@dejadex/web 0.0.0-stage → 0.1.1

package/dist/identify/types.d.ts

@@ -0,0 +1,107 @@
+/**
+ * The identifier: card crops in, catalogue ids out. This is the snapshot half
+ * of the SDK, usable on its own before the live pipeline (`createScanner`)
+ * exists. Its answer has the same shape whichever side identified the crops,
+ * the device or `POST /v1/identify`, so a host never needs to know which.
+ *
+ * Wire contract of the server route, which `httpIdentify` speaks:
+ *
+ *   POST {serverUrl}/v1/identify   multipart/form-data: crop0..crop8 (JPEG, one
+ *                                  card each) and the optional text fields
+ *                                  `top` (1..20), `purpose`, `session`
+ *     Authorization: Bearer <lease token>
+ *   → 200 { modelVersion,
+ *           results: [ { index, kind?: 'card' | 'not_a_card', confident,
+ *                        candidates: [ { cardId, score } ], identificationId? } ] }
+ *
+ * Non-2xx answers are RFC 9457 Problem Details.
+ */
+import type { DomainCode, LeaseClaims } from '../types.js';
+/** At most this many crops per call, as on the server route. */
+export declare const MAX_CROPS_PER_REQUEST = 9;
+/** Candidates per crop when `top` is not given. */
+export declare const DEFAULT_TOP = 5;
+/** The most candidates a call may ask for. */
+export declare const MAX_TOP = 20;
+export interface IdentifyCandidate {
+    /** The catalogue id of the row (the shard's row id). */
+    readonly cardId: string;
+    /** Cosine similarity, the max over the orientations tried. Higher is closer. */
+    readonly score: number;
+}
+/**
+ * What a crop is: a card (identified, or not confidently), or not a card at
+ * all. There is no "unknown": a card with no confident match is
+ * `kind: 'card', confident: false`.
+ */
+export type IdentifyKind = 'card' | 'not_a_card';
+export interface IdentifyResult {
+    /** Position of the crop in the call. */
+    readonly index: number;
+    /** `not_a_card` when the best score is below the model version's `notACardBelow`. */
+    readonly kind: IdentifyKind;
+    /** `top1 - top2 >= confidentMargin`; always false for `not_a_card`. */
+    readonly confident: boolean;
+    /** Best first; `top` of them (candidates are returned for `not_a_card` too). */
+    readonly candidates: readonly IdentifyCandidate[];
+    /**
+     * Set when the service counted this answer as an identification itself
+     * (usage-metering): the SDK then writes no usage event for it.
+     */
+    readonly identificationId?: string;
+}
+/** Where an answer came from. Informational: results are the same shape either way. */
+export type IdentifySource = 'device' | 'server';
+export type IdentifyFailureReason = 'unavailable' | 'timeout' | 'rejected';
+export type IdentifyOutcome = {
+    readonly ok: true;
+    /** The model version the thresholds and the candidates belong to. */
+    readonly modelVersion: string;
+    readonly results: readonly IdentifyResult[];
+    readonly source: IdentifySource;
+} | {
+    readonly ok: false;
+    readonly reason: IdentifyFailureReason;
+    /** A stable code first where there is one, e.g. `ALLOWANCE_EXHAUSTED: …`. */
+    readonly detail?: string;
+};
+/** Why a crop is being identified; `retry` answers are never charged. */
+export type IdentifyPurpose = 'live' | 'still' | 'retry';
+export interface IdentifyCallOptions {
+    readonly signal?: AbortSignal;
+    /** Candidates per crop, 1..20. Default 5. */
+    readonly top?: number;
+    /**
+     * The host's scan session id (≤ 128 printable characters). Usage counts one
