@atlasauth/pca-ap2 0.3.0 → 0.4.0

package/dist/index.js

@@ -1,359 +1,33 @@
 "use strict";
-/**
- * @atlasauth/pca-ap2 — an AP2-modelled (Agent Payments Protocol) mandate chain for PCA.
- *
- * ┌──────────────────────────────────────────────────────────────────────────────────────────────┐
- * │  PCA GOVERNS. AP2 is the payment-MANDATE wire. x402 / Stripe Shared-Payment-Tokens SETTLE.      │
- * └──────────────────────────────────────────────────────────────────────────────────────────────┘
- *
- * AP2 (donated to the FIDO Alliance, v0.2 shape, 2026-04-28) standardizes agentic payments as a chain
- * of signed Verifiable Digital Credentials (VDCs):
- *
- *     IntentMandate  →  CartMandate  →  PaymentMandate
- *     (the user's      (the merchant's  (the payment authorization +
- *      goal + caps)     concrete cart)   human-present / not-present signal)
- *
- * This is a near-isomorphism of PCA's attenuating capability chain: the Root Intent Grant bounds the
- * authority; each narrowing step may only RESTRICT it, never amplify it. PCA's trust-budget + risk
- * policy (`@atlasauth/pca-payments`) decide WHETHER a charge is autonomous (tier 1) or needs a human
- * co-sign (tier 3); AP2 carries that decision on the wire; the settlement rail moves the money.
- *
- * This is a BRIDGE, not a replacement:
- *   - PCA  = the authority / budget layer (who may spend, how much, until when, before a human co-sign).
- *   - AP2  = the payment-mandate wire (the Intent→Cart→Payment VDC chain other parties verify).
- *   - x402 / Stripe SPT = the settlement rails that actually move value, fed by PCA's governance.
- * Compose them; do not fold one into another.
- *
- * ────────────────────────────────────────────────────────────────────────────────────────────────
- * HONEST CAVEAT — VERIFY BEFORE PRODUCTION WIRE USE
- * ────────────────────────────────────────────────────────────────────────────────────────────────
- * AP2 is a moving target and its mandate field-level signing roles differ between secondary sources
- * (e.g. whether a cart is co-signed by both merchant and user, and whether the step is called "Cart"
- * or "Checkout"). The spec also layers over UCP (ucp.dev) whose dated releases move the payment token
- * between `payment_data.token` and `payment.instruments[*].credential.token`. This module models the
- * v0.2 Intent/Cart/Payment chain to the best public understanding; it MUST be validated against the
- * AP2 repository `schemas/` (and the official spec at ap2-protocol.org) before any production wire use.
- * That validation has now been run (see conformance.test.ts): the output does NOT conform to the current
- * official SD-JWT mandate schemas, so treat this as a PCA rendition of the concepts, not the AP2 wire format.
- * PCA-native terms that AP2 has no field for are carried in a namespaced `x_pca` extension so the chain
- * can round-trip back to PCA terms; those fields are non-standard by construction.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.stripeSptSettlement = exports.x402Settlement = exports.AP2_CONTEXT = exports.AP2_VERSION = void 0;
-exports.signMandate = signMandate;
-exports.verifyMandate = verifyMandate;
-exports.mandateHash = mandateHash;
-exports.toAP2IntentMandate = toAP2IntentMandate;
-exports.toAP2CartMandate = toAP2CartMandate;
-exports.toAP2PaymentMandate = toAP2PaymentMandate;
-exports.fromAP2Mandate = fromAP2Mandate;
-exports.verifyAP2Chain = verifyAP2Chain;
-exports.chainMandates = chainMandates;
-const pca_1 = require("@atlasauth/pca");
-// ===================================================================================================
-// AP2 version pin
-// ===================================================================================================
-/** The AP2 shape this module models. See the HONEST CAVEAT above. */
-exports.AP2_VERSION = '0.2';
-/**
- * Illustrative JSON-LD contexts for the VDC envelope. The second entry is a placeholder for the AP2
- * context URL — replace with the canonical context from the AP2 repo before production.
