tenzro-sdk 0.1.0 → 0.2.0

package/dist/cortex.d.ts

@@ -0,0 +1,227 @@
+import { RpcClient } from "./rpc";
+/**
+ * Service tier for a Cortex reasoning request.
+ *
+ * Each tier implies a default loop range, an expected latency profile,
+ * and whether hardware attestation / ZK inference proofs are required.
+ */
+export type ReasoningTier = "fast" | "standard" | "deep" | "institutional";
+/**
+ * Attestation requirement for a Cortex inference request.
+ *
+ * - `none` — no attestation, cheapest.
+ * - `tee` — Intel TDX / AMD SEV-SNP / AWS Nitro / NVIDIA CC quote required.
+ * - `tee_and_zk` — TEE quote AND a Plonky3 STARK inference-verification proof.
+ */
+export type AttestationRequirement = "none" | "tee" | "tee_and_zk";
+/**
+ * Reasoning-specific metadata captured during a Cortex inference.
+ */
+export interface CortexMetadata {
+    input_tokens: number;
+    output_tokens: number;
+    /** Number of recurrent loops actually executed. */
+    loops_used: number;
+    /** Wall-clock latency in milliseconds. */
+    latency_ms: number;
+    model_version?: string | null;
+    /** "stop" | "length" | "converged" | etc. */
+    finish_reason?: string | null;
+    /** Distinct MoE experts activated, if known. */
+    experts_activated?: number | null;
+}
+/**
+ * Signed execution receipt for a Cortex reasoning call.
+ *
+ * Every Cortex response carries a receipt. Deep / Institutional receipts
+ * also anchor on Tenzro Ledger and may carry TEE quotes or Plonky3 STARK
+ * inference-verification proofs.
+ *
+ * Receipts let auditors reconstruct:
+ * 1. Which model weights were used (`weights_hash`, `runtime_hash`).
+ * 2. What input produced what output (`input_commitment`, `output_commitment`).
+ * 3. How much compute was spent (`loops_used`, `tokens_in`, `tokens_out`).
+ * 4. Who executed it (`worker_did`, `signature`).
+ * 5. Optional hardware / ZK evidence.
+ */
+export interface CortexReceipt {
+    model_id: string;
+    /** Hex-encoded SHA-256 hash of the model weights. */
+    weights_hash: string;
+    /** Hex-encoded SHA-256 hash of the serving runtime (container / binary). */
+    runtime_hash: string;
+    /** Number of loops the worker was asked to run at most. */
+    loops_requested: number;
+    /** Number of loops actually run. */
+    loops_used: number;
+    /** Hex-encoded hash of the canonical request payload. */
+    input_commitment: string;
+    /** Hex-encoded hash of the canonical response payload. */
+    output_commitment: string;
+    /** DID of the worker that executed the inference. */
+    worker_did: string;
+    /** Worker wallet address (for settlement). Hex string. */
+    worker_address: string;
+    /** Optional TEE attestation quote bytes (base64-encoded over JSON-RPC). */
+    tee_quote?: number[] | null;
+    /** Optional Plonky3 STARK inference-verification proof bytes. */
+    zk_proof?: number[] | null;
+    /** Input tokens charged. */
+    tokens_in: number;
+    /** Output tokens charged. */
+    tokens_out: number;
+    /** Final settled price in smallest TNZO unit (uint64 — may overflow JS number; treat as bigint where precision matters). */
+    price_tnzo: number;
+    /** Receipt creation timestamp. */
+    timestamp?: unknown;
+    /** Worker signature over the canonical receipt preimage. */
+    signature?: unknown;
+}
+/**
+ * A Cortex reasoning request.
+ *
+ * Only `model_id` and `input` are required. All other fields default to the
+ * `Standard` tier values when omitted.
+ */
+export interface CortexRequest {
+    request_id?: string;
+    model_id: string;
+    /** Plain-text prompt input. */
+    input: string;
+    tier?: ReasoningTier;
+    /** Override `min_loops` (defaults from tier). */
+    min_loops?: number;
+    /** Override `max_loops` (defaults from tier). */
+    max_loops?: number;
+    /** Hard cap on billed cost in smallest TNZO unit. */
+    max_cost_tnzo?: number;
+    /** Wall-clock deadline in milliseconds. */
+    deadline_ms?: number;
+    attestation?: AttestationRequirement;
+    /** Caller address (also the payer). Hex string. */
+    requester?: string;
+    /** Free-form generation parameters forwarded to the sidecar. */
+    params?: Record<string, string>;
+}
+/**
+ * A Cortex reasoning response.
+ */
+export interface CortexResponse {
+    request_id: string;
+    response_id: string;
+    model_id: string;
+    /** Worker address that executed the inference. Hex string. */
+    worker: string;
+    /** Raw response payload. May arrive as a byte-array or string. */
+    output: number[] | string;
+    metadata: CortexMetadata;
+    /** Final price charged in smallest TNZO unit. */
+    price_tnzo: number;
+    /** Receipt binding this response to its inputs, weights, and worker. */
+    receipt: CortexReceipt;
+    /** Whether on-chain settlement of `price_tnzo` succeeded on this node. */
+    settled: boolean;
+    /** Response creation timestamp (server-side). */
+    timestamp?: unknown;
+}
+/**
+ * A locally-registered Cortex worker entry.
