@iicp/client 0.7.12 → 0.7.35

package/dist/client.js

@@ -7,13 +7,64 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.IicpClient = void 0;
 const node_crypto_1 = require("node:crypto");
 const errors_js_1 = require("./errors.js");
+const confidentiality_js_1 = require("./confidentiality.js");
 const INTENT_RE = /^urn:iicp:intent:[a-z0-9_:/-]+$/;
 const MAX_TIMEOUT_MS = 120_000;
 const DEFAULT_TIMEOUT_MS = 30_000;
 const MAX_RETRIES = 3;
 const TRANSIENT_STATUSES = new Set([429, 502, 503, 504]);
+/** SSRF guard: return true only if url is safe to use as a node endpoint (#388). */
+function _isSsrfSafe(url) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return false;
+    }
+    if (!["http:", "https:"].includes(parsed.protocol))
+        return false;
+    const host = parsed.hostname.toLowerCase();
+    if (!host)
+        return false;
+    if (["localhost", "0.0.0.0", "::1", "::"].includes(host))
+        return false;
+    const blockedSuffixes = [".local", ".internal", ".lan", ".test", ".invalid", ".localhost"];
+    if (blockedSuffixes.some((s) => host.endsWith(s)))
+        return false;
+    // IPv6 address — URL.hostname strips brackets, leaving e.g. "2a0a:a543::1"
+    if (host.includes(":")) {
+        // Block link-local (fe80:) and unique-local (fc00::/7)
+        if (/^(fe80:|fc[0-9a-f]{2}:|fd[0-9a-f]{2}:)/i.test(host))
+            return false;
+        return true; // global unicast IPv6 — safe
+    }
+    if (!host.includes("."))
+        return false; // bare Docker service name
+    const ipv4Match = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(host);
+    if (ipv4Match) {
+        const [a, b, c, d] = ipv4Match.slice(1).map(Number);
+        if (a === 10)
+            return false; // RFC1918 10/8
+        if (a === 172 && b >= 16 && b <= 31)
+            return false; // RFC1918 172.16/12
+        if (a === 192 && b === 168)
+            return false; // RFC1918 192.168/16
+        if (a === 127)
+            return false; // loopback
+        if (a === 169 && b === 254)
+            return false; // link-local / metadata
+        if (a === 100 && b >= 64 && b <= 127)
+            return false; // CGNAT
+        if (a === 0)
+            return false; // this-network
+        void c;
+        void d;
+    }
+    return true;
+}
 const DEFAULT_CONFIG = {
-    directory_url: "https://iicp.network",
+    directory_url: "https://iicp.network/api",
     timeout_ms: DEFAULT_TIMEOUT_MS,
     tls_verify: true,
 };
@@ -21,6 +72,11 @@ class IicpClient {
     cfg;
     constructor(config) {
         const merged = { ...DEFAULT_CONFIG, ...config };
+        if (merged.tls_verify === false) {
+            console.warn("[iicp-client] tls_verify: false has no effect — TLS certificate verification " +
+                "cannot be disabled via this config field. Use NODE_TLS_REJECT_UNAUTHORIZED=0 " +
+                "in the environment if you need to disable cert verification for local testing.");
+        }
         // SDK-04: reject oversized timeouts at construction time
         if (merged.timeout_ms > MAX_TIMEOUT_MS) {
             throw new errors_js_1.IicpError(`timeout_ms must be ≤ ${MAX_TIMEOUT_MS}; got ${merged.timeout_ms}`, "SDK-04");
@@ -43,13 +99,20 @@ class IicpClient {
             params.set("qos", o.qos);
         if (o.min_reputation !== undefined)
             params.set("min_reputation", String(o.min_reputation));
-        const data = await this._get(`${this.cfg.directory_url}/api/v1/discover?${params}`, 5_000, traceparent);
+        const data = await this._get(`${this.cfg.directory_url.replace(/\/$/, "")}/v1/discover?${params}`, 5_000, traceparent);
         const raw = data.nodes ?? [];
-        return raw.map((n) => {
+        const nodes = [];
+        for (const n of raw) {
             const node = n;
-            return {
+            const endpoint = String(node.endpoint ?? "");
+            if (!_isSsrfSafe(endpoint)) {
+                console.warn(`[iicp-client] SSRF guard: skipping node ${String(node.node_id ?? "?").slice(0, 8)} — endpoint ${endpoint} is not publicly routable`);
+                continue;
+            }
+            const rawCx = node.cx_public_key;
+            nodes.push({
                 node_id: String(node.node_id),
-                endpoint: String(node.endpoint ?? ""),
+                endpoint,
                 score: Number(node.score ?? 0),
                 available: Boolean(node.available ?? true),
                 region: String(node.region ?? ""),
@@ -57,8 +120,16 @@ class IicpClient {
                 reputation_score: node.reputation_score,
                 health_label: node.health_label,
                 exposure_mode: node.exposure_mode,
-            };
-        });
+                cx_public_key: rawCx && typeof rawCx === "object" && rawCx.algorithm && rawCx.key && rawCx.key_id
+                    ? { algorithm: rawCx.algorithm, key: rawCx.key, key_id: rawCx.key_id }
+                    : undefined,
+                // #397 — transport protocols (http/https/iicp-native) when the directory emits them.
+                transport: Array.isArray(node.transport)
+                    ? node.transport.map(String)
+                    : undefined,
+            });
+        }
+        return nodes;
     }
     /**
      * Discover → select best node → submit task.
@@ -69,23 +140,16 @@ class IicpClient {
         const tp = _traceparent(); // SDK-06: shared trace across discover + submit
         const nodes = await this.discover(req.intent, {
             region: req.constraints?.region ?? this.cfg.region,
-            qos: req.constraints?.qos,
+            // Do not filter by qos — qos is a task execution hint, not a node capability
+            // filter. Most nodes don't declare qos support; directory returns 0 nodes.
             min_reputation: req.constraints?.min_reputation,
         }, tp);
         if (nodes.length === 0) {
             throw new errors_js_1.IicpError(`No nodes available for intent: ${req.intent}`, "SDK-03", { component: "directory" });
         }
-        const node = nodes[0];
         const taskId = req.task_id ?? (0, node_crypto_1.randomUUID)();
-        const body = {
-            task_id: taskId,
-            intent: req.intent,
-            payload: req.payload,
-            constraints: req.constraints ?? {},
-        };
-        const headers = {
-            "Content-Type": "application/json",
-        };
+        const candidates = nodes.slice(0, MAX_RETRIES);
+        const headers = { "Content-Type": "application/json" };
         if (req.auth?.token) {
             headers["Authorization"] = `Bearer ${req.auth.token}`;
         }
@@ -93,27 +157,49 @@ class IicpClient {
             headers["Authorization"] = `Bearer ${this.cfg.api_token}`;
         }
         let lastErr;
-        for (let attempt = 0; attempt < MAX_RETRIES; attempt++) {
-            try {
-                const data = await this._post(`${node.endpoint}/v1/task`, body, req.constraints?.timeout_ms ?? this.cfg.timeout_ms, headers, tp);
-                return {
-                    task_id: taskId,
-                    result: data.result,
-                    status: String(data.status ?? "ok"),
-                    metrics: data.metrics,
-                };
+        for (const node of candidates) {
+            // IICP-CX S.16 §5: build body per node (cx_public_key may differ)
+            const shouldEncrypt = this.cfg.use_confidentiality === true && node.cx_public_key != null;
+            const body = {
+                task_id: taskId,
+                intent: req.intent,
+                constraints: req.constraints ?? {},
+            };
+            if (shouldEncrypt && node.cx_public_key) {
+                body["iicp_conf"] = (0, confidentiality_js_1.encryptPayload)(req.payload, node.cx_public_key, taskId, req.intent);
             }
-            catch (err) {
-                if (err instanceof errors_js_1.IicpError &&
-                    err.status_code !== undefined &&
-                    TRANSIENT_STATUSES.has(err.status_code)) {
-                    lastErr = err;
-                    // SDK-01: exponential back-off on transient errors
-                    await _sleep(200 * 2 ** attempt);
-                    continue;
+            else {
+                body["payload"] = req.payload;
+            }
+            let nodeConnected = true;
+            for (let attempt = 0; attempt < MAX_RETRIES; attempt++) {
+                try {
+                    const data = await this._post(`${node.endpoint}/v1/task`, body, req.constraints?.timeout_ms ?? this.cfg.timeout_ms, headers, tp);
+                    return {
+                        task_id: taskId,
+                        result: data.result,
+                        status: String(data.status ?? "ok"),
+                        metrics: data.metrics,
+                    };
+                }
+                catch (err) {
+                    if (err instanceof errors_js_1.IicpError) {
+                        lastErr = err;
+                        // Connection error → skip to next node immediately
+                        if (!err.status_code) {
+                            nodeConnected = false;
+                            break;
+                        }
+                        if (TRANSIENT_STATUSES.has(err.status_code)) {
+                            await _sleep(200 * 2 ** attempt);
+                            continue; // retry same node on 5xx
+                        }
+                    }
+                    throw err; // non-retryable
                 }
-                throw err;
             }
+            if (!nodeConnected)
+                continue; // unreachable node, try next
         }
         throw lastErr;
     }

