@openleash/core 0.0.2 → 0.1.0

package/dist/policy-parser.d.ts

@@ -0,0 +1,192 @@
+import type { Policy } from './types.js';
+export declare function parsePolicyYaml(yamlStr: string): Policy;
+export declare function validatePolicyYaml(yamlStr: string): {
+    valid: boolean;
+    errors?: string[];
+};
+export declare const policyJsonSchema: {
+    title: string;
+    type: string;
+    required: string[];
+    properties: {
+        version: {
+            enum: number[];
+        };
+        default: {
+            enum: string[];
+        };
+        rules: {
+            type: string;
+            items: {
+                type: string;
+                required: string[];
+                properties: {
+                    id: {
+                        type: string;
+                    };
+                    effect: {
+                        enum: string[];
+                    };
+                    action: {
+                        type: string;
+                    };
+                    description: {
+                        type: string;
+                    };
+                    when: {
+                        $ref: string;
+                    };
+                    constraints: {
+                        type: string;
+                        properties: {
+                            amount_max: {
+                                type: string;
+                            };
+                            amount_min: {
+                                type: string;
+                            };
+                            currency: {
+                                type: string;
+                                items: {
+                                    type: string;
+                                };
+                            };
+                            merchant_domain: {
+                                type: string;
+                                items: {
+                                    type: string;
+                                };
+                            };
+                            allowed_domains: {
+                                type: string;
+                                items: {
+                                    type: string;
+                                };
+                            };
+                            blocked_domains: {
+                                type: string;
+                                items: {
+                                    type: string;
+                                };
+                            };
+                        };
+                        additionalProperties: boolean;
+                    };
+                    requirements: {
+                        type: string;
+                        properties: {
+                            min_assurance_level: {
+                                enum: string[];
+                            };
+                            credential_scheme: {
+                                type: string;
+                            };
+                        };
+                        additionalProperties: boolean;
+                    };
+                    obligations: {
+                        type: string;
+                        items: {
+                            type: string;
+                            required: string[];
+                            properties: {
+                                type: {
+                                    type: string;
+                                };
+                                params: {
+                                    type: string;
+                                };
+                            };
+                        };
+                    };
+                    proof: {
+                        type: string;
+                        properties: {
+                            required: {
+                                type: string;
+                            };
+                            ttl_seconds: {
+                                type: string;
+                            };
+                        };
+                        additionalProperties: boolean;
+                    };
+                };
+                additionalProperties: boolean;
+            };
+        };
+    };
+    additionalProperties: boolean;
+    $defs: {
+        expr: {
+            oneOf: ({
+                type: string;
+                required: string[];
+                properties: {
+                    all: {
+                        type: string;
+                        items: {
+                            $ref: string;
+                        };
+                    };
+                    any?: undefined;
+                    not?: undefined;
+                    match?: undefined;
+                };
+                additionalProperties: boolean;
+            } | {
+                type: string;
+                required: string[];
+                properties: {
+                    any: {
+                        type: string;
+                        items: {
+                            $ref: string;
+                        };
+                    };
+                    all?: undefined;
+                    not?: undefined;
+                    match?: undefined;
+                };
+                additionalProperties: boolean;
+            } | {
+                type: string;
+                required: string[];
+                properties: {
+                    not: {
+                        $ref: string;
+                    };
+                    all?: undefined;
+                    any?: undefined;
+                    match?: undefined;
+                };
+                additionalProperties: boolean;
+            } | {
+                type: string;
+                required: string[];
+                properties: {
+                    match: {
+                        type: string;
+                        required: string[];
+                        properties: {
+                            path: {
+                                type: string;
+                                pattern: string;
+                            };
+                            op: {
+                                enum: string[];
+                            };
+                            value: {};
+                        };
+                        additionalProperties: boolean;
+                    };
+                    all?: undefined;
+                    any?: undefined;
+                    not?: undefined;
+                };
+                additionalProperties: boolean;
+            })[];
+        };
+    };
+};
+//# sourceMappingURL=policy-parser.d.ts.map

package/dist/policy-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-parser.d.ts","sourceRoot":"","sources":["../src/policy-parser.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAYzC,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CASvD;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAezF;AAGD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwG5B,CAAC"}

