@moltzap/identity 2026.902.0

package/dist/registry/storage.js

@@ -0,0 +1,341 @@
+/** @file Durable Registry persistence for admission, immutable cards, and idempotent operations. */
+import * as Migrator from "@effect/sql/Migrator";
+import { SqlClient } from "@effect/sql/SqlClient";
+import { Clock, Data, Effect, Either, Encoding, Schema } from "effect";
+import { randomBytes } from "node:crypto";
+import { AgentCard, AgentCardIssuedAt, encodeAgentCard, issueAgentCard, } from "../agent-card.js";
+import { ed25519PublicKeyThumbprintUri, } from "../agent-key.js";
+import { decodeCanonicalJson, encodeCanonicalJson } from "../canonical-json.js";
+import { InternalServerError, UnavailableError } from "../http-errors.js";
+import { AgentId } from "../identifiers.js";
+import { MOLTZAP_VERSION } from "../version.js";
+import { registerResponseSchema, } from "./contract.js";
+import { registryMigration } from "./migrations/0001_registry.js";
+/** Storage initialization failed before the Registry became ready. */
+export class RegistryStorageInitializationError extends Data.TaggedError("RegistryStorageInitializationError") {
+}
+/**
+ * Runs migrations and binds the configured signer and version to storage.
+ *
+ * @param input Initialization dependencies.
+ * @param input.sql Exclusive SQL capability for this Registry process.
+ * @param input.registrySignerPublicKey Pinned Registry verification key.
+ * @returns An effect that completes only after storage is ready.
+ */
+export function initializeRegistryStorage(input) {
+    return runStorageInitialization(input).pipe(
+    // eslint-disable-next-line agent-code-guard/no-effect-error-coalescing -- Startup exposes one empty storage phase error and never leaks database or key details.
+    Effect.mapError(() => new RegistryStorageInitializationError()), Effect.catchAllDefect(() => Effect.fail(new RegistryStorageInitializationError())), Effect.withSpan("initializeRegistryStorage"));
+}
+/**
+ * Creates durable Registry operations over one initialized SQL client.
+ *
+ * @param input Storage dependencies and operation bounds.
+ * @param input.sql Initialized SQL capability.
+ * @param input.registrySignerPublicKey Pinned Registry verification key.
+ * @param input.listPageSize Maximum complete cards in one list response.
+ * @param input.operationTimeoutMilliseconds Complete SQL operation deadline.
+ * @returns Durable Registry operations.
+ */
+export function makeRegistryStorage(input) {
+    return Object.freeze({
+        checkReadiness: makeCheckReadiness(input),
+        claimRegistrationNonce: makeClaimRegistrationNonce(input),
+        register: makeRegister(input),
+        lookup: makeLookup(input),
+        list: makeList(input),
+    });
+}
+const AGENT_ID_MINT_ATTEMPTS = 8;
+const migrations = Migrator.fromRecord({
+    "0001_registry": registryMigration,
+});
+const exactStruct = (fields) => Schema.Struct(fields).annotations({
+    parseOptions: { exact: true, onExcessProperty: "error" },
+});
+const metadataRow = exactStruct({
+    moltzapVersion: Schema.String,
+    signerThumbprint: Schema.String,
+});
+const cardRow = exactStruct({
+    agentCardBytes: Schema.Uint8ArrayFromSelf,
+});
+const operationRow = exactStruct({
+    requestBytes: Schema.Uint8ArrayFromSelf,
+    resultBytes: Schema.Uint8ArrayFromSelf,
+});
+const countRow = exactStruct({
+    retained: Schema.Union(Schema.String, Schema.Number),
+});
+const readinessRow = exactStruct({
+    ready: Schema.Literal(1),
+});
+const internalFailure = (effect) => effect.pipe(
+// eslint-disable-next-line agent-code-guard/no-effect-error-coalescing -- Stored bytes and internal cryptographic failures cross one closed, non-diagnostic storage boundary.
