@kya-os/mcp-i-core 1.0.0

package/dist/runtime/base.js

@@ -0,0 +1,316 @@
+"use strict";
+/**
+ * MCPIRuntimeBase - Provider-based runtime
+ *
+ * Core runtime that accepts providers for all platform-specific operations.
+ * This enables the same runtime logic to work across Node.js, Cloudflare Workers,
+ * and other platforms.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MCPIRuntimeBase = void 0;
+class MCPIRuntimeBase {
+    crypto;
+    clock;
+    fetch;
+    storage;
+    nonceCache;
+    identity;
+    config;
+    cachedIdentity;
+    sessions = new Map();
+    constructor(config) {
+        this.config = config;
+        this.crypto = config.cryptoProvider;
+        this.clock = config.clockProvider;
+        this.fetch = config.fetchProvider;
+        this.storage = config.storageProvider;
+        this.nonceCache = config.nonceCacheProvider;
+        this.identity = config.identityProvider;
+    }
+    /**
+     * Initialize the runtime
+     */
+    async initialize() {
+        // Load or generate identity
+        this.cachedIdentity = await this.identity.getIdentity();
+        // Initialize nonce cache if it has an initialize method
+        if ('initialize' in this.nonceCache && typeof this.nonceCache.initialize === 'function') {
+            await this.nonceCache.initialize();
+        }
+        // Log initialization if audit is enabled
+        if (this.config.audit?.enabled) {
+            this.logAudit('runtime_initialized', {
+                did: this.cachedIdentity.did,
+                environment: this.config.environment || 'development'
+            });
+        }
+    }
+    /**
+     * Get the current agent identity
+     */
+    async getIdentity() {
+        if (!this.cachedIdentity) {
+            this.cachedIdentity = await this.identity.getIdentity();
+        }
+        return this.cachedIdentity;
+    }
+    /**
+     * Handle handshake request
+     */
+    async handleHandshake(request) {
+        const identity = await this.getIdentity();
+        const timestamp = this.clock.now();
+        const sessionId = await this.generateSessionId();
+        // Create session
+        const session = {
+            id: sessionId,
+            clientDid: request.clientDid,
+            agentDid: identity.did,
+            createdAt: timestamp,
+            expiresAt: this.clock.calculateExpiry((this.config.sessionTtlMinutes || 30) * 60)
+        };
+        this.sessions.set(sessionId, session);
+        // Create handshake response
+        const response = {
+            sessionId,
+            agentDid: identity.did,
+            timestamp,
+            capabilities: ['identity', 'proof', 'audit']
+        };
+        // Sign the response
+        const signature = await this.signData(response);
+        return {
+            ...response,
+            signature
+        };
+    }
+    /**
+     * Process tool call with automatic proof generation
+     */
+    async processToolCall(toolName, args, handler, session) {
+        // Execute the tool
+        const result = await handler(args);
+        // Create proof
+        const proof = await this.createProof(result, session);
+        // Log if audit is enabled
+        if (this.config.audit?.enabled) {
+            this.logAudit('tool_executed', {
+                tool: toolName,
+                sessionId: session?.id,
+                timestamp: this.clock.now()
+            });
+        }
+        return {
+            result,
+            proof
+        };
+    }
+    /**
+     * Create cryptographic proof for data
+     */
+    async createProof(data, session) {
+        const identity = await this.getIdentity();
+        const timestamp = this.clock.now();
+        const nonce = await this.generateNonce();
+        // Add nonce to cache to prevent replay
+        await this.nonceCache.add(nonce, this.clock.calculateExpiry(300) // 5 minute expiry
+        );
+        const proofData = {
+            data,
+            timestamp,
+            nonce,
+            did: identity.did,
