@dainprotocol/service-sdk 1.2.1 → 1.2.3

package/dist/client/client-auth.d.ts

@@ -1,51 +1,85 @@
-interface DainClientAuthConfig {
-    jwt?: string;
+/**
+ * CLIENT-SIDE JWT Authentication (Users Only)
+ *
+ * Users authenticate with JWT tokens from DAIN ID OAuth.
+ * NO orgId, NO agentId, NO keypair - completely removed for client-side.
+ *
+ * For SERVICE-SIDE keypair authentication (services/agents), see /src/service/auth.ts
+ */
+/**
+ * JWT Authentication Config (Users)
+ */
+export interface DainClientAuthConfig {
+    /** JWT access token from DAIN ID OAuth */
+    jwt: string;
+    /** Smart Account ID (optional, will be extracted from JWT if not provided) */
     smartAccountId?: string;
-    privateKeyBase58?: string;
-    agentId?: string;
-    orgId?: string;
-    apiKey?: string;
+    /** Smart Account PDA on Solana (optional) */
     smartAccountPDA?: string;
+    /** Webhook URL for async operations (optional) */
     webhookUrl?: string;
 }
+/**
+ * DainClientAuth - JWT-only authentication for users
+ *
+ * This class is for CLIENT-SIDE use only (e.g., butterfly-web).
+ * Users authenticate with JWT tokens - NO keypairs, NO orgId, NO agentId.
+ *
+ * For SERVICE-SIDE authentication with keypairs, use the service SDK's built-in auth.
+ */
 export declare class DainClientAuth {
-    private jwt?;
-    private smartAccountId?;
-    private privateKey?;
-    private agentId?;
-    private orgId?;
-    private publicKey?;
+    private jwt;
+    private smartAccountId;
     private smartAccountPDA?;
     private webhookUrl?;
-    private readonly authMethod;
     constructor(config: DainClientAuthConfig);
-    private parseApiKey;
     /**
-     * Sign request for legacy authentication
-     * For JWT auth, returns empty values (not needed)
+     * Decode JWT payload (without verification)
+     * @private
      */
-    signRequest(method: string, path: string, body: string): Promise<{
+    private decodeJWTPayload;
+    /**
+     * Sign request - NOT NEEDED for JWT (returns empty for compatibility)
+     */
+    signRequest(_method: string, _path: string, _body: string): Promise<{
         signature: string;
         timestamp: string;
     }>;
     /**
-     * Get headers for authentication
-     * Returns different headers based on auth method
+     * Get headers for HTTP requests
+     */
+    getHeaders(_signature: string, _timestamp: string): Record<string, string>;
+    /**
+     * Check if using JWT authentication (always true for client-side)
+     */
+    isJWT(): boolean;
+    /**
+     * Get JWT token
+     */
+    getJWT(): string;
+    /**
+     * Get smart account ID
+     */
+    getSmartAccountId(): string;
+    /**
+     * Get smart account PDA
      */
-    getHeaders(signature: string, timestamp: string): Record<string, string>;
-    signMessage(message: string): string;
-    static verifyMessage(message: string, signature: string, publicKey: Uint8Array): boolean;
-    verifyEventSignature(data: string, signature: string, timestamp: string, publicKeyBase58: string): boolean;
-    getAuthMethod(): 'jwt' | 'legacy';
-    getJWT(): string | undefined;
-    getSmartAccountId(): string | undefined;
-    getAgentId(): string | undefined;
-    getOrgId(): string | undefined;
-    getPublicKey(): Uint8Array | undefined;
-    getPublicKeyBase58(): string | undefined;
     getSmartAccountPDA(): string | undefined;
+    /**
+     * Get webhook URL
+     */
     getWebhookUrl(): string | undefined;
+    /**
+     * Verify SSE event signature from service
+     * (Services sign their event responses, users verify them)
+     */
+    verifyEventSignature(data: string, signature: string, timestamp: string, publicKeyBase58: string): boolean;
+    /**
+     * Serialize auth config
+     */
     serialize(): string;
+    /**
+     * Deserialize auth config
+     */
     static deserialize(serialized: string): DainClientAuth;
 }
-export {};

package/dist/client/client-auth.js

@@ -1,225 +1,161 @@
 "use strict";
+//File: src/client/client-auth.ts
+/**
+ * CLIENT-SIDE JWT Authentication (Users Only)
+ *
+ * Users authenticate with JWT tokens from DAIN ID OAuth.
