@nexart/codemode-sdk 1.8.4 → 1.9.0

package/dist/esm/core.js

@@ -1,5 +1,8 @@
+import { hashes, verify } from '@noble/ed25519';
+import { sha512 } from '@noble/hashes/sha2.js';
+
 // version.ts
-var SDK_VERSION = "1.8.4";
+var SDK_VERSION = "1.9.0";
 var PROTOCOL_VERSION = "1.2.0";
 var PROTOCOL_PHASE = 3;
 
@@ -22,6 +25,20 @@ var DEFAULT_CONFIG = {
   minDuration: 1,
   maxDuration: 4
 };
+var CodeVerifyCode = {
+  OK: "OK",
+  CERTIFICATE_HASH_MISMATCH: "CERTIFICATE_HASH_MISMATCH",
+  SNAPSHOT_HASH_MISMATCH: "SNAPSHOT_HASH_MISMATCH",
+  RENDER_HASH_MISMATCH: "RENDER_HASH_MISMATCH",
+  INVALID_SHA256_FORMAT: "INVALID_SHA256_FORMAT",
+  CANONICALIZATION_ERROR: "CANONICALIZATION_ERROR",
+  SCHEMA_ERROR: "SCHEMA_ERROR",
+  NODE_RECEIPT_MISSING: "NODE_RECEIPT_MISSING",
+  NODE_RECEIPT_KEY_NOT_FOUND: "NODE_RECEIPT_KEY_NOT_FOUND",
+  NODE_RECEIPT_INVALID_SIGNATURE: "NODE_RECEIPT_INVALID_SIGNATURE",
+  NODE_RECEIPT_KEY_FORMAT_UNSUPPORTED: "NODE_RECEIPT_KEY_FORMAT_UNSUPPORTED",
+  UNKNOWN_ERROR: "UNKNOWN_ERROR"
+};
 
 // p5-runtime.ts
 var CODE_MODE_PROTOCOL_VERSION = PROTOCOL_VERSION;
@@ -1629,8 +1646,321 @@ function createEngine(config) {
   };
 }
 