package/dist/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,6CAAyC;AAEzC,2CAAwC;AAYxC,MAAM,SAAS,GAAG,iCAAiC,CAAC;AACpD,MAAM,cAAc,GAAG,OAAO,CAAC;AAC/B,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAEzD,MAAM,cAAc,GAAiB;IACnC,aAAa,EAAE,sBAAsB;IACrC,UAAU,EAAE,kBAAkB;IAC9B,UAAU,EAAE,IAAI;CACjB,CAAC;AAEF,MAAa,UAAU;IACJ,GAAG,CAAe;IAEnC,YAAY,MAA8B;QACxC,MAAM,MAAM,GAAiB,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAC9D,yDAAyD;QACzD,IAAI,MAAM,CAAC,UAAU,GAAG,cAAc,EAAE,CAAC;YACvC,MAAM,IAAI,qBAAS,CACjB,wBAAwB,cAAc,SAAS,MAAM,CAAC,UAAU,EAAE,EAClE,QAAQ,CACT,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC;IACpB,CAAC;IAED,qEAAqE;IACrE,mBAAmB;IACnB,qEAAqE;IAErE,2DAA2D;IAC3D,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,IAAsB,EAAE,WAAoB;QACzE,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;QAC3C,IAAI,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,CAAC,GAAG;YAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,CAAC,cAAc,KAAK,SAAS;YAChC,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;QAEzD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAC1B,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,oBAAoB,MAAM,EAAE,EACrD,KAAK,EACL,WAAW,CACZ,CAAC;QACF,MAAM,GAAG,GAAe,IAA8B,CAAC,KAAK,IAAI,EAAE,CAAC;QACnE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACnB,MAAM,IAAI,GAAG,CAA4B,CAAC;YAC1C,OAAO;gBACL,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;gBAC7B,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;gBACrC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;gBAC9B,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;gBAC1C,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;gBACjC,mBAAmB,EAAE,IAAI,CAAC,mBAAyC;gBACnE,gBAAgB,EAAE,IAAI,CAAC,gBAAsC;gBAC7D,YAAY,EAAE,IAAI,CAAC,YAAkC;gBACrD,aAAa,EAAE,IAAI,CAAC,aAAmC;aACxD,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,GAAgB;QAC3B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC,gDAAgD;QAC3E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE;YAC5C,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM;YAClD,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG;YACzB,cAAc,EAAE,GAAG,CAAC,WAAW,EAAE,cAAc;SAChD,EAAE,EAAE,CAAC,CAAC;QAEP,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,qBAAS,CACjB,kCAAkC,GAAG,CAAC,MAAM,EAAE,EAC9C,QAAQ,EACR,EAAE,SAAS,EAAE,WAAW,EAAE,CAC3B,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,IAAI,IAAA,wBAAU,GAAE,CAAC;QAC3C,MAAM,IAAI,GAAG;YACX,OAAO,EAAE,MAAM;YACf,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE;SACnC,CAAC;QAEF,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;SACnC,CAAC;QACF,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;YACpB,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACxD,CAAC;aAAM,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;YAC9B,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QAC5D,CAAC;QAED,IAAI,OAA8B,CAAC;QACnC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;YACvD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAC3B,GAAG,IAAI,CAAC,QAAQ,UAAU,EAC1B,IAAI,EACJ,GAAG,CAAC,WAAW,EAAE,UAAU,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,EAClD,OAAO,EACP,EAAE,CACH,CAAC;gBACF,OAAO;oBACL,OAAO,EAAE,MAAM;oBACf,MAAM,EAAG,IAAgC,CAAC,MAAM;oBAChD,MAAM,EAAE,MAAM,CAAE,IAAgC,CAAC,MAAM,IAAI,IAAI,CAAC;oBAChE,OAAO,EAAG,IAAgC,CAAC,OAE9B;iBACd,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IACE,GAAG,YAAY,qBAAS;oBACxB,GAAG,CAAC,WAAW,KAAK,SAAS;oBAC7B,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,EACvC,CAAC;oBACD,OAAO,GAAG,GAAG,CAAC;oBACd,mDAAmD;oBACnD,MAAM,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC;oBACjC,SAAS;gBACX,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QACD,MAAM,OAAQ,CAAC;IACjB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,IAAI,CAAC,QAAuB,EAAE,IAAkB;QACpD,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,6BAA6B,CAAC;QAEzD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;YAC7B,MAAM;YACN,OAAO,EAAE;gBACP,QAAQ;gBACR,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtC,GAAG,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnE,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvE;YACD,WAAW,EAAE;gBACX,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU;gBAC/C,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,GAAG,CAAC,CAAC,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChF;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAC;QAC9D,MAAM,UAAU,GAAI,MAAM,CAAC,OAAqB,IAAI,EAAE,CAAC;QACvD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACtC,MAAM,EAAE,GAAG,CAA4B,CAAC;YACxC,MAAM,GAAG,GAAG,EAAE,CAAC,OAA6C,CAAC;YAC7D,OAAO;gBACL,KAAK,EAAE,CAAC;gBACR,OAAO,EAAE;oBACP,IAAI,EAAG,GAAG,EAAE,IAA4B,IAAI,WAAW;oBACvD,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,EAAE;iBAC5B;gBACD,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC,aAAa,IAAI,MAAM,CAAC;aAClD,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,CAAC,KAA2C,CAAC;QACpE,MAAM,KAAK,GAAG,QAAQ;YACpB,CAAC,CAAC;gBACE,aAAa,EAAE,QAAQ,CAAC,aAAa,IAAI,CAAC;gBAC1C,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,IAAI,CAAC;gBAClD,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,CAAC;aACzC;YACH,CAAC,CAAC,SAAS,CAAC;QACd,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,OAAO;YAChB,OAAO;YACP,KAAK;YACL,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;SACtC,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,kBAAkB;IAClB,qEAAqE;IAE7D,eAAe,CAAC,MAAc;QACpC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,qBAAS,CACjB,wBAAwB,MAAM,kCAAkC,EAChE,QAAQ,CACT,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,GAAW,EAAE,SAAiB,EAAE,WAAoB;QACrE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,WAAW,EAAE,WAAW,IAAI,YAAY,EAAE,EAAE;gBACnF,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC9C,MAAM,IAAI,qBAAS,CACjB,OAAO,GAAG,aAAa,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAC1D,QAAQ,EACR,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,CACpD,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAY,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,qBAAS;gBAAE,MAAM,GAAG,CAAC;YACxC,IAAK,GAAyB,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACrD,MAAM,IAAI,qBAAS,CACjB,2BAA2B,SAAS,IAAI,EACxC,QAAQ,EACR,EAAE,SAAS,EAAE,WAAW,EAAE,CAC3B,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,qBAAS,CACjB,kBAAmB,GAAa,CAAC,OAAO,EAAE,EAC1C,QAAQ,EACR,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,CACvC,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAK,CACjB,GAAW,EACX,IAAa,EACb,SAAiB,EACjB,YAAqC,EACrC,WAAoB;QAEpB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,MAAM,EAAE,kBAAkB;oBAC1B,WAAW,EAAE,WAAW,IAAI,YAAY,EAAE;oBAC1C,GAAG,YAAY;iBAChB;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC9C,IAAI,IAAI,GAAG,QAAQ,CAAC;gBACpB,IAAI,CAAC;oBACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuB,CAAC;oBACjD,IAAI,CAAC,CAAC,KAAK;wBAAE,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC;gBAC9B,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;gBACxB,MAAM,IAAI,qBAAS,CACjB,QAAQ,GAAG,aAAa,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAC3D,IAAI,EACJ,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAClD,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAY,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,qBAAS;gBAAE,MAAM,GAAG,CAAC;YACxC,IAAK,GAAyB,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACrD,MAAM,IAAI,qBAAS,CACjB,2BAA2B,SAAS,IAAI,EACxC,QAAQ,EACR,EAAE,SAAS,EAAE,SAAS,EAAE,CACzB,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,qBAAS,CACjB,kBAAmB,GAAa,CAAC,OAAO,EAAE,EAC1C,QAAQ,EACR,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,CACrC,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;CACF;AA3RD,gCA2RC;AAED,SAAS,MAAM,CAAC,EAAU;IACxB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,wDAAwD;AACxD,SAAS,YAAY;IACnB,MAAM,OAAO,GAAG,IAAA,wBAAU,GAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAA,wBAAU,GAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7D,OAAO,MAAM,OAAO,IAAI,QAAQ,KAAK,CAAC;AACxC,CAAC"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,6CAAyC;AAEzC,2CAAwC;AAWxC,6DAAsD;AAEtD,MAAM,SAAS,GAAG,iCAAiC,CAAC;AACpD,MAAM,cAAc,GAAG,OAAO,CAAC;AAC/B,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAEzD,oFAAoF;AACpF,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACjE,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACvE,MAAM,eAAe,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;IAC3F,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,2EAA2E;IAC3E,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,uDAAuD;QACvD,IAAI,yCAAyC,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACvE,OAAO,IAAI,CAAC,CAAC,6BAA6B;IAC5C,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,2BAA2B;IAClE,MAAM,SAAS,GAAG,8CAA8C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5E,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC,CAAsC,eAAe;QAChF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,KAAK,CAAC,CAAc,oBAAoB;QACpF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC,CAAuB,qBAAqB;QACrF,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC,CAAqC,WAAW;QAC5E,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC,CAAuB,wBAAwB;QACxF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG;YAAE,OAAO,KAAK,CAAC,CAAY,QAAQ;QACvE,