@cotal-ai/core 0.12.0 → 0.13.0

package/dist/endpoint-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint-session.js","sourceRoot":"","sources":["../src/endpoint-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+DG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACzE,OAAO,EACL,UAAU,EACV,aAAa,EACb,oBAAoB,EACpB,aAAa,GAEd,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,YAAY,GAEb,MAAM,uBAAuB,CAAC;AAE/B,MAAM,KAAK,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACrH,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,GAAG,IAAI,sBAAsB,CAAC,CAAC;AAC/E,CAAC;AAED,iGAAiG;AAEjG;iFACiF;AACjF,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5D,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,CAAC;AACjD,gGAAgG;AAChG,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAC;AACzC,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AACvC;4FAC4F;AAC5F,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEvC;0DAC0D;AAC1D,MAAM,UAAU,aAAa;IAC3B,OAAO,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,eAAe,CAAC,CAAU;IACjC,MAAM,EAAE,GAAG,aAAa,CAAC,CAAW,EAAE,WAAW,CAAC,CAAC;IACnD,IAAI,EAAE,CAAC,MAAM,GAAG,oBAAoB;QAClC,OAAO,CAAC,gBAAgB,EAAE,CAAC,MAAM,qBAAqB,oBAAoB,4BAA4B,CAAC,CAAC;IAC1G,OAAO,EAAE,CAAC;AACZ,CAAC;AA0CD,SAAS,YAAY,CAAC,CAAU;IAC9B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,kBAAkB;QACtF,OAAO,CAAC,UAAU,MAAM,CAAC,CAAC,CAAC,4BAA4B,kBAAkB,EAAE,CAAC,CAAC;IAC/E,OAAO,CAAC,CAAC;AACX,CAAC;AAED;gEACgE;AAChE,SAAS,cAAc,CAAC,CAAU,EAAE,IAAY;IAC9C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC;IACjI,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;8FAG8F;AAC9F,SAAS,cAAc,CAAC,EAAW;IACjC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,CAAC,6CAA6C,CAAC,CAAC;IACzH,IAAI,iBAAiB,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,qBAAqB,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,cAAc,EAAE,mFAAmF,CAAC,CAAC;IAC/G,CAAC;AACH,CAAC;AAED;sFACsF;AACtF,MAAM,UAAU,gBAAgB,CAC9B,IAA0B,EAC1B,OAAgD;IAEhD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,wBAAwB;QAC/F,OAAO,CAAC,SAAS,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,wBAAwB,GAAG,CAAC,CAAC;IACpF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACnG,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG;QACd,UAAU,EAAE,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,oBAAoB,CAAC;QAC/E,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,eAAe,CAAC;KAC3D,CAAC;IACF,MAAM,MAAM,GAAG;QACb,EAAE,EAAE,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,YAAY,EAAE,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,qBAAqB,CAAC;QACnF,YAAY,EAAE,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,qBAAqB,CAAC;KAC9E,CAAC;IACF,MAAM,QAAQ,GAAG;QACf,CAAC,EAAE,CAAU;QACb,SAAS;QACT,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,QAAQ;QACR,QAAQ,EAAE;YACR,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC;YACpE,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACvE;QACD,MAAM;QACN,OAAO;QACP,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,IAAI,sBAAsB,CAAC;QAC3D,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,GAAG,GAAG,IAAI,CAAC,KAAK;QACrB,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC5C,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,OAAO,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AACzC,CAAC;AAED;;;;iCAIiC;AACjC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAY,EACZ,IAAoE;IAEpE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACnC,2FAA2F;IAC3F,kFAAkF;IAClF,kFAAkF;IAClF,2EAA2E;IAC3E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC;QACvC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,gDAAgD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;IAClL,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAC7D,6FAA6F;IAC7F,6FAA6F;IAC7F,yEAAyE;IACzE,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,GAA8B,CAAC;QAC9D,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,wCAAyC,CAAW,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,uBAAuB;QAAE,OAAO,CAAC,yBAAyB,uBAAuB,QAAQ,CAAC,CAAC;IAEtI,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3J,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,4CAA4C,CAAC,mBAAmB,CAAC,CAAC;IAC/H,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,iCAAiC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC1F,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,+BAA+B,CAAC,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,yBAAyB,CAAC,CAAC;IACjK,MAAM,SAAS,GAAG,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAC,QAAkB,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC3D,MAAM,EAAE,GAAG,CAAC,CAAC,OAAkC,CAAC;IAChD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,KAAK,OAAO;YAAE,OAAO,CAAC,sCAAsC,CAAC,mBAAmB,CAAC,CAAC;IAC9I,MAAM,OAAO,GAAG;QACd,UAAU,EAAE,oBAAoB,CAAC,EAAE,CAAC,UAAoB,EAAE,oBAAoB,CAAC;QAC/E,KAAK,EAAE,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,CAAC;KACjD,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACzD,MAAM,CAAC,GAAG,CAAC,CAAC,MAAiC,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,cAAc,IAAI,CAAC,KAAK,cAAc;YAAE,OAAO,CAAC,qCAAqC,CAAC,mBAAmB,CAAC,CAAC;IACnK,MAAM,MAAM,GAAG;QACb,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QACxB,YAAY,EAAE,oBAAoB,CAAC,CAAC,CAAC,YAAsB,EAAE,qBAAqB,CAAC;QACnF,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC,YAAY,EAAE,qBAAqB,CAAC;KACpE,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,CAAC,CAAC,QAAmC,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK;YAAE,OAAO,CAAC,qCAAqC,CAAC,GAAG,CAAC,CAAC;IACrH,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC/E,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACjF,IAAI,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;QAChD,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,sHAAsH,CAAC,CAAC;IACzK,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAChG,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACzH,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAChG,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,wCAAwC,CAAC,CAAC;IAC7H,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,CAAC,CAAC,MAAiC,CAAC;IAChD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,IAAI,CAAC,KAAK,OAAO;YAAE,OAAO,CAAC,qCAAqC,CAAC,mBAAmB,CAAC,CAAC;IACxH,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAE3E,0FAA0F;IAC1F,mFAAmF;IACnF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAChH,uBAAuB,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,wBAAwB,CAAC,CAAC;IAChF,uBAAuB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAEnC,4FAA4F;IAC5F,iFAAiF;IACjF,2FAA2F;IAC3F,uFAAuF;IACvF,qFAAqF;IACrF,sBAAsB,CACpB,EAAE,GAAG,EAAE,CAAC,CAAC,GAAa,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAa,EAAE,EACxG,EAAE,GAAG,EAAE,SAAS,EAAE,wBAAwB,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CACrH,CAAC;IAEF,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,SAAS;QACT,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,QAAQ;QACR,QAAQ,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE;QAC1C,MAAM;QACN,OAAO;QACP,MAAM;QACN,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE;QAC5B,GAAG,EAAE,CAAC,CAAC,GAAa;KACrB,CAAC;AACJ,CAAC;AAED,iGAAiG;AAEjG,0FAA0F;AAC1F,+FAA+F;AAC/F,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,CAAU,CAAC,CAAC;AAC9G,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAC,uBAAuB,CAAC,CAAC;AAgClF,0DAA0D;AAC1D,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,OAAO,WAAW,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;AACjD,CAAC;AAED;oFACoF;AACpF,MAAM,UAAU,4BAA4B,CAAC,IAAkB,EAAE,EAAgB;IAC/E,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,QAAQ;QACV,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,kBAAkB,IAAI,iDAAiD,CAAC,CAAC;IAC5H,IAAI,EAAE,KAAK,SAAS;QAClB,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,gGAAgG,CAAC,CAAC;IACrJ,IAAI,IAAI,KAAK,QAAQ,IAAI,EAAE,KAAK,QAAQ;QACtC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,6DAA6D,CAAC,CAAC;AACpH,CAAC;AA8GD,oEAAoE;AACpE,SAAS,kBAAkB,CAAC,CAAU,EAAE,IAAY;IAClD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,CAAC,GAAG,IAAI,iCAAiC,CAAC,CAAC;IACjH,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;sEAEsE;AACtE,SAAS,cAAc,CAAC,IAAuB,EAAE,MAAc,EAAE,UAAkB;IACjF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,KAAK,MAAM;QACpC,OAAO,CAAC,oCAAoC,MAAM,CAAE,IAAyB,EAAE,EAAE,CAAC,yBAAyB,MAAM,mBAAmB,CAAC,CAAC;IACxI,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,UAAU;QAC1F,OAAO,CAAC,2BAA2B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,6CAA6C,UAAU,8CAA8C,CAAC,CAAC;IAC5J,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,KAA6B,EAC7B,SAAiB,EACjB,GAAqC,EACrC,EAAwB,EACxB,GAAoB;IAEpB,6FAA6F;IAC7F,0FAA0F;IAC1F,4FAA4F;IAC5F,4CAA4C;IAC5C,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,oBAAoB;IACtB,CAAC;IACD,IAAI,GAAG,EAAE,CAAC;QACR,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;gBACjC,MAAM,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACP,6CAA6C;YAC/C,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,GAAG,CAAC;AACZ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAmB,EACnB,SAA2B,EAC3B,KAA6B;IAE7B,0EAA0E;IAC1E,IAAI,OAAO,SAAS,EAAE,EAAE,KAAK,QAAQ,IAAI,OAAO,SAAS,EAAE,YAAY,KAAK,QAAQ;QAClF,OAAO,CAAC,wDAAwD,CAAC,CAAC;IACpE,IAAI,SAAS,CAAC,EAAE,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,SAAS,CAAC,YAAY,KAAK,KAAK,CAAC,MAAM,CAAC,YAAY;QAC1F,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,oCAAoC,KAAK,CAAC,MAAM,CAAC,EAAE,SAAS,KAAK,CAAC,MAAM,CAAC,YAAY,uBAAuB,SAAS,CAAC,EAAE,SAAS,SAAS,CAAC,YAAY,uDAAuD,CAAC,CAAC;IAEjQ,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACxC,IAAI,GAAG,GAAG,KAAK,CAAC,GAAG;QAAE,MAAM,IAAI,eAAe,CAAC,SAAS,EAAE,4BAA4B,KAAK,CAAC,GAAG,SAAS,GAAG,GAAG,CAAC,CAAC;IAEhH,yFAAyF;IACzF,wEAAwE;IACxE,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/D,IAAI,SAAS,KAAK,KAAK,CAAC,MAAM,CAAC,YAAY;QACzC,MAAM,IAAI,eAAe,CAAC,SAAS,EAAE,wBAAwB,MAAM,CAAC,SAAS,CAAC,uBAAuB,KAAK,CAAC,MAAM,CAAC,YAAY,8EAA8E,CAAC,CAAC;IAChN,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtF,IAAI,UAAU,KAAK,KAAK,CAAC,OAAO,CAAC,KAAK;QACpC,MAAM,IAAI,eAAe,CAAC,SAAS,EAAE,iBAAiB,MAAM,CAAC,UAAU,CAAC,uBAAuB,KAAK,CAAC,OAAO,CAAC,KAAK,kEAAkE,CAAC,CAAC;IAExL,gGAAgG;IAChG,+FAA+F;IAC/F,wEAAwE;IACxE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACrD,kBAAkB,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACjD,kBAAkB,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACnD,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,CAAC,WAAW;QAAE,OAAO,CAAC,oCAAoC,GAAG,CAAC,UAAU,2CAA2C,CAAC,CAAC;IAE/I,+CAA+C;IAC/C,MAAM,GAAG,GAAqB;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE;QAC/E,QAAQ,EAAE,KAAK,CAAC,GAAG;QACnB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE;QAC1C,KAAK,EAAE,SAAS;QAChB,GAAG,EAAE,KAAK,CAAC,GAAG;KACf,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,wFAAwF;QACxF,wFAAwF;QACxF,yFAAyF;QACzF,oFAAoF;QACpF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC1D,wFAAwF;QACxF,4FAA4F;QAC5F,uFAAuF;QACvF,2FAA2F;QAC3F,4FAA4F;QAC5F,wCAAwC;QACxC,IACE,QAAQ,KAAK,SAAS;YACtB,QAAQ,CAAC,KAAK,KAAK,QAAQ;YAC3B,QAAQ,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE;YAC1C,QAAQ,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,YAAY;YACvD,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,GAAG,EAC/B,CAAC;YACD,yFAAyF;YACzF,mFAAmF;YACnF,OAAO,cAAc,CAAC,MAAM,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChI,CAAC;QACD,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,WAAW,KAAK,CAAC,SAAS,oIAAoI,CAAC,CAAC;IACjN,CAAC;IAED,wFAAwF;IACxF,yFAAyF;IACzF,+EAA+E;IAC/E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG;YACX,MAAM,EAAE,MAAM,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC;YACnD,OAAO,EAAE,MAAM,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;SAClF,CAAC;QACF,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,YAAY,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,mBAAmB,EAAE,WAAW,KAAK,CAAC,SAAS,8GAA+G,CAAW,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7T,CAAC;IAED,2FAA2F;IAC3F,4FAA4F;IAC5F,4FAA4F;IAC5F,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjE,IAAI,WAAW,KAAK,KAAK,CAAC,MAAM,CAAC,YAAY;QAC3C,OAAO,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,eAAe,CAAC,SAAS,EAAE,iCAAiC,MAAM,CAAC,WAAW,CAAC,kEAAkE,CAAC,CAAC,CAAC;IAC1N,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtF,IAAI,UAAU,KAAK,KAAK,CAAC,OAAO,CAAC,KAAK;QACpC,OAAO,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,eAAe,CAAC,SAAS,EAAE,0BAA0B,MAAM,CAAC,UAAU,CAAC,4EAA4E,CAAC,CAAC,CAAC;IAC/N,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC/C,IAAI,UAAU,GAAG,KAAK,CAAC,GAAG;QACxB,OAAO,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,eAAe,CAAC,SAAS,EAAE,4BAA4B,KAAK,CAAC,GAAG,2BAA2B,UAAU,4CAA4C,CAAC,CAAC,CAAC;IAE1N,2DAA2D;IAC3D,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACrE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;gBACjC,MAAM,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACtD,CAAC;YAAC,MAAM,CAAC;gBACP,yCAAyC;YAC3C,CAAC;QACH,CAAC;QACD,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,WAAW,KAAK,CAAC,SAAS,gHAAgH,CAAC,CAAC;IACpL,CAAC;IAED,4FAA4F;IAC5F,wFAAwF;IACxF,6DAA6D;IAC7D,OAAO,cAAc,CAAC,MAAM,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;AACnH,CAAC;AAED;;;;;iGAKiG;AACjG,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,SAAiB,EACjB,SAAkE,EAClE,KAAmE;IAEnE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,GAAG,KAAK,SAAS;QACnB,MAAM,IAAI,eAAe,CAAC,WAAW,EAAE,WAAW,SAAS,gCAAgC,CAAC,CAAC;IAC/F,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK;QACjI,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,WAAW,SAAS,yBAAyB,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,wBAAwB,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,UAAU,IAAI,SAAS,CAAC,KAAK,iCAAiC,CAAC,CAAC;IACjR,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ;QACxB,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,WAAW,SAAS,QAAQ,GAAG,CAAC,KAAK,kFAAkF,CAAC,CAAC;IAC5K,OAAO,cAAc,CAAC,MAAM,KAAK,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;AAC7G,CAAC;AAED;;;;;;;mDAOmD;AACnD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAqB,EACrB,KAAkE,EAClE,IAAwC;IAExC,MAAM,aAAa,GAAG,KAAK,IAAmB,EAAE;QAC9C,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACxD,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;gBACjC,MAAM,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,wEAAwE;YAC1E,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,IAAI,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC,CAAC,kBAAkB;QAC/E,MAAM,aAAa,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC9E,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,4EAA4E;IACtG,MAAM,aAAa,EAAE,CAAC;IACtB,OAAO,IAAI,CAAC;AACd,CAAC;AAkBD,MAAM,UAAU,kBAAkB,CAAC,KAAmB;IACpD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AACzD,CAAC;AAED;8EAC8E;AAC9E,MAAM,UAAU,iBAAiB,CAAC,KAAiB;IACjD,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAC3D,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,KAAK;gBAAE,OAAO,CAAC,qCAAqC,CAAC,GAAG,CAAC,CAAC;QAChJ,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC;YAAE,OAAO,CAAC,0CAA0C,CAAC,CAAC;QAChI,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;YAAE,OAAO,CAAC,4BAA4B,CAAC,CAAC;QAC1D,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;YAAE,OAAO,CAAC,8CAA8C,CAAC,CAAC;QAC7J,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC9F,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK;gBAAE,OAAO,CAAC,uCAAuC,CAAC,GAAG,CAAC,CAAC;QACnH,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC;YAAE,OAAO,CAAC,gDAAgD,CAAC,CAAC;QACtI,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,IAAI,CAAC,KAAK,GAAG;gBAAE,OAAO,CAAC,sCAAsC,CAAC,GAAG,CAAC,CAAC;QACnG,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;IACxB,CAAC;IACD,OAAO,CAAC,8BAA8B,MAAM,CAAE,CAAqB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC5E,CAAC;AA6DD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,eAAe,CAAC,IAAqB;IACnD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAC7B,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,GAAG,IAAI,CAAC;IACvD,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC;IAC/C,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC,EAAc,EAAE,EAAU,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAClG,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,aAAa,CAAC,CAAmC,CAAC,CAAC,CAAC;IACrH,MAAM,SAAS,GAAiB,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IACjE,MAAM,UAAU,GAAiB,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACxG,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAE1G,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,YAAY;IACzB,IAAI,YAAY,GAAG,CAAC,CAAC,CAAC,kDAAkD;IACxE,IAAI,eAAe,GAAG,CAAC,CAAC,CAAC,oEAAoE;IAC7F,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC,oDAAoD;IACtE,IAAI,oBAAoB,GAAG,CAAC,CAAC;IAC7B,IAAI,iBAAiB,GAAG,KAAK,CAAC,CAAC,oDAAoD;IACnF,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,SAA6C,CAAC;IAClD,IAAI,GAA6B,CAAC;IAClC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAEvD,0FAA0F;IAC1F,iFAAiF;IACjF,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,GAAS,EAAE;QAC1B,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,IAAI,SAAS;YAAE,eAAe,CAAC,SAAS,CAAC,CAAC;QAC1C,GAAG,EAAE,WAAW,EAAE,CAAC;IACrB,CAAC,CAAC;IACF,MAAM,aAAa,GAAG,CAAC,MAAc,EAAE,MAAgB,EAAQ,EAAE;QAC/D,MAAM,GAAG,IAAI,CAAC;QACd,QAAQ,EAAE,CAAC,CAAC,mCAAmC;QAC/C,IAAI,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC,CAAC;IACF,4FAA4F;IAC5F,8FAA8F;IAC9F,wDAAwD;IACxD,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAQ,EAAE;QACrC,IAAI,GAAG,GAAG,GAAG,EAAE,CAAC;YACd,aAAa,CAAC,gBAAgB,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD,IAAI,GAAG,GAAG,YAAY,EAAE,CAAC;YACvB,YAAY,GAAG,GAAG,CAAC;YACnB,eAAe,GAAG,CAAC,CAAC,CAAC,sCAAsC;QAC7D,CAAC;IACH,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,GAAS,EAAE;QAC5B,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAClF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,aAAa,CAAC,SAAS,EAAG,CAAW,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC,CAAC;IAEF,6FAA6F;IAC7F,6FAA6F;IAC7F,6FAA6F;IAC7F,4FAA4F;IAC5F,2FAA2F;IAC3F,yFAAyF;IACzF,qFAAqF;IACrF,MAAM,YAAY,GAA0C,EAAE,CAAC;IAC/D,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,KAAK,GAAG,KAAK,IAAmB,EAAE;QACtC,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;gBAC7B,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;gBACzC,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,8EAA8E;oBAC9E,mFAAmF;oBACnF,6DAA6D;oBAC7D,IAAI,MAAM,IAAI,MAAM;wBAAE,OAAO;oBAC7B,aAAa,CAAC,SAAS,EAAG,CAAW,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC7D,OAAO;gBACT,CAAC;gBACD,IAAI,MAAM,IAAI,MAAM;oBAAE,OAAO;gBAC7B,YAAY,CAAC,KAAK,EAAE,CAAC;gBACrB,QAAQ,EAAE,CAAC;gBACX,SAAS,EAAE,CAAC;gBACZ,oBAAoB,EAAE,CAAC;gBACvB,IAAI,oBAAoB,IAAI,WAAW,EAAE,CAAC;oBACxC,oBAAoB,GAAG,CAAC,CAAC;oBACzB,UAAU,EAAE,CAAC;gBACf,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,QAAQ,GAAG,KAAK,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IAEF,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE;QAC/B,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACrB,IAAI,MAAM,IAAI,MAAM;gBAAE,OAAO;YAC7B,IAAI,GAAG,EAAE,CAAC;gBACR,aAAa,CAAC,cAAc,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YACD,IAAI,KAAmB,CAAC;YACxB,IAAI,CAAC;gBACH,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACtC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,aAAa,CAAC,eAAe,EAAG,CAAW,CAAC,OAAO,CAAC,CAAC;gBACrD,OAAO;YACT,CAAC;YACD,IAAI,KAAK,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACzB,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YACD,IAAI,KAAK,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;gBACxB,MAAM,GAAG,IAAI,CAAC;gBACd,QAAQ,EAAE,CAAC;gBACX,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;gBACjB,OAAO;YACT,CAAC;YACD,oFAAoF;YACpF,qFAAqF;YACrF,mFAAmF;YACnF,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC5B,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACpB,IAAI,MAAM;oBAAE,OAAO;YACrB,CAAC;YACD,iBAAiB,GAAG,IAAI,CAAC;YACzB,wFAAwF;YACxF,4EAA4E;YAC5E,MAAM,WAAW,GAAG,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC;YACnD,IAAI,KAAK,CAAC,GAAG,GAAG,WAAW;gBAAE,OAAO,CAAC,8BAA8B;YACnE,IAAI,KAAK,CAAC,GAAG,GAAG,WAAW,EAAE,CAAC;gBAC5B,aAAa,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBAChE,OAAO;YACT,CAAC;YACD,uFAAuF;YACvF,wFAAwF;YACxF,wFAAwF;YACxF,IAAI,YAAY,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC;gBAClC,aAAa,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;gBAChE,OAAO;YACT,CAAC;YACD,YAAY,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACxD,KAAK,KAAK,EAAE,CAAC;QACf,CAAC;KACF,CAAC,CAAC;IAEH,sCAAsC;IACtC,4FAA4F;IAC5F,6FAA6F;IAC7F,gFAAgF;IAChF,0FAA0F;IAC1F,0FAA0F;IAC1F,IAAI,YAAY,GAAG,CAAC,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;QAC3C,SAAS,GAAG,aAAa,CAAC,GAAG,EAAE;YAC7B,IAAI,MAAM,IAAI,MAAM;gBAAE,OAAO;YAC7B,IAAI,cAAc,GAAG,CAAC,IAAI,eAAe,KAAK,CAAC,EAAE,CAAC;gBAChD,MAAM,SAAS,GAAG,GAAG,EAAE,GAAG,eAAe,CAAC;gBAC1C,IAAI,SAAS,GAAG,cAAc,EAAE,CAAC;oBAC/B,aAAa,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;oBACvE,OAAO;gBACT,CAAC;YACH,CAAC;YACD,IAAI,YAAY,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,QAAQ,GAAG,CAAC;gBAAE,UAAU,EAAE,CAAC;YACzE,iBAAiB,GAAG,KAAK,CAAC;QAC5B,CAAC,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3C,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;IACtB,CAAC;IAED,OAAO;QACL,IAAI,CAAC,IAAa;YAChB,IAAI,MAAM,IAAI,MAAM;gBAClB,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,oEAAoE,CAAC,CAAC;YACzH,IAAI,GAAG,IAAI,MAAM,CAAC,gBAAgB,GAAG,CAAC,EAAE,CAAC;gBACvC,aAAa,CAAC,eAAe,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;gBACxC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,gFAAgF,CAAC,CAAC;YACrI,CAAC;YACD,IAAI,GAAG,GAAG,YAAY,IAAI,MAAM,EAAE,CAAC;gBACjC,uFAAuF;gBACvF,sFAAsF;gBACtF,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;gBAChB,IAAI,eAAe,KAAK,CAAC;oBAAE,eAAe,GAAG,CAAC,CAAC;qBAC1C,IAAI,cAAc,GAAG,CAAC,IAAI,CAAC,GAAG,eAAe,GAAG,cAAc,EAAE,CAAC;oBACpE,aAAa,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,GAAG,eAAe,EAAE,CAAC,CAAC;oBAC5F,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,gDAAgD,CAAC,GAAG,eAAe,sEAAsE,CAAC,CAAC;gBAC9L,CAAC;gBACD,MAAM,IAAI,eAAe,CACvB,oBAAoB,EACpB,2BAA2B,MAAM,qFAAqF,CACvH,CAAC;YACJ,CAAC;YACD,uFAAuF;YACvF,MAAM,GAAG,GAAG,QAAQ,GAAG,CAAC,CAAC;YACzB,MAAM,KAAK,GAAG,kBAAkB,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9F,IAAI,KAAK,CAAC,UAAU,GAAG,UAAU;gBAC/B,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,oBAAoB,KAAK,CAAC,UAAU,oBAAoB,UAAU,uBAAuB,CAAC,CAAC;YAC3I,wFAAwF;YACxF,sFAAsF;YACtF,mFAAmF;YACnF,IAAI,CAAC;gBACH,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACjC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,aAAa,CAAC,SAAS,EAAG,CAAW,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7D,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,8EAA+E,CAAW,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACvK,CAAC;YACD,GAAG,EAAE,CAAC;YACN,oFAAoF;YACpF,+EAA+E;YAC/E,IAAI,GAAG,GAAG,YAAY,IAAI,MAAM,IAAI,eAAe,KAAK,CAAC;gBAAE,eAAe,GAAG,GAAG,EAAE,CAAC;YACnF,OAAO,GAAG,CAAC;QACb,CAAC;QACD,KAAK;YACH,IAAI,MAAM,EAAE,CAAC;gBACX,QAAQ,EAAE,CAAC,CAAC,6CAA6C;gBACzD,OAAO;YACT,CAAC;YACD,MAAM,GAAG,IAAI,CAAC;YACd,IAAI,CAAC;gBACH,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YAC9D,CAAC;YAAC,MAAM,CAAC;gBACP,iDAAiD;YACnD,CAAC;YACD,QAAQ,EAAE,CAAC;QACb,CAAC;QACD,KAAK;YACH,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,GAAG,YAAY,EAAE,CAAC;QAC9E,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/endpoint-signing.d.ts

@@ -0,0 +1,105 @@
+/**
+ * The §13.6/§13.10 validity-window currency rules for a timed signed artifact, in ONE place —
+ * handle links and session grants both call this (SPEC 1778: session expiry follows the handle
+ * rules), so a rule added or tightened later lands in every verifier by construction instead of
+ * hand-copied blocks drifting apart:
+ *
+ *   1. `exp > iat` (an empty/backward window never verifies)
+ *   2. `nbf ≤ exp` (a window that opens after it closes never verifies)
+ *   3. the validity SPAN is measured from `min(iat, nbf)` and must fit the ceiling (an early
+ *      `nbf` or forward-dated `iat` cannot manufacture a longer window)
+ *   4. no FUTURE `iat` (a forward-dated artifact never verifies, §13.10)
+ *   5. `nbf ≤ now ≤ exp` (the window itself)
+ *   6. `exp ≤ now + ceiling` (clock-anchored: a dated-in-the-future artifact cannot outlive
+ *      its ceiling even when its own span is in-bounds)
+ *
+ * `refusals` picks the refusal-code policy by WHERE the caller runs the check: "opaque" for a
+ * verifier that checks currency BEFORE the signature (handle links — every refusal is
+ * `permission-denied`, so a forged artifact learns nothing from the code), "post-signature"
+ * for one that checks after identity is established (session grants — structural violations
+ * are `contract-invalid`, an early presentation `failed-precondition`, a stale one `expired`).
