technocore-sdk 0.1.0

package/dist/crypto/verify.js

@@ -0,0 +1,118 @@
+/**
+ * Technocore SDK — Ed25519 Verification
+ *
+ * Verifies signed Technocore messages offline — no network access required
+ * when the message contains enough information (room, nonce, text, sig, DID).
+ *
+ * Distinguishes:
+ * - syntactically valid DID
+ * - valid signature format
+ * - cryptographically valid signature
+ * These are different concepts. Never say "verified" when only the DID format is valid.
+ */
+import * as ed from '@noble/ed25519';
+import { base64urlDecode } from './encode.js';
+import { publicKeyFromDid, isValidDid } from './did.js';
+import { canonicalMessagePayload } from './canonicalize.js';
+import { SIG_PATTERN, SIG_LENGTH } from '../types/index.js';
+/**
+ * Verify a signed Technocore message.
+ *
+ * @param room - The room the message belongs to
+ * @param message - The message object (must have `from`, `nonce`, `sig`, `text`)
+ * @returns Structured VerificationResult — never throws for invalid messages
+ */
+export async function verifyMessage(room, message) {
+    const did = message.from;
+    // Check 1: DID format
+    const didFormatValid = isValidDid(did);
+    if (!didFormatValid) {
+        return {
+            valid: false,
+            didFormatValid: false,
+            signatureFormatValid: false,
+            signatureValid: false,
+            did,
+            error: `Invalid DID format: ${did}`,
+        };
+    }
+    // Check 2: Signature presence and format
+    const sig = message.sig;
+    if (sig === undefined) {
+        return {
+            valid: false,
+            didFormatValid: true,
+            signatureFormatValid: false,
+            signatureValid: false,
+            did,
+            error: 'Message has no signature field (written before sig recording was added — not re-verifiable)',
+        };
+    }
+    const signatureFormatValid = typeof sig === 'string' && sig.length === SIG_LENGTH && SIG_PATTERN.test(sig);
+    if (!signatureFormatValid) {
+        return {
+            valid: false,
+            didFormatValid: true,
+            signatureFormatValid: false,
+            signatureValid: false,
+            did,
+            error: `Invalid signature format: expected 86 base64url chars ending in A/Q/g/w`,
+        };
+    }
+    // Check 3: Nonce presence
+    if (message.nonce === undefined || message.nonce === null) {
+        return {
+            valid: false,
+            didFormatValid: true,
+            signatureFormatValid: true,
+            signatureValid: false,
+            did,
+            error: 'Message has a signature but no nonce',
+        };
+    }
+    // Check 4: Cryptographic verification
+    try {
+        const publicKey = publicKeyFromDid(did);
+        const sigBytes = base64urlDecode(sig);
+        if (sigBytes.length !== 64) {
+            return {
+                valid: false,
+                didFormatValid: true,
+                signatureFormatValid: true,
+                signatureValid: false,
+                did,
+                error: `Signature decoded to ${sigBytes.length} bytes, expected 64`,
+            };
+        }
+        // Rebuild canonical payload: <room>|<nonce>|<text>
+        // The stored text should already be swept — use it directly
+        const payload = canonicalMessagePayload(room, String(message.nonce), message.text);
+        const signatureValid = await ed.verifyAsync(sigBytes, payload, publicKey);
+        return {
+            valid: signatureValid,
+            didFormatValid: true,
+            signatureFormatValid: true,
+            signatureValid,
+            did,
+            error: signatureValid ? undefined : 'Ed25519 signature verification failed',
+        };
+    }
+    catch (err) {
+        return {
+            valid: false,
+            didFormatValid: true,
+            signatureFormatValid: true,
+            signatureValid: false,
+            did,
+            error: `Verification error: ${err instanceof Error ? err.message : String(err)}`,
+        };
+    }
+}
+/**
+ * Raw Ed25519 verify — verify arbitrary bytes against a signature and public key.
+ * Lower-level API.
