@nomosprotocol/sdk 1.0.0 → 1.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (41) hide show
  1. package/README.md +98 -0
  2. package/dist/index.cjs +608 -0
  3. package/dist/index.cjs.map +1 -0
  4. package/dist/index.d.cts +489 -0
  5. package/dist/index.d.ts +489 -4
  6. package/dist/index.js +575 -2
  7. package/dist/index.js.map +1 -1
  8. package/package.json +25 -7
  9. package/dist/errors.d.ts +0 -31
  10. package/dist/errors.d.ts.map +0 -1
  11. package/dist/errors.js +0 -54
  12. package/dist/errors.js.map +0 -1
  13. package/dist/http-client.d.ts +0 -14
  14. package/dist/http-client.d.ts.map +0 -1
  15. package/dist/http-client.js +0 -70
  16. package/dist/http-client.js.map +0 -1
  17. package/dist/index.d.ts.map +0 -1
  18. package/dist/nomos.d.ts +0 -13
  19. package/dist/nomos.d.ts.map +0 -1
  20. package/dist/nomos.js +0 -26
  21. package/dist/nomos.js.map +0 -1
  22. package/dist/resources/artifacts.d.ts +0 -22
  23. package/dist/resources/artifacts.d.ts.map +0 -1
  24. package/dist/resources/artifacts.js +0 -46
  25. package/dist/resources/artifacts.js.map +0 -1
  26. package/dist/resources/decisions.d.ts +0 -24
  27. package/dist/resources/decisions.d.ts.map +0 -1
  28. package/dist/resources/decisions.js +0 -53
  29. package/dist/resources/decisions.js.map +0 -1
  30. package/dist/resources/governance.d.ts +0 -30
  31. package/dist/resources/governance.d.ts.map +0 -1
  32. package/dist/resources/governance.js +0 -33
  33. package/dist/resources/governance.js.map +0 -1
  34. package/dist/types.d.ts +0 -117
  35. package/dist/types.d.ts.map +0 -1
  36. package/dist/types.js +0 -3
  37. package/dist/types.js.map +0 -1
  38. package/dist/util.d.ts +0 -4
  39. package/dist/util.d.ts.map +0 -1
  40. package/dist/util.js +0 -11
  41. package/dist/util.js.map +0 -1
package/dist/index.js CHANGED
@@ -1,3 +1,576 @@
1
- export { Nomos } from './nomos.js';
2
- export * from './errors.js';
1
+ var __defProp = Object.defineProperty;
2
+ var __export = (target, all) => {
3
+ for (var name in all)
4
+ __defProp(target, name, { get: all[name], enumerable: true });
5
+ };
6
+
7
+ // src/errors.ts
8
+ var errors_exports = {};
9
+ __export(errors_exports, {
10
+ NomosAPIError: () => NomosAPIError,
11
+ NomosAuthenticationError: () => NomosAuthenticationError,
12
+ NomosAuthorizationError: () => NomosAuthorizationError,
13
+ NomosError: () => NomosError,
14
+ NomosNetworkError: () => NomosNetworkError,
15
+ NomosNotFoundError: () => NomosNotFoundError,
16
+ NomosRateLimitError: () => NomosRateLimitError,
17
+ NomosValidationError: () => NomosValidationError,
18
+ NomosWebhookSignatureError: () => NomosWebhookSignatureError
19
+ });
20
+ var NomosError = class extends Error {
21
+ constructor(message, code, status, requestId) {
22
+ super(message);
23
+ this.name = "NomosError";
24
+ this.code = code;
25
+ this.status = status;
26
+ this.requestId = requestId;
27
+ }
28
+ };
29
+ var NomosAuthenticationError = class extends NomosError {
30
+ constructor(message = "Invalid API key", requestId) {
31
+ super(message, "authentication_error", 401, requestId);
32
+ this.name = "NomosAuthenticationError";
33
+ }
34
+ };
35
+ var NomosAuthorizationError = class extends NomosError {
36
+ constructor(message = "Access denied", requestId) {
37
+ super(message, "authorization_error", 403, requestId);
38
+ this.name = "NomosAuthorizationError";
39
+ }
40
+ };
41
+ var NomosRateLimitError = class extends NomosError {
42
+ constructor(message = "Rate limit exceeded", retryAfter, requestId) {
43
+ super(message, "rate_limit_error", 429, requestId);
44
+ this.name = "NomosRateLimitError";
45
+ this.retryAfter = retryAfter;
46
+ }
47
+ };
48
+ var NomosValidationError = class extends NomosError {
49
+ constructor(message, details, requestId) {
50
+ super(message, "validation_error", 400, requestId);
51
+ this.name = "NomosValidationError";
52
+ this.details = details;
53
+ }
54
+ };
55
+ var NomosNotFoundError = class extends NomosError {
56
+ constructor(message, requestId) {
57
+ super(message, "not_found", 404, requestId);
58
+ this.name = "NomosNotFoundError";
59
+ }
60
+ };
61
+ var NomosAPIError = class extends NomosError {
62
+ constructor(message, status, requestId) {
63
+ super(message, "api_error", status, requestId);
64
+ this.name = "NomosAPIError";
65
+ }
66
+ };
67
+ var NomosNetworkError = class extends NomosError {
68
+ constructor(message) {
69
+ super(message, "network_error");
70
+ this.name = "NomosNetworkError";
71
+ }
72
+ };
73
+ var NomosWebhookSignatureError = class extends NomosError {
74
+ constructor(message) {
75
+ super(message, "webhook_signature_error", 400);
76
+ this.name = "NomosWebhookSignatureError";
77
+ }
78
+ };
79
+
80
+ // src/util.ts
81
+ async function sleep(ms) {
82
+ return new Promise((resolve) => setTimeout(resolve, ms));
83
+ }
84
+ function jitteredBackoff(attempt, baseMs = 500) {
85
+ const exp = Math.min(baseMs * 2 ** attempt, 16e3);
86
+ return exp * (0.75 + Math.random() * 0.5);
87
+ }
88
+ function isRetryable(status) {
89
+ return status === 429 || status >= 500;
90
+ }
91
+
92
+ // src/http-client.ts
93
+ var SDK_VERSION = "1.1.0";
94
+ var HttpClient = class {
95
+ constructor(opts) {
96
+ this.opts = opts;
97
+ }
98
+ async get(path, reqOpts) {
99
+ return this.request("GET", path, void 0, reqOpts);
100
+ }
101
+ async post(path, body, reqOpts) {
102
+ return this.request("POST", path, body, reqOpts);
103
+ }
104
+ async request(method, path, body, reqOpts, attempt = 0) {
105
+ const apiKey = reqOpts?.apiKey ?? this.opts.apiKey;
106
+ const timeout = reqOpts?.timeout ?? this.opts.timeout;
107
+ const maxRetries = reqOpts?.maxRetries ?? this.opts.maxRetries;
108
+ const url = `${this.opts.baseUrl}${path}`;
109
+ const controller = new AbortController();
110
+ const timer = setTimeout(() => controller.abort(), timeout);
111
+ const headers = {
112
+ "Content-Type": "application/json",
113
+ "X-Nomos-Api-Key": apiKey,
114
+ "User-Agent": `nomos-node/${SDK_VERSION}`,
115
+ "NOMOS-SDK-Version": SDK_VERSION
116
+ };
117
+ if (reqOpts?.idempotencyKey) {
118
+ headers["Idempotency-Key"] = reqOpts.idempotencyKey;
119
+ }
120
+ let res;
121
+ try {
122
+ res = await fetch(url, {
123
+ method,
124
+ signal: controller.signal,
125
+ headers,
126
+ body: body != null ? JSON.stringify(body) : void 0
127
+ });
128
+ } catch (err) {
129
+ clearTimeout(timer);
130
+ if (err.name === "AbortError") {
131
+ throw new NomosNetworkError(`Request timed out after ${timeout}ms`);
132
+ }
133
+ throw new NomosNetworkError(err.message ?? "Network error");
134
+ } finally {
135
+ clearTimeout(timer);
136
+ }
137
+ const requestId = res.headers.get("x-request-id") ?? "";
138
+ const rawHeaders = {};
139
+ res.headers.forEach((value, key) => {
140
+ rawHeaders[key] = value;
141
+ });
142
+ const lastResponse = {
143
+ requestId,
144
+ statusCode: res.status,
145
+ headers: rawHeaders
146
+ };
147
+ if (res.ok) {
148
+ const data = await res.json();
149
+ return { data, lastResponse };
150
+ }
151
+ if (isRetryable(res.status) && attempt < maxRetries) {
152
+ const retryAfter = res.headers.get("retry-after");
153
+ const delay = retryAfter ? parseInt(retryAfter, 10) * 1e3 : jitteredBackoff(attempt);
154
+ await sleep(delay);
155
+ return this.request(method, path, body, reqOpts, attempt + 1);
156
+ }
157
+ let errBody = {};
158
+ try {
159
+ errBody = await res.json();
160
+ } catch {
161
+ }
162
+ const message = errBody?.error ?? errBody?.message ?? res.statusText;
163
+ switch (res.status) {
164
+ case 401:
165
+ throw new NomosAuthenticationError(message, requestId);
166
+ case 403:
167
+ throw new NomosAuthorizationError(message, requestId);
168
+ case 404:
169
+ throw new NomosNotFoundError(message, requestId);
170
+ case 422:
171
+ case 400:
172
+ throw new NomosValidationError(message, errBody?.details, requestId);
173
+ case 429:
174
+ throw new NomosRateLimitError(
175
+ message,
176
+ res.headers.get("retry-after") ? parseInt(res.headers.get("retry-after"), 10) : void 0,
177
+ requestId
178
+ );
179
+ default:
180
+ throw new NomosAPIError(message, res.status, requestId);
181
+ }
182
+ }
183
+ };
184
+
185
+ // src/resources/decisions.ts
186
+ var Decisions = class {
187
+ constructor(http) {
188
+ this.http = http;
189
+ }
190
+ /**
191
+ * Verify whether an AI decision is permitted under a governance artifact.