+ */
+export interface CortexWorkerEntry {
+    model_id: string;
+    worker_did?: string;
+    family?: unknown;
+    pricing?: unknown;
+}
+/**
+ * Worker list response.
+ */
+export interface CortexWorkerList {
+    workers: unknown[];
+    count: number;
+}
+/**
+ * Loop-aware pricing configuration for a Cortex model.
+ *
+ * Total cost formula (smallest TNZO unit):
+ *
+ *     cost = base_request_fee
+ *          + tokens_in  * price_per_input_token
+ *          + tokens_out * price_per_output_token
+ *          + loops_used * price_per_loop
+ *          + tee_premium  (if attestation includes Tee)
+ *          + zk_premium   (if attestation includes Zk)
+ */
+export interface CortexPricing {
+    base_request_fee: number;
+    price_per_input_token: number;
+    price_per_output_token: number;
+    price_per_loop: number;
+    tee_premium: number;
+    zk_premium: number;
+}
+/** Default Cortex pricing — mirror of the on-node `CortexPricing::default()`. */
+export declare const DEFAULT_CORTEX_PRICING: CortexPricing;
+/**
+ * Compute the total cost for a settled Cortex inference (mirror of the on-node logic).
+ *
+ * Uses native `number` arithmetic — fine for testnet pricing, but if you need
+ * full uint64 precision use bigint by hand.
+ */
+export declare function computeCortexCost(pricing: CortexPricing, tokensIn: number, tokensOut: number, loopsUsed: number, attestation: AttestationRequirement): number;
+/**
+ * Client for Cortex recurrent-depth reasoning operations on Tenzro Network.
+ *
+ * Cortex treats recurrent-loop depth as a first-class billable primitive.
+ * Use this to submit reasoning requests with explicit budget envelopes
+ * (Fast / Standard / Deep / Institutional tiers) and receive signed
+ * receipts binding inputs, outputs, and worker identity.
+ *
+ * @example
+ * ```ts
+ * const cortex = new CortexClient(rpc);
+ * const resp = await cortex.reason("openmythos-3b", "Plan a trade", "deep");
+ * console.log("loops_used:", resp.metadata.loops_used);
+ * console.log("cost:", resp.price_tnzo);
+ * console.log("worker:", resp.receipt.worker_did);
+ * ```
+ */
+export declare class CortexClient {
+    private rpc;
+    constructor(rpc: RpcClient);
+    /**
+     * Submit a Cortex reasoning request via `tenzro_cortexReason` (one-shot helper).
+     *
+     * For full control over budget, attestation, params, etc., use {@link reasonWithRequest}.
+     */
+    reason(modelId: string, input: string, tier?: ReasoningTier): Promise<CortexResponse>;
+    /**
+     * Submit a Cortex reasoning request with full request parameters.
+     */
+    reasonWithRequest(req: CortexRequest): Promise<CortexResponse>;
+    /**
+     * List Cortex workers registered locally on the connected node.
+     */
+    listWorkers(): Promise<CortexWorkerList>;
+    /**
+     * List remote Cortex workers learned via the `tenzro/cortex`
+     * gossip topic (signed advertisements still within their TTL).
+     */
+    listRemoteWorkers(): Promise<CortexWorkerList>;
+    /**
+     * Register a Cortex worker on the connected node. The worker forwards
+     * Cortex requests to a sidecar HTTP backend.
+     *
+     * @param modelId       Model id (must be unique on this node).
+     * @param sidecarUrl    HTTP endpoint of the recurrent-depth model sidecar.
+     * @param familyArch    Architecture identifier ("rdt-moe", "rdt-dense", etc.).
+     * @param maxLoops      Hard ceiling on recurrent loops this model supports.
+     * @param opts          Optional bearer token, pricing, supported tiers.
