@astrasyncai/verification-gateway 3.2.0 → 3.3.0

package/dist/adapters/express.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/access-levels.ts","../../src/version.ts","../../src/well-known.ts","../../src/verify.ts","../../src/transport/http.ts","../../src/adapters/http-pdlss.ts","../../src/pdlss-pre-check.ts","../../src/adapters/express.ts"],"sourcesContent":["/**\n * AstraSync Universal Verification Gateway - Access Level Definitions\n *\n * Defines the hierarchy and capabilities of each access level.\n *\n * v2.3.9 (defect #30): renamed `'guidance'` band → `'restricted'`. See\n * `types.ts` AccessLevel for the rationale (value-name collision with the\n * `guidance: {...}` help-payload object on VerificationResult).\n */\n\nimport type { AccessLevel, TrustLevel } from './types';\n\n/**\n * Access level hierarchy (higher number = more access)\n */\nexport const ACCESS_LEVEL_HIERARCHY: Record<AccessLevel, number> = {\n  none: 0,\n  restricted: 1,\n  'read-only': 2,\n  standard: 3,\n  full: 4,\n  internal: 5,\n};\n\n/**\n * Access level descriptions for UI\n */\nexport const ACCESS_LEVEL_DESCRIPTIONS: Record<AccessLevel, string> = {\n  none: 'No access - credentials required',\n  restricted: 'Restricted access - registration prompt only',\n  'read-only': 'Read-only access - can browse but not modify',\n  standard: 'Standard access - normal operations per PDLSS policy',\n  full: 'Full access - all operations for high-trust agents',\n  internal: 'Internal access - organization member privileges',\n};\n\n/**\n * Default trust score thresholds for access levels\n */\nexport const DEFAULT_TRUST_THRESHOLDS: Record<AccessLevel, number> = {\n  none: 0,\n  restricted: 0,\n  'read-only': 20,\n  standard: 40,\n  full: 70,\n  internal: 0, // Internal is based on org membership, not score\n};\n\n/**\n * Trust level score ranges\n */\nexport const TRUST_LEVEL_RANGES: Record<TrustLevel, { min: number; max: number }> = {\n  BRONZE: { min: 0, max: 39 },\n  SILVER: { min: 40, max: 59 },\n  GOLD: { min: 60, max: 79 },\n  PLATINUM: { min: 80, max: 100 },\n};\n\n/**\n * Determine trust level from score\n */\nexport function getTrustLevel(score: number): TrustLevel {\n  if (score >= 80) return 'PLATINUM';\n  if (score >= 60) return 'GOLD';\n  if (score >= 40) return 'SILVER';\n  return 'BRONZE';\n}\n\n/**\n * Check if access level A is greater than or equal to access level B.\n *\n * @deprecated 3.2.0 — the access-level band is informational only and no\n * longer gates in the middleware adapters (post-3.1.0 feedback #1). Retained\n * for explicit opt-in queries and back-compat. Prefer the server-side policy\n * decision (identity + policy + trust) or per-route `minTrustScore`.\n */\nexport function hasMinimumAccess(actual: AccessLevel, required: AccessLevel): boolean {\n  return ACCESS_LEVEL_HIERARCHY[actual] >= ACCESS_LEVEL_HIERARCHY[required];\n}\n\n/**\n * Get the highest access level for a given trust score\n */\nexport function getAccessLevelForScore(\n  trustScore: number,\n  thresholds: Record<AccessLevel, number> = DEFAULT_TRUST_THRESHOLDS\n): AccessLevel {\n  if (trustScore >= thresholds.full) return 'full';\n  if (trustScore >= thresholds.standard) return 'standard';\n  if (trustScore >= thresholds['read-only']) return 'read-only';\n  return 'restricted';\n}\n\n/**\n * Determine access level from verification result.\n *\n * v2.3.9 (defect #30): unverified callers now return `'none'` (was\n * `'guidance'`). Denials grant zero — never a positive band.\n */\nexport function determineAccessLevel(\n  verified: boolean,\n  trustScore: number,\n  isOrgMember: boolean,\n  customThresholds?: Partial<Record<AccessLevel, number>>\n): AccessLevel {\n  if (!verified) {\n    return 'none';\n  }\n\n  if (isOrgMember) {\n    return 'internal';\n  }\n\n  const thresholds = {\n    ...DEFAULT_TRUST_THRESHOLDS,\n    ...customThresholds,\n  };\n\n  return getAccessLevelForScore(trustScore, thresholds);\n}\n\n/**\n * Access capabilities per level\n */\nexport interface AccessCapabilities {\n  canRead: boolean;\n  canWrite: boolean;\n  canDelete: boolean;\n  canAdmin: boolean;\n  canAccessInternal: boolean;\n  maxTransactionValue?: number;\n  allowedPurposes?: string[];\n}\n\n/**\n * Get capabilities for an access level\n */\nexport function getCapabilities(accessLevel: AccessLevel): AccessCapabilities {\n  switch (accessLevel) {\n    case 'none':\n      return {\n        canRead: false,\n        canWrite: false,\n        canDelete: false,\n        canAdmin: false,\n        canAccessInternal: false,\n      };\n    case 'restricted':\n      return {\n        canRead: false,\n        canWrite: false,\n        canDelete: false,\n        canAdmin: false,\n        canAccessInternal: false,\n      };\n    case 'read-only':\n      return {\n        canRead: true,\n        canWrite: false,\n        canDelete: false,\n        canAdmin: false,\n        canAccessInternal: false,\n      };\n    case 'standard':\n      return {\n        canRead: true,\n        canWrite: true,\n        canDelete: false,\n        canAdmin: false,\n        canAccessInternal: false,\n      };\n    case 'full':\n      return {\n        canRead: true,\n        canWrite: true,\n        canDelete: true,\n        canAdmin: false,\n        canAccessInternal: false,\n      };\n    case 'internal':\n      return {\n        canRead: true,\n        canWrite: true,\n        canDelete: true,\n        canAdmin: true,\n        canAccessInternal: true,\n      };\n    default:\n      return {\n        canRead: false,\n        canWrite: false,\n        canDelete: false,\n        canAdmin: false,\n        canAccessInternal: false,\n      };\n  }\n}\n","/**\n * Round-13 (F14 closure / R13-7): single source-of-truth for the SDK's\n * package version emitted on verify-access bodies (and any future\n * telemetry). Bumped alongside `package.json#version` on every release.\n *\n * Why a constant rather than `import pkg from '../package.json'`:\n * - `tsconfig.json` sets `rootDir: ./src`; importing the sibling\n *   package.json fails the build with \"outside rootDir\".\n * - Build-time string replacement (tsup `define`, esbuild banner, etc.)\n *   adds toolchain coupling for a trivial gain.\n * - Embedded readonly constant works in every environment (Node, browser,\n *   bundlers, Deno) without runtime fs / network access.\n *\n * Release discipline: a CI lint can grep `package.json#version` against\n * this constant if the two ever diverge in the wild. Round-13 manual bump\n * is fine — bumping both in the release-ceremony commit keeps them\n * lockstep.\n */\nexport const SDK_VERSION = '3.2.0';\n","/**\n * SDK-side discovery of canonical platform URLs via `/.well-known/agentic-commerce`.\n *\n * Fire-and-forget pre-fetch at middleware creation; first verify() awaits\n * the in-flight promise if it hasn't resolved. 60-minute TTL with\n * stale-while-revalidate background refresh.\n */\n\nexport interface WellKnownAgenticCommerce {\n  registrationUrl: string;\n  documentationUrl: string;\n  verifyAccessUrl: string;\n}\n\ninterface CacheEntry {\n  data: WellKnownAgenticCommerce;\n  fetchedAt: number;\n}\n\nconst CACHE_TTL_MS = 60 * 60 * 1000; // 60 minutes\n\nconst cache = new Map<string, CacheEntry>();\nconst inflight = new Map<string, Promise<WellKnownAgenticCommerce>>();\n\nfunction wellKnownUrl(apiBaseUrl: string): string {\n  // apiBaseUrl is typically 'https://astrasync.ai/api' — strip the /api suffix\n  // to get the platform root, then append /.well-known/agentic-commerce.\n  const base = apiBaseUrl.replace(/\\/api\\/?$/, '');\n  return `${base}/.well-known/agentic-commerce`;\n}\n\nasync function fetchWellKnown(apiBaseUrl: string): Promise<WellKnownAgenticCommerce> {\n  const url = wellKnownUrl(apiBaseUrl);\n  const response = await fetch(url, {\n    method: 'GET',\n    headers: { Accept: 'application/json' },\n    signal: AbortSignal.timeout(5000),\n  });\n  if (!response.ok) {\n    throw new Error(\n      `AstraSync platform must expose /.well-known/agentic-commerce; ` +\n        `got ${response.status} from ${url}. SDK cannot initialise without it.`\n    );\n  }\n  const data = (await response.json()) as Record<string, unknown>;\n  if (!data.registrationUrl || !data.documentationUrl || !data.verifyAccessUrl) {\n    throw new Error(\n      `/.well-known/agentic-commerce response missing required fields ` +\n        `(registrationUrl, documentationUrl, verifyAccessUrl).`\n    );\n  }\n  return data as unknown as WellKnownAgenticCommerce;\n}\n\n/**\n * Start a background fetch. Returns the promise for callers that need\n * to await it (first verify() call).\n */\nexport function prefetchWellKnown(apiBaseUrl: string): Promise<WellKnownAgenticCommerce> {\n  const existing = inflight.get(apiBaseUrl);\n  if (existing) return existing;\n\n  const promise = fetchWellKnown(apiBaseUrl)\n    .then((data) => {\n      cache.set(apiBaseUrl, { data, fetchedAt: Date.now() });\n      inflight.delete(apiBaseUrl);\n      return data;\n    })\n    .catch((err) => {\n      inflight.delete(apiBaseUrl);\n      throw err;\n    });\n\n  inflight.set(apiBaseUrl, promise);\n  return promise;\n}\n\n/**\n * Get cached well-known URLs. If stale, triggers a background refresh\n * and returns stale data (stale-while-revalidate). If no cache exists,\n * awaits the in-flight fetch or starts a new one.\n */\nexport async function getWellKnownUrls(apiBaseUrl: string): Promise<WellKnownAgenticCommerce> {\n  const entry = cache.get(apiBaseUrl);\n\n  if (entry) {\n    if (Date.now() - entry.fetchedAt > CACHE_TTL_MS) {\n      // Stale — trigger background refresh, return stale data\n      prefetchWellKnown(apiBaseUrl).catch(() => {\n        // Background refresh failed — stale data remains until next request\n      });\n    }\n    return entry.data;\n  }\n\n  // No cache — must await\n  const pending = inflight.get(apiBaseUrl);\n  if (pending) return pending;\n\n  return prefetchWellKnown(apiBaseUrl);\n}\n\n/**\n * Synchronous cache read — returns cached URLs or undefined.\n * Never triggers a fetch. Used by verify() to avoid extra HTTP calls\n * in the hot path; adapters are responsible for prefetching.\n */\nexport function getCachedWellKnownUrls(apiBaseUrl: string): WellKnownAgenticCommerce | undefined {\n  return cache.get(apiBaseUrl)?.data;\n}\n\n/** Reset cache — for testing only. */\nexport function _resetWellKnownCache(): void {\n  cache.clear();\n  inflight.clear();\n}\n","/**\n * AstraSync Universal Verification Gateway - Core Verification Logic\n *\n * This module handles the core verification logic, calling the AstraSync API\n * and processing the response into a standardized VerificationResult.\n */\n\nimport type {\n  GatewayConfig,\n  AgentCredentials,\n  VerificationRequest,\n  VerificationResult,\n  VerifiedAgent,\n  VerifiedDeveloper,\n  VerifiedOrganization,\n  GuidanceInfo,\n  AccessLevel,\n  EnhancedVerificationResult,\n  TokenGuidance,\n  RuntimeChallengeResult,\n} from './types';\nimport { getTrustLevel } from './access-levels';\nimport { SDK_VERSION } from './version';\nimport { getCachedWellKnownUrls, type WellKnownAgenticCommerce } from './well-known';\n\n/**\n * Default configuration values\n *\n * apiBaseUrl matches the OpenAPI authoritative server (https://astrasync.ai/api\n * for prod, https://staging.astrasync.ai/api for staging). Always include the\n * /api path prefix when overriding — registration / docs URLs are derived by\n * stripping it.\n */\nconst DEFAULT_CONFIG: Partial<GatewayConfig> = {\n  apiBaseUrl: 'https://astrasync.ai/api',\n  // v2.3.9 (defect #30): default for unconfigured callers is `'none'` (no\n  // access). Pre-rename this defaulted to `'guidance'`, which combined with\n  // a route gated at `'guidance'` to silently let unverified traffic\n  // through (`hasMinimumAccess('guidance', 'guidance') === true`).\n  defaultAccessLevel: 'none',\n  // minTrustScore + minTrustScoreForFull deprecated in v2.3.0 — server decides.\n  // Round-18.5 F4: cacheTtl deliberately unset. When undefined, cacheResult\n  // applies the split default (60s autonomous / 300s step-up). When the\n  // caller sets cacheTtl explicitly, that value is honoured uniformly.\n  // Set cacheTtl: 0 to disable caching entirely.\n  debug: false,\n};\n\n/**\n * Init self-test state. Fires once per process on first verify() call to warn\n * if apiBaseUrl is pointing at the wrong host (e.g. a marketing site that\n * 200s with text/html instead of the API).\n */\nlet initCheckPerformed = false;\n\n/** One-shot guard for v2.3.0 deprecation warning. */\nlet deprecationWarningShown = false;\n\nasync function performInitCheck(\n  apiBaseUrl: string,\n  debug?: boolean,\n  strictInit?: boolean\n): Promise<void> {\n  initCheckPerformed = true;\n  try {\n    const probeUrl = `${apiBaseUrl}/agents/verify-access`;\n    // HEAD mirrors GET semantics (running the full request pipeline without a\n    // body) so the response carries the same content-type the marketing 404\n    // would return. OPTIONS often gets short-circuited by CORS-preflight\n    // handlers and returns no content-type, defeating the check.\n    const response = await fetch(probeUrl, { method: 'HEAD' });\n    const contentType = response.headers.get('content-type') ?? '';\n    if (contentType.startsWith('text/html')) {\n      const message =\n        `[VerificationGateway] apiBaseUrl '${apiBaseUrl}' returned HTML (content-type: ${contentType}). ` +\n        `This usually means apiBaseUrl is pointing at a marketing site instead of the API. ` +\n        `Expected: 'https://astrasync.ai/api' (prod) or 'https://staging.astrasync.ai/api' (staging).`;\n      // Audit F-A6-33: when strictInit is set, throw on misconfig instead\n      // of warning + continuing. Recurring footgun per\n      // `[[feedback_astrasync_api_url_canonical]]` — silent warn lets\n      // misconfigured prod deploys ship with all verify-access calls\n      // silently failing.\n      if (strictInit) {\n        throw new Error(`${message} (strictInit=true)`);\n      }\n      console.warn(`${message} Set disableInitChecks: true on GatewayConfig to silence.`);\n    } else if (debug) {\n      console.log(\n        `[VerificationGateway] init check passed for ${apiBaseUrl} (content-type: ${contentType})`\n      );\n    }\n  } catch (err) {\n    if (strictInit) {\n      // strict mode propagates init failures so callers get a clear,\n      // synchronous \"your config is broken\" signal at startup.\n      throw err;\n    }\n    if (debug) {\n      console.log(`[VerificationGateway] init check failed (non-blocking): ${String(err)}`);\n    }\n  }\n}\n\n/**\n * Simple in-memory cache for verification results\n */\nconst verificationCache = new Map<string, { result: VerificationResult; expiresAt: number }>();\n\n/**\n * Generate cache key from the full request shape.\n *\n * Round-18.5 F4: pre-fix the key was credentials-only (`astraId-apiKey-jwt`),\n * which silently returned the cached result of a prior call even when the\n * subsequent call's purpose/action/counterparty/etc. differed. That was a\n * security gap — a warm cache could serve an allow verdict for a purpose the\n * agent hadn't actually been authorised for. Key now includes every field\n * that affects the backend verdict.\n *\n * MAINTAIN: when adding a field to VerificationRequest that affects the\n * backend verdict, add it to this key. Fields that don't affect verdict\n * (e.g. requestId, timestamps, sdkVersion) don't belong here — including\n * them would needlessly thrash the cache for repeated identical requests.\n */\nfunction getCacheKey(request: VerificationRequest, counterpartyId?: string): string {\n  const c = request.credentials;\n  return [\n    c.astraId || '',\n    c.apiKey || '',\n    c.jwt || '',\n    request.purpose || '',\n    request.action || '',\n    request.resourceType || '',\n    request.resource || '',\n    request.jurisdiction || '',\n    request.transactionValue ?? '',\n    request.currency || '',\n    // SECURITY (cross-merchant cache leak): the merchant identity is sent via\n    // `config.counterpartyId`, NOT on the request, so it was previously absent\n    // from the key — two verifies for the SAME agent/purpose/action/value but\n    // DIFFERENT merchants collided, and a grant at a permissive merchant (low\n    // trust floor) was served for a stricter one. Same bug class as the\n    // duration omission (F-A1-07). counterpartyId affects the backend verdict\n    // (trust floor / per-route policy), so it MUST key the cache.\n    counterpartyId || '',\n    request.counterpartyUrl || '',\n    request.counterpartyType || '',\n    request.isSubAgentRequest ? '1' : '0',\n    request.parentAgentId || '',\n    request.subAgentDepth ?? '',\n    // Audit F-A1-07: previously-missing dimensions that DO affect the\n    // backend verdict. Without these, two requests with different\n    // durations (e.g. 60s vs 86400s) collided on the same cache key and\n    // the shorter-duration allow served the longer-duration request.\n    request.durationRequired ?? '',\n    request.invocationProtocol || '',\n    request.enableRuntimeChallenge ? '1' : '0',\n    // callerMetadata fields contribute to risk model; include the ones\n    // backend reads. sourceIp/userAgent/forwardedFor change per-request\n    // so their inclusion effectively forces a re-check for any varying\n    // client (the right behavior — IP-driven anomaly scoring shouldn't\n    // be cached across IPs).\n    request.callerMetadata?.sourceIp || '',\n    request.callerMetadata?.userAgent || '',\n    request.callerMetadata?.forwardedFor || '',\n    request.callerMetadata?.agentCardUrl || '',\n  ].join('|');\n}\n\n/**\n * Check if cached result is still valid\n */\nfunction getCachedResult(\n  request: VerificationRequest,\n  counterpartyId?: string\n): VerificationResult | null {\n  const key = getCacheKey(request, counterpartyId);\n  const cached = verificationCache.get(key);\n\n  if (cached && cached.expiresAt > Date.now()) {\n    return cached.result;\n  }\n\n  if (cached) {\n    verificationCache.delete(key);\n  }\n\n  return null;\n}\n\n/**\n * Cache a verification result.\n *\n * Round-18.5 F4: TTL splits by step-up status when the caller hasn't pinned\n * `configuredTtl` explicitly. Autonomous verdicts cache for 60s (faster\n * policy-update propagation, better security posture); step-up verdicts cache\n * for 300s (matches human-paced approval cycles, prevents thrashing during\n * the user-action window). When `configuredTtl` is set (truthy positive\n * number), it's honoured uniformly for back-compat with partners pinning a\n * specific TTL today.\n */\nconst DEFAULT_AUTONOMOUS_TTL_SECONDS = 60;\nconst DEFAULT_STEP_UP_TTL_SECONDS = 300;\n\nfunction cacheResult(\n  request: VerificationRequest,\n  result: VerificationResult,\n  configuredTtl: number | undefined,\n  counterpartyId?: string\n): void {\n  const ttlSeconds =\n    configuredTtl && configuredTtl > 0\n      ? configuredTtl\n      : result.requiresStepUp\n        ? DEFAULT_STEP_UP_TTL_SECONDS\n        : DEFAULT_AUTONOMOUS_TTL_SECONDS;\n  const key = getCacheKey(request, counterpartyId);\n  verificationCache.set(key, {\n    result,\n    expiresAt: Date.now() + ttlSeconds * 1000,\n  });\n}\n\n/**\n * Clear the verification cache\n */\nexport function clearCache(): void {\n  verificationCache.clear();\n}\n\n/**\n * Extract agent credentials from various sources\n */\nexport function extractCredentials(\n  headers: Record<string, string | string[] | undefined>,\n  query?: Record<string, string | undefined>\n): AgentCredentials {\n  const credentials: AgentCredentials = {};\n\n  // Audit F-A1-12: ASTRA-ID shape validation. Accept only the canonical\n  // pattern (ASTRA-/ASTRAE- prefix + 1-64 url-safe chars) to prevent CRLF\n  // header injection or downstream interpolation surprises. Reject otherwise.\n  const ASTRA_ID_PATTERN = /^ASTRAE?-[A-Za-z0-9_-]{1,64}$/;\n\n  // Check for ASTRA-ID in headers (case-insensitive). Accepts the historical\n  // X-Astra-Id name plus the X-Astra-AgentId / x-astra-agent-id alias the\n  // partner asked for in #9a — both surface the same field.\n  const astraIdHeader =\n    headers['x-astra-id'] ||\n    headers['X-Astra-Id'] ||\n    headers['X-ASTRA-ID'] ||\n    headers['x-astra-agentid'] ||\n    headers['X-Astra-AgentId'] ||\n    headers['x-astra-agent-id'] ||\n    headers['X-Astra-Agent-Id'] ||\n    headers['X-ASTRA-AGENT-ID'];\n  if (astraIdHeader) {\n    // Audit F-A1-11: guard array-confusion. If multiple X-Astra-Id headers\n    // were sent (Express collapses to comma-joined string on most paths),\n    // take only the first canonical-shaped one.\n    const raw = Array.isArray(astraIdHeader)\n      ? astraIdHeader[0]\n      : typeof astraIdHeader === 'string'\n        ? astraIdHeader\n        : undefined;\n    if (typeof raw === 'string' && ASTRA_ID_PATTERN.test(raw)) {\n      credentials.astraId = raw;\n    }\n  }\n\n  // Check for API key in headers\n  const apiKeyHeader = headers['x-api-key'] || headers['X-Api-Key'] || headers['X-API-KEY'];\n  if (apiKeyHeader) {\n    credentials.apiKey = Array.isArray(apiKeyHeader) ? apiKeyHeader[0] : apiKeyHeader;\n  }\n\n  // Check Authorization header for Bearer token.\n  // Audit F-A1-11: defensive type guard — Array.isArray gives a non-string,\n  // and Express path quirks can produce undefined despite the truthy check.\n  const authHeader = headers['authorization'] || headers['Authorization'];\n  if (authHeader) {\n    const authValue = Array.isArray(authHeader) ? authHeader[0] : authHeader;\n    if (typeof authValue === 'string') {\n      credentials.authorizationHeader = authValue;\n      if (authValue.startsWith('Bearer ')) {\n        credentials.jwt = authValue.slice(7);\n      }\n    }\n  }\n\n  // Check query parameters as fallback\n  if (query) {\n    if (query.astraId && !credentials.astraId) {\n      credentials.astraId = query.astraId;\n    }\n    if (query.apiKey && !credentials.apiKey) {\n      credentials.apiKey = query.apiKey;\n    }\n  }\n\n  return credentials;\n}\n\n/**\n * Check if credentials are present\n */\nexport function hasCredentials(credentials: AgentCredentials): boolean {\n  return !!(credentials.astraId || credentials.apiKey || credentials.jwt);\n}\n\n/**\n * Source of a synthesised guidance response. Round-10 split — the\n * `'no_credentials'` shape is the original (caller has no AstraSync\n * credentials, suggest registration). The `'api_error'` shape is for when\n * the verify-access HTTP call itself failed (5xx, network, etc.) — DON'T\n * tell a verified-but-currently-blocked partner to \"register your agent\".\n */\ntype GuidanceSource = 'no_credentials' | 'api_error';\n\n/**\n * Create guidance response for unverified agents or for API-error fallback.\n *\n * Round-10 (#47, O5): split source so the `register your agent` template\n * doesn't fire on transient backend failures. Also threads `correlationId`\n * through so adapter `onDenied` handlers can surface it on the merchant's\n * response body for log correlation.\n */\nfunction createGuidanceResponse(\n  _config: GatewayConfig,\n  reason?: string,\n  options: { source?: GuidanceSource; correlationId?: string; urls?: WellKnownAgenticCommerce } = {}\n): VerificationResult {\n  const source = options.source ?? 'no_credentials';\n  const isApiError = source === 'api_error';\n  const urls = options.urls;\n\n  const guidance: GuidanceInfo = isApiError\n    ? {\n        message:\n          'Verification is temporarily unavailable. Retry with exponential backoff; if the issue persists, contact support with the correlationId.',\n        registrationUrl: urls?.registrationUrl ?? '',\n        documentationUrl: urls?.documentationUrl ?? '',\n        steps: [\n          'Retry the request with exponential backoff',\n          'If failures persist, share the correlationId with support',\n        ],\n      }\n    : {\n        message:\n          'This service verifies AI agents before granting access. Please register your agent with AstraSync.',\n        registrationUrl: urls?.registrationUrl ?? '',\n        documentationUrl: urls?.documentationUrl ?? '',\n        steps: [\n          'Register for an AstraSync account',\n          'Create and register your agent',\n          'Add your ASTRA-ID to request headers',\n          'Retry your request',\n        ],\n      };\n\n  return {\n    // Round-18 G4: createGuidanceResponse fires for unverified-agent path or\n    // API-error fallback. Identity is not verified (no agent resolved);\n    // policy is not evaluated (we never reached the gate).\n    identityVerified: false,\n    policyAllowed: false,\n    // v2.3.9 (defect #30): denials grant `'none'`, NEVER a positive band.\n    // Adapters additionally short-circuit on `!identityVerified ||\n    // !policyAllowed` before the gate check, but the access level still has\n    // to be honest at the data layer so downstream consumers (SDK adapters\n    // in other languages, custom integrations) inherit the correct\n    // semantics.\n    accessLevel: 'none',\n    guidance,\n    denialReasons: reason ? [reason] : ['No valid agent credentials provided'],\n    // Round-10 (#47, O5): on API-error fallback, surface a typed failure so\n    // partners (and their custom onDenied handlers) can branch on\n    // dimension. Without this, the synthesised stub was indistinguishable\n    // from a real policy deny.\n    failures: isApiError\n      ? [\n          {\n            dimension: 'verify_access.api_error',\n            message: reason ?? 'Verification temporarily unavailable',\n            guidance: guidance.message,\n          },\n        ]\n      : undefined,\n    correlationId: options.correlationId,\n    verifiedAt: new Date(),\n  };\n}\n\n/**\n * Call the AstraSync verify-access API\n */\nasync function callVerifyAccessAPI(\n  config: GatewayConfig,\n  request: VerificationRequest\n): Promise<{\n  success: boolean;\n  access?: {\n    allowed: boolean;\n    /**\n     * Server-decided access level. Read verbatim — do NOT remap client-side.\n     * The server resolves this from endpoint policy + agent trust score using\n     * the canonical thresholds (see backend `apps/backend/src/utils/access-levels.ts`).\n     */\n    accessLevel?: AccessLevel;\n    reason?: string;\n    /**\n     * Aggregated denial failures (v2.9.8+). Empty / absent when allowed.\n     * Each entry is `{ dimension, message, guidance? }` — see\n     * `AccessFailure` for the contract.\n     */\n    failures?: Array<{ dimension: string; message: string; guidance?: string }>;\n    requiresStepUp?: boolean;\n    requiresApproval?: boolean;\n    appliedPolicy?: {\n      boundaryName: string;\n      policyVersion: string;\n    };\n    counterparty?: {\n      id: string;\n      name: string;\n      trustScoreRequirement: number;\n    };\n  };\n  agent?: {\n    kyaAgentId: string;\n    astraId: string;\n    name: string;\n    trustScore: number;\n    trustLevel: string;\n    agentStatus: string;\n    blockchainStatus: string;\n  };\n  developer?: {\n    kyaOwnerId: string;\n    fullName: string;\n    email: string;\n    identityVerified: boolean;\n    trustScore: number;\n  };\n  organization?: {\n    name: string;\n    verified: boolean;\n    trustScore: number;\n  };\n  /**\n   * Structured explanation of the verification decision. Tells the merchant\n   * WHY (id verified? challenge passed? request within PDLSS? trust score?)\n   * without exposing thresholds, scope lists, or other-tenant counterparty\n   * membership. Empty `attestations` unless the endpoint's access policy\n   * declared `required_attestations`.\n   */\n  verificationContext?: {\n    idVerified: boolean;\n    runtimeChallenge: {\n      status: 'passed' | 'skipped' | 'failed' | 'timeout' | 'not_supported';\n      checkedAt: string | null;\n    };\n    pdlssCheck: {\n      result: 'within' | 'exceeded' | 'denied' | 'not_evaluated';\n      purpose: 'approved' | 'denied';\n      scope: 'approved' | 'denied';\n    };\n    dynamicTrustScore: number;\n    attestations: Array<{\n      type: string;\n      status: 'passed' | 'failed';\n      validUntil?: string;\n      proofType: 'reference' | 'zkp';\n      proof: string;\n    }>;\n  };\n  error?: string;\n  /**\n   * Round-10 (#47, O5): when the verify-access server response carries a\n   * correlationId on an error envelope, propagate it so the SDK can thread\n   * it through createGuidanceResponse → adapter onDenied → merchant body.\n   */\n  correlationId?: string;\n}> {\n  const { credentials, ...requestData } = request;\n\n  // Build the request body. agentId is omitted when not provided so the\n  // server treats it as an anonymous canonical-flow call (Branch A/B/C).\n  const body: Record<string, unknown> = {\n    ...(credentials.astraId && { agentId: credentials.astraId }),\n    ...(requestData.purpose && { purpose: requestData.purpose }),\n  };\n\n  // Add optional fields\n  if (requestData.action) body.action = requestData.action;\n  if (requestData.resourceType) body.resourceType = requestData.resourceType;\n  if (requestData.resource) body.resource = requestData.resource;\n  if (requestData.jurisdiction) body.jurisdiction = requestData.jurisdiction;\n  if (requestData.transactionValue) body.transactionValue = requestData.transactionValue;\n  if (requestData.currency) body.currency = requestData.currency;\n  if (requestData.isSubAgentRequest) body.isSubAgentRequest = requestData.isSubAgentRequest;\n  if (requestData.parentAgentId) body.parentAgentId = requestData.parentAgentId;\n  if (requestData.subAgentDepth !== undefined) body.subAgentDepth = requestData.subAgentDepth;\n  // Handshake Protocol v10 additions\n  if (requestData.enableRuntimeChallenge)\n    body.enableRuntimeChallenge = requestData.enableRuntimeChallenge;\n  if (requestData.createSession) body.createSession = requestData.createSession;\n  if (requestData.durationRequired) body.durationRequired = requestData.durationRequired;\n  if (requestData.counterpartyType) body.counterpartyType = requestData.counterpartyType;\n  if (requestData.counterpartyUrl) body.counterpartyUrl = requestData.counterpartyUrl;\n  if (config.counterpartyId) body.counterpartyId = config.counterpartyId;\n  if (requestData.runtimeChallengeOptions)\n    body.runtimeChallengeOptions = requestData.runtimeChallengeOptions;\n  // Round-12 (F19): transport-vs-intent separation. MCP middleware sets\n  // this to 'mcp'; non-MCP callers leave it unset.\n  if (requestData.invocationProtocol) body.invocationProtocol = requestData.invocationProtocol;\n\n  // Round-13 (F14 closure / R13-7): emit the SDK package version on every\n  // verify-access body so the backend can auto-populate `kya_counterparty.\n  // sdk_version` for the calling endpoint. Body field (not User-Agent\n  // header) is the canonical channel — works in Node, browser, behind\n  // Cloudflare, and across SDK bundlers without environment-specific\n  // header gymnastics. Backend's `validation.ts:verifyAccessSchema`\n  // accepts the semver regex; the auto-pop logic is forward-only.