+     * identification per distinct card per session. Default: the identifier's
+     * own session, renewed by `newSession()`.
+     */
+    readonly session?: string;
+    readonly purpose?: IdentifyPurpose;
+}
+/** Where identification may run. `local` never sends an image anywhere. */
+export type IdentificationMode = 'auto' | 'local' | 'server';
+/** What the on-device engine is running on, once loaded. */
+export interface DeviceEngineInfo {
+    readonly backend: 'webgpu' | 'wasm';
+    readonly precision: 'fp16' | 'fp32';
+    /** WASM threads in use (1 when the page is not cross-origin isolated). */
+    readonly threads: number;
+    /** Measured at warm-up: one crop, every orientation, embed + search. */
+    readonly perCropMs: number;
+    readonly modelVersion: string;
+    readonly indexVersion: string;
+    readonly shard: DomainCode;
+    readonly rows: number;
+}
+export interface IdentifierStatus {
+    readonly lease: LeaseClaims | null;
+    /** `idle` until the first load is asked for; `failed` keeps the server path usable. */
+    readonly device: 'idle' | 'loading' | 'ready' | 'failed';
+    readonly deviceInfo: DeviceEngineInfo | null;
+    /** Why the device engine failed to load, when it did. */
+    readonly deviceError: string | null;
+    /** Why the server route is skipped right now, or null when it is usable. */
+    readonly serverPaused: string | null;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/identify/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/identify/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAE1D,gEAAgE;AAChE,eAAO,MAAM,qBAAqB,IAAI,CAAA;AAEtC,mDAAmD;AACnD,eAAO,MAAM,WAAW,IAAI,CAAA;AAE5B,8CAA8C;AAC9C,eAAO,MAAM,OAAO,KAAK,CAAA;AAEzB,MAAM,WAAW,iBAAiB;IAChC,wDAAwD;IACxD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,gFAAgF;IAChF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,YAAY,CAAA;AAEhD,MAAM,WAAW,cAAc;IAC7B,wCAAwC;IACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,qFAAqF;IACrF,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;IAC3B,uEAAuE;IACvE,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,gFAAgF;IAChF,QAAQ,CAAC,UAAU,EAAE,SAAS,iBAAiB,EAAE,CAAA;IACjD;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CACnC;AAED,uFAAuF;AACvF,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,QAAQ,CAAA;AAEhD,MAAM,MAAM,qBAAqB,GAAG,aAAa,GAAG,SAAS,GAAG,UAAU,CAAA;AAE1E,MAAM,MAAM,eAAe,GACvB;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;IACjB,qEAAqE;IACrE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAA;IAC3C,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;CAChC,GACD;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAA;IAClB,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAA;IACtC,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB,CAAA;AAEL,yEAAyE;AACzE,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAA;AAExD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B,6CAA6C;IAC7C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAA;CACnC;AAED,2EAA2E;AAC3E,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAA;AAE5D,4DAA4D;AAC5D,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,QAAQ,GAAG,MAAM,CAAA;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAA;IACnC,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,wEAAwE;IACxE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAAA;IAClC,uFAAuF;IACvF,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAA;IACxD,QAAQ,CAAC,UAAU,EAAE,gBAAgB,GAAG,IAAI,CAAA;IAC5C,yDAAyD;IACzD,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,4EAA4E;IAC5E,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CACrC"}

