@drm3/sdk 0.1.2

package/dist/keys-verify.d.ts

@@ -0,0 +1,62 @@
+/** The certificate DRM3 issues (`drm3-issuer-attestation/1`, ROOT-CEREMONY.md §3.1). */
+export interface IssuerAttestation {
+    schema: "drm3-issuer-attestation/1";
+    /** The DRM3 signing key that issued this, `ed25519:<hex>`. */
+    issuer: string;
+    issuer_path?: string;
+    /** The certified subject (service or partner name). */
+    service: string;
+    subject_keys: Array<{
+        key: string;
+        path?: string;
+        valid_from?: string;
+        expected_valid_until?: string;
+    }>;
+    issued_at?: string;
+    statement?: string;
+    signature: string;
+}
+/** Minimal receipt shape for chain verification (matches @drm3/sdk/receipts). */
+export interface ChainReceipt {
+    id?: string;
+    action?: string;
+    timestamp?: string;
+    input_hash?: string;
+    output_hash?: string;
+    cost?: number | string | null;
+    duration_ms?: number | null;
+    parent_id?: string | null;
+    metadata?: unknown;
+    public_key?: string;
+    signature?: string;
+}
+/** The graded outcome of a chain verification. Never a bare boolean. */
+export interface ChainVerdict {
+    ok: boolean;
+    /**
+     * root-anchored - receipt sig valid AND a valid issuer attestation covers the key AND the
+     *                 attestation verifies under the provided root/issuer public key.
+     * unanchored    - receipt sig valid; no (or unverifiable-by-absence) attestation supplied.
+     *                 Signature proves authorship; authorization by DRM3 is not established.
+     * failed        - signature math or the supplied attestation failed. Do not trust.
+     */
+    grade: "root-anchored" | "unanchored" | "failed";
+    notes: string[];
+}
+/** Sign an issuer attestation (the CA side; also used to build test fixtures). */
+export declare function signIssuerAttestation(unsigned: Omit<IssuerAttestation, "signature">, issuerPrivateKey: CryptoKey): Promise<IssuerAttestation>;
+/** Verify an attestation's signature; optionally pin the expected issuer public key. */
+export declare function verifyAttestation(att: IssuerAttestation, expectedIssuer?: string): Promise<{
+    ok: boolean;
+    reason?: string;
+}>;
+/**
+ * Verify a receipt against its certificate chain. Grades, never booleans:
+ * receipt signature (always) -> attestation covers the key -> attestation verifies under
+ * the DRM3 root/issuer key you supply. No attestation supplied = honest `unanchored`
+ * (today's fleet state until per-subject attestations ship).
+ */
+export declare function verifyChain(receipt: ChainReceipt, attestation?: IssuerAttestation | null, rootPublicKey?: string | null): Promise<ChainVerdict>;
+/** Short display form: `ed25519:aabbccdd…eeff00`. */
+export declare function shortKeyId(k: string): string;
+//# sourceMappingURL=keys-verify.d.ts.map

package/dist/keys-verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys-verify.d.ts","sourceRoot":"","sources":["../src/keys-verify.ts"],"names":[],"mappings":"AAKA,wFAAwF;AACxF,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,2BAA2B,CAAC;IACpC,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uDAAuD;IACvD,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,KAAK,CAAC;QAClB,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,oBAAoB,CAAC,EAAE,MAAM,CAAC;KAC/B,CAAC,CAAC;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,iFAAiF;AACjF,MAAM,WAAW,YAAY;IAC3B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wEAAwE;AACxE,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ;;;;;;OAMG;IACH,KAAK,EAAE,eAAe,GAAG,YAAY,GAAG,QAAQ,CAAC;IACjD,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,kFAAkF;AAClF,wBAAsB,qBAAqB,CAAC,QAAQ,EAAE,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,EAAE,gBAAgB,EAAE,SAAS,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAGnJ;AAED,wFAAwF;AACxF,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,iBAAiB,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAMlI;AAkBD;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,EAAE,iBAAiB,GAAG,IAAI,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,CAoBrJ;AAED,qDAAqD;AACrD,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAG5C"}

