tenzro-sdk 0.2.0 → 0.4.0

package/README.md

@@ -178,7 +178,7 @@ const result = await app.sponsorInference(user.address, 'gemma3-270m', 'Hello');
 | `auth` | `onboardHuman()`, `onboardDelegatedAgent()`, `onboardAutonomousAgent()`, `revokeJwt()`, `revokeDid()`, `listPendingApprovals()`, `decideApproval()` |
 | `wallet` | `createWallet()`, `getBalance()`, `sendTransaction()` |
 | `identity` | `registerHuman()`, `resolveDid()`, `setUsername()` |
-| `agent` | `register()`, `spawnAgent()`, `createSwarm()`, `delegateTask()` |
+| `agent` | `register(name, creator, capabilities)` (server-provisioned hybrid wallet), `registerWithKeys(name, creator, capabilities, publicKey, pqPublicKey)` (BYOK), `sendMessage(from, to, message)`, `sendMessageSigned({from, to, message, signature, pqSignature, messageType?, replyTo?})`, `spawnAgent()`, `createSwarm()`, `delegateTask()` |
 | `inference` | `listModels()`, `request()`, `estimateCost()`, plus multi-modal helpers for forecast, vision embed/similarity, text embedding, segmentation, detection, audio ASR, video embed (modality-aware routing via `tenzro_forecast`, `tenzro_visionEmbed`, `tenzro_textEmbed`, `tenzro_segment`, `tenzro_detect`, `tenzro_transcribe`, `tenzro_videoEmbed`) |
 | `token` | `createToken()`, `listTokens()`, `crossVmTransfer()` |
 | `nft` | `createCollection()`, `mintNft()`, `transferNft()` |
@@ -220,6 +220,16 @@ const result = await app.sponsorInference(user.address, 'gemma3-270m', 'Hello');
 | `skill` | `listSkills()`, `registerSkill()` |
 | `tool` | `listTools()`, `registerTool()` |
 | `svm-cross-vm` | Tenzro Cross-VM SVM-native program: `TENZRO_CROSS_VM_PROGRAM_ID_BASE58`, `encodeBridgeToEvm()`, `encodeBridgeFromEvm()`, `encodeRegisterTokenPointer()`, `encodeTransferCrossVm()`, `decodeCrossVmInstruction()` |
+| `capital` | Regulated capital-allocation intents: `openCapitalIntent()`, `quoteCapitalIntent()`, `assignCapitalIntent()`, `executeCapitalLeg()`, `verifyCapitalLeg()`, `compensateCapitalLeg()`, `settleCapitalIntent()`, `getCapitalIntent()`, `submitReserveAttestation()`, `getReserve()`, `attestedMint()` |
+| `workflow` | Multi-party saga workflows with AP2 / x402 / MPP / Stripe SPT / Visa TAP / Mastercard Agent Pay mandate binding: `openWorkflow()`, `executeStep()`, `verifyStep()`, `compensateStep()`, `finalizeWorkflow()`, `mirrorToCanton()`, `verifyDidEnvelope()`, `getWorkflow()`, `getWorkflowSaga()`, `getWorkflowLifecycle()`, `getWorkflowReceipt()`, `getWorkflowOperationalMetrics()`, `listWorkflowsByCreator()`, `listWorkflowsByParticipant()`, `listWorkflowsByStatus()`, `listWorkflowReceipts()` |
+| `eip7702` | Pectra Type-4 delegation registry: `install7702Delegation()`, `get7702Delegation()`, `revoke7702Delegation()` |
+| `erc7683` | Cross-chain intents origin opener + destination fill registry: `open7683Order()`, `get7683Order()`, `list7683Orders()`, `recordFill7683()`, `getFill7683()`, `listFills7683()` |
+| `permit2` | Permit2 `SignatureTransfer`: `domainSeparator()`, `digest()`, `verifyAndConsume()`, `nonceUsed()` (optional witness binding for ERC-7683 origin opens) |
+| `secureMint` | Per-token 1:1 reserve-attestation invariant for tokenized RWAs: `setPolicy()`, `getPolicy()`, `clearPolicy()`, `check()`, `apply()`, `recordBurn()` |
+| `hyperlane` | Hyperlane V3 messaging with sovereign Tenzro-validator-set ISM: `listChains()`, `quoteDispatch()`, `dispatch()`, `getMessage()` |
+| `axelar` | Axelar GMP — Cosmos / Move / Stellar / XRPL reach: `listChains()`, `callContract()`, `payGas()`, `getMessage()` |
+| `babylon` | Babylon Bitcoin staking finality-providers + EOTS delegations: `registerFinalityProvider()`, `submitFinalitySignature()`, `totalStakeForProvider()`, `listDelegations()` |
+| `caip` | Tenzro CAIP namespace identifiers per `ChainAgnostic/namespaces#184`: `caip2()`, `caip10()`, `caip19()` |
 
 ## Auth (OAuth 2.1 + DPoP Onboarding)
 

package/dist/adaptive-burn.js

@@ -22,7 +22,7 @@ class AdaptiveBurnClient {
      * @returns Active burn-rate configuration
      */
     async getBurnRateConfig() {
-        return this.rpc.call("tenzro_getBurnRateConfig", []);
+        return this.rpc.call("tenzro_getBurnRateConfig", [{}]);
     }
     /**
      * Returns the latest rolling supply metrics snapshot — circulating
@@ -30,7 +30,7 @@ class AdaptiveBurnClient {
      * @returns Latest `SupplyMetricsSnapshot`
      */
     async getSupplyMetrics() {
-        return this.rpc.call("tenzro_getSupplyMetrics", []);
+        return this.rpc.call("tenzro_getSupplyMetrics", [{}]);
     }
     /**
      * Computes the recommended adaptive-burn action from the current
@@ -39,14 +39,14 @@ class AdaptiveBurnClient {
      * @returns `BurnRateRecommendation`
      */
     async getBurnRateRecommendation() {
-        return this.rpc.call("tenzro_getBurnRateRecommendation", []);
+        return this.rpc.call("tenzro_getBurnRateRecommendation", [{}]);
     }
     /**
      * List in-flight adaptive-burn governance proposals.
      * @returns Array of proposal records
      */
     async listAdaptiveBurnProposals() {
-        return this.rpc.call("tenzro_listAdaptiveBurnProposals", []);
+        return this.rpc.call("tenzro_listAdaptiveBurnProposals", [{}]);
     }
 }
 exports.AdaptiveBurnClient = AdaptiveBurnClient;