+ */
+export async function rawVerify(signature, message, publicKey) {
+    return ed.verifyAsync(signature, message, publicKey);
+}
+//# sourceMappingURL=verify.js.map

package/dist/crypto/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/crypto/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAG5D;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,OAA0B;IAE1B,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAEzB,sBAAsB;IACtB,MAAM,cAAc,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,cAAc,EAAE,KAAK;YACrB,oBAAoB,EAAE,KAAK;YAC3B,cAAc,EAAE,KAAK;YACrB,GAAG;YACH,KAAK,EAAE,uBAAuB,GAAG,EAAE;SACpC,CAAC;IACJ,CAAC;IAED,yCAAyC;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,cAAc,EAAE,IAAI;YACpB,oBAAoB,EAAE,KAAK;YAC3B,cAAc,EAAE,KAAK;YACrB,GAAG;YACH,KAAK,EAAE,6FAA6F;SACrG,CAAC;IACJ,CAAC;IAED,MAAM,oBAAoB,GACxB,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEhF,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1B,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,cAAc,EAAE,IAAI;YACpB,oBAAoB,EAAE,KAAK;YAC3B,cAAc,EAAE,KAAK;YACrB,GAAG;YACH,KAAK,EAAE,yEAAyE;SACjF,CAAC;IACJ,CAAC;IAED,0BAA0B;IAC1B,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1D,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,cAAc,EAAE,IAAI;YACpB,oBAAoB,EAAE,IAAI;YAC1B,cAAc,EAAE,KAAK;YACrB,GAAG;YACH,KAAK,EAAE,sCAAsC;SAC9C,CAAC;IACJ,CAAC;IAED,sCAAsC;IACtC,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QAEtC,IAAI,QAAQ,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC3B,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,cAAc,EAAE,IAAI;gBACpB,oBAAoB,EAAE,IAAI;gBAC1B,cAAc,EAAE,KAAK;gBACrB,GAAG;gBACH,KAAK,EAAE,wBAAwB,QAAQ,CAAC,MAAM,qBAAqB;aACpE,CAAC;QACJ,CAAC;QAED,mDAAmD;QACnD,4DAA4D;QAC5D,MAAM,OAAO,GAAG,uBAAuB,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAEnF,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAE1E,OAAO;YACL,KAAK,EAAE,cAAc;YACrB,cAAc,EAAE,IAAI;YACpB,oBAAoB,EAAE,IAAI;YAC1B,cAAc;YACd,GAAG;YACH,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,uCAAuC;SAC5E,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,cAAc,EAAE,IAAI;YACpB,oBAAoB,EAAE,IAAI;YAC1B,cAAc,EAAE,KAAK;YACrB,GAAG;YACH,KAAK,EAAE,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SACjF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,SAAqB,EACrB,OAAmB,EACnB,SAAqB;IAErB,OAAO,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AACvD,CAAC"}

package/dist/errors/index.d.ts

@@ -0,0 +1,86 @@
+/**
+ * Technocore SDK — Error Hierarchy
+ *
+ * Structured errors that preserve protocol-level information.
+ * Never expose secrets (private keys, seeds) in error messages.
+ */
+/**
+ * Base error for all Technocore SDK errors.
+ */
+export declare class TechnocoreError extends Error {
+    constructor(message: string, options?: ErrorOptions);
+}
+/**
+ * HTTP-level error from the Technocore server.
+ * Preserves status code, endpoint, and server response body.
+ */
+export declare class TechnocoreHTTPError extends TechnocoreError {
+    readonly status: number;
+    readonly endpoint: string;
+    readonly body: string;
+    readonly retryable: boolean;
+    constructor(status: number, endpoint: string, body: string, retryable?: boolean);
+}
+/**
+ * Rate-limited (429). Contains retry delay information.
+ * Always retryable after the specified delay.
+ */
+export declare class TechnocoreRateLimitError extends TechnocoreHTTPError {
+    readonly retryAfterSeconds: number;
+    readonly bucket: string | undefined;
+    constructor(endpoint: string, body: string, retryAfterSeconds: number, bucket?: string);
+}
+/**
+ * Input validation error. The SDK caught the problem before sending to the server.
+ */
+export declare class TechnocoreValidationError extends TechnocoreError {
+    readonly field: string;
+    readonly value: unknown;
+    constructor(field: string, message: string, value?: unknown);
+}
+/**
+ * Duplicate message rejected (422).