package/dist/keys-verify.js

@@ -0,0 +1,68 @@
+// DRM3 partner signing keys - issuer attestations + receipt certificate-chain grading
+// (receipt -> issuer attestation -> DRM3 Root). MOVED verbatim from ./keys: do NOT
+// change any byte order, constant, or check.
+import { canonicalize, signPayload, verifySig } from "./keys-canonical.js";
+/** Sign an issuer attestation (the CA side; also used to build test fixtures). */
+export async function signIssuerAttestation(unsigned, issuerPrivateKey) {
+    const signature = await signPayload(issuerPrivateKey, canonicalize(unsigned));
+    return { ...unsigned, signature };
+}
+/** Verify an attestation's signature; optionally pin the expected issuer public key. */
+export async function verifyAttestation(att, expectedIssuer) {
+    if (att.schema !== "drm3-issuer-attestation/1")
+        return { ok: false, reason: "unknown schema" };
+    if (expectedIssuer && att.issuer.toLowerCase() !== expectedIssuer.toLowerCase())
+        return { ok: false, reason: "issuer key does not match the expected root" };
+    const { signature, ...unsigned } = att;
+    const ok = await verifySig(att.issuer, signature, canonicalize(unsigned));
+    return ok ? { ok } : { ok: false, reason: "attestation signature failed" };
+}
+// The exact receipt field subset the signature covers (same discipline as ./receipts).
+function receiptPayload(r) {
+    return canonicalize({
+        id: r.id,
+        action: r.action,
+        timestamp: r.timestamp,
+        input_hash: r.input_hash,
+        output_hash: r.output_hash,
+        cost: r.cost,
+        duration_ms: r.duration_ms,
+        parent_id: r.parent_id,
+        metadata: r.metadata,
+        public_key: r.public_key,
+    });
+}
+/**
+ * Verify a receipt against its certificate chain. Grades, never booleans:
+ * receipt signature (always) -> attestation covers the key -> attestation verifies under
+ * the DRM3 root/issuer key you supply. No attestation supplied = honest `unanchored`
+ * (today's fleet state until per-subject attestations ship).
+ */
+export async function verifyChain(receipt, attestation, rootPublicKey) {
+    const notes = [];
+    if (!receipt.public_key || !receipt.signature)
+        return { ok: false, grade: "failed", notes: ["receipt is missing public_key or signature"] };
+    const sigOk = await verifySig(receipt.public_key, receipt.signature, receiptPayload(receipt));
+    if (!sigOk)
+        return { ok: false, grade: "failed", notes: ["receipt signature failed"] };
+    notes.push("receipt signature verified");
+    if (!attestation) {
+        notes.push("no issuer attestation supplied: signature proves authorship, DRM3 authorization not established");
+        return { ok: true, grade: "unanchored", notes };
+    }
+    const att = await verifyAttestation(attestation, rootPublicKey ?? undefined);
+    if (!att.ok)
+        return { ok: false, grade: "failed", notes: [...notes, `attestation: ${att.reason}`] };
+    notes.push("issuer attestation verified");
+    const covered = attestation.subject_keys.some((k) => k.key.toLowerCase() === receipt.public_key.toLowerCase());
+    if (!covered)
+        return { ok: false, grade: "failed", notes: [...notes, "receipt key is not in the attestation's subject_keys"] };
+    notes.push("receipt key is attested for this subject");
+    return { ok: true, grade: "root-anchored", notes };
+}
+/** Short display form: `ed25519:aabbccdd…eeff00`. */
+export function shortKeyId(k) {
+    const h = k.replace(/^ed25519:/, "");
+    return h.length <= 18 ? `ed25519:${h}` : `ed25519:${h.slice(0, 8)}…${h.slice(-6)}`;
+}
+//# sourceMappingURL=keys-verify.js.map

package/dist/keys-verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys-verify.js","sourceRoot":"","sources":["../src/keys-verify.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,mFAAmF;AACnF,6CAA6C;AAC7C,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAkD3E,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,QAA8C,EAAE,gBAA2B;IACrH,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,gBAAgB,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9E,OAAO,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,CAAC;AACpC,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAsB,EAAE,cAAuB;IACrF,IAAI,GAAG,CAAC,MAAM,KAAK,2BAA2B;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC/F,IAAI,cAAc,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,cAAc,CAAC,WAAW,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAAC;IAC7J,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,GAAG,CAAC;IACvC,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1E,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;AAC7E,CAAC;AAED,uFAAuF;AACvF,SAAS,cAAc,CAAC,CAAe;IACrC,OAAO,YAAY,CAAC;QAClB,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,UAAU,EAAE,CAAC,CAAC,UAAU;KACzB,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAqB,EAAE,WAAsC,EAAE,aAA6B;IAC5H,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,4CAA4C,CAAC,EAAE,CAAC;IAC5I,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9F,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,0BAA0B,CAAC,EAAE,CAAC;IACvF,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAEzC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,iGAAiG,CAAC,CAAC;QAC9G,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IAClD,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,WAAW,EAAE,aAAa,IAAI,SAAS,CAAC,CAAC;IAC7E,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,EAAE,gBAAgB,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;IACpG,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAE1C,MAAM,OAAO,GAAG,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,KAAM,OAAO,CAAC,UAAqB,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3H,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,EAAE,sDAAsD,CAAC,EAAE,CAAC;IAC/H,KAAK,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IACvD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;AACrD,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACrC,OAAO,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACrF,CAAC"}