+ */
+export declare function assertArtifactCurrency(t: {
+    iat: number;
+    nbf?: number;
+    exp: number;
+}, a: {
+    now: number;
+    ceilingMs: number;
+    what: string;
+    ceilingName: string;
+    refusals: "opaque" | "post-signature";
+}): void;
+/** The §13.10 anchor roles: which artifact family a registered key may sign. */
+export declare const ANCHOR_ROLES: readonly ["handles", "traits", "receipts", "resume", "sessions", "authz-slots", "obligations", "payments"];
+export type AnchorRole = (typeof ANCHOR_ROLES)[number];
+/** One resolved `signer.<keyId>` anchor (§13.10), as the registry projection a verifier
+ *  consumes: the record's spec fields plus the status-side revocation. `scope` is the
+ *  per-role structured ceiling; a role listed in `roles` whose scope dimension is ABSENT is
+ *  CLOSED, not open (§13.10: "a key without a dimension ceiling has that dimension closed").
+ *  For the `traits` role the entries are reverse-DNS DOMAIN prefixes the key may define and
+ *  attest traits under (third-party authorities register under their domain claim; the
+ *  space-operator key carries `ai.cotal`). */
+export interface SignerAnchor {
+    keyId: string;
+    /** nkeys-encoded Ed25519 public key the artifact signature verifies against. */
+    publicKey: string;
+    /** The principal or reverse-DNS domain the key belongs to. */
+    owner: string;
+    /** The LIFECYCLE UID of the owning principal (§13.1: a principal is `(id, lifecycleUid)`,
+     *  so the record identifies its key's principal fully). Absent for a domain-owned key.
+     *  REQUIRED wherever a verifier must bind the key to a specific lifecycle (a child handle's
+     *  issuer, §13.6) — there, an absent binding FAILS CLOSED: owner text alone would let a
+     *  recycled alias re-register a key and issue off its predecessor's artifacts. */
+    ownerLifecycleUid?: string;
+    roles: readonly AnchorRole[];
+    scope?: Partial<Record<AnchorRole, readonly string[]>>;
+    /** Validity window, ms epoch, both inclusive. Rotation registers a successor and closes
+     *  this window; overlap is permitted for handoff. */
+    validFrom: number;
+    validTo: number;
+    /** Status-side revocation: immediate for NEW verifications (effected work is not
+     *  retroactively unwound). */
+    revoked?: boolean;
+}
+/** The fresh-resolution seam (§13.10: "a verifier resolves the artifact's keyId FRESH at
+ *  verification"): production reads the space's `signer.<keyId>` record; a test supplies a
+ *  faithful map. `undefined` = unknown key (fail closed). Trust roots never merge across
+ *  spaces — the resolver IS the space binding. */
+export type AnchorResolver = (keyId: string) => Promise<SignerAnchor | undefined> | SignerAnchor | undefined;
+/** The D28 signature INPUT: UTF-8 bytes of the artifact's RFC 8785 canonical JSON with `sig`
+ *  absent. The strict canonical path throws on non-interchangeable values (lone surrogates,
+ *  undefined, non-finite numbers) — an artifact that cannot canonicalize cannot sign. */
+export declare function signatureInput(artifact: Record<string, unknown>): Uint8Array;
+/** Sign an artifact (D28): returns the artifact WITH its base64url unpadded `sig`. The
+ *  key pair is any nkeys KeyPair (the seed side); the matching public key is what the
+ *  anchor registry carries. */
+export declare function signArtifact<T extends Record<string, unknown>>(artifact: T, keyPair: {
+    sign(input: Uint8Array): Uint8Array;
+}): T & {
+    sig: string;
+};
+/** Verify an artifact's D28 signature against a RESOLVED anchor's public key. Fails closed
+ *  (`permission-denied`): malformed/absent `sig`, a public key nkeys cannot parse, or a
+ *  signature that does not verify over the recomputed canonical form. Shape/binding checks
+ *  belong to the artifact's own verifier — this is exactly the signature step. */
+export declare function verifyArtifactSignature(artifact: Record<string, unknown>, anchor: SignerAnchor): void;
+/**
+ * Resolve an anchor FRESH for one use and enforce the §13.10 gate (fail closed): unknown key,
+ * revocation (immediate for new verifications), role mismatch, and window are all refusals.
+ * `at` is the artifact's own signing time where it carries one (an attachment's `ts`), or the
+ * verification time for timeless artifacts (a content-addressed definition): the WINDOW binds
+ * the signing act; revocation binds the verification. Scope is enforced separately by the
+ * artifact's verifier ({@link assertAnchorScopeCovers}) against its own dimension.
+ */
+export declare function resolveAnchorForUse(resolve: AnchorResolver, use: {
+    keyId: string;
+    role: AnchorRole;
+    at: number;
+}): Promise<SignerAnchor>;
+/** Enforce a role's scope ceiling on one subject under dot-prefix containment: an entry
+ *  covers `subject` iff it equals it or is a strict dot-prefix (`ai.cotal` covers
+ *  `ai.cotal.guarded`). An ABSENT scope dimension for the role is CLOSED, not open
+ *  (§13.10) — a key with the role but no ceiling entries authorizes nothing. */
+export declare function assertAnchorScopeCovers(anchor: SignerAnchor, role: AnchorRole, subject: string, what: string): void;
+//# sourceMappingURL=endpoint-signing.d.ts.map

package/dist/endpoint-signing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint-signing.d.ts","sourceRoot":"","sources":["../src/endpoint-signing.ts"],"names":[],"mappings":"AAsBA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,sBAAsB,CACpC,CAAC,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,EAC7C,CAAC,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,QAAQ,GAAG,gBAAgB,CAAA;CAAE,GAC9G,IAAI,CAyBN;AAED,gFAAgF;AAChF,eAAO,MAAM,YAAY,4GAEd,CAAC;AACZ,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD;;;;;;8CAM8C;AAC9C,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,gFAAgF;IAChF,SAAS,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,KAAK,EAAE,MAAM,CAAC;IACd;;;;sFAIkF;IAClF,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,KAAK,EAAE,SAAS,UAAU,EAAE,CAAC;IAC7B,KAAK,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;IACvD;yDACqD;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB;kCAC8B;IAC9B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;kDAGkD;AAClD,MAAM,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,GAAG,YAAY,GAAG,SAAS,CAAC;AAK7G;;yFAEyF;AACzF,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,CAG5E;AAED;;+BAE+B;AAC/B,wBAAgB,YAAY,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5D,QAAQ,EAAE,CAAC,EACX,OAAO,EAAE;IAAE,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,CAAA;CAAE,GAC/C,CAAC,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAKrB;AAED;;;kFAGkF;AAClF,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,YAAY,GAAG,IAAI,CAYrG;AA6BD;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,cAAc,EACvB,GAAG,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACnD,OAAO,CAAC,YAAY,CAAC,CAqBvB;AAED;;;gFAGgF;AAChF,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAOnH"}

package/dist/endpoint-signing.js

@@ -0,0 +1,190 @@
+/**
+ * v0.4 signed-artifact encoding and trust anchors (SPEC §13.10, D18/D28) — the ONE signature
+ * encoding every signed §13 artifact uses (trait definitions/attachments now; capability
+ * handles, checkpoint resumes, session grants, receipts as their slices land), plus the
+ * anchor-registry verification seam those verifiers resolve keys through.