+Effect.mapError(() => new InternalServerError()));
+const exactRows = (schema, rows) => internalFailure(Schema.decodeUnknown(Schema.Array(schema))(rows, {
+    exact: true,
+    onExcessProperty: "error",
+})).pipe(Effect.map((decoded) => Object.freeze([...decoded])));
+const withStorageDeadline = (effect, timeoutMilliseconds) => effect.pipe(Effect.catchTag("SqlError", () => Effect.fail(new UnavailableError())), Effect.timeoutFail({
+    duration: timeoutMilliseconds,
+    onTimeout: () => new UnavailableError(),
+}));
+const decodeStoredCard = (bytes, registrySignerPublicKey) => internalFailure(decodeCanonicalJson(AgentCard, bytes).pipe(Effect.flatMap((agentCard) => AgentCard.verify({ agentCard, registrySignerPublicKey }))));
+const encodeResult = (result) => internalFailure(Schema.encode(registerResponseSchema)(result).pipe(Effect.flatMap(encodeCanonicalJson)));
+const decodeResult = (bytes, registrySignerPublicKey) => internalFailure(Effect.gen(function* () {
+    const result = yield* decodeCanonicalJson(registerResponseSchema, bytes);
+    if (result.kind !== "registered") {
+        return Object.freeze({ kind: result.kind });
+    }
+    const agentCard = yield* AgentCard.verify({
+        agentCard: result.agentCard,
+        registrySignerPublicKey,
+    });
+    return Object.freeze({ kind: "registered", agentCard });
+}));
+const sameBytes = (left, right) => left.byteLength === right.byteLength &&
+    left.every((value, index) => value === right[index]);
+const mintAgentId = () => internalFailure(Effect.try({
+    try: () => `agt_${randomBytes(16).toString("base64url")}`,
+    catch: () => new InternalServerError(),
+}).pipe(Effect.flatMap(Schema.decodeUnknown(AgentId))));
+const retainedCount = (rows) => exactRows(countRow, rows).pipe(Effect.map((decoded) => Number(decoded[0]?.retained ?? 0)));
+const mintUnusedAgentId = (sql) => Effect.gen(function* () {
+    for (let attempt = 0; attempt < AGENT_ID_MINT_ATTEMPTS; attempt += 1) {
+        const candidate = yield* mintAgentId();
+        const rows = yield* sql `
+        SELECT COUNT(*)::text AS retained
+        FROM moltzap_registry_agents
+        WHERE agent_id = ${candidate}
+      `;
+        if ((yield* retainedCount(rows)) === 0) {
+            return candidate;
+        }
+    }
+    return yield* new InternalServerError();
+});
+const issueTime = () => internalFailure(Clock.currentTimeMillis.pipe(Effect.map((milliseconds) => new Date(Math.floor(milliseconds / 1_000) * 1_000)
+    .toISOString()
+    .replace(".000Z", "Z")), Effect.flatMap(Schema.decodeUnknown(AgentCardIssuedAt))));
+const decodeAgentIdBytes = (agentId) => Either.match(Encoding.decodeBase64Url(agentId.slice(4)), {
+    onLeft: () => Effect.fail(new InternalServerError()),
+    onRight: Effect.succeed,
+});
+function makeCheckReadiness(input) {
+    return () => withStorageDeadline(input.sql `SELECT 1 AS ready`.pipe(Effect.flatMap((rows) => exactRows(readinessRow, rows)), Effect.flatMap((rows) => rows.length === 1
+        ? Effect.void
+        : Effect.fail(new InternalServerError()))), input.operationTimeoutMilliseconds);
+}
+const ensureMigrationTable = (sql) => sql.unsafe(`
+    CREATE TABLE IF NOT EXISTS moltzap_registry_migrations (
+      migration_id integer PRIMARY KEY,
+      created_at timestamp with time zone NOT NULL DEFAULT now(),
+      name text NOT NULL
+    )
+  `);
+const bindStorageMetadata = (input) => input.sql.withTransaction(Effect.gen(function* () {
+    yield* input.sql `
+        INSERT INTO moltzap_registry_metadata
+          (singleton, moltzap_version, signer_thumbprint)
+        VALUES (true, ${MOLTZAP_VERSION}, ${input.signerThumbprint})
+        ON CONFLICT (singleton) DO NOTHING
+      `;
+    const rows = yield* input.sql `
+        SELECT
+          moltzap_version AS "moltzapVersion",
+          signer_thumbprint AS "signerThumbprint"
+        FROM moltzap_registry_metadata
+        WHERE singleton = true
+        FOR UPDATE
+      `;
+    const metadata = yield* Schema.decodeUnknown(Schema.Tuple(metadataRow))(rows, { exact: true, onExcessProperty: "error" });
+    if (metadata[0].moltzapVersion !== MOLTZAP_VERSION ||
+        metadata[0].signerThumbprint !== input.signerThumbprint) {
+        return yield* Effect.die("Registry metadata mismatch");
+    }
+}));
+function runStorageInitialization(input) {
+    return Effect.gen(function* () {
+        // The PGlite socket closes after Migrator's missing-table probe. Creating
+        // Migrator's own table first keeps every supported database on one path.
+        yield* ensureMigrationTable(input.sql);
+        yield* Migrator.make({})({
+            loader: migrations,
+            table: "moltzap_registry_migrations",
+        }).pipe(Effect.provideService(SqlClient, input.sql));
+        const signerThumbprint = yield* ed25519PublicKeyThumbprintUri(input.registrySignerPublicKey);
+        yield* bindStorageMetadata({ sql: input.sql, signerThumbprint });
+    });
+}
+const claimNonceTransaction = (sql, claim) => sql.withTransaction(Effect.gen(function* () {
+    yield* sql `
+        SELECT singleton FROM moltzap_registry_metadata