package/dist/adaptive-burn.js.map

@@ -1 +1 @@
-{"version":3,"file":"adaptive-burn.js","sourceRoot":"","sources":["../src/adaptive-burn.ts"],"names":[],"mappings":";;;AAEA;;;;;;;;;;GAUG;AACH,MAAa,kBAAkB;IACT;IAApB,YAAoB,GAAc;QAAd,QAAG,GAAH,GAAG,CAAW;IAAG,CAAC;IAEtC;;;OAGG;IACH,KAAK,CAAC,iBAAiB;QACrB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,gBAAgB;QACpB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC;IACtD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,yBAAyB;QAC7B,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,yBAAyB;QAC7B,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAQ,kCAAkC,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;CACF;AArCD,gDAqCC"}
+{"version":3,"file":"adaptive-burn.js","sourceRoot":"","sources":["../src/adaptive-burn.ts"],"names":[],"mappings":";;;AAEA;;;;;;;;;;GAUG;AACH,MAAa,kBAAkB;IACT;IAApB,YAAoB,GAAc;QAAd,QAAG,GAAH,GAAG,CAAW;IAAG,CAAC;IAEtC;;;OAGG;IACH,KAAK,CAAC,iBAAiB;QACrB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACzD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,gBAAgB;QACpB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACxD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,yBAAyB;QAC7B,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACjE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,yBAAyB;QAC7B,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAQ,kCAAkC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACxE,CAAC;CACF;AArCD,gDAqCC"}

package/dist/agent.d.ts

@@ -8,20 +8,68 @@ export declare class AgentClient {
     private rpc;
     constructor(rpc: RpcClient);
     /**
-     * Register a new AI agent on the network.
-     * @param agentId - Unique identifier for the agent
-     * @param name - Human-readable name
-     * @param capabilities - List of agent capabilities
-     * @returns Registration response with agent ID and status
+     * Register a new AI agent on the network. The node provisions a server-
+     * side hybrid (FROST Ed25519 + ML-DSA-65) wallet and binds it to a
+     * fresh `did:tenzro:machine:` identity. Returns the agent's `agent_id`,
+     * `wallet_address`, `tenzro_did`, the agent's `classical_public_key`
+     * (32-byte Ed25519 hex) and the `pq_verifying_key_len`.
+     *
+     * For self-custodial registration (no server-held keys), see
+     * {@link registerWithKeys}.
+     *
+     * @param name - Human-readable agent name
+     * @param creator - Hex-encoded address that will own this agent
+     * @param capabilities - Capability short names: `nlp`, `vision`, `code`,
+     *   `data`, `blockchain`, `smart_contract`, `api_integration`,
+     *   `coordination`. Anything else becomes a `Custom` capability.
      */
-    register(agentId: string, name: string, capabilities: string[]): Promise<RegisterAgentResponse>;
+    register(name: string, creator: string, capabilities: string[]): Promise<RegisterAgentResponse>;
     /**
-     * Send a message to another agent.
-     * @param agentId - Target agent identifier
-     * @param message - Message content
-     * @returns Message response with payload and message ID
+     * BYOK registration: register an agent self-custodially with a
+     * caller-supplied hybrid keypair. Both `publicKey` (32 bytes, Ed25519)
+     * and `pqPublicKey` (1952 bytes, ML-DSA-65) must be supplied as hex
+     * (with or without `0x` prefix). The node performs no wallet
+     * provisioning; the caller retains full control of the signing keys
+     * and is responsible for producing all `sendAgentMessage` signatures
+     * off-node. The returned envelope sets `byok: true` and omits the
+     * `classical_public_key` / `pq_verifying_key_len` fields (the caller
+     * already has them).
+     */
+    registerWithKeys(name: string, creator: string, capabilities: string[], publicKey: string, pqPublicKey: string): Promise<RegisterAgentResponse>;
+    /**
+     * Send an unsigned `AgentMessage` from one registered agent to another.
+     * Only valid when the local node's `MessageRouter` has
+     * `enable_signing == false` (test/dev configs). On the production
+     * router this call is rejected with a signature-required error — use
+     * {@link sendMessageSigned} instead.
+     */
+    sendMessage(from: string, to: string, message: string): Promise<AgentMessageResponse>;
+    /**
+     * Send a hybrid-signed `AgentMessage`. Both signature legs are required
+     * when the router enforces signing (production default); half-signed
