@cef-ai/vault-sdk 4.0.0 → 4.2.0

package/dist/core/grant-doc.d.ts

@@ -1,13 +1,75 @@
 import type { SignedGrant, SignedRoster } from "./types.js";
 /**
- * The schema string carried INSIDE the signed bytes (`authz.GrantSchema`).
- *
- * A v2 changes this string, so a v1 signature can never be replayed as a v2
- * grant — which is why `decodeGrantDoc` refuses any other value instead of
- * handing a v2 document's fields to a v1 reader under a signature that is
- * perfectly valid for the v2 meaning.
+ * The schema string a CEILING-LESS grant carries inside its signed bytes
+ * (`authz.GrantSchemaV1`). Still emitted, still the common case: a grant that
+ * sets no privacy ceiling is encoded at v1, byte for byte as it always was,
+ * so every signature minted before v2 existed goes on verifying.
  */
 export declare const GRANT_SCHEMA = "cere.vault.grant.v1";
+/**
+ * The schema string a ceiling-carrying grant carries (`authz.GrantSchemaV2`).
+ *
+ * A document is v2 if and only if it carries a privacy ceiling. There is no
+ * v2 spelling of "no ceiling" — that is v1, and giving it two spellings is
+ * the ambiguity `NO_GRANT_EXPIRY`'s comment spends a paragraph refusing.
+ *
+ * The version is a FUNCTION of the ceiling rather than an unconditional bump:
+ * bumping it always would change the bytes of every grant, including the
+ * overwhelming majority that sets no ceiling, which is a flag day on every
+ * stored signature. See `canonicalGrantBytesWithCeiling`.
+ */
+export declare const GRANT_SCHEMA_V2 = "cere.vault.grant.v2";
+/**
+ * The most sensitive class of fact a membership may see, when the grant
+ * carries one — Go's `vault.PrivacyCeiling`, reproduced.
+ *
+ * # IT IS NOT A SCOPE LEVEL, AND THE TWO MUST NEVER BE COMPARED
+ *
+ * Level (audit|reader|member) is WHAT a member may do in a place. Privacy is
+ * HOW SENSITIVE a thing is, independent of where it lives. The two enums
+ * share no value, which is what makes a mix-up a refusal rather than a silent
+ * widening: `isValidPrivacyCeiling("member")` is false.
+ *
+ * A BRANDED string for the same reason `GrantExpiry` is one: it sits next to
+ * `expiresAt` in the encoder's parameter list, and two adjacent parameters of
+ * the same underlying kind are the slip that compiles and signs valid bytes
+ * for the wrong document. Use {@link privacyCeiling} to make one.
+ */
+export type PrivacyCeiling = string & {
+    readonly __privacyCeiling: unique symbol;
+};
+/**
+ * The ONE spelling of "no privacy ceiling was ever signed for this
+ * membership" — and it is NOT a synonym for `"public"`.
+ *
+ * It means NOTHING VISIBLE, and that is a decision on the record: a caller
+ * whose ceiling is this sees no memory-graph row at all, because a ceiling
+ * nobody signed is not a ceiling. Picking `"internal"` as the default would
+ * invent an authorisation the vault owner never attested on the axis whose
+ * whole job is disclosure — the same ruling `NO_GRANT_EXPIRY` makes one field
+ * earlier, except that there the failure direction WIDENS an unsigned grant
+ * and here it NARROWS to zero, which is why failing closed is free.
+ *
+ * Selects {@link GRANT_SCHEMA} in the encoder: a grant carrying this is a v1
+ * document, byte for byte.
+ */
+export declare const NO_PRIVACY_CEILING: PrivacyCeiling;
+/**
+ * Every ceiling a grant may carry, least to most sensitive — Go's
+ * `validPrivacyCeilings`. {@link NO_PRIVACY_CEILING} is deliberately ABSENT:
+ * it is a legal decoded state (the document is v1) but never a value a caller
+ * may SET, and admitting `""` at the writer would give the state two
+ * spellings.
+ */
+export declare const PRIVACY_CEILINGS: readonly ["public", "internal", "private", "restricted"];
+/** The literal union of {@link PRIVACY_CEILINGS} — what `privacyCeiling` accepts. */
+export type PrivacyCeilingName = (typeof PRIVACY_CEILINGS)[number];
+/** Is `c` a ceiling a v2 grant may carry? The WRITER-side guard. */
+export declare function isValidPrivacyCeiling(c: PrivacyCeiling): boolean;
+/** Tags a string as a privacy ceiling. The parameter type is the literal
+ *  union, so a misspelling is a compile error and an as-yet-unknown ceiling
+ *  from a newer peer has to be cast deliberately. */
+export declare function privacyCeiling(c: PrivacyCeilingName): PrivacyCeiling;
 /**
  * The header a membership write carries the vault owner's grant signature in
  * (`authz.GrantSignatureHeader`), hex, with or without an `0x` prefix.
@@ -186,16 +248,31 @@ export interface Grant {
      * see the header's rule.
      */
     expiresAt: GrantExpiry;
+    /**
+     * The most sensitive class of fact this membership may see, or
+     * {@link NO_PRIVACY_CEILING} when the document is v1 and no ceiling was
+     * signed.
+     *
+     * NO_PRIVACY_CEILING HERE MEANS NOTHING VISIBLE, not "public". Read that
+     * as "this membership was signed before the memory surface existed and
+     * attests no disclosure at all" — the vault owner opts a member in by
+     * signing a v2 grant, which is a ceremony, not a default.
+     *
+     * Mirrors Go's `Grant.PrivacyCeiling`, which decodes v1 documents to
+     * `NoPrivacyCeiling` for the same reason.
+     */
+    privacyCeiling: PrivacyCeiling;
 }
 /**
  * A signed grant that could not be trusted: the signature does not verify,
  * the document does not decode, its schema is unknown, or it describes a
  * different membership from the one it was served under.
  *
- * A THROWN error rather than a filtered-out entry, because every one of those
- * states on an authorization artifact means the response is not what it
- * claims to be. Silently dropping the bad entry and returning the rest would
- * hand a caller a shorter roster that looks complete. `memberPubkey` names
+ * THROWN by {@link verifyGrant}, where one grant IS the whole question and a
+ * failure must stop the caller. REPORTED (and the entry skipped) by
+ * {@link verifySignedRoster}, where the same failure on one entry used to
+ * fail the whole roster for every other member — see that function's doc
+ * comment for the outage that ruling turned out to be. `memberPubkey` names
  * the entry so an operator can find it.
  */
 export declare class GrantVerificationError extends Error {
@@ -214,8 +291,17 @@ export declare class GrantVerificationError extends Error {
     memberPubkey?: string);
 }
 /**
- * The exact bytes a grant signature covers, mirroring
- * `authz.CanonicalGrantBytes`.
+ * The exact bytes a CEILING-LESS grant signature covers — v1, byte for byte
+ * as `authz.CanonicalGrantBytes` has always emitted them. Delegates to
+ * {@link canonicalGrantBytesWithCeiling}; see that function for the full
+ * contract, and this file's header for why the version is a function of the
+ * ceiling rather than an unconditional bump.
+ */
+export declare function canonicalGrantBytes(vaultId: string, memberPubkey: string, role: string, scopes: Record<string, string>, issuedAt: string, expiresAt: GrantExpiry): Uint8Array;
+/**
+ * The encoder, mirroring `authz.CanonicalGrantBytesWithCeiling`. Emits
+ * {@link GRANT_SCHEMA} when the grant sets no privacy ceiling and
+ * {@link GRANT_SCHEMA_V2} when it sets one.
  *
  * Every bound value is inside the output: a document proves ONE member's
  * standing on ONE vault and nothing else. `scopes` is emitted as an ARRAY
@@ -230,12 +316,16 @@ export declare class GrantVerificationError extends Error {
  * document with no mint time that verifies exactly as well as one with a mint
  * time.
  *
- * `issuedAt` is LAST BUT ONE and `expiresAt` is LAST, mirroring Go's field and
- * parameter order. In Go the map between `issuedAt` and the other strings is
- * what makes a transposition a compile error instead of a valid signature over
- * the wrong bytes; the one pair the map cannot sit between is `issuedAt` and
- * `expiresAt`, which Go separates with a defined type and this file mirrors
- * with {@link GrantExpiry}'s brand.
+ * `privacyCeiling` is emitted LAST, after `expiresAt`, and ONLY when set —
+ * `omitempty` in Go, an append here — so a ceiling-less grant is
+ * byte-identical to a v1 document and every signature already stored goes on
+ * matching what this encoder rebuilds.
+ *
+ * The ceiling is REFUSED, never coerced: an unrecognised value throws, because
+ * a document that verifies perfectly and confers a ceiling nobody named is,
+ * on the disclosure axis, the one output this function must never hand back.
+ * {@link NO_PRIVACY_CEILING} is the single exception and is not a value: it
+ * selects v1.
  *
  * `issuedAt` has NO DEFAULT on purpose: a `new Date().toISOString()` fallback
  * would be a hidden clock inside the encoder, and a caller who forgot to pass
@@ -247,15 +337,19 @@ export declare class GrantVerificationError extends Error {
  *
  * `expiresAt` is the ONE parameter with no emptiness check, because `""` is
  * {@link NO_GRANT_EXPIRY} — a legal, common, deliberate value rather than a
- * missing one.
+ * missing one. `ceiling` shares the exemption for the same reason.
  */
-export declare function canonicalGrantBytes(vaultId: string, memberPubkey: string, role: string, scopes: Record<string, string>, issuedAt: string, expiresAt: GrantExpiry): Uint8Array;
+export declare function canonicalGrantBytesWithCeiling(vaultId: string, memberPubkey: string, role: string, scopes: Record<string, string>, issuedAt: string, expiresAt: GrantExpiry, privacyCeiling: PrivacyCeiling): Uint8Array;
 /**
  * Reads a canonical grant document back into its parts, mirroring
  * `authz.DecodeGrantDoc`. Never re-encodes; the bytes stay the authority.
  *
- * Throws on an unknown schema (see `GRANT_SCHEMA`) and on the same three
- * required fields the encoder refuses to omit.
+ * Accepts BOTH current schemas — {@link GRANT_SCHEMA} and
+ * {@link GRANT_SCHEMA_V2} — with the field that distinguishes them checked in
+ * both directions (a v1 document carrying a `privacyCeiling` is a forgery
+ * shape; a v2 document without a recognised one has given "no ceiling" a
+ * second spelling). Throws on any other schema and on the same three required
+ * fields the encoder refuses to omit.
  */
 export declare function decodeGrantDoc(doc: Uint8Array): Grant;
 /**
@@ -271,6 +365,25 @@ export declare function decodeGrantDoc(doc: Uint8Array): Grant;
  * wallets and SDKs disagree about both.
  */
 export declare function verifyGrantSig(orgWalletPubkeyHex: string, doc: Uint8Array, sigHex: string): Promise<boolean>;
+/**
+ * Options for {@link verifySignedRoster}.
+ */
+export interface RosterVerifyOptions {
+    /**
+     * Called once for EVERY entry the roster serves that could not be verified,
+     * with the failure. The entry is DEGRADED — omitted from the returned
+     * grants — and the roster as a whole still verifies; this callback is the
+     * only place the degradation is visible, so a caller that enforces on the
+     * result should treat every reported member as holding NOTHING PROVEN
+     * rather than as absent from the vault.
+     *
+     * A v2 grant minted by a server newer than this SDK decodes fine and is
+     * NOT reported here; what lands in this callback is an entry whose bytes
+     * could not be trusted at all — a future schema, a corrupt row, a
+     * signature that does not verify.
+     */
+    onUnverifiableGrant?: (err: GrantVerificationError) => void;
+}
 /**
  * Verifies EVERY grant in a signed roster against the vault owner's key and
  * returns the grants decoded from the verified bytes.
@@ -282,16 +395,35 @@ export declare function verifyGrantSig(orgWalletPubkeyHex: string, doc: Uint8Arr
  * of the same document and are not covered by anything you checked.
  *
  * Three bindings are checked per entry, and the last two matter as much as
- * the signature: the document must carry the schema this SDK understands, it
+ * the signature: the document must carry a schema this SDK understands, it
  * must name the vault the roster is FOR, and it must name the member it was
  * served UNDER. A document that verifies but describes a different membership
  * is a valid signature over somebody else's grant — the substitution the
  * canonical bytes bind all four values to prevent.
  *
- * Fail-closed: the FIRST unverifiable entry throws
- * `GrantVerificationError` and no partial list is returned. An authorization
- * artifact with one entry you cannot prove is not a shorter roster, it is a
- * roster you cannot trust.
+ * # One unverifiable entry degrades the ENTRY, not the roster
+ *
+ * An entry that fails any of its checks is skipped and reported to
+ * {@link RosterVerifyOptions.onUnverifiableGrant} (when given) rather than
+ * thrown, and the remaining entries are returned. This is deliberate, and it
+ * is the second half of the condition ddc-node's `allowV2GrantMint` hold
+ * names for lifting: the loop this replaces threw on the FIRST bad entry, so
+ * one grant a consumer could not read — a ceiling-carrying v2 under 4.0.0, a
+ * future v3, a corrupt row — made the WHOLE roster fail verification for
+ * every member of that vault. An outage with a bystander list that long is
+ * not fail-closed, it is fail-everyone-else's.
+ *
+ * The envelope is still fail-closed: a roster naming the wrong vault, a
+ * signing key that does not derive the vault, or a malformed roster shape
+ * throws `GrantVerificationError` and NOTHING is returned — until the anchor
+ * holds, every entry is attacker-supplied, and there is no per-entry question
+ * to degrade to.
+ *
+ * SILENT SHORTENING IS THE RESIDUAL RISK, and the callback is the mitigation:
+ * a caller that ignores `onUnverifiableGrant` sees a shorter roster that
+ * looks complete. Treat a reported member as UNPROVEN — absence from the
+ * returned list means "no verified standing", which for authorization means
+ * deny, not "not in the vault".
  *
  * # `expectedVaultId` is the trust anchor, and it is why this is a
  * # verification rather than a consistency check
@@ -330,7 +462,7 @@ export declare function verifyGrantSig(orgWalletPubkeyHex: string, doc: Uint8Arr
  * itself learned from an untrusted party, the result is trust in THAT party's
  * choice of vault. Anchor it to something you already knew.
  */
-export declare function verifySignedRoster(roster: SignedRoster, expectedVaultId: string): Promise<Grant[]>;
+export declare function verifySignedRoster(roster: SignedRoster, expectedVaultId: string, options?: RosterVerifyOptions): Promise<Grant[]>;
 /**
  * One entry of `verifySignedRoster`, exposed for a caller holding a single
  * grant (a member proving their own standing, say) rather than a whole

