@agenticprimitives/delegation 1.0.0-alpha.4 → 1.0.0-alpha.40

package/README.md

@@ -1,12 +1,21 @@
 # @agenticprimitives/delegation
 
-EIP-712 smart-account delegations spanning web app → agent → MCP. **Now also owns session lifecycle** — `SessionManager` binds a delegation to its session-signing key, persisted via `@agenticprimitives/key-custody` envelope encryption.
+> Part of **[Agentic Primitives](https://agenticprimitives.dev)** — the open-source trust substrate for agentic applications: identity that can sign, authority checked at act time, evidence the owner carries. [Developer kit](https://github.com/agentictrustlabs/agentic-primitives) · [All packages](https://agenticprimitives.dev/developers)
+
+**One delegation model, everywhere — permissions, never keys.**
+
+When an agent acts for a human, most stacks hand it a key and hope. This package hands it a delegation instead: an EIP-712 signed grant from a Smart Agent, constrained by caveats that on-chain enforcers actually check — time windows, value caps, allowed targets and methods, quorums — and revocable on-chain at any moment. The same primitive spans the whole stack: a web app session, an agent-to-agent call, and an MCP tool invocation all verify against the same `Delegation` struct. "This session may call these two tools until tomorrow, and I can kill it instantly" is one signed object, not three products.
+
+The package also owns session lifecycle: `SessionManager` binds a delegation to its session-signing key, with the private key envelope-encrypted via `@agenticprimitives/key-custody` before it ever touches storage. Verification is fail-closed by design — an unknown enforcer is a rejection, not a warning — and minted tokens carry JTI replay protection. Because the principal is the Smart Agent address, not a credential, every delegation survives the issuer's credential rotation; and because custody is firewalled from delegation, no delegate can ever escalate into account control ([ADR-0011](../../docs/architecture/decisions/0011-credential-recovery-and-re-association.md)).
+
+> Part of [agenticprimitives](../../README.md) — the trust substrate for the agent economy: one canonical Smart Agent identity with custody, delegation, naming, credentials, and audit evidence designed as one system.
 
 See [`spec.md`](./spec.md) → [`specs/202-delegation.md`](../../specs/202-delegation.md) for the full contract: 8 on-chain enforcers, 3 off-chain sentinels, token envelope, cross-delegation, two session variants.
 
 ## Quick start
 
 Browser (issuance):
+
 ```ts
 import { DelegationClient, buildMcpToolScopeCaveat, encodeTimestampTerms, buildCaveat } from '@agenticprimitives/delegation';
 
@@ -21,6 +30,7 @@ const delegation = await client.issueDelegation({
 ```
 
 Node (session lifecycle):
+
 ```ts
 import { SessionManager } from '@agenticprimitives/delegation';
 
@@ -31,6 +41,7 @@ await sessions.package(sessionId, signedDelegation);
 ```
 
 Node (token mint + verify):
+
 ```ts
 import { mintDelegationToken, verifyDelegationToken } from '@agenticprimitives/delegation';
 
@@ -41,6 +52,12 @@ if ('error' in result) throw new Error(result.error);
 const { principal, grants } = result;
 ```
 
+`principal` is the verified delegator's Smart Agent address — every downstream action is attributable to a canonical on-chain identity, not an API key.
+
+## How it's different
+
+The closest neighbors are MetaMask's Delegation Toolkit and the session-key features in smart-account SDKs — both real, both well-built, and the caveat-enforcer shape here deliberately mirrors the ERC-7710 direction so the models stay interoperable. The differences are scope and posture. Session keys typically live and die inside one wallet stack and one transport; this delegation crosses transports — the token a browser session mints is the token an MCP server or A2A endpoint verifies, against the same on-chain enforcer registry. And the evaluator's posture is fail-closed as a hard invariant: unknown enforcer means reject, with no permissive default to quietly widen authority. Custody operations are structurally excluded — a delegation here cannot rotate credentials or change account control, ever, because that path doesn't exist in this package.
+
 ## Status
 
-Pre-alpha. Spec stable.
+**Alpha track — testnet-only.** Spec + API stable; do not deploy to production until the gates listed in the root [`README.md` Status section](../../README.md#status) are cleared — including third-party contract audit and governance key rotation. Track every security finding live in [`docs/audits/findings.yaml`](../../docs/audits/findings.yaml).

