@openvtc/trust-tasks 0.12.16 → 0.13.0

package/README.md

@@ -94,22 +94,32 @@ and audience binding — are declared *per specification* and cannot be derived
 from the document itself, so every generated module exports the declarations as
 `SPEC` (and `RESPONSE_SPEC`, where the spec defines a response).
 
-`consumeInbound` runs items 4–8 and then calls your handler. Items 1–3
-(framework schema, payload schema, unknown `type`) belong to your parse and
-dispatch, and have already succeeded by the time you hold a typed document.
+`consumeInbound` runs item 2 and items 4–8, the freshness bound, and item 11's
+duplicate-execution record, then calls your handler. Items 1 and 3 (framework
+schema, unknown `type`) belong to your parse and dispatch, and have already
+succeeded by the time you hold a typed document.
 
 ```ts
 import {
+  consequentialChecks,
   consumeInbound,
+  InMemoryReplayGuard,
   respondWith,
   StaticTransport,
   AclGrant_v0_1,
 } from "@openvtc/trust-tasks";
 
+// The guard *is* the duplicate-execution record — one per consumer, held for
+// the process's lifetime. Back it with a shared store if you run replicas.
+const guard = new InMemoryReplayGuard();
+
 const outcome = await consumeInbound<AclGrant_v0_1.Payload, AclGrant_v0_1.Response>({
   transport: new StaticTransport({ issuer: peerVid }), // what the transport authenticated
   spec: AclGrant_v0_1.SPEC,
   proofPolicy: { kind: "verify", verify: myVerifier },
+  payloadPolicy: { kind: "validate", validate: myValidator }, // or acceptUnvalidated
+  // acl/grant is consequential: a replayed envelope must not grant twice.
+  checks: consequentialChecks(guard), // or notConsequentialChecks()
   doc,
   myVid: "did:web:maintainer.example",
   now: Date.now(),
@@ -128,9 +138,23 @@ switch (outcome.kind) {
     // anything here would be an oracle. Log it — silent is the rule, invisible
     // is a footgun.
     return log(outcome.reason);
+  case "duplicate":
+    // §7.2 item 11: this document already executed. Not an error — return the
+    // prior result where there is one, otherwise emit nothing.
+    return outcome.priorResponse === undefined ? undefined : send(outcome.priorResponse);
+  case "accepted":
+    return undefined; // fire-and-forget: nothing to emit
 }
 ```
 
+**Choose the checks deliberately.** `consequentialChecks(guard)` is correct for
+any task whose execution grants access, moves value, discloses a secret, or is
+otherwise irreversible — SPEC §7.2 item 11 makes duplicate-execution protection
+normative for those, and every transport binding delegates it to the consumer.
+`notConsequentialChecks()` keeps no record and is conformant only where the task
+is not consequential, or where the specification declares repeated execution
+safe and intended.
+
 **Choose a proof policy deliberately.** `{ kind: "verify" }` honours in-band
 proofs. `{ kind: "rejectIfPresent" }` is for consumers with integrity from
 another layer — it refuses a proof-bearing document rather than silently

package/dist/_runtime/canonical.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Deterministic document serialization and the SHA-256 digest over it.
+ *
+ * Mirrors `canonical.rs` in trust-tasks-rs. SPEC §7.2 (*Keying and comparison
+ * for item 11*) defines two documents sharing an `id` as **the same document**
+ * when their serializations are identical under RFC 8785 canonicalization —
+ * the same identity §8.4 gives a retry. A consumer implementing item 11 has to
+ * retain a digest of what it accepted, not merely the `id`.
+ *
+ * `canonicalJson` here is closer to literal RFC 8785 than the Rust side is,
+ * because JavaScript's own primitives are what JCS was specified against:
+ * `Array.prototype.sort()` orders by UTF-16 code unit, and `JSON.stringify`
+ * formats numbers with `Number::toString` and escapes strings with exactly the
+ * §3.2.2.2 escape set. The only thing this adds is recursive member ordering.
+ *
+ * The item-11 digest is **consumer-local**: it goes into this consumer's own
+ * replay record and never onto the wire, into a citation, or into a proof. It
+ * is *not* the §4.9.3 task digest, which is computed over `document ∖ proof`
+ * and is a published, multibase-encoded multihash. See `replay.ts`.