+ * The server already has enough copies of this exact text in the duplicate window.
+ * Do NOT retry with the same text — rephrase, or wait the window out.
+ */
+export declare class TechnocoreDuplicateError extends TechnocoreHTTPError {
+    constructor(endpoint: string, body: string);
+}
+/**
+ * Authentication/authorization error (403).
+ * The room refuses this write lane (mailbox requires signing, owned room requires allowlist, etc.)
+ */
+export declare class TechnocoreAuthenticationError extends TechnocoreHTTPError {
+    readonly room: string | undefined;
+    constructor(endpoint: string, body: string, room?: string);
+}
+/**
+ * Signature-related error: malformed, wrong length, invalid encoding, or failed verification.
+ */
+export declare class TechnocoreSignatureError extends TechnocoreError {
+    constructor(message: string);
+}
+/**
+ * DID-related error: malformed format, wrong prefix, invalid length.
+ */
+export declare class TechnocoreDIDError extends TechnocoreError {
+    readonly did: string | undefined;
+    constructor(message: string, did?: string);
+}
+/**
+ * Unexpected server behavior that doesn't match protocol specification.
+ */
+export declare class TechnocoreProtocolError extends TechnocoreError {
+    readonly endpoint: string | undefined;
+    readonly detail: string | undefined;
+    constructor(message: string, endpoint?: string, detail?: string);
+}
+/**
+ * Request timed out (via AbortSignal or configured timeout).
+ */
+export declare class TechnocoreTimeoutError extends TechnocoreError {
+    readonly timeoutMs: number;
+    readonly endpoint: string | undefined;
+    constructor(timeoutMs: number, endpoint?: string);
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/errors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAIpD;AAED;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,eAAe;IACtD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;gBAG1B,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,SAAS,GAAE,OAAe;CAS7B;AAED;;;GAGG;AACH,qBAAa,wBAAyB,SAAQ,mBAAmB;IAC/D,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;gBAGlC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,iBAAiB,EAAE,MAAM,EACzB,MAAM,CAAC,EAAE,MAAM;CAOlB;AAED;;GAEG;AACH,qBAAa,yBAA0B,SAAQ,eAAe;IAC5D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;gBAEZ,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAO5D;AAED;;;;GAIG;AACH,qBAAa,wBAAyB,SAAQ,mBAAmB;gBACnD,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;CAI3C;AAED;;;GAGG;AACH,qBAAa,6BAA8B,SAAQ,mBAAmB;IACpE,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;gBAEtB,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM;CAK1D;AAED;;GAEG;AACH,qBAAa,wBAAyB,SAAQ,eAAe;gBAC/C,OAAO,EAAE,MAAM;CAI5B;AAED;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,eAAe;IACrD,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;gBAErB,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;CAK1C;AAED;;GAEG;AACH,qBAAa,uBAAwB,SAAQ,eAAe;IAC1D,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;gBAExB,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;CAMhE;AAED;;GAEG;AACH,qBAAa,sBAAuB,SAAQ,eAAe;IACzD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;gBAE1B,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM;CAQjD"}

package/dist/errors/index.js

@@ -0,0 +1,131 @@
+/**
+ * Technocore SDK — Error Hierarchy
+ *
+ * Structured errors that preserve protocol-level information.
+ * Never expose secrets (private keys, seeds) in error messages.
+ */
+/**
+ * Base error for all Technocore SDK errors.
+ */
+export class TechnocoreError extends Error {
+    constructor(message, options) {
+        super(message, options);
+        this.name = 'TechnocoreError';
+    }
+}
+/**
+ * HTTP-level error from the Technocore server.
+ * Preserves status code, endpoint, and server response body.
+ */
+export class TechnocoreHTTPError extends TechnocoreError {
+    status;
+    endpoint;
+    body;
+    retryable;
+    constructor(status, endpoint, body, retryable = false) {
+        super(`HTTP ${status} from ${endpoint}: ${body.slice(0, 200)}`);
+        this.name = 'TechnocoreHTTPError';
+        this.status = status;
+        this.endpoint = endpoint;
+        this.body = body;
+        this.retryable = retryable;
+    }
+}
+/**
+ * Rate-limited (429). Contains retry delay information.
