@vauban-org/agent-sdk 1.0.0 → 1.3.0

package/dist/ports/workflow-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-runtime.d.ts","sourceRoot":"","sources":["../../src/ports/workflow-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,MAAM,MAAM,cAAc,GACtB,SAAS,GACT,SAAS,GACT,UAAU,GACV,gBAAgB,GAChB,gBAAgB,GAChB,gBAAgB,GAChB,MAAM,GACN,QAAQ,GACR,WAAW,CAAC;AAIhB,MAAM,MAAM,QAAQ,GAChB,WAAW,GACX,OAAO,GACP,aAAa,GACb,aAAa,GACb,aAAa,GACb,WAAW,GACX,OAAO,GACP,SAAS,GACT,YAAY,GACZ,UAAU,GACV,gBAAgB,CAAC;AAErB,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEnE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC;CAC7B;AAID,MAAM,WAAW,WAAW,CAAC,OAAO,GAAG,OAAO;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAID,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAID,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAElC;;;OAGG;IACH,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAEzE,oFAAoF;IACpF,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAErB,8EAA8E;IAC9E,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAE1B,+EAA+E;IAC/E,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAExB,0EAA0E;IAC1E,UAAU,CAAC,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnC,wCAAwC;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5C;;;OAGG;IACH,aAAa,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAEzE,wFAAwF;IACxF,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvD,4FAA4F;IAC5F,UAAU,CAAC,CAAC,GAAG,OAAO,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAEzD,iEAAiE;IACjE,aAAa,CAAC,MAAM,EAAE,OAAO,EAC3B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE,iBAAiB,GACvB,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpB,2EAA2E;IAC3E,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAID,MAAM,MAAM,eAAe,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO,IAAI,CACjE,GAAG,EAAE,eAAe,EACpB,KAAK,EAAE,MAAM,KACV,OAAO,CAAC,OAAO,CAAC,CAAC;AAItB,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,CAAC;AAE1E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAID,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,OAAO,EACtB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,GACxC,IAAI,CAAC;IAER;;;OAGG;IACH,KAAK,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEhD;;;;OAIG;IACH,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAEnE,kCAAkC;IAClC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAEtD;;;OAGG;IACH,iBAAiB,CAAC,OAAO,EACvB,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GACrD,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IAEjC,sDAAsD;IACtD,UAAU,CACR,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE,cAAc,GACpB,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;OAGG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAErD;;;OAGG;IACH,UAAU,CACR,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC,eAAe,CAAC,CAAC;IAE5B,6DAA6D;IAC7D,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IAEnD;;;OAGG;IACH,WAAW,CAAC,IAAI,CAAC,EAAE;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAElB,+CAA+C;IAC/C,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAID,qBAAa,qBAAsB,SAAQ,KAAK;aAClB,KAAK,EAAE,MAAM;gBAAb,KAAK,EAAE,MAAM;CAK1C;AAED,qBAAa,2BAA4B,SAAQ,KAAK;aAElC,KAAK,EAAE,MAAM;aACb,SAAS,EAAE,MAAM;aACjB,QAAQ,EAAE,MAAM;aAChB,MAAM,EAAE,MAAM;gBAHd,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM;CAQjC;AAED,qBAAa,0BAA2B,SAAQ,KAAK;aAEjC,KAAK,EAAE,MAAM;aACb,UAAU,EAAE,MAAM;aAClB,SAAS,EAAE,MAAM;gBAFjB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM;CAMpC;AAED,qBAAa,0BAA2B,SAAQ,KAAK;aAEjC,KAAK,EAAE,MAAM;aACb,YAAY,EAAE,MAAM;gBADpB,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM;CAMvC;AAED,qBAAa,4BAA6B,SAAQ,KAAK;aAEnC,KAAK,EAAE,MAAM;aACb,QAAQ,EAAE,MAAM;aAChB,MAAM,EAAE,MAAM;gBAFd,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM;CAQjC"}