+            sessionId: session?.id
+        };
+        const signature = await this.signData(proofData);
+        return {
+            timestamp,
+            nonce,
+            did: identity.did,
+            signature,
+            algorithm: 'Ed25519'
+        };
+    }
+    /**
+     * Verify a proof
+     */
+    async verifyProof(data, proof) {
+        try {
+            // Check nonce hasn't been used
+            if (await this.nonceCache.has(proof.nonce)) {
+                return false;
+            }
+            // Check timestamp is within skew
+            if (!this.clock.isWithinSkew(proof.timestamp, this.config.timestampSkewSeconds || 120)) {
+                return false;
+            }
+            // Resolve DID to get public key
+            const didDoc = await this.fetch.resolveDID(proof.did);
+            const publicKey = this.extractPublicKey(didDoc);
+            // Verify signature
+            const proofData = {
+                data,
+                timestamp: proof.timestamp,
+                nonce: proof.nonce,
+                did: proof.did,
+                sessionId: proof.sessionId
+            };
+            const dataBytes = new TextEncoder().encode(JSON.stringify(proofData));
+            const signatureBytes = this.base64ToBytes(proof.signature);
+            return await this.crypto.verify(dataBytes, signatureBytes, publicKey);
+        }
+        catch (error) {
+            console.error('Proof verification failed:', error);
+            return false;
+        }
+    }
+    /**
+     * Get current session
+     */
+    async getCurrentSession() {
+        // Find non-expired session
+        for (const [id, session] of this.sessions) {
+            if (!this.clock.hasExpired(session.expiresAt)) {
+                return session;
+            }
+        }
+        return null;
+    }
+    /**
+     * Create well-known handler for identity verification
+     */
+    createWellKnownHandler(config) {
+        return async (path) => {
+            const identity = await this.getIdentity();
+            if (path === '/.well-known/did.json') {
+                return this.createDIDDocument(identity);
+            }
+            if (path === '/.well-known/mcp-identity') {
+                return {
+                    did: identity.did,
+                    publicKey: identity.publicKey,
+                    serviceName: config?.serviceName || 'MCP-I Service',
+                    serviceEndpoint: config?.serviceEndpoint || 'https://example.com',
+                    timestamp: this.clock.now()
+                };
+            }
+            return null;
+        };
+    }
+    /**
+     * Create debug endpoint (development only)
+     */
+    createDebugEndpoint() {
+        if (this.config.environment === 'production') {
+            return null;
+        }
+        return async () => {
+            const identity = await this.getIdentity();
+            const session = await this.getCurrentSession();
+            return {
+                identity: {
+                    did: identity.did,
+                    publicKey: identity.publicKey
+                },
+                session,
+                config: {
+                    environment: this.config.environment,
+                    timestampSkewSeconds: this.config.timestampSkewSeconds,
+                    sessionTtlMinutes: this.config.sessionTtlMinutes
+                },
+                timestamp: this.clock.now()
+            };
+        };
+    }
+    /**
+     * Get audit logger
+     */
+    getAuditLogger() {
+        return {
+            log: (event, data) => this.logAudit(event, data)
+        };
+    }
+    /**
+     * Rotate keys
+     */
+    async rotateKeys() {
+        const newIdentity = await this.identity.rotateKeys();
+        this.cachedIdentity = newIdentity;
+        if (this.config.audit?.enabled) {
+            this.logAudit('keys_rotated', {
+                oldDid: this.cachedIdentity?.did,
+                newDid: newIdentity.did,