package/dist/identify/types.js

@@ -0,0 +1,7 @@
+/** At most this many crops per call, as on the server route. */
+export const MAX_CROPS_PER_REQUEST = 9;
+/** Candidates per crop when `top` is not given. */
+export const DEFAULT_TOP = 5;
+/** The most candidates a call may ask for. */
+export const MAX_TOP = 20;
+//# sourceMappingURL=types.js.map

package/dist/identify/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/identify/types.ts"],"names":[],"mappings":"AAoBA,gEAAgE;AAChE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAA;AAEtC,mDAAmD;AACnD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAA;AAE5B,8CAA8C;AAC9C,MAAM,CAAC,MAAM,OAAO,GAAG,EAAE,CAAA"}

package/dist/identify/worker.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=worker.d.ts.map

package/dist/identify/worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../../src/identify/worker.ts"],"names":[],"mappings":""}

package/dist/identify/worker.js

@@ -0,0 +1,13 @@
+/**
+ * The identification Worker's entry point. `createIdentifier` starts it with
+ * `new Worker(new URL('./worker.js', import.meta.url), { type: 'module' })`,
+ * the pattern Vite, webpack 5 and Rollup bundle without configuration. A host
+ * that builds its own Worker points it at `@dejadex/web/identify-worker`.
+ *
+ * Everything that touches the model runs here: decoding the crops, the
+ * resize, the session and the search. The main thread only routes.
+ */
+import { defaultEngineDeps } from './engine.js';
+import { serveEngine } from './workerProtocol.js';
+serveEngine(self, defaultEngineDeps);
+//# sourceMappingURL=worker.js.map

package/dist/identify/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../../src/identify/worker.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EAAE,WAAW,EAAwB,MAAM,qBAAqB,CAAA;AAEvE,WAAW,CAAC,IAAkC,EAAE,iBAAiB,CAAC,CAAA"}

package/dist/identify/workerProtocol.d.ts

@@ -0,0 +1,54 @@
+/**
+ * The device engine across a Worker boundary: a request/response protocol by
+ * id, the Worker side (`serveEngine`) and the main-thread side
+ * (`connectWorkerEngine`). Crops cross as `Blob`s (structured-cloned, not
+ * decoded on the main thread); answers come back as plain data.
+ */
+import { type ScannerErrorCode } from '../errors.js';
+import type { DeviceEngine, EngineConfig, EngineDeps } from './engine.js';
+import type { DeviceEngineInfo, IdentifyResult } from './types.js';
+export type EngineRequest = {
+    readonly id: number;
+    readonly op: 'load';
+    readonly config: EngineConfig;
+} | {
+    readonly id: number;
+    readonly op: 'identify';
+    readonly crops: readonly Blob[];
+    readonly top: number;
+} | {
+    readonly id: number;
+    readonly op: 'release';
+};
+export type EngineResponse = {
+    readonly id: number;
+    readonly ok: true;
+    readonly info: DeviceEngineInfo | null;
+    readonly results?: readonly IdentifyResult[];
+} | {
+    readonly id: number;
+    readonly ok: false;
+    readonly code: ScannerErrorCode | 'ERROR';
+    readonly message: string;
+};
+/** What `serveEngine` needs of `self` in a Worker. */
+export interface WorkerScopeLike {
+    addEventListener(type: 'message', listener: (event: {
+        readonly data: unknown;
+    }) => void): void;
+    postMessage(message: EngineResponse): void;
+}
+/** What `connectWorkerEngine` needs of a `Worker`. */
+export interface WorkerLike {
+    addEventListener(type: 'message' | 'error' | 'messageerror', listener: (event: {
+        readonly data?: unknown;
+        readonly message?: string;
+    }) => void): void;
+    postMessage(message: EngineRequest): void;
+    terminate(): void;
+}
+/** Runs in the Worker: answers requests one at a time, in order. */
+export declare function serveEngine(scope: WorkerScopeLike, deps: () => Promise<EngineDeps>): void;
+/** Main thread: loads the engine in `worker` and returns a `DeviceEngine` that forwards to it. */
+export declare function connectWorkerEngine(worker: WorkerLike, config: EngineConfig): Promise<DeviceEngine>;
+//# sourceMappingURL=workerProtocol.d.ts.map

package/dist/identify/workerProtocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workerProtocol.d.ts","sourceRoot":"","sources":["../../src/identify/workerProtocol.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAgB,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAClE,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAEzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAElE,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;CAAE,GAC3E;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACvG;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAA;CAAE,CAAA;AAEnD,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,cAAc,EAAE,CAAA;CAAE,GAChI;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA;AAIpH,sDAAsD;AACtD,MAAM,WAAW,eAAe;IAC9B,gBAAgB,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,GAAG,IAAI,CAAA;IAC9F,WAAW,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,CAAA;CAC3C;AAED,sDAAsD;AACtD,MAAM,WAAW,UAAU;IACzB,gBAAgB,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,GAAG,cAAc,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAAG,IAAI,CAAA;IACrJ,WAAW,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAAA;IACzC,SAAS,IAAI,IAAI,CAAA;CAClB;AAOD,oEAAoE;AACpE,wBAAgB,WAAW,CAAC,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,CAoCzF;AAED,kGAAkG;AAClG,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAuDnG"}