package/dist/keys.d.ts

@@ -0,0 +1,4 @@
+export { canonicalize } from "./keys-canonical.js";
+export { type Csr, type GeneratedSigningKey, buildCSR, generateSigningKey, importPrivateKeyPkcs8, verifyCsr } from "./keys-generate.js";
+export { type ChainReceipt, type ChainVerdict, type IssuerAttestation, shortKeyId, signIssuerAttestation, verifyAttestation, verifyChain, } from "./keys-verify.js";
+//# sourceMappingURL=keys.d.ts.map

package/dist/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,KAAK,GAAG,EAAE,KAAK,mBAAmB,EAAE,QAAQ,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACxI,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,UAAU,EACV,qBAAqB,EACrB,iBAAiB,EACjB,WAAW,GACZ,MAAM,kBAAkB,CAAC"}

package/dist/keys.js

@@ -0,0 +1,22 @@
+// DRM3 partner signing keys - generate a keypair locally, build a CSR for the DRM3 CA,
+// and verify a certificate chain (receipt -> issuer attestation -> DRM3 Root).
+//
+//   import { generateSigningKey, buildCSR, verifyChain } from "@drm3/sdk/keys";
+//
+//   const key = await generateSigningKey();            // private key never leaves you
+//   const csr = await buildCSR({ subject: "acme", keyPair: key.keyPair });
+//   // POST csr to DRM3 (a verified partner account) -> a drm3-issuer-attestation/1 back
+//   const verdict = await verifyChain(receipt, attestation, rootPublicKey);
+//
+// The CA model: the partner generates the key and keeps the private half, DRM3 only ever
+// sees the public key and certifies it (docs: drm3-provenance CERTIFICATE-PRACTICE-STATEMENT
+// + ROOT-CEREMONY.md §3). Signing discipline is identical to receipts: Ed25519 over
+// canonicalize(object minus its signature field).
+//
+// Framework-agnostic, zero deps: stdlib WebCrypto (Ed25519) only. This is a thin barrel:
+// canonicalization + low-level crypto live in ./keys-canonical, keygen + CSR in
+// ./keys-generate, and attestation + chain grading in ./keys-verify.
+export { canonicalize } from "./keys-canonical.js";
+export { buildCSR, generateSigningKey, importPrivateKeyPkcs8, verifyCsr } from "./keys-generate.js";
+export { shortKeyId, signIssuerAttestation, verifyAttestation, verifyChain, } from "./keys-verify.js";
+//# sourceMappingURL=keys.js.map

package/dist/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,+EAA+E;AAC/E,EAAE;AACF,gFAAgF;AAChF,EAAE;AACF,uFAAuF;AACvF,2EAA2E;AAC3E,yFAAyF;AACzF,4EAA4E;AAC5E,EAAE;AACF,yFAAyF;AACzF,6FAA6F;AAC7F,oFAAoF;AACpF,kDAAkD;AAClD,EAAE;AACF,yFAAyF;AACzF,gFAAgF;AAChF,qEAAqE;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAsC,QAAQ,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACxI,OAAO,EAIL,UAAU,EACV,qBAAqB,EACrB,iBAAiB,EACjB,WAAW,GACZ,MAAM,kBAAkB,CAAC"}

package/dist/meter/adapter.d.ts

@@ -0,0 +1,35 @@
+import { type App, type Balance, type Credits, GLOBAL, type Reservation, type Result, type Tenant } from "./types.js";
+export interface StorageAdapter {
+    fund(tenant: Tenant, app: App, amount: Credits): Promise<void>;
+    /** Atomically place the hold if the scope can cover it. true = placed. */
+    hold(resv: Reservation): Promise<boolean>;
+    capture(id: string, quotedActual: Credits, idemKey?: string): Promise<Result<{
+        charged: Credits;
+    }>>;
+    voidHold(id: string): Promise<Result<Record<never, never>>>;
+    balance(tenant: Tenant, app: App): Promise<Balance>;
+    /** Release every hold past its TTL. Returns how many were reclaimed. */
+    reclaimExpired(now: number): Promise<number>;
+    getReservation(id: string): Promise<Reservation | undefined>;
+}
+export declare class InMemoryAdapter implements StorageAdapter {
+    private rows;
+    private resv;
+    /** capture_idem_key → the charge it produced, so a retry returns the same. */
+    private idem;
+    private locks;
+    /** Serialize all operations for one tenant (the atomicity boundary). */
+    private run;
+    private row;
+    fund(tenant: Tenant, app: App, amount: Credits): Promise<void>;
+    hold(r: Reservation): Promise<boolean>;
+    capture(id: string, quotedActual: Credits, idemKey?: string): Promise<Result<{
+        charged: Credits;
+    }>>;
+    voidHold(id: string): Promise<Result<Record<never, never>>>;
+    balance(tenant: Tenant, app: App): Promise<Balance>;
+    reclaimExpired(now: number): Promise<number>;
+    getReservation(id: string): Promise<Reservation | undefined>;
+}
+export { GLOBAL };
+//# sourceMappingURL=adapter.d.ts.map