+// canonicalJson.ts
+function toCanonicalJson(value) {
+  if (value === null) return "null";
+  if (typeof value === "boolean") return value ? "true" : "false";
+  if (typeof value === "number") {
+    if (!isFinite(value)) throw new Error(`toCanonicalJson: non-finite number ${value}`);
+    return JSON.stringify(value);
+  }
+  if (typeof value === "string") return JSON.stringify(value);
+  if (Array.isArray(value)) {
+    return "[" + value.map(toCanonicalJson).join(",") + "]";
+  }
+  if (typeof value === "object") {
+    const obj = value;
+    const keys = Object.keys(obj).sort();
+    return "{" + keys.filter((k) => obj[k] !== void 0 && typeof obj[k] !== "function").map((k) => `${JSON.stringify(k)}:${toCanonicalJson(obj[k])}`).join(",") + "}";
+  }
+  throw new Error(`toCanonicalJson: unsupported type ${typeof value}`);
+}
+
+// nodeReceipt.ts
+hashes.sha512 = sha512;
+function base64urlToBytes(s) {
+  const pad = s.length % 4;
+  const base64 = s.replace(/-/g, "+").replace(/_/g, "/") + (pad ? "=".repeat(4 - pad) : "");
+  if (typeof Buffer !== "undefined") {
+    return new Uint8Array(Buffer.from(base64, "base64"));
+  }
+  const binary = atob(base64);
+  return Uint8Array.from(binary, (c) => c.charCodeAt(0));
+}
+async function verifyNodeReceiptSignature(params) {
+  try {
+    const { receipt, signatureB64Url, key } = params;
+    let pubKeyBytes;
+    if (key.jwk) {
+      if (key.jwk.kty !== "OKP" || key.jwk.crv !== "Ed25519") {
+        return {
+          ok: false,
+          code: CodeVerifyCode.NODE_RECEIPT_KEY_FORMAT_UNSUPPORTED,
+          details: [
+            `JWK must have kty=OKP and crv=Ed25519, got kty=${key.jwk.kty} crv=${key.jwk.crv}`
+          ]
+        };
+      }
+      pubKeyBytes = base64urlToBytes(key.jwk.x);
+    } else if (key.rawB64Url) {
+      pubKeyBytes = base64urlToBytes(key.rawB64Url);
+    } else if (key.spkiB64) {
+      const spkiBytes = base64urlToBytes(key.spkiB64);
+      if (spkiBytes.length < 32) {
+        return {
+          ok: false,
+          code: CodeVerifyCode.NODE_RECEIPT_KEY_FORMAT_UNSUPPORTED,
+          details: ["SPKI key too short to extract Ed25519 public key"]
+        };
+      }
+      pubKeyBytes = spkiBytes.slice(spkiBytes.length - 32);
+    } else {
+      return {
+        ok: false,
+        code: CodeVerifyCode.NODE_RECEIPT_KEY_FORMAT_UNSUPPORTED,
+        details: ["No usable key provided: supply jwk, rawB64Url, or spkiB64"]
+      };
+    }
+    if (pubKeyBytes.length !== 32) {
+      return {
+        ok: false,
+        code: CodeVerifyCode.NODE_RECEIPT_KEY_FORMAT_UNSUPPORTED,
+        details: [`Ed25519 public key must be 32 bytes, got ${pubKeyBytes.length}`]
+      };
+    }
+    const sigBytes = base64urlToBytes(signatureB64Url);
+    if (sigBytes.length !== 64) {
+      return {
+        ok: false,
+        code: CodeVerifyCode.NODE_RECEIPT_INVALID_SIGNATURE,
+        details: [`Ed25519 signature must be 64 bytes, got ${sigBytes.length}`]
+      };
+    }
+    const msgBytes = new TextEncoder().encode(toCanonicalJson(receipt));
+    const isValid = await verify(sigBytes, msgBytes, pubKeyBytes);
+    if (!isValid) {
+      return {
+        ok: false,
+        code: CodeVerifyCode.NODE_RECEIPT_INVALID_SIGNATURE,
+        details: ["Ed25519 signature verification failed"]
+      };
+    }
+    return { ok: true, code: CodeVerifyCode.OK };
+  } catch (err) {
+    return {
+      ok: false,
+      code: CodeVerifyCode.NODE_RECEIPT_INVALID_SIGNATURE,
+      details: [err instanceof Error ? err.message : String(err)]
+    };
+  }
+}
+async function fetchNodeKeys(nodeUrl) {
+  const url = `${nodeUrl.replace(/\/+$/, "")}/.well-known/nexart-node.json`;
+  const response = await fetch(url);
+  if (!response.ok) {
+    throw new Error(`Failed to fetch node keys from ${url}: HTTP ${response.status}`);
+  }
+  const data = await response.json();
+  if (typeof data !== "object" || data === null) {
+    throw new Error("Node keys response is not an object");
+  }
+  const doc = data;
+  if (typeof doc.nodeId !== "string" || !Array.isArray(doc.keys)) {
+    throw new Error("Node keys document missing required fields (nodeId, keys)");
+  }
+  return data;
+}
+function selectNodeKey(doc, kid) {
+  if (kid) {
+    const found = doc.keys.find((k) => k.kid === kid);
+    if (!found) {
+      return {
+        error: {
+          ok: false,
+          code: CodeVerifyCode.NODE_RECEIPT_KEY_NOT_FOUND,
+          details: [`Key with kid="${kid}" not found in node keys document`]
+        }
+      };
+    }
+    return { key: found };
+  }
+  if (doc.activeKid) {
+    const found = doc.keys.find((k) => k.kid === doc.activeKid);
+    if (!found) {
+      return {
+        error: {
+          ok: false,
+          code: CodeVerifyCode.NODE_RECEIPT_KEY_NOT_FOUND,
+          details: [`activeKid="${doc.activeKid}" not found in keys array`]
+        }
+      };
+    }
+    return { key: found };
+  }
+  if (doc.keys.length === 0) {
+    return {
+      error: {
+        ok: false,
+        code: CodeVerifyCode.NODE_RECEIPT_KEY_NOT_FOUND,
+        details: ["No keys available in node keys document"]
+      }
+    };
+  }
+  return { key: doc.keys[0] };
+}
+function extractReceiptAndSignature(bundle) {
+  if (typeof bundle !== "object" || bundle === null) return null;
+  const b = bundle;
+  if (typeof b.receipt === "object" && b.receipt !== null && typeof b.signature === "string") {
+    return {
+      receipt: b.receipt,
+      signatureB64Url: b.signature,
+      attestorKeyId: typeof b.attestorKeyId === "string" ? b.attestorKeyId : void 0
+    };
+  }
+  if (typeof b.attestation === "object" && b.attestation !== null) {
+    const att = b.attestation;
+    if (typeof att.receipt === "object" && att.receipt !== null && typeof att.signature === "string") {
+      return {
+        receipt: att.receipt,
+        signatureB64Url: att.signature,
+        attestorKeyId: typeof att.attestorKeyId === "string" ? att.attestorKeyId : void 0
+      };
+    }
+  }
+  if (typeof b.meta === "object" && b.meta !== null) {
+    const meta = b.meta;
+    if (typeof meta.attestation === "object" && meta.attestation !== null) {
+      const att = meta.attestation;
+      if (typeof att.receipt === "object" && att.receipt !== null && typeof att.signature === "string") {
+        return {
+          receipt: att.receipt,
+          signatureB64Url: att.signature,
+          attestorKeyId: typeof att.attestorKeyId === "string" ? att.attestorKeyId : void 0
+        };
+      }
+    }
+  }
+  return null;
+}
+async function verifyBundleAttestation(bundle, options) {
+  const extracted = extractReceiptAndSignature(bundle);
+  if (!extracted) {
+    return {
+      ok: false,
+      code: CodeVerifyCode.NODE_RECEIPT_MISSING,
+      details: ["No signed receipt found in bundle (expected bundle.receipt + bundle.signature or bundle.attestation envelope)"]
+    };
+  }
+  const nodeId = extracted.receipt.nodeId;
+  const resolvedKid = options.kid ?? extracted.attestorKeyId ?? extracted.receipt.attestorKeyId;
+  function ctx() {
+    const lines = [];
+    if (nodeId) lines.push(`nodeId: ${nodeId}`);
+    if (resolvedKid) lines.push(`kid: ${resolvedKid}`);
+    return lines;
+  }
+  if (typeof bundle.certificateHash === "string") {
+    const bundleCertHash = bundle.certificateHash;
+    if (extracted.receipt.certificateHash !== bundleCertHash) {
+      return {
+        ok: false,
+        code: CodeVerifyCode.CERTIFICATE_HASH_MISMATCH,
+        details: [
+          "Receipt certificateHash does not match bundle certificateHash",
+          `receipt.certificateHash: ${extracted.receipt.certificateHash}`,
+          `bundle.certificateHash:  ${bundleCertHash}`,
+          ...ctx()
+        ]
+      };
+    }
+  }
+  let keysDoc;
+  try {
+    keysDoc = await fetchNodeKeys(options.nodeUrl);
+  } catch (err) {
+    return {
+      ok: false,
+      code: CodeVerifyCode.NODE_RECEIPT_KEY_NOT_FOUND,
+      details: [...ctx(), err instanceof Error ? err.message : String(err)]
+    };
+  }
+  const selected = selectNodeKey(keysDoc, resolvedKid);
+  if (selected.error) {
+    return {
+      ...selected.error,
+      details: [...ctx(), ...selected.error.details ?? []]
+    };
+  }
+  const keyEntry = selected.key;
+  const keyParam = {};
+  if (keyEntry.publicKeyJwk) keyParam.jwk = keyEntry.publicKeyJwk;
+  else if (keyEntry.publicKey) keyParam.rawB64Url = keyEntry.publicKey;
+  else if (keyEntry.publicKeySpkiB64) keyParam.spkiB64 = keyEntry.publicKeySpkiB64;
+  else {
+    return {
+      ok: false,
+      code: CodeVerifyCode.NODE_RECEIPT_KEY_FORMAT_UNSUPPORTED,
+      details: [
+        `Key kid="${keyEntry.kid}" has no usable public key field (publicKeyJwk, publicKey, or publicKeySpkiB64)`,
+        ...ctx()
+      ]
+    };
+  }
+  const sigResult = await verifyNodeReceiptSignature({
+    receipt: extracted.receipt,
+    signatureB64Url: extracted.signatureB64Url,
+    key: keyParam
+  });
+  const contextLines = ctx();
+  if (contextLines.length === 0) return sigResult;
+  return sigResult.ok ? { ok: true, code: CodeVerifyCode.OK, details: contextLines } : { ...sigResult, details: [...contextLines, ...sigResult.details ?? []] };
+}
+
+// attestation.ts
+function getAttestationReceipt(bundle) {
+  if (typeof bundle !== "object" || bundle === null) return null;
+  const b = bundle;
+  if (typeof b.receipt === "object" && b.receipt !== null && typeof b.signature === "string") {
+    const r = b.receipt;
+    return {
+      attestationId: r.attestationId,
+      attestedAt: r.attestedAt,
+      nodeId: r.nodeId,
+      attestorKeyId: r.attestorKeyId,
+      nodeRuntimeHash: r.nodeRuntimeHash,
+      certificateHash: r.certificateHash,
+      protocolVersion: r.protocolVersion,
+      receipt: r,
+      signature: b.signature
+    };
+  }
+  if (typeof b.attestation === "object" && b.attestation !== null) {
+    const att = b.attestation;
+    if (typeof att.receipt === "object" && att.receipt !== null && typeof att.signature === "string") {
+      const r = att.receipt;
+      return {
+        attestationId: r.attestationId,
+        attestedAt: r.attestedAt,
+        nodeId: r.nodeId,
+        attestorKeyId: r.attestorKeyId,
+        nodeRuntimeHash: r.nodeRuntimeHash,
+        certificateHash: r.certificateHash,
+        protocolVersion: r.protocolVersion,
+        receipt: r,
+        signature: att.signature
+      };
+    }
+  }
+  if (typeof b.attestationId === "string") {
+    return {
+      attestationId: b.attestationId,
+      attestedAt: typeof b.attestedAt === "string" ? b.attestedAt : "",
+      nodeId: typeof b.nodeId === "string" ? b.nodeId : void 0,
+      attestorKeyId: typeof b.attestorKeyId === "string" ? b.attestorKeyId : void 0,
+      nodeRuntimeHash: typeof b.nodeRuntimeHash === "string" ? b.nodeRuntimeHash : void 0,
+      certificateHash: typeof b.certificateHash === "string" ? b.certificateHash : void 0,
+      protocolVersion: typeof b.protocolVersion === "string" ? b.protocolVersion : void 0
+    };
+  }
+  return null;
+}
+function hasAttestation(bundle) {
+  return getAttestationReceipt(bundle) !== null;
+}
+
 // core-index.ts
 var SDK_VERSION2 = SDK_VERSION;
 var SDK_NAME = "@nexart/codemode-sdk";
 