+     */
+    registerWorker(modelId: string, sidecarUrl: string, familyArch: string, maxLoops: number, opts?: {
+        bearerToken?: string;
+        pricing?: CortexPricing;
+        supportedTiers?: ReasoningTier[];
+    }): Promise<unknown>;
+}
+//# sourceMappingURL=cortex.d.ts.map

package/dist/cortex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cortex.d.ts","sourceRoot":"","sources":["../src/cortex.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAElC;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,MAAM,GAAG,eAAe,CAAC;AAE3E;;;;;;GAMG;AACH,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,KAAK,GAAG,YAAY,CAAC;AAEnE;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,UAAU,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,6CAA6C;IAC7C,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gDAAgD;IAChD,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,YAAY,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,YAAY,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,eAAe,EAAE,MAAM,CAAC;IACxB,oCAAoC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,yDAAyD;IACzD,gBAAgB,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qDAAqD;IACrD,UAAU,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,cAAc,EAAE,MAAM,CAAC;IACvB,2EAA2E;IAC3E,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC5B,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC3B,4BAA4B;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,6BAA6B;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,4HAA4H;IAC5H,UAAU,EAAE,MAAM,CAAC;IACnB,kCAAkC;IAClC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,+BAA+B;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qDAAqD;IACrD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2CAA2C;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC,mDAAmD;IACnD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC1B,QAAQ,EAAE,cAAc,CAAC;IACzB,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,OAAO,EAAE,aAAa,CAAC;IACvB,0EAA0E;IAC1E,OAAO,EAAE,OAAO,CAAC;IACjB,iDAAiD;IACjD,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,EAAE,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,aAAa;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,iFAAiF;AACjF,eAAO,MAAM,sBAAsB,EAAE,aAOpC,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,sBAAsB,GAClC,MAAM,CAYR;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,YAAY;IACX,OAAO,CAAC,GAAG;gBAAH,GAAG,EAAE,SAAS;IAElC;;;;OAIG;IACG,MAAM,CACV,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,IAAI,GAAE,aAA0B,GAC/B,OAAO,CAAC,cAAc,CAAC;IAQ1B;;OAEG;IACG,iBAAiB,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IAmBpE;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAI9C;;;OAGG;IACG,iBAAiB,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAOpD;;;;;;;;;OASG;IACG,cAAc,CAClB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE;QACL,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,aAAa,CAAC;QACxB,cAAc,CAAC,EAAE,aAAa,EAAE,CAAC;KAClC,GACA,OAAO,CAAC,OAAO,CAAC;CAcpB"}

package/dist/cortex.js

@@ -0,0 +1,137 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CortexClient = exports.DEFAULT_CORTEX_PRICING = void 0;
+exports.computeCortexCost = computeCortexCost;
+/** Default Cortex pricing — mirror of the on-node `CortexPricing::default()`. */
+exports.DEFAULT_CORTEX_PRICING = {
+    base_request_fee: 100,
+    price_per_input_token: 10,
+    price_per_output_token: 20,
+    price_per_loop: 1_000,
+    tee_premium: 10_000,
+    zk_premium: 100_000,
+};
+/**
+ * Compute the total cost for a settled Cortex inference (mirror of the on-node logic).
+ *
+ * Uses native `number` arithmetic — fine for testnet pricing, but if you need
+ * full uint64 precision use bigint by hand.
+ */
+function computeCortexCost(pricing, tokensIn, tokensOut, loopsUsed, attestation) {
+    let cost = pricing.base_request_fee;
+    cost += tokensIn * pricing.price_per_input_token;
+    cost += tokensOut * pricing.price_per_output_token;
+    cost += loopsUsed * pricing.price_per_loop;
+    if (attestation === "tee" || attestation === "tee_and_zk") {
+        cost += pricing.tee_premium;
+    }
+    if (attestation === "tee_and_zk") {
+        cost += pricing.zk_premium;
+    }
+    return cost;
+}
+/**
+ * Client for Cortex recurrent-depth reasoning operations on Tenzro Network.
+ *
+ * Cortex treats recurrent-loop depth as a first-class billable primitive.
+ * Use this to submit reasoning requests with explicit budget envelopes
+ * (Fast / Standard / Deep / Institutional tiers) and receive signed
+ * receipts binding inputs, outputs, and worker identity.
+ *
+ * @example
+ * ```ts
+ * const cortex = new CortexClient(rpc);
+ * const resp = await cortex.reason("openmythos-3b", "Plan a trade", "deep");
+ * console.log("loops_used:", resp.metadata.loops_used);
+ * console.log("cost:", resp.price_tnzo);
+ * console.log("worker:", resp.receipt.worker_did);
+ * ```
+ */
+class CortexClient {
+    rpc;
+    constructor(rpc) {
+        this.rpc = rpc;
+    }
+    /**
+     * Submit a Cortex reasoning request via `tenzro_cortexReason` (one-shot helper).
+     *
+     * For full control over budget, attestation, params, etc., use {@link reasonWithRequest}.
+     */
+    async reason(modelId, input, tier = "standard") {
+        return this.rpc.call("tenzro_cortexReason", {
+            model_id: modelId,
+            input,
+            tier,
+        });
+    }
+    /**
+     * Submit a Cortex reasoning request with full request parameters.