package/dist/meter/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/meter/adapter.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,KAAK,GAAG,EAAE,KAAK,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,EAAE,KAAK,WAAW,EAAE,KAAK,MAAM,EAAE,KAAK,MAAM,EAAO,MAAM,YAAY,CAAC;AAE3H,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,0EAA0E;IAC1E,IAAI,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1C,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC,CAAC;IACpG,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5D,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpD,wEAAwE;IACxE,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7C,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC;CAC9D;AASD,qBAAa,eAAgB,YAAW,cAAc;IACpD,OAAO,CAAC,IAAI,CAA0B;IACtC,OAAO,CAAC,IAAI,CAAkC;IAC9C,8EAA8E;IAC9E,OAAO,CAAC,IAAI,CAA8B;IAC1C,OAAO,CAAC,KAAK,CAAuC;IAEpD,wEAAwE;IACxE,OAAO,CAAC,GAAG;IAaX,OAAO,CAAC,GAAG;IAUX,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAM9D,IAAI,CAAC,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAUtC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAqBnG,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IAc3D,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC;IAOnD,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAmB5C,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;CAG7D;AAED,OAAO,EAAE,MAAM,EAAE,CAAC"}

package/dist/meter/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../src/meter/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1F,OAAO,EAAwC,MAAM,EAA8C,GAAG,EAAE,MAAM,YAAY,CAAC;AAmB3H,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,CAAM,EAAU,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;AAEvD,MAAM,OAAO,eAAe;IAClB,IAAI,GAAG,IAAI,GAAG,EAAe,CAAC;IAC9B,IAAI,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC9C,8EAA8E;IACtE,IAAI,GAAG,IAAI,GAAG,EAAmB,CAAC;IAClC,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEpD,wEAAwE;IAChE,GAAG,CAAI,MAAc,EAAE,EAAwB;QACrD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,GAAG,CACZ,MAAM,EACN,IAAI,CAAC,IAAI,CACP,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAChB,CACF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,GAAG,CAAC,CAAS,EAAE,CAAM;QAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtB,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC,MAAc,EAAE,GAAQ,EAAE,MAAe;QAC5C,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE;YAC3B,IAAI,MAAM,GAAG,EAAE;gBAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,CAAc;QACjB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE;YAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC1D,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC;YACnB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,EAAU,EAAE,YAAqB,EAAE,OAAgB;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,QAAQ;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAC;QAC5F,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;YACpC,oEAAoE;YACpE,IAAI,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtC,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAY,EAAE,CAAC;YAC3E,CAAC;YACD,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5B,IAAI,CAAC,CAAC;gBAAE,OAAO,GAAG,CAAC,uBAAuB,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;YACpE,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM;gBAAE,OAAO,GAAG,CAAC,mBAAmB,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC3F,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,YAAY,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;YACnF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;YACtC,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC;YACrB,GAAG,CAAC,IAAI,IAAI,WAAW,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;YAC/B,IAAI,OAAO;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC3C,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,EAAU;QACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,QAAQ;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAC;QAC5F,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;YACpC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5B,IAAI,CAAC,CAAC;gBAAE,OAAO,GAAG,CAAC,uBAAuB,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;YACpE,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM;gBAAE,OAAO,GAAG,CAAC,mBAAmB,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC3F,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,YAAY,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC/D,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,WAAW,CAAC;YAC9C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;YAC/B,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,MAAc,EAAE,GAAQ;QAC9B,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE;YAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAClC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/F,CAAC,CAAC,CAAC;IACL,CAAC;IAED,cAAc,CAAC,GAAW;QACxB,0DAA0D;QAC1D,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC3E,OAAO,KAAK,CAAC,MAAM,CACjB,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CACT,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACb,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE;YACtB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAChC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,MAAM;gBAAE,OAAO,CAAC,CAAC;YAC3C,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,YAAY,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAClE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,WAAW,CAAC;YAClD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC,CAAC,CACH,EACH,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CACnB,CAAC;IACJ,CAAC;IAED,cAAc,CAAC,EAAU;QACvB,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAiB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACpG,CAAC;CACF;AAED,OAAO,EAAE,MAAM,EAAE,CAAC"}