+     * messages are rejected to prevent downgrade attacks.
+     *
+     * The signing preimage is `SHA-256(AgentMessage::signing_data())`,
+     * which depends on `from`, `to`, the resolved sender/recipient wallet
+     * addresses, the message body, the message type, and the optional
+     * `replyTo`. Callers must construct the same preimage off-node and
+     * produce both an Ed25519 (64-byte) and an ML-DSA-65 (3309-byte)
+     * signature. Both signatures are passed as hex (with or without `0x`
+     * prefix).
+     *
+     * `replyTo` (if used) MUST be set on the message before signing,
+     * because it is part of `signing_data` — the SDK forwards it verbatim
+     * so the server reconstructs the same preimage the caller signed.
      */
-    sendMessage(agentId: string, message: string): Promise<AgentMessageResponse>;
+    sendMessageSigned(params: {
+        from: string;
+        to: string;
+        message: string;
+        signature: string;
+        pqSignature: string;
+        messageType?: "task_request" | "task_response" | "query" | "query_response" | "notification" | "coordination" | "error";
+        replyTo?: string;
+    }): Promise<AgentMessageResponse>;
     /**
      * Delegate a task to an agent using the A2A protocol.
      * @param agentId - Target agent identifier
@@ -180,5 +228,65 @@ export declare class AgentClient {
      * @returns Current gas policy
      */
     getGasPolicy(agentId: string): Promise<GasPolicy>;
+    /**
+     * Operational suspend (Active → Suspended). The reversible counterpart of
+     * `resumeAgent`. Distinct from the kill-switch `pauseAgent` /
+     * `quarantineAgent` axes (those require signed transactions).
+     * @param agentId - The agent identifier
+     * @param reason - Free-form audit reason
+     */
+    suspendAgent(agentId: string, reason: string): Promise<unknown>;
+    /**
+     * Recover a Suspended agent back to Active. Used to recover from auto-
+     * suspend (heartbeat monitor) or a manual `suspendAgent`.
+     * @param agentId - The agent identifier
+     */
+    resumeAgent(agentId: string): Promise<unknown>;
+    /**
+     * Send a liveness heartbeat for an agent. The heartbeat monitor uses
+     * `last_heartbeat` to decide whether to auto-suspend on the next sweep.
+     * @param agentId - The agent identifier
+     */
+    agentHeartbeat(agentId: string): Promise<unknown>;
+    /**
+     * Fetch every capability attestation registered on this node for
+     * `capability`. `capability` accepts the same short-form tags as
+     * `register` (`nlp`, `vision`, `code`, `data`, `blockchain`,
+     * `smart_contract`, `api_integration`, `coordination`) — anything else
+     * is treated as a `Custom` capability with that name.
+     *
+     * When `verifiedOnly` is `true` the node re-runs query-time signature
+     * + expiry checks before returning (defence in depth on top of
+     * submit-time verification per #52). Default is `false`.
+     *
+     * Returns `{capability, verified_only, attestations: [...], total}`.
+     *
+     * @param capability - Capability short-form or custom name
+     * @param verifiedOnly - Force query-time re-verification before returning
+     */
+    getCapabilityAttestations(capability: string, verifiedOnly?: boolean): Promise<unknown>;
+    /**
+     * Fetch every capability attestation issued for a specific agent. The
+     * reply includes the agent's registered capability list, the full
+     * attestation envelopes, and the agent's registered wallet address
+     * (used by the self-attestation guard).
+     *
+     * Returns `{agent_id, capabilities, attestations: [...],
+     * total_attestations, registered_address}`.
+     *
+     * @param agentId - The agent ID to look up
+     */
+    getAgentCapabilityAttestations(agentId: string): Promise<unknown>;
+    /**
+     * Pick the "best" agent on this node for `capability`. Selection prefers
+     * the most recent TEE-backed attestation, falling back to any agent that
+     * has registered the capability. `capability` is parsed with the same
+     * short-form/`Custom` rules as `getCapabilityAttestations`.
+     *
+     * Returns `{capability, best_agent: string | null, total_candidates}`.
+     *
+     * @param capability - Capability short-form or custom name
+     */
+    findBestAgentForCapability(capability: string): Promise<unknown>;
 }
 //# sourceMappingURL=agent.d.ts.map