+ *
+ * Encoding (§13.10, normative): the signature input is the UTF-8 bytes of the RFC 8785
+ * canonical JSON of the artifact WITH ITS `sig` FIELD ABSENT; the signature is Ed25519
+ * (nkeys); `sig` carries it base64url-encoded, unpadded. Verification recomputes the
+ * canonical form, resolves the signing key FRESH in the anchor registry, and fails closed
+ * on any mismatch — unknown key, out-of-window use, role mismatch, scope violation,
+ * revocation, or a signature that does not verify.
+ *
+ * The anchor REGISTRY itself (the `signer.<keyId>` §13.7 record family, its mediated
+ * writers, rotation tooling) is D18 scope; this module owns the artifact-side contract:
+ * the resolver SEAM a verifier reads through and the fail-closed enforcement of what a
+ * resolved anchor authorizes.
+ */
+import { fromPublic } from "@nats-io/nkeys";
+import { canonicalJson } from "./canonical.js";
+import { EpEnvelopeError } from "./endpoint-envelope.js";
+/**
+ * The §13.6/§13.10 validity-window currency rules for a timed signed artifact, in ONE place —
+ * handle links and session grants both call this (SPEC 1778: session expiry follows the handle
+ * rules), so a rule added or tightened later lands in every verifier by construction instead of
+ * hand-copied blocks drifting apart:
+ *
+ *   1. `exp > iat` (an empty/backward window never verifies)
+ *   2. `nbf ≤ exp` (a window that opens after it closes never verifies)
+ *   3. the validity SPAN is measured from `min(iat, nbf)` and must fit the ceiling (an early
+ *      `nbf` or forward-dated `iat` cannot manufacture a longer window)
+ *   4. no FUTURE `iat` (a forward-dated artifact never verifies, §13.10)
+ *   5. `nbf ≤ now ≤ exp` (the window itself)
+ *   6. `exp ≤ now + ceiling` (clock-anchored: a dated-in-the-future artifact cannot outlive
+ *      its ceiling even when its own span is in-bounds)
+ *
+ * `refusals` picks the refusal-code policy by WHERE the caller runs the check: "opaque" for a
+ * verifier that checks currency BEFORE the signature (handle links — every refusal is
+ * `permission-denied`, so a forged artifact learns nothing from the code), "post-signature"
+ * for one that checks after identity is established (session grants — structural violations
+ * are `contract-invalid`, an early presentation `failed-precondition`, a stale one `expired`).
+ */
+export function assertArtifactCurrency(t, a) {
+    // The CLOCK AUTHORITY itself is validated before any rule runs: every check below is a pure
+    // numeric comparison, and a NaN/fractional/negative `now` makes each one silently false — a
+    // verifier whose clock is invalid must refuse, never accept (fail closed on the caller seam,
+    // the same entry rule verifyHandleChain pins on its own `opts.now`).
+    if (!Number.isSafeInteger(a.now) || a.now < 0)
+        throw new EpEnvelopeError("failed-precondition", `${a.what}: the currency clock now=${JSON.stringify(a.now)} is not a non-negative safe integer; an invalid clock authority never verifies (SPEC 13.10)`);
+    if (!Number.isSafeInteger(a.ceilingMs) || a.ceilingMs <= 0)
+        throw new EpEnvelopeError("internal", `${a.what}: the ${a.ceilingName} ceiling ${JSON.stringify(a.ceilingMs)} is not a positive integer`);
+    const soft = (code) => (a.refusals === "opaque" ? "permission-denied" : code);
+    const nbf = t.nbf ?? t.iat;
+    if (t.exp <= t.iat)
+        throw new EpEnvelopeError(soft("contract-invalid"), `${a.what} exp ${t.exp} is not after iat ${t.iat}; an empty/backward window never verifies (SPEC 13.6)`);
+    if (nbf > t.exp)
+        throw new EpEnvelopeError(soft("contract-invalid"), `${a.what} nbf ${nbf} is past its exp ${t.exp}; a window that opens after it closes never verifies (SPEC 13.6)`);
+    if (t.exp - Math.min(t.iat, nbf) > a.ceilingMs)
+        throw new EpEnvelopeError(soft("contract-invalid"), `${a.what} validity span ${t.exp - Math.min(t.iat, nbf)}ms exceeds the ${a.ceilingName} ceiling ${a.ceilingMs}ms (SPEC 13.6)`);
+    if (t.iat > a.now)
+        throw new EpEnvelopeError("permission-denied", `${a.what} claims a FUTURE signing time (iat ${t.iat} > now ${a.now}); a forward-dated artifact never verifies (SPEC 13.10)`);
+    if (a.now < nbf)
+        throw new EpEnvelopeError(soft("failed-precondition"), `${a.what} is not yet valid (nbf ${nbf}, now ${a.now}) (SPEC 13.6)`);
+    if (a.now > t.exp)
+        throw new EpEnvelopeError(soft("expired"), `${a.what} expired at ${t.exp} (now ${a.now}) (SPEC 13.6)`);
+    if (t.exp > a.now + a.ceilingMs)
+        throw new EpEnvelopeError("permission-denied", `${a.what} remains valid ${t.exp - a.now}ms past now, beyond the clock-anchored ${a.ceilingName} ceiling ${a.ceilingMs}ms; a dated-in-the-future artifact cannot outlive its ceiling (SPEC 13.6)`);
+}
+/** The §13.10 anchor roles: which artifact family a registered key may sign. */
+export const ANCHOR_ROLES = Object.freeze([
+    "handles", "traits", "receipts", "resume", "sessions", "authz-slots", "obligations", "payments",
+]);
+const isRec = (v) => v !== null && typeof v === "object" && !Array.isArray(v);
+const B64URL = /^[A-Za-z0-9_-]{86}$/; // unpadded base64url of a 64-byte Ed25519 signature
+/** The D28 signature INPUT: UTF-8 bytes of the artifact's RFC 8785 canonical JSON with `sig`
+ *  absent. The strict canonical path throws on non-interchangeable values (lone surrogates,
+ *  undefined, non-finite numbers) — an artifact that cannot canonicalize cannot sign. */
+export function signatureInput(artifact) {
+    const { sig: _sig, ...rest } = artifact;
+    return new TextEncoder().encode(canonicalJson(rest));
+}
+/** Sign an artifact (D28): returns the artifact WITH its base64url unpadded `sig`. The
+ *  key pair is any nkeys KeyPair (the seed side); the matching public key is what the
+ *  anchor registry carries. */
+export function signArtifact(artifact, keyPair) {
+    if ("sig" in artifact && artifact.sig !== undefined)
+        throw new Error("signArtifact: the artifact already carries a sig; signing is over the sig-absent form (SPEC 13.10)");
+    const sig = Buffer.from(keyPair.sign(signatureInput(artifact))).toString("base64url");
+    return { ...artifact, sig };
+}
+/** Verify an artifact's D28 signature against a RESOLVED anchor's public key. Fails closed
+ *  (`permission-denied`): malformed/absent `sig`, a public key nkeys cannot parse, or a
+ *  signature that does not verify over the recomputed canonical form. Shape/binding checks
+ *  belong to the artifact's own verifier — this is exactly the signature step. */
+export function verifyArtifactSignature(artifact, anchor) {
+    const sig = artifact.sig;
+    if (typeof sig !== "string" || !B64URL.test(sig))
+        throw new EpEnvelopeError("permission-denied", "artifact sig is not an unpadded base64url Ed25519 signature (SPEC 13.10)");
+    let ok;
+    try {
+        ok = fromPublic(anchor.publicKey).verify(signatureInput(artifact), Buffer.from(sig, "base64url"));
+    }
+    catch (e) {
+        throw new EpEnvelopeError("permission-denied", `artifact signature does not verify against anchor ${anchor.keyId}: ${e.message} (SPEC 13.10: fail closed)`);
+    }
+    if (!ok)
+        throw new EpEnvelopeError("permission-denied", `artifact signature does not verify against anchor ${anchor.keyId}'s registered key (SPEC 13.10: forged or tampered artifacts fail loud)`);
+}
+/** Parse an untrusted resolver result at this consuming boundary: the anchor a verifier
+ *  enforces MUST be a well-formed registry projection — a garbled record (NaN window, unknown
+ *  role, non-string key) fails loud, never weakens into an open ceiling. */
+function assertAnchorShape(a, keyId) {
+    const bad = (what) => {
+        throw new EpEnvelopeError("failed-precondition", `resolved anchor for ${keyId} is garbled (${what}); an unreadable anchor record never authorizes (SPEC 13.10)`);
+    };
+    if (!isRec(a))
+        bad("not an object");
+    const o = a;
+    if (o.keyId !== keyId)
+        bad(`keyId ${JSON.stringify(o.keyId)} is not the resolved ${keyId}`);
+    if (typeof o.publicKey !== "string" || o.publicKey.length === 0)
+        bad("publicKey is not a string");
+    if (typeof o.owner !== "string" || o.owner.length === 0)
+        bad("owner is not a string");
+    if (o.ownerLifecycleUid !== undefined && (typeof o.ownerLifecycleUid !== "string" || o.ownerLifecycleUid.length === 0))
+        bad("ownerLifecycleUid is not a string");
+    if (!Array.isArray(o.roles) || !o.roles.every((r) => ANCHOR_ROLES.includes(r)))
+        bad("roles is not an array of anchor roles");
+    if (o.scope !== undefined) {
+        if (!isRec(o.scope))
+            bad("scope is not an object");
+        for (const [role, entries] of Object.entries(o.scope)) {
+            if (!ANCHOR_ROLES.includes(role))
+                bad(`scope names unknown role "${role}"`);
+            if (!Array.isArray(entries) || !entries.every((e) => typeof e === "string" && e.length > 0))
+                bad(`scope.${role} is not a string array`);
+        }
+    }
+    if (typeof o.validFrom !== "number" || !Number.isSafeInteger(o.validFrom))
+        bad("validFrom is not an integer");
+    if (typeof o.validTo !== "number" || !Number.isSafeInteger(o.validTo))
+        bad("validTo is not an integer");
+    if (o.revoked !== undefined && typeof o.revoked !== "boolean")
+        bad("revoked is not a boolean");
+    return o;
+}
+/**
+ * Resolve an anchor FRESH for one use and enforce the §13.10 gate (fail closed): unknown key,
+ * revocation (immediate for new verifications), role mismatch, and window are all refusals.