package/dist/identify/workerProtocol.js

@@ -0,0 +1,113 @@
+/**
+ * The device engine across a Worker boundary: a request/response protocol by
+ * id, the Worker side (`serveEngine`) and the main-thread side
+ * (`connectWorkerEngine`). Crops cross as `Blob`s (structured-cloned, not
+ * decoded on the main thread); answers come back as plain data.
+ */
+import { ScannerError } from '../errors.js';
+import { loadDeviceEngine } from './engine.js';
+const failure = (id, err) => err instanceof ScannerError
+    ? { id, ok: false, code: err.code, message: err.message }
+    : { id, ok: false, code: 'ERROR', message: err instanceof Error ? err.message || err.name : String(err) };
+/** Runs in the Worker: answers requests one at a time, in order. */
+export function serveEngine(scope, deps) {
+    let engine = null;
+    let queue = Promise.resolve();
+    const handle = async (req) => {
+        switch (req.op) {
+            case 'load':
+                await engine?.release();
+                engine = null;
+                engine = await loadDeviceEngine(req.config, await deps());
+                return { id: req.id, ok: true, info: engine.info };
+            case 'identify': {
+                if (!engine)
+                    throw new ScannerError('INVALID_OPTIONS', 'the device engine is not loaded');
+                const results = await engine.identify(req.crops, req.top);
+                return { id: req.id, ok: true, info: engine.info, results };
+            }
+            case 'release':
+                await engine?.release();
+                engine = null;
+                return { id: req.id, ok: true, info: null };
+        }
+    };
+    scope.addEventListener('message', (event) => {
+        const req = event.data;
+        if (typeof req !== 'object' || req === null || typeof req.id !== 'number')
+            return;
+        queue = queue.then(async () => {
+            let res;
+            try {
+                res = await handle(req);
+            }
+            catch (err) {
+                res = failure(req.id, err);
+            }
+            scope.postMessage(res);
+        });
+    });
+}
+/** Main thread: loads the engine in `worker` and returns a `DeviceEngine` that forwards to it. */
+export function connectWorkerEngine(worker, config) {
+    let nextId = 1;
+    const pending = new Map();
+    let dead = null;
+    const failAll = (err) => {
+        dead = err;
+        for (const p of pending.values())
+            p.reject(err);
+        pending.clear();
+    };
+    worker.addEventListener('message', (event) => {
+        const res = event.data;
+        const p = typeof res === 'object' && res !== null ? pending.get(res.id) : undefined;
+        if (!p)
+            return;
+        pending.delete(res.id);
+        if (res.ok)
+            p.resolve(res);
+        else
+            p.reject(new ScannerError(res.code === 'ERROR' ? 'UNSUPPORTED_DEVICE' : res.code, res.message));
+    });
+    worker.addEventListener('error', (event) => {
+        failAll(new ScannerError('UNSUPPORTED_DEVICE', `the identification Worker failed: ${event.message ?? 'unknown error'}`));
+    });
+    worker.addEventListener('messageerror', () => {
+        failAll(new ScannerError('UNSUPPORTED_DEVICE', 'the identification Worker sent a message that could not be read'));
+    });
+    const call = (req) => {
+        if (dead)
+            return Promise.reject(dead);
+        const id = nextId++;
+        return new Promise((resolve, reject) => {
+            pending.set(id, { resolve, reject });
+            worker.postMessage({ ...req, id });
+        });
+    };
+    return call({ op: 'load', config }).then((loaded) => {
+        let info = loaded.info;
+        return {
+            get info() {
+                return info;
+            },
+            async identify(crops, top) {
+                const res = await call({ op: 'identify', crops, top });
+                if (res.info)
+                    info = res.info;
+                return [...(res.results ?? [])];
+            },
+            async release() {
+                try {
+                    if (!dead)
+                        await call({ op: 'release' });
+                }
+                finally {
+                    worker.terminate();
+                    failAll(new ScannerError('INVALID_OPTIONS', 'the device engine was released'));
+                }
+            },
+        };
+    });
+}
+//# sourceMappingURL=workerProtocol.js.map

