@ashlar-blue/x402-trust 0.3.0

package/dist/census-reconcile.js

@@ -0,0 +1,162 @@
+// GENERATED from src/x402/census-reconcile.ts by scripts/sdk/sync-sdk.ts — do not edit here.
+// The canonical module is the one FlareClaw runs in production; this is a copy so
+// that what we publish and what we run cannot diverge. Edit the canonical file.
+/**
+ * census-reconcile — a checkable statement of where two observers disagree.
+ *
+ * THE GAP THIS FILLS. Every party in this ecosystem publishes its own index
+ * and asks readers to trust it. When two indexes disagree — and they always
+ * do — there is no artifact for the disagreement itself, so a reader must pick
+ * an observer to believe. Tonight alone: an uptime observatory reporting 36.7%
+ * alive while a cross-probe of the same targets reported 92.5%; our own
+ * second-observer sweep differing from a peer's on 17 of 1,521 hosts; and a
+ * first draft of our own census mislabelling 1,418 hosts.
+ *
+ * Melchiorre Oliva's phrase for it is the right one: disagreement is the
+ * signal. This makes the signal into an object.
+ *
+ * THE VOCABULARY IS BORROWED ON PURPOSE. Iman Schrock proposed a five-category
+ * reconciliation vocabulary in the SCITT disclosure-evidence thread
+ * (2026-08-16) and Emek adopted it in -03. It was built for reconciling two
+ * populations of settlement evidence, and it fits two populations of discovery
+ * observations without modification. Inventing a sixth vocabulary for the same
+ * problem would be worse than useless — the value of a category name is that
+ * two parties already agree what it means.
+ *
+ * Iman also corrected his own runner's strongest category DOWNWARD, because a
+ * missing record only shows absence from a supplied population. That
+ * correction is load-bearing here: this module NEVER concludes which observer
+ * is right. It cannot. Two honest observers with different vantages,
+ * different clocks and different resolvers will disagree without either being
+ * wrong, and an artifact that adjudicates would be asserting more than its
+ * inputs support.
+ *
+ * WHAT A READER GETS. The reconciliation is Merkle-committed, so a third party
+ * who trusts NEITHER observer can verify one host's row — "these two disagreed
+ * about this domain, this way" — from a handful of hashes, without downloading
+ * either census.
+ */
+import { createHash } from 'node:crypto';
+import { jcsCanonical, assertJcsSafe } from './manifest-sig.js';
+import { transcriptRoot, inclusionProof, verifyInclusion } from './merkle-transcript.js';
+import { recomputeRoots } from './attested-directory.js';
+export const RECONCILE_SCHEMA = 'x402-census-reconciliation/1';
+const EMPTY_TALLY = () => ({
+    matched: 0, 'observed-by-a-only': 0, 'observed-by-b-only': 0,
+    divergent: 0, indeterminate: 0,
+});
+/**
+ * Row leaves carry the domain, both verdicts AND the note. The note was
+ * previously outside the commitment, so a relayer could rewrite a verified
+ * row's note to adjudicating language ("observer B is known-bad") and the
+ * proof would still verify — defeating the no-adjudication doctrine at exactly
+ * the layer a third party checks. It is committed now. (Review R2.)
+ */
+const rowLeaf = (r) => {
+    const core = { domain: r.domain, category: r.category, a: r.a ?? null, b: r.b ?? null, note: r.note };
+    assertJcsSafe(core);
+    return {
+        drawId: r.domain,
+        nonce: r.category,
+        seed: '0x' + createHash('sha256').update(jcsCanonical(core), 'utf8').digest('hex'),
+    };
+};
+const VALID_VERDICTS = new Set([
+    'discoverable-verified', 'discoverable', 'one-edit-away', 'not-discoverable', 'unreachable',
+]);
+/** A verdict that admits the observer could not tell. */
+const isIndeterminate = (v) => v === 'unreachable';
+export function reconcile(aCensus, aEntries, bCensus, bEntries, reconciledAt, digestOf) {
+    // R1 — the entries must actually be the ones each census committed to.
+    // Without this, a reconciler embeds a census's genuine digest as the
+    // provenance of verdicts it never produced — a Merkle-committed, retail-
+    // provable FABRICATED attribution, in the one artifact whose whole pitch
+    // is "checkable by someone who trusts neither observer". Recompute both
+    // root pairs and refuse on any mismatch.