\n  body.sdkVersion = SDK_VERSION;\n\n  // Forward caller metadata when present. Merges the legacy top-level\n  // clientIp/userAgent into the nested block for backward compatibility.\n  if (requestData.callerMetadata || requestData.clientIp || requestData.userAgent) {\n    const meta = {\n      ...(requestData.clientIp && { sourceIp: requestData.clientIp }),\n      ...(requestData.userAgent && { userAgent: requestData.userAgent }),\n      ...requestData.callerMetadata,\n    };\n    if (Object.keys(meta).length > 0) body.callerMetadata = meta;\n  }\n\n  // Build headers\n  const headers: Record<string, string> = {\n    'Content-Type': 'application/json',\n    ...config.customHeaders,\n  };\n\n  // verify-access requires authentication. Use ONLY the merchant's\n  // configured apiKey for outbound auth. Previously the caller's inbound\n  // Authorization header took priority, which pivoted the verify-access\n  // call to the caller's identity — letting an attacker who supplied\n  // their own Authorization header trigger verify-access calls under\n  // THEIR account and observe the resulting verdicts for arbitrary\n  // lookups they triggered via the merchant. Audit F-A1-10.\n  //\n  // The caller-supplied JWT (if any) is already extracted to\n  // credentials.jwt and travels in the verify-access request body so\n  // backend can evaluate it as the agent's identity claim — separate from\n  // the merchant-attribution auth on the outbound HTTPS call.\n  if (config.apiKey) {\n    headers['Authorization'] = `Bearer ${config.apiKey}`;\n    // Legacy header kept for compatibility with any middleware that reads it directly.\n    headers['X-API-Key'] = config.apiKey;\n  }\n\n  try {\n    const response = await fetch(`${config.apiBaseUrl}/agents/verify-access`, {\n      method: 'POST',\n      headers,\n      body: JSON.stringify(body),\n    });\n\n    const data = await response.json();\n\n    // v2.3.8 (defect #29): treat 410 Gone as a deterministic deactivated-endpoint\n    // signal. Older SDKs may treat any non-2xx as transient and retry; v2.3.8+\n    // surfaces it as a structured denial with `reason: 'endpoint_deactivated'`\n    // so callers can distinguish \"endpoint gone\" from \"endpoint denied this\".\n    if (response.status === 410) {\n      return {\n        success: true,\n        access: {\n          allowed: false,\n          accessLevel: 'none',\n          reason: 'endpoint_deactivated',\n          failures: [\n            {\n              dimension: 'endpoint.deactivated',\n              message:\n                typeof data?.message === 'string' ? data.message : 'Endpoint has been deactivated',\n              guidance:\n                typeof data?.guidance === 'string'\n                  ? data.guidance\n                  : 'Reactivate via POST /api/endpoints/{id}/reactivate, or update the URL on the calling agent.',\n            },\n          ],\n        },\n      };\n    }\n\n    if (!response.ok) {\n      // Round-10 (#47, O5): propagate correlationId on the error path too if\n      // the server happened to include one (some 5xx error envelopes carry\n      // it). Lets the SDK pass it through to the adapter onDenied handler.\n      return {\n        success: false,\n        error: data.message || data.error || `API returned ${response.status}`,\n        correlationId: typeof data?.correlationId === 'string' ? data.correlationId : undefined,\n      };\n    }\n\n    return data;\n  } catch (error) {\n    const message = error instanceof Error ? error.message : 'Unknown error';\n    return {\n      success: false,\n      error: `Failed to call verify-access API: ${message}`,\n    };\n  }\n}\n\n/**\n * Main verification function\n */\nexport async function verify(\n  config: GatewayConfig,\n  request: VerificationRequest\n): Promise<VerificationResult> {\n  const mergedConfig = { ...DEFAULT_CONFIG, ...config };\n\n  // v2.5.0: read well-known URLs from cache (prefetched by adapter at middleware creation).\n  // Synchronous — never triggers a fetch. If cache is empty, guidance URLs are empty strings.\n  const urls = mergedConfig.apiBaseUrl\n    ? getCachedWellKnownUrls(mergedConfig.apiBaseUrl)\n    : undefined;\n\n  // One-time init self-test — fire-and-forget by default, never blocks verify().\n  // Audit F-A6-33: when GatewayConfig.strictInit is set, the init promise is\n  // awaited and any failure throws synchronously so callers learn about\n  // misconfigured apiBaseUrl on the first verify() call rather than silently\n  // running with broken auth.\n  if (!initCheckPerformed && !mergedConfig.disableInitChecks && mergedConfig.apiBaseUrl) {\n    if (mergedConfig.strictInit) {\n      await performInitCheck(mergedConfig.apiBaseUrl, mergedConfig.debug, true);\n    } else {\n      void performInitCheck(mergedConfig.apiBaseUrl, mergedConfig.debug, false);\n    }\n  }\n\n  // Deprecation warning for v2.3.0 removed config fields. Fires once per process.\n  if (\n    !deprecationWarningShown &&\n    (config.minTrustScore !== undefined || config.minTrustScoreForFull !== undefined)\n  ) {\n    deprecationWarningShown = true;\n    console.warn(\n      '[VerificationGateway] minTrustScore / minTrustScoreForFull are deprecated in v2.3.0 ' +\n        'and have no effect. Server is now the single source of truth for access-level decisions ' +\n        '(the SDK reads access.accessLevel from the verify-access response). To gate access ' +\n        \"to an endpoint, configure the endpoint's trust_score_requirement server-side.\"\n    );\n  }\n\n  // v2.3.0: anonymous traffic no longer short-circuits here. We forward the\n  // request to the server with no agentId; the server applies the endpoint's\n  // unverifiedAgentPolicy and returns advisory. createGuidanceResponse remains\n  // as the offline fallback if the API itself fails (handled below).\n\n  // Check cache first. Round-18.5 F4: caching on unless caller explicitly\n  // sets cacheTtl: 0 to disable. Undefined falls through to the split default\n  // (60s autonomous / 300s step-up) at cacheResult write time.\n  if (mergedConfig.cacheTtl !== 0) {\n    const cached = getCachedResult(request, mergedConfig.counterpartyId);\n    if (cached) {\n      if (mergedConfig.debug) {\n        console.log('[VerificationGateway] Returning cached result');\n      }\n      return cached;\n    }\n  }\n\n  // Inject counterparty info from config if not already set in request\n  const enrichedRequest = { ...request };\n  if (!enrichedRequest.counterpartyUrl && mergedConfig.counterpartyUrl) {\n    enrichedRequest.counterpartyUrl = mergedConfig.counterpartyUrl;\n  }\n  if (!enrichedRequest.counterpartyType && mergedConfig.counterpartyType) {\n    enrichedRequest.counterpartyType = mergedConfig.counterpartyType;\n  }\n\n  // Call the API\n  if (mergedConfig.debug) {\n    console.log('[VerificationGateway] Calling verify-access API');\n  }\n\n  const apiResponse = await callVerifyAccessAPI(mergedConfig, enrichedRequest);\n\n  // Handle API errors\n  if (!apiResponse.success) {\n    // Round-10 (#47, O5): distinguish API errors from missing-credentials.\n    // The previous default tagged any failure with the \"register your\n    // agent\" template, which is misleading to a verified partner whose\n    // verify-access call hit a 500. The `api_error` source surfaces a\n    // typed `verify_access.api_error` failure entry instead.\n    return createGuidanceResponse(mergedConfig, apiResponse.error, {\n      source: 'api_error',\n      correlationId: (apiResponse as { correlationId?: string }).correlationId,\n      urls,\n    });\n  }\n\n  // Check access result\n  if (!apiResponse.access?.allowed) {\n    // v2.9.8 (defect M1): aggregated failures across every gate that\n    // denied. Surface them on the result so the integrator can see every\n    // blocker in one go instead of the previous fail-fast cascade.\n    const aggregatedFailures = (apiResponse.access as Record<string, unknown> | undefined)\n      ?.failures as Array<{ dimension: string; message: string; guidance?: string }> | undefined;\n    // Round-18 G4: backend denied access (PDLSS or other gate); identity status\n    // depends on whether the backend resolved the caller. Read from\n    // verificationContext.idVerified; default false if absent (anonymous or\n    // identity-fail paths land here too). policyAllowed is false by definition\n    // in this branch (apiResponse.access.allowed === false).\n    const idVerifiedFromBackend =\n      (apiResponse.verificationContext as { idVerified?: boolean } | undefined)?.idVerified ===\n      true;\n    const result: EnhancedVerificationResult = {\n      identityVerified: idVerifiedFromBackend,\n      policyAllowed: false,\n      // v2.3.9 (defect #30): denials grant `'none'`, NEVER a positive band.\n      // Pre-rename this hardcoded `'guidance'`, which conflated with the\n      // colocated `guidance: {...}` help-payload object below and let\n      // denied requests pass any route gated at `'guidance'` because\n      // `hasMinimumAccess('guidance', 'guidance') === true`. Adapters now\n      // ALSO short-circuit on `!identityVerified || !policyAllowed` before\n      // the gate check — belt-and-braces.\n      accessLevel: 'none',\n      denialReasons:\n        aggregatedFailures && aggregatedFailures.length > 0\n          ? aggregatedFailures.map((f) => f.message)\n          : apiResponse.access?.reason\n            ? [apiResponse.access.reason]\n            : ['Access denied'],\n      failures: aggregatedFailures,\n      requiresStepUp: apiResponse.access?.requiresStepUp,\n      requiresApproval: apiResponse.access?.requiresApproval,\n      guidance: {\n        message: apiResponse.access?.reason || 'Access denied by PDLSS policy',\n        registrationUrl: urls?.registrationUrl ?? '',\n        documentationUrl: urls?.documentationUrl ?? '',\n      },\n      verifiedAt: new Date(),\n      // Extract sessionId so decisions can be recorded for denials too\n      sessionId: (apiResponse as Record<string, unknown>).sessionId as string | undefined,\n      // Anonymous traffic has no session → correlationId is the per-attempt\n      // linking key (the sessionId-equivalent for anonymous callers).\n      correlationId: (apiResponse as Record<string, unknown>).correlationId as string | undefined,\n      recommendation: (apiResponse as Record<string, unknown>)\n        .recommendation as EnhancedVerificationResult['recommendation'],\n      recommendationReasons: (apiResponse as Record<string, unknown>).recommendationReasons as\n        | string[]\n        | undefined,\n    };\n\n    return result;\n  }\n\n  // Build successful result\n  const agent: VerifiedAgent | undefined = apiResponse.agent\n    ? {\n        astraId: apiResponse.agent.astraId,\n        name: apiResponse.agent.name,\n        trustScore: apiResponse.agent.trustScore,\n        trustLevel: getTrustLevel(apiResponse.agent.trustScore),\n        blockchainVerified: apiResponse.agent.blockchainStatus === 'verified',\n        status: apiResponse.agent.agentStatus as VerifiedAgent['status'],\n      }\n    : undefined;\n\n  const developer: VerifiedDeveloper | undefined = apiResponse.developer\n    ? {\n        astradId: apiResponse.developer.kyaOwnerId,\n        name: apiResponse.developer.fullName,\n        trustScore: apiResponse.developer.trustScore || 0,\n        verified: apiResponse.developer.identityVerified,\n      }\n    : undefined;\n\n  const organization: VerifiedOrganization | undefined = apiResponse.organization\n    ? {\n        name: apiResponse.organization.name,\n        verified: apiResponse.organization.verified,\n        trustScore: apiResponse.organization.trustScore,\n      }\n    : undefined;\n\n  // Verification context — structured \"why\" the merchant gets in v2.2.4+.\n  // Carries appliedPolicy (no UUIDs), pdlssCheck summary, dynamic trust score,\n  // and policy-driven attestations. Replaces the old over-sharing `pdlss` block.\n  const verificationContext = apiResponse.verificationContext;\n\n  // Server is the single source of truth for access level. SDK reads\n  // apiResponse.access.accessLevel verbatim — no client-side trust-score remap.\n  // Fallback to 'standard' if the server response is missing the field (older\n  // backend without the v2.3.0 contract); it covers the verified-access case.\n  const accessLevel: AccessLevel = apiResponse.access?.accessLevel ?? 'standard';\n\n  const result: EnhancedVerificationResult = {\n    // Round-18 G4: backend allowed access. Identity is verified (we resolved\n    // the caller to an agent) and policy passed all gates. Read idVerified\n    // from verificationContext for symmetry with the deny branch; default true\n    // on success path since `access.allowed === true` implies identity was\n    // resolvable (anonymous-allow paths flow through createGuidanceResponse).\n    identityVerified:\n      (apiResponse.verificationContext as { idVerified?: boolean } | undefined)?.idVerified !==\n      false,\n    policyAllowed: true,\n    accessLevel,\n    agent,\n    developer,\n    organization,\n    appliedPolicy: apiResponse.access?.appliedPolicy,\n    verificationContext,\n    requiresStepUp: apiResponse.access?.requiresStepUp,\n    requiresApproval: apiResponse.access?.requiresApproval,\n    verifiedAt: new Date(),\n    cacheTtl: mergedConfig.cacheTtl,\n    // Handshake Protocol v10 enhanced fields (present when backend returns them)\n    sessionId: (apiResponse as Record<string, unknown>).sessionId as string | undefined,\n    // v2.3.10 (defect #34, round-4): anonymous responses surface correlationId\n    // (no session row exists for unverified callers).\n    correlationId: (apiResponse as Record<string, unknown>).correlationId as string | undefined,\n    runtimeChallenge: (apiResponse as Record<string, unknown>).runtimeChallenge as\n      | RuntimeChallengeResult\n      | undefined,\n    tokenGuidance: (apiResponse as Record<string, unknown>).tokenGuidance as\n      | TokenGuidance\n      | undefined,\n    recommendation: (apiResponse as Record<string, unknown>)\n      .recommendation as EnhancedVerificationResult['recommendation'],\n    recommendationReasons: (apiResponse as Record<string, unknown>).recommendationReasons as\n      | string[]\n      | undefined,\n    warningHeader: (apiResponse as Record<string, unknown>).warningHeader as\n      | { name: string; value: string }\n      | undefined,\n  };\n\n  // Enforce AstraSync recommendation\n  if (result.recommendation === 'deny') {\n    // Round-18 G4: recommendation-driven deny lands on the success-path\n    // construction (identity was resolved). Flip policy only — identity stays\n    // verified — so adapters return 403 (re-auth won't help; the policy\n    // decision is the blocker).\n    result.policyAllowed = false;\n    result.accessLevel = 'none';\n    result.denialReasons = result.recommendationReasons || [\n      'Access denied by AstraSync recommendation',\n    ];\n    result.guidance = result.runtimeChallenge\n      ? {\n          message: `Verification failed: ${result.runtimeChallenge.reason || 'runtime challenge failed'}`,\n          registrationUrl: urls?.registrationUrl ?? '',\n          documentationUrl: urls?.documentationUrl ?? '',\n        }\n      : {\n          message: result.recommendationReasons?.[0] || 'Access denied by AstraSync recommendation',\n          registrationUrl: urls?.registrationUrl ?? '',\n          documentationUrl: urls?.documentationUrl ?? '',\n        };\n  } else if (result.recommendation === 'step_up_required') {\n    // 3.2.0 (post-3.1.0 feedback): do NOT overwrite accessLevel to 'read-only'\n    // here. The prior masquerade manufactured a phantom trust-band cap that\n    // looked like a low-trust ceiling when the real signal is \"step-up\n    // required\" — it caused a downstream misdiagnosis. Leave the real band\n    // intact (informational) and let `requiresStepUp` carry the signal.\n    result.requiresStepUp = true;\n    result.denialReasons = result.recommendationReasons || ['Step-up verification required'];\n  }\n\n  // Cache the result (skip caching denials — agent may fix challenge endpoint\n  // and retry). Round-18.5 F4: cacheResult applies split default (60s/300s)\n  // when configuredTtl is undefined; honours the caller's value when set.\n  if (mergedConfig.cacheTtl !== 0 && result.recommendation !== 'deny') {\n    cacheResult(request, result, mergedConfig.cacheTtl, mergedConfig.counterpartyId);\n  }\n\n  return result;\n}\n\n/**\n * Record a counterparty's grant/deny decision for a verification session.\n * Fire-and-forget — errors are silently swallowed.\n */\nexport async function recordDecision(\n  config: GatewayConfig,\n  sessionId: string,\n  decision: 'granted' | 'denied',\n  reason?: string\n): Promise<void> {\n  const headers: Record<string, string> = { 'Content-Type': 'application/json' };\n  if (config.apiKey) {\n    headers['Authorization'] = `Bearer ${config.apiKey}`;\n    headers['X-API-Key'] = config.apiKey;\n  }\n\n  await fetch(`${config.apiBaseUrl}/agents/verify-access/${sessionId}/decision`, {\n    method: 'POST',\n    headers,\n    body: JSON.stringify({ decision, reason }),\n  }).catch(() => {\n    /* fire-and-forget */\n  });\n}\n\n/**\n * Fetch the per-route policy for an endpoint from the AstraSync backend.\n * v2.9.7 moved policy authority into the dashboard — the SDK no longer\n * accepts `routes` from merchant-side source code, it fetches them from\n * here on init (and refreshes periodically).\n *\n * Returns `null` when the request fails for any reason — the caller decides\n * how to fall back (the middleware allows-all when no policy is loaded so\n * a misconfigured init doesn't take down the merchant's API).\n */\nexport async function fetchRoutes(\n  config: GatewayConfig,\n  counterpartyId: string\n): Promise<RouteAccessConfigShape[] | null> {\n  if (!counterpartyId) return null;\n  const headers: Record<string, string> = { 'Content-Type': 'application/json' };\n  if (config.apiKey) {\n    headers['Authorization'] = `Bearer ${config.apiKey}`;\n    headers['X-API-Key'] = config.apiKey;\n  }\n  try {\n    const response = await fetch(\n      `${config.apiBaseUrl}/endpoints/${encodeURIComponent(counterpartyId)}/routes`,\n      { method: 'GET', headers }\n    );\n    if (!response.ok) return null;\n    const body = (await response.json()) as { data?: { routes?: RouteAccessConfigShape[] } };\n    return body.data?.routes ?? [];\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Minimal shape of an EndpointRoute as the SDK consumes it. Mirrors the\n * server's `EndpointRoute` type and the SDK's `RouteAccessConfig` — same\n * JSON moves between server and SDK unchanged.\n */\nexport interface RouteAccessConfigShape {\n  pattern: string;\n  method: string;\n  /** @deprecated 3.2.0 — band no longer gates; optional, ignored. Use minTrustScore. */\n  minAccessLevel?: 'none' | 'restricted' | 'read-only' | 'standard' | 'full' | 'internal';\n  minTrustScore?: number;\n  requiredPurposes?: string[];\n  allowedPurposes?: string[];\n  allowedJurisdictions?: string[];\n  maxDuration?: number;\n  maxTransactionValue?: number;\n  requirePurpose?: boolean;\n  /** Send-mapping (Bug 14, §4.6) — see RouteAccessConfig in types.ts. */\n  purpose?: string;\n  action?: string;\n}\n\n/**\n * Verify an agent AND automatically record the grant/deny decision.\n *\n * This is the recommended entry point for counterparties that call verify()\n * directly (e.g. MCP servers) rather than using createMiddleware().\n * It adds createSession: true, then fire-and-forgets the decision.\n */\nexport async function verifyAndRecord(\n  config: GatewayConfig,\n  request: VerificationRequest\n): Promise<VerificationResult> {\n  const mergedConfig = { ...DEFAULT_CONFIG, ...config };\n  const result = await verify(mergedConfig, { ...request, createSession: true });\n  const sessionId = (result as EnhancedVerificationResult).sessionId;\n\n  if (sessionId) {\n    // Round-18 G4: a session is \"granted\" only if identity verified AND\n    // policy allowed; either failing is a deny.\n    if (result.identityVerified && result.policyAllowed) {\n      recordDecision(mergedConfig, sessionId, 'granted').catch(() => {});\n    } else {\n      recordDecision(mergedConfig, sessionId, 'denied', result.denialReasons?.[0]).catch(() => {});\n    }\n  }\n\n  return result;\n}\n\n/**\n * Report an unregistered agent attempt (no AstraSync credentials).\n * Called by SDK adapters when an agent is redirected to /docs/agent-access.\n * Fire-and-forget — errors are silently swallowed.\n */\nexport async function reportUnregisteredAttempt(\n  config: GatewayConfig,\n  data: {\n    counterpartyUrl: string;\n    counterpartyType?: string;\n    sourceIp?: string;\n    userAgent?: string;\n    requestPath?: string;\n    requestMethod?: string;\n  }\n): Promise<void> {\n  const apiBaseUrl = config.apiBaseUrl || DEFAULT_CONFIG.apiBaseUrl!;\n\n  await fetch(`${apiBaseUrl}/verification-activity/unregistered-attempt`, {\n    method: 'POST',\n    headers: { 'Content-Type': 'application/json' },\n    body: JSON.stringify(data),\n  }).catch(() => {\n    /* fire-and-forget */\n  });\n}\n\n/**\n * Report a counterparty-side PDLSS pre-check failure.\n * Called by SDK adapters when the agent's requested PDLSS exceeds\n * counterparty-defined maximums BEFORE calling verify-access.\n * Fire-and-forget — errors are silently swallowed.\n */\nexport async function reportCounterpartyPreCheckFailure(\n  config: GatewayConfig,\n  data: {\n    agentId: string;\n    counterpartyUrl: string;\n    counterpartyType?: string;\n    failures: Array<{\n      field: string;\n      requested: string | number;\n      limit: string | number | string[];\n      message: string;\n    }>;\n    requestPath?: string;\n    requestMethod?: string;\n  }\n): Promise<void> {\n  const apiBaseUrl = config.apiBaseUrl || DEFAULT_CONFIG.apiBaseUrl!;\n\n  await fetch(`${apiBaseUrl}/verification-activity/counterparty-pre-check-failure`, {\n    method: 'POST',\n    headers: { 'Content-Type': 'application/json' },\n    body: JSON.stringify(data),\n  }).catch(() => {\n    /* fire-and-forget */\n  });\n}\n\n/**\n * Quick verification — checks credentials and policy in one call.\n *\n * Round-18 G4: return shape mirrors `VerificationResult`'s split — partners\n * writing custom handlers around `quickVerify` get the same identity/policy\n * distinction as those calling `verify()` directly. Map to HTTP status the\n * same way: `!identityVerified` → 401; `identityVerified && !policyAllowed`\n * → 403.\n */\nexport async function quickVerify(\n  config: GatewayConfig,\n  credentials: AgentCredentials\n): Promise<{\n  identityVerified: boolean;\n  policyAllowed: boolean;\n  accessLevel: AccessLevel;\n  reason?: string;\n}> {\n  const result = await verify(config, {\n    credentials,\n    purpose: 'verification',\n  });\n\n  return {\n    identityVerified: result.identityVerified,\n    policyAllowed: result.policyAllowed,\n    accessLevel: result.accessLevel,\n    reason: result.denialReasons?.[0],\n  };\n}\n","/**\n * HTTP Transport Adapter\n *\n * Maps AstraSync credentials to/from HTTP headers (X-Astra-* convention).\n */\n\nimport type { AstraSyncCredentials } from '../types';\n\nconst HEADER_PREFIX = 'X-Astra-';\n\n/**\n * Inject AstraSync credentials into HTTP headers.\n */\nexport function setHttpHeaders(\n  headers: Record<string, string>,\n  credentials: AstraSyncCredentials\n): Record<string, string> {\n  const result = { ...headers };\n\n  result[`${HEADER_PREFIX}ID`] = credentials.agentId;\n\n  if (credentials.verifyUrl) {\n    result[`${HEADER_PREFIX}Verify`] = credentials.verifyUrl;\n  }\n\n  if (credentials.challengeUrl) {\n    result[`${HEADER_PREFIX}Challenge`] = credentials.challengeUrl;\n  }\n\n  if (credentials.pdlss?.purpose) {\n    // 3.1.0 (Bug 14, §4.6): the action ALSO travels on its own dedicated\n    // header so new-SDK receivers get the clean two-axis pair. The colon\n    // form below is kept as the back-compat channel — pre-3.1.0 receivers\n    // split on ':' and take the category prefix.\n    const purposeValue = credentials.pdlss.purpose.action\n      ? `${credentials.pdlss.purpose.category}:${credentials.pdlss.purpose.action}`\n      : credentials.pdlss.purpose.category;\n    result[`${HEADER_PREFIX}Purpose`] = purposeValue;\n    if (credentials.pdlss.purpose.action) {\n      result[`${HEADER_PREFIX}Action`] = credentials.pdlss.purpose.action;\n    }\n  }\n\n  if (credentials.pdlss?.duration?.maxSessionDuration) {\n    result[`${HEADER_PREFIX}Duration`] = String(credentials.pdlss.duration.maxSessionDuration);\n  }\n\n  if (credentials.pdlss?.scope?.jurisdiction) {\n    result[`${HEADER_PREFIX}Scope`] = credentials.pdlss.scope.jurisdiction;\n  }\n\n  return result;\n}\n\n/**\n * Extract AstraSync credentials from HTTP headers.\n */\nexport function extractHttpCredentials(\n  headers: Record<string, string | string[] | undefined>\n): AstraSyncCredentials | null {\n  const getValue = (key: string): string | undefined => {\n    const v = headers[key] ?? headers[key.toLowerCase()];\n    return Array.isArray(v) ? v[0] : v;\n  };\n\n  const agentId = getValue(`${HEADER_PREFIX}ID`) ?? getValue('x-astra-id');\n  if (!agentId) return null;\n\n  const credentials: AstraSyncCredentials = { agentId };\n\n  const verifyUrl = getValue(`${HEADER_PREFIX}Verify`) ?? getValue('x-astra-verify');\n  if (verifyUrl) credentials.verifyUrl = verifyUrl;\n\n  const challengeUrl = getValue(`${HEADER_PREFIX}Challenge`) ?? getValue('x-astra-challenge');\n  if (challengeUrl) credentials.challengeUrl = challengeUrl;\n\n  const purpose = getValue(`${HEADER_PREFIX}Purpose`) ?? getValue('x-astra-purpose');\n  if (purpose) {\n    const [category, action] = purpose.split(':');\n    credentials.pdlss = {\n      ...credentials.pdlss,\n      purpose: { category, action },\n    };\n  }\n\n  // 3.1.0 (Bug 14, §4.6): dedicated action header — overrides any colon-form\n  // remainder parsed above (the dedicated header is the canonical channel).\n  const astraAction = getValue(`${HEADER_PREFIX}Action`) ?? getValue('x-astra-action');\n  if (astraAction) {\n    credentials.pdlss = {\n      ...credentials.pdlss,\n      purpose: { category: credentials.pdlss?.purpose?.category ?? '', action: astraAction },\n    };\n  }\n\n  const duration = getValue(`${HEADER_PREFIX}Duration`) ?? getValue('x-astra-duration');\n  if (duration) {\n    credentials.pdlss = {\n      ...credentials.pdlss,\n      duration: { maxSessionDuration: parseInt(duration, 10) },\n    };\n  }\n\n  const scope = getValue(`${HEADER_PREFIX}Scope`) ?? getValue('x-astra-scope');\n  if (scope) {\n    credentials.pdlss = {\n      ...credentials.pdlss,\n      scope: { jurisdiction: scope },\n    };\n  }\n\n  return credentials;\n}\n","/**\n * Shared purpose/action resolver for the HTTP adapters (express + nextjs) —\n * vocabulary-unification round (Bug 14, adapter-spec §4.6).\n *\n * The PDLSS two-axis contract: `purpose` = bare category noun (`shopping`,\n * `data`, custom nouns like `trading`); `action` = dotted verb\n * (`shopping.search`) or an enumerated transport token. Transport verbs\n * (GET/POST/...) NEVER travel as PDLSS actions — they map through the pinned\n * method table below.\n *\n * SELF-CONTAINED on purpose: this published package cannot depend on the\n * private @astrasyncai/pdlss-vocab workspace package, so the constants are\n * duplicated here and pinned strictly equal by a monorepo CI test\n * (vocab-equality.test.ts). Change them in BOTH places or that test fails.\n */\n\n/** Pinned method→action derivation table (§4.6). */\nexport const HTTP_METHOD_ACTION_TABLE: Readonly<Record<string, string>> = {\n  GET: 'data.read',\n  HEAD: 'data.read',\n  OPTIONS: 'data.read',\n  POST: 'data.write',\n  PUT: 'data.write',\n  PATCH: 'data.write',\n  DELETE: 'data.delete',\n};\n\n/** Unknown methods are treated as mutating until proven otherwise. */\nexport const DEFAULT_HTTP_ACTION = 'data.write';\n\n/** Generic category emitted when nothing supplies a domain purpose. */\nexport const DEFAULT_HTTP_PURPOSE = 'data';\n\nexport function actionForHttpMethod(method: string): string {\n  return HTTP_METHOD_ACTION_TABLE[method.toUpperCase()] ?? DEFAULT_HTTP_ACTION;\n}\n\nexport type HttpPurposeSource =\n  | 'route_config'\n  | 'custom_extractor'\n  | 'header'\n  | 'legacy_header'\n  | 'query'\n  | 'action_derived'\n  | 'transport_default';\n\nexport type HttpActionSource =\n  | 'route_config'\n  | 'custom_extractor'\n  | 'header'\n  | 'purpose_header_derived'\n  | 'method_table';\n\nexport interface HttpPdlssInput {\n  method: string;\n  /** `X-Astra-Purpose` header value (agent's declaration). */\n  astraPurpose?: string;\n  /** `X-Astra-Action` header value (agent's declaration, symmetric with MCP). */\n  astraAction?: string;\n  /** Legacy `x-purpose` header — deprecated, removal scheduled for 4.0.0. */\n  legacyPurpose?: string;\n  /** Legacy `?purpose` query param (express only) — deprecated, removal 4.0.0. */\n  queryPurpose?: string;\n  /** Dashboard route config send-mapping (RouteAccessConfig.purpose/.action). */\n  routePurpose?: string;\n  routeAction?: string;\n  /** Results of the merchant's extractPurpose/extractAction options. */\n  customPurpose?: string;\n  hasCustomPurposeExtractor?: boolean;\n  customAction?: string;\n  hasCustomActionExtractor?: boolean;\n}\n\nexport interface HttpPdlssResolution {\n  purpose: string;\n  action: string;\n  purposeSource: HttpPurposeSource;\n  actionSource: HttpActionSource;\n}\n\n/**\n * Normalize an `X-Astra-Purpose` header value.\n *  - colon form `\"category:action\"` (legacy wire shape): take the prefix; the\n *    remainder is free-text and exists in no vocabulary — discard it and let\n *    the method table supply the action (matches pre-3.1.0 discard behavior).\n *  - dotted form `\"shopping.purchase\"` (the shape older docs taught): prefix\n *    becomes the purpose, the WHOLE token becomes an action candidate.\n *  - bare token: purpose verbatim.\n */\nexport function normalizePurposeHeader(value: string): {\n  purpose: string;\n  actionCandidate?: string;\n} {\n  const colon = value.indexOf(':');\n  if (colon >= 0) {\n    return { purpose: value.slice(0, colon) };\n  }\n  const dot = value.indexOf('.');\n  if (dot > 0 && dot < value.length - 1) {\n    return { purpose: value.slice(0, dot), actionCandidate: value };\n  }\n  return { purpose: value };\n}\n\n/**\n * Resolve the {purpose, action} pair for one HTTP request.