+ * NO orgId, NO agentId, NO keypair - completely removed for client-side.
+ *
+ * For SERVICE-SIDE keypair authentication (services/agents), see /src/service/auth.ts
+ */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DainClientAuth = void 0;
-const tslib_1 = require("tslib");
-//File: src/client/client-auth.ts
-const ed25519_1 = require("@noble/curves/ed25519");
-const sha256_1 = require("@noble/hashes/sha256");
-const utils_1 = require("@noble/hashes/utils");
-const bs58_1 = tslib_1.__importDefault(require("bs58"));
+/**
+ * DainClientAuth - JWT-only authentication for users
+ *
+ * This class is for CLIENT-SIDE use only (e.g., butterfly-web).
+ * Users authenticate with JWT tokens - NO keypairs, NO orgId, NO agentId.
+ *
+ * For SERVICE-SIDE authentication with keypairs, use the service SDK's built-in auth.
+ */
 class DainClientAuth {
-    // JWT fields (user auth)
     jwt;
     smartAccountId;
-    // Legacy fields (service auth)
-    privateKey;
-    agentId;
-    orgId;
-    publicKey;
     smartAccountPDA;
-    // Common
     webhookUrl;
-    authMethod;
     constructor(config) {
-        // Priority 1: JWT Authentication (Users from DAIN ID)
-        if (config.jwt) {
-            this.jwt = config.jwt;
-            this.authMethod = 'jwt';
-            this.webhookUrl = config.webhookUrl;
-            // Extract smartAccountId from JWT if not provided
-            if (config.smartAccountId) {
-                this.smartAccountId = config.smartAccountId;
-            }
-            else {
-                try {
-                    const payload = JSON.parse(Buffer.from(config.jwt.split('.')[1], 'base64').toString());
-                    this.smartAccountId = payload.smart_account_id || payload.sub;
-                    if (!this.smartAccountId) {
-                        throw new Error('JWT missing smart_account_id/sub claim');
-                    }
-                }
-                catch (error) {
-                    throw new Error(`Invalid JWT: ${error instanceof Error ? error.message : String(error)}`);
-                }
-            }
-            return;
+        if (!config.jwt) {
+            throw new Error('JWT token is required for user authentication');
         }
-        // Priority 2: Legacy API Key (Services)
-        if (config.apiKey) {
-            const { privateKey, agentId, orgId, publicKey } = this.parseApiKey(config.apiKey);
-            this.privateKey = privateKey;
-            this.agentId = agentId;
-            this.orgId = orgId;
-            this.publicKey = publicKey;
-            this.webhookUrl = config.webhookUrl;
-            this.smartAccountPDA = config.smartAccountPDA;
-            this.authMethod = 'legacy';
-            return;
+        this.jwt = config.jwt;
+        // Extract smartAccountId from config or decode from JWT
+        if (config.smartAccountId) {
+            this.smartAccountId = config.smartAccountId;
         }
-        // Priority 3: Legacy Keypair (Services)
-        if (config.privateKeyBase58 && config.agentId && config.orgId) {
-            this.privateKey = bs58_1.default.decode(config.privateKeyBase58);
-            this.agentId = config.agentId.replace('agent_', '');
-            this.orgId = config.orgId.replace('org_', '');
-            this.publicKey = ed25519_1.ed25519.getPublicKey(this.privateKey);
-            this.webhookUrl = config.webhookUrl;
-            this.smartAccountPDA = config.smartAccountPDA;
-            this.authMethod = 'legacy';
-            return;
+        else {
+            const payload = this.decodeJWTPayload(config.jwt);
+            this.smartAccountId = payload.smart_account_id || payload.sub;
         }
-        throw new Error('Invalid auth config. Provide either:\n' +
-            '  - jwt (for users)\n' +
-            '  - apiKey OR (privateKeyBase58 + agentId + orgId) (for services)');
+        this.smartAccountPDA = config.smartAccountPDA;
+        this.webhookUrl = config.webhookUrl;
     }
-    parseApiKey(apiKey) {