+ *
+ * Hand-written, and dependency-free on purpose: this package ships no runtime
+ * dependencies, and `node:crypto` would not resolve in a browser or a worker.
+ */
+/**
+ * Serialize `value` with object members recursively ordered and no
+ * insignificant whitespace.
+ *
+ * `undefined` members are omitted, as `JSON.stringify` omits them — which is
+ * what makes this agree with the document as it would be sent.
+ */
+export declare function canonicalJson(value: unknown): string;
+/**
+ * FIPS 180-4 SHA-256 over the UTF-8 encoding of `input`, as lowercase hex.
+ *
+ * Synchronous by necessity: `crypto.subtle.digest` is a Promise, and the
+ * consume pipeline needs the digest before it decides whether to await
+ * anything. Pinned to the standard's published vectors in `test/`.
+ */
+export declare function sha256Hex(input: string): string;
+//# sourceMappingURL=canonical.d.ts.map

package/dist/_runtime/canonical.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.d.ts","sourceRoot":"","sources":["../../src/_runtime/canonical.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAWpD;AAyDD;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAoD/C"}

package/dist/_runtime/canonical.js

@@ -0,0 +1,147 @@
+/**
+ * Deterministic document serialization and the SHA-256 digest over it.
+ *
+ * Mirrors `canonical.rs` in trust-tasks-rs. SPEC §7.2 (*Keying and comparison
+ * for item 11*) defines two documents sharing an `id` as **the same document**
+ * when their serializations are identical under RFC 8785 canonicalization —
+ * the same identity §8.4 gives a retry. A consumer implementing item 11 has to
+ * retain a digest of what it accepted, not merely the `id`.
+ *
+ * `canonicalJson` here is closer to literal RFC 8785 than the Rust side is,
+ * because JavaScript's own primitives are what JCS was specified against:
+ * `Array.prototype.sort()` orders by UTF-16 code unit, and `JSON.stringify`
+ * formats numbers with `Number::toString` and escapes strings with exactly the
+ * §3.2.2.2 escape set. The only thing this adds is recursive member ordering.
+ *
+ * The item-11 digest is **consumer-local**: it goes into this consumer's own
+ * replay record and never onto the wire, into a citation, or into a proof. It
+ * is *not* the §4.9.3 task digest, which is computed over `document ∖ proof`
+ * and is a published, multibase-encoded multihash. See `replay.ts`.
+ *
+ * Hand-written, and dependency-free on purpose: this package ships no runtime
+ * dependencies, and `node:crypto` would not resolve in a browser or a worker.
+ */
+/**
+ * Serialize `value` with object members recursively ordered and no
+ * insignificant whitespace.
+ *
+ * `undefined` members are omitted, as `JSON.stringify` omits them — which is
+ * what makes this agree with the document as it would be sent.
+ */
+export function canonicalJson(value) {
+    if (value === null || typeof value !== "object")
+        return JSON.stringify(value) ?? "null";
+    if (Array.isArray(value))
+        return `[${value.map((v) => canonicalJson(v)).join(",")}]`;
+    const entries = Object.entries(value)
+        .filter(([, v]) => v !== undefined)
+        // RFC 8785 §3.2.3: sort by UTF-16 code unit, which is what the default
+        // comparator does after String() — and these are already strings.
+        .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));
+    return `{${entries.map(([k, v]) => `${JSON.stringify(k)}:${canonicalJson(v)}`).join(",")}}`;
+}
+const K = new Uint32Array([
+    0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5,
+    0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174,
+    0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da,
+    0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967,
+    0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85,
+    0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070,
+    0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3,
+    0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2,
+]);
+const rotr = (x, n) => (x >>> n) | (x << (32 - n));
+/**
+ * UTF-8 encode `s`, without `TextEncoder`.
+ *
+ * `TextEncoder` is a host global, not an ES2022 one: this package's `lib` is
+ * `["ES2022"]` and adding `DOM` to reach one name would pull the whole browser
+ * surface into a package that must also typecheck for Node and for workers.
+ * Fifteen lines is the cheaper price.