+        WHERE singleton = true FOR UPDATE
+      `;
+    yield* sql `
+        DELETE FROM moltzap_registry_nonces
+        WHERE expires_at < ${claim.now}
+      `;
+    const existing = yield* sql `
+        SELECT COUNT(*)::text AS retained
+        FROM moltzap_registry_nonces WHERE nonce = ${claim.nonce}
+      `;
+    if ((yield* retainedCount(existing)) !== 0) {
+        return "replayed";
+    }
+    const retained = yield* sql `
+        SELECT COUNT(*)::text AS retained FROM moltzap_registry_nonces
+      `;
+    if ((yield* retainedCount(retained)) >= claim.capacity) {
+        return "full";
+    }
+    yield* sql `
+        INSERT INTO moltzap_registry_nonces (nonce, expires_at)
+        VALUES (${claim.nonce}, ${claim.expires})
+      `;
+    return "claimed";
+}));
+function makeClaimRegistrationNonce(input) {
+    return (claim) => withStorageDeadline(claimNonceTransaction(input.sql, claim), input.operationTimeoutMilliseconds);
+}
+const findStoredOperation = (sql, keyThumbprint, operationId) => sql `
+    SELECT
+      request_bytes AS "requestBytes",
+      result_bytes AS "resultBytes"
+    FROM moltzap_registry_operations
+    WHERE public_key_thumbprint = ${keyThumbprint}
+      AND operation_id = ${operationId}
+  `.pipe(Effect.flatMap((rows) => exactRows(operationRow, rows)), Effect.map((rows) => rows[0]));
+const keyIsRegistered = (sql, thumbprint) => sql `
+    SELECT COUNT(*)::text AS retained
+    FROM moltzap_registry_agents
+    WHERE public_key_thumbprint = ${thumbprint}
+  `.pipe(Effect.flatMap(retainedCount), Effect.map((retained) => retained > 0));
+const nameIsRegistered = (sql, agentName) => sql `
+    SELECT COUNT(*)::text AS retained
+    FROM moltzap_registry_agents
+    WHERE agent_name = ${agentName}
+  `.pipe(Effect.flatMap(retainedCount), Effect.map((retained) => retained > 0));
+const insertNewAgent = (input, call, keyThumbprint) => Effect.gen(function* () {
+    const agentId = yield* mintUnusedAgentId(input.sql);
+    const issuedAt = yield* issueTime();
+    const agentCard = yield* internalFailure(issueAgentCard({
+        agentId,
+        principalId: call.request.principalId,
+        agentName: call.request.agentName,
+        publicKey: call.request.publicKey,
+        issuedAt,
+        registrySigningAuthority: call.registrySigningAuthority,
+    }));
+    const agentCardBytes = yield* internalFailure(encodeAgentCard(agentCard));
+    const agentIdBytes = yield* decodeAgentIdBytes(agentId);
+    yield* input.sql `
+      INSERT INTO moltzap_registry_agents
+        (agent_id, agent_id_bytes, principal_id, agent_name,
+         public_key_thumbprint, agent_card_bytes)
+      VALUES
+        (${agentId}, ${agentIdBytes}, ${call.request.principalId},
+         ${call.request.agentName}, ${keyThumbprint}, ${agentCardBytes})
+    `;
+    return Object.freeze({ kind: "registered", agentCard });
+});
+const decideRegistration = (input, call, keyThumbprint) => Effect.gen(function* () {
+    if (yield* keyIsRegistered(input.sql, keyThumbprint)) {
+        return Object.freeze({ kind: "key_already_registered" });
+    }
+    if (yield* nameIsRegistered(input.sql, call.request.agentName)) {
+        return Object.freeze({ kind: "name_taken" });
+    }
+    return yield* insertNewAgent(input, call, keyThumbprint);
+});
+const recordOperation = (input) => input.sql `
+    INSERT INTO moltzap_registry_operations
+      (public_key_thumbprint, operation_id, request_bytes, result_bytes)
+    VALUES
+      (${input.keyThumbprint}, ${input.operationId},
+       ${input.requestBytes}, ${input.resultBytes})
+  `;
+const registerTransaction = (input, call, keyThumbprint) => input.sql.withTransaction(Effect.gen(function* () {
+    yield* input.sql `
+        SELECT singleton FROM moltzap_registry_metadata
+        WHERE singleton = true FOR UPDATE
+      `;
+    const previous = yield* findStoredOperation(input.sql, keyThumbprint, call.request.operationId);
+    if (previous !== undefined) {
+        return sameBytes(previous.requestBytes, call.requestBytes)
+            ? yield* decodeResult(previous.resultBytes, input.registrySignerPublicKey)
+            : Object.freeze({ kind: "idempotency_conflict" });
+    }
+    const result = yield* decideRegistration(input, call, keyThumbprint);
+    const resultBytes = yield* encodeResult(result);
+    yield* recordOperation({
+        sql: input.sql,
+        keyThumbprint,
+        operationId: call.request.operationId,
+        requestBytes: call.requestBytes,
+        resultBytes,
+    });
+    return result;
+}));
+function makeRegister(input) {
+    return (call) => withStorageDeadline(internalFailure(ed25519PublicKeyThumbprintUri(call.request.publicKey)).pipe(Effect.flatMap((thumbprint) => registerTransaction(input, call, thumbprint))), input.operationTimeoutMilliseconds);
+}
+const findCardRows = (sql, request) => "agentId" in request
+    ? sql `
+        SELECT agent_card_bytes AS "agentCardBytes"
+        FROM moltzap_registry_agents
+        WHERE agent_id = ${request.agentId}
+      `
+    : sql `
+        SELECT agent_card_bytes AS "agentCardBytes"
+        FROM moltzap_registry_agents