package/dist/identify/workerProtocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workerProtocol.js","sourceRoot":"","sources":["../../src/identify/workerProtocol.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,YAAY,EAAyB,MAAM,cAAc,CAAA;AAElE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AA2B9C,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,GAAY,EAAkB,EAAE,CAC3D,GAAG,YAAY,YAAY;IACzB,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;IACzD,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAA;AAE7G,oEAAoE;AACpE,MAAM,UAAU,WAAW,CAAC,KAAsB,EAAE,IAA+B;IACjF,IAAI,MAAM,GAAwB,IAAI,CAAA;IACtC,IAAI,KAAK,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAA;IAE5C,MAAM,MAAM,GAAG,KAAK,EAAE,GAAkB,EAA2B,EAAE;QACnE,QAAQ,GAAG,CAAC,EAAE,EAAE,CAAC;YACf,KAAK,MAAM;gBACT,MAAM,MAAM,EAAE,OAAO,EAAE,CAAA;gBACvB,MAAM,GAAG,IAAI,CAAA;gBACb,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,CAAC,CAAA;gBACzD,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAA;YACpD,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,IAAI,CAAC,MAAM;oBAAE,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAA;gBACzF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAA;gBACzD,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,CAAA;YAC7D,CAAC;YACD,KAAK,SAAS;gBACZ,MAAM,MAAM,EAAE,OAAO,EAAE,CAAA;gBACvB,MAAM,GAAG,IAAI,CAAA;gBACb,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;QAC/C,CAAC;IACH,CAAC,CAAA;IAED,KAAK,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;QAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,IAAqB,CAAA;QACvC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ;YAAE,OAAM;QACjF,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAC5B,IAAI,GAAmB,CAAA;YACvB,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAA;YACzB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;YAC5B,CAAC;YACD,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;QACxB,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,mBAAmB,CAAC,MAAkB,EAAE,MAAoB;IAC1E,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+F,CAAA;IACtH,IAAI,IAAI,GAAiB,IAAI,CAAA;IAE7B,MAAM,OAAO,GAAG,CAAC,GAAU,EAAE,EAAE;QAC7B,IAAI,GAAG,GAAG,CAAA;QACV,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE;YAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAC/C,OAAO,CAAC,KAAK,EAAE,CAAA;IACjB,CAAC,CAAA;IACD,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;QAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,IAAsB,CAAA;QACxC,MAAM,CAAC,GAAG,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACnF,IAAI,CAAC,CAAC;YAAE,OAAM;QACd,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACtB,IAAI,GAAG,CAAC,EAAE;YAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;;YACrB,CAAC,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA;IACtG,CAAC,CAAC,CAAA;IACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACzC,OAAO,CAAC,IAAI,YAAY,CAAC,oBAAoB,EAAE,qCAAqC,KAAK,CAAC,OAAO,IAAI,eAAe,EAAE,CAAC,CAAC,CAAA;IAC1H,CAAC,CAAC,CAAA;IACF,MAAM,CAAC,gBAAgB,CAAC,cAAc,EAAE,GAAG,EAAE;QAC3C,OAAO,CAAC,IAAI,YAAY,CAAC,oBAAoB,EAAE,iEAAiE,CAAC,CAAC,CAAA;IACpH,CAAC,CAAC,CAAA;IAEF,MAAM,IAAI,GAAG,CAAC,GAA0C,EAA0C,EAAE;QAClG,IAAI,IAAI;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACrC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAA;QACnB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;YACpC,MAAM,CAAC,WAAW,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,EAAmB,CAAC,CAAA;QACrD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA;IAED,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