+ *
+ * Unpaired surrogates — which `JSON.parse` will produce from a `\uD800` escape
+ * — encode as U+FFFD, matching `TextEncoder`. Two documents differing only in
+ * an unpaired surrogate would therefore collide; they are not valid JSON text
+ * to begin with, and the collision absorbs a duplicate rather than executing
+ * one, so it fails safe.
+ */
+function utf8(s) {
+    const out = [];
+    for (let i = 0; i < s.length; i++) {
+        let cp = s.charCodeAt(i);
+        if (cp >= 0xd800 && cp <= 0xdbff && i + 1 < s.length) {
+            const low = s.charCodeAt(i + 1);
+            if (low >= 0xdc00 && low <= 0xdfff) {
+                cp = 0x10000 + ((cp - 0xd800) << 10) + (low - 0xdc00);
+                i++;
+            }
+        }
+        if (cp >= 0xd800 && cp <= 0xdfff)
+            cp = 0xfffd; // unpaired surrogate
+        if (cp < 0x80)
+            out.push(cp);
+        else if (cp < 0x800)
+            out.push(0xc0 | (cp >> 6), 0x80 | (cp & 0x3f));
+        else if (cp < 0x10000)
+            out.push(0xe0 | (cp >> 12), 0x80 | ((cp >> 6) & 0x3f), 0x80 | (cp & 0x3f));
+        else
+            out.push(0xf0 | (cp >> 18), 0x80 | ((cp >> 12) & 0x3f), 0x80 | ((cp >> 6) & 0x3f), 0x80 | (cp & 0x3f));
+    }
+    return Uint8Array.from(out);
+}
+/**
+ * FIPS 180-4 SHA-256 over the UTF-8 encoding of `input`, as lowercase hex.
+ *
+ * Synchronous by necessity: `crypto.subtle.digest` is a Promise, and the
+ * consume pipeline needs the digest before it decides whether to await
+ * anything. Pinned to the standard's published vectors in `test/`.
+ */
+export function sha256Hex(input) {
+    const bytes = utf8(input);
+    const bitLen = bytes.length * 8;
+    // Pad to a multiple of 64 bytes: 0x80, zeroes, then the 64-bit big-endian
+    // bit length.
+    const padded = new Uint8Array(Math.ceil((bytes.length + 9) / 64) * 64);
+    padded.set(bytes);
+    padded[bytes.length] = 0x80;
+    const view = new DataView(padded.buffer);
+    // Lengths above 2^53 bits are unreachable from a JS string; the high word is
+    // written anyway so the padding is well-formed.
+    view.setUint32(padded.length - 8, Math.floor(bitLen / 0x100000000), false);
+    view.setUint32(padded.length - 4, bitLen >>> 0, false);
+    const h = new Uint32Array([
+        0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, 0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19,
+    ]);
+    const w = new Uint32Array(64);
+    for (let offset = 0; offset < padded.length; offset += 64) {
+        for (let i = 0; i < 16; i++)
+            w[i] = view.getUint32(offset + i * 4, false);
+        for (let i = 16; i < 64; i++) {
+            const s0 = rotr(w[i - 15], 7) ^ rotr(w[i - 15], 18) ^ (w[i - 15] >>> 3);
+            const s1 = rotr(w[i - 2], 17) ^ rotr(w[i - 2], 19) ^ (w[i - 2] >>> 10);
+            w[i] = (w[i - 16] + s0 + w[i - 7] + s1) >>> 0;
+        }
+        let [a, b, c, d, e, f, g, hh] = [h[0], h[1], h[2], h[3], h[4], h[5], h[6], h[7]];
+        for (let i = 0; i < 64; i++) {
+            const s1 = rotr(e, 6) ^ rotr(e, 11) ^ rotr(e, 25);
+            const ch = (e & f) ^ (~e & g);
+            const temp1 = (hh + s1 + ch + K[i] + w[i]) >>> 0;
+            const s0 = rotr(a, 2) ^ rotr(a, 13) ^ rotr(a, 22);
+            const maj = (a & b) ^ (a & c) ^ (b & c);
+            const temp2 = (s0 + maj) >>> 0;
+            hh = g;
+            g = f;
+            f = e;
+            e = (d + temp1) >>> 0;
+            d = c;
+            c = b;
+            b = a;
+            a = (temp1 + temp2) >>> 0;
+        }
+        const next = [a, b, c, d, e, f, g, hh];
+        for (let i = 0; i < 8; i++)
+            h[i] = (h[i] + next[i]) >>> 0;
+    }
+    return Array.from(h, (word) => word.toString(16).padStart(8, "0")).join("");
+}
+//# sourceMappingURL=canonical.js.map