\n *\n * Precedence (both axes; §4.6):\n *   action:  route mapping → extractAction option → X-Astra-Action header →\n *            candidate from a dotted X-Astra-Purpose → pinned method table\n *   purpose: route mapping → extractPurpose option → X-Astra-Purpose →\n *            legacy x-purpose / ?purpose → category prefix of the resolved\n *            action → 'data'\n *\n * A configured custom extractor masks the header/legacy/query steps of its\n * axis (it replaces the default chain, as extractPurpose always has); when it\n * returns undefined the axis falls through to the table/prefix fallback.\n * The route mapping is merchant policy fetched from the dashboard — it\n * outranks agent-supplied headers the way MCP toolGates do.\n */\nexport function resolveHttpPdlss(input: HttpPdlssInput): HttpPdlssResolution {\n  const fromHeader = input.astraPurpose ? normalizePurposeHeader(input.astraPurpose) : undefined;\n\n  // ── Action axis ──\n  let action: string;\n  let actionSource: HttpActionSource;\n  if (input.routeAction) {\n    action = input.routeAction;\n    actionSource = 'route_config';\n  } else if (input.hasCustomActionExtractor && input.customAction) {\n    action = input.customAction;\n    actionSource = 'custom_extractor';\n  } else if (!input.hasCustomActionExtractor && input.astraAction) {\n    action = input.astraAction;\n    actionSource = 'header';\n  } else if (!input.hasCustomActionExtractor && fromHeader?.actionCandidate) {\n    action = fromHeader.actionCandidate;\n    actionSource = 'purpose_header_derived';\n  } else {\n    action = actionForHttpMethod(input.method);\n    actionSource = 'method_table';\n  }\n\n  // ── Purpose axis ──\n  let purpose: string | undefined;\n  let purposeSource: HttpPurposeSource | undefined;\n  if (input.routePurpose) {\n    purpose = input.routePurpose;\n    purposeSource = 'route_config';\n  } else if (input.hasCustomPurposeExtractor) {\n    if (input.customPurpose) {\n      purpose = input.customPurpose;\n      purposeSource = 'custom_extractor';\n    }\n  } else if (fromHeader) {\n    purpose = fromHeader.purpose;\n    purposeSource = 'header';\n  } else if (input.legacyPurpose) {\n    purpose = input.legacyPurpose;\n    purposeSource = 'legacy_header';\n  } else if (input.queryPurpose) {\n    purpose = input.queryPurpose;\n    purposeSource = 'query';\n  }\n\n  if (!purpose) {\n    // Keep the pair coherent: an agent that sent only X-Astra-Action (or a\n    // route that mapped only the action) gets that action's own category.\n    const dot = action.indexOf('.');\n    if (dot > 0) {\n      purpose = action.slice(0, dot);\n      purposeSource = 'action_derived';\n    } else {\n      purpose = DEFAULT_HTTP_PURPOSE;\n      purposeSource = 'transport_default';\n    }\n  }\n\n  return { purpose, action, purposeSource: purposeSource!, actionSource };\n}\n","/**\n * Counterparty-side PDLSS pre-check.\n *\n * Compares the agent's requested PDLSS dimensions (from X-Astra-* headers)\n * against the counterparty-defined maximums on the route config.\n * Returns an array of failures — empty means all checks passed.\n *\n * This runs BEFORE calling verify-access on AstraSync. If it fails,\n * the request is rejected immediately without calling the platform.\n */\n\nimport type { RouteAccessConfig, AstraSyncCredentials, CounterpartyPreCheckFailure } from './types';\n\nexport function performCounterpartyPreCheck(\n  routeConfig: RouteAccessConfig,\n  astraCreds: AstraSyncCredentials | null,\n  purpose: string | undefined\n): CounterpartyPreCheckFailure[] {\n  const failures: CounterpartyPreCheckFailure[] = [];\n\n  // Check purpose against allowedPurposes whitelist. Route allow-lists are an\n  // OPTIONAL per-route refinement — undefined/empty = \"skip, let the backend\n  // evaluator be the authoritative gate\". The backend's PDLSS evaluator\n  // enforces the agent's own declared policy (round-18.5 F3 fail-closed there\n  // is correct: the agent declared its allowlist or didn't). Treating an\n  // undefined route allow-list as fail-closed breaks every partner that hasn't\n  // enumerated allowedPurposes (which is most of them — round-18.5 originally\n  // shipped this and was reverted in 2.4.11 after partner-wide auth break).\n  if (routeConfig.allowedPurposes && routeConfig.allowedPurposes.length > 0 && purpose) {\n    if (!routeConfig.allowedPurposes.includes(purpose)) {\n      failures.push({\n        field: 'purpose',\n        requested: purpose,\n        limit: routeConfig.allowedPurposes,\n        message: `Purpose \"${purpose}\" is not in the allowed list: [${routeConfig.allowedPurposes.join(', ')}]`,\n      });\n    }\n  }\n\n  // Check purpose against requiredPurposes (legacy field — agent must declare one of these)\n  if (routeConfig.requiredPurposes && routeConfig.requiredPurposes.length > 0 && purpose) {\n    if (!routeConfig.requiredPurposes.includes(purpose)) {\n      failures.push({\n        field: 'purpose',\n        requested: purpose,\n        limit: routeConfig.requiredPurposes,\n        message: `Purpose \"${purpose}\" is not in the required list: [${routeConfig.requiredPurposes.join(', ')}]`,\n      });\n    }\n  }\n\n  // Check duration against maxDuration — range-check (unchanged; undefined =\n  // no upper bound is conventional for opt-in range fields, not a request-\n  // driven allow-list).\n  if (routeConfig.maxDuration && astraCreds?.pdlss?.duration?.maxSessionDuration) {\n    const requested = astraCreds.pdlss.duration.maxSessionDuration;\n    if (requested > routeConfig.maxDuration) {\n      failures.push({\n        field: 'duration',\n        requested,\n        limit: routeConfig.maxDuration,\n        message: `Requested duration ${requested}s exceeds maximum ${routeConfig.maxDuration}s`,\n      });\n    }\n  }\n\n  // Check jurisdiction against allowedJurisdictions. Same reasoning as\n  // allowedPurposes above — route allow-lists are an optional per-route\n  // refinement; undefined/empty = skip and defer to the backend evaluator.\n  if (\n    routeConfig.allowedJurisdictions &&\n    routeConfig.allowedJurisdictions.length > 0 &&\n    astraCreds?.pdlss?.scope?.jurisdiction\n  ) {\n    const requested = astraCreds.pdlss.scope.jurisdiction;\n    if (!routeConfig.allowedJurisdictions.includes(requested)) {\n      failures.push({\n        field: 'jurisdiction',\n        requested,\n        limit: routeConfig.allowedJurisdictions,\n        message: `Jurisdiction \"${requested}\" is not in the allowed list: [${routeConfig.allowedJurisdictions.join(', ')}]`,\n      });\n    }\n  }\n\n  return failures;\n}\n","/**\n * AstraSync Universal Verification Gateway - Express Middleware\n *\n * Express.js middleware for verifying AI agents on API endpoints.\n *\n * @example\n * ```typescript\n * import express from 'express';\n * import { createMiddleware } from '@astrasyncai/verification-gateway/express';\n *\n * const app = express();\n *\n * app.use(createMiddleware({\n *   apiBaseUrl: 'https://astrasync.ai/api',\n *   routes: [\n *     { pattern: '/api/public/*', method: '*', minAccessLevel: 'none' },\n *     { pattern: '/api/data/*', method: 'GET', minAccessLevel: 'read-only' },\n *     { pattern: '/api/data/*', method: '*', minAccessLevel: 'standard' },\n *     { pattern: '/api/admin/*', method: '*', minAccessLevel: 'internal' },\n *   ],\n * }));\n * ```\n */\n\nimport type { Request, Response, NextFunction, RequestHandler } from 'express';\nimport type {\n  ExpressMiddlewareOptions,\n  AgentCredentials,\n  VerificationResult,\n  EnhancedVerificationResult,\n  RouteAccessConfig,\n  AstraSyncCredentials,\n} from '../types';\nimport {\n  verify,\n  extractCredentials,\n  recordDecision,\n  reportCounterpartyPreCheckFailure,\n  fetchRoutes,\n} from '../verify';\nimport { extractHttpCredentials } from '../transport/http';\nimport { resolveHttpPdlss, type HttpPdlssResolution } from './http-pdlss';\nimport { performCounterpartyPreCheck } from '../pdlss-pre-check';\nimport { prefetchWellKnown, getWellKnownUrls } from '../well-known';\n\n/**\n * Extend Express Request with verification result\n */\ndeclare global {\n  // eslint-disable-next-line @typescript-eslint/no-namespace\n  namespace Express {\n    interface Request {\n      agentVerification?: VerificationResult;\n    }\n  }\n}\n\n/**\n * Default credential extractor\n */\nfunction defaultExtractCredentials(req: Request): AgentCredentials {\n  return extractCredentials(\n    req.headers as Record<string, string | string[] | undefined>,\n    req.query as Record<string, string | undefined>\n  );\n}\n\n/**\n * Extract extended AstraSync credentials (X-Astra-* headers) from Express request.\n * Returns null if no AstraSync headers are present.\n */\nexport function extractAstraSyncCredentials(req: Request): AstraSyncCredentials | null {\n  return extractHttpCredentials(req.headers as Record<string, string | string[] | undefined>);\n}\n\n/** Read a possibly-array header value as a single string. */\nfunction headerValue(value: string | string[] | undefined): string | undefined {\n  if (typeof value === 'string') return value;\n  if (Array.isArray(value)) return value[0];\n  return undefined;\n}\n\n/**\n * Resolve the canonical {purpose, action} pair for a request (Bug 14, §4.6).\n * Replaces the gen-1 `defaultExtractPurpose` method-inference (`read_data`/\n * `write_data`) and the hardwired `action: req.method.toUpperCase()` — the\n * transport verb never travels as a PDLSS action. Full precedence chains\n * live in http-pdlss.ts.\n */\nfunction resolveRequestPdlss(\n  req: Request,\n  routeConfig: { purpose?: string; action?: string } | null,\n  customExtractPurpose: ((req: Request) => string | undefined) | undefined,\n  customExtractAction: ((req: Request) => string | undefined) | undefined\n): HttpPdlssResolution {\n  return resolveHttpPdlss({\n    method: req.method,\n    astraPurpose: headerValue(req.headers['x-astra-purpose']),\n    astraAction: headerValue(req.headers['x-astra-action']),\n    legacyPurpose: headerValue(req.headers['x-purpose'] ?? req.headers['X-Purpose']),\n    queryPurpose: typeof req.query.purpose === 'string' ? req.query.purpose : undefined,\n    routePurpose: routeConfig?.purpose,\n    routeAction: routeConfig?.action,\n    hasCustomPurposeExtractor: !!customExtractPurpose,\n    customPurpose: customExtractPurpose?.(req),\n    hasCustomActionExtractor: !!customExtractAction,\n    customAction: customExtractAction?.(req),\n  });\n}\n\n/**\n * Match a route pattern against a path.\n *\n * Audit F-A6-31 (round-18.6.5 Finding #1 from astrasync.shop): the SDK's\n * matchRoute was case-sensitive while Express's default `case sensitive\n * routing` is FALSE. A customer policy `/api/admin/*` did NOT match\n * `/api/ADMIN/users` → SDK returned `no-match` → request passed ungated →\n * Express routed it to the admin handler. The case-insensitive codepath\n * below closes the bypass.\n *\n * Ships in SHADOW MODE in SDK 2.4.13: by default the case-sensitive\n * regex is still authoritative; the case-insensitive variant is\n * computed in parallel and logged when results diverge. Follow-up\n * release flips the default to case-insensitive after 1-week\n * observation. Customers can flip early by setting\n * `caseInsensitiveRouteMatch: true` on the middleware options.\n */\nfunction matchRoute(\n  pattern: string,\n  path: string,\n  opts?: { caseInsensitive?: boolean; correlationId?: string; logShadowDivergence?: boolean }\n): boolean {\n  // Convert pattern to regex\n  const regexPattern = pattern.replace(/\\*/g, '.*').replace(/\\//g, '\\\\/');\n\n  const caseSensitiveRegex = new RegExp(`^${regexPattern}$`);\n  const caseSensitiveResult = caseSensitiveRegex.test(path);\n\n  if (!opts?.caseInsensitive && !opts?.logShadowDivergence) {\n    return caseSensitiveResult;\n  }\n\n  const caseInsensitiveRegex = new RegExp(`^${regexPattern}$`, 'i');\n  const caseInsensitiveResult = caseInsensitiveRegex.test(path);\n\n  // Shadow logging: emit only when results diverge so operators can grep\n  // their own logs for the bypass class without log volume spam.\n  if (opts?.logShadowDivergence && caseSensitiveResult !== caseInsensitiveResult) {\n    // eslint-disable-next-line no-console\n    console.warn(\n      `[SHADOW] matchRoute case-insensitive would change result: pattern=${pattern} path=${path} ` +\n        `caseSensitive=${caseSensitiveResult} caseInsensitive=${caseInsensitiveResult} correlationId=${opts.correlationId ?? 'unknown'}`\n    );\n  }\n\n  return opts?.caseInsensitive ? caseInsensitiveResult : caseSensitiveResult;\n}\n\n/**\n * Find the route configuration for a request\n */\nfunction findRouteConfig(\n  routes: RouteAccessConfig[],\n  path: string,\n  method: string,\n  opts?: { caseInsensitive?: boolean; correlationId?: string; logShadowDivergence?: boolean }\n): RouteAccessConfig | undefined {\n  return routes.find((route) => {\n    const methodMatches =\n      route.method === '*' || route.method.toUpperCase() === method.toUpperCase();\n    const pathMatches = matchRoute(route.pattern, path, opts);\n    return methodMatches && pathMatches;\n  });\n}\n\n/**\n * Default denied handler\n *\n * Round-10 (#47, O5): the response body now carries the full `failures[]`\n * array and the `correlationId` so partners can render per-dimension UX\n * and tie a denial back to a server log line. Previously the merchant only\n * got the first denialReason — meaningful detail was thrown away before\n * the response left the SDK. Also stamps `X-Astra-Gateway-Mode: enforced`\n * so partners can tell a gate-evaluated denial apart from a gate-skipped\n * pass-through (#49/O10 — the `unenforced` complement).\n */\nfunction dedupeFailures(result: VerificationResult): void {\n  if (result.failures && result.failures.length > 1) {\n    const seen = new Set<string>();\n    result.failures = result.failures.filter((f) => {\n      const key = `${f.dimension}|${f.message}|${(f as { guidance?: string }).guidance ?? ''}`;\n      if (seen.has(key)) return false;\n      seen.add(key);\n      return true;\n    });\n  }\n  if (result.denialReasons && result.denialReasons.length > 1) {\n    result.denialReasons = [...new Set(result.denialReasons)];\n  }\n}\n\nfunction defaultOnDenied(result: VerificationResult, _req: Request, res: Response): void {\n  // Round-18 G4: identity-verification failures → 401 (re-authenticate);\n  // identity-verified-but-policy-denied → 403 (re-auth won't help; update\n  // PDLSS scope or escalate to step-up). Maps to the two distinct recovery\n  // actions that HTTP middleware acts on without parsing bodies. The\n  // impossible state `!identityVerified && policyAllowed` falls into the\n  // `!identityVerified` branch — identity is the more-fundamental missing\n  // precondition.\n  const statusCode = !result.identityVerified ? 401 : 403;\n\n  res.setHeader('X-Astra-Gateway-Mode', 'enforced');\n\n  res.status(statusCode).json({\n    success: false,\n    error: {\n      code: !result.identityVerified ? 'UNAUTHORIZED' : 'INSUFFICIENT_ACCESS',\n      message: result.denialReasons?.[0] || 'Access denied',\n      accessLevel: result.accessLevel,\n      guidance: result.guidance,\n      // Round-10: aggregated per-dimension detail + correlation handle.\n      failures: result.failures,\n      correlationId: result.correlationId,\n    },\n  });\n}\n\n/**\n * Refresh interval for the remote-fetched route policy. Default: every 5\n * minutes. Override via `routesRefreshMs` on the middleware options. Each\n * middleware instance keeps its own cache; multiple instances pointing at the\n * same endpoint will each fetch independently.\n */\nconst DEFAULT_ROUTES_REFRESH_MS = 5 * 60 * 1000;\n\n/**\n * Create Express middleware for agent verification.\n *\n * v2.9.7 moved per-route policy authority out of merchant-side source code\n * into the AstraSync dashboard. `createMiddleware` no longer accepts a\n * `routes` array — it fetches the endpoint's stored policy via\n * `GET /endpoints/:counterpartyId/routes` on init and refreshes\n * periodically. Policy edits in the dashboard take effect on the next\n * refresh (or sooner if the operator manually restarts the SDK).\n *\n * `counterpartyId` is required: the SDK can't know which endpoint's policy\n * to fetch without it. Local-development workflows that don't have an\n * AstraSync endpoint registered can omit it — the middleware logs a\n * one-time warning and falls through (allows all) until a policy is\n * fetchable.\n */\nexport function createMiddleware(options: ExpressMiddlewareOptions): RequestHandler {\n  const {\n    extractCredentials: customExtractCredentials,\n    extractPurpose: customExtractPurpose,\n    extractAction: customExtractAction,\n    skipPaths = [],\n    onDenied = defaultOnDenied,\n    recordDecisions,\n    enableRuntimeChallenge = true,\n    routesRefreshMs = DEFAULT_ROUTES_REFRESH_MS,\n    failOnError = 'open',\n    caseInsensitiveRouteMatch = false,\n    ...config\n  } = options;\n\n  // v2.5.0: fire-and-forget pre-fetch of well-known URLs\n  if (config.apiBaseUrl) {\n    prefetchWellKnown(config.apiBaseUrl).catch(() => {});\n  }\n\n  // Per-middleware-instance route cache. Populated on first fetch; refreshed\n  // every `routesRefreshMs`. Until first successful fetch we hold an empty\n  // array which means \"no per-route gating active\" — the middleware falls\n  // through. Pre-fix the array came from merchant source, which both broke\n  // the auth-boundary story (defect 24) and silently disagreed with the\n  // dashboard.\n  let cachedRoutes: RouteAccessConfig[] = [];\n  let lastFetchAt = 0;\n  let refreshing: Promise<void> | null = null;\n  let warnedNoCounterparty = false;\n  let warnedEmptyRoutes = false;\n\n  async function refreshRoutes(): Promise<void> {\n    if (!config.counterpartyId) {\n      if (!warnedNoCounterparty) {\n        // eslint-disable-next-line no-console\n        console.warn(\n          '[VerificationGateway] No counterpartyId configured — falling through (allow all). ' +\n            'Per-route policy lives in the AstraSync dashboard now; register the endpoint and ' +\n            'set counterpartyId in your middleware config to enforce policy.'\n        );\n        warnedNoCounterparty = true;\n      }\n      return;\n    }\n    const fetched = await fetchRoutes(config, config.counterpartyId);\n    if (fetched) {\n      cachedRoutes = fetched;\n      lastFetchAt = Date.now();\n      // v2.3.8 (defect #25): if the fetch succeeded but returned an empty\n      // policy, the endpoint is registered correctly but the operator hasn't\n      // configured any routes yet — every request will fall through ungated.\n      // Surface this loudly once so silent pass-through can't go unnoticed.\n      if (cachedRoutes.length === 0 && !warnedEmptyRoutes) {\n        // Audit F-PROBE-01: app.astrasync.ai doesn't resolve in DNS today;\n        // dashboard actually lives at astrasync.ai/dashboard. Use that as\n        // the fallback. If DevOps provisions app.astrasync.ai later, the\n        // dashboardUrl config option lets merchants override.\n        const dashboard = config.dashboardUrl ?? 'https://astrasync.ai/dashboard';\n        // eslint-disable-next-line no-console\n        console.warn(\n          `[VerificationGateway] No route policy configured for ${config.counterpartyId}. ` +\n            `Gateway is in pass-through mode for ALL traffic until you add at least one route. ` +\n            `Configure at ${dashboard}/dashboard/endpoints/${config.counterpartyId}/routes`\n        );\n        warnedEmptyRoutes = true;\n      }\n    }\n  }\n\n  // Eager first fetch so the first request after init has policy loaded.\n  // Errors are swallowed (handled by fetchRoutes returning null).\n  refreshing = refreshRoutes().finally(() => {\n    refreshing = null;\n  });\n\n  return async (req: Request, res: Response, next: NextFunction): Promise<void> => {\n    try {\n      // Check if path should be skipped\n      const shouldSkip = skipPaths.some((pattern) => matchRoute(pattern, req.path));\n      if (shouldSkip) {\n        return next();\n      }\n\n      // Wait for in-flight init fetch (only on the very first request) so we\n      // don't admit traffic with no policy loaded.\n      if (refreshing) {\n        await refreshing.catch(() => {});\n      }\n      // Time-based refresh: kick off a background refresh if the cache is\n      // stale. Doesn't block the current request — readers see whatever is\n      // cached at this moment; the next request will see the refreshed copy.\n      if (config.counterpartyId && Date.now() - lastFetchAt > routesRefreshMs) {\n        refreshing = refreshRoutes().finally(() => {\n          refreshing = null;\n        });\n      }\n\n      // Find route configuration\n      // Audit F-A6-31 shadow-mode wiring: pass caseInsensitive flag (default\n      // false in 2.4.13) + always log divergences so merchants can grep for\n      // would-have-matched results during the 1-week observation window.\n      const correlationId =\n        (req.headers['x-request-id'] as string | undefined) ||\n        (req.headers['x-correlation-id'] as string | undefined);\n      const routeConfig = findRouteConfig(cachedRoutes, req.path, req.method, {\n        caseInsensitive: caseInsensitiveRouteMatch,\n        logShadowDivergence: true,\n        correlationId,\n      });\n\n      // If no route config, skip verification (allow through)\n      if (!routeConfig) {\n        if (config.setPassThroughHeader) {\n          // Round-10 (#49, O10): `unenforced` replaces the previous\n          // `pass-through` label. The previous name conflated \"gateway\n          // didn't evaluate policy\" with \"request succeeded end-to-end\" —\n          // the downstream handler may still return any status. The new\n          // semantic describes the GATE state only.\n          res.setHeader('X-Astra-Gateway-Mode', 'unenforced');\n          res.setHeader(\n            'X-Astra-Gateway-Reason',\n            cachedRoutes.length === 0 ? 'no-policy' : 'no-match'\n          );\n        }\n        return next();\n      }\n\n      // v2.5.0: resolve well-known URLs (cached; prefetched at middleware creation)\n      const wellKnownUrls = config.apiBaseUrl\n        ? await getWellKnownUrls(config.apiBaseUrl).catch(() => undefined)\n        : undefined;\n\n      // Extract credentials (hoisted from below the route-none check so the\n      // round-12 F9 evaluateAlwaysIfCredentialed flag can decide whether to\n      // evaluate vs short-circuit).\n      const credentials = customExtractCredentials\n        ? customExtractCredentials(req)\n        : defaultExtractCredentials(req);\n\n      // Round-12 (F9): route-none short-circuit unless the caller wants\n      // evaluation-without-enforcement. With evaluateAlwaysIfCredentialed\n      // set to true AND credentials present, the middleware calls\n      // verify-access for audit + req.agentVerification population, then\n      // proceeds without gating. Default behaviour (flag off) preserves\n      // pre-F9 short-circuit semantics.\n      const shouldEnforce = routeConfig.minAccessLevel !== 'none';\n      if (\n        routeConfig.minAccessLevel === 'none' &&\n        (!config.evaluateAlwaysIfCredentialed || !credentials.astraId)\n      ) {\n        if (config.setPassThroughHeader) {\n          res.setHeader('X-Astra-Gateway-Mode', 'unenforced');\n          res.setHeader('X-Astra-Gateway-Reason', 'route-none');\n        }\n        return next();\n      }\n\n      // v2.3.0: anonymous traffic no longer short-circuits client-side.\n      // The server applies the endpoint's `unverifiedAgentPolicy` (deny /\n      // allow_partial / allow_full) and emits the verification event +\n      // blockchain record per the canonical flow. SDK forwards verbatim.\n\n      // Resolve the canonical {purpose, action} pair (Bug 14, §4.6): dashboard\n      // route mapping → custom extractors → agent X-Astra-* headers →\n      // method-table fallback. The transport verb never travels as the action.\n      const pdlssPair = resolveRequestPdlss(\n        req,\n        routeConfig,\n        customExtractPurpose,\n        customExtractAction\n      );\n      const purpose = pdlssPair.purpose;\n      if (config.debug) {\n        // Same telemetry shape as the MCP adapter — adoption tracking and\n        // support triage read the *_source fields to see which integration\n        // path each partner uses (route mapping vs headers vs fallback).\n        // eslint-disable-next-line no-console\n        console.debug('[express-middleware] pdlss resolved', {\n          purpose_source: pdlssPair.purposeSource,\n          resolved_purpose: pdlssPair.purpose,\n          action_source: pdlssPair.actionSource,\n          resolved_action: pdlssPair.action,\n        });\n      }\n\n      // Extract full AstraSync credentials (includes PDLSS from X-Astra-* headers)\n      const astraCreds = extractAstraSyncCredentials(req);\n\n      // Auto-detect counterparty URL from the request if not explicitly configured.\n      // Since the SDK is installed at this endpoint, we always know the origin.\n      const counterpartyUrl = config.counterpartyUrl || `${req.protocol}://${req.get('host')}`;\n\n      // Step 2: Counterparty-side PDLSS pre-check — compare agent's requested PDLSS\n      // against counterparty-defined maximums on the route config.\n      // Rejects immediately if outside limits, BEFORE calling verify-access.\n      const preCheckFailures = performCounterpartyPreCheck(routeConfig, astraCreds, purpose);\n      if (preCheckFailures.length > 0) {\n        // Round-18 G4: counterparty pre-check failure — request rejected\n        // before reaching verify-access. Neither identity nor policy was\n        // remotely verified; both axes truthfully false.\n        const result: VerificationResult = {\n          identityVerified: false,\n          policyAllowed: false,\n          accessLevel: 'none',\n          denialReasons: preCheckFailures.map((f) => f.message),\n          guidance: {\n            message: 'Request exceeds counterparty-defined PDLSS limits.',\n            registrationUrl: wellKnownUrls?.registrationUrl ?? '',\n            documentationUrl: wellKnownUrls?.documentationUrl ?? '',\n          },\n          verifiedAt: new Date(),\n        };\n\n        req.agentVerification = result;\n\n        // Fire-and-forget: notify AstraSync of the pre-check failure\n        reportCounterpartyPreCheckFailure(config, {\n          agentId: astraCreds?.agentId || credentials.astraId || 'unknown',\n          counterpartyUrl,\n          counterpartyType: config.counterpartyType || 'api',\n          failures: preCheckFailures,\n          requestPath: req.path,\n          requestMethod: req.method,\n        }).catch(() => {});\n\n        dedupeFailures(result);\n        onDenied(result, req, res);\n        return;\n      }\n\n      // Step 3: Call AstraSync verify-access with runtime challenge enabled\n      const shouldRecordDecisions = recordDecisions !== false;\n      const forwardedFor = req.headers['x-forwarded-for'];\n      const forwardedForStr = Array.isArray(forwardedFor) ? forwardedFor.join(', ') : forwardedFor;\n      // Audit F-A6-34: previously the LEFTMOST X-Forwarded-For entry was\n      // taken as the original client IP. That value is attacker-controlled\n      // whenever the customer's reverse proxy doesn't strip\n      // client-supplied X-Forwarded-For — an attacker prepends\n      // `X-Forwarded-For: 1.1.1.1` and we audit the spoofed IP. Now we\n      // prefer req.ip (which Express resolves via configured `trust proxy`\n      // hop count — the customer's responsibility to set correctly per\n      // their actual hop chain). XFF still provides a fallback for\n      // customers without `trust proxy` configured, but emits a one-time\n      // warning when used so they know to fix.\n      const originalClientIp =\n        req.ip ?? (forwardedForStr ? forwardedForStr.split(',')[0].trim() : undefined);\n      if (!req.ip && forwardedForStr) {\n        // eslint-disable-next-line no-console\n        console.warn(\n          '[VerificationGateway] req.ip unset — falling back to leftmost X-Forwarded-For. ' +\n            'Configure Express trust proxy correctly to avoid spoofable client IPs in audit logs.'\n        );\n      }\n      const agentCardUrl =\n        typeof req.headers['x-astrasync-agent-card'] === 'string'\n          ? (req.headers['x-astrasync-agent-card'] as string)\n          : undefined;\n\n      const result = await verify(config, {\n        credentials,\n        purpose,\n        action: pdlssPair.action,\n        resource: req.path,\n        createSession: shouldRecordDecisions,\n        counterpartyUrl,\n        counterpartyType: config.counterpartyType || 'api',\n        enableRuntimeChallenge,\n        durationRequired: astraCreds?.pdlss?.duration?.maxSessionDuration,\n        callerMetadata: {\n          sourceIp: originalClientIp,\n          userAgent: req.headers['user-agent'] as string | undefined,\n          referer: req.headers.referer as string | undefined,\n          host: req.headers.host as string | undefined,\n          forwardedFor: forwardedForStr,\n          agentCardUrl,\n        },\n      });\n\n      // Attach result to request\n      req.agentVerification = result;\n      const sessionId = (result as EnhancedVerificationResult).sessionId;\n\n      // v2.3.9 (defect #30): denied verifications short-circuit BEFORE the\n      // gate-level comparison. Pre-rename, denials returned\n      // `accessLevel: 'guidance'` and routes gated at `'guidance'` passed\n      // `hasMinimumAccess('guidance', 'guidance') === true` — letting\n      // unverified anonymous traffic through to the merchant handler. The\n      // verify.ts denial branches now return `'none'` (so the gate check\n      // alone would correctly deny), but trusting access-level math for a\n      // denial is a category error: failing either identity OR policy already\n      // means \"deny.\" We check that first.\n      // Round-18 G4: short-circuit on either axis failing — identity-fail\n      // (no resolved caller) or policy-fail (PDLSS or recommendation deny).\n      if (!result.identityVerified || !result.policyAllowed) {\n        if (shouldRecordDecisions && sessionId) {\n          recordDecision(config, sessionId, 'denied', result.denialReasons?.[0]).catch(() => {});\n        }\n        dedupeFailures(result);\n        onDenied(result, req, res);\n        return;\n      }\n\n      // Round-12 (F9): evaluation-without-enforcement. When the route is\n      // 'none' but we ran verify-access for audit, skip the gates and call\n      // next() — the result is on req.agentVerification for the handler\n      // to render tier-aware responses (e.g. anonymous vs verified\n      // catalog view on the same path).\n      if (!shouldEnforce) {\n        if (config.setPassThroughHeader) {\n          res.setHeader('X-Astra-Gateway-Mode', 'enforced');\n          res.setHeader('X-Astra-Gateway-Reason', 'evaluated-not-enforced');\n        }\n        if (shouldRecordDecisions && sessionId) {\n          recordDecision(config, sessionId, 'granted').catch(() => {});\n        }\n        return next();\n      }\n\n      // 3.2.0 (post-3.1.0 feedback #1): the access-level BAND no longer gates.