;QAClD,IAAI,IAAI,GAAG,MAAM,CAAC,IAAwB,CAAA;QAC1C,OAAO;YACL,IAAI,IAAI;gBACN,OAAO,IAAI,CAAA;YACb,CAAC;YACD,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG;gBACvB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;gBACtD,IAAI,GAAG,CAAC,IAAI;oBAAE,IAAI,GAAG,GAAG,CAAC,IAAI,CAAA;gBAC7B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAA;YACjC,CAAC;YACD,KAAK,CAAC,OAAO;gBACX,IAAI,CAAC;oBACH,IAAI,CAAC,IAAI;wBAAE,MAAM,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;gBAC1C,CAAC;wBAAS,CAAC;oBACT,MAAM,CAAC,SAAS,EAAE,CAAA;oBAClB,OAAO,CAAC,IAAI,YAAY,CAAC,iBAAiB,EAAE,gCAAgC,CAAC,CAAC,CAAA;gBAChF,CAAC;YACH,CAAC;SACF,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Public entry point of the web SDK.
+ *
+ * Real today: the homography maths (`geometry/`), and identification of card
+ * crops (`createIdentifier`: on the device or through the server, under a
+ * verified lease, with usage counted on the device). Stubbed with final
+ * shapes: `createScanner` (the live pipeline). See README.md.
+ */
+export { createScanner } from './scanner.js';
+export { createIdentifier, type Identifier, type IdentifierOptions } from './identify/identifier.js';
+export { DEFAULT_TOP, MAX_CROPS_PER_REQUEST, MAX_TOP, type DeviceEngineInfo, type IdentificationMode, type IdentifierStatus, type IdentifyCallOptions, type IdentifyCandidate, type IdentifyFailureReason, type IdentifyKind, type IdentifyOutcome, type IdentifyPurpose, type IdentifyResult, type IdentifySource, } from './identify/types.js';
+export type { RuntimeOptions } from './identify/runtime.js';
+export type { WorkerLike } from './identify/workerProtocol.js';
+export { LeaseVerificationError, verifyLease, type LeaseFailure, type LeasePublicKey, type VerifyLeaseOptions, } from './lease/verify.js';
+export type { DrainResult } from './usage/meter.js';
+export { indexedDbUsageStore, memoryUsageStore, type UsageStore } from './usage/store.js';
+export { ScannerError, type ScannerErrorCode } from './errors.js';
+export { IDENTITY, UNIT_QUAD, applyHomography, invertHomography, multiplyHomography, quadToCssMatrix3d, toCssMatrix3d, unitSquareToQuad, type ElementSize, type Homography, type Point, type Quad, } from './geometry/homography.js';
+export type { Candidate, DeviceTier, DomainCode, ExternalIds, FrameSourceInput, Lease, LeaseClaims, LeaseGrant, LeaseRequest, PrintId, Scanner, ScannerOptions, ScannerState, TrackResult, UsageBatch, UsageReport, VariantCode, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EAAE,gBAAgB,EAAE,KAAK,UAAU,EAAE,KAAK,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AACpG,OAAO,EACL,WAAW,EACX,qBAAqB,EACrB,OAAO,EACP,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,cAAc,GACpB,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAC3D,YAAY,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAA;AAC9D,OAAO,EACL,sBAAsB,EACtB,WAAW,EACX,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,kBAAkB,GACxB,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAA;AACzF,OAAO,EAAE,YAAY,EAAE,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAA;AACjE,OAAO,EACL,QAAQ,EACR,SAAS,EACT,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,aAAa,EACb,gBAAgB,EAChB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,KAAK,EACV,KAAK,IAAI,GACV,MAAM,0BAA0B,CAAA;AACjC,YAAY,EACV,SAAS,EACT,UAAU,EACV,UAAU,EACV,WAAW,EACX,gBAAgB,EAChB,KAAK,EACL,WAAW,EACX,UAAU,EACV,YAAY,EACZ,OAAO,EACP,OAAO,EACP,cAAc,EACd,YAAY,EACZ,WAAW,EACX,UAAU,EACV,WAAW,EACX,WAAW,GACZ,MAAM,YAAY,CAAA"}