package/dist/core/grant-doc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grant-doc.d.ts","sourceRoot":"","sources":["../../src/core/grant-doc.ts"],"names":[],"mappings":"AA0FA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAK5D;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,wBAAwB,CAAC;AAElD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,sBAAsB,sBAAsB,CAAC;AAE1D;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,sBAAsB,sBAAsB,CAAC;AAE1D;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAWpD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,UAAU,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,CAK1D;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,aAAa,EAAE,OAAO,MAAM,CAAA;CAAE,CAAC;AAE7E;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,eAAe,EAAS,WAAW,CAAC;AAEjD;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,CAExD;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,KAAK;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B;;;;;;;;;OASG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;OAUG;IACH,SAAS,EAAE,WAAW,CAAC;CACxB;AAED;;;;;;;;;;GAUG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IAG7C;;;;OAIG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM;gBAN7B,OAAO,EAAE,MAAM;IACf;;;;OAIG;IACM,YAAY,GAAE,MAAW;CAKrC;AAGD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,WAAW,GACrB,UAAU,CAsBZ;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,UAAU,GAAG,KAAK,CAsDrD;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,cAAc,CAClC,kBAAkB,EAAE,MAAM,EAC1B,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,CAAC,CAkBlB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,YAAY,EACpB,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,KAAK,EAAE,CAAC,CA8ClB;AAQD;;;;;;;;;GASG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,MAAM,EACf,eAAe,EAAE,MAAM,EACvB,KAAK,EAAE,WAAW,GACjB,OAAO,CAAC,KAAK,CAAC,CAwChB"}
+{"version":3,"file":"grant-doc.d.ts","sourceRoot":"","sources":["../../src/core/grant-doc.ts"],"names":[],"mappings":"AA0FA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAK5D;;;;;GAKG;AACH,eAAO,MAAM,YAAY,wBAAwB,CAAC;AAElD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,eAAe,wBAAwB,CAAC;AAErD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,gBAAgB,EAAE,OAAO,MAAM,CAAA;CAAE,CAAC;AAEnF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,kBAAkB,EAAS,cAAc,CAAC;AAEvD;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,0DAKnB,CAAC;AAEX,qFAAqF;AACrF,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnE,oEAAoE;AACpE,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,cAAc,GAAG,OAAO,CAEhE;AAQD;;qDAEqD;AACrD,wBAAgB,cAAc,CAAC,CAAC,EAAE,kBAAkB,GAAG,cAAc,CAEpE;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,sBAAsB,sBAAsB,CAAC;AAE1D;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,sBAAsB,sBAAsB,CAAC;AAE1D;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAWpD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,UAAU,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,CAK1D;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,aAAa,EAAE,OAAO,MAAM,CAAA;CAAE,CAAC;AAE7E;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,eAAe,EAAS,WAAW,CAAC;AAEjD;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,CAExD;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,KAAK;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B;;;;;;;;;OASG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;OAUG;IACH,SAAS,EAAE,WAAW,CAAC;IACvB;;;;;;;;;;;;OAYG;IACH,cAAc,EAAE,cAAc,CAAC;CAChC;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IAG7C;;;;OAIG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM;gBAN7B,OAAO,EAAE,MAAM;IACf;;;;OAIG;IACM,YAAY,GAAE,MAAW;CAKrC;AAGD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,WAAW,GACrB,UAAU,CAIZ;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,WAAW,EACtB,cAAc,EAAE,cAAc,GAC7B,UAAU,CAuCZ;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,UAAU,GAAG,KAAK,CA4FrD;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,cAAc,CAClC,kBAAkB,EAAE,MAAM,EAC1B,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,CAAC,CAkBlB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;;;;;;;;;OAYG;IACH,mBAAmB,CAAC,EAAE,CAAC,GAAG,EAAE,sBAAsB,KAAK,IAAI,CAAC;CAC7D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6EG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,YAAY,EACpB,eAAe,EAAE,MAAM,EACvB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,KAAK,EAAE,CAAC,CA4DlB;AAQD;;;;;;;;;GASG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,MAAM,EACf,eAAe,EAAE,MAAM,EACvB,KAAK,EAAE,WAAW,GACjB,OAAO,CAAC,KAAK,CAAC,CAwChB"}

