function enrollChallengeRequest(challenge: EnrollChallenge): {
+    request: EnrollRequest;
+    intent: EnrollIntent;
+};
+/** Writes `proof` as a proof token. */
+export declare function encodeEnrollProof(proof: EnrollProof): string;
+/** Reads a proof token, under `decodeEnrollChallenge`'s rules. */
+export declare function decodeEnrollProof(text: string): EnrollProof;

package/dist/src/enroll-token.js

@@ -0,0 +1,314 @@
+// `archon enroll`'s formats (docs/enroll.md §2–§3, ADR 0013): the intent in format 1, which a
+// service builds and the command renders, and the two tokens a person carries by hand between
+// the signed-in page and the command. The proof never reads an intent; these are for the
+// command, which must show the person which account a key joins before it signs.
+//
+// Pinned by vectors/enroll.json.
+import { PUBLIC_KEY_SIZE } from "@bitspark/archon";
+import { sha256 } from "@noble/hashes/sha2.js";
+import { ENROLL_MAX_TRANSACTION_SIZE } from "./enroll.js";
+import { displayUnsafe } from "./login-display.js";
+import { MIN_NONCE_SIZE } from "./possession.js";
+/** The first byte of an intent in format 1. */
+export const ENROLL_INTENT_FORMAT = 0x01;
+/** The shortest blind: 128 bits, so the digest cannot confirm a guess. */
+export const ENROLL_MIN_BLIND_SIZE = 16;
+/** The longest blind. */
+export const ENROLL_MAX_BLIND_SIZE = 64;
+/** The longest account id, account name, purpose or restriction, in bytes. */
+export const ENROLL_MAX_TEXT_SIZE = 255;
+/** The most restrictions an intent holds. */
+export const ENROLL_MAX_RESTRICTIONS = 32;
+/** The challenge token's prefix. */
+export const ENROLL_CHALLENGE_PREFIX = "archon-enroll-challenge-1:";
+/** The proof token's prefix. */
+export const ENROLL_PROOF_PREFIX = "archon-enroll-proof-1:";
+/** The longest token, in bytes of text, surrounding whitespace excluded. */
+export const ENROLL_MAX_TOKEN_SIZE = 65536;
+/** The longest nonce a challenge token carries. */
+export const ENROLL_MAX_NONCE_SIZE = 255;
+/** The longest intent a challenge token carries. */
+export const ENROLL_MAX_INTENT_SIZE = 0xffff;
+/** The possession signature's length. */
+export const ENROLL_PROOF_SIZE = 64;
+/** 9999-12-31T23:59:59Z in Unix seconds: every lane renders it, and it fits in 53 bits. */
+export const ENROLL_MAX_DEADLINE = 253402300799;
+const utf8 = new TextEncoder();
+// fatal: refuse what is not UTF-8. ignoreBOM: KEEP a leading U+FEFF, so the display check
+// refuses it as the other lanes do, instead of the decoder silently dropping it.
+const utf8Strict = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true });
+/** Writes `intent` in format 1, refusing any field outside its bounds. */
+export function encodeEnrollIntent(intent) {
+    checkBlind(intent.blind);
+    const fields = [
+        shownBytes("account id", intent.accountId),
+        shownBytes("account name", intent.accountName),
+        shownBytes("purpose", intent.purpose),
+    ];
+    if (intent.restrictions.length > ENROLL_MAX_RESTRICTIONS) {
+        throw new Error(`enroll: ${intent.restrictions.length} restrictions, want at most ${ENROLL_MAX_RESTRICTIONS}`);
+    }
+    const restrictions = intent.restrictions.map((r, n) => shownBytes(`restriction ${n}`, r));
+    const out = [ENROLL_INTENT_FORMAT];
+    pushField(out, intent.blind);
+    for (const f of fields)
+        pushField(out, f);
+    out.push(restrictions.length);
+    for (const r of restrictions)
+        pushField(out, r);
+    return Uint8Array.from(out);
