@atlasauth/pca-a2a 0.3.0 → 0.4.1

package/README.md

@@ -29,9 +29,17 @@ const pcActn = buildPCActn({ grant, chain: [grant], plan, nodeId: 'buy-1', count
                              signerSecret: agentSecret, aud: 'my-rs' });
 const task = attachPcaToA2ATask({ id: 't1', status: { state: 'submitted' } }, pcActn);
 
-// Receiver: guard incoming tasks. Pin the principal you trust.
-const guard = pcaA2AMiddleware({ aud: 'my-rs', expectedRootIssuer: principalPublicKey });
-const verdict = await guard(task);       // { ok: true, result, pcActn } | { ok: false, reason }
+// Receiver: guard incoming tasks with the FULL verifier under an authority you trust: your stored `grant`, or the
+// principal the chain must be rooted at (`expectedRootIssuer`). Supply your view of the action (plan, budget, risk)
+// and a revocation hook; the grant's predicates, limits, budget and threshold decide.
+const guard = pcaA2AMiddleware({
+  aud: 'my-rs',
+  expectedRootIssuer: principalPublicKey,
+  allowedSuites: ['ed25519'],
+  hooks: { revocation: ({ grant }) => ({ enforced: true, ok: !revoked.has(grant.id) }) },
+  context: (p) => ({ params: paramsFor(p), plan: authorizedPlanFor(p), planAuthorized: true, budget: budgetFor(p) }),
+});
+const verdict = await guard(task);       // { ok: true, result, pcActn } | { ok: false, reason, result }
 
 // Signed Agent Card (key is a jose KeyLike, Uint8Array or JWK).
 const card = await issueSignedAgentCard({ name: 'Buyer', url: 'https://a.example' }, privateKey,
@@ -42,16 +50,26 @@ await verifyAgentCard(card, { key: publicKey });  // { ok: true, passportRef: 'p
 const mandate = a2aPaymentMandateFromPca(pcActn, {
   amount: { currency: 'USD', value: 120 }, paymentMethod: { type: 'card' }, merchant: 'acme',
 });
-await verifyA2APaymentMandate(mandate, pcActn, { aud: 'my-rs', expectedRootIssuer: principalPublicKey });
+await verifyA2APaymentMandate(mandate, pcActn, { aud: 'my-rs', grant: storedGrant, hooks, context });
 ```
 
-By default a guard requires a proof (`require: true`); with `require: false` a task without a proof passes, but a proof that is present and invalid is still rejected. Always pin `expectedRootIssuer` (or `grant`): otherwise the chain root is taken from the proof itself and only proves internal consistency, not that a principal you trust issued it.
+By default a guard requires a proof (`require: true`); with `require: false` a task without a proof passes, but a proof that is present and invalid is still rejected.
+
+**Authority is required (breaking).** Every verifier needs `grant` (from your store) or `expectedRootIssuer`; without
+either it throws `A2AAuthorityError` (`code: 'authority_required'`): a chain is never its own authority. Without `grant`,
+a post-quantum or hybrid root is admitted only under a server-side pin (`pqPins`, the `pq_pin` check).
+
+**The decision is the full verifier (breaking).** `verifyA2ATask`, `verifyA2APaymentMandate` and the middleware run
+`verifyPCActn` with `requireChecks` defaulting to `DEFAULT_REQUIRED_CHECKS` (default-deny): the grant's predicates,
+limits and caveats, your plan authorization, revocation, the trust budget (absent: deny-metered) and the
+server-derived threshold. `result` is the `PcaVerdict` (plus `reason`).
 
 ## API
 
 - Tasks: `attachPcaToA2ATask`, `attachPcaToA2AMessage`, `extractPca`, `extractPcaFromMessage`, `verifyA2ATask`, `pcaA2AMiddleware`, `PCA_A2A_EXTENSION_URI`.
 - Agent Cards: `issueSignedAgentCard`, `verifyAgentCard` (verify with a single `key` or a `jwks`).
 - Payments: `a2aPaymentMandateFromPca`, `pcaBindingFromA2APaymentMandate`, `verifyA2APaymentMandate`, `A2A_AP2_CONTEXT`.
+- `human_present` is `false` unless you pass `humanSignerSet` (the builder then verifies the principal co-signature at t=3) or assert `humanPresent: true` yourself. A `threshold` field alone is never trusted (breaking change).