-export { CODE_MODE_ENFORCEMENT, CODE_MODE_PROTOCOL_PHASE, CODE_MODE_PROTOCOL_VERSION, DEFAULT_CONFIG, DEFAULT_VARS, PROTOCOL_IDENTITY, PROTOCOL_PHASE, PROTOCOL_VERSION, SDK_NAME, SDK_VERSION2 as SDK_VERSION, VAR_COUNT, VAR_MAX, VAR_MIN, cancelLoopMode, createEngine, createP5Runtime, createProtocolVAR, executeCodeMode, injectTimeVariables, runLoopMode, runStaticMode, validateCodeModeSource };
+export { CODE_MODE_ENFORCEMENT, CODE_MODE_PROTOCOL_PHASE, CODE_MODE_PROTOCOL_VERSION, CodeVerifyCode, DEFAULT_CONFIG, DEFAULT_VARS, PROTOCOL_IDENTITY, PROTOCOL_PHASE, PROTOCOL_VERSION, SDK_NAME, SDK_VERSION2 as SDK_VERSION, VAR_COUNT, VAR_MAX, VAR_MIN, cancelLoopMode, createEngine, createP5Runtime, createProtocolVAR, executeCodeMode, fetchNodeKeys, getAttestationReceipt, hasAttestation, injectTimeVariables, runLoopMode, runStaticMode, selectNodeKey, toCanonicalJson, validateCodeModeSource, verifyBundleAttestation, verifyNodeReceiptSignature };

