@zeke-02/tinfoil 0.0.11 → 0.11.7

package/dist/{esm/secure-client.d.ts → secure-client.browser.d.ts}

@@ -1,4 +1,4 @@
-import type { VerificationDocument } from "./verifier";
+import type { VerificationDocument } from "./verifier.js";
 interface SecureClientOptions {
     baseURL?: string;
     enclaveURL?: string;
@@ -19,3 +19,4 @@ export declare class SecureClient {
     get fetch(): typeof fetch;
 }
 export {};
+//# sourceMappingURL=secure-client.browser.d.ts.map

package/dist/secure-client.browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-client.browser.d.ts","sourceRoot":"","sources":["../src/secure-client.browser.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAK1D,UAAU,mBAAmB;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,WAAW,CAA8B;IACjD,OAAO,CAAC,oBAAoB,CAAqC;IACjE,OAAO,CAAC,MAAM,CAA6B;IAE3C,OAAO,CAAC,OAAO,CAAC,CAAS;IACzB,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAS;gBAEzB,OAAO,GAAE,mBAAwB;IAMhC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAOrB,gBAAgB;IA6EjB,uBAAuB,IAAI,OAAO,CAAC,oBAAoB,CAAC;IAa9D,UAAU,IAAI,MAAM,GAAG,SAAS;IAIvC,IAAI,KAAK,IAAI,OAAO,KAAK,CAwCxB;CACF"}