- */
-exports.AP2_CONTEXT = [
-    'https://www.w3.org/2018/credentials/v1',
-    'https://ap2-protocol.org/context/v0.2',
-];
-// ===================================================================================================
-// Signing / verification / hashing
-// ===================================================================================================
-/** Strip `proof` for canonical signing/verification (the signature covers everything else). */
-function proofless(vdc) {
-    const { proof: _proof, ...rest } = vdc;
-    void _proof;
-    return rest;
-}
-/** Sign a VDC with the issuer's Ed25519 secret key, returning a copy carrying the `proof`. */
-function signMandate(vdc, secretKey) {
-    const sig = (0, pca_1.sign)(secretKey, (0, pca_1.canonicalBytes)(proofless(vdc)));
-    const proof = {
-        type: 'Ed25519Signature2020',
-        created: vdc.issuanceDate,
-        verificationMethod: vdc.issuer,
-        proofPurpose: 'assertionMethod',
-        signatureValue: (0, pca_1.encodeSig)(sig),
-    };
-    return { ...vdc, proof };
-}
-/** Verify a VDC's detached signature. Returns false when unsigned or the signature does not verify. */
-function verifyMandate(vdc) {
-    if (!vdc.proof)
-        return false;
-    // The proof must verify under the credential's own declared issuer (no key substitution).
-    if (vdc.proof.verificationMethod !== vdc.issuer)
-        return false;
-    return (0, pca_1.verifyB64u)(vdc.issuer, (0, pca_1.canonicalBytes)(proofless(vdc)), vdc.proof.signatureValue);
-}
-/** Stable content hash of a VDC (used to bind one mandate to the next). */
-function mandateHash(vdc) {
-    return (0, pca_1.hashCanonical)(vdc);
-}
-// ===================================================================================================
-// PCA → AP2 mapping (the narrowing chain)
-// ===================================================================================================
-const round2 = (n) => Math.round((n + Number.EPSILON) * 100) / 100;
-/** Normalize the two accepted inputs to `MandateTerms` (+ the goal commitment when a full mandate). */
-function termsOf(mandate) {
-    if ('terms' in mandate)
-        return { terms: mandate.terms, goalCommit: mandate.goalCommit };
-    return { terms: mandate };
-}
-function describeTerms(terms) {
-    const where = terms.merchants.length ? ` at [${terms.merchants.join(', ')}]` : '';
-    return (`Purchase up to ${terms.perTransactionCap} ${terms.currency} per transaction` +
-        ` (autonomous up to ${terms.autoApproveThreshold}, cumulative ${terms.cumulativeCap})${where}`);
-}
-/** Map a PCA payment mandate (or raw terms) to an AP2 Intent Mandate VDC. */
-function toAP2IntentMandate(mandate, opts) {
-    const { terms, goalCommit } = termsOf(mandate);
-    const now = Number.isFinite(opts.now) ? opts.now : Date.now();
-    const x_pca = {
-        auto_approve_threshold: terms.autoApproveThreshold,
-        cumulative_cap: terms.cumulativeCap,
-        per_transaction_cap: terms.perTransactionCap,
-        period_start: terms.periodStart,
-        ...(terms.periodEnd !== undefined ? { period_end: terms.periodEnd } : {}),
-        ...(terms.maxTransactionsPerPeriod !== undefined
-            ? { max_transactions_per_period: terms.maxTransactionsPerPeriod }
-            : {}),
-        ...(goalCommit !== undefined ? { goal_commit: goalCommit } : {}),
-    };
-    const contents = {
-        natural_language_description: opts.naturalLanguageDescription ?? describeTerms(terms),
-        merchants: terms.merchants.length ? [...terms.merchants] : null,
-        skus: opts.skus ?? null,
-        ...(terms.categories.length ? { categories: [...terms.categories] } : {}),
-        max_amount: { currency: terms.currency, value: terms.perTransactionCap },
-        required_refundability: true,
-        user_cart_confirmation_required: opts.userCartConfirmationRequired ?? terms.autoApproveThreshold < terms.perTransactionCap,
-        ...(terms.periodEnd !== undefined ? { intent_expiry: new Date(terms.periodEnd).toISOString() } : {}),
-        x_pca,
-    };
-    const vdc = {
-        '@context': exports.AP2_CONTEXT,
-        type: ['VerifiableCredential', 'IntentMandate'],
-        issuer: opts.issuerPublic,
-        issuanceDate: new Date(now).toISOString(),
-        ...(terms.periodEnd !== undefined ? { expirationDate: new Date(terms.periodEnd).toISOString() } : {}),