package/dist/core/grant-doc.js

@@ -90,14 +90,69 @@ import { decodeBase64, hexToBytes, strip0xHex } from "./canonical.js";
 const enc = new TextEncoder();
 const dec = new TextDecoder();
 /**
- * The schema string carried INSIDE the signed bytes (`authz.GrantSchema`).
- *
- * A v2 changes this string, so a v1 signature can never be replayed as a v2
- * grant — which is why `decodeGrantDoc` refuses any other value instead of
- * handing a v2 document's fields to a v1 reader under a signature that is
- * perfectly valid for the v2 meaning.
+ * The schema string a CEILING-LESS grant carries inside its signed bytes
+ * (`authz.GrantSchemaV1`). Still emitted, still the common case: a grant that
+ * sets no privacy ceiling is encoded at v1, byte for byte as it always was,
+ * so every signature minted before v2 existed goes on verifying.
  */
 export const GRANT_SCHEMA = "cere.vault.grant.v1";
+/**
+ * The schema string a ceiling-carrying grant carries (`authz.GrantSchemaV2`).
+ *
+ * A document is v2 if and only if it carries a privacy ceiling. There is no
+ * v2 spelling of "no ceiling" — that is v1, and giving it two spellings is
+ * the ambiguity `NO_GRANT_EXPIRY`'s comment spends a paragraph refusing.
+ *
+ * The version is a FUNCTION of the ceiling rather than an unconditional bump:
+ * bumping it always would change the bytes of every grant, including the
+ * overwhelming majority that sets no ceiling, which is a flag day on every
+ * stored signature. See `canonicalGrantBytesWithCeiling`.
+ */
+export const GRANT_SCHEMA_V2 = "cere.vault.grant.v2";
+/**
+ * The ONE spelling of "no privacy ceiling was ever signed for this
+ * membership" — and it is NOT a synonym for `"public"`.
+ *
+ * It means NOTHING VISIBLE, and that is a decision on the record: a caller
+ * whose ceiling is this sees no memory-graph row at all, because a ceiling
+ * nobody signed is not a ceiling. Picking `"internal"` as the default would
+ * invent an authorisation the vault owner never attested on the axis whose
+ * whole job is disclosure — the same ruling `NO_GRANT_EXPIRY` makes one field
+ * earlier, except that there the failure direction WIDENS an unsigned grant
+ * and here it NARROWS to zero, which is why failing closed is free.
+ *
+ * Selects {@link GRANT_SCHEMA} in the encoder: a grant carrying this is a v1
+ * document, byte for byte.
+ */
+export const NO_PRIVACY_CEILING = "";
+/**
+ * Every ceiling a grant may carry, least to most sensitive — Go's
+ * `validPrivacyCeilings`. {@link NO_PRIVACY_CEILING} is deliberately ABSENT:
+ * it is a legal decoded state (the document is v1) but never a value a caller
+ * may SET, and admitting `""` at the writer would give the state two
+ * spellings.
+ */
+export const PRIVACY_CEILINGS = [
+    "public",
+    "internal",
+    "private",
+    "restricted",
+];
+/** Is `c` a ceiling a v2 grant may carry? The WRITER-side guard. */
+export function isValidPrivacyCeiling(c) {
+    return PRIVACY_CEILINGS.includes(c);
+}
+/** Renders the valid ceilings for an error, as Go's `PrivacyCeilingsList`. */
+function privacyCeilingsList() {
+    const quoted = PRIVACY_CEILINGS.map((c) => `"${c}"`);
+    return quoted.slice(0, -1).join(", ") + " or " + quoted[quoted.length - 1];
+}
+/** Tags a string as a privacy ceiling. The parameter type is the literal
+ *  union, so a misspelling is a compile error and an as-yet-unknown ceiling
+ *  from a newer peer has to be cast deliberately. */
+export function privacyCeiling(c) {
+    return c;
+}
 /**
  * The header a membership write carries the vault owner's grant signature in
  * (`authz.GrantSignatureHeader`), hex, with or without an `0x` prefix.
@@ -239,10 +294,11 @@ export function grantExpiry(rfc3339) {
  * the document does not decode, its schema is unknown, or it describes a
  * different membership from the one it was served under.
  *
- * A THROWN error rather than a filtered-out entry, because every one of those
- * states on an authorization artifact means the response is not what it
- * claims to be. Silently dropping the bad entry and returning the rest would
- * hand a caller a shorter roster that looks complete. `memberPubkey` names
+ * THROWN by {@link verifyGrant}, where one grant IS the whole question and a
+ * failure must stop the caller. REPORTED (and the entry skipped) by
+ * {@link verifySignedRoster}, where the same failure on one entry used to
+ * fail the whole roster for every other member — see that function's doc
+ * comment for the outage that ruling turned out to be. `memberPubkey` names
  * the entry so an operator can find it.
  */
 export class GrantVerificationError extends Error {
@@ -260,8 +316,19 @@ export class GrantVerificationError extends Error {
     }
 }
 /**
- * The exact bytes a grant signature covers, mirroring
- * `authz.CanonicalGrantBytes`.
+ * The exact bytes a CEILING-LESS grant signature covers — v1, byte for byte
+ * as `authz.CanonicalGrantBytes` has always emitted them. Delegates to
+ * {@link canonicalGrantBytesWithCeiling}; see that function for the full
+ * contract, and this file's header for why the version is a function of the
+ * ceiling rather than an unconditional bump.
+ */
+export function canonicalGrantBytes(vaultId, memberPubkey, role, scopes, issuedAt, expiresAt) {
+    return canonicalGrantBytesWithCeiling(vaultId, memberPubkey, role, scopes, issuedAt, expiresAt, NO_PRIVACY_CEILING);
+}
+/**
+ * The encoder, mirroring `authz.CanonicalGrantBytesWithCeiling`. Emits
+ * {@link GRANT_SCHEMA} when the grant sets no privacy ceiling and
+ * {@link GRANT_SCHEMA_V2} when it sets one.
  *
  * Every bound value is inside the output: a document proves ONE member's
  * standing on ONE vault and nothing else. `scopes` is emitted as an ARRAY
@@ -276,12 +343,16 @@ export class GrantVerificationError extends Error {
  * document with no mint time that verifies exactly as well as one with a mint
  * time.
  *
- * `issuedAt` is LAST BUT ONE and `expiresAt` is LAST, mirroring Go's field and
- * parameter order. In Go the map between `issuedAt` and the other strings is
- * what makes a transposition a compile error instead of a valid signature over
- * the wrong bytes; the one pair the map cannot sit between is `issuedAt` and
- * `expiresAt`, which Go separates with a defined type and this file mirrors
- * with {@link GrantExpiry}'s brand.
+ * `privacyCeiling` is emitted LAST, after `expiresAt`, and ONLY when set —
+ * `omitempty` in Go, an append here — so a ceiling-less grant is
+ * byte-identical to a v1 document and every signature already stored goes on
+ * matching what this encoder rebuilds.
+ *
+ * The ceiling is REFUSED, never coerced: an unrecognised value throws, because
+ * a document that verifies perfectly and confers a ceiling nobody named is,
+ * on the disclosure axis, the one output this function must never hand back.
+ * {@link NO_PRIVACY_CEILING} is the single exception and is not a value: it
+ * selects v1.
  *
  * `issuedAt` has NO DEFAULT on purpose: a `new Date().toISOString()` fallback
  * would be a hidden clock inside the encoder, and a caller who forgot to pass
@@ -293,9 +364,9 @@ export class GrantVerificationError extends Error {
  *
  * `expiresAt` is the ONE parameter with no emptiness check, because `""` is
  * {@link NO_GRANT_EXPIRY} — a legal, common, deliberate value rather than a
- * missing one.
+ * missing one. `ceiling` shares the exemption for the same reason.
  */
-export function canonicalGrantBytes(vaultId, memberPubkey, role, scopes, issuedAt, expiresAt) {
+export function canonicalGrantBytesWithCeiling(vaultId, memberPubkey, role, scopes, issuedAt, expiresAt, privacyCeiling) {
     if (vaultId === "")
         throw new Error("canonical grant: vaultId is required");
     if (memberPubkey === "")
@@ -304,26 +375,44 @@ export function canonicalGrantBytes(vaultId, memberPubkey, role, scopes, issuedA
         throw new Error("canonical grant: role is required");
     if (issuedAt === "")
         throw new Error("canonical grant: issuedAt is required");
+    // The version gate, and the writer-side refusal, in one place: anything
+    // that is neither "no ceiling" nor a recognised class stops here.
+    let schema = GRANT_SCHEMA;
+    if (privacyCeiling !== NO_PRIVACY_CEILING) {
+        if (!isValidPrivacyCeiling(privacyCeiling)) {
+            throw new Error(`canonical grant: privacyCeiling ${JSON.stringify(privacyCeiling)} must be ${privacyCeilingsList()}`);
+        }
+        schema = GRANT_SCHEMA_V2;
+    }
     const names = Object.keys(scopes).sort(compareCodePoints);
     const parts = names.map((name) => `{"name":${goString(name)},"level":${goString(scopes[name])}}`);
     // Hand-assembled rather than `JSON.stringify`d because the field ORDER is
     // the wire contract (Go emits struct fields in declaration order) and
     // because `goString` has to do the HTML escaping `JSON.stringify` will not.
-    const doc = `{"schema":${goString(GRANT_SCHEMA)},` +
+    const doc = `{"schema":${goString(schema)},` +
         `"vaultId":${goString(vaultId)},` +
         `"memberPubkey":${goString(memberPubkey)},` +
         `"role":${goString(role)},` +
         `"scopes":[${parts.join(",")}],` +
         `"issuedAt":${goString(issuedAt)},` +
-        `"expiresAt":${goString(expiresAt)}}`;
+        `"expiresAt":${goString(expiresAt)}` +
+        // omitempty: the ceiling key is present in a v2 document ONLY. Appending
+        // it unconditionally would give v1 a second spelling and break every
+        // stored signature's rebuild.
+        (privacyCeiling === NO_PRIVACY_CEILING ? "" : `,"privacyCeiling":${goString(privacyCeiling)}`) +
+        "}";
     return enc.encode(doc);
 }
 /**
  * Reads a canonical grant document back into its parts, mirroring
  * `authz.DecodeGrantDoc`. Never re-encodes; the bytes stay the authority.
  *
- * Throws on an unknown schema (see `GRANT_SCHEMA`) and on the same three
- * required fields the encoder refuses to omit.
+ * Accepts BOTH current schemas — {@link GRANT_SCHEMA} and
+ * {@link GRANT_SCHEMA_V2} — with the field that distinguishes them checked in
+ * both directions (a v1 document carrying a `privacyCeiling` is a forgery
+ * shape; a v2 document without a recognised one has given "no ceiling" a
+ * second spelling). Throws on any other schema and on the same three required
+ * fields the encoder refuses to omit.
  */
 export function decodeGrantDoc(doc) {
     if (doc.length === 0)
@@ -340,8 +429,39 @@ export function decodeGrantDoc(doc) {
     }
     const obj = raw;
     const schema = stringField(obj, "schema");
-    if (schema !== GRANT_SCHEMA) {
-        throw new Error(`decode grant: schema ${JSON.stringify(schema)} is not ${JSON.stringify(GRANT_SCHEMA)}`);
+    // THE VERSION GATE, AND IT IS TWO-WAY — mirroring `DecodeGrantDoc`'s switch.
+    //
+    // It used to be one equality against one constant. Two schema strings are
+    // current, and the field that distinguishes them must be checked in BOTH
+    // directions, because a JSON reader ignores unknown keys by default:
+    //
+    //   - a v1 document carrying a privacyCeiling key would otherwise decode
+    //     as a clean v1 grant with the field silently dropped. That is a
+    //     forgery shape — the owner attested v1 semantics and somebody
+    //     appended a field — and dropping it quietly is how a reader comes to
+    //     disagree with the bytes it verified.
+    //   - a v2 document with no usable ceiling would otherwise decode to
+    //     NO_PRIVACY_CEILING, giving "no ceiling" a second spelling under a
+    //     schema string that promises one.
+    //
+    // Refusing both is what keeps the schema string an honest description of
+    // the bytes rather than a label. Note the emptiness (not presence) check
+    // on v1: Go unmarshals `"privacyCeiling":""` into the empty string and
+    // treats it as absent, so a v1 document with an EMPTY ceiling key decodes
+    // as v1 here too — matching the bytes Go accepts, not a stricter rule.
+    const rawCeiling = stringField(obj, "privacyCeiling", true);
+    if (schema === GRANT_SCHEMA) {
+        if (rawCeiling !== "") {
+            throw new Error(`decode grant: schema ${JSON.stringify(schema)} carries a privacyCeiling; that is ${JSON.stringify(GRANT_SCHEMA_V2)}`);
+        }
+    }
+    else if (schema === GRANT_SCHEMA_V2) {
+        if (!isValidPrivacyCeiling(rawCeiling)) {
+            throw new Error(`decode grant: schema ${JSON.stringify(schema)} requires a privacyCeiling of ${privacyCeilingsList()}, got ${JSON.stringify(rawCeiling)}`);
+        }
+    }
+    else {
+        throw new Error(`decode grant: schema ${JSON.stringify(schema)} is not ${JSON.stringify(GRANT_SCHEMA)} or ${JSON.stringify(GRANT_SCHEMA_V2)}`);
     }
     const vaultId = stringField(obj, "vaultId");
     const memberPubkey = stringField(obj, "memberPubkey");
@@ -382,7 +502,10 @@ export function decodeGrantDoc(doc) {
     // what Go's `raw.ExpiresAt == nil` refuses; an `=== ""` guard here would make
     // "this membership never expires" undecodable.
     const expiresAt = stringField(obj, "expiresAt");
-    return { schema, vaultId, memberPubkey, role, scopes, issuedAt, expiresAt };
+    // v1 decodes to NO_PRIVACY_CEILING — the version gate above has already
+    // proved the key was absent-or-empty for v1 and valid for v2.
+    const ceiling = (schema === GRANT_SCHEMA_V2 ? rawCeiling : "");
+    return { schema, vaultId, memberPubkey, role, scopes, issuedAt, expiresAt, privacyCeiling: ceiling };
 }
 /**
  * Is `sigHex` `orgWalletPubkeyHex`'s ed25519 signature over `doc`?
@@ -430,16 +553,35 @@ export async function verifyGrantSig(orgWalletPubkeyHex, doc, sigHex) {
  * of the same document and are not covered by anything you checked.
  *
  * Three bindings are checked per entry, and the last two matter as much as
- * the signature: the document must carry the schema this SDK understands, it
+ * the signature: the document must carry a schema this SDK understands, it
  * must name the vault the roster is FOR, and it must name the member it was
  * served UNDER. A document that verifies but describes a different membership
  * is a valid signature over somebody else's grant — the substitution the
  * canonical bytes bind all four values to prevent.
  *
- * Fail-closed: the FIRST unverifiable entry throws
- * `GrantVerificationError` and no partial list is returned. An authorization
- * artifact with one entry you cannot prove is not a shorter roster, it is a
- * roster you cannot trust.
+ * # One unverifiable entry degrades the ENTRY, not the roster
+ *
+ * An entry that fails any of its checks is skipped and reported to
+ * {@link RosterVerifyOptions.onUnverifiableGrant} (when given) rather than
+ * thrown, and the remaining entries are returned. This is deliberate, and it
+ * is the second half of the condition ddc-node's `allowV2GrantMint` hold
+ * names for lifting: the loop this replaces threw on the FIRST bad entry, so
+ * one grant a consumer could not read — a ceiling-carrying v2 under 4.0.0, a
+ * future v3, a corrupt row — made the WHOLE roster fail verification for
+ * every member of that vault. An outage with a bystander list that long is
+ * not fail-closed, it is fail-everyone-else's.
+ *
+ * The envelope is still fail-closed: a roster naming the wrong vault, a
+ * signing key that does not derive the vault, or a malformed roster shape
+ * throws `GrantVerificationError` and NOTHING is returned — until the anchor
+ * holds, every entry is attacker-supplied, and there is no per-entry question
+ * to degrade to.
+ *
+ * SILENT SHORTENING IS THE RESIDUAL RISK, and the callback is the mitigation:
+ * a caller that ignores `onUnverifiableGrant` sees a shorter roster that
+ * looks complete. Treat a reported member as UNPROVEN — absence from the
+ * returned list means "no verified standing", which for authorization means
+ * deny, not "not in the vault".
  *
  * # `expectedVaultId` is the trust anchor, and it is why this is a
  * # verification rather than a consistency check
@@ -478,7 +620,7 @@ export async function verifyGrantSig(orgWalletPubkeyHex, doc, sigHex) {
  * itself learned from an untrusted party, the result is trust in THAT party's
  * choice of vault. Anchor it to something you already knew.
  */
-export async function verifySignedRoster(roster, expectedVaultId) {
+export async function verifySignedRoster(roster, expectedVaultId, options = {}) {
     if (typeof expectedVaultId !== "string" || expectedVaultId === "") {
         throw new GrantVerificationError("expectedVaultId is required: verifying a roster against the vault id it " +
             "carries only proves the response agrees with itself");
@@ -508,10 +650,26 @@ export async function verifySignedRoster(roster, expectedVaultId) {
     }
     const out = [];
     for (const grant of roster.grants) {
+        // A non-object entry is an ENTRY-level malformation — it belongs to no
+        // member in particular, but it is one row's bytes that are wrong, not the
+        // envelope's, so it degrades like any other unverifiable entry rather
+        // than poisoning the roster.
         if (typeof grant !== "object" || grant === null) {
-            throw new GrantVerificationError(`signed roster holds a grant that is not an object`);
+            const err = new GrantVerificationError(`signed roster holds a grant that is not an object`);
+            options.onUnverifiableGrant?.(err);
+            continue;
+        }
+        try {
+            out.push(await verifyGrant(expectedVaultId, roster.orgWalletPubkey, grant));
+        }
+        catch (err) {
+            if (!(err instanceof GrantVerificationError))
+                throw err;
+            // DEGRADE THE ENTRY, NOT THE ROSTER — see the doc comment above for why
+            // this replaced the first-bad-entry throw, and what a caller owes the
+            // members reported here.
+            options.onUnverifiableGrant?.(err);
         }
-        out.push(await verifyGrant(expectedVaultId, roster.orgWalletPubkey, grant));
     }
     return out;
 }
@@ -559,9 +717,16 @@ export async function verifyGrant(vaultId, orgWalletPubkey, grant) {
     }
     return decoded;
 }
-/** A required string field, or a typed failure naming it. */
-function stringField(obj, key) {
+/**
+ * A required string field, or a typed failure naming it. With `absentOk`, an
+ * ABSENT key reads as `""` — for `privacyCeiling`, whose absence is v1's
+ * whole spelling and whose empty-string presence Go's decoder treats the
+ * same way. A present-but-non-string value still fails either way.
+ */
+function stringField(obj, key, absentOk = false) {
     const v = obj[key];
+    if (v === undefined && absentOk)
+        return "";
     if (typeof v !== "string") {
         throw new Error(`decode grant: ${key} must be a string, got ${v === undefined ? "nothing" : typeof v}`);
     }