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,CAAsC,eAAe;QAC/E,KAAK,CAAC,CAAC;QAAC,KAAK,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,cAAc,GAAiB;IACnC,aAAa,EAAE,0BAA0B;IACzC,UAAU,EAAE,kBAAkB;IAC9B,UAAU,EAAE,IAAI;CACjB,CAAC;AAEF,MAAa,UAAU;IACJ,GAAG,CAAe;IAEnC,YAAY,MAA8B;QACxC,MAAM,MAAM,GAAiB,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAC9D,IAAI,MAAM,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CACV,+EAA+E;gBAC7E,+EAA+E;gBAC/E,gFAAgF,CACnF,CAAC;QACJ,CAAC;QACD,yDAAyD;QACzD,IAAI,MAAM,CAAC,UAAU,GAAG,cAAc,EAAE,CAAC;YACvC,MAAM,IAAI,qBAAS,CACjB,wBAAwB,cAAc,SAAS,MAAM,CAAC,UAAU,EAAE,EAClE,QAAQ,CACT,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC;IACpB,CAAC;IAED,qEAAqE;IACrE,mBAAmB;IACnB,qEAAqE;IAErE,2DAA2D;IAC3D,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,IAAsB,EAAE,WAAoB;QACzE,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;QAC3C,IAAI,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,CAAC,GAAG;YAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,CAAC,cAAc,KAAK,SAAS;YAChC,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;QAEzD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAC1B,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,MAAM,EAAE,EACpE,KAAK,EACL,WAAW,CACZ,CAAC;QACF,MAAM,GAAG,GAAe,IAA8B,CAAC,KAAK,IAAI,EAAE,CAAC;QACnE,MAAM,KAAK,GAAW,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,CAA4B,CAAC;YAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;YAC7C,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3B,OAAO,CAAC,IAAI,CACV,2CAA2C,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,eAAe,QAAQ,2BAA2B,CACrI,CAAC;gBACF,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAmD,CAAC;YACvE,KAAK,CAAC,IAAI,CAAC;gBACT,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;gBAC7B,QAAQ;gBACR,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;gBAC9B,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;gBAC1C,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;gBACjC,mBAAmB,EAAE,IAAI,CAAC,mBAAyC;gBACnE,gBAAgB,EAAE,IAAI,CAAC,gBAAsC;gBAC7D,YAAY,EAAE,IAAI,CAAC,YAAkC;gBACrD,aAAa,EAAE,IAAI,CAAC,aAAmC;gBACvD,aAAa,EACX,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,MAAM;oBAChF,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;oBACtE,CAAC,CAAC,SAAS;gBACf,qFAAqF;gBACrF,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;oBACtC,CAAC,CAAE,IAAI,CAAC,SAAuB,CAAC,GAAG,CAAC,MAAM,CAAC;oBAC3C,CAAC,CAAC,SAAS;aACd,CAAC,CAAC;QACL,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,GAAgB;QAC3B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC,gDAAgD;QAC3E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE;YAC5C,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM;YAClD,6EAA6E;YAC7E,2EAA2E;YAC3E,cAAc,EAAE,GAAG,CAAC,WAAW,EAAE,cAAc;SAChD,EAAE,EAAE,CAAC,CAAC;QAEP,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,qBAAS,CACjB,kCAAkC,GAAG,CAAC,MAAM,EAAE,EAC9C,QAAQ,EACR,EAAE,SAAS,EAAE,WAAW,EAAE,CAC3B,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,IAAI,IAAA,wBAAU,GAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QAE/C,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;QAC/E,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;YACpB,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACxD,CAAC;aAAM,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;YAC9B,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QAC5D,CAAC;QAED,IAAI,OAA8B,CAAC;QACnC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,kEAAkE;YAClE,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,mBAAmB,KAAK,IAAI,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC;YAC1F,MAAM,IAAI,GAA4B;gBACpC,OAAO,EAAE,MAAM;gBACf,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE;aACnC,CAAC;YACF,IAAI,aAAa,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACxC,IAAI,CAAC,WAAW,CAAC,GAAG,IAAA,mCAAc,EAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1F,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC;YAChC,CAAC;YAED,IAAI,aAAa,GAAG,IAAI,CAAC;YACzB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;gBACvD,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAC3B,GAAG,IAAI,CAAC,QAAQ,UAAU,EAC1B,IAAI,EACJ,GAAG,CAAC,WAAW,EAAE,UAAU,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,EAClD,OAAO,EACP,EAAE,CACH,CAAC;oBACF,OAAO;wBACL,OAAO,EAAE,MAAM;wBACf,MAAM,EAAG,IAAgC,CAAC,MAAM;wBAChD,MAAM,EAAE,MAAM,CAAE,IAAgC,CAAC,MAAM,IAAI,IAAI,CAAC;wBAChE,OAAO,EAAG,IAAgC,CAAC,OAE9B;qBACd,CAAC;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,GAAG,YAAY,qBAAS,EAAE,CAAC;wBAC7B,OAAO,GAAG,GAAG,CAAC;wBACd,mDAAmD;wBACnD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;4BAAC,aAAa,GAAG,KAAK,CAAC;4BAAC,MAAM;wBAAC,CAAC;wBACvD,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;4BAC5C,MAAM,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC;4BACjC,SAAS,CAAC,yBAAyB;wBACrC,CAAC;oBACH,CAAC;oBACD,MAAM,GAAG,CAAC,CAAC,gBAAgB;gBAC7B,CAAC;YACH,CAAC;YACD,IAAI,CAAC,aAAa;gBAAE,SAAS,CAAC,6BAA6B;QAC7D,CAAC;QACD,MAAM,OAAQ,CAAC;IACjB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,IAAI,CAAC,QAAuB,EAAE,IAAkB;QACpD,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,6BAA6B,CAAC;QAEzD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;YAC7B,MAAM;YACN,OAAO,EAAE;gBACP,QAAQ;gBACR,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtC,GAAG,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnE,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvE;YACD,WAAW,EAAE;gBACX,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU;gBAC/C,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,GAAG,CAAC,CAAC,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChF;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAC;QAC9D,MAAM,UAAU,GAAI,MAAM,CAAC,OAAqB,IAAI,EAAE,CAAC;QACvD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACtC,MAAM,EAAE,GAAG,CAA4B,CAAC;YACxC,MAAM,GAAG,GAAG,EAAE,CAAC,OAA6C,CAAC;YAC7D,OAAO;gBACL,KAAK,EAAE,CAAC;gBACR,OAAO,EAAE;oBACP,IAAI,EAAG,GAAG,EAAE,IAA4B,IAAI,WAAW;oBACvD,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,EAAE;iBAC5B;gBACD,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC,aAAa,IAAI,MAAM,CAAC;aAClD,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,CAAC,KAA2C,CAAC;QACpE,MAAM,KAAK,GAAG,QAAQ;YACpB,CAAC,CAAC;gBACE,aAAa,EAAE,QAAQ,CAAC,aAAa,IAAI,CAAC;gBAC1C,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,IAAI,CAAC;gBAClD,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,CAAC;aACzC;YACH,CAAC,CAAC,SAAS,CAAC;QACd,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,OAAO;YAChB,OAAO;YACP,KAAK;YACL,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;SACtC,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,kBAAkB;IAClB,qEAAqE;IAE7D,eAAe,CAAC,MAAc;QACpC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,qBAAS,CACjB,wBAAwB,MAAM,kCAAkC,EAChE,QAAQ,CACT,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,GAAW,EAAE,SAAiB,EAAE,WAAoB;QACrE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,WAAW,EAAE,WAAW,IAAI,YAAY,EAAE,EAAE;gBACnF,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC9C,MAAM,IAAI,qBAAS,CACjB,OAAO,GAAG,aAAa,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAC1D,QAAQ,EACR,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,CACpD,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAY,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,qBAAS;gBAAE,MAAM,GAAG,CAAC;YACxC,IAAK,GAAyB,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACrD,MAAM,IAAI,qBAAS,CACjB,2BAA2B,SAAS,IAAI,EACxC,QAAQ,EACR,EAAE,SAAS,EAAE,WAAW,EAAE,CAC3B,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,qBAAS,CACjB,kBAAmB,GAAa,CAAC,OAAO,EAAE,EAC1C,QAAQ,EACR,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,CACvC,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAK,CACjB,GAAW,EACX,IAAa,EACb,SAAiB,EACjB,YAAqC,EACrC,WAAoB;QAEpB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,MAAM,EAAE,kBAAkB;oBAC1B,WAAW,EAAE,WAAW,IAAI,YAAY,EAAE;oBAC1C,GAAG,YAAY;iBAChB;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC9C,IAAI,IAAI,GAAG,QAAQ,CAAC;gBACpB,IAAI,CAAC;oBACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuB,CAAC;oBACjD,IAAI,CAAC,CAAC,KAAK;wBAAE,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC;gBAC9B,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;gBACxB,MAAM,IAAI,qBAAS,CACjB,QAAQ,GAAG,aAAa,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAC3D,IAAI,EACJ,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAClD,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAY,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,qBAAS;gBAAE,MAAM,GAAG,CAAC;YACxC,IAAK,GAAyB,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACrD,MAAM,IAAI,qBAAS,CACjB,2BAA2B,SAAS,IAAI,EACxC,QAAQ,EACR,EAAE,SAAS,EAAE,SAAS,EAAE,CACzB,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,qBAAS,CACjB,kBAAmB,GAAa,CAAC,OAAO,EAAE,EAC1C,QAAQ,EACR,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,CACrC,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;CACF;AA7TD,gCA6TC;AAED,SAAS,MAAM,CAAC,EAAU;IACxB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,wDAAwD;AACxD,SAAS,YAAY;IACnB,MAAM,OAAO,GAAG,IAAA,wBAAU,GAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAA,wBAAU,GAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7D,OAAO,MAAM,OAAO,IAAI,QAAQ,KAAK,CAAC;AACxC,CAAC"}