package/dist/agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAClC,OAAO,EACL,aAAa,EACb,aAAa,EACb,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,0BAA0B,EAC1B,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,WAAW,EACX,sBAAsB,EACtB,yBAAyB,EACzB,SAAS,EACV,MAAM,SAAS,CAAC;AAWjB;;;GAGG;AACH,qBAAa,WAAW;IACV,OAAO,CAAC,GAAG;gBAAH,GAAG,EAAE,SAAS;IAElC;;;;;;OAMG;IACG,QAAQ,CACZ,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EAAE,GACrB,OAAO,CAAC,qBAAqB,CAAC;IAUjC;;;;;OAKG;IACG,WAAW,CACf,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,oBAAoB,CAAC;IAShC;;;;;OAKG;IACG,YAAY,CAChB,OAAO,EAAE,MAAM,EACf,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,oBAAoB,CAAC;IAehC;;;OAGG;IACG,UAAU,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;IAI5C;;;;;;OAMG;IACG,UAAU,CACd,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EAAE,GACrB,OAAO,CAAC,kBAAkB,CAAC;IAM9B;;;;;;;;OAQG;IACG,YAAY,CAChB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,oBAAoB,CAAC;IAMhC;;;;;;OAMG;IACG,WAAW,CACf,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,EACxD,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GACjF,OAAO,CAAC,mBAAmB,CAAC;IAM/B;;;;OAIG;IACG,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAM3D;;;;OAIG;IACG,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAQtE;;;;;;;;;;;;;OAaG;IACG,kBAAkB,CACtB,UAAU,EAAE,MAAM,EAClB,WAAW,CAAC,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAChC,gBAAgB,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,0BAA0B,CAAC;IAWtC;;;;;;OAMG;IACG,gBAAgB,CACpB,OAAO,EAAE,MAAM,EACf,aAAa,CAAC,EAAE,MAAM,EACtB,MAAM,CAAC,EAAE,OAAO,GACf,OAAO,CAAC,sBAAsB,CAAC;IAMlC;;;;OAIG;IACG,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAMvE;;;;;OAKG;IACG,mBAAmB,CACvB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,aAAa,CAAC;IAQzB;;;;OAIG;IACG,cAAc,CAAC,OAAO,CAAC,EAAE;QAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,GAAG,CAAC;IAUhB;;;;OAIG;IACG,cAAc,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAIvD;;;;;;;OAOG;IACG,mBAAmB,CACvB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,YAAY,CAAC,EAAE,MAAM,EAAE,GACtB,OAAO,CAAC,GAAG,CAAC;IAWf;;;;;;OAMG;IACG,SAAS,CACb,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,GAAG,CAAC;IAUf;;;;;;;;OAQG;IACG,SAAS,CACb,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,GAAG,CAAC;IAYf;;;;;;;OAOG;IACG,oBAAoB,CACxB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,GAAG,CAAC;IAWf;;;;;OAKG;IACG,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAM1E;;;;OAIG;IACG,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;CAKxD"}
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAClC,OAAO,EACL,aAAa,EACb,aAAa,EACb,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,0BAA0B,EAC1B,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,WAAW,EACX,sBAAsB,EACtB,yBAAyB,EACzB,SAAS,EACV,MAAM,SAAS,CAAC;AAWjB;;;GAGG;AACH,qBAAa,WAAW;IACV,OAAO,CAAC,GAAG;gBAAH,GAAG,EAAE,SAAS;IAElC;;;;;;;;;;;;;;;OAeG;IACG,QAAQ,CACZ,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EAAE,GACrB,OAAO,CAAC,qBAAqB,CAAC;IAUjC;;;;;;;;;;OAUG;IACG,gBAAgB,CACpB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EAAE,EACtB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,qBAAqB,CAAC;IAYjC;;;;;;OAMG;IACG,WAAW,CACf,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,oBAAoB,CAAC;IAUhC;;;;;;;;;;;;;;;;OAgBG;IACG,iBAAiB,CAAC,MAAM,EAAE;QAC9B,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,CAAC,EAAE,cAAc,GAAG,eAAe,GAAG,OAAO,GAAG,gBAAgB,GAAG,cAAc,GAAG,cAAc,GAAG,OAAO,CAAC;QACxH,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAcjC;;;;;OAKG;IACG,YAAY,CAChB,OAAO,EAAE,MAAM,EACf,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,oBAAoB,CAAC;IAehC;;;OAGG;IACG,UAAU,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;IAI5C;;;;;;OAMG;IACG,UAAU,CACd,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EAAE,GACrB,OAAO,CAAC,kBAAkB,CAAC;IAM9B;;;;;;;;OAQG;IACG,YAAY,CAChB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,oBAAoB,CAAC;IAMhC;;;;;;OAMG;IACG,WAAW,CACf,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,EACxD,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GACjF,OAAO,CAAC,mBAAmB,CAAC;IAM/B;;;;OAIG;IACG,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAM3D;;;;OAIG;IACG,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAQtE;;;;;;;;;;;;;OAaG;IACG,kBAAkB,CACtB,UAAU,EAAE,MAAM,EAClB,WAAW,CAAC,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAChC,gBAAgB,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,0BAA0B,CAAC;IAWtC;;;;;;OAMG;IACG,gBAAgB,CACpB,OAAO,EAAE,MAAM,EACf,aAAa,CAAC,EAAE,MAAM,EACtB,MAAM,CAAC,EAAE,OAAO,GACf,OAAO,CAAC,sBAAsB,CAAC;IAMlC;;;;OAIG;IACG,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAMvE;;;;;OAKG;IACG,mBAAmB,CACvB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,aAAa,CAAC;IAQzB;;;;OAIG;IACG,cAAc,CAAC,OAAO,CAAC,EAAE;QAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,GAAG,CAAC;IAUhB;;;;OAIG;IACG,cAAc,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAIvD;;;;;;;OAOG;IACG,mBAAmB,CACvB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,YAAY,CAAC,EAAE,MAAM,EAAE,GACtB,OAAO,CAAC,GAAG,CAAC;IAWf;;;;;;OAMG;IACG,SAAS,CACb,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,GAAG,CAAC;IAUf;;;;;;;;OAQG;IACG,SAAS,CACb,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,GAAG,CAAC;IAYf;;;;;;;OAOG;IACG,oBAAoB,CACxB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,GAAG,CAAC;IAWf;;;;;OAKG;IACG,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAM1E;;;;OAIG;IACG,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAMvD;;;;;;OAMG;IACG,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAOrE;;;;OAIG;IACG,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAMpD;;;;OAIG;IACG,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAMvD;;;;;;;;;;;;;;;OAeG;IACG,yBAAyB,CAC7B,UAAU,EAAE,MAAM,EAClB,YAAY,GAAE,OAAe,GAC5B,OAAO,CAAC,OAAO,CAAC;IAOnB;;;;;;;;;;OAUG;IACG,8BAA8B,CAClC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,OAAO,CAAC;IAMnB;;;;;;;;;OASG;IACG,0BAA0B,CAC9B,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,OAAO,CAAC;CAKpB"}