+    for (const [label, census, entries] of [['a', aCensus, aEntries], ['b', bCensus, bEntries]]) {
+        if (entries.length !== census.size) {
+            throw new Error(`[reconcile] ${label}: ${entries.length} entries but census.size ${census.size}`);
+        }
+        const r = recomputeRoots(entries);
+        if (r.inputRoot !== census.inputRoot || r.outputRoot !== census.outputRoot) {
+            throw new Error(`[reconcile] ${label}: entries do not recompute to the census's committed roots — refusing to attribute them`);
+        }
+    }
+    // A present-but-invalid verdict must never reach the category ladder: an
+    // entry with a dropped/blank verdict would otherwise slip through every
+    // guard and land in 'matched' (undefined === undefined), publishing a
+    // committed agreement out of a corrupt record. (Silent-failure 2a.)
+    for (const [label, entries] of [['a', aEntries], ['b', bEntries]]) {
+        for (const e of entries) {
+            if (!VALID_VERDICTS.has(e.verdict)) {
+                throw new Error(`[reconcile] ${label}: entry ${e.domain} has an out-of-vocabulary verdict ${JSON.stringify(e.verdict)}`);
+            }
+        }
+    }
+    const aBy = new Map(aEntries.map((e) => [e.domain, e]));
+    const bBy = new Map(bEntries.map((e) => [e.domain, e]));
+    // The denominator is the UNION. Reconciling only the intersection hides
+    // exactly the population difference most worth seeing.
+    const domains = [...new Set([...aBy.keys(), ...bBy.keys()])].sort();
+    const rows = domains.map((domain) => {
+        const av = aBy.get(domain)?.verdict, bv = bBy.get(domain)?.verdict;
+        if (av && !bv) {
+            return { domain, category: 'observed-by-a-only', a: av,
+                note: `in ${aCensus.observer}'s population, absent from ${bCensus.observer}'s — not a claim either missed it` };
+        }
+        if (bv && !av) {
+            return { domain, category: 'observed-by-b-only', b: bv,
+                note: `in ${bCensus.observer}'s population, absent from ${aCensus.observer}'s — not a claim either missed it` };
+        }
+        if (isIndeterminate(av) || isIndeterminate(bv)) {
+            return { domain, category: 'indeterminate', ...(av ? { a: av } : {}), ...(bv ? { b: bv } : {}),
+                note: 'at least one observer reported a vantage-limited verdict; no comparison is safe' };
+        }
+        if (av === bv) {
+            return { domain, category: 'matched', ...(av ? { a: av } : {}), ...(bv ? { b: bv } : {}), note: 'both observers, same verdict' };
+        }
+        return { domain, category: 'divergent', ...(av ? { a: av } : {}), ...(bv ? { b: bv } : {}),
+            note: 'both observed it and disagree; this artifact does not decide which is correct' };
+    });
+    const tally = EMPTY_TALLY();
+    for (const r of rows)
+        tally[r.category]++;
+    // Skew is part of the honesty story ("timing explains many divergences"),
+    // so an unparseable observedAt is a refusal, not a silent -1 sentinel that
+    // still publishes. (Review R3.)
+    const aT = Date.parse(aCensus.observedAt), bT = Date.parse(bCensus.observedAt);
+    if (!Number.isFinite(aT) || !Number.isFinite(bT)) {
+        throw new Error('[reconcile] a census has an unparseable observedAt — cannot compute skew, refusing');
+    }
+    const skew = Math.abs(aT - bT) / 1000;
+    return {
+        rows,
+        reconciliation: {
+            schema: RECONCILE_SCHEMA,
+            reconciledAt,
+            a: { observer: aCensus.observer, digest: digestOf(aCensus), size: aCensus.size, observedAt: aCensus.observedAt },
+            b: { observer: bCensus.observer, digest: digestOf(bCensus), size: bCensus.size, observedAt: bCensus.observedAt },
+            size: rows.length,
+            rowsRoot: transcriptRoot(rows.map(rowLeaf)),
+            tally,
+            adjudication: 'none — two honest vantages may differ without either being wrong',
+            observationSkewSeconds: Math.round(skew),
+        },
+    };
+}
+/** Prove ONE host's reconciliation row without disclosing either census. */
+export function proveRow(rows, index) {
+    const row = rows[index];
+    if (!row)
+        throw new Error(`index ${index} outside reconciliation of ${rows.length}`);
+    return { row, index, size: rows.length, proof: inclusionProof(rows.map(rowLeaf), index) };
+}
+export function verifyRow(row, index, size, proof, rowsRoot) {
+    return verifyInclusion(rowLeaf(row), index, size, proof, rowsRoot);
+}
+/** The digest a reconciliation is anchored under. */