+}
+/** Reads an intent in format 1. Refuses an unknown format, any field outside its bounds,
+ *  display-unsafe or non-UTF-8 text, and any byte left over. */
+export function decodeEnrollIntent(bytes) {
+    const r = new Reader(bytes);
+    const format = r.take(1)[0];
+    if (format !== ENROLL_INTENT_FORMAT) {
+        throw new Error(`enroll: intent format 0x${hex2(format)}, want 0x${hex2(ENROLL_INTENT_FORMAT)}`);
+    }
+    const blind = r.field().slice();
+    checkBlind(blind);
+    const accountId = shownText(r, "account id");
+    const accountName = shownText(r, "account name");
+    const purpose = shownText(r, "purpose");
+    const count = r.take(1)[0];
+    if (count > ENROLL_MAX_RESTRICTIONS) {
+        throw new Error(`enroll: ${count} restrictions, want at most ${ENROLL_MAX_RESTRICTIONS}`);
+    }
+    const restrictions = [];
+    for (let n = 0; n < count; n++)
+        restrictions.push(shownText(r, `restriction ${n}`));
+    r.end();
+    return { blind, accountId, accountName, purpose, restrictions };
+}
+/** Writes `challenge` as a challenge token. */
+export function encodeEnrollChallenge(challenge) {
+    const audience = checkChallenge(challenge);
+    const out = [];
+    pushField(out, audience);
+    pushField(out, challenge.transaction);
+    pushField(out, challenge.nonce);
+    out.push(...challenge.newKey);
+    pushField(out, challenge.intent);
+    const hi = Math.floor(challenge.deadline / 0x1_0000_0000);
+    const lo = challenge.deadline % 0x1_0000_0000;
+    out.push((hi >>> 24) & 0xff, (hi >>> 16) & 0xff, (hi >>> 8) & 0xff, hi & 0xff);
+    out.push((lo >>> 24) & 0xff, (lo >>> 16) & 0xff, (lo >>> 8) & 0xff, lo & 0xff);
+    const text = ENROLL_CHALLENGE_PREFIX + toHex(Uint8Array.from(out));
+    if (text.length > ENROLL_MAX_TOKEN_SIZE) {
+        throw new Error(`enroll: challenge token is ${text.length} bytes, over ${ENROLL_MAX_TOKEN_SIZE}`);
+    }
+    return text;
+}
+/** Reads a challenge token. Surrounding tabs, line feeds, carriage returns and spaces are
+ *  ignored; anything else that is not exactly the prefix and lowercase hex of the fields, with
+ *  no byte left over, is refused. */
+export function decodeEnrollChallenge(text) {
+    const r = new Reader(unwrap(text, ENROLL_CHALLENGE_PREFIX));
+    let audience;
+    try {
+        audience = utf8Strict.decode(r.field());
+    }
+    catch {
+        throw new Error("enroll: audience is not valid UTF-8");
+    }
+    const transaction = r.field().slice();
+    const nonce = r.field().slice();
+    const newKey = r.take(PUBLIC_KEY_SIZE).slice();
+    const intent = r.field().slice();
+    const d = r.take(8);
+    r.end();
+    const hi = ((d[0] << 24) | (d[1] << 16) | (d[2] << 8) | d[3]) >>> 0;
+    const lo = ((d[4] << 24) | (d[5] << 16) | (d[6] << 8) | d[7]) >>> 0;
+    if (hi > Math.floor(ENROLL_MAX_DEADLINE / 0x1_0000_0000))
+        throw new Error("enroll: deadline is after 9999-12-31T23:59:59Z");
+    const challenge = { audience, transaction, nonce, newKey, intent, deadline: hi * 0x1_0000_0000 + lo };
+    checkChallenge(challenge);
+    return challenge;
+}
+/**
+ * The enrollment request a challenge token yields (docs/enroll.md §3): the token's nonce,
+ * transaction and new key, the intent's purpose, and SHA-256 of the token's intent bytes, with
+ * the decoded intent. Refuses an intent that is not format 1. It is the one derivation of what
+ * an `archon enroll` proof binds, so what the command shows is what it binds.