-        const parts = apiKey.split('_');
-        if (parts.length !== 5 || parts[0] !== 'sk' || parts[1] !== 'agent') {
-            throw new Error('Invalid API key format');
+    /**
+     * Decode JWT payload (without verification)
+     * @private
+     */
+    decodeJWTPayload(jwt) {
+        const parts = jwt.split('.');
+        if (parts.length !== 3) {
+            throw new Error('Invalid JWT format');
         }
-        const orgId = parts[2].replace('org_', '');
-        const agentId = parts[3].replace('agent_', '');
-        const privateKeyBase58 = parts[4];
-        const privateKey = bs58_1.default.decode(privateKeyBase58).slice(0, 32);
-        const publicKey = bs58_1.default.decode(privateKeyBase58).slice(32);
-        return { privateKey, agentId, orgId, publicKey };
+        const payload = Buffer.from(parts[1], 'base64').toString('utf-8');
+        return JSON.parse(payload);
     }
     /**
-     * Sign request for legacy authentication
-     * For JWT auth, returns empty values (not needed)
+     * Sign request - NOT NEEDED for JWT (returns empty for compatibility)
      */
-    async signRequest(method, path, body) {
-        if (this.authMethod === 'jwt') {
-            // JWT doesn't need request signing
-            return { signature: '', timestamp: '' };
-        }
-        // Legacy: Sign request
-        const timestamp = Date.now().toString();
-        const message = `${method}:${path}:${timestamp}:${body}`;
-        const messageHash = (0, sha256_1.sha256)(message);
-        const signature = ed25519_1.ed25519.sign(messageHash, this.privateKey);
-        return { signature: (0, utils_1.bytesToHex)(signature), timestamp };
+    async signRequest(_method, _path, _body) {
+        return { signature: '', timestamp: '' };
     }
     /**
-     * Get headers for authentication
-     * Returns different headers based on auth method
+     * Get headers for HTTP requests
      */
-    getHeaders(signature, timestamp) {
-        if (this.authMethod === 'jwt') {
-            // JWT Authentication
-            const headers = {
-                "Authorization": `Bearer ${this.jwt}`,
-                "X-DAIN-SMART-ACCOUNT-ID": this.smartAccountId,
-            };
-            if (this.webhookUrl) {
-                headers["X-DAIN-WEBHOOK-URL"] = this.webhookUrl;
-            }
-            return headers;
-        }
-        // Legacy Authentication
-        return {
-            "X-DAIN-SIGNATURE": signature,
-            "X-DAIN-TIMESTAMP": timestamp,
-            "X-DAIN-AGENT-ID": this.agentId,
-            "X-DAIN-ORG-ID": this.orgId,
-            "X-DAIN-ADDRESS": bs58_1.default.encode(this.publicKey),
-            "X-DAIN-SMART-ACCOUNT-PDA": this.smartAccountPDA || '',
-            "X-DAIN-WEBHOOK-URL": this.webhookUrl || '',
+    getHeaders(_signature, _timestamp) {
+        const headers = {
+            "Authorization": `Bearer ${this.jwt}`,
         };
-    }
-    signMessage(message) {
-        if (this.authMethod === 'jwt') {
-            throw new Error('JWT auth does not support message signing');
+        if (this.smartAccountPDA) {
+            headers["X-DAIN-SMART-ACCOUNT-PDA"] = this.smartAccountPDA;
         }
-        const messageHash = (0, sha256_1.sha256)(message);
-        const signature = ed25519_1.ed25519.sign(messageHash, this.privateKey);
-        return (0, utils_1.bytesToHex)(signature);
-    }
-    static verifyMessage(message, signature, publicKey) {
-        const messageHash = (0, sha256_1.sha256)(message);
-        return ed25519_1.ed25519.verify(signature, messageHash, publicKey);
-    }
-    verifyEventSignature(data, signature, timestamp, publicKeyBase58) {
-        try {
-            const message = `${data}:${timestamp}`;
-            const messageHash = (0, sha256_1.sha256)(message);
-            const publicKey = bs58_1.default.decode(publicKeyBase58);
-            return ed25519_1.ed25519.verify(signature, messageHash, publicKey);
-        }