package/dist/core/grant-doc.js.map

@@ -1 +1 @@
-{"version":3,"file":"grant-doc.js","sourceRoot":"","sources":["../../src/core/grant-doc.ts"],"names":[],"mappings":"AAAA,wBAAwB;AACxB,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,gCAAgC;AAChC,EAAE;AACF,8CAA8C;AAC9C,wEAAwE;AACxE,yEAAyE;AACzE,4EAA4E;AAC5E,0EAA0E;AAC1E,WAAW;AACX,8EAA8E;AAC9E,qEAAqE;AACrE,6EAA6E;AAC7E,4EAA4E;AAC5E,mEAAmE;AACnE,EAAE;AACF,qEAAqE;AACrE,EAAE;AACF,4EAA4E;AAC5E,uEAAuE;AACvE,wEAAwE;AACxE,yEAAyE;AACzE,+EAA+E;AAC/E,4BAA4B;AAC5B,EAAE;AACF,2DAA2D;AAC3D,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,0EAA0E;AAC1E,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,iEAAiE;AACjE,EAAE;AACF,wEAAwE;AACxE,EAAE;AACF,2EAA2E;AAC3E,kCAAkC;AAClC,8EAA8E;AAC9E,uEAAuE;AACvE,2EAA2E;AAC3E,yEAAyE;AACzE,6EAA6E;AAC7E,yEAAyE;AACzE,6DAA6D;AAC7D,EAAE;AACF,6EAA6E;AAC7E,wEAAwE;AACxE,4EAA4E;AAC5E,4EAA4E;AAC5E,YAAY;AACZ,EAAE;AACF,wEAAwE;AACxE,6EAA6E;AAC7E,wEAAwE;AACxE,4EAA4E;AAC5E,2EAA2E;AAC3E,4BAA4B;AAC5B,EAAE;AACF,6EAA6E;AAC7E,qEAAqE;AACrE,EAAE;AACF,oEAAoE;AACpE,EAAE;AACF,4EAA4E;AAC5E,uEAAuE;AACvE,EAAE;AACF,+EAA+E;AAC/E,8EAA8E;AAC9E,6EAA6E;AAC7E,yEAAyE;AACzE,4BAA4B;AAC5B,EAAE;AACF,sEAAsE;AACtE,2EAA2E;AAC3E,0EAA0E;AAC1E,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAE7E,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACrC,0EAA0E;AAC1E,gEAAgE;AAChE,sEAAsE;AACtE,yEAAyE;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAGtE,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;AAC9B,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;AAE9B;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAElD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAAmB,CAAC;AAE1D;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAAmB,CAAC;AAE1D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,kBAAkB,CAAC,CAAS;IAC1C,yEAAyE;IACzE,wEAAwE;IACxE,6DAA6D;IAC7D,IAAI,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAChD,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAC1B,oEAAoE;IACpE,uDAAuD;IACvD,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IAChF,OAAO,KAAK,IAAI,EAAE,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,UAAU,UAAU,CAAC,eAAuB;IAChD,MAAM,SAAS,GAAG,kBAAkB,CAAC,eAAe,CAAC,CAAC;IACtD,0EAA0E;IAC1E,iEAAiE;IACjE,OAAO,KAAK,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AACjE,CAAC;AAqBD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,EAAiB,CAAC;AAEjD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,OAAO,OAAsB,CAAC;AAChC,CAAC;AA8CD;;;;;;;;;;GAUG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAQpC;IAPX,YACE,OAAe;IACf;;;;OAIG;IACM,eAAuB,EAAE;QAElC,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,iBAAY,GAAZ,YAAY,CAAa;QAGlC,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAGD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAe,EACf,YAAoB,EACpB,IAAY,EACZ,MAA8B,EAC9B,QAAgB,EAChB,SAAsB;IAEtB,IAAI,OAAO,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC5E,IAAI,YAAY,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACtF,IAAI,IAAI,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACtE,IAAI,QAAQ,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAE9E,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CACrB,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,QAAQ,CAAC,IAAI,CAAC,YAAY,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAW,CAAC,GAAG,CACnF,CAAC;IACF,0EAA0E;IAC1E,sEAAsE;IACtE,4EAA4E;IAC5E,MAAM,GAAG,GACP,aAAa,QAAQ,CAAC,YAAY,CAAC,GAAG;QACtC,aAAa,QAAQ,CAAC,OAAO,CAAC,GAAG;QACjC,kBAAkB,QAAQ,CAAC,YAAY,CAAC,GAAG;QAC3C,UAAU,QAAQ,CAAC,IAAI,CAAC,GAAG;QAC3B,aAAa,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI;QAChC,cAAc,QAAQ,CAAC,QAAQ,CAAC,GAAG;QACnC,eAAe,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC;IACxC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,GAAe;IAC5C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACtE,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,GAAG,GAAG,GAA8B,CAAC;IAC3C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1C,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAC3G,CAAC;IACD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,EAAE,IAAI,YAAY,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,uEAAuE;IACvE,4EAA4E;IAC5E,0EAA0E;IAC1E,uEAAuE;IACvE,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,KAAgC,EAAE,MAAM,CAAC,CAAC;QACnE,IAAI,IAAI,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,KAAgC,EAAE,OAAO,CAAC,CAAC;IACxE,CAAC;IACD,2EAA2E;IAC3E,4EAA4E;IAC5E,uEAAuE;IACvE,2BAA2B;IAC3B,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC9C,IAAI,QAAQ,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,0EAA0E;IAC1E,2EAA2E;IAC3E,6EAA6E;IAC7E,8EAA8E;IAC9E,+CAA+C;IAC/C,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,WAAW,CAAgB,CAAC;IAC/D,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AAC9E,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,kBAA0B,EAC1B,GAAe,EACf,MAAc;IAEd,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,GAAe,CAAC;IACpB,IAAI,GAAe,CAAC;IACpB,IAAI,CAAC;QACH,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC/D,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACzD,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,oCAAoC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAoB,EACpB,eAAuB;IAEvB,IAAI,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe,KAAK,EAAE,EAAE,CAAC;QAClE,MAAM,IAAI,sBAAsB,CAC9B,0EAA0E;YACxE,qDAAqD,CACxD,CAAC;IACJ,CAAC;IACD,wEAAwE;IACxE,oEAAoE;IACpE,yEAAyE;IACzE,yEAAyE;IACzE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,sBAAsB,CAAC,uCAAuC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;QAChE,MAAM,IAAI,sBAAsB,CAAC,kCAAkC,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ,IAAI,MAAM,CAAC,eAAe,KAAK,EAAE,EAAE,CAAC;QAChF,MAAM,IAAI,sBAAsB,CAAC,0CAA0C,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,sBAAsB,CAC9B,+CAA+C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CACxE,CAAC;IACJ,CAAC;IAED,iEAAiE;IACjE,IAAI,MAAM,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;QACvC,MAAM,IAAI,sBAAsB,CAC9B,6BAA6B,MAAM,CAAC,OAAO,iBAAiB,eAAe,EAAE,CAC9E,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,eAAe,EAAE,CAAC;QAC3D,MAAM,IAAI,sBAAsB,CAC9B,mBAAmB,MAAM,CAAC,eAAe,0BAA0B,eAAe,EAAE,CACrF,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAY,EAAE,CAAC;IACxB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAChD,MAAM,IAAI,sBAAsB,CAAC,mDAAmD,CAAC,CAAC;QACxF,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,MAAM,WAAW,CAAC,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iFAAiF;AACjF,SAAS,MAAM,CAAC,CAAU;IACxB,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAC9B,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAe,EACf,eAAuB,EACvB,KAAkB;IAElB,IAAI,UAAU,CAAC,eAAe,CAAC,KAAK,OAAO,EAAE,CAAC;QAC5C,MAAM,IAAI,sBAAsB,CAC9B,mBAAmB,eAAe,0BAA0B,OAAO,EAAE,EACrE,KAAK,CAAC,YAAY,CACnB,CAAC;IACJ,CAAC;IACD,IAAI,GAAe,CAAC;IACpB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,sBAAsB,CAC9B,uCAAuC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EACzF,KAAK,CAAC,YAAY,CACnB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,eAAe,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,sBAAsB,CAC9B,oDAAoD,eAAe,GAAG,EACtE,KAAK,CAAC,YAAY,CACnB,CAAC;IACJ,CAAC;IACD,IAAI,OAAc,CAAC;IACnB,IAAI,CAAC;QACH,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,sBAAsB,CAC9B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAChD,KAAK,CAAC,YAAY,CACnB,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;QAC/E,MAAM,IAAI,sBAAsB,CAC9B,4DAA4D;YAC1D,GAAG,OAAO,CAAC,YAAY,OAAO,OAAO,CAAC,OAAO,sBAAsB;YACnE,GAAG,KAAK,CAAC,YAAY,OAAO,OAAO,EAAE,EACvC,KAAK,CAAC,YAAY,CACnB,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,6DAA6D;AAC7D,SAAS,WAAW,CAAC,GAA4B,EAAE,GAAW;IAC5D,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,0BAA0B,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1G,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,CAAS;IACzB,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;SACxB,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;SACxB,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;SACxB,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC;SAC7B,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,CAAS,EAAE,CAAS;IAC7C,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAI,EAAE,CAAC,CAAC,CAAY,CAAC,WAAW,CAAC,CAAC,CAAW,CAAC;QACrD,MAAM,CAAC,GAAI,EAAE,CAAC,CAAC,CAAY,CAAC,WAAW,CAAC,CAAC,CAAW,CAAC;QACrD,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"grant-doc.js","sourceRoot":"","sources":["../../src/core/grant-doc.ts"],"names":[],"mappings":"AAAA,wBAAwB;AACxB,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,gCAAgC;AAChC,EAAE;AACF,8CAA8C;AAC9C,wEAAwE;AACxE,yEAAyE;AACzE,4EAA4E;AAC5E,0EAA0E;AAC1E,WAAW;AACX,8EAA8E;AAC9E,qEAAqE;AACrE,6EAA6E;AAC7E,4EAA4E;AAC5E,mEAAmE;AACnE,EAAE;AACF,qEAAqE;AACrE,EAAE;AACF,4EAA4E;AAC5E,uEAAuE;AACvE,wEAAwE;AACxE,yEAAyE;AACzE,+EAA+E;AAC/E,4BAA4B;AAC5B,EAAE;AACF,2DAA2D;AAC3D,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,0EAA0E;AAC1E,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,iEAAiE;AACjE,EAAE;AACF,wEAAwE;AACxE,EAAE;AACF,2EAA2E;AAC3E,kCAAkC;AAClC,8EAA8E;AAC9E,uEAAuE;AACvE,2EAA2E;AAC3E,yEAAyE;AACzE,6EAA6E;AAC7E,yEAAyE;AACzE,6DAA6D;AAC7D,EAAE;AACF,6EAA6E;AAC7E,wEAAwE;AACxE,4EAA4E;AAC5E,4EAA4E;AAC5E,YAAY;AACZ,EAAE;AACF,wEAAwE;AACxE,6EAA6E;AAC7E,wEAAwE;AACxE,4EAA4E;AAC5E,2EAA2E;AAC3E,4BAA4B;AAC5B,EAAE;AACF,6EAA6E;AAC7E,qEAAqE;AACrE,EAAE;AACF,oEAAoE;AACpE,EAAE;AACF,4EAA4E;AAC5E,uEAAuE;AACvE,EAAE;AACF,+EAA+E;AAC/E,8EAA8E;AAC9E,6EAA6E;AAC7E,yEAAyE;AACzE,4BAA4B;AAC5B,EAAE;AACF,sEAAsE;AACtE,2EAA2E;AAC3E,0EAA0E;AAC1E,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAE7E,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACrC,0EAA0E;AAC1E,gEAAgE;AAChE,sEAAsE;AACtE,yEAAyE;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAGtE,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;AAC9B,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;AAE9B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAElD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAoBrD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAoB,CAAC;AAEvD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,QAAQ;IACR,UAAU;IACV,SAAS;IACT,YAAY;CACJ,CAAC;AAKX,oEAAoE;AACpE,MAAM,UAAU,qBAAqB,CAAC,CAAiB;IACrD,OAAQ,gBAAsC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,8EAA8E;AAC9E,SAAS,mBAAmB;IAC1B,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED;;qDAEqD;AACrD,MAAM,UAAU,cAAc,CAAC,CAAqB;IAClD,OAAO,CAAmB,CAAC;AAC7B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAAmB,CAAC;AAE1D;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAAmB,CAAC;AAE1D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,kBAAkB,CAAC,CAAS;IAC1C,yEAAyE;IACzE,wEAAwE;IACxE,6DAA6D;IAC7D,IAAI,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAChD,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAC1B,oEAAoE;IACpE,uDAAuD;IACvD,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IAChF,OAAO,KAAK,IAAI,EAAE,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,UAAU,UAAU,CAAC,eAAuB;IAChD,MAAM,SAAS,GAAG,kBAAkB,CAAC,eAAe,CAAC,CAAC;IACtD,0EAA0E;IAC1E,iEAAiE;IACjE,OAAO,KAAK,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AACjE,CAAC;AAqBD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,EAAiB,CAAC;AAEjD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,OAAO,OAAsB,CAAC;AAChC,CAAC;AA4DD;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAQpC;IAPX,YACE,OAAe;IACf;;;;OAIG;IACM,eAAuB,EAAE;QAElC,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,iBAAY,GAAZ,YAAY,CAAa;QAGlC,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAGD;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAe,EACf,YAAoB,EACpB,IAAY,EACZ,MAA8B,EAC9B,QAAgB,EAChB,SAAsB;IAEtB,OAAO,8BAA8B,CACnC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,kBAAkB,CAC7E,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,UAAU,8BAA8B,CAC5C,OAAe,EACf,YAAoB,EACpB,IAAY,EACZ,MAA8B,EAC9B,QAAgB,EAChB,SAAsB,EACtB,cAA8B;IAE9B,IAAI,OAAO,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC5E,IAAI,YAAY,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACtF,IAAI,IAAI,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACtE,IAAI,QAAQ,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAE9E,wEAAwE;IACxE,kEAAkE;IAClE,IAAI,MAAM,GAAG,YAAY,CAAC;IAC1B,IAAI,cAAc,KAAK,kBAAkB,EAAE,CAAC;QAC1C,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,mCAAmC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,YAAY,mBAAmB,EAAE,EAAE,CACrG,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,eAAe,CAAC;IAC3B,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CACrB,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,QAAQ,CAAC,IAAI,CAAC,YAAY,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAW,CAAC,GAAG,CACnF,CAAC;IACF,0EAA0E;IAC1E,sEAAsE;IACtE,4EAA4E;IAC5E,MAAM,GAAG,GACP,aAAa,QAAQ,CAAC,MAAM,CAAC,GAAG;QAChC,aAAa,QAAQ,CAAC,OAAO,CAAC,GAAG;QACjC,kBAAkB,QAAQ,CAAC,YAAY,CAAC,GAAG;QAC3C,UAAU,QAAQ,CAAC,IAAI,CAAC,GAAG;QAC3B,aAAa,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI;QAChC,cAAc,QAAQ,CAAC,QAAQ,CAAC,GAAG;QACnC,eAAe,QAAQ,CAAC,SAAS,CAAC,EAAE;QACpC,yEAAyE;QACzE,qEAAqE;QACrE,8BAA8B;QAC9B,CAAC,cAAc,KAAK,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,qBAAqB,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QAC9F,GAAG,CAAC;IACN,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAAC,GAAe;IAC5C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACtE,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,GAAG,GAAG,GAA8B,CAAC;IAC3C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1C,6EAA6E;IAC7E,EAAE;IACF,0EAA0E;IAC1E,yEAAyE;IACzE,qEAAqE;IACrE,EAAE;IACF,yEAAyE;IACzE,qEAAqE;IACrE,mEAAmE;IACnE,0EAA0E;IAC1E,2CAA2C;IAC3C,qEAAqE;IACrE,wEAAwE;IACxE,uCAAuC;IACvC,EAAE;IACF,yEAAyE;IACzE,yEAAyE;IACzE,uEAAuE;IACvE,0EAA0E;IAC1E,uEAAuE;IACvE,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;IAC5D,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QAC5B,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,sCAAsC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,CACtH,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;QACtC,IAAI,CAAC,qBAAqB,CAAC,UAA4B,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,iCAAiC,mBAAmB,EAAE,SAAS,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAC1I,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,CAC9H,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,EAAE,IAAI,YAAY,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,uEAAuE;IACvE,4EAA4E;IAC5E,0EAA0E;IAC1E,uEAAuE;IACvE,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,KAAgC,EAAE,MAAM,CAAC,CAAC;QACnE,IAAI,IAAI,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,KAAgC,EAAE,OAAO,CAAC,CAAC;IACxE,CAAC;IACD,2EAA2E;IAC3E,4EAA4E;IAC5E,uEAAuE;IACvE,2BAA2B;IAC3B,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC9C,IAAI,QAAQ,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,0EAA0E;IAC1E,2EAA2E;IAC3E,6EAA6E;IAC7E,8EAA8E;IAC9E,+CAA+C;IAC/C,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,WAAW,CAAgB,CAAC;IAC/D,wEAAwE;IACxE,8DAA8D;IAC9D,MAAM,OAAO,GAAG,CAAC,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAmB,CAAC;IACjF,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;AACvG,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,kBAA0B,EAC1B,GAAe,EACf,MAAc;IAEd,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,GAAe,CAAC;IACpB,IAAI,GAAe,CAAC;IACpB,IAAI,CAAC;QACH,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC/D,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACzD,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,oCAAoC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAsBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6EG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAoB,EACpB,eAAuB,EACvB,UAA+B,EAAE;IAEjC,IAAI,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe,KAAK,EAAE,EAAE,CAAC;QAClE,MAAM,IAAI,sBAAsB,CAC9B,0EAA0E;YACxE,qDAAqD,CACxD,CAAC;IACJ,CAAC;IACD,wEAAwE;IACxE,oEAAoE;IACpE,yEAAyE;IACzE,yEAAyE;IACzE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,sBAAsB,CAAC,uCAAuC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;QAChE,MAAM,IAAI,sBAAsB,CAAC,kCAAkC,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ,IAAI,MAAM,CAAC,eAAe,KAAK,EAAE,EAAE,CAAC;QAChF,MAAM,IAAI,sBAAsB,CAAC,0CAA0C,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,sBAAsB,CAC9B,+CAA+C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CACxE,CAAC;IACJ,CAAC;IAED,iEAAiE;IACjE,IAAI,MAAM,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;QACvC,MAAM,IAAI,sBAAsB,CAC9B,6BAA6B,MAAM,CAAC,OAAO,iBAAiB,eAAe,EAAE,CAC9E,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,eAAe,EAAE,CAAC;QAC3D,MAAM,IAAI,sBAAsB,CAC9B,mBAAmB,MAAM,CAAC,eAAe,0BAA0B,eAAe,EAAE,CACrF,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAY,EAAE,CAAC;IACxB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,uEAAuE;QACvE,0EAA0E;QAC1E,sEAAsE;QACtE,6BAA6B;QAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAChD,MAAM,GAAG,GAAG,IAAI,sBAAsB,CAAC,mDAAmD,CAAC,CAAC;YAC5F,OAAO,CAAC,mBAAmB,EAAE,CAAC,GAAG,CAAC,CAAC;YACnC,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,MAAM,WAAW,CAAC,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC;QAC9E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,GAAG,YAAY,sBAAsB,CAAC;gBAAE,MAAM,GAAG,CAAC;YACxD,wEAAwE;YACxE,sEAAsE;YACtE,yBAAyB;YACzB,OAAO,CAAC,mBAAmB,EAAE,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iFAAiF;AACjF,SAAS,MAAM,CAAC,CAAU;IACxB,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAC9B,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAe,EACf,eAAuB,EACvB,KAAkB;IAElB,IAAI,UAAU,CAAC,eAAe,CAAC,KAAK,OAAO,EAAE,CAAC;QAC5C,MAAM,IAAI,sBAAsB,CAC9B,mBAAmB,eAAe,0BAA0B,OAAO,EAAE,EACrE,KAAK,CAAC,YAAY,CACnB,CAAC;IACJ,CAAC;IACD,IAAI,GAAe,CAAC;IACpB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,sBAAsB,CAC9B,uCAAuC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EACzF,KAAK,CAAC,YAAY,CACnB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,eAAe,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,sBAAsB,CAC9B,oDAAoD,eAAe,GAAG,EACtE,KAAK,CAAC,YAAY,CACnB,CAAC;IACJ,CAAC;IACD,IAAI,OAAc,CAAC;IACnB,IAAI,CAAC;QACH,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,sBAAsB,CAC9B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAChD,KAAK,CAAC,YAAY,CACnB,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;QAC/E,MAAM,IAAI,sBAAsB,CAC9B,4DAA4D;YAC1D,GAAG,OAAO,CAAC,YAAY,OAAO,OAAO,CAAC,OAAO,sBAAsB;YACnE,GAAG,KAAK,CAAC,YAAY,OAAO,OAAO,EAAE,EACvC,KAAK,CAAC,YAAY,CACnB,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,GAA4B,EAAE,GAAW,EAAE,QAAQ,GAAG,KAAK;IAC9E,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,IAAI,CAAC,KAAK,SAAS,IAAI,QAAQ;QAAE,OAAO,EAAE,CAAC;IAC3C,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,0BAA0B,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1G,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,CAAS;IACzB,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;SACxB,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;SACxB,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;SACxB,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC;SAC7B,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,CAAS,EAAE,CAAS;IAC7C,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAI,EAAE,CAAC,CAAC,CAAY,CAAC,WAAW,CAAC,CAAC,CAAW,CAAC;QACrD,MAAM,CAAC,GAAI,EAAE,CAAC,CAAC,CAAY,CAAC,WAAW,CAAC,CAAC,CAAW,CAAC;QACrD,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC;AAC/B,CAAC"}