+        WHERE agent_name = ${request.agentName}
+      `;
+function makeLookup(input) {
+    return (request) => withStorageDeadline(Effect.gen(function* () {
+        const cards = yield* findCardRows(input.sql, request).pipe(Effect.flatMap((rows) => exactRows(cardRow, rows)));
+        const card = cards[0];
+        if (card === undefined) {
+            return Object.freeze({ kind: "not_found" });
+        }
+        if (cards.length !== 1) {
+            return yield* new InternalServerError();
+        }
+        const agentCard = yield* decodeStoredCard(card.agentCardBytes, input.registrySignerPublicKey);
+        return Object.freeze({ kind: "found", agentCard });
+    }), input.operationTimeoutMilliseconds);
+}
+const readListRows = (input, afterBytes) => {
+    const maximumRows = input.listPageSize + 1;
+    return afterBytes === undefined
+        ? input.sql `
+        SELECT agent_card_bytes AS "agentCardBytes"
+        FROM moltzap_registry_agents
+        ORDER BY agent_id_bytes ASC
+        LIMIT ${maximumRows}
+      `
+        : input.sql `
+        SELECT agent_card_bytes AS "agentCardBytes"
+        FROM moltzap_registry_agents
+        WHERE agent_id_bytes > ${afterBytes}
+        ORDER BY agent_id_bytes ASC
+        LIMIT ${maximumRows}
+      `;
+};
+function makeList(input) {
+    return (request) => withStorageDeadline(Effect.gen(function* () {
+        const afterBytes = request.afterAgentId === undefined
+            ? undefined
+            : yield* decodeAgentIdBytes(request.afterAgentId);
+        const cardRows = yield* readListRows(input, afterBytes).pipe(Effect.flatMap((rows) => exactRows(cardRow, rows)));
+        const hasMore = cardRows.length > input.listPageSize;
+        const agentCards = yield* Effect.forEach(cardRows.slice(0, input.listPageSize), (row) => decodeStoredCard(row.agentCardBytes, input.registrySignerPublicKey), { concurrency: 1 });
+        return Object.freeze({
+            kind: "page",
+            agentCards: Object.freeze(agentCards),
+            hasMore,
+        });
+    }), input.operationTimeoutMilliseconds);
+}
+//# sourceMappingURL=storage.js.map

package/dist/registry/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../src/registry/storage.ts"],"names":[],"mappings":"AAAA,oGAAoG;AAGpG,OAAO,KAAK,QAAQ,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,eAAe,EACf,cAAc,GAEf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAGL,6BAA6B,GAC9B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAgC,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EACL,sBAAsB,GAOvB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAElE,sEAAsE;AACtE,MAAM,OAAO,kCAAmC,SAAQ,IAAI,CAAC,WAAW,CACtE,oCAAoC,CACrC;CAAG;AAuCJ;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAGzC;IACC,OAAO,wBAAwB,CAAC,KAAK,CAAC,CAAC,IAAI;IACzC,iKAAiK;IACjK,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,kCAAkC,EAAE,CAAC,EAC/D,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,CACzB,MAAM,CAAC,IAAI,CAAC,IAAI,kCAAkC,EAAE,CAAC,CACtD,EACD,MAAM,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAC7C,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAmB;IACrD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,cAAc,EAAE,kBAAkB,CAAC,KAAK,CAAC;QACzC,sBAAsB,EAAE,0BAA0B,CAAC,KAAK,CAAC;QACzD,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC;QAC7B,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC;QACzB,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACjC,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;IACrC,eAAe,EAAE,iBAAiB;CACnC,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAsC,MAAc,EAAE,EAAE,CAC1E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC;IAChC,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE;CACzD,CAAC,CAAC;AACL,MAAM,WAAW,GAAG,WAAW,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC,MAAM;IAC7B,gBAAgB,EAAE,MAAM,CAAC,MAAM;CAChC,CAAC,CAAC;AACH,MAAM,OAAO,GAAG,WAAW,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC,kBAAkB;CAC1C,CAAC,CAAC;AACH,MAAM,YAAY,GAAG,WAAW,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC,kBAAkB;IACvC,WAAW,EAAE,MAAM,CAAC,kBAAkB;CACvC,CAAC,CAAC;AACH,MAAM,QAAQ,GAAG,WAAW,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;CACrD,CAAC,CAAC;AACH,MAAM,YAAY,GAAG,WAAW,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;CACzB,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CACtB,MAA8B,EACY,EAAE,CAC5C,MAAM,CAAC,IAAI;AACT,8KAA8K;AAC9K,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,mBAAmB,EAAE,CAAC,CACjD,CAAC;AAEJ,MAAM,SAAS,GAAG,CAChB,MAA2B,EAC3B,IAAa,EACqC,EAAE,CACpD,eAAe,CACb,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE;IAC/C,KAAK,EAAE,IAAI;IACX,gBAAgB,EAAE,OAAO;CAC1B,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAE/D,MAAM,mBAAmB,GAAG,CAC1B,MAAwD,EACxD,mBAA2B,EACK,EAAE,CAClC,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,gBAAgB,EAAE,CAAC,CAAC,EACtE,MAAM,CAAC,WAAW,CAAC;IACjB,QAAQ,EAAE,mBAAmB;IAC7B,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,gBAAgB,EAAE;CACxC,CAAC,CACH,CAAC;AAEJ,MAAM,gBAAgB,GAAG,CACvB,KAAiB,EACjB,uBAAyC,EACc,EAAE,CACzD,eAAe,CACb,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,IAAI,CACxC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAC3B,SAAS,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,uBAAuB,EAAE,CAAC,CACzD,CACF,CACF,CAAC;AAEJ,MAAM,YAAY,GAAG,CACnB,MAA8B,EACkB,EAAE,CAClD,eAAe,CACb,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAChD,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,CACpC,CACF,CAAC;AAEJ,MAAM,YAAY,GAAG,CACnB,KAAiB,EACjB,uBAAyC,EACmB,EAAE,CAC9D,eAAe,CACb,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;IACzE,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC;QACxC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,uBAAuB;KACxB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;AAC1D,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,SAAS,GAAG,CAAC,IAAgB,EAAE,KAAiB,EAAW,EAAE,CACjE,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;IACpC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AAEvD,MAAM,WAAW,GAAG,GAAqD,EAAE,CACzE,eAAe,CACb,MAAM,CAAC,GAAG,CAAC;IACT,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE;IACzD,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,mBAAmB,EAAE;CACvC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CACvD,CAAC;AAEJ,MAAM,aAAa,GAAG,CACpB,IAAa,EAC+B,EAAE,CAC9C,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,CAC5B,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAC,CAC3D,CAAC;AAEJ,MAAM,iBAAiB,GAAG,CACxB,GAAc,EAC+C,EAAE,CAC/D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,sBAAsB,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACrE,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAA;;;2BAGF,SAAS;OAC7B,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,IAAI,mBAAmB,EAAE,CAAC;AAC1C,CAAC,CAAC,CAAC;AAEL,MAAM,SAAS,GAAG,GAGhB,EAAE,CACF,eAAe,CACb,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAC1B,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC;KAC/C,WAAW,EAAE;KACb,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CACzB,EACD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC,CACxD,CACF,CAAC;AAEJ,MAAM,kBAAkB,GAAG,CACzB,OAAqB,EAC2B,EAAE,CAClD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;IACvD,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,mBAAmB,EAAE,CAAC;IACpD,OAAO,EAAE,MAAM,CAAC,OAAO;CACxB,CAAC,CAAC;AAEL,SAAS,kBAAkB,CACzB,KAAmB;IAEnB,OAAO,GAAG,EAAE,CACV,mBAAmB,CACjB,KAAK,CAAC,GAAG,CAAA,mBAAmB,CAAC,IAAI,CAC/B,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,EACvD,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACtB,IAAI,CAAC,MAAM,KAAK,CAAC;QACf,CAAC,CAAC,MAAM,CAAC,IAAI;QACb,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,mBAAmB,EAAE,CAAC,CAC3C,CACF,EACD,KAAK,CAAC,4BAA4B,CACnC,CAAC;AACN,CAAC;AAED,MAAM,oBAAoB,GAAG,CAAC,GAAc,EAAE,EAAE,CAC9C,GAAG,CAAC,MAAM,CAAC;;;;;;GAMV,CAAC,CAAC;AAEL,MAAM,mBAAmB,GAAG,CAAC,KAG5B,EAAE,EAAE,CACH,KAAK,CAAC,GAAG,CAAC,eAAe,CACvB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAA;;;wBAGE,eAAe,KAAK,KAAK,CAAC,gBAAgB;;OAE3D,CAAC;IACF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAA;;;;;;;OAO5B,CAAC;IACF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CACrE,IAAI,EACJ,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAC3C,CAAC;IACF,IACE,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,KAAK,eAAe;QAC9C,QAAQ,CAAC,CAAC,CAAC,CAAC,gBAAgB,KAAK,KAAK,CAAC,gBAAgB,EACvD,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IACzD,CAAC;AACH,CAAC,CAAC,CACH,CAAC;AAEJ,SAAS,wBAAwB,CAAC,KAGjC;IACC,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,0EAA0E;QAC1E,yEAAyE;QACzE,KAAK,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvC,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACvB,MAAM,EAAE,UAAU;YAClB,KAAK,EAAE,6BAA6B;SACrC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACrD,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,6BAA6B,CAC3D,KAAK,CAAC,uBAAuB,CAC9B,CAAC;QACF,KAAK,CAAC,CAAC,mBAAmB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,qBAAqB,GAAG,CAC5B,GAAc,EACd,KAA+D,EAC/D,EAAE,CACF,GAAG,CAAC,eAAe,CACjB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,KAAK,CAAC,CAAC,GAAG,CAAA;;;OAGT,CAAC;IACF,KAAK,CAAC,CAAC,GAAG,CAAA;;6BAEa,KAAK,CAAC,GAAG;OAC/B,CAAC;IACF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAA;;qDAEoB,KAAK,CAAC,KAAK;OACzD,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,OAAO,UAAmB,CAAC;IAC7B,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAA;;OAE1B,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACvD,OAAO,MAAe,CAAC;IACzB,CAAC;IACD,KAAK,CAAC,CAAC,GAAG,CAAA;;kBAEE,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,OAAO;OACxC,CAAC;IACF,OAAO,SAAkB,CAAC;AAC5B,CAAC,CAAC,CACH,CAAC;AAEJ,SAAS,0BAA0B,CACjC,KAAmB;IAEnB,OAAO,CAAC,KAAK,EAAE,EAAE,CACf,mBAAmB,CACjB,qBAAqB,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,EACvC,KAAK,CAAC,4BAA4B,CACnC,CAAC;AACN,CAAC;AAED,MAAM,mBAAmB,GAAG,CAC1B,GAAc,EACd,aAAqB,EACrB,WAAmD,EACyB,EAAE,CAC9E,GAAG,CAAA;;;;;oCAK+B,aAAa;2BACtB,WAAW;GACnC,CAAC,IAAI,CACJ,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,EACvD,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAC9B,CAAC;AAEJ,MAAM,eAAe,GAAG,CAAC,GAAc,EAAE,UAAkB,EAAE,EAAE,CAC7D,GAAG,CAAA;;;oCAG+B,UAAU;GAC3C,CAAC,IAAI,CACJ,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,GAAG,CAAC,CAAC,CACvC,CAAC;AAEJ,MAAM,gBAAgB,GAAG,CACvB,GAAc,EACd,SAA+C,EAC/C,EAAE,CACF,GAAG,CAAA;;;yBAGoB,SAAS;GAC/B,CAAC,IAAI,CACJ,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,GAAG,CAAC,CAAC,CACvC,CAAC;AAEJ,MAAM,cAAc,GAAG,CACrB,KAAmB,EACnB,IAAmB,EACnB,aAAqB,EACkD,EAAE,CACzE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC;IACpC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,eAAe,CACtC,cAAc,CAAC;QACb,OAAO;QACP,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;QACrC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;QACjC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;QACjC,QAAQ;QACR,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;KACxD,CAAC,CACH,CAAC;IACF,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1E,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACxD,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAA;;;;;WAKT,OAAO,KAAK,YAAY,KAAK,IAAI,CAAC,OAAO,CAAC,WAAW;WACrD,IAAI,CAAC,OAAO,CAAC,SAAS,KAAK,aAAa,KAAK,cAAc;KACjE,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;AAC1D,CAAC,CAAC,CAAC;AAEL,MAAM,kBAAkB,GAAG,CACzB,KAAmB,EACnB,IAAmB,EACnB,aAAqB,EACrB,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IAAI,KAAK,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,CAAC;QACrD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAW,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,KAAK,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/D,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,YAAY,EAAW,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;AAC3D,CAAC,CAAC,CAAC;AAEL,MAAM,eAAe,GAAG,CAAC,KAMxB,EAAE,EAAE,CACH,KAAK,CAAC,GAAG,CAAA;;;;SAIF,KAAK,CAAC,aAAa,KAAK,KAAK,CAAC,WAAW;SACzC,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC,WAAW;GAC9C,CAAC;AAEJ,MAAM,mBAAmB,GAAG,CAC1B,KAAmB,EACnB,IAAmB,EACnB,aAAqB,EACrB,EAAE,CACF,KAAK,CAAC,GAAG,CAAC,eAAe,CACvB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAA;;;OAGf,CAAC;IACF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,mBAAmB,CACzC,KAAK,CAAC,GAAG,EACT,aAAa,EACb,IAAI,CAAC,OAAO,CAAC,WAAW,CACzB,CAAC;IACF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC;YACxD,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY,CACjB,QAAQ,CAAC,WAAW,EACpB,KAAK,CAAC,uBAAuB,CAC9B;YACH,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAW,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAChD,KAAK,CAAC,CAAC,eAAe,CAAC;QACrB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,aAAa;QACb,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;QACrC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,WAAW;KACZ,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC,CACH,CAAC;AAEJ,SAAS,YAAY,CAAC,KAAmB;IACvC,OAAO,CAAC,IAAI,EAAE,EAAE,CACd,mBAAmB,CACjB,eAAe,CACb,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CACtD,CAAC,IAAI,CACJ,MAAM,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAC5B,mBAAmB,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,CAC7C,CACF,EACD,KAAK,CAAC,4BAA4B,CACnC,CAAC;AACN,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,GAAc,EAAE,OAA8B,EAAE,EAAE,CACtE,SAAS,IAAI,OAAO;IAClB,CAAC,CAAC,GAAG,CAAA;;;2BAGkB,OAAO,CAAC,OAAO;OACnC;IACH,CAAC,CAAC,GAAG,CAAA;;;6BAGoB,OAAO,CAAC,SAAS;OACvC,CAAC;AAER,SAAS,UAAU,CAAC,KAAmB;IACrC,OAAO,CAAC,OAAO,EAAE,EAAE,CACjB,mBAAmB,CACjB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,IAAI,CACxD,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CACnD,CAAC;QACF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAW,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC,CAAC,IAAI,mBAAmB,EAAE,CAAC;QAC1C,CAAC;QACD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,gBAAgB,CACvC,IAAI,CAAC,cAAc,EACnB,KAAK,CAAC,uBAAuB,CAC9B,CAAC;QACF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAW,CAAC,CAAC;IAC9D,CAAC,CAAC,EACF,KAAK,CAAC,4BAA4B,CACnC,CAAC;AACN,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,KAAmB,EAAE,UAAuB,EAAE,EAAE;IACpE,MAAM,WAAW,GAAG,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC;IAC3C,OAAO,UAAU,KAAK,SAAS;QAC7B,CAAC,CAAC,KAAK,CAAC,GAAG,CAAA;;;;gBAIC,WAAW;OACpB;QACH,CAAC,CAAC,KAAK,CAAC,GAAG,CAAA;;;iCAGkB,UAAU;;gBAE3B,WAAW;OACpB,CAAC;AACR,CAAC,CAAC;AAEF,SAAS,QAAQ,CAAC,KAAmB;IACnC,OAAO,CAAC,OAAO,EAAE,EAAE,CACjB,mBAAmB,CACjB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,UAAU,GACd,OAAO,CAAC,YAAY,KAAK,SAAS;YAChC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,IAAI,CAC1D,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CACnD,CAAC;QACF,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC;QACrD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CACtC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,EACrC,CAAC,GAAG,EAAE,EAAE,CACN,gBAAgB,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,uBAAuB,CAAC,EACrE,EAAE,WAAW,EAAE,CAAC,EAAE,CACnB,CAAC;QACF,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,MAAM;YACZ,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;YACrC,OAAO;SACR,CAAC,CAAC;IACL,CAAC,CAAC,EACF,KAAK,CAAC,4BAA4B,CACnC,CAAC;AACN,CAAC"}

package/dist/registry.d.ts

@@ -0,0 +1,34 @@
+/** @file Public Registry capability and its package-owned contract exports. */
+import type { HttpClient } from "@effect/platform";
+import { Context, type Duration, Effect, Layer } from "effect";
+import type { Ed25519PublicKey } from "./agent-key.js";