+                timestamp: this.clock.now()
+            });
+        }
+        return newIdentity;
+    }
+    // Helper methods
+    async signData(data) {
+        const identity = await this.getIdentity();
+        const dataBytes = new TextEncoder().encode(JSON.stringify(data));
+        const signature = await this.crypto.sign(dataBytes, identity.privateKey);
+        return this.bytesToBase64(signature);
+    }
+    async generateNonce() {
+        const bytes = await this.crypto.randomBytes(32);
+        return this.bytesToBase64(bytes);
+    }
+    async generateSessionId() {
+        const bytes = await this.crypto.randomBytes(16);
+        return this.bytesToHex(bytes);
+    }
+    logAudit(event, data) {
+        if (!this.config.audit?.enabled)
+            return;
+        const record = {
+            event,
+            data: this.config.audit.includePayloads ? data : undefined,
+            timestamp: this.clock.now(),
+            timestampFormatted: this.clock.format(this.clock.now())
+        };
+        const logLine = JSON.stringify(record);
+        if (this.config.audit.logFunction) {
+            this.config.audit.logFunction(logLine);
+        }
+        else {
+            console.log('[AUDIT]', logLine);
+        }
+    }
+    createDIDDocument(identity) {
+        return {
+            '@context': ['https://www.w3.org/ns/did/v1'],
+            id: identity.did,
+            verificationMethod: [{
+                    id: `${identity.did}#key-1`,
+                    type: 'Ed25519VerificationKey2020',
+                    controller: identity.did,
+                    publicKeyBase64: identity.publicKey
+                }],
+            authentication: [`${identity.did}#key-1`],
+            assertionMethod: [`${identity.did}#key-1`]
+        };
+    }
+    extractPublicKey(didDoc) {
+        const method = didDoc.verificationMethod?.[0];
+        if (method?.publicKeyBase64) {
+            return method.publicKeyBase64;
+        }
+        if (method?.publicKeyMultibase) {
+            // Convert multibase to base64
+            return method.publicKeyMultibase; // Simplified
+        }
+        throw new Error('Public key not found in DID document');
+    }
+    bytesToBase64(bytes) {
+        return Buffer.from(bytes).toString('base64');
+    }
+    base64ToBytes(base64) {
+        return new Uint8Array(Buffer.from(base64, 'base64'));
+    }
+    bytesToHex(bytes) {
+        return Buffer.from(bytes).toString('hex');
+    }
+}
+exports.MCPIRuntimeBase = MCPIRuntimeBase;
+//# sourceMappingURL=base.js.map

package/dist/runtime/base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../src/runtime/base.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AA2CH,MAAa,eAAe;IAChB,MAAM,CAAiB;IACvB,KAAK,CAAgB;IACrB,KAAK,CAAgB;IACrB,OAAO,CAAkB;IACzB,UAAU,CAAqB;IAC/B,QAAQ,CAAmB;IAC3B,MAAM,CAAoB;IAC5B,cAAc,CAAiB;IAC/B,QAAQ,GAAqB,IAAI,GAAG,EAAE,CAAC;IAE/C,YAAY,MAAyB;QACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC;QACpC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,aAAa,CAAC;QAClC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,aAAa,CAAC;QAClC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC;QACtC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,kBAAkB,CAAC;QAC5C,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU;QACd,4BAA4B;QAC5B,IAAI,CAAC,cAAc,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAExD,wDAAwD;QACxD,IAAI,YAAY,IAAI,IAAI,CAAC,UAAU,IAAI,OAAQ,IAAI,CAAC,UAAkB,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;YACjG,MAAO,IAAI,CAAC,UAAkB,CAAC,UAAU,EAAE,CAAC;QAC9C,CAAC;QAED,yCAAyC;QACzC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC,QAAQ,CAAC,qBAAqB,EAAE;gBACnC,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG;gBAC5B,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,aAAa;aACtD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW;QACf,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,IAAI,CAAC,cAAc,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC1D,