package/dist/{esm/secure-client.mjs → secure-client.browser.js}

@@ -1,12 +1,15 @@
-import { Verifier } from "./verifier.mjs";
-import { TINFOIL_CONFIG } from "./config.mjs";
-import { createSecureFetch } from "./secure-fetch.mjs";
-import { fetchRouter } from "./router.mjs";
+import { Verifier } from "./verifier.js";
+import { TINFOIL_CONFIG } from "./config.js";
+import { createSecureFetch } from "./secure-fetch.browser.js";
+import { fetchRouter } from "./router.js";
 export class SecureClient {
+    initPromise = null;
+    verificationDocument = null;
+    _fetch = null;
+    baseURL;
+    enclaveURL;
+    configRepo;
     constructor(options = {}) {
-        this.initPromise = null;
-        this.verificationDocument = null;
-        this._fetch = null;
         this.baseURL = options.baseURL;
         this.enclaveURL = options.enclaveURL;
         this.configRepo = options.configRepo || TINFOIL_CONFIG.INFERENCE_PROXY_REPO;
@@ -18,32 +21,19 @@ export class SecureClient {
         return this.initPromise;
     }
     async initSecureClient() {
-        // Only fetch router if neither baseURL nor enclaveURL is provided
-        if (!this.baseURL && !this.enclaveURL) {
+        // Fetch router address if enclaveURL is not provided
+        if (!this.enclaveURL) {
             const routerAddress = await fetchRouter();
             this.enclaveURL = `https://${routerAddress}`;
-            this.baseURL = `https://${routerAddress}/v1/`;
-        }
-        // Ensure both baseURL and enclaveURL are initialized
-        if (!this.baseURL) {
-            if (this.enclaveURL) {
-                // If enclaveURL is provided but baseURL is not, derive baseURL from enclaveURL
-                const enclaveUrl = new URL(this.enclaveURL);
-                this.baseURL = `${enclaveUrl.origin}/v1/`;
-            }
-            else {
-                throw new Error("Unable to determine baseURL: neither baseURL nor enclaveURL provided");
+            // Only set baseURL from router if not already provided
+            if (!this.baseURL) {
+                this.baseURL = `https://${routerAddress}/v1/`;
             }
         }
-        if (!this.enclaveURL) {
-            if (this.baseURL) {
-                // If baseURL is provided but enclaveURL is not, derive enclaveURL from baseURL
-                const baseUrl = new URL(this.baseURL);
-                this.enclaveURL = baseUrl.origin;
-            }
-            else {
-                throw new Error("Unable to determine enclaveURL: neither baseURL nor enclaveURL provided");
-            }
+        // If baseURL still not set, derive from enclaveURL
+        if (!this.baseURL) {
+            const enclaveUrl = new URL(this.enclaveURL);
+            this.baseURL = `${enclaveUrl.origin}/v1/`;
         }
         const verifier = new Verifier({
             serverURL: this.enclaveURL,
@@ -63,8 +53,8 @@ export class SecureClient {
             }
             catch (transportError) {
                 this.verificationDocument.steps.createTransport = {
-                    status: "failed",
-                    error: transportError.message,
+                    status: 'failed',
+                    error: transportError.message
                 };
                 this.verificationDocument.securityVerified = false;
                 throw transportError;
@@ -79,25 +69,25 @@ export class SecureClient {
                 this.verificationDocument = {
                     configRepo: this.configRepo,
                     enclaveHost: new URL(this.enclaveURL).hostname,
-                    releaseDigest: "",
-                    codeMeasurement: { type: "", registers: [] },
-                    enclaveMeasurement: { measurement: { type: "", registers: [] } },
-                    tlsPublicKey: "",
-                    hpkePublicKey: "",
+                    releaseDigest: '',
+                    codeMeasurement: { type: '', registers: [] },
+                    enclaveMeasurement: { measurement: { type: '', registers: [] } },
+                    tlsPublicKey: '',
+                    hpkePublicKey: '',
                     hardwareMeasurement: undefined,
-                    codeFingerprint: "",
-                    enclaveFingerprint: "",
+                    codeFingerprint: '',
+                    enclaveFingerprint: '',
                     selectedRouterEndpoint: new URL(this.enclaveURL).hostname,
                     securityVerified: false,
                     steps: {
-                        fetchDigest: { status: "pending" },
-                        verifyCode: { status: "pending" },
-                        verifyEnclave: { status: "pending" },
-                        compareMeasurements: { status: "pending" },
+                        fetchDigest: { status: 'pending' },
+                        verifyCode: { status: 'pending' },
+                        verifyEnclave: { status: 'pending' },
+                        compareMeasurements: { status: 'pending' },
                         createTransport: undefined,
                         verifyHPKEKey: undefined,
-                        otherError: { status: "failed", error: error.message },
-                    },
+                        otherError: { status: 'failed', error: error.message },
+                    }
                 };
             }
             throw error;
@@ -125,32 +115,31 @@ export class SecureClient {
             catch (error) {
                 if (this.verificationDocument) {
                     const errorMessage = error.message;
-                    if (errorMessage.includes("HPKE public key mismatch")) {
+                    if (errorMessage.includes('HPKE public key mismatch')) {
                         this.verificationDocument.steps.verifyHPKEKey = {
-                            status: "failed",
-                            error: errorMessage,
+                            status: 'failed',
+                            error: errorMessage
                         };
                         this.verificationDocument.securityVerified = false;
                     }
-                    else if (errorMessage.includes("Transport initialization failed") ||
-                        errorMessage.includes("Request initialization failed")) {
+                    else if (errorMessage.includes('Transport initialization failed') || errorMessage.includes('Request initialization failed')) {
                         this.verificationDocument.steps.createTransport = {
-                            status: "failed",
-                            error: errorMessage,
+                            status: 'failed',
+                            error: errorMessage
                         };
                         this.verificationDocument.securityVerified = false;
                     }
-                    else if (errorMessage.includes("Failed to get HPKE key")) {
+                    else if (errorMessage.includes('Failed to get HPKE key')) {
                         this.verificationDocument.steps.verifyHPKEKey = {
-                            status: "failed",
-                            error: errorMessage,
+                            status: 'failed',
+                            error: errorMessage
                         };
                         this.verificationDocument.securityVerified = false;
                     }
                     else {
                         this.verificationDocument.steps.otherError = {
-                            status: "failed",
-                            error: errorMessage,
+                            status: 'failed',
+                            error: errorMessage
                         };
                         this.verificationDocument.securityVerified = false;
                     }
@@ -160,3 +149,4 @@ export class SecureClient {
         };
     }
 }
+//# sourceMappingURL=secure-client.browser.js.map