package/dist/meter/cascade.d.ts

@@ -0,0 +1,56 @@
+/**
+ * cascade - the one recursive draw primitive ("a pattern in a pattern").
+ *
+ * A cascade is an ordered list of draw-nodes. To satisfy a demand, draw from each
+ * node in order; whatever a node can't cover SPILLS to the next. Every node FLOORS
+ * at zero (never goes negative) EXCEPT the terminal node, which may OVERDRAFT to
+ * absorb the remainder. That single rule describes both depths of the wallet:
+ *
+ *   - a WALLET is a cascade of METERS  (feature_1, feature_2, … → credits = terminal)
+ *   - a METER  is a cascade of BUCKETS (daily → monthly → buyup)
+ *
+ * This module is just the math - pure, integer (µcredit/`bigint`), no I/O, no
+ * storage, no unit conversion. The wallet/meter/bucket/plan layers compose it.
+ *
+ * `terminalOverdraft`:
+ *   - true  (default) → the last node absorbs all remaining demand and may go
+ *                       negative; `shortfall` is always 0. Use when this cascade
+ *                       is the buck-stops-here layer (the credits purse / a
+ *                       buyup that is the final fallback).
+ *   - false           → the last node also floors at zero; unmet demand is
+ *                       reported as `shortfall` so a parent cascade can spill it
+ *                       upward (a meter that is NOT the terminal meter, whose
+ *                       remainder converts to credits and continues).
+ */
+export interface CascadeNode {
+    readonly key: string;
+    /** Current balance in µcredits (or any integer unit). May start negative. */
+    readonly balance: bigint;
+}
+export interface CascadeDraw {
+    readonly key: string;
+    /** Amount drawn from this node this pass (>= 0). */
+    readonly amount: bigint;
+    /** Resulting balance. >= 0 for every node except an overdrafting terminal. */
+    readonly balance: bigint;
+}
+export interface CascadeResult {
+    /** One entry per input node, in order (amount may be 0). */
+    readonly draws: readonly CascadeDraw[];
+    /** Total drawn = demand - shortfall. */
+    readonly applied: bigint;
+    /** Unmet demand. Always 0 when terminalOverdraft is true. */
+    readonly shortfall: bigint;
+    /** How much further below zero the terminal went this pass (>= 0). */
+    readonly overdraft: bigint;
+}
+/**
+ * Draw `demand` from `nodes` in order. Pure: input nodes are never mutated.
+ *
+ * @param nodes  ordered draw-nodes (most-specific first; terminal last)
+ * @param demand units to satisfy; <= 0 draws nothing
+ */
+export declare function cascade(nodes: readonly CascadeNode[], demand: bigint, opts?: {
+    terminalOverdraft?: boolean;
+}): CascadeResult;
+//# sourceMappingURL=cascade.d.ts.map

package/dist/meter/cascade.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cascade.d.ts","sourceRoot":"","sources":["../../src/meter/cascade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,oDAAoD;IACpD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,EAAE,SAAS,WAAW,EAAE,CAAC;IACvC,wCAAwC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,6DAA6D;IAC7D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,sEAAsE;IACtE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAID;;;;;GAKG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,SAAS,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,aAAa,CAmChI"}

package/dist/meter/cascade.js

@@ -0,0 +1,64 @@
+/**
+ * cascade - the one recursive draw primitive ("a pattern in a pattern").
+ *
+ * A cascade is an ordered list of draw-nodes. To satisfy a demand, draw from each
+ * node in order; whatever a node can't cover SPILLS to the next. Every node FLOORS
+ * at zero (never goes negative) EXCEPT the terminal node, which may OVERDRAFT to
+ * absorb the remainder. That single rule describes both depths of the wallet:
+ *
+ *   - a WALLET is a cascade of METERS  (feature_1, feature_2, … → credits = terminal)
+ *   - a METER  is a cascade of BUCKETS (daily → monthly → buyup)
+ *
+ * This module is just the math - pure, integer (µcredit/`bigint`), no I/O, no
+ * storage, no unit conversion. The wallet/meter/bucket/plan layers compose it.
+ *
+ * `terminalOverdraft`:
+ *   - true  (default) → the last node absorbs all remaining demand and may go
+ *                       negative; `shortfall` is always 0. Use when this cascade
+ *                       is the buck-stops-here layer (the credits purse / a
+ *                       buyup that is the final fallback).
+ *   - false           → the last node also floors at zero; unmet demand is
+ *                       reported as `shortfall` so a parent cascade can spill it
+ *                       upward (a meter that is NOT the terminal meter, whose
+ *                       remainder converts to credits and continues).
+ */
+const max0 = (x) => (x > 0n ? x : 0n);
+/**
+ * Draw `demand` from `nodes` in order. Pure: input nodes are never mutated.
+ *
+ * @param nodes  ordered draw-nodes (most-specific first; terminal last)
+ * @param demand units to satisfy; <= 0 draws nothing
+ */
+export function cascade(nodes, demand, opts = {}) {
+    const terminalOverdraft = opts.terminalOverdraft ?? true;
+    const want = demand > 0n ? demand : 0n;
+    const draws = [];
+    let remaining = want;
+    let overdraft = 0n;
+    const lastIdx = nodes.length - 1;
+    for (let i = 0; i < nodes.length; i++) {
+        const node = nodes[i];
+        const isTerminal = i === lastIdx;
+        let take;
+        if (isTerminal && terminalOverdraft) {
+            // Terminal absorbs the rest, even past zero.
+            take = remaining;
+            const before = node.balance;
+            const after = before - take;
+            overdraft = max0(-after) - max0(-before); // new overdraft incurred this pass
+        }
+        else {
+            // Floor at zero: can only draw a positive balance.
+            take = remaining < max0(node.balance) ? remaining : max0(node.balance);
+        }
+        draws.push({ key: node.key, amount: take, balance: node.balance - take });
+        remaining -= take;
+    }
+    return {
+        draws,
+        applied: want - remaining,
+        shortfall: remaining,
+        overdraft,
+    };
+}
+//# sourceMappingURL=cascade.js.map