192
+ *
193
+ * Public demo artifacts (`pub_*`) work without an API key.
194
+ * Custom artifacts require a valid API key.
195
+ *
196
+ * @example
197
+ * const result = await nomos.decisions.verify({
198
+ * artifact_id: 'pub_lending_v1',
199
+ * decision_context: { credit_score: 720, loan_amount: 50000 },
200
+ * });
201
+ *
202
+ * if (!result.allowed) {
203
+ * throw new Error(`Blocked: ${result.verdict_description}`);
204
+ * }
205
+ *
206
+ * // Debugging / tracing
207
+ * console.log(result.lastResponse.requestId);
208
+ *
209
+ * @example
210
+ * // Per-request options
211
+ * const result = await nomos.decisions.verify(params, {
212
+ * idempotencyKey: `verify-${transactionId}`,
213
+ * timeout: 5000,
214
+ * });
215
+ */
216
+ async verify(params, opts) {
217
+ const { artifact_id, decision_context, proposed_decision, correlation_id } = params;
218
+ const isPublic = artifact_id.startsWith("pub_");
219
+ let httpResp;
220
+ if (isPublic) {
221
+ httpResp = await this.http.post("/api/v1/verify", {
222
+ artifact_id,
223
+ decision: proposed_decision ?? "evaluate",
224
+ inputs: decision_context
225
+ }, opts);
226
+ } else {
227
+ httpResp = await this.http.post("/api/v1/verify-decision", {
228
+ artifact_id,
229
+ decision: proposed_decision ?? "evaluate",
230
+ inputs: decision_context,
231
+ caller: { correlation_id: correlation_id ?? globalThis.crypto.randomUUID() }
232
+ }, opts);
233
+ }
234
+ const raw = httpResp.data;
235
+ return {
236
+ id: raw.id ?? `req_${raw.execution_id ?? globalThis.crypto.randomUUID()}`,
237
+ object: raw.object ?? "decision",
238
+ artifact_id: raw.artifact_id ?? artifact_id,
239
+ artifact_name: raw.artifact_name ?? "",
240
+ allowed: raw.allowed ?? false,
241
+ verdict: raw.verdict ?? (raw.outcome === "auto_approved" ? "approved" : raw.outcome === "auto_rejected" ? "rejected" : "escalated"),
242
+ rule: raw.rule,
243
+ evaluation: raw.evaluation ?? { rules_evaluated: raw.rules_evaluated ?? 0, rules_matched: 0, rules_expired: 0, conflicts_resolved: 0 },
244
+ confidence: raw.confidence ?? { tier: raw.artifact_confidence ?? "DECLARED", score: 1, description: "" },
245
+ audit: raw.audit ?? { hash: raw.audit_hash ?? raw.audit_record ?? "", timestamp: raw.ts ?? (/* @__PURE__ */ new Date()).toISOString() },
246
+ performance: raw.performance ?? { latency_ms: raw.latency_ms ?? 0 },
247
+ schema_version: raw.schema_version ?? "1.0.0",
248
+ verdict_description: raw.verdict_description ?? "",
249
+ incomplete_inputs: raw.incomplete_inputs,
250
+ paths_to_approval: raw.paths_to_approval,
251
+ lastResponse: httpResp.lastResponse
252
+ };
253
+ }
254
+ };
255
+
256
+ // src/resources/artifacts.ts
257
+ var Artifacts = class {
258
+ constructor(http) {
259
+ this.http = http;
260
+ }
261
+ /**
262
+ * Retrieve a single artifact by ID.
263
+ *
264
+ * @example
265
+ * const artifact = await nomos.artifacts.retrieve('loan_approval_v1');
266
+ * console.log(artifact.ari_score, artifact.autonomy_band);
267
+ * console.log(artifact.lastResponse.requestId); // for support tickets
268
+ */
269
+ async retrieve(artifactId, opts) {
270
+ const { data, lastResponse } = await this.http.get(
271
+ `/api/exchange/artifacts/${encodeURIComponent(artifactId)}`,
272
+ opts
273
+ );
274
+ return { ...data, lastResponse };
275
+ }
276
+ /**
277
+ * List published artifacts on the Exchange with optional filters.
278
+ *
279
+ * @example
280
+ * const { data, total } = await nomos.artifacts.list({ band: 'autonomous', limit: 10 });
281
+ *
282
+ * @example
283
+ * // With per-request options
284
+ * const page = await nomos.artifacts.list({ limit: 20 }, { timeout: 5000 });
285
+ */
286
+ async list(params = {}, opts) {
287
+ const qs = new URLSearchParams();
288
+ if (params.band) qs.set("band", params.band);
289
+ if (params.domain) qs.set("domain", params.domain);
290
+ if (params.jurisdiction) qs.set("jurisdiction", params.jurisdiction);
291
+ if (params.sort) qs.set("sort", params.sort);
292
+ if (params.limit != null) qs.set("limit", String(params.limit));
293
+ if (params.offset != null) qs.set("offset", String(params.offset));
294
+ const query = qs.toString();
295
+ const { data: raw, lastResponse } = await this.http.get(
296
+ `/api/exchange/artifacts${query ? `?${query}` : ""}`,
297
+ opts
298
+ );
299
+ const normalized = {
300
+ data: Array.isArray(raw) ? raw : raw.artifacts ?? raw.data ?? [],
301
+ total: raw.total ?? (Array.isArray(raw) ? raw.length : 0),
302
+ limit: params.limit ?? 20,
303
+ offset: params.offset ?? 0
304
+ };
305
+ return { ...normalized, lastResponse };
306
+ }
307
+ /**
308
+ * Auto-paginating iterator — yields every artifact across all pages.
309
+ * Stops automatically when the last page is reached.
310
+ *
311
+ * @example
312
+ * for await (const artifact of nomos.artifacts.listAutoPaging({ band: 'autonomous' })) {
313
+ * console.log(artifact.title, artifact.ari_score);
314
+ * }
315
+ */
316
+ async *listAutoPaging(params = {}, opts) {
317
+ let offset = params.offset ?? 0;
318
+ const limit = params.limit ?? 20;
319
+ while (true) {
320
+ const page = await this.list({ ...params, offset, limit }, opts);
321
+ for (const item of page.data) yield item;
322
+ if (page.data.length < limit || offset + page.data.length >= page.total) break;
323
+ offset += page.data.length;
324
+ }
325
+ }
326
+ /**
327
+ * Retrieve the declared input schema for a sealed artifact.
328
+ *
329
+ * Returns every field the artifact's rules reference — name, type, whether it's
330
+ * required, and a ready-to-use example_inputs object. Use this to build forms,
331
+ * validate payloads, or generate API docs without reading the rules manually.
332
+ *
333
+ * Requires an API key (artifact schemas are not public).
334
+ *
335
+ * @example
336
+ * const schema = await nomos.artifacts.schema('art_abc123');
337
+ * console.log(schema.required_fields); // ['credit_score', 'loan_amount']
338
+ * console.log(schema.example_inputs); // { credit_score: 0, loan_amount: 0 }
339
+ */
340
+ async schema(artifactId, opts) {
341
+ const { data, lastResponse } = await this.http.get(
342
+ `/api/v1/artifacts/${encodeURIComponent(artifactId)}/schema`,
343
+ opts
344
+ );
345
+ return { ...data, lastResponse };
346
+ }
347
+ };
348
+
349
+ // src/resources/governance.ts
350
+ var Governance = class {
351
+ constructor(http) {
352
+ this.http = http;
353
+ }
354
+ /**
355
+ * Generate a sealed .nomos governance artifact from policy documents
356
+ * and optional historical decision logs.
357
+ *
358
+ * @example
359
+ * const artifact = await nomos.governance.generate({
360
+ * policies: [policyText],
361
+ * decision_logs: historicalRows,
362
+ * domain: 'loan_approval',
363
+ * });
364
+ * console.log(artifact.ari_score, artifact.seal_hash);
365
+ */
366
+ async generate(params, opts) {
367
+ const { data, lastResponse } = await this.http.post(
368
+ "/api/v1/generate-governance",
369
+ params,
370
+ opts
371
+ );
372
+ return { ...data, lastResponse };
373
+ }
374
+ /**
375
+ * Detect contradictions and conflicts in a rule set before sealing.