-        catch (error) {
-            console.error('Error verifying event signature:', error);
-            return false;
+        if (this.webhookUrl) {
+            headers["X-DAIN-WEBHOOK-URL"] = this.webhookUrl;
         }
+        return headers;
     }
-    // Getters
-    getAuthMethod() {
-        return this.authMethod;
+    // ===== Getter Methods =====
+    /**
+     * Check if using JWT authentication (always true for client-side)
+     */
+    isJWT() {
+        return true;
     }
+    /**
+     * Get JWT token
+     */
     getJWT() {
         return this.jwt;
     }
+    /**
+     * Get smart account ID
+     */
     getSmartAccountId() {
         return this.smartAccountId;
     }
-    getAgentId() {
-        return this.agentId;
-    }
-    getOrgId() {
-        return this.orgId;
-    }
-    getPublicKey() {
-        return this.publicKey;
-    }
-    getPublicKeyBase58() {
-        return this.publicKey ? bs58_1.default.encode(this.publicKey) : undefined;
-    }
+    /**
+     * Get smart account PDA
+     */
     getSmartAccountPDA() {
         return this.smartAccountPDA;
     }
+    /**
+     * Get webhook URL
+     */
     getWebhookUrl() {
         return this.webhookUrl;
     }
-    serialize() {
-        if (this.authMethod === 'jwt') {
-            const data = {
-                authMethod: 'jwt',
-                jwt: this.jwt,
-                smartAccountId: this.smartAccountId,
-                webhookUrl: this.webhookUrl,
-            };
-            return bs58_1.default.encode(Buffer.from(JSON.stringify(data)));
+    /**
+     * Verify SSE event signature from service
+     * (Services sign their event responses, users verify them)
+     */
+    verifyEventSignature(data, signature, timestamp, publicKeyBase58) {
+        try {
+            // This is for verifying SERVICE signatures, not user signatures
+            // Import crypto libs only when needed
+            const { ed25519 } = require("@noble/curves/ed25519");
+            const { sha256 } = require("@noble/hashes/sha256");
+            const bs58 = require("bs58");
+            const message = `${data}:${timestamp}`;
+            const messageHash = sha256(message);
+            const publicKey = bs58.decode(publicKeyBase58);
+            return ed25519.verify(signature, messageHash, publicKey);
+        }
+        catch (error) {
+            console.error('Error verifying event signature:', error);
+            return false;
         }
+    }
+    // ===== Serialization =====
+    /**
+     * Serialize auth config
+     */
+    serialize() {
         const data = {
-            authMethod: 'legacy',
-            privateKey: Array.from(this.privateKey),
-            agentId: this.agentId,
-            orgId: this.orgId,
-            publicKey: Array.from(this.publicKey),
+            authMethod: 'jwt',
+            jwt: this.jwt,
+            smartAccountId: this.smartAccountId,
             smartAccountPDA: this.smartAccountPDA,
-            webhookUrl: this.webhookUrl,
+            webhookUrl: this.webhookUrl
         };
-        return bs58_1.default.encode(Buffer.from(JSON.stringify(data)));
+        return Buffer.from(JSON.stringify(data)).toString('base64');
     }
+    /**
+     * Deserialize auth config
+     */
     static deserialize(serialized) {
         try {
-            const data = JSON.parse(Buffer.from(bs58_1.default.decode(serialized)).toString());
-            if (data.authMethod === 'jwt') {
-                return new DainClientAuth({
-                    jwt: data.jwt,
-                    smartAccountId: data.smartAccountId,
-                    webhookUrl: data.webhookUrl,
-                });
+            const data = JSON.parse(Buffer.from(serialized, 'base64').toString());
+            if (data.authMethod !== 'jwt') {
+                throw new Error('Invalid auth method - client-side only supports JWT');
             }
-            // Legacy or missing authMethod (backward compatibility)
             return new DainClientAuth({
