@engramx/client 0.15.0 → 0.16.0-rc.4

package/dist/ProfileManager.d.ts

@@ -5,7 +5,7 @@
  * reading/writing user identity, preferences, and accumulated knowledge
  * without callers needing to know the path layout.
  */
-import type { EngramClient } from './EngramClient.js';
+import type { EngramClient, MemoryReceipt } from './EngramClient.js';
 export interface Profile {
     /** Agent personality (SOUL.md) — may be null if not yet set */
     soul: string | null;
@@ -40,16 +40,16 @@ export declare class ProfileManager {
     /**
      * Save a preference. Appends a timestamped entry to identity/preferences.md.
      */
-    savePreference(preference: string): Promise<bigint>;
+    savePreference(preference: string): Promise<MemoryReceipt | null>;
     /**
      * Save an insight or lesson learned. Appends to knowledge/lessons.md,
      * or to a domain-specific file if topic is provided.
      */
-    saveInsight(insight: Insight): Promise<bigint>;
+    saveInsight(insight: Insight): Promise<MemoryReceipt | null>;
     /**
      * Save a decision with rationale. Appends to knowledge/decisions.md.
      */
-    saveDecision(decision: string, rationale: string): Promise<bigint>;
+    saveDecision(decision: string, rationale: string): Promise<MemoryReceipt | null>;
     /**
      * Read the lessons file. Returns null if it doesn't exist.
      */

package/dist/SessionManager.d.ts

@@ -5,7 +5,7 @@
  * summaries to its own namespace (sessions/{platform}/), enabling
  * cross-platform continuity ("what was I working on with OpenClaw?").
  */
-import type { EngramClient } from './EngramClient.js';
+import type { EngramClient, MemoryReceipt } from './EngramClient.js';
 export interface SessionSummary {
     platform: string;
     date: string;
@@ -15,7 +15,7 @@ export interface SessionEntry {
     path: string;
     platform: string;
     date: string;
-    lastModifiedAt: bigint;
+    lastModifiedAtNs: bigint;
 }
 export declare class SessionManager {
     private readonly client;
@@ -23,7 +23,7 @@ export declare class SessionManager {
     /**
      * Write or append a session summary for the current platform and date.
      */
-    writeSummary(platform: string, content: string, date?: string): Promise<bigint>;
+    writeSummary(platform: string, content: string, date?: string): Promise<MemoryReceipt | null>;
     /**
      * Read a specific session summary.
      */

package/dist/SessionManager.js

@@ -46,7 +46,7 @@ export class SessionManager {
                 path: f.path,
                 platform: plat ?? 'unknown',
                 date: dateMatch ? dateMatch[1] : 'unknown',
-                lastModifiedAt: f.lastModifiedAt,
+                lastModifiedAtNs: f.lastModifiedAtNs,
             };
         })
             .sort((a, b) => {

package/dist/SessionManager.js.map

@@ -1 +1 @@
-{"version":3,"file":"SessionManager.js","sourceRoot":"","sources":["../src/SessionManager.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAe/D,MAAM,OAAO,cAAc;IACzB,YAA6B,MAAoB;QAApB,WAAM,GAAN,MAAM,CAAc;IAAG,CAAC;IAErD;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,QAAgB,EAAE,OAAe,EAAE,IAAa;QACjE,MAAM,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,QAAgB,EAAE,IAAY;QAC9C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;YAC5E,OAAO,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY,CAAC,QAAiB;QAClC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QAEvE,OAAO,QAAQ;aACZ,MAAM,CAAC,CAAC,CAAiB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;aACxD,GAAG,CAAC,CAAC,CAAiB,EAAE,EAAE;YACzB,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACrC,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC3D,OAAO;gBACL,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,QAAQ,EAAE,IAAI,IAAI,SAAS;gBAC3B,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,SAAS;gBAC3C,cAAc,EAAE,CAAC,CAAC,cAAc;aACjC,CAAC;QACJ,CAAC,CAAC;aACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACb,yCAAyC;YACzC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;gBAAE,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvD,OAAO,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,QAAgB,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAEvC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAElC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAEzD,OAAO,MAAM;aACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACb,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC;YACvD,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzB,MAAM,CAAC,EAAE,WAAW,CAAC,GAAG,MAAM,CAAC;YAC/B,IAAI,WAAW,YAAY,KAAK;gBAAE,OAAO,IAAI,CAAC;YAC9C,OAAO;gBACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,WAAW,CAAC,OAAO;aAC7B,CAAC;QACJ,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,CAAC,EAAuB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACpD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,iBAAiB,CAAC,eAAuB,EAAE,QAAgB,CAAC;QAChE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,eAAe,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAEpF,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAElC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAEzD,OAAO,KAAK;aACT,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACb,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC;YACvD,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzB,MAAM,CAAC,EAAE,WAAW,CAAC,GAAG,MAAM,CAAC;YAC/B,IAAI,WAAW,YAAY,KAAK;gBAAE,OAAO,IAAI,CAAC;YAC9C,OAAO;gBACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,WAAW,CAAC,OAAO;aAC7B,CAAC;QACJ,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,CAAC,EAAuB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACpD,CAAC;CACF"}
+{"version":3,"file":"SessionManager.js","sourceRoot":"","sources":["../src/SessionManager.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAe/D,MAAM,OAAO,cAAc;IACzB,YAA6B,MAAoB;QAApB,WAAM,GAAN,MAAM,CAAc;IAAG,CAAC;IAErD;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,QAAgB,EAChB,OAAe,EACf,IAAa;QAEb,MAAM,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,QAAgB,EAAE,IAAY;QAC9C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;YAC5E,OAAO,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY,CAAC,QAAiB;QAClC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QAEvE,OAAO,QAAQ;aACZ,MAAM,CAAC,CAAC,CAAiB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;aACxD,GAAG,CAAC,CAAC,CAAiB,EAAE,EAAE;YACzB,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACrC,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC3D,OAAO;gBACL,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,QAAQ,EAAE,IAAI,IAAI,SAAS;gBAC3B,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,SAAS;gBAC3C,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;aACrC,CAAC;QACJ,CAAC,CAAC;aACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACb,yCAAyC;YACzC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;gBAAE,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvD,OAAO,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,QAAgB,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAEvC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAElC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAEzD,OAAO,MAAM;aACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACb,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC;YACvD,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzB,MAAM,CAAC,EAAE,WAAW,CAAC,GAAG,MAAM,CAAC;YAC/B,IAAI,WAAW,YAAY,KAAK;gBAAE,OAAO,IAAI,CAAC;YAC9C,OAAO;gBACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,WAAW,CAAC,OAAO;aAC7B,CAAC;QACJ,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,CAAC,EAAuB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACpD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,iBAAiB,CAAC,eAAuB,EAAE,QAAgB,CAAC;QAChE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,eAAe,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAEpF,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAElC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAEzD,OAAO,KAAK;aACT,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACb,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC;YACvD,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzB,MAAM,CAAC,EAAE,WAAW,CAAC,GAAG,MAAM,CAAC;YAC/B,IAAI,WAAW,YAAY,KAAK;gBAAE,OAAO,IAAI,CAAC;YAC9C,OAAO;gBACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,WAAW,CAAC,OAAO;aAC7B,CAAC;QACJ,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,CAAC,EAAuB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACpD,CAAC;CACF"}