package/dist/authority-chain.d.ts

@@ -0,0 +1,59 @@
+import type { Address, Hex } from 'viem';
+import { type Delegation } from './types.js';
+import { type MethodAuthorizationChecks } from './method-authorization.js';
+import type { EnforcerAddresses } from './mandate.js';
+export interface AuthorityChainLinkV1 {
+    /** The link's delegation digest (`hashDelegation`) — the receipt's reference for it. */
+    ref: Hex;
+    delegator: Address;
+    delegate: Address;
+    /** The link above it, or null at the root. */
+    parentRef: Hex | null;
+}
+/** The chain as evidence (spec 326 §3.4, kept to what the substrate can prove). Leaf first. */
+export interface AuthorityChainV1 {
+    profile: 'ap-eip712-v1';
+    links: AuthorityChainLinkV1[];
+    /** The ROOT delegator — whose authority every link below attenuates (ADR-0052 accountability root). */
+    accountabilityRoot: Address;
+    /** The LEAF delegate — the party acting in this hop. */
+    actingAgent: Address;
+    depth: number;
+    /** keccak over the link refs, leaf → root: one digest a reader can cite for the whole chain. */
+    chainDigest: Hex;
+}
+export type AuthorityChainFailure = {
+    ok: false;
+    code: 'chain-parent-missing' | 'chain-broken' | 'chain-cycle' | 'chain-too-deep' | 'chain-link-dead';
+    reason: string;
+};
+export type AssembleAuthorityChainResult = {
+    ok: true;
+    chain: AuthorityChainV1;
+    delegations: Delegation[];
+} | AuthorityChainFailure;
+export declare const AUTHORITY_CHAIN_MAX_DEPTH = 4;
+/** Assemble the chain from the leaf up through what was presented. Structural only — no chain reads. */
+export declare function assembleAuthorityChain(input: {
+    leaf: Delegation;
+    /** Every wire the caller presented (the leaf may be among them). */
+    presented: readonly Delegation[];
+    /** How a link is referenced — `hashDelegation(d, chainId, manager)`; the verifier bundle's own digest
+     *  function, so assembly and verification never disagree on what a link is called. */
+    digestOf: (d: Delegation) => Hex;
+    maxDepth?: number;
+}): AssembleAuthorityChainResult;
+/** Assemble AND verify every PARENT link as live — signed by its delegator, unrevoked, in window. The leaf
+ *  is the mandate `verifyMandateForStep` judges in full; this proves the authority it claims to descend from. */
+export declare function verifyAuthorityChain(input: {
+    leaf: Delegation;
+    presented: readonly Delegation[];
+    enforcers: EnforcerAddresses;
+    checks: MethodAuthorizationChecks;
+    now: number;
+    maxDepth?: number;
+}): Promise<{
+    ok: true;
+    chain: AuthorityChainV1;
+} | AuthorityChainFailure>;
+//# sourceMappingURL=authority-chain.d.ts.map

package/dist/authority-chain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority-chain.d.ts","sourceRoot":"","sources":["../src/authority-chain.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAEzC,OAAO,EAAkB,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAwB,KAAK,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACjG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEtD,MAAM,WAAW,oBAAoB;IACnC,wFAAwF;IACxF,GAAG,EAAE,GAAG,CAAC;IACT,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,8CAA8C;IAC9C,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC;CACvB;AAED,+FAA+F;AAC/F,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,cAAc,CAAC;IACxB,KAAK,EAAE,oBAAoB,EAAE,CAAC;IAC9B,uGAAuG;IACvG,kBAAkB,EAAE,OAAO,CAAC;IAC5B,wDAAwD;IACxD,WAAW,EAAE,OAAO,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,gGAAgG;IAChG,WAAW,EAAE,GAAG,CAAC;CAClB;AAED,MAAM,MAAM,qBAAqB,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,sBAAsB,GAAG,cAAc,GAAG,aAAa,GAAG,gBAAgB,GAAG,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AACxK,MAAM,MAAM,4BAA4B,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAC;IAAC,WAAW,EAAE,UAAU,EAAE,CAAA;CAAE,GAAG,qBAAqB,CAAC;AAGpI,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAE3C,wGAAwG;AACxG,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,IAAI,EAAE,UAAU,CAAC;IACjB,oEAAoE;IACpE,SAAS,EAAE,SAAS,UAAU,EAAE,CAAC;IACjC;0FACsF;IACtF,QAAQ,EAAE,CAAC,CAAC,EAAE,UAAU,KAAK,GAAG,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,4BAA4B,CAwC/B;AAED;iHACiH;AACjH,wBAAsB,oBAAoB,CAAC,KAAK,EAAE;IAChD,IAAI,EAAE,UAAU,CAAC;IACjB,SAAS,EAAE,SAAS,UAAU,EAAE,CAAC;IACjC,SAAS,EAAE,iBAAiB,CAAC;IAC7B,MAAM,EAAE,yBAAyB,CAAC;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAA;CAAE,GAAG,qBAAqB,CAAC,CAczE"}