package/dist/secure-client.browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-client.browser.js","sourceRoot":"","sources":["../src/secure-client.browser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAQ1C,MAAM,OAAO,YAAY;IACf,WAAW,GAAyB,IAAI,CAAC;IACzC,oBAAoB,GAAgC,IAAI,CAAC;IACzD,MAAM,GAAwB,IAAI,CAAC;IAEnC,OAAO,CAAU;IACjB,UAAU,CAAU;IACX,UAAU,CAAU;IAErC,YAAY,UAA+B,EAAE;QAC3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,cAAc,CAAC,oBAAoB,CAAC;IAC9E,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC7C,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,gBAAgB;QAC5B,qDAAqD;QACrD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,aAAa,GAAG,MAAM,WAAW,EAAE,CAAC;YAC1C,IAAI,CAAC,UAAU,GAAG,WAAW,aAAa,EAAE,CAAC;YAE7C,uDAAuD;YACvD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,IAAI,CAAC,OAAO,GAAG,WAAW,aAAa,MAAM,CAAC;YAChD,CAAC;QACH,CAAC;QAED,mDAAmD;QACnD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC5C,IAAI,CAAC,OAAO,GAAG,GAAG,UAAU,CAAC,MAAM,MAAM,CAAC;QAC5C,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC;YAC5B,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,QAAQ,CAAC,uBAAuB,EAAE,CAAC;YAC/C,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;YACvF,CAAC;YACD,IAAI,CAAC,oBAAoB,GAAG,GAAG,CAAC;YAEhC,8CAA8C;YAC9C,MAAM,EAAE,aAAa,EAAE,uBAAuB,EAAE,GAAG,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC;YAEhG,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,uBAAuB,CAAC,CAAC;YACzG,CAAC;YAAC,OAAO,cAAc,EAAE,CAAC;gBACxB,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,eAAe,GAAG;oBAChD,MAAM,EAAE,QAAQ;oBAChB,KAAK,EAAG,cAAwB,CAAC,OAAO;iBACzC,CAAC;gBACF,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,GAAG,KAAK,CAAC;gBACnD,MAAM,cAAc,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,QAAQ,CAAC,uBAAuB,EAAE,CAAC;YAC/C,IAAI,GAAG,EAAE,CAAC;gBACR,IAAI,CAAC,oBAAoB,GAAG,GAAG,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,oBAAoB,GAAG;oBAC1B,UAAU,EAAE,IAAI,CAAC,UAAW;oBAC5B,WAAW,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,UAAW,CAAC,CAAC,QAAQ;oBAC/C,aAAa,EAAE,EAAE;oBACjB,eAAe,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;oBAC5C,kBAAkB,EAAE,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE;oBAChE,YAAY,EAAE,EAAE;oBAChB,aAAa,EAAE,EAAE;oBACjB,mBAAmB,EAAE,SAAS;oBAC9B,eAAe,EAAE,EAAE;oBACnB,kBAAkB,EAAE,EAAE;oBACtB,sBAAsB,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,UAAW,CAAC,CAAC,QAAQ;oBAC1D,gBAAgB,EAAE,KAAK;oBACvB,KAAK,EAAE;wBACL,WAAW,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;wBAClC,UAAU,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;wBACjC,aAAa,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;wBACpC,mBAAmB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;wBAC1C,eAAe,EAAE,SAAS;wBAC1B,aAAa,EAAE,SAAS;wBACxB,UAAU,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAG,KAAe,CAAC,OAAO,EAAE;qBAClE;iBACF,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,uBAAuB;QAClC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QAED,MAAM,IAAI,CAAC,WAAY,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAExC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,IAAI,CAAC,oBAAoB,CAAC;IACnC,CAAC;IAEM,UAAU;QACf,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,IAAI,KAAK;QACP,OAAO,KAAK,EAAE,KAAwB,EAAE,IAAkB,EAAE,EAAE;YAC5D,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YAEnB,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,MAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;oBAC9B,MAAM,YAAY,GAAI,KAAe,CAAC,OAAO,CAAC;oBAE9C,IAAI,YAAY,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;wBACtD,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,aAAa,GAAG;4BAC9C,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,YAAY;yBACpB,CAAC;wBACF,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,GAAG,KAAK,CAAC;oBACrD,CAAC;yBAAM,IAAI,YAAY,CAAC,QAAQ,CAAC,iCAAiC,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,+BAA+B,CAAC,EAAE,CAAC;wBAC9H,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,eAAe,GAAG;4BAChD,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,YAAY;yBACpB,CAAC;wBACF,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,GAAG,KAAK,CAAC;oBACrD,CAAC;yBAAM,IAAI,YAAY,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC;wBAC3D,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,aAAa,GAAG;4BAC9C,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,YAAY;yBACpB,CAAC;wBACF,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,GAAG,KAAK,CAAC;oBACrD,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,UAAU,GAAG;4BAC3C,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,YAAY;yBACpB,CAAC;wBACF,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,GAAG,KAAK,CAAC;oBACrD,CAAC;gBACH,CAAC;gBAED,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;CACF"}

package/dist/secure-client.d.ts

@@ -1,4 +1,4 @@
-import type { VerificationDocument } from "./verifier";
+import type { VerificationDocument } from "./verifier.js";
 interface SecureClientOptions {
     baseURL?: string;
     enclaveURL?: string;
@@ -19,3 +19,4 @@ export declare class SecureClient {
     get fetch(): typeof fetch;
 }
 export {};
+//# sourceMappingURL=secure-client.d.ts.map