 
 ## Status
 
@@ -62,3 +80,7 @@ Source and issues: https://github.com/Atlas-Authorization/pca
 ## License
 
 MIT - see LICENSE
+
+## Canonical token spelling
+
+Before any JOSE verification this package runs `assertCanonicalCompactJws` from `@atlasauth/pca` on each card signature's protected and signature segments: one accepted string form per token, so the token string (or its hash) is safe to use as a dedupe / replay / ledger key. Padded, `+` `/` alphabet, altered-trailing-bit, whitespace and duplicate-header-key re-encodings are rejected with a typed reason before the signature is even checked.

package/dist/index.d.ts

@@ -29,7 +29,7 @@
  * When `@atlasauth/pca-ap2` is on the dependency path, prefer composing with its full chain + settlement
  * backends and treat this profile as the A2A-task envelope around a verified PCActn.
  */
-import { type Capability, type PCActn, type VerifyResult } from '@atlasauth/pca';
+import { type Capability, type PCActn, type PcaContext, type PcaVerdict, type SigAlg, type Signer, type VerifyHooks } from '@atlasauth/pca';
 import { type JSONWebKeySet, type JWK, type KeyLike } from 'jose';
 /**
  * The URI-namespaced A2A extension key a PCActn rides under on a Task's / Message's `metadata`. A2A
@@ -85,20 +85,39 @@ export interface PcaVerifyOptions {
     /** Verification clock (epoch ms). Default `Date.now()`. */
     now?: number;
     /**
-     * The trusted root grant (capability). When omitted, the grant is taken from the embedded chain root
-     * (`cap_chain[0]`); the full chain cryptography is still verified either way, but pinning `grant` (or
-     * `expectedRootIssuer`) is what ties the proof to a KNOWN principal rather than whatever the chain claims.
+     * The grant from YOUR store (by the PCActn's grant_ref): the chain root must be byte-identical to it. One of `grant` /
+     * `expectedRootIssuer` is REQUIRED ({@link A2AAuthorityError} otherwise): the chain alone proves nothing.
      */
     grant?: Capability;
-    /** When set, the chain root's issuer MUST equal this principal key (b64u), else verification fails. */
+    /**
+     * The principal the chain must be rooted at (b64u). Without `grant`, the chain root is accepted only when its issuer is
+     * this principal; an Ed25519 root is then self-authenticating, and a post-quantum / hybrid root also needs `pqPins`.
+     */
     expectedRootIssuer?: string;
+    /** Verifier-side `issuer -> pq_pk` pins (the `pq_pin` check). Required for a non-Ed25519 root accepted via `expectedRootIssuer`. */
+    pqPins?: Readonly<Record<string, string>>;
+    /** Signature suites accepted for the leaf and every hop (default: every registered suite with holder-bound PQ keys). */
+    allowedSuites?: readonly SigAlg[];
+    /** Verification hooks (revocation, threshold, attestation, ...) handed to `verifyPCActn`. */
+    hooks?: VerifyHooks;
+    /** The resource server's view of the action: params, its own plan + planAuthorized, budget, risk (static or per PCActn). */
+    context?: PcaContext | ((pcActn: PCActn) => PcaContext | Promise<PcaContext>);
+    /** Checks that must PASS (default-deny). Default `DEFAULT_REQUIRED_CHECKS`. */
+    requireChecks?: readonly string[];
+}
+/** Thrown when an A2A verifier is configured without any authority (`grant` or `expectedRootIssuer`). */
+export declare class A2AAuthorityError extends Error {
+    readonly code: "authority_required";
+    constructor();
 }
 /** The result of verifying a proof-carrying A2A artifact. */
 export interface A2AVerification {
     ok: boolean;
     reason?: string;
-    /** The underlying PCA core verification result (present once a PCActn was found and evaluated). */
-    result?: VerifyResult;
+    /** The full verifier's verdict (present once a PCActn was found and evaluated); `reason` joins its reasons on a deny. */
+    result?: PcaVerdict & {
+        reason?: string;
+    };
     /** The extracted PCActn (present when one was carried). */
     pcActn?: PCActn;
 }
@@ -239,9 +258,9 @@ export interface A2APaymentMandateContents {
     amount: A2AMonetaryAmount;
     payment_method: A2APaymentMethod;
     /**
-     * The AP2 human-present modality. MAPPING: a PCActn carrying a risk-adaptive `threshold` (a
-     * guardian/principal co-signature) ⇒ `human_present = true`; an agent-only (t=1) action ⇒ `false`.