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,OAAY;QAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEjD,iBAAiB;QACjB,MAAM,OAAO,GAAG;YACd,EAAE,EAAE,SAAS;YACb,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,QAAQ,CAAC,GAAG;YACtB,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC;SAClF,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAEtC,4BAA4B;QAC5B,MAAM,QAAQ,GAAG;YACf,SAAS;YACT,QAAQ,EAAE,QAAQ,CAAC,GAAG;YACtB,SAAS;YACT,YAAY,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC;SAC7C,CAAC;QAEF,oBAAoB;QACpB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAEhD,OAAO;YACL,GAAG,QAAQ;YACX,SAAS;SACV,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,QAAgB,EAChB,IAAS,EACT,OAAoC,EACpC,OAAa;QAEb,mBAAmB;QACnB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QAEnC,eAAe;QACf,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAEtD,0BAA0B;QAC1B,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE;gBAC7B,IAAI,EAAE,QAAQ;gBACd,SAAS,EAAE,OAAO,EAAE,EAAE;gBACtB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;aAC5B,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,MAAM;YACN,KAAK;SACN,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,IAAS,EAAE,OAAa;QACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAEzC,uCAAuC;QACvC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CACvB,KAAK,EACL,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,kBAAkB;SACnD,CAAC;QAEF,MAAM,SAAS,GAAG;YAChB,IAAI;YACJ,SAAS;YACT,KAAK;YACL,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,SAAS,EAAE,OAAO,EAAE,EAAE;SACvB,CAAC;QAEF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAEjD,OAAO;YACL,SAAS;YACT,KAAK;YACL,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,SAAS;YACT,SAAS,EAAE,SAAS;SACrB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,IAAS,EAAE,KAAU;QACrC,IAAI,CAAC;YACH,+BAA+B;YAC/B,IAAI,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3C,OAAO,KAAK,CAAC;YACf,CAAC;YAED,iCAAiC;YACjC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAC1B,KAAK,CAAC,SAAS,EACf,IAAI,CAAC,MAAM,CAAC,oBAAoB,IAAI,GAAG,CACxC,EAAE,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;YAED,gCAAgC;YAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACtD,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAEhD,mBAAmB;YACnB,MAAM,SAAS,GAAG;gBAChB,IAAI;gBACJ,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC;YAEF,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CACxC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAC1B,CAAC;YACF,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAE3D,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAC7B,SAAS,EACT,cAAc,EACd,SAAS,CACV,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;YACnD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB;QACrB,2BAA2B;QAC3B,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC9C,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,sBAAsB,CAAC,MAAY;QACjC,OAAO,KAAK,EAAE,IAAY,EAAE,EAAE;YAC5B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YAE1C,IAAI,IAAI,KAAK,uBAAuB,EAAE,CAAC;gBACrC,OAAO,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YAC1C,CAAC;YAED,IAAI,IAAI,KAAK,2BAA2B,EAAE,CAAC;gBACzC,OAAO;oBACL,GAAG,EAAE,QAAQ,CAAC,GAAG;oBACjB,SAAS,EAAE,QAAQ,CAAC,SAAS;oBAC7B,WAAW,EAAE,MAAM,EAAE,WAAW,IAAI,eAAe;oBACnD,eAAe,EAAE,MAAM,EAAE,eAAe,IAAI,qBAAqB;oBACjE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;iBAC5B,CAAC;YACJ,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,mBAAmB;QACjB,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,IAAI,EAAE;YAChB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAE/C,OAAO;gBACL,QAAQ,EAAE;oBACR,GAAG,EAAE,QAAQ,CAAC,GAAG;oBACjB,SAAS,EAAE,QAAQ,CAAC,SAAS;iBAC9B;gBACD,OAAO;gBACP,MAAM,EAAE;oBACN,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;oBACpC,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC,oBAAoB;oBACtD,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;iBACjD;gBACD,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;aAC5B,CAAC;QACJ,CAAC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO;YACL,GAAG,EAAE,CAAC,KAAa,EAAE,IAAS,