package/dist/_runtime/canonical.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.js","sourceRoot":"","sources":["../../src/_runtime/canonical.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;IACxF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAErF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;SAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;QACnC,uEAAuE;QACvE,kEAAkE;SACjE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEpD,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAC9F,CAAC;AAED,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC;IACxB,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;CAC/F,CAAC,CAAC;AAEH,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AAE3E;;;;;;;;;;;;;GAaG;AACH,SAAS,IAAI,CAAC,CAAS;IACrB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,IAAI,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;YACrD,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAChC,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,EAAE,CAAC;gBACnC,EAAE,GAAG,OAAO,GAAG,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC;gBACtD,CAAC,EAAE,CAAC;YACN,CAAC;QACH,CAAC;QACD,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM;YAAE,EAAE,GAAG,MAAM,CAAC,CAAC,qBAAqB;QAEpE,IAAI,EAAE,GAAG,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;aACvB,IAAI,EAAE,GAAG,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;aAC/D,IAAI,EAAE,GAAG,OAAO;YACnB,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;;YAE3E,GAAG,CAAC,IAAI,CACN,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,EACjB,IAAI,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAC1B,IAAI,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,EACzB,IAAI,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CACnB,CAAC;IACN,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAEhC,0EAA0E;IAC1E,cAAc;IACd,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;IACvE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzC,6EAA6E;IAC7E,gDAAgD;IAChD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,WAAW,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3E,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,MAAM,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IAEvD,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC;QACxB,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;KAC/F,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IAE9B,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;QAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1E,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAE,KAAK,CAAC,CAAC,CAAC;YAC3E,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,KAAK,EAAE,CAAC,CAAC;YAC1E,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;QACzF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClD,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;YACnD,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClD,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;YAE/B,EAAE,GAAG,CAAC,CAAC;YACP,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC9E,CAAC"}

package/dist/_runtime/consume.d.ts

@@ -1,12 +1,20 @@
 /**
- * Inbound-document orchestration for SPEC.md §7.2 item 2 and items 4–8.
+ * Inbound-document orchestration for SPEC.md §7.2 item 2, items 4–8, and the
+ * two stateful checks — the freshness bound of item 4 and the
+ * duplicate-execution record of item 11.
  *
  * Hand-written. Mirrors `consume.rs` in trust-tasks-rs, deliberately closely:
  * a TypeScript consumer and a Rust one must reach the same verdict on the same
  * document, or the two reference implementations disagree about what conforms.
  *
  * ```ts
- * import { consumeInbound, StaticTransport, AclGrant_v0_1 } from "@openvtc/trust-tasks";
+ * import {
+ *   consequentialChecks, consumeInbound, InMemoryReplayGuard,
+ *   StaticTransport, AclGrant_v0_1,
+ * } from "@openvtc/trust-tasks";
+ *
+ * // One guard per consumer, not one per document: it *is* the record.
+ * const guard = new InMemoryReplayGuard();
  *
  * const outcome = await consumeInbound({
  *   transport,
@@ -14,6 +22,8 @@
  *   proofPolicy: { kind: "verify", verify: myVerifier },
  *   // ajv, or whatever validator you already run — see PayloadPolicy.
  *   payloadPolicy: { kind: "validate", validate: myValidator },
+ *   // acl/grant is consequential: a replayed envelope must not grant twice.
+ *   checks: consequentialChecks(guard),
  *   doc,
  *   myVid: "did:web:maintainer.example",
  *   now: Date.now(),
@@ -27,6 +37,11 @@
  *   case "rejected":   emit(outcome.error); break;
  *   case "suppressed": logSuppressed(); break;
  *   case "accepted":   break; // fire-and-forget: nothing to emit
+ *   // §7.2 item 11: already executed. Not an error — return the prior result
+ *   // if there is one, otherwise emit nothing.
+ *   case "duplicate":
+ *     if (outcome.priorResponse !== undefined) emit(outcome.priorResponse);
+ *     break;
  * }
  * ```
  *
@@ -45,7 +60,49 @@
  * `payloadPolicy` decides what to do with it. See {@link PayloadPolicy}.