package/dist/esm/node.cjs

@@ -1068,7 +1068,7 @@ var init_soundart_sketches = __esm({
 });
 
 // version.ts
-var SDK_VERSION = "1.8.4";
+var SDK_VERSION = "1.9.0";
 var PROTOCOL_VERSION = "1.2.0";
 var PROTOCOL_PHASE = 3;
 

package/dist/esm/node.js

@@ -1065,7 +1065,7 @@ var init_soundart_sketches = __esm({
 });
 
 // version.ts
-var SDK_VERSION = "1.8.4";
+var SDK_VERSION = "1.9.0";
 var PROTOCOL_VERSION = "1.2.0";
 var PROTOCOL_PHASE = 3;
 

package/dist/types/sdk/codemode/attestation.d.ts

@@ -0,0 +1,24 @@
+/**
+ * @nexart/codemode-sdk — Attestation Receipt Helpers (v1.9.0)
+ *
+ * Utilities for extracting and inspecting attestation receipts from Code Mode
+ * snapshot bundles.  These are read-only helpers — they never perform network
+ * calls or signature verification.  For full offline verification use
+ * verifyBundleAttestation() from nodeReceipt.ts.
+ *
+ * Recognised bundle layouts:
+ *  A. Top-level envelope  — bundle.receipt + bundle.signature
+ *  B. Nested attestation  — bundle.attestation.receipt + bundle.attestation.signature
+ *  C. Legacy flat fields  — bundle.attestationId (pre-receipt format)
+ */
+import type { CodeAttestationReceipt } from './types.js';
+/**
+ * Extract a normalised CodeAttestationReceipt from any Code Mode bundle.
+ * Returns null when no attestation is present.
+ */
+export declare function getAttestationReceipt(bundle: unknown): CodeAttestationReceipt | null;
+/**
+ * Return true if the bundle carries any form of attestation data.
+ */
+export declare function hasAttestation(bundle: unknown): boolean;
+//# sourceMappingURL=attestation.d.ts.map

package/dist/types/sdk/codemode/attestation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestation.d.ts","sourceRoot":"","sources":["../../../../attestation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAA4B,MAAM,YAAY,CAAC;AAEnF;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,OAAO,GAAG,sBAAsB,GAAG,IAAI,CAqDpF;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAEvD"}