-        credentialSubject: contents,
-    };
-    return opts.issuerSecret ? signMandate(vdc, opts.issuerSecret) : vdc;
-}
-/** Narrow an Intent Mandate into a concrete AP2 Cart Mandate VDC (items + committed total). */
-function toAP2CartMandate(intent, cart, opts) {
-    const currency = cart.currency ?? intent.credentialSubject.max_amount.currency;
-    const total = round2(cart.items.reduce((sum, it) => sum + it.quantity * it.unit_price.value, 0));
-    const id = cart.id ?? `cart_${(0, pca_1.hashCanonical)({ merchant: cart.merchant, items: cart.items }).slice(0, 16)}`;
-    const contents = {
-        id,
-        merchant: cart.merchant,
-        items: cart.items.map((it) => ({ ...it, unit_price: { ...it.unit_price } })),
-        total: { currency, value: total },
-        intent_reference: mandateHash(intent),
-        ...(cart.expiry !== undefined ? { cart_expiry: new Date(cart.expiry).toISOString() } : {}),
-    };
-    const vdc = {
-        '@context': exports.AP2_CONTEXT,
-        type: ['VerifiableCredential', 'CartMandate'],
-        issuer: opts.issuerPublic,
-        issuanceDate: new Date(Number.isFinite(cart.now) ? cart.now : Date.now()).toISOString(),
-        ...(cart.expiry !== undefined ? { expirationDate: new Date(cart.expiry).toISOString() } : {}),
-        credentialSubject: contents,
-    };
-    return opts.issuerSecret ? signMandate(vdc, opts.issuerSecret) : vdc;
-}
-/** Narrow a Cart Mandate into an AP2 Payment Mandate VDC (the payment authorization + modality). */
-function toAP2PaymentMandate(cart, opts) {
-    const amount = opts.amount ?? { ...cart.credentialSubject.total };
-    const humanPresent = opts.humanPresent ?? (opts.pcaTier !== undefined ? opts.pcaTier >= 3 : false);
-    const contents = {
-        cart_hash: mandateHash(cart),
-        ...(opts.intent ? { intent_hash: mandateHash(opts.intent) } : {}),
-        amount,
-        payment_method: { ...opts.paymentMethod },
-        human_present: humanPresent,
-        ...(cart.credentialSubject.merchant ? { merchant: cart.credentialSubject.merchant } : {}),
-    };
-    const vdc = {
-        '@context': exports.AP2_CONTEXT,
-        type: ['VerifiableCredential', 'PaymentMandate'],
-        issuer: opts.issuerPublic,
-        issuanceDate: new Date(Number.isFinite(opts.now) ? opts.now : Date.now()).toISOString(),
-        credentialSubject: contents,
-    };
-    return opts.issuerSecret ? signMandate(vdc, opts.issuerSecret) : vdc;
-}
-/** Parse an AP2 mandate VDC back toward PCA terms (lossless for an Intent minted with `x_pca`). */
-function fromAP2Mandate(vdc) {
-    const kind = vdc.type[1];
-    if (kind === 'IntentMandate') {
-        const cs = vdc.credentialSubject;
-        const x = cs.x_pca;
-        return {
-            type: 'IntentMandate',
-            ...(cs.merchants ? { merchants: [...cs.merchants] } : {}),
-            ...(cs.categories ? { categories: [...cs.categories] } : {}),
-            currency: cs.max_amount.currency,
-            perTransactionCap: x?.per_transaction_cap ?? cs.max_amount.value,
-            ...(x ? { autoApproveThreshold: x.auto_approve_threshold, cumulativeCap: x.cumulative_cap } : {}),
-            ...(x?.period_start !== undefined ? { periodStart: x.period_start } : {}),
-            ...(x?.period_end !== undefined ? { periodEnd: x.period_end } : {}),
-            ...(x?.max_transactions_per_period !== undefined
-                ? { maxTransactionsPerPeriod: x.max_transactions_per_period }
-                : {}),
-            ...(x?.goal_commit !== undefined ? { goalCommit: x.goal_commit } : {}),
-        };
-    }
-    if (kind === 'CartMandate') {
-        const cs = vdc.credentialSubject;
-        return { type: 'CartMandate', merchant: cs.merchant, amount: cs.total.value, currency: cs.total.currency };
-    }
-    const cs = vdc.credentialSubject;
-    return {
-        type: 'PaymentMandate',
-        amount: cs.amount.value,
-        currency: cs.amount.currency,
-        humanPresent: cs.human_present,
-        ...(cs.merchant ? { merchant: cs.merchant } : {}),
-    };
-}
-/**
- * Verify an AP2 Intent→Cart→Payment chain: each VDC's signature, the hash bindings (cart→intent,
- * payment→cart), and that every step only RESTRICTS the one above (never amplifies). This mirrors
- * PCA's attenuation check: a child capability may narrow authority but never widen it.