package/dist/index.js

@@ -0,0 +1,16 @@
+/**
+ * Public entry point of the web SDK.
+ *
+ * Real today: the homography maths (`geometry/`), and identification of card
+ * crops (`createIdentifier`: on the device or through the server, under a
+ * verified lease, with usage counted on the device). Stubbed with final
+ * shapes: `createScanner` (the live pipeline). See README.md.
+ */
+export { createScanner } from './scanner.js';
+export { createIdentifier } from './identify/identifier.js';
+export { DEFAULT_TOP, MAX_CROPS_PER_REQUEST, MAX_TOP, } from './identify/types.js';
+export { LeaseVerificationError, verifyLease, } from './lease/verify.js';
+export { indexedDbUsageStore, memoryUsageStore } from './usage/store.js';
+export { ScannerError } from './errors.js';
+export { IDENTITY, UNIT_QUAD, applyHomography, invertHomography, multiplyHomography, quadToCssMatrix3d, toCssMatrix3d, unitSquareToQuad, } from './geometry/homography.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EAAE,gBAAgB,EAA2C,MAAM,0BAA0B,CAAA;AACpG,OAAO,EACL,WAAW,EACX,qBAAqB,EACrB,OAAO,GAYR,MAAM,qBAAqB,CAAA;AAG5B,OAAO,EACL,sBAAsB,EACtB,WAAW,GAIZ,MAAM,mBAAmB,CAAA;AAE1B,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAmB,MAAM,kBAAkB,CAAA;AACzF,OAAO,EAAE,YAAY,EAAyB,MAAM,aAAa,CAAA;AACjE,OAAO,EACL,QAAQ,EACR,SAAS,EACT,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,aAAa,EACb,gBAAgB,GAKjB,MAAM,0BAA0B,CAAA"}

package/dist/lease/verify.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Lease verification on the device: an Ed25519 compact JWS (RFC 7515,
+ * `alg: EdDSA` per RFC 8037), `typ: dejadex-lease+jwt`, checked against the
+ * public keys the host embeds. Mirrors `service/src/leases/jws.ts` check for
+ * check, in the same order:
+ *
+ *   structure → header → signature (over the raw bytes) → claims shape →
+ *   time → origin → domains
+ *
+ * Nothing in an unsigned payload is looked at before the signature holds, and
+ * the algorithm comes from this code, never from the token.
+ *
+ * Signature: WebCrypto Ed25519 where the browser has it (Chrome 137+, Safari
+ * 17+, Firefox 129+, Node 22); elsewhere `@noble/ed25519` (MIT, audited,
+ * zero dependencies), loaded only then.
+ *
+ * The browser is untrusted: this check keeps an honest host from running on a
+ * lease it should not, and bounds what a dishonest one gets. The service
+ * checks every lease again.
+ */
+import { ScannerError } from '../errors.js';
+import type { Lease } from '../types.js';
+export declare const LEASE_ALG = "EdDSA";
+export declare const LEASE_TYP = "dejadex-lease+jwt";
+export declare const MAX_LEASE_TTL_SECONDS = 86400;
+export declare const DEFAULT_CLOCK_SKEW_SECONDS = 60;
+/** An Ed25519 public key as a JWK (`kty: OKP`, `crv: Ed25519`), or just its `x`. */
+export interface LeasePublicKey {
+    readonly kty?: 'OKP';
+    readonly crv?: 'Ed25519';
+    /** The raw 32-byte key, base64url. */
+    readonly x: string;
+    /** When set, only leases whose header names this `kid` are checked against it. */
+    readonly kid?: string;
+    /** Carried by a JWKS entry; `EdDSA` / `sig` when present. */
+    readonly alg?: string;
+    readonly use?: string;
+}
+export type Ed25519Verify = (publicKey: Uint8Array<ArrayBuffer>, message: Uint8Array<ArrayBuffer>, signature: Uint8Array<ArrayBuffer>) => Promise<boolean>;
+export interface VerifyLeaseOptions {
+    readonly publicKeys: readonly LeasePublicKey[];
+    /** The page origin, matched exactly against `origins`; null skips the check (no page). */
+    readonly origin: string | null;
+    /** Domains the caller wants; each must be granted. */
+    readonly domains: readonly string[];
+    /** Unix seconds. Default: the device clock. */
+    readonly now?: number;
+    readonly clockSkewSeconds?: number;
+    /** Test seam; default WebCrypto, then `@noble/ed25519`. */
+    readonly verify?: Ed25519Verify;
+}
+/** The service's reason, first in every message, so support can match the two sides. */
+export type LeaseFailure = 'LEASE_MALFORMED' | 'LEASE_BAD_SIGNATURE' | 'LEASE_EXPIRED' | 'LEASE_NOT_YET_VALID' | 'LEASE_ORIGIN_NOT_ALLOWED' | 'LEASE_DOMAIN_NOT_ALLOWED';
+export declare class LeaseVerificationError extends ScannerError {
+    readonly reason: LeaseFailure;
+    constructor(reason: LeaseFailure, message: string);
+}
+/** Strict unpadded base64url: one decoding and one encoding per string, or null. */
+export declare function base64urlDecodeStrict(s: string): Uint8Array<ArrayBuffer> | null;
+export declare function base64urlEncode(bytes: Uint8Array): string;
+/** Whether this runtime's WebCrypto does Ed25519, probed once with a known-good key. */
+export declare function hasWebCryptoEd25519(): Promise<boolean>;
+/** WebCrypto Ed25519 when the runtime has it, else `@noble/ed25519`. Any error is "does not verify". */
+export declare const defaultEd25519Verify: Ed25519Verify;
+/** The fallback on its own, for runtimes without WebCrypto Ed25519 (and its tests). */
+export declare const nobleEd25519Verify: Ed25519Verify;
+/** Verifies `token` and returns the lease, or throws a `LeaseVerificationError`. */
+export declare function verifyLease(token: string, options: VerifyLeaseOptions): Promise<Lease>;
+//# sourceMappingURL=verify.d.ts.map