+export function reconciliationDigest(r) {
+    assertJcsSafe(r);
+    return 'sha256:' + createHash('sha256').update(jcsCanonical(r), 'utf8').digest('hex');
+}
+//# sourceMappingURL=census-reconcile.js.map

package/dist/census-reconcile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"census-reconcile.js","sourceRoot":"","sources":["../src/census-reconcile.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,kFAAkF;AAClF,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAwB,MAAM,wBAAwB,CAAC;AAC/G,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAGzD,MAAM,CAAC,MAAM,gBAAgB,GAAG,8BAA8B,CAAC;AA+C/D,MAAM,WAAW,GAAG,GAAsC,EAAE,CAAC,CAAC;IAC1D,OAAO,EAAE,CAAC,EAAE,oBAAoB,EAAE,CAAC,EAAE,oBAAoB,EAAE,CAAC;IAC5D,SAAS,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC;CACjC,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,OAAO,GAAG,CAAC,CAAe,EAAmB,EAAE;IACjD,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtG,aAAa,CAAC,IAAI,CAAC,CAAC;IACpB,OAAO;QACH,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,KAAK,EAAE,CAAC,CAAC,QAAQ;QACjB,IAAI,EAAE,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KACrF,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAmB;IAClE,uBAAuB,EAAE,cAAc,EAAE,eAAe,EAAE,kBAAkB,EAAE,aAAa;CAC9F,CAAC,CAAC;AAEH,yDAAyD;AACzD,MAAM,eAAe,GAAG,CAAC,CAA+B,EAAW,EAAE,CAAC,CAAC,KAAK,aAAa,CAAC;AAE1F,MAAM,UAAU,SAAS,CACrB,OAAe,EAAE,QAA0B,EAC3C,OAAe,EAAE,QAA0B,EAC3C,YAAoB,EACpB,QAA+B;IAE/B,uEAAuE;IACvE,qEAAqE;IACrE,yEAAyE;IACzE,yEAAyE;IACzE,wEAAwE;IACxE,yCAAyC;IACzC,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAU,EAAE,CAAC;QACnG,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,KAAK,OAAO,CAAC,MAAM,4BAA4B,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACtG,CAAC;QACD,MAAM,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,yFAAyF,CAAC,CAAC;QACnI,CAAC;IACL,CAAC;IACD,yEAAyE;IACzE,wEAAwE;IACxE,sEAAsE;IACtE,oEAAoE;IACpE,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAU,EAAE,CAAC;QACzE,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACtB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,WAAW,CAAC,CAAC,MAAM,qCAAqC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC7H,CAAC;QACL,CAAC;IACL,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAU,CAAC,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAU,CAAC,CAAC,CAAC;IACjE,wEAAwE;IACxE,uDAAuD;IACvD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAEpE,MAAM,IAAI,GAAmB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAgB,EAAE;QAC9D,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;QACnE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAC,EAAE,EAAE;gBAClD,IAAI,EAAE,MAAM,OAAO,CAAC,QAAQ,8BAA8B,OAAO,CAAC,QAAQ,mCAAmC,EAAE,CAAC;QACxH,CAAC;QACD,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAC,EAAE,EAAE;gBAClD,IAAI,EAAE,MAAM,OAAO,CAAC,QAAQ,8BAA8B,OAAO,CAAC,QAAQ,mCAAmC,EAAE,CAAC;QACxH,CAAC;QACD,IAAI,eAAe,CAAC,EAAE,CAAC,IAAI,eAAe,CAAC,EAAE,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1F,IAAI,EAAE,iFAAiF,EAAE,CAAC;QAClG,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACZ,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC;QACrI,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtF,IAAI,EAAE,+EAA+E,EAAE,CAAC;IAChG,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;IAE1C,0EAA0E;IAC1E,2EAA2E;IAC3E,gCAAgC;IAChC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;IAC1G,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC;IAEtC,OAAO;QACH,IAAI;QACJ,cAAc,EAAE;YACZ,MAAM,EAAE,gBAAgB;YACxB,YAAY;YACZ,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE;YAChH,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE;YAChH,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC3C,KAAK;YACL,YAAY,EAAE,kEAAkE;YAChF,sBAAsB,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;SAC3C;KACJ,CAAC;AACN,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,QAAQ,CAAC,IAAoB,EAAE,KAAa;IAGxD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACxB,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,SAAS,KAAK,8BAA8B,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACrF,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;AAC9F,CAAC;AAED,MAAM,UAAU,SAAS,CACrB,GAAiB,EAAE,KAAa,EAAE,IAAY,EAAE,KAAe,EAAE,QAAgB;IAEjF,OAAO,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AACvE,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,oBAAoB,CAAC,CAAiB;IAClD,aAAa,CAAC,CAAC,CAAC,CAAC;IACjB,OAAO,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1F,CAAC"}

package/dist/directory-classify.d.ts

@@ -0,0 +1,47 @@
+/**
+ * directory-classify — the ONE place a raw DNS sweep row becomes a directory
+ * verdict.