package/dist/actionReceipt.d.ts

@@ -1,4 +1,5 @@
 import { Ed25519KeyIdentity } from '@icp-sdk/core/identity';
+import { Principal } from '@icp-sdk/core/principal';
 /** The `ownerAuth` argument to the money-path methods (Candid: opt ActionAuth). */
 export interface ActionAuth {
     /** 32-byte raw Ed25519 public key of the owner's identity. */
@@ -24,6 +25,43 @@ export declare const actionFields: {
  * `canisterId` MUST be the target engram's principal text (the receipt is bound to it).
  */
 export declare function signAction(identity: Ed25519KeyIdentity, canisterId: string, operation: string, fields: string, nonce: bigint): Promise<ActionAuth>;
+/**
+ * The purpose an enrolment statement names. MUST match src/shared/IdentityBinding.mo
+ * `ENROL_OPERATION`.
+ */
+export declare const ENROL_OPERATION = "agent.enrol";
+/**
+ * The message an agent's ROOT key signs to enrol one per-client key on one engram — the owner's
+ * decision of 2026-09-28: one root key per agent, with an enrolled key per client. It is
+ * `actionMessage` with a fixed purpose, bound to the engram, the enrolled key and the invite code
+ * being redeemed (the invite is what makes a statement single-use: the engram burns it). The nonce
+ * is free and is NOT a replay guard — see `pairEnrolled` for why it exists.
+ * ⟨CORRECTED 2026-09-29, ic402 2.16.1⟩ `pairEnrolled` is gone: the engram's verifier no longer
+ * refuses valid signatures, so pairing sends one statement (`EngramClient.pairAgent`).
+ * ⟨CORRECTED 2026-09-29, later⟩ The nonce is gone too — it existed only for that re-signing — so
+ * the message is `engramx.action.v1|<engram>|agent.enrol|enrolled=<key>|invite=<code>`: the
+ * `actionMessage` prefix and parts with no `|nonce=` suffix, built directly here.
+ * MUST match src/shared/IdentityBinding.mo `enrolmentMessage` byte-for-byte; the Motoko test
+ * test/enrolment.test.mo verifies a signature produced by `signEnrolment` below.
+ */
+export declare function enrolmentMessage(canisterId: string, enrolledKey: string, inviteCode: string): Uint8Array;
+/** The `enrolment` field of `pairAgent`'s argument (Candid: Enrolment). */
+export interface Enrolment {
+    /** 32-byte raw Ed25519 public key of the agent's root. */
+    rootPubkey: Uint8Array;
+    /** The engram the statement is for. */
+    engram: Principal;
+    /** The per-client key being enrolled — the principal that will call `pairAgent`. */
+    enrolledKey: Principal;
+    /** 64-byte Ed25519 signature by the root over `enrolmentMessage`. */
+    signature: Uint8Array;
+}
+/**
+ * Sign an enrolment statement with the agent's root key. `root` must be an Ed25519 identity (the
+ * statement is Ed25519 by construction); `enrolledKey` is the per-client key's principal and
+ * `inviteCode` the code that key is about to redeem on `canisterId`.
+ */
+export declare function signEnrolment(root: Ed25519KeyIdentity, canisterId: string, enrolledKey: Principal, inviteCode: string): Promise<Enrolment>;
 /** Encode an ActionAuth for the Candid `opt ActionAuth` argument. */
 export declare function toCandidActionAuth(a: ActionAuth): [{
     pubkey: number[];
@@ -34,6 +72,27 @@ export declare function toCandidActionAuth(a: ActionAuth): [{
  * Verify a receipt without trusting EngramX: confirm the signature is by `pubkey` over the exact
  * canonical action, and return the self-authenticating principal that key maps to — i.e. WHO
  * authorized the action. A relying party compares that principal to the engram's known owner.
+ *
+ * ⟨2026-09-29⟩ MORE PERMISSIVE THAN THE ENGRAM. `Ed25519KeyIdentity.verify` uses @noble/curves in
+ * its ZIP-215 mode, which checks the cofactored equation and accepts small-order keys and some
+ * non-canonical encodings; the engram's check (ic402 2.16.1) is strict RFC 8032 and refuses them.
+ * So every receipt the engram accepted verifies here, but not every receipt that verifies here
+ * would have been accepted. A receipt under a small-order key derives a principal that is not the
+ * owner's, so the comparison above still refuses it. Making this strict needs @noble/curves as a
+ * direct dependency (`{ zip215: false }`); that is open.
+ *
+ * ⟨2026-10-01, the owner's ruling 6 A — supersedes the paragraph above, which stays as the record⟩
+ * AS STRICT AS THE ENGRAM. Verified with @noble/curves (a direct dependency of this package) in
+ * strict RFC 8032 mode (`zip215: false`): a small-order key, a non-canonical point encoding or a
+ * signature with S ≥ L is refused here exactly as the engram's check (ic402 2.16.1) refuses it.
+ * Every receipt the engram accepted verifies here, and every receipt that verifies here the engram
+ * would have accepted. The principal comparison the relying party makes is now a second check, not
+ * the only one. Measured 2026-10-01 with @noble/curves 1.9.7: the all-zero key with R = that key and
+ * S = 0 verifies under ZIP-215 (and under `Ed25519KeyIdentity.verify`) for ANY message, and is
+ * refused here — test/action-receipt.test.ts pins it. WHAT WOULD MAKE THIS WRONG: the engram's
+ * verifier loosening (a newer ic402), or @noble/curves changing what `zip215: false` means.
+ * A malformed key or signature (wrong length, a point that does not decode) is `verified: false`,
+ * never a throw — a relying party reads one boolean.
  */
 export declare function verifyActionReceipt(canisterId: string, operation: string, fields: string, receipt: ActionAuth): {
     verified: boolean;