+ */
+export function enrollChallengeRequest(challenge) {
+    checkChallenge(challenge);
+    const intent = decodeEnrollIntent(challenge.intent);
+    return {
+        request: {
+            nonce: challenge.nonce.slice(),
+            transaction: challenge.transaction.slice(),
+            purpose: intent.purpose,
+            newKey: challenge.newKey.slice(),
+            intentDigest: sha256(challenge.intent),
+        },
+        intent,
+    };
+}
+/** Writes `proof` as a proof token. */
+export function encodeEnrollProof(proof) {
+    checkProof(proof);
+    const out = [];
+    pushField(out, proof.transaction);
+    out.push(...proof.newKey, ...proof.proof);
+    return ENROLL_PROOF_PREFIX + toHex(Uint8Array.from(out));
+}
+/** Reads a proof token, under `decodeEnrollChallenge`'s rules. */
+export function decodeEnrollProof(text) {
+    const r = new Reader(unwrap(text, ENROLL_PROOF_PREFIX));
+    const proof = { transaction: r.field().slice(), newKey: r.take(PUBLIC_KEY_SIZE).slice(), proof: r.take(ENROLL_PROOF_SIZE).slice() };
+    r.end();
+    checkProof(proof);
+    return proof;
+}
+/** Checks a challenge's fields; returns the audience's UTF-8 bytes. The audience rule is
+ *  stricter than the binding's (C0 and DEL only): a command that refuses a token prints its
+ *  audience, so nothing display-unsafe may get that far. */
+function checkChallenge(c) {
+    const audience = utf8.encode(c.audience);
+    if (!isWellFormed(c.audience) || audience.length === 0 || audience.length > 0xffff) {
+        throw new Error(`enroll: audience is ${audience.length} bytes, want 1..=65535 of UTF-8`);
+    }
+    refuseUnsafe("audience", c.audience);
+    if (c.transaction.length === 0 || c.transaction.length > ENROLL_MAX_TRANSACTION_SIZE) {
+        throw new Error(`enroll: transaction is ${c.transaction.length} bytes, want 1..=${ENROLL_MAX_TRANSACTION_SIZE}`);
+    }
+    if (c.nonce.length < MIN_NONCE_SIZE || c.nonce.length > ENROLL_MAX_NONCE_SIZE) {
+        throw new Error(`enroll: nonce is ${c.nonce.length} bytes, want ${MIN_NONCE_SIZE}..=${ENROLL_MAX_NONCE_SIZE}`);
+    }
+    if (c.newKey.length !== PUBLIC_KEY_SIZE) {
+        throw new Error(`enroll: new key is ${c.newKey.length} bytes, want ${PUBLIC_KEY_SIZE}`);
+    }
+    if (c.intent.length === 0 || c.intent.length > ENROLL_MAX_INTENT_SIZE) {
+        throw new Error(`enroll: intent is ${c.intent.length} bytes, want 1..=${ENROLL_MAX_INTENT_SIZE}`);
+    }
+    if (!Number.isSafeInteger(c.deadline) || c.deadline < 0 || c.deadline > ENROLL_MAX_DEADLINE) {
+        throw new Error("enroll: deadline must be whole seconds from 1970 to 9999-12-31T23:59:59Z");
+    }
+    return audience;
+}
+function checkProof(p) {
+    if (p.transaction.length === 0 || p.transaction.length > ENROLL_MAX_TRANSACTION_SIZE) {
+        throw new Error(`enroll: transaction is ${p.transaction.length} bytes, want 1..=${ENROLL_MAX_TRANSACTION_SIZE}`);
+    }
+    if (p.newKey.length !== PUBLIC_KEY_SIZE)
+        throw new Error(`enroll: new key is ${p.newKey.length} bytes, want ${PUBLIC_KEY_SIZE}`);
+    if (p.proof.length !== ENROLL_PROOF_SIZE)
+        throw new Error(`enroll: proof is ${p.proof.length} bytes, want ${ENROLL_PROOF_SIZE}`);
+}
+function checkBlind(blind) {
+    if (blind.length < ENROLL_MIN_BLIND_SIZE || blind.length > ENROLL_MAX_BLIND_SIZE) {
+        throw new Error(`enroll: blind is ${blind.length} bytes, want ${ENROLL_MIN_BLIND_SIZE}..=${ENROLL_MAX_BLIND_SIZE}`);
+    }
+}
+/** The rule for text the command shows: 1..=255 bytes of well-formed UTF-8 with no
+ *  display-unsafe code point. Returns the UTF-8 bytes. The code point is named, never echoed. */
+function shownBytes(what, s) {
+    if (!isWellFormed(s))
+        throw new Error(`enroll: ${what} is not well-formed UTF-16 (a lone surrogate is not UTF-8)`);
+    const bytes = utf8.encode(s);
+    if (bytes.length === 0 || bytes.length > ENROLL_MAX_TEXT_SIZE) {
+        throw new Error(`enroll: ${what} is ${bytes.length} bytes, want 1..=${ENROLL_MAX_TEXT_SIZE}`);
+    }
+    refuseUnsafe(what, s);
+    return bytes;
+}
+function shownText(r, what) {
+    let s;
+    try {
+        s = utf8Strict.decode(r.field());
+    }
+    catch {
+        throw new Error(`enroll: ${what} is not valid UTF-8`);
+    }
+    shownBytes(what, s);
+    return s;
+}
+function refuseUnsafe(what, s) {
+    for (const ch of s) {
+        const cp = ch.codePointAt(0);
+        if (displayUnsafe(cp)) {