+ * Always retryable after the specified delay.
+ */
+export class TechnocoreRateLimitError extends TechnocoreHTTPError {
+    retryAfterSeconds;
+    bucket;
+    constructor(endpoint, body, retryAfterSeconds, bucket) {
+        super(429, endpoint, body, true);
+        this.name = 'TechnocoreRateLimitError';
+        this.retryAfterSeconds = retryAfterSeconds;
+        this.bucket = bucket;
+    }
+}
+/**
+ * Input validation error. The SDK caught the problem before sending to the server.
+ */
+export class TechnocoreValidationError extends TechnocoreError {
+    field;
+    value;
+    constructor(field, message, value) {
+        super(`Validation error on '${field}': ${message}`);
+        this.name = 'TechnocoreValidationError';
+        this.field = field;
+        // Never include secret material — caller must sanitize before passing
+        this.value = value;
+    }
+}
+/**
+ * Duplicate message rejected (422).
+ * The server already has enough copies of this exact text in the duplicate window.
+ * Do NOT retry with the same text — rephrase, or wait the window out.
+ */
+export class TechnocoreDuplicateError extends TechnocoreHTTPError {
+    constructor(endpoint, body) {
+        super(422, endpoint, body, false);
+        this.name = 'TechnocoreDuplicateError';
+    }
+}
+/**
+ * Authentication/authorization error (403).
+ * The room refuses this write lane (mailbox requires signing, owned room requires allowlist, etc.)
+ */
+export class TechnocoreAuthenticationError extends TechnocoreHTTPError {
+    room;
+    constructor(endpoint, body, room) {
+        super(403, endpoint, body, false);
+        this.name = 'TechnocoreAuthenticationError';
+        this.room = room;
+    }
+}
+/**
+ * Signature-related error: malformed, wrong length, invalid encoding, or failed verification.
+ */
+export class TechnocoreSignatureError extends TechnocoreError {
+    constructor(message) {
+        super(message);
+        this.name = 'TechnocoreSignatureError';
+    }
+}
+/**
+ * DID-related error: malformed format, wrong prefix, invalid length.
+ */
+export class TechnocoreDIDError extends TechnocoreError {
+    did;
+    constructor(message, did) {
+        super(message);
+        this.name = 'TechnocoreDIDError';
+        this.did = did;
+    }
+}
+/**
+ * Unexpected server behavior that doesn't match protocol specification.
+ */
+export class TechnocoreProtocolError extends TechnocoreError {
+    endpoint;
+    detail;
+    constructor(message, endpoint, detail) {
+        super(message);
+        this.name = 'TechnocoreProtocolError';
+        this.endpoint = endpoint;
+        this.detail = detail;
+    }
+}
+/**
+ * Request timed out (via AbortSignal or configured timeout).
+ */
+export class TechnocoreTimeoutError extends TechnocoreError {
+    timeoutMs;
+    endpoint;
+    constructor(timeoutMs, endpoint) {
+        super(`Request timed out after ${timeoutMs}ms${endpoint ? ` to ${endpoint}` : ''}`);
+        this.name = 'TechnocoreTimeoutError';
+        this.timeoutMs = timeoutMs;
+        this.endpoint = endpoint;
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/errors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe,EAAE,OAAsB;QACjD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,mBAAoB,SAAQ,eAAe;IAC7C,MAAM,CAAS;IACf,QAAQ,CAAS;IACjB,IAAI,CAAS;IACb,SAAS,CAAU;IAE5B,YACE,MAAc,EACd,QAAgB,EAChB,IAAY,EACZ,YAAqB,KAAK;QAE1B,KAAK,CAAC,QAAQ,MAAM,SAAS,QAAQ,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,wBAAyB,SAAQ,mBAAmB;IACtD,iBAAiB,CAAS;IAC1B,MAAM,CAAqB;IAEpC,YACE,QAAgB,EAChB,IAAY,EACZ,iBAAyB,EACzB,MAAe;QAEf,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;QACvC,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QAC3C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,yBAA0B,SAAQ,eAAe;IACnD,KAAK,CAAS;IACd,KAAK,CAAU;IAExB,YAAY,KAAa,EAAE,OAAe,EAAE,KAAe;QACzD,KAAK,CAAC,wBAAwB,KAAK,MAAM,OAAO,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,sEAAsE;QACtE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,wBAAyB,SAAQ,mBAAmB;IAC/D,YAAY,QAAgB,EAAE,IAAY;QACxC,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,6BAA8B,SAAQ,mBAAmB;IAC3D,IAAI,CAAqB;IAElC,YAAY,QAAgB,EAAE,IAAY,EAAE,IAAa;QACvD,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,wBAAyB,SAAQ,eAAe;IAC3D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,eAAe;IAC5C,GAAG,CAAqB;IAEjC,YAAY,OAAe,EAAE,GAAY;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,uBAAwB,SAAQ,eAAe;IACjD,QAAQ,CAAqB;IAC7B,MAAM,CAAqB;IAEpC,YAAY,OAAe,EAAE,QAAiB,EAAE,MAAe;QAC7D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,sBAAuB,SAAQ,eAAe;IAChD,SAAS,CAAS;IAClB,QAAQ,CAAqB;IAEtC,YAAY,SAAiB,EAAE,QAAiB;QAC9C,KAAK,CACH,2BAA2B,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7E,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF"}

package/dist/identity/index.d.ts

@@ -0,0 +1,100 @@
+/**
+ * Technocore SDK — Identity
+ *
+ * Manages an Ed25519 keypair for signing Technocore messages.
+ *
+ * Security invariants:
+ * - Private key is stored in ES2022 private field (#seed)
+ * - JSON.stringify(identity) never includes private key material
+ * - toString() never includes private key material
+ * - The only way to access the seed is via the explicit exportSeed() method
+ */
+import { NonceManager } from '../crypto/nonce.js';
+import type { SignResult } from '../crypto/sign.js';
+/**
+ * A Technocore identity: an Ed25519 keypair wrapped in protocol-aware methods.
+ *
+ * @example
+ * ```typescript
+ * const identity = await Identity.generate();
+ * console.log(identity.did); // did:key:z6Mk...
+ *
+ * const result = await identity.signMessage('lobby', 'hello world');
+ * // result.sig, result.sweptText, result.nonce
+ * ```
+ */
+export declare class Identity {
+    #private;
+    /** The DID string for this identity (did:key:z6Mk...). */
+    readonly did: string;
+    /** The raw 32-byte Ed25519 public key. */
+    readonly publicKey: Uint8Array;
+    private constructor();
+    /**
+     * Generate a new random identity.
+     *
+     * @param nonceManager - Optional shared NonceManager (useful for testing)
+     * @returns A new Identity with a fresh Ed25519 keypair
+     */
+    static generate(nonceManager?: NonceManager): Promise<Identity>;
+    /**
+     * Create an identity from a 32-byte seed (Ed25519 private key).
+     *
+     * @param seed - 32-byte Ed25519 seed
+     * @param nonceManager - Optional shared NonceManager
+     * @returns Identity
+     */
+    static fromSeed(seed: Uint8Array, nonceManager?: NonceManager): Promise<Identity>;
+    /**
+     * Sign a Technocore room message.
+     * Applies single-line sweep to text and manages nonces automatically.
+     *
+     * @param room - Room name
+     * @param text - Raw message text (sweep will be applied)
+     * @returns SignResult with sweptText, sig, nonce
+     */
+    signMessage(room: string, text: string): Promise<SignResult>;
+    /**
+     * Sign a Technocore room message with an explicit nonce.
+     * Use this only when you need manual nonce control.
+     */
+    signMessageWithNonce(room: string, nonce: string, text: string): Promise<SignResult>;
+    /**
+     * Sign a Technocore note write.
+     *
+     * @param namespace - Note namespace
+     * @param key - Note key
+     * @param value - Note value
+     * @returns Base64url-encoded signature
+     */
+    signNote(namespace: string, key: string, value: string): Promise<{
+        sig: string;
+        nonce: string;
+    }>;
+    /**
+     * Export the 32-byte seed (private key material).
+     * This is the ONLY way to access the private key — it requires an explicit call.
+     *
+     * ⚠️ SECURITY: Handle the returned bytes carefully. Never log them.