package/dist/policy-parser.js

@@ -0,0 +1,153 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.policyJsonSchema = void 0;
+exports.parsePolicyYaml = parsePolicyYaml;
+exports.validatePolicyYaml = validatePolicyYaml;
+const yaml_1 = require("yaml");
+const ajv_1 = __importDefault(require("ajv"));
+let _ajv = null;
+let _validate = null;
+function getValidator() {
+    if (_validate)
+        return _validate;
+    _ajv = new ajv_1.default({ allErrors: true, strict: false });
+    _validate = _ajv.compile(exports.policyJsonSchema);
+    return _validate;
+}
+function parsePolicyYaml(yamlStr) {
+    const parsed = (0, yaml_1.parse)(yamlStr);
+    const validate = getValidator();
+    const valid = validate(parsed);
+    if (!valid) {
+        const errors = validate.errors?.map((e) => `${e.instancePath} ${e.message}`).join('; ');
+        throw new Error(`Policy validation failed: ${errors}`);
+    }
+    return parsed;
+}
+function validatePolicyYaml(yamlStr) {
+    try {
+        const parsed = (0, yaml_1.parse)(yamlStr);
+        const validate = getValidator();
+        const valid = validate(parsed);
+        if (!valid) {
+            return {
+                valid: false,
+                errors: validate.errors?.map((e) => `${e.instancePath} ${e.message}`) ?? ['Unknown error'],
+            };
+        }
+        return { valid: true };
+    }
+    catch (e) {
+        return { valid: false, errors: [e.message] };
+    }
+}
+// Inline JSON Schema for policy validation (also exported for docs/policy.schema.json)
+exports.policyJsonSchema = {
+    "title": "openleash policy v1",
+    "type": "object",
+    "required": ["version", "default", "rules"],
+    "properties": {
+        "version": { "enum": [1] },
+        "default": { "enum": ["allow", "deny"] },
+        "rules": {
+            "type": "array",
+            "items": {
+                "type": "object",
+                "required": ["id", "effect", "action"],
+                "properties": {
+                    "id": { "type": "string" },
+                    "effect": { "enum": ["allow", "deny"] },
+                    "action": { "type": "string" },
+                    "description": { "type": "string" },
+                    "when": { "$ref": "#/$defs/expr" },
+                    "constraints": {
+                        "type": "object",
+                        "properties": {
+                            "amount_max": { "type": "number" },
+                            "amount_min": { "type": "number" },
+                            "currency": { "type": "array", "items": { "type": "string" } },
+                            "merchant_domain": { "type": "array", "items": { "type": "string" } },
+                            "allowed_domains": { "type": "array", "items": { "type": "string" } },
+                            "blocked_domains": { "type": "array", "items": { "type": "string" } }
+                        },
+                        "additionalProperties": false
+                    },
+                    "requirements": {
+                        "type": "object",
+                        "properties": {
+                            "min_assurance_level": { "enum": ["LOW", "SUBSTANTIAL", "HIGH"] },
+                            "credential_scheme": { "type": "string" }
+                        },
+                        "additionalProperties": false
+                    },
+                    "obligations": {
+                        "type": "array",
+                        "items": {
+                            "type": "object",
+                            "required": ["type"],
+                            "properties": {
+                                "type": { "type": "string" },
+                                "params": { "type": "object" }
+                            }
+                        }
+                    },
+                    "proof": {
+                        "type": "object",
+                        "properties": {
+                            "required": { "type": "boolean" },
+                            "ttl_seconds": { "type": "number" }
+                        },
+                        "additionalProperties": false
+                    }
+                },
+                "additionalProperties": false
+            }
+        }
+    },
+    "additionalProperties": false,
+    "$defs": {
+        "expr": {
+            "oneOf": [
+                {
+                    "type": "object",
+                    "required": ["all"],
+                    "properties": { "all": { "type": "array", "items": { "$ref": "#/$defs/expr" } } },
+                    "additionalProperties": false
+                },
+                {
+                    "type": "object",
+                    "required": ["any"],
+                    "properties": { "any": { "type": "array", "items": { "$ref": "#/$defs/expr" } } },
+                    "additionalProperties": false
+                },
+                {
+                    "type": "object",
+                    "required": ["not"],
+                    "properties": { "not": { "$ref": "#/$defs/expr" } },
+                    "additionalProperties": false
+                },
+                {
+                    "type": "object",
+                    "required": ["match"],
+                    "properties": {
+                        "match": {
+                            "type": "object",
+                            "required": ["path", "op"],
+                            "properties": {
+                                "path": { "type": "string", "pattern": "^\\$\\." },
+                                "op": { "enum": ["eq", "neq", "in", "nin", "lt", "lte", "gt", "gte", "regex", "exists"] },
+                                "value": {}
+                            },
+                            "additionalProperties": false
+                        }
+                    },
+                    "additionalProperties": false
+                }
+            ]
+        }
+    }
+};
+//# sourceMappingURL=policy-parser.js.map