+            throw new Error(`enroll: ${what} carries a code point that cannot be shown, U+${cp.toString(16).toUpperCase().padStart(4, "0")}`);
+        }
+    }
+}
+/** Strips the surrounding whitespace the token rules allow and decodes the hex after `prefix`:
+ *  lowercase only, even length, nothing else. */
+function unwrap(text, prefix) {
+    let i = 0;
+    let j = text.length;
+    const ws = (c) => c === "\t" || c === "\n" || c === "\r" || c === " ";
+    while (i < j && ws(text[i]))
+        i++;
+    while (j > i && ws(text[j - 1]))
+        j--;
+    const t = text.slice(i, j);
+    const size = utf8.encode(t).length;
+    if (size > ENROLL_MAX_TOKEN_SIZE)
+        throw new Error(`enroll: token is ${size} bytes, over ${ENROLL_MAX_TOKEN_SIZE}`);
+    if (!t.startsWith(prefix))
+        throw new Error(`enroll: not a token beginning ${JSON.stringify(prefix)}`);
+    const h = t.slice(prefix.length);
+    if (h.length % 2 !== 0)
+        throw new Error("enroll: token hex has an odd length");
+    if (!/^[0-9a-f]*$/.test(h))
+        throw new Error("enroll: token is not lowercase hex");
+    const out = new Uint8Array(h.length / 2);
+    for (let k = 0; k < out.length; k++)
+        out[k] = Number.parseInt(h.slice(k * 2, k * 2 + 2), 16);
+    return out;
+}
+function toHex(b) {
+    return Array.from(b, (x) => x.toString(16).padStart(2, "0")).join("");
+}
+function hex2(n) {
+    return n.toString(16).padStart(2, "0");
+}
+function pushField(out, field) {
+    out.push((field.length >> 8) & 0xff, field.length & 0xff);
+    for (const b of field)
+        out.push(b);
+}
+function isWellFormed(s) {
+    const native = s.isWellFormed;
+    if (typeof native === "function")
+        return native.call(s);
+    for (let i = 0; i < s.length; i++) {
+        const c = s.charCodeAt(i);
+        if (c >= 0xd800 && c <= 0xdbff) {
+            const d = s.charCodeAt(i + 1);
+            if (!(d >= 0xdc00 && d <= 0xdfff))
+                return false;
+            i++;
+        }
+        else if (c >= 0xdc00 && c <= 0xdfff) {
+            return false;
+        }
+    }
+    return true;
+}
+/** Takes length-prefixed fields off a byte array, refusing anything that runs past it. */
+class Reader {
+    bytes;
+    #pos = 0;
+    constructor(bytes) {
+        this.bytes = bytes;
+    }
+    take(n) {
+        if (n > this.bytes.length - this.#pos)
+            throw new Error("enroll: truncated");
+        const out = this.bytes.subarray(this.#pos, this.#pos + n);
+        this.#pos += n;
+        return out;
+    }
+    field() {
+        const n = this.take(2);
+        return this.take((n[0] << 8) | n[1]);
+    }
+    end() {
+        if (this.#pos !== this.bytes.length)
+            throw new Error(`enroll: ${this.bytes.length - this.#pos} bytes left over`);
+    }
+}
+//# sourceMappingURL=enroll-token.js.map

package/dist/src/enroll-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enroll-token.js","sourceRoot":"","sources":["../../src/enroll-token.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,8FAA8F;AAC9F,yFAAyF;AACzF,iFAAiF;AACjF,EAAE;AACF,iCAAiC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE/C,OAAO,EAAE,2BAA2B,EAAsB,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,+CAA+C;AAC/C,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AACzC,0EAA0E;AAC1E,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACxC,yBAAyB;AACzB,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACxC,8EAA8E;AAC9E,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACxC,6CAA6C;AAC7C,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAC1C,oCAAoC;AACpC,MAAM,CAAC,MAAM,uBAAuB,GAAG,4BAA4B,CAAC;AACpE,gCAAgC;AAChC,MAAM,CAAC,MAAM,mBAAmB,GAAG,wBAAwB,CAAC;AAC5D,4EAA4E;AAC5E,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAC3C,mDAAmD;AACnD,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AACzC,oDAAoD;AACpD,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAC7C,yCAAyC;AACzC,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,2FAA2F;AAC3F,MAAM,CAAC,MAAM,mBAAmB,GAAG,YAAY,CAAC;AA8ChD,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;AAC/B,0FAA0F;AAC1F,iFAAiF;AACjF,MAAM,UAAU,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAE9E,0EAA0E;AAC1E,MAAM,UAAU,kBAAkB,CAAC,MAAoB;IACrD,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzB,MAAM,MAAM,GAAG;QACb,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC;QAC1C,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC;QAC9C,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC;KACtC,CAAC;IACF,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,CAAC,YAAY,CAAC,MAAM,+BAA+B,uBAAuB,EAAE,CAAC,CAAC;IACjH,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1F,MAAM,GAAG,GAAa,CAAC,oBAAoB,CAAC,CAAC;IAC7C,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC1C,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,YAAY;QAAE,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAChD,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED;gEACgE;AAChE,MAAM,UAAU,kBAAkB,CAAC,KAAiB;IAClD,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;IAC7B,IAAI,MAAM,KAAK,oBAAoB,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC;IAChC,UAAU,CAAC,KAAK,CAAC,CAAC;IAClB,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,SAAS,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,uBAAuB,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,+BAA+B,uBAAuB,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE;QAAE,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC;IACpF,CAAC,CAAC,GAAG,EAAE,CAAC;IACR,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;AAClE,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,qBAAqB,CAAC,SAA0B;IAC9D,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACzB,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;IACtC,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;IAChC,GAAG,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9B,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,GAAG,aAAa,CAAC,CAAC;IAC1D,MAAM,EAAE,GAAG,SAAS,CAAC,QAAQ,GAAG,aAAa,CAAC;IAC9C,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;IAC/E,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,uBAAuB,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACnE,IAAI,IAAI,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,MAAM,gBAAgB,qBAAqB,EAAE,CAAC,CAAC;IACpG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;qCAEqC;AACrC,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC,CAAC;IAC5D,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,EAAE,CAAC;IAC/C,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC;IACjC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC,CAAC,GAAG,EAAE,CAAC;IACR,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;IACxE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;IACxE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,GAAG,aAAa,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC5H,MAAM,SAAS,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,aAAa,GAAG,EAAE,EAAE,CAAC;IACtG,cAAc,CAAC,SAAS,CAAC,CAAC;IAC1B,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAA0B;IAC/D,cAAc,CAAC,SAAS,CAAC,CAAC;IAC1B,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACpD,OAAO;QACL,OAAO,EAAE;YACP,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE;YAC9B,WAAW,EAAE,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE;YAC1C,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE;YAChC,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;SACvC;QACD,MAAM;KACP,CAAC;AACJ,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,iBAAiB,CAAC,KAAkB;IAClD,UAAU,CAAC,KAAK,CAAC,CAAC;IAClB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAClC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1C,OAAO,mBAAmB,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;IACpI,CAAC,CAAC,GAAG,EAAE,CAAC;IACR,UAAU,CAAC,KAAK,CAAC,CAAC;IAClB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;4DAE4D;AAC5D,SAAS,cAAc,CAAC,CAAkB;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,CAAC,MAAM,iCAAiC,CAAC,CAAC;IAC3F,CAAC;IACD,YAAY,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,2BAA2B,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,WAAW,CAAC,MAAM,oBAAoB,2BAA2B,EAAE,CAAC,CAAC;IACnH,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,cAAc,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,KAAK,CAAC,MAAM,gBAAgB,cAAc,MAAM,qBAAqB,EAAE,CAAC,CAAC;IACjH,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,MAAM,CAAC,MAAM,gBAAgB,eAAe,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,MAAM,CAAC,MAAM,oBAAoB,sBAAsB,EAAE,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,GAAG,mBAAmB,EAAE,CAAC;QAC5F,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,UAAU,CAAC,CAAc;IAChC,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,2BAA2B,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,WAAW,CAAC,MAAM,oBAAoB,2BAA2B,EAAE,CAAC,CAAC;IACnH,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,MAAM,CAAC,MAAM,gBAAgB,eAAe,EAAE,CAAC,CAAC;IACjI,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