-                privateKeyBase58: bs58_1.default.encode(new Uint8Array(data.privateKey)),
-                agentId: data.agentId,
-                orgId: data.orgId,
+                jwt: data.jwt,
+                smartAccountId: data.smartAccountId,
                 smartAccountPDA: data.smartAccountPDA,
-                webhookUrl: data.webhookUrl,
+                webhookUrl: data.webhookUrl
             });
         }
         catch (error) {
-            throw new Error(`Failed to deserialize DainClientAuth: ${error.message}`);
+            throw new Error('Failed to deserialize DainClientAuth: ' + error.message);
         }
     }
 }

package/dist/client/client-auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"client-auth.js","sourceRoot":"","sources":["../../src/client/client-auth.ts"],"names":[],"mappings":";;;;AAAA,iCAAiC;AACjC,mDAAgD;AAChD,iDAA8C;AAC9C,+CAAiD;AACjD,wDAAwB;AAkBxB,MAAa,cAAc;IACzB,yBAAyB;IACjB,GAAG,CAAU;IACb,cAAc,CAAU;IAEhC,+BAA+B;IACvB,UAAU,CAAc;IACxB,OAAO,CAAU;IACjB,KAAK,CAAU;IACf,SAAS,CAAc;IACvB,eAAe,CAAU;IAEjC,SAAS;IACD,UAAU,CAAU;IACX,UAAU,CAAmB;IAE9C,YAAY,MAA4B;QACtC,sDAAsD;QACtD,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;YACtB,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;YACxB,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;YAEpC,kDAAkD;YAClD,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1B,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAC3D,CAAC;oBACF,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC;oBAC9D,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;wBACzB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;oBAC5D,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,IAAI,KAAK,CACb,gBAAgB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACzE,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO;QACT,CAAC;QAED,wCAAwC;QACxC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAClF,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;YAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;YACvB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;YACnB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAC3B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;YACpC,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;YAC9C,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,wCAAwC;QACxC,IAAI,MAAM,CAAC,gBAAgB,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAC9D,IAAI,CAAC,UAAU,GAAG,cAAI,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YACvD,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACpD,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC9C,IAAI,CAAC,SAAS,GAAG,iBAAO,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACvD,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;YACpC,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;YAC9C,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,MAAM,IAAI,KAAK,CACb,wCAAwC;YACxC,uBAAuB;YACvB,mEAAmE,CACpE,CAAC;IACJ,CAAC;IAEO,WAAW,CAAC,MAAc;QAMhC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC/C,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAElC,MAAM,UAAU,GAAG,cAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,cAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAE1D,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACnD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CACf,MAAc,EACd,IAAY,EACZ,IAAY;QAEZ,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;YAC9B,mCAAmC;YACnC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC1C,CAAC;QAED,uBAAuB;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,GAAG,MAAM,IAAI,IAAI,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;QACzD,MAAM,WAAW,GAAG,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC;QACpC,MAAM,SAAS,GAAG,iBAAO,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,UAAW,CAAC,CAAC;QAC9D,OAAO,EAAE,SAAS,EAAE,IAAA,kBAAU,EAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;IACzD,CAAC;IAED;;;OAGG;IACH,UAAU,CAAC,SAAiB,EAAE,SAAiB;QAC7C,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