package/dist/agent.js

@@ -19,35 +19,98 @@ class AgentClient {
         this.rpc = rpc;
     }
     /**
-     * Register a new AI agent on the network.
-     * @param agentId - Unique identifier for the agent
-     * @param name - Human-readable name
-     * @param capabilities - List of agent capabilities
-     * @returns Registration response with agent ID and status
+     * Register a new AI agent on the network. The node provisions a server-
+     * side hybrid (FROST Ed25519 + ML-DSA-65) wallet and binds it to a
+     * fresh `did:tenzro:machine:` identity. Returns the agent's `agent_id`,
+     * `wallet_address`, `tenzro_did`, the agent's `classical_public_key`
+     * (32-byte Ed25519 hex) and the `pq_verifying_key_len`.
+     *
+     * For self-custodial registration (no server-held keys), see
+     * {@link registerWithKeys}.
+     *
+     * @param name - Human-readable agent name
+     * @param creator - Hex-encoded address that will own this agent
+     * @param capabilities - Capability short names: `nlp`, `vision`, `code`,
+     *   `data`, `blockchain`, `smart_contract`, `api_integration`,
+     *   `coordination`. Anything else becomes a `Custom` capability.
      */
-    async register(agentId, name, capabilities) {
+    async register(name, creator, capabilities) {
         return this.rpc.call("tenzro_registerAgent", [
             {
-                agent_id: agentId,
                 name,
+                creator,
                 capabilities,
             },
         ]);
     }
     /**
-     * Send a message to another agent.
-     * @param agentId - Target agent identifier
-     * @param message - Message content
-     * @returns Message response with payload and message ID
+     * BYOK registration: register an agent self-custodially with a
+     * caller-supplied hybrid keypair. Both `publicKey` (32 bytes, Ed25519)
+     * and `pqPublicKey` (1952 bytes, ML-DSA-65) must be supplied as hex
+     * (with or without `0x` prefix). The node performs no wallet
+     * provisioning; the caller retains full control of the signing keys
+     * and is responsible for producing all `sendAgentMessage` signatures
+     * off-node. The returned envelope sets `byok: true` and omits the
+     * `classical_public_key` / `pq_verifying_key_len` fields (the caller
+     * already has them).
      */
-    async sendMessage(agentId, message) {
+    async registerWithKeys(name, creator, capabilities, publicKey, pqPublicKey) {
+        return this.rpc.call("tenzro_registerAgent", [
+            {
+                name,
+                creator,
+                capabilities,
+                public_key: publicKey,
+                pq_public_key: pqPublicKey,
+            },
+        ]);
+    }
+    /**
+     * Send an unsigned `AgentMessage` from one registered agent to another.
+     * Only valid when the local node's `MessageRouter` has
+     * `enable_signing == false` (test/dev configs). On the production
+     * router this call is rejected with a signature-required error — use
+     * {@link sendMessageSigned} instead.
+     */
+    async sendMessage(from, to, message) {
         return this.rpc.call("tenzro_sendAgentMessage", [
             {
-                agent_id: agentId,
+                from,
+                to,
                 message,
             },
         ]);
     }
+    /**
+     * Send a hybrid-signed `AgentMessage`. Both signature legs are required
+     * when the router enforces signing (production default); half-signed
+     * messages are rejected to prevent downgrade attacks.
+     *
+     * The signing preimage is `SHA-256(AgentMessage::signing_data())`,
+     * which depends on `from`, `to`, the resolved sender/recipient wallet
+     * addresses, the message body, the message type, and the optional
+     * `replyTo`. Callers must construct the same preimage off-node and
+     * produce both an Ed25519 (64-byte) and an ML-DSA-65 (3309-byte)
+     * signature. Both signatures are passed as hex (with or without `0x`
+     * prefix).
+     *
+     * `replyTo` (if used) MUST be set on the message before signing,
+     * because it is part of `signing_data` — the SDK forwards it verbatim
+     * so the server reconstructs the same preimage the caller signed.
+     */
+    async sendMessageSigned(params) {
+        return this.rpc.call("tenzro_sendAgentMessage", [
+            {
+                from: params.from,
+                to: params.to,
+                message: params.message,
+                signature: params.signature,
+                pq_signature: params.pqSignature,
+                message_type: params.messageType,
+                reply_to: params.replyTo,
+            },
+        ]);
+    }
     /**
      * Delegate a task to an agent using the A2A protocol.
      * @param agentId - Target agent identifier
@@ -307,6 +370,92 @@ class AgentClient {
             { agent_id: agentId },
         ]);
     }
+    /**
+     * Operational suspend (Active → Suspended). The reversible counterpart of
+     * `resumeAgent`. Distinct from the kill-switch `pauseAgent` /
+     * `quarantineAgent` axes (those require signed transactions).
+     * @param agentId - The agent identifier
+     * @param reason - Free-form audit reason
+     */
+    async suspendAgent(agentId, reason) {
+        return this.rpc.call("tenzro_suspendAgent", {
+            agent_id: agentId,
+            reason,
+        });
+    }
+    /**
+     * Recover a Suspended agent back to Active. Used to recover from auto-
+     * suspend (heartbeat monitor) or a manual `suspendAgent`.
+     * @param agentId - The agent identifier
+     */
+    async resumeAgent(agentId) {
+        return this.rpc.call("tenzro_resumeAgent", {
+            agent_id: agentId,
+        });
+    }
+    /**
+     * Send a liveness heartbeat for an agent. The heartbeat monitor uses
+     * `last_heartbeat` to decide whether to auto-suspend on the next sweep.
+     * @param agentId - The agent identifier
+     */
+    async agentHeartbeat(agentId) {
+        return this.rpc.call("tenzro_agentHeartbeat", {
+            agent_id: agentId,
+        });
+    }
+    /**
+     * Fetch every capability attestation registered on this node for
+     * `capability`. `capability` accepts the same short-form tags as
+     * `register` (`nlp`, `vision`, `code`, `data`, `blockchain`,
+     * `smart_contract`, `api_integration`, `coordination`) — anything else
+     * is treated as a `Custom` capability with that name.
+     *
+     * When `verifiedOnly` is `true` the node re-runs query-time signature
+     * + expiry checks before returning (defence in depth on top of
+     * submit-time verification per #52). Default is `false`.
+     *
+     * Returns `{capability, verified_only, attestations: [...], total}`.
+     *
+     * @param capability - Capability short-form or custom name
+     * @param verifiedOnly - Force query-time re-verification before returning
+     */
+    async getCapabilityAttestations(capability, verifiedOnly = false) {
+        return this.rpc.call("tenzro_getCapabilityAttestations", {
+            capability,
+            verified_only: verifiedOnly,
+        });
+    }
+    /**
+     * Fetch every capability attestation issued for a specific agent. The
+     * reply includes the agent's registered capability list, the full
+     * attestation envelopes, and the agent's registered wallet address
+     * (used by the self-attestation guard).
+     *
+     * Returns `{agent_id, capabilities, attestations: [...],
+     * total_attestations, registered_address}`.
+     *
+     * @param agentId - The agent ID to look up
+     */
+    async getAgentCapabilityAttestations(agentId) {
+        return this.rpc.call("tenzro_getAgentCapabilityAttestations", {
+            agent_id: agentId,
+        });
+    }
+    /**
+     * Pick the "best" agent on this node for `capability`. Selection prefers
+     * the most recent TEE-backed attestation, falling back to any agent that
+     * has registered the capability. `capability` is parsed with the same
+     * short-form/`Custom` rules as `getCapabilityAttestations`.
+     *
+     * Returns `{capability, best_agent: string | null, total_candidates}`.
+     *
+     * @param capability - Capability short-form or custom name
+     */
+    async findBestAgentForCapability(capability) {
+        return this.rpc.call("tenzro_findBestAgentForCapability", {
+            capability,
+        });
+    }
 }
 exports.AgentClient = AgentClient;
 //# sourceMappingURL=agent.js.map