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;SAC9D,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU;QACd,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QACrD,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC;QAElC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE;gBAC5B,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,GAAG;gBAChC,MAAM,EAAE,WAAW,CAAC,GAAG;gBACvB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;aAC5B,CAAC,CAAC;QACL,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,iBAAiB;IAET,KAAK,CAAC,QAAQ,CAAC,IAAS;QAC9B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CACxC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CACrB,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACtC,SAAS,EACT,QAAQ,CAAC,UAAU,CACpB,CAAC;QACF,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IAEO,KAAK,CAAC,aAAa;QACzB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAEO,QAAQ,CAAC,KAAa,EAAE,IAAS;QACvC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO;YAAE,OAAO;QAExC,MAAM,MAAM,GAAG;YACb,KAAK;YACL,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YAC1D,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;YAC3B,kBAAkB,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;SACxD,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAEvC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,QAAuB;QAC/C,OAAO;YACL,UAAU,EAAE,CAAC,8BAA8B,CAAC;YAC5C,EAAE,EAAE,QAAQ,CAAC,GAAG;YAChB,kBAAkB,EAAE,CAAC;oBACnB,EAAE,EAAE,GAAG,QAAQ,CAAC,GAAG,QAAQ;oBAC3B,IAAI,EAAE,4BAA4B;oBAClC,UAAU,EAAE,QAAQ,CAAC,GAAG;oBACxB,eAAe,EAAE,QAAQ,CAAC,SAAS;iBACpC,CAAC;YACF,cAAc,EAAE,CAAC,GAAG,QAAQ,CAAC,GAAG,QAAQ,CAAC;YACzC,eAAe,EAAE,CAAC,GAAG,QAAQ,CAAC,GAAG,QAAQ,CAAC;SAC3C,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,MAAW;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAI,MAAM,EAAE,eAAe,EAAE,CAAC;YAC5B,OAAO,MAAM,CAAC,eAAe,CAAC;QAChC,CAAC;QACD,IAAI,MAAM,EAAE,kBAAkB,EAAE,CAAC;YAC/B,8BAA8B;YAC9B,OAAO,MAAM,CAAC,kBAAkB,CAAC,CAAC,aAAa;QACjD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAEO,aAAa,CAAC,KAAiB;QACrC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAEO,aAAa,CAAC,MAAc;QAClC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvD,CAAC;IAEO,UAAU,CAAC,KAAiB;QAClC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;CACF;AApXD,0CAoXC"}

package/dist/types/providers.d.ts

@@ -0,0 +1,142 @@
+/**
+ * Provider interfaces for platform-specific implementations
+ */
+import { AgentIdentity } from "@kya-os/contracts/handshake";
+/**
+ * Abstract crypto provider for platform-specific crypto operations
+ */
+export declare abstract class CryptoProvider {
+    /**
+     * Sign data with Ed25519 private key
+     */
+    abstract sign(data: Uint8Array, privateKey: string): Promise<Uint8Array>;
+    /**
+     * Verify signature with Ed25519 public key
+     */
+    abstract verify(data: Uint8Array, signature: Uint8Array, publicKey: string): Promise<boolean>;
+    /**
+     * Generate Ed25519 key pair
+     */
+    abstract generateKeyPair(): Promise<{
+        privateKey: string;
+        publicKey: string;
+    }>;
+    /**
+     * Create SHA-256 hash
+     */
+    abstract hash(data: Uint8Array): Promise<Uint8Array>;
+}
+/**
+ * Abstract identity provider for platform-specific identity storage
+ */
+export declare abstract class IdentityProvider {
+    /**
+     * Load agent identity from storage
+     */
+    abstract loadIdentity(): Promise<AgentIdentity | null>;
+    /**
+     * Store agent identity
+     */
+    abstract storeIdentity(identity: AgentIdentity): Promise<void>;
+    /**
+     * Check if identity exists
+     */
+    abstract hasIdentity(): Promise<boolean>;
+    /**
+     * Delete identity
+     */
+    abstract deleteIdentity(): Promise<void>;
+}
+/**
+ * Abstract storage provider for general key-value storage
+ */
+export declare abstract class StorageProvider {
+    /**
+     * Get value by key
+     */
+    abstract get(key: string): Promise<string | null>;
+    /**
+     * Set value with optional TTL
+     */