;YAC9B,qBAAqB;YACrB,MAAM,OAAO,GAA2B;gBACtC,eAAe,EAAE,UAAU,IAAI,CAAC,GAAG,EAAE;gBACrC,yBAAyB,EAAE,IAAI,CAAC,cAAe;aAChD,CAAC;YACF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,OAAO,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;YAClD,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,wBAAwB;QACxB,OAAO;YACL,kBAAkB,EAAE,SAAS;YAC7B,kBAAkB,EAAE,SAAS;YAC7B,iBAAiB,EAAE,IAAI,CAAC,OAAQ;YAChC,eAAe,EAAE,IAAI,CAAC,KAAM;YAC5B,gBAAgB,EAAE,cAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAU,CAAC;YAC9C,0BAA0B,EAAE,IAAI,CAAC,eAAe,IAAI,EAAE;YACtD,oBAAoB,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;SAC5C,CAAC;IACJ,CAAC;IAED,WAAW,CAAC,OAAe;QACzB,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,WAAW,GAAG,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC;QACpC,MAAM,SAAS,GAAG,iBAAO,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,UAAW,CAAC,CAAC;QAC9D,OAAO,IAAA,kBAAU,EAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,CAAC,aAAa,CAAC,OAAe,EAAE,SAAiB,EAAE,SAAqB;QAC5E,MAAM,WAAW,GAAG,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC;QACpC,OAAO,iBAAO,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IAC3D,CAAC;IAED,oBAAoB,CAClB,IAAY,EACZ,SAAiB,EACjB,SAAiB,EACjB,eAAuB;QAEvB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,IAAI,IAAI,SAAS,EAAE,CAAC;YACvC,MAAM,WAAW,GAAG,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC;YACpC,MAAM,SAAS,GAAG,cAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAC/C,OAAO,iBAAO,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;YACzD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,UAAU;IACV,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED,iBAAiB;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,cAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,SAAS;QACP,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG;gBACX,UAAU,EAAE,KAAK;gBACjB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,CAAC;YACF,OAAO,cAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,IAAI,GAAG;YACX,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAW,CAAC;YACxC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAU,CAAC;YACtC,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;QACF,OAAO,cAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,UAAkB;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,cAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YAEzE,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;gBAC9B,OAAO,IAAI,cAAc,CAAC;oBACxB,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,cAAc,EAAE,IAAI,CAAC,cAAc;oBACnC,UAAU,EAAE,IAAI,CAAC,UAAU;iBAC5B,CAAC,CAAC;YACL,CAAC;YAED,wDAAwD;YACxD,OAAO,IAAI,cAAc,CAAC;gBACxB,gBAAgB,EAAE,cAAI,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC9D,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,yCAAyC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;CACF;AAvQD,wCAuQC"}
+{"version":3,"file":"client-auth.js","sourceRoot":"","sources":["../../src/client/client-auth.ts"],"names":[],"mappings":";AAAA,iCAAiC;AACjC;;;;;;;GAOG;;;AAmBH;;;;;;;GAOG;AACH,MAAa,cAAc;IACjB,GAAG,CAAS;IACZ,cAAc,CAAS;IACvB,eAAe,CAAU;IACzB,UAAU,CAAU;IAE5B,YAAY,MAA4B;QACtC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QAEtB,wDAAwD;QACxD,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAClD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC;QAChE,CAAC;QAED,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QAC9C,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACtC,CAAC;IAED;;;OAGG;IACK,gBAAgB,CAAC,GAAW;QAClC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,OAAe,EACf,KAAa,EACb,KAAa;QAEb,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,UAAkB,EAAE,UAAkB;QAC/C,MAAM,OAAO,GAA2B;YACtC,eAAe,EAAE,UAAU,IAAI,CAAC,GAAG,EAAE;SACtC,CAAC;QAEF,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,OAAO,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC;QAC7D,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,OAAO,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;QAClD,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