package/dist/secure-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-client.d.ts","sourceRoot":"","sources":["../src/secure-client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAK1D,UAAU,mBAAmB;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,WAAW,CAA8B;IACjD,OAAO,CAAC,oBAAoB,CAAqC;IACjE,OAAO,CAAC,MAAM,CAA6B;IAE3C,OAAO,CAAC,OAAO,CAAC,CAAS;IACzB,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAS;gBAEzB,OAAO,GAAE,mBAAwB;IAMhC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAOrB,gBAAgB;IA6EjB,uBAAuB,IAAI,OAAO,CAAC,oBAAoB,CAAC;IAa9D,UAAU,IAAI,MAAM,GAAG,SAAS;IAIvC,IAAI,KAAK,IAAI,OAAO,KAAK,CAwCxB;CACF"}

package/dist/secure-client.js

@@ -1,18 +1,18 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SecureClient = void 0;
-const verifier_1 = require("./verifier");
-const config_1 = require("./config");
-const secure_fetch_1 = require("./secure-fetch");
-const router_1 = require("./router");
-class SecureClient {
+import { Verifier } from "./verifier.js";
+import { TINFOIL_CONFIG } from "./config.js";
+import { createSecureFetch } from "./secure-fetch.js";
+import { fetchRouter } from "./router.js";
+export class SecureClient {
+    initPromise = null;
+    verificationDocument = null;
+    _fetch = null;
+    baseURL;
+    enclaveURL;
+    configRepo;
     constructor(options = {}) {
-        this.initPromise = null;
-        this.verificationDocument = null;
-        this._fetch = null;
         this.baseURL = options.baseURL;
         this.enclaveURL = options.enclaveURL;
-        this.configRepo = options.configRepo || config_1.TINFOIL_CONFIG.INFERENCE_PROXY_REPO;
+        this.configRepo = options.configRepo || TINFOIL_CONFIG.INFERENCE_PROXY_REPO;
     }
     async ready() {
         if (!this.initPromise) {
@@ -21,34 +21,21 @@ class SecureClient {
         return this.initPromise;
     }
     async initSecureClient() {
-        // Only fetch router if neither baseURL nor enclaveURL is provided
-        if (!this.baseURL && !this.enclaveURL) {
-            const routerAddress = await (0, router_1.fetchRouter)();
+        // Fetch router address if enclaveURL is not provided
+        if (!this.enclaveURL) {
+            const routerAddress = await fetchRouter();
             this.enclaveURL = `https://${routerAddress}`;
-            this.baseURL = `https://${routerAddress}/v1/`;
-        }
-        // Ensure both baseURL and enclaveURL are initialized
-        if (!this.baseURL) {
-            if (this.enclaveURL) {
-                // If enclaveURL is provided but baseURL is not, derive baseURL from enclaveURL
-                const enclaveUrl = new URL(this.enclaveURL);
-                this.baseURL = `${enclaveUrl.origin}/v1/`;
-            }
-            else {
-                throw new Error("Unable to determine baseURL: neither baseURL nor enclaveURL provided");
+            // Only set baseURL from router if not already provided
+            if (!this.baseURL) {
+                this.baseURL = `https://${routerAddress}/v1/`;
             }
         }
-        if (!this.enclaveURL) {
-            if (this.baseURL) {
-                // If baseURL is provided but enclaveURL is not, derive enclaveURL from baseURL
-                const baseUrl = new URL(this.baseURL);
-                this.enclaveURL = baseUrl.origin;
-            }
-            else {
-                throw new Error("Unable to determine enclaveURL: neither baseURL nor enclaveURL provided");
-            }
+        // If baseURL still not set, derive from enclaveURL
+        if (!this.baseURL) {
+            const enclaveUrl = new URL(this.enclaveURL);
+            this.baseURL = `${enclaveUrl.origin}/v1/`;
         }
-        const verifier = new verifier_1.Verifier({
+        const verifier = new Verifier({
             serverURL: this.enclaveURL,
             configRepo: this.configRepo,
         });
@@ -62,12 +49,12 @@ class SecureClient {
             // Extract keys from the verification document
             const { hpkePublicKey, tlsPublicKeyFingerprint } = this.verificationDocument.enclaveMeasurement;
             try {
-                this._fetch = (0, secure_fetch_1.createSecureFetch)(this.baseURL, this.enclaveURL, hpkePublicKey, tlsPublicKeyFingerprint);
+                this._fetch = createSecureFetch(this.baseURL, this.enclaveURL, hpkePublicKey, tlsPublicKeyFingerprint);
             }
             catch (transportError) {
                 this.verificationDocument.steps.createTransport = {
-                    status: "failed",
-                    error: transportError.message,
+                    status: 'failed',
+                    error: transportError.message
                 };