+import type { RegistryClientService } from "./registry/contract.js";
+/** Closed Registry requests, verified results, and client failures. */
+export { OperationId, RegistryConnectionError, RegistryInvalidResponseError, RegistryListRequest, type RegistryListResult, RegistryLookupRequest, type RegistryLookupResult, RegistryRegisterRequest, type RegistryRegisterResult, RegistryRequestTimeoutError, } from "./registry/contract.js";
+declare const Registry_base: Context.TagClass<Registry, "@moltzap/identity/Registry", RegistryClientService>;
+/** Bootstrap registration and immutable identity resolution. */
+export declare class Registry extends Registry_base {
+    static readonly register: (input: Readonly<{
+        request: import("./registry.js").RegistryRegisterRequest;
+        admissionCredential: import("effect/Redacted").Redacted;
+        signingAuthority: import("./agent-key.js").AgentSigningAuthority;
+    }>) => Effect.Effect<import("./registry.js").RegistryRegisterResult, import("./http-signature.js").AgentSigningError | import("./http-errors.js").HttpEnvelopeError | (import("./registry.js").RegistryConnectionError | import("./registry.js").RegistryInvalidResponseError | import("./registry.js").RegistryRequestTimeoutError), Registry>;
+    static readonly lookup: (request: {
+        readonly agentId: string & import("effect/Brand").Brand<"AgentId">;
+    } | {
+        readonly agentName: string & import("effect/Brand").Brand<"AgentName">;
+    }) => Effect.Effect<import("./registry.js").RegistryLookupResult, (import("./registry.js").RegistryConnectionError | import("./registry.js").RegistryInvalidResponseError | import("./registry.js").RegistryRequestTimeoutError) | import("./registry/contract.js").RegistryPublicReadError, Registry>;
+    static readonly list: (request: {
+        readonly afterAgentId?: (string & import("effect/Brand").Brand<"AgentId">) | undefined;
+    }) => Effect.Effect<Readonly<{
+        kind: "page";
+        agentCards: readonly import("./agent-card.js").VerifiedAgentCard[];
+        hasMore: boolean;
+    }>, (import("./registry.js").RegistryConnectionError | import("./registry.js").RegistryInvalidResponseError | import("./registry.js").RegistryRequestTimeoutError) | import("./registry/contract.js").RegistryPublicReadError, Registry>;
+    static readonly layer: (input: {
+        readonly origin: URL;
+        readonly registrySignerPublicKey: Ed25519PublicKey;
+        readonly requestTimeout: Duration.Duration;
+    }) => Layer.Layer<Registry, never, HttpClient.HttpClient>;
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAE/E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAC/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAGpE,uEAAuE;AACvE,OAAO,EACL,WAAW,EACX,uBAAuB,EACvB,4BAA4B,EAC5B,mBAAmB,EACnB,KAAK,kBAAkB,EACvB,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,uBAAuB,EACvB,KAAK,sBAAsB,EAC3B,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;;AAEhC,gEAAgE;AAChE,qBAAa,QAAS,SAAQ,aAG3B;IACD,MAAM,CAAC,QAAQ,CAAC,QAAQ;;;;oVAGtB;IAEF,MAAM,CAAC,QAAQ,CAAC,MAAM;;;;2SAGpB;IAEF,MAAM,CAAC,QAAQ,CAAC,IAAI;;;;;;6OAGlB;IAEF,MAAM,CAAC,QAAQ,CAAC,KAAK,UAAW;QAC9B,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC;QACrB,QAAQ,CAAC,uBAAuB,EAAE,gBAAgB,CAAC;QACnD,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC;KAC5C,KAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,UAAU,CAAC,CACF;CACtD"}

package/dist/registry.js

@@ -0,0 +1,13 @@
+/** @file Public Registry capability and its package-owned contract exports. */
+import { Context, Effect, Layer } from "effect";
+import { makeRegistryService } from "./registry/client.js";
+/** Closed Registry requests, verified results, and client failures. */
+export { OperationId, RegistryConnectionError, RegistryInvalidResponseError, RegistryListRequest, RegistryLookupRequest, RegistryRegisterRequest, RegistryRequestTimeoutError, } from "./registry/contract.js";
+/** Bootstrap registration and immutable identity resolution. */
+export class Registry extends Context.Tag("@moltzap/identity/Registry")() {
+    static register = Effect.serviceFunctionEffect(Registry, (service) => service.register);
+    static lookup = Effect.serviceFunctionEffect(Registry, (service) => service.lookup);
+    static list = Effect.serviceFunctionEffect(Registry, (service) => service.list);
+    static layer = (input) => Layer.effect(Registry, makeRegistryService(input));
+}
+//# sourceMappingURL=registry.js.map

package/dist/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAG/E,OAAO,EAAE,OAAO,EAAiB,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAG/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D,uEAAuE;AACvE,OAAO,EACL,WAAW,EACX,uBAAuB,EACvB,4BAA4B,EAC5B,mBAAmB,EAEnB,qBAAqB,EAErB,uBAAuB,EAEvB,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAEhC,gEAAgE;AAChE,MAAM,OAAO,QAAS,SAAQ,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,EAGpE;IACD,MAAM,CAAU,QAAQ,GAAG,MAAM,CAAC,qBAAqB,CACrD,QAAQ,EACR,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAC9B,CAAC;IAEF,MAAM,CAAU,MAAM,GAAG,MAAM,CAAC,qBAAqB,CACnD,QAAQ,EACR,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAC5B,CAAC;IAEF,MAAM,CAAU,IAAI,GAAG,MAAM,CAAC,qBAAqB,CACjD,QAAQ,EACR,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAC1B,CAAC;IAEF,MAAM,CAAU,KAAK,GAAG,CAAC,KAIxB,EAAuD,EAAE,CACxD,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;CACtD"}