package/dist/index.d.ts

@@ -20,8 +20,8 @@ export type { HealthResponse } from "./internal/health.js";
 export { GarClient, signAndSubmitAgreement, getAsPubkey, } from "./agreements/index.js";
 export type { SignedAgreementEnvelope, SignAndSubmitAgreementOptions, SignAndSubmitAgreementResult, } from "./agreements/index.js";
 export { VaultRequestError, VaultNotImplementedError, VaultSignerRequiredError, } from "./core/errors.js";
-export { GRANT_ISSUED_AT_HEADER, GRANT_SCHEMA, GRANT_SIGNATURE_HEADER, GrantVerificationError, NO_GRANT_EXPIRY, canonicalGrantBytes, canonicalPubkeyHex, decodeGrantDoc, grantExpiry, vaultIdFor, verifyGrant, verifyGrantSig, verifySignedRoster, } from "./core/grant-doc.js";
-export type { Grant, GrantExpiry } from "./core/grant-doc.js";
+export { GRANT_ISSUED_AT_HEADER, GRANT_SCHEMA, GRANT_SCHEMA_V2, GRANT_SIGNATURE_HEADER, GrantVerificationError, NO_GRANT_EXPIRY, NO_PRIVACY_CEILING, PRIVACY_CEILINGS, canonicalGrantBytes, canonicalGrantBytesWithCeiling, canonicalPubkeyHex, decodeGrantDoc, grantExpiry, isValidPrivacyCeiling, privacyCeiling, vaultIdFor, verifyGrant, verifyGrantSig, verifySignedRoster, } from "./core/grant-doc.js";
+export type { Grant, GrantExpiry, PrivacyCeiling, PrivacyCeilingName, RosterVerifyOptions } from "./core/grant-doc.js";
 export type { PutMemberOptions, PutScopesOptions } from "./internal/memberships.js";
 export type { Task, TasksPage, TaskState, AgentConnection, AgentConnectionStatus, ConnectAgentRequest, CubbyQueryResponse, CubbyExecResponse, EventInput, EventRole, EventsPage, IngestOrigin, Job, JobsPage, JobState, Member, MemberRole, MembershipState, MembershipSummary, PublishResult, Scope, ScopeGrants, ScopeLevel, SignedGrant, SignedRoster, StreamSummary, StreamsListResponse, VaultCredentialStatus, VaultEvent, VaultRecord, VaultSigType, } from "./core/types.js";
 export { VaultInfo } from "./internal/vault-info.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,YAAY,EACV,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,gBAAgB,GACjB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEzD,YAAY,EACV,YAAY,EACZ,WAAW,EACX,WAAW,GACZ,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,YAAY,EACV,aAAa,EACb,SAAS,EACT,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,EACL,SAAS,EACT,sBAAsB,EACtB,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,uBAAuB,EACvB,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAM1B,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,sBAAsB,EACtB,sBAAsB,EACtB,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EACd,WAAW,EACX,UAAU,EACV,WAAW,EACX,cAAc,EACd,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAK9D,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAEpF,YAAY,EACV,IAAI,EACJ,SAAS,EACT,SAAS,EACT,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,UAAU,EACV,SAAS,EACT,UAAU,EACV,YAAY,EACZ,GAAG,EACH,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,UAAU,EACV,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,KAAK,EACL,WAAW,EACX,UAAU,EACV,WAAW,EACX,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,qBAAqB,EACrB,UAAU,EACV,WAAW,EACX,YAAY,GACb,MAAM,iBAAiB,CAAC;AAWzB,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,YAAY,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,oBAAoB,GACrB,MAAM,iCAAiC,CAAC;AACzC,YAAY,EACV,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,iCAAiC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,YAAY,EACV,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,gBAAgB,GACjB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEzD,YAAY,EACV,YAAY,EACZ,WAAW,EACX,WAAW,GACZ,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,YAAY,EACV,aAAa,EACb,SAAS,EACT,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,EACL,SAAS,EACT,sBAAsB,EACtB,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,uBAAuB,EACvB,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAM1B,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,eAAe,EACf,sBAAsB,EACtB,sBAAsB,EACtB,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,8BAA8B,EAC9B,kBAAkB,EAClB,cAAc,EACd,WAAW,EACX,qBAAqB,EACrB,cAAc,EACd,UAAU,EACV,WAAW,EACX,cAAc,EACd,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAKvH,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAEpF,YAAY,EACV,IAAI,EACJ,SAAS,EACT,SAAS,EACT,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,UAAU,EACV,SAAS,EACT,UAAU,EACV,YAAY,EACZ,GAAG,EACH,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,UAAU,EACV,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,KAAK,EACL,WAAW,EACX,UAAU,EACV,WAAW,EACX,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,qBAAqB,EACrB,UAAU,EACV,WAAW,EACX,YAAY,GACb,MAAM,iBAAiB,CAAC;AAWzB,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,YAAY,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,oBAAoB,GACrB,MAAM,iCAAiC,CAAC;AACzC,YAAY,EACV,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,iCAAiC,CAAC"}

package/dist/index.js

@@ -19,7 +19,7 @@ export { VaultRequestError, VaultNotImplementedError, VaultSignerRequiredError,
 // `/internal`, because a consumer that cannot reach it easily will read
 // `SignedGrant.role`/`.scopes` instead and end up with a signature it checked
 // and did not act on.
-export { GRANT_ISSUED_AT_HEADER, GRANT_SCHEMA, GRANT_SIGNATURE_HEADER, GrantVerificationError, NO_GRANT_EXPIRY, canonicalGrantBytes, canonicalPubkeyHex, decodeGrantDoc, grantExpiry, vaultIdFor, verifyGrant, verifyGrantSig, verifySignedRoster, } from "./core/grant-doc.js";
+export { GRANT_ISSUED_AT_HEADER, GRANT_SCHEMA, GRANT_SCHEMA_V2, GRANT_SIGNATURE_HEADER, GrantVerificationError, NO_GRANT_EXPIRY, NO_PRIVACY_CEILING, PRIVACY_CEILINGS, canonicalGrantBytes, canonicalGrantBytesWithCeiling, canonicalPubkeyHex, decodeGrantDoc, grantExpiry, isValidPrivacyCeiling, privacyCeiling, vaultIdFor, verifyGrant, verifyGrantSig, verifySignedRoster, } from "./core/grant-doc.js";
 // Delegate-grant surface — `vault.delegate.{pubkey,grant,revoke}` (see
 // `client.ts`) covers the common connect-time flow, but the frontend also
 // needs direct access to `VaultInfo`'s `DelegateInfo` type (Task 3 left