+ *
+ * WHY THIS IS ITS OWN MODULE. The classification was duplicated across
+ * build-directory-census.ts and directory-lane.ts and had already DIVERGED:
+ * the two produced different `detail` strings for the same host. Because
+ * `detail` is committed inside the census Merkle leaf (attested-directory.ts
+ * outputLeaf), that divergence meant the two scripts computed DIFFERENT census
+ * digests over identical observations — a reproducibility defect in an
+ * artifact whose entire value is that a third party can reproduce it. One
+ * source of truth removes the class of bug, not just this instance.
+ *
+ * THE LOAD-BEARING RULE. A DNS-only method has NO evidence about host
+ * reachability. NXDOMAIN on `_x402.<host>` means "no such record", not "host
+ * down". So this classifier NEVER emits `unreachable`: that verdict belongs to
+ * a method that actually probed the host (the fc-liveness lane), and emitting
+ * it here would assert a host was offline on the strength of a missing TXT
+ * record. A verdict vocabulary must be narrowed to the claims the method can
+ * support; the `detail` strings say exactly which claim is being made.
+ */
+import type { DirectoryEntry } from './attested-directory.js';
+/** One row of the DNS discovery sweep (scripts/x402/dns-discovery-sweep.mjs). */
+export interface SweepRow {
+    host: string;
+    /** TXT strings at `_x402.<host>`, or null when the query returned nothing. */
+    disc: string[] | null;
+    /** TXT strings at `s1._x402key.<host>`, or null. */
+    key: string[] | null;
+}
+/** A TXT answer with at least one non-blank string. `[]` and `[""]` are empty. */
+export declare function hasContent(a: string[] | null): a is string[];
+/**
+ * Classify one sweep row into a committed directory verdict.
+ *
+ * The returned `detail` is part of the census leaf, so it is treated as a
+ * stable, canonical string — changing its wording changes every census digest
+ * and is a deliberate, breaking act, not an editorial one.
+ */
+export declare function classifySweepRow(r: SweepRow): DirectoryEntry;
+/**
+ * Classify a whole sweep into a DETERMINISTIC, sorted entry list. Row order in
+ * a census must not depend on how the sweep happened to finish, or two
+ * observers who saw identical facts would still commit to different roots.
+ */
+export declare function classifySweep(rows: SweepRow[]): DirectoryEntry[];
+//# sourceMappingURL=directory-classify.d.ts.map

package/dist/directory-classify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"directory-classify.d.ts","sourceRoot":"","sources":["../src/directory-classify.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAE9D,iFAAiF;AACjF,MAAM,WAAW,QAAQ;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACtB,oDAAoD;IACpD,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;CACxB;AAED,kFAAkF;AAClF,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,IAAI,MAAM,EAAE,CAE5D;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,QAAQ,GAAG,cAAc,CA8B5D;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,cAAc,EAAE,CAEhE"}

package/dist/directory-classify.js

@@ -0,0 +1,54 @@
+// GENERATED from src/x402/directory-classify.ts by scripts/sdk/sync-sdk.ts — do not edit here.
+// The canonical module is the one FlareClaw runs in production; this is a copy so
+// that what we publish and what we run cannot diverge. Edit the canonical file.
+/** A TXT answer with at least one non-blank string. `[]` and `[""]` are empty. */
+export function hasContent(a) {
+    return Array.isArray(a) && a.some((t) => typeof t === 'string' && t.trim().length > 0);
+}
+/**
+ * Classify one sweep row into a committed directory verdict.
+ *
+ * The returned `detail` is part of the census leaf, so it is treated as a
+ * stable, canonical string — changing its wording changes every census digest
+ * and is a deliberate, breaking act, not an editorial one.
+ */
+export function classifySweepRow(r) {
+    // No usable discovery TXT: not discoverable. We distinguish "no record at
+    // all" from "a record with no content" in the detail, because they are
+    // different facts even though the verdict is the same.
+    if (!hasContent(r.disc)) {
+        return {
+            domain: r.host,
+            verdict: 'not-discoverable',
+            detail: r.disc === null ? 'no _x402 TXT record (NXDOMAIN or no answer)' : 'empty _x402 TXT content',
+        };
+    }
+    const rec = r.disc.find((t) => /v=x402/i.test(t));
+    if (!rec) {
+        return {
+            domain: r.host,
+            verdict: 'not-discoverable',
+            detail: '_x402 TXT present but no v=x402 record among its strings',
+        };
+    }
+    // A signing key published under the host is what upgrades "resolves" to
+    // "checkable". Recorded as a distinct verdict rather than flattened.