package/dist/actionReceipt.js

@@ -10,8 +10,8 @@
 // Scope + honesty: this only works for a DIRECT Ed25519 self-authenticating identity (the SDK/CLI
 // session key). An Internet-Identity-delegated or secp256k1 owner cannot produce a matching receipt —
 // they omit `ownerAuth` and the action proceeds as before (owner calls are already IC-authenticated).
-import { Ed25519KeyIdentity } from '@icp-sdk/core/identity';
 import { Principal } from '@icp-sdk/core/principal';
+import { ed25519 } from '@noble/curves/ed25519.js';
 // DER-SPKI prefix for an Ed25519 public key (RFC 8410); DER = this ‖ 32-byte raw key. Kept here so
 // principal derivation needs no extra API surface and matches IdentityBinding.mo exactly.
 const ED25519_SPKI_PREFIX = Uint8Array.from([
@@ -49,18 +49,84 @@ export async function signAction(identity, canisterId, operation, fields, nonce)
     const pubkey = new Uint8Array(identity.getPublicKey().toRaw());
     return { pubkey, signature, nonce };
 }
+/**
+ * The purpose an enrolment statement names. MUST match src/shared/IdentityBinding.mo
+ * `ENROL_OPERATION`.
+ */
+export const ENROL_OPERATION = 'agent.enrol';
+/**
+ * The message an agent's ROOT key signs to enrol one per-client key on one engram — the owner's
+ * decision of 2026-09-28: one root key per agent, with an enrolled key per client. It is
+ * `actionMessage` with a fixed purpose, bound to the engram, the enrolled key and the invite code
+ * being redeemed (the invite is what makes a statement single-use: the engram burns it). The nonce
+ * is free and is NOT a replay guard — see `pairEnrolled` for why it exists.
+ * ⟨CORRECTED 2026-09-29, ic402 2.16.1⟩ `pairEnrolled` is gone: the engram's verifier no longer
+ * refuses valid signatures, so pairing sends one statement (`EngramClient.pairAgent`).
+ * ⟨CORRECTED 2026-09-29, later⟩ The nonce is gone too — it existed only for that re-signing — so
+ * the message is `engramx.action.v1|<engram>|agent.enrol|enrolled=<key>|invite=<code>`: the
+ * `actionMessage` prefix and parts with no `|nonce=` suffix, built directly here.
+ * MUST match src/shared/IdentityBinding.mo `enrolmentMessage` byte-for-byte; the Motoko test
+ * test/enrolment.test.mo verifies a signature produced by `signEnrolment` below.
+ */
+export function enrolmentMessage(canisterId, enrolledKey, inviteCode) {
+    return new TextEncoder().encode(`engramx.action.v1|${canisterId}|${ENROL_OPERATION}|enrolled=${enrolledKey}|invite=${inviteCode}`);
+}
+/**
+ * Sign an enrolment statement with the agent's root key. `root` must be an Ed25519 identity (the
+ * statement is Ed25519 by construction); `enrolledKey` is the per-client key's principal and
+ * `inviteCode` the code that key is about to redeem on `canisterId`.
+ */
+export async function signEnrolment(root, canisterId, enrolledKey, inviteCode) {
+    const message = enrolmentMessage(canisterId, enrolledKey.toText(), inviteCode);
+    return {
+        rootPubkey: new Uint8Array(root.getPublicKey().toRaw()),
+        engram: Principal.fromText(canisterId),
+        enrolledKey,
+        signature: new Uint8Array(await root.sign(message)),
+    };
+}
 /** Encode an ActionAuth for the Candid `opt ActionAuth` argument. */
 export function toCandidActionAuth(a) {
     return [{ pubkey: Array.from(a.pubkey), signature: Array.from(a.signature), nonce: a.nonce }];
 }
+/** Strict RFC 8032 Ed25519 verification; a key or signature that does not decode is `false`. */
+function strictVerify(signature, message, pubkey) {
+    try {
+        return ed25519.verify(signature, message, pubkey, { zip215: false });
+    }
+    catch {
+        return false;
+    }
+}
 /**
  * Verify a receipt without trusting EngramX: confirm the signature is by `pubkey` over the exact
  * canonical action, and return the self-authenticating principal that key maps to — i.e. WHO
  * authorized the action. A relying party compares that principal to the engram's known owner.
+ *
+ * ⟨2026-09-29⟩ MORE PERMISSIVE THAN THE ENGRAM. `Ed25519KeyIdentity.verify` uses @noble/curves in
+ * its ZIP-215 mode, which checks the cofactored equation and accepts small-order keys and some
+ * non-canonical encodings; the engram's check (ic402 2.16.1) is strict RFC 8032 and refuses them.
+ * So every receipt the engram accepted verifies here, but not every receipt that verifies here
+ * would have been accepted. A receipt under a small-order key derives a principal that is not the
+ * owner's, so the comparison above still refuses it. Making this strict needs @noble/curves as a
+ * direct dependency (`{ zip215: false }`); that is open.
+ *
+ * ⟨2026-10-01, the owner's ruling 6 A — supersedes the paragraph above, which stays as the record⟩
+ * AS STRICT AS THE ENGRAM. Verified with @noble/curves (a direct dependency of this package) in
+ * strict RFC 8032 mode (`zip215: false`): a small-order key, a non-canonical point encoding or a
+ * signature with S ≥ L is refused here exactly as the engram's check (ic402 2.16.1) refuses it.
+ * Every receipt the engram accepted verifies here, and every receipt that verifies here the engram
+ * would have accepted. The principal comparison the relying party makes is now a second check, not
+ * the only one. Measured 2026-10-01 with @noble/curves 1.9.7: the all-zero key with R = that key and
+ * S = 0 verifies under ZIP-215 (and under `Ed25519KeyIdentity.verify`) for ANY message, and is
+ * refused here — test/action-receipt.test.ts pins it. WHAT WOULD MAKE THIS WRONG: the engram's
+ * verifier loosening (a newer ic402), or @noble/curves changing what `zip215: false` means.
+ * A malformed key or signature (wrong length, a point that does not decode) is `verified: false`,
+ * never a throw — a relying party reads one boolean.
  */
 export function verifyActionReceipt(canisterId, operation, fields, receipt) {
     const message = actionMessage(canisterId, operation, fields, receipt.nonce);
-    const verified = Ed25519KeyIdentity.verify(receipt.signature, message, receipt.pubkey);
+    const verified = strictVerify(receipt.signature, message, receipt.pubkey);
     const principal = Principal.selfAuthenticating(derOf(receipt.pubkey)).toText();
     return { verified, principal };
 }