package/dist/ports/workflow-runtime.js

@@ -0,0 +1,72 @@
+/**
+ * WorkflowRuntimePort — durable workflow execution port (S3 spec).
+ *
+ * Defines: 9-state machine, journal invariants I-S3-1..8, replay determinism,
+ * ctx.* primitives, lease takeover pattern, handler versioning.
+ *
+ * Default adapter: DBOSWorkflowAdapter (DBOS-TS Apache 2.0, Postgres-native).
+ * Swap-able to Temporal/Restate via this port + test contract T-S3-1..12.
+ */
+// ─── Typed errors ─────────────────────────────────────────────────────────────
+export class WorkflowNotFoundError extends Error {
+    runId;
+    constructor(runId) {
+        super(`Workflow run not found: ${runId}`);
+        this.runId = runId;
+        this.name = "WorkflowNotFoundError";
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+export class WorkflowNonDeterminismError extends Error {
+    runId;
+    stepIndex;
+    expected;
+    actual;
+    constructor(runId, stepIndex, expected, actual) {
+        super(`Non-determinism at step ${stepIndex}: expected ${expected}, got ${actual} (run=${runId})`);
+        this.runId = runId;
+        this.stepIndex = stepIndex;
+        this.expected = expected;
+        this.actual = actual;
+        this.name = "WorkflowNonDeterminismError";
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+export class WorkflowSignalTimeoutError extends Error {
+    runId;
+    signalName;
+    timeoutMs;
+    constructor(runId, signalName, timeoutMs) {
+        super(`Signal '${signalName}' timeout after ${timeoutMs}ms (run=${runId})`);
+        this.runId = runId;
+        this.signalName = signalName;
+        this.timeoutMs = timeoutMs;
+        this.name = "WorkflowSignalTimeoutError";
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+export class WorkflowLeaseConflictError extends Error {
+    runId;
+    currentOwner;
+    constructor(runId, currentOwner) {
+        super(`Cannot acquire lease for run ${runId}: held by ${currentOwner}`);
+        this.runId = runId;
+        this.currentOwner = currentOwner;
+        this.name = "WorkflowLeaseConflictError";
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+export class WorkflowVersionMismatchError extends Error {
+    runId;
+    expected;
+    actual;
+    constructor(runId, expected, actual) {
+        super(`Version mismatch for run ${runId}: expected ${expected}, got ${actual}`);
+        this.runId = runId;
+        this.expected = expected;
+        this.actual = actual;
+        this.name = "WorkflowVersionMismatchError";
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+//# sourceMappingURL=workflow-runtime.js.map

package/dist/ports/workflow-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-runtime.js","sourceRoot":"","sources":["../../src/ports/workflow-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAkQH,iFAAiF;AAEjF,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAClB;IAA5B,YAA4B,KAAa;QACvC,KAAK,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAC;QADhB,UAAK,GAAL,KAAK,CAAQ;QAEvC,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAED,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAElC;IACA;IACA;IACA;IAJlB,YACkB,KAAa,EACb,SAAiB,EACjB,QAAgB,EAChB,MAAc;QAE9B,KAAK,CACH,2BAA2B,SAAS,cAAc,QAAQ,SAAS,MAAM,SAAS,KAAK,GAAG,CAC3F,CAAC;QAPc,UAAK,GAAL,KAAK,CAAQ;QACb,cAAS,GAAT,SAAS,CAAQ;QACjB,aAAQ,GAAR,QAAQ,CAAQ;QAChB,WAAM,GAAN,MAAM,CAAQ;QAK9B,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;QAC1C,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAED,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAEjC;IACA;IACA;IAHlB,YACkB,KAAa,EACb,UAAkB,EAClB,SAAiB;QAEjC,KAAK,CAAC,WAAW,UAAU,mBAAmB,SAAS,WAAW,KAAK,GAAG,CAAC,CAAC;QAJ5D,UAAK,GAAL,KAAK,CAAQ;QACb,eAAU,GAAV,UAAU,CAAQ;QAClB,cAAS,GAAT,SAAS,CAAQ;QAGjC,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAED,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAEjC;IACA;IAFlB,YACkB,KAAa,EACb,YAAoB;QAEpC,KAAK,CAAC,gCAAgC,KAAK,aAAa,YAAY,EAAE,CAAC,CAAC;QAHxD,UAAK,GAAL,KAAK,CAAQ;QACb,iBAAY,GAAZ,YAAY,CAAQ;QAGpC,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAED,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IAEnC;IACA;IACA;IAHlB,YACkB,KAAa,EACb,QAAgB,EAChB,MAAc;QAE9B,KAAK,CACH,4BAA4B,KAAK,cAAc,QAAQ,SAAS,MAAM,EAAE,CACzE,CAAC;QANc,UAAK,GAAL,KAAK,CAAQ;QACb,aAAQ,GAAR,QAAQ,CAAQ;QAChB,WAAM,GAAN,MAAM,CAAQ;QAK9B,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;QAC3C,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF"}