\n      // It mapped a trust score into an opaque tier and the per-route\n      // `minAccessLevel` comparison duplicated what the endpoint policy\n      // (min trust + PDLSS, evaluated server-side into identityVerified/\n      // policyAllowed above) already expresses — and it manufactured the\n      // \"read-only can't elevate to write\" wall. Per-route tightening is now\n      // expressed by `route.minTrustScore` (below); `accessLevel` /\n      // `minAccessLevel` / `hasMinimumAccess` are retained as informational/\n      // deprecated. Explicit per-route condition→constraint rules are the\n      // Phase-2 successor (adapter-spec endpoint-policy round).\n\n      // Per-route trust tightening (only refinement that still gates).\n      if (routeConfig.minTrustScore && result.agent) {\n        if (result.agent.trustScore < routeConfig.minTrustScore) {\n          // 3.2.0: qualitative — never embed the score or the threshold in an\n          // agent-visible message (trust is a system-internal signal; exposing\n          // the number is a gaming vector — post-3.1.0 feedback #2).\n          const trustFailure = {\n            dimension: 'endpoint.trust',\n            message: 'Trust below the route requirement for this endpoint.',\n            guidance:\n              \"Trust is below this route's floor. Trust is not overridable — the agent either meets the endpoint's trust policy or it doesn't. Raise the agent's trust via real signals (KYD, blockchain registration, agent-card), or have the operator lower the route's minTrustScore.\",\n          };\n          result.failures = [...(result.failures ?? []), trustFailure];\n          result.denialReasons = [trustFailure.message];\n          if (!result.guidance && wellKnownUrls) {\n            result.guidance = {\n              message: trustFailure.message,\n              registrationUrl: wellKnownUrls.registrationUrl,\n              documentationUrl: wellKnownUrls.documentationUrl,\n            };\n          }\n          if (shouldRecordDecisions && sessionId) {\n            recordDecision(config, sessionId, 'denied', trustFailure.message).catch(() => {});\n          }\n          dedupeFailures(result);\n          onDenied(result, req, res);\n          return;\n        }\n      }\n\n      // All checks passed — record grant decision\n      if (shouldRecordDecisions && sessionId) {\n        recordDecision(config, sessionId, 'granted').catch(() => {});\n      }\n      // v2.3.8 (defect #26): if the endpoint's `unverifiedAgentPolicy` is\n      // `'audit'` (allow + soft-launch warning), the server returns the\n      // header to relay. Lift it onto the merchant's response BEFORE\n      // calling next() so downstream handlers and the eventual response\n      // back to the agent both carry it.\n      const enhancedResult = result as EnhancedVerificationResult;\n      if (enhancedResult.warningHeader) {\n        res.setHeader(enhancedResult.warningHeader.name, enhancedResult.warningHeader.value);\n      }\n      next();\n    } catch (error) {\n      // Audit F-A1-06: shadow-mode logging for fail-closed default migration.\n      // Always log `[SHADOW] would-have-denied` so merchants can grep their\n      // own application logs for would-have-been-denied impact during the\n      // observation window. Actual deny/admit behavior controlled by\n      // failOnError option (default 'open' for backward compatibility).\n      const errorClass = error instanceof Error ? error.constructor.name : typeof error;\n      const correlationId =\n        (req.headers['x-request-id'] as string | undefined) ||\n        (req.headers['x-correlation-id'] as string | undefined) ||\n        `gen-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`;\n      // eslint-disable-next-line no-console\n      console.error('[VerificationGateway] Middleware error:', error);\n      // eslint-disable-next-line no-console\n      console.warn(\n        `[SHADOW] would-have-denied: errorClass=${errorClass} route=${req.method}:${req.path} merchantId=${config.counterpartyId ?? 'unknown'} correlationId=${correlationId}`\n      );\n\n      if (failOnError === 'closed') {\n        const result: VerificationResult = {\n          identityVerified: false,\n          policyAllowed: false,\n          accessLevel: 'none',\n          denialReasons: [`Verification middleware internal error: ${errorClass}`],\n          failures: [\n            {\n              dimension: 'middleware.internal_error',\n              message: `Middleware threw ${errorClass} — failing closed`,\n            },\n          ],\n          verifiedAt: new Date(),\n          correlationId,\n        };\n        const catchUrls = config.apiBaseUrl\n          ? await getWellKnownUrls(config.apiBaseUrl).catch(() => undefined)\n          : undefined;\n        if (catchUrls) {\n          result.guidance = {\n            message: `Middleware threw ${errorClass} — failing closed`,\n            registrationUrl: catchUrls.registrationUrl,\n            documentationUrl: catchUrls.documentationUrl,\n          };\n        }\n        dedupeFailures(result);\n        return onDenied(result, req, res);\n      }\n\n      next();\n    }\n  };\n}\n\n// `requireAccess` and `verifyOnly` were removed in v2.9.7. Both injected a\n// local `routes` array into the merchant's source code, which is the exact\n// dual-config attack vector defect 24 closed. Per-route policy now lives in\n// the AstraSync dashboard (gated by team.role admin auth + audit + alerts).\n// To enforce a minimum tier, set the route's `minAccessLevel` in the\n// dashboard. For \"verify but don't block,\" set every route to `none` there.\n"],"mappings":";AA6DO,SAAS,cAAc,OAA2B;AACvD,MAAI,SAAS,GAAI,QAAO;AACxB,MAAI,SAAS,GAAI,QAAO;AACxB,MAAI,SAAS,GAAI,QAAO;AACxB,SAAO;AACT;;;AChDO,IAAM,cAAc;;;ACC3B,IAAM,eAAe,KAAK,KAAK;AAE/B,IAAM,QAAQ,oBAAI,IAAwB;AAC1C,IAAM,WAAW,oBAAI,IAA+C;AAEpE,SAAS,aAAa,YAA4B;AAGhD,QAAM,OAAO,WAAW,QAAQ,aAAa,EAAE;AAC/C,SAAO,GAAG,IAAI;AAChB;AAEA,eAAe,eAAe,YAAuD;AACnF,QAAM,MAAM,aAAa,UAAU;AACnC,QAAM,WAAW,MAAM,MAAM,KAAK;AAAA,IAChC,QAAQ;AAAA,IACR,SAAS,EAAE,QAAQ,mBAAmB;AAAA,IACtC,QAAQ,YAAY,QAAQ,GAAI;AAAA,EAClC,CAAC;AACD,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,IAAI;AAAA,MACR,qEACS,SAAS,MAAM,SAAS,GAAG;AAAA,IACtC;AAAA,EACF;AACA,QAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,MAAI,CAAC,KAAK,mBAAmB,CAAC,KAAK,oBAAoB,CAAC,KAAK,iBAAiB;AAC5E,UAAM,IAAI;AAAA,MACR;AAAA,IAEF;AAAA,EACF;AACA,SAAO;AACT;AAMO,SAAS,kBAAkB,YAAuD;AACvF,QAAM,WAAW,SAAS,IAAI,UAAU;AACxC,MAAI,SAAU,QAAO;AAErB,QAAM,UAAU,eAAe,UAAU,EACtC,KAAK,CAAC,SAAS;AACd,UAAM,IAAI,YAAY,EAAE,MAAM,WAAW,KAAK,IAAI,EAAE,CAAC;AACrD,aAAS,OAAO,UAAU;AAC1B,WAAO;AAAA,EACT,CAAC,EACA,MAAM,CAAC,QAAQ;AACd,aAAS,OAAO,UAAU;AAC1B,UAAM;AAAA,EACR,CAAC;AAEH,WAAS,IAAI,YAAY,OAAO;AAChC,SAAO;AACT;AAOA,eAAsB,iBAAiB,YAAuD;AAC5F,QAAM,QAAQ,MAAM,IAAI,UAAU;AAElC,MAAI,OAAO;AACT,QAAI,KAAK,IAAI,IAAI,MAAM,YAAY,cAAc;AAE/C,wBAAkB,UAAU,EAAE,MAAM,MAAM;AAAA,MAE1C,CAAC;AAAA,IACH;AACA,WAAO,MAAM;AAAA,EACf;AAGA,QAAM,UAAU,SAAS,IAAI,UAAU;AACvC,MAAI,QAAS,QAAO;AAEpB,SAAO,kBAAkB,UAAU;AACrC;AAOO,SAAS,uBAAuB,YAA0D;AAC/F,SAAO,MAAM,IAAI,UAAU,GAAG;AAChC;;;AC5EA,IAAM,iBAAyC;AAAA,EAC7C,YAAY;AAAA;AAAA;AAAA;AAAA;AAAA,EAKZ,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMpB,OAAO;AACT;AAOA,IAAI,qBAAqB;AAGzB,IAAI,0BAA0B;AAE9B,eAAe,iBACb,YACA,OACA,YACe;AACf,uBAAqB;AACrB,MAAI;AACF,UAAM,WAAW,GAAG,UAAU;AAK9B,UAAM,WAAW,MAAM,MAAM,UAAU,EAAE,QAAQ,OAAO,CAAC;AACzD,UAAM,cAAc,SAAS,QAAQ,IAAI,cAAc,KAAK;AAC5D,QAAI,YAAY,WAAW,WAAW,GAAG;AACvC,YAAM,UACJ,qCAAqC,UAAU,kCAAkC,WAAW;AAQ9F,UAAI,YAAY;AACd,cAAM,IAAI,MAAM,GAAG,OAAO,oBAAoB;AAAA,MAChD;AACA,cAAQ,KAAK,GAAG,OAAO,2DAA2D;AAAA,IACpF,WAAW,OAAO;AAChB,cAAQ;AAAA,QACN,+CAA+C,UAAU,mBAAmB,WAAW;AAAA,MACzF;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,YAAY;AAGd,YAAM;AAAA,IACR;AACA,QAAI,OAAO;AACT,cAAQ,IAAI,2DAA2D,OAAO,GAAG,CAAC,EAAE;AAAA,IACtF;AAAA,EACF;AACF;AAKA,IAAM,oBAAoB,oBAAI,IAA+D;AAiB7F,SAAS,YAAY,SAA8B,gBAAiC;AAClF,QAAM,IAAI,QAAQ;AAClB,SAAO;AAAA,IACL,EAAE,WAAW;AAAA,IACb,EAAE,UAAU;AAAA,IACZ,EAAE,OAAO;AAAA,IACT,QAAQ,WAAW;AAAA,IACnB,QAAQ,UAAU;AAAA,IAClB,QAAQ,gBAAgB;AAAA,IACxB,QAAQ,YAAY;AAAA,IACpB,QAAQ,gBAAgB;AAAA,IACxB,QAAQ,oBAAoB;AAAA,IAC5B,QAAQ,YAAY;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQpB,kBAAkB;AAAA,IAClB,QAAQ,mBAAmB;AAAA,IAC3B,QAAQ,oBAAoB;AAAA,IAC5B,QAAQ,oBAAoB,MAAM;AAAA,IAClC,QAAQ,iBAAiB;AAAA,IACzB,QAAQ,iBAAiB;AAAA;AAAA;AAAA;AAAA;AAAA,IAKzB,QAAQ,oBAAoB;AAAA,IAC5B,QAAQ,sBAAsB;AAAA,IAC9B,QAAQ,yBAAyB,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMvC,QAAQ,gBAAgB,YAAY;AAAA,IACpC,QAAQ,gBAAgB,aAAa;AAAA,IACrC,QAAQ,gBAAgB,gBAAgB;AAAA,IACxC,QAAQ,gBAAgB,gBAAgB;AAAA,EAC1C,EAAE,KAAK,GAAG;AACZ;AAKA,SAAS,gBACP,SACA,gBAC2B;AAC3B,QAAM,MAAM,YAAY,SAAS,cAAc;AAC/C,QAAM,SAAS,kBAAkB,IAAI,GAAG;AAExC,MAAI,UAAU,OAAO,YAAY,KAAK,IAAI,GAAG;AAC3C,WAAO,OAAO;AAAA,EAChB;AAEA,MAAI,QAAQ;AACV,sBAAkB,OAAO,GAAG;AAAA,EAC9B;AAEA,SAAO;AACT;AAaA,IAAM,iCAAiC;AACvC,IAAM,8BAA8B;AAEpC,SAAS,YACP,SACA,QACA,eACA,gBACM;AACN,QAAM,aACJ,iBAAiB,gBAAgB,IAC7B,gBACA,OAAO,iBACL,8BACA;AACR,QAAM,MAAM,YAAY,SAAS,cAAc;AAC/C,oBAAkB,IAAI,KAAK;AAAA,IACzB;AAAA,IACA,WAAW,KAAK,IAAI,IAAI,aAAa;AAAA,EACvC,CAAC;AACH;AAYO,SAAS,mBACd,SACA,OACkB;AAClB,QAAM,cAAgC,CAAC;AAKvC,QAAM,mBAAmB;AAKzB,QAAM,gBACJ,QAAQ,YAAY,KACpB,QAAQ,YAAY,KACpB,QAAQ,YAAY,KACpB,QAAQ,iBAAiB,KACzB,QAAQ,iBAAiB,KACzB,QAAQ,kBAAkB,KAC1B,QAAQ,kBAAkB,KAC1B,QAAQ,kBAAkB;AAC5B,MAAI,eAAe;AAIjB,UAAM,MAAM,MAAM,QAAQ,aAAa,IACnC,cAAc,CAAC,IACf,OAAO,kBAAkB,WACvB,gBACA;AACN,QAAI,OAAO,QAAQ,YAAY,iBAAiB,KAAK,GAAG,GAAG;AACzD,kBAAY,UAAU;AAAA,IACxB;AAAA,EACF;AAGA,QAAM,eAAe,QAAQ,WAAW,KAAK,QAAQ,WAAW,KAAK,QAAQ,WAAW;AACxF,MAAI,cAAc;AAChB,gBAAY,SAAS,MAAM,QAAQ,YAAY,IAAI,aAAa,CAAC,IAAI;AAAA,EACvE;AAKA,QAAM,aAAa,QAAQ,eAAe,KAAK,QAAQ,eAAe;AACtE,MAAI,YAAY;AACd,UAAM,YAAY,MAAM,QAAQ,UAAU,IAAI,WAAW,CAAC,IAAI;AAC9D,QAAI,OAAO,cAAc,UAAU;AACjC,kBAAY,sBAAsB;AAClC,UAAI,UAAU,WAAW,SAAS,GAAG;AACnC,oBAAY,MAAM,UAAU,MAAM,CAAC;AAAA,MACrC;AAAA,IACF;AAAA,EACF;AAGA,MAAI,OAAO;AACT,QAAI,MAAM,WAAW,CAAC,YAAY,SAAS;AACzC,kBAAY,UAAU,MAAM;AAAA,IAC9B;AACA,QAAI,MAAM,UAAU,CAAC,YAAY,QAAQ;AACvC,kBAAY,SAAS,MAAM;AAAA,IAC7B;AAAA,EACF;AAEA,SAAO;AACT;AA0BA,SAAS,uBACP,SACA,QACA,UAAgG,CAAC,GAC7E;AACpB,QAAM,SAAS,QAAQ,UAAU;AACjC,QAAM,aAAa,WAAW;AAC9B,QAAM,OAAO,QAAQ;AAErB,QAAM,WAAyB,aAC3B;AAAA,IACE,SACE;AAAA,IACF,iBAAiB,MAAM,mBAAmB;AAAA,IAC1C,kBAAkB,MAAM,oBAAoB;AAAA,IAC5C,OAAO;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF,IACA;AAAA,IACE,SACE;AAAA,IACF,iBAAiB,MAAM,mBAAmB;AAAA,IAC1C,kBAAkB,MAAM,oBAAoB;AAAA,IAC5C,OAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEJ,SAAO;AAAA;AAAA;AAAA;AAAA,IAIL,kBAAkB;AAAA,IAClB,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOf,aAAa;AAAA,IACb;AAAA,IACA,eAAe,SAAS,CAAC,MAAM,IAAI,CAAC,qCAAqC;AAAA;AAAA;AAAA;AAAA;AAAA,IAKzE,UAAU,aACN;AAAA,MACE;AAAA,QACE,WAAW;AAAA,QACX,SAAS,UAAU;AAAA,QACnB,UAAU,SAAS;AAAA,MACrB;AAAA,IACF,IACA;AAAA,IACJ,eAAe,QAAQ;AAAA,IACvB,YAAY,oBAAI,KAAK;AAAA,EACvB;AACF;AAKA,eAAe,oBACb,QACA,SAqFC;AACD,QAAM,EAAE,aAAa,GAAG,YAAY,IAAI;AAIxC,QAAM,OAAgC;AAAA,IACpC,GAAI,YAAY,WAAW,EAAE,SAAS,YAAY,QAAQ;AAAA,IAC1D,GAAI,YAAY,WAAW,EAAE,SAAS,YAAY,QAAQ;AAAA,EAC5D;AAGA,MAAI,YAAY,OAAQ,MAAK,SAAS,YAAY;AAClD,MAAI,YAAY,aAAc,MAAK,eAAe,YAAY;AAC9D,MAAI,YAAY,SAAU,MAAK,WAAW,YAAY;AACtD,MAAI,YAAY,aAAc,MAAK,eAAe,YAAY;AAC9D,MAAI,YAAY,iBAAkB,MAAK,mBAAmB,YAAY;AACtE,MAAI,YAAY,SAAU,MAAK,WAAW,YAAY;AACtD,MAAI,YAAY,kBAAmB,MAAK,oBAAoB,YAAY;AACxE,MAAI,YAAY,cAAe,MAAK,gBAAgB,YAAY;AAChE,MAAI,YAAY,kBAAkB,OAAW,MAAK,gBAAgB,YAAY;AAE9E,MAAI,YAAY;AACd,SAAK,yBAAyB,YAAY;AAC5C,MAAI,YAAY,cAAe,MAAK,gBAAgB,YAAY;AAChE,MAAI,YAAY,iBAAkB,MAAK,mBAAmB,YAAY;AACtE,MAAI,YAAY,iBAAkB,MAAK,mBAAmB,YAAY;AACtE,MAAI,YAAY,gBAAiB,MAAK,kBAAkB,YAAY;AACpE,MAAI,OAAO,eAAgB,MAAK,iBAAiB,OAAO;AACxD,MAAI,YAAY;AACd,SAAK,0BAA0B,YAAY;AAG7C,MAAI,YAAY,mBAAoB,MAAK,qBAAqB,YAAY;AAS1E,OAAK,aAAa;AAIlB,MAAI,YAAY,kBAAkB,YAAY,YAAY,YAAY,WAAW;AAC/E,UAAM,OAAO;AAAA,MACX,GAAI,YAAY,YAAY,EAAE,UAAU,YAAY,SAAS;AAAA,MAC7D,GAAI,YAAY,aAAa,EAAE,WAAW,YAAY,UAAU;AAAA,MAChE,GAAG,YAAY;AAAA,IACjB;AACA,QAAI,OAAO,KAAK,IAAI,EAAE,SAAS,EAAG,MAAK,iBAAiB;AAAA,EAC1D;AAGA,QAAM,UAAkC;AAAA,IACtC,gBAAgB;AAAA,IAChB,GAAG,OAAO;AAAA,EACZ;AAcA,MAAI,OAAO,QAAQ;AACjB,YAAQ,eAAe,IAAI,UAAU,OAAO,MAAM;AAElD,YAAQ,WAAW,IAAI,OAAO;AAAA,EAChC;AAEA,MAAI;AACF,UAAM,WAAW,MAAM,MAAM,GAAG,OAAO,UAAU,yBAAyB;AAAA,MACxE,QAAQ;AAAA,MACR;AAAA,MACA,MAAM,KAAK,UAAU,IAAI;AAAA,IAC3B,CAAC;AAED,UAAM,OAAO,MAAM,SAAS,KAAK;AAMjC,QAAI,SAAS,WAAW,KAAK;AAC3B,aAAO;AAAA,QACL,SAAS;AAAA,QACT,QAAQ;AAAA,UACN,SAAS;AAAA,UACT,aAAa;AAAA,UACb,QAAQ;AAAA,UACR,UAAU;AAAA,YACR;AAAA,cACE,WAAW;AAAA,cACX,SACE,OAAO,MAAM,YAAY,WAAW,KAAK,UAAU;AAAA,cACrD,UACE,OAAO,MAAM,aAAa,WACtB,KAAK,WACL;AAAA,YACR;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,IAAI;AAIhB,aAAO;AAAA,QACL,SAAS;AAAA,QACT,OAAO,KAAK,WAAW,KAAK,SAAS,gBAAgB,SAAS,MAAM;AAAA,QACpE,eAAe,OAAO,MAAM,kBAAkB,WAAW,KAAK,gBAAgB;AAAA,MAChF;AAAA,IACF;AAEA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO,qCAAqC,OAAO;AAAA,IACrD;AAAA,EACF;AACF;AAKA,eAAsB,OACpB,QACA,SAC6B;AAC7B,QAAM,eAAe,EAAE,GAAG,gBAAgB,GAAG,OAAO;AAIpD,QAAM,OAAO,aAAa,aACtB,uBAAuB,aAAa,UAAU,IAC9C;AAOJ,MAAI,CAAC,sBAAsB,CAAC,aAAa,qBAAqB,aAAa,YAAY;AACrF,QAAI,aAAa,YAAY;AAC3B,YAAM,iBAAiB,aAAa,YAAY,aAAa,OAAO,IAAI;AAAA,IAC1E,OAAO;AACL,WAAK,iBAAiB,aAAa,YAAY,aAAa,OAAO,KAAK;AAAA,IAC1E;AAAA,EACF;AAGA,MACE,CAAC,4BACA,OAAO,kBAAkB,UAAa,OAAO,yBAAyB,SACvE;AACA,8BAA0B;AAC1B,YAAQ;AAAA,MACN;AAAA,IAIF;AAAA,EACF;AAUA,MAAI,aAAa,aAAa,GAAG;AAC/B,UAAM,SAAS,gBAAgB,SAAS,aAAa,cAAc;AACnE,QAAI,QAAQ;AACV,UAAI,aAAa,OAAO;AACtB,gBAAQ,IAAI,+CAA+C;AAAA,MAC7D;AACA,aAAO;AAAA,IACT;AAAA,EACF;AAGA,QAAM,kBAAkB,EAAE,GAAG,QAAQ;AACrC,MAAI,CAAC,gBAAgB,mBAAmB,aAAa,iBAAiB;AACpE,oBAAgB,kBAAkB,aAAa;AAAA,EACjD;AACA,MAAI,CAAC,gBAAgB,oBAAoB,aAAa,kBAAkB;AACtE,oBAAgB,mBAAmB,aAAa;AAAA,EAClD;AAGA,MAAI,aAAa,OAAO;AACtB,YAAQ,IAAI,iDAAiD;AAAA,EAC/D;AAEA,QAAM,cAAc,MAAM,oBAAoB,cAAc,eAAe;AAG3E,MAAI,CAAC,YAAY,SAAS;AAMxB,WAAO,uBAAuB,cAAc,YAAY,OAAO;AAAA,MAC7D,QAAQ;AAAA,MACR,eAAgB,YAA2C;AAAA,MAC3D;AAAA,IACF,CAAC;AAAA,EACH;AAGA,MAAI,CAAC,YAAY,QAAQ,SAAS;AAIhC,UAAM,qBAAsB,YAAY,QACpC;AAMJ,UAAM,wBACH,YAAY,qBAA8D,eAC3E;AACF,UAAMA,UAAqC;AAAA,MACzC,kBAAkB;AAAA,MAClB,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAQf,aAAa;AAAA,MACb,eACE,sBAAsB,mBAAmB,SAAS,IAC9C,mBAAmB,IAAI,CAAC,MAAM,EAAE,OAAO,IACvC,YAAY,QAAQ,SAClB,CAAC,YAAY,OAAO,MAAM,IAC1B,CAAC,eAAe;AAAA,MACxB,UAAU;AAAA,MACV,gBAAgB,YAAY,QAAQ;AAAA,MACpC,kBAAkB,YAAY,QAAQ;AAAA,MACtC,UAAU;AAAA,QACR,SAAS,YAAY,QAAQ,UAAU;AAAA,QACvC,iBAAiB,MAAM,mBAAmB;AAAA,QAC1C,kBAAkB,MAAM,oBAAoB;AAAA,MAC9C;AAAA,MACA,YAAY,oBAAI,KAAK;AAAA;AAAA,MAErB,WAAY,YAAwC;AAAA;AAAA;AAAA,MAGpD,eAAgB,YAAwC;AAAA,MACxD,gBAAiB,YACd;AAAA,MACH,uBAAwB,YAAwC;AAAA,IAGlE;AAEA,WAAOA;AAAA,EACT;AAGA,QAAM,QAAmC,YAAY,QACjD;AAAA,IACE,SAAS,YAAY,MAAM;AAAA,IAC3B,MAAM,YAAY,MAAM;AAAA,IACxB,YAAY,YAAY,MAAM;AAAA,IAC9B,YAAY,cAAc,YAAY,MAAM,UAAU;AAAA,IACtD,oBAAoB,YAAY,MAAM,qBAAqB;AAAA,IAC3D,QAAQ,YAAY,MAAM;AAAA,EAC5B,IACA;AAEJ,QAAM,YAA2C,YAAY,YACzD;AAAA,IACE,UAAU,YAAY,UAAU;AAAA,IAChC,MAAM,YAAY,UAAU;AAAA,IAC5B,YAAY,YAAY,UAAU,cAAc;AAAA,IAChD,UAAU,YAAY,UAAU;AAAA,EAClC,IACA;AAEJ,QAAM,eAAiD,YAAY,eAC/D;AAAA,IACE,MAAM,YAAY,aAAa;AAAA,IAC/B,UAAU,YAAY,aAAa;AAAA,IACnC,YAAY,YAAY,aAAa;AAAA,EACvC,IACA;AAKJ,QAAM,sBAAsB,YAAY;AAMxC,QAAM,cAA2B,YAAY,QAAQ,eAAe;AAEpE,QAAM,SAAqC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMzC,kBACG,YAAY,qBAA8D,eAC3E;AAAA,IACF,eAAe;AAAA,IACf;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,eAAe,YAAY,QAAQ;AAAA,IACnC;AAAA,IACA,gBAAgB,YAAY,QAAQ;AAAA,IACpC,kBAAkB,YAAY,QAAQ;AAAA,IACtC,YAAY,oBAAI,KAAK;AAAA,IACrB,UAAU,aAAa;AAAA;AAAA,IAEvB,WAAY,YAAwC;AAAA;AAAA;AAAA,IAGpD,eAAgB,YAAwC;AAAA,IACxD,kBAAmB,YAAwC;AAAA,IAG3D,eAAgB,YAAwC;AAAA,IAGxD,gBAAiB,YACd;AAAA,IACH,uBAAwB,YAAwC;AAAA,IAGhE,eAAgB,YAAwC;AAAA,EAG1D;AAGA,MAAI,OAAO,mBAAmB,QAAQ;AAKpC,WAAO,gBAAgB;AACvB,WAAO,cAAc;AACrB,WAAO,gBAAgB,OAAO,yBAAyB;AAAA,MACrD;AAAA,IACF;AACA,WAAO,WAAW,OAAO,mBACrB;AAAA,MACE,SAAS,wBAAwB,OAAO,iBAAiB,UAAU,0BAA0B;AAAA,MAC7F,iBAAiB,MAAM,mBAAmB;AAAA,MAC1C,kBAAkB,MAAM,oBAAoB;AAAA,IAC9C,IACA;AAAA,MACE,SAAS,OAAO,wBAAwB,CAAC,KAAK;AAAA,MAC9C,iBAAiB,MAAM,mBAAmB;AAAA,MAC1C,kBAAkB,MAAM,oBAAoB;AAAA,IAC9C;AAAA,EACN,WAAW,OAAO,mBAAmB,oBAAoB;AAMvD,WAAO,iBAAiB;AACxB,WAAO,gBAAgB,OAAO,yBAAyB,CAAC,+BAA+B;AAAA,EACzF;AAKA,MAAI,aAAa,aAAa,KAAK,OAAO,mBAAmB,QAAQ;AACnE,gBAAY,SAAS,QAAQ,aAAa,UAAU,aAAa,cAAc;AAAA,EACjF;AAEA,SAAO;AACT;AAMA,eAAsB,eACpB,QACA,WACA,UACA,QACe;AACf,QAAM,UAAkC,EAAE,gBAAgB,mBAAmB;AAC7E,MAAI,OAAO,QAAQ;AACjB,YAAQ,eAAe,IAAI,UAAU,OAAO,MAAM;AAClD,YAAQ,WAAW,IAAI,OAAO;AAAA,EAChC;AAEA,QAAM,MAAM,GAAG,OAAO,UAAU,yBAAyB,SAAS,aAAa;AAAA,IAC7E,QAAQ;AAAA,IACR;AAAA,IACA,MAAM,KAAK,UAAU,EAAE,UAAU,OAAO,CAAC;AAAA,EAC3C,CAAC,EAAE,MAAM,MAAM;AAAA,EAEf,CAAC;AACH;AAYA,eAAsB,YACpB,QACA,gBAC0C;AAC1C,MAAI,CAAC,eAAgB,QAAO;AAC5B,QAAM,UAAkC,EAAE,gBAAgB,mBAAmB;AAC7E,MAAI,OAAO,QAAQ;AACjB,YAAQ,eAAe,IAAI,UAAU,OAAO,MAAM;AAClD,YAAQ,WAAW,IAAI,OAAO;AAAA,EAChC;AACA,MAAI;AACF,UAAM,WAAW,MAAM;AAAA,MACrB,GAAG,OAAO,UAAU,cAAc,mBAAmB,cAAc,CAAC;AAAA,MACpE,EAAE,QAAQ,OAAO,QAAQ;AAAA,IAC3B;AACA,QAAI,CAAC,SAAS,GAAI,QAAO;AACzB,UAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,WAAO,KAAK,MAAM,UAAU,CAAC;AAAA,EAC/B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAqFA,eAAsB,kCACpB,QACA,MAae;AACf,QAAM,aAAa,OAAO,cAAc,eAAe;AAEvD,QAAM,MAAM,GAAG,UAAU,yDAAyD;AAAA,IAChF,QAAQ;AAAA,IACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAC9C,MAAM,KAAK,UAAU,IAAI;AAAA,EAC3B,CAAC,EAAE,MAAM,MAAM;AAAA,EAEf,CAAC;AACH;;;ACnhCA,IAAM,gBAAgB;AAiDf,SAAS,uBACd,SAC6B;AAC7B,QAAM,WAAW,CAAC,QAAoC;AACpD,UAAM,IAAI,QAAQ,GAAG,KAAK,QAAQ,IAAI,YAAY,CAAC;AACnD,WAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI;AAAA,EACnC;AAEA,QAAM,UAAU,SAAS,GAAG,aAAa,IAAI,KAAK,SAAS,YAAY;AACvE,MAAI,CAAC,QAAS,QAAO;AAErB,QAAM,cAAoC,EAAE,QAAQ;AAEpD,QAAM,YAAY,SAAS,GAAG,aAAa,QAAQ,KAAK,SAAS,gBAAgB;AACjF,MAAI,UAAW,aAAY,YAAY;AAEvC,QAAM,eAAe,SAAS,GAAG,aAAa,WAAW,KAAK,SAAS,mBAAmB;AAC1F,MAAI,aAAc,aAAY,eAAe;AAE7C,QAAM,UAAU,SAAS,GAAG,aAAa,SAAS,KAAK,SAAS,iBAAiB;AACjF,MAAI,SAAS;AACX,UAAM,CAAC,UAAU,MAAM,IAAI,QAAQ,MAAM,GAAG;AAC5C,gBAAY,QAAQ;AAAA,MAClB,GAAG,YAAY;AAAA,MACf,SAAS,EAAE,UAAU,OAAO;AAAA,IAC9B;AAAA,EACF;AAIA,QAAM,cAAc,SAAS,GAAG,aAAa,QAAQ,KAAK,SAAS,gBAAgB;AACnF,MAAI,aAAa;AACf,gBAAY,QAAQ;AAAA,MAClB,GAAG,YAAY;AAAA,MACf,SAAS,EAAE,UAAU,YAAY,OAAO,SAAS,YAAY,IAAI,QAAQ,YAAY;AAAA,IACvF;AAAA,EACF;AAEA,QAAM,WAAW,SAAS,GAAG,aAAa,UAAU,KAAK,SAAS,kBAAkB;AACpF,MAAI,UAAU;AACZ,gBAAY,QAAQ;AAAA,MAClB,GAAG,YAAY;AAAA,MACf,UAAU,EAAE,oBAAoB,SAAS,UAAU,EAAE,EAAE;AAAA,IACzD;AAAA,EACF;AAEA,QAAM,QAAQ,SAAS,GAAG,aAAa,OAAO,KAAK,SAAS,eAAe;AAC3E,MAAI,OAAO;AACT,gBAAY,QAAQ;AAAA,MAClB,GAAG,YAAY;AAAA,MACf,OAAO,EAAE,cAAc,MAAM;AAAA,IAC/B;AAAA,EACF;AAEA,SAAO;AACT;;;AC/FO,IAAM,2BAA6D;AAAA,EACxE,KAAK;AAAA,EACL,MAAM;AAAA,EACN,SAAS;AAAA,EACT,MAAM;AAAA,EACN,KAAK;AAAA,EACL,OAAO;AAAA,EACP,QAAQ;AACV;AAGO,IAAM,sBAAsB;AAG5B,IAAM,uBAAuB;AAE7B,SAAS,oBAAoB,QAAwB;AAC1D,SAAO,yBAAyB,OAAO,YAAY,CAAC,KAAK;AAC3D;AAsDO,SAAS,uBAAuB,OAGrC;AACA,QAAM,QAAQ,MAAM,QAAQ,GAAG;AAC/B,MAAI,SAAS,GAAG;AACd,WAAO,EAAE,SAAS,MAAM,MAAM,GAAG,KAAK,EAAE;AAAA,EAC1C;AACA,QAAM,MAAM,MAAM,QAAQ,GAAG;AAC7B,MAAI,MAAM,KAAK,MAAM,MAAM,SAAS,GAAG;AACrC,WAAO,EAAE,SAAS,MAAM,MAAM,GAAG,GAAG,GAAG,iBAAiB,MAAM;AAAA,EAChE;AACA,SAAO,EAAE,SAAS,MAAM;AAC1B;AAkBO,SAAS,iBAAiB,OAA4C;AAC3E,QAAM,aAAa,MAAM,eAAe,uBAAuB,MAAM,YAAY,IAAI;AAGrF,MAAI;AACJ,MAAI;AACJ,MAAI,MAAM,aAAa;AACrB,aAAS,MAAM;AACf,mBAAe;AAAA,EACjB,WAAW,MAAM,4BAA4B,MAAM,cAAc;AAC/D,aAAS,MAAM;AACf,mBAAe;AAAA,EACjB,WAAW,CAAC,MAAM,4BAA4B,MAAM,aAAa;AAC/D,aAAS,MAAM;AACf,mBAAe;AAAA,EACjB,WAAW,CAAC,MAAM,4BAA4B,YAAY,iBAAiB;AACzE,aAAS,WAAW;AACpB,mBAAe;AAAA,EACjB,OAAO;AACL,aAAS,oBAAoB,MAAM,MAAM;AACzC,mBAAe;AAAA,EACjB;AAGA,MAAI;AACJ,MAAI;AACJ,MAAI,MAAM,cAAc;AACtB,cAAU,MAAM;AAChB,oBAAgB;AAAA,EAClB,WAAW,MAAM,2BAA2B;AAC1C,QAAI,MAAM,eAAe;AACvB,gBAAU,MAAM;AAChB,sBAAgB;AAAA,IAClB;AAAA,EACF,WAAW,YAAY;AACrB,cAAU,WAAW;AACrB,oBAAgB;AAAA,EAClB,WAAW,MAAM,eAAe;AAC9B,cAAU,MAAM;AAChB,oBAAgB;AAAA,EAClB,WAAW,MAAM,cAAc;AAC7B,cAAU,MAAM;AAChB,oBAAgB;AAAA,EAClB;AAEA,MAAI,CAAC,SAAS;AAGZ,UAAM,MAAM,OAAO,QAAQ,GAAG;AAC9B,QAAI,MAAM,GAAG;AACX,gBAAU,OAAO,MAAM,GAAG,GAAG;AAC7B,sBAAgB;AAAA,IAClB,OAAO;AACL,gBAAU;AACV,sBAAgB;AAAA,IAClB;AAAA,EACF;AAEA,SAAO,EAAE,SAAS,QAAQ,eAA+B,aAAa;AACxE;;;ACtKO,SAAS,4BACd,aACA,YACA,SAC+B;AAC/B,QAAM,WAA0C,CAAC;AAUjD,MAAI,YAAY,mBAAmB,YAAY,gBAAgB,SAAS,KAAK,SAAS;AACpF,QAAI,CAAC,YAAY,gBAAgB,SAAS,OAAO,GAAG;AAClD,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,WAAW;AAAA,QACX,OAAO,YAAY;AAAA,QACnB,SAAS,YAAY,OAAO,kCAAkC,YAAY,gBAAgB,KAAK,IAAI,CAAC;AAAA,MACtG,CAAC;AAAA,IACH;AAAA,EACF;AAGA,MAAI,YAAY,oBAAoB,YAAY,iBAAiB,SAAS,KAAK,SAAS;AACtF,QAAI,CAAC,YAAY,iBAAiB,SAAS,OAAO,GAAG;AACnD,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,WAAW;AAAA,QACX,OAAO,YAAY;AAAA,QACnB,SAAS,YAAY,OAAO,mCAAmC,YAAY,iBAAiB,KAAK,IAAI,CAAC;AAAA,MACxG,CAAC;AAAA,IACH;AAAA,EACF;AAKA,MAAI,YAAY,eAAe,YAAY,OAAO,UAAU,oBAAoB;AAC9E,UAAM,YAAY,WAAW,MAAM,SAAS;AAC5C,QAAI,YAAY,YAAY,aAAa;AACvC,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP;AAAA,QACA,OAAO,YAAY;AAAA,QACnB,SAAS,sBAAsB,SAAS,qBAAqB,YAAY,WAAW;AAAA,MACtF,CAAC;AAAA,IACH;AAAA,EACF;AAKA,MACE,YAAY,wBACZ,YAAY,qBAAqB,SAAS,KAC1C,YAAY,OAAO,OAAO,cAC1B;AACA,UAAM,YAAY,WAAW,MAAM,MAAM;AACzC,QAAI,CAAC,YAAY,qBAAqB,SAAS,SAAS,GAAG;AACzD,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP;AAAA,QACA,OAAO,YAAY;AAAA,QACnB,SAAS,iBAAiB,SAAS,kCAAkC,YAAY,qBAAqB,KAAK,IAAI,CAAC;AAAA,MAClH,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT;;;AC1BA,SAAS,0BAA0B,KAAgC;AACjE,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,IAAI;AAAA,EACN;AACF;AAMO,SAAS,4BAA4B,KAA2C;AACrF,SAAO,uBAAuB,IAAI,OAAwD;AAC5F;AAGA,SAAS,YAAY,OAA0D;AAC7E,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,CAAC;AACxC,SAAO;AACT;AASA,SAAS,oBACP,KACA,aACA,sBACA,qBACqB;AACrB,SAAO,iBAAiB;AAAA,IACtB,QAAQ,IAAI;AAAA,IACZ,cAAc,YAAY,IAAI,QAAQ,iBAAiB,CAAC;AAAA,IACxD,aAAa,YAAY,IAAI,QAAQ,gBAAgB,CAAC;AAAA,IACtD,eAAe,YAAY,IAAI,QAAQ,WAAW,KAAK,IAAI,QAAQ,WAAW,CAAC;AAAA,IAC/E,cAAc,OAAO,IAAI,MAAM,YAAY,WAAW,IAAI,MAAM,UAAU;AAAA,IAC1E,cAAc,aAAa;AAAA,IAC3B,aAAa,aAAa;AAAA,IAC1B,2BAA2B,CAAC,CAAC;AAAA,IAC7B,eAAe,uBAAuB,GAAG;AAAA,IACzC,0BAA0B,CAAC,CAAC;AAAA,IAC5B,cAAc,sBAAsB,GAAG;AAAA,EACzC,CAAC;AACH;AAmBA,SAAS,WACP,SACA,MACA,MACS;AAET,QAAM,eAAe,QAAQ,QAAQ,OAAO,IAAI,EAAE,QAAQ,OAAO,KAAK;AAEtE,QAAM,qBAAqB,IAAI,OAAO,IAAI,YAAY,GAAG;AACzD,QAAM,sBAAsB,mBAAmB,KAAK,IAAI;AAExD,MAAI,CAAC,MAAM,mBAAmB,CAAC,MAAM,qBAAqB;AACxD,WAAO;AAAA,EACT;AAEA,QAAM,uBAAuB,IAAI,OAAO,IAAI,YAAY,KAAK,GAAG;AAChE,QAAM,wBAAwB,qBAAqB,KAAK,IAAI;AAI5D,MAAI,MAAM,uBAAuB,wBAAwB,uBAAuB;AAE9E,YAAQ;AAAA,MACN,qEAAqE,OAAO,SAAS,IAAI,kBACtE,mBAAmB,oBAAoB,qBAAqB,kBAAkB,KAAK,iBAAiB,SAAS;AAAA,IAClI;AAAA,EACF;AAEA,SAAO,MAAM,kBAAkB,wBAAwB;AACzD;AAKA,SAAS,gBACP,QACA,MACA,QACA,MAC+B;AAC/B,SAAO,OAAO,KAAK,CAAC,UAAU;AAC5B,UAAM,gBACJ,MAAM,WAAW,OAAO,MAAM,OAAO,YAAY,MAAM,OAAO,YAAY;AAC5E,UAAM,cAAc,WAAW,MAAM,SAAS,MAAM,IAAI;AACxD,WAAO,iBAAiB;AAAA,EAC1B,CAAC;AACH;AAaA,SAAS,eAAe,QAAkC;AACxD,MAAI,OAAO,YAAY,OAAO,SAAS,SAAS,GAAG;AACjD,UAAM,OAAO,oBAAI,IAAY;AAC7B,WAAO,WAAW,OAAO,SAAS,OAAO,CAAC,MAAM;AAC9C,YAAM,MAAM,GAAG,EAAE,SAAS,IAAI,EAAE,OAAO,IAAK,EAA4B,YAAY,EAAE;AACtF,UAAI,KAAK,IAAI,GAAG,EAAG,QAAO;AAC1B,WAAK,IAAI,GAAG;AACZ,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AACA,MAAI,OAAO,iBAAiB,OAAO,cAAc,SAAS,GAAG;AAC3D,WAAO,gBAAgB,CAAC,GAAG,IAAI,IAAI,OAAO,aAAa,CAAC;AAAA,EAC1D;AACF;AAEA,SAAS,gBAAgB,QAA4B,MAAe,KAAqB;AAQvF,QAAM,aAAa,CAAC,OAAO,mBAAmB,MAAM;AAEpD,MAAI,UAAU,wBAAwB,UAAU;AAEhD,MAAI,OAAO,UAAU,EAAE,KAAK;AAAA,IAC1B,SAAS;AAAA,IACT,OAAO;AAAA,MACL,MAAM,CAAC,OAAO,mBAAmB,iBAAiB;AAAA,MAClD,SAAS,OAAO,gBAAgB,CAAC,KAAK;AAAA,MACtC,aAAa,OAAO;AAAA,MACpB,UAAU,OAAO;AAAA;AAAA,MAEjB,UAAU,OAAO;AAAA,MACjB,eAAe,OAAO;AAAA,IACxB;AAAA,EACF,CAAC;AACH;AAQA,IAAM,4BAA4B,IAAI,KAAK;AAkBpC,SAAS,iBAAiB,SAAmD;AAClF,QAAM;AAAA,IACJ,oBAAoB;AAAA,IACpB,gBAAgB;AAAA,IAChB,eAAe;AAAA,IACf,YAAY,CAAC;AAAA,IACb,WAAW;AAAA,IACX;AAAA,IACA,yBAAyB;AAAA,IACzB,kBAAkB;AAAA,IAClB,cAAc;AAAA,IACd,4BAA4B;AAAA,IAC5B,GAAG;AAAA,EACL,IAAI;AAGJ,MAAI,OAAO,YAAY;AACrB,sBAAkB,OAAO,UAAU,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EACrD;AAQA,MAAI,eAAoC,CAAC;AACzC,MAAI,cAAc;AAClB,MAAI,aAAmC;AACvC,MAAI,uBAAuB;AAC3B,MAAI,oBAAoB;AAExB,iBAAe,gBAA+B;AAC5C,QAAI,CAAC,OAAO,gBAAgB;AAC1B,UAAI,CAAC,sBAAsB;AAEzB,gBAAQ;AAAA,UACN;AAAA,QAGF;AACA,+BAAuB;AAAA,MACzB;AACA;AAAA,IACF;AACA,UAAM,UAAU,MAAM,YAAY,QAAQ,OAAO,cAAc;AAC/D,QAAI,SAAS;AACX,qBAAe;AACf,oBAAc,KAAK,IAAI;AAKvB,UAAI,aAAa,WAAW,KAAK,CAAC,mBAAmB;AAKnD,cAAM,YAAY,OAAO,gBAAgB;AAEzC,gBAAQ;AAAA,UACN,wDAAwD,OAAO,cAAc,oGAE3D,SAAS,wBAAwB,OAAO,cAAc;AAAA,QAC1E;AACA,4BAAoB;AAAA,MACtB;AAAA,IACF;AAAA,EACF;AAIA,eAAa,cAAc,EAAE,QAAQ,MAAM;AACzC,iBAAa;AAAA,EACf,CAAC;AAED,SAAO,OAAO,KAAc,KAAe,SAAsC;AAC/E,QAAI;AAEF,YAAM,aAAa,UAAU,KAAK,CAAC,YAAY,WAAW,SAAS,IAAI,IAAI,CAAC;AAC5E,UAAI,YAAY;AACd,eAAO,KAAK;AAAA,MACd;AAIA,UAAI,YAAY;AACd,cAAM,WAAW,MAAM,MAAM;AAAA,QAAC,CAAC;AAAA,MACjC;AAIA,UAAI,OAAO,kBAAkB,KAAK,IAAI,IAAI,cAAc,iBAAiB;AACvE,qBAAa,cAAc,EAAE,QAAQ,MAAM;AACzC,uBAAa;AAAA,QACf,CAAC;AAAA,MACH;AAMA,YAAM,gBACH,IAAI,QAAQ,cAAc,KAC1B,IAAI,QAAQ,kBAAkB;AACjC,YAAM,cAAc,gBAAgB,cAAc,IAAI,MAAM,IAAI,QAAQ;AAAA,QACtE,iBAAiB;AAAA,QACjB,qBAAqB;AAAA,QACrB;AAAA,MACF,CAAC;AAGD,UAAI,CAAC,aAAa;AAChB,YAAI,OAAO,sBAAsB;AAM/B,cAAI,UAAU,wBAAwB,YAAY;AAClD,cAAI;AAAA,YACF;AAAA,YACA,aAAa,WAAW,IAAI,cAAc;AAAA,UAC5C;AAAA,QACF;AACA,eAAO,KAAK;AAAA,MACd;AAGA,YAAM,gBAAgB,OAAO,aACzB,MAAM,iBAAiB,OAAO,UAAU,EAAE,MAAM,MAAM,MAAS,IAC/D;AAKJ,YAAM,cAAc,2BAChB,yBAAyB,GAAG,IAC5B,0BAA0B,GAAG;AAQjC,YAAM,gBAAgB,YAAY,mBAAmB;AACrD,UACE,YAAY,mBAAmB,WAC9B,CAAC,OAAO,gCAAgC,CAAC,YAAY,UACtD;AACA,YAAI,OAAO,sBAAsB;AAC/B,cAAI,UAAU,wBAAwB,YAAY;AAClD,cAAI,UAAU,0BAA0B,YAAY;AAAA,QACtD;AACA,eAAO,KAAK;AAAA,MACd;AAUA,YAAM,YAAY;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,YAAM,UAAU,UAAU;AAC1B,UAAI,OAAO,OAAO;AAKhB,gBAAQ,MAAM,uCAAuC;AAAA,UACnD,gBAAgB,UAAU;AAAA,UAC1B,kBAAkB,UAAU;AAAA,UAC5B,eAAe,UAAU;AAAA,UACzB,iBAAiB,UAAU;AAAA,QAC7B,CAAC;AAAA,MACH;AAGA,YAAM,aAAa,4BAA4B,GAAG;AAIlD,YAAM,kBAAkB,OAAO,mBAAmB,GAAG,IAAI,QAAQ,MAAM,IAAI,IAAI,MAAM,CAAC;AAKtF,YAAM,mBAAmB,4BAA4B,aAAa,YAAY,OAAO;AACrF,UAAI,iBAAiB,SAAS,GAAG;AAI/B,cAAMC,UAA6B;AAAA,UACjC,kBAAkB;AAAA,UAClB,eAAe;AAAA,UACf,aAAa;AAAA,UACb,eAAe,iBAAiB,IAAI,CAAC,MAAM,EAAE,OAAO;AAAA,UACpD,UAAU;AAAA,YACR,SAAS;AAAA,YACT,iBAAiB,eAAe,mBAAmB;AAAA,YACnD,kBAAkB,eAAe,oBAAoB;AAAA,UACvD;AAAA,UACA,YAAY,oBAAI,KAAK;AAAA,QACvB;AAEA,YAAI,oBAAoBA;AAGxB,0CAAkC,QAAQ;AAAA,UACxC,SAAS,YAAY,WAAW,YAAY,WAAW;AAAA,UACvD;AAAA,UACA,kBAAkB,OAAO,oBAAoB;AAAA,UAC7C,UAAU;AAAA,UACV,aAAa,IAAI;AAAA,UACjB,eAAe,IAAI;AAAA,QACrB,CAAC,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAEjB,uBAAeA,OAAM;AACrB,iBAASA,SAAQ,KAAK,GAAG;AACzB;AAAA,MACF;AAGA,YAAM,wBAAwB,oBAAoB;AAClD,YAAM,eAAe,IAAI,QAAQ,iBAAiB;AAClD,YAAM,kBAAkB,MAAM,QAAQ,YAAY,IAAI,aAAa,KAAK,IAAI,IAAI;AAWhF,YAAM,mBACJ,IAAI,OAAO,kBAAkB,gBAAgB,MAAM,GAAG,EAAE,CAAC,EAAE,KAAK,IAAI;AACtE,UAAI,CAAC,IAAI,MAAM,iBAAiB;AAE9B,gBAAQ;AAAA,UACN;AAAA,QAEF;AAAA,MACF;AACA,YAAM,eACJ,OAAO,IAAI,QAAQ,wBAAwB,MAAM,WAC5C,IAAI,QAAQ,wBAAwB,IACrC;AAEN,YAAM,SAAS,MAAM,OAAO,QAAQ;AAAA,QAClC;AAAA,QACA;AAAA,QACA,QAAQ,UAAU;AAAA,QAClB,UAAU,IAAI;AAAA,QACd,eAAe;AAAA,QACf;AAAA,QACA,kBAAkB,OAAO,oBAAoB;AAAA,QAC7C;AAAA,QACA,kBAAkB,YAAY,OAAO,UAAU;AAAA,QAC/C,gBAAgB;AAAA,UACd,UAAU;AAAA,UACV,WAAW,IAAI,QAAQ,YAAY;AAAA,UACnC,SAAS,IAAI,QAAQ;AAAA,UACrB,MAAM,IAAI,QAAQ;AAAA,UAClB,cAAc;AAAA,UACd;AAAA,QACF;AAAA,MACF,CAAC;AAGD,UAAI,oBAAoB;AACxB,YAAM,YAAa,OAAsC;AAazD,UAAI,CAAC,OAAO,oBAAoB,CAAC,OAAO,eAAe;AACrD,YAAI,yBAAyB,WAAW;AACtC,yBAAe,QAAQ,WAAW,UAAU,OAAO,gBAAgB,CAAC,CAAC,EAAE,MAAM,MAAM;AAAA,UAAC,CAAC;AAAA,QACvF;AACA,uBAAe,MAAM;AACrB,iBAAS,QAAQ,KAAK,GAAG;AACzB;AAAA,MACF;AAOA,UAAI,CAAC,eAAe;AAClB,YAAI,OAAO,sBAAsB;AAC/B,cAAI,UAAU,wBAAwB,UAAU;AAChD,cAAI,UAAU,0BAA0B,wBAAwB;AAAA,QAClE;AACA,YAAI,yBAAyB,WAAW;AACtC,yBAAe,QAAQ,WAAW,SAAS,EAAE,MAAM,MAAM;AAAA,UAAC,CAAC;AAAA,QAC7D;AACA,eAAO,KAAK;AAAA,MACd;AAcA,UAAI,YAAY,iBAAiB,OAAO,OAAO;AAC7C,YAAI,OAAO,MAAM,aAAa,YAAY,eAAe;AAIvD,gBAAM,eAAe;AAAA,YACnB,WAAW;AAAA,YACX,SAAS;AAAA,YACT,UACE;AAAA,UACJ;AACA,iBAAO,WAAW,CAAC,GAAI,OAAO,YAAY,CAAC,GAAI,YAAY;AAC3D,iBAAO,gBAAgB,CAAC,aAAa,OAAO;AAC5C,cAAI,CAAC,OAAO,YAAY,eAAe;AACrC,mBAAO,WAAW;AAAA,cAChB,SAAS,aAAa;AAAA,cACtB,iBAAiB,cAAc;AAAA,cAC/B,kBAAkB,cAAc;AAAA,YAClC;AAAA,UACF;AACA,cAAI,yBAAyB,WAAW;AACtC,2BAAe,QAAQ,WAAW,UAAU,aAAa,OAAO,EAAE,MAAM,MAAM;AAAA,YAAC,CAAC;AAAA,UAClF;AACA,yBAAe,MAAM;AACrB,mBAAS,QAAQ,KAAK,GAAG;AACzB;AAAA,QACF;AAAA,MACF;AAGA,UAAI,yBAAyB,WAAW;AACtC,uBAAe,QAAQ,WAAW,SAAS,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAAA,MAC7D;AAMA,YAAM,iBAAiB;AACvB,UAAI,eAAe,eAAe;AAChC,YAAI,UAAU,eAAe,cAAc,MAAM,eAAe,cAAc,KAAK;AAAA,MACrF;AACA,WAAK;AAAA,IACP,SAAS,OAAO;AAMd,YAAM,aAAa,iBAAiB,QAAQ,MAAM,YAAY,OAAO,OAAO;AAC5E,YAAM,gBACH,IAAI,QAAQ,cAAc,KAC1B,IAAI,QAAQ,kBAAkB,KAC/B,OAAO,KAAK,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC;AAE1E,cAAQ,MAAM,2CAA2C,KAAK;AAE9D,cAAQ;AAAA,QACN,0CAA0C,UAAU,UAAU,IAAI,MAAM,IAAI,IAAI,IAAI,eAAe,OAAO,kBAAkB,SAAS,kBAAkB,aAAa;AAAA,MACtK;AAEA,UAAI,gBAAgB,UAAU;AAC5B,cAAM,SAA6B;AAAA,UACjC,kBAAkB;AAAA,UAClB,eAAe;AAAA,UACf,aAAa;AAAA,UACb,eAAe,CAAC,2CAA2C,UAAU,EAAE;AAAA,UACvE,UAAU;AAAA,YACR;AAAA,cACE,WAAW;AAAA,cACX,SAAS,oBAAoB,UAAU;AAAA,YACzC;AAAA,UACF;AAAA,UACA,YAAY,oBAAI,KAAK;AAAA,UACrB;AAAA,QACF;AACA,cAAM,YAAY,OAAO,aACrB,MAAM,iBAAiB,OAAO,UAAU,EAAE,MAAM,MAAM,MAAS,IAC/D;AACJ,YAAI,WAAW;AACb,iBAAO,WAAW;AAAA,YAChB,SAAS,oBAAoB,UAAU;AAAA,YACvC,iBAAiB,UAAU;AAAA,YAC3B,kBAAkB,UAAU;AAAA,UAC9B;AAAA,QACF;AACA,uBAAe,MAAM;AACrB,eAAO,SAAS,QAAQ,KAAK,GAAG;AAAA,MAClC;AAEA,WAAK;AAAA,IACP;AAAA,EACF;AACF;","names":["result","result"]}