package/dist/actionReceipt.js.map

@@ -1 +1 @@
-{"version":3,"file":"actionReceipt.js","sourceRoot":"","sources":["../src/actionReceipt.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,EAAE;AACF,sGAAsG;AACtG,sGAAsG;AACtG,iGAAiG;AACjG,uGAAuG;AACvG,sGAAsG;AACtG,sCAAsC;AACtC,EAAE;AACF,kGAAkG;AAClG,sGAAsG;AACtG,sGAAsG;AAEtG,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAWpD,mGAAmG;AACnG,0FAA0F;AAC1F,MAAM,mBAAmB,GAAG,UAAU,CAAC,IAAI,CAAC;IAC1C,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;CACvE,CAAC,CAAC;AAEH,SAAS,KAAK,CAAC,SAAqB;IAClC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,mBAAmB,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC1E,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;IAChC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC/C,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,UAAkB,EAClB,SAAiB,EACjB,MAAc,EACd,KAAa;IAEb,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAC7B,qBAAqB,UAAU,IAAI,SAAS,IAAI,MAAM,UAAU,KAAK,EAAE,CACxE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,aAAa,EAAE,CAAC,KAAa,EAAE,MAAc,EAAU,EAAE,CAAC,SAAS,KAAK,WAAW,MAAM,EAAE;IAC3F,mFAAmF;IACnF,gCAAgC;CACjC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,QAA4B,EAC5B,UAAkB,EAClB,SAAiB,EACjB,MAAc,EACd,KAAa;IAEb,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AACtC,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,kBAAkB,CAChC,CAAa;IAEb,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAChG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAkB,EAClB,SAAiB,EACjB,MAAc,EACd,OAAmB;IAEnB,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACvF,MAAM,SAAS,GAAG,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC/E,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC"}
+{"version":3,"file":"actionReceipt.js","sourceRoot":"","sources":["../src/actionReceipt.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,EAAE;AACF,sGAAsG;AACtG,sGAAsG;AACtG,iGAAiG;AACjG,uGAAuG;AACvG,sGAAsG;AACtG,sCAAsC;AACtC,EAAE;AACF,kGAAkG;AAClG,sGAAsG;AACtG,sGAAsG;AAGtG,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAWnD,mGAAmG;AACnG,0FAA0F;AAC1F,MAAM,mBAAmB,GAAG,UAAU,CAAC,IAAI,CAAC;IAC1C,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;CACvE,CAAC,CAAC;AAEH,SAAS,KAAK,CAAC,SAAqB;IAClC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,mBAAmB,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC1E,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;IAChC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC/C,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,UAAkB,EAClB,SAAiB,EACjB,MAAc,EACd,KAAa;IAEb,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAC7B,qBAAqB,UAAU,IAAI,SAAS,IAAI,MAAM,UAAU,KAAK,EAAE,CACxE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,aAAa,EAAE,CAAC,KAAa,EAAE,MAAc,EAAU,EAAE,CAAC,SAAS,KAAK,WAAW,MAAM,EAAE;IAC3F,mFAAmF;IACnF,gCAAgC;CACjC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,QAA4B,EAC5B,UAAkB,EAClB,SAAiB,EACjB,MAAc,EACd,KAAa;IAEb,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,aAAa,CAAC;AAE7C;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAAkB,EAClB,WAAmB,EACnB,UAAkB;IAElB,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAC7B,qBAAqB,UAAU,IAAI,eAAe,aAAa,WAAW,WAAW,UAAU,EAAE,CAClG,CAAC;AACJ,CAAC;AAcD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAwB,EACxB,UAAkB,EAClB,WAAsB,EACtB,UAAkB;IAElB,MAAM,OAAO,GAAG,gBAAgB,CAAC,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC;IAC/E,OAAO;QACL,UAAU,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,CAAC;QACvD,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC;QACtC,WAAW;QACX,SAAS,EAAE,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,kBAAkB,CAChC,CAAa;IAEb,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAChG,CAAC;AAED,gGAAgG;AAChG,SAAS,YAAY,CAAC,SAAqB,EAAE,OAAmB,EAAE,MAAkB;IAClF,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAkB,EAClB,SAAiB,EACjB,MAAc,EACd,OAAmB;IAEnB,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC/E,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC"}

package/dist/auth.d.ts

@@ -15,3 +15,19 @@ export declare function identityFromSeed(seed: Uint8Array): Ed25519KeyIdentity;
  * Returns the identity.
  */
 export declare function generateSessionKey(keyPath: string): Ed25519KeyIdentity;
+/**
+ * Load the agent's ROOT key, or create it the first time. ⟨2026-09-28, owner decision: one root key
+ * per agent, with an enrolled key per client⟩
+ *
+ * The root is the agent's lasting identity: the registry keeps its track record under this key's
+ * principal, and it signs one enrolment statement per client. So, unlike a per-client session key,
+ * it is NEVER regenerated once it exists — a new root is a new agent with an empty record. Same
+ * 32-byte seed file format and the same refusals (symlink, loose permissions, wrong size) as a
+ * session key, because it is the more valuable of the two.
+ * WHAT WOULD MAKE THIS WRONG: a caller that deletes and re-creates this file to "fix" an error —
+ * that silently starts a new agent.
+ */
+export declare function loadOrCreateRootKey(rootKeyPath: string): {
+    identity: Ed25519KeyIdentity;
+    created: boolean;
+};