package/dist/authority-chain.js

@@ -0,0 +1,70 @@
+import { keccak256, toBytes } from 'viem';
+import { ROOT_AUTHORITY } from './types.js';
+import { verifyLiveDelegation } from './method-authorization.js';
+const lc = (s) => s.toLowerCase();
+export const AUTHORITY_CHAIN_MAX_DEPTH = 4;
+/** Assemble the chain from the leaf up through what was presented. Structural only — no chain reads. */
+export function assembleAuthorityChain(input) {
+    const maxDepth = input.maxDepth ?? AUTHORITY_CHAIN_MAX_DEPTH;
+    const digestOf = input.digestOf;
+    const byRef = new Map();
+    for (const d of input.presented)
+        byRef.set(lc(digestOf(d)), d);
+    const links = [];
+    const delegations = [];
+    const seen = new Set();
+    let cur = input.leaf;
+    for (;;) {
+        const ref = digestOf(cur);
+        if (seen.has(lc(ref)))
+            return { ok: false, code: 'chain-cycle', reason: `the chain cycles at ${ref.slice(0, 12)}…` };
+        seen.add(lc(ref));
+        if (links.length >= maxDepth)
+            return { ok: false, code: 'chain-too-deep', reason: `the chain is deeper than ${maxDepth} links` };
+        const isRoot = lc(String(cur.authority)) === lc(ROOT_AUTHORITY);
+        links.push({ ref, delegator: cur.delegator, delegate: cur.delegate, parentRef: isRoot ? null : cur.authority });
+        delegations.push(cur);
+        if (isRoot)
+            break;
+        const parent = byRef.get(lc(String(cur.authority)));
+        if (!parent) {
+            return { ok: false, code: 'chain-parent-missing', reason: `${ref.slice(0, 12)}… is a child whose parent ${String(cur.authority).slice(0, 12)}… was not presented — a child alone is not authority; the chain is verified whole or not at all` };
+        }
+        // CONTINUITY: a child is minted by the party the parent was granted TO. Anything else is two grants
+        // that happen to reference each other, not a chain of attenuation.
+        if (lc(parent.delegate) !== lc(cur.delegator)) {
+            return { ok: false, code: 'chain-broken', reason: `${ref.slice(0, 12)}… was minted by ${cur.delegator}, but its parent was granted to ${parent.delegate}` };
+        }
+        cur = parent;
+    }
+    const chainDigest = keccak256(toBytes(links.map((l) => lc(l.ref)).join(':')));
+    return {
+        ok: true,
+        chain: {
+            profile: 'ap-eip712-v1', links,
+            accountabilityRoot: lc(links[links.length - 1].delegator),
+            actingAgent: lc(links[0].delegate),
+            depth: links.length, chainDigest,
+        },
+        delegations,
+    };
+}
+/** Assemble AND verify every PARENT link as live — signed by its delegator, unrevoked, in window. The leaf
+ *  is the mandate `verifyMandateForStep` judges in full; this proves the authority it claims to descend from. */
+export async function verifyAuthorityChain(input) {
+    const assembled = assembleAuthorityChain({ leaf: input.leaf, presented: input.presented, digestOf: input.checks.delegationDigest, maxDepth: input.maxDepth });
+    if (!assembled.ok)
+        return assembled;
+    for (let i = 1; i < assembled.delegations.length; i++) {
+        const link = assembled.delegations[i];
+        const child = assembled.delegations[i - 1];
+        const live = await verifyLiveDelegation({
+            delegation: link, expectedDelegate: child.delegator, enforcers: input.enforcers, checks: input.checks, now: input.now,
+        });
+        if (!live.ok) {
+            return { ok: false, code: 'chain-link-dead', reason: `link ${i + 1} of ${assembled.delegations.length} (${assembled.chain.links[i].ref.slice(0, 12)}…) is not live: ${live.reason}` };
+        }
+    }
+    return { ok: true, chain: assembled.chain };
+}
+//# sourceMappingURL=authority-chain.js.map

package/dist/authority-chain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority-chain.js","sourceRoot":"","sources":["../src/authority-chain.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAmB,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAkC,MAAM,2BAA2B,CAAC;AA4BjG,MAAM,EAAE,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AAC1C,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAE3C,wGAAwG;AACxG,MAAM,UAAU,sBAAsB,CAAC,KAQtC;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,yBAAyB,CAAC;IAC7D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS;QAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,MAAM,WAAW,GAAiB,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC;IACrB,SAAS,CAAC;QACR,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,uBAAuB,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC;QACrH,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAClB,IAAI,KAAK,CAAC,MAAM,IAAI,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,4BAA4B,QAAQ,QAAQ,EAAE,CAAC;QACjI,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC,cAAc,CAAC,CAAC;QAChE,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,GAAG,CAAC,SAAiB,EAAE,CAAC,CAAC;QACzH,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,MAAM;YAAE,MAAM;QAClB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,6BAA6B,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,iGAAiG,EAAE,CAAC;QAClP,CAAC;QACD,oGAAoG;QACpG,mEAAmE;QACnE,IAAI,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,GAAG,CAAC,SAAS,mCAAmC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC9J,CAAC;QACD,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9E,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,OAAO,EAAE,cAAc,EAAE,KAAK;YAC9B,kBAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,SAAS,CAAY;YACrE,WAAW,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAY;YAC9C,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW;SACjC;QACD,WAAW;KACZ,CAAC;AACJ,CAAC;AAED;iHACiH;AACjH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAO1C;IACC,MAAM,SAAS,GAAG,sBAAsB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9J,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC;QACvC,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC;YACtC,UAAU,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG;SACtH,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,SAAS,CAAC,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACzL,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC;AAC9C,CAAC"}