- */
-function verifyAP2Chain(intent, cart, payment) {
-    const reasons = [];
-    // 1. Signatures (each mandate must be signed and verify under its own issuer).
-    if (!verifyMandate(intent))
-        reasons.push('intent signature invalid or missing');
-    if (!verifyMandate(cart))
-        reasons.push('cart signature invalid or missing');
-    if (!verifyMandate(payment))
-        reasons.push('payment signature invalid or missing');
-    const i = intent.credentialSubject;
-    const c = cart.credentialSubject;
-    const p = payment.credentialSubject;
-    // 2. Hash bindings (cart → intent, payment → cart).
-    if (c.intent_reference !== mandateHash(intent))
-        reasons.push('cart does not reference this intent');
-    if (p.cart_hash !== mandateHash(cart))
-        reasons.push('payment does not reference this cart');
-    if (p.intent_hash !== undefined && p.intent_hash !== mandateHash(intent)) {
-        reasons.push('payment intent_hash does not match this intent');
-    }
-    // 3. Currency consistency (no implicit FX across the chain).
-    if (c.total.currency !== i.max_amount.currency)
-        reasons.push('cart currency differs from intent');
-    if (p.amount.currency !== c.total.currency)
-        reasons.push('payment currency differs from cart');
-    // 4. Non-amplifying narrowing of AMOUNT (the core attenuation check).
-    if (c.total.value > i.max_amount.value) {
-        reasons.push(`cart total ${c.total.value} exceeds intent cap ${i.max_amount.value} (amplifying)`);
-    }
-    if (p.amount.value > c.total.value) {
-        reasons.push(`payment amount ${p.amount.value} exceeds cart total ${c.total.value} (amplifying)`);
-    }
-    // 5. Merchant allowlist narrowing (null intent.merchants ⇒ any merchant permitted).
-    if (i.merchants !== null && !i.merchants.includes(c.merchant)) {
-        reasons.push(`cart merchant '${c.merchant}' not in intent allowlist`);
-    }
-    return { ok: reasons.length === 0, reasons };
-}
-/** Assemble the signed Intent→Cart→Payment chain and attach its non-amplifying-narrowing verifier. */
-function chainMandates(intent, cart, payment) {
-    return { intent, cart, payment, verify: () => verifyAP2Chain(intent, cart, payment) };
-}
-/**
- * Convert a decimal amount to an integer string of atomic units (`10 ** decimals` per unit). Throws on
- * anything that is not a finite, non-negative amount that fits exactly in a safe integer.