package/dist/auth.js

@@ -2,6 +2,7 @@ import { Ed25519KeyIdentity } from '@icp-sdk/core/identity';
 import * as fs from 'fs';
 import * as path from 'path';
 import * as crypto from 'crypto';
+import { VERSION } from './version.js';
 /**
  * Load or create an Ed25519 session key identity.
  *
@@ -17,23 +18,23 @@ export function loadSessionKey(keyPath) {
         // Refuse to load symlinked key files
         const lstat = fs.lstatSync(resolvedPath);
         if (lstat.isSymbolicLink()) {
-            throw new Error(`Session key cannot be a symlink: ${resolvedPath}`);
+            throw new Error(`The key for this engram cannot be a symlink: ${resolvedPath}`);
         }
         // Refuse to load key files with overly permissive permissions
         const stats = fs.statSync(resolvedPath);
         const mode = stats.mode & 0o777;
         if (mode & 0o077) {
-            throw new Error(`Session key ${resolvedPath} has insecure permissions (${mode.toString(8)}). ` +
+            throw new Error(`The key for this engram (${resolvedPath}) has insecure permissions (${mode.toString(8)}). ` +
                 `Expected 0600. Fix with: chmod 600 ${resolvedPath}`);
         }
         const seed = fs.readFileSync(resolvedPath);
         if (seed.length !== 32) {
-            throw new Error(`Invalid session key: expected 32 bytes, got ${seed.length}`);
+            throw new Error(`Invalid key for this engram: expected 32 bytes, got ${seed.length}`);
         }
         return Ed25519KeyIdentity.generate(seed);
     }
-    throw new Error(`Session key not found. ` +
-        `Run 'pnpm dlx @engramx/client pair <invite-code> --engram <canister-id>' to create one.`);
+    throw new Error(`The key for this engram was not found. ` +
+        `Run 'pnpm dlx @engramx/client@${VERSION} pair <invite-code> --engram <canister-id>' to create one.`);
 }
 /**
  * Create an Ed25519 identity from a raw 32-byte seed.
@@ -62,4 +63,36 @@ export function generateSessionKey(keyPath) {
     fs.writeFileSync(resolvedPath, seed, { mode: 0o600 });
     return Ed25519KeyIdentity.generate(seed);
 }
+/**
+ * Load the agent's ROOT key, or create it the first time. ⟨2026-09-28, owner decision: one root key
+ * per agent, with an enrolled key per client⟩
+ *
+ * The root is the agent's lasting identity: the registry keeps its track record under this key's
+ * principal, and it signs one enrolment statement per client. So, unlike a per-client session key,
+ * it is NEVER regenerated once it exists — a new root is a new agent with an empty record. Same
+ * 32-byte seed file format and the same refusals (symlink, loose permissions, wrong size) as a
+ * session key, because it is the more valuable of the two.
+ * WHAT WOULD MAKE THIS WRONG: a caller that deletes and re-creates this file to "fix" an error —
+ * that silently starts a new agent.
+ */
+export function loadOrCreateRootKey(rootKeyPath) {
+    const home = process.env['HOME'];
+    if (rootKeyPath.startsWith('~') && !home)
+        throw new Error('HOME environment variable is not set');
+    const resolvedPath = rootKeyPath.startsWith('~')
+        ? path.join(home, rootKeyPath.slice(1))
+        : rootKeyPath;
+    // lstat, not exists: a dangling symlink must reach loadSessionKey's symlink refusal rather than
+    // read as "no root yet" and be overwritten by a fresh one.
+    let present = true;
+    try {
+        fs.lstatSync(resolvedPath);
+    }
+    catch {
+        present = false;
+    }
+    if (present)
+        return { identity: loadSessionKey(rootKeyPath), created: false };
+    return { identity: generateSessionKey(rootKeyPath), created: true };
+}
 //# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAEjC;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC9F,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAE5F,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,qCAAqC;QACrC,MAAM,KAAK,GAAG,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,oCAAoC,YAAY,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,8DAA8D;QAC9D,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC;QAChC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,eAAe,YAAY,8BAA8B,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;gBAC5E,sCAAsC,YAAY,EAAE,CACvD,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,+CAA+C,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,IAAI,KAAK,CACb,yBAAyB;QACvB,yFAAyF,CAC5F,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAgB;IAC/C,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC9F,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAE5F,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAEpC,iCAAiC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,OAAO,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC9F,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAE5F,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,qCAAqC;QACrC,MAAM,KAAK,GAAG,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,gDAAgD,YAAY,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,8DAA8D;QAC9D,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC;QAChC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,4BAA4B,YAAY,+BAA+B,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;gBAC1F,sCAAsC,YAAY,EAAE,CACvD,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,uDAAuD,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,IAAI,KAAK,CACb,yCAAyC;QACvC,iCAAiC,OAAO,4DAA4D,CACvG,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAgB;IAC/C,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC9F,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAE5F,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAEpC,iCAAiC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,OAAO,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAmB;IAIrD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAClG,MAAM,YAAY,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC;QAC9C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAK,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxC,CAAC,CAAC,WAAW,CAAC;IAChB,gGAAgG;IAChG,2DAA2D;IAC3D,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;IACD,IAAI,OAAO;QAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC9E,OAAO,EAAE,QAAQ,EAAE,kBAAkB,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACtE,CAAC"}