package/dist/caveats.d.ts

@@ -1,15 +1,98 @@
 import { type Hex, type Address } from 'viem';
-import type { Caveat, DataScopeGrant } from './types';
+import type { Caveat, DataScopeGrant, VaultKeyUseGrant, VaultRecordScopeGrant } from './types.js';
 export declare const MCP_TOOL_SCOPE_ENFORCER: Address;
 export declare const DATA_SCOPE_ENFORCER: Address;
 export declare const DELEGATE_BINDING_ENFORCER: Address;
+/** Spec 278 — vault-key-use authorization sentinel. Off-chain only; the KAS
+ *  (key-authorization) enforces the grant's scope. Inert in the on-chain evaluator. */
+export declare const VAULT_KEY_USE_ENFORCER: Address;
+/** Spec 317 — vault-record-scope sentinel. Off-chain only; the resource server (demo-mcp vault
+ *  runtime) enforces the grant's resource+op scope on every vault op. Inert in the on-chain evaluator. */
+export declare const VAULT_RECORD_SCOPE_ENFORCER: Address;
+/** Spec 408 §2.1 (R917-P-2) — session-audience sentinel. Off-chain only: tags the DEL-001 session leaf
+ *  with the DELEGATES the session key may present the principal's delegations to. Judged in
+ *  `sessionDelegateBindingError`; shape-checked in the evaluator; never redeemed on chain. */
+export declare const SESSION_AUDIENCE_ENFORCER: Address;
+/** Spec 305 W2 / zkID alignment §3 (Z2) — presentation-scope sentinel. Off-chain only: the bounds of a
+ *  `credential.present` wire — which verifier AUDIENCES, which PREDICATE programs (by digest), which ISSUER facets
+ *  (by keyId) a delegate key may cause a device signature for. Judged by the presentation mandate handler
+ *  (`presentationHandler.isSubset`) before the key signs; shape-checked in the evaluator; never redeemed on chain
+ *  (a presentation never reaches the chain — the KEY is what enforces it, zkID alignment §3). */
+export declare const PRESENTATION_SCOPE_ENFORCER: Address;
+export interface PresentationScopeTerms {
+    /** Verifier audiences, exact strings (an origin, a verifier id, a session-bound policy hash). */
+    audiences: string[];
+    /** Digests of the predicate programs this wire covers (sha256 over the canonical compiled predicates). */
+    predicateDigests: Hex[];
+    /** Spec-304 issuer facet keyIds whose credentials may be presented. */
+    issuerKeyIds: string[];
+    /** 0 = unbounded within the window; the release counts against it when it holds a counter. */
+    maxPresentations: number;
+}
+export declare function encodePresentationScopeTerms(t: PresentationScopeTerms): Hex;
+export declare function decodePresentationScopeTerms(terms: Hex): PresentationScopeTerms;
+export declare function buildPresentationScopeCaveat(t: PresentationScopeTerms): Caveat;
 export declare function buildCaveat(enforcer: Address, terms: Hex, args?: Hex): Caveat;
 export declare function encodeTimestampTerms(validAfter: number, validUntil: number): Hex;
+/**
+ * Read back what `encodeTimestampTerms` wrote.
+ *
+ * DECODERS LIVE WITH THEIR ENCODERS. These three were in `@agenticprimitives/a2a`, one package away
+ * from the functions that produce the bytes, under a comment reading "must mirror delegation's
+ * encoders byte-for-byte" — which is the comment you write when the compiler cannot check it for you.
+ * That split is not theoretical: `demo-sso-next` hand-rolled its own timestamp decode against a
+ * comment claiming `uint128`, when the encoder emits `uint256`.
+ */
+export declare function decodeTimestampTerms(terms: Hex): {
+    validAfter: bigint;
+    validUntil: bigint;
+};
+export declare function decodeAllowedTargetsTerms(terms: Hex): readonly Address[];
+export declare function decodeAllowedMethodsTerms(terms: Hex): readonly Hex[];
 export declare function encodeValueTerms(maxValue: bigint): Hex;
 export declare function encodeAllowedTargetsTerms(targets: Address[]): Hex;
 export declare function encodeAllowedMethodsTerms(selectors: Hex[]): Hex;
+/** Exact-calldata pinning (CallDataHashEnforcer — ADR-0027 / spec 249 RW1-4b): terms =
+ *  abi.encode(bytes32 keccak256(callData)). Binds a (sub-)delegation to EXACTLY one call so a
+ *  registry checking `verifyAuthorizationForCall` authorizes only that precise payload — not
+ *  merely its target + selector. Pass the exact `execute(...)`/inner calldata the grant permits. */
+export declare function encodeCallDataHashTerms(callData: Hex): Hex;
 export declare function buildMcpToolScopeCaveat(allowedTools: string[]): Caveat;
 export declare function buildDataScopeCaveat(grants: DataScopeGrant[]): Caveat;
+/** Decode a `DATA_SCOPE` caveat's terms back to its grants. Used OFF-CHAIN by the resource server (the
+ *  vault/MCP runtime) to scope the field projection — the on-chain evaluator treats the sentinel as inert. */
+export declare function decodeDataScopeTerms(terms: Hex): DataScopeGrant[];