package/dist/types/sdk/codemode/canonicalJson.d.ts

@@ -0,0 +1,16 @@
+/**
+ * @nexart/codemode-sdk — Canonical JSON
+ *
+ * Deterministic, sorted-key JSON serialization used for signing and
+ * verifying attestation receipts. The output is byte-for-byte identical
+ * whether produced in Node.js or a browser.
+ *
+ * Rules:
+ *  - Object keys are sorted lexicographically (Unicode code point order)
+ *  - No trailing commas, no whitespace
+ *  - Arrays preserve insertion order
+ *  - null, boolean, number, string are encoded as standard JSON literals
+ *  - Undefined values and function-valued properties are omitted (same as JSON.stringify)
+ */
+export declare function toCanonicalJson(value: unknown): string;
+//# sourceMappingURL=canonicalJson.d.ts.map

package/dist/types/sdk/codemode/canonicalJson.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonicalJson.d.ts","sourceRoot":"","sources":["../../../../canonicalJson.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAwBtD"}

package/dist/types/sdk/codemode/core-index.d.ts

@@ -14,10 +14,14 @@ export { createP5Runtime, injectTimeVariables, createProtocolVAR, VAR_COUNT, VAR
 export { runStaticMode, } from './static-engine';
 export { runLoopMode, cancelLoopMode, } from './loop-engine';
 export { createEngine, } from './engine';
+export { CodeVerifyCode, type CodeVerifyCode as CodeVerifyCodeType, type CodeVerificationResult, type NodeReceiptVerifyResult, type NodeKeysDocument, type SignedAttestationReceipt, type CodeAttestationReceipt, } from './types.js';
+export { verifyNodeReceiptSignature, fetchNodeKeys, selectNodeKey, verifyBundleAttestation, } from './nodeReceipt.js';
+export { getAttestationReceipt, hasAttestation, } from './attestation.js';
+export { toCanonicalJson } from './canonicalJson.js';
 /**
  * SDK Identity — imported from version.ts (single source of truth)
  */
-export declare const SDK_VERSION = "1.8.4";
+export declare const SDK_VERSION = "1.9.0";
 export declare const SDK_NAME = "@nexart/codemode-sdk";
 export { PROTOCOL_VERSION, PROTOCOL_PHASE };
 //# sourceMappingURL=core-index.d.ts.map

package/dist/types/sdk/codemode/core-index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"core-index.d.ts","sourceRoot":"","sources":["../../../../core-index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAA+B,gBAAgB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAG1F,OAAO,EACL,eAAe,EACf,sBAAsB,GACvB,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,MAAM,EACX,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,iBAAiB,EACjB,YAAY,EACZ,cAAc,GACf,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,SAAS,EACT,OAAO,EACP,OAAO,EACP,0BAA0B,EAC1B,wBAAwB,EACxB,qBAAqB,EACrB,KAAK,SAAS,EACd,KAAK,eAAe,GACrB,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,aAAa,GACd,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,WAAW,EACX,cAAc,GACf,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,YAAY,GACb,MAAM,UAAU,CAAC;AAElB;;GAEG;AACH,eAAO,MAAM,WAAW,UAAe,CAAC;AACxC,eAAO,MAAM,QAAQ,yBAAyB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,CAAC"}
+{"version":3,"file":"core-index.d.ts","sourceRoot":"","sources":["../../../../core-index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAA+B,gBAAgB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAG1F,OAAO,EACL,eAAe,EACf,sBAAsB,GACvB,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,MAAM,EACX,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,iBAAiB,EACjB,YAAY,EACZ,cAAc,GACf,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,SAAS,EACT,OAAO,EACP,OAAO,EACP,0BAA0B,EAC1B,wBAAwB,EACxB,qBAAqB,EACrB,KAAK,SAAS,EACd,KAAK,eAAe,GACrB,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,aAAa,GACd,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,WAAW,EACX,cAAc,GACf,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,YAAY,GACb,MAAM,UAAU,CAAC;AAKlB,OAAO,EACL,cAAc,EACd,KAAK,cAAc,IAAI,kBAAkB,EACzC,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,GAC5B,MAAM,YAAY,CAAC;AAKpB,OAAO,EACL,0BAA0B,EAC1B,aAAa,EACb,aAAa,EACb,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AAK1B,OAAO,EACL,qBAAqB,EACrB,cAAc,GACf,MAAM,kBAAkB,CAAC;AAK1B,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD;;GAEG;AACH,eAAO,MAAM,WAAW,UAAe,CAAC;AACxC,eAAO,MAAM,QAAQ,yBAAyB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,CAAC"}