,6BAA6B;IAE7B;;OAEG;IACH,KAAK;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,iBAAiB;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,oBAAoB,CAAC,IAAY,EAAE,SAAiB,EAAE,SAAiB,EAAE,eAAuB;QAC9F,IAAI,CAAC;YACH,gEAAgE;YAChE,sCAAsC;YACtC,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;YACrD,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YAE7B,MAAM,OAAO,GAAG,GAAG,IAAI,IAAI,SAAS,EAAE,CAAC;YACvC,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YACpC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAE/C,OAAO,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;YACzD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,4BAA4B;IAE5B;;OAEG;IACH,SAAS;QACP,MAAM,IAAI,GAAG;YACX,UAAU,EAAE,KAAK;YACjB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,UAAkB;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YAEtE,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACzE,CAAC;YAED,OAAO,IAAI,cAAc,CAAC;gBACxB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,wCAAwC,GAAI,KAAe,CAAC,OAAO,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;CACF;AArKD,wCAqKC"}

package/dist/client/index.js

@@ -2,6 +2,6 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const tslib_1 = require("tslib");
 tslib_1.__exportStar(require("./client"), exports);
-tslib_1.__exportStar(require("./client-auth"), exports);
+tslib_1.__exportStar(require("./client-auth"), exports); // Unified auth: JWT (users) + Keypair (services/agents)
 tslib_1.__exportStar(require("./api-sdk"), exports);
 //# sourceMappingURL=index.js.map

package/dist/client/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":";;;AAAA,mDAAyB;AACzB,wDAA8B;AAC9B,oDAA0B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":";;;AAAA,mDAAyB;AACzB,wDAA8B,CAAE,wDAAwD;AACxF,oDAA0B"}

package/dist/client/service-auth.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Service/Agent Authentication - Legacy Keypair-based
+ *
+ * This class is for SERVICE and AGENT authentication using legacy keypair-based signatures.
+ * End users should NOT use this class - they must use DainUserAuth with JWT tokens.
+ */
+import { DainClientAuth } from './client-auth';
+export interface DainServiceAuthConfig {
+    /** Service API key (format: sk_agent_org_<orgId>_<agentId>_<keypair>) */
+    apiKey?: string;
+    /** OR provide individual components: */
+    /** Base58-encoded Ed25519 private key */
+    privateKeyBase58?: string;
+    /** Agent ID */
+    agentId?: string;
+    /** Organization ID */
+    orgId?: string;
+    /** Smart Account PDA on Solana (optional) */
+    smartAccountPDA?: string;
+    /** Webhook URL for async operations (optional) */
+    webhookUrl?: string;
+}
+/**
+ * DainServiceAuth - Legacy keypair-based authentication for services and agents
+ *
+ * @example
+ * ```typescript
+ * // Authenticate as a service with API key
+ * const serviceAuth = new DainServiceAuth({
+ *   apiKey: "sk_agent_org_123_agent_456_<base58key>"
+ * });
+ *
+ * // OR with individual components
+ * const serviceAuth = new DainServiceAuth({
+ *   privateKeyBase58: "49bhyNKM...",
+ *   agentId: "agent_456",
+ *   orgId: "org_123"
+ * });
+ * ```
+ */
+export declare class DainServiceAuth extends DainClientAuth {
+    constructor(config: DainServiceAuthConfig);
+    /**
+     * Get the service's agent ID
+     */
+    getServiceAgentId(): string;
+    /**
+     * Get the service's organization ID
+     */
+    getServiceOrgId(): string;
+    /**
+     * Override to prevent JWT methods
+     * @deprecated Not supported for service authentication
+     */
+    getSmartAccountId(): never;
+    /**
+     * Override to prevent JWT methods
+     * @deprecated Not supported for service authentication
+     */
+    getJWT(): never;
+}

package/dist/client/service-auth.js

@@ -0,0 +1,93 @@
+"use strict";
+//File: src/client/service-auth.ts
+/**
+ * Service/Agent Authentication - Legacy Keypair-based
+ *
+ * This class is for SERVICE and AGENT authentication using legacy keypair-based signatures.