+{"version":3,"sources":["../../src/access-levels.ts","../../src/version.ts","../../src/well-known.ts","../../src/verify.ts","../../src/transport/http.ts","../../src/adapters/http-pdlss.ts","../../src/adapters/approval-gate.ts","../../src/pdlss-pre-check.ts","../../src/adapters/express.ts"],"sourcesContent":["/**\n * AstraSync Universal Verification Gateway - Access Level Definitions\n *\n * Defines the hierarchy and capabilities of each access level.\n *\n * v2.3.9 (defect #30): renamed `'guidance'` band → `'restricted'`. See\n * `types.ts` AccessLevel for the rationale (value-name collision with the\n * `guidance: {...}` help-payload object on VerificationResult).\n */\n\nimport type { AccessLevel, TrustLevel } from './types';\n\n/**\n * Access level hierarchy (higher number = more access)\n */\nexport const ACCESS_LEVEL_HIERARCHY: Record<AccessLevel, number> = {\n  none: 0,\n  restricted: 1,\n  'read-only': 2,\n  standard: 3,\n  full: 4,\n  internal: 5,\n};\n\n/**\n * Access level descriptions for UI\n */\nexport const ACCESS_LEVEL_DESCRIPTIONS: Record<AccessLevel, string> = {\n  none: 'No access - credentials required',\n  restricted: 'Restricted access - registration prompt only',\n  'read-only': 'Read-only access - can browse but not modify',\n  standard: 'Standard access - normal operations per PDLSS policy',\n  full: 'Full access - all operations for high-trust agents',\n  internal: 'Internal access - organization member privileges',\n};\n\n/**\n * Default trust score thresholds for access levels\n */\nexport const DEFAULT_TRUST_THRESHOLDS: Record<AccessLevel, number> = {\n  none: 0,\n  restricted: 0,\n  'read-only': 20,\n  standard: 40,\n  full: 70,\n  internal: 0, // Internal is based on org membership, not score\n};\n\n/**\n * Trust level score ranges\n */\nexport const TRUST_LEVEL_RANGES: Record<TrustLevel, { min: number; max: number }> = {\n  BRONZE: { min: 0, max: 39 },\n  SILVER: { min: 40, max: 59 },\n  GOLD: { min: 60, max: 79 },\n  PLATINUM: { min: 80, max: 100 },\n};\n\n/**\n * Determine trust level from score\n */\nexport function getTrustLevel(score: number): TrustLevel {\n  if (score >= 80) return 'PLATINUM';\n  if (score >= 60) return 'GOLD';\n  if (score >= 40) return 'SILVER';\n  return 'BRONZE';\n}\n\n/**\n * Check if access level A is greater than or equal to access level B.\n *\n * @deprecated 3.2.0 — the access-level band is informational only and no\n * longer gates in the middleware adapters (post-3.1.0 feedback #1). Retained\n * for explicit opt-in queries and back-compat. Prefer the server-side policy\n * decision (identity + policy + trust) or per-route `minTrustScore`.\n */\nexport function hasMinimumAccess(actual: AccessLevel, required: AccessLevel): boolean {\n  return ACCESS_LEVEL_HIERARCHY[actual] >= ACCESS_LEVEL_HIERARCHY[required];\n}\n\n/**\n * Get the highest access level for a given trust score\n */\nexport function getAccessLevelForScore(\n  trustScore: number,\n  thresholds: Record<AccessLevel, number> = DEFAULT_TRUST_THRESHOLDS\n): AccessLevel {\n  if (trustScore >= thresholds.full) return 'full';\n  if (trustScore >= thresholds.standard) return 'standard';\n  if (trustScore >= thresholds['read-only']) return 'read-only';\n  return 'restricted';\n}\n\n/**\n * Determine access level from verification result.\n *\n * v2.3.9 (defect #30): unverified callers now return `'none'` (was\n * `'guidance'`). Denials grant zero — never a positive band.\n */\nexport function determineAccessLevel(\n  verified: boolean,\n  trustScore: number,\n  isOrgMember: boolean,\n  customThresholds?: Partial<Record<AccessLevel, number>>\n): AccessLevel {\n  if (!verified) {\n    return 'none';\n  }\n\n  if (isOrgMember) {\n    return 'internal';\n  }\n\n  const thresholds = {\n    ...DEFAULT_TRUST_THRESHOLDS,\n    ...customThresholds,\n  };\n\n  return getAccessLevelForScore(trustScore, thresholds);\n}\n\n/**\n * Access capabilities per level\n */\nexport interface AccessCapabilities {\n  canRead: boolean;\n  canWrite: boolean;\n  canDelete: boolean;\n  canAdmin: boolean;\n  canAccessInternal: boolean;\n  maxTransactionValue?: number;\n  allowedPurposes?: string[];\n}\n\n/**\n * Get capabilities for an access level\n */\nexport function getCapabilities(accessLevel: AccessLevel): AccessCapabilities {\n  switch (accessLevel) {\n    case 'none':\n      return {\n        canRead: false,\n        canWrite: false,\n        canDelete: false,\n        canAdmin: false,\n        canAccessInternal: false,\n      };\n    case 'restricted':\n      return {\n        canRead: false,\n        canWrite: false,\n        canDelete: false,\n        canAdmin: false,\n        canAccessInternal: false,\n      };\n    case 'read-only':\n      return {\n        canRead: true,\n        canWrite: false,\n        canDelete: false,\n        canAdmin: false,\n        canAccessInternal: false,\n      };\n    case 'standard':\n      return {\n        canRead: true,\n        canWrite: true,\n        canDelete: false,\n        canAdmin: false,\n        canAccessInternal: false,\n      };\n    case 'full':\n      return {\n        canRead: true,\n        canWrite: true,\n        canDelete: true,\n        canAdmin: false,\n        canAccessInternal: false,\n      };\n    case 'internal':\n      return {\n        canRead: true,\n        canWrite: true,\n        canDelete: true,\n        canAdmin: true,\n        canAccessInternal: true,\n      };\n    default:\n      return {\n        canRead: false,\n        canWrite: false,\n        canDelete: false,\n        canAdmin: false,\n        canAccessInternal: false,\n      };\n  }\n}\n","/**\n * Round-13 (F14 closure / R13-7): single source-of-truth for the SDK's\n * package version emitted on verify-access bodies (and any future\n * telemetry). Bumped alongside `package.json#version` on every release.\n *\n * Why a constant rather than `import pkg from '../package.json'`:\n * - `tsconfig.json` sets `rootDir: ./src`; importing the sibling\n *   package.json fails the build with \"outside rootDir\".\n * - Build-time string replacement (tsup `define`, esbuild banner, etc.)\n *   adds toolchain coupling for a trivial gain.\n * - Embedded readonly constant works in every environment (Node, browser,\n *   bundlers, Deno) without runtime fs / network access.\n *\n * Release discipline: a CI lint can grep `package.json#version` against\n * this constant if the two ever diverge in the wild. Round-13 manual bump\n * is fine — bumping both in the release-ceremony commit keeps them\n * lockstep.\n */\nexport const SDK_VERSION = '3.3.0';\n","/**\n * SDK-side discovery of canonical platform URLs via `/.well-known/agentic-commerce`.\n *\n * Fire-and-forget pre-fetch at middleware creation; first verify() awaits\n * the in-flight promise if it hasn't resolved. 60-minute TTL with\n * stale-while-revalidate background refresh.\n */\n\nexport interface WellKnownAgenticCommerce {\n  registrationUrl: string;\n  documentationUrl: string;\n  verifyAccessUrl: string;\n}\n\ninterface CacheEntry {\n  data: WellKnownAgenticCommerce;\n  fetchedAt: number;\n}\n\nconst CACHE_TTL_MS = 60 * 60 * 1000; // 60 minutes\n\nconst cache = new Map<string, CacheEntry>();\nconst inflight = new Map<string, Promise<WellKnownAgenticCommerce>>();\n\nfunction wellKnownUrl(apiBaseUrl: string): string {\n  // apiBaseUrl is typically 'https://astrasync.ai/api' — strip the /api suffix\n  // to get the platform root, then append /.well-known/agentic-commerce.\n  const base = apiBaseUrl.replace(/\\/api\\/?$/, '');\n  return `${base}/.well-known/agentic-commerce`;\n}\n\nasync function fetchWellKnown(apiBaseUrl: string): Promise<WellKnownAgenticCommerce> {\n  const url = wellKnownUrl(apiBaseUrl);\n  const response = await fetch(url, {\n    method: 'GET',\n    headers: { Accept: 'application/json' },\n    signal: AbortSignal.timeout(5000),\n  });\n  if (!response.ok) {\n    throw new Error(\n      `AstraSync platform must expose /.well-known/agentic-commerce; ` +\n        `got ${response.status} from ${url}. SDK cannot initialise without it.`\n    );\n  }\n  const data = (await response.json()) as Record<string, unknown>;\n  if (!data.registrationUrl || !data.documentationUrl || !data.verifyAccessUrl) {\n    throw new Error(\n      `/.well-known/agentic-commerce response missing required fields ` +\n        `(registrationUrl, documentationUrl, verifyAccessUrl).`\n    );\n  }\n  return data as unknown as WellKnownAgenticCommerce;\n}\n\n/**\n * Start a background fetch. Returns the promise for callers that need\n * to await it (first verify() call).\n */\nexport function prefetchWellKnown(apiBaseUrl: string): Promise<WellKnownAgenticCommerce> {\n  const existing = inflight.get(apiBaseUrl);\n  if (existing) return existing;\n\n  const promise = fetchWellKnown(apiBaseUrl)\n    .then((data) => {\n      cache.set(apiBaseUrl, { data, fetchedAt: Date.now() });\n      inflight.delete(apiBaseUrl);\n      return data;\n    })\n    .catch((err) => {\n      inflight.delete(apiBaseUrl);\n      throw err;\n    });\n\n  inflight.set(apiBaseUrl, promise);\n  return promise;\n}\n\n/**\n * Get cached well-known URLs. If stale, triggers a background refresh\n * and returns stale data (stale-while-revalidate). If no cache exists,\n * awaits the in-flight fetch or starts a new one.\n */\nexport async function getWellKnownUrls(apiBaseUrl: string): Promise<WellKnownAgenticCommerce> {\n  const entry = cache.get(apiBaseUrl);\n\n  if (entry) {\n    if (Date.now() - entry.fetchedAt > CACHE_TTL_MS) {\n      // Stale — trigger background refresh, return stale data\n      prefetchWellKnown(apiBaseUrl).catch(() => {\n        // Background refresh failed — stale data remains until next request\n      });\n    }\n    return entry.data;\n  }\n\n  // No cache — must await\n  const pending = inflight.get(apiBaseUrl);\n  if (pending) return pending;\n\n  return prefetchWellKnown(apiBaseUrl);\n}\n\n/**\n * Synchronous cache read — returns cached URLs or undefined.\n * Never triggers a fetch. Used by verify() to avoid extra HTTP calls\n * in the hot path; adapters are responsible for prefetching.\n */\nexport function getCachedWellKnownUrls(apiBaseUrl: string): WellKnownAgenticCommerce | undefined {\n  return cache.get(apiBaseUrl)?.data;\n}\n\n/** Reset cache — for testing only. */\nexport function _resetWellKnownCache(): void {\n  cache.clear();\n  inflight.clear();\n}\n","/**\n * AstraSync Universal Verification Gateway - Core Verification Logic\n *\n * This module handles the core verification logic, calling the AstraSync API\n * and processing the response into a standardized VerificationResult.\n */\n\nimport type {\n  GatewayConfig,\n  AgentCredentials,\n  VerificationRequest,\n  VerificationResult,\n  VerifiedAgent,\n  VerifiedDeveloper,\n  VerifiedOrganization,\n  GuidanceInfo,\n  AccessLevel,\n  EnhancedVerificationResult,\n  TokenGuidance,\n  RuntimeChallengeResult,\n} from './types';\nimport { getTrustLevel } from './access-levels';\nimport { SDK_VERSION } from './version';\nimport { getCachedWellKnownUrls, type WellKnownAgenticCommerce } from './well-known';\n\n/**\n * Default configuration values\n *\n * apiBaseUrl matches the OpenAPI authoritative server (https://astrasync.ai/api\n * for prod, https://staging.astrasync.ai/api for staging). Always include the\n * /api path prefix when overriding — registration / docs URLs are derived by\n * stripping it.\n */\nconst DEFAULT_CONFIG: Partial<GatewayConfig> = {\n  apiBaseUrl: 'https://astrasync.ai/api',\n  // v2.3.9 (defect #30): default for unconfigured callers is `'none'` (no\n  // access). Pre-rename this defaulted to `'guidance'`, which combined with\n  // a route gated at `'guidance'` to silently let unverified traffic\n  // through (`hasMinimumAccess('guidance', 'guidance') === true`).\n  defaultAccessLevel: 'none',\n  // minTrustScore + minTrustScoreForFull deprecated in v2.3.0 — server decides.\n  // Round-18.5 F4: cacheTtl deliberately unset. When undefined, cacheResult\n  // applies the split default (60s autonomous / 300s step-up). When the\n  // caller sets cacheTtl explicitly, that value is honoured uniformly.\n  // Set cacheTtl: 0 to disable caching entirely.\n  debug: false,\n};\n\n/**\n * Init self-test state. Fires once per process on first verify() call to warn\n * if apiBaseUrl is pointing at the wrong host (e.g. a marketing site that\n * 200s with text/html instead of the API).\n */\nlet initCheckPerformed = false;\n\n/** One-shot guard for v2.3.0 deprecation warning. */\nlet deprecationWarningShown = false;\n\nasync function performInitCheck(\n  apiBaseUrl: string,\n  debug?: boolean,\n  strictInit?: boolean\n): Promise<void> {\n  initCheckPerformed = true;\n  try {\n    const probeUrl = `${apiBaseUrl}/agents/verify-access`;\n    // HEAD mirrors GET semantics (running the full request pipeline without a\n    // body) so the response carries the same content-type the marketing 404\n    // would return. OPTIONS often gets short-circuited by CORS-preflight\n    // handlers and returns no content-type, defeating the check.\n    const response = await fetch(probeUrl, { method: 'HEAD' });\n    const contentType = response.headers.get('content-type') ?? '';\n    if (contentType.startsWith('text/html')) {\n      const message =\n        `[VerificationGateway] apiBaseUrl '${apiBaseUrl}' returned HTML (content-type: ${contentType}). ` +\n        `This usually means apiBaseUrl is pointing at a marketing site instead of the API. ` +\n        `Expected: 'https://astrasync.ai/api' (prod) or 'https://staging.astrasync.ai/api' (staging).`;\n      // Audit F-A6-33: when strictInit is set, throw on misconfig instead\n      // of warning + continuing. Recurring footgun per\n      // `[[feedback_astrasync_api_url_canonical]]` — silent warn lets\n      // misconfigured prod deploys ship with all verify-access calls\n      // silently failing.\n      if (strictInit) {\n        throw new Error(`${message} (strictInit=true)`);\n      }\n      console.warn(`${message} Set disableInitChecks: true on GatewayConfig to silence.`);\n    } else if (debug) {\n      console.log(\n        `[VerificationGateway] init check passed for ${apiBaseUrl} (content-type: ${contentType})`\n      );\n    }\n  } catch (err) {\n    if (strictInit) {\n      // strict mode propagates init failures so callers get a clear,\n      // synchronous \"your config is broken\" signal at startup.\n      throw err;\n    }\n    if (debug) {\n      console.log(`[VerificationGateway] init check failed (non-blocking): ${String(err)}`);\n    }\n  }\n}\n\n/**\n * Simple in-memory cache for verification results\n */\nconst verificationCache = new Map<string, { result: VerificationResult; expiresAt: number }>();\n\n/**\n * Generate cache key from the full request shape.\n *\n * Round-18.5 F4: pre-fix the key was credentials-only (`astraId-apiKey-jwt`),\n * which silently returned the cached result of a prior call even when the\n * subsequent call's purpose/action/counterparty/etc. differed. That was a\n * security gap — a warm cache could serve an allow verdict for a purpose the\n * agent hadn't actually been authorised for. Key now includes every field\n * that affects the backend verdict.\n *\n * MAINTAIN: when adding a field to VerificationRequest that affects the\n * backend verdict, add it to this key. Fields that don't affect verdict\n * (e.g. requestId, timestamps, sdkVersion) don't belong here — including\n * them would needlessly thrash the cache for repeated identical requests.\n */\nfunction getCacheKey(request: VerificationRequest, counterpartyId?: string): string {\n  const c = request.credentials;\n  return [\n    c.astraId || '',\n    c.apiKey || '',\n    c.jwt || '',\n    request.purpose || '',\n    request.action || '',\n    request.resourceType || '',\n    request.resource || '',\n    request.jurisdiction || '',\n    request.transactionValue ?? '',\n    request.currency || '',\n    // SECURITY (cross-merchant cache leak): the merchant identity is sent via\n    // `config.counterpartyId`, NOT on the request, so it was previously absent\n    // from the key — two verifies for the SAME agent/purpose/action/value but\n    // DIFFERENT merchants collided, and a grant at a permissive merchant (low\n    // trust floor) was served for a stricter one. Same bug class as the\n    // duration omission (F-A1-07). counterpartyId affects the backend verdict\n    // (trust floor / per-route policy), so it MUST key the cache.\n    counterpartyId || '',\n    request.counterpartyUrl || '',\n    request.counterpartyType || '',\n    request.isSubAgentRequest ? '1' : '0',\n    request.parentAgentId || '',\n    request.subAgentDepth ?? '',\n    // Audit F-A1-07: previously-missing dimensions that DO affect the\n    // backend verdict. Without these, two requests with different\n    // durations (e.g. 60s vs 86400s) collided on the same cache key and\n    // the shorter-duration allow served the longer-duration request.\n    request.durationRequired ?? '',\n    request.invocationProtocol || '',\n    request.enableRuntimeChallenge ? '1' : '0',\n    // callerMetadata fields contribute to risk model; include the ones\n    // backend reads. sourceIp/userAgent/forwardedFor change per-request\n    // so their inclusion effectively forces a re-check for any varying\n    // client (the right behavior — IP-driven anomaly scoring shouldn't\n    // be cached across IPs).\n    request.callerMetadata?.sourceIp || '',\n    request.callerMetadata?.userAgent || '',\n    request.callerMetadata?.forwardedFor || '',\n    request.callerMetadata?.agentCardUrl || '',\n  ].join('|');\n}\n\n/**\n * Check if cached result is still valid\n */\nfunction getCachedResult(\n  request: VerificationRequest,\n  counterpartyId?: string\n): VerificationResult | null {\n  const key = getCacheKey(request, counterpartyId);\n  const cached = verificationCache.get(key);\n\n  if (cached && cached.expiresAt > Date.now()) {\n    return cached.result;\n  }\n\n  if (cached) {\n    verificationCache.delete(key);\n  }\n\n  return null;\n}\n\n/**\n * Cache a verification result.\n *\n * Round-18.5 F4: TTL splits by step-up status when the caller hasn't pinned\n * `configuredTtl` explicitly. Autonomous verdicts cache for 60s (faster\n * policy-update propagation, better security posture); step-up verdicts cache\n * for 300s (matches human-paced approval cycles, prevents thrashing during\n * the user-action window). When `configuredTtl` is set (truthy positive\n * number), it's honoured uniformly for back-compat with partners pinning a\n * specific TTL today.\n */\nconst DEFAULT_AUTONOMOUS_TTL_SECONDS = 60;\nconst DEFAULT_STEP_UP_TTL_SECONDS = 300;\n\nfunction cacheResult(\n  request: VerificationRequest,\n  result: VerificationResult,\n  configuredTtl: number | undefined,\n  counterpartyId?: string\n): void {\n  const ttlSeconds =\n    configuredTtl && configuredTtl > 0\n      ? configuredTtl\n      : result.requiresStepUp\n        ? DEFAULT_STEP_UP_TTL_SECONDS\n        : DEFAULT_AUTONOMOUS_TTL_SECONDS;\n  const key = getCacheKey(request, counterpartyId);\n  verificationCache.set(key, {\n    result,\n    expiresAt: Date.now() + ttlSeconds * 1000,\n  });\n}\n\n/**\n * Clear the verification cache\n */\nexport function clearCache(): void {\n  verificationCache.clear();\n}\n\n/**\n * Extract agent credentials from various sources\n */\nexport function extractCredentials(\n  headers: Record<string, string | string[] | undefined>,\n  query?: Record<string, string | undefined>\n): AgentCredentials {\n  const credentials: AgentCredentials = {};\n\n  // Audit F-A1-12: ASTRA-ID shape validation. Accept only the canonical\n  // pattern (ASTRA-/ASTRAE- prefix + 1-64 url-safe chars) to prevent CRLF\n  // header injection or downstream interpolation surprises. Reject otherwise.\n  const ASTRA_ID_PATTERN = /^ASTRAE?-[A-Za-z0-9_-]{1,64}$/;\n\n  // Check for ASTRA-ID in headers (case-insensitive). Accepts the historical\n  // X-Astra-Id name plus the X-Astra-AgentId / x-astra-agent-id alias the\n  // partner asked for in #9a — both surface the same field.\n  const astraIdHeader =\n    headers['x-astra-id'] ||\n    headers['X-Astra-Id'] ||\n    headers['X-ASTRA-ID'] ||\n    headers['x-astra-agentid'] ||\n    headers['X-Astra-AgentId'] ||\n    headers['x-astra-agent-id'] ||\n    headers['X-Astra-Agent-Id'] ||\n    headers['X-ASTRA-AGENT-ID'];\n  if (astraIdHeader) {\n    // Audit F-A1-11: guard array-confusion. If multiple X-Astra-Id headers\n    // were sent (Express collapses to comma-joined string on most paths),\n    // take only the first canonical-shaped one.\n    const raw = Array.isArray(astraIdHeader)\n      ? astraIdHeader[0]\n      : typeof astraIdHeader === 'string'\n        ? astraIdHeader\n        : undefined;\n    if (typeof raw === 'string' && ASTRA_ID_PATTERN.test(raw)) {\n      credentials.astraId = raw;\n    }\n  }\n\n  // Check for API key in headers\n  const apiKeyHeader = headers['x-api-key'] || headers['X-Api-Key'] || headers['X-API-KEY'];\n  if (apiKeyHeader) {\n    credentials.apiKey = Array.isArray(apiKeyHeader) ? apiKeyHeader[0] : apiKeyHeader;\n  }\n\n  // Check Authorization header for Bearer token.\n  // Audit F-A1-11: defensive type guard — Array.isArray gives a non-string,\n  // and Express path quirks can produce undefined despite the truthy check.\n  const authHeader = headers['authorization'] || headers['Authorization'];\n  if (authHeader) {\n    const authValue = Array.isArray(authHeader) ? authHeader[0] : authHeader;\n    if (typeof authValue === 'string') {\n      credentials.authorizationHeader = authValue;\n      if (authValue.startsWith('Bearer ')) {\n        credentials.jwt = authValue.slice(7);\n      }\n    }\n  }\n\n  // Check query parameters as fallback\n  if (query) {\n    if (query.astraId && !credentials.astraId) {\n      credentials.astraId = query.astraId;\n    }\n    if (query.apiKey && !credentials.apiKey) {\n      credentials.apiKey = query.apiKey;\n    }\n  }\n\n  return credentials;\n}\n\n/**\n * Check if credentials are present\n */\nexport function hasCredentials(credentials: AgentCredentials): boolean {\n  return !!(credentials.astraId || credentials.apiKey || credentials.jwt);\n}\n\n/**\n * Source of a synthesised guidance response. Round-10 split — the\n * `'no_credentials'` shape is the original (caller has no AstraSync\n * credentials, suggest registration). The `'api_error'` shape is for when\n * the verify-access HTTP call itself failed (5xx, network, etc.) — DON'T\n * tell a verified-but-currently-blocked partner to \"register your agent\".\n */\ntype GuidanceSource = 'no_credentials' | 'api_error';\n\n/**\n * Create guidance response for unverified agents or for API-error fallback.\n *\n * Round-10 (#47, O5): split source so the `register your agent` template\n * doesn't fire on transient backend failures. Also threads `correlationId`\n * through so adapter `onDenied` handlers can surface it on the merchant's\n * response body for log correlation.\n */\nfunction createGuidanceResponse(\n  _config: GatewayConfig,\n  reason?: string,\n  options: { source?: GuidanceSource; correlationId?: string; urls?: WellKnownAgenticCommerce } = {}\n): VerificationResult {\n  const source = options.source ?? 'no_credentials';\n  const isApiError = source === 'api_error';\n  const urls = options.urls;\n\n  const guidance: GuidanceInfo = isApiError\n    ? {\n        message:\n          'Verification is temporarily unavailable. Retry with exponential backoff; if the issue persists, contact support with the correlationId.',\n        registrationUrl: urls?.registrationUrl ?? '',\n        documentationUrl: urls?.documentationUrl ?? '',\n        steps: [\n          'Retry the request with exponential backoff',\n          'If failures persist, share the correlationId with support',\n        ],\n      }\n    : {\n        message:\n          'This service verifies AI agents before granting access. Please register your agent with AstraSync.',\n        registrationUrl: urls?.registrationUrl ?? '',\n        documentationUrl: urls?.documentationUrl ?? '',\n        steps: [\n          'Register for an AstraSync account',\n          'Create and register your agent',\n          'Add your ASTRA-ID to request headers',\n          'Retry your request',\n        ],\n      };\n\n  return {\n    // Round-18 G4: createGuidanceResponse fires for unverified-agent path or\n    // API-error fallback. Identity is not verified (no agent resolved);\n    // policy is not evaluated (we never reached the gate).\n    identityVerified: false,\n    policyAllowed: false,\n    // v2.3.9 (defect #30): denials grant `'none'`, NEVER a positive band.\n    // Adapters additionally short-circuit on `!identityVerified ||\n    // !policyAllowed` before the gate check, but the access level still has\n    // to be honest at the data layer so downstream consumers (SDK adapters\n    // in other languages, custom integrations) inherit the correct\n    // semantics.\n    accessLevel: 'none',\n    guidance,\n    denialReasons: reason ? [reason] : ['No valid agent credentials provided'],\n    // Round-10 (#47, O5): on API-error fallback, surface a typed failure so\n    // partners (and their custom onDenied handlers) can branch on\n    // dimension. Without this, the synthesised stub was indistinguishable\n    // from a real policy deny.\n    failures: isApiError\n      ? [\n          {\n            dimension: 'verify_access.api_error',\n            message: reason ?? 'Verification temporarily unavailable',\n            guidance: guidance.message,\n          },\n        ]\n      : undefined,\n    correlationId: options.correlationId,\n    verifiedAt: new Date(),\n  };\n}\n\n/**\n * Call the AstraSync verify-access API\n */\nasync function callVerifyAccessAPI(\n  config: GatewayConfig,\n  request: VerificationRequest\n): Promise<{\n  success: boolean;\n  access?: {\n    allowed: boolean;\n    /**\n     * Server-decided access level. Read verbatim — do NOT remap client-side.\n     * The server resolves this from endpoint policy + agent trust score using\n     * the canonical thresholds (see backend `apps/backend/src/utils/access-levels.ts`).\n     */\n    accessLevel?: AccessLevel;\n    reason?: string;\n    /**\n     * Aggregated denial failures (v2.9.8+). Empty / absent when allowed.\n     * Each entry is `{ dimension, message, guidance? }` — see\n     * `AccessFailure` for the contract.\n     */\n    failures?: Array<{ dimension: string; message: string; guidance?: string }>;\n    requiresStepUp?: boolean;\n    requiresApproval?: boolean;\n    appliedPolicy?: {\n      boundaryName: string;\n      policyVersion: string;\n    };\n    counterparty?: {\n      id: string;\n      name: string;\n      trustScoreRequirement: number;\n    };\n  };\n  agent?: {\n    kyaAgentId: string;\n    astraId: string;\n    name: string;\n    trustScore: number;\n    trustLevel: string;\n    agentStatus: string;\n    blockchainStatus: string;\n  };\n  developer?: {\n    kyaOwnerId: string;\n    fullName: string;\n    email: string;\n    identityVerified: boolean;\n    trustScore: number;\n  };\n  organization?: {\n    name: string;\n    verified: boolean;\n    trustScore: number;\n  };\n  /**\n   * Structured explanation of the verification decision. Tells the merchant\n   * WHY (id verified? challenge passed? request within PDLSS? trust score?)\n   * without exposing thresholds, scope lists, or other-tenant counterparty\n   * membership. Empty `attestations` unless the endpoint's access policy\n   * declared `required_attestations`.\n   */\n  verificationContext?: {\n    idVerified: boolean;\n    runtimeChallenge: {\n      status: 'passed' | 'skipped' | 'failed' | 'timeout' | 'not_supported';\n      checkedAt: string | null;\n    };\n    pdlssCheck: {\n      result: 'within' | 'exceeded' | 'denied' | 'not_evaluated';\n      purpose: 'approved' | 'denied';\n      scope: 'approved' | 'denied';\n    };\n    dynamicTrustScore: number;\n    attestations: Array<{\n      type: string;\n      status: 'passed' | 'failed';\n      validUntil?: string;\n      proofType: 'reference' | 'zkp';\n      proof: string;\n    }>;\n  };\n  error?: string;\n  /**\n   * Round-10 (#47, O5): when the verify-access server response carries a\n   * correlationId on an error envelope, propagate it so the SDK can thread\n   * it through createGuidanceResponse → adapter onDenied → merchant body.\n   */\n  correlationId?: string;\n}> {\n  const { credentials, ...requestData } = request;\n\n  // Build the request body. agentId is omitted when not provided so the\n  // server treats it as an anonymous canonical-flow call (Branch A/B/C).\n  const body: Record<string, unknown> = {\n    ...(credentials.astraId && { agentId: credentials.astraId }),\n    ...(requestData.purpose && { purpose: requestData.purpose }),\n  };\n\n  // Add optional fields\n  if (requestData.action) body.action = requestData.action;\n  if (requestData.resourceType) body.resourceType = requestData.resourceType;\n  if (requestData.resource) body.resource = requestData.resource;\n  if (requestData.jurisdiction) body.jurisdiction = requestData.jurisdiction;\n  if (requestData.transactionValue) body.transactionValue = requestData.transactionValue;\n  if (requestData.currency) body.currency = requestData.currency;\n  if (requestData.isSubAgentRequest) body.isSubAgentRequest = requestData.isSubAgentRequest;\n  if (requestData.parentAgentId) body.parentAgentId = requestData.parentAgentId;\n  if (requestData.subAgentDepth !== undefined) body.subAgentDepth = requestData.subAgentDepth;\n  // Handshake Protocol v10 additions\n  if (requestData.enableRuntimeChallenge)\n    body.enableRuntimeChallenge = requestData.enableRuntimeChallenge;\n  if (requestData.createSession) body.createSession = requestData.createSession;\n  if (requestData.durationRequired) body.durationRequired = requestData.durationRequired;\n  if (requestData.counterpartyType) body.counterpartyType = requestData.counterpartyType;\n  if (requestData.counterpartyUrl) body.counterpartyUrl = requestData.counterpartyUrl;\n  if (config.counterpartyId) body.counterpartyId = config.counterpartyId;\n  if (requestData.runtimeChallengeOptions)\n    body.runtimeChallengeOptions = requestData.runtimeChallengeOptions;\n  // Round-12 (F19): transport-vs-intent separation. MCP middleware sets\n  // this to 'mcp'; non-MCP callers leave it unset.\n  if (requestData.invocationProtocol) body.invocationProtocol = requestData.invocationProtocol;\n\n  // Round-13 (F14 closure / R13-7): emit the SDK package version on every\n  // verify-access body so the backend can auto-populate `kya_counterparty.\n  // sdk_version` for the calling endpoint. Body field (not User-Agent\n  // header) is the canonical channel — works in Node, browser, behind\n  // Cloudflare, and across SDK bundlers without environment-specific\n  // header gymnastics. Backend's `validation.ts:verifyAccessSchema`\n  // accepts the semver regex; the auto-pop logic is forward-only.\n  body.sdkVersion = SDK_VERSION;\n\n  // Forward caller metadata when present. Merges the legacy top-level\n  // clientIp/userAgent into the nested block for backward compatibility.\n  if (requestData.callerMetadata || requestData.clientIp || requestData.userAgent) {\n    const meta = {\n      ...(requestData.clientIp && { sourceIp: requestData.clientIp }),\n      ...(requestData.userAgent && { userAgent: requestData.userAgent }),\n      ...requestData.callerMetadata,\n    };\n    if (Object.keys(meta).length > 0) body.callerMetadata = meta;\n  }\n\n  // Build headers\n  const headers: Record<string, string> = {\n    'Content-Type': 'application/json',\n    ...config.customHeaders,\n  };\n\n  // verify-access requires authentication. Use ONLY the merchant's\n  // configured apiKey for outbound auth. Previously the caller's inbound\n  // Authorization header took priority, which pivoted the verify-access\n  // call to the caller's identity — letting an attacker who supplied\n  // their own Authorization header trigger verify-access calls under\n  // THEIR account and observe the resulting verdicts for arbitrary\n  // lookups they triggered via the merchant. Audit F-A1-10.\n  //\n  // The caller-supplied JWT (if any) is already extracted to\n  // credentials.jwt and travels in the verify-access request body so\n  // backend can evaluate it as the agent's identity claim — separate from\n  // the merchant-attribution auth on the outbound HTTPS call.\n  if (config.apiKey) {\n    headers['Authorization'] = `Bearer ${config.apiKey}`;\n    // Legacy header kept for compatibility with any middleware that reads it directly.