package/dist/types/sdk/codemode/entry/browser.d.ts

@@ -28,7 +28,7 @@ export { createRuntime, NexArtRuntime, RUNTIME_VERSION, } from '../runtime';
 export type { RuntimeOptions, RuntimeState, NexArtRuntime as NexArtRuntimeType, } from '../runtime';
 export { renderSoundArtViaCodeMode, canRenderViaCodeMode, getCodeModeAvailableStyles, } from '../soundart-engine';
 export type { TweakParams, SoundArtEngineConfig, SoundArtRenderOptions, SoundArtRenderResult, SoundArtMetadata, SoundSnapshot, SoundFeatures, SoundArtSketchName, } from '../soundart-engine';
-export declare const SDK_VERSION = "1.8.4";
+export declare const SDK_VERSION = "1.9.0";
 export declare const SDK_NAME = "@nexart/codemode-sdk";
 export declare const SDK_ENTRY = "browser";
 /**

package/dist/types/sdk/codemode/nodeReceipt.d.ts

@@ -0,0 +1,65 @@
+/**
+ * @nexart/codemode-sdk — Node Receipt Verification (v1.9.0)
+ *
+ * Offline Ed25519 signature verification for Code Mode attestation receipts.
+ * Browser and Node.js compatible — uses @noble/ed25519 with @noble/hashes/sha2.
+ *
+ * Usage:
+ *   const res = await verifyBundleAttestation(bundle, { nodeUrl });
+ *   console.log(res.ok, res.code);
+ */
+import type { NodeKeysDocument, SignedAttestationReceipt, NodeReceiptVerifyResult } from './types.js';
+/**
+ * Verify an Ed25519 signature over the canonical JSON bytes of a receipt.
+ *
+ * @param params.receipt         - The receipt object that was signed.
+ * @param params.signatureB64Url - Base64url-encoded 64-byte Ed25519 signature.
+ * @param params.key             - Public key in one of: JWK, raw base64url, or SPKI.
+ */
+export declare function verifyNodeReceiptSignature(params: {
+    receipt: SignedAttestationReceipt;
+    signatureB64Url: string;
+    key: {
+        jwk?: NodeKeysDocument['keys'][number]['publicKeyJwk'];
+        spkiB64?: string;
+        rawB64Url?: string;
+    };
+}): Promise<NodeReceiptVerifyResult>;
+/**
+ * Fetch node keys from /.well-known/nexart-node.json on the attestation node.
+ */
+export declare function fetchNodeKeys(nodeUrl: string): Promise<NodeKeysDocument>;
+type SelectKeySuccess = {
+    key: NodeKeysDocument['keys'][number];
+    error?: never;
+};
+type SelectKeyFailure = {
+    error: NodeReceiptVerifyResult;
+    key?: never;
+};
+type SelectKeyResult = SelectKeySuccess | SelectKeyFailure;
+/**
+ * Select the appropriate key from a NodeKeysDocument.
+ *
+ * Priority: explicit kid → activeKid → first key in array.
+ */
+export declare function selectNodeKey(doc: NodeKeysDocument, kid?: string): SelectKeyResult;
+/**
+ * Fully verify a Code Mode bundle's node attestation (offline).
+ *
+ * Steps:
+ *  1. Extract signed receipt + signature from the bundle.
+ *  2. Cross-check receipt.certificateHash === bundle.certificateHash.
+ *  3. Fetch node keys from nodeUrl.
+ *  4. Select the key (by kid, activeKid, or first).
+ *  5. Verify the Ed25519 signature over canonical JSON of the receipt.
+ *
+ * @param bundle   - A Code Mode snapshot bundle (any recognised layout).
+ * @param options  - nodeUrl to fetch keys from; optional kid to select.
+ */
+export declare function verifyBundleAttestation(bundle: unknown, options: {
+    nodeUrl: string;
+    kid?: string;
+}): Promise<NodeReceiptVerifyResult>;
+export {};
+//# sourceMappingURL=nodeReceipt.d.ts.map

package/dist/types/sdk/codemode/nodeReceipt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodeReceipt.d.ts","sourceRoot":"","sources":["../../../../nodeReceipt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,OAAO,KAAK,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAsBtG;;;;;;GAMG;AACH,wBAAsB,0BAA0B,CAAC,MAAM,EAAE;IACvD,OAAO,EAAE,wBAAwB,CAAC;IAClC,eAAe,EAAE,MAAM,CAAC;IACxB,GAAG,EAAE;QACH,GAAG,CAAC,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;QACvD,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;CACH,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA0EnC;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAe9E;AAED,KAAK,gBAAgB,GAAG;IAAE,GAAG,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAA;CAAE,CAAC;AACjF,KAAK,gBAAgB,GAAG;IAAE,KAAK,EAAE,uBAAuB,CAAC;IAAC,GAAG,CAAC,EAAE,KAAK,CAAA;CAAE,CAAC;AACxE,KAAK,eAAe,GAAG,gBAAgB,GAAG,gBAAgB,CAAC;AAE3D;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,gBAAgB,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,eAAe,CAwClF;AAiDD;;;;;;;;;;;;GAYG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,OAAO,EACf,OAAO,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACzC,OAAO,CAAC,uBAAuB,CAAC,CAqFlC"}