-     * Override explicitly via `humanPresent`.
+     * The AP2 human-present modality. `true` only when the builder VERIFIED a principal co-signature
+     * (`humanSignerSet`) or the caller asserted it explicitly (`humanPresent`). The mere presence of a `threshold`
+     * field is never evidence: it sits outside the signed body (R2-03).
      */
     human_present: boolean;
     merchant?: string;
@@ -264,8 +283,13 @@ export interface PaymentMandateOptions {
     paymentMethod: A2APaymentMethod;
     /** The merchant, if constrained. */
     merchant?: string;
-    /** Override the human-present modality (else derived from whether the PCActn carries a `threshold`). */
+    /** Assert the human-present modality (YOU are responsible for having verified the co-sign). Default false. */
     humanPresent?: boolean;
+    /**
+     * Derive human-present by VERIFYING the PCActn's threshold shares against this signer set at t=3 (agent + guardian +
+     * principal; i.e. a verified principal share). Ignored when `humanPresent` is given. A forged or unverifiable share yields `false`.
+     */
+    humanSignerSet?: Signer[];
     /** Override the VDC issuer (defaults to the PCActn's leaf holder key). */
     issuerPublic?: string;
     /** Issuance clock (epoch ms). Default `Date.now()`. */

package/dist/index.js

@@ -31,7 +31,7 @@
  * backends and treat this profile as the A2A-task envelope around a verified PCActn.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.A2A_AP2_CONTEXT = exports.PCA_A2A_EXTENSION_URI = void 0;
+exports.A2A_AP2_CONTEXT = exports.A2AAuthorityError = exports.PCA_A2A_EXTENSION_URI = void 0;
 exports.attachPcaToA2ATask = attachPcaToA2ATask;
 exports.attachPcaToA2AMessage = attachPcaToA2AMessage;
 exports.extractPca = extractPca;
@@ -45,6 +45,7 @@ exports.pcaBindingFromA2APaymentMandate = pcaBindingFromA2APaymentMandate;
 exports.verifyA2APaymentMandate = verifyA2APaymentMandate;
 const pca_1 = require("@atlasauth/pca");
 const jose_1 = require("jose");
+const pca_2 = require("@atlasauth/pca");
 // ===================================================================================================
 // Extension identifier
 // ===================================================================================================
@@ -103,13 +104,33 @@ function extractPca(task) {
 function extractPcaFromMessage(message) {
     return readPca(message.metadata);
 }
+/** Thrown when an A2A verifier is configured without any authority (`grant` or `expectedRootIssuer`). */
+class A2AAuthorityError extends Error {
+    code = 'authority_required';
+    constructor() {
+        super('pca-a2a: pass `grant` (from your store) or `expectedRootIssuer`; a chain is never its own authority');
+        this.name = 'A2AAuthorityError';
+    }
+}
+exports.A2AAuthorityError = A2AAuthorityError;
+function assertAuthority(opts) {
+    const hasGrant = !!opts && opts.grant !== undefined && opts.grant !== null && typeof opts.grant === 'object';
+    const hasIssuer = !!opts && typeof opts.expectedRootIssuer === 'string' && opts.expectedRootIssuer.length > 0;
+    if (!hasGrant && !hasIssuer)
+        throw new A2AAuthorityError();
+}
 function chainRoot(chain) {
     if (!Array.isArray(chain) || chain.length === 0)
         return undefined;
     return chain[0];
 }
-/** Core PCActn verification shared by the Task and payment-mandate surfaces. Fail-closed. */
+/**
+ * PCActn AUTHORIZATION shared by the Task and payment-mandate surfaces: the full server verifier (`verifyPCActn`) under a
+ * known authority (the stored grant, or the chain root only when its issuer is the expected principal), with the grant's
+ * predicates, limits, caveats, plan authorization, budget, threshold, allowedSuites and pqPins. Fail-closed.
+ */
 async function verifyPcActn(pcActn, opts) {
+    assertAuthority(opts);
     const root = chainRoot(pcActn.cap_chain);
     if (!root)
         return { ok: false, reason: 'PCActn carries no capability chain', pcActn };
@@ -120,15 +141,25 @@ async function verifyPcActn(pcActn, opts) {
             pcActn,
         };
     }
+    // Without a stored grant, the root is admitted only under the pinned principal; a non-Ed25519 root then needs a PQ pin
+    // (pqPins defaults to none, so the `pq_pin` check fails closed).