+    abstract set(key: string, value: string, ttl?: number): Promise<void>;
+    /**
+     * Delete value by key
+     */
+    abstract delete(key: string): Promise<void>;
+    /**
+     * Check if key exists
+     */
+    abstract has(key: string): Promise<boolean>;
+}
+/**
+ * Nonce cache provider for replay attack prevention
+ */
+export declare abstract class NonceCacheProvider {
+    /**
+     * Get nonce prefix for namespacing
+     */
+    abstract getNoncePrefix(): string;
+    /**
+     * Get default TTL in seconds
+     */
+    abstract getDefaultTTL(): number;
+    /**
+     * Check if nonce exists
+     */
+    abstract has(nonce: string): Promise<boolean>;
+    /**
+     * Add nonce with TTL in seconds
+     */
+    abstract add(nonce: string, ttl: number): Promise<void>;
+    /**
+     * Clean expired nonces (optional)
+     */
+    abstract cleanup?(): Promise<void>;
+}
+/**
+ * Clock provider for time-based operations
+ */
+export declare abstract class ClockProvider {
+    /**
+     * Get current timestamp in milliseconds
+     */
+    abstract now(): number;
+    /**
+     * Check if a timestamp is within acceptable skew
+     */
+    abstract isWithinSkew(timestamp: number, skewSeconds: number): boolean;
+    /**
+     * Check if something has expired
+     */
+    abstract hasExpired(expiresAt: number): boolean;
+    /**
+     * Calculate expiration timestamp
+     */
+    abstract calculateExpiry(ttlSeconds: number): number;
+}
+/**
+ * Fetch provider for network operations
+ */
+export declare abstract class FetchProvider {
+    /**
+     * Resolve a DID document
+     */
+    abstract resolveDID(did: string): Promise<any>;
+    /**
+     * Fetch status list for credentials
+     */
+    abstract fetchStatusList(url: string): Promise<any>;
+    /**
+     * Fetch delegation chain
+     */
+    abstract fetchDelegationChain(id: string): Promise<any[]>;
+    /**
+     * Get edge verification data (compact blob for offline verification)
+     */
+    abstract getEdgeVerificationData(id: string): Promise<any>;
+    /**
+     * Generic HTTP fetch
+     */
+    abstract fetch(url: string, options?: any): Promise<Response>;
+}
+//# sourceMappingURL=providers.d.ts.map

package/dist/types/providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../src/types/providers.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE5D;;GAEG;AACH,8BAAsB,cAAc;IAClC;;OAEG;IACH,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAExE;;OAEG;IACH,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAE7F;;OAEG;IACH,QAAQ,CAAC,eAAe,IAAI,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAE9E;;OAEG;IACH,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;CACrD;AAED;;GAEG;AACH,8BAAsB,gBAAgB;IACpC;;OAEG;IACH,QAAQ,CAAC,YAAY,IAAI,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAEtD;;OAEG;IACH,QAAQ,CAAC,aAAa,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAE9D;;OAEG;IACH,QAAQ,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAExC;;OAEG;IACH,QAAQ,CAAC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;CACzC;AAED;;GAEG;AACH,8BAAsB,eAAe;IACnC;;OAEG;IACH,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAEjD;;OAEG;IACH,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAErE;;OAEG;IACH,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAE3C;;OAEG;IACH,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAC5C;AAED;;GAEG;AACH,8BAAsB,kBAAkB;IACtC;;OAEG;IACH,QAAQ,CAAC,cAAc,IAAI,MAAM;IAEjC;;OAEG;IACH,QAAQ,CAAC,aAAa,IAAI,MAAM;IAEhC;;OAEG;IACH,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAE7C;;OAEG;IACH,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAEvD;;OAEG;IACH,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC;CACnC;AAED;;GAEG;AACH,8BAAsB,aAAa;IACjC;;OAEG;IACH,QAAQ,CAAC,GAAG,IAAI,MAAM;IAEtB;;OAEG;IACH,QAAQ,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO;IAEtE;;OAEG;IACH,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAE/C;;OAEG;IACH,QAAQ,CAAC,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM;CACrD;AAED;;GAEG;AACH,8BAAsB,aAAa;IACjC;;OAEG;IACH,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAE9C;;OAEG;IACH,QAAQ,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAEnD;;OAEG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAEzD;;OAEG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAE1D;;OAEG;IACH,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC;CAC9D"}