                 this.verificationDocument.securityVerified = false;
                 throw transportError;
@@ -82,25 +69,25 @@ class SecureClient {
                 this.verificationDocument = {
                     configRepo: this.configRepo,
                     enclaveHost: new URL(this.enclaveURL).hostname,
-                    releaseDigest: "",
-                    codeMeasurement: { type: "", registers: [] },
-                    enclaveMeasurement: { measurement: { type: "", registers: [] } },
-                    tlsPublicKey: "",
-                    hpkePublicKey: "",
+                    releaseDigest: '',
+                    codeMeasurement: { type: '', registers: [] },
+                    enclaveMeasurement: { measurement: { type: '', registers: [] } },
+                    tlsPublicKey: '',
+                    hpkePublicKey: '',
                     hardwareMeasurement: undefined,
-                    codeFingerprint: "",
-                    enclaveFingerprint: "",
+                    codeFingerprint: '',
+                    enclaveFingerprint: '',
                     selectedRouterEndpoint: new URL(this.enclaveURL).hostname,
                     securityVerified: false,
                     steps: {
-                        fetchDigest: { status: "pending" },
-                        verifyCode: { status: "pending" },
-                        verifyEnclave: { status: "pending" },
-                        compareMeasurements: { status: "pending" },
+                        fetchDigest: { status: 'pending' },
+                        verifyCode: { status: 'pending' },
+                        verifyEnclave: { status: 'pending' },
+                        compareMeasurements: { status: 'pending' },
                         createTransport: undefined,
                         verifyHPKEKey: undefined,
-                        otherError: { status: "failed", error: error.message },
-                    },
+                        otherError: { status: 'failed', error: error.message },
+                    }
                 };
             }
             throw error;
@@ -128,32 +115,31 @@ class SecureClient {
             catch (error) {
                 if (this.verificationDocument) {
                     const errorMessage = error.message;
-                    if (errorMessage.includes("HPKE public key mismatch")) {
+                    if (errorMessage.includes('HPKE public key mismatch')) {
                         this.verificationDocument.steps.verifyHPKEKey = {
-                            status: "failed",
-                            error: errorMessage,
+                            status: 'failed',
+                            error: errorMessage
                         };
                         this.verificationDocument.securityVerified = false;
                     }
-                    else if (errorMessage.includes("Transport initialization failed") ||
-                        errorMessage.includes("Request initialization failed")) {
+                    else if (errorMessage.includes('Transport initialization failed') || errorMessage.includes('Request initialization failed')) {
                         this.verificationDocument.steps.createTransport = {
-                            status: "failed",
-                            error: errorMessage,
+                            status: 'failed',
+                            error: errorMessage
                         };
                         this.verificationDocument.securityVerified = false;
                     }
-                    else if (errorMessage.includes("Failed to get HPKE key")) {
+                    else if (errorMessage.includes('Failed to get HPKE key')) {
                         this.verificationDocument.steps.verifyHPKEKey = {
-                            status: "failed",
-                            error: errorMessage,
+                            status: 'failed',
+                            error: errorMessage
                         };
                         this.verificationDocument.securityVerified = false;
                     }
                     else {
                         this.verificationDocument.steps.otherError = {
-                            status: "failed",
-                            error: errorMessage,
+                            status: 'failed',
+                            error: errorMessage
                         };
                         this.verificationDocument.securityVerified = false;
                     }
@@ -163,4 +149,4 @@ class SecureClient {
         };
     }
 }
-exports.SecureClient = SecureClient;
+//# sourceMappingURL=secure-client.js.map