+export declare function buildVaultKeyUseCaveat(grant: VaultKeyUseGrant): Caveat;
+/** Decode a `VAULT_KEY_USE` caveat's terms back to its grant. Used by the KAS
+ *  (key-authorization, P2) to evaluate the authorization's scope against a request. */
+export declare function decodeVaultKeyUseTerms(terms: Hex): VaultKeyUseGrant;
+export declare function buildVaultRecordScopeCaveat(grants: VaultRecordScopeGrant[]): Caveat;
+/** Decode a `VAULT_RECORD_SCOPE` caveat's terms back to its grants. Used OFF-CHAIN by the resource
+ *  server (demo-mcp vault runtime) to gate each vault op — the on-chain evaluator treats it as inert. */
+export declare function decodeVaultRecordScopeTerms(terms: Hex): VaultRecordScopeGrant[];
+/**
+ * The CANONICAL off-chain enforcement decision for `VAULT_RECORD_SCOPE` grants (spec 317 §3.2). Every
+ * resource server MUST use this one matcher rather than re-implementing it — a divergent re-implementation
+ * is exactly where a widening bug creeps in (security-audit F3). Decision:
+ *   - `recordScopes` absent/empty ⇒ `true` (the delegation carried no record-scope caveat → this gate is
+ *     inert; the resource server's own per-owner authorization still applies — the two gates AND).
+ *   - present ⇒ authorized ONLY if some grant (a) names `req.server` exactly (a grant for another server
+ *     confers nothing here — F2), (b) whose `ops` include `req.op`, AND (c) whose `resources` cover
+ *     `req.resource` by an ANCHORED match: exact string, or a single trailing-`*` prefix (`a.slice(0,-1)`
+ *     is a `startsWith` prefix; a bare `*` is NOT honored). So `vault:message.body:*` matches
+ *     `vault:message.body:<id>` but NOT `vault:message.body-evil` — F3. Deny-by-default otherwise.
+ * `req.resource`/`req.op` MUST be the server-recovered values (never client-supplied), and the grants MUST
+ * be the POST-VERIFY grants (decoded only after the delegation signature verified — never raw caveats).
+ */
+export declare function vaultRecordScopeAllows(recordScopes: VaultRecordScopeGrant[] | undefined, req: {
+    server: string;
+    resource: string;
+    op: 'read' | 'write' | 'delete';
+}): boolean;
+/** R917-P-8 (spec 408 §2.8): a trailing-`*` pattern is honoured only when its prefix names a record type —
+ *  `vault:message.body:*` and `vault:message.body*` do; `*`, `v*` and `vault:*` (a whole namespace) do not.
+ *  The prefix must have a non-empty namespace AND a non-empty type segment. */
+export declare function wildcardPrefixNamesARecordType(prefix: string): boolean;
 export declare function buildDelegateBindingCaveat(delegateSmartAccount: Address, delegatePersonAgent: Address): Caveat;
 export interface QuorumCaveatOpts {
     /**
@@ -47,4 +130,116 @@ export interface QuorumCaveatOpts {
  * into the on-chain caveat evaluation.
  */
 export declare function buildQuorumCaveat(opts: QuorumCaveatOpts): Caveat;
+/** The ONLY method an x402 payment delegation may invoke: `IERC20.transfer(address,uint256)`. */
+export declare const PAYMENT_TRANSFER_SELECTOR: Hex;
+export interface PaymentMandateCaveatOpts {
+    /** Deployed enforcer addresses: the PaymentEnforcer + the timestamp / allowedTargets /
+     *  allowedMethods enforcers it composes with (from `EnforcerAddressMap`). */
+    enforcers: {
+        payment: Address;
+        timestamp: Address;
+        allowedTargets: Address;
+        allowedMethods: Address;
+    };
+    /** Treasury SA that receives every charge (payee). */
+    payee: Address;
+    /** Fee asset (USDC). */
+    asset: Address;
+    /** Smallest-unit caps. `maxAggregate` is the session budget (X402-D5). */
+    maxAmountPerCharge: bigint;
+    maxAggregate: bigint;
+    maxRedemptionsPerWindow: number;
+    windowSeconds: number;
+    validAfter?: number;
+    validUntil: number;
+}
+/** Encode the immutable `PaymentEnforcer` terms. MUST match `PaymentEnforcer.sol` `abi.decode`
+ *  order/types: (treasury, asset, maxAmountPerCharge, maxAggregate, maxRedemptionsPerWindow,
+ *  windowSeconds) → 192 bytes. */
+export declare function encodePaymentTerms(opts: {
+    payee: Address;
+    asset: Address;
+    maxAmountPerCharge: bigint;
+    maxAggregate: bigint;
+    maxRedemptionsPerWindow: number;
+    windowSeconds: number;
+}): Hex;
+/** The inverse — spec 358 W4's keyring selector reads WHICH payee a payment mandate binds, so a
+ *  fanned-out step can be judged under the mandate that names ITS payee. Reading terms is not verifying
+ *  them: the verifier still judges the selected mandate alone. */
+export declare function decodePaymentTerms(terms: Hex): {
+    payee: Address;
+    asset: Address;
+    maxAmountPerCharge: bigint;
+    maxAggregate: bigint;
+    maxRedemptionsPerWindow: number;
+    windowSeconds: number;
+};
+/**