package/dist/policy-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-parser.js","sourceRoot":"","sources":["../src/policy-parser.ts"],"names":[],"mappings":";;;;;;AAcA,0CASC;AAED,gDAeC;AAxCD,+BAA0C;AAC1C,8CAAsB;AAGtB,IAAI,IAAI,GAAe,IAAI,CAAC;AAC5B,IAAI,SAAS,GAAsC,IAAI,CAAC;AAExD,SAAS,YAAY;IACnB,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC;IAChC,IAAI,GAAG,IAAI,aAAG,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;IAC3C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,eAAe,CAAC,OAAe;IAC7C,MAAM,MAAM,GAAG,IAAA,YAAS,EAAC,OAAO,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,MAAgB,CAAC;AAC1B,CAAC;AAED,SAAgB,kBAAkB,CAAC,OAAe;IAChD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,YAAS,EAAC,OAAO,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC;aAC3F,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAE,CAAW,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,uFAAuF;AAC1E,QAAA,gBAAgB,GAAG;IAC9B,OAAO,EAAE,qBAAqB;IAC9B,MAAM,EAAE,QAAQ;IAChB,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC;IAC3C,YAAY,EAAE;QACZ,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;QAC1B,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE;QACxC,OAAO,EAAE;YACP,MAAM,EAAE,OAAO;YACf,OAAO,EAAE;gBACP,MAAM,EAAE,QAAQ;gBAChB,UAAU,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC;gBACtC,YAAY,EAAE;oBACZ,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;oBAC1B,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE;oBACvC,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;oBAC9B,aAAa,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;oBACnC,MAAM,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE;oBAClC,aAAa,EAAE;wBACb,MAAM,EAAE,QAAQ;wBAChB,YAAY,EAAE;4BACZ,YAAY,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;4BAClC,YAAY,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;4BAClC,UAAU,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;4BAC9D,iBAAiB,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;4BACrE,iBAAiB,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;4BACrE,iBAAiB,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;yBACtE;wBACD,sBAAsB,EAAE,KAAK;qBAC9B;oBACD,cAAc,EAAE;wBACd,MAAM,EAAE,QAAQ;wBAChB,YAAY,EAAE;4BACZ,qBAAqB,EAAE,EAAE,MAAM,EAAE,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE;4BACjE,mBAAmB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;yBAC1C;wBACD,sBAAsB,EAAE,KAAK;qBAC9B;oBACD,aAAa,EAAE;wBACb,MAAM,EAAE,OAAO;wBACf,OAAO,EAAE;4BACP,MAAM,EAAE,QAAQ;4BAChB,UAAU,EAAE,CAAC,MAAM,CAAC;4BACpB,YAAY,EAAE;gCACZ,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;gCAC5B,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;6BAC/B;yBACF;qBACF;oBACD,OAAO,EAAE;wBACP,MAAM,EAAE,QAAQ;wBAChB,YAAY,EAAE;4BACZ,UAAU,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;4BACjC,aAAa,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;yBACpC;wBACD,sBAAsB,EAAE,KAAK;qBAC9B;iBACF;gBACD,sBAAsB,EAAE,KAAK;aAC9B;SACF;KACF;IACD,sBAAsB,EAAE,KAAK;IAC7B,OAAO,EAAE;QACP,MAAM,EAAE;YACN,OAAO,EAAE;gBACP;oBACE,MAAM,EAAE,QAAQ;oBAChB,UAAU,EAAE,CAAC,KAAK,CAAC;oBACnB,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE;oBACjF,sBAAsB,EAAE,KAAK;iBAC9B;gBACD;oBACE,MAAM,EAAE,QAAQ;oBAChB,UAAU,EAAE,CAAC,KAAK,CAAC;oBACnB,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE;oBACjF,sBAAsB,EAAE,KAAK;iBAC9B;gBACD;oBACE,MAAM,EAAE,QAAQ;oBAChB,UAAU,EAAE,CAAC,KAAK,CAAC;oBACnB,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE;oBACnD,sBAAsB,EAAE,KAAK;iBAC9B;gBACD;oBACE,MAAM,EAAE,QAAQ;oBAChB,UAAU,EAAE,CAAC,OAAO,CAAC;oBACrB,YAAY,EAAE;wBACZ,OAAO,EAAE;4BACP,MAAM,EAAE,QAAQ;4BAChB,UAAU,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC;4BAC1B,YAAY,EAAE;gCACZ,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE;gCAClD,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE;gCACzF,OAAO,EAAE,EAAE;6BACZ;4BACD,sBAAsB,EAAE,KAAK;yBAC9B;qBACF;oBACD,sBAAsB,EAAE,KAAK;iBAC9B;aACF;SACF;KACF;CACF,CAAC"}