package/dist/secure-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-client.js","sourceRoot":"","sources":["../src/secure-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAQ1C,MAAM,OAAO,YAAY;IACf,WAAW,GAAyB,IAAI,CAAC;IACzC,oBAAoB,GAAgC,IAAI,CAAC;IACzD,MAAM,GAAwB,IAAI,CAAC;IAEnC,OAAO,CAAU;IACjB,UAAU,CAAU;IACX,UAAU,CAAU;IAErC,YAAY,UAA+B,EAAE;QAC3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,cAAc,CAAC,oBAAoB,CAAC;IAC9E,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC7C,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,gBAAgB;QAC5B,qDAAqD;QACrD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,aAAa,GAAG,MAAM,WAAW,EAAE,CAAC;YAC1C,IAAI,CAAC,UAAU,GAAG,WAAW,aAAa,EAAE,CAAC;YAE7C,uDAAuD;YACvD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,IAAI,CAAC,OAAO,GAAG,WAAW,aAAa,MAAM,CAAC;YAChD,CAAC;QACH,CAAC;QAED,mDAAmD;QACnD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC5C,IAAI,CAAC,OAAO,GAAG,GAAG,UAAU,CAAC,MAAM,MAAM,CAAC;QAC5C,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC;YAC5B,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,QAAQ,CAAC,uBAAuB,EAAE,CAAC;YAC/C,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;YACvF,CAAC;YACD,IAAI,CAAC,oBAAoB,GAAG,GAAG,CAAC;YAEhC,8CAA8C;YAC9C,MAAM,EAAE,aAAa,EAAE,uBAAuB,EAAE,GAAG,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC;YAEhG,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,uBAAuB,CAAC,CAAC;YACzG,CAAC;YAAC,OAAO,cAAc,EAAE,CAAC;gBACxB,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,eAAe,GAAG;oBAChD,MAAM,EAAE,QAAQ;oBAChB,KAAK,EAAG,cAAwB,CAAC,OAAO;iBACzC,CAAC;gBACF,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,GAAG,KAAK,CAAC;gBACnD,MAAM,cAAc,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,QAAQ,CAAC,uBAAuB,EAAE,CAAC;YAC/C,IAAI,GAAG,EAAE,CAAC;gBACR,IAAI,CAAC,oBAAoB,GAAG,GAAG,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,oBAAoB,GAAG;oBAC1B,UAAU,EAAE,IAAI,CAAC,UAAW;oBAC5B,WAAW,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,UAAW,CAAC,CAAC,QAAQ;oBAC/C,aAAa,EAAE,EAAE;oBACjB,eAAe,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;oBAC5C,kBAAkB,EAAE,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE;oBAChE,YAAY,EAAE,EAAE;oBAChB,aAAa,EAAE,EAAE;oBACjB,mBAAmB,EAAE,SAAS;oBAC9B,eAAe,EAAE,EAAE;oBACnB,kBAAkB,EAAE,EAAE;oBACtB,sBAAsB,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,UAAW,CAAC,CAAC,QAAQ;oBAC1D,gBAAgB,EAAE,KAAK;oBACvB,KAAK,EAAE;wBACL,WAAW,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;wBAClC,UAAU,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;wBACjC,aAAa,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;wBACpC,mBAAmB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;wBAC1C,eAAe,EAAE,SAAS;wBAC1B,aAAa,EAAE,SAAS;wBACxB,UAAU,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAG,KAAe,CAAC,OAAO,EAAE;qBAClE;iBACF,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,uBAAuB;QAClC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QAED,MAAM,IAAI,CAAC,WAAY,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAExC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,IAAI,CAAC,oBAAoB,CAAC;IACnC,CAAC;IAEM,UAAU;QACf,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,IAAI,KAAK;QACP,OAAO,KAAK,EAAE,KAAwB,EAAE,IAAkB,EAAE,EAAE;YAC5D,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YAEnB,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,MAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;oBAC9B,MAAM,YAAY,GAAI,KAAe,CAAC,OAAO,CAAC;oBAE9C,IAAI,YAAY,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;wBACtD,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,aAAa,GAAG;4BAC9C,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,YAAY;yBACpB,CAAC;wBACF,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,GAAG,KAAK,CAAC;oBACrD,CAAC;yBAAM,IAAI,YAAY,CAAC,QAAQ,CAAC,iCAAiC,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,+BAA+B,CAAC,EAAE,CAAC;wBAC9H,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,eAAe,GAAG;4BAChD,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,YAAY;yBACpB,CAAC;wBACF,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,GAAG,KAAK,CAAC;oBACrD,CAAC;yBAAM,IAAI,YAAY,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC;wBAC3D,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,aAAa,GAAG;4BAC9C,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,YAAY;yBACpB,CAAC;wBACF,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,GAAG,KAAK,CAAC;oBACrD,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,UAAU,GAAG;4BAC3C,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,YAAY;yBACpB,CAAC;wBACF,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,GAAG,KAAK,CAAC;oBACrD,CAAC;gBACH,CAAC;gBAED,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;CACF"}