package/dist/proof/cert-verify.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Run Certificate verifier — standalone surface for external clients (CLI, dashboards).
+ *
+ * This module is the **single source of truth** for offline verification of a
+ * `SignedRunProofCertificate`. The CC server (`src/proof/ed25519-{signer,verifier}.ts`)
+ * holds the signing side (DB-coupled assembly + signing); this module holds the
+ * verification side, which is intentionally dependency-free (no DB, no MCP).
+ *
+ * Pipeline (mirrors server signer):
+ *   1. Strip embedded `signature` field
+ *   2. JCS-canonicalize (RFC 8785 subset: sorted keys, -0 → 0)
+ *   3. SHA-256 → first 31 bytes → felt252-safe
+ *   4. Poseidon([0x1, sha_felt, CERT_MARKER_FELT]) → cert_hash_felt252
+ *   5. Felt → 32-byte buffer → Ed25519 verify
+ *
+ * Domain separator: `CERT_MARKER_FELT` = UTF-8 "run_cert" felt252 (right-aligned).
+ *
+ * @see ../../../src/proof/ed25519-signer.ts (signer, CC server)
+ * @see docs/ietf/draft-vauban-skill-attestation-00.md (RFC profile)
+ * @public
+ */
+import { type KeyObject } from "node:crypto";
+/**
+ * Ed25519 signature payload embedded in `SignedRunProofCertificate`.
+ * Mirrors the server-side `SignaturePayload` (single field schema).
+ */
+export interface SignaturePayload {
+    alg: "Ed25519";
+    kid: string;
+    value: string;
+    pubkey_spki_b64: string;
+    cert_hash_felt252: string;
+    signed_at: string;
+}
+/**
+ * A `SignedRunProofCertificate` for verification purposes — only the fields
+ * the verifier touches are typed. The cert may carry additional fields
+ * (decision_chain, merkle_root, etc.) which the verifier preserves but does
+ * not inspect.
+ */
+export interface SignedRunProofCertificateLike {
+    signature?: SignaturePayload;
+    [key: string]: unknown;
+}
+export type CertVerifyFailReason = "missing_signature" | "wrong_alg" | "hash_mismatch" | "pubkey_unresolvable" | "kid_mismatch" | "signature_invalid" | "malformed_signature";
+export interface CertVerifyResult {
+    valid: boolean;
+    reason?: CertVerifyFailReason;
+    details?: string;
+    recomputed_cert_hash_felt252: string;
+}
+export interface CertVerifyOptions {
+    expectedPublicKey?: KeyObject;
+    expectedKid?: string;
+}
+/** Domain separator: UTF-8 "run_cert" → felt252 right-aligned, zero-padded. */
+export declare const CERT_MARKER_FELT: string;
+/**
+ * Compute the felt252 hash that Ed25519 signs over for a Run Certificate.
+ * Strips any embedded `signature` field before hashing — verification is
+ * idempotent.
+ */
+export declare function computeCertHashFelt252(cert: SignedRunProofCertificateLike): string;
+/**
+ * Reconstruct an Ed25519 `KeyObject` from base64 SPKI DER (as embedded in
+ * `signature.pubkey_spki_b64`).
+ *
+ * @throws if base64 is malformed or the key is not Ed25519.
+ */
+export declare function publicKeyFromSpkiB64(pubkeySpkiB64: string): KeyObject;
+/**
+ * Verify a signed Run Certificate. Returns a structured result — never throws
+ * on verification failure (only on malformed input).
+ *
+ * The 7 possible failure reasons are typed via `CertVerifyFailReason` so callers
+ * can branch precisely. `recomputed_cert_hash_felt252` is always returned for
+ * audit trail / debug inspection.
+ */
+export declare function verifyRunCertificate(cert: SignedRunProofCertificateLike, opts?: CertVerifyOptions): CertVerifyResult;
+//# sourceMappingURL=cert-verify.d.ts.map

package/dist/proof/cert-verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cert-verify.d.ts","sourceRoot":"","sources":["../../src/proof/cert-verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAIL,KAAK,SAAS,EACf,MAAM,aAAa,CAAC;AAKrB;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,SAAS,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,WAAW,6BAA6B;IAC5C,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAE7B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,MAAM,oBAAoB,GAC5B,mBAAmB,GACnB,WAAW,GACX,eAAe,GACf,qBAAqB,GACrB,cAAc,GACd,mBAAmB,GACnB,qBAAqB,CAAC;AAE1B,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4BAA4B,EAAE,MAAM,CAAC;CACtC;AAED,MAAM,WAAW,iBAAiB;IAChC,iBAAiB,CAAC,EAAE,SAAS,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAID,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB,EAAE,MAC2C,CAAC;AAiC3E;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,6BAA6B,GAClC,MAAM,CAOR;AAID;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,CAYrE;AAID;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,6BAA6B,EACnC,IAAI,GAAE,iBAAsB,GAC3B,gBAAgB,CAkFlB"}