package/dist/lease/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/lease/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,KAAK,EAAE,KAAK,EAAe,MAAM,aAAa,CAAA;AAErD,eAAO,MAAM,SAAS,UAAU,CAAA;AAChC,eAAO,MAAM,SAAS,sBAAsB,CAAA;AAC5C,eAAO,MAAM,qBAAqB,QAAS,CAAA;AAC3C,eAAO,MAAM,0BAA0B,KAAK,CAAA;AAE5C,oFAAoF;AACpF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,CAAA;IACpB,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,CAAA;IACxB,sCAAsC;IACtC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAA;IAClB,kFAAkF;IAClF,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,6DAA6D;IAC7D,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,MAAM,aAAa,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,WAAW,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AAE1J,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAA;IAC9C,0FAA0F;IAC1F,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,sDAAsD;IACtD,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,+CAA+C;IAC/C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAA;CAChC;AAED,wFAAwF;AACxF,MAAM,MAAM,YAAY,GACpB,iBAAiB,GACjB,qBAAqB,GACrB,eAAe,GACf,qBAAqB,GACrB,0BAA0B,GAC1B,0BAA0B,CAAA;AAW9B,qBAAa,sBAAuB,SAAQ,YAAY;IAEpD,QAAQ,CAAC,MAAM,EAAE,YAAY;gBAApB,MAAM,EAAE,YAAY,EAC7B,OAAO,EAAE,MAAM;CAIlB;AASD,oFAAoF;AACpF,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,GAAG,IAAI,CAc/E;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAIzD;AAyDD,wFAAwF;AACxF,wBAAgB,mBAAmB,IAAI,OAAO,CAAC,OAAO,CAAC,CAYtD;AAED,wGAAwG;AACxG,eAAO,MAAM,oBAAoB,EAAE,aAWlC,CAAA;AAED,uFAAuF;AACvF,eAAO,MAAM,kBAAkB,EAAE,aAOhC,CAAA;AAED,oFAAoF;AACpF,wBAAsB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,KAAK,CAAC,CA2C5F"}