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,wEAAwE;AACxE,kCAAkC;AAElC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAOvC,OAAO,EACL,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAOlC,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAQhD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAS9C,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAU9D,OAAO,EACL,SAAS,EACT,sBAAsB,EACtB,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAO/B,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAE1B,0EAA0E;AAC1E,wEAAwE;AACxE,8EAA8E;AAC9E,sBAAsB;AACtB,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,sBAAsB,EACtB,sBAAsB,EACtB,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EACd,WAAW,EACX,UAAU,EACV,WAAW,EACX,cAAc,EACd,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AA0C7B,uEAAuE;AACvE,0EAA0E;AAC1E,wEAAwE;AACxE,8EAA8E;AAC9E,4EAA4E;AAC5E,0EAA0E;AAC1E,6EAA6E;AAC7E,wEAAwE;AACxE,wBAAwB;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAErD,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,oBAAoB,GACrB,MAAM,iCAAiC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,wEAAwE;AACxE,kCAAkC;AAElC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAOvC,OAAO,EACL,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAOlC,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAQhD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAS9C,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAU9D,OAAO,EACL,SAAS,EACT,sBAAsB,EACtB,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAO/B,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAE1B,0EAA0E;AAC1E,wEAAwE;AACxE,8EAA8E;AAC9E,sBAAsB;AACtB,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,eAAe,EACf,sBAAsB,EACtB,sBAAsB,EACtB,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,8BAA8B,EAC9B,kBAAkB,EAClB,cAAc,EACd,WAAW,EACX,qBAAqB,EACrB,cAAc,EACd,UAAU,EACV,WAAW,EACX,cAAc,EACd,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AA0C7B,uEAAuE;AACvE,0EAA0E;AAC1E,wEAAwE;AACxE,8EAA8E;AAC9E,4EAA4E;AAC5E,0EAA0E;AAC1E,6EAA6E;AAC7E,wEAAwE;AACxE,wBAAwB;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAErD,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,oBAAoB,GACrB,MAAM,iCAAiC,CAAC"}

package/dist/internal/memberships.d.ts

@@ -1,5 +1,6 @@
 import type { Signer } from "@cef-ai/signer";
 import type { VaultHttpClient } from "../core/http.js";
+import type { PrivacyCeilingName } from "../core/grant-doc.js";
 import type { Member, MemberRole, MembershipSummary, ScopeGrants, SignedRoster } from "../core/types.js";
 /**
  * What the caller already knows about the membership's OTHER half, so the
@@ -15,6 +16,17 @@ import type { Member, MemberRole, MembershipSummary, ScopeGrants, SignedRoster }
 export interface PutMemberOptions {
     /** The scope grants this member ALREADY holds. Default: read back. */
     scopes?: ScopeGrants;
+    /**
+     * The most sensitive class of fact this membership may see. Default: send
+     * no `privacyCeiling` field and sign the v1 document — byte-identical to
+     * the request 4.1.0 sent, which is the property that keeps this option
+     * additive.
+     *
+     * `NO_PRIVACY_CEILING` is deliberately not a settable value here (see its
+     * own doc): "no ceiling was ever signed" has exactly one spelling, absence,
+     * and admitting `""` at the writer would give the state two.
+     */
+    privacyCeiling?: PrivacyCeilingName;
 }
 /** @see PutMemberOptions */
 export interface PutScopesOptions {
@@ -240,6 +252,14 @@ export declare class Memberships {
      * member with grants signs those grants too. They are read back with `scopes()` (a 404 — the new
      * member case — is `{}`); pass `{ scopes }` to skip that GET when they are
      * already in hand.
+     *
+     * `{ privacyCeiling }` widens the SAME document to v2 rather than adding a
+     * second one: the ceiling joins `expiresAt` as the last field, the schema
+     * string flips to `cere.vault.grant.v2`, and the body carries the ceiling
+     * beside the role it constrains. The scopes in the document are STILL the
+     * held ones and the expiry is STILL the body's exact string — the ceiling
+     * changes which encoder builds the document, never what the document is
+     * built FROM.
      */
     put(vaultId: string, memberPubkey: string, role: MemberRole, expiresAt?: string, opts?: PutMemberOptions): Promise<Member>;
     /**
@@ -320,6 +340,13 @@ export declare class Memberships {
      * sr25519), so an sr25519 owner can authenticate the request and still
      * never produce a document the server will accept. Named up front rather
      * than left to surface as an opaque signature refusal.
+     *
+     * `ceiling` is the ONE input that changes which encoder runs, because it is
+     * the one field whose absence is a document VERSION: unset builds the v1
+     * bytes exactly as before this option existed, set appends the ceiling and
+     * flips the schema string. An invalid value never gets this far — `put()`
+     * vets it before its read-back — and the encoder re-checks regardless, so
+     * a typo cannot become a stored grant on any path in.
      */
     private grantHeader;
     /**

package/dist/internal/memberships.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memberships.d.ts","sourceRoot":"","sources":["../../src/internal/memberships.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAavD,OAAO,KAAK,EACV,MAAM,EACN,UAAU,EACV,iBAAiB,EACjB,WAAW,EACX,YAAY,EACb,MAAM,kBAAkB,CAAC;AAE1B;;;;;;;;;;GAUG;AACH,MAAM,WAAW,gBAAgB;IAC/B,sEAAsE;IACtE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,4BAA4B;AAC5B,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACrD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkFG;AACH,qBAAa,WAAW;IAUpB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAV1B;;;;;;;OAOG;gBAEgB,IAAI,EAAE,eAAe,EACrB,MAAM,CAAC,EAAE,MAAM,YAAA;IAGlC;;;;;;;;;;;;;OAaG;IACH,IAAI,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAIpC;;;;;;;;;;;OAWG;IACH,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAIxC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4CG;IACH,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAIpD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgCG;IACG,GAAG,CACP,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,UAAU,EAChB,SAAS,CAAC,EAAE,MAAM,EAClB,IAAI,GAAE,gBAAqB,GAC1B,OAAO,CAAC,MAAM,CAAC;IAalB;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM5D;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,WAAW,CAAA;KAAE,CAAC;IAI/E;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACG,SAAS,CACb,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,WAAW,EACnB,IAAI,GAAE,gBAAqB,GAC1B,OAAO,CAAC,IAAI,CAAC;IAUhB;;;;;;;;;;;;;;;;;OAiBG;YACW,WAAW;IAiDzB;;;;;;;;;;;OAWG;YACW,UAAU;IASxB;;;;;;;;;;;;;;;;;;;OAmBG;YACW,YAAY;CAkB3B"}
+{"version":3,"file":"memberships.d.ts","sourceRoot":"","sources":["../../src/internal/memberships.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAevD,OAAO,KAAK,EAA+B,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE5F,OAAO,KAAK,EACV,MAAM,EACN,UAAU,EACV,iBAAiB,EACjB,WAAW,EACX,YAAY,EACb,MAAM,kBAAkB,CAAC;AAE1B;;;;;;;;;;GAUG;AACH,MAAM,WAAW,gBAAgB;IAC/B,sEAAsE;IACtE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;;;;;;OASG;IACH,cAAc,CAAC,EAAE,kBAAkB,CAAC;CACrC;AAED,4BAA4B;AAC5B,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACrD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkFG;AACH,qBAAa,WAAW;IAUpB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAV1B;;;;;;;OAOG;gBAEgB,IAAI,EAAE,eAAe,EACrB,MAAM,CAAC,EAAE,MAAM,YAAA;IAGlC;;;;;;;;;;;;;OAaG;IACH,IAAI,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAIpC;;;;;;;;;;;OAWG;IACH,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAIxC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4CG;IACH,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAIpD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAwCG;IACG,GAAG,CACP,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,UAAU,EAChB,SAAS,CAAC,EAAE,MAAM,EAClB,IAAI,GAAE,gBAAqB,GAC1B,OAAO,CAAC,MAAM,CAAC;IAuClB;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM5D;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,WAAW,CAAA;KAAE,CAAC;IAI/E;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACG,SAAS,CACb,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,WAAW,EACnB,IAAI,GAAE,gBAAqB,GAC1B,OAAO,CAAC,IAAI,CAAC;IAUhB;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;YACW,WAAW;IAgEzB;;;;;;;;;;;OAWG;YACW,UAAU;IASxB;;;;;;;;;;;;;;;;;;;OAmBG;YACW,YAAY;CAkB3B"}

package/dist/internal/memberships.js

@@ -1,6 +1,6 @@
 import { endpoints } from "../core/endpoints.js";
 import { bytesToHex } from "../core/canonical.js";
-import { GRANT_SIGNATURE_HEADER, GRANT_ISSUED_AT_HEADER, NO_GRANT_EXPIRY, canonicalGrantBytes, canonicalPubkeyHex, grantExpiry, } from "../core/grant-doc.js";
+import { GRANT_SIGNATURE_HEADER, GRANT_ISSUED_AT_HEADER, NO_GRANT_EXPIRY, PRIVACY_CEILINGS, canonicalGrantBytes, canonicalGrantBytesWithCeiling, canonicalPubkeyHex, grantExpiry, isValidPrivacyCeiling, privacyCeiling, } from "../core/grant-doc.js";
 import { VaultRequestError, VaultSignerRequiredError } from "../core/errors.js";
 /**
  * Who belongs to a vault, in what role, holding which scope grants — and,
@@ -212,8 +212,30 @@ export class Memberships {
      * member with grants signs those grants too. They are read back with `scopes()` (a 404 — the new
      * member case — is `{}`); pass `{ scopes }` to skip that GET when they are
      * already in hand.
+     *
+     * `{ privacyCeiling }` widens the SAME document to v2 rather than adding a
+     * second one: the ceiling joins `expiresAt` as the last field, the schema
+     * string flips to `cere.vault.grant.v2`, and the body carries the ceiling
+     * beside the role it constrains. The scopes in the document are STILL the
+     * held ones and the expiry is STILL the body's exact string — the ceiling
+     * changes which encoder builds the document, never what the document is
+     * built FROM.
      */
     async put(vaultId, memberPubkey, role, expiresAt, opts = {}) {
+        // Branded and VETTED before anything else this method does. The brand is
+        // a COMPILE-TIME distinction only — `privacyCeiling()` casts and accepts
+        // any string at runtime — so the `isValidPrivacyCeiling` check is the
+        // actual refusal, and it runs ahead of the read-back GET because a caller
+        // error must cost no round trip (the encoder re-checks at the document,
+        // for whoever builds one without passing through here). It refuses `""`
+        // as well: NO_PRIVACY_CEILING is not a value a caller may SET — see the
+        // option — and the encoder alone would treat it as "unset" while the body
+        // below still carried the key.
+        const ceiling = opts.privacyCeiling === undefined ? undefined : privacyCeiling(opts.privacyCeiling);
+        if (ceiling !== undefined && !isValidPrivacyCeiling(ceiling)) {
+            throw new Error(`put: privacyCeiling ${JSON.stringify(ceiling)} must be one of ` +
+                PRIVACY_CEILINGS.map((c) => `"${c}"`).join(", "));
+        }
         const scopes = opts.scopes ?? (await this.heldScopes(vaultId, memberPubkey));
         // ONE STRING, SENT AND SIGNED. `expiresAt` goes into the body and into the
         // signed bytes unchanged; absent is NO_GRANT_EXPIRY, which is the empty
@@ -221,8 +243,17 @@ export class Memberships {
         // expiry" has a spelling of its own rather than being a missing key.
         const expiry = expiresAt === undefined ? NO_GRANT_EXPIRY : grantExpiry(expiresAt);
         return this.http.send("PUT", endpoints.vaultMember(vaultId, memberPubkey), {
-            body: { role, expiresAt, timestamp: new Date().toISOString() },
-            headers: await this.grantHeader(vaultId, memberPubkey, role, scopes, expiry),
+            // The ceiling key rides ALONGSIDE the fields 4.1.0 sent, and only when
+            // set: an unconditional `privacyCeiling: undefined` would rely on every
+            // downstream serialiser (auth canonicalisation included) dropping it to
+            // keep the no-ceiling request byte-identical.
+            body: {
+                role,
+                expiresAt,
+                ...(ceiling === undefined ? {} : { privacyCeiling: ceiling }),
+                timestamp: new Date().toISOString(),
+            },
+            headers: await this.grantHeader(vaultId, memberPubkey, role, scopes, expiry, ceiling),
         });
     }
     /**
@@ -314,8 +345,15 @@ export class Memberships {
      * sr25519), so an sr25519 owner can authenticate the request and still
      * never produce a document the server will accept. Named up front rather
      * than left to surface as an opaque signature refusal.
+     *
+     * `ceiling` is the ONE input that changes which encoder runs, because it is
+     * the one field whose absence is a document VERSION: unset builds the v1
+     * bytes exactly as before this option existed, set appends the ceiling and
+     * flips the schema string. An invalid value never gets this far — `put()`
+     * vets it before its read-back — and the encoder re-checks regardless, so
+     * a typo cannot become a stored grant on any path in.
      */
-    async grantHeader(vaultId, memberPubkey, role, scopes, expiresAt) {
+    async grantHeader(vaultId, memberPubkey, role, scopes, expiresAt, ceiling) {
         const signer = this.signer;
         if (signer === undefined || typeof signer.sign !== "function") {
             throw new VaultSignerRequiredError(`A membership write must carry the VAULT OWNER's signature over the grant's ` +
@@ -340,7 +378,12 @@ export class Memberships {
         // two copies drift by a trimmed fractional zero and the signature fails
         // as though the key were wrong.
         const issuedAt = new Date().toISOString();
-        const doc = canonicalGrantBytes(vaultId, canonicalPubkeyHex(memberPubkey), role, scopes, issuedAt, expiresAt);
+        // The ceiling decides the document's VERSION, and only that: the v1 call
+        // stays literally the 4.1.0 line (not merely byte-equal to it), so the
+        // no-ceiling path keeps the exact code history has exercised.
+        const doc = ceiling === undefined
+            ? canonicalGrantBytes(vaultId, canonicalPubkeyHex(memberPubkey), role, scopes, issuedAt, expiresAt)
+            : canonicalGrantBytesWithCeiling(vaultId, canonicalPubkeyHex(memberPubkey), role, scopes, issuedAt, expiresAt, ceiling);
         return {
             [GRANT_SIGNATURE_HEADER]: bytesToHex(await signer.sign(doc, "data")),
             [GRANT_ISSUED_AT_HEADER]: issuedAt,