+     *
+     * @returns Copy of the 32-byte Ed25519 seed
+     */
+    exportSeed(): Uint8Array;
+    /**
+     * Access the nonce manager for this identity.
+     * Useful for testing or manual nonce tracking.
+     */
+    get nonceManager(): NonceManager;
+    /**
+     * Custom JSON serialization — NEVER includes private key.
+     */
+    toJSON(): {
+        did: string;
+        publicKey: string;
+    };
+    /**
+     * Custom string representation — NEVER includes private key.
+     */
+    toString(): string;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/identity/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD;;;;;;;;;;;GAWG;AACH,qBAAa,QAAQ;;IACnB,0DAA0D;IAC1D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAErB,0CAA0C;IAC1C,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAQ/B,OAAO;IAYP;;;;;OAKG;WACU,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC;IAKrE;;;;;;OAMG;WACU,QAAQ,CACnB,IAAI,EAAE,UAAU,EAChB,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,QAAQ,CAAC;IASpB;;;;;;;OAOG;IACG,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAKlE;;;OAGG;IACG,oBAAoB,CACxB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,UAAU,CAAC;IAItB;;;;;;;OAOG;IACG,QAAQ,CACZ,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAO1C;;;;;;;OAOG;IACH,UAAU,IAAI,UAAU;IAIxB;;;OAGG;IACH,IAAI,YAAY,IAAI,YAAY,CAE/B;IAED;;OAEG;IACH,MAAM,IAAI;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE;IAS5C;;OAEG;IACH,QAAQ,IAAI,MAAM;CAUnB"}

package/dist/identity/index.js

@@ -0,0 +1,143 @@
+/**
+ * Technocore SDK — Identity
+ *
+ * Manages an Ed25519 keypair for signing Technocore messages.
+ *
+ * Security invariants:
+ * - Private key is stored in ES2022 private field (#seed)
+ * - JSON.stringify(identity) never includes private key material
+ * - toString() never includes private key material
+ * - The only way to access the seed is via the explicit exportSeed() method
+ */
+import * as ed from '@noble/ed25519';
+import { didFromPublicKey } from '../crypto/did.js';
+import { signMessage, signNote } from '../crypto/sign.js';
+import { NonceManager } from '../crypto/nonce.js';
+/**
+ * A Technocore identity: an Ed25519 keypair wrapped in protocol-aware methods.
+ *
+ * @example
+ * ```typescript
+ * const identity = await Identity.generate();
+ * console.log(identity.did); // did:key:z6Mk...
+ *
+ * const result = await identity.signMessage('lobby', 'hello world');
+ * // result.sig, result.sweptText, result.nonce
+ * ```
+ */
+export class Identity {
+    /** The DID string for this identity (did:key:z6Mk...). */
+    did;
+    /** The raw 32-byte Ed25519 public key. */
+    publicKey;
+    /** Private key — ES2022 private field, never serialized. */
+    #seed;
+    /** Per-identity nonce manager for concurrent send safety. */
+    #nonceManager;
+    constructor(seed, publicKey, did, nonceManager) {
+        this.#seed = seed;
+        this.publicKey = publicKey;
+        this.did = did;
+        this.#nonceManager = nonceManager ?? new NonceManager();
+    }
+    /**
+     * Generate a new random identity.
+     *
+     * @param nonceManager - Optional shared NonceManager (useful for testing)
+     * @returns A new Identity with a fresh Ed25519 keypair
+     */
+    static async generate(nonceManager) {
+        const seed = ed.utils.randomPrivateKey();
+        return Identity.fromSeed(seed, nonceManager);
+    }
+    /**
+     * Create an identity from a 32-byte seed (Ed25519 private key).
+     *
+     * @param seed - 32-byte Ed25519 seed
+     * @param nonceManager - Optional shared NonceManager
+     * @returns Identity
+     */
+    static async fromSeed(seed, nonceManager) {
+        if (seed.length !== 32) {
+            throw new Error(`Expected 32-byte seed, got ${seed.length} bytes`);
+        }
+        const publicKey = await ed.getPublicKeyAsync(seed);
+        const did = didFromPublicKey(publicKey);
+        return new Identity(seed, publicKey, did, nonceManager);
+    }
+    /**
+     * Sign a Technocore room message.