package/dist/agent.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent.js","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":";;;AAkBA,0DAA0D;AAC1D,SAAS,YAAY;IACnB,OAAO,sCAAsC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;QACnE,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;QAC1C,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAa,WAAW;IACF;IAApB,YAAoB,GAAc;QAAd,QAAG,GAAH,GAAG,CAAW;IAAG,CAAC;IAEtC;;;;;;OAMG;IACH,KAAK,CAAC,QAAQ,CACZ,OAAe,EACf,IAAY,EACZ,YAAsB;QAEtB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAwB,sBAAsB,EAAE;YAClE;gBACE,QAAQ,EAAE,OAAO;gBACjB,IAAI;gBACJ,YAAY;aACb;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CACf,OAAe,EACf,OAAe;QAEf,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAuB,yBAAyB,EAAE;YACpE;gBACE,QAAQ,EAAE,OAAO;gBACjB,OAAO;aACR;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAChB,OAAe,EACf,eAAuB;QAEvB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAuB,MAAM,EAAE;YACjD,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE;gBACN,EAAE,EAAE,YAAY,EAAE;gBAClB,OAAO,EAAE;oBACP,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;iBACjD;aACF;YACD,EAAE,EAAE,CAAC;SACN,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAkB,mBAAmB,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,UAAU,CACd,QAAgB,EAChB,IAAY,EACZ,YAAsB;QAEtB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAqB,mBAAmB,EAAE;YAC5D,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE;SAC5C,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,YAAY,CAChB,OAAe,EACf,IAAY,EACZ,YAAqB;QAErB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAuB,qBAAqB,EAAE;YAChE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE;SACzD,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,WAAW,CACf,cAAsB,EACtB,OAAwD,EACxD,OAAkF;QAElF,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAsB,oBAAoB,EAAE;YAC9D,EAAE,eAAe,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE;SACzD,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,OAAe;QAClC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAc,uBAAuB,EAAE;YACzD,EAAE,QAAQ,EAAE,OAAO,EAAE;SACtB,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,OAAe;QAClC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAyB,uBAAuB,EAAE;YACpE,EAAE,QAAQ,EAAE,OAAO,EAAE;SACtB,CAAC,CAAC;IACL,CAAC;IAED,6EAA6E;IAE7E;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,kBAAkB,CACtB,UAAkB,EAClB,WAAoB,EACpB,OAAgC,EAChC,gBAAyB;QAEzB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAA6B,2BAA2B,EAAE;YAC5E;gBACE,WAAW,EAAE,UAAU;gBACvB,YAAY,EAAE,WAAW;gBACzB,OAAO;gBACP,kBAAkB,EAAE,gBAAgB;aACrC;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAe,EACf,aAAsB,EACtB,MAAgB;QAEhB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAyB,yBAAyB,EAAE;YACtE,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE;SACtE,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,qBAAqB,CAAC,UAAkB;QAC5C,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAgB,8BAA8B,EAAE;YAClE,EAAE,WAAW,EAAE,UAAU,EAAE;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,mBAAmB,CACvB,UAAkB,EAClB,MAAiC;QAEjC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAgB,4BAA4B,EAAE;YAChE,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,MAAM,EAAE;SACvC,CAAC,CAAC;IACL,CAAC;IAED,+EAA+E;IAE/E;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,OAIpB;QACC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,uBAAuB,EAAE;YAC5C;gBACE,QAAQ,EAAE,OAAO,EAAE,QAAQ;gBAC3B,YAAY,EAAE,OAAO,EAAE,WAAW;gBAClC,KAAK,EAAE,OAAO,EAAE,KAAK;aACtB;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,UAAmB;QACtC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IAClE,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,mBAAmB,CACvB,QAAgB,EAChB,IAAY,EACZ,OAAe,EACf,YAAuB;QAEvB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE;YACjD;gBACE,SAAS,EAAE,QAAQ;gBACnB,IAAI;gBACJ,QAAQ,EAAE,OAAO;gBACjB,YAAY;aACb;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,SAAS,CACb,OAAe,EACf,WAAmB,EACnB,UAAkB;QAElB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE;YACvC;gBACE,QAAQ,EAAE,OAAO;gBACjB,YAAY,EAAE,WAAW;gBACzB,WAAW,EAAE,UAAU;aACxB;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,SAAS,CACb,OAAe,EACf,SAAiB,EACjB,OAAe,EACf,MAAc,EACd,KAAc;QAEd,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE;YACvC;gBACE,QAAQ,EAAE,OAAO;gBACjB,UAAU,EAAE,SAAS;gBACrB,QAAQ,EAAE,OAAO;gBACjB,MAAM;gBACN,KAAK;aACN;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,oBAAoB,CACxB,OAAe,EACf,OAAe,EACf,MAAc,EACd,SAAkB;QAElB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE;YAClD;gBACE,QAAQ,EAAE,OAAO;gBACjB,QAAQ,EAAE,OAAO;gBACjB,MAAM;gBACN,UAAU,EAAE,SAAS;aACtB;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAAC,OAAe,EAAE,MAAiB;QACnD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAY,0BAA0B,EAAE;YAC1D,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE;SACjC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAAC,OAAe;QAChC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAY,0BAA0B,EAAE;YAC1D,EAAE,QAAQ,EAAE,OAAO,EAAE;SACtB,CAAC,CAAC;IACL,CAAC;CACF;AApXD,kCAoXC"}