package/dist/types/providers.js

@@ -0,0 +1,43 @@
+"use strict";
+/**
+ * Provider interfaces for platform-specific implementations
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FetchProvider = exports.ClockProvider = exports.NonceCacheProvider = exports.StorageProvider = exports.IdentityProvider = exports.CryptoProvider = void 0;
+/**
+ * Abstract crypto provider for platform-specific crypto operations
+ */
+class CryptoProvider {
+}
+exports.CryptoProvider = CryptoProvider;
+/**
+ * Abstract identity provider for platform-specific identity storage
+ */
+class IdentityProvider {
+}
+exports.IdentityProvider = IdentityProvider;
+/**
+ * Abstract storage provider for general key-value storage
+ */
+class StorageProvider {
+}
+exports.StorageProvider = StorageProvider;
+/**
+ * Nonce cache provider for replay attack prevention
+ */
+class NonceCacheProvider {
+}
+exports.NonceCacheProvider = NonceCacheProvider;
+/**
+ * Clock provider for time-based operations
+ */
+class ClockProvider {
+}
+exports.ClockProvider = ClockProvider;
+/**
+ * Fetch provider for network operations
+ */
+class FetchProvider {
+}
+exports.FetchProvider = FetchProvider;
+//# sourceMappingURL=providers.js.map

package/dist/types/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../../src/types/providers.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAIH;;GAEG;AACH,MAAsB,cAAc;CAoBnC;AApBD,wCAoBC;AAED;;GAEG;AACH,MAAsB,gBAAgB;CAoBrC;AApBD,4CAoBC;AAED;;GAEG;AACH,MAAsB,eAAe;CAoBpC;AApBD,0CAoBC;AAED;;GAEG;AACH,MAAsB,kBAAkB;CAyBvC;AAzBD,gDAyBC;AAED;;GAEG;AACH,MAAsB,aAAa;CAoBlC;AApBD,sCAoBC;AAED;;GAEG;AACH,MAAsB,aAAa;CAyBlC;AAzBD,sCAyBC"}

package/dist/verification/interfaces.d.ts

@@ -0,0 +1,125 @@
+/**
+ * Credential and Delegation verification interfaces
+ */
+import { ProofEngine } from "../proof/proof-engine";
+import { FetchProvider, ClockProvider } from "../types/providers";
+/**
+ * Credential status
+ */
+export interface CredentialStatus {
+    revoked: boolean;
+    suspended?: boolean;
+    statusListIndex?: number;
+    statusListCredential?: string;
+    checkedAt: number;
+}
+/**
+ * Delegation chain entry
+ */
+export interface DelegationEntry {
+    id: string;
+    delegator: string;
+    delegate: string;
+    scope: string[];
+    constraints?: any;
+    credentialId?: string;
+    parentId?: string;
+    depth: number;
+    createdAt: number;
+    expiresAt?: number;
+}
+/**
+ * Verification options
+ */
+export interface VerificationOptions {
+    verifyCredential?: boolean;
+    checkRevocation?: boolean;
+    maxChainDepth?: number;
+    allowExpired?: boolean;
+}
+/**
+ * Verification result
+ */
+export interface VerificationResult {
+    valid: boolean;
+    errors?: string[];
+    warnings?: string[];
+    credentialStatus?: CredentialStatus;
+    delegationChain?: DelegationEntry[];
+}
+/**
+ * Credential verifier interface
+ */
+export declare abstract class CredentialVerifier {
+    protected proofEngine: ProofEngine;
+    protected fetchProvider: FetchProvider;
+    protected clockProvider: ClockProvider;
+    constructor(proofEngine: ProofEngine, fetchProvider: FetchProvider, clockProvider: ClockProvider);
+    /**
+     * Verify a verifiable credential
+     */
+    abstract verifyCredential(credential: any, options?: VerificationOptions): Promise<VerificationResult>;
+    /**
+     * Check credential status (revocation, suspension)
+     */
+    abstract checkCredentialStatus(credentialId: string): Promise<CredentialStatus>;
+    /**
+     * Stage-1 verification (status/expiry - no network)
+     */
+    abstract verifyOffline(credential: any): Promise<VerificationResult>;
+    /**
+     * Stage-2 verification (signature + credential - may use network)