package/dist/confidentiality.d.ts

@@ -0,0 +1,14 @@
+/**
+ * IICP-CX S.16 Tier-1 confidentiality: X25519-HKDF-SHA256 + AES-256-GCM.
+ * CX-Consumer side — encrypts task payloads for nodes advertising cx_public_key.
+ * Uses Node.js built-in crypto only (no external dependencies).
+ */
+import type { CxPublicKey } from "./types.js";
+/** Encrypt a task payload using the node's X25519 public key (CX-Consumer). */
+export declare function encryptPayload(payload: unknown, cxPublicKey: CxPublicKey, taskId: string, intent: string): Record<string, unknown>;
+/**
+ * Decrypt an iicp_conf envelope (CX-Provider side — for testing/adapter use).
+ * privKeyBytes: raw 32-byte X25519 private key; pubKeyBytes: corresponding public key.
+ */
+export declare function decryptPayload(iicpConf: Record<string, unknown>, privKeyBytes: Buffer, pubKeyBytes: Buffer): unknown;
+//# sourceMappingURL=confidentiality.d.ts.map

package/dist/confidentiality.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"confidentiality.d.ts","sourceRoot":"","sources":["../src/confidentiality.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAYH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AA0B9C,+EAA+E;AAC/E,wBAAgB,cAAc,CAC5B,OAAO,EAAE,OAAO,EAChB,WAAW,EAAE,WAAW,EACxB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACb,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA0CzB;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,GAClB,OAAO,CAmCT"}