+ * PAY-DEL-1 — the caveat set for an x402 PAYMENT delegation (delegator = reader, delegate = the
+ * paid service agent). Composes the stateful `PaymentEnforcer` (spend + windowed-frequency cap +
+ * transfer-only + single-use nonce) with `timestamp` (expiry), `allowedTargets` (USDC only), and
+ * `allowedMethods` (transfer only) so the on-chain enforcers and the off-chain mandate agree.
+ *
+ * Caveat `args` are left `'0x'` at mint; the rail executor fills the PaymentEnforcer caveat's `args`
+ * with `abi.encode(mandateId, nonce, resourceHash)` at REDEMPTION time (terms = mint, args = redeem).
+ * Resource/skill binding rides the mandate's `contextBinding`, not an on-chain caveat (PAY-WIRE-5).
+ */
+export declare function buildPaymentMandateCaveats(opts: PaymentMandateCaveatOpts): Caveat[];
+/** PAY-DEL-4 — human-readable consent for the connect UI ("Allow X to charge your agent wallet?").
+ *  The UI renders THIS, never raw `delegate execute to contract`. Amounts are smallest-unit; the
+ *  caller formats with the token's decimals. */
+export interface PaymentMandateConsent {
+    recipient: Address;
+    asset: Address;
+    maxAmountPerCharge: bigint;
+    sessionBudget: bigint;
+    maxRedemptionsPerWindow: number;
+    windowSeconds: number;
+    expiresAt: number;
+    revocable: true;
+}
+export declare function describePaymentMandate(opts: PaymentMandateCaveatOpts): PaymentMandateConsent;
+export type DigestBindingKind = 'intent' | 'projection' | 'offer' | 'plan';
+/** The `kind` word in the terms — keccak256 of a short name, so a reader can tell bindings apart. */
+export declare const DIGEST_BINDING_KIND: Record<DigestBindingKind, Hex>;
+/** Reverse map for decoders (lowercased kind hash → name). */
+export declare const DIGEST_KIND_NAMES: ReadonlyMap<string, DigestBindingKind>;
+export declare function encodeDigestBindingTerms(kind: DigestBindingKind, digest: Hex): Hex;
+export declare function decodeDigestBindingTerms(terms: Hex): {
+    kind: DigestBindingKind;
+    digest: Hex;
+};
+/** The `args` a redeemer supplies at redemption: the digest it is acting under AND the step's nonce
+ *  (abi-encoded `(bytes32 presented, bytes32 stepNonce)`). Supplying the digest is the on-chain commitment;
+ *  `DigestBindingEnforcer` refuses anything but the bound one. R917-C-4 (spec 408 §1.4): the nonce makes
+ *  the redemption SINGLE-USE PER STEP — consumed on chain under (delegator, delegationHash, kind, nonce),
+ *  so a replay of the same step reverts. Derive it with `digestBindingStepNonce`. */
+export type DigestBindingArgsScheme = {
+    generation: 1;
+} | {
+    generation: 2;
+    stepNonce: Hex;
+};
+export declare function encodeDigestBindingArgs(digest: Hex, scheme: DigestBindingArgsScheme): Hex;
+/** THE ONE derivation of a step's redemption nonce: `keccak256("<intentDigest>:<operation>")` where `operation`
+ *  is the step's LOGICAL request identity — its declared idempotency key when the step carries one, else its
+ *  stable step ref (spec 410 §3). Two deliberately identical payments are two operations (distinct ids); one
+ *  payment retried after a lost response is one (the same id, the same nonce, consumed once on chain). The same
+ *  derivation `PaymentEnforcer`'s nonce uses, so a step's on-chain identity is one value everywhere. */
+export declare function digestBindingStepNonce(intentDigest: Hex, operation: string): Hex;
+/** terms = abi.encode(string[] classIris): what a write under this mandate MAY CARRY, as ontology classes. */
+export declare function encodePayloadClassesTerms(classIris: readonly string[]): Hex;
+export declare function decodePayloadClassesTerms(terms: Hex): string[];
+export declare function buildPayloadClassesCaveat(enforcer: Address, classIris: readonly string[]): Caveat;
+/** One digest-binding caveat. Args are NOT pre-filled: they are the redeemer's per-step commitment
+ *  (`encodeDigestBindingArgs`), set at redemption — a pre-filled value would be one nonce for every step. */
+export declare function buildDigestBindingCaveat(enforcer: Address, kind: DigestBindingKind, digest: Hex): Caveat;
+/** Every digest binding a delegation carries, by kind. Empty ⇒ a standing capability, not a mandate. */
+export declare function readDigestBindings(caveats: readonly Caveat[], enforcer: Address): Partial<Record<DigestBindingKind, Hex>>;
+export declare function encodeSessionAudienceTerms(delegates: readonly Address[]): Hex;
+export declare function decodeSessionAudienceTerms(terms: Hex): Address[];
+export declare function buildSessionAudienceCaveat(delegates: readonly Address[]): Caveat;
+/** The audience a leaf carries (lowercased), or null when it carries none — which the verifier refuses. */
+export declare function readSessionAudience(caveats: readonly Caveat[]): string[] | null;
 //# sourceMappingURL=caveats.d.ts.map