\n    headers['X-API-Key'] = config.apiKey;\n  }\n\n  try {\n    const response = await fetch(`${config.apiBaseUrl}/agents/verify-access`, {\n      method: 'POST',\n      headers,\n      body: JSON.stringify(body),\n    });\n\n    const data = await response.json();\n\n    // v2.3.8 (defect #29): treat 410 Gone as a deterministic deactivated-endpoint\n    // signal. Older SDKs may treat any non-2xx as transient and retry; v2.3.8+\n    // surfaces it as a structured denial with `reason: 'endpoint_deactivated'`\n    // so callers can distinguish \"endpoint gone\" from \"endpoint denied this\".\n    if (response.status === 410) {\n      return {\n        success: true,\n        access: {\n          allowed: false,\n          accessLevel: 'none',\n          reason: 'endpoint_deactivated',\n          failures: [\n            {\n              dimension: 'endpoint.deactivated',\n              message:\n                typeof data?.message === 'string' ? data.message : 'Endpoint has been deactivated',\n              guidance:\n                typeof data?.guidance === 'string'\n                  ? data.guidance\n                  : 'Reactivate via POST /api/endpoints/{id}/reactivate, or update the URL on the calling agent.',\n            },\n          ],\n        },\n      };\n    }\n\n    if (!response.ok) {\n      // Round-10 (#47, O5): propagate correlationId on the error path too if\n      // the server happened to include one (some 5xx error envelopes carry\n      // it). Lets the SDK pass it through to the adapter onDenied handler.\n      return {\n        success: false,\n        error: data.message || data.error || `API returned ${response.status}`,\n        correlationId: typeof data?.correlationId === 'string' ? data.correlationId : undefined,\n      };\n    }\n\n    return data;\n  } catch (error) {\n    const message = error instanceof Error ? error.message : 'Unknown error';\n    return {\n      success: false,\n      error: `Failed to call verify-access API: ${message}`,\n    };\n  }\n}\n\n/**\n * Main verification function\n */\nexport async function verify(\n  config: GatewayConfig,\n  request: VerificationRequest\n): Promise<VerificationResult> {\n  const mergedConfig = { ...DEFAULT_CONFIG, ...config };\n\n  // v2.5.0: read well-known URLs from cache (prefetched by adapter at middleware creation).\n  // Synchronous — never triggers a fetch. If cache is empty, guidance URLs are empty strings.\n  const urls = mergedConfig.apiBaseUrl\n    ? getCachedWellKnownUrls(mergedConfig.apiBaseUrl)\n    : undefined;\n\n  // One-time init self-test — fire-and-forget by default, never blocks verify().\n  // Audit F-A6-33: when GatewayConfig.strictInit is set, the init promise is\n  // awaited and any failure throws synchronously so callers learn about\n  // misconfigured apiBaseUrl on the first verify() call rather than silently\n  // running with broken auth.\n  if (!initCheckPerformed && !mergedConfig.disableInitChecks && mergedConfig.apiBaseUrl) {\n    if (mergedConfig.strictInit) {\n      await performInitCheck(mergedConfig.apiBaseUrl, mergedConfig.debug, true);\n    } else {\n      void performInitCheck(mergedConfig.apiBaseUrl, mergedConfig.debug, false);\n    }\n  }\n\n  // Deprecation warning for v2.3.0 removed config fields. Fires once per process.\n  if (\n    !deprecationWarningShown &&\n    (config.minTrustScore !== undefined || config.minTrustScoreForFull !== undefined)\n  ) {\n    deprecationWarningShown = true;\n    console.warn(\n      '[VerificationGateway] minTrustScore / minTrustScoreForFull are deprecated in v2.3.0 ' +\n        'and have no effect. Server is now the single source of truth for access-level decisions ' +\n        '(the SDK reads access.accessLevel from the verify-access response). To gate access ' +\n        \"to an endpoint, configure the endpoint's trust_score_requirement server-side.\"\n    );\n  }\n\n  // v2.3.0: anonymous traffic no longer short-circuits here. We forward the\n  // request to the server with no agentId; the server applies the endpoint's\n  // unverifiedAgentPolicy and returns advisory. createGuidanceResponse remains\n  // as the offline fallback if the API itself fails (handled below).\n\n  // Check cache first. Round-18.5 F4: caching on unless caller explicitly\n  // sets cacheTtl: 0 to disable. Undefined falls through to the split default\n  // (60s autonomous / 300s step-up) at cacheResult write time.\n  if (mergedConfig.cacheTtl !== 0) {\n    const cached = getCachedResult(request, mergedConfig.counterpartyId);\n    if (cached) {\n      if (mergedConfig.debug) {\n        console.log('[VerificationGateway] Returning cached result');\n      }\n      return cached;\n    }\n  }\n\n  // Inject counterparty info from config if not already set in request\n  const enrichedRequest = { ...request };\n  if (!enrichedRequest.counterpartyUrl && mergedConfig.counterpartyUrl) {\n    enrichedRequest.counterpartyUrl = mergedConfig.counterpartyUrl;\n  }\n  if (!enrichedRequest.counterpartyType && mergedConfig.counterpartyType) {\n    enrichedRequest.counterpartyType = mergedConfig.counterpartyType;\n  }\n\n  // Call the API\n  if (mergedConfig.debug) {\n    console.log('[VerificationGateway] Calling verify-access API');\n  }\n\n  const apiResponse = await callVerifyAccessAPI(mergedConfig, enrichedRequest);\n\n  // Handle API errors\n  if (!apiResponse.success) {\n    // Round-10 (#47, O5): distinguish API errors from missing-credentials.\n    // The previous default tagged any failure with the \"register your\n    // agent\" template, which is misleading to a verified partner whose\n    // verify-access call hit a 500. The `api_error` source surfaces a\n    // typed `verify_access.api_error` failure entry instead.\n    return createGuidanceResponse(mergedConfig, apiResponse.error, {\n      source: 'api_error',\n      correlationId: (apiResponse as { correlationId?: string }).correlationId,\n      urls,\n    });\n  }\n\n  // Check access result\n  if (!apiResponse.access?.allowed) {\n    // v2.9.8 (defect M1): aggregated failures across every gate that\n    // denied. Surface them on the result so the integrator can see every\n    // blocker in one go instead of the previous fail-fast cascade.\n    const aggregatedFailures = (apiResponse.access as Record<string, unknown> | undefined)\n      ?.failures as Array<{ dimension: string; message: string; guidance?: string }> | undefined;\n    // Round-18 G4: backend denied access (PDLSS or other gate); identity status\n    // depends on whether the backend resolved the caller. Read from\n    // verificationContext.idVerified; default false if absent (anonymous or\n    // identity-fail paths land here too). policyAllowed is false by definition\n    // in this branch (apiResponse.access.allowed === false).\n    const idVerifiedFromBackend =\n      (apiResponse.verificationContext as { idVerified?: boolean } | undefined)?.idVerified ===\n      true;\n    const result: EnhancedVerificationResult = {\n      identityVerified: idVerifiedFromBackend,\n      policyAllowed: false,\n      // v2.3.9 (defect #30): denials grant `'none'`, NEVER a positive band.\n      // Pre-rename this hardcoded `'guidance'`, which conflated with the\n      // colocated `guidance: {...}` help-payload object below and let\n      // denied requests pass any route gated at `'guidance'` because\n      // `hasMinimumAccess('guidance', 'guidance') === true`. Adapters now\n      // ALSO short-circuit on `!identityVerified || !policyAllowed` before\n      // the gate check — belt-and-braces.\n      accessLevel: 'none',\n      denialReasons:\n        aggregatedFailures && aggregatedFailures.length > 0\n          ? aggregatedFailures.map((f) => f.message)\n          : apiResponse.access?.reason\n            ? [apiResponse.access.reason]\n            : ['Access denied'],\n      failures: aggregatedFailures,\n      requiresStepUp: apiResponse.access?.requiresStepUp,\n      requiresApproval: apiResponse.access?.requiresApproval,\n      guidance: {\n        message: apiResponse.access?.reason || 'Access denied by PDLSS policy',\n        registrationUrl: urls?.registrationUrl ?? '',\n        documentationUrl: urls?.documentationUrl ?? '',\n      },\n      verifiedAt: new Date(),\n      // Extract sessionId so decisions can be recorded for denials too\n      sessionId: (apiResponse as Record<string, unknown>).sessionId as string | undefined,\n      // Anonymous traffic has no session → correlationId is the per-attempt\n      // linking key (the sessionId-equivalent for anonymous callers).\n      correlationId: (apiResponse as Record<string, unknown>).correlationId as string | undefined,\n      recommendation: (apiResponse as Record<string, unknown>)\n        .recommendation as EnhancedVerificationResult['recommendation'],\n      recommendationReasons: (apiResponse as Record<string, unknown>).recommendationReasons as\n        | string[]\n        | undefined,\n    };\n\n    return result;\n  }\n\n  // Build successful result\n  const agent: VerifiedAgent | undefined = apiResponse.agent\n    ? {\n        astraId: apiResponse.agent.astraId,\n        name: apiResponse.agent.name,\n        trustScore: apiResponse.agent.trustScore,\n        trustLevel: getTrustLevel(apiResponse.agent.trustScore),\n        blockchainVerified: apiResponse.agent.blockchainStatus === 'verified',\n        status: apiResponse.agent.agentStatus as VerifiedAgent['status'],\n      }\n    : undefined;\n\n  const developer: VerifiedDeveloper | undefined = apiResponse.developer\n    ? {\n        astradId: apiResponse.developer.kyaOwnerId,\n        name: apiResponse.developer.fullName,\n        trustScore: apiResponse.developer.trustScore || 0,\n        verified: apiResponse.developer.identityVerified,\n      }\n    : undefined;\n\n  const organization: VerifiedOrganization | undefined = apiResponse.organization\n    ? {\n        name: apiResponse.organization.name,\n        verified: apiResponse.organization.verified,\n        trustScore: apiResponse.organization.trustScore,\n      }\n    : undefined;\n\n  // Verification context — structured \"why\" the merchant gets in v2.2.4+.\n  // Carries appliedPolicy (no UUIDs), pdlssCheck summary, dynamic trust score,\n  // and policy-driven attestations. Replaces the old over-sharing `pdlss` block.\n  const verificationContext = apiResponse.verificationContext;\n\n  // Server is the single source of truth for access level. SDK reads\n  // apiResponse.access.accessLevel verbatim — no client-side trust-score remap.\n  // Fallback to 'standard' if the server response is missing the field (older\n  // backend without the v2.3.0 contract); it covers the verified-access case.\n  const accessLevel: AccessLevel = apiResponse.access?.accessLevel ?? 'standard';\n\n  const result: EnhancedVerificationResult = {\n    // Round-18 G4: backend allowed access. Identity is verified (we resolved\n    // the caller to an agent) and policy passed all gates. Read idVerified\n    // from verificationContext for symmetry with the deny branch; default true\n    // on success path since `access.allowed === true` implies identity was\n    // resolvable (anonymous-allow paths flow through createGuidanceResponse).\n    identityVerified:\n      (apiResponse.verificationContext as { idVerified?: boolean } | undefined)?.idVerified !==\n      false,\n    policyAllowed: true,\n    accessLevel,\n    agent,\n    developer,\n    organization,\n    appliedPolicy: apiResponse.access?.appliedPolicy,\n    verificationContext,\n    requiresStepUp: apiResponse.access?.requiresStepUp,\n    requiresApproval: apiResponse.access?.requiresApproval,\n    verifiedAt: new Date(),\n    cacheTtl: mergedConfig.cacheTtl,\n    // Handshake Protocol v10 enhanced fields (present when backend returns them)\n    sessionId: (apiResponse as Record<string, unknown>).sessionId as string | undefined,\n    // v2.3.10 (defect #34, round-4): anonymous responses surface correlationId\n    // (no session row exists for unverified callers).\n    correlationId: (apiResponse as Record<string, unknown>).correlationId as string | undefined,\n    runtimeChallenge: (apiResponse as Record<string, unknown>).runtimeChallenge as\n      | RuntimeChallengeResult\n      | undefined,\n    tokenGuidance: (apiResponse as Record<string, unknown>).tokenGuidance as\n      | TokenGuidance\n      | undefined,\n    recommendation: (apiResponse as Record<string, unknown>)\n      .recommendation as EnhancedVerificationResult['recommendation'],\n    recommendationReasons: (apiResponse as Record<string, unknown>).recommendationReasons as\n      | string[]\n      | undefined,\n    warningHeader: (apiResponse as Record<string, unknown>).warningHeader as\n      | { name: string; value: string }\n      | undefined,\n  };\n\n  // Enforce AstraSync recommendation\n  if (result.recommendation === 'deny') {\n    // Round-18 G4: recommendation-driven deny lands on the success-path\n    // construction (identity was resolved). Flip policy only — identity stays\n    // verified — so adapters return 403 (re-auth won't help; the policy\n    // decision is the blocker).\n    result.policyAllowed = false;\n    result.accessLevel = 'none';\n    result.denialReasons = result.recommendationReasons || [\n      'Access denied by AstraSync recommendation',\n    ];\n    result.guidance = result.runtimeChallenge\n      ? {\n          message: `Verification failed: ${result.runtimeChallenge.reason || 'runtime challenge failed'}`,\n          registrationUrl: urls?.registrationUrl ?? '',\n          documentationUrl: urls?.documentationUrl ?? '',\n        }\n      : {\n          message: result.recommendationReasons?.[0] || 'Access denied by AstraSync recommendation',\n          registrationUrl: urls?.registrationUrl ?? '',\n          documentationUrl: urls?.documentationUrl ?? '',\n        };\n  } else if (result.recommendation === 'step_up_required') {\n    // 3.2.0 (post-3.1.0 feedback): do NOT overwrite accessLevel to 'read-only'\n    // here. The prior masquerade manufactured a phantom trust-band cap that\n    // looked like a low-trust ceiling when the real signal is \"step-up\n    // required\" — it caused a downstream misdiagnosis. Leave the real band\n    // intact (informational) and let `requiresStepUp` carry the signal.\n    result.requiresStepUp = true;\n    result.denialReasons = result.recommendationReasons || ['Step-up verification required'];\n  }\n\n  // Cache the result (skip caching denials — agent may fix challenge endpoint\n  // and retry). Round-18.5 F4: cacheResult applies split default (60s/300s)\n  // when configuredTtl is undefined; honours the caller's value when set.\n  if (mergedConfig.cacheTtl !== 0 && result.recommendation !== 'deny') {\n    cacheResult(request, result, mergedConfig.cacheTtl, mergedConfig.counterpartyId);\n  }\n\n  return result;\n}\n\n/**\n * Record a counterparty's grant/deny decision for a verification session.\n * Fire-and-forget — errors are silently swallowed.\n */\nexport async function recordDecision(\n  config: GatewayConfig,\n  sessionId: string,\n  decision: 'granted' | 'denied',\n  reason?: string\n): Promise<void> {\n  const headers: Record<string, string> = { 'Content-Type': 'application/json' };\n  if (config.apiKey) {\n    headers['Authorization'] = `Bearer ${config.apiKey}`;\n    headers['X-API-Key'] = config.apiKey;\n  }\n\n  await fetch(`${config.apiBaseUrl}/agents/verify-access/${sessionId}/decision`, {\n    method: 'POST',\n    headers,\n    body: JSON.stringify({ decision, reason }),\n  }).catch(() => {\n    /* fire-and-forget */\n  });\n}\n\n/**\n * Fetch the per-route policy for an endpoint from the AstraSync backend.\n * v2.9.7 moved policy authority into the dashboard — the SDK no longer\n * accepts `routes` from merchant-side source code, it fetches them from\n * here on init (and refreshes periodically).\n *\n * Returns `null` when the request fails for any reason — the caller decides\n * how to fall back (the middleware allows-all when no policy is loaded so\n * a misconfigured init doesn't take down the merchant's API).\n */\nexport async function fetchRoutes(\n  config: GatewayConfig,\n  counterpartyId: string\n): Promise<RouteAccessConfigShape[] | null> {\n  if (!counterpartyId) return null;\n  const headers: Record<string, string> = { 'Content-Type': 'application/json' };\n  if (config.apiKey) {\n    headers['Authorization'] = `Bearer ${config.apiKey}`;\n    headers['X-API-Key'] = config.apiKey;\n  }\n  try {\n    const response = await fetch(\n      `${config.apiBaseUrl}/endpoints/${encodeURIComponent(counterpartyId)}/routes`,\n      { method: 'GET', headers }\n    );\n    if (!response.ok) return null;\n    const body = (await response.json()) as { data?: { routes?: RouteAccessConfigShape[] } };\n    return body.data?.routes ?? [];\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Minimal shape of an EndpointRoute as the SDK consumes it. Mirrors the\n * server's `EndpointRoute` type and the SDK's `RouteAccessConfig` — same\n * JSON moves between server and SDK unchanged.\n */\nexport interface RouteAccessConfigShape {\n  pattern: string;\n  method: string;\n  /** @deprecated 3.2.0 — band no longer gates; optional, ignored. Use minTrustScore. */\n  minAccessLevel?: 'none' | 'restricted' | 'read-only' | 'standard' | 'full' | 'internal';\n  minTrustScore?: number;\n  requiredPurposes?: string[];\n  allowedPurposes?: string[];\n  allowedJurisdictions?: string[];\n  maxDuration?: number;\n  maxTransactionValue?: number;\n  requirePurpose?: boolean;\n  /** Send-mapping (Bug 14, §4.6) — see RouteAccessConfig in types.ts. */\n  purpose?: string;\n  action?: string;\n}\n\n/**\n * Verify an agent AND automatically record the grant/deny decision.\n *\n * This is the recommended entry point for counterparties that call verify()\n * directly (e.g. MCP servers) rather than using createMiddleware().\n * It adds createSession: true, then fire-and-forgets the decision.\n */\nexport async function verifyAndRecord(\n  config: GatewayConfig,\n  request: VerificationRequest\n): Promise<VerificationResult> {\n  const mergedConfig = { ...DEFAULT_CONFIG, ...config };\n  const result = await verify(mergedConfig, { ...request, createSession: true });\n  const sessionId = (result as EnhancedVerificationResult).sessionId;\n\n  if (sessionId) {\n    // Round-18 G4: a session is \"granted\" only if identity verified AND\n    // policy allowed; either failing is a deny.\n    if (result.identityVerified && result.policyAllowed) {\n      recordDecision(mergedConfig, sessionId, 'granted').catch(() => {});\n    } else {\n      recordDecision(mergedConfig, sessionId, 'denied', result.denialReasons?.[0]).catch(() => {});\n    }\n  }\n\n  return result;\n}\n\n/**\n * Report an unregistered agent attempt (no AstraSync credentials).\n * Called by SDK adapters when an agent is redirected to /docs/agent-access.\n * Fire-and-forget — errors are silently swallowed.\n */\nexport async function reportUnregisteredAttempt(\n  config: GatewayConfig,\n  data: {\n    counterpartyUrl: string;\n    counterpartyType?: string;\n    sourceIp?: string;\n    userAgent?: string;\n    requestPath?: string;\n    requestMethod?: string;\n  }\n): Promise<void> {\n  const apiBaseUrl = config.apiBaseUrl || DEFAULT_CONFIG.apiBaseUrl!;\n\n  await fetch(`${apiBaseUrl}/verification-activity/unregistered-attempt`, {\n    method: 'POST',\n    headers: { 'Content-Type': 'application/json' },\n    body: JSON.stringify(data),\n  }).catch(() => {\n    /* fire-and-forget */\n  });\n}\n\n/**\n * Report a counterparty-side PDLSS pre-check failure.\n * Called by SDK adapters when the agent's requested PDLSS exceeds\n * counterparty-defined maximums BEFORE calling verify-access.\n * Fire-and-forget — errors are silently swallowed.\n */\nexport async function reportCounterpartyPreCheckFailure(\n  config: GatewayConfig,\n  data: {\n    agentId: string;\n    counterpartyUrl: string;\n    counterpartyType?: string;\n    failures: Array<{\n      field: string;\n      requested: string | number;\n      limit: string | number | string[];\n      message: string;\n    }>;\n    requestPath?: string;\n    requestMethod?: string;\n  }\n): Promise<void> {\n  const apiBaseUrl = config.apiBaseUrl || DEFAULT_CONFIG.apiBaseUrl!;\n\n  await fetch(`${apiBaseUrl}/verification-activity/counterparty-pre-check-failure`, {\n    method: 'POST',\n    headers: { 'Content-Type': 'application/json' },\n    body: JSON.stringify(data),\n  }).catch(() => {\n    /* fire-and-forget */\n  });\n}\n\n/**\n * Quick verification — checks credentials and policy in one call.\n *\n * Round-18 G4: return shape mirrors `VerificationResult`'s split — partners\n * writing custom handlers around `quickVerify` get the same identity/policy\n * distinction as those calling `verify()` directly. Map to HTTP status the\n * same way: `!identityVerified` → 401; `identityVerified && !policyAllowed`\n * → 403.\n */\nexport async function quickVerify(\n  config: GatewayConfig,\n  credentials: AgentCredentials\n): Promise<{\n  identityVerified: boolean;\n  policyAllowed: boolean;\n  accessLevel: AccessLevel;\n  reason?: string;\n}> {\n  const result = await verify(config, {\n    credentials,\n    purpose: 'verification',\n  });\n\n  return {\n    identityVerified: result.identityVerified,\n    policyAllowed: result.policyAllowed,\n    accessLevel: result.accessLevel,\n    reason: result.denialReasons?.[0],\n  };\n}\n","/**\n * HTTP Transport Adapter\n *\n * Maps AstraSync credentials to/from HTTP headers (X-Astra-* convention).\n */\n\nimport type { AstraSyncCredentials } from '../types';\n\nconst HEADER_PREFIX = 'X-Astra-';\n\n/**\n * Inject AstraSync credentials into HTTP headers.\n */\nexport function setHttpHeaders(\n  headers: Record<string, string>,\n  credentials: AstraSyncCredentials\n): Record<string, string> {\n  const result = { ...headers };\n\n  result[`${HEADER_PREFIX}ID`] = credentials.agentId;\n\n  if (credentials.verifyUrl) {\n    result[`${HEADER_PREFIX}Verify`] = credentials.verifyUrl;\n  }\n\n  if (credentials.challengeUrl) {\n    result[`${HEADER_PREFIX}Challenge`] = credentials.challengeUrl;\n  }\n\n  if (credentials.pdlss?.purpose) {\n    // 3.1.0 (Bug 14, §4.6): the action ALSO travels on its own dedicated\n    // header so new-SDK receivers get the clean two-axis pair. The colon\n    // form below is kept as the back-compat channel — pre-3.1.0 receivers\n    // split on ':' and take the category prefix.\n    const purposeValue = credentials.pdlss.purpose.action\n      ? `${credentials.pdlss.purpose.category}:${credentials.pdlss.purpose.action}`\n      : credentials.pdlss.purpose.category;\n    result[`${HEADER_PREFIX}Purpose`] = purposeValue;\n    if (credentials.pdlss.purpose.action) {\n      result[`${HEADER_PREFIX}Action`] = credentials.pdlss.purpose.action;\n    }\n  }\n\n  if (credentials.pdlss?.duration?.maxSessionDuration) {\n    result[`${HEADER_PREFIX}Duration`] = String(credentials.pdlss.duration.maxSessionDuration);\n  }\n\n  if (credentials.pdlss?.scope?.jurisdiction) {\n    result[`${HEADER_PREFIX}Scope`] = credentials.pdlss.scope.jurisdiction;\n  }\n\n  return result;\n}\n\n/**\n * Extract AstraSync credentials from HTTP headers.\n */\nexport function extractHttpCredentials(\n  headers: Record<string, string | string[] | undefined>\n): AstraSyncCredentials | null {\n  const getValue = (key: string): string | undefined => {\n    const v = headers[key] ?? headers[key.toLowerCase()];\n    return Array.isArray(v) ? v[0] : v;\n  };\n\n  const agentId = getValue(`${HEADER_PREFIX}ID`) ?? getValue('x-astra-id');\n  if (!agentId) return null;\n\n  const credentials: AstraSyncCredentials = { agentId };\n\n  const verifyUrl = getValue(`${HEADER_PREFIX}Verify`) ?? getValue('x-astra-verify');\n  if (verifyUrl) credentials.verifyUrl = verifyUrl;\n\n  const challengeUrl = getValue(`${HEADER_PREFIX}Challenge`) ?? getValue('x-astra-challenge');\n  if (challengeUrl) credentials.challengeUrl = challengeUrl;\n\n  const purpose = getValue(`${HEADER_PREFIX}Purpose`) ?? getValue('x-astra-purpose');\n  if (purpose) {\n    const [category, action] = purpose.split(':');\n    credentials.pdlss = {\n      ...credentials.pdlss,\n      purpose: { category, action },\n    };\n  }\n\n  // 3.1.0 (Bug 14, §4.6): dedicated action header — overrides any colon-form\n  // remainder parsed above (the dedicated header is the canonical channel).\n  const astraAction = getValue(`${HEADER_PREFIX}Action`) ?? getValue('x-astra-action');\n  if (astraAction) {\n    credentials.pdlss = {\n      ...credentials.pdlss,\n      purpose: { category: credentials.pdlss?.purpose?.category ?? '', action: astraAction },\n    };\n  }\n\n  const duration = getValue(`${HEADER_PREFIX}Duration`) ?? getValue('x-astra-duration');\n  if (duration) {\n    credentials.pdlss = {\n      ...credentials.pdlss,\n      duration: { maxSessionDuration: parseInt(duration, 10) },\n    };\n  }\n\n  const scope = getValue(`${HEADER_PREFIX}Scope`) ?? getValue('x-astra-scope');\n  if (scope) {\n    credentials.pdlss = {\n      ...credentials.pdlss,\n      scope: { jurisdiction: scope },\n    };\n  }\n\n  return credentials;\n}\n","/**\n * Shared purpose/action resolver for the HTTP adapters (express + nextjs) —\n * vocabulary-unification round (Bug 14, adapter-spec §4.6).\n *\n * The PDLSS two-axis contract: `purpose` = bare category noun (`shopping`,\n * `data`, custom nouns like `trading`); `action` = dotted verb\n * (`shopping.search`) or an enumerated transport token. Transport verbs\n * (GET/POST/...) NEVER travel as PDLSS actions — they map through the pinned\n * method table below.\n *\n * SELF-CONTAINED on purpose: this published package cannot depend on the\n * private @astrasyncai/pdlss-vocab workspace package, so the constants are\n * duplicated here and pinned strictly equal by a monorepo CI test\n * (vocab-equality.test.ts). Change them in BOTH places or that test fails.\n */\n\n/** Pinned method→action derivation table (§4.6). */\nexport const HTTP_METHOD_ACTION_TABLE: Readonly<Record<string, string>> = {\n  GET: 'data.read',\n  HEAD: 'data.read',\n  OPTIONS: 'data.read',\n  POST: 'data.write',\n  PUT: 'data.write',\n  PATCH: 'data.write',\n  DELETE: 'data.delete',\n};\n\n/** Unknown methods are treated as mutating until proven otherwise. */\nexport const DEFAULT_HTTP_ACTION = 'data.write';\n\n/** Generic category emitted when nothing supplies a domain purpose. */\nexport const DEFAULT_HTTP_PURPOSE = 'data';\n\nexport function actionForHttpMethod(method: string): string {\n  return HTTP_METHOD_ACTION_TABLE[method.toUpperCase()] ?? DEFAULT_HTTP_ACTION;\n}\n\nexport type HttpPurposeSource =\n  | 'route_config'\n  | 'custom_extractor'\n  | 'header'\n  | 'legacy_header'\n  | 'query'\n  | 'action_derived'\n  | 'transport_default';\n\nexport type HttpActionSource =\n  | 'route_config'\n  | 'custom_extractor'\n  | 'header'\n  | 'purpose_header_derived'\n  | 'method_table';\n\nexport interface HttpPdlssInput {\n  method: string;\n  /** `X-Astra-Purpose` header value (agent's declaration). */\n  astraPurpose?: string;\n  /** `X-Astra-Action` header value (agent's declaration, symmetric with MCP). */\n  astraAction?: string;\n  /** Legacy `x-purpose` header — deprecated, removal scheduled for 4.0.0. */\n  legacyPurpose?: string;\n  /** Legacy `?purpose` query param (express only) — deprecated, removal 4.0.0. */\n  queryPurpose?: string;\n  /** Dashboard route config send-mapping (RouteAccessConfig.purpose/.action). */\n  routePurpose?: string;\n  routeAction?: string;\n  /** Results of the merchant's extractPurpose/extractAction options. */\n  customPurpose?: string;\n  hasCustomPurposeExtractor?: boolean;\n  customAction?: string;\n  hasCustomActionExtractor?: boolean;\n}\n\nexport interface HttpPdlssResolution {\n  purpose: string;\n  action: string;\n  purposeSource: HttpPurposeSource;\n  actionSource: HttpActionSource;\n}\n\n/**\n * Normalize an `X-Astra-Purpose` header value.\n *  - colon form `\"category:action\"` (legacy wire shape): take the prefix; the\n *    remainder is free-text and exists in no vocabulary — discard it and let\n *    the method table supply the action (matches pre-3.1.0 discard behavior).\n *  - dotted form `\"shopping.purchase\"` (the shape older docs taught): prefix\n *    becomes the purpose, the WHOLE token becomes an action candidate.\n *  - bare token: purpose verbatim.\n */\nexport function normalizePurposeHeader(value: string): {\n  purpose: string;\n  actionCandidate?: string;\n} {\n  const colon = value.indexOf(':');\n  if (colon >= 0) {\n    return { purpose: value.slice(0, colon) };\n  }\n  const dot = value.indexOf('.');\n  if (dot > 0 && dot < value.length - 1) {\n    return { purpose: value.slice(0, dot), actionCandidate: value };\n  }\n  return { purpose: value };\n}\n\n/**\n * Resolve the {purpose, action} pair for one HTTP request.\n *\n * Precedence (both axes; §4.6):\n *   action:  route mapping → extractAction option → X-Astra-Action header →\n *            candidate from a dotted X-Astra-Purpose → pinned method table\n *   purpose: route mapping → extractPurpose option → X-Astra-Purpose →\n *            legacy x-purpose / ?purpose → category prefix of the resolved\n *            action → 'data'\n *\n * A configured custom extractor masks the header/legacy/query steps of its\n * axis (it replaces the default chain, as extractPurpose always has); when it\n * returns undefined the axis falls through to the table/prefix fallback.\n * The route mapping is merchant policy fetched from the dashboard — it\n * outranks agent-supplied headers the way MCP toolGates do.\n */\nexport function resolveHttpPdlss(input: HttpPdlssInput): HttpPdlssResolution {\n  const fromHeader = input.astraPurpose ? normalizePurposeHeader(input.astraPurpose) : undefined;\n\n  // ── Action axis ──\n  let action: string;\n  let actionSource: HttpActionSource;\n  if (input.routeAction) {\n    action = input.routeAction;\n    actionSource = 'route_config';\n  } else if (input.hasCustomActionExtractor && input.customAction) {\n    action = input.customAction;\n    actionSource = 'custom_extractor';\n  } else if (!input.hasCustomActionExtractor && input.astraAction) {\n    action = input.astraAction;\n    actionSource = 'header';\n  } else if (!input.hasCustomActionExtractor && fromHeader?.actionCandidate) {\n    action = fromHeader.actionCandidate;\n    actionSource = 'purpose_header_derived';\n  } else {\n    action = actionForHttpMethod(input.method);\n    actionSource = 'method_table';\n  }\n\n  // ── Purpose axis ──\n  let purpose: string | undefined;\n  let purposeSource: HttpPurposeSource | undefined;\n  if (input.routePurpose) {\n    purpose = input.routePurpose;\n    purposeSource = 'route_config';\n  } else if (input.hasCustomPurposeExtractor) {\n    if (input.customPurpose) {\n      purpose = input.customPurpose;\n      purposeSource = 'custom_extractor';\n    }\n  } else if (fromHeader) {\n    purpose = fromHeader.purpose;\n    purposeSource = 'header';\n  } else if (input.legacyPurpose) {\n    purpose = input.legacyPurpose;\n    purposeSource = 'legacy_header';\n  } else if (input.queryPurpose) {\n    purpose = input.queryPurpose;\n    purposeSource = 'query';\n  }\n\n  if (!purpose) {\n    // Keep the pair coherent: an agent that sent only X-Astra-Action (or a\n    // route that mapped only the action) gets that action's own category.