package/dist/confidentiality.js

@@ -0,0 +1,104 @@
+"use strict";
+/**
+ * IICP-CX S.16 Tier-1 confidentiality: X25519-HKDF-SHA256 + AES-256-GCM.
+ * CX-Consumer side — encrypts task payloads for nodes advertising cx_public_key.
+ * Uses Node.js built-in crypto only (no external dependencies).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.encryptPayload = encryptPayload;
+exports.decryptPayload = decryptPayload;
+const node_crypto_1 = require("node:crypto");
+function b64urlEncode(buf) {
+    return buf.toString("base64url");
+}
+function b64urlDecode(s) {
+    return Buffer.from(s, "base64url");
+}
+/** HKDF-SHA256 with HMAC-based extract+expand (RFC 5869). */
+function hkdfSha256(ikm, salt, info, length) {
+    const prk = (0, node_crypto_1.createHmac)("sha256", salt).update(ikm).digest();
+    let t = Buffer.alloc(0);
+    let output = Buffer.alloc(0);
+    for (let i = 1; output.length < length; i++) {
+        t = (0, node_crypto_1.createHmac)("sha256", prk)
+            .update(t)
+            .update(info)
+            .update(Buffer.from([i]))
+            .digest();
+        output = Buffer.concat([output, t]);
+    }
+    return output.slice(0, length);
+}
+/** Encrypt a task payload using the node's X25519 public key (CX-Consumer). */
+function encryptPayload(payload, cxPublicKey, taskId, intent) {
+    if (cxPublicKey.algorithm !== "X25519") {
+        throw new Error(`Unsupported cx_public_key algorithm: ${cxPublicKey.algorithm}`);
+    }
+    // Import node's static public key from base64url-encoded raw bytes (JWK format)
+    const nodeX = cxPublicKey.key; // already base64url
+    const nodePub = (0, node_crypto_1.createPublicKey)({
+        key: { kty: "OKP", crv: "X25519", x: nodeX },
+        format: "jwk",
+    });
+    // Generate ephemeral X25519 keypair
+    const { privateKey: ephemPriv, publicKey: ephemPub } = (0, node_crypto_1.generateKeyPairSync)("x25519");
+    const ephemPubJwk = ephemPub.export({ format: "jwk" });
+    const ephemPubBytes = b64urlDecode(ephemPubJwk.x);
+    // ECDH shared secret
+    const sharedSecret = (0, node_crypto_1.diffieHellman)({ privateKey: ephemPriv, publicKey: nodePub });
+    // HKDF-SHA256
+    const nonce = (0, node_crypto_1.randomBytes)(12);
+    const info = Buffer.from(`IICP-CX-v1${taskId}${intent}`);
+    const keyMaterial = hkdfSha256(sharedSecret, nonce, info, 32);
+    // AES-256-GCM encrypt
+    const payloadJson = Buffer.from(JSON.stringify(payload));
+    const aad = Buffer.from(`${taskId}|${intent}`);
+    const cipher = (0, node_crypto_1.createCipheriv)("aes-256-gcm", keyMaterial, nonce);
+    cipher.setAAD(aad);
+    const ciphertext = Buffer.concat([cipher.update(payloadJson), cipher.final()]);
+    const tag = cipher.getAuthTag();
+    return {
+        version: 1,
+        recipient_key_id: cxPublicKey.key_id,
+        kem_ciphertext: b64urlEncode(ephemPubBytes),
+        encrypted_body: b64urlEncode(Buffer.concat([ciphertext, tag])),
+        nonce: b64urlEncode(nonce),
+        aad: b64urlEncode(aad),
+        plaintext_size: payloadJson.length,
+    };
+}
+/**
+ * Decrypt an iicp_conf envelope (CX-Provider side — for testing/adapter use).
+ * privKeyBytes: raw 32-byte X25519 private key; pubKeyBytes: corresponding public key.
+ */
+function decryptPayload(iicpConf, privKeyBytes, pubKeyBytes) {
+    const privX = b64urlEncode(privKeyBytes);
+    const pubX = b64urlEncode(pubKeyBytes);
+    const nodePriv = (0, node_crypto_1.createPrivateKey)({
+        key: { kty: "OKP", crv: "X25519", x: pubX, d: privX },
+        format: "jwk",
+    });
+    const ephemPubBytes = b64urlDecode(String(iicpConf["kem_ciphertext"]));
+    const ephemPub = (0, node_crypto_1.createPublicKey)({
+        key: { kty: "OKP", crv: "X25519", x: b64urlEncode(ephemPubBytes) },
+        format: "jwk",
+    });
+    const sharedSecret = (0, node_crypto_1.diffieHellman)({ privateKey: nodePriv, publicKey: ephemPub });
+    const nonce = b64urlDecode(String(iicpConf["nonce"]));
+    const aadBytes = b64urlDecode(String(iicpConf["aad"]));
+    const aadStr = aadBytes.toString();
+    const pipeIdx = aadStr.indexOf("|");
+    const taskId = aadStr.slice(0, pipeIdx);
+    const intent = aadStr.slice(pipeIdx + 1);
+    const info = Buffer.from(`IICP-CX-v1${taskId}${intent}`);
+    const keyMaterial = hkdfSha256(sharedSecret, nonce, info, 32);
+    const encBody = b64urlDecode(String(iicpConf["encrypted_body"]));
+    const ciphertext = encBody.slice(0, -16);
+    const tag = encBody.slice(-16);
+    const decipher = (0, node_crypto_1.createDecipheriv)("aes-256-gcm", keyMaterial, nonce);
+    decipher.setAAD(aadBytes);
+    decipher.setAuthTag(tag);
+    const plaintext = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+    return JSON.parse(plaintext.toString());
+}
+//# sourceMappingURL=confidentiality.js.map

package/dist/confidentiality.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confidentiality.js","sourceRoot":"","sources":["../src/confidentiality.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AAuCH,wCA+CC;AAMD,wCAuCC;AAjID,6CASqB;AAGrB,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;AACrC,CAAC;AAED,6DAA6D;AAC7D,SAAS,UAAU,CAAC,GAAW,EAAE,IAAY,EAAE,IAAY,EAAE,MAAc;IACzE,MAAM,GAAG,GAAG,IAAA,wBAAU,EAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;IAC5D,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,CAAC,GAAG,IAAA,wBAAU,EAAC,QAAQ,EAAE,GAAG,CAAC;aAC1B,MAAM,CAAC,CAAC,CAAC;aACT,MAAM,CAAC,IAAI,CAAC;aACZ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACxB,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,+EAA+E;AAC/E,SAAgB,cAAc,CAC5B,OAAgB,EAChB,WAAwB,EACxB,MAAc,EACd,MAAc;IAEd,IAAI,WAAW,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,wCAAwC,WAAW,CAAC,SAAS,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,gFAAgF;IAChF,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,oBAAoB;IACnD,MAAM,OAAO,GAAG,IAAA,6BAAe,EAAC;QAC9B,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE;QAC5C,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IAEH,oCAAoC;IACpC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,IAAA,iCAAmB,EAAC,QAAQ,CAAC,CAAC;IACrF,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAkB,CAAC;IACxE,MAAM,aAAa,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAElD,qBAAqB;IACrB,MAAM,YAAY,GAAG,IAAA,2BAAa,EAAC,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;IAElF,cAAc;IACd,MAAM,KAAK,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,UAAU,CAAC,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAE9D,sBAAsB;IACtB,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAA,4BAAc,EAAC,aAAa,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IACjE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnB,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC/E,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAEhC,OAAO;QACL,OAAO,EAAE,CAAC;QACV,gBAAgB,EAAE,WAAW,CAAC,MAAM;QACpC,cAAc,EAAE,YAAY,CAAC,aAAa,CAAC;QAC3C,cAAc,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9D,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC;QAC1B,GAAG,EAAE,YAAY,CAAC,GAAG,CAAC;QACtB,cAAc,EAAE,WAAW,CAAC,MAAM;KACnC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,cAAc,CAC5B,QAAiC,EACjC,YAAoB,EACpB,WAAmB;IAEnB,MAAM,KAAK,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAA,8BAAgB,EAAC;QAChC,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE;QACrD,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,IAAA,6BAAe,EAAC;QAC/B,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,CAAC,aAAa,CAAC,EAAE;QAClE,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,IAAA,2BAAa,EAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IAElF,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;IAEzC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,UAAU,CAAC,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAE9D,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;IAE/B,MAAM,QAAQ,GAAG,IAAA,8BAAgB,EAAC,aAAa,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IACrE,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACjF,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;AAC1C,CAAC"}