package/dist/caveats.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"caveats.d.ts","sourceRoot":"","sources":["../src/caveats.ts"],"names":[],"mappings":"AAQA,OAAO,EAAuB,KAAK,GAAG,EAAE,KAAK,OAAO,EAAE,MAAM,MAAM,CAAC;AAEnE,OAAO,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAWtD,eAAO,MAAM,uBAAuB,EAAE,OAA2D,CAAC;AAClG,eAAO,MAAM,mBAAmB,EAAE,OAAuD,CAAC;AAC1F,eAAO,MAAM,yBAAyB,EAAE,OAA6D,CAAC;AAItG,wBAAgB,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,GAAG,GAAG,MAAM,CAE7E;AAID,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,GAAG,CAWhF;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,GAAG,CAGtD;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,GAAG,CAGjE;AAED,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,GAAG,CAQ/D;AAID,wBAAgB,uBAAuB,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,MAAM,CAItE;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,CAgBrE;AAED,wBAAgB,0BAA0B,CACxC,oBAAoB,EAAE,OAAO,EAC7B,mBAAmB,EAAE,OAAO,GAC3B,MAAM,CAMR;AAWD,MAAM,WAAW,gBAAgB;IAC/B;;;;;OAKG;IACH,QAAQ,EAAE,OAAO,CAAC;IAClB;;yDAEqD;IACrD,OAAO,EAAE,OAAO,EAAE,CAAC;IACnB;;kDAE8C;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB;kEAC8D;IAC9D,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,GAAG,MAAM,CAwBhE"}
+{"version":3,"file":"caveats.d.ts","sourceRoot":"","sources":["../src/caveats.ts"],"names":[],"mappings":"AAQA,OAAO,EAAuD,KAAK,GAAG,EAAE,KAAK,OAAO,EAAE,MAAM,MAAM,CAAC;AAEnG,OAAO,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAWlG,eAAO,MAAM,uBAAuB,EAAE,OAA2D,CAAC;AAClG,eAAO,MAAM,mBAAmB,EAAE,OAAuD,CAAC;AAC1F,eAAO,MAAM,yBAAyB,EAAE,OAA6D,CAAC;AACtG;uFACuF;AACvF,eAAO,MAAM,sBAAsB,EAAE,OAA0D,CAAC;AAChG;0GAC0G;AAC1G,eAAO,MAAM,2BAA2B,EAAE,OAA+D,CAAC;AAC1G;;8FAE8F;AAC9F,eAAO,MAAM,yBAAyB,EAAE,OAA6D,CAAC;AACtG;;;;iGAIiG;AACjG,eAAO,MAAM,2BAA2B,EAAE,OAA+D,CAAC;AAE1G,MAAM,WAAW,sBAAsB;IACrC,iGAAiG;IACjG,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,0GAA0G;IAC1G,gBAAgB,EAAE,GAAG,EAAE,CAAC;IACxB,uEAAuE;IACvE,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,8FAA8F;IAC9F,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AACD,wBAAgB,4BAA4B,CAAC,CAAC,EAAE,sBAAsB,GAAG,GAAG,CAK3E;AACD,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,GAAG,GAAG,sBAAsB,CAM/E;AACD,wBAAgB,4BAA4B,CAAC,CAAC,EAAE,sBAAsB,GAAG,MAAM,CAE9E;AAID,wBAAgB,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,GAAG,GAAG,MAAM,CAE7E;AAID,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,GAAG,CAWhF;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,GAAG,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAG3F;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,GAAG,GAAG,SAAS,OAAO,EAAE,CAGxE;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,GAAG,GAAG,SAAS,GAAG,EAAE,CAGpE;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,GAAG,CAGtD;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,GAAG,CAGjE;AAED,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,GAAG,CAQ/D;AAED;;;oGAGoG;AACpG,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,GAAG,GAAG,GAAG,CAK1D;AAID,wBAAgB,uBAAuB,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,MAAM,CAItE;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,CAgBrE;AAaD;8GAC8G;AAC9G,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,GAAG,GAAG,cAAc,EAAE,CAGjE;AAeD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAStE;AAED;uFACuF;AACvF,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,GAAG,GAAG,gBAAgB,CAGnE;AAcD,