- */
-function toAtomicUnits(value, decimals) {
-    if (!Number.isInteger(decimals) || decimals < 0 || decimals > 18) {
-        throw new RangeError(`x402: decimals must be an integer in 0..18, got ${String(decimals)}`);
-    }
-    const atomic = Math.round(value * 10 ** decimals);
-    if (!Number.isFinite(value) || value < 0 || !Number.isSafeInteger(atomic)) {
-        throw new RangeError(`x402: amount ${String(value)} cannot be expressed in atomic units with ${decimals} decimals`);
-    }
-    return String(atomic);
-}
-/**
- * Coinbase x402 adapter: models the HTTP 402 `Payment Required` challenge (the server's `accepts`
- * payment requirements) plus the `X-PAYMENT` request header carrying the base64 payment payload the
- * client re-sends. Structural only — the real rail settles on-chain. (Field names follow the public
- * x402 shape and should be checked against the x402 spec before production.)
- */
-exports.x402Settlement = {
-    rail: 'x402',
-    settle(payment, ctx) {
-        const cs = payment.credentialSubject;
-        const network = ctx?.network ?? 'base-sepolia';
-        const requirement = {
-            scheme: 'exact',
-            network,
-            // x402 v1: `maxAmountRequired` is a string in ATOMIC token units, not a decimal amount.
-            maxAmountRequired: toAtomicUnits(cs.amount.value, ctx?.decimals ?? 6),
-            resource: ctx?.resourceUrl ?? '',
-            description: `AP2 payment mandate ${cs.cart_hash}`,
-            payTo: ctx?.payTo ?? cs.merchant ?? '',
-            asset: ctx?.asset ?? cs.amount.currency,
-            mimeType: 'application/json',
-            maxTimeoutSeconds: ctx?.maxTimeoutSeconds ?? 60,
-        };
-        // x402 carries `X-PAYMENT` as STANDARD base64 (with padding) of the JSON PaymentPayload. This
-        // envelope is a placeholder: a real client replaces `payload` with its signed authorization.
-        const xPayment = Buffer.from(JSON.stringify({
-            x402Version: 1,
-            scheme: 'exact',
-            network,
-            payload: { cartHash: cs.cart_hash, humanPresent: cs.human_present, amount: cs.amount.value },
-        }), 'utf8').toString('base64');
-        return {
-            rail: 'x402',
-            amount: cs.amount,
-            ...(cs.merchant ? { merchant: cs.merchant } : {}),
-            payload: {
-                httpStatus: 402,
-                x402Version: 1,
-                error: 'X-PAYMENT header is required',
-                accepts: [requirement],
-                header: { 'X-PAYMENT': xPayment },
-            },
-        };
-    },
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AP2_COMMIT = void 0;
 /**
- * Stripe Shared Payment Token adapter: models the SPT charge shape — a shared token the buyer's agent
- * grants the merchant to pull a bounded amount. Structural only — a real integration calls Stripe with
- * the token. Amount is converted to minor units (cents). (Check field names against Stripe's SPT docs
- * before production.)
+ * @atlasauth/pca-ap2: AP2 (Agent Payments Protocol) mandates as real SD-JWT credentials, bound to a PCA grant.
+ *
+ * PCA governs: it decides who may spend, how much, until when, and when a human must co-sign. AP2 is
+ * the mandate wire other parties verify. Settlement rails (x402, Stripe Shared Payment Tokens) move
+ * the value, fed by PCA's decision.