+     */
+    async reasonWithRequest(req) {
+        const params = {
+            model_id: req.model_id,
+            input: req.input,
+        };
+        if (req.tier !== undefined)
+            params.tier = req.tier;
+        if (req.min_loops !== undefined)
+            params.min_loops = req.min_loops;
+        if (req.max_loops !== undefined)
+            params.max_loops = req.max_loops;
+        if (req.max_cost_tnzo !== undefined)
+            params.max_cost_tnzo = req.max_cost_tnzo;
+        if (req.deadline_ms !== undefined)
+            params.deadline_ms = req.deadline_ms;
+        if (req.attestation !== undefined)
+            params.attestation = req.attestation;
+        if (req.requester !== undefined)
+            params.requester = req.requester;
+        if (req.params !== undefined && Object.keys(req.params).length > 0) {
+            params.params = req.params;
+        }
+        if (req.request_id !== undefined)
+            params.request_id = req.request_id;
+        return this.rpc.call("tenzro_cortexReason", params);
+    }
+    /**
+     * List Cortex workers registered locally on the connected node.
+     */
+    async listWorkers() {
+        return this.rpc.call("tenzro_listCortexWorkers", []);
+    }
+    /**
+     * List remote Cortex workers learned via the `tenzro/cortex`
+     * gossip topic (signed advertisements still within their TTL).
+     */
+    async listRemoteWorkers() {
+        return this.rpc.call("tenzro_listRemoteCortexWorkers", []);
+    }
+    /**
+     * Register a Cortex worker on the connected node. The worker forwards
+     * Cortex requests to a sidecar HTTP backend.
+     *
+     * @param modelId       Model id (must be unique on this node).
+     * @param sidecarUrl    HTTP endpoint of the recurrent-depth model sidecar.
+     * @param familyArch    Architecture identifier ("rdt-moe", "rdt-dense", etc.).
+     * @param maxLoops      Hard ceiling on recurrent loops this model supports.
+     * @param opts          Optional bearer token, pricing, supported tiers.
+     */
+    async registerWorker(modelId, sidecarUrl, familyArch, maxLoops, opts) {
+        const params = {
+            model_id: modelId,
+            sidecar_url: sidecarUrl,
+            arch: familyArch,
+            max_loops: maxLoops,
+        };
+        if (opts?.bearerToken !== undefined)
+            params.bearer_token = opts.bearerToken;
+        if (opts?.pricing !== undefined)
+            params.pricing = opts.pricing;
+        if (opts?.supportedTiers !== undefined) {
+            params.supported_tiers = opts.supportedTiers;
+        }
+        return this.rpc.call("tenzro_registerCortexWorker", params);
+    }
+}
+exports.CortexClient = CortexClient;
+//# sourceMappingURL=cortex.js.map

package/dist/cortex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cortex.js","sourceRoot":"","sources":["../src/cortex.ts"],"names":[],"mappings":";;;AA4LA,8CAkBC;AAlCD,iFAAiF;AACpE,QAAA,sBAAsB,GAAkB;IACnD,gBAAgB,EAAE,GAAG;IACrB,qBAAqB,EAAE,EAAE;IACzB,sBAAsB,EAAE,EAAE;IAC1B,cAAc,EAAE,KAAK;IACrB,WAAW,EAAE,MAAM;IACnB,UAAU,EAAE,OAAO;CACpB,CAAC;AAEF;;;;;GAKG;AACH,SAAgB,iBAAiB,CAC/B,OAAsB,EACtB,QAAgB,EAChB,SAAiB,EACjB,SAAiB,EACjB,WAAmC;IAEnC,IAAI,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC;IACpC,IAAI,IAAI,QAAQ,GAAG,OAAO,CAAC,qBAAqB,CAAC;IACjD,IAAI,IAAI,SAAS,GAAG,OAAO,CAAC,sBAAsB,CAAC;IACnD,IAAI,IAAI,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC;IAC3C,IAAI,WAAW,KAAK,KAAK,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QAC1D,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC;IAC9B,CAAC;IACD,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QACjC,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAa,YAAY;IACH;IAApB,YAAoB,GAAc;QAAd,QAAG,GAAH,GAAG,CAAW;IAAG,CAAC;IAEtC;;;;OAIG;IACH,KAAK,CAAC,MAAM,CACV,OAAe,EACf,KAAa,EACb,OAAsB,UAAU;QAEhC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAiB,qBAAqB,EAAE;YAC1D,QAAQ,EAAE,OAAO;YACjB,KAAK;YACL,IAAI;SACL,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,GAAkB;QACxC,MAAM,MAAM,GAA4B;YACtC,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,KAAK,EAAE,GAAG,CAAC,KAAK;SACjB,CAAC;QACF,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACnD,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;YAAE,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QAClE,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;YAAE,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QAClE,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS;YAAE,MAAM,CAAC,aAAa,GAAG,GAAG,CAAC,aAAa,CAAC;QAC9E,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS;YAAE,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QACxE,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS;YAAE,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QACxE,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;YAAE,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QAClE,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnE,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC7B,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS;YAAE,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QACrE,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAiB,qBAAqB,EAAE,MAAM,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAmB,0BAA0B,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,iBAAiB;QACrB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAClB,gCAAgC,EAChC,EAAE,CACH,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,cAAc,CAClB,OAAe,EACf,UAAkB,EAClB,UAAkB,EAClB,QAAgB,EAChB,IAIC;QAED,MAAM,MAAM,GAA4B;YACtC,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,UAAU;YACvB,IAAI,EAAE,UAAU;YAChB,SAAS,EAAE,QAAQ;SACpB,CAAC;QACF,IAAI,IAAI,EAAE,WAAW,KAAK,SAAS;YAAE,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC;QAC5E,IAAI,IAAI,EAAE,OAAO,KAAK,SAAS;YAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC/D,IAAI,IAAI,EAAE,cAAc,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,CAAC,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC;QAC/C,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAU,6BAA6B,EAAE,MAAM,CAAC,CAAC;IACvE,CAAC;CACF;AA9FD,oCA8FC"}

package/dist/custody.d.ts

@@ -110,5 +110,256 @@ export declare class CustodyClient {
      * @param operations - Allowed operations (e.g., "transfer", "stake")
      */
     authorizeSession(walletId: string, durationSecs: number, operations: string[]): Promise<SessionKey>;
+    /**
+     * Discover the node's ML-DSA-65 signing mode.