+ * `at` is the artifact's own signing time where it carries one (an attachment's `ts`), or the
+ * verification time for timeless artifacts (a content-addressed definition): the WINDOW binds
+ * the signing act; revocation binds the verification. Scope is enforced separately by the
+ * artifact's verifier ({@link assertAnchorScopeCovers}) against its own dimension.
+ */
+export async function resolveAnchorForUse(resolve, use) {
+    if (typeof use.keyId !== "string" || use.keyId.length === 0)
+        throw new EpEnvelopeError("permission-denied", "artifact names no signing keyId; an unattributable signature never verifies (SPEC 13.10)");
+    let raw;
+    try {
+        raw = await resolve(use.keyId);
+    }
+    catch (e) {
+        throw new EpEnvelopeError("unavailable", `the anchor-registry read failed for ${use.keyId}; verification fails closed, never open (SPEC 13.10): ${e?.message ?? String(e)}`);
+    }
+    if (raw === undefined)
+        throw new EpEnvelopeError("permission-denied", `signing key ${use.keyId} is not in the anchor registry; unknown keys fail closed (SPEC 13.10)`);
+    const anchor = assertAnchorShape(raw, use.keyId);
+    if (anchor.revoked === true)
+        throw new EpEnvelopeError("permission-denied", `signing key ${use.keyId} is revoked; revocation is immediate for new verifications (SPEC 13.10)`);
+    if (!anchor.roles.includes(use.role))
+        throw new EpEnvelopeError("permission-denied", `signing key ${use.keyId} does not carry the "${use.role}" role; a key signs only its registered artifact families (SPEC 13.10)`);
+    if (!Number.isSafeInteger(use.at))
+        throw new EpEnvelopeError("failed-precondition", `anchor use time ${String(use.at)} is not an integer; a garbled timestamp cannot pass a validity window (SPEC 13.10)`);
+    if (use.at < anchor.validFrom || use.at > anchor.validTo)
+        throw new EpEnvelopeError("permission-denied", `signing key ${use.keyId} is outside its validity window at ${use.at} (window ${anchor.validFrom}..${anchor.validTo}); out-of-window use fails closed (SPEC 13.10)`);
+    return anchor;
+}
+/** Enforce a role's scope ceiling on one subject under dot-prefix containment: an entry
+ *  covers `subject` iff it equals it or is a strict dot-prefix (`ai.cotal` covers
+ *  `ai.cotal.guarded`). An ABSENT scope dimension for the role is CLOSED, not open
+ *  (§13.10) — a key with the role but no ceiling entries authorizes nothing. */
+export function assertAnchorScopeCovers(anchor, role, subject, what) {
+    const entries = anchor.scope?.[role];
+    if (entries === undefined || entries.length === 0)
+        throw new EpEnvelopeError("permission-denied", `signing key ${anchor.keyId} carries the "${role}" role with no scope ceiling; an absent dimension is closed, not open, so it cannot sign ${what} (SPEC 13.10)`);
+    const covered = entries.some((e) => subject === e || subject.startsWith(`${e}.`));
+    if (!covered)
+        throw new EpEnvelopeError("permission-denied", `signing key ${anchor.keyId}'s "${role}" scope [${entries.join(", ")}] does not cover ${what} "${subject}" (SPEC 13.10/13.6: containment, never widening)`);
+}
+//# sourceMappingURL=endpoint-signing.js.map

package/dist/endpoint-signing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint-signing.js","sourceRoot":"","sources":["../src/endpoint-signing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAoB,MAAM,wBAAwB,CAAC;AAE3E;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,sBAAsB,CACpC,CAA6C,EAC7C,CAA+G;IAE/G,4FAA4F;IAC5F,4FAA4F;IAC5F,6FAA6F;IAC7F,qEAAqE;IACrE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC;QAC3C,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC,IAAI,4BAA4B,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,6FAA6F,CAAC,CAAC;IAC5M,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC;QACxD,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,WAAW,YAAY,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;IAC5I,MAAM,IAAI,GAAG,CAAC,IAAiB,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxG,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC;IAC3B,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG;QAChB,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,GAAG,qBAAqB,CAAC,CAAC,GAAG,uDAAuD,CAAC,CAAC;IAC/J,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG;QACb,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,QAAQ,GAAG,oBAAoB,CAAC,CAAC,GAAG,kEAAkE,CAAC,CAAC;IACvK,IAAI,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,SAAS;QAC5C,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC,WAAW,YAAY,CAAC,CAAC,SAAS,gBAAgB,CAAC,CAAC;IACrL,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG;QACf,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,IAAI,sCAAsC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,GAAG,yDAAyD,CAAC,CAAC;IAC/K,IAAI,CAAC,CAAC,GAAG,GAAG,GAAG;QACb,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,qBAAqB,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,0BAA0B,GAAG,SAAS,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC;IAC9H,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG;QACf,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC;IACzG,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,SAAS;QAC7B,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,0CAA0C,CAAC,CAAC,WAAW,YAAY,CAAC,CAAC,SAAS,2EAA2E,CAAC,CAAC;AACtP,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;IACxC,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU;CACvF,CAAC,CAAC;AAuCZ,MAAM,KAAK,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACrH,MAAM,MAAM,GAAG,qBAAqB,CAAC,CAAC,oDAAoD;AAE1F;;yFAEyF;AACzF,MAAM,UAAU,cAAc,CAAC,QAAiC;IAC9D,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,CAAC;IACxC,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;AACvD,CAAC;AAED;;+BAE+B;AAC/B,MAAM,UAAU,YAAY,CAC1B,QAAW,EACX,OAAgD;IAEhD,IAAI,KAAK,IAAI,QAAQ,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS;QACjD,MAAM,IAAI,KAAK,CAAC,oGAAoG,CAAC,CAAC;IACxH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACtF,OAAO,EAAE,GAAG,QAAQ,EAAE,GAAG,EAAE,CAAC;AAC9B,CAAC;AAED;;;kFAGkF;AAClF,MAAM,UAAU,uBAAuB,CAAC,QAAiC,EAAE,MAAoB;IAC7F,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;IACzB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAC9C,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,0EAA0E,CAAC,CAAC;IAC7H,IAAI,EAAW,CAAC;IAChB,IAAI,CAAC;QACH,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;IACpG,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,qDAAqD,MAAM,CAAC,KAAK,KAAM,CAAW,CAAC,OAAO,4BAA4B,CAAC,CAAC;IACzK,CAAC;IACD,IAAI,CAAC,EAAE;QACL,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,qDAAqD,MAAM,CAAC,KAAK,wEAAwE,CAAC,CAAC;AAC9L,CAAC;AAED;;4EAE4E;AAC5E,SAAS,iBAAiB,CAAC,CAAU,EAAE,KAAa;IAClD,MAAM,GAAG,GAAG,CAAC,IAAY,EAAS,EAAE;QAClC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,uBAAuB,KAAK,gBAAgB,IAAI,8DAA8D,CAAC,CAAC;IACnK,CAAC,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,GAAG,CAAC,eAAe,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK;QAAE,GAAG,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAC;IAC5F,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAClG,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACtF,IAAI,CAAC,CAAC,iBAAiB,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ,IAAI,CAAC,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,CAAC;QAAE,GAAG,CAAC,mCAAmC,CAAC,CAAC;IACjK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,YAAkC,CAAC,QAAQ,CAAC,CAAW,CAAC,CAAC;QAAE,GAAG,CAAC,uCAAuC,CAAC,CAAC;IAC9J,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACnD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAgC,CAAC,EAAE,CAAC;YACjF,IAAI,CAAE,YAAkC,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,6BAA6B,IAAI,GAAG,CAAC,CAAC;YACnG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;gBAAE,GAAG,CAAC,SAAS,IAAI,wBAAwB,CAAC,CAAC;QAC1I,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;QAAE,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC9G,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC;QAAE,GAAG,CAAC,2BAA2B,CAAC,CAAC;IACxG,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,SAAS;QAAE,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAC/F,OAAO,CAA4B,CAAC;AACtC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAuB,EACvB,GAAoD;IAEpD,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QACzD,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,0FAA0F,CAAC,CAAC;IAC7I,IAAI,GAA6B,CAAC;IAClC,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,uCAAuC,GAAG,CAAC,KAAK,yDAA0D,CAAW,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1L,CAAC;IACD,IAAI,GAAG,KAAK,SAAS;QACnB,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,eAAe,GAAG,CAAC,KAAK,uEAAuE,CAAC,CAAC;IAClJ,