+    // pca-unsafe-root: allow without a stored grant the root is admitted only when its issuer is the pinned expectedRootIssuer, and a non-Ed25519 root also needs pqPins (pq_pin, fail closed)
     const grant = opts.grant ?? root;
-    const result = await (0, pca_1.verifyPCActnCore)(pcActn, {
+    const pqPins = opts.grant === undefined ? (opts.pqPins ?? {}) : opts.pqPins;
+    const context = typeof opts.context === 'function' ? await opts.context(pcActn) : (opts.context ?? {});
+    const verdict = await (0, pca_1.verifyPCActn)(pcActn, {
         grant,
         audience: opts.aud,
-        ...(opts.now !== undefined ? { nowEpoch: opts.now } : {}),
+        now: opts.now ?? Date.now(),
+        context,
+        ...(opts.hooks ? { hooks: opts.hooks } : {}),
+        ...(opts.allowedSuites ? { allowedSuites: opts.allowedSuites } : {}),
+        ...(pqPins ? { pqPins } : {}),
+        require: [...(opts.requireChecks ?? pca_1.DEFAULT_REQUIRED_CHECKS)],
     });
-    return result.allow
-        ? { ok: true, result, pcActn }
-        : { ok: false, reason: result.reason ?? 'PCActn verification failed', result, pcActn };
+    const reason = verdict.allow ? undefined : verdict.reasons.join('; ') || 'PCActn verification failed';
+    const result = { ...verdict, ...(reason !== undefined ? { reason } : {}) };
+    return verdict.allow ? { ok: true, result, pcActn } : { ok: false, reason, result, pcActn };
 }
 /**
  * Verify the proof-carrying action on an A2A Task. Fail-closed: a Task with no attached PCActn, or one
@@ -136,6 +167,7 @@ async function verifyPcActn(pcActn, opts) {
  * is rejected.
  */
 async function verifyA2ATask(task, opts) {
+    assertAuthority(opts);
     const pcActn = extractPca(task);
     if (!pcActn)
         return { ok: false, reason: 'no proof-carrying action attached to this task' };
@@ -147,6 +179,7 @@ async function verifyA2ATask(task, opts) {
  * `tasks/send` handler and reject when `ok` is false.
  */
 function pcaA2AMiddleware(opts) {
+    assertAuthority(opts);
     const require = opts.require ?? true;
     return async (task) => {
         const pcActn = extractPca(task);
@@ -232,6 +265,7 @@ async function verifyAgentCard(card, opts) {
         }
         const input = { protected: sig.protected, payload, signature: sig.signature };
         try {
+            (0, pca_2.assertCanonicalJwsSegments)(sig.protected, sig.signature); // canonical-spelling gate BEFORE jose
             // Split the call so each branch matches a single flattenedVerify overload (key vs. key-resolver).
             const verified = typeof resolver === 'function'
                 ? await (0, jose_1.flattenedVerify)(input, resolver)
@@ -268,6 +302,16 @@ function leafHolderOf(chain) {
     const leaf = chain[chain.length - 1];
     return leaf?.holder;
 }
+function verifiedHumanPresent(pcActn, signerSet) {
+    try {
+        const grant = { id: pcActn.grant_ref };
+        const r = (0, pca_1.createThresholdVerifier)({ signerSet, t: 3 })({ pcactn: pcActn, grant });
+        return r.enforced === true && r.ok === true && typeof r.t === 'number' && r.t >= 3;
+    }
+    catch {
+        return false;
+    }
+}
 /**
  * Map a PCA proof (a PCActn) to an AP2 Payment Mandate so an A2A payment Task can carry it. The mandate's
  * authority is carried BY REFERENCE: `x_pca.pcactn_digest` binds it to the PCActn, and the mandate is
@@ -279,7 +323,7 @@ function a2aPaymentMandateFromPca(pcActn, opts) {
     if (issuer === undefined) {
         throw new Error('a2aPaymentMandateFromPca: no issuerPublic given and the PCActn has no capability chain');
     }
-    const humanPresent = opts.humanPresent ?? pcActn.threshold !== undefined;
+    const humanPresent = opts.humanPresent ?? (opts.humanSignerSet ? verifiedHumanPresent(pcActn, opts.humanSignerSet) : false);
     const now = opts.now ?? Date.now();
     const x_pca = {
         pcactn_digest: (0, pca_1.pcactnDigest)(pcActn),
@@ -316,6 +360,7 @@ function pcaBindingFromA2APaymentMandate(mandate) {
  * the AP2 payment mandate PCA-verifiable rather than a bare assertion.