package/dist/delegation.d.ts

@@ -0,0 +1,40 @@
+/**
+ * ADR-045 Phase A — operator→node delegation (#407 / #2).
+ *
+ * A fleet operator holds an ed25519 keypair and issues a compact,
+ * offline-verifiable token asserting `node:<id>` is operated by
+ * `<operator_pubkey>` until `<not_after>`. The node attaches it at REGISTER;
+ * any federated directory verifies it locally (no phone-home). Proven in #406.
+ *
+ * Uses the built-in `node:crypto` ed25519 (no new dependency). The CANONICAL
+ * signing bytes MUST be byte-identical to the PHP directory verifier
+ * (`OperatorDelegationVerifier::canonicalBytes`) and the Python signer — pinned
+ * by a cross-language known-answer test (KAT). A mismatch silently breaks all
+ * verification.
+ */
+import { type KeyObject } from "node:crypto";
+export interface Delegation {
+    node_id: string;
+    operator_pub: string;
+    not_after: number;
+    sig: string;
+}
+/**
+ * Exact bytes the operator signs / the directory verifies. Field order is
+ * alphabetical (node_id < not_after < operator_pub); JSON.stringify preserves
+ * insertion order, yielding the spec/PHP byte form. Do NOT reorder.
+ */
+export declare function canonicalBytes(nodeId: string, operatorPubB64: string, notAfter: number): Buffer;
+/** Base64 of the operator's raw 32-byte ed25519 public key (as the directory stores). */
+export declare function operatorPubB64(privateKey: KeyObject): string;
+/** Operator (offline) signs a delegation for one node. Short TTL = revocation baseline (OPEN-3 C). */
+export declare function issueDelegation(privateKey: KeyObject, nodeId: string, ttlSeconds?: number): Delegation;
+/**
+ * Local self-consistency check (signature + node binding + expiry). The
+ * DIRECTORY is the authority on operator trust; this lets a node sanity-check
+ * its own token before sending. Returns true only if all checks pass.
+ */
+export declare function verifyDelegation(token: Delegation, claimedNodeId: string, now?: number): boolean;
+/** Convenience for tests/tools: generate an operator ed25519 keypair. */
+export declare function generateOperatorKey(): KeyObject;
+//# sourceMappingURL=delegation.d.ts.map

package/dist/delegation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation.d.ts","sourceRoot":"","sources":["../src/delegation.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAwC,KAAK,SAAS,EAAgB,MAAM,aAAa,CAAC;AAKjG,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAK/F;AAED,yFAAyF;AACzF,wBAAgB,cAAc,CAAC,UAAU,EAAE,SAAS,GAAG,MAAM,CAG5D;AAED,sGAAsG;AACtG,wBAAgB,eAAe,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,SAAO,GAAG,UAAU,CAKpG;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAqBhG;AAED,yEAAyE;AACzE,wBAAgB,mBAAmB,IAAI,SAAS,CAE/C"}

package/dist/delegation.js

@@ -0,0 +1,76 @@
+"use strict";
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * ADR-045 Phase A — operator→node delegation (#407 / #2).
+ *
+ * A fleet operator holds an ed25519 keypair and issues a compact,
+ * offline-verifiable token asserting `node:<id>` is operated by
+ * `<operator_pubkey>` until `<not_after>`. The node attaches it at REGISTER;
+ * any federated directory verifies it locally (no phone-home). Proven in #406.
+ *
+ * Uses the built-in `node:crypto` ed25519 (no new dependency). The CANONICAL
+ * signing bytes MUST be byte-identical to the PHP directory verifier
+ * (`OperatorDelegationVerifier::canonicalBytes`) and the Python signer — pinned
+ * by a cross-language known-answer test (KAT). A mismatch silently breaks all
+ * verification.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.canonicalBytes = canonicalBytes;
+exports.operatorPubB64 = operatorPubB64;
+exports.issueDelegation = issueDelegation;
+exports.verifyDelegation = verifyDelegation;
+exports.generateOperatorKey = generateOperatorKey;
+const node_crypto_1 = require("node:crypto");
+/** SPKI DER prefix for an ed25519 public key (12 bytes); + 32 raw key bytes = 44. */
+const ED25519_SPKI_PREFIX = Buffer.from("302a300506032b6570032100", "hex");
+/**
+ * Exact bytes the operator signs / the directory verifies. Field order is
+ * alphabetical (node_id < not_after < operator_pub); JSON.stringify preserves
+ * insertion order, yielding the spec/PHP byte form. Do NOT reorder.
+ */
+function canonicalBytes(nodeId, operatorPubB64, notAfter) {
+    return Buffer.from(JSON.stringify({ node_id: nodeId, not_after: notAfter, operator_pub: operatorPubB64 }), "utf8");
+}
+/** Base64 of the operator's raw 32-byte ed25519 public key (as the directory stores). */
+function operatorPubB64(privateKey) {
+    const der = (0, node_crypto_1.createPublicKey)(privateKey).export({ type: "spki", format: "der" });
+    return Buffer.from(der.subarray(der.length - 32)).toString("base64");
+}
+/** Operator (offline) signs a delegation for one node. Short TTL = revocation baseline (OPEN-3 C). */
+function issueDelegation(privateKey, nodeId, ttlSeconds = 3600) {
+    const pub = operatorPubB64(privateKey);
+    const notAfter = Math.floor(Date.now() / 1000) + ttlSeconds;
+    const sig = (0, node_crypto_1.sign)(null, canonicalBytes(nodeId, pub, notAfter), privateKey);
+    return { node_id: nodeId, operator_pub: pub, not_after: notAfter, sig: sig.toString("base64") };
+}
+/**
+ * Local self-consistency check (signature + node binding + expiry). The
+ * DIRECTORY is the authority on operator trust; this lets a node sanity-check
+ * its own token before sending. Returns true only if all checks pass.
+ */
+function verifyDelegation(token, claimedNodeId, now) {
+    const ts = now ?? Math.floor(Date.now() / 1000);
+    try {
+        if (token.node_id !== claimedNodeId)
+            return false;
+        if (ts >= token.not_after)
+            return false;
+        const raw = Buffer.from(token.operator_pub, "base64");
+        if (raw.length !== 32)
+            return false;
+        const pub = (0, node_crypto_1.createPublicKey)({
+            key: Buffer.concat([ED25519_SPKI_PREFIX, raw]),
+            format: "der",
+            type: "spki",
+        });
+        return (0, node_crypto_1.verify)(null, canonicalBytes(token.node_id, token.operator_pub, token.not_after), pub, Buffer.from(token.sig, "base64"));
+    }
+    catch {
+        return false;
+    }
+}
+/** Convenience for tests/tools: generate an operator ed25519 keypair. */
+function generateOperatorKey() {
+    return (0, node_crypto_1.generateKeyPairSync)("ed25519").privateKey;
+}
+//# sourceMappingURL=delegation.js.map