376
+ *
377
+ * @example
378
+ * const report = await nomos.governance.detectContradictions({ rules });
379
+ * if (!report.clean) {
380
+ * console.log(report.contradictions);
381
+ * }
382
+ */
383
+ async detectContradictions(params, opts) {
384
+ const { data, lastResponse } = await this.http.post(
385
+ "/api/v1/detect-contradictions",
386
+ params,
387
+ opts
388
+ );
389
+ return { ...data, lastResponse };
390
+ }
391
+ };
392
+
393
+ // src/resources/webhooks.ts
394
+ function hexToBytes(hex) {
395
+ if (hex.length % 2 !== 0) throw new NomosWebhookSignatureError("Invalid hex encoding in signature");
396
+ const bytes = new Uint8Array(hex.length / 2);
397
+ for (let i = 0; i < hex.length; i += 2) {
398
+ const byte = parseInt(hex.slice(i, i + 2), 16);
399
+ if (isNaN(byte)) throw new NomosWebhookSignatureError("Invalid hex encoding in signature");
400
+ bytes[i / 2] = byte;
401
+ }
402
+ return bytes;
403
+ }
404
+ function safeEqual(a, b) {
405
+ if (a.length !== b.length) return false;
406
+ let diff = 0;
407
+ for (let i = 0; i < a.length; i++) diff |= a[i] ^ b[i];
408
+ return diff === 0;
409
+ }
410
+ var Webhooks = class {
411
+ /**
412
+ * Verify a NOMOS webhook signature and return the parsed event.
413
+ *
414
+ * Signature header format: `t=<unix_ts>,v1=<hmac_sha256_hex>`
415
+ * Signed payload: `<timestamp>.<raw_body>`
416
+ *
417
+ * @example
418
+ * // Express
419
+ * app.post('/webhooks/nomos', express.raw({ type: 'application/json' }), async (req, res) => {
420
+ * const event = await nomos.webhooks.constructEvent(
421
+ * req.body,
422
+ * req.headers['nomos-signature'] as string,
423
+ * process.env.NOMOS_WEBHOOK_SECRET!,
424
+ * );
425
+ * console.log(event.type, event.data);
426
+ * res.sendStatus(200);
427
+ * });
428
+ *
429
+ * @throws {NomosWebhookSignatureError} if signature is invalid, expired, or malformed
430
+ */
431
+ async constructEvent(payload, signature, secret, toleranceSeconds = 300) {
432
+ const body = typeof payload === "string" ? payload : new TextDecoder().decode(payload);
433
+ const parts = {};
434
+ for (const part of signature.split(",")) {
435
+ const eq = part.indexOf("=");
436
+ if (eq > -1) parts[part.slice(0, eq).trim()] = part.slice(eq + 1).trim();
437
+ }
438
+ if (!parts["t"] || !parts["v1"]) {
439
+ throw new NomosWebhookSignatureError(
440
+ 'Invalid signature format \u2014 expected "t=<timestamp>,v1=<hmac>"'
441
+ );
442
+ }
443
+ const timestamp = parseInt(parts["t"], 10);
444
+ if (isNaN(timestamp)) {
445
+ throw new NomosWebhookSignatureError("Invalid timestamp in webhook signature");
446
+ }
447
+ const ageSecs = Math.abs(Date.now() / 1e3 - timestamp);
448
+ if (toleranceSeconds > 0 && ageSecs > toleranceSeconds) {
449
+ throw new NomosWebhookSignatureError(
450
+ `Webhook timestamp too old (${Math.round(ageSecs)}s > ${toleranceSeconds}s tolerance). Ensure your server clock is synced and the event is not being replayed.`
451
+ );
452
+ }
453
+ const enc = new TextEncoder();
454
+ const keyMaterial = await globalThis.crypto.subtle.importKey(
455
+ "raw",
456
+ enc.encode(secret),
457
+ { name: "HMAC", hash: "SHA-256" },
458
+ false,
459
+ ["sign"]
460
+ );
461
+ const signedPayload = `${parts["t"]}.${body}`;
462
+ const expectedBuf = await globalThis.crypto.subtle.sign(
463
+ "HMAC",
464
+ keyMaterial,
465
+ enc.encode(signedPayload)
466
+ );
467
+ const expected = new Uint8Array(expectedBuf);
468
+ const received = hexToBytes(parts["v1"]);
469
+ if (!safeEqual(expected, received)) {
470
+ throw new NomosWebhookSignatureError(
471
+ "Webhook signature mismatch \u2014 verify your NOMOS_WEBHOOK_SECRET matches the one in Studio."
472
+ );
473
+ }
474
+ try {
475
+ return JSON.parse(body);
476
+ } catch {
477
+ throw new NomosWebhookSignatureError("Webhook payload is not valid JSON");
478
+ }
479
+ }
480
+ /**
481
+ * Verify a webhook signature without parsing the event.
482
+ * Returns `true` if valid, `false` if not (never throws).
483
+ *
484
+ * @example
485
+ * const valid = await nomos.webhooks.verifySignature(rawBody, sig, secret);
486
+ * if (!valid) return res.sendStatus(400);
487
+ */
488
+ async verifySignature(payload, signature, secret, toleranceSeconds = 300) {
489
+ try {
490
+ await this.constructEvent(payload, signature, secret, toleranceSeconds);
491
+ return true;
492
+ } catch {
493
+ return false;
494
+ }
495
+ }
496
+ };
497
+
498
+ // src/nomos.ts
499
+ var DEFAULT_BASE_URL = "https://nomos.ai";
500
+ var DEFAULT_MAX_RETRIES = 3;
501
+ var DEFAULT_TIMEOUT = 3e4;
502
+ var Nomos = class {
503
+ static {
504
+ this.errors = errors_exports;
505
+ }
506
+ constructor(apiKey, config = {}) {
507
+ if (!apiKey || typeof apiKey !== "string") {
508
+ throw new NomosAuthenticationError(
509
+ 'A valid API key is required. Pass it as the first argument: new Nomos("nms_live_...")'
510
+ );
511
+ }
512
+ this.mode = apiKey.startsWith("nms_test_") ? "test" : "live";
513
+ const http = new HttpClient({
514
+ apiKey,
515
+ baseUrl: (config.baseUrl ?? DEFAULT_BASE_URL).replace(/\/$/, ""),
516
+ maxRetries: config.maxRetries ?? DEFAULT_MAX_RETRIES,
517
+ timeout: config.timeout ?? DEFAULT_TIMEOUT
518
+ });
519
+ this.decisions = new Decisions(http);
520
+ this.artifacts = new Artifacts(http);
521
+ this.governance = new Governance(http);
522
+ this.webhooks = new Webhooks();
523
+ }
524
+ };
525
+
526
+ // src/can.ts
527
+ var DEFAULT_EXCHANGE_BASE = "https://www.nomosprotocol.com";
528
+ async function can(params, opts) {
529
+ const { authority, action, inputs, ...flat } = params;
530
+ if (!authority || typeof authority !== "string") {
531
+ throw new Error("can(): `authority` (an Exchange artifact id or slug) is required.");
532
+ }
533
+ const facts = inputs && typeof inputs === "object" ? inputs : flat;
534
+ const base = (opts?.baseUrl ?? DEFAULT_EXCHANGE_BASE).replace(/\/$/, "");
535
+ const url = `${base}/api/exchange/artifacts/${encodeURIComponent(authority)}/query`;
536
+ const res = await fetch(url, {
537
+ method: "POST",
538
+ headers: { "Content-Type": "application/json" },
539
+ body: JSON.stringify({ inputs: facts, action }),
540
+ signal: opts?.signal
541
+ });
542
+ const data = await res.json().catch(() => null);
543
+ if (!res.ok) {
544
+ throw new Error(data?.error ?? `NOMOS query failed (HTTP ${res.status})`);
545
+ }
546
+ return {
547
+ allowed: data.verdict === "AUTHORIZED",
548
+ verdict: data.verdict,
549
+ reason: data.verdict_description,
550
+ rule: data.matched_rule_id ?? null,
551
+ query_id: data.query_id,
552
+ url: data.url,
553
+ authority: {
554
+ id: data.artifact?.id ?? authority,
555
+ title: data.artifact?.title ?? "",
556
+ standing: data.artifact?.standing ?? ""
557
+ },
558
+ missing_inputs: data.missing_inputs ?? []
559
+ };
560
+ }
561
+ var nomos = { can };
562
+ export {
563
+ Nomos,
564
+ NomosAPIError,
565
+ NomosAuthenticationError,
566
+ NomosAuthorizationError,
567
+ NomosError,
568
+ NomosNetworkError,
569