package/dist/signed-message.d.ts

@@ -0,0 +1,54 @@
+/** @file Canonical end-to-end signed message representation, signing, and verification. */
+import { Brand, Effect, Schema } from "effect";
+import { type AgentCardDigest as AgentCardDigestValue, type VerifiedAgentCard } from "./agent-card.js";
+import { type AgentSigningAuthority as AgentSigningAuthorityValue } from "./agent-key.js";
+import { type AgentId as AgentIdValue } from "./identifiers.js";
+/** Sender-scoped identity of one attributed message. */
+export declare const MessageId: Schema.brand<Schema.filter<typeof Schema.String>, "MessageId">;
+/** Validated nominal value decoded by MessageId. */
+export type MessageId = typeof MessageId.Type;
+/** Immutable attributed-message fields exposed to Router consumers. */
+export interface SignedMessage {
+    readonly senderAgentId: AgentIdValue;
+    readonly agentCardDigest: AgentCardDigestValue;
+    readonly recipientAgentIds: readonly AgentIdValue[];
+    readonly messageId: MessageId;
+    readonly body: Uint8Array;
+}
+/** SignedMessage whose sender attribution and signature are verified. */
+export type VerifiedSignedMessage = SignedMessage & Brand.Brand<"VerifiedSignedMessage">;
+declare const SignedMessageSigningError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "SignedMessageSigningError";
+} & Readonly<A>;
+/** A message cannot be signed under the supplied immutable identity. */
+export declare class SignedMessageSigningError extends SignedMessageSigningError_base {
+}
+declare const SignedMessageVerificationError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "SignedMessageVerificationError";
+} & Readonly<A>;
+/** A SignedMessage does not bind to the supplied verified AgentCard. */
+export declare class SignedMessageVerificationError extends SignedMessageVerificationError_base {
+}
+interface SignInput {
+    readonly agentCard: VerifiedAgentCard;
+    readonly signingAuthority: AgentSigningAuthorityValue;
+    readonly recipientAgentIds: ReadonlySet<AgentIdValue>;
+    readonly messageId: MessageId;
+    readonly body: Uint8Array;
+}
+declare const sign: (input: SignInput) => Effect.Effect<VerifiedSignedMessage, SignedMessageSigningError>;
+interface VerifyInput {
+    readonly signedMessage: SignedMessage;
+    readonly agentCard: VerifiedAgentCard;
+}
+declare const verify: (input: VerifyInput) => Effect.Effect<VerifiedSignedMessage, SignedMessageVerificationError>;
+declare const encodedByteLength: (signedMessage: SignedMessage) => number;
+/** Opaque attributed message operations and exact representation Schema. */
+export declare const SignedMessage: Schema.Schema<SignedMessage, unknown> & Readonly<{
+    readonly sign: typeof sign;
+    readonly verify: typeof verify;
+    readonly encodedByteLength: typeof encodedByteLength;
+    readonly maximumEncodedByteLength: number;
+}>;
+export {};
+//# sourceMappingURL=signed-message.d.ts.map

package/dist/signed-message.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signed-message.d.ts","sourceRoot":"","sources":["../src/signed-message.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAE3F,OAAO,EACL,KAAK,EAEL,MAAM,EAIN,MAAM,EAEP,MAAM,QAAQ,CAAC;AAEhB,OAAO,EAEL,KAAK,eAAe,IAAI,oBAAoB,EAE5C,KAAK,iBAAiB,EACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEL,KAAK,qBAAqB,IAAI,0BAA0B,EAIzD,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAEL,KAAK,OAAO,IAAI,YAAY,EAE7B,MAAM,kBAAkB,CAAC;AAG1B,wDAAwD;AAExD,eAAO,MAAM,SAAS,gEAA+C,CAAC;AACtE,oDAAoD;AAEpD,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,IAAI,CAAC;AAiH9C,uEAAuE;AACvE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,aAAa,EAAE,YAAY,CAAC;IACrC,QAAQ,CAAC,eAAe,EAAE,oBAAoB,CAAC;IAC/C,QAAQ,CAAC,iBAAiB,EAAE,SAAS,YAAY,EAAE,CAAC;IACpD,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;CAC3B;AAmID,yEAAyE;AACzE,MAAM,MAAM,qBAAqB,GAAG,aAAa,GAC/C,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;;;;AAIvC,wEAAwE;AACxE,qBAAa,yBAA0B,SAAQ,8BAE9C;CAAG;;;;AAEJ,wEAAwE;AACxE,qBAAa,8BAA+B,SAAQ,mCAEnD;CAAG;AAgBJ,UAAU,SAAS;IACjB,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,gBAAgB,EAAE,0BAA0B,CAAC;IACtD,QAAQ,CAAC,iBAAiB,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC;IACtD,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;CAC3B;AA2DD,QAAA,MAAM,IAAI,UACD,SAAS,KACf,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,yBAAyB,CAiB7D,CAAC;AAEL,UAAU,WAAW;IACnB,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;CACvC;AAED,QAAA,MAAM,MAAM,UACH,WAAW,KACjB,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,8BAA8B,CA8ClE,CAAC;AAEL,QAAA,MAAM,iBAAiB,kBAAmB,aAAa,KAAG,MACD,CAAC;AAK1D,4EAA4E;AAC5E,eAAO,MAAM,aAAa,EAKpB,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,GACzC,QAAQ,CAAC;IACP,QAAQ,CAAC,IAAI,EAAE,OAAO,IAAI,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,OAAO,MAAM,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,OAAO,iBAAiB,CAAC;IACrD,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;CAC3C,CAAC,CAAC"}