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;QACzB,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,eAAe,GAAG,CAAC,KAAK,yEAAyE,CAAC,CAAC;IACpJ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;QAClC,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,eAAe,GAAG,CAAC,KAAK,wBAAwB,GAAG,CAAC,IAAI,wEAAwE,CAAC,CAAC;IACnL,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,mBAAmB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,oFAAoF,CAAC,CAAC;IAC1K,IAAI,GAAG,CAAC,EAAE,GAAG,MAAM,CAAC,SAAS,IAAI,GAAG,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO;QACtD,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,eAAe,GAAG,CAAC,KAAK,sCAAsC,GAAG,CAAC,EAAE,YAAY,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,OAAO,gDAAgD,CAAC,CAAC;IACtN,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;gFAGgF;AAChF,MAAM,UAAU,uBAAuB,CAAC,MAAoB,EAAE,IAAgB,EAAE,OAAe,EAAE,IAAY;IAC3G,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAC/C,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,eAAe,MAAM,CAAC,KAAK,iBAAiB,IAAI,4FAA4F,IAAI,eAAe,CAAC,CAAC;IAClN,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAClF,IAAI,CAAC,OAAO;QACV,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,eAAe,MAAM,CAAC,KAAK,OAAO,IAAI,YAAY,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,IAAI,KAAK,OAAO,kDAAkD,CAAC,CAAC;AAC/M,CAAC"}

package/dist/endpoint-subjects.d.ts

@@ -0,0 +1,222 @@
+export { assertLifecycleToken, mintLifecycleUid } from "./subjects.js";
+/** The v0.4 wire version this surface targets. Advertised (§6 `protocolVersion`) only at the
+ *  §13.11 cutover — a change signal, not negotiation; nothing pre-cut should flip the card. */
+export declare const PROTOCOL_VERSION_V04 = "0.4";
+/** Reserved command names (§13.2): every endpoint serves `describe` (§13.7); `cancel` is the
+ *  action-composite control command (§13.6). */
+export declare const RESERVED_COMMANDS: readonly ["describe", "cancel"];
+/** Maximum total subject size (bytes) on the endpoint rails; builders throw above it. */
+export declare const MAX_EP_SUBJECT_BYTES = 1024;
+/** Validate a dotted endpoint NAME (one or more DNS-shaped labels; `_` never appears in a label)
+ *  and return its wire TOKEN (`.` → `_`, bijective because labels cannot contain `_`). Single-label
+ *  names are reserved for reference-implementation endpoints; a third-party name MUST be
+ *  reverse-DNS — that is an AUTHORITY rule enforced at mint (§13.9), not a shape difference, so
+ *  both build here. */
+export declare function endpointToken(name: string): string;
+/** Inverse of {@link endpointToken}: recover the dotted endpoint name from its wire token. */
+export declare function endpointNameOf(token: string): string;
+export declare function assertCommandToken(command: string): string;
+export declare function assertNonce(nonce: string): string;
+export declare function assertIdToken(v: string, what?: string): string;
+/** The provisioner-assigned grant id `<gid>` (§13.9). Deliberately SEPARATOR-FREE ([a-z0-9]):
+ *  the `eve_<uid>-<e>-<gid>-<n>` and `rec_<uid>-<gid>-<n>` reader-durable names carry it adjacent
+ *  to other soft components across `-`, so a `-` (or `_`) inside `<gid>` would make the name
+ *  non-injective (`eve_<uid>-a-b-c-0` could be endpoint `a-b`/gid `c` OR endpoint `a`/gid `b-c`).
+ *  Constraining `<gid>` to a separator-free grammar keeps the tuple encoding unambiguous while
+ *  `<uid>` is `-`-free (leading) and `<n>` is digits (trailing). */
+export declare function assertGrantId(v: string, what?: string): string;
+/** `<pool>` uses the command-token grammar (§13.2). */
+export declare function assertPoolToken(pool: string): string;
+/** The shared owner/actor token validator for this grammar (§13.2 token bounds): the base
+ *  owner-token grammar plus the 64-character rail bound. Grant builders MUST route through the
+ *  same validator as subject builders, so the two can never diverge on what they admit. */
+export declare function assertBoundedOwner(v: string, what: string): string;
+/** The three forge-locked caller tokens every request and journal submission carries:
+ *  principal + lifecycle UID (§13.1). */
+export interface EpCaller {
+    owner: string;
+    actor: string;
+    uid: string;
+}
+/** The six reserved authorization-mode tokens. Disjoint from every spec-conformant owner token
+ *  (`local` or `u_`+base32 per §2, never a bare mode word); the implementation's owner validator
+ *  also admits legacy principal tokens, so the parser's discrimination rests on membership in
+ *  this set PLUS each mode's pinned arity, not on the owner grammar alone. */
+export declare const EP_AUTHZ_MODES: readonly ["self", "owner", "any", "child", "ledger", "handle"];
+export type EpAuthzMode = (typeof EP_AUTHZ_MODES)[number];
+/** Is `m` a registered targeted-command authorization mode? Consults the PRIVATE module-load set,
+ *  never the live export, so a post-import mutation of {@link EP_AUTHZ_MODES} cannot widen the
+ *  modes a cluster document may declare (the afa715b integrity class). */
+export declare function isEpAuthzMode(m: string): boolean;
+/** Per-mode pinned target-token arity: `self` carries none (the caller triple IS the target);
+ *  `owner`/`any`/`child`/`ledger` pin one `<tOwner>`; `handle` pins the full redemption-minted
+ *  target triple. The target's lifecycle UID is otherwise body-carried (§13.3), never a token. */
+export type EpTarget = {
+    mode: "self";
+} | {
+    mode: "owner" | "any" | "child" | "ledger";
+    tOwner: string;
+} | {
+    mode: "handle";
+    tOwner: string;
+    tActor: string;
+    tUid: string;
+};
+/** The caller triple as validated subject tokens — the ONE validation every caller-scoped
+ *  subject and filter goes through. */
+export declare function callerTokens(caller: EpCaller): string[];
+/** Where a request routes (never which verb it is — the verb rides the envelope, §13.3/§13.5):
+ *  `one` = queue-group anycast to exactly one class member; `all` = scatter to every instance;
+ *  `inst` = one instance by its stable `(endpoint, instanceId)` address (single-owner endpoint
+ *  names carry no owner tokens). */
+export type EpRoute = {
+    mode: "one" | "all";
+} | {
+    mode: "inst";
+    instanceId: string;
+};
+/** Build a request subject (class, scatter, or instance form; targeted iff `target` is given). */
+export declare function epRequestSubject(space: string, req: {
+    route: EpRoute;
+    endpoint: string;
+    command: string;
+    target?: EpTarget;
+    caller: EpCaller;
+    nonce: string;
+}): string;
+/** Build a reply subject: the responder's own endpoint/instance/epoch prefix plus the caller
+ *  triple and nonce. Use {@link deriveReplySubject} to answer a request — replies MUST derive
+ *  from the authenticated request subject, never from a transport- or payload-supplied target. */
+export declare function epReplySubject(space: string, r: {
+    endpoint: string;
+    instanceId: string;
+    epoch: number;
+    caller: EpCaller;
+    nonce: string;
+}): string;
+/** Deterministic reply derivation (§13.2 "Replies"): copy the caller triple + nonce off the
+ *  broker-authenticated PARSED request and prefix the responder's own instance identity. Taking
+ *  a {@link ParsedEpRequest} (not a raw string) makes the confused-deputy boundary structural:
+ *  there is no argument through which a payload-supplied reply target could arrive. */
+export declare function deriveReplySubject(space: string, request: ParsedEpRequest, responder: {
+    instanceId: string;
+    epoch: number;
+}): string;
+/** The class rail's canonical queue group: the endpoint-name token. Serve subscriptions to the
+ *  `one` rail are queue-qualified ONLY (§13.9) — no credential may plain-subscribe it, which is
+ *  what keeps per-request nonces visible only to the queue-selected instance. */
+export declare function epClassQueueGroup(endpoint: string): string;
+/** Subscription filter for a class (`one`) or scatter (`all`) serve. */
+export declare function epServeFilter(space: string, mode: "one" | "all", endpoint: string): string;
+/** Subscription filter for one instance's own request rail. */
+export declare function epInstanceServeFilter(space: string, endpoint: string, instanceId: string): string;
+/** A caller's reply-read filter — its OWN rail only, exact arity (no `>` tail admits subjects
+ *  outside the grammar): `ep.reply.*.*.*.<owner>.<actor>.<uid>.*`. */
+export declare function epCallerReplyFilter(space: string, caller: EpCaller): string;
+/** A responder's reply-publish pattern — its own instance triple and epoch pinned, all caller
+ *  suffixes spanned (addressing is confined by nonce possession, §13.2): exact arity. */