+    const signed = hasContent(r.key) && r.key.some((t) => /v=x402key1/i.test(t));
+    return {
+        domain: r.host,
+        verdict: signed ? 'discoverable-verified' : 'discoverable',
+        detail: signed
+            ? 'record resolves; signing key published under the host'
+            : 'record resolves; no signing key in DNS',
+        record: rec,
+    };
+}
+/**
+ * Classify a whole sweep into a DETERMINISTIC, sorted entry list. Row order in
+ * a census must not depend on how the sweep happened to finish, or two
+ * observers who saw identical facts would still commit to different roots.
+ */
+export function classifySweep(rows) {
+    return rows.map(classifySweepRow).sort((a, b) => (a.domain < b.domain ? -1 : 1));
+}
+//# sourceMappingURL=directory-classify.js.map

package/dist/directory-classify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"directory-classify.js","sourceRoot":"","sources":["../src/directory-classify.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,kFAAkF;AAClF,gFAAgF;AAkChF,kFAAkF;AAClF,MAAM,UAAU,UAAU,CAAC,CAAkB;IACzC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,CAAW;IACxC,0EAA0E;IAC1E,uEAAuE;IACvE,uDAAuD;IACvD,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO;YACH,MAAM,EAAE,CAAC,CAAC,IAAI;YACd,OAAO,EAAE,kBAAkB;YAC3B,MAAM,EAAE,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,6CAA6C,CAAC,CAAC,CAAC,yBAAyB;SACtG,CAAC;IACN,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC,GAAG,EAAE,CAAC;QACP,OAAO;YACH,MAAM,EAAE,CAAC,CAAC,IAAI;YACd,OAAO,EAAE,kBAAkB;YAC3B,MAAM,EAAE,0DAA0D;SACrE,CAAC;IACN,CAAC;IACD,wEAAwE;IACxE,qEAAqE;IACrE,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,OAAO;QACH,MAAM,EAAE,CAAC,CAAC,IAAI;QACd,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,cAAc;QAC1D,MAAM,EAAE,MAAM;YACV,CAAC,CAAC,uDAAuD;YACzD,CAAC,CAAC,wCAAwC;QAC9C,MAAM,EAAE,GAAG;KACd,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAgB;IAC1C,OAAO,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC"}

package/dist/discovery.d.ts

@@ -0,0 +1,304 @@
+/**
+ * x402 `discovery` extension — reference implementation.
+ *
+ * Spec: docs/plans/x402/x402-discovery-extension-spec.md (draft for
+ * x402-foundation). Two mechanisms:
+ *   1. `/.well-known/x402` HTTPS manifest (authoritative capability record)
+ *   2. `_x402.<domain>` DNS TXT pointer (`v=x402-1; wk=<manifest url>; …`)
+ *
+ * This module is pure protocol logic (parse/validate/build) plus a resolver
+ * that composes DNS + fetch per the spec's resolution algorithm. The public
+ * facilitator serves the manifest; anyone can resolve it with resolveX402().
+ */
+export type DiscoveryKind = 'facilitator' | 'resource-server' | 'both';
+export interface SupportedKind {
+    x402Version: number;
+    scheme: string;
+    network: string;
+}
+export interface DiscoveryAsset {
+    network: string;
+    address: string;
+    symbol?: string;
+    decimals?: number;
+    standard?: string;
+}
+export interface DiscoveryManifest {
+    x402Version: number;
+    kind: DiscoveryKind;
+    name?: string;
+    description?: string;
+    facilitator?: {
+        baseUrl: string;
+        endpoints: {
+            supported: string;
+            verify: string;
+            settle: string;
+        };
+        kinds: SupportedKind[];
+        assets?: DiscoveryAsset[];
+    };
+    resources?: {
+        url: string;
+        method?: string;
+        description?: string;
+    }[];
+    /** Peer hints: bare domain names of other discovery publishers. Hints only — see sanitizePeers. */
+    peers?: string[];
+    attestation?: {
+        type: string;
+        [k: string]: unknown;
+    };
+    docs?: string;
+    contact?: string;
+    updated?: string;
+}
+export interface X402TxtRecord {
+    v: string;
+    wk: string;
+    k?: DiscoveryKind;
+    net?: string[];
+    scheme?: string[];
+}
+/**
+ * Parse a `_x402.<domain>` TXT record ("v=x402-1; wk=https://…; k=…").
+ * Returns null for records that aren't x402-1 (callers skip them).
+ * Throws on records that claim x402-1 but are malformed.
+ */
+/**
+ * A HARD discovery violation — a record or redirect that is present but
+ * malformed or spoofing (missing/HTTP wk, invalid k, duplicate key/record,
+ * out-of-domain or downgraded redirect). Distinguished by TYPE, not by message
+ * text, so classification cannot be fooled by attacker-controlled strings (a
+ * wk URL containing the word "conflicting") and cannot silently swallow a
+ * malformed record as a DNS miss. These cache as `invalid`; DNS misses do not.