package/dist/meter/cascade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cascade.js","sourceRoot":"","sources":["../../src/meter/cascade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AA2BH,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,UAAU,OAAO,CAAC,KAA6B,EAAE,MAAc,EAAE,OAAwC,EAAE;IAC/G,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC;IACzD,MAAM,IAAI,GAAG,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAEvC,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,IAAI,SAAS,GAAG,IAAI,CAAC;IACrB,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAEjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAgB,CAAC;QACrC,MAAM,UAAU,GAAG,CAAC,KAAK,OAAO,CAAC;QAEjC,IAAI,IAAY,CAAC;QACjB,IAAI,UAAU,IAAI,iBAAiB,EAAE,CAAC;YACpC,6CAA6C;YAC7C,IAAI,GAAG,SAAS,CAAC;YACjB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;YAC5B,MAAM,KAAK,GAAG,MAAM,GAAG,IAAI,CAAC;YAC5B,SAAS,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,mCAAmC;QAC/E,CAAC;aAAM,CAAC;YACN,mDAAmD;YACnD,IAAI,GAAG,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzE,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC,CAAC;QAC1E,SAAS,IAAI,IAAI,CAAC;IACpB,CAAC;IAED,OAAO;QACL,KAAK;QACL,OAAO,EAAE,IAAI,GAAG,SAAS;QACzB,SAAS,EAAE,SAAS;QACpB,SAAS;KACV,CAAC;AACJ,CAAC"}

package/dist/meter/client.d.ts

@@ -0,0 +1,78 @@
+/**
+ * CreditsClient - the app-facing surface. Orchestrates the pure core, the
+ * storage adapter, the price book, and (later) the settlement sink. Holds the
+ * operation, never a bucket: a hold exists only while a request is in flight and
+ * is released the instant it captures, voids, or expires.
+ *
+ * Spend precedence mirrors the contract: app-scoped balance first, then GLOBAL.
+ * (A hold resolves to a single scope in v1 - whichever covers it, app before
+ * global; a hold that must span both scopes is a documented v1 limitation.)
+ */
+import type { StorageAdapter } from "./adapter.js";
+import { PriceBook } from "./pricebook.js";
+import { type App, type Balance, type Credits, type Reservation, type Result, type Tenant } from "./types.js";
+export interface ClientOptions {
+    adapter: StorageAdapter;
+    priceBook?: PriceBook;
+    /** Injected clock - the core never reads time itself. Default Date.now. */
+    now?: () => number;
+    /** Injected id generator. Default crypto.randomUUID. */
+    genId?: () => string;
+    /** Default hold TTL in ms. Default 60_000. */
+    holdTtlMs?: number;
+}
+export interface AuthorizeInput {
+    tenant: Tenant;
+    app?: App;
+    /** ceiling in credits, OR give unit+maxUnits to quote it from the price book */
+    maxCredits?: Credits;
+    unit?: string;
+    maxUnits?: number;
+    ttlMs?: number;
+}
+export interface CaptureInput {
+    /** actual usage in credits, OR unit+units to quote it */
+    credits?: Credits;
+    unit?: string;
+    units?: number;
+    /** idempotency key - a retried capture with the same key charges once */
+    idemKey?: string;
+}
+export declare class CreditsClient {
+    private adapter;
+    private prices;
+    private now;
+    private genId;
+    private ttl;
+    constructor(opts: ClientOptions);
+    fund(tenant: Tenant, amount: Credits, app?: App): Promise<void>;
+    balance(tenant: Tenant, app?: App): Promise<Balance>;
+    private ceiling;
+    /** Pre-auth: reserve the worst-case ceiling. Bounds the most this can cost. */
+    authorize(input: AuthorizeInput): Promise<Result<{
+        reservation: Reservation;
+    }>>;
+    private actual;
+    /** Clearing: commit the actual amount (capped at the hold), release the rest. */
+    capture(reservationId: string, input: CaptureInput): Promise<Result<{
+        charged: Credits;
+    }>>;
+    /** Reversal: backend failed → release the whole hold, charge nothing. */
+    void(reservationId: string): Promise<Result<Record<never, never>>>;
+    /**
+     * Fixed-price fast path: authorize + capture the exact price in one call, with
+     * no lingering hold. For a query, a refinement run - anything priced up front.
+     */
+    charge(tenant: Tenant, input: {
+        app?: App;
+        credits?: Credits;
+        unit?: string;
+        units?: number;
+        idemKey?: string;
+    }): Promise<Result<{
+        charged: Credits;
+    }>>;
+    /** TTL sweep of abandoned holds - a cheap cron over your own DB, never RPC. */
+    reclaimExpired(): Promise<number>;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/meter/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/meter/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,KAAK,GAAG,EAAE,KAAK,OAAO,EAAE,KAAK,OAAO,EAAU,KAAK,WAAW,EAAE,KAAK,MAAM,EAAE,KAAK,MAAM,EAAO,MAAM,YAAY,CAAC;AAE3H,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,cAAc,CAAC;IACxB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,wDAAwD;IACxD,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IACrB,8CAA8C;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,GAAG,CAAC;IACV,gFAAgF;IAChF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,yDAAyD;IACzD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,OAAO,CAAiB;IAChC,OAAO,CAAC,MAAM,CAAY;IAC1B,OAAO,CAAC,GAAG,CAAe;IAC1B,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,GAAG,CAAS;gBAER,IAAI,EAAE,aAAa;IAQ/B,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAE,GAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,GAAE,GAAY,GAAG,OAAO,CAAC,OAAO,CAAC;IAI5D,OAAO,CAAC,OAAO;IAMf,+EAA+E;IACzE,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;QAAE,WAAW,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC;IAuBrF,OAAO,CAAC,MAAM;IAMd,iFAAiF;IACjF,OAAO,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAI1F,yEAAyE;IACzE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IAIlE;;;OAGG;IACG,MAAM,CACV,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;QAAE,GAAG,CAAC,EAAE,GAAG,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GACvF,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAOxC,+EAA+E;IAC/E,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;CAGlC"}