package/dist/signing.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Build the signing input string for agent request signing.
+ */
+export declare function buildSigningInput(method: string, urlPath: string, timestamp: string, nonce: string, bodySha256: string): string;
+/**
+ * Sign a request using Ed25519 private key.
+ */
+export declare function signRequest(params: {
+    method: string;
+    path: string;
+    timestamp: string;
+    nonce: string;
+    bodyBytes: Buffer;
+    privateKeyB64: string;
+}): {
+    'X-Agent-Id'?: string;
+    'X-Timestamp': string;
+    'X-Nonce': string;
+    'X-Body-Sha256': string;
+    'X-Signature': string;
+};
+/**
+ * Verify an agent's request signature.
+ */
+export declare function verifyRequestSignature(params: {
+    method: string;
+    path: string;
+    timestamp: string;
+    nonce: string;
+    bodySha256: string;
+    signatureB64: string;
+    publicKeyB64: string;
+}): boolean;
+//# sourceMappingURL=signing.d.ts.map

package/dist/signing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.d.ts","sourceRoot":"","sources":["../src/signing.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,GACjB,MAAM,CAER;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB,GAAG;IACF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;CACvB,CAwBA;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAiBV"}

package/dist/signing.js

@@ -0,0 +1,79 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildSigningInput = buildSigningInput;
+exports.signRequest = signRequest;
+exports.verifyRequestSignature = verifyRequestSignature;
+const crypto = __importStar(require("node:crypto"));
+const canonicalize_js_1 = require("./canonicalize.js");
+/**
+ * Build the signing input string for agent request signing.
+ */
+function buildSigningInput(method, urlPath, timestamp, nonce, bodySha256) {
+    return `${method}\n${urlPath}\n${timestamp}\n${nonce}\n${bodySha256}`;
+}
+/**
+ * Sign a request using Ed25519 private key.
+ */
+function signRequest(params) {
+    const bodySha256 = (0, canonicalize_js_1.sha256Hex)(params.bodyBytes);
+    const signingInput = buildSigningInput(params.method, params.path, params.timestamp, params.nonce, bodySha256);
+    const privateKey = crypto.createPrivateKey({
+        key: Buffer.from(params.privateKeyB64, 'base64'),
+        format: 'der',
+        type: 'pkcs8',
+    });
+    const signature = crypto.sign(null, Buffer.from(signingInput), privateKey);
+    return {
+        'X-Timestamp': params.timestamp,
+        'X-Nonce': params.nonce,
+        'X-Body-Sha256': bodySha256,
+        'X-Signature': signature.toString('base64'),
+    };
+}
+/**
+ * Verify an agent's request signature.
+ */
+function verifyRequestSignature(params) {
+    const signingInput = buildSigningInput(params.method, params.path, params.timestamp, params.nonce, params.bodySha256);
+    const publicKey = crypto.createPublicKey({
+        key: Buffer.from(params.publicKeyB64, 'base64'),
+        format: 'der',
+        type: 'spki',
+    });
+    const signature = Buffer.from(params.signatureB64, 'base64');
+    return crypto.verify(null, Buffer.from(signingInput), publicKey, signature);
+}
+//# sourceMappingURL=signing.js.map