+ */
+export declare class DiscoveryViolation extends Error {
+}
+export declare function parseX402TxtRecord(txt: string): X402TxtRecord | null;
+/**
+ * What a `_x402` TXT record IS, when it isn't ours.
+ *
+ * WHY THIS EXISTS. A census of the Bazaar catalog on 2026-08-22 found five
+ * hosts publishing a TXT record at `_x402` under a grammar that is not this
+ * one, in three mutually incompatible syntaxes:
+ *
+ *   v=x4021;descriptor=api;url=https://api.telemost.io/.well-known/x402
+ *   v=x4021;url=https://tablint.dev/.well-known/x402
+ *   x402-manifest=https://vibesprings.net/.well-known/x402.json
+ *   https://api.auor.io/.well-known/x402                    (bare URL, no key)
+ *
+ * Every one of them points at its own domain, so this is not an attack — it is
+ * independent convergence on the same design. Two of them differ from a
+ * conformant record by exactly two tokens.
+ *
+ * `parseX402TxtRecord` returns null for all of them, which is correct as a GATE
+ * and useless as a DIAGNOSIS: a resolver that silently skips a near-miss makes
+ * the publisher invisible and tells nobody they were one character away. The
+ * fragmentation risk to `_x402` is not that someone attacks the name, it is
+ * that several people spell it differently and no implementation ever says so.
+ *
+ * So: strict enforcement, generous diagnostics — the same doctrine
+ * `diagnoseManifest` applies one layer up. THE GATE IS UNCHANGED.
+ */
+export type TxtDiagnosis = {
+    kind: 'conformant';
+    record: X402TxtRecord;
+}
+/** Claims x402-1 and breaks the grammar. */
+ | {
+    kind: 'malformed';
+    message: string;
+}
+/** Not conformant, but recognizably an attempt at this record. */
+ | {
+    kind: 'near-miss';
+    hints: string[];
+    manifestUrl?: string;
+}
+/** A TXT record at this name that is not about x402 at all. */
+ | {
+    kind: 'foreign';
+};
+export declare function diagnoseX402TxtRecord(txt: string): TxtDiagnosis;
+/** Render the TXT record value for a manifest URL (for operators with DNS). */
+export declare function buildX402TxtRecord(p: {
+    manifestUrl: string;
+    kind?: DiscoveryKind;
+    networks?: string[];
+    schemes?: string[];
+}): string;
+/**
+ * Spec security rule: the wk URL must live on the queried domain or a
+ * subdomain of it — a TXT record may not claim another operator's manifest.
+ */
+/**
+ * A facilitator endpoint value that is safe to concatenate onto baseUrl and
+ * fetch: a rooted relative path only. A leading single "/" makes authority
+ * injection impossible (nothing after "/" reaches the authority component), and
+ * "@", "://", "//" and whitespace/backslash are refused outright. This is the
+ * SYNTACTIC guard; isWkInDomain on the assembled URL is the semantic backstop.
+ */
+export declare function isSafeRelativePath(p: unknown): boolean;
+export declare function isWkInDomain(wkUrl: string, domain: string): boolean;
+/** How far up a consumer may walk. Two ancestors, never below two labels. */
+export declare const MAX_ANCESTOR_STEPS = 2;
+/**
+ * The `_x402` owner names to query for a host, nearest first.
+ *
+ * The FIRST entry is the host itself and is always authoritative for it. Later
+ * entries are ancestors, and a record found at one is only usable if
+ * `manifestCoversHost` accepts it.
+ */
+export declare function discoveryNamesFor(hostOrUrl: string): string[];
+/**
+ * Does a manifest published at `ownerName` speak for `host`?
+ *
+ * Always true when the manifest was found at the host itself. For an ancestor,
+ * the manifest MUST name the host — otherwise a platform's record would vouch
+ * for every tenant under it, which is how a discovery layer manufactures
+ * adopters it does not have.
+ *
+ * Referenced URLs are only counted when they are themselves in-domain of the
+ * owner, so a manifest cannot vouch for a host it does not control either.
+ */
+export declare function manifestCoversHost(m: unknown, ownerName: string, host: string): boolean;
+/**
+ * One structural violation, classified by WHO introduced the requirement.
+ *
+ * The distinction is the point. A host that fails only on `introducedBy:
+ * 'x402-discovery'` is one mechanical edit from compliant; a host failing a
+ * 'core' rule has a different problem. Reporting them identically is what
+ * makes adoption look like a wall instead of an afternoon.
+ */
+export interface ManifestViolation {
+    field: string;
+    message: string;
+    introducedBy: 'x402-discovery' | 'core';
+}
+/**
+ * Collect EVERY structural violation instead of stopping at the first.