package/dist/proof/cert-verify.js

@@ -0,0 +1,178 @@
+/**
+ * Run Certificate verifier — standalone surface for external clients (CLI, dashboards).
+ *
+ * This module is the **single source of truth** for offline verification of a
+ * `SignedRunProofCertificate`. The CC server (`src/proof/ed25519-{signer,verifier}.ts`)
+ * holds the signing side (DB-coupled assembly + signing); this module holds the
+ * verification side, which is intentionally dependency-free (no DB, no MCP).
+ *
+ * Pipeline (mirrors server signer):
+ *   1. Strip embedded `signature` field
+ *   2. JCS-canonicalize (RFC 8785 subset: sorted keys, -0 → 0)
+ *   3. SHA-256 → first 31 bytes → felt252-safe
+ *   4. Poseidon([0x1, sha_felt, CERT_MARKER_FELT]) → cert_hash_felt252
+ *   5. Felt → 32-byte buffer → Ed25519 verify
+ *
+ * Domain separator: `CERT_MARKER_FELT` = UTF-8 "run_cert" felt252 (right-aligned).
+ *
+ * @see ../../../src/proof/ed25519-signer.ts (signer, CC server)
+ * @see docs/ietf/draft-vauban-skill-attestation-00.md (RFC profile)
+ * @public
+ */
+import { createHash, createPublicKey, verify as cryptoVerify, } from "node:crypto";
+import { hash } from "starknet";
+// ─── Constants ────────────────────────────────────────────────────────────────
+/** Domain separator: UTF-8 "run_cert" → felt252 right-aligned, zero-padded. */
+export const CERT_MARKER_FELT = "0x" + Buffer.from("run_cert", "utf8").toString("hex").padStart(62, "0");
+// ─── JCS canonicalization (RFC 8785 subset) ──────────────────────────────────
+function normalizeValue(value) {
+    if (value === null)
+        return null;
+    if (typeof value === "number") {
+        if (Object.is(value, -0))
+            return 0;
+        return value;
+    }
+    if (Array.isArray(value))
+        return value.map(normalizeValue);
+    if (typeof value === "object") {
+        const obj = value;
+        const sorted = {};
+        for (const key of Object.keys(obj).sort()) {
+            sorted[key] = normalizeValue(obj[key]);
+        }
+        return sorted;
+    }
+    return value;
+}
+function canonicalizeJcs(data) {
+    return JSON.stringify(normalizeValue(data));
+}
+// ─── Felt helpers ─────────────────────────────────────────────────────────────
+function felt252ToBytes(felt) {
+    const hex = felt.replace(/^0x/, "").padStart(64, "0");
+    return Buffer.from(hex, "hex");
+}
+/**
+ * Compute the felt252 hash that Ed25519 signs over for a Run Certificate.
+ * Strips any embedded `signature` field before hashing — verification is
+ * idempotent.
+ */
+export function computeCertHashFelt252(cert) {
+    const { signature: _stripped, ...unsigned } = cert;
+    void _stripped;
+    const canonical = canonicalizeJcs(unsigned);
+    const sha = createHash("sha256").update(canonical, "utf8").digest("hex");
+    const shaFelt = "0x" + sha.substring(0, 62);
+    return hash.computePoseidonHashOnElements(["0x1", shaFelt, CERT_MARKER_FELT]);
+}
+// ─── Public-key reconstruction ────────────────────────────────────────────────
+/**
+ * Reconstruct an Ed25519 `KeyObject` from base64 SPKI DER (as embedded in
+ * `signature.pubkey_spki_b64`).
+ *
+ * @throws if base64 is malformed or the key is not Ed25519.
+ */
+export function publicKeyFromSpkiB64(pubkeySpkiB64) {
+    const der = Buffer.from(pubkeySpkiB64, "base64");
+    if (der.length === 0) {
+        throw new Error("[cert-verify] empty SPKI buffer");
+    }
+    const key = createPublicKey({ key: der, format: "der", type: "spki" });
+    if (key.asymmetricKeyType !== "ed25519") {
+        throw new Error(`[cert-verify] SPKI is not Ed25519 (got ${key.asymmetricKeyType})`);
+    }
+    return key;
+}
+// ─── Verifier ─────────────────────────────────────────────────────────────────
+/**
+ * Verify a signed Run Certificate. Returns a structured result — never throws
+ * on verification failure (only on malformed input).
+ *
+ * The 7 possible failure reasons are typed via `CertVerifyFailReason` so callers
+ * can branch precisely. `recomputed_cert_hash_felt252` is always returned for
+ * audit trail / debug inspection.
+ */
+export function verifyRunCertificate(cert, opts = {}) {
+    const recomputed = computeCertHashFelt252(cert);
+    const sig = cert.signature;
+    if (!sig) {
+        return {
+            valid: false,
+            reason: "missing_signature",
+            recomputed_cert_hash_felt252: recomputed,
+        };
+    }
+    if (sig.alg !== "Ed25519") {
+        return {
+            valid: false,
+            reason: "wrong_alg",
+            details: `expected Ed25519, got ${String(sig.alg)}`,
+            recomputed_cert_hash_felt252: recomputed,
+        };
+    }
+    if (sig.cert_hash_felt252 !== recomputed) {
+        return {
+            valid: false,
+            reason: "hash_mismatch",
+            details: `embedded=${sig.cert_hash_felt252} recomputed=${recomputed}`,
+            recomputed_cert_hash_felt252: recomputed,
+        };
+    }
+    if (opts.expectedKid && opts.expectedKid !== sig.kid) {
+        return {
+            valid: false,
+            reason: "kid_mismatch",
+            details: `expected kid=${opts.expectedKid}, got ${sig.kid}`,
+            recomputed_cert_hash_felt252: recomputed,
+        };
+    }
+    let pubkey;
+    if (opts.expectedPublicKey) {
+        pubkey = opts.expectedPublicKey;
+    }
+    else {
+        try {
+            pubkey = publicKeyFromSpkiB64(sig.pubkey_spki_b64);
+        }
+        catch (err) {
+            return {
+                valid: false,
+                reason: "pubkey_unresolvable",
+                details: err instanceof Error ? err.message : String(err),
+                recomputed_cert_hash_felt252: recomputed,
+            };
+        }
+    }
+    let sigBytes;
+    try {
+        sigBytes = Buffer.from(sig.value, "base64");
+    }
+    catch {
+        return {
+            valid: false,
+            reason: "malformed_signature",
+            details: "signature.value is not valid base64",
+            recomputed_cert_hash_felt252: recomputed,
+        };
+    }
+    if (sigBytes.length !== 64) {
+        return {
+            valid: false,
+            reason: "malformed_signature",
+            details: `Ed25519 signature must be 64 bytes (got ${sigBytes.length})`,
+            recomputed_cert_hash_felt252: recomputed,
+        };
+    }
+    const msgBytes = felt252ToBytes(recomputed);
+    const ok = cryptoVerify(null, msgBytes, pubkey, sigBytes);
+    if (!ok) {
+        return {
+            valid: false,
+            reason: "signature_invalid",
+            recomputed_cert_hash_felt252: recomputed,
+        };
+    }
+    return { valid: true, recomputed_cert_hash_felt252: recomputed };
+}
+//# sourceMappingURL=cert-verify.js.map