+     * Applies single-line sweep to text and manages nonces automatically.
+     *
+     * @param room - Room name
+     * @param text - Raw message text (sweep will be applied)
+     * @returns SignResult with sweptText, sig, nonce
+     */
+    async signMessage(room, text) {
+        const nonce = this.#nonceManager.next(this.did, room);
+        return signMessage(this.#seed, room, nonce, text);
+    }
+    /**
+     * Sign a Technocore room message with an explicit nonce.
+     * Use this only when you need manual nonce control.
+     */
+    async signMessageWithNonce(room, nonce, text) {
+        return signMessage(this.#seed, room, nonce, text);
+    }
+    /**
+     * Sign a Technocore note write.
+     *
+     * @param namespace - Note namespace
+     * @param key - Note key
+     * @param value - Note value
+     * @returns Base64url-encoded signature
+     */
+    async signNote(namespace, key, value) {
+        // Notes use the namespace as the "room" for nonce tracking
+        const nonce = this.#nonceManager.next(this.did, `note:${namespace}:${key}`);
+        const sig = await signNote(this.#seed, namespace, key, nonce, value);
+        return { sig, nonce };
+    }
+    /**
+     * Export the 32-byte seed (private key material).
+     * This is the ONLY way to access the private key — it requires an explicit call.
+     *
+     * ⚠️ SECURITY: Handle the returned bytes carefully. Never log them.
+     *
+     * @returns Copy of the 32-byte Ed25519 seed
+     */
+    exportSeed() {
+        return this.#seed.slice();
+    }
+    /**
+     * Access the nonce manager for this identity.
+     * Useful for testing or manual nonce tracking.
+     */
+    get nonceManager() {
+        return this.#nonceManager;
+    }
+    /**
+     * Custom JSON serialization — NEVER includes private key.
+     */
+    toJSON() {
+        return {
+            did: this.did,
+            publicKey: Array.from(this.publicKey)
+                .map((b) => b.toString(16).padStart(2, '0'))
+                .join(''),
+        };
+    }
+    /**
+     * Custom string representation — NEVER includes private key.
+     */
+    toString() {
+        return `Identity(${this.did})`;
+    }
+    /**
+     * Prevent accidental inspection of private key via console.log.
+     */
+    [Symbol.for('nodejs.util.inspect.custom')]() {
+        return this.toString();
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/identity/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAIlD;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,QAAQ;IACnB,0DAA0D;IACjD,GAAG,CAAS;IAErB,0CAA0C;IACjC,SAAS,CAAa;IAE/B,4DAA4D;IACnD,KAAK,CAAa;IAE3B,6DAA6D;IACpD,aAAa,CAAe;IAErC,YACE,IAAgB,EAChB,SAAqB,EACrB,GAAW,EACX,YAA2B;QAE3B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,aAAa,GAAG,YAAY,IAAI,IAAI,YAAY,EAAE,CAAC;IAC1D,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,YAA2B;QAC/C,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;QACzC,OAAO,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,CAAC,QAAQ,CACnB,IAAgB,EAChB,YAA2B;QAE3B,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,MAAM,QAAQ,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACxC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;IAC1D,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,WAAW,CAAC,IAAY,EAAE,IAAY;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtD,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACpD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,oBAAoB,CACxB,IAAY,EACZ,KAAa,EACb,IAAY;QAEZ,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACpD,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,QAAQ,CACZ,SAAiB,EACjB,GAAW,EACX,KAAa;QAEb,2DAA2D;QAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,SAAS,IAAI,GAAG,EAAE,CAAC,CAAC;QAC5E,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACrE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IACxB,CAAC;IAED;;;;;;;OAOG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED;;;OAGG;IACH,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,OAAO;YACL,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;iBAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;iBAC3C,IAAI,CAAC,EAAE,CAAC;SACZ,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,YAAY,IAAI,CAAC,GAAG,GAAG,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Technocore SDK — Public API
+ *
+ * Technocore SDK is an open-source community implementation maintained by Exo-Tech.
+ * This is an unofficial implementation and does not imply endorsement by FLOP Labs
+ * or the Technocore maintainers.