+     *
+     * Always `tee-only` on testnet. The wallet uses this to decide
+     * whether to invoke threshold-coordination methods (skipped in
+     * `tee-only`) or fall through to the single-shot {@link mldsaSign}.
+     *
+     * Required AAP capability: `wallet.mldsa.sign`.
+     */
+    mldsaCapabilities(bearerJwt: string, dpopProof: string): Promise<MlDsaCapabilities>;
+    /**
+     * Sign a preimage with the node-held ML-DSA-65 key bound to
+     * `(did, surfaceKey)`. The returned signature is 3309 bytes per
+     * FIPS 204 §4 Table 2.
+     *
+     * Required AAP capability: `wallet.mldsa.sign`.
+     *
+     * @param bearerJwt - DPoP-bound bearer JWT.
+     * @param dpopProof - Fresh DPoP proof signed over `(POST, "<base>/wallet/mldsa/sign")`.
+     * @param did - Bearer DID owning the surface key.
+     * @param surfaceKey - Wallet-defined surface identifier (e.g. `"vault.0"`).
+     * @param preimage - Raw bytes to be signed (encoded base64url no-pad on the wire).
+     * @param purpose - Optional caller-supplied purpose string for audit logging.
+     */
+    mldsaSign(bearerJwt: string, dpopProof: string, did: string, surfaceKey: string, preimage: Uint8Array, purpose?: string): Promise<MlDsaSignature>;
+    /**
+     * Start a FROST signing session.
+     *
+     * Server allocates a session, runs Round 1, and returns its
+     * commitments together with both participant identifiers. The
+     * wallet then runs its own Round 1 against the same `preimage`
+     * and the returned identifiers, and submits its commitments via
+     * {@link frostCommit}.
+     *
+     * Required AAP capability: `wallet.frost.sign`.
+     */
+    frostStart(bearerJwt: string, dpopProof: string, scheme: FrostScheme, did: string, surfaceKey: string, preimage: Uint8Array): Promise<FrostStartResponse>;
+    /**
+     * Submit the wallet's Round 1 commitments.
+     *
+     * Transitions the session from `pending` to `committed`. After this
+     * call the wallet should call {@link frostAwaitChallenge} to receive
+     * the `SigningPackage` it must feed into the FROST crate's
+     * `round2::sign`.
+     *
+     * Required AAP capability: `wallet.frost.sign`.
+     */
+    frostCommit(bearerJwt: string, dpopProof: string, scheme: FrostScheme, sessionId: string, deviceCommitments: Uint8Array): Promise<FrostStateResponse>;
+    /**
+     * Long-poll for the challenge (`SigningPackage`).
+     *
+     * Returns immediately if the session is already `committed`. Polls
+     * for up to ~5s otherwise. The wallet feeds `signing_package_b64`
+     * into `round2::sign(signing_package, signer_nonces, key_package)`
+     * to produce its signature share.
+     *
+     * Required AAP capability: `wallet.frost.sign`.
+     */
+    frostAwaitChallenge(bearerJwt: string, dpopProof: string, scheme: FrostScheme, sessionId: string): Promise<FrostChallengeResponse>;
+    /**
+     * Submit the wallet's Round 2 signature share.
+     *
+     * Server runs its own Round 2, aggregates the two shares, and
+     * transitions the session to `finalized`. The aggregated signature
+     * is then retrievable via {@link frostFinalize}.
+     *
+     * Required AAP capability: `wallet.frost.sign`.
+     */
+    frostRespond(bearerJwt: string, dpopProof: string, scheme: FrostScheme, sessionId: string, deviceSignatureShare: Uint8Array): Promise<FrostStateResponse>;
+    /**
+     * Long-poll for the aggregated signature.
+     *
+     * Returns immediately if the session is already `finalized`. Polls
+     * for up to ~5s otherwise. `signature_b64` is the canonical Schnorr
+     * signature: 64 bytes for Ed25519, 65 for secp256k1 (Taproot).
+     *
+     * Required AAP capability: `wallet.frost.sign`.