+ NomosNotFoundError,
570
+ NomosRateLimitError,
571
+ NomosValidationError,
572
+ NomosWebhookSignatureError,
573
+ can,
574
+ nomos
575
+ };
3
576
  //# sourceMappingURL=index.js.map
package/dist/index.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,cAAc,aAAa,CAAC"}
1
+ {"version":3,"sources":["../src/errors.ts","../src/util.ts","../src/http-client.ts","../src/resources/decisions.ts","../src/resources/artifacts.ts","../src/resources/governance.ts","../src/resources/webhooks.ts","../src/nomos.ts","../src/can.ts"],"sourcesContent":["export type NomosErrorCode =\n | 'authentication_error'\n | 'authorization_error'\n | 'rate_limit_error'\n | 'validation_error'\n | 'not_found'\n | 'api_error'\n | 'network_error'\n | 'webhook_signature_error';\n\nexport class NomosError extends Error {\n readonly code: NomosErrorCode;\n readonly status?: number;\n readonly requestId?: string;\n\n constructor(message: string, code: NomosErrorCode, status?: number, requestId?: string) {\n super(message);\n this.name = 'NomosError';\n this.code = code;\n this.status = status;\n this.requestId = requestId;\n }\n}\n\nexport class NomosAuthenticationError extends NomosError {\n constructor(message = 'Invalid API key', requestId?: string) {\n super(message, 'authentication_error', 401, requestId);\n this.name = 'NomosAuthenticationError';\n }\n}\n\nexport class NomosAuthorizationError extends NomosError {\n constructor(message = 'Access denied', requestId?: string) {\n super(message, 'authorization_error', 403, requestId);\n this.name = 'NomosAuthorizationError';\n }\n}\n\nexport class NomosRateLimitError extends NomosError {\n readonly retryAfter?: number;\n\n constructor(message = 'Rate limit exceeded', retryAfter?: number, requestId?: string) {\n super(message, 'rate_limit_error', 429, requestId);\n this.name = 'NomosRateLimitError';\n this.retryAfter = retryAfter;\n }\n}\n\nexport class NomosValidationError extends NomosError {\n readonly details?: unknown;\n\n constructor(message: string, details?: unknown, requestId?: string) {\n super(message, 'validation_error', 400, requestId);\n this.name = 'NomosValidationError';\n this.details = details;\n }\n}\n\nexport class NomosNotFoundError extends NomosError {\n constructor(message: string, requestId?: string) {\n super(message, 'not_found', 404, requestId);\n this.name = 'NomosNotFoundError';\n }\n}\n\nexport class NomosAPIError extends NomosError {\n constructor(message: string, status: number, requestId?: string) {\n super(message, 'api_error', status, requestId);\n this.name = 'NomosAPIError';\n }\n}\n\nexport class NomosNetworkError extends NomosError {\n constructor(message: string) {\n super(message, 'network_error');\n this.name = 'NomosNetworkError';\n }\n}\n\nexport class NomosWebhookSignatureError extends NomosError {\n constructor(message: string) {\n super(message, 'webhook_signature_error', 400);\n this.name = 'NomosWebhookSignatureError';\n }\n}\n","export async function sleep(ms: number): Promise<void> {\n return new Promise(resolve => setTimeout(resolve, ms));\n}\n\nexport function jitteredBackoff(attempt: number, baseMs = 500): number {\n const exp = Math.min(baseMs * 2 ** attempt, 16000);\n return exp * (0.75 + Math.random() * 0.5); // ±25% jitter\n}\n\nexport function isRetryable(status: number): boolean {\n return status === 429 || status >= 500;\n}\n","import {\n NomosAuthenticationError,\n NomosAuthorizationError,\n NomosRateLimitError,\n NomosValidationError,\n NomosNotFoundError,\n NomosAPIError,\n NomosNetworkError,\n} from './errors.js';\nimport { sleep, jitteredBackoff, isRetryable } from './util.js';\nimport type { RequestOptions, NomosRawResponse } from './types.js';\n\nconst SDK_VERSION = '1.1.0';\n\nexport interface HttpClientOptions {\n apiKey: string;\n baseUrl: string;\n maxRetries: number;\n timeout: number;\n}\n\nexport interface HttpResponse<T> {\n data: T;\n lastResponse: NomosRawResponse;\n}\n\nexport class HttpClient {\n constructor(private readonly opts: HttpClientOptions) {}\n\n async get<T>(path: string, reqOpts?: RequestOptions): Promise<HttpResponse<T>> {\n return this.request<T>('GET', path, undefined, reqOpts);\n }\n\n async post<T>(path: string, body: unknown, reqOpts?: RequestOptions): Promise<HttpResponse<T>> {\n return this.request<T>('POST', path, body, reqOpts);\n }\n\n private async request<T>(\n method: string,\n path: string,\n body: unknown,\n reqOpts?: RequestOptions,\n attempt = 0,\n ): Promise<HttpResponse<T>> {\n const apiKey = reqOpts?.apiKey ?? this.opts.apiKey;\n const timeout = reqOpts?.timeout ?? this.opts.timeout;\n const maxRetries = reqOpts?.maxRetries ?? this.opts.maxRetries;\n\n const url = `${this.opts.baseUrl}${path}`;\n const controller = new AbortController();\n const timer = setTimeout(() => controller.abort(), timeout);\n\n const headers: Record<string, string> = {\n 'Content-Type': 'application/json',\n 'X-Nomos-Api-Key': apiKey,\n 'User-Agent': `nomos-node/${SDK_VERSION}`,\n 'NOMOS-SDK-Version': SDK_VERSION,\n };\n if (reqOpts?.idempotencyKey) {\n headers['Idempotency-Key'] = reqOpts.idempotencyKey;\n }\n\n let res: Response;\n try {\n res = await fetch(url, {\n method,\n signal: controller.signal,\n headers,\n body: body != null ? JSON.stringify(body) : undefined,\n });\n } catch (err: any) {\n clearTimeout(timer);\n if (err.name === 'AbortError') {\n throw new NomosNetworkError(`Request timed out after ${timeout}ms`);\n }\n throw new NomosNetworkError(err.message ?? 'Network error');\n } finally {\n clearTimeout(timer);\n }\n\n const requestId = res.headers.get('x-request-id') ?? '';\n const rawHeaders: Record<string, string> = {};\n res.headers.forEach((value, key) => { rawHeaders[key] = value; });\n const lastResponse: NomosRawResponse = {\n requestId,\n statusCode: res.status,\n headers: rawHeaders,\n };\n\n if (res.ok) {\n const data = await res.json() as T;\n return { data, lastResponse };\n }\n\n // Retry on 429 / 5xx\n if (isRetryable(res.status) && attempt < maxRetries) {\n const retryAfter = res.headers.get('retry-after');\n const delay = retryAfter ? parseInt(retryAfter, 10) * 1000 : jitteredBackoff(attempt);\n await sleep(delay);\n return this.request<T>(method, path, body, reqOpts, attempt + 1);\n }\n\n let errBody: any = {};\n try { errBody = await res.json(); } catch {}\n const message: string = errBody?.error ?? errBody?.message ?? res.statusText;\n\n switch (res.status) {\n case 401: throw new NomosAuthenticationError(message, requestId);\n case 403: throw new NomosAuthorizationError(message, requestId);\n case 404: throw new NomosNotFoundError(message, requestId);\n case 422:\n case 400: throw new NomosValidationError(message, errBody?.details, requestId);\n case 429: throw new NomosRateLimitError(\n message,\n res.headers.get('retry-after') ? parseInt(res.headers.get('retry-after')!, 10) : undefined,\n requestId,\n );\n default: throw new NomosAPIError(message, res.status, requestId);\n }\n }\n}\n","import type { HttpClient } from '../http-client.js';\nimport type {\n VerifyDecisionParams,\n VerifyDecisionResult,\n RequestOptions,\n WithLastResponse,\n} from '../types.js';\n\nexport class Decisions {\n constructor(private readonly http: HttpClient) {}\n\n /**\n * Verify whether an AI decision is permitted under a governance artifact.