package/dist/meter/client.js

@@ -0,0 +1,84 @@
+import { PriceBook } from "./pricebook.js";
+import { GLOBAL, err } from "./types.js";
+export class CreditsClient {
+    adapter;
+    prices;
+    now;
+    genId;
+    ttl;
+    constructor(opts) {
+        this.adapter = opts.adapter;
+        this.prices = opts.priceBook ?? new PriceBook();
+        this.now = opts.now ?? (() => Date.now());
+        this.genId = opts.genId ?? (() => crypto.randomUUID());
+        this.ttl = opts.holdTtlMs ?? 60_000;
+    }
+    fund(tenant, amount, app = GLOBAL) {
+        return this.adapter.fund(tenant, app, amount);
+    }
+    balance(tenant, app = GLOBAL) {
+        return this.adapter.balance(tenant, app);
+    }
+    ceiling(input) {
+        if (input.maxCredits !== undefined)
+            return input.maxCredits;
+        if (input.unit !== undefined && input.maxUnits !== undefined)
+            return this.prices.quote(input.unit, input.maxUnits);
+        return 0n;
+    }
+    /** Pre-auth: reserve the worst-case ceiling. Bounds the most this can cost. */
+    async authorize(input) {
+        const want = this.ceiling(input);
+        const ttlMs = input.ttlMs ?? this.ttl;
+        const at = this.now();
+        const base = {
+            id: this.genId(),
+            tenant: input.tenant,
+            held: want,
+            charged: 0n,
+            state: "held",
+            createdAt: at,
+            expiresAt: at + ttlMs,
+        };
+        const requested = input.app ?? GLOBAL;
+        // app-first, then fall back to GLOBAL
+        const scopes = requested === GLOBAL ? [GLOBAL] : [requested, GLOBAL];
+        for (const scope of scopes) {
+            const resv = { ...base, app: scope };
+            if (await this.adapter.hold(resv))
+                return { ok: true, reservation: resv };
+        }
+        return err("INSUFFICIENT_FUNDS", `tenant ${input.tenant} cannot reserve ${want} credits`);
+    }
+    actual(input) {
+        if (input.credits !== undefined)
+            return input.credits;
+        if (input.unit !== undefined && input.units !== undefined)
+            return this.prices.quote(input.unit, input.units);
+        return 0n;
+    }
+    /** Clearing: commit the actual amount (capped at the hold), release the rest. */
+    capture(reservationId, input) {
+        return this.adapter.capture(reservationId, this.actual(input), input.idemKey);
+    }
+    /** Reversal: backend failed → release the whole hold, charge nothing. */
+    void(reservationId) {
+        return this.adapter.voidHold(reservationId);
+    }
+    /**
+     * Fixed-price fast path: authorize + capture the exact price in one call, with
+     * no lingering hold. For a query, a refinement run - anything priced up front.
+     */
+    async charge(tenant, input) {
+        const price = input.credits ?? (input.unit !== undefined && input.units !== undefined ? this.prices.quote(input.unit, input.units) : 0n);
+        const authd = await this.authorize({ tenant, app: input.app, maxCredits: price, ttlMs: 1_000 });
+        if (!authd.ok)
+            return authd;
+        return this.capture(authd.reservation.id, { credits: price, idemKey: input.idemKey });
+    }
+    /** TTL sweep of abandoned holds - a cheap cron over your own DB, never RPC. */
+    reclaimExpired() {
+        return this.adapter.reclaimExpired(this.now());
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/meter/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/meter/client.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAwC,MAAM,EAA8C,GAAG,EAAE,MAAM,YAAY,CAAC;AAgC3H,MAAM,OAAO,aAAa;IAChB,OAAO,CAAiB;IACxB,MAAM,CAAY;IAClB,GAAG,CAAe;IAClB,KAAK,CAAe;IACpB,GAAG,CAAS;IAEpB,YAAY,IAAmB;QAC7B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,SAAS,EAAE,CAAC;QAChD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;IACtC,CAAC;IAED,IAAI,CAAC,MAAc,EAAE,MAAe,EAAE,MAAW,MAAM;QACrD,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,CAAC,MAAc,EAAE,MAAW,MAAM;QACvC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC3C,CAAC;IAEO,OAAO,CAAC,KAAqB;QACnC,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC,UAAU,CAAC;QAC5D,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnH,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,SAAS,CAAC,KAAqB;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC;QACtC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,MAAM,IAAI,GAA6B;YACrC,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,MAAM;YACb,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,EAAE,GAAG,KAAK;SACtB,CAAC;QACF,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC;QACtC,sCAAsC;QACtC,MAAM,MAAM,GAAG,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACrE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAgB,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;YAClD,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QAC5E,CAAC;QACD,OAAO,GAAG,CAAC,oBAAoB,EAAE,UAAU,KAAK,CAAC,MAAM,mBAAmB,IAAI,UAAU,CAAC,CAAC;IAC5F,CAAC;IAEO,MAAM,CAAC,KAAmB;QAChC,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC,OAAO,CAAC;QACtD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7G,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,iFAAiF;IACjF,OAAO,CAAC,aAAqB,EAAE,KAAmB;QAChD,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAChF,CAAC;IAED,yEAAyE;IACzE,IAAI,CAAC,aAAqB;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC9C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CACV,MAAc,EACd,KAAwF;QAExF,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACzI,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAChG,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACxF,CAAC;IAED,+EAA+E;IAC/E,cAAc;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACjD,CAAC;CACF"}