package/dist/delegation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation.js","sourceRoot":"","sources":["../src/delegation.ts"],"names":[],"mappings":";AAAA,sCAAsC;AACtC;;;;;;;;;;;;;GAaG;;AAmBH,wCAKC;AAGD,wCAGC;AAGD,0CAKC;AAOD,4CAqBC;AAGD,kDAEC;AArED,6CAAiG;AAEjG,qFAAqF;AACrF,MAAM,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;AAS3E;;;;GAIG;AACH,SAAgB,cAAc,CAAC,MAAc,EAAE,cAAsB,EAAE,QAAgB;IACrF,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC,EACtF,MAAM,CACP,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,SAAgB,cAAc,CAAC,UAAqB;IAClD,MAAM,GAAG,GAAG,IAAA,6BAAe,EAAC,UAAU,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAChF,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACvE,CAAC;AAED,sGAAsG;AACtG,SAAgB,eAAe,CAAC,UAAqB,EAAE,MAAc,EAAE,UAAU,GAAG,IAAI;IACtF,MAAM,GAAG,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,UAAU,CAAC;IAC5D,MAAM,GAAG,GAAG,IAAA,kBAAI,EAAC,IAAI,EAAE,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,UAAU,CAAC,CAAC;IAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AAClG,CAAC;AAED;;;;GAIG;AACH,SAAgB,gBAAgB,CAAC,KAAiB,EAAE,aAAqB,EAAE,GAAY;IACrF,MAAM,EAAE,GAAG,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,KAAK,aAAa;YAAE,OAAO,KAAK,CAAC;QAClD,IAAI,EAAE,IAAI,KAAK,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QACxC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QACtD,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QACpC,MAAM,GAAG,GAAG,IAAA,6BAAe,EAAC;YAC1B,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;YAC9C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QACH,OAAO,IAAA,oBAAM,EACX,IAAI,EACJ,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,SAAS,CAAC,EAClE,GAAG,EACH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CACjC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,SAAgB,mBAAmB;IACjC,OAAO,IAAA,iCAAmB,EAAC,SAAS,CAAC,CAAC,UAAU,CAAC;AACnD,CAAC"}

package/dist/index.d.ts

@@ -14,6 +14,8 @@ export { vllmHandler } from "./backends/vllm.js";
 export type { VllmOptions } from "./backends/vllm.js";
 export { llamacppHandler } from "./backends/llamacpp.js";
 export type { LlamaCppOptions } from "./backends/llamacpp.js";
+export { anthropicHandler } from "./backends/anthropic.js";
+export type { AnthropicOptions } from "./backends/anthropic.js";
 export { getBackendHandler, BACKEND_TYPES } from "./backends/index.js";
 export type { BackendType } from "./backends/index.js";
 export type { BackendHandler, BackendOptions } from "./backends/base.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACvE,OAAO,EACL,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,OAAO,EACP,eAAe,EACf,gBAAgB,EAChB,UAAU,EACV,WAAW,EACX,WAAW,GACZ,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,SAAS,EACT,oBAAoB,EACpB,oBAAoB,EACpB,cAAc,EACd,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,SAAS,EACT,aAAa,EACb,WAAW,EACX,eAAe,EACf,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACnF,OAAO,EACL,cAAc,EACd,cAAc,EACd,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,YAAY,EACZ,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,YAAY,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACvE,YAAY,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC3G,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,YAAY,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACjE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,YAAY,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EACL,0BAA0B,EAC1B,kBAAkB,EAClB,YAAY,GACb,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,iCAAiC,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,QAAQ,EACR,eAAe,GAChB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC1E,YAAY,EACV,WAAW,EACX,WAAW,EACX,YAAY,EACZ,UAAU,EACV,SAAS,EACT,YAAY,EACZ,eAAe,EACf,IAAI,EACJ,QAAQ,EACR,eAAe,EACf,WAAW,EACX,WAAW,EACX,YAAY,GACb,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACvE,OAAO,EACL,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,OAAO,EACP,eAAe,EACf,gBAAgB,EAChB,UAAU,EACV,WAAW,EACX,WAAW,GACZ,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,SAAS,EACT,oBAAoB,EACpB,oBAAoB,EACpB,cAAc,EACd,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,SAAS,EACT,aAAa,EACb,WAAW,EACX,eAAe,EACf,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACnF,OAAO,EACL,cAAc,EACd,cAAc,EACd,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,YAAY,EACZ,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,YAAY,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,YAAY,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACvE,YAAY,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC3G,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,YAAY,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACjE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,YAAY,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EACL,0BAA0B,EAC1B,kBAAkB,EAClB,YAAY,GACb,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,iCAAiC,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,QAAQ,EACR,eAAe,GAChB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC1E,YAAY,EACV,WAAW,EACX,WAAW,EACX,YAAY,EACZ,UAAU,EACV,SAAS,EACT,YAAY,EACZ,eAAe,EACf,IAAI,EACJ,QAAQ,EACR,eAAe,EACf,WAAW,EACX,WAAW,EACX,YAAY,GACb,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ConcurrencyGate = exports.CapacityExceededError = exports.runConformanceChecks = exports.verifySignature = exports.signBody = exports.phpCanonicalSignBody = exports.buildPricingBlock = exports.getCipPolicy = exports.configureCipPolicy = exports.CooperativeInferencePolicy = exports.PeerManager = exports.modelsDiverge = exports.runAuditPass = exports.IdempotencyGuard = exports.TokenValidator = exports.AvailabilityEvaluator = exports.QUEUE_WAIT_MS = exports.QUEUE_ELIGIBLE = exports.QOS_PRIORITY = exports.isQueueEligible = exports.qosPriority = exports.BACKEND_TYPES = exports.getBackendHandler = exports.llamacppHandler = exports.vllmHandler = exports.openaiCompatHandler = exports.qualifyServiceAsync = exports.qualifyService = exports.EXPOSURE_MODES = exports.tryUpnpMapping = exports.probeExternalIp = exports.detectCgnat = exports.looksRoutable = exports.detectNat = exports.decodeFrame = exports.encodeFrame = exports.IICP_MAGIC = exports.FRAME_HEADER_LEN = exports.FRAMING_VERSION = exports.MsgType = exports.IicpTcpClientError = exports.IicpTcpClient = exports.IicpTcpServer = exports.IicpNode = exports.IicpError = exports.IicpClient = void 0;
+exports.ConcurrencyGate = exports.CapacityExceededError = exports.runConformanceChecks = exports.verifySignature = exports.signBody = exports.phpCanonicalSignBody = exports.buildPricingBlock = exports.getCipPolicy = exports.configureCipPolicy = exports.CooperativeInferencePolicy = exports.PeerManager = exports.modelsDiverge = exports.runAuditPass = exports.IdempotencyGuard = exports.TokenValidator = exports.AvailabilityEvaluator = exports.QUEUE_WAIT_MS = exports.QUEUE_ELIGIBLE = exports.QOS_PRIORITY = exports.isQueueEligible = exports.qosPriority = exports.BACKEND_TYPES = exports.getBackendHandler = exports.anthropicHandler = exports.llamacppHandler = exports.vllmHandler = exports.openaiCompatHandler = exports.qualifyServiceAsync = exports.qualifyService = exports.EXPOSURE_MODES = exports.tryUpnpMapping = exports.probeExternalIp = exports.detectCgnat = exports.looksRoutable = exports.detectNat = exports.decodeFrame = exports.encodeFrame = exports.IICP_MAGIC = exports.FRAME_HEADER_LEN = exports.FRAMING_VERSION = exports.MsgType = exports.IicpTcpClientError = exports.IicpTcpClient = exports.IicpTcpServer = exports.IicpNode = exports.IicpError = exports.IicpClient = void 0;
 var client_js_1 = require("./client.js");
 Object.defineProperty(exports, "IicpClient", { enumerable: true, get: function () { return client_js_1.IicpClient; } });
 var errors_js_1 = require("./errors.js");
@@ -33,6 +33,8 @@ var vllm_js_1 = require("./backends/vllm.js");
 Object.defineProperty(exports, "vllmHandler", { enumerable: true, get: function () { return vllm_js_1.vllmHandler; } });
 var llamacpp_js_1 = require("./backends/llamacpp.js");
 Object.defineProperty(exports, "llamacppHandler", { enumerable: true, get: function () { return llamacpp_js_1.llamacppHandler; } });
+var anthropic_js_1 = require("./backends/anthropic.js");
+Object.defineProperty(exports, "anthropicHandler", { enumerable: true, get: function () { return anthropic_js_1.anthropicHandler; } });
 var index_js_1 = require("./backends/index.js");
 Object.defineProperty(exports, "getBackendHandler", { enumerable: true, get: function () { return index_js_1.getBackendHandler; } });
 Object.defineProperty(exports, "BACKEND_TYPES", { enumerable: true, get: function () { return index_js_1.BACKEND_TYPES; } });