\n *\n * Public demo artifacts (`pub_*`) work without an API key.\n * Custom artifacts require a valid API key.\n *\n * @example\n * const result = await nomos.decisions.verify({\n * artifact_id: 'pub_lending_v1',\n * decision_context: { credit_score: 720, loan_amount: 50000 },\n * });\n *\n * if (!result.allowed) {\n * throw new Error(`Blocked: ${result.verdict_description}`);\n * }\n *\n * // Debugging / tracing\n * console.log(result.lastResponse.requestId);\n *\n * @example\n * // Per-request options\n * const result = await nomos.decisions.verify(params, {\n * idempotencyKey: `verify-${transactionId}`,\n * timeout: 5000,\n * });\n */\n async verify(\n params: VerifyDecisionParams,\n opts?: RequestOptions,\n ): Promise<WithLastResponse<VerifyDecisionResult>> {\n const { artifact_id, decision_context, proposed_decision, correlation_id } = params;\n\n // Public artifacts (pub_*) use the open /verify endpoint — no API key required\n const isPublic = artifact_id.startsWith('pub_');\n let httpResp: Awaited<ReturnType<HttpClient['post']>>;\n\n if (isPublic) {\n httpResp = await this.http.post<any>('/api/v1/verify', {\n artifact_id,\n decision: proposed_decision ?? 'evaluate',\n inputs: decision_context,\n }, opts);\n } else {\n // /verify-decision expects: { artifact_id, decision, inputs, caller? }\n // NOT decision_context / proposed_decision at the top level.\n httpResp = await this.http.post<any>('/api/v1/verify-decision', {\n artifact_id,\n decision: proposed_decision ?? 'evaluate',\n inputs: decision_context,\n caller: { correlation_id: correlation_id ?? globalThis.crypto.randomUUID() },\n }, opts);\n }\n\n const raw: any = httpResp.data;\n\n return {\n id: raw.id ?? `req_${raw.execution_id ?? globalThis.crypto.randomUUID()}`,\n object: raw.object ?? 'decision',\n artifact_id: raw.artifact_id ?? artifact_id,\n artifact_name: raw.artifact_name ?? '',\n allowed: raw.allowed ?? false,\n verdict: raw.verdict ?? (raw.outcome === 'auto_approved' ? 'approved' : raw.outcome === 'auto_rejected' ? 'rejected' : 'escalated'),\n rule: raw.rule,\n evaluation: raw.evaluation ?? { rules_evaluated: raw.rules_evaluated ?? 0, rules_matched: 0, rules_expired: 0, conflicts_resolved: 0 },\n confidence: raw.confidence ?? { tier: raw.artifact_confidence ?? 'DECLARED', score: 1, description: '' },\n audit: raw.audit ?? { hash: raw.audit_hash ?? raw.audit_record ?? '', timestamp: raw.ts ?? new Date().toISOString() },\n performance: raw.performance ?? { latency_ms: raw.latency_ms ?? 0 },\n schema_version: raw.schema_version ?? '1.0.0',\n verdict_description: raw.verdict_description ?? '',\n incomplete_inputs: raw.incomplete_inputs,\n paths_to_approval: raw.paths_to_approval,\n lastResponse: httpResp.lastResponse,\n };\n }\n}\n","import type { HttpClient } from '../http-client.js';\nimport type {\n Artifact,\n ArtifactList,\n ArtifactSchema,\n ListArtifactsParams,\n RequestOptions,\n WithLastResponse,\n} from '../types.js';\n\nexport class Artifacts {\n constructor(private readonly http: HttpClient) {}\n\n /**\n * Retrieve a single artifact by ID.\n *\n * @example\n * const artifact = await nomos.artifacts.retrieve('loan_approval_v1');\n * console.log(artifact.ari_score, artifact.autonomy_band);\n * console.log(artifact.lastResponse.requestId); // for support tickets\n */\n async retrieve(\n artifactId: string,\n opts?: RequestOptions,\n ): Promise<WithLastResponse<Artifact>> {\n const { data, lastResponse } = await this.http.get<Artifact>(\n `/api/exchange/artifacts/${encodeURIComponent(artifactId)}`,\n opts,\n );\n return { ...data, lastResponse };\n }\n\n /**\n * List published artifacts on the Exchange with optional filters.\n *\n * @example\n * const { data, total } = await nomos.artifacts.list({ band: 'autonomous', limit: 10 });\n *\n * @example\n * // With per-request options\n * const page = await nomos.artifacts.list({ limit: 20 }, { timeout: 5000 });\n */\n async list(\n params: ListArtifactsParams = {},\n opts?: RequestOptions,\n ): Promise<WithLastResponse<ArtifactList>> {\n const qs = new URLSearchParams();\n if (params.band) qs.set('band', params.band);\n if (params.domain) qs.set('domain', params.domain);\n if (params.jurisdiction) qs.set('jurisdiction', params.jurisdiction);\n if (params.sort) qs.set('sort', params.sort);\n if (params.limit != null) qs.set('limit', String(params.limit));\n if (params.offset != null) qs.set('offset', String(params.offset));\n const query = qs.toString();\n\n const { data: raw, lastResponse } = await this.http.get<any>(\n `/api/exchange/artifacts${query ? `?${query}` : ''}`,\n opts,\n );\n\n // API returns { artifacts: [], total: N } — normalise to { data: [], total: N }\n const normalized: ArtifactList = {\n data: Array.isArray(raw) ? raw : (raw.artifacts ?? raw.data ?? []),\n total: raw.total ?? (Array.isArray(raw) ? raw.length : 0),\n limit: params.limit ?? 20,\n offset: params.offset ?? 0,\n };\n\n return { ...normalized, lastResponse };\n }\n\n /**\n * Auto-paginating iterator — yields every artifact across all pages.\n * Stops automatically when the last page is reached.\n *\n * @example\n * for await (const artifact of nomos.artifacts.listAutoPaging({ band: 'autonomous' })) {\n * console.log(artifact.title, artifact.ari_score);\n * }\n */\n async *listAutoPaging(\n params: ListArtifactsParams = {},\n opts?: RequestOptions,\n ): AsyncGenerator<Artifact> {\n let offset = params.offset ?? 0;\n const limit = params.limit ?? 20;\n\n while (true) {\n const page = await this.list({ ...params, offset, limit }, opts);\n for (const item of page.data) yield item;\n if (page.data.length < limit || offset + page.data.length >= page.total) break;\n offset += page.data.length;\n }\n }\n\n /**\n * Retrieve the declared input schema for a sealed artifact.\n *\n * Returns every field the artifact's rules reference — name, type, whether it's\n * required, and a ready-to-use example_inputs object. Use this to build forms,\n * validate payloads, or generate API docs without reading the rules manually.\n *\n * Requires an API key (artifact schemas are not public).\n *\n * @example\n * const schema = await nomos.artifacts.schema('art_abc123');\n * console.log(schema.required_fields); // ['credit_score', 'loan_amount']\n * console.log(schema.example_inputs); // { credit_score: 0, loan_amount: 0 }\n */\n async schema(\n artifactId: string,\n opts?: RequestOptions,\n ): Promise<WithLastResponse<ArtifactSchema>> {\n const { data, lastResponse } = await this.http.get<ArtifactSchema>(\n `/api/v1/artifacts/${encodeURIComponent(artifactId)}/schema`,\n opts,\n );\n return { ...data, lastResponse };\n }\n}\n","import type { HttpClient } from '../http-client.js';\nimport type {\n GenerateGovernanceParams,\n GenerateGovernanceResult,\n DetectContradictionsParams,\n DetectContradictionsResult,\n RequestOptions,\n WithLastResponse,\n} from '../types.js';\n\nexport class Governance {\n constructor(private readonly http: HttpClient) {}\n\n /**\n * Generate a sealed .nomos governance artifact from policy documents\n * and optional historical decision logs.