package/dist/secure-fetch.browser.d.ts

@@ -1 +1,2 @@
 export declare function createSecureFetch(baseURL: string, enclaveURL?: string, hpkePublicKey?: string, tlsPublicKeyFingerprint?: string): typeof fetch;
+//# sourceMappingURL=secure-fetch.browser.d.ts.map

package/dist/secure-fetch.browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-fetch.browser.d.ts","sourceRoot":"","sources":["../src/secure-fetch.browser.ts"],"names":[],"mappings":"AAEA,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,uBAAuB,CAAC,EAAE,MAAM,GAAG,OAAO,KAAK,CAS9I"}

package/dist/secure-fetch.browser.js

@@ -1,13 +1,11 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createSecureFetch = createSecureFetch;
-const encrypted_body_fetch_1 = require("./encrypted-body-fetch");
-function createSecureFetch(baseURL, enclaveURL, hpkePublicKey, tlsPublicKeyFingerprint) {
+import { createEncryptedBodyFetch } from "./encrypted-body-fetch.js";
+export function createSecureFetch(baseURL, enclaveURL, hpkePublicKey, tlsPublicKeyFingerprint) {
     if (hpkePublicKey) {
-        return (0, encrypted_body_fetch_1.createEncryptedBodyFetch)(baseURL, hpkePublicKey, enclaveURL);
+        return createEncryptedBodyFetch(baseURL, hpkePublicKey, enclaveURL);
     }
     else {
         throw new Error("HPKE public key not available and TLS-only verification is not supported in browsers. " +
             "Only HPKE-enabled enclaves can be used in browser environments.");
     }
 }
+//# sourceMappingURL=secure-fetch.browser.js.map

package/dist/secure-fetch.browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-fetch.browser.js","sourceRoot":"","sources":["../src/secure-fetch.browser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAErE,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,UAAmB,EAAE,aAAsB,EAAE,uBAAgC;IAC5H,IAAI,aAAa,EAAE,CAAC;QAChB,OAAO,wBAAwB,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;IACxE,CAAC;SAAM,CAAC;QACJ,MAAM,IAAI,KAAK,CACX,wFAAwF;YACxF,iEAAiE,CACpE,CAAC;IACN,CAAC;AACL,CAAC"}

package/dist/secure-fetch.d.ts

@@ -1 +1,2 @@
 export declare function createSecureFetch(baseURL: string, enclaveURL?: string, hpkePublicKey?: string, tlsPublicKeyFingerprint?: string): typeof fetch;
+//# sourceMappingURL=secure-fetch.d.ts.map

package/dist/secure-fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-fetch.d.ts","sourceRoot":"","sources":["../src/secure-fetch.ts"],"names":[],"mappings":"AAIA,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,uBAAuB,CAAC,EAAE,MAAM,GAAG,OAAO,KAAK,CAuB9I"}

package/dist/secure-fetch.js

@@ -1,15 +1,23 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createSecureFetch = createSecureFetch;
-const encrypted_body_fetch_1 = require("./encrypted-body-fetch");
-function createSecureFetch(baseURL, enclaveURL, hpkePublicKey, tlsPublicKeyFingerprint) {
+import { createEncryptedBodyFetch } from "./encrypted-body-fetch.js";
+import { createPinnedTlsFetch } from "./pinned-tls-fetch.js";
+import { isRealBrowser } from "./env.js";
+export function createSecureFetch(baseURL, enclaveURL, hpkePublicKey, tlsPublicKeyFingerprint) {
     let fetchFunction;
     if (hpkePublicKey) {
-        fetchFunction = (0, encrypted_body_fetch_1.createEncryptedBodyFetch)(baseURL, hpkePublicKey, enclaveURL);
+        fetchFunction = createEncryptedBodyFetch(baseURL, hpkePublicKey, enclaveURL);
     }
     else {
-        throw new Error("HPKE public key not available and TLS-only verification is not supported in browsers. " +
-            "Only HPKE-enabled enclaves can be used in browser environments.");
+        // HPKE not available: check if we're in a browser
+        if (isRealBrowser()) {
+            throw new Error("HPKE public key not available and TLS-only verification is not supported in browsers. " +
+                "Only HPKE-enabled enclaves can be used in browser environments.");
+        }
+        // Node.js environment: fall back to TLS-only verification using pinned TLS fetch
+        if (!tlsPublicKeyFingerprint) {
+            throw new Error("Neither HPKE public key nor TLS public key fingerprint available for verification");
+        }
+        fetchFunction = createPinnedTlsFetch(baseURL, tlsPublicKeyFingerprint);
     }
     return fetchFunction;
 }
+//# sourceMappingURL=secure-fetch.js.map