+     */
+    frostFinalize(bearerJwt: string, dpopProof: string, scheme: FrostScheme, sessionId: string): Promise<FrostFinalizeResponse>;
+    /**
+     * Abort an in-flight FROST session.
+     *
+     * Idempotent: an already-aborted session returns `aborted`. A
+     * session that has already finalized stays `finalized` (the abort
+     * is a no-op rather than an error).
+     *
+     * Required AAP capability: `wallet.frost.sign`.
+     */
+    frostAbort(bearerJwt: string, dpopProof: string, scheme: FrostScheme, sessionId: string): Promise<FrostStateResponse>;
+    /**
+     * Fetch the wrapped FROST share for `(credentialId, surfaceKey)`.
+     *
+     * Idempotent — repeated calls return identical bytes for the same
+     * pair. The returned blob is useless on its own; the wallet must
+     * also obtain the per-assertion pepper via {@link shareEscrowUnwrap}
+     * and combine the two through its local KDF to recover the cleartext
+     * share.
+     *
+     * Required AAP capability: `wallet.share.unwrap`.
+     */
+    shareEnvelope(bearerJwt: string, dpopProof: string, credentialId: string, surfaceKey: string): Promise<ShareEnvelopeResponse>;
+    /**
+     * Mint a single-use, 30-second-TTL nonce for an upcoming WebAuthn
+     * ceremony.
+     *
+     * The wallet must use the returned `nonce_b64` value verbatim as
+     * the WebAuthn `challenge` field when prompting the user's passkey.
+     * Server-side the nonce is held in an in-memory escrow; it is
+     * consumed by {@link shareEscrowUnwrap} regardless of whether the
+     * assertion verifies.
+     *
+     * Required AAP capability: `wallet.share.unwrap`.
+     */
+    shareEscrowChallenge(bearerJwt: string, dpopProof: string, credentialId: string, surfaceKey: string): Promise<ShareEscrowChallengeResponse>;
+    /**
+     * Verify a WebAuthn assertion, consume the escrow nonce, and return
+     * `(wrapped_share, pepper)`.
+     *
+     * Single-use: the nonce is removed from the escrow before the
+     * assertion is verified, so a successful unwrap cannot be replayed
+     * and a failed verification still consumes the nonce. The wallet
+     * must request a fresh challenge before retrying.
+     *
+     * Required AAP capability: `wallet.share.unwrap`.
+     */
+    shareEscrowUnwrap(bearerJwt: string, dpopProof: string, credentialId: string, surfaceKey: string, nonceB64: string, assertion: PasskeyAssertion): Promise<ShareEscrowUnwrapResponse>;
+}
+/** Discovery response from `GET /wallet/mldsa/capabilities`. */
+export interface MlDsaCapabilities {
+    /** Mode of the ML-DSA-65 signing surface. `"tee-only"` on testnet. */
+    mode: string;
+}
+/** Sign-response from `POST /wallet/mldsa/sign`. */
+export interface MlDsaSignature {
+    /** 3309-byte ML-DSA-65 signature, base64url no-pad. */
+    signature_b64: string;
+}
+/**
+ * FROST signing scheme — selects the curve via the `:scheme` path
+ * segment of the `/wallet/frost/:scheme/*` endpoints.
+ */
+export type FrostScheme = 'ed25519' | 'secp256k1';
+/** Session-state discriminator returned by every FROST endpoint. */
+export type FrostSessionState = 'pending' | 'committed' | 'finalized' | 'aborted';
+/** Response from `POST /wallet/frost/:scheme/start`. */
+export interface FrostStartResponse {
+    /** Opaque session identifier — pass back into every subsequent call. */
+    session_id: string;
+    /** Unix-millis at which the session is evicted regardless of state. */
+    expires_at_ms: number;
+    /** Stable participant identifier the node uses for itself. */
+    node_identifier_b64: string;
+    /**
+     * Stable participant identifier the wallet must use for itself
+     * (must match what the node will look up in the `KeyPackage`).
+     */
+    device_identifier_b64: string;
+    /**
+     * Node's Round 1 `SigningCommitments`, serialized via the FROST
+     * crate's canonical `.serialize()`.
+     */
+    node_commitments_b64: string;
+}
+/**
+ * Response from FROST endpoints that only carry a state transition
+ * (`commit`, `respond`, `abort`).
+ */
+export interface FrostStateResponse {
+    state: FrostSessionState;
+}
+/** Response from `POST /wallet/frost/:scheme/await-challenge`. */
+export interface FrostChallengeResponse {
+    state: FrostSessionState;
+    /**
+     * Present only when `state === 'committed'`. Serialized
+     * `SigningPackage` — feed straight into the FROST crate's
+     * `round2::sign(signing_package, signer_nonces, key_package)`.
+     */
+    signing_package_b64?: string;
+}
+/** Response from `POST /wallet/frost/:scheme/finalize`. */
+export interface FrostFinalizeResponse {
+    state: FrostSessionState;
+    /**
+     * Present only when `state === 'finalized'`. The aggregated Schnorr
+     * signature: 64 bytes for Ed25519, 65 bytes for secp256k1.