+ *
+ * Why this exists (Melchiorre Oliva on PR #2979, 2026-08-18): our resolver
+ * refused his manifest with `invalid kind: undefined` and read nothing else.
+ * Everything else in the record was valid, but a first-throw validator cannot
+ * say so — the operator learns one field per debugging round-trip and has no
+ * way to tell "one edit away" from "fundamentally wrong". He measured 383
+ * hosts (39.5% of those serving a manifest) violating nothing except fields
+ * this extension introduces. That population is invisible unless a resolver
+ * reports the whole diagnosis and says which requirements are new.
+ *
+ * The GATE ITSELF IS UNCHANGED: resolveX402 still refuses a manifest that
+ * fails any rule. Strict enforcement, generous diagnostics.
+ */
+export declare function diagnoseManifest(m: unknown): {
+    ok: boolean;
+    violations: ManifestViolation[];
+};
+/**
+ * True when a manifest's ONLY problems are requirements this extension
+ * introduced — i.e. it was a valid x402 manifest before this spec and is one
+ * mechanical edit from valid after it. This is the population worth counting
+ * when anyone asks what the extension costs deployed hosts.
+ */
+export declare function isOneEditAway(m: unknown): boolean;
+/** Structural validation per the spec. Throws with a reason on failure. */
+export declare function validateManifest(m: unknown): DiscoveryManifest;
+/** Spec cap: entries beyond this are ignored (and worth flagging). */
+export declare const MAX_PEER_HINTS = 32;
+/**
+ * Filter a manifest's `peers` array down to entries a consumer may act on:
+ * bare multi-label DNS names — no scheme, path, port, or userinfo, no IP
+ * literals, not the manifest's own domain — capped at MAX_PEER_HINTS.
+ * Everything dropped is returned as a signal, mirroring droppedResources.
+ */
+export declare function sanitizePeers(raw: unknown, ownDomain: string): {
+    peers: string[];
+    dropped: string[];
+};
+/** True for addresses no discovery fetch should ever connect to:
+ *  loopback, link-local, RFC1918/ULA private ranges, unspecified. */
+export declare function isPrivateAddress(ip: string): boolean;
+export type LookupImpl = (hostname: string) => Promise<string[]>;
+export interface ResolveResult {
+    manifest: DiscoveryManifest;
+    manifestUrl: string;
+    via: 'dns-txt' | 'well-known';
+    txtRecord?: X402TxtRecord;
+    /** Live GET {baseUrl}{endpoints.supported} result (authoritative over manifest kinds). */
+    liveKinds?: SupportedKind[];
+    /** True when live kinds and manifest kinds agree (spec: divergence = misconfiguration). */
+    kindsMatchLive?: boolean;
+    /**
+     * Outcome of the live cross-check, EXPLICIT so "not checked" can never be
+     * read as "checked and matched":
+     *   ok          — fetched, kinds[] present, kindsMatchLive is meaningful
+     *   skipped     — skipLiveCheck, or no facilitator block
+     *   unreachable — non-2xx, redirect, timeout, size breach, or bad JSON
+     *   malformed   — 2xx but no kinds[] array to compare
+     *   refused     — the endpoint was not a safe same-origin path
+     */
+    liveCheck?: 'ok' | 'skipped' | 'unreachable' | 'malformed' | 'refused';
+    /**
+     * Resource URLs removed because they pointed off-domain or weren't
+     * HTTPS. NON-EMPTY IS A SIGNAL, not noise: the spec invites indexers
+     * to probe `resources[]`, so an off-domain entry is an attempt to
+     * aim a stranger's crawler somewhere. Surface it; don't just drop it.
+     */
+    droppedResources?: string[];
+    /**
+     * Peer hints that survived sanitizePeers — names only, each still to
+     * be resolved from scratch. Never act on a peer without re-resolving.
+     */
+    peers?: string[];
+    /** Peer entries dropped by sanitizePeers. Non-empty is a manifest-quality signal. */
+    droppedPeers?: string[];
+    /**
+     * False whenever an `attestation` block cannot be independently checked
+     * (absent, `type: none`, or no dereferenceable HTTPS verifier URL).
+     * Consumers MUST treat a false value as "not attested" — the spec's
+     * "absent verification, treat as `none`" rule, made machine-readable so
+     * a caller can't accidentally believe an unverifiable claim.