package/dist/secure-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-fetch.js","sourceRoot":"","sources":["../src/secure-fetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,UAAmB,EAAE,aAAsB,EAAE,uBAAgC;IAChI,IAAI,aAA2B,CAAC;IAE5B,IAAI,aAAa,EAAE,CAAC;QAClB,aAAa,GAAG,wBAAwB,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;IAC/E,CAAC;SAAM,CAAC;QACN,kDAAkD;QAClD,IAAI,aAAa,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,wFAAwF;gBACxF,iEAAiE,CAClE,CAAC;QACJ,CAAC;QAED,iFAAiF;QACjF,IAAI,CAAC,uBAAuB,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,mFAAmF,CACpF,CAAC;QACJ,CAAC;QACD,aAAa,GAAG,oBAAoB,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,aAAa,CAAA;AACxB,CAAC"}

package/dist/{tinfoilai.d.ts → tinfoil-ai.browser.d.ts}

@@ -1,8 +1,9 @@
 import OpenAI from "openai";
 import type { Audio, Beta, Chat, Embeddings, Files, FineTuning, Images, Models, Moderations, Responses } from "openai/resources";
-import type { VerificationDocument } from "./verifier";
+import type { VerificationDocument } from "./verifier.js";
 interface TinfoilAIOptions {
     apiKey?: string;
+    bearerToken?: string;
     baseURL?: string;
     enclaveURL?: string;
     configRepo?: string;
@@ -15,12 +16,13 @@ export declare class TinfoilAI {
     private configRepo?;
     private secureClient;
     private verificationDocument?;
+    private useBearerToken;
     apiKey?: string;
+    bearerToken?: string;
     baseURL?: string;
     enclaveURL?: string;
     constructor(options?: TinfoilAIOptions);
     ready(): Promise<void>;
-    private initClient;
     private createOpenAIClient;
     private ensureReady;
     getVerificationDocument(): Promise<VerificationDocument>;
@@ -52,3 +54,4 @@ export declare namespace TinfoilAI {
     export import VectorStores = OpenAI.VectorStores;
 }
 export {};
+//# sourceMappingURL=tinfoil-ai.browser.d.ts.map

package/dist/tinfoil-ai.browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tinfoil-ai.browser.d.ts","sourceRoot":"","sources":["../src/tinfoil-ai.browser.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,KAAK,EACV,KAAK,EACL,IAAI,EACJ,IAAI,EACJ,UAAU,EACV,KAAK,EACL,UAAU,EACV,MAAM,EACN,MAAM,EACN,WAAW,EACX,SAAS,EACV,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AA4B1D,UAAU,gBAAgB;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,aAAa,CAAkB;IACvC,OAAO,CAAC,YAAY,CAAC,CAAgB;IACrC,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,oBAAoB,CAAC,CAAuB;IACpD,OAAO,CAAC,cAAc,CAAU;IAEzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;gBAEf,OAAO,GAAE,gBAAqB;IAgC7B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YASrB,kBAAkB;YA8BlB,WAAW;IAKZ,uBAAuB,IAAI,OAAO,CAAC,oBAAoB,CAAC;IAQrE,IAAI,IAAI,IAAI,IAAI,CAEf;IAED,IAAI,KAAK,IAAI,KAAK,CAEjB;IAED,IAAI,UAAU,IAAI,UAAU,CAI3B;IAED,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED,IAAI,KAAK,IAAI,KAAK,CAEjB;IAED,IAAI,SAAS,IAAI,SAAS,CAIzB;IAED,IAAI,UAAU,IAAI,UAAU,CAI3B;IAED,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED,IAAI,WAAW,IAAI,WAAW,CAI7B;IAED,IAAI,IAAI,IAAI,IAAI,CAEf;CACF;AAGD,yBAAiB,SAAS,CAAC;IACzB,MAAM,QAAQ,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACjC,MAAM,QAAQ,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IACnC,MAAM,QAAQ,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACjC,MAAM,QAAQ,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IACvC,MAAM,QAAQ,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IAC/C,MAAM,QAAQ,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAC7C,MAAM,QAAQ,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IACnC,MAAM,QAAQ,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAC7C,MAAM,QAAQ,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IACrC,MAAM,QAAQ,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IACrC,MAAM,QAAQ,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IAC/C,MAAM,QAAQ,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IAC3C,MAAM,QAAQ,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IACvC,MAAM,QAAQ,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;CAClD"}