+     */
+    signature_b64?: string;
+}
+/**
+ * WebAuthn assertion submitted to `/wallet/share/escrow/unwrap`.
+ *
+ * All three fields are base64url no-pad. The wallet kernel performs
+ * the WebAuthn ceremony (`navigator.credentials.get()`) and forwards
+ * the resulting bytes verbatim — the SDK is transport-only and does
+ * not parse or validate the assertion.
+ */
+export interface PasskeyAssertion {
+    /** `AuthenticatorAssertionResponse.authenticatorData`. */
+    authenticator_data_b64: string;
+    /**
+     * `AuthenticatorAssertionResponse.clientDataJSON`. The embedded
+     * `challenge` field must equal the `nonce_b64` returned by
+     * {@link CustodyClient.shareEscrowChallenge}.
+     */
+    client_data_json_b64: string;
+    /**
+     * `AuthenticatorAssertionResponse.signature` — Ed25519 (COSE alg
+     * `-8`) signature over `authenticatorData || SHA-256(clientDataJSON)`
+     * per WebAuthn L3 §7.2.
+     */
+    signature_b64: string;
+}
+/** Response from `GET /wallet/share/envelope`. */
+export interface ShareEnvelopeResponse {
+    /**
+     * Wrapped FROST share — AES-256-GCM ciphertext of the cleartext
+     * share, AAD-bound to `(credential_id, surface_key)`. Base64url
+     * no-pad.
+     */
+    wrapped_share_b64: string;
+    /** Wrap algorithm identifier — `"aes-256-gcm"` on testnet. */
+    alg: string;
+    /** Salt used by the wallet's local unwrap KDF, base64url no-pad. */
+    salt_b64: string;
+}
+/** Response from `POST /wallet/share/escrow/challenge`. */
+export interface ShareEscrowChallengeResponse {
+    /**
+     * 32-byte random nonce, base64url no-pad. Must be passed verbatim
+     * as the WebAuthn `challenge` field.
+     */
+    nonce_b64: string;
+    /** Unix-millis at which the escrow entry is swept (30s TTL). */
+    expires_at_ms: number;
+}
+/** Response from `POST /wallet/share/escrow/unwrap`. */
+export interface ShareEscrowUnwrapResponse {
+    /**
+     * Same wrapped FROST share returned by
+     * {@link CustodyClient.shareEnvelope}. Returned again here so a
+     * wallet can perform challenge → unwrap in a single round-trip
+     * without holding the envelope client-side.
+     */
+    wrapped_share_b64: string;
+    /**
+     * Per-assertion entropy mixed into the wallet's local unwrap KDF.
+     * Without this value the wrapped share is gibberish even to a
+     * caller holding a valid AAP token. Base64url no-pad.
+     */
+    pepper_b64: string;
 }
 //# sourceMappingURL=custody.d.ts.map

package/dist/custody.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"custody.d.ts","sourceRoot":"","sources":["../src/custody.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAIvC,wCAAwC;AACxC,MAAM,WAAW,SAAS;IACxB,wBAAwB;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,2BAA2B;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,kCAAkC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,2CAA2C;IAC3C,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,iCAAiC;AACjC,MAAM,WAAW,iBAAiB;IAChC,4CAA4C;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,gDAAgD;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,kCAAkC;IAClC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,0DAA0D;AAC1D,MAAM,WAAW,QAAQ;IACvB,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,kCAAkC;IAClC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,0CAA0C;AAC1C,MAAM,WAAW,cAAc;IAC7B,qCAAqC;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,+BAA+B;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,yBAAyB;IACzB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,8BAA8B;AAC9B,MAAM,WAAW,cAAc;IAC7B,8EAA8E;IAC9E,WAAW,EAAE,MAAM,CAAC;IACpB,qEAAqE;IACrE,YAAY,EAAE,MAAM,CAAC;IACrB,+DAA+D;IAC/D,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,sDAAsD;AACtD,MAAM,WAAW,UAAU;IACzB,6BAA6B;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,yBAAyB;IACzB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAID;;;;;GAKG;AACH,qBAAa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,SAAS;IAE3C;;;;;OAKG;IACG,eAAe,CACnB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,SAAS,GAAG,WAAW,GAC/B,OAAO,CAAC,SAAS,CAAC;IAMrB;;;;OAIG;IACG,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAMpF;;;;OAIG;IACG,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAI5E;;;OAGG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAIzD;;;OAGG;IACG,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAI3D;;;;;OAKG;IACG,iBAAiB,CACrB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,cAAc,CAAC;IAU1B;;;OAGG;IACG,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAMlE;;;;;OAKG;IACG,gBAAgB,CACpB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAAE,GACnB,OAAO,CAAC,UAAU,CAAC;CAKvB"}