package/dist/internal/memberships.js.map

@@ -1 +1 @@
-{"version":3,"file":"memberships.js","sourceRoot":"","sources":["../../src/internal/memberships.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AA8ChF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkFG;AACH,MAAM,OAAO,WAAW;IAUH;IACA;IAVnB;;;;;;;OAOG;IACH,YACmB,IAAqB,EACrB,MAAe;QADf,SAAI,GAAJ,IAAI,CAAiB;QACrB,WAAM,GAAN,MAAM,CAAS;IAC/B,CAAC;IAEJ;;;;;;;;;;;;;OAaG;IACH,IAAI;QACF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;;;;;OAWG;IACH,IAAI,CAAC,OAAe;QAClB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4CG;IACH,YAAY,CAAC,OAAe;QAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;IACrE,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgCG;IACH,KAAK,CAAC,GAAG,CACP,OAAe,EACf,YAAoB,EACpB,IAAgB,EAChB,SAAkB,EAClB,OAAyB,EAAE;QAE3B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;QAC7E,2EAA2E;QAC3E,wEAAwE;QACxE,sEAAsE;QACtE,qEAAqE;QACrE,MAAM,MAAM,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE;YACzE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;YAC9D,OAAO,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC;SAC7E,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,OAAe,EAAE,YAAoB;QAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE;YAC5E,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;SAC9C,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,OAAe,EAAE,YAAoB;QAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IACnF,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,KAAK,CAAC,SAAS,CACb,OAAe,EACf,YAAoB,EACpB,MAAmB,EACnB,OAAyB,EAAE;QAE3B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;QACnF,MAAM,MAAM,GACV,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACvF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE;YAC/E,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;YACpF,OAAO,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC;SACtF,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACK,KAAK,CAAC,WAAW,CACvB,OAAe,EACf,YAAoB,EACpB,IAAgB,EAChB,MAAmB,EACnB,SAAsB;QAEtB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC9D,MAAM,IAAI,wBAAwB,CAChC,6EAA6E;gBAC3E,8BAA8B,sBAAsB,yBAAyB;gBAC7E,+EAA+E;gBAC/E,gFAAgF;gBAChF,wDAAwD,CAC3D,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,wBAAwB,CAChC,+EAA+E;gBAC7E,0CAA0C,MAAM,CAAC,IAAI,wBAAwB;gBAC7E,+DAA+D,CAClE,CAAC;QACJ,CAAC;QACD,mEAAmE;QACnE,wEAAwE;QACxE,sEAAsE;QACtE,yEAAyE;QACzE,mDAAmD;QACnD,EAAE;QACF,uEAAuE;QACvE,wEAAwE;QACxE,wEAAwE;QACxE,gCAAgC;QAChC,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,mBAAmB,CAC7B,OAAO,EACP,kBAAkB,CAAC,YAAY,CAAC,EAChC,IAAI,EACJ,MAAM,EACN,QAAQ,EACR,SAAS,CACV,CAAC;QACF,OAAO;YACL,CAAC,sBAAsB,CAAC,EAAE,UAAU,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACpE,CAAC,sBAAsB,CAAC,EAAE,QAAQ;SACnC,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACK,KAAK,CAAC,UAAU,CAAC,OAAe,EAAE,YAAoB;QAC5D,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,iBAAiB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,CAAC;YACtE,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACK,KAAK,CAAC,YAAY,CACxB,OAAe,EACf,YAAoB;QAEpB,MAAM,SAAS,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CACzC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,IAAI,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,SAAS,CAC9E,CAAC;QACF,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,cAAc,SAAS,6BAA6B,OAAO,wBAAwB;gBACjF,+DAA+D;gBAC/D,8EAA8E;gBAC9E,oBAAoB,CACvB,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;IACtD,CAAC;CACF"}
+{"version":3,"file":"memberships.js","sourceRoot":"","sources":["../../src/internal/memberships.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,8BAA8B,EAC9B,kBAAkB,EAClB,WAAW,EACX,qBAAqB,EACrB,cAAc,GACf,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAyDhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkFG;AACH,MAAM,OAAO,WAAW;IAUH;IACA;IAVnB;;;;;;;OAOG;IACH,YACmB,IAAqB,EACrB,MAAe;QADf,SAAI,GAAJ,IAAI,CAAiB;QACrB,WAAM,GAAN,MAAM,CAAS;IAC/B,CAAC;IAEJ;;;;;;;;;;;;;OAaG;IACH,IAAI;QACF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;;;;;OAWG;IACH,IAAI,CAAC,OAAe;QAClB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4CG;IACH,YAAY,CAAC,OAAe;QAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;IACrE,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAwCG;IACH,KAAK,CAAC,GAAG,CACP,OAAe,EACf,YAAoB,EACpB,IAAgB,EAChB,SAAkB,EAClB,OAAyB,EAAE;QAE3B,yEAAyE;QACzE,yEAAyE;QACzE,sEAAsE;QACtE,0EAA0E;QAC1E,wEAAwE;QACxE,wEAAwE;QACxE,wEAAwE;QACxE,0EAA0E;QAC1E,+BAA+B;QAC/B,MAAM,OAAO,GACX,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACtF,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CACb,uBAAuB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,kBAAkB;gBAC9D,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACnD,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;QAC7E,2EAA2E;QAC3E,wEAAwE;QACxE,sEAAsE;QACtE,qEAAqE;QACrE,MAAM,MAAM,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE;YACzE,uEAAuE;YACvE,wEAAwE;YACxE,wEAAwE;YACxE,8CAA8C;YAC9C,IAAI,EAAE;gBACJ,IAAI;gBACJ,SAAS;gBACT,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;gBAC7D,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC;YACD,OAAO,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC;SACtF,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,OAAe,EAAE,YAAoB;QAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE;YAC5E,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;SAC9C,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,OAAe,EAAE,YAAoB;QAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IACnF,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,KAAK,CAAC,SAAS,CACb,OAAe,EACf,YAAoB,EACpB,MAAmB,EACnB,OAAyB,EAAE;QAE3B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;QACnF,MAAM,MAAM,GACV,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACvF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE;YAC/E,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;YACpF,OAAO,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC;SACtF,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACK,KAAK,CAAC,WAAW,CACvB,OAAe,EACf,YAAoB,EACpB,IAAgB,EAChB,MAAmB,EACnB,SAAsB,EACtB,OAAwB;QAExB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC9D,MAAM,IAAI,wBAAwB,CAChC,6EAA6E;gBAC3E,8BAA8B,sBAAsB,yBAAyB;gBAC7E,+EAA+E;gBAC/E,gFAAgF;gBAChF,wDAAwD,CAC3D,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,wBAAwB,CAChC,+EAA+E;gBAC7E,0CAA0C,MAAM,CAAC,IAAI,wBAAwB;gBAC7E,+DAA+D,CAClE,CAAC;QACJ,CAAC;QACD,mEAAmE;QACnE,wEAAwE;QACxE,sEAAsE;QACtE,yEAAyE;QACzE,mDAAmD;QACnD,EAAE;QACF,uEAAuE;QACvE,wEAAwE;QACxE,wEAAwE;QACxE,gCAAgC;QAChC,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC1C,yEAAyE;QACzE,uEAAuE;QACvE,8DAA8D;QAC9D,MAAM,GAAG,GACP,OAAO,KAAK,SAAS;YACnB,CAAC,CAAC,mBAAmB,CACjB,OAAO,EACP,kBAAkB,CAAC,YAAY,CAAC,EAChC,IAAI,EACJ,MAAM,EACN,QAAQ,EACR,SAAS,CACV;YACH,CAAC,CAAC,8BAA8B,CAC5B,OAAO,EACP,kBAAkB,CAAC,YAAY,CAAC,EAChC,IAAI,EACJ,MAAM,EACN,QAAQ,EACR,SAAS,EACT,OAAO,CACR,CAAC;QACR,OAAO;YACL,CAAC,sBAAsB,CAAC,EAAE,UAAU,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACpE,CAAC,sBAAsB,CAAC,EAAE,QAAQ;SACnC,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACK,KAAK,CAAC,UAAU,CAAC,OAAe,EAAE,YAAoB;QAC5D,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,iBAAiB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,CAAC;YACtE,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACK,KAAK,CAAC,YAAY,CACxB,OAAe,EACf,YAAoB;QAEpB,MAAM,SAAS,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CACzC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,IAAI,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,SAAS,CAC9E,CAAC;QACF,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,cAAc,SAAS,6BAA6B,OAAO,wBAAwB;gBACjF,+DAA+D;gBAC/D,8EAA8E;gBAC9E,oBAAoB,CACvB,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;IACtD,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cef-ai/vault-sdk",
-  "version": "4.0.0",
+  "version": "4.2.0",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -25,9 +25,9 @@
     "@polkadot/keyring": "^14.0.3",
     "@polkadot/util": "^14.0.3",
     "@polkadot/util-crypto": "^14.0.3",
+    "@cef-ai/account": "1.3.1",
     "@cef-ai/signer": "1.0.0",
-    "@cef-ai/transport": "1.1.0",
-    "@cef-ai/account": "1.3.1"
+    "@cef-ai/transport": "1.1.0"
   },
   "devDependencies": {
     "@types/node": "^20.11.0",