package/dist/types/sdk/codemode/runtime.d.ts

@@ -18,7 +18,7 @@
  * ║  BROWSER-SAFE: No Node.js dependencies. Works in Vite/Next/React.        ║
  * ╚══════════════════════════════════════════════════════════════════════════╝
  */
-export declare const RUNTIME_VERSION = "1.8.4";
+export declare const RUNTIME_VERSION = "1.9.0";
 export interface RuntimeOptions {
     seed: string | number;
     vars?: number[];

package/dist/types/sdk/codemode/types.d.ts

@@ -149,6 +149,102 @@ export interface ExecuteCodeModeResult {
     frames?: ImageData[];
     metadata: ProtocolMetadata;
 }
+/**
+ * ─────────────────────────────────────────────────────────────────────────────
+ * Verification Reason Codes (v1.9.0)
+ * ─────────────────────────────────────────────────────────────────────────────
+ *
+ * Stable, string-valued reason codes returned by all Code Mode verification
+ * functions.  Additive-only: existing codes will never be renamed or removed.
+ */
+export declare const CodeVerifyCode: {
+    readonly OK: "OK";
+    readonly CERTIFICATE_HASH_MISMATCH: "CERTIFICATE_HASH_MISMATCH";
+    readonly SNAPSHOT_HASH_MISMATCH: "SNAPSHOT_HASH_MISMATCH";
+    readonly RENDER_HASH_MISMATCH: "RENDER_HASH_MISMATCH";
+    readonly INVALID_SHA256_FORMAT: "INVALID_SHA256_FORMAT";
+    readonly CANONICALIZATION_ERROR: "CANONICALIZATION_ERROR";
+    readonly SCHEMA_ERROR: "SCHEMA_ERROR";
+    readonly NODE_RECEIPT_MISSING: "NODE_RECEIPT_MISSING";
+    readonly NODE_RECEIPT_KEY_NOT_FOUND: "NODE_RECEIPT_KEY_NOT_FOUND";
+    readonly NODE_RECEIPT_INVALID_SIGNATURE: "NODE_RECEIPT_INVALID_SIGNATURE";
+    readonly NODE_RECEIPT_KEY_FORMAT_UNSUPPORTED: "NODE_RECEIPT_KEY_FORMAT_UNSUPPORTED";
+    readonly UNKNOWN_ERROR: "UNKNOWN_ERROR";
+};
+export type CodeVerifyCode = typeof CodeVerifyCode[keyof typeof CodeVerifyCode];
+/**
+ * Verification result returned by Code Mode verification functions.
+ * `ok`      — true on success
+ * `code`    — stable machine-readable reason code (CodeVerifyCode)
+ * `details` — optional human-readable detail lines
+ */
+export interface CodeVerificationResult {
+    ok: boolean;
+    code: CodeVerifyCode;
+    details?: string[];
+}
+/**
+ * ─────────────────────────────────────────────────────────────────────────────
+ * Signed Attestation Receipt — Code Mode (v1.9.0)
+ * ─────────────────────────────────────────────────────────────────────────────
+ *
+ * Payload signed by the attestation node over a Code Mode snapshot bundle.
+ * The signature is Ed25519 over the canonical JSON bytes of this object.
+ */
+export interface SignedAttestationReceipt {
+    receiptVersion: 'attestation.receipt.v1';
+    attestationId: string;
+    attestedAt: string;
+    nodeId: string;
+    attestorKeyId: string;
+    nodeRuntimeHash: string;
+    certificateHash: string;
+    protocolVersion: string;
+    [key: string]: unknown;
+}
+/**
+ * Node Keys Document
+ * Fetched from /.well-known/nexart-node.json on the attestation node.
+ */
+export interface NodeKeysDocument {
+    nodeId: string;
+    activeKid?: string;
+    keys: Array<{
+        kid: string;
+        alg: 'Ed25519';
+        use: 'sig';
+        publicKeyJwk?: {
+            kty: 'OKP';
+            crv: 'Ed25519';
+            x: string;
+        };
+        publicKey?: string;
+        publicKeySpkiB64?: string;
+        createdAt?: string;
+    }>;
+}
+/**
+ * Result of node receipt signature verification (Code Mode variant).
+ * Alias of CodeVerificationResult — kept as a distinct named type for
+ * clarity in function signatures.
+ */
+export type NodeReceiptVerifyResult = CodeVerificationResult;
+/**
+ * Normalised attestation receipt extracted from any Code Mode bundle format.
+ * Returned by getAttestationReceipt().
+ */
+export interface CodeAttestationReceipt {
+    attestationId: string;
+    attestedAt: string;
+    nodeId?: string;
+    attestorKeyId?: string;
+    nodeRuntimeHash?: string;
+    certificateHash?: string;
+    protocolVersion?: string;
+    receipt?: SignedAttestationReceipt;
+    signature?: string;
+    [key: string]: unknown;
+}
 /**
  * Builder Manifest (v1.6.0)
  *