package/dist/meter/core.d.ts

@@ -0,0 +1,37 @@
+/**
+ * The pure core. No I/O, no clock, no network - every input is an argument and
+ * every output is a value. This is what makes the engine provably correct and
+ * exhaustively testable (property + state×action). The StorageAdapter applies
+ * these decisions atomically; the core never touches state itself.
+ */
+import type { Credits, Reservation, ReservationState } from "./types.js";
+/** available = balance - held, floored at 0 (a hold never makes it negative). */
+export declare function available(balance: Credits, held: Credits): Credits;
+/** Can a hold of `amount` be placed against this scope? The Visa pre-auth check. */
+export declare function canHold(balance: Credits, held: Credits, amount: Credits): boolean;
+/**
+ * The Visa guarantee: you are never charged more than you reserved.
+ * charged = min(quotedActual, held). Always.
+ */
+export declare function captureAmount(held: Credits, quotedActual: Credits): Credits;
+/** Whether a reservation is in a state that can still be captured/voided. */
+export declare function isOpen(state: ReservationState): boolean;
+/**
+ * Decide the result of capturing a held reservation. Returns the next
+ * reservation shape + how much to debit balance + how much hold to release.
+ * Pure: caller persists. Capturing a non-open reservation is a no-op echo
+ * (idempotent at the state-machine level; storage enforces idem by key too).
+ */
+export declare function applyCapture(r: Reservation, quotedActual: Credits, idemKey?: string): {
+    reservation: Reservation;
+    debit: Credits;
+    releaseHold: Credits;
+};
+/** Voiding/expiring an open reservation releases the entire hold, charges nothing. */
+export declare function applyRelease(r: Reservation, state: "voided" | "expired"): {
+    reservation: Reservation;
+    releaseHold: Credits;
+};
+/** Has a reservation passed its TTL and is still holding credits? */
+export declare function isReclaimable(r: Reservation, now: number): boolean;
+//# sourceMappingURL=core.d.ts.map

package/dist/meter/core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../../src/meter/core.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEzE,iFAAiF;AACjF,wBAAgB,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAGlE;AAED,oFAAoF;AACpF,wBAAgB,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAEjF;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,GAAG,OAAO,CAG3E;AAED,6EAA6E;AAC7E,wBAAgB,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAEvD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG;IAAE,WAAW,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,OAAO,CAAA;CAAE,CAUxJ;AAED,sFAAsF;AACtF,wBAAgB,YAAY,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG;IAAE,WAAW,EAAE,WAAW,CAAC;IAAC,WAAW,EAAE,OAAO,CAAA;CAAE,CAG5H;AAED,qEAAqE;AACrE,wBAAgB,aAAa,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAElE"}