,iBAAiB;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,KAAK,CAAC,MAAM,gBAAgB,iBAAiB,EAAE,CAAC,CAAC;AACnI,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACnC,IAAI,KAAK,CAAC,MAAM,GAAG,qBAAqB,IAAI,KAAK,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,CAAC,MAAM,gBAAgB,qBAAqB,MAAM,qBAAqB,EAAE,CAAC,CAAC;IACtH,CAAC;AACH,CAAC;AAED;iGACiG;AACjG,SAAS,UAAU,CAAC,IAAY,EAAE,CAAS;IACzC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,4DAA4D,CAAC,CAAC;IACnH,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,OAAO,KAAK,CAAC,MAAM,oBAAoB,oBAAoB,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACtB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,CAAS,EAAE,IAAY;IACxC,IAAI,CAAS,CAAC;IACd,IAAI,CAAC;QACH,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,qBAAqB,CAAC,CAAC;IACxD,CAAC;IACD,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACpB,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,CAAS;IAC3C,KAAK,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC;QAC9B,IAAI,aAAa,CAAC,EAAE,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,iDAAiD,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACpI,CAAC;IACH,CAAC;AACH,CAAC;AAED;iDACiD;AACjD,SAAS,MAAM,CAAC,IAAY,EAAE,MAAc;IAC1C,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IACpB,MAAM,EAAE,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;QAAE,CAAC,EAAE,CAAC;IAClC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;QAAE,CAAC,EAAE,CAAC;IACtC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,IAAI,GAAG,qBAAqB;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,gBAAgB,qBAAqB,EAAE,CAAC,CAAC;IACnH,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACtG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC/E,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAClF,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7F,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,KAAK,CAAC,CAAa;IAC1B,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,IAAI,CAAC,CAAS;IACrB,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,SAAS,CAAC,GAAa,EAAE,KAAiB;IACjD,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC1D,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,MAAM,MAAM,GAAI,CAAiD,CAAC,YAAY,CAAC;IAC/E,IAAI,OAAO,MAAM,KAAK,UAAU;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9B,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,CAAC;gBAAE,OAAO,KAAK,CAAC;YAChD,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,0FAA0F;AAC1F,MAAM,MAAM;IACD,KAAK,CAAa;IAC3B,IAAI,GAAG,CAAC,CAAC;IACT,YAAY,KAAiB;QAC3B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED,IAAI,CAAC,CAAS;QACZ,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;QACf,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IACzC,CAAC;IAED,GAAG;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,kBAAkB,CAAC,CAAC;IACnH,CAAC;CACF"}

package/dist/src/index.d.ts

@@ -5,4 +5,5 @@ export * from "./login.js";
 export * from "./login-audience.js";
 export * from "./login-display.js";
 export * from "./enroll.js";
+export * from "./enroll-token.js";
 export * from "./request.js";

package/dist/src/index.js

@@ -23,5 +23,6 @@ export * from "./login.js";
 export * from "./login-audience.js";
 export * from "./login-display.js";
 export * from "./enroll.js";
+export * from "./enroll-token.js";
 export * from "./request.js";
 //# sourceMappingURL=index.js.map

package/dist/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,EAAE;AACF,uFAAuF;AACvF,wEAAwE;AACxE,EAAE;AACF,qFAAqF;AACrF,kEAAkE;AAClE,gFAAgF;AAChF,EAAE;AACF,6FAA6F;AAC7F,8FAA8F;AAC9F,wBAAwB;AACxB,EAAE;AACF,+EAA+E;AAC/E,yFAAyF;AACzF,sFAAsF;AACtF,uFAAuF;AACvF,+CAA+C;AAC/C,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,EAAE;AACF,uFAAuF;AACvF,wEAAwE;AACxE,EAAE;AACF,qFAAqF;AACrF,kEAAkE;AAClE,gFAAgF;AAChF,EAAE;AACF,6FAA6F;AAC7F,8FAA8F;AAC9F,wBAAwB;AACxB,EAAE;AACF,+EAA+E;AAC/E,yFAAyF;AACzF,sFAAsF;AACtF,uFAAuF;AACvF,+CAA+C;AAC/C,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bitspark/archon-sdk",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "description": "archon-sdk: proof of possession and the signed envelope, one layer above the identity floor. Deterministic given its inputs; no RNG, no clock, no socket.",
   "license": "Apache-2.0",
   "repository": {
@@ -22,7 +22,7 @@
     "test": "tsc -p tsconfig.json && node --test dist/test/*.test.js"
   },
   "dependencies": {
-    "@bitspark/archon": "^0.13.0",
+    "@bitspark/archon": "^0.14.0",
     "@noble/hashes": "^2.2.0"
   },
   "devDependencies": {