package/dist/signing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.js","sourceRoot":"","sources":["../src/signing.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAMA,8CAQC;AAKD,kCAqCC;AAKD,wDAyBC;AAtFD,oDAAsC;AACtC,uDAA8C;AAE9C;;GAEG;AACH,SAAgB,iBAAiB,CAC/B,MAAc,EACd,OAAe,EACf,SAAiB,EACjB,KAAa,EACb,UAAkB;IAElB,OAAO,GAAG,MAAM,KAAK,OAAO,KAAK,SAAS,KAAK,KAAK,KAAK,UAAU,EAAE,CAAC;AACxE,CAAC;AAED;;GAEG;AACH,SAAgB,WAAW,CAAC,MAO3B;IAOC,MAAM,UAAU,GAAG,IAAA,2BAAS,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,iBAAiB,CACpC,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,KAAK,EACZ,UAAU,CACX,CAAC;IAEF,MAAM,UAAU,GAAG,MAAM,CAAC,gBAAgB,CAAC;QACzC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC;QAChD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,OAAO;KACd,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC,CAAC;IAE3E,OAAO;QACL,aAAa,EAAE,MAAM,CAAC,SAAS;QAC/B,SAAS,EAAE,MAAM,CAAC,KAAK;QACvB,eAAe,EAAE,UAAU;QAC3B,aAAa,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,sBAAsB,CAAC,MAQtC;IACC,MAAM,YAAY,GAAG,iBAAiB,CACpC,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,UAAU,CAClB,CAAC;IAEF,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC;QACvC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC;QAC/C,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,MAAM;KACb,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AAC9E,CAAC"}

package/dist/state.d.ts

@@ -0,0 +1,11 @@
+import type { AgentFrontmatter, OwnerFrontmatter, StateData } from './types.js';
+export declare function readState(dataDir: string): StateData;
+export declare function writeState(dataDir: string, state: StateData): void;
+export declare function parseStateMd(content: string): StateData;
+export declare function writeOwnerFile(dataDir: string, owner: OwnerFrontmatter, body?: string): void;
+export declare function readOwnerFile(dataDir: string, ownerPrincipalId: string): OwnerFrontmatter;
+export declare function writeAgentFile(dataDir: string, agent: AgentFrontmatter, body?: string): void;
+export declare function readAgentFile(dataDir: string, agentPrincipalId: string): AgentFrontmatter;
+export declare function writePolicyFile(dataDir: string, policyId: string, yamlContent: string): void;
+export declare function readPolicyFile(dataDir: string, policyId: string): string;
+//# sourceMappingURL=state.d.ts.map

package/dist/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../src/state.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,gBAAgB,EAChB,gBAAgB,EAChB,SAAS,EACV,MAAM,YAAY,CAAC;AAKpB,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAIpD;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,IAAI,CAKlE;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAMvD;AAED,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,gBAAgB,EACvB,IAAI,CAAC,EAAE,MAAM,GACZ,IAAI,CAON;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,gBAAgB,CAIzF;AAED,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,gBAAgB,EACvB,IAAI,CAAC,EAAE,MAAM,GACZ,IAAI,CAON;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,gBAAgB,CAIzF;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAK5F;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGxE"}