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":";;;AAkBA,0DAA0D;AAC1D,SAAS,YAAY;IACnB,OAAO,sCAAsC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;QACnE,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;QAC1C,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAa,WAAW;IACF;IAApB,YAAoB,GAAc;QAAd,QAAG,GAAH,GAAG,CAAW;IAAG,CAAC;IAEtC;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,QAAQ,CACZ,IAAY,EACZ,OAAe,EACf,YAAsB;QAEtB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAwB,sBAAsB,EAAE;YAClE;gBACE,IAAI;gBACJ,OAAO;gBACP,YAAY;aACb;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,gBAAgB,CACpB,IAAY,EACZ,OAAe,EACf,YAAsB,EACtB,SAAiB,EACjB,WAAmB;QAEnB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAwB,sBAAsB,EAAE;YAClE;gBACE,IAAI;gBACJ,OAAO;gBACP,YAAY;gBACZ,UAAU,EAAE,SAAS;gBACrB,aAAa,EAAE,WAAW;aAC3B;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,WAAW,CACf,IAAY,EACZ,EAAU,EACV,OAAe;QAEf,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAuB,yBAAyB,EAAE;YACpE;gBACE,IAAI;gBACJ,EAAE;gBACF,OAAO;aACR;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,iBAAiB,CAAC,MAQvB;QACC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAuB,yBAAyB,EAAE;YACpE;gBACE,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,YAAY,EAAE,MAAM,CAAC,WAAW;gBAChC,YAAY,EAAE,MAAM,CAAC,WAAW;gBAChC,QAAQ,EAAE,MAAM,CAAC,OAAO;aACzB;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAChB,OAAe,EACf,eAAuB;QAEvB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAuB,MAAM,EAAE;YACjD,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE;gBACN,EAAE,EAAE,YAAY,EAAE;gBAClB,OAAO,EAAE;oBACP,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;iBACjD;aACF;YACD,EAAE,EAAE,CAAC;SACN,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAkB,mBAAmB,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,UAAU,CACd,QAAgB,EAChB,IAAY,EACZ,YAAsB;QAEtB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAqB,mBAAmB,EAAE;YAC5D,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE;SAC5C,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,YAAY,CAChB,OAAe,EACf,IAAY,EACZ,YAAqB;QAErB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAuB,qBAAqB,EAAE;YAChE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE;SACzD,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,WAAW,CACf,cAAsB,EACtB,OAAwD,EACxD,OAAkF;QAElF,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAsB,oBAAoB,EAAE;YAC9D,EAAE,eAAe,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE;SACzD,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,OAAe;QAClC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAc,uBAAuB,EAAE;YACzD,EAAE,QAAQ,EAAE,OAAO,EAAE;SACtB,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,OAAe;QAClC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAyB,uBAAuB,EAAE;YACpE,EAAE,QAAQ,EAAE,OAAO,EAAE;SACtB,CAAC,CAAC;IACL,CAAC;IAED,6EAA6E;IAE7E;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,kBAAkB,CACtB,UAAkB,EAClB,WAAoB,EACpB,OAAgC,EAChC,gBAAyB;QAEzB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAA6B,2BAA2B,EAAE;YAC5E;gBACE,WAAW,EAAE,UAAU;gBACvB,YAAY,EAAE,WAAW;gBACzB,OAAO;gBACP,kBAAkB,EAAE,gBAAgB;aACrC;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAe,EACf,aAAsB,EACtB,MAAgB;QAEhB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAyB,yBAAyB,EAAE;YACtE,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE;SACtE,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,qBAAqB,CAAC,UAAkB;QAC5C,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAgB,8BAA8B,EAAE;YAClE,EAAE,WAAW,EAAE,UAAU,EAAE;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,mBAAmB,CACvB,UAAkB,EAClB,MAAiC;QAEjC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAgB,4BAA4B,EAAE;YAChE,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,MAAM,EAAE;SACvC,CAAC,CAAC;IACL,CAAC;IAED,+EAA+E;IAE/E;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,OAIpB;QACC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,uBAAuB,EAAE;YAC5C;gBACE,QAAQ,EAAE,OAAO,EAAE,QAAQ;gBAC3B,YAAY,EAAE,OAAO,EAAE,WAAW;gBAClC,KAAK,EAAE,OAAO,EAAE,KAAK;aACtB;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,UAAmB;QACtC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IAClE,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,mBAAmB,CACvB,QAAgB,EAChB,IAAY,EACZ,OAAe,EACf,YAAuB;QAEvB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE;YACjD;gBACE,SAAS,EAAE,QAAQ;gBACnB,IAAI;gBACJ,QAAQ,EAAE,OAAO;gBACjB,YAAY;aACb;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,SAAS,CACb,OAAe,EACf,WAAmB,EACnB,UAAkB;QAElB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE;YACvC;gBACE,QAAQ,EAAE,OAAO;gBACjB,YAAY,EAAE,WAAW;gBACzB,WAAW,EAAE,UAAU;aACxB;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,SAAS,CACb,OAAe,EACf,SAAiB,EACjB,OAAe,EACf,MAAc,EACd,KAAc;QAEd,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE;YACvC;gBACE,QAAQ,EAAE,OAAO;gBACjB,UAAU,EAAE,SAAS;gBACrB,QAAQ,EAAE,OAAO;gBACjB,MAAM;gBACN,KAAK;aACN;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,oBAAoB,CACxB,OAAe,EACf,OAAe,EACf,MAAc,EACd,SAAkB;QAElB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE;YAClD;gBACE,QAAQ,EAAE,OAAO;gBACjB,QAAQ,EAAE,OAAO;gBACjB,MAAM;gBACN,UAAU,EAAE,SAAS;aACtB;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAAC,OAAe,EAAE,MAAiB;QACnD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAY,0BAA0B,EAAE;YAC1D,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE;SACjC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAAC,OAAe;QAChC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAY,0BAA0B,EAAE;YAC1D,EAAE,QAAQ,EAAE,OAAO,EAAE;SACtB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,YAAY,CAAC,OAAe,EAAE,MAAc;QAChD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAU,qBAAqB,EAAE;YACnD,QAAQ,EAAE,OAAO;YACjB,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,OAAe;QAC/B,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAU,oBAAoB,EAAE;YAClD,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,OAAe;QAClC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAU,uBAAuB,EAAE;YACrD,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,yBAAyB,CAC7B,UAAkB,EAClB,eAAwB,KAAK;QAE7B,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAU,kCAAkC,EAAE;YAChE,UAAU;YACV,aAAa,EAAE,YAAY;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,8BAA8B,CAClC,OAAe;QAEf,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAU,uCAAuC,EAAE;YACrE,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,0BAA0B,CAC9B,UAAkB;QAElB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAU,mCAAmC,EAAE;YACjE,UAAU;SACX,CAAC,CAAC;IACL,CAAC;CACF;AAviBD,kCAuiBC"}