package/dist/proof/cert-verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cert-verify.js","sourceRoot":"","sources":["../../src/proof/cert-verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EACL,UAAU,EACV,eAAe,EACf,MAAM,IAAI,YAAY,GAEvB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAkDhC,iFAAiF;AAEjF,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAC3B,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;AAE3E,gFAAgF;AAEhF,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;QACnC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC1C,MAAM,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,IAA6B;IACpD,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,iFAAiF;AAEjF,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IACtD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAmC;IAEnC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC;IACnD,KAAK,SAAS,CAAC;IACf,MAAM,SAAS,GAAG,eAAe,CAAC,QAAmC,CAAC,CAAC;IACvE,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC,6BAA6B,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,iFAAiF;AAEjF;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,aAAqB;IACxD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IACjD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,GAAG,GAAG,eAAe,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACvE,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,0CAA0C,GAAG,CAAC,iBAAiB,GAAG,CACnE,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iFAAiF;AAEjF;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAmC,EACnC,OAA0B,EAAE;IAE5B,MAAM,UAAU,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAEhD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;IAC3B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,mBAAmB;YAC3B,4BAA4B,EAAE,UAAU;SACzC,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE,yBAAyB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;YACnD,4BAA4B,EAAE,UAAU;SACzC,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,iBAAiB,KAAK,UAAU,EAAE,CAAC;QACzC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE,YAAY,GAAG,CAAC,iBAAiB,eAAe,UAAU,EAAE;YACrE,4BAA4B,EAAE,UAAU;SACzC,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,KAAK,GAAG,CAAC,GAAG,EAAE,CAAC;QACrD,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,cAAc;YACtB,OAAO,EAAE,gBAAgB,IAAI,CAAC,WAAW,SAAS,GAAG,CAAC,GAAG,EAAE;YAC3D,4BAA4B,EAAE,UAAU;SACzC,CAAC;IACJ,CAAC;IAED,IAAI,MAAiB,CAAC;IACtB,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3B,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC;IAClC,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,qBAAqB;gBAC7B,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;gBACzD,4BAA4B,EAAE,UAAU;aACzC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,qBAAqB;YAC7B,OAAO,EAAE,qCAAqC;YAC9C,4BAA4B,EAAE,UAAU;SACzC,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC3B,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,qBAAqB;YAC7B,OAAO,EAAE,2CAA2C,QAAQ,CAAC,MAAM,GAAG;YACtE,4BAA4B,EAAE,UAAU;SACzC,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC1D,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,mBAAmB;YAC3B,4BAA4B,EAAE,UAAU;SACzC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,UAAU,EAAE,CAAC;AACnE,CAAC"}