package/dist/certifiedAudit.d.ts

@@ -32,16 +32,38 @@ export interface CertifiedLeaf {
     why: string;
 }
 /** Verify one leaf of a certified tree (registry format). */
+/**
+ * Unwrap a Candid `opt blob` as agent-js delivers it — 0- or 1-element array, or bare bytes.
+ *
+ * THE DEFECT THIS EXISTS FOR. `certificate` AND `witness` are both `opt blob` on the wire
+ * (`CertifiedAuditHead` in registry.did and engram.did). This unwrap was applied to `certificate`
+ * only; `witness` was passed straight to `Uint8Array.from(witness as number[])`. That does not
+ * throw. `Uint8Array.from([<Uint8Array>])` coerces its one element with `Number()`, which is NaN
+ * for a typed array, and NaN clamps to 0 — so a perfectly good witness became the ONE-BYTE array
+ * `[0]`. `Cbor.decode` reads 0x00 as the integer 0 and SUCCEEDS, so the "witness is not decodable
+ * CBOR" guard passed it, and `reconstruct(0)` fell out of its NodeType switch into
+ * `throw UNREACHABLE_ERROR`. The whole failure reached the caller as a bare `Error: unreachable`
+ * with an async stack vitest could not map. Measured 2026-08-25.
+ *
+ * The lesson generalises past this file: an opt read as bare bytes fails SILENTLY here rather than
+ * at the decoder, because every step downstream accepts the corrupted value. Unwrap at one place,
+ * for every opt-blob field, or the next field added repeats it.
+ *
+ * WHAT WOULD MAKE THIS WRONG: it tells a wrapper from bare bytes by the FIRST ELEMENT — a wrapper
+ * is empty, or holds an array/Uint8Array; bare bytes hold a number. A `number[][]` would be read
+ * as a wrapper, but no opt-blob field on this wire has that shape.
+ */
+export declare function optBytes(v: unknown): Uint8Array | number[] | null;
 export declare function verifyCertifiedLeaf(agent: HttpAgent, canisterId: Principal | string, reply: {
     certificate: [] | [Uint8Array | number[]] | Uint8Array | number[];
-    witness: Uint8Array | number[];
+    witness: [] | [Uint8Array | number[]] | Uint8Array | number[];
 }, path: Uint8Array[]): Promise<CertifiedLeaf>;
 /** Registry audit head, tree format — pair with the registry's getCertifiedHead(). */
 export declare function verifyCertifiedRegistryHead(agent: HttpAgent, canisterId: Principal | string, reply: {
     headHash: Uint8Array | number[];
     size: bigint;
     certificate: [] | [Uint8Array | number[]];
-    witness: Uint8Array | number[];
+    witness: [] | [Uint8Array | number[]] | Uint8Array | number[];
 }): Promise<{
     head: Uint8Array | null;
     size: bigint;
@@ -52,13 +74,17 @@ export declare function verifyCertifiedRegistryHead(agent: HttpAgent, canisterId
  * An engram's latest anchor, certified — pair with the registry's getCertifiedAnchor(engramId).
  *
  * The proven leaf bytes decode (standard Candid) to CertifiedAnchorLeaf v2:
- *   { version: nat (=2); engram: principal; total: nat; head: blob; at: int;
- *     wasmHash: text ("" = never installed by this registry); conflicts: nat; disputed: bool }
- * `disputed` says whether THIS head is the contradicted one; `wasmHash` attests the registry's own
+ *   { version: nat (=2); engram: principal; total: nat; head: blob; atNs: int;
+ *     wasmHash: text ("" = never installed by this registry); conflicts: nat; disputed: bool;
+ *     refusedConflicts: nat }
+ * `disputed` says whether THIS head is the contradicted one; `refusedConflicts` counts the
+ * contradictory pushes refused once the engram reached the registry's per-engram cap (every
+ * recorded contradiction is kept forever — added 2026-09-28, owner decision on contradiction
+ * records); `wasmHash` attests the registry's own
  * install record (not a live probe), refreshed at each leaf write.
  */
 export declare function verifyCertifiedAnchor(agent: HttpAgent, registryId: Principal | string, engramId: Principal | string, reply: {
     leaf: unknown;
     certificate: [] | [Uint8Array | number[]];
-    witness: Uint8Array | number[];
+    witness: [] | [Uint8Array | number[]] | Uint8Array | number[];
 }): Promise<CertifiedLeaf>;

package/dist/certifiedAudit.js

@@ -63,18 +63,44 @@ export async function verifyCertifiedAuditHead(agent, canisterId, claimed) {
 import { Cbor, reconstruct, lookup_path } from '@icp-sdk/core/agent';
 const utf8 = (s) => new TextEncoder().encode(s);
 /** Verify one leaf of a certified tree (registry format). */
+/**
+ * Unwrap a Candid `opt blob` as agent-js delivers it — 0- or 1-element array, or bare bytes.
+ *
+ * THE DEFECT THIS EXISTS FOR. `certificate` AND `witness` are both `opt blob` on the wire
+ * (`CertifiedAuditHead` in registry.did and engram.did). This unwrap was applied to `certificate`
+ * only; `witness` was passed straight to `Uint8Array.from(witness as number[])`. That does not
+ * throw. `Uint8Array.from([<Uint8Array>])` coerces its one element with `Number()`, which is NaN
+ * for a typed array, and NaN clamps to 0 — so a perfectly good witness became the ONE-BYTE array
+ * `[0]`. `Cbor.decode` reads 0x00 as the integer 0 and SUCCEEDS, so the "witness is not decodable
+ * CBOR" guard passed it, and `reconstruct(0)` fell out of its NodeType switch into
+ * `throw UNREACHABLE_ERROR`. The whole failure reached the caller as a bare `Error: unreachable`
+ * with an async stack vitest could not map. Measured 2026-08-25.
+ *
+ * The lesson generalises past this file: an opt read as bare bytes fails SILENTLY here rather than
+ * at the decoder, because every step downstream accepts the corrupted value. Unwrap at one place,
+ * for every opt-blob field, or the next field added repeats it.
+ *
+ * WHAT WOULD MAKE THIS WRONG: it tells a wrapper from bare bytes by the FIRST ELEMENT — a wrapper
+ * is empty, or holds an array/Uint8Array; bare bytes hold a number. A `number[][]` would be read