\n    const dot = action.indexOf('.');\n    if (dot > 0) {\n      purpose = action.slice(0, dot);\n      purposeSource = 'action_derived';\n    } else {\n      purpose = DEFAULT_HTTP_PURPOSE;\n      purposeSource = 'transport_default';\n    }\n  }\n\n  return { purpose, action, purposeSource: purposeSource!, actionSource };\n}\n","/**\n * Direct-path step-up fail-closed gate (post-3.1.0 F2 follow-up).\n *\n * The verify-access spending-Limit ladder returns an \"allowed-but-escalate\"\n * outcome for a transaction value in the human-in-the-loop band\n * `[autonomousThreshold, hardLimit)`: `policyAllowed: true` (it is NOT a deny)\n * plus `requiresStepUp` / `requiresApproval`. The bridge blocks these; the\n * direct-path adapters historically gated on `identityVerified && policyAllowed`\n * alone and would therefore ADMIT (and let the merchant settle) the very\n * purchase the bridge blocks - a cross-path bypass.\n *\n * Until the #5 human-in-the-loop approval mechanism ships, such an outcome\n * cannot be satisfied, so the adapters MUST fail closed. When #5 lands this\n * becomes \"route to the approval flow\" instead of a flat deny - same\n * \"can't proceed autonomously\" semantic, not a reversal.\n *\n * Detection keys on the granular Limit flags (`requiresStepUp` /\n * `requiresApproval`, set from the verify-access `access` block) rather than\n * the `recommendation` umbrella - both because those flags ARE what drive a\n * `step_up_required` recommendation server-side, and because it keeps the\n * unverified-agent-policy `audit` outcome (a deliberate allow-and-log) from\n * being caught here.\n */\nimport type { VerificationResult } from '../types';\n\nconst APPROVAL_REASON =\n  'Transaction is above the autonomous limit and requires human approval, which is not yet available - it cannot be completed automatically.';\n\n/** True when the outcome needs human step-up/approval that isn't yet wired. */\nexport function requiresHumanApproval(result: VerificationResult): boolean {\n  return result.requiresStepUp === true || result.requiresApproval === true;\n}\n\n/**\n * Annotate a result in place with the structured approval-required failure +\n * denial reason, so the adapters' existing deny renderers surface it like any\n * other failure. Mirrors the bridge's `commerce.intent.approval_required`.\n */\nexport function annotateApprovalRequired(result: VerificationResult): void {\n  result.failures = [\n    ...(result.failures ?? []),\n    { dimension: 'commerce.intent.approval_required', message: APPROVAL_REASON },\n  ];\n  result.denialReasons = [APPROVAL_REASON, ...(result.denialReasons ?? [])];\n}\n","/**\n * Counterparty-side PDLSS pre-check.\n *\n * Compares the agent's requested PDLSS dimensions (from X-Astra-* headers)\n * against the counterparty-defined maximums on the route config.\n * Returns an array of failures — empty means all checks passed.\n *\n * This runs BEFORE calling verify-access on AstraSync. If it fails,\n * the request is rejected immediately without calling the platform.\n */\n\nimport type { RouteAccessConfig, AstraSyncCredentials, CounterpartyPreCheckFailure } from './types';\n\nexport function performCounterpartyPreCheck(\n  routeConfig: RouteAccessConfig,\n  astraCreds: AstraSyncCredentials | null,\n  purpose: string | undefined\n): CounterpartyPreCheckFailure[] {\n  const failures: CounterpartyPreCheckFailure[] = [];\n\n  // Check purpose against allowedPurposes whitelist. Route allow-lists are an\n  // OPTIONAL per-route refinement — undefined/empty = \"skip, let the backend\n  // evaluator be the authoritative gate\". The backend's PDLSS evaluator\n  // enforces the agent's own declared policy (round-18.5 F3 fail-closed there\n  // is correct: the agent declared its allowlist or didn't). Treating an\n  // undefined route allow-list as fail-closed breaks every partner that hasn't\n  // enumerated allowedPurposes (which is most of them — round-18.5 originally\n  // shipped this and was reverted in 2.4.11 after partner-wide auth break).\n  if (routeConfig.allowedPurposes && routeConfig.allowedPurposes.length > 0 && purpose) {\n    if (!routeConfig.allowedPurposes.includes(purpose)) {\n      failures.push({\n        field: 'purpose',\n        requested: purpose,\n        limit: routeConfig.allowedPurposes,\n        message: `Purpose \"${purpose}\" is not in the allowed list: [${routeConfig.allowedPurposes.join(', ')}]`,\n      });\n    }\n  }\n\n  // Check purpose against requiredPurposes (legacy field — agent must declare one of these)\n  if (routeConfig.requiredPurposes && routeConfig.requiredPurposes.length > 0 && purpose) {\n    if (!routeConfig.requiredPurposes.includes(purpose)) {\n      failures.push({\n        field: 'purpose',\n        requested: purpose,\n        limit: routeConfig.requiredPurposes,\n        message: `Purpose \"${purpose}\" is not in the required list: [${routeConfig.requiredPurposes.join(', ')}]`,\n      });\n    }\n  }\n\n  // Check duration against maxDuration — range-check (unchanged; undefined =\n  // no upper bound is conventional for opt-in range fields, not a request-\n  // driven allow-list).\n  if (routeConfig.maxDuration && astraCreds?.pdlss?.duration?.maxSessionDuration) {\n    const requested = astraCreds.pdlss.duration.maxSessionDuration;\n    if (requested > routeConfig.maxDuration) {\n      failures.push({\n        field: 'duration',\n        requested,\n        limit: routeConfig.maxDuration,\n        message: `Requested duration ${requested}s exceeds maximum ${routeConfig.maxDuration}s`,\n      });\n    }\n  }\n\n  // Check jurisdiction against allowedJurisdictions. Same reasoning as\n  // allowedPurposes above — route allow-lists are an optional per-route\n  // refinement; undefined/empty = skip and defer to the backend evaluator.\n  if (\n    routeConfig.allowedJurisdictions &&\n    routeConfig.allowedJurisdictions.length > 0 &&\n    astraCreds?.pdlss?.scope?.jurisdiction\n  ) {\n    const requested = astraCreds.pdlss.scope.jurisdiction;\n    if (!routeConfig.allowedJurisdictions.includes(requested)) {\n      failures.push({\n        field: 'jurisdiction',\n        requested,\n        limit: routeConfig.allowedJurisdictions,\n        message: `Jurisdiction \"${requested}\" is not in the allowed list: [${routeConfig.allowedJurisdictions.join(', ')}]`,\n      });\n    }\n  }\n\n  return failures;\n}\n","/**\n * AstraSync Universal Verification Gateway - Express Middleware\n *\n * Express.js middleware for verifying AI agents on API endpoints.\n *\n * @example\n * ```typescript\n * import express from 'express';\n * import { createMiddleware } from '@astrasyncai/verification-gateway/express';\n *\n * const app = express();\n *\n * app.use(createMiddleware({\n *   apiBaseUrl: 'https://astrasync.ai/api',\n *   routes: [\n *     { pattern: '/api/public/*', method: '*', minAccessLevel: 'none' },\n *     { pattern: '/api/data/*', method: 'GET', minAccessLevel: 'read-only' },\n *     { pattern: '/api/data/*', method: '*', minAccessLevel: 'standard' },\n *     { pattern: '/api/admin/*', method: '*', minAccessLevel: 'internal' },\n *   ],\n * }));\n * ```\n */\n\nimport type { Request, Response, NextFunction, RequestHandler } from 'express';\nimport type {\n  ExpressMiddlewareOptions,\n  AgentCredentials,\n  VerificationResult,\n  EnhancedVerificationResult,\n  RouteAccessConfig,\n  AstraSyncCredentials,\n} from '../types';\nimport {\n  verify,\n  extractCredentials,\n  recordDecision,\n  reportCounterpartyPreCheckFailure,\n  fetchRoutes,\n} from '../verify';\nimport { extractHttpCredentials } from '../transport/http';\nimport { resolveHttpPdlss, type HttpPdlssResolution } from './http-pdlss';\nimport { requiresHumanApproval, annotateApprovalRequired } from './approval-gate';\nimport { performCounterpartyPreCheck } from '../pdlss-pre-check';\nimport { prefetchWellKnown, getWellKnownUrls } from '../well-known';\n\n/**\n * Extend Express Request with verification result\n */\ndeclare global {\n  // eslint-disable-next-line @typescript-eslint/no-namespace\n  namespace Express {\n    interface Request {\n      agentVerification?: VerificationResult;\n    }\n  }\n}\n\n/**\n * Default credential extractor\n */\nfunction defaultExtractCredentials(req: Request): AgentCredentials {\n  return extractCredentials(\n    req.headers as Record<string, string | string[] | undefined>,\n    req.query as Record<string, string | undefined>\n  );\n}\n\n/**\n * Extract extended AstraSync credentials (X-Astra-* headers) from Express request.\n * Returns null if no AstraSync headers are present.\n */\nexport function extractAstraSyncCredentials(req: Request): AstraSyncCredentials | null {\n  return extractHttpCredentials(req.headers as Record<string, string | string[] | undefined>);\n}\n\n/** Read a possibly-array header value as a single string. */\nfunction headerValue(value: string | string[] | undefined): string | undefined {\n  if (typeof value === 'string') return value;\n  if (Array.isArray(value)) return value[0];\n  return undefined;\n}\n\n/**\n * Resolve the canonical {purpose, action} pair for a request (Bug 14, §4.6).\n * Replaces the gen-1 `defaultExtractPurpose` method-inference (`read_data`/\n * `write_data`) and the hardwired `action: req.method.toUpperCase()` — the\n * transport verb never travels as a PDLSS action. Full precedence chains\n * live in http-pdlss.ts.\n */\nfunction resolveRequestPdlss(\n  req: Request,\n  routeConfig: { purpose?: string; action?: string } | null,\n  customExtractPurpose: ((req: Request) => string | undefined) | undefined,\n  customExtractAction: ((req: Request) => string | undefined) | undefined\n): HttpPdlssResolution {\n  return resolveHttpPdlss({\n    method: req.method,\n    astraPurpose: headerValue(req.headers['x-astra-purpose']),\n    astraAction: headerValue(req.headers['x-astra-action']),\n    legacyPurpose: headerValue(req.headers['x-purpose'] ?? req.headers['X-Purpose']),\n    queryPurpose: typeof req.query.purpose === 'string' ? req.query.purpose : undefined,\n    routePurpose: routeConfig?.purpose,\n    routeAction: routeConfig?.action,\n    hasCustomPurposeExtractor: !!customExtractPurpose,\n    customPurpose: customExtractPurpose?.(req),\n    hasCustomActionExtractor: !!customExtractAction,\n    customAction: customExtractAction?.(req),\n  });\n}\n\n/**\n * Match a route pattern against a path.\n *\n * Audit F-A6-31 (round-18.6.5 Finding #1 from astrasync.shop): the SDK's\n * matchRoute was case-sensitive while Express's default `case sensitive\n * routing` is FALSE. A customer policy `/api/admin/*` did NOT match\n * `/api/ADMIN/users` → SDK returned `no-match` → request passed ungated →\n * Express routed it to the admin handler. The case-insensitive codepath\n * below closes the bypass.\n *\n * Ships in SHADOW MODE in SDK 2.4.13: by default the case-sensitive\n * regex is still authoritative; the case-insensitive variant is\n * computed in parallel and logged when results diverge. Follow-up\n * release flips the default to case-insensitive after 1-week\n * observation. Customers can flip early by setting\n * `caseInsensitiveRouteMatch: true` on the middleware options.\n */\nfunction matchRoute(\n  pattern: string,\n  path: string,\n  opts?: { caseInsensitive?: boolean; correlationId?: string; logShadowDivergence?: boolean }\n): boolean {\n  // Convert pattern to regex\n  const regexPattern = pattern.replace(/\\*/g, '.*').replace(/\\//g, '\\\\/');\n\n  const caseSensitiveRegex = new RegExp(`^${regexPattern}$`);\n  const caseSensitiveResult = caseSensitiveRegex.test(path);\n\n  if (!opts?.caseInsensitive && !opts?.logShadowDivergence) {\n    return caseSensitiveResult;\n  }\n\n  const caseInsensitiveRegex = new RegExp(`^${regexPattern}$`, 'i');\n  const caseInsensitiveResult = caseInsensitiveRegex.test(path);\n\n  // Shadow logging: emit only when results diverge so operators can grep\n  // their own logs for the bypass class without log volume spam.\n  if (opts?.logShadowDivergence && caseSensitiveResult !== caseInsensitiveResult) {\n    // eslint-disable-next-line no-console\n    console.warn(\n      `[SHADOW] matchRoute case-insensitive would change result: pattern=${pattern} path=${path} ` +\n        `caseSensitive=${caseSensitiveResult} caseInsensitive=${caseInsensitiveResult} correlationId=${opts.correlationId ?? 'unknown'}`\n    );\n  }\n\n  return opts?.caseInsensitive ? caseInsensitiveResult : caseSensitiveResult;\n}\n\n/**\n * Find the route configuration for a request\n */\nfunction findRouteConfig(\n  routes: RouteAccessConfig[],\n  path: string,\n  method: string,\n  opts?: { caseInsensitive?: boolean; correlationId?: string; logShadowDivergence?: boolean }\n): RouteAccessConfig | undefined {\n  return routes.find((route) => {\n    const methodMatches =\n      route.method === '*' || route.method.toUpperCase() === method.toUpperCase();\n    const pathMatches = matchRoute(route.pattern, path, opts);\n    return methodMatches && pathMatches;\n  });\n}\n\n/**\n * Default denied handler\n *\n * Round-10 (#47, O5): the response body now carries the full `failures[]`\n * array and the `correlationId` so partners can render per-dimension UX\n * and tie a denial back to a server log line. Previously the merchant only\n * got the first denialReason — meaningful detail was thrown away before\n * the response left the SDK. Also stamps `X-Astra-Gateway-Mode: enforced`\n * so partners can tell a gate-evaluated denial apart from a gate-skipped\n * pass-through (#49/O10 — the `unenforced` complement).\n */\nfunction dedupeFailures(result: VerificationResult): void {\n  if (result.failures && result.failures.length > 1) {\n    const seen = new Set<string>();\n    result.failures = result.failures.filter((f) => {\n      const key = `${f.dimension}|${f.message}|${(f as { guidance?: string }).guidance ?? ''}`;\n      if (seen.has(key)) return false;\n      seen.add(key);\n      return true;\n    });\n  }\n  if (result.denialReasons && result.denialReasons.length > 1) {\n    result.denialReasons = [...new Set(result.denialReasons)];\n  }\n}\n\nfunction defaultOnDenied(result: VerificationResult, _req: Request, res: Response): void {\n  // Round-18 G4: identity-verification failures → 401 (re-authenticate);\n  // identity-verified-but-policy-denied → 403 (re-auth won't help; update\n  // PDLSS scope or escalate to step-up). Maps to the two distinct recovery\n  // actions that HTTP middleware acts on without parsing bodies. The\n  // impossible state `!identityVerified && policyAllowed` falls into the\n  // `!identityVerified` branch — identity is the more-fundamental missing\n  // precondition.\n  const statusCode = !result.identityVerified ? 401 : 403;\n\n  res.setHeader('X-Astra-Gateway-Mode', 'enforced');\n\n  res.status(statusCode).json({\n    success: false,\n    error: {\n      code: !result.identityVerified ? 'UNAUTHORIZED' : 'INSUFFICIENT_ACCESS',\n      message: result.denialReasons?.[0] || 'Access denied',\n      accessLevel: result.accessLevel,\n      guidance: result.guidance,\n      // Round-10: aggregated per-dimension detail + correlation handle.\n      failures: result.failures,\n      correlationId: result.correlationId,\n    },\n  });\n}\n\n/**\n * Refresh interval for the remote-fetched route policy. Default: every 5\n * minutes. Override via `routesRefreshMs` on the middleware options. Each\n * middleware instance keeps its own cache; multiple instances pointing at the\n * same endpoint will each fetch independently.\n */\nconst DEFAULT_ROUTES_REFRESH_MS = 5 * 60 * 1000;\n\n/**\n * Create Express middleware for agent verification.\n *\n * v2.9.7 moved per-route policy authority out of merchant-side source code\n * into the AstraSync dashboard. `createMiddleware` no longer accepts a\n * `routes` array — it fetches the endpoint's stored policy via\n * `GET /endpoints/:counterpartyId/routes` on init and refreshes\n * periodically. Policy edits in the dashboard take effect on the next\n * refresh (or sooner if the operator manually restarts the SDK).\n *\n * `counterpartyId` is required: the SDK can't know which endpoint's policy\n * to fetch without it. Local-development workflows that don't have an\n * AstraSync endpoint registered can omit it — the middleware logs a\n * one-time warning and falls through (allows all) until a policy is\n * fetchable.\n */\nexport function createMiddleware(options: ExpressMiddlewareOptions): RequestHandler {\n  const {\n    extractCredentials: customExtractCredentials,\n    extractPurpose: customExtractPurpose,\n    extractAction: customExtractAction,\n    skipPaths = [],\n    onDenied = defaultOnDenied,\n    recordDecisions,\n    enableRuntimeChallenge = true,\n    routesRefreshMs = DEFAULT_ROUTES_REFRESH_MS,\n    failOnError = 'open',\n    caseInsensitiveRouteMatch = false,\n    ...config\n  } = options;\n\n  // v2.5.0: fire-and-forget pre-fetch of well-known URLs\n  if (config.apiBaseUrl) {\n    prefetchWellKnown(config.apiBaseUrl).catch(() => {});\n  }\n\n  // Per-middleware-instance route cache. Populated on first fetch; refreshed\n  // every `routesRefreshMs`. Until first successful fetch we hold an empty\n  // array which means \"no per-route gating active\" — the middleware falls\n  // through. Pre-fix the array came from merchant source, which both broke\n  // the auth-boundary story (defect 24) and silently disagreed with the\n  // dashboard.\n  let cachedRoutes: RouteAccessConfig[] = [];\n  let lastFetchAt = 0;\n  let refreshing: Promise<void> | null = null;\n  let warnedNoCounterparty = false;\n  let warnedEmptyRoutes = false;\n\n  async function refreshRoutes(): Promise<void> {\n    if (!config.counterpartyId) {\n      if (!warnedNoCounterparty) {\n        // eslint-disable-next-line no-console\n        console.warn(\n          '[VerificationGateway] No counterpartyId configured — falling through (allow all). ' +\n            'Per-route policy lives in the AstraSync dashboard now; register the endpoint and ' +\n            'set counterpartyId in your middleware config to enforce policy.'\n        );\n        warnedNoCounterparty = true;\n      }\n      return;\n    }\n    const fetched = await fetchRoutes(config, config.counterpartyId);\n    if (fetched) {\n      cachedRoutes = fetched;\n      lastFetchAt = Date.now();\n      // v2.3.8 (defect #25): if the fetch succeeded but returned an empty\n      // policy, the endpoint is registered correctly but the operator hasn't\n      // configured any routes yet — every request will fall through ungated.\n      // Surface this loudly once so silent pass-through can't go unnoticed.\n      if (cachedRoutes.length === 0 && !warnedEmptyRoutes) {\n        // Audit F-PROBE-01: app.astrasync.ai doesn't resolve in DNS today;\n        // dashboard actually lives at astrasync.ai/dashboard. Use that as\n        // the fallback. If DevOps provisions app.astrasync.ai later, the\n        // dashboardUrl config option lets merchants override.\n        const dashboard = config.dashboardUrl ?? 'https://astrasync.ai/dashboard';\n        // eslint-disable-next-line no-console\n        console.warn(\n          `[VerificationGateway] No route policy configured for ${config.counterpartyId}. ` +\n            `Gateway is in pass-through mode for ALL traffic until you add at least one route. ` +\n            `Configure at ${dashboard}/dashboard/endpoints/${config.counterpartyId}/routes`\n        );\n        warnedEmptyRoutes = true;\n      }\n    }\n  }\n\n  // Eager first fetch so the first request after init has policy loaded.\n  // Errors are swallowed (handled by fetchRoutes returning null).\n  refreshing = refreshRoutes().finally(() => {\n    refreshing = null;\n  });\n\n  return async (req: Request, res: Response, next: NextFunction): Promise<void> => {\n    try {\n      // Check if path should be skipped\n      const shouldSkip = skipPaths.some((pattern) => matchRoute(pattern, req.path));\n      if (shouldSkip) {\n        return next();\n      }\n\n      // Wait for in-flight init fetch (only on the very first request) so we\n      // don't admit traffic with no policy loaded.\n      if (refreshing) {\n        await refreshing.catch(() => {});\n      }\n      // Time-based refresh: kick off a background refresh if the cache is\n      // stale. Doesn't block the current request — readers see whatever is\n      // cached at this moment; the next request will see the refreshed copy.\n      if (config.counterpartyId && Date.now() - lastFetchAt > routesRefreshMs) {\n        refreshing = refreshRoutes().finally(() => {\n          refreshing = null;\n        });\n      }\n\n      // Find route configuration\n      // Audit F-A6-31 shadow-mode wiring: pass caseInsensitive flag (default\n      // false in 2.4.13) + always log divergences so merchants can grep for\n      // would-have-matched results during the 1-week observation window.\n      const correlationId =\n        (req.headers['x-request-id'] as string | undefined) ||\n        (req.headers['x-correlation-id'] as string | undefined);\n      const routeConfig = findRouteConfig(cachedRoutes, req.path, req.method, {\n        caseInsensitive: caseInsensitiveRouteMatch,\n        logShadowDivergence: true,\n        correlationId,\n      });\n\n      // If no route config, skip verification (allow through)\n      if (!routeConfig) {\n        if (config.setPassThroughHeader) {\n          // Round-10 (#49, O10): `unenforced` replaces the previous\n          // `pass-through` label. The previous name conflated \"gateway\n          // didn't evaluate policy\" with \"request succeeded end-to-end\" —\n          // the downstream handler may still return any status. The new\n          // semantic describes the GATE state only.\n          res.setHeader('X-Astra-Gateway-Mode', 'unenforced');\n          res.setHeader(\n            'X-Astra-Gateway-Reason',\n            cachedRoutes.length === 0 ? 'no-policy' : 'no-match'\n          );\n        }\n        return next();\n      }\n\n      // v2.5.0: resolve well-known URLs (cached; prefetched at middleware creation)\n      const wellKnownUrls = config.apiBaseUrl\n        ? await getWellKnownUrls(config.apiBaseUrl).catch(() => undefined)\n        : undefined;\n\n      // Extract credentials (hoisted from below the route-none check so the\n      // round-12 F9 evaluateAlwaysIfCredentialed flag can decide whether to\n      // evaluate vs short-circuit).\n      const credentials = customExtractCredentials\n        ? customExtractCredentials(req)\n        : defaultExtractCredentials(req);\n\n      // Round-12 (F9): route-none short-circuit unless the caller wants\n      // evaluation-without-enforcement. With evaluateAlwaysIfCredentialed\n      // set to true AND credentials present, the middleware calls\n      // verify-access for audit + req.agentVerification population, then\n      // proceeds without gating. Default behaviour (flag off) preserves\n      // pre-F9 short-circuit semantics.\n      const shouldEnforce = routeConfig.minAccessLevel !== 'none';\n      if (\n        routeConfig.minAccessLevel === 'none' &&\n        (!config.evaluateAlwaysIfCredentialed || !credentials.astraId)\n      ) {\n        if (config.setPassThroughHeader) {\n          res.setHeader('X-Astra-Gateway-Mode', 'unenforced');\n          res.setHeader('X-Astra-Gateway-Reason', 'route-none');\n        }\n        return next();\n      }\n\n      // v2.3.0: anonymous traffic no longer short-circuits client-side.\n      // The server applies the endpoint's `unverifiedAgentPolicy` (deny /\n      // allow_partial / allow_full) and emits the verification event +\n      // blockchain record per the canonical flow. SDK forwards verbatim.\n\n      // Resolve the canonical {purpose, action} pair (Bug 14, §4.6): dashboard\n      // route mapping → custom extractors → agent X-Astra-* headers →\n      // method-table fallback. The transport verb never travels as the action.\n      const pdlssPair = resolveRequestPdlss(\n        req,\n        routeConfig,\n        customExtractPurpose,\n        customExtractAction\n      );\n      const purpose = pdlssPair.purpose;\n      if (config.debug) {\n        // Same telemetry shape as the MCP adapter — adoption tracking and\n        // support triage read the *_source fields to see which integration\n        // path each partner uses (route mapping vs headers vs fallback).\n        // eslint-disable-next-line no-console\n        console.debug('[express-middleware] pdlss resolved', {\n          purpose_source: pdlssPair.purposeSource,\n          resolved_purpose: pdlssPair.purpose,\n          action_source: pdlssPair.actionSource,\n          resolved_action: pdlssPair.action,\n        });\n      }\n\n      // Extract full AstraSync credentials (includes PDLSS from X-Astra-* headers)\n      const astraCreds = extractAstraSyncCredentials(req);\n\n      // Auto-detect counterparty URL from the request if not explicitly configured.\n      // Since the SDK is installed at this endpoint, we always know the origin.\n      const counterpartyUrl = config.counterpartyUrl || `${req.protocol}://${req.get('host')}`;\n\n      // Step 2: Counterparty-side PDLSS pre-check — compare agent's requested PDLSS\n      // against counterparty-defined maximums on the route config.\n      // Rejects immediately if outside limits, BEFORE calling verify-access.\n      const preCheckFailures = performCounterpartyPreCheck(routeConfig, astraCreds, purpose);\n      if (preCheckFailures.length > 0) {\n        // Round-18 G4: counterparty pre-check failure — request rejected\n        // before reaching verify-access. Neither identity nor policy was\n        // remotely verified; both axes truthfully false.\n        const result: VerificationResult = {\n          identityVerified: false,\n          policyAllowed: false,\n          accessLevel: 'none',\n          denialReasons: preCheckFailures.map((f) => f.message),\n          guidance: {\n            message: 'Request exceeds counterparty-defined PDLSS limits.',\n            registrationUrl: wellKnownUrls?.registrationUrl ?? '',\n            documentationUrl: wellKnownUrls?.documentationUrl ?? '',\n          },\n          verifiedAt: new Date(),\n        };\n\n        req.agentVerification = result;\n\n        // Fire-and-forget: notify AstraSync of the pre-check failure\n        reportCounterpartyPreCheckFailure(config, {\n          agentId: astraCreds?.agentId || credentials.astraId || 'unknown',\n          counterpartyUrl,\n          counterpartyType: config.counterpartyType || 'api',\n          failures: preCheckFailures,\n          requestPath: req.path,\n          requestMethod: req.method,\n        }).catch(() => {});\n\n        dedupeFailures(result);\n        onDenied(result, req, res);\n        return;\n      }\n\n      // Step 3: Call AstraSync verify-access with runtime challenge enabled\n      const shouldRecordDecisions = recordDecisions !== false;\n      const forwardedFor = req.headers['x-forwarded-for'];\n      const forwardedForStr = Array.isArray(forwardedFor) ? forwardedFor.join(', ') : forwardedFor;\n      // Audit F-A6-34: previously the LEFTMOST X-Forwarded-For entry was\n      // taken as the original client IP. That value is attacker-controlled\n      // whenever the customer's reverse proxy doesn't strip\n      // client-supplied X-Forwarded-For — an attacker prepends\n      // `X-Forwarded-For: 1.1.1.1` and we audit the spoofed IP. Now we\n      // prefer req.ip (which Express resolves via configured `trust proxy`\n      // hop count — the customer's responsibility to set correctly per\n      // their actual hop chain). XFF still provides a fallback for\n      // customers without `trust proxy` configured, but emits a one-time\n      // warning when used so they know to fix.\n      const originalClientIp =\n        req.ip ?? (forwardedForStr ? forwardedForStr.split(',')[0].trim() : undefined);\n      if (!req.ip && forwardedForStr) {\n        // eslint-disable-next-line no-console\n        console.warn(\n          '[VerificationGateway] req.ip unset — falling back to leftmost X-Forwarded-For. ' +\n            'Configure Express trust proxy correctly to avoid spoofable client IPs in audit logs.'\n        );\n      }\n      const agentCardUrl =\n        typeof req.headers['x-astrasync-agent-card'] === 'string'\n          ? (req.headers['x-astrasync-agent-card'] as string)\n          : undefined;\n\n      const result = await verify(config, {\n        credentials,\n        purpose,\n        action: pdlssPair.action,\n        resource: req.path,\n        createSession: shouldRecordDecisions,\n        counterpartyUrl,\n        counterpartyType: config.counterpartyType || 'api',\n        enableRuntimeChallenge,\n        durationRequired: astraCreds?.pdlss?.duration?.maxSessionDuration,\n        callerMetadata: {\n          sourceIp: originalClientIp,\n          userAgent: req.headers['user-agent'] as string | undefined,\n          referer: req.headers.referer as string | undefined,\n          host: req.headers.host as string | undefined,\n          forwardedFor: forwardedForStr,\n          agentCardUrl,\n        },\n      });\n\n      // Attach result to request\n      req.agentVerification = result;\n      const sessionId = (result as EnhancedVerificationResult).sessionId;\n\n      // v2.3.9 (defect #30): denied verifications short-circuit BEFORE the\n      // gate-level comparison. Pre-rename, denials returned\n      // `accessLevel: 'guidance'` and routes gated at `'guidance'` passed\n      // `hasMinimumAccess('guidance', 'guidance') === true` — letting\n      // unverified anonymous traffic through to the merchant handler. The\n      // verify.ts denial branches now return `'none'` (so the gate check\n      // alone would correctly deny), but trusting access-level math for a\n      // denial is a category error: failing either identity OR policy already\n      // means \"deny.\" We check that first.\n      // Round-18 G4: short-circuit on either axis failing — identity-fail\n      // (no resolved caller) or policy-fail (PDLSS or recommendation deny).\n      if (!result.identityVerified || !result.policyAllowed) {\n        if (shouldRecordDecisions && sessionId) {\n          recordDecision(config, sessionId, 'denied', result.denialReasons?.