package/dist/replay/replay.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"replay.d.ts","sourceRoot":"","sources":["../../src/replay/replay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAIvD;;;;;;;GAOG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,UAAU,CAAC;AAI/C;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,gDAAgD;IAChD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,wCAAwC;IACxC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,iEAAiE;IACjE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,oEAAoE;IACpE,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;CAClC;AAID;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,4CAA4C;IAC5C,KAAK,EAAE,KAAK,CAAC;IACb;;;OAGG;IACH,KAAK,EAAE,OAAO,CAAC;IACf;;;OAGG;IACH,IAAI,CAAC,EAAE;QACL,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,SAAS,CAAC;QACvB,QAAQ,EAAE,OAAO,CAAC;QAClB,QAAQ,EAAE,OAAO,CAAC;KACnB,EAAE,CAAC;CACL;AAID;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B;;;OAGG;IACH,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAEjD;;;;;;OAMG;IACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QACvC,UAAU,EAAE,MAAM,EAAE,CAAC;QACrB,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,aAAa,EAAE,MAAM,EAAE,CAAC;QACxB,KAAK,EAAE,gBAAgB,CAAC;KACzB,CAAC,CAAC;CACJ;AAID;;;;;;;;;;GAUG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;;;;;;;;;;OAaG;IACH,GAAG,CAAC,GAAG,EAAE,aAAa,EAAE,aAAa,EAAE,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;CAC/D;AAID;;;;;GAKG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;aAElC,SAAS,EAAE,MAAM;aACjB,MAAM,EAAE,MAAM;gBADd,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM;CAKjC;AA2CD;;;;;;;;;;;;GAYG;AACH,wBAAsB,UAAU,CAC9B,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,YAAY,EACpB,IAAI,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,UAAU,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GACnD,OAAO,CAAC,YAAY,CAAC,CA4CvB"}
+{"version":3,"file":"replay.d.ts","sourceRoot":"","sources":["../../src/replay/replay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAIvD;;;;;;;GAOG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,UAAU,CAAC;AAI/C;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,gDAAgD;IAChD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,wCAAwC;IACxC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,iEAAiE;IACjE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,oEAAoE;IACpE,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;CAClC;AAID;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,4CAA4C;IAC5C,KAAK,EAAE,KAAK,CAAC;IACb;;;OAGG;IACH,KAAK,EAAE,OAAO,CAAC;IACf;;;OAGG;IACH,IAAI,CAAC,EAAE;QACL,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,SAAS,CAAC;QACvB,QAAQ,EAAE,OAAO,CAAC;QAClB,QAAQ,EAAE,OAAO,CAAC;KACnB,EAAE,CAAC;CACL;AAID;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B;;;OAGG;IACH,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAEjD;;;;;;OAMG;IACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QACvC,UAAU,EAAE,MAAM,EAAE,CAAC;QACrB,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,aAAa,EAAE,MAAM,EAAE,CAAC;QACxB,KAAK,EAAE,gBAAgB,CAAC;KACzB,CAAC,CAAC;CACJ;AAID;;;;;;;;;;GAUG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;;;;;;;;;;OAaG;IACH,GAAG,CAAC,GAAG,EAAE,aAAa,EAAE,aAAa,EAAE,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;CAC/D;AAID;;;;;GAKG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;aAElC,SAAS,EAAE,MAAM;aACjB,MAAM,EAAE,MAAM;gBADd,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM;CAKjC;AAwCD;;;;;;;;;;;;GAYG;AACH,wBAAsB,UAAU,CAC9B,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,YAAY,EACpB,IAAI,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,UAAU,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GACnD,OAAO,CAAC,YAAY,CAAC,CAkDvB"}

package/dist/replay/replay.js

@@ -81,10 +81,14 @@ function diffTraces(original, replayed) {
 export async function replayFrom(runId, loader, runner, opts) {
     const mode = opts?.mode ?? "strict";
     // 1. Load original artifacts
-    const [originalTrace, artifacts] = await Promise.all([
+    const [rawTrace, artifacts] = await Promise.all([
         loader.loadOriginalTrace(runId),
         loader.loadCacheEntries(runId),
     ]);
+    // Auto-migrate traces recorded under the draft schema to the frozen 1.0.0
+    const originalTrace = rawTrace.schemaVersion === "0.1.0-draft"
+        ? { ...rawTrace, schemaVersion: "1.0.0" }
+        : rawTrace;
     // 2. Import concrete implementations lazily to avoid circular references
     const { RecordedClock } = await import("./clock.js");
     const { RecordedRandom } = await import("./random.js");