  */
 import { type ErrorResponse, type RejectReason, type SpecPolicy, type TrustTaskDocument } from "./document.js";
+import { type FreshnessPolicy } from "./freshness.js";
+import { type ReplayGuard, type ReplayPolicy } from "./replay.js";
 import { type ResolvedParties, type TransportHandler } from "./transport.js";
+/**
+ * The two stateful §7.2 checks: the freshness bound over `issuedAt` /
+ * `expiresAt`, and the duplicate-execution record of item 11.
+ *
+ * They travel together because the spec ties them together. §7.2 (*Bounding
+ * the record*) makes the acceptance window and the record's retention **the
+ * same bound**. Passing them as one option is what stops a deployment
+ * configuring a five-minute record and an unbounded acceptance window, which
+ * reads as a working replay defence and is not one.
+ *
+ * Like {@link PayloadPolicy}, this is a *required* option. Whether the task a
+ * consumer implements is *consequential* (§2) is a decision only that consumer
+ * can make, and the failure mode of getting it wrong silently — an ACL grant
+ * applied twice by a mediator retry — is not one to discover after the fact.
+ */
+export interface ConsumeChecks {
+    /** Bounds the document in time (SPEC §4.2, §7.2 item 4). */
+    readonly freshness: FreshnessPolicy;
+    /** Applies (or knowingly disapplies) SPEC §7.2 item 11. */
+    readonly replay: ReplayPolicy;
+}
+/**
+ * The posture for a *consequential Trust Task* (§2): item 11 enforced against
+ * `guard`, and the bounded acceptance window that makes the record droppable.
+ *
+ * The right choice for any task whose execution grants access, moves value,
+ * discloses a secret, or otherwise cannot be undone by ignoring the next
+ * document.
+ */
+export declare function consequentialChecks(guard: ReplayGuard): ConsumeChecks;
+/**
+ * The posture for a task that is **not** consequential, or whose specification
+ * "explicitly declares repeated execution safe and intended" — the narrow
+ * disapplication item 11 permits.
+ *
+ * Keeps no record. Still applies the default freshness policy, because a
+ * future-dated document and one with an empty validity interval are malformed
+ * whatever the task does.
+ */
+export declare function notConsequentialChecks(): ConsumeChecks;
 /** Verifies a document's Data Integrity proof (SPEC §4.7). */
 export interface ProofVerifier {
     /** Resolve to `true` when the proof verifies against the in-band `issuer`. */
@@ -175,6 +232,35 @@ export type ConsumeOutcome<R> =
  */
  | {
     kind: "accepted";
+}
+/**
+ * SPEC §7.2 item 11: a document with this `id` and this content was already
+ * accepted for execution. **The handler was not called**, and the
+ * consequential effect did not happen a second time. This is the §8.4 retry
+ * being absorbed, which is what makes retrying safe.
+ *
+ * **Not an error.** §7.2 (*Disposition of a duplicate*): "In no case is a
+ * duplicate reported as `taskFailed`; the task did not fail, it already
+ * happened." Folding this into `rejected` would report a failure that did
+ * not occur.
+ *
+ * What to emit:
+ *
+ * - `priorResponse` present — emit it. It is the response document the first
+ *   execution produced (a success response, or a non-retryable error
+ *   response; tell them apart by its `type`), which §7.2 says the consumer
+ *   SHOULD return.
+ * - `priorResponse` absent, `inFlight === false` — the specification defines
+ *   no success response (§4.4.1 fire-and-forget), or the guard retains none.
+ *   Emit nothing: that silence is the correct disposition, not an error.
+ * - `inFlight === true` — the first execution has not finished. §7.2: the
+ *   consumer SHOULD "return or expose the existing execution state rather
+ *   than begin another".