+{"version":3,"file":"custody.d.ts","sourceRoot":"","sources":["../src/custody.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAIvC,wCAAwC;AACxC,MAAM,WAAW,SAAS;IACxB,wBAAwB;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,2BAA2B;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,kCAAkC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,2CAA2C;IAC3C,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,iCAAiC;AACjC,MAAM,WAAW,iBAAiB;IAChC,4CAA4C;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,gDAAgD;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,kCAAkC;IAClC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,0DAA0D;AAC1D,MAAM,WAAW,QAAQ;IACvB,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,kCAAkC;IAClC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,0CAA0C;AAC1C,MAAM,WAAW,cAAc;IAC7B,qCAAqC;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,+BAA+B;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,yBAAyB;IACzB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,8BAA8B;AAC9B,MAAM,WAAW,cAAc;IAC7B,8EAA8E;IAC9E,WAAW,EAAE,MAAM,CAAC;IACpB,qEAAqE;IACrE,YAAY,EAAE,MAAM,CAAC;IACrB,+DAA+D;IAC/D,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,sDAAsD;AACtD,MAAM,WAAW,UAAU;IACzB,6BAA6B;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,yBAAyB;IACzB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAID;;;;;GAKG;AACH,qBAAa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,SAAS;IAE3C;;;;;OAKG;IACG,eAAe,CACnB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,SAAS,GAAG,WAAW,GAC/B,OAAO,CAAC,SAAS,CAAC;IAMrB;;;;OAIG;IACG,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAMpF;;;;OAIG;IACG,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAI5E;;;OAGG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAIzD;;;OAGG;IACG,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAI3D;;;;;OAKG;IACG,iBAAiB,CACrB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,cAAc,CAAC;IAU1B;;;OAGG;IACG,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAMlE;;;;;OAKG;IACG,gBAAgB,CACpB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAAE,GACnB,OAAO,CAAC,UAAU,CAAC;IAatB;;;;;;;;OAQG;IACG,iBAAiB,CACrB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,iBAAiB,CAAC;IAQ7B;;;;;;;;;;;;;OAaG;IACG,SAAS,CACb,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,UAAU,EACpB,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,cAAc,CAAC;IAyB1B;;;;;;;;;;OAUG;IACG,UAAU,CACd,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,EACnB,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,UAAU,GACnB,OAAO,CAAC,kBAAkB,CAAC;IAa9B;;;;;;;;;OASG;IACG,WAAW,CACf,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,EACnB,SAAS,EAAE,MAAM,EACjB,iBAAiB,EAAE,UAAU,GAC5B,OAAO,CAAC,kBAAkB,CAAC;IAY9B;;;;;;;;;OASG;IACG,mBAAmB,CACvB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,sBAAsB,CAAC;IASlC;;;;;;;;OAQG;IACG,YAAY,CAChB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,EACnB,SAAS,EAAE,MAAM,EACjB,oBAAoB,EAAE,UAAU,GAC/B,OAAO,CAAC,kBAAkB,CAAC;IAY9B;;;;;;;;OAQG;IACG,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,qBAAqB,CAAC;IASjC;;;;;;;;OAQG;IACG,UAAU,CACd,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,kBAAkB,CAAC;IAqB9B;;;;;;;;;;OAUG;IACG,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,qBAAqB,CAAC;IAKjC;;;;;;;;;;;OAWG;IACG,oBAAoB,CACxB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,4BAA4B,CAAC;IASxC;;;;;;;;;;OAUG;IACG,iBAAiB,CACrB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,gBAAgB,GAC1B,OAAO,CAAC,yBAAyB,CAAC;CAatC;AAID,gEAAgE;AAChE,MAAM,WAAW,iBAAiB;IAChC,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAC;CACd;AAED,oDAAoD;AACpD,MAAM,WAAW,cAAc;IAC7B,uDAAuD;IACvD,aAAa,EAAE,MAAM,CAAC;CACvB;AAID;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,WAAW,CAAC;AAElD,oEAAoE;AACpE,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,GAAG,SAAS,CAAC;AAElF,wDAAwD;AACxD,MAAM,WAAW,kBAAkB;IACjC,wEAAwE;IACxE,UAAU,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,aAAa,EAAE,MAAM,CAAC;IACtB,8DAA8D;IAC9D,mBAAmB,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,qBAAqB,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,iBAAiB,CAAC;CAC1B;AAED,kEAAkE;AAClE,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,iBAAiB,CAAC;IACzB;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,2DAA2D;AAC3D,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,iBAAiB,CAAC;IACzB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAID;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,0DAA0D;IAC1D,sBAAsB,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,oBAAoB,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,kDAAkD;AAClD,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAC1B,8DAA8D;IAC9D,GAAG,EAAE,MAAM,CAAC;IACZ,oEAAoE;IACpE,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,2DAA2D;AAC3D,MAAM,WAAW,4BAA4B;IAC3C;;;OAGG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,wDAAwD;AACxD,MAAM,WAAW,yBAAyB;IACxC;;;;;OAKG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB"}