+export declare function epResponderReplyPattern(space: string, endpoint: string, instanceId: string, epoch: number): string;
+export type EpTimerPhase = "schedule" | "armed" | "fire";
+export type EpSessionDir = "in" | "out";
+/** Events: `epe.<endpoint>.<instanceId>.<epoch>.<topic…>` — the publishing instance's identity
+ *  and epoch are forge-locked subject tokens (stale-epoch events are attributably stale). */
+export declare function epeSubject(space: string, endpoint: string, instanceId: string, epoch: number, topic: string[]): string;
+/** Canonical facts: `epf.<endpoint>.<topic…>` — publishable only by the mediated writer (§13.9). */
+export declare function epfSubject(space: string, endpoint: string, topic: string[]): string;
+/** Journal submissions: `epj.<endpoint>.<command>[.<authz>[.<target…>]].<owner>.<actor>.<uid>` —
+ *  directly publishable by capability holders and explicitly UNTRUSTED (§13.4); a targeted
+ *  command carries the same authz/target block as its request forms, no nonce. */
+export declare function epjSubject(space: string, j: {
+    endpoint: string;
+    command: string;
+    target?: EpTarget;
+    caller: EpCaller;
+}): string;
+/** Timers: `ept.<endpoint>.<instanceId>.<epoch>.<timerId>.<schedule|armed|fire>` (§13.2). */
+export declare function eptSubject(space: string, endpoint: string, instanceId: string, epoch: number, timerId: string, phase: EpTimerPhase): string;
+/** Record writes: `epr.<endpoint>.<instanceId>.<epoch>.<kind>.<qualifier…>` — the instance's
+ *  epoch-pinned mediated record-writer ingress (§13.9 reads the epoch off this subject). */
+export declare function eprSubject(space: string, endpoint: string, instanceId: string, epoch: number, kind: string, qualifier?: string[]): string;
+/** Contract artifacts: `epc.<digest-hex>` — one immutable artifact per subject; the token is the
+ *  SHA-256 hex (the `sha256:` prefix is not a subject token, §13.7). */
+export declare function epcSubject(space: string, digestHex: string): string;
+/** Work pools: `epw.<endpoint>.<pool>.<cOwner>.<cActor>.<cUid>.<id>` — the trailing four tokens
+ *  are the item's ACCEPTANCE IDENTITY (the accepted submission's caller triple + request id). */
+export declare function epwSubject(space: string, endpoint: string, pool: string, acceptance: EpCaller & {
+    id: string;
+}): string;
+/** Sessions: `eps.<endpoint>.<sessionId>.<epoch>.<in|out>` (§13.6). */
+export declare function epsSubject(space: string, endpoint: string, sessionId: string, epoch: number, dir: EpSessionDir): string;
+export interface ParsedEpRequest {
+    plane: "request";
+    route: "one" | "all" | "inst";
+    endpoint: string;
+    /** Present iff `route === "inst"`. */
+    instanceId?: string;
+    command: string;
+    /** `null` = untargeted form (no authz token). */
+    target: EpTarget | null;
+    caller: EpCaller;
+    nonce: string;
+}
+export type ParsedEp = ParsedEpRequest | {
+    plane: "reply";
+    endpoint: string;
+    instanceId: string;
+    epoch: number;
+    caller: EpCaller;
+    nonce: string;
+} | {
+    plane: "event";
+    endpoint: string;
+    instanceId: string;
+    epoch: number;
+    topic: string[];
+} | {
+    plane: "fact";
+    endpoint: string;
+    topic: string[];
+} | {
+    plane: "journal";
+    endpoint: string;
+    command: string;
+    target: EpTarget | null;
+    caller: EpCaller;
+} | {
+    plane: "timer";
+    endpoint: string;
+    instanceId: string;
+    epoch: number;
+    timerId: string;
+    phase: EpTimerPhase;
+} | {
+    plane: "record";
+    endpoint: string;
+    instanceId: string;
+    epoch: number;
+    kind: string;
+    qualifier: string[];
+} | {
+    plane: "contract";
+    digestHex: string;
+} | {
+    plane: "work";
+    endpoint: string;
+    pool: string;
+    acceptance: EpCaller & {
+        id: string;
+    };
+} | {
+    plane: "session";
+    endpoint: string;
+    sessionId: string;
+    epoch: number;
+    dir: EpSessionDir;
+};
+/**
+ * Parse a v0.4 endpoint-surface subject into its typed shape, or `null` for anything that is not
+ * one — including the retired v0 `ctl.>`/`control.>` planes, which this parser deliberately does
+ * not know. `null` means the subject has no sender and MUST NOT be handled (§13.2).
+ */
+export declare function parseEpSubject(subject: string): ParsedEp | null;
+//# sourceMappingURL=endpoint-subjects.d.ts.map

package/dist/endpoint-subjects.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint-subjects.d.ts","sourceRoot":"","sources":["../src/endpoint-subjects.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEvE;+FAC+F;AAC/F,eAAO,MAAM,oBAAoB,QAAQ,CAAC;AAE1C;gDACgD;AAChD,eAAO,MAAM,iBAAiB,iCAAiD,CAAC;AAYhF,yFAAyF;AACzF,eAAO,MAAM,oBAAoB,OAAO,CAAC;AAEzC;;;;uBAIuB;AACvB,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQlD;AAED,8FAA8F;AAC9F,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAG1D;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGjD;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,SAAO,GAAG,MAAM,CAG5D;AAED;;;;;oEAKoE;AACpE,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,SAAY,GAAG,MAAM,CAGjE;AAED,uDAAuD;AACvD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGpD;AAOD;;2FAE2F;AAC3F,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAIlE;AAUD;yCACyC;AACzC,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;8EAG8E;AAC9E,eAAO,MAAM,cAAc,gEAAgF,CAAC;AAC5G,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1D;;0EAE0E;AAC1E,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAA6B;AAE9E;;kGAEkG;AAClG,MAAM,MAAM,QAAQ,GAChB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,OAAO,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC9D;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAWrE;uCACuC;AACvC,wBAAgB,YAAY,CAAC,MAAM,EAAE,QAAQ,GAAG,MAAM,EAAE,CAMvD;AAID;;;oCAGoC;AACpC,MAAM,MAAM,OAAO,GAAG;IAAE,IAAI,EAAE,KAAK,GAAG,KAAK,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AAErF,kGAAkG;AAClG,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,EACb,GAAG,EAAE;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC7G,MAAM,CAOR;AAED;;kGAEkG;AAClG,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,EACb,CAAC,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC1F,MAAM,CAKR;AAED;;;uFAGuF;AACvF,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,eAAe,EACxB,SAAS,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC/C,MAAM,CAQR;AAID;;iFAEiF;AACjF,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,wEAAwE;AACxE,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,GAAG,KAAK,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE1F;AAED,+DAA+D;AAC/D,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAEjG;AAED;sEACsE;AACtE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,GAAG,MAAM,CAE3E;AAED;yFACyF;AACzF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAElH;AAID,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,OAAO,GAAG,MAAM,CAAC;AACzD,MAAM,MAAM,YAAY,GAAG,IAAI,GAAG,KAAK,CAAC;AAQxC;6FAC6F;AAC7F,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAEtH;AAED,oGAAoG;AACpG,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAEnF;AAED;;kFAEkF;AAClF,wBAAgB,UAAU,CACxB,KAAK,EAAE,MAAM,EACb,CAAC,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAA;CAAE,GAC5E,MAAM,CAKR;AAED,6FAA6F;AAC7F,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,MAAM,CAE3I;AAED;4FAC4F;AAC5F,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,GAAE,MAAM,EAAO,GAAG,MAAM,CAG7I;AAED;wEACwE;AACxE,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAGnE;AAED;iGACiG;AACjG,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,GAAG;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAEvH;AAED,uEAAuE;AACvE,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,GAAG,MAAM,CAEvH;AAID,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,SAAS,CAAC;IACjB,KAAK,EAAE,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,MAAM,EAAE,QAAQ,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,QAAQ,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,QAAQ,GAChB,eAAe,GACf;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACxG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GACxF;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GACpD;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,QAAQ,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAA;CAAE,GAClG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,YAAY,CAAA;CAAE,GAC7G;IAAE,KAAK,EAAE,QAAQ,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,GAC3G;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,QAAQ,GAAG;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACxF;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,YAAY,CAAA;CAAE,CAAC;AAmChG;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CA0E/D"}