\n *\n * @example\n * const artifact = await nomos.governance.generate({\n * policies: [policyText],\n * decision_logs: historicalRows,\n * domain: 'loan_approval',\n * });\n * console.log(artifact.ari_score, artifact.seal_hash);\n */\n async generate(\n params: GenerateGovernanceParams,\n opts?: RequestOptions,\n ): Promise<WithLastResponse<GenerateGovernanceResult>> {\n const { data, lastResponse } = await this.http.post<GenerateGovernanceResult>(\n '/api/v1/generate-governance',\n params,\n opts,\n );\n return { ...data, lastResponse };\n }\n\n /**\n * Detect contradictions and conflicts in a rule set before sealing.\n *\n * @example\n * const report = await nomos.governance.detectContradictions({ rules });\n * if (!report.clean) {\n * console.log(report.contradictions);\n * }\n */\n async detectContradictions(\n params: DetectContradictionsParams,\n opts?: RequestOptions,\n ): Promise<WithLastResponse<DetectContradictionsResult>> {\n const { data, lastResponse } = await this.http.post<DetectContradictionsResult>(\n '/api/v1/detect-contradictions',\n params,\n opts,\n );\n return { ...data, lastResponse };\n }\n}\n","import { NomosWebhookSignatureError } from '../errors.js';\nimport type { NomosWebhookEvent } from '../types.js';\n\n// Hex string → Uint8Array (no Buffer dependency — works in Node and browsers)\nfunction hexToBytes(hex: string): Uint8Array {\n if (hex.length % 2 !== 0) throw new NomosWebhookSignatureError('Invalid hex encoding in signature');\n const bytes = new Uint8Array(hex.length / 2);\n for (let i = 0; i < hex.length; i += 2) {\n const byte = parseInt(hex.slice(i, i + 2), 16);\n if (isNaN(byte)) throw new NomosWebhookSignatureError('Invalid hex encoding in signature');\n bytes[i / 2] = byte;\n }\n return bytes;\n}\n\n// Constant-time comparison (prevents timing attacks)\nfunction safeEqual(a: Uint8Array, b: Uint8Array): boolean {\n if (a.length !== b.length) return false;\n let diff = 0;\n for (let i = 0; i < a.length; i++) diff |= a[i] ^ b[i];\n return diff === 0;\n}\n\nexport class Webhooks {\n /**\n * Verify a NOMOS webhook signature and return the parsed event.\n *\n * Signature header format: `t=<unix_ts>,v1=<hmac_sha256_hex>`\n * Signed payload: `<timestamp>.<raw_body>`\n *\n * @example\n * // Express\n * app.post('/webhooks/nomos', express.raw({ type: 'application/json' }), async (req, res) => {\n * const event = await nomos.webhooks.constructEvent(\n * req.body,\n * req.headers['nomos-signature'] as string,\n * process.env.NOMOS_WEBHOOK_SECRET!,\n * );\n * console.log(event.type, event.data);\n * res.sendStatus(200);\n * });\n *\n * @throws {NomosWebhookSignatureError} if signature is invalid, expired, or malformed\n */\n async constructEvent(\n payload: string | Uint8Array,\n signature: string,\n secret: string,\n toleranceSeconds = 300,\n ): Promise<NomosWebhookEvent> {\n const body = typeof payload === 'string'\n ? payload\n : new TextDecoder().decode(payload);\n\n // Parse \"t=<ts>,v1=<hex>\" header\n const parts: Record<string, string> = {};\n for (const part of signature.split(',')) {\n const eq = part.indexOf('=');\n if (eq > -1) parts[part.slice(0, eq).trim()] = part.slice(eq + 1).trim();\n }\n\n if (!parts['t'] || !parts['v1']) {\n throw new NomosWebhookSignatureError(\n 'Invalid signature format — expected \"t=<timestamp>,v1=<hmac>\"',\n );\n }\n\n const timestamp = parseInt(parts['t'], 10);\n if (isNaN(timestamp)) {\n throw new NomosWebhookSignatureError('Invalid timestamp in webhook signature');\n }\n\n const ageSecs = Math.abs(Date.now() / 1000 - timestamp);\n if (toleranceSeconds > 0 && ageSecs > toleranceSeconds) {\n throw new NomosWebhookSignatureError(\n `Webhook timestamp too old (${Math.round(ageSecs)}s > ${toleranceSeconds}s tolerance). ` +\n 'Ensure your server clock is synced and the event is not being replayed.',\n );\n }\n\n // HMAC-SHA256 via Web Crypto API (Node 18+ / modern browsers — no dependencies)\n const enc = new TextEncoder();\n const keyMaterial = await globalThis.crypto.subtle.importKey(\n 'raw',\n enc.encode(secret),\n { name: 'HMAC', hash: 'SHA-256' },\n false,\n ['sign'],\n );\n const signedPayload = `${parts['t']}.${body}`;\n const expectedBuf = await globalThis.crypto.subtle.sign(\n 'HMAC',\n keyMaterial,\n enc.encode(signedPayload),\n );\n const expected = new Uint8Array(expectedBuf);\n const received = hexToBytes(parts['v1']);\n\n if (!safeEqual(expected, received)) {\n throw new NomosWebhookSignatureError(\n 'Webhook signature mismatch — verify your NOMOS_WEBHOOK_SECRET matches the one in Studio.',\n );\n }\n\n try {\n return JSON.parse(body) as NomosWebhookEvent;\n } catch {\n throw new NomosWebhookSignatureError('Webhook payload is not valid JSON');\n }\n }\n\n /**\n * Verify a webhook signature without parsing the event.\n * Returns `true` if valid, `false` if not (never throws).\n *\n * @example\n * const valid = await nomos.webhooks.verifySignature(rawBody, sig, secret);\n * if (!valid) return res.sendStatus(400);\n */\n async verifySignature(\n payload: string | Uint8Array,\n signature: string,\n secret: string,\n toleranceSeconds = 300,\n ): Promise<boolean> {\n try {\n await this.constructEvent(payload, signature, secret, toleranceSeconds);\n return true;\n } catch {\n return false;\n }\n }\n}\n","import { HttpClient } from './http-client.js';\nimport { Decisions } from './resources/decisions.js';\nimport { Artifacts } from './resources/artifacts.js';\nimport { Governance } from './resources/governance.js';\nimport { Webhooks } from './resources/webhooks.js';\nimport * as errors from './errors.js';\nimport type { NomosConfig } from './types.js';\n\nconst DEFAULT_BASE_URL = 'https://nomos.ai';\nconst DEFAULT_MAX_RETRIES = 3;\nconst DEFAULT_TIMEOUT = 30_000;\n\nexport class Nomos {\n readonly decisions: Decisions;\n readonly artifacts: Artifacts;\n readonly governance: Governance;\n readonly webhooks: Webhooks;\n\n /** Whether this instance is using a live or test API key. */\n readonly mode: 'live' | 'test';\n\n static readonly errors = errors;\n\n constructor(apiKey: string, config: NomosConfig = {}) {\n if (!apiKey || typeof apiKey !== 'string') {\n throw new errors.NomosAuthenticationError(\n 'A valid API key is required. Pass it as the first argument: new Nomos(\"nms_live_...\")',\n );\n }\n\n this.mode = apiKey.startsWith('nms_test_') ? 