+ */
+ | {
+    kind: "duplicate";
+    priorResponse?: unknown;
+    inFlight: boolean;
 };
 /** Wire-safe message for the `rejectIfPresent` path. */
 export declare const PROOF_NOT_ACCEPTED_BY_POLICY = "in-band proof not accepted by consumer policy (SPEC \u00A77.2 item 7)";
@@ -185,6 +271,12 @@ export interface ConsumeOptions<P, R> {
     proofPolicy: ProofPolicy;
     /** §7.2 item 2. Required — see {@link PayloadPolicy} for why. */
     payloadPolicy: PayloadPolicy;
+    /**
+     * §7.2 item 4 (freshness) and item 11 (duplicate execution). Required — see
+     * {@link ConsumeChecks}. Use {@link consequentialChecks} or
+     * {@link notConsequentialChecks}.
+     */
+    checks: ConsumeChecks;
     doc: TrustTaskDocument<P>;
     /** This consumer's own VID, for the §7.2 item 5 recipient check. */
     myVid: string;
@@ -214,6 +306,20 @@ export interface ConsumeOptions<P, R> {
  * safe for ordinary refusals but not for one that contests that identity.
  */
 export declare function consumeInbound<P, R>(opts: ConsumeOptions<P, R>): Promise<ConsumeOutcome<R>>;
+/**
+ * Wire message for `proofInvalid`.
+ *
+ * Constant by design — see the §10.4 note at the rejection site. The Rust
+ * counterpart is `PROOF_INVALID_WIRE_MESSAGE` in `trust-tasks-rs`, kept equal.
+ */
+export declare const PROOF_INVALID_WIRE_MESSAGE = "proof verification failed";
+/** Wire message for `idConflict` (SPEC §7.2 item 11, §8.3). */
+export declare const ID_CONFLICT_WIRE_MESSAGE = "a different document has already been accepted under this id (SPEC \u00A77.2 item 11)";
+/**
+ * Wire message for a replay-record outage. A constant, so a store's hostname
+ * or connection string never reaches the wire (SPEC §10.4).
+ */
+export declare const REPLAY_RECORD_UNAVAILABLE = "temporarily unavailable";
 /**
  * Build a handler-side refusal addressed to the original producer.
  *

package/dist/_runtime/consume.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"consume.d.ts","sourceRoot":"","sources":["../../src/_runtime/consume.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,EAKL,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACvB,MAAM,eAAe,CAAC;AACvB,OAAO,EAIL,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACtB,MAAM,gBAAgB,CAAC;AAExB,8DAA8D;AAC9D,MAAM,WAAW,aAAa;IAC5B,8EAA8E;IAC9E,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CAClE;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,WAAW;AACrB;;;GAGG;AACD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE;AAC3C;;;;;GAKG;GACD;IAAE,IAAI,EAAE,iBAAiB,CAAA;CAAE;AAC7B;;;;GAIG;GACD;IAAE,IAAI,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAEjC,iEAAiE;AACjE,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;OAQG;IACH,QAAQ,CACN,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,OAAO,GACf,OAAO,GAAG;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;CAC1D;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,aAAa;AACvB,iFAAiF;AAC/E;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,gBAAgB,CAAA;CAAE;AAClD;;;;GAIG;GACD;IAAE,IAAI,EAAE,mBAAmB,CAAA;CAAE,CAAC;AAElC,6CAA6C;AAC7C,MAAM,MAAM,cAAc,CAAC,CAAC;AAC1B,uEAAuE;AACrE;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAA;CAAE;AACrD;;;GAGG;GACD;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,aAAa,CAAA;CAAE;AAC5C;;;;;;GAMG;GACD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE;AAC9C;;;;;;;;;GASG;GACD;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC;AAEzB,wDAAwD;AACxD,eAAO,MAAM,4BAA4B,0EAC2B,CAAC;AAErE,MAAM,WAAW,cAAc,CAAC,CAAC,EAAE,CAAC;IAClC,SAAS,EAAE,gBAAgB,CAAC;IAC5B,6EAA6E;IAC7E,IAAI,EAAE,UAAU,CAAC;IACjB,WAAW,EAAE,WAAW,CAAC;IACzB,iEAAiE;IACjE,aAAa,EAAE,aAAa,CAAC;IAC7B,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAC1B,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,GAAG,EAAE,MAAM,CAAC;IACZ,8EAA8E;IAC9E,UAAU,EAAE,MAAM,MAAM,CAAC;IACzB;;;;;;OAMG;IACH,OAAO,EAAE,CACP,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