+     */
+    attestationUsable?: boolean;
+}
+export type NegativeReason = 'no-record' | 'unreachable' | 'invalid';
+export declare const NEGATIVE_TTL_MS: Readonly<Record<NegativeReason, number>>;
+export declare class X402NegativeCacheError extends Error {
+    readonly reason: NegativeReason;
+    readonly cachedMessage: string;
+    constructor(reason: NegativeReason, cachedMessage: string, domain: string);
+}
+/** Drop cached negatives — tests, and operator triage after a fix. */
+export declare function clearDiscoveryCache(domain?: string): void;
+/** Inspect the cache without mutating it (observability, tests). */
+export declare function discoveryCacheEntry(domain: string, now?: number): {
+    reason: NegativeReason;
+    message: string;
+    expiresInMs: number;
+} | null;
+/**
+ * Resolve a domain's x402 capability per the spec:
+ * TXT `_x402.<domain>` → manifest URL, else `https://<domain>/.well-known/x402`;
+ * then cross-check the facilitator's live `supported` endpoint.
+ */
+export declare function resolveX402(domain: string, opts?: {
+    fetchImpl?: typeof fetch;
+    resolveTxt?: (name: string) => Promise<string[][]>;
+    skipLiveCheck?: boolean;
+    /**
+     * Address resolution for the private-destination guard. Defaults to
+     * real DNS when using the real `fetch`; when a fetchImpl is injected
+     * (tests, transports that resolve internally) the guard runs only if
+     * a lookupImpl is supplied — a fake fetch makes real DNS both
+     * meaningless and a hidden network dependency.
+     */
+    lookupImpl?: LookupImpl;
+    /** Skip the negative cache for this call (forced refresh). */
+    noCache?: boolean;
+    /** Override negative TTLs (tests, aggressive crawlers). */
+    negativeTtlMs?: Partial<Record<NegativeReason, number>>;
+    /** Injectable clock so TTL expiry is testable without waiting. */
+    now?: () => number;
+}): Promise<ResolveResult>;
+//# sourceMappingURL=discovery.d.ts.map

package/dist/discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../src/discovery.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;GAWG;AAIH,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,iBAAiB,GAAG,MAAM,CAAC;AAEvE,MAAM,WAAW,aAAa;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE;QACV,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QACjE,KAAK,EAAE,aAAa,EAAE,CAAC;QACvB,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC;KAC7B,CAAC;IACF,SAAS,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACrE,mGAAmG;IACnG,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,WAAW,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IACrD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC1B,CAAC,EAAE,MAAM,CAAC;IACV,EAAE,EAAE,MAAM,CAAC;IACX,CAAC,CAAC,EAAE,aAAa,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAMD;;;;GAIG;AACH;;;;;;;GAOG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;CAAG;AAEhD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAwCpE;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,MAAM,YAAY,GAClB;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE;AAC/C,4CAA4C;GAC1C;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AACxC,kEAAkE;GAChE;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE;AAC9D,+DAA+D;GAC7D;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC;AAK1B,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,CA6C/D;AAED,+EAA+E;AAC/E,wBAAgB,kBAAkB,CAAC,CAAC,EAAE;IAClC,WAAW,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACtF,GAAG,MAAM,CAMT;AAED;;;GAGG;AACH;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAKtD;AAiDD,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CASnE;AAgCD,6EAA6E;AAC7E,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAEpC;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAiC7D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CA+BvF;AAID;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,gBAAgB,GAAG,MAAM,CAAC;CAC3C;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,iBAAiB,EAAE,CAAA;CAAE,CAwE7F;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAGjD;AAED,2EAA2E;AAC3E,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,GAAG,iBAAiB,CAa9D;AAWD,sEAAsE;AACtE,eAAO,MAAM,cAAc,KAAK,CAAC;AAIjC;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAoBrG;AAqBD;qEACqE;AACrE,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAcpD;AAED,MAAM,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AA2FjE,MAAM,WAAW,aAAa;IAC1B,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,SAAS,GAAG,YAAY,CAAC;IAC9B,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,0FAA0F;IAC1F,SAAS,CAAC,EAAE,aAAa,EAAE,CAAC;IAC5B,2FAA2F;IAC3F,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,IAAI,GAAG,SAAS,GAAG,aAAa,GAAG,WAAW,GAAG,SAAS,CAAC;IACvE;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,qFAAqF;IACrF,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC/B;AA+BD,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,aAAa,GAAG,SAAS,CAAC;AAErE,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAInE,CAAC;AAMH,qBAAa,sBAAuB,SAAQ,KAAK;aACjB,MAAM,EAAE,cAAc;aAAkB,aAAa,EAAE,MAAM;gBAA7D,MAAM,EAAE,cAAc,EAAkB,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAI5G;AAaD,sEAAsE;AACtE,wBAAgB,mBAAmB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAGzD;AAED,oEAAoE;AACpE,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,SAAa,GAChE;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAI1E;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;IACrD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,8DAA8D;IAC9D,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,2DAA2D;IAC3D,aAAa,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IACxD,kEAAkE;IAClE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACtB,GAAG,OAAO,CAAC,aAAa,CAAC,CAiQzB"}