'test' : 'live';\n\n const http = new HttpClient({\n apiKey,\n baseUrl: (config.baseUrl ?? DEFAULT_BASE_URL).replace(/\\/$/, ''),\n maxRetries: config.maxRetries ?? DEFAULT_MAX_RETRIES,\n timeout: config.timeout ?? DEFAULT_TIMEOUT,\n });\n\n this.decisions = new Decisions(http);\n this.artifacts = new Artifacts(http);\n this.governance = new Governance(http);\n this.webhooks = new Webhooks();\n }\n}\n","import type { CanParams, CanResult, CanOptions } from './types.js';\n\n/**\n * The whole product in one verb: \"Can I do this?\"\n *\n * Ask a public Exchange authority a question and get back a deterministic, verifiable\n * verdict — no API key, no SDK setup, no reading a policy PDF. This is a thin, faithful\n * wrapper over the public Exchange query endpoint (the same call the exchange.nomosprotocol.com\n * \"Ask Authority\" box makes), so every answer is a real, addressable transcript you can open\n * at its `url` / `query_id`.\n *\n * Verdicts are exactly what the authority returns — AUTHORIZED / DENIED / ESCALATED — never\n * an invented shape. `allowed` is simply `verdict === 'AUTHORIZED'`; an ESCALATED result means\n * the authority needs more facts to decide (see `missing_inputs`), not a flat \"no\".\n *\n * @example\n * import { nomos } from '@nomosprotocol/sdk';\n *\n * const verdict = await nomos.can({\n * authority: 'eu-ai-act-full-regulation-2024-1689',\n * ai_system_circumvents_refugee_convention: true,\n * });\n * // → { allowed: false, verdict: 'DENIED', reason: 'Rule \"Prohibition…\" triggered…',\n * // query_id: 'qry_…', url: '/queries/qry_…', … }\n */\nconst DEFAULT_EXCHANGE_BASE = 'https://www.nomosprotocol.com';\n\nexport async function can(params: CanParams, opts?: CanOptions): Promise<CanResult> {\n const { authority, action, inputs, ...flat } = params;\n if (!authority || typeof authority !== 'string') {\n throw new Error('can(): `authority` (an Exchange artifact id or slug) is required.');\n }\n // Two equally valid shapes: an explicit `inputs` object, or the facts spread flat\n // alongside `authority`/`action`. Explicit `inputs` wins when both are present.\n const facts: Record<string, unknown> =\n inputs && typeof inputs === 'object' ? inputs : (flat as Record<string, unknown>);\n\n const base = (opts?.baseUrl ?? DEFAULT_EXCHANGE_BASE).replace(/\\/$/, '');\n const url = `${base}/api/exchange/artifacts/${encodeURIComponent(authority)}/query`;\n\n const res = await fetch(url, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({ inputs: facts, action }),\n signal: opts?.signal,\n });\n\n const data: any = await res.json().catch(() => null);\n if (!res.ok) {\n throw new Error(data?.error ?? `NOMOS query failed (HTTP ${res.status})`);\n }\n\n return {\n allowed: data.verdict === 'AUTHORIZED',\n verdict: data.verdict,\n reason: data.verdict_description,\n rule: data.matched_rule_id ?? null,\n query_id: data.query_id,\n url: data.url,\n authority: {\n id: data.artifact?.id ?? authority,\n title: data.artifact?.title ?? '',\n standing: data.artifact?.standing ?? '',\n },\n missing_inputs: data.missing_inputs ?? [],\n };\n}\n\n/**\n * Ready-to-use, keyless entry point matching the canonical `nomos.can(...)` form.\n * For authenticated, key-scoped operations use the `Nomos` class instead.\n */\nexport const nomos = { can };\n"],"mappings":";;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAUO,IAAM,aAAN,cAAyB,MAAM;AAAA,EAKpC,YAAY,SAAiB,MAAsB,QAAiB,WAAoB;AACtF,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,YAAY;AAAA,EACnB;AACF;AAEO,IAAM,2BAAN,cAAuC,WAAW;AAAA,EACvD,YAAY,UAAU,mBAAmB,WAAoB;AAC3D,UAAM,SAAS,wBAAwB,KAAK,SAAS;AACrD,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,0BAAN,cAAsC,WAAW;AAAA,EACtD,YAAY,UAAU,iBAAiB,WAAoB;AACzD,UAAM,SAAS,uBAAuB,KAAK,SAAS;AACpD,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,sBAAN,cAAkC,WAAW;AAAA,EAGlD,YAAY,UAAU,uBAAuB,YAAqB,WAAoB;AACpF,UAAM,SAAS,oBAAoB,KAAK,SAAS;AACjD,SAAK,OAAO;AACZ,SAAK,aAAa;AAAA,EACpB;AACF;AAEO,IAAM,uBAAN,cAAmC,WAAW;AAAA,EAGnD,YAAY,SAAiB,SAAmB,WAAoB;AAClE,UAAM,SAAS,oBAAoB,KAAK,SAAS;AACjD,SAAK,OAAO;AACZ,SAAK,UAAU;AAAA,EACjB;AACF;AAEO,IAAM,qBAAN,cAAiC,WAAW;AAAA,EACjD,YAAY,SAAiB,WAAoB;AAC/C,UAAM,SAAS,aAAa,KAAK,SAAS;AAC1C,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,gBAAN,cAA4B,WAAW;AAAA,EAC5C,YAAY,SAAiB,QAAgB,WAAoB;AAC/D,UAAM,SAAS,aAAa,QAAQ,SAAS;AAC7C,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,oBAAN,cAAgC,WAAW;AAAA,EAChD,YAAY,SAAiB;AAC3B,UAAM,SAAS,eAAe;AAC9B,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,6BAAN,cAAyC,WAAW;AAAA,EACzD,YAAY,SAAiB;AAC3B,UAAM,SAAS,2BAA2B,GAAG;AAC7C,SAAK,OAAO;AAAA,EACd;AACF;;;ACpFA,eAAsB,MAAM,IAA2B;AACrD,SAAO,IAAI,QAAQ,aAAW,WAAW,SAAS,EAAE,CAAC;AACvD;AAEO,SAAS,gBAAgB,SAAiB,SAAS,KAAa;AACrE,QAAM,MAAM,KAAK,IAAI,SAAS,KAAK,SAAS,IAAK;AACjD,SAAO,OAAO,OAAO,KAAK,OAAO,IAAI;AACvC;AAEO,SAAS,YAAY,QAAyB;AACnD,SAAO,WAAW,OAAO,UAAU;AACrC;;;ACCA,IAAM,cAAc;AAcb,IAAM,aAAN,MAAiB;AAAA,EACtB,YAA6B,MAAyB;AAAzB;AAAA,EAA0B;AAAA,EAEvD,MAAM,IAAO,MAAc,SAAoD;AAC7E,WAAO,KAAK,QAAW,OAAO,MAAM,QAAW,OAAO;AAAA,EACxD;AAAA,EAEA,MAAM,KAAQ,MAAc,MAAe,SAAoD;AAC7F,WAAO,KAAK,QAAW,QAAQ,MAAM,MAAM,OAAO;AAAA,EACpD;AAAA,EAEA,MAAc,QACZ,QACA,MACA,MACA,SACA,UAAU,GACgB;AAC1B,UAAM,SAAa,SAAS,UAAc,KAAK,KAAK;AACpD,UAAM,UAAa,SAAS,WAAc,KAAK,KAAK;AACpD,UAAM,aAAa,SAAS,cAAc,KAAK,KAAK;AAEpD,UAAM,MAAM,GAAG,KAAK,KAAK,OAAO,GAAG,IAAI;AACvC,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,OAAO;AAE1D,UAAM,UAAkC;AAAA,MACtC,gBAAqB;AAAA,MACrB,mBAAqB;AAAA,MACrB,cAAqB,cAAc,WAAW;AAAA,MAC9C,qBAAqB;AAAA,IACvB;AACA,QAAI,SAAS,gBAAgB;AAC3B,cAAQ,iBAAiB,IAAI,QAAQ;AAAA,IACvC;AAEA,QAAI;AACJ,QAAI;AACF,YAAM,MAAM,MAAM,KAAK;AAAA,QACrB;AAAA,QACA,QAAQ,WAAW;AAAA,QACnB;AAAA,QACA,MAAM,QAAQ,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,MAC9C,CAAC;AAAA,IACH,SAAS,KAAU;AACjB,mBAAa,KAAK;AAClB,UAAI,IAAI,SAAS,cAAc;AAC7B,cAAM,IAAI,kBAAkB,2BAA2B,OAAO,IAAI;AAAA,MACpE;AACA,YAAM,IAAI,kBAAkB,IAAI,WAAW,eAAe;AAAA,IAC5D,UAAE;AACA,mBAAa,KAAK;AAAA,IACpB;AAEA,UAAM,YAAY,IAAI,QAAQ,IAAI,cAAc,KAAK;AACrD,UAAM,aAAqC,CAAC;AAC5C,QAAI,QAAQ,QAAQ,CAAC,OAAO,QAAQ;AAAE,iBAAW,GAAG,IAAI;AAAA,IAAO,CAAC;AAChE,UAAM,eAAiC;AAAA,MACrC;AAAA,MACA,YAAY,IAAI;AAAA,MAChB,SAAS;AAAA,IACX;AAEA,QAAI,IAAI,IAAI;AACV,YAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,aAAO,EAAE,MAAM,aAAa;AAAA,IAC9B;AAGA,QAAI,YAAY,IAAI,MAAM,KAAK,UAAU,YAAY;AACnD,YAAM,aAAa,IAAI,QAAQ,IAAI,aAAa;AAChD,YAAM,QAAQ,aAAa,SAAS,YAAY,EAAE,IAAI,MAAO,gBAAgB,OAAO;AACpF,YAAM,MAAM,KAAK;AACjB,aAAO,KAAK,QAAW,QAAQ,MAAM,MAAM,SAAS,UAAU,CAAC;AAAA,IACjE;AAEA,QAAI,UAAe,CAAC;AACpB,QAAI;AAAE,gBAAU,MAAM,IAAI,KAAK;AAAA,IAAG,QAAQ;AAAA,IAAC;AAC3C,UAAM,UAAkB,SAAS,SAAS,SAAS,WAAW,IAAI;AAElE,YAAQ,IAAI,QAAQ;AAAA,MAClB,KAAK;AAAK,cAAM,IAAI,yBAAyB,SAAS,SAAS;AAAA,MAC/D,KAAK;AAAK,cAAM,IAAI,wBAAwB,SAAS,SAAS;AAAA,MAC9D,KAAK;AAAK,cAAM,IAAI,mBAAmB,SAAS,SAAS;AAAA,MACzD,KAAK;AAAA,MACL,KAAK;AAAK,cAAM,IAAI,qBAAqB,SAAS,SAAS,SAAS,SAAS;AAAA,MAC7E,KAAK;AAAK,cAAM,IAAI;AAAA,UAClB;AAAA,UACA,IAAI,QAAQ,IAAI,aAAa,IAAI,SAAS,IAAI,QAAQ,IAAI,aAAa,GAAI,EAAE,IAAI;AAAA,UACjF;AAAA,QACF;AAAA,MACA;AAAS,cAAM,IAAI,cAAc,SAAS,IAAI,QAAQ,SAAS;AAAA,IACjE;AAAA,EACF;AACF;;;AChHO,IAAM,YAAN,MAAgB;AAAA,EACrB,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA4BhD,MAAM,OACJ,QACA,MACiD;AACjD,UAAM,EAAE,aAAa,kBAAkB,mBAAmB,eAAe,IAAI;AAG7E,UAAM,WAAW,YAAY,WAAW,MAAM;AAC9C,QAAI;AAEJ,QAAI,UAAU;AACZ,iBAAW,MAAM,KAAK,KAAK,KAAU,kBAAkB;AAAA,QACrD;AAAA,QACA,UAAW,qBAAqB;AAAA,QAChC,QAAW;AAAA,MACb,GAAG,IAAI;AAAA,IACT,OAAO;AAGL,iBAAW,MAAM,KAAK,KAAK,KAAU,2BAA2B;AAAA,QAC9D;AAAA,QACA,UAAU,qBAAqB;AAAA,QAC/B,QAAU;AAAA,QACV,QAAU,EAAE,gBAAgB,kBAAkB,WAAW,OAAO,WAAW,EAAE;AAAA,MAC/E,GAAG,IAAI;AAAA,IACT;AAEA,UAAM,MAAW,SAAS;AAE1B,WAAO;AAAA,MACL,IAAqB,IAAI,MAAM,OAAO,IAAI,gBAAgB,WAAW,OAAO,WAAW,CAAC;AAAA,MACxF,QAAqB,IAAI,UAAU;AAAA,MACnC,aAAqB,IAAI,eAAe;AAAA,MACxC,eAAqB,IAAI,iBAAiB;AAAA,MAC1C,SAAqB,IAAI,WAAW;AAAA,MACpC,SAAqB,IAAI,YAAY,IAAI,YAAY,kBAAkB,aAAa,IAAI,YAAY,kBAAkB,aAAa;AAAA,MACnI,MAAqB,IAAI;AAAA,MACzB,YAAqB,IAAI,cAAc,EAAE,iBAAiB,IAAI,mBAAmB,GAAG,eAAe,GAAG,eAAe,GAAG,oBAAoB,EAAE;AAAA,MAC9I,YAAqB,IAAI,cAAc,EAAE,MAAM,IAAI,uBAAuB,YAAY,OAAO,GAAG,aAAa,GAAG;AAAA,MAChH,OAAqB,IAAI,SAAS,EAAE,MAAM,IAAI,cAAc,IAAI,gBAAgB,IAAI,WAAW,IAAI,OAAM,oBAAI,KAAK,GAAE,YAAY,EAAE;AAAA,MAClI,aAAqB,IAAI,eAAe,EAAE,YAAY,IAAI,cAAc,EAAE;AAAA,MAC1E,gBAAqB,IAAI,kBAAkB;AAAA,MAC3C,qBAAqB,IAAI,uBAAuB;AAAA,MAChD,mBAAqB,IAAI;AAAA,MACzB,mBAAqB,IAAI;AAAA,MACzB,cAAqB,SAAS;AAAA,IAChC;AAAA,EACF;AACF;;;AC3EO,IAAM,YAAN,MAAgB;AAAA,EACrB,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUhD,MAAM,SACJ,YACA,MACqC;AACrC,UAAM,EAAE,MAAM,aAAa,IAAI,MAAM,KAAK,KAAK;AAAA,MAC7C,2BAA2B,mBAAmB,UAAU,CAAC;AAAA,MACzD;AAAA,IACF;AACA,WAAO,EAAE,GAAG,MAAM,aAAa;AAAA,EACjC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAM,KACJ,SAA8B,CAAC,GAC/B,MACyC;AACzC,UAAM,KAAK,IAAI,gBAAgB;AAC/B,QAAI,OAAO,KAAgB,IAAG,IAAI,QAAQ,OAAO,IAAI;AACrD,QAAI,OAAO,OAAgB,IAAG,IAAI,UAAU,OAAO,MAAM;AACzD,QAAI,OAAO,aAAgB,IAAG,IAAI,gBAAgB,OAAO,YAAY;AACrE,QAAI,OAAO,KAAgB,IAAG,IAAI,QAAQ,OAAO,IAAI;AACrD,QAAI,OAAO,SAAS,KAAO,IAAG,IAAI,SAAS,OAAO,OAAO,KAAK,CAAC;AAC/D,QAAI,OAAO,UAAU,KAAM,IAAG,IAAI,UAAU,OAAO,OAAO,MAAM,CAAC;AACjE,UAAM,QAAQ,GAAG,SAAS;AAE1B,UAAM,EAAE,MAAM,KAAK,aAAa,IAAI,MAAM,KAAK,KAAK;AAAA,MAClD,0BAA0B,QAAQ,IAAI,KAAK,KAAK,EAAE;AAAA,MAClD;AAAA,IACF;AAGA,UAAM,aAA2B;AAAA,MAC/B,MAAQ,MAAM,QAAQ,GAAG,IAAI,MAAO,IAAI,aAAa,IAAI,QAAQ,CAAC;AAAA,MAClE,OAAQ,IAAI,UAAU,MAAM,QAAQ,GAAG,IAAI,IAAI,SAAS;AAAA,MACxD,OAAQ,OAAO,SAAS;AAAA,MACxB,QAAQ,OAAO,UAAU;AAAA,IAC3B;AAEA,WAAO,EAAE,GAAG,YAAY,aAAa;AAAA,EACvC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,OAAO,eACL,SAA8B,CAAC,GAC/B,MAC0B;AAC1B,QAAI,SAAS,OAAO,UAAU;AAC9B,UAAM,QAAQ,OAAO,SAAS;AAE9B,WAAO,MAAM;AACX,YAAM,OAAO,MAAM,KAAK,KAAK,EAAE,GAAG,QAAQ,QAAQ,MAAM,GAAG,IAAI;AAC/D,iBAAW,QAAQ,KAAK,KAAM,OAAM;AACpC,UAAI,KAAK,KAAK,SAAS,SAAS,SAAS,KAAK,KAAK,UAAU,KAAK,MAAO;AACzE,gBAAU,KAAK,KAAK;AAAA,IACtB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,MAAM,OACJ,YACA,MAC2C;AAC3C,UAAM,EAAE,MAAM,aAAa,IAAI,MAAM,KAAK,KAAK;AAAA,MAC7C,qBAAqB,mBAAmB,UAAU,CAAC;AAAA,MACnD;AAAA,IACF;AACA,WAAO,EAAE,GAAG,MAAM,aAAa;AAAA,EACjC;AACF;;;AC7GO,IAAM,aAAN,MAAiB;AAAA,EACtB,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAchD,MAAM,SACJ,QACA,MACqD;AACrD,UAAM,EAAE,MAAM,aAAa,IAAI,MAAM,KAAK,KAAK;AAAA,MAC7C;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,WAAO,EAAE,GAAG,MAAM,aAAa;AAAA,EACjC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,qBACJ,QACA,MACuD;AACvD,UAAM,EAAE,MAAM,aAAa,IAAI,MAAM,KAAK,KAAK;AAAA,MAC7C;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,WAAO,EAAE,GAAG,MAAM,aAAa;AAAA,EACjC;AACF;;;ACrDA,SAAS,WAAW,KAAyB;AAC3C,MAAI,IAAI,SAAS,MAAM,EAAG,OAAM,IAAI,2BAA2B,mCAAmC;AAClG,QAAM,QAAQ,IAAI,WAAW,IAAI,SAAS,CAAC;AAC3C,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK,GAAG;AACtC,UAAM,OAAO,SAAS,IAAI,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE;AAC7C,QAAI,MAAM,IAAI,EAAG,OAAM,IAAI,2BAA2B,mCAAmC;AACzF,UAAM,IAAI,CAAC,IAAI;AAAA,EACjB;AACA,SAAO;AACT;AAGA,SAAS,UAAU,GAAe,GAAwB;AACxD,MAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,IAAK,SAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;AACrD,SAAO,SAAS;AAClB;AAEO,IAAM,WAAN,MAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAqBpB,MAAM,eACJ,SACA,WACA,QACA,mBAAmB,KACS;AAC5B,UAAM,OAAO,OAAO,YAAY,WAC5B,UACA,IAAI,YAAY,EAAE,OAAO,OAAO;AAGpC,UAAM,QAAgC,CAAC;AACvC,eAAW,QAAQ,UAAU,MAAM,GAAG,GAAG;AACvC,YAAM,KAAK,KAAK,QAAQ,GAAG;AAC3B,UAAI,KAAK,GAAI,OAAM,KAAK,MAAM,GAAG,EAAE,EAAE,KAAK,CAAC,IAAI,KAAK,MAAM,KAAK,CAAC,EAAE,KAAK;AAAA,IACzE;AAEA,QAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,GAAG;AAC/B,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,UAAM,YAAY,SAAS,MAAM,GAAG,GAAG,EAAE;AACzC,QAAI,MAAM,SAAS,GAAG;AACpB,YAAM,IAAI,2BAA2B,wCAAwC;AAAA,IAC/E;AAEA,UAAM,UAAU,KAAK,IAAI,KAAK,IAAI,IAAI,MAAO,SAAS;AACtD,QAAI,mBAAmB,KAAK,UAAU,kBAAkB;AACtD,YAAM,IAAI;AAAA,QACR,8BAA8B,KAAK,MAAM,OAAO,CAAC,OAAO,gBAAgB;AAAA,MAE1E;AAAA,IACF;AAGA,UAAM,MAAM,IAAI,YAAY;AAC5B,UAAM,cAAc,MAAM,WAAW,OAAO,OAAO;AAAA,MACjD;AAAA,MACA,IAAI,OAAO,MAAM;AAAA,MACjB,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,MAChC;AAAA,MACA,CAAC,MAAM;AAAA,IACT;AACA,UAAM,gBAAgB,GAAG,MAAM,GAAG,CAAC,IAAI,IAAI;AAC3C,UAAM,cAAc,MAAM,WAAW,OAAO,OAAO;AAAA,MACjD;AAAA,MACA;AAAA,MACA,IAAI,OAAO,aAAa;AAAA,IAC1B;AACA,UAAM,WAAW,IAAI,WAAW,WAAW;AAC3C,UAAM,WAAW,WAAW,MAAM,IAAI,CAAC;AAEvC,QAAI,CAAC,UAAU,UAAU,QAAQ,GAAG;AAClC,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,QAAI;AACF,aAAO,KAAK,MAAM,IAAI;AAAA,IACxB,QAAQ;AACN,YAAM,IAAI,2BAA2B,mCAAmC;AAAA,IAC1E;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,gBACJ,SACA,WACA,QACA,mBAAmB,KACD;AAClB,QAAI;AACF,YAAM,KAAK,eAAe,SAAS,WAAW,QAAQ,gBAAgB;AACtE,aAAO;AAAA,IACT,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACF;;;AC5HA,IAAM,mBAAoB;AAC1B,IAAM,sBAAsB;AAC5B,IAAM,kBAAoB;AAEnB,IAAM,QAAN,MAAY;AAAA,EASjB;AAAA,SAAgB,SAAS;AAAA;AAAA,EAEzB,YAAY,QAAgB,SAAsB,CAAC,GAAG;AACpD,QAAI,CAAC,UAAU,OAAO,WAAW,UAAU;AACzC,YAAM,IAAW;AAAA,QACf;AAAA,MACF;AAAA,IACF;AAEA,SAAK,OAAO,OAAO,WAAW,WAAW,IAAI,SAAS;AAEtD,UAAM,OAAO,IAAI,WAAW;AAAA,MAC1B;AAAA,MACA,UAAa,OAAO,WAAW,kBAAkB,QAAQ,OAAO,EAAE;AAAA,MAClE,YAAY,OAAO,cAAc;AAAA,MACjC,SAAY,OAAO,WAAc;AAAA,IACnC,CAAC;AAED,SAAK,YAAa,IAAI,UAAU,IAAI;AACpC,SAAK,YAAa,IAAI,UAAU,IAAI;AACpC,SAAK,aAAa,IAAI,WAAW,IAAI;AACrC,SAAK,WAAa,IAAI,SAAS;AAAA,EACjC;AACF;;;ACnBA,IAAM,wBAAwB;AAE9B,eAAsB,IAAI,QAAmB,MAAuC;AAClF,QAAM,EAAE,WAAW,QAAQ,QAAQ,GAAG,KAAK,IAAI;AAC/C,MAAI,CAAC,aAAa,OAAO,cAAc,UAAU;AAC/C,UAAM,IAAI,MAAM,mEAAmE;AAAA,EACrF;AAGA,QAAM,QACJ,UAAU,OAAO,WAAW,WAAW,SAAU;AAEnD,QAAM,QAAQ,MAAM,WAAW,uBAAuB,QAAQ,OAAO,EAAE;AACvE,QAAM,MAAM,GAAG,IAAI,2BAA2B,mBAAmB,SAAS,CAAC;AAE3E,QAAM,MAAM,MAAM,MAAM,KAAK;AAAA,IAC3B,QAAQ;AAAA,IACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAC9C,MAAM,KAAK,UAAU,EAAE,QAAQ,OAAO,OAAO,CAAC;AAAA,IAC9C,QAAQ,MAAM;AAAA,EAChB,CAAC;AAED,QAAM,OAAY,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI;AACnD,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,IAAI,MAAM,MAAM,SAAS,4BAA4B,IAAI,MAAM,GAAG;AAAA,EAC1E;AAEA,SAAO;AAAA,IACL,SAAS,KAAK,YAAY;AAAA,IAC1B,SAAS,KAAK;AAAA,IACd,QAAQ,KAAK;AAAA,IACb,MAAM,KAAK,mBAAmB;AAAA,IAC9B,UAAU,KAAK;AAAA,IACf,KAAK,KAAK;AAAA,IACV,WAAW;AAAA,MACT,IAAI,KAAK,UAAU,MAAM;AAAA,MACzB,OAAO,KAAK,UAAU,SAAS;AAAA,MAC/B,UAAU,KAAK,UAAU,YAAY;AAAA,IACvC;AAAA,IACA,gBAAgB,KAAK,kBAAkB,CAAC;AAAA,EAC1C;AACF;AAMO,IAAM,QAAQ,EAAE,IAAI;","names":[]}