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,CAkBnF;AAED;yGACyG;AACzG,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,GAAG,GAAG,qBAAqB,EAAE,CAG/E;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CACpC,YAAY,EAAE,qBAAqB,EAAE,GAAG,SAAS,EACjD,GAAG,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAA;CAAE,GACzE,OAAO,CAeT;AAED;;+EAE+E;AAC/E,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAGtE;AAED,wBAAgB,0BAA0B,CACxC,oBAAoB,EAAE,OAAO,EAC7B,mBAAmB,EAAE,OAAO,GAC3B,MAAM,CAMR;AAWD,MAAM,WAAW,gBAAgB;IAC/B;;;;;OAKG;IACH,QAAQ,EAAE,OAAO,CAAC;IAClB;;yDAEqD;IACrD,OAAO,EAAE,OAAO,EAAE,CAAC;IACnB;;kDAE8C;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB;kEAC8D;IAC9D,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,GAAG,MAAM,CAwBhE;AAID,iGAAiG;AACjG,eAAO,MAAM,yBAAyB,EAAE,GAAkB,CAAC;AAE3D,MAAM,WAAW,wBAAwB;IACvC;iFAC6E;IAC7E,SAAS,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,OAAO,CAAA;KAAE,CAAC;IACtG,sDAAsD;IACtD,KAAK,EAAE,OAAO,CAAC;IACf,wBAAwB;IACxB,KAAK,EAAE,OAAO,CAAC;IACf,0EAA0E;IAC1E,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,uBAAuB,EAAE,MAAM,CAAC;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;kCAEkC;AAClC,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,uBAAuB,EAAE,MAAM,CAAC;IAChC,aAAa,EAAE,MAAM,CAAC;CACvB,GAAG,GAAG,CA6BN;AAED;;kEAEkE;AAClE,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,GAAG,GAAG;IAC9C,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IACjF,uBAAuB,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;CACxD,CAMA;AAED;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,wBAAwB,GAAG,MAAM,EAAE,CAOnF;AAED;;gDAEgD;AAChD,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;IACf,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,uBAAuB,EAAE,MAAM,CAAC;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,wBAAwB,GAAG,qBAAqB,CAW5F;AAaD,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,YAAY,GAAG,OAAO,GAAG,MAAM,CAAC;AAE3E,qGAAqG;AACrG,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,iBAAiB,EAAE,GAAG,CAK9D,CAAC;AACF,8DAA8D;AAC9D,eAAO,MAAM,iBAAiB,EAAE,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAEpE,CAAC;AAEF,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,GAAG,GAAG,CAGlF;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,GAAG,GAAG;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,GAAG,CAAA;CAAE,CAK7F;AAED;;;;qFAIqF;AACrF,MAAM,MAAM,uBAAuB,GAAG;IAAE,UAAU,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,UAAU,EAAE,CAAC,CAAC;IAAC,SAAS,EAAE,GAAG,CAAA;CAAE,CAAC;AAC5F,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,uBAAuB,GAAG,GAAG,CAMzF;AAED;;;;wGAIwG;AACxG,wBAAgB,sBAAsB,CAAC,YAAY,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,GAAG,GAAG,CAEhF;AAID,8GAA8G;AAC9G,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,GAAG,CAK3E;AACD,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,GAAG,GAAG,MAAM,EAAE,CAG9D;AACD,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAEjG;AAED;6GAC6G;AAC7G,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,GAAG,MAAM,CAExG;AAED,wGAAwG;AACxG,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,CAQzH;AAUD,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,SAAS,OAAO,EAAE,GAAG,GAAG,CAK7E;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,GAAG,GAAG,OAAO,EAAE,CAIhE;AAED,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,SAAS,OAAO,EAAE,GAAG,MAAM,CAEhF;AAED,2GAA2G;AAC3G,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,IAAI,CAI/E"}