package/dist/api-key.d.ts

@@ -0,0 +1,128 @@
+import type { RpcClient } from "./rpc";
+/**
+ * Key class — controls who can revoke the key.
+ *
+ * - `subject`: default. Subject can self-revoke via `revokeMine`; admin
+ *   can revoke via `revoke`.
+ * - `operator_internal`: operator-only ops key. Admin can revoke; subject
+ *   path does not apply.
+ * - `operator_protected`: operator-only locked-down key. Not revokable
+ *   via RPC by anyone (including admin). Rotate by updating the operator
+ *   secret + restarting the node.
+ */
+export type KeyClass = "subject" | "operator_internal" | "operator_protected";
+/** Parameters for {@link ApiKeyClient.create}. */
+export interface CreateApiKeyParams {
+    /** Free-form label shown in `list`. */
+    label: string;
+    /**
+     * Optional subject identifier — typically a Tenzro DID. Required if
+     * the operator wants the holder to self-revoke later.
+     */
+    subject?: string;
+    /** Scopes to grant. Defaults to `["canton"]` server-side when empty. */
+    scopes?: string[];
+    /** Revocability class. Defaults to `subject` when omitted. */
+    class?: KeyClass;
+}
+/**
+ * Response from {@link ApiKeyClient.create}. The `key` field is the
+ * plaintext `tnz_...` token and is shown exactly once — persist it
+ * immediately.
+ */
+export interface CreatedApiKey {
+    key: string;
+    key_id: string;
+    label: string;
+    subject?: string | null;
+    scopes: string[];
+    class?: string | null;
+    created_at: number;
+    note?: string | null;
+}
+/** One row of the keyring as returned by `list` / `listMine`. */
+export interface ApiKeyRecord {
+    key_id: string;
+    subject?: string | null;
+    label: string;
+    scopes: string[];
+    class?: string | null;
+    created_at: number;
+    revoked_at?: number | null;
+    active: boolean;
+}
+/** Response from {@link ApiKeyClient.list}. */
+export interface ApiKeyList {
+    keys: ApiKeyRecord[];
+}
+/** Response from {@link ApiKeyClient.listMine}. */
+export interface MyApiKeyList {
+    keys: ApiKeyRecord[];
+    subject: string;
+}
+/** Response from {@link ApiKeyClient.revoke} / {@link ApiKeyClient.revokeMine}. */
+export interface RevokeApiKeyResult {
+    key_id: string;
+    revoked: boolean;
+}
+/**
+ * API-key management client.
+ *
+ * Two control planes:
+ *
+ * 1. **Operator** (`X-Tenzro-Admin-Token`): {@link create} / {@link list}
+ *    / {@link revoke} any key on the operator's own node. Sourced from
+ *    the `TENZRO_ADMIN_TOKEN` env var by the underlying `RpcClient`.
+ * 2. **Subject** (`X-Tenzro-Api-Key`): {@link listMine} / {@link revokeMine}
+ *    keys belonging to the caller's own subject. Sourced from `TENZRO_API_KEY`.
+ *
+ * Every Tenzro node operator holds their own admin token for *their
+ * own* node. There is no global "Tenzro Labs token," and admin
+ * capabilities do not extend to network-wide state (validator set,
+ * treasury, fee schedule, system contracts — those flow through
+ * on-chain governance via `tenzro-token`). See `docs/api-keys.md`.
+ */
+export declare class ApiKeyClient {
+    private readonly rpc;
+    constructor(rpc: RpcClient);
+    /**
+     * Mint a new API key on this node. Requires `TENZRO_ADMIN_TOKEN` in
+     * the environment.
+     *
+     * `class` controls revocability:
+     * - `subject` (default): subject can self-revoke, admin can revoke.
+     * - `operator_internal`: admin-only revoke.
+     * - `operator_protected`: not revokable via RPC — rotate by updating
+     *   the operator secret and restarting the node. The SDK injects the
+     *   `confirm_operator_protected` interlock automatically.
+     */
+    create(params: CreateApiKeyParams): Promise<CreatedApiKey>;
+    /**
+     * List every API key the node has issued — active and revoked.
+     * Admin-token-gated.
+     */
+    list(): Promise<ApiKeyList>;
+    /**
+     * Revoke an API key by its non-secret `key_id`. Admin-token-gated.
+     *
+     * Fails with `-32004` if the target is an `operator_protected` key
+     * (those cannot be revoked via RPC, by anyone, including an admin).
+     * Rotate that class by updating the operator secret + restart.
+     */
+    revoke(keyId: string): Promise<RevokeApiKeyResult>;
+    /**
+     * List every API key belonging to the caller's own subject.
+     * Requires `TENZRO_API_KEY` in the environment.
+     */
+    listMine(): Promise<MyApiKeyList>;
+    /**
+     * Revoke an API key belonging to the caller's own subject.
+     * Requires `TENZRO_API_KEY` in the environment.
+     *
+     * Only `subject`-class keys are eligible. The error for "no such key"
+     * and "not your key" is intentionally the same so ownership cannot be
+     * probed.
+     */
+    revokeMine(keyId: string): Promise<RevokeApiKeyResult>;
+}
+//# sourceMappingURL=api-key.d.ts.map

package/dist/api-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key.d.ts","sourceRoot":"","sources":["../src/api-key.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAEvC;;;;;;;;;;GAUG;AACH,MAAM,MAAM,QAAQ,GAAG,SAAS,GAAG,mBAAmB,GAAG,oBAAoB,CAAC;AAE9E,kDAAkD;AAClD,MAAM,WAAW,kBAAkB;IACjC,uCAAuC;IACvC,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,QAAQ,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,iEAAiE;AACjE,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,+CAA+C;AAC/C,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,YAAY,EAAE,CAAC;CACtB;AAED,mDAAmD;AACnD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,YAAY,EAAE,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,mFAAmF;AACnF,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,YAAY;IACX,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,SAAS;IAI3C;;;;;;;;;;OAUG;IACG,MAAM,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC;IAehE;;;OAGG;IACG,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC;IAIjC;;;;;;OAMG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAQxD;;;OAGG;IACG,QAAQ,IAAI,OAAO,CAAC,YAAY,CAAC;IAIvC;;;;;;;OAOG;IACG,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;CAK7D"}