  */
-exports.stripeSptSettlement = {
-    rail: 'stripe-spt',
-    settle(payment, ctx) {
-        const cs = payment.credentialSubject;
-        return {
-            rail: 'stripe-spt',
-            amount: cs.amount,
-            ...(cs.merchant ? { merchant: cs.merchant } : {}),
-            payload: {
-                shared_payment_token: cs.payment_method.token ?? '',
-                amount: Math.round(cs.amount.value * 100),
-                currency: cs.amount.currency.toLowerCase(),
-                human_present: cs.human_present,
-                ...(ctx?.payTo ? { on_behalf_of: ctx.payTo } : {}),
-            },
-        };
-    },
-};
+__exportStar(require("./sdjwt"), exports);
+__exportStar(require("./mandates"), exports);
+__exportStar(require("./constraints"), exports);
+__exportStar(require("./chain"), exports);
+__exportStar(require("./pca"), exports);
+__exportStar(require("./settlement"), exports);
+/** The AP2 repository commit whose schemas and documentation this package is checked against. */
+exports.AP2_COMMIT = 'e1ea56db72a6385bce3e5c1112b3a56ce60acb43';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;;;AAuLH,kCAaC;AAGD,sCAKC;AAGD,kCAEC;AAsCD,gDAyCC;AAsBD,4CAyBC;AAuBD,kDAsBC;AAgCD,wCAgCC;AAwBD,wCAyCC;AAGD,sCAMC;AApgBD,wCAMwB;AAGxB,sGAAsG;AACtG,kBAAkB;AAClB,sGAAsG;AAEtG,qEAAqE;AACxD,QAAA,WAAW,GAAG,KAAc,CAAC;AAE1C;;;GAGG;AACU,QAAA,WAAW,GAAsB;IAC5C,wCAAwC;IACxC,uCAAuC;CACxC,CAAC;AAkJF,sGAAsG;AACtG,mCAAmC;AACnC,sGAAsG;AAEtG,+FAA+F;AAC/F,SAAS,SAAS,CAAiC,GAAM;IACvD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;IACvC,KAAK,MAAM,CAAC;IACZ,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8FAA8F;AAC9F,SAAgB,WAAW,CACzB,GAAsC,EACtC,SAAqB;IAErB,MAAM,GAAG,GAAG,IAAA,UAAI,EAAC,SAAS,EAAE,IAAA,oBAAc,EAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAa;QACtB,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,GAAG,CAAC,YAAY;QACzB,kBAAkB,EAAE,GAAG,CAAC,MAAM;QAC9B,YAAY,EAAE,iBAAiB;QAC/B,cAAc,EAAE,IAAA,eAAS,EAAC,GAAG,CAAC;KAC/B,CAAC;IACF,OAAO,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED,uGAAuG;AACvG,SAAgB,aAAa,CAAC,GAAkB;IAC9C,IAAI,CAAC,GAAG,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAC7B,0FAA0F;IAC1F,IAAI,GAAG,CAAC,KAAK,CAAC,kBAAkB,KAAK,GAAG,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC9D,OAAO,IAAA,gBAAU,EAAC,GAAG,CAAC,MAAM,EAAE,IAAA,oBAAc,EAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;AAC1F,CAAC;AAED,2EAA2E;AAC3E,SAAgB,WAAW,CAAC,GAAkB;IAC5C,OAAO,IAAA,mBAAa,EAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,sGAAsG;AACtG,0CAA0C;AAC1C,sGAAsG;AAEtG,MAAM,MAAM,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;AAEnF,uGAAuG;AACvG,SAAS,OAAO,CAAC,OAAyC;IACxD,IAAI,OAAO,IAAI,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;IACxF,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,aAAa,CAAC,KAAmB;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,OAAO,CACL,kBAAkB,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,QAAQ,kBAAkB;QAC7E,sBAAsB,KAAK,CAAC,oBAAoB,gBAAgB,KAAK,CAAC,aAAa,IAAI,KAAK,EAAE,CAC/F,CAAC;AACJ,CAAC;AAiBD,6EAA6E;AAC7E,SAAgB,kBAAkB,CAChC,OAAyC,EACzC,IAAsB;IAEtB,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,GAAc,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAE1E,MAAM,KAAK,GAAuB;QAChC,sBAAsB,EAAE,KAAK,CAAC,oBAAoB;QAClD,cAAc,EAAE,KAAK,CAAC,aAAa;QACnC,mBAAmB,EAAE,KAAK,CAAC,iBAAiB;QAC5C,YAAY,EAAE,KAAK,CAAC,WAAW;QAC/B,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,KAAK,CAAC,wBAAwB,KAAK,SAAS;YAC9C,CAAC,CAAC,EAAE,2BAA2B,EAAE,KAAK,CAAC,wBAAwB,EAAE;YACjE,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC;IAEF,MAAM,QAAQ,GAA0B;QACtC,4BAA4B,EAAE,IAAI,CAAC,0BAA0B,IAAI,aAAa,CAAC,KAAK,CAAC;QACrF,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;QAC/D,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;QACvB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,UAAU,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,iBAAiB,EAAE;QACxE,sBAAsB,EAAE,IAAI;QAC5B,+BAA+B,EAC7B,IAAI,CAAC,4BAA4B,IAAI,KAAK,CAAC,oBAAoB,GAAG,KAAK,CAAC