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AAAhC,uGAAA,UAAU,OAAA;AACnB,yCAAwC;AAA/B,sGAAA,SAAS,OAAA;AAClB,qCAAqC;AAA5B,mGAAA,QAAQ,OAAA;AAEjB,6CAUuB;AATrB,4GAAA,aAAa,OAAA;AACb,4GAAA,aAAa,OAAA;AACb,iHAAA,kBAAkB,OAAA;AAClB,sGAAA,OAAO,OAAA;AACP,8GAAA,eAAe,OAAA;AACf,+GAAA,gBAAgB,OAAA;AAChB,yGAAA,UAAU,OAAA;AACV,0GAAA,WAAW,OAAA;AACX,0GAAA,WAAW,OAAA;AASb,uDAM4B;AAL1B,6GAAA,SAAS,OAAA;AACT,iHAAA,aAAa,OAAA;AACb,+GAAA,WAAW,OAAA;AACX,mHAAA,eAAe,OAAA;AACf,kHAAA,cAAc,OAAA;AAGhB,2CAIsB;AAHpB,4GAAA,cAAc,OAAA;AACd,4GAAA,cAAc,OAAA;AACd,iHAAA,mBAAmB,OAAA;AASrB,gEAAkE;AAAzD,uHAAA,mBAAmB,OAAA;AAM5B,8CAAiD;AAAxC,sGAAA,WAAW,OAAA;AAEpB,sDAAyD;AAAhD,8GAAA,eAAe,OAAA;AAExB,gDAAuE;AAA9D,6GAAA,iBAAiB,OAAA;AAAE,yGAAA,aAAa,OAAA;AAGzC,+CAA2G;AAAlG,2GAAA,WAAW,OAAA;AAAE,+GAAA,eAAe,OAAA;AAAE,4GAAA,YAAY,OAAA;AAAE,8GAAA,cAAc,OAAA;AAAE,6GAAA,aAAa,OAAA;AAClF,qDAA0D;AAAjD,wHAAA,qBAAqB,OAAA;AAE9B,2DAAsD;AAA7C,oHAAA,cAAc,OAAA;AACvB,mDAAoD;AAA3C,kHAAA,gBAAgB,OAAA;AACzB,uDAAiE;AAAxD,gHAAA,YAAY,OAAA;AAAE,iHAAA,aAAa,OAAA;AAEpC,qDAAgD;AAAvC,8GAAA,WAAW,OAAA;AAEpB,iDAIyB;AAHvB,2HAAA,0BAA0B,OAAA;AAC1B,mHAAA,kBAAkB,OAAA;AAClB,6GAAA,YAAY,OAAA;AAGd,2CAKsB;AAJpB,+GAAA,iBAAiB,OAAA;AACjB,kHAAA,oBAAoB,OAAA;AACpB,sGAAA,QAAQ,OAAA;AACR,6GAAA,eAAe,OAAA;AAGjB,mDAAwD;AAA/C,sHAAA,oBAAoB,OAAA;AAE7B,mDAA0E;AAAjE,uHAAA,qBAAqB,OAAA;AAAE,iHAAA,eAAe,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AAAhC,uGAAA,UAAU,OAAA;AACnB,yCAAwC;AAA/B,sGAAA,SAAS,OAAA;AAClB,qCAAqC;AAA5B,mGAAA,QAAQ,OAAA;AAEjB,6CAUuB;AATrB,4GAAA,aAAa,OAAA;AACb,4GAAA,aAAa,OAAA;AACb,iHAAA,kBAAkB,OAAA;AAClB,sGAAA,OAAO,OAAA;AACP,8GAAA,eAAe,OAAA;AACf,+GAAA,gBAAgB,OAAA;AAChB,yGAAA,UAAU,OAAA;AACV,0GAAA,WAAW,OAAA;AACX,0GAAA,WAAW,OAAA;AASb,uDAM4B;AAL1B,6GAAA,SAAS,OAAA;AACT,iHAAA,aAAa,OAAA;AACb,+GAAA,WAAW,OAAA;AACX,mHAAA,eAAe,OAAA;AACf,kHAAA,cAAc,OAAA;AAGhB,2CAIsB;AAHpB,4GAAA,cAAc,OAAA;AACd,4GAAA,cAAc,OAAA;AACd,iHAAA,mBAAmB,OAAA;AASrB,gEAAkE;AAAzD,uHAAA,mBAAmB,OAAA;AAM5B,8CAAiD;AAAxC,sGAAA,WAAW,OAAA;AAEpB,sDAAyD;AAAhD,8GAAA,eAAe,OAAA;AAExB,wDAA2D;AAAlD,gHAAA,gBAAgB,OAAA;AAEzB,gDAAuE;AAA9D,6GAAA,iBAAiB,OAAA;AAAE,yGAAA,aAAa,OAAA;AAGzC,+CAA2G;AAAlG,2GAAA,WAAW,OAAA;AAAE,+GAAA,eAAe,OAAA;AAAE,4GAAA,YAAY,OAAA;AAAE,8GAAA,cAAc,OAAA;AAAE,6GAAA,aAAa,OAAA;AAClF,qDAA0D;AAAjD,wHAAA,qBAAqB,OAAA;AAE9B,2DAAsD;AAA7C,oHAAA,cAAc,OAAA;AACvB,mDAAoD;AAA3C,kHAAA,gBAAgB,OAAA;AACzB,uDAAiE;AAAxD,gHAAA,YAAY,OAAA;AAAE,iHAAA,aAAa,OAAA;AAEpC,qDAAgD;AAAvC,8GAAA,WAAW,OAAA;AAEpB,iDAIyB;AAHvB,2HAAA,0BAA0B,OAAA;AAC1B,mHAAA,kBAAkB,OAAA;AAClB,6GAAA,YAAY,OAAA;AAGd,2CAKsB;AAJpB,+GAAA,iBAAiB,OAAA;AACjB,kHAAA,oBAAoB,OAAA;AACpB,sGAAA,QAAQ,OAAA;AACR,6GAAA,eAAe,OAAA;AAGjB,mDAAwD;AAA/C,sHAAA,oBAAoB,OAAA;AAE7B,mDAA0E;AAAjE,uHAAA,qBAAqB,OAAA;AAAE,iHAAA,eAAe,OAAA"}

package/dist/instance_lock.d.ts

@@ -0,0 +1,11 @@
+export declare class NodeAlreadyServingError extends Error {
+}
+export declare class InstanceLock {
+    private _path;
+    private constructor();
+    /** Acquire the per-node_id lock. Throws NodeAlreadyServingError if another LIVE
+     * process holds it and `force` is false. Fails open on I/O error. */
+    static acquire(nodeId: string, force?: boolean): InstanceLock;
+    release(): void;
+}
+//# sourceMappingURL=instance_lock.d.ts.map

package/dist/instance_lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instance_lock.d.ts","sourceRoot":"","sources":["../src/instance_lock.ts"],"names":[],"mappings":"AAgCA,qBAAa,uBAAwB,SAAQ,KAAK;CAAG;AAErD,qBAAa,YAAY;IACH,OAAO,CAAC,KAAK;IAAjC,OAAO;IAEP;yEACqE;IACrE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,UAAQ,GAAG,YAAY;IA+B3D,OAAO,IAAI,IAAI;CAShB"}