package/dist/state.js

@@ -0,0 +1,111 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readState = readState;
+exports.writeState = writeState;
+exports.parseStateMd = parseStateMd;
+exports.writeOwnerFile = writeOwnerFile;
+exports.readOwnerFile = readOwnerFile;
+exports.writeAgentFile = writeAgentFile;
+exports.readAgentFile = readAgentFile;
+exports.writePolicyFile = writePolicyFile;
+exports.readPolicyFile = readPolicyFile;
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const yaml_1 = require("yaml");
+const STATE_HEADER = '# openleash state\n\n```yaml\n';
+const STATE_FOOTER = '```\n';
+function readState(dataDir) {
+    const filePath = path.join(dataDir, 'state.md');
+    const content = fs.readFileSync(filePath, 'utf-8');
+    return parseStateMd(content);
+}
+function writeState(dataDir, state) {
+    const filePath = path.join(dataDir, 'state.md');
+    const yamlStr = (0, yaml_1.stringify)(state, { lineWidth: 0 });
+    const content = STATE_HEADER + yamlStr + STATE_FOOTER;
+    fs.writeFileSync(filePath, content, 'utf-8');
+}
+function parseStateMd(content) {
+    const yamlMatch = content.match(/```yaml\n([\s\S]*?)```/);
+    if (!yamlMatch) {
+        throw new Error('Could not find YAML block in state.md');
+    }
+    return (0, yaml_1.parse)(yamlMatch[1]);
+}
+function writeOwnerFile(dataDir, owner, body) {
+    const ownersDir = path.join(dataDir, 'owners');
+    fs.mkdirSync(ownersDir, { recursive: true });
+    const filePath = path.join(ownersDir, `${owner.owner_principal_id}.md`);
+    const frontmatter = (0, yaml_1.stringify)(owner, { lineWidth: 0 }).trim();
+    const content = `---\n${frontmatter}\n---\n\n${body ?? `Owner: ${owner.display_name}`}\n`;
+    fs.writeFileSync(filePath, content, 'utf-8');
+}
+function readOwnerFile(dataDir, ownerPrincipalId) {
+    const filePath = path.join(dataDir, 'owners', `${ownerPrincipalId}.md`);
+    const content = fs.readFileSync(filePath, 'utf-8');
+    return parseFrontmatter(content);
+}
+function writeAgentFile(dataDir, agent, body) {
+    const agentsDir = path.join(dataDir, 'agents');
+    fs.mkdirSync(agentsDir, { recursive: true });
+    const filePath = path.join(agentsDir, `${agent.agent_principal_id}.md`);
+    const frontmatter = (0, yaml_1.stringify)(agent, { lineWidth: 0 }).trim();
+    const content = `---\n${frontmatter}\n---\n\n${body ?? `Agent: ${agent.agent_id}`}\n`;
+    fs.writeFileSync(filePath, content, 'utf-8');
+}
+function readAgentFile(dataDir, agentPrincipalId) {
+    const filePath = path.join(dataDir, 'agents', `${agentPrincipalId}.md`);
+    const content = fs.readFileSync(filePath, 'utf-8');
+    return parseFrontmatter(content);
+}
+function writePolicyFile(dataDir, policyId, yamlContent) {
+    const policiesDir = path.join(dataDir, 'policies');
+    fs.mkdirSync(policiesDir, { recursive: true });
+    const filePath = path.join(policiesDir, `${policyId}.yaml`);
+    fs.writeFileSync(filePath, yamlContent, 'utf-8');
+}
+function readPolicyFile(dataDir, policyId) {
+    const filePath = path.join(dataDir, 'policies', `${policyId}.yaml`);
+    return fs.readFileSync(filePath, 'utf-8');
+}
+function parseFrontmatter(content) {
+    const match = content.match(/^---\n([\s\S]*?)\n---/);
+    if (!match) {
+        throw new Error('No frontmatter found');
+    }
+    return (0, yaml_1.parse)(match[1]);
+}
+//# sourceMappingURL=state.js.map