+ * as a wrapper, but no opt-blob field on this wire has that shape.
+ */
+// EXPORTED for the regression test in packages/client/test/certified-tree.test.ts, and NOT
+// re-exported from index.ts — the published surface is unchanged. The witness path cannot be
+// reached from a test without a real subnet signature (Certificate.create fails first), so
+// testing the unwrap directly is the only coverage this defect class can actually have.
+export function optBytes(v) {
+    return Array.isArray(v) && (v.length === 0 || Array.isArray(v[0]) || v[0] instanceof Uint8Array)
+        ? v.length
+            ? v[0]
+            : null
+        : v;
+}
 export async function verifyCertifiedLeaf(agent, canisterId, reply, path) {
     const fail = (why) => ({ valueBytes: null, verified: false, why });
-    const raw = reply?.certificate;
-    const certBytes = Array.isArray(raw) &&
-        (raw.length === 0 || Array.isArray(raw[0]) || raw[0] instanceof Uint8Array)
-        ? raw.length
-            ? raw[0]
-            : null
-        : raw;
+    const certBytes = optBytes(reply?.certificate);
     if (!certBytes || certBytes.length === 0)
         return fail('no certificate on the reply');
-    const witness = reply?.witness;
+    const witness = optBytes(reply?.witness);
     if (!witness || witness.length === 0)
         return fail('no witness on the reply');
     const principal = typeof canisterId === 'string' ? Principal.fromText(canisterId) : canisterId;
@@ -92,7 +118,19 @@ export async function verifyCertifiedLeaf(agent, canisterId, reply, path) {
     catch {
         return fail('certificate did not verify against the root key');
     }
-    const lookup = cert.lookup_path(['canister', principal.toUint8Array(), 'certified_data']);
+    // ⟨2026-08-25⟩ WRAPPED, like every other step in this function. `lookup_path` can THROW rather
+    // than return a status: @icp-sdk's `agent/certificate.ts` raises a bare `UNREACHABLE_ERROR` from
+    // its tree walk, and it was the only unguarded call here — so a malformed or unexpected tree
+    // escaped this verifier entirely and surfaced as `Error: unreachable` with an async stack vitest
+    // could not map. A verifier whose failure mode is an opaque crash cannot be used to decide
+    // whether evidence is good, which is the whole reason it exists.
+    let lookup;
+    try {
+        lookup = cert.lookup_path(['canister', principal.toUint8Array(), 'certified_data']);
+    }
+    catch (e) {
+        return fail(`certificate tree walk failed: ${e.message}`);
+    }
     if (lookup.status !== LookupPathStatus.Found)
         return fail('certified_data absent from certificate');
     const certifiedData = new Uint8Array(lookupResultToBuffer(lookup));
@@ -103,12 +141,31 @@ export async function verifyCertifiedLeaf(agent, canisterId, reply, path) {
     catch {
         return fail('witness is not decodable CBOR');
     }
-    const rootHash = new Uint8Array(await reconstruct(tree));
+    // ⟨2026-08-25⟩ GUARDED. `reconstruct` and `lookup_path` are the SDK's two `UNREACHABLE_ERROR`
+    // throw sites reachable from here (certificate.ts, one in each), and both fire on a tree whose
+    // node tag they do not recognise — exactly what a witness that decoded to something other than a
+    // hash tree produces. Unguarded, that left this verifier as the one path in the client that
+    // reported neither `verified: true` nor a `why`: it threw a bare `Error: unreachable` past every
+    // caller. A verifier that cannot say why it failed to verify is the fail-to-empty class wearing
+    // the instrument's uniform, so both now come back as a refusal WITH a reason.
+    let rootHash;
+    try {
+        rootHash = new Uint8Array(await reconstruct(tree));
+    }
+    catch {
+        return fail('witness is decodable CBOR but not a hash tree');
+    }
     if (rootHash.length !== certifiedData.length ||
         !rootHash.every((b, i) => b === certifiedData[i])) {
         return fail('witness root does not match certified_data');
     }
-    const leaf = lookup_path(path, tree);
+    let leaf;
+    try {
+        leaf = lookup_path(path, tree);
+    }
+    catch {
+        return fail('witness tree is malformed at the requested path');
+    }
     if (leaf.status !== LookupPathStatus.Found)
         return fail('path not found in witness');
     return { valueBytes: new Uint8Array(lookupResultToBuffer(leaf)), verified: true, why: 'ok' };
@@ -131,9 +188,13 @@ export async function verifyCertifiedRegistryHead(agent, canisterId, reply) {
  * An engram's latest anchor, certified — pair with the registry's getCertifiedAnchor(engramId).
  *
  * The proven leaf bytes decode (standard Candid) to CertifiedAnchorLeaf v2:
- *   { version: nat (=2); engram: principal; total: nat; head: blob; at: int;
- *     wasmHash: text ("" = never installed by this registry); conflicts: nat; disputed: bool }
- * `disputed` says whether THIS head is the contradicted one; `wasmHash` attests the registry's own
+ *   { version: nat (=2); engram: principal; total: nat; head: blob; atNs: int;
+ *     wasmHash: text ("" = never installed by this registry); conflicts: nat; disputed: bool;
+ *     refusedConflicts: nat }
+ * `disputed` says whether THIS head is the contradicted one; `refusedConflicts` counts the
+ * contradictory pushes refused once the engram reached the registry's per-engram cap (every
+ * recorded contradiction is kept forever — added 2026-09-28, owner decision on contradiction
+ * records); `wasmHash` attests the registry's own
  * install record (not a live probe), refreshed at each leaf write.
  */
 export async function verifyCertifiedAnchor(agent, registryId, engramId, reply) {