+ * End users should NOT use this class - they must use DainUserAuth with JWT tokens.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DainServiceAuth = void 0;
+const client_auth_1 = require("./client-auth");
+/**
+ * DainServiceAuth - Legacy keypair-based authentication for services and agents
+ *
+ * @example
+ * ```typescript
+ * // Authenticate as a service with API key
+ * const serviceAuth = new DainServiceAuth({
+ *   apiKey: "sk_agent_org_123_agent_456_<base58key>"
+ * });
+ *
+ * // OR with individual components
+ * const serviceAuth = new DainServiceAuth({
+ *   privateKeyBase58: "49bhyNKM...",
+ *   agentId: "agent_456",
+ *   orgId: "org_123"
+ * });
+ * ```
+ */
+class DainServiceAuth extends client_auth_1.DainClientAuth {
+    constructor(config) {
+        if (!config.apiKey && !(config.privateKeyBase58 && config.agentId && config.orgId)) {
+            throw new Error('Invalid service authentication configuration.\n' +
+                'Provide either:\n' +
+                '  - apiKey: "sk_agent_org_<orgId>_<agentId>_<keypair>"\n' +
+                '  OR\n' +
+                '  - privateKeyBase58, agentId, and orgId\n\n' +
+                'Note: This is for SERVICES and AGENTS only.\n' +
+                'If you are authenticating as a user, use DainUserAuth with a JWT token instead.');
+        }
+        // Call parent with legacy auth config
+        super({
+            apiKey: config.apiKey,
+            privateKeyBase58: config.privateKeyBase58,
+            agentId: config.agentId,
+            orgId: config.orgId,
+            smartAccountPDA: config.smartAccountPDA,
+            webhookUrl: config.webhookUrl,
+        });
+        // Verify auth method is legacy
+        if (this.getAuthMethod() !== 'legacy') {
+            throw new Error('DainServiceAuth must use legacy authentication');
+        }
+    }
+    /**
+     * Get the service's agent ID
+     */
+    getServiceAgentId() {
+        const agentId = this.getAgentId();
+        if (!agentId) {
+            throw new Error('Agent ID not available');
+        }
+        return agentId;
+    }
+    /**
+     * Get the service's organization ID
+     */
+    getServiceOrgId() {
+        const orgId = this.getOrgId();
+        if (!orgId) {
+            throw new Error('Organization ID not available');
+        }
+        return orgId;
+    }
+    /**
+     * Override to prevent JWT methods
+     * @deprecated Not supported for service authentication
+     */
+    getSmartAccountId() {
+        throw new Error('getSmartAccountId() is not supported for service authentication.\n' +
+            'Use getServiceAgentId() instead.');
+    }
+    /**
+     * Override to prevent JWT methods
+     * @deprecated Not supported for service authentication
+     */
+    getJWT() {
+        throw new Error('getJWT() is not supported for service authentication.\n' +
+            'Services use keypair-based authentication, not JWT.');
+    }
+}
+exports.DainServiceAuth = DainServiceAuth;
+//# sourceMappingURL=service-auth.js.map

package/dist/client/service-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-auth.js","sourceRoot":"","sources":["../../src/client/service-auth.ts"],"names":[],"mappings":";AAAA,kCAAkC;AAClC;;;;;GAKG;;;AAEH,+CAA+C;AAqB/C;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAa,eAAgB,SAAQ,4BAAc;IACjD,YAAY,MAA6B;QACvC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,gBAAgB,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACnF,MAAM,IAAI,KAAK,CACb,iDAAiD;gBACjD,mBAAmB;gBACnB,0DAA0D;gBAC1D,QAAQ;gBACR,8CAA8C;gBAC9C,+CAA+C;gBAC/C,iFAAiF,CAClF,CAAC;QACJ,CAAC;QAED,sCAAsC;QACtC,KAAK,CAAC;YACJ,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CAAC;QAEH,+BAA+B;QAC/B,IAAI,IAAI,CAAC,aAAa,EAAE,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,iBAAiB;QACf,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAClC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,eAAe;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,iBAAiB;QACf,MAAM,IAAI,KAAK,CACb,oEAAoE;YACpE,kCAAkC,CACnC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,MAAM;QACJ,MAAM,IAAI,KAAK,CACb,yDAAyD;YACzD,qDAAqD,CACtD,CAAC;IACJ,CAAC;CACF;AAzED,0CAyEC"}