package/dist/replay/replay.js.map

@@ -1 +1 @@
-{"version":3,"file":"replay.js","sourceRoot":"","sources":["../../src/replay/replay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAoIH,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAElC;IACA;IAFlB,YACkB,SAAiB,EACjB,MAAc;QAE9B,KAAK,CAAC,oCAAoC,SAAS,KAAK,MAAM,EAAE,CAAC,CAAC;QAHlD,cAAS,GAAT,SAAS,CAAQ;QACjB,WAAM,GAAN,MAAM,CAAQ;QAG9B,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED,iFAAiF;AAEjF;;;GAGG;AACH,SAAS,UAAU,CACjB,QAAe,EACf,QAAe;IAEf,MAAM,KAAK,GAAsC,EAAE,CAAC;IAEpD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACtE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAwB,EAAE,CAAC;YACjE,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1B,oEAAoE;YACpE,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC9C,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC;YACT,SAAS,EAAE,MAAM;YACjB,KAAK,EAAE,OAA0B;YACjC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;YAC/B,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;SAChC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,KAAa,EACb,MAAoB,EACpB,MAAoB,EACpB,IAAoD;IAEpD,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,QAAQ,CAAC;IAEpC,6BAA6B;IAC7B,MAAM,CAAC,aAAa,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnD,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC;QAC/B,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC;KAC/B,CAAC,CAAC;IAEH,yEAAyE;IACzE,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;IACrD,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAEvD,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,SAAS,CAAC,YAAY,EACtB,SAAS,CAAC,aAAa,EACvB,IAAI,CACL,CAAC;IAEF,8BAA8B;IAC9B,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IACnD,MAAM,GAAG,GAAkB;QACzB,aAAa,EAAE,KAAK;QACpB,WAAW;QACX,IAAI;QACJ,KAAK;QACL,MAAM;QACN,KAAK,EAAE,SAAS,CAAC,KAAK;KACvB,CAAC;IAEF,gBAAgB;IAChB,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAEzD,aAAa;IACb,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,KAAK,WAAW,CAAC,QAAQ,CAAC;IAC9D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IAEjE,OAAO;QACL,WAAW;QACX,KAAK,EAAE,WAAW;QAClB,KAAK;QACL,IAAI;KACL,CAAC;AACJ,CAAC"}
+{"version":3,"file":"replay.js","sourceRoot":"","sources":["../../src/replay/replay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAoIH,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAElC;IACA;IAFlB,YACkB,SAAiB,EACjB,MAAc;QAE9B,KAAK,CAAC,oCAAoC,SAAS,KAAK,MAAM,EAAE,CAAC,CAAC;QAHlD,cAAS,GAAT,SAAS,CAAQ;QACjB,WAAM,GAAN,MAAM,CAAQ;QAG9B,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED,iFAAiF;AAEjF;;;GAGG;AACH,SAAS,UAAU,CAAC,QAAe,EAAE,QAAe;IAClD,MAAM,KAAK,GAAsC,EAAE,CAAC;IAEpD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACtE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAwB,EAAE,CAAC;YACjE,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1B,oEAAoE;YACpE,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC9C,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC;YACT,SAAS,EAAE,MAAM;YACjB,KAAK,EAAE,OAA0B;YACjC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;YAC/B,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;SAChC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,KAAa,EACb,MAAoB,EACpB,MAAoB,EACpB,IAAoD;IAEpD,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,QAAQ,CAAC;IAEpC,6BAA6B;IAC7B,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC9C,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC;QAC/B,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC;KAC/B,CAAC,CAAC;IAEH,0EAA0E;IAC1E,MAAM,aAAa,GAChB,QAAQ,CAAC,aAAwB,KAAK,aAAa;QAClD,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,aAAa,EAAE,OAAgB,EAAE;QAClD,CAAC,CAAC,QAAQ,CAAC;IAEf,yEAAyE;IACzE,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;IACrD,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAEvD,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,SAAS,CAAC,YAAY,EACtB,SAAS,CAAC,aAAa,EACvB,IAAI,CACL,CAAC;IAEF,8BAA8B;IAC9B,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IACnD,MAAM,GAAG,GAAkB;QACzB,aAAa,EAAE,KAAK;QACpB,WAAW;QACX,IAAI;QACJ,KAAK;QACL,MAAM;QACN,KAAK,EAAE,SAAS,CAAC,KAAK;KACvB,CAAC;IAEF,gBAAgB;IAChB,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAEzD,aAAa;IACb,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,KAAK,WAAW,CAAC,QAAQ,CAAC;IAC9D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IAEjE,OAAO;QACL,WAAW;QACX,KAAK,EAAE,WAAW;QAClB,KAAK;QACL,IAAI;KACL,CAAC;AACJ,CAAC"}