package/dist/certifiedAudit.js.map

@@ -1 +1 @@
-{"version":3,"file":"certifiedAudit.js","sourceRoot":"","sources":["../src/certifiedAudit.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,iGAAiG;AACjG,mGAAmG;AACnG,kGAAkG;AAClG,iGAAiG;AACjG,EAAE;AACF,mGAAmG;AACnG,mGAAmG;AACnG,8FAA8F;AAC9F,iGAAiG;AACjG,4EAA4E;AAE5E,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,gBAAgB,GAEjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAqBpD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAAgB,EAChB,UAA8B,EAC9B,OAA2B;IAE3B,MAAM,IAAI,GAAsB,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACjG,IAAI,CAAC,OAAO,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC,CAAC,yDAAyD;IAEhG,MAAM,SAAS,GAAG,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IAE/F,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,oGAAoG,CACrG,CAAC;IACJ,CAAC;IAED,IAAI,IAAiB,CAAC;IACtB,IAAI,CAAC;QACH,mFAAmF;QACnF,yFAAyF;QACzF,8BAA8B;QAC9B,IAAI,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC;YAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,OAAO;YACP,SAAS,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;YACpC,KAAK,EAAE,gFAAgF;SACxF,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4EAA4E;IAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC1F,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,SAAS,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5B,gGAAgG;IAChG,MAAM,OAAO,GACX,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;QAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AACpE,CAAC;AAED,mGAAmG;AACnG,+FAA+F;AAC/F,mGAAmG;AACnG,qGAAqG;AACrG,kGAAkG;AAClG,kGAAkG;AAElG,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAErE,MAAM,IAAI,GAAG,CAAC,CAAS,EAAc,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAUpE,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAgB,EAChB,UAA8B,EAC9B,KAGC,EACD,IAAkB;IAElB,MAAM,IAAI,GAAG,CAAC,GAAW,EAAiB,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1F,MAAM,GAAG,GAAG,KAAK,EAAE,WAAsB,CAAC;IAC1C,MAAM,SAAS,GACb,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAClB,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC;QACzE,CAAC,CAAC,GAAG,CAAC,MAAM;YACV,CAAC,CAAE,GAAG,CAAC,CAAC,CAA2B;YACnC,CAAC,CAAC,IAAI;QACR,CAAC,CAAE,GAAoC,CAAC;IAC5C,IAAI,CAAC,SAAS,IAAK,SAAwB,CAAC,MAAM,KAAK,CAAC;QACtD,OAAO,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,KAAK,EAAE,OAAO,CAAC;IAC/B,IAAI,CAAC,OAAO,IAAK,OAAsB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAE7F,MAAM,SAAS,GAAG,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IAC/F,IAAI,KAAK,CAAC,OAAO,IAAI,IAAI;QACvB,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IAEnF,IAAI,IAAiB,CAAC;IACtB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC;YAC9B,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,SAAqB,CAAC;YACnD,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;YACpC,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,iDAAiD,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC1F,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB,CAAC,KAAK;QAC1C,OAAO,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,IAAI,UAAU,CAAC,oBAAoB,CAAC,MAAM,CAAE,CAAC,CAAC;IAEpE,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAmB,CAAC,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,MAAM,WAAW,CAAC,IAAa,CAAC,CAAC,CAAC;IAClE,IACE,QAAQ,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM;QACxC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,EACjD,CAAC;QACD,OAAO,IAAI,CAAC,4CAA4C,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAa,EAAE,IAAa,CAAC,CAAC;IACvD,IAAI,IAAI,CAAC,MAAM,KAAK,gBAAgB,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACrF,OAAO,EAAE,UAAU,EAAE,IAAI,UAAU,CAAC,oBAAoB,CAAC,IAAI,CAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AAChG,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAAgB,EAChB,UAA8B,EAC9B,KAKC;IAED,MAAM,CAAC,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACpF,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,UAAU;QAC9B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;IACvE,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,QAAoB,CAAC,CAAC;IAC5D,MAAM,OAAO,GACX,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,UAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,UAAU;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,OAAO;QACjB,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oDAAoD;KAC3E,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAgB,EAChB,UAA8B,EAC9B,QAA4B,EAC5B,KAIC;IAED,MAAM,MAAM,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACtF,OAAO,mBAAmB,CAAC,KAAK,EAAE,UAAU,EAAE,KAAc,EAAE;QAC5D,IAAI,CAAC,SAAS,CAAC;QACf,MAAM,CAAC,YAAY,EAAE;KACtB,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"certifiedAudit.js","sourceRoot":"","sources":["../src/certifiedAudit.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,iGAAiG;AACjG,mGAAmG;AACnG,kGAAkG;AAClG,iGAAiG;AACjG,EAAE;AACF,mGAAmG;AACnG,mGAAmG;AACnG,8FAA8F;AAC9F,iGAAiG;AACjG,4EAA4E;AAE5E,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,gBAAgB,GAEjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAqBpD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAAgB,EAChB,UAA8B,EAC9B,OAA2B;IAE3B,MAAM,IAAI,GAAsB,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACjG,IAAI,CAAC,OAAO,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC,CAAC,yDAAyD;IAEhG,MAAM,SAAS,GAAG,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IAE/F,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,oGAAoG,CACrG,CAAC;IACJ,CAAC;IAED,IAAI,IAAiB,CAAC;IACtB,IAAI,CAAC;QACH,mFAAmF;QACnF,yFAAyF;QACzF,8BAA8B;QAC9B,IAAI,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC;YAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,OAAO;YACP,SAAS,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;YACpC,KAAK,EAAE,gFAAgF;SACxF,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4EAA4E;IAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC1F,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,SAAS,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5B,gGAAgG;IAChG,MAAM,OAAO,GACX,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;QAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AACpE,CAAC;AAED,mGAAmG;AACnG,+FAA+F;AAC/F,mGAAmG;AACnG,qGAAqG;AACrG,kGAAkG;AAClG,kGAAkG;AAElG,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAErE,MAAM,IAAI,GAAG,CAAC,CAAS,EAAc,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAUpE,6DAA6D;AAC7D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,2FAA2F;AAC3F,6FAA6F;AAC7F,2FAA2F;AAC3F,wFAAwF;AACxF,MAAM,UAAU,QAAQ,CAAC,CAAU;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC;QAC9F,CAAC,CAAC,CAAC,CAAC,MAAM;YACR,CAAC,CAAE,CAAC,CAAC,CAAC,CAA2B;YACjC,CAAC,CAAC,IAAI;QACR,CAAC,CAAE,CAAkC,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAgB,EAChB,UAA8B,EAC9B,KAGC,EACD,IAAkB;IAElB,MAAM,IAAI,GAAG,CAAC,GAAW,EAAiB,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1F,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAC/C,IAAI,CAAC,SAAS,IAAK,SAAwB,CAAC,MAAM,KAAK,CAAC;QACtD,OAAO,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,OAAO,IAAK,OAAsB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAE7F,MAAM,SAAS,GAAG,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IAC/F,IAAI,KAAK,CAAC,OAAO,IAAI,IAAI;QACvB,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IAEnF,IAAI,IAAiB,CAAC;IACtB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC;YAC9B,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,SAAqB,CAAC;YACnD,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;YACpC,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,iDAAiD,CAAC,CAAC;IACjE,CAAC;IACD,+FAA+F;IAC/F,iGAAiG;IACjG,6FAA6F;IAC7F,iGAAiG;IACjG,2FAA2F;IAC3F,iEAAiE;IACjE,IAAI,MAA2C,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACtF,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,IAAI,CAAC,iCAAkC,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB,CAAC,KAAK;QAC1C,OAAO,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,IAAI,UAAU,CAAC,oBAAoB,CAAC,MAAM,CAAE,CAAC,CAAC;IAEpE,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAmB,CAAC,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC/C,CAAC;IACD,8FAA8F;IAC9F,+FAA+F;IAC/F,iGAAiG;IACjG,4FAA4F;IAC5F,iGAAiG;IACjG,gGAAgG;IAChG,8EAA8E;IAC9E,IAAI,QAAoB,CAAC;IACzB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,UAAU,CAAC,MAAM,WAAW,CAAC,IAAa,CAAC,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,+CAA+C,CAAC,CAAC;IAC/D,CAAC;IACD,IACE,QAAQ,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM;QACxC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,EACjD,CAAC;QACD,OAAO,IAAI,CAAC,4CAA4C,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,IAAoC,CAAC;IACzC,IAAI,CAAC;QACH,IAAI,GAAG,WAAW,CAAC,IAAa,EAAE,IAAa,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,iDAAiD,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,gBAAgB,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACrF,OAAO,EAAE,UAAU,EAAE,IAAI,UAAU,CAAC,oBAAoB,CAAC,IAAI,CAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AAChG,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAAgB,EAChB,UAA8B,EAC9B,KAKC;IAED,MAAM,CAAC,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACpF,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,UAAU;QAC9B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;IACvE,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,QAAoB,CAAC,CAAC;IAC5D,MAAM,OAAO,GACX,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,UAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,UAAU;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,OAAO;QACjB,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oDAAoD;KAC3E,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAgB,EAChB,UAA8B,EAC9B,QAA4B,EAC5B,KAIC;IAED,MAAM,MAAM,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACtF,OAAO,mBAAmB,CAAC,KAAK,EAAE,UAAU,EAAE,KAAc,EAAE;QAC5D,IAAI,CAAC,SAAS,CAAC;QACf,MAAM,CAAC,YAAY,EAAE;KACtB,CAAC,CAAC;AACL,CAAC"}