  */
 async function verifyA2APaymentMandate(mandate, pcActn, opts) {
+    assertAuthority(opts);
     const bound = mandate.credentialSubject.x_pca.pcactn_digest;
     if (bound !== (0, pca_1.pcactnDigest)(pcActn)) {
         return { ok: false, reason: 'payment mandate is not bound to this PCActn (pcactn_digest mismatch)', pcActn };

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;;;AAuFH,gDAEC;AAGD,sDAEC;AAOD,gCAcC;AAGD,sDAEC;AA8DD,sCAIC;AAoBD,4CAWC;AAsED,oDA4BC;AA6BD,0CAiDC;AAoGD,4DAkCC;AAGD,0EAEC;AAQD,0DAUC;AApiBD,wCAQwB;AACxB,+BASc;AAEd,sGAAsG;AACtG,uBAAuB;AACvB,sGAAsG;AAEtG;;;GAGG;AACU,QAAA,qBAAqB,GAAG,sCAA+C,CAAC;AAwCrF,sGAAsG;AACtG,8BAA8B;AAC9B,sGAAsG;AAEtG,SAAS,OAAO,CAAC,QAA6C,EAAE,MAAc;IAC5E,OAAO,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC,6BAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;AAClE,CAAC;AAED,0GAA0G;AAC1G,SAAS,OAAO,CAAC,QAA6C;IAC5D,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,CAAC,GAAG,QAAQ,CAAC,6BAAqB,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAW,CAAC;IACjF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,4EAA4E;AAC5E,SAAgB,kBAAkB,CAAC,IAAa,EAAE,MAAc;IAC9D,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,sFAAsF;AACtF,SAAgB,qBAAqB,CAAC,OAAmB,EAAE,MAAc;IACvE,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;AACrE,CAAC;AAED;;;;GAIG;AACH,SAAgB,UAAU,CAAC,IAAa;IACtC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YACrB,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YACnC,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,oEAAoE;AACpE,SAAgB,qBAAqB,CAAC,OAAmB;IACvD,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AACnC,CAAC;AA4BD,SAAS,SAAS,CAAC,KAAkC;IACnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,6FAA6F;AAC7F,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,IAAsB;IAChE,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAoC,EAAE,MAAM,EAAE,CAAC;IAEtF,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACrF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,yDAAyD;YACjE,MAAM;SACP,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAgB,EAAC,MAAM,EAAE;QAC5C,KAAK;QACL,QAAQ,EAAE,IAAI,CAAC,GAAG;QAClB,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,KAAK;QACjB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE;QAC9B,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,4BAA4B,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC3F,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,aAAa,CAAC,IAAa,EAAE,IAAsB;IACvE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gDAAgD,EAAE,CAAC;IAC5F,OAAO,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACpC,CAAC;AAeD;;;;GAIG;AACH,SAAgB,gBAAgB,CAAC,IAA6B;IAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;IACrC,OAAO,KAAK,EAAE,IAAa,EAA4B,EAAE;QACvD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,OAAO;gBACZ,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0DAA0D,EAAE;gBACnF,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACnB,CAAC;QACD,OAAO,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC,CAAC;AACJ,CAAC;AA0CD,MAAM,mBAAmB,GAAG,cAAc,CAAC;AAE3C,SAAS,KAAK,CAAC,CAAiB;IAC9B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACzF,CAAC;AAED,8GAA8G;AAC9G,SAAS,gBAAgB,CAAC,IAAe;IACvC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IAClD,KAAK,WAAW,CAAC;IACjB,OAAO,IAAA,oBAAc,EAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAWD;;;;;GAKG;AACI,KAAK,UAAU,oBAAoB,CACxC,IAAe,EACf,UAAwB,EACxB,OAA8B,EAAE;IAEhC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC;IAChC,MAAM,QAAQ,GAA+B,IAAI,CAAC,QAAQ;QACxD,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QAC5H,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;IAErB,0EAA0E;IAC1E,MAAM,MAAM,GAAc,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACtF,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAEzC,MAAM,GAAG,GAAyB,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,IAAA,gBAAS,EAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IACpG,MAAM,eAAe,GAA4B;QAC/C,GAAG;QACH,GAAG,EAAE,KAAK;QACV,IAAI,EAAE,CAAC,KAAK,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,IAAI,oBAAa,CAAC,OAAO,CAAC,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3F,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAE9G,MAAM,SAAS,GAAuB,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;IAC7F,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;IACzC,OAAO,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,CAAC,GAAG,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC;AAC7D,CAAC;AAuBD;;;;;GAKG;AACI,KAAK,UAAU,eAAe,CACnC,IAAe,EACf,IAA4B;IAE5B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;IACnE,CAAC;IAED,IAAI,QAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,QAAQ,GAAG,IAAA,wBAAiB,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;aAAM,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAClC,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,IAAA,gBAAS,EAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QACzF,CAAC;aAAM,CAAC;YACN,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;QACvE,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uCAAwC,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IAC9F,CAAC;IAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,WAA+B,CAAC;IAEpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACnF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,eAAe,EAAE,CAAC;QAC9D,CAAC;QACD,MAAM,KAAK,GAAsB,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;QACjG,IAAI,CAAC;YACH,kGAAkG;YAClG,MAAM,QAAQ,GACZ,OAAO,QAAQ,KAAK,UAAU;gBAC5B,CAAC,CAAC,MAAM,IAAA,sBAAe,EAAC,KAAK,EAAE,QAAQ,CAAC;gBACxC,CAAC,CAAC,MAAM,IAAA,sBAAe,EAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,eAAe,EAAE,CAAC,mBAAmB,CAAC,CAAC;YAC5D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,WAAW,KAAK,SAAS;gBAAE,WAAW,GAAG,GAAG,CAAC;QAC9E,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,oBAAqB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QACzF,CAAC;IACH,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,sGAAsG;AACtG,uFAAuF;AACvF,sGAAsG;AAEtG;;;;GAIG;AACU,QAAA,eAAe,GAAsB;IAChD,wCAAwC;IACxC,uCAAuC;CACxC,CAAC;AA4DF,SAAS,YAAY,CAAC,KAAkC;IACtD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,OAAO,IAAI,EAAE,MAAM,CAAC;AACtB,CAAC;AAiBD;;;;GAIG;AACH,SAAgB,wBAAwB,CAAC,MAAc,EAAE,IAA2B;IAClF,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC;IACzC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,wFAAwF,CAAC,CAAC;IAC5G,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC;IACzE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAEnC,MAAM,KAAK,GAAsB;QAC/B,aAAa,EAAE,IAAA,kBAAY,EAAC,MAAM,CAAC;QACnC,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;QACxB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;QAChC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa;QAC1C,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,IAAI,IAAI,MAAM;KAC5B,CAAC;IAEF,MAAM,QAAQ,GAA8B;QAC1C,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE;QAC1B,cAAc,EAAE,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE;QACzC,aAAa,EAAE,YAAY;QAC3B,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,KAAK;KACN,CAAC;IAEF,OAAO;QACL,UAAU,EAAE,uBAAe;QAC3B,IAAI,EAAE,CAAC,sBAAsB,EAAE,gBAAgB,CAAC;QAChD,MAAM;QACN,YAAY,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;QACzC,iBAAiB,EAAE,QAAQ;KAC5B,CAAC;AACJ,CAAC;AAED,2FAA2F;AAC3F,SAAgB,+BAA+B,CAAC,OAA0B;IACxE,OAAO,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,uBAAuB,CAC3C,OAA0B,EAC1B,MAAc,EACd,IAAsB;IAEtB,MAAM,KAAK,GAAG,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,aAAa,CAAC;IAC5D,IAAI,KAAK,KAAK,IAAA,kBAAY,EAAC,MAAM,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sEAAsE,EAAE,MAAM,EAAE,CAAC;IAC/G,CAAC;IACD,OAAO,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACpC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;;;AA8FH,gDAEC;AAGD,sDAEC;AAOD,gCAcC;AAGD,sDAEC;AAwGD,sCAKC;AAoBD,4CAYC;AAsED,oDA4BC;AA6BD,0CAkDC;AAmHD,4DAkCC;AAGD,0EAEC;AAQD,0DAWC;AAxmBD,wCAcwB;AACxB,+BASc;AACd,wCAA4D;AAE5D,sGAAsG;AACtG,uBAAuB;AACvB,sGAAsG;AAEtG;;;GAGG;AACU,QAAA,qBAAqB,GAAG,sCAA+C,CAAC;AAwCrF,sGAAsG;AACtG,8BAA8B;AAC9B,sGAAsG;AAEtG,SAAS,OAAO,CAAC,QAA6C,EAAE,MAAc;IAC5E,OAAO,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC,6BAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;AAClE,CAAC;AAED,0GAA0G;AAC1G,SAAS,OAAO,CAAC,QAA6C;IAC5D,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,CAAC,GAAG,QAAQ,CAAC,6BAAqB,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAW,CAAC;IACjF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,4EAA4E;AAC5E,SAAgB,kBAAkB,CAAC,IAAa,EAAE,MAAc;IAC9D,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,sFAAsF;AACtF,SAAgB,qBAAqB,CAAC,OAAmB,EAAE,MAAc;IACvE,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;AACrE,CAAC;AAED;;;;GAIG;AACH,SAAgB,UAAU,CAAC,IAAa;IACtC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YACrB,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YACnC,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,oEAAoE;AACpE,SAAgB,qBAAqB,CAAC,OAAmB;IACvD,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AACnC,CAAC;AA8BD,yGAAyG;AACzG,MAAa,iBAAkB,SAAQ,KAAK;IACjC,IAAI,GAAG,oBAA6B,CAAC;IAC9C;QACE,KAAK,CAAC,qGAAqG,CAAC,CAAC;QAC7G,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAND,8CAMC;AAED,SAAS,eAAe,CAAC,IAA2C;IAClE,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC;IAC7G,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,kBAAkB,KAAK,QAAQ,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9G,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,iBAAiB,EAAE,CAAC;AAC7D,CAAC;AAYD,SAAS,SAAS,CAAC,KAAkC;IACnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,IAAsB;IAChE,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAoC,EAAE,MAAM,EAAE,CAAC;IAEtF,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACrF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,yDAAyD;YACjE,MAAM;SACP,CAAC;IACJ,CAAC;IAED,uHAAuH;IACvH,iEAAiE;IAC/D,2LAA2L;IAC7L,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC;IACjC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IAC5E,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IACvG,MAAM,OAAO,GAAG,MAAM,IAAA,kBAAY,EAAC,MAAM,EAAE;QACzC,KAAK;QACL,QAAQ,EAAE,IAAI,CAAC,GAAG;QAClB,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;QAC3B,OAAO;QACP,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,6BAAuB,CAAC,CAAC;KAC9D,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,4BAA4B,CAAC;IACtG,MAAM,MAAM,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC3E,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC9F,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,aAAa,CAAC,IAAa,EAAE,IAAsB;IACvE,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gDAAgD,EAAE,CAAC;IAC5F,OAAO,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACpC,CAAC;AAeD;;;;GAIG;AACH,SAAgB,gBAAgB,CAAC,IAA6B;IAC5D,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;IACrC,OAAO,KAAK,EAAE,IAAa,EAA4B,EAAE;QACvD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,OAAO;gBACZ,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0DAA0D,EAAE;gBACnF,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACnB,CAAC;QACD,OAAO,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC,CAAC;AACJ,CAAC;AA0CD,MAAM,mBAAmB,GAAG,cAAc,CAAC;AAE3C,SAAS,KAAK,CAAC,CAAiB;IAC9B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACzF,CAAC;AAED,8GAA8G;AAC9G,SAAS,gBAAgB,CAAC,IAAe;IACvC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IAClD,KAAK,WAAW,CAAC;IACjB,OAAO,IAAA,oBAAc,EAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAWD;;;;;GAKG;AACI,KAAK,UAAU,oBAAoB,CACxC,IAAe,EACf,UAAwB,EACxB,OAA8B,EAAE;IAEhC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC;IAChC,MAAM,QAAQ,GAA+B,IAAI,CAAC,QAAQ;QACxD,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QAC5H,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;IAErB,0EAA0E;IAC1E,MAAM,MAAM,GAAc,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACtF,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAEzC,MAAM,GAAG,GAAyB,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,IAAA,gBAAS,EAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IACpG,MAAM,eAAe,GAA4B;QAC/C,GAAG;QACH,GAAG,EAAE,KAAK;QACV,IAAI,EAAE,CAAC,KAAK,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,IAAI,oBAAa,CAAC,OAAO,CAAC,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3F,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAE9G,MAAM,SAAS,GAAuB,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;IAC7F,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;IACzC,OAAO,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,CAAC,GAAG,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC;AAC7D,CAAC;AAuBD;;;;;GAKG;AACI,KAAK,UAAU,eAAe,CACnC,IAAe,EACf,IAA4B;IAE5B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;IACnE,CAAC;IAED,IAAI,QAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,QAAQ,GAAG,IAAA,wBAAiB,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;aAAM,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAClC,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,IAAA,gBAAS,EAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QACzF,CAAC;aAAM,CAAC;YACN,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;QACvE,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uCAAwC,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IAC9F,CAAC;IAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,WAA+B,CAAC;IAEpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACnF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,eAAe,EAAE,CAAC;QAC9D,CAAC;QACD,MAAM,KAAK,GAAsB,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;QACjG,IAAI,CAAC;YACH,IAAA,gCAA0B,EAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,sCAAsC;YAChG,kGAAkG;YAClG,MAAM,QAAQ,GACZ,OAAO,QAAQ,KAAK,UAAU;gBAC5B,CAAC,CAAC,MAAM,IAAA,sBAAe,EAAC,KAAK,EAAE,QAAQ,CAAC;gBACxC,CAAC,CAAC,MAAM,IAAA,sBAAe,EAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,eAAe,EAAE,CAAC,mBAAmB,CAAC,CAAC;YAC5D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,WAAW,KAAK,SAAS;gBAAE,WAAW,GAAG,GAAG,CAAC;QAC9E,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,oBAAqB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QACzF,CAAC;IACH,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,sGAAsG;AACtG,uFAAuF;AACvF,sGAAsG;AAEtG;;;;GAIG;AACU,QAAA,eAAe,GAAsB;IAChD,wCAAwC;IACxC,uCAAuC;CACxC,CAAC;AA4DF,SAAS,YAAY,CAAC,KAAkC;IACtD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,OAAO,IAAI,EAAE,MAAM,CAAC;AACtB,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAc,EAAE,SAAmB;IAC/D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,SAAS,EAA2B,CAAC;QAChE,MAAM,CAAC,GAAG,IAAA,6BAAuB,EAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAoD,CAAC;QACrI,OAAO,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAsBD;;;;GAIG;AACH,SAAgB,wBAAwB,CAAC,MAAc,EAAE,IAA2B;IAClF,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC;IACzC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,wFAAwF,CAAC,CAAC;IAC5G,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC5H,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAEnC,MAAM,KAAK,GAAsB;QAC/B,aAAa,EAAE,IAAA,kBAAY,EAAC,MAAM,CAAC;QACnC,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;QACxB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;QAChC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa;QAC1C,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,IAAI,IAAI,MAAM;KAC5B,CAAC;IAEF,MAAM,QAAQ,GAA8B;QAC1C,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE;QAC1B,cAAc,EAAE,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE;QACzC,aAAa,EAAE,YAAY;QAC3B,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,KAAK;KACN,CAAC;IAEF,OAAO;QACL,UAAU,EAAE,uBAAe;QAC3B,IAAI,EAAE,CAAC,sBAAsB,EAAE,gBAAgB,CAAC;QAChD,MAAM;QACN,YAAY,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;QACzC,iBAAiB,EAAE,QAAQ;KAC5B,CAAC;AACJ,CAAC;AAED,2FAA2F;AAC3F,SAAgB,+BAA+B,CAAC,OAA0B;IACxE,OAAO,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,uBAAuB,CAC3C,OAA0B,EAC1B,MAAc,EACd,IAAsB;IAEtB,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,MAAM,KAAK,GAAG,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,aAAa,CAAC;IAC5D,IAAI,KAAK,KAAK,IAAA,kBAAY,EAAC,MAAM,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sEAAsE,EAAE,MAAM,EAAE,CAAC;IAC/G,CAAC;IACD,OAAO,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACpC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atlasauth/pca-a2a",
-  "version": "0.3.0",
+  "version": "0.4.1",
   "description": "A2A (Agent2Agent) adapter for PCA: verify/attach proof-carrying actions on A2A task send/receive, validate Signed Agent Cards, and an AP2 payment-mandate profile.",
   "keywords": [
     "a2a",
@@ -33,7 +33,7 @@
   },
   "dependencies": {
     "jose": "^5.9.6",
-    "@atlasauth/pca": "0.3.0"
+    "@atlasauth/pca": "0.4.1"
   },
   "devDependencies": {
     "typescript": "^5.6.3",