,EACzB,OAAO,EAAE,eAAe,KAEtB,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,aAAa,GAAG,IAAI,CAAC,GACpD,iBAAiB,CAAC,CAAC,CAAC,GACpB,aAAa,GACb,IAAI,CAAC;IACT,uEAAuE;IACvE,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;CACtB;AAED;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAAC,CAAC,EAAE,CAAC,EACvC,IAAI,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,GACzB,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAkG5B;AAaD;;;;;;GAMG;AACH,wBAAgB,MAAM,CAAC,CAAC,EACtB,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAC7B,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,YAAY,EACpB,KAAK,CAAC,EAAE,MAAM,MAAM,GACnB,aAAa,CAEf"}
+{"version":3,"file":"consume.d.ts","sourceRoot":"","sources":["../../src/_runtime/consume.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AAEH,OAAO,EAKL,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACvB,MAAM,eAAe,CAAC;AACvB,OAAO,EAML,KAAK,eAAe,EACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,YAAY,EAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EAIL,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACtB,MAAM,gBAAgB,CAAC;AAExB;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,WAAW,GAAG,aAAa,CAErE;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,IAAI,aAAa,CAEtD;AAED,8DAA8D;AAC9D,MAAM,WAAW,aAAa;IAC5B,8EAA8E;IAC9E,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CAClE;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,WAAW;AACrB;;;GAGG;AACD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE;AAC3C;;;;;GAKG;GACD;IAAE,IAAI,EAAE,iBAAiB,CAAA;CAAE;AAC7B;;;;GAIG;GACD;IAAE,IAAI,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAEjC,iEAAiE;AACjE,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;OAQG;IACH,QAAQ,CACN,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,OAAO,GACf,OAAO,GAAG;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;CAC1D;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,aAAa;AACvB,iFAAiF;AAC/E;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,gBAAgB,CAAA;CAAE;AAClD;;;;GAIG;GACD;IAAE,IAAI,EAAE,mBAAmB,CAAA;CAAE,CAAC;AAElC,6CAA6C;AAC7C,MAAM,MAAM,cAAc,CAAC,CAAC;AAC1B,uEAAuE;AACrE;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAA;CAAE;AACrD;;;GAGG;GACD;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,aAAa,CAAA;CAAE;AAC5C;;;;;;GAMG;GACD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE;AAC9C;;;;;;;;;GASG;GACD;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE;AACtB;;;;;;;;;;;;;;;;;;;;;;;GAuBG;GACD;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC;AAEtE,wDAAwD;AACxD,eAAO,MAAM,4BAA4B,0EAC2B,CAAC;AAErE,MAAM,WAAW,cAAc,CAAC,CAAC,EAAE,CAAC;IAClC,SAAS,EAAE,gBAAgB,CAAC;IAC5B,6EAA6E;IAC7E,IAAI,EAAE,UAAU,CAAC;IACjB,WAAW,EAAE,WAAW,CAAC;IACzB,iEAAiE;IACjE,aAAa,EAAE,aAAa,CAAC;IAC7B;;;;OAIG;IACH,MAAM,EAAE,aAAa,CAAC;IACtB,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAC1B,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,GAAG,EAAE,MAAM,CAAC;IACZ,8EAA8E;IAC9E,UAAU,EAAE,MAAM,MAAM,CAAC;IACzB;;;;;;OAMG;IACH,OAAO,EAAE,CACP,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,EACzB,OAAO,EAAE,eAAe,KAEtB,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,aAAa,GAAG,IAAI,CAAC,GACpD,iBAAiB,CAAC,CAAC,CAAC,GACpB,aAAa,GACb,IAAI,CAAC;IACT,uEAAuE;IACvE,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;CACtB;AAED;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAAC,CAAC,EAAE,CAAC,EACvC,IAAI,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,GACzB,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAiN5B;AAwBD;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,8BAA8B,CAAC;AAEtE,+DAA+D;AAC/D,eAAO,MAAM,wBAAwB,0FAC+C,CAAC;AAErF;;;GAGG;AACH,eAAO,MAAM,yBAAyB,4BAA4B,CAAC;AAanE;;;;;;GAMG;AACH,wBAAgB,MAAM,CAAC,CAAC,EACtB,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAC7B,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,YAAY,EACpB,KAAK,CAAC,EAAE,MAAM,MAAM,GACnB,aAAa,CAEf"}