[0]).catch(() => {});\n        }\n        dedupeFailures(result);\n        onDenied(result, req, res);\n        return;\n      }\n\n      // F2 direct-path fail-closed: an \"allowed-but-escalate\" outcome\n      // (step-up / requires-approval, policyAllowed:true) cannot be satisfied\n      // until the #5 approval mechanism ships. Admitting it would settle a\n      // purchase the bridge blocks (a real-money bypass on the direct path), so\n      // deny here — symmetric with the bridge — carrying the approval dimension.\n      if (requiresHumanApproval(result)) {\n        annotateApprovalRequired(result);\n        if (shouldRecordDecisions && sessionId) {\n          recordDecision(config, sessionId, 'denied', result.denialReasons?.[0]).catch(() => {});\n        }\n        dedupeFailures(result);\n        onDenied(result, req, res);\n        return;\n      }\n\n      // Round-12 (F9): evaluation-without-enforcement. When the route is\n      // 'none' but we ran verify-access for audit, skip the gates and call\n      // next() — the result is on req.agentVerification for the handler\n      // to render tier-aware responses (e.g. anonymous vs verified\n      // catalog view on the same path).\n      if (!shouldEnforce) {\n        if (config.setPassThroughHeader) {\n          res.setHeader('X-Astra-Gateway-Mode', 'enforced');\n          res.setHeader('X-Astra-Gateway-Reason', 'evaluated-not-enforced');\n        }\n        if (shouldRecordDecisions && sessionId) {\n          recordDecision(config, sessionId, 'granted').catch(() => {});\n        }\n        return next();\n      }\n\n      // 3.2.0 (post-3.1.0 feedback #1): the access-level BAND no longer gates.\n      // It mapped a trust score into an opaque tier and the per-route\n      // `minAccessLevel` comparison duplicated what the endpoint policy\n      // (min trust + PDLSS, evaluated server-side into identityVerified/\n      // policyAllowed above) already expresses — and it manufactured the\n      // \"read-only can't elevate to write\" wall. Per-route tightening is now\n      // expressed by `route.minTrustScore` (below); `accessLevel` /\n      // `minAccessLevel` / `hasMinimumAccess` are retained as informational/\n      // deprecated. Explicit per-route condition→constraint rules are the\n      // Phase-2 successor (adapter-spec endpoint-policy round).\n\n      // Per-route trust tightening (only refinement that still gates).\n      if (routeConfig.minTrustScore && result.agent) {\n        if (result.agent.trustScore < routeConfig.minTrustScore) {\n          // 3.2.0: qualitative — never embed the score or the threshold in an\n          // agent-visible message (trust is a system-internal signal; exposing\n          // the number is a gaming vector — post-3.1.0 feedback #2).\n          const trustFailure = {\n            dimension: 'endpoint.trust',\n            message: 'Trust below the route requirement for this endpoint.',\n            guidance:\n              \"Trust is below this route's floor. Trust is not overridable — the agent either meets the endpoint's trust policy or it doesn't. Raise the agent's trust via real signals (KYD, blockchain registration, agent-card), or have the operator lower the route's minTrustScore.\",\n          };\n          result.failures = [...(result.failures ?? []), trustFailure];\n          result.denialReasons = [trustFailure.message];\n          if (!result.guidance && wellKnownUrls) {\n            result.guidance = {\n              message: trustFailure.message,\n              registrationUrl: wellKnownUrls.registrationUrl,\n              documentationUrl: wellKnownUrls.documentationUrl,\n            };\n          }\n          if (shouldRecordDecisions && sessionId) {\n            recordDecision(config, sessionId, 'denied', trustFailure.message).catch(() => {});\n          }\n          dedupeFailures(result);\n          onDenied(result, req, res);\n          return;\n        }\n      }\n\n      // All checks passed — record grant decision\n      if (shouldRecordDecisions && sessionId) {\n        recordDecision(config, sessionId, 'granted').catch(() => {});\n      }\n      // v2.3.8 (defect #26): if the endpoint's `unverifiedAgentPolicy` is\n      // `'audit'` (allow + soft-launch warning), the server returns the\n      // header to relay. Lift it onto the merchant's response BEFORE\n      // calling next() so downstream handlers and the eventual response\n      // back to the agent both carry it.\n      const enhancedResult = result as EnhancedVerificationResult;\n      if (enhancedResult.warningHeader) {\n        res.setHeader(enhancedResult.warningHeader.name, enhancedResult.warningHeader.value);\n      }\n      next();\n    } catch (error) {\n      // Audit F-A1-06: shadow-mode logging for fail-closed default migration.\n      // Always log `[SHADOW] would-have-denied` so merchants can grep their\n      // own application logs for would-have-been-denied impact during the\n      // observation window. Actual deny/admit behavior controlled by\n      // failOnError option (default 'open' for backward compatibility).\n      const errorClass = error instanceof Error ? error.constructor.name : typeof error;\n      const correlationId =\n        (req.headers['x-request-id'] as string | undefined) ||\n        (req.headers['x-correlation-id'] as string | undefined) ||\n        `gen-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`;\n      // eslint-disable-next-line no-console\n      console.error('[VerificationGateway] Middleware error:', error);\n      // eslint-disable-next-line no-console\n      console.warn(\n        `[SHADOW] would-have-denied: errorClass=${errorClass} route=${req.method}:${req.path} merchantId=${config.counterpartyId ?? 'unknown'} correlationId=${correlationId}`\n      );\n\n      if (failOnError === 'closed') {\n        const result: VerificationResult = {\n          identityVerified: false,\n          policyAllowed: false,\n          accessLevel: 'none',\n          denialReasons: [`Verification middleware internal error: ${errorClass}`],\n          failures: [\n            {\n              dimension: 'middleware.internal_error',\n              message: `Middleware threw ${errorClass} — failing closed`,\n            },\n          ],\n          verifiedAt: new Date(),\n          correlationId,\n        };\n        const catchUrls = config.apiBaseUrl\n          ? await getWellKnownUrls(config.apiBaseUrl).catch(() => undefined)\n          : undefined;\n        if (catchUrls) {\n          result.guidance = {\n            message: `Middleware threw ${errorClass} — failing closed`,\n            registrationUrl: catchUrls.registrationUrl,\n            documentationUrl: catchUrls.documentationUrl,\n          };\n        }\n        dedupeFailures(result);\n        return onDenied(result, req, res);\n      }\n\n      next();\n    }\n  };\n}\n\n// `requireAccess` and `verifyOnly` were removed in v2.9.7. Both injected a\n// local `routes` array into the merchant's source code, which is the exact\n// dual-config attack vector defect 24 closed. Per-route policy now lives in\n// the AstraSync dashboard (gated by team.role admin auth + audit + alerts).\n// To enforce a minimum tier, set the route's `minAccessLevel` in the\n// dashboard. For \"verify but don't block,\" set every route to `none` there.\n"],"mappings":";AA6DO,SAAS,cAAc,OAA2B;AACvD,MAAI,SAAS,GAAI,QAAO;AACxB,MAAI,SAAS,GAAI,QAAO;AACxB,MAAI,SAAS,GAAI,QAAO;AACxB,SAAO;AACT;;;AChDO,IAAM,cAAc;;;ACC3B,IAAM,eAAe,KAAK,KAAK;AAE/B,IAAM,QAAQ,oBAAI,IAAwB;AAC1C,IAAM,WAAW,oBAAI,IAA+C;AAEpE,SAAS,aAAa,YAA4B;AAGhD,QAAM,OAAO,WAAW,QAAQ,aAAa,EAAE;AAC/C,SAAO,GAAG,IAAI;AAChB;AAEA,eAAe,eAAe,YAAuD;AACnF,QAAM,MAAM,aAAa,UAAU;AACnC,QAAM,WAAW,MAAM,MAAM,KAAK;AAAA,IAChC,QAAQ;AAAA,IACR,SAAS,EAAE,QAAQ,mBAAmB;AAAA,IACtC,QAAQ,YAAY,QAAQ,GAAI;AAAA,EAClC,CAAC;AACD,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,IAAI;AAAA,MACR,qEACS,SAAS,MAAM,SAAS,GAAG;AAAA,IACtC;AAAA,EACF;AACA,QAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,MAAI,CAAC,KAAK,mBAAmB,CAAC,KAAK,oBAAoB,CAAC,KAAK,iBAAiB;AAC5E,UAAM,IAAI;AAAA,MACR;AAAA,IAEF;AAAA,EACF;AACA,SAAO;AACT;AAMO,SAAS,kBAAkB,YAAuD;AACvF,QAAM,WAAW,SAAS,IAAI,UAAU;AACxC,MAAI,SAAU,QAAO;AAErB,QAAM,UAAU,eAAe,UAAU,EACtC,KAAK,CAAC,SAAS;AACd,UAAM,IAAI,YAAY,EAAE,MAAM,WAAW,KAAK,IAAI,EAAE,CAAC;AACrD,aAAS,OAAO,UAAU;AAC1B,WAAO;AAAA,EACT,CAAC,EACA,MAAM,CAAC,QAAQ;AACd,aAAS,OAAO,UAAU;AAC1B,UAAM;AAAA,EACR,CAAC;AAEH,WAAS,IAAI,YAAY,OAAO;AAChC,SAAO;AACT;AAOA,eAAsB,iBAAiB,YAAuD;AAC5F,QAAM,QAAQ,MAAM,IAAI,UAAU;AAElC,MAAI,OAAO;AACT,QAAI,KAAK,IAAI,IAAI,MAAM,YAAY,cAAc;AAE/C,wBAAkB,UAAU,EAAE,MAAM,MAAM;AAAA,MAE1C,CAAC;AAAA,IACH;AACA,WAAO,MAAM;AAAA,EACf;AAGA,QAAM,UAAU,SAAS,IAAI,UAAU;AACvC,MAAI,QAAS,QAAO;AAEpB,SAAO,kBAAkB,UAAU;AACrC;AAOO,SAAS,uBAAuB,YAA0D;AAC/F,SAAO,MAAM,IAAI,UAAU,GAAG;AAChC;;;AC5EA,IAAM,iBAAyC;AAAA,EAC7C,YAAY;AAAA;AAAA;AAAA;AAAA;AAAA,EAKZ,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMpB,OAAO;AACT;AAOA,IAAI,qBAAqB;AAGzB,IAAI,0BAA0B;AAE9B,eAAe,iBACb,YACA,OACA,YACe;AACf,uBAAqB;AACrB,MAAI;AACF,UAAM,WAAW,GAAG,UAAU;AAK9B,UAAM,WAAW,MAAM,MAAM,UAAU,EAAE,QAAQ,OAAO,CAAC;AACzD,UAAM,cAAc,SAAS,QAAQ,IAAI,cAAc,KAAK;AAC5D,QAAI,YAAY,WAAW,WAAW,GAAG;AACvC,YAAM,UACJ,qCAAqC,UAAU,kCAAkC,WAAW;AAQ9F,UAAI,YAAY;AACd,cAAM,IAAI,MAAM,GAAG,OAAO,oBAAoB;AAAA,MAChD;AACA,cAAQ,KAAK,GAAG,OAAO,2DAA2D;AAAA,IACpF,WAAW,OAAO;AAChB,cAAQ;AAAA,QACN,+CAA+C,UAAU,mBAAmB,WAAW;AAAA,MACzF;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,YAAY;AAGd,YAAM;AAAA,IACR;AACA,QAAI,OAAO;AACT,cAAQ,IAAI,2DAA2D,OAAO,GAAG,CAAC,EAAE;AAAA,IACtF;AAAA,EACF;AACF;AAKA,IAAM,oBAAoB,oBAAI,IAA+D;AAiB7F,SAAS,YAAY,SAA8B,gBAAiC;AAClF,QAAM,IAAI,QAAQ;AAClB,SAAO;AAAA,IACL,EAAE,WAAW;AAAA,IACb,EAAE,UAAU;AAAA,IACZ,EAAE,OAAO;AAAA,IACT,QAAQ,WAAW;AAAA,IACnB,QAAQ,UAAU;AAAA,IAClB,QAAQ,gBAAgB;AAAA,IACxB,QAAQ,YAAY;AAAA,IACpB,QAAQ,gBAAgB;AAAA,IACxB,QAAQ,oBAAoB;AAAA,IAC5B,QAAQ,YAAY;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQpB,kBAAkB;AAAA,IAClB,QAAQ,mBAAmB;AAAA,IAC3B,QAAQ,oBAAoB;AAAA,IAC5B,QAAQ,oBAAoB,MAAM;AAAA,IAClC,QAAQ,iBAAiB;AAAA,IACzB,QAAQ,iBAAiB;AAAA;AAAA;AAAA;AAAA;AAAA,IAKzB,QAAQ,oBAAoB;AAAA,IAC5B,QAAQ,sBAAsB;AAAA,IAC9B,QAAQ,yBAAyB,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMvC,QAAQ,gBAAgB,YAAY;AAAA,IACpC,QAAQ,gBAAgB,aAAa;AAAA,IACrC,QAAQ,gBAAgB,gBAAgB;AAAA,IACxC,QAAQ,gBAAgB,gBAAgB;AAAA,EAC1C,EAAE,KAAK,GAAG;AACZ;AAKA,SAAS,gBACP,SACA,gBAC2B;AAC3B,QAAM,MAAM,YAAY,SAAS,cAAc;AAC/C,QAAM,SAAS,kBAAkB,IAAI,GAAG;AAExC,MAAI,UAAU,OAAO,YAAY,KAAK,IAAI,GAAG;AAC3C,WAAO,OAAO;AAAA,EAChB;AAEA,MAAI,QAAQ;AACV,sBAAkB,OAAO,GAAG;AAAA,EAC9B;AAEA,SAAO;AACT;AAaA,IAAM,iCAAiC;AACvC,IAAM,8BAA8B;AAEpC,SAAS,YACP,SACA,QACA,eACA,gBACM;AACN,QAAM,aACJ,iBAAiB,gBAAgB,IAC7B,gBACA,OAAO,iBACL,8BACA;AACR,QAAM,MAAM,YAAY,SAAS,cAAc;AAC/C,oBAAkB,IAAI,KAAK;AAAA,IACzB;AAAA,IACA,WAAW,KAAK,IAAI,IAAI,aAAa;AAAA,EACvC,CAAC;AACH;AAYO,SAAS,mBACd,SACA,OACkB;AAClB,QAAM,cAAgC,CAAC;AAKvC,QAAM,mBAAmB;AAKzB,QAAM,gBACJ,QAAQ,YAAY,KACpB,QAAQ,YAAY,KACpB,QAAQ,YAAY,KACpB,QAAQ,iBAAiB,KACzB,QAAQ,iBAAiB,KACzB,QAAQ,kBAAkB,KAC1B,QAAQ,kBAAkB,KAC1B,QAAQ,kBAAkB;AAC5B,MAAI,eAAe;AAIjB,UAAM,MAAM,MAAM,QAAQ,aAAa,IACnC,cAAc,CAAC,IACf,OAAO,kBAAkB,WACvB,gBACA;AACN,QAAI,OAAO,QAAQ,YAAY,iBAAiB,KAAK,GAAG,GAAG;AACzD,kBAAY,UAAU;AAAA,IACxB;AAAA,EACF;AAGA,QAAM,eAAe,QAAQ,WAAW,KAAK,QAAQ,WAAW,KAAK,QAAQ,WAAW;AACxF,MAAI,cAAc;AAChB,gBAAY,SAAS,MAAM,QAAQ,YAAY,IAAI,aAAa,CAAC,IAAI;AAAA,EACvE;AAKA,QAAM,aAAa,QAAQ,eAAe,KAAK,QAAQ,eAAe;AACtE,MAAI,YAAY;AACd,UAAM,YAAY,MAAM,QAAQ,UAAU,IAAI,WAAW,CAAC,IAAI;AAC9D,QAAI,OAAO,cAAc,UAAU;AACjC,kBAAY,sBAAsB;AAClC,UAAI,UAAU,WAAW,SAAS,GAAG;AACnC,oBAAY,MAAM,UAAU,MAAM,CAAC;AAAA,MACrC;AAAA,IACF;AAAA,EACF;AAGA,MAAI,OAAO;AACT,QAAI,MAAM,WAAW,CAAC,YAAY,SAAS;AACzC,kBAAY,UAAU,MAAM;AAAA,IAC9B;AACA,QAAI,MAAM,UAAU,CAAC,YAAY,QAAQ;AACvC,kBAAY,SAAS,MAAM;AAAA,IAC7B;AAAA,EACF;AAEA,SAAO;AACT;AA0BA,SAAS,uBACP,SACA,QACA,UAAgG,CAAC,GAC7E;AACpB,QAAM,SAAS,QAAQ,UAAU;AACjC,QAAM,aAAa,WAAW;AAC9B,QAAM,OAAO,QAAQ;AAErB,QAAM,WAAyB,aAC3B;AAAA,IACE,SACE;AAAA,IACF,iBAAiB,MAAM,mBAAmB;AAAA,IAC1C,kBAAkB,MAAM,oBAAoB;AAAA,IAC5C,OAAO;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF,IACA;AAAA,IACE,SACE;AAAA,IACF,iBAAiB,MAAM,mBAAmB;AAAA,IAC1C,kBAAkB,MAAM,oBAAoB;AAAA,IAC5C,OAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEJ,SAAO;AAAA;AAAA;AAAA;AAAA,IAIL,kBAAkB;AAAA,IAClB,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOf,aAAa;AAAA,IACb;AAAA,IACA,eAAe,SAAS,CAAC,MAAM,IAAI,CAAC,qCAAqC;AAAA;AAAA;AAAA;AAAA;AAAA,IAKzE,UAAU,aACN;AAAA,MACE;AAAA,QACE,WAAW;AAAA,QACX,SAAS,UAAU;AAAA,QACnB,UAAU,SAAS;AAAA,MACrB;AAAA,IACF,IACA;AAAA,IACJ,eAAe,QAAQ;AAAA,IACvB,YAAY,oBAAI,KAAK;AAAA,EACvB;AACF;AAKA,eAAe,oBACb,QACA,SAqFC;AACD,QAAM,EAAE,aAAa,GAAG,YAAY,IAAI;AAIxC,QAAM,OAAgC;AAAA,IACpC,GAAI,YAAY,WAAW,EAAE,SAAS,YAAY,QAAQ;AAAA,IAC1D,GAAI,YAAY,WAAW,EAAE,SAAS,YAAY,QAAQ;AAAA,EAC5D;AAGA,MAAI,YAAY,OAAQ,MAAK,SAAS,YAAY;AAClD,MAAI,YAAY,aAAc,MAAK,eAAe,YAAY;AAC9D,MAAI,YAAY,SAAU,MAAK,WAAW,YAAY;AACtD,MAAI,YAAY,aAAc,MAAK,eAAe,YAAY;AAC9D,MAAI,YAAY,iBAAkB,MAAK,mBAAmB,YAAY;AACtE,MAAI,YAAY,SAAU,MAAK,WAAW,YAAY;AACtD,MAAI,YAAY,kBAAmB,MAAK,oBAAoB,YAAY;AACxE,MAAI,YAAY,cAAe,MAAK,gBAAgB,YAAY;AAChE,MAAI,YAAY,kBAAkB,OAAW,MAAK,gBAAgB,YAAY;AAE9E,MAAI,YAAY;AACd,SAAK,yBAAyB,YAAY;AAC5C,MAAI,YAAY,cAAe,MAAK,gBAAgB,YAAY;AAChE,MAAI,YAAY,iBAAkB,MAAK,mBAAmB,YAAY;AACtE,MAAI,YAAY,iBAAkB,MAAK,mBAAmB,YAAY;AACtE,MAAI,YAAY,gBAAiB,MAAK,kBAAkB,YAAY;AACpE,MAAI,OAAO,eAAgB,MAAK,iBAAiB,OAAO;AACxD,MAAI,YAAY;AACd,SAAK,0BAA0B,YAAY;AAG7C,MAAI,YAAY,mBAAoB,MAAK,qBAAqB,YAAY;AAS1E,OAAK,aAAa;AAIlB,MAAI,YAAY,kBAAkB,YAAY,YAAY,YAAY,WAAW;AAC/E,UAAM,OAAO;AAAA,MACX,GAAI,YAAY,YAAY,EAAE,UAAU,YAAY,SAAS;AAAA,MAC7D,GAAI,YAAY,aAAa,EAAE,WAAW,YAAY,UAAU;AAAA,MAChE,GAAG,YAAY;AAAA,IACjB;AACA,QAAI,OAAO,KAAK,IAAI,EAAE,SAAS,EAAG,MAAK,iBAAiB;AAAA,EAC1D;AAGA,QAAM,UAAkC;AAAA,IACtC,gBAAgB;AAAA,IAChB,GAAG,OAAO;AAAA,EACZ;AAcA,MAAI,OAAO,QAAQ;AACjB,YAAQ,eAAe,IAAI,UAAU,OAAO,MAAM;AAElD,YAAQ,WAAW,IAAI,OAAO;AAAA,EAChC;AAEA,MAAI;AACF,UAAM,WAAW,MAAM,MAAM,GAAG,OAAO,UAAU,yBAAyB;AAAA,MACxE,QAAQ;AAAA,MACR;AAAA,MACA,MAAM,KAAK,UAAU,IAAI;AAAA,IAC3B,CAAC;AAED,UAAM,OAAO,MAAM,SAAS,KAAK;AAMjC,QAAI,SAAS,WAAW,KAAK;AAC3B,aAAO;AAAA,QACL,SAAS;AAAA,QACT,QAAQ;AAAA,UACN,SAAS;AAAA,UACT,aAAa;AAAA,UACb,QAAQ;AAAA,UACR,UAAU;AAAA,YACR;AAAA,cACE,WAAW;AAAA,cACX,SACE,OAAO,MAAM,YAAY,WAAW,KAAK,UAAU;AAAA,cACrD,UACE,OAAO,MAAM,aAAa,WACtB,KAAK,WACL;AAAA,YACR;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,IAAI;AAIhB,aAAO;AAAA,QACL,SAAS;AAAA,QACT,OAAO,KAAK,WAAW,KAAK,SAAS,gBAAgB,SAAS,MAAM;AAAA,QACpE,eAAe,OAAO,MAAM,kBAAkB,WAAW,KAAK,gBAAgB;AAAA,MAChF;AAAA,IACF;AAEA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO,qCAAqC,OAAO;AAAA,IACrD;AAAA,EACF;AACF;AAKA,eAAsB,OACpB,QACA,SAC6B;AAC7B,QAAM,eAAe,EAAE,GAAG,gBAAgB,GAAG,OAAO;AAIpD,QAAM,OAAO,aAAa,aACtB,uBAAuB,aAAa,UAAU,IAC9C;AAOJ,MAAI,CAAC,sBAAsB,CAAC,aAAa,qBAAqB,aAAa,YAAY;AACrF,QAAI,aAAa,YAAY;AAC3B,YAAM,iBAAiB,aAAa,YAAY,aAAa,OAAO,IAAI;AAAA,IAC1E,OAAO;AACL,WAAK,iBAAiB,aAAa,YAAY,aAAa,OAAO,KAAK;AAAA,IAC1E;AAAA,EACF;AAGA,MACE,CAAC,4BACA,OAAO,kBAAkB,UAAa,OAAO,yBAAyB,SACvE;AACA,8BAA0B;AAC1B,YAAQ;AAAA,MACN;AAAA,IAIF;AAAA,EACF;AAUA,MAAI,aAAa,aAAa,GAAG;AAC/B,UAAM,SAAS,gBAAgB,SAAS,aAAa,cAAc;AACnE,QAAI,QAAQ;AACV,UAAI,aAAa,OAAO;AACtB,gBAAQ,IAAI,+CAA+C;AAAA,MAC7D;AACA,aAAO;AAAA,IACT;AAAA,EACF;AAGA,QAAM,kBAAkB,EAAE,GAAG,QAAQ;AACrC,MAAI,CAAC,gBAAgB,mBAAmB,aAAa,iBAAiB;AACpE,oBAAgB,kBAAkB,aAAa;AAAA,EACjD;AACA,MAAI,CAAC,gBAAgB,oBAAoB,aAAa,kBAAkB;AACtE,oBAAgB,mBAAmB,aAAa;AAAA,EAClD;AAGA,MAAI,aAAa,OAAO;AACtB,YAAQ,IAAI,iDAAiD;AAAA,EAC/D;AAEA,QAAM,cAAc,MAAM,oBAAoB,cAAc,eAAe;AAG3E,MAAI,CAAC,YAAY,SAAS;AAMxB,WAAO,uBAAuB,cAAc,YAAY,OAAO;AAAA,MAC7D,QAAQ;AAAA,MACR,eAAgB,YAA2C;AAAA,MAC3D;AAAA,IACF,CAAC;AAAA,EACH;AAGA,MAAI,CAAC,YAAY,QAAQ,SAAS;AAIhC,UAAM,qBAAsB,YAAY,QACpC;AAMJ,UAAM,wBACH,YAAY,qBAA8D,eAC3E;AACF,UAAMA,UAAqC;AAAA,MACzC,kBAAkB;AAAA,MAClB,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAQf,aAAa;AAAA,MACb,eACE,sBAAsB,mBAAmB,SAAS,IAC9C,mBAAmB,IAAI,CAAC,MAAM,EAAE,OAAO,IACvC,YAAY,QAAQ,SAClB,CAAC,YAAY,OAAO,MAAM,IAC1B,CAAC,eAAe;AAAA,MACxB,UAAU;AAAA,MACV,gBAAgB,YAAY,QAAQ;AAAA,MACpC,kBAAkB,YAAY,QAAQ;AAAA,MACtC,UAAU;AAAA,QACR,SAAS,YAAY,QAAQ,UAAU;AAAA,QACvC,iBAAiB,MAAM,mBAAmB;AAAA,QAC1C,kBAAkB,MAAM,oBAAoB;AAAA,MAC9C;AAAA,MACA,YAAY,oBAAI,KAAK;AAAA;AAAA,MAErB,WAAY,YAAwC;AAAA;AAAA;AAAA,MAGpD,eAAgB,YAAwC;AAAA,MACxD,gBAAiB,YACd;AAAA,MACH,uBAAwB,YAAwC;AAAA,IAGlE;AAEA,WAAOA;AAAA,EACT;AAGA,QAAM,QAAmC,YAAY,QACjD;AAAA,IACE,SAAS,YAAY,MAAM;AAAA,IAC3B,MAAM,YAAY,MAAM;AAAA,IACxB,YAAY,YAAY,MAAM;AAAA,IAC9B,YAAY,cAAc,YAAY,MAAM,UAAU;AAAA,IACtD,oBAAoB,YAAY,MAAM,qBAAqB;AAAA,IAC3D,QAAQ,YAAY,MAAM;AAAA,EAC5B,IACA;AAEJ,QAAM,YAA2C,YAAY,YACzD;AAAA,IACE,UAAU,YAAY,UAAU;AAAA,IAChC,MAAM,YAAY,UAAU;AAAA,IAC5B,YAAY,YAAY,UAAU,cAAc;AAAA,IAChD,UAAU,YAAY,UAAU;AAAA,EAClC,IACA;AAEJ,QAAM,eAAiD,YAAY,eAC/D;AAAA,IACE,MAAM,YAAY,aAAa;AAAA,IAC/B,UAAU,YAAY,aAAa;AAAA,IACnC,YAAY,YAAY,aAAa;AAAA,EACvC,IACA;AAKJ,QAAM,sBAAsB,YAAY;AAMxC,QAAM,cAA2B,YAAY,QAAQ,eAAe;AAEpE,QAAM,SAAqC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMzC,kBACG,YAAY,qBAA8D,eAC3E;AAAA,IACF,eAAe;AAAA,IACf;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,eAAe,YAAY,QAAQ;AAAA,IACnC;AAAA,IACA,gBAAgB,YAAY,QAAQ;AAAA,IACpC,kBAAkB,YAAY,QAAQ;AAAA,IACtC,YAAY,oBAAI,KAAK;AAAA,IACrB,UAAU,aAAa;AAAA;AAAA,IAEvB,WAAY,YAAwC;AAAA;AAAA;AAAA,IAGpD,eAAgB,YAAwC;AAAA,IACxD,kBAAmB,YAAwC;AAAA,IAG3D,eAAgB,YAAwC;AAAA,IAGxD,gBAAiB,YACd;AAAA,IACH,uBAAwB,YAAwC;AAAA,IAGhE,eAAgB,YAAwC;AAAA,EAG1D;AAGA,MAAI,OAAO,mBAAmB,QAAQ;AAKpC,WAAO,gBAAgB;AACvB,WAAO,cAAc;AACrB,WAAO,gBAAgB,OAAO,yBAAyB;AAAA,MACrD;AAAA,IACF;AACA,WAAO,WAAW,OAAO,mBACrB;AAAA,MACE,SAAS,wBAAwB,OAAO,iBAAiB,UAAU,0BAA0B;AAAA,MAC7F,iBAAiB,MAAM,mBAAmB;AAAA,MAC1C,kBAAkB,MAAM,oBAAoB;AAAA,IAC9C,IACA;AAAA,MACE,SAAS,OAAO,wBAAwB,CAAC,KAAK;AAAA,MAC9C,iBAAiB,MAAM,mBAAmB;AAAA,MAC1C,kBAAkB,MAAM,oBAAoB;AAAA,IAC9C;AAAA,EACN,WAAW,OAAO,mBAAmB,oBAAoB;AAMvD,WAAO,iBAAiB;AACxB,WAAO,gBAAgB,OAAO,yBAAyB,CAAC,+BAA+B;AAAA,EACzF;AAKA,MAAI,aAAa,aAAa,KAAK,OAAO,mBAAmB,QAAQ;AACnE,gBAAY,SAAS,QAAQ,aAAa,UAAU,aAAa,cAAc;AAAA,EACjF;AAEA,SAAO;AACT;AAMA,eAAsB,eACpB,QACA,WACA,UACA,QACe;AACf,QAAM,UAAkC,EAAE,gBAAgB,mBAAmB;AAC7E,MAAI,OAAO,QAAQ;AACjB,YAAQ,eAAe,IAAI,UAAU,OAAO,MAAM;AAClD,YAAQ,WAAW,IAAI,OAAO;AAAA,EAChC;AAEA,QAAM,MAAM,GAAG,OAAO,UAAU,yBAAyB,SAAS,aAAa;AAAA,IAC7E,QAAQ;AAAA,IACR;AAAA,IACA,MAAM,KAAK,UAAU,EAAE,UAAU,OAAO,CAAC;AAAA,EAC3C,CAAC,EAAE,MAAM,MAAM;AAAA,EAEf,CAAC;AACH;AAYA,eAAsB,YACpB,QACA,gBAC0C;AAC1C,MAAI,CAAC,eAAgB,QAAO;AAC5B,QAAM,UAAkC,EAAE,gBAAgB,mBAAmB;AAC7E,MAAI,OAAO,QAAQ;AACjB,YAAQ,eAAe,IAAI,UAAU,OAAO,MAAM;AAClD,YAAQ,WAAW,IAAI,OAAO;AAAA,EAChC;AACA,MAAI;AACF,UAAM,WAAW,MAAM;AAAA,MACrB,GAAG,OAAO,UAAU,cAAc,mBAAmB,cAAc,CAAC;AAAA,MACpE,EAAE,QAAQ,OAAO,QAAQ;AAAA,IAC3B;AACA,QAAI,CAAC,SAAS,GAAI,QAAO;AACzB,UAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,WAAO,KAAK,MAAM,UAAU,CAAC;AAAA,EAC/B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAqFA,eAAsB,kCACpB,QACA,MAae;AACf,QAAM,aAAa,OAAO,cAAc,eAAe;AAEvD,QAAM,MAAM,GAAG,UAAU,yDAAyD;AAAA,IAChF,QAAQ;AAAA,IACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAC9C,MAAM,KAAK,UAAU,IAAI;AAAA,EAC3B,CAAC,EAAE,MAAM,MAAM;AAAA,EAEf,CAAC;AACH;;;ACnhCA,IAAM,gBAAgB;AAiDf,SAAS,uBACd,SAC6B;AAC7B,QAAM,WAAW,CAAC,QAAoC;AACpD,UAAM,IAAI,QAAQ,GAAG,KAAK,QAAQ,IAAI,YAAY,CAAC;AACnD,WAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI;AAAA,EACnC;AAEA,QAAM,UAAU,SAAS,GAAG,aAAa,IAAI,KAAK,SAAS,YAAY;AACvE,MAAI,CAAC,QAAS,QAAO;AAErB,QAAM,cAAoC,EAAE,QAAQ;AAEpD,QAAM,YAAY,SAAS,GAAG,aAAa,QAAQ,KAAK,SAAS,gBAAgB;AACjF,MAAI,UAAW,aAAY,YAAY;AAEvC,QAAM,eAAe,SAAS,GAAG,aAAa,WAAW,KAAK,SAAS,mBAAmB;AAC1F,MAAI,aAAc,aAAY,eAAe;AAE7C,QAAM,UAAU,SAAS,GAAG,aAAa,SAAS,KAAK,SAAS,iBAAiB;AACjF,MAAI,SAAS;AACX,UAAM,CAAC,UAAU,MAAM,IAAI,QAAQ,MAAM,GAAG;AAC5C,gBAAY,QAAQ;AAAA,MAClB,GAAG,YAAY;AAAA,MACf,SAAS,EAAE,UAAU,OAAO;AAAA,IAC9B;AAAA,EACF;AAIA,QAAM,cAAc,SAAS,GAAG,aAAa,QAAQ,KAAK,SAAS,gBAAgB;AACnF,MAAI,aAAa;AACf,gBAAY,QAAQ;AAAA,MAClB,GAAG,YAAY;AAAA,MACf,SAAS,EAAE,UAAU,YAAY,OAAO,SAAS,YAAY,IAAI,QAAQ,YAAY;AAAA,IACvF;AAAA,EACF;AAEA,QAAM,WAAW,SAAS,GAAG,aAAa,UAAU,KAAK,SAAS,kBAAkB;AACpF,MAAI,UAAU;AACZ,gBAAY,QAAQ;AAAA,MAClB,GAAG,YAAY;AAAA,MACf,UAAU,EAAE,oBAAoB,SAAS,UAAU,EAAE,EAAE;AAAA,IACzD;AAAA,EACF;AAEA,QAAM,QAAQ,SAAS,GAAG,aAAa,OAAO,KAAK,SAAS,eAAe;AAC3E,MAAI,OAAO;AACT,gBAAY,QAAQ;AAAA,MAClB,GAAG,YAAY;AAAA,MACf,OAAO,EAAE,cAAc,MAAM;AAAA,IAC/B;AAAA,EACF;AAEA,SAAO;AACT;;;AC/FO,IAAM,2BAA6D;AAAA,EACxE,KAAK;AAAA,EACL,MAAM;AAAA,EACN,SAAS;AAAA,EACT,MAAM;AAAA,EACN,KAAK;AAAA,EACL,OAAO;AAAA,EACP,QAAQ;AACV;AAGO,IAAM,sBAAsB;AAG5B,IAAM,uBAAuB;AAE7B,SAAS,oBAAoB,QAAwB;AAC1D,SAAO,yBAAyB,OAAO,YAAY,CAAC,KAAK;AAC3D;AAsDO,SAAS,uBAAuB,OAGrC;AACA,QAAM,QAAQ,MAAM,QAAQ,GAAG;AAC/B,MAAI,SAAS,GAAG;AACd,WAAO,EAAE,SAAS,MAAM,MAAM,GAAG,KAAK,EAAE;AAAA,EAC1C;AACA,QAAM,MAAM,MAAM,QAAQ,GAAG;AAC7B,MAAI,MAAM,KAAK,MAAM,MAAM,SAAS,GAAG;AACrC,WAAO,EAAE,SAAS,MAAM,MAAM,GAAG,GAAG,GAAG,iBAAiB,MAAM;AAAA,EAChE;AACA,SAAO,EAAE,SAAS,MAAM;AAC1B;AAkBO,SAAS,iBAAiB,OAA4C;AAC3E,QAAM,aAAa,MAAM,eAAe,uBAAuB,MAAM,YAAY,IAAI;AAGrF,MAAI;AACJ,MAAI;AACJ,MAAI,MAAM,aAAa;AACrB,aAAS,MAAM;AACf,mBAAe;AAAA,EACjB,WAAW,MAAM,4BAA4B,MAAM,cAAc;AAC/D,aAAS,MAAM;AACf,mBAAe;AAAA,EACjB,WAAW,CAAC,MAAM,4BAA4B,MAAM,aAAa;AAC/D,aAAS,MAAM;AACf,mBAAe;AAAA,EACjB,WAAW,CAAC,MAAM,4BAA4B,YAAY,iBAAiB;AACzE,aAAS,WAAW;AACpB,mBAAe;AAAA,EACjB,OAAO;AACL,aAAS,oBAAoB,MAAM,MAAM;AACzC,mBAAe;AAAA,EACjB;AAGA,MAAI;AACJ,MAAI;AACJ,MAAI,MAAM,cAAc;AACtB,cAAU,MAAM;AAChB,oBAAgB;AAAA,EAClB,WAAW,MAAM,2BAA2B;AAC1C,QAAI,MAAM,eAAe;AACvB,gBAAU,MAAM;AAChB,sBAAgB;AAAA,IAClB;AAAA,EACF,WAAW,YAAY;AACrB,cAAU,WAAW;AACrB,oBAAgB;AAAA,EAClB,WAAW,MAAM,eAAe;AAC9B,cAAU,MAAM;AAChB,oBAAgB;AAAA,EAClB,WAAW,MAAM,cAAc;AAC7B,cAAU,MAAM;AAChB,oBAAgB;AAAA,EAClB;AAEA,MAAI,CAAC,SAAS;AAGZ,UAAM,MAAM,OAAO,QAAQ,GAAG;AAC9B,QAAI,MAAM,GAAG;AACX,gBAAU,OAAO,MAAM,GAAG,GAAG;AAC7B,sBAAgB;AAAA,IAClB,OAAO;AACL,gBAAU;AACV,sBAAgB;AAAA,IAClB;AAAA,EACF;AAEA,SAAO,EAAE,SAAS,QAAQ,eAA+B,aAAa;AACxE;;;AC1JA,IAAM,kBACJ;AAGK,SAAS,sBAAsB,QAAqC;AACzE,SAAO,OAAO,mBAAmB,QAAQ,OAAO,qBAAqB;AACvE;AAOO,SAAS,yBAAyB,QAAkC;AACzE,SAAO,WAAW;AAAA,IAChB,GAAI,OAAO,YAAY,CAAC;AAAA,IACxB,EAAE,WAAW,qCAAqC,SAAS,gBAAgB;AAAA,EAC7E;AACA,SAAO,gBAAgB,CAAC,iBAAiB,GAAI,OAAO,iBAAiB,CAAC,CAAE;AAC1E;;;AC/BO,SAAS,4BACd,aACA,YACA,SAC+B;AAC/B,QAAM,WAA0C,CAAC;AAUjD,MAAI,YAAY,mBAAmB,YAAY,gBAAgB,SAAS,KAAK,SAAS;AACpF,QAAI,CAAC,YAAY,gBAAgB,SAAS,OAAO,GAAG;AAClD,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,WAAW;AAAA,QACX,OAAO,YAAY;AAAA,QACnB,SAAS,YAAY,OAAO,kCAAkC,YAAY,gBAAgB,KAAK,IAAI,CAAC;AAAA,MACtG,CAAC;AAAA,IACH;AAAA,EACF;AAGA,MAAI,YAAY,oBAAoB,YAAY,iBAAiB,SAAS,KAAK,SAAS;AACtF,QAAI,CAAC,YAAY,iBAAiB,SAAS,OAAO,GAAG;AACnD,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,WAAW;AAAA,QACX,OAAO,YAAY;AAAA,QACnB,SAAS,YAAY,OAAO,mCAAmC,YAAY,iBAAiB,KAAK,IAAI,CAAC;AAAA,MACxG,CAAC;AAAA,IACH;AAAA,EACF;AAKA,MAAI,YAAY,eAAe,YAAY,OAAO,UAAU,oBAAoB;AAC9E,UAAM,YAAY,WAAW,MAAM,SAAS;AAC5C,QAAI,YAAY,YAAY,aAAa;AACvC,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP;AAAA,QACA,OAAO,YAAY;AAAA,QACnB,SAAS,sBAAsB,SAAS,qBAAqB,YAAY,WAAW;AAAA,MACtF,CAAC;AAAA,IACH;AAAA,EACF;AAKA,MACE,YAAY,wBACZ,YAAY,qBAAqB,SAAS,KAC1C,YAAY,OAAO,OAAO,cAC1B;AACA,UAAM,YAAY,WAAW,MAAM,MAAM;AACzC,QAAI,CAAC,YAAY,qBAAqB,SAAS,SAAS,GAAG;AACzD,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP;AAAA,QACA,OAAO,YAAY;AAAA,QACnB,SAAS,iBAAiB,SAAS,kCAAkC,YAAY,qBAAqB,KAAK,IAAI,CAAC;AAAA,MAClH,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT;;;ACzBA,SAAS,0BAA0B,KAAgC;AACjE,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,IAAI;AAAA,EACN;AACF;AAMO,SAAS,4BAA4B,KAA2C;AACrF,SAAO,uBAAuB,IAAI,OAAwD;AAC5F;AAGA,SAAS,YAAY,OAA0D;AAC7E,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,CAAC;AACxC,SAAO;AACT;AASA,SAAS,oBACP,KACA,aACA,sBACA,qBACqB;AACrB,SAAO,iBAAiB;AAAA,IACtB,QAAQ,IAAI;AAAA,IACZ,cAAc,YAAY,IAAI,QAAQ,iBAAiB,CAAC;AAAA,IACxD,aAAa,YAAY,IAAI,QAAQ,gBAAgB,CAAC;AAAA,IACtD,eAAe,YAAY,IAAI,QAAQ,WAAW,KAAK,IAAI,QAAQ,WAAW,CAAC;AAAA,IAC/E,cAAc,OAAO,IAAI,MAAM,YAAY,WAAW,IAAI,MAAM,UAAU;AAAA,IAC1E,cAAc,aAAa;AAAA,IAC3B,aAAa,aAAa;AAAA,IAC1B,2BAA2B,CAAC,CAAC;AAAA,IAC7B,eAAe,uBAAuB,GAAG;AAAA,IACzC,0BAA0B,CAAC,CAAC;AAAA,IAC5B,cAAc,sBAAsB,GAAG;AAAA,EACzC,CAAC;AACH;AAmBA,SAAS,WACP,SACA,MACA,MACS;AAET,QAAM,eAAe,QAAQ,QAAQ,OAAO,IAAI,EAAE,QAAQ,OAAO,KAAK;AAEtE,QAAM,qBAAqB,IAAI,OAAO,IAAI,YAAY,GAAG;AACzD,QAAM,sBAAsB,mBAAmB,KAAK,IAAI;AAExD,MAAI,CAAC,MAAM,mBAAmB,CAAC,MAAM,qBAAqB;AACxD,WAAO;AAAA,EACT;AAEA,QAAM,uBAAuB,IAAI,OAAO,IAAI,YAAY,KAAK,GAAG;AAChE,QAAM,wBAAwB,qBAAqB,KAAK,IAAI;AAI5D,MAAI,MAAM,uBAAuB,wBAAwB,uBAAuB;AAE9E,YAAQ;AAAA,MACN,qEAAqE,OAAO,SAAS,IAAI,kBACtE,mBAAmB,oBAAoB,qBAAqB,kBAAkB,KAAK,iBAAiB,SAAS;AAAA,IAClI;AAAA,EACF;AAEA,SAAO,MAAM,kBAAkB,wBAAwB;AACzD;AAKA,SAAS,gBACP,QACA,MACA,QACA,MAC+B;AAC/B,SAAO,OAAO,KAAK,CAAC,UAAU;AAC5B,UAAM,gBACJ,MAAM,WAAW,OAAO,MAAM,OAAO,YAAY,MAAM,OAAO,YAAY;AAC5E,UAAM,cAAc,WAAW,MAAM,SAAS,MAAM,IAAI;AACxD,WAAO,iBAAiB;AAAA,EAC1B,CAAC;AACH;AAaA,SAAS,eAAe,QAAkC;AACxD,MAAI,OAAO,YAAY,OAAO,SAAS,SAAS,GAAG;AACjD,UAAM,OAAO,oBAAI,IAAY;AAC7B,WAAO,WAAW,OAAO,SAAS,OAAO,CAAC,MAAM;AAC9C,YAAM,MAAM,GAAG,EAAE,SAAS,IAAI,EAAE,OAAO,IAAK,EAA4B,YAAY,EAAE;AACtF,UAAI,KAAK,IAAI,GAAG,EAAG,QAAO;AAC1B,WAAK,IAAI,GAAG;AACZ,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AACA,MAAI,OAAO,iBAAiB,OAAO,cAAc,SAAS,GAAG;AAC3D,WAAO,gBAAgB,CAAC,GAAG,IAAI,IAAI,OAAO,aAAa,CAAC;AAAA,EAC1D;AACF;AAEA,SAAS,gBAAgB,QAA4B,MAAe,KAAqB;AAQvF,QAAM,aAAa,CAAC,OAAO,mBAAmB,MAAM;AAEpD,MAAI,UAAU,wBAAwB,UAAU;AAEhD,MAAI,OAAO,UAAU,EAAE,KAAK;AAAA,IAC1B,SAAS;AAAA,IACT,OAAO;AAAA,MACL,MAAM,CAAC,OAAO,mBAAmB,iBAAiB;AAAA,MAClD,SAAS,OAAO,gBAAgB,CAAC,KAAK;AAAA,MACtC,aAAa,OAAO;AAAA,MACpB,UAAU,OAAO;AAAA;AAAA,MAEjB,UAAU,OAAO;AAAA,MACjB,eAAe,OAAO;AAAA,IACxB;AAAA,EACF,CAAC;AACH;AAQA,IAAM,4BAA4B,IAAI,KAAK;AAkBpC,SAAS,iBAAiB,SAAmD;AAClF,QAAM;AAAA,IACJ,oBAAoB;AAAA,IACpB,gBAAgB;AAAA,IAChB,eAAe;AAAA,IACf,YAAY,CAAC;AAAA,IACb,WAAW;AAAA,IACX;AAAA,IACA,yBAAyB;AAAA,IACzB,kBAAkB;AAAA,IAClB,cAAc;AAAA,IACd,4BAA4B;AAAA,IAC5B,GAAG;AAAA,EACL,IAAI;AAGJ,MAAI,OAAO,YAAY;AACrB,sBAAkB,OAAO,UAAU,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EACrD;AAQA,MAAI,eAAoC,CAAC;AACzC,MAAI,cAAc;AAClB,MAAI,aAAmC;AACvC,MAAI,uBAAuB;AAC3B,MAAI,oBAAoB;AAExB,iBAAe,gBAA+B;AAC5C,QAAI,CAAC,OAAO,gBAAgB;AAC1B,UAAI,CAAC,sBAAsB;AAEzB,gBAAQ;AAAA,UACN;AAAA,QAGF;AACA,+BAAuB;AAAA,MACzB;AACA;AAAA,IACF;AACA,UAAM,UAAU,MAAM,YAAY,QAAQ,OAAO,cAAc;AAC/D,QAAI,SAAS;AACX,qBAAe;AACf,oBAAc,KAAK,IAAI;AAKvB,UAAI,aAAa,WAAW,KAAK,CAAC,mBAAmB;AAKnD,cAAM,YAAY,OAAO,gBAAgB;AAEzC,gBAAQ;AAAA,UACN,wDAAwD,OAAO,cAAc,oGAE3D,SAAS,wBAAwB,OAAO,cAAc;AAAA,QAC1E;AACA,4BAAoB;AAAA,MACtB;AAAA,IACF;AAAA,EACF;AAIA,eAAa,cAAc,EAAE,QAAQ,MAAM;AACzC,iBAAa;AAAA,EACf,CAAC;AAED,SAAO,OAAO,KAAc,KAAe,SAAsC;AAC/E,QAAI;AAEF,YAAM,aAAa,UAAU,KAAK,CAAC,YAAY,WAAW,SAAS,IAAI,IAAI,CAAC;AAC5E,UAAI,YAAY;AACd,eAAO,KAAK;AAAA,MACd;AAIA,UAAI,YAAY;AACd,cAAM,WAAW,MAAM,MAAM;AAAA,QAAC,CAAC;AAAA,MACjC;AAIA,UAAI,OAAO,kBAAkB,KAAK,IAAI,IAAI,cAAc,iBAAiB;AACvE,qBAAa,cAAc,EAAE,QAAQ,MAAM;AACzC,uBAAa;AAAA,QACf,CAAC;AAAA,MACH;AAMA,YAAM,gBACH,IAAI,QAAQ,cAAc,KAC1B,IAAI,QAAQ,kBAAkB;AACjC,YAAM,cAAc,gBAAgB,cAAc,IAAI,MAAM,IAAI,QAAQ;AAAA,QACtE,iBAAiB;AAAA,QACjB,qBAAqB;AAAA,QACrB;AAAA,MACF,CAAC;AAGD,UAAI,CAAC,aAAa;AAChB,YAAI,OAAO,sBAAsB;AAM/B,cAAI,UAAU,wBAAwB,YAAY;AAClD,cAAI;AAAA,YACF;AAAA,YACA,aAAa,WAAW,IAAI,cAAc;AAAA,UAC5C;AAAA,QACF;AACA,eAAO,KAAK;AAAA,MACd;AAGA,YAAM,gBAAgB,OAAO,aACzB,MAAM,iBAAiB,OAAO,UAAU,EAAE,MAAM,MAAM,MAAS,IAC/D;AAKJ,YAAM,cAAc,2BAChB,yBAAyB,GAAG,IAC5B,0BAA0B,GAAG;AAQjC,YAAM,gBAAgB,YAAY,mBAAmB;AACrD,UACE,YAAY,mBAAmB,WAC9B,CAAC,OAAO,gCAAgC,CAAC,YAAY,UACtD;AACA,YAAI,OAAO,sBAAsB;AAC/B,cAAI,UAAU,wBAAwB,YAAY;AAClD,cAAI,UAAU,0BAA0B,YAAY;AAAA,QACtD;AACA,eAAO,KAAK;AAAA,MACd;AAUA,YAAM,YAAY;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,YAAM,UAAU,UAAU;AAC1B,UAAI,OAAO,OAAO;AAKhB,gBAAQ,MAAM,uCAAuC;AAAA,UACnD,gBAAgB,UAAU;AAAA,UAC1B,kBAAkB,UAAU;AAAA,UAC5B,eAAe,UAAU;AAAA,UACzB,iBAAiB,UAAU;AAAA,QAC7B,CAAC;AAAA,MACH;AAGA,YAAM,aAAa,4BAA4B,GAAG;AAIlD,YAAM,kBAAkB,OAAO,mBAAmB,GAAG,IAAI,QAAQ,MAAM,IAAI,IAAI,MAAM,CAAC;AAKtF,YAAM,mBAAmB,4BAA4B,aAAa,YAAY,OAAO;AACrF,UAAI,iBAAiB,SAAS,GAAG;AAI/B,cAAMC,UAA6B;AAAA,UACjC,kBAAkB;AAAA,UAClB,eAAe;AAAA,UACf,aAAa;AAAA,UACb,eAAe,iBAAiB,IAAI,CAAC,MAAM,EAAE,OAAO;AAAA,UACpD,UAAU;AAAA,YACR,SAAS;AAAA,YACT,iBAAiB,eAAe,mBAAmB;AAAA,YACnD,kBAAkB,eAAe,oBAAoB;AAAA,UACvD;AAAA,UACA,YAAY,oBAAI,KAAK;AAAA,QACvB;AAEA,YAAI,oBAAoBA;AAGxB,0CAAkC,QAAQ;AAAA,UACxC,SAAS,YAAY,WAAW,YAAY,WAAW;AAAA,UACvD;AAAA,UACA,kBAAkB,OAAO,oBAAoB;AAAA,UAC7C,UAAU;AAAA,UACV,aAAa,IAAI;AAAA,UACjB,eAAe,IAAI;AAAA,QACrB,CAAC,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAEjB,uBAAeA,OAAM;AACrB,iBAASA,SAAQ,KAAK,GAAG;AACzB;AAAA,MACF;AAGA,YAAM,wBAAwB,oBAAoB;AAClD,YAAM,eAAe,IAAI,QAAQ,iBAAiB;AAClD,YAAM,kBAAkB,MAAM,QAAQ,YAAY,IAAI,aAAa,KAAK,IAAI,IAAI;AAWhF,YAAM,mBACJ,IAAI,OAAO,kBAAkB,gBAAgB,MAAM,GAAG,EAAE,CAAC,EAAE,KAAK,IAAI;AACtE,UAAI,CAAC,IAAI,MAAM,iBAAiB;AAE9B,gBAAQ;AAAA,UACN;AAAA,QAEF;AAAA,MACF;AACA,YAAM,eACJ,OAAO,IAAI,QAAQ,wBAAwB,MAAM,WAC5C,IAAI,QAAQ,wBAAwB,IACrC;AAEN,YAAM,SAAS,MAAM,OAAO,QAAQ;AAAA,QAClC;AAAA,QACA;AAAA,QACA,QAAQ,UAAU;AAAA,QAClB,UAAU,IAAI;AAAA,QACd,eAAe;AAAA,QACf;AAAA,QACA,kBAAkB,OAAO,oBAAoB;AAAA,QAC7C;AAAA,QACA,kBAAkB,YAAY,OAAO,UAAU;AAAA,QAC/C,gBAAgB;AAAA,UACd,UAAU;AAAA,UACV,WAAW,IAAI,QAAQ,YAAY;AAAA,UACnC,SAAS,IAAI,QAAQ;AAAA,UACrB,MAAM,IAAI,QAAQ;AAAA,UAClB,cAAc;AAAA,UACd;AAAA,QACF;AAAA,MACF,CAAC;AAGD,UAAI,oBAAoB;AACxB,YAAM,YAAa,OAAsC;AAazD,UAAI,CAAC,OAAO,oBAAoB,CAAC,OAAO,eAAe;AACrD,YAAI,yBAAyB,WAAW;AACtC,yBAAe,QAAQ,WAAW,UAAU,OAAO,gBAAgB,CAAC,CAAC,EAAE,MAAM,MAAM;AAAA,UAAC,CAAC;AAAA,QACvF;AACA,uBAAe,MAAM;AACrB,iBAAS,QAAQ,KAAK,GAAG;AACzB;AAAA,MACF;AAOA,UAAI,sBAAsB,MAAM,GAAG;AACjC,iCAAyB,MAAM;AAC/B,YAAI,yBAAyB,WAAW;AACtC,yBAAe,QAAQ,WAAW,UAAU,OAAO,gBAAgB,CAAC,CAAC,EAAE,MAAM,MAAM;AAAA,UAAC,CAAC;AAAA,QACvF;AACA,uBAAe,MAAM;AACrB,iBAAS,QAAQ,KAAK,GAAG;AACzB;AAAA,MACF;AAOA,UAAI,CAAC,eAAe;AAClB,YAAI,OAAO,sBAAsB;AAC/B,cAAI,UAAU,wBAAwB,UAAU;AAChD,cAAI,UAAU,0BAA0B,wBAAwB;AAAA,QAClE;AACA,YAAI,yBAAyB,WAAW;AACtC,yBAAe,QAAQ,WAAW,SAAS,EAAE,MAAM,MAAM;AAAA,UAAC,CAAC;AAAA,QAC7D;AACA,eAAO,KAAK;AAAA,MACd;AAcA,UAAI,YAAY,iBAAiB,OAAO,OAAO;AAC7C,YAAI,OAAO,MAAM,aAAa,YAAY,eAAe;AAIvD,gBAAM,eAAe;AAAA,YACnB,WAAW;AAAA,YACX,SAAS;AAAA,YACT,UACE;AAAA,UACJ;AACA,iBAAO,WAAW,CAAC,GAAI,OAAO,YAAY,CAAC,GAAI,YAAY;AAC3D,iBAAO,gBAAgB,CAAC,aAAa,OAAO;AAC5C,cAAI,CAAC,OAAO,YAAY,eAAe;AACrC,mBAAO,WAAW;AAAA,cAChB,SAAS,aAAa;AAAA,cACtB,iBAAiB,cAAc;AAAA,cAC/B,kBAAkB,cAAc;AAAA,YAClC;AAAA,UACF;AACA,cAAI,yBAAyB,WAAW;AACtC,2BAAe,QAAQ,WAAW,UAAU,aAAa,OAAO,EAAE,MAAM,MAAM;AAAA,YAAC,CAAC;AAAA,UAClF;AACA,yBAAe,MAAM;AACrB,mBAAS,QAAQ,KAAK,GAAG;AACzB;AAAA,QACF;AAAA,MACF;AAGA,UAAI,yBAAyB,WAAW;AACtC,uBAAe,QAAQ,WAAW,SAAS,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAAA,MAC7D;AAMA,YAAM,iBAAiB;AACvB,UAAI,eAAe,eAAe;AAChC,YAAI,UAAU,eAAe,cAAc,MAAM,eAAe,cAAc,KAAK;AAAA,MACrF;AACA,WAAK;AAAA,IACP,SAAS,OAAO;AAMd,YAAM,aAAa,iBAAiB,QAAQ,MAAM,YAAY,OAAO,OAAO;AAC5E,YAAM,gBACH,IAAI,QAAQ,cAAc,KAC1B,IAAI,QAAQ,kBAAkB,KAC/B,OAAO,KAAK,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC;AAE1E,cAAQ,MAAM,2CAA2C,KAAK;AAE9D,cAAQ;AAAA,QACN,0CAA0C,UAAU,UAAU,IAAI,MAAM,IAAI,IAAI,IAAI,eAAe,OAAO,kBAAkB,SAAS,kBAAkB,aAAa;AAAA,MACtK;AAEA,UAAI,gBAAgB,UAAU;AAC5B,cAAM,SAA6B;AAAA,UACjC,kBAAkB;AAAA,UAClB,eAAe;AAAA,UACf,aAAa;AAAA,UACb,eAAe,CAAC,2CAA2C,UAAU,EAAE;AAAA,UACvE,UAAU;AAAA,YACR;AAAA,cACE,WAAW;AAAA,cACX,SAAS,oBAAoB,UAAU;AAAA,YACzC;AAAA,UACF;AAAA,UACA,YAAY,oBAAI,KAAK;AAAA,UACrB;AAAA,QACF;AACA,cAAM,YAAY,OAAO,aACrB,MAAM,iBAAiB,OAAO,UAAU,EAAE,MAAM,MAAM,MAAS,IAC/D;AACJ,YAAI,WAAW;AACb,iBAAO,WAAW;AAAA,YAChB,SAAS,oBAAoB,UAAU;AAAA,YACvC,iBAAiB,UAAU;AAAA,YAC3B,kBAAkB,UAAU;AAAA,UAC9B;AAAA,QACF;AACA,uBAAe,MAAM;AACrB,eAAO,SAAS,QAAQ,KAAK,GAAG;AAAA,MAClC;AAEA,WAAK;AAAA,IACP;AAAA,EACF;AACF;","names":["result","result"]}