+     */
+    abstract verifyOnline(credential: any, options?: VerificationOptions): Promise<VerificationResult>;
+}
+/**
+ * Delegation registry interface
+ */
+export declare abstract class DelegationRegistry {
+    protected fetchProvider: FetchProvider;
+    protected clockProvider: ClockProvider;
+    constructor(fetchProvider: FetchProvider, clockProvider: ClockProvider);
+    /**
+     * Verify delegation with optional credential verification
+     */
+    abstract verifyDelegation(delegationId: string, options?: VerificationOptions): Promise<VerificationResult>;
+    /**
+     * Get delegation chain
+     */
+    abstract getDelegationChain(delegationId: string): Promise<DelegationEntry[]>;
+    /**
+     * Check if any link in chain is revoked
+     */
+    abstract checkChainRevocation(chain: DelegationEntry[]): Promise<boolean>;
+    /**
+     * Validate chain depth
+     */
+    abstract validateChainDepth(chain: DelegationEntry[], maxDepth: number): boolean;
+    /**
+     * Register new delegation
+     */
+    abstract registerDelegation(delegation: DelegationEntry): Promise<string>;
+    /**
+     * Revoke delegation (and all descendants)
+     */
+    abstract revokeDelegation(delegationId: string): Promise<void>;
+}
+/**
+ * Progressive verification helper
+ */
+export declare class ProgressiveVerifier {
+    private credentialVerifier;
+    private delegationRegistry;
+    constructor(credentialVerifier: CredentialVerifier, delegationRegistry: DelegationRegistry);
+    /**
+     * Perform progressive verification
+     * Stage-1: Offline checks (expiry, basic validation)
+     * Stage-2: Online checks (signature, credential, revocation)
+     */
+    verifyProgressive(data: any, options?: VerificationOptions): Promise<VerificationResult>;
+    /**
+     * Get edge verification data for offline verification
+     */
+    getEdgeVerificationData(id: string): Promise<any>;
+}
+//# sourceMappingURL=interfaces.d.ts.map

package/dist/verification/interfaces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interfaces.d.ts","sourceRoot":"","sources":["../../src/verification/interfaces.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAElE;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,CAAC,EAAE,GAAG,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,eAAe,CAAC,EAAE,eAAe,EAAE,CAAC;CACrC;AAED;;GAEG;AACH,8BAAsB,kBAAkB;IAEpC,SAAS,CAAC,WAAW,EAAE,WAAW;IAClC,SAAS,CAAC,aAAa,EAAE,aAAa;IACtC,SAAS,CAAC,aAAa,EAAE,aAAa;gBAF5B,WAAW,EAAE,WAAW,EACxB,aAAa,EAAE,aAAa,EAC5B,aAAa,EAAE,aAAa;IAGxC;;OAEG;IACH,QAAQ,CAAC,gBAAgB,CACvB,UAAU,EAAE,GAAG,EACf,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,kBAAkB,CAAC;IAE9B;;OAEG;IACH,QAAQ,CAAC,qBAAqB,CAC5B,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,gBAAgB,CAAC;IAE5B;;OAEG;IACH,QAAQ,CAAC,aAAa,CACpB,UAAU,EAAE,GAAG,GACd,OAAO,CAAC,kBAAkB,CAAC;IAE9B;;OAEG;IACH,QAAQ,CAAC,YAAY,CACnB,UAAU,EAAE,GAAG,EACf,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,kBAAkB,CAAC;CAC/B;AAED;;GAEG;AACH,8BAAsB,kBAAkB;IAEpC,SAAS,CAAC,aAAa,EAAE,aAAa;IACtC,SAAS,CAAC,aAAa,EAAE,aAAa;gBAD5B,aAAa,EAAE,aAAa,EAC5B,aAAa,EAAE,aAAa;IAGxC;;OAEG;IACH,QAAQ,CAAC,gBAAgB,CACvB,YAAY,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,kBAAkB,CAAC;IAE9B;;OAEG;IACH,QAAQ,CAAC,kBAAkB,CACzB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,eAAe,EAAE,CAAC;IAE7B;;OAEG;IACH,QAAQ,CAAC,oBAAoB,CAC3B,KAAK,EAAE,eAAe,EAAE,GACvB,OAAO,CAAC,OAAO,CAAC;IAEnB;;OAEG;IACH,QAAQ,CAAC,kBAAkB,CACzB,KAAK,EAAE,eAAe,EAAE,EACxB,QAAQ,EAAE,MAAM,GACf,OAAO;IAEV;;OAEG;IACH,QAAQ,CAAC,kBAAkB,CACzB,UAAU,EAAE,eAAe,GAC1B,OAAO,CAAC,MAAM,CAAC;IAElB;;OAEG;IACH,QAAQ,CAAC,gBAAgB,CACvB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;CACjB;AAED;;GAEG;AACH,qBAAa,mBAAmB;IAE5B,OAAO,CAAC,kBAAkB;IAC1B,OAAO,CAAC,kBAAkB;gBADlB,kBAAkB,EAAE,kBAAkB,EACtC,kBAAkB,EAAE,kBAAkB;IAGhD;;;;OAIG;IACG,iBAAiB,CACrB,IAAI,EAAE,GAAG,EACT,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,kBAAkB,CAAC;IAwC9B;;OAEG;IACG,uBAAuB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;CAexD"}