+ *
+ * @packageDocumentation
+ */
+export { TechnocoreAgent } from './agent/index.js';
+export type { AgentConfig, MessageHandler, GapHandler, ErrorHandler, LifecycleHandler, } from './agent/index.js';
+export { TechnocoreClient } from './client/index.js';
+export { RoomsClient } from './rooms/index.js';
+export { NotesClient } from './notes/index.js';
+export { ContributionsClient } from './contributions/index.js';
+export { streamRoom } from './streaming/index.js';
+export type { StreamOptions, StreamItem } from './streaming/index.js';
+export type { ContributionParams, ContributionRecord } from './contributions/index.js';
+export { verifyMessageParts, batchVerifyMessages, verifyNoteSignature, } from './verification/index.js';
+export type { SetNoteOptions, CasResult, SetSignedNoteOptions, } from './notes/index.js';
+export type { ReadRoomOptions, SendOptions, SendSignedOptions, RoomExportResult, RoomReadResult, } from './rooms/index.js';
+export { Identity } from './identity/index.js';
+export { sweep } from './crypto/sweep.js';
+export { signMessage, signNote, rawSign } from './crypto/sign.js';
+export type { SignResult } from './crypto/sign.js';
+export { verifyMessage, rawVerify } from './crypto/verify.js';
+export { didFromPublicKey, publicKeyFromDid, validateDid, isValidDid, } from './crypto/did.js';
+export { didFingerprint, didNotePath, didLegacyNotePath } from './crypto/fingerprint.js';
+export { canonicalMessagePayload, canonicalNotePayload, } from './crypto/canonicalize.js';
+export { base64urlEncode, base64urlDecode, base58btcEncode, base58btcDecode, utf8Encode, utf8Decode, } from './crypto/encode.js';
+export { NonceManager } from './crypto/nonce.js';
+export { HttpTransport } from './transport/http.js';
+export type { TransportConfig, RequestOptions, TransportResponse } from './transport/http.js';
+export { TechnocoreError, TechnocoreHTTPError, TechnocoreRateLimitError, TechnocoreValidationError, TechnocoreDuplicateError, TechnocoreAuthenticationError, TechnocoreSignatureError, TechnocoreDIDError, TechnocoreProtocolError, TechnocoreTimeoutError, } from './errors/index.js';
+export type { TechnocoreName, DIDString, TechnocoreMessage, RoomReadResponse, RoomInfo, RoomClass, NoteValue, VerificationResult, TechnocoreClientConfig, } from './types/index.js';
+export { NAME_PATTERN, DID_PATTERN, DID_LENGTH, SIG_PATTERN, SIG_LENGTH, SIG_TERMINAL_CHARS, NONCE_PATTERN, MAX_MESSAGE_CHARS, MAX_NOTE_CHARS, MAX_WAIT_SECONDS, MAX_LIMIT, DEFAULT_LIMIT, hasRoomClass, getRoomClasses, } from './types/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,YAAY,EACV,WAAW,EACX,cAAc,EACd,UAAU,EACV,YAAY,EACZ,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACtE,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAGvF,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,cAAc,EACd,SAAS,EACT,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,eAAe,EACf,WAAW,EACX,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,GACf,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAG/C,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClE,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,WAAW,EACX,UAAU,GACX,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACzF,OAAO,EACL,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,eAAe,EACf,eAAe,EACf,eAAe,EACf,eAAe,EACf,UAAU,EACV,UAAU,GACX,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGjD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAG9F,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,wBAAwB,EACxB,yBAAyB,EACzB,wBAAwB,EACxB,6BAA6B,EAC7B,wBAAwB,EACxB,kBAAkB,EAClB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAG3B,YAAY,EACV,cAAc,EACd,SAAS,EACT,iBAAiB,EACjB,gBAAgB,EAChB,QAAQ,EACR,SAAS,EACT,SAAS,EACT,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,YAAY,EACZ,WAAW,EACX,UAAU,EACV,WAAW,EACX,UAAU,EACV,kBAAkB,EAClB,aAAa,EACb,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,SAAS,EACT,aAAa,EACb,YAAY,EACZ,cAAc,GACf,MAAM,kBAAkB,CAAC"}