package/dist/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../src/state.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,8BAIC;AAED,gCAKC;AAED,oCAMC;AAED,wCAWC;AAED,sCAIC;AAED,wCAWC;AAED,sCAIC;AAED,0CAKC;AAED,wCAGC;AAjFD,4CAA8B;AAC9B,gDAAkC;AAClC,+BAAsE;AAOtE,MAAM,YAAY,GAAG,gCAAgC,CAAC;AACtD,MAAM,YAAY,GAAG,OAAO,CAAC;AAE7B,SAAgB,SAAS,CAAC,OAAe;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC;AAC/B,CAAC;AAED,SAAgB,UAAU,CAAC,OAAe,EAAE,KAAgB;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,IAAA,gBAAa,EAAC,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,YAAY,GAAG,OAAO,GAAG,YAAY,CAAC;IACtD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC/C,CAAC;AAED,SAAgB,YAAY,CAAC,OAAe;IAC1C,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC1D,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,IAAA,YAAS,EAAC,SAAS,CAAC,CAAC,CAAC,CAAc,CAAC;AAC9C,CAAC;AAED,SAAgB,cAAc,CAC5B,OAAe,EACf,KAAuB,EACvB,IAAa;IAEb,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC/C,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,CAAC,kBAAkB,KAAK,CAAC,CAAC;IACxE,MAAM,WAAW,GAAG,IAAA,gBAAa,EAAC,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClE,MAAM,OAAO,GAAG,QAAQ,WAAW,YAAY,IAAI,IAAI,UAAU,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC;IAC1F,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC/C,CAAC;AAED,SAAgB,aAAa,CAAC,OAAe,EAAE,gBAAwB;IACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,gBAAgB,KAAK,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,OAAO,gBAAgB,CAAC,OAAO,CAAgC,CAAC;AAClE,CAAC;AAED,SAAgB,cAAc,CAC5B,OAAe,EACf,KAAuB,EACvB,IAAa;IAEb,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC/C,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,CAAC,kBAAkB,KAAK,CAAC,CAAC;IACxE,MAAM,WAAW,GAAG,IAAA,gBAAa,EAAC,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClE,MAAM,OAAO,GAAG,QAAQ,WAAW,YAAY,IAAI,IAAI,UAAU,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC;IACtF,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC/C,CAAC;AAED,SAAgB,aAAa,CAAC,OAAe,EAAE,gBAAwB;IACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,gBAAgB,KAAK,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,OAAO,gBAAgB,CAAC,OAAO,CAAgC,CAAC;AAClE,CAAC;AAED,SAAgB,eAAe,CAAC,OAAe,EAAE,QAAgB,EAAE,WAAmB;IACpF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACnD,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;IAC5D,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;AACnD,CAAC;AAED,SAAgB,cAAc,CAAC,OAAe,EAAE,QAAgB;IAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;IACpE,OAAO,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,IAAA,YAAS,EAAC,KAAK,CAAC,CAAC,CAAC,CAA4B,CAAC;AACxD,CAAC"}

package/dist/tokens.d.ts

@@ -0,0 +1,38 @@
+import type { ServerKeyFile } from './types.js';
+export interface ProofClaims {
+    iss: string;
+    kid: string;
+    iat: string;
+    exp: string;
+    decision_id: string;
+    owner_principal_id: string;
+    agent_id: string;
+    action_type: string;
+    action_hash: string;
+    matched_rule_id: string | null;
+    trust_profile?: string;
+    constraints_snapshot?: Record<string, unknown>;
+}
+export interface IssueProofParams {
+    key: ServerKeyFile;
+    decisionId: string;
+    ownerPrincipalId: string;
+    agentId: string;
+    actionType: string;
+    actionHash: string;
+    matchedRuleId: string | null;
+    ttlSeconds: number;
+    trustProfile?: string;
+    constraintsSnapshot?: Record<string, unknown>;
+}
+export declare function issueProofToken(params: IssueProofParams): Promise<{
+    token: string;
+    expiresAt: string;
+    claims: ProofClaims;
+}>;
+export declare function verifyProofToken(token: string, keys: ServerKeyFile[]): Promise<{
+    valid: boolean;
+    claims?: ProofClaims;
+    reason?: string;
+}>;
+//# sourceMappingURL=tokens.d.ts.map

package/dist/tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../src/tokens.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAGhD,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,aAAa,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/C;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC;IACvE,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,CAAC;CACrB,CAAC,CA8BD;AAED,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,aAAa,EAAE,GACpB,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAuBpE"}