package/dist/retry/index.d.ts

@@ -0,0 +1,129 @@
+/**
+ * Retry primitives with exponential backoff and optional jitter.
+ *
+ * Provides three usage modes:
+ *   - `retry(fn, opts)` — wrap an async call.
+ *   - `RetryContext` — manual control flow for granular retry logic.
+ *   - {@link ./presets.js} — 4 named configurations for common scenarios.
+ *
+ * Sleep is injectable via `RetryOptions.sleepFn` for deterministic tests.
+ * BaseError.retryable flag is honored by default presets (see ./presets.ts).
+ *
+ * @public @since 1.2.0
+ */
+export type SleepFn = (ms: number) => Promise<void>;
+/**
+ * Retry policy. `jitter: true` adds ±25% randomization to each delay
+ * (anti-thundering-herd when multiple callers retry simultaneously).
+ *
+ * Selection precedence on each error:
+ *   1. `retryIf` predicate if provided
+ *   2. `retryOn` class membership if provided
+ *   3. Default: retry on any error
+ *
+ * @public
+ */
+export interface RetryConfig {
+    /** Total attempts including the first try. Must be >= 1. */
+    readonly maxAttempts: number;
+    /** Initial delay before retry 1, in ms. */
+    readonly baseDelayMs: number;
+    /** Upper bound on any computed delay, in ms. */
+    readonly maxDelayMs: number;
+    /** Exponent for `baseDelayMs * base^attempt`. Typically 2.0. */
+    readonly exponentialBase: number;
+    /** Whether to add ±25% random jitter to each delay. */
+    readonly jitter: boolean;
+    /** If set, only retry when the error is an instance of one of these classes. */
+    readonly retryOn?: ReadonlyArray<new (...args: never[]) => Error>;
+    /** If set, called per error; return true to retry. Overrides retryOn. */
+    readonly retryIf?: (err: unknown) => boolean;
+}
+/**
+ * Options to {@link retry}.
+ * @public
+ */
+export interface RetryOptions {
+    /** Retry policy. Defaults to RETRY_TRANSIENT. */
+    config?: RetryConfig;
+    /** Called before each retry sleep. Receives the error, the 0-indexed attempt that failed, and the upcoming delay. */
+    onRetry?: (err: unknown, attempt: number, delayMs: number) => void;
+    /** Sleep injection — defaults to setTimeout. Tests pass a zero-delay or mock. */
+    sleepFn?: SleepFn;
+}
+/**
+ * Thrown after all retry attempts have been exhausted.
+ * @public
+ */
+export declare class RetryExhaustedError extends Error {
+    readonly attempts: number;
+    readonly lastError: unknown;
+    constructor(attempts: number, lastError: unknown);
+}
+/**
+ * Compute the delay before retry `attempt` (0-indexed). Caps at `maxDelayMs`.
+ * Jitter, when enabled, adds a uniform-random ±25% offset.
+ *
+ * Visible for tests and for callers that need to inspect timing.
+ * @public
+ */
+export declare function calculateDelay(config: RetryConfig, attempt: number): number;
+/**
+ * Decide whether to retry after `err` at 0-indexed `attempt`.
+ *
+ * Returns false on the final attempt (caller should throw exhaustion).
+ *
+ * @public
+ */
+export declare function shouldRetry(config: RetryConfig, err: unknown, attempt: number): boolean;
+/**
+ * Execute `fn` with retry and exponential backoff.
+ *
+ * @throws The non-retryable error as-is if `shouldRetry` returns false mid-loop.
+ * @throws {@link RetryExhaustedError} when all attempts have failed.
+ *
+ * @public
+ */
+export declare function retry<T>(fn: () => Promise<T>, opts?: RetryOptions): Promise<T>;
+/**
+ * Manual retry control. Use when the operation doesn't fit a single `fn()` —
+ * e.g. when multiple endpoints are tried per attempt, or when partial state
+ * must be reset between tries.
+ *
+ * @example
+ * ```ts
+ * const ctx = new RetryContext({ config: RETRY_AGGRESSIVE });
+ * while (ctx.shouldContinue) {
+ *   try {
+ *     return await op();
+ *   } catch (err) {
+ *     await ctx.handleError(err);
+ *   }
+ * }
+ * ```
+ *
+ * @public
+ */
+export declare class RetryContext {
+    private readonly config;
+    private readonly sleep;
+    private readonly onRetry?;
+    private attemptCount;
+    private exhausted;
+    constructor(opts: RetryOptions & {
+        config: RetryConfig;
+    });
+    /** True while attempts remain and no non-retryable error has been thrown. */
+    get shouldContinue(): boolean;
+    /** 0-indexed count of completed (failed) attempts. */
+    get attempt(): number;
+    /**
+     * Record an error and sleep before the next try.
+     *
+     * @throws The non-retryable error as-is.
+     * @throws {@link RetryExhaustedError} if attempts are exhausted.
+     */
+    handleError(err: unknown): Promise<void>;
+}
+export { RETRY_TRANSIENT, RETRY_AGGRESSIVE, RETRY_PATIENT, NO_RETRY, } from "./presets.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/retry/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/retry/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,MAAM,MAAM,OAAO,GAAG,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAEpD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,WAAW;IAC1B,4DAA4D;IAC5D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,2CAA2C;IAC3C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,gDAAgD;IAChD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,gEAAgE;IAChE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,uDAAuD;IACvD,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,gFAAgF;IAChF,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,KAAK,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,KAAK,CAAC,CAAC;IAClE,yEAAyE;IACzE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC;CAC9C;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,iDAAiD;IACjD,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,qHAAqH;IACrH,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACnE,iFAAiF;IACjF,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;gBAChB,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO;CAQjD;AAKD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAO3E;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CACzB,MAAM,EAAE,WAAW,EACnB,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,MAAM,GACd,OAAO,CAOT;AAED;;;;;;;GAOG;AACH,wBAAsB,KAAK,CAAC,CAAC,EAC3B,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,CAAC,CAAC,CAwBZ;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAU;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAIf;IACV,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,SAAS,CAAS;gBAEd,IAAI,EAAE,YAAY,GAAG;QAAE,MAAM,EAAE,WAAW,CAAA;KAAE;IAMxD,6EAA6E;IAC7E,IAAI,cAAc,IAAI,OAAO,CAE5B;IAED,sDAAsD;IACtD,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED;;;;;OAKG;IACG,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;CAe/C;AAED,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,aAAa,EACb,QAAQ,GACT,MAAM,cAAc,CAAC"}