package/dist/types/sdk/codemode/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH;;;;GAIG;AACH,eAAO,MAAM,iBAAiB;;;;;;CAMpB,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE3C;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAE9C,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,YAAY,GACpB;IACE,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,IAAI,CAAC;CACZ,GACD;IACE,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,EAAE,SAAS,CAAC;CACtB,GACD;IACE,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,IAAI,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEN,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,CAAC;IAC5C,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,KAAK,IAAI,CAAC;IAC9C,UAAU,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,IAAI,CAAC;IAC3C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACjC,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,OAAO,GAAG,WAAW,GAAG,UAAU,GAAG,UAAU,CAAC;IACvD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,MAAM;IACrB,GAAG,EAAE,CAAC,OAAO,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,EAAE,MAAM,IAAI,CAAC;IACjB,SAAS,EAAE,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,CAAC,EAAE,MAAM,CAAC;IACV,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;CAChG;AAED;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,iBAE1B,CAAC;AAEF,eAAO,MAAM,cAAc;;;;;;;CAOjB,CAAC;AAEX;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,EAAE,UAAU,CAAC;IACnB,eAAe,EAAE,OAAO,CAAC;IACzB,KAAK,EAAE,CAAC,CAAC;IACT,aAAa,EAAE,IAAI,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,UAAU,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,EAAE,UAAU,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,KAAK,CAAC,EAAE,IAAI,CAAC;IACb,KAAK,CAAC,EAAE,IAAI,CAAC;IACb,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC;IACrB,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,QAAQ,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE;QACJ,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,GAAG,CAAC,EAAE;QACJ,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,QAAQ,CAAC,EAAE;QACT,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,SAAS,GAAG,WAAW,CAAC;KAChC,CAAC;IACF,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,WAAW,CAAC,EAAE;QACZ,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,qBAAqB,CAAC,EAAE,OAAO,CAAC;QAChC,gBAAgB,CAAC,EAAE,OAAO,CAAC;KAC5B,CAAC;IACF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH;;;;GAIG;AACH,eAAO,MAAM,iBAAiB;;;;;;CAMpB,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE3C;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAE9C,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,YAAY,GACpB;IACE,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,IAAI,CAAC;CACZ,GACD;IACE,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,EAAE,SAAS,CAAC;CACtB,GACD;IACE,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,IAAI,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEN,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,CAAC;IAC5C,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,KAAK,IAAI,CAAC;IAC9C,UAAU,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,IAAI,CAAC;IAC3C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACjC,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,OAAO,GAAG,WAAW,GAAG,UAAU,GAAG,UAAU,CAAC;IACvD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,MAAM;IACrB,GAAG,EAAE,CAAC,OAAO,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,EAAE,MAAM,IAAI,CAAC;IACjB,SAAS,EAAE,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,CAAC,EAAE,MAAM,CAAC;IACV,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;CAChG;AAED;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,iBAE1B,CAAC;AAEF,eAAO,MAAM,cAAc;;;;;;;CAOjB,CAAC;AAEX;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,EAAE,UAAU,CAAC;IACnB,eAAe,EAAE,OAAO,CAAC;IACzB,KAAK,EAAE,CAAC,CAAC;IACT,aAAa,EAAE,IAAI,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,UAAU,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,EAAE,UAAU,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,KAAK,CAAC,EAAE,IAAI,CAAC;IACb,KAAK,CAAC,EAAE,IAAI,CAAC;IACb,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC;IACrB,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;CAajB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC,MAAM,OAAO,cAAc,CAAC,CAAC;AAEhF;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,wBAAwB,CAAC;IACzC,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,KAAK,CAAC;QACV,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,SAAS,CAAC;QACf,GAAG,EAAE,KAAK,CAAC;QACX,YAAY,CAAC,EAAE;YACb,GAAG,EAAE,KAAK,CAAC;YACX,GAAG,EAAE,SAAS,CAAC;YACf,CAAC,EAAE,MAAM,CAAC;SACX,CAAC;QACF,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC,CAAC;CACJ;AAED;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG,sBAAsB,CAAC;AAE7D;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,wBAAwB,CAAC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,QAAQ,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE;QACJ,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,GAAG,CAAC,EAAE;QACJ,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,QAAQ,CAAC,EAAE;QACT,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,SAAS,GAAG,WAAW,CAAC;KAChC,CAAC;IACF,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,WAAW,CAAC,EAAE;QACZ,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,qBAAqB,CAAC,EAAE,OAAO,CAAC;QAChC,gBAAgB,CAAC,EAAE,OAAO,CAAC;KAC5B,CAAC;IACF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB"}