,iBAAiB;QAC3F,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpG,KAAK;KACN,CAAC;IAEF,MAAM,GAAG,GAAkB;QACzB,UAAU,EAAE,mBAAW;QACvB,IAAI,EAAE,CAAC,sBAAsB,EAAE,eAAe,CAAC;QAC/C,MAAM,EAAE,IAAI,CAAC,YAAY;QACzB,YAAY,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;QACzC,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrG,iBAAiB,EAAE,QAAQ;KAC5B,CAAC;IACF,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACvE,CAAC;AAqBD,+FAA+F;AAC/F,SAAgB,gBAAgB,CAAC,MAAqB,EAAE,IAAe,EAAE,IAAoB;IAC3F,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,QAAQ,CAAC;IAC/E,MAAM,KAAK,GAAG,MAAM,CAClB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAC3E,CAAC;IACF,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,QAAQ,IAAA,mBAAa,EAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAE3G,MAAM,QAAQ,GAAwB;QACpC,EAAE;QACF,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC5E,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE;QACjC,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3F,CAAC;IAEF,MAAM,GAAG,GAAgB;QACvB,UAAU,EAAE,mBAAW;QACvB,IAAI,EAAE,CAAC,sBAAsB,EAAE,aAAa,CAAC;QAC7C,MAAM,EAAE,IAAI,CAAC,YAAY;QACzB,YAAY,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,GAAc,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;QACnG,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7F,iBAAiB,EAAE,QAAQ;KAC5B,CAAC;IACF,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACvE,CAAC;AAsBD,oGAAoG;AACpG,SAAgB,mBAAmB,CAAC,IAAiB,EAAE,IAAuB;IAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;IAClE,MAAM,YAAY,GAChB,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAEhF,MAAM,QAAQ,GAA2B;QACvC,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM;QACN,cAAc,EAAE,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE;QACzC,aAAa,EAAE,YAAY;QAC3B,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1F,CAAC;IAEF,MAAM,GAAG,GAAmB;QAC1B,UAAU,EAAE,mBAAW;QACvB,IAAI,EAAE,CAAC,sBAAsB,EAAE,gBAAgB,CAAC;QAChD,MAAM,EAAE,IAAI,CAAC,YAAY;QACzB,YAAY,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,GAAc,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;QACnG,iBAAiB,EAAE,QAAQ;KAC5B,CAAC;IACF,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACvE,CAAC;AA+BD,mGAAmG;AACnG,SAAgB,cAAc,CAAC,GAAkB;IAC/C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAI,GAAqB,CAAC,iBAAiB,CAAC;QACpD,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;QACnB,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ;YAChC,iBAAiB,EAAE,CAAC,EAAE,mBAAmB,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK;YAChE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,sBAAsB,EAAE,aAAa,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjG,GAAG,CAAC,CAAC,EAAE,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,CAAC,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,CAAC,EAAE,2BAA2B,KAAK,SAAS;gBAC9C,CAAC,CAAC,EAAE,wBAAwB,EAAE,CAAC,CAAC,2BAA2B,EAAE;gBAC7D,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,CAAC,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvE,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAI,GAAmB,CAAC,iBAAiB,CAAC;QAClD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC7G,CAAC;IACD,MAAM,EAAE,GAAI,GAAsB,CAAC,iBAAiB,CAAC;IACrD,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK;QACvB,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ;QAC5B,YAAY,EAAE,EAAE,CAAC,aAAa;QAC9B,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAmBD;;;;GAIG;AACH,SAAgB,cAAc,CAC5B,MAAqB,EACrB,IAAiB,EACjB,OAAuB;IAEvB,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,+EAA+E;IAC/E,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAChF,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAC5E,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAElF,MAAM,CAAC,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACnC,MAAM,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC;IACjC,MAAM,CAAC,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAEpC,oDAAoD;IACpD,IAAI,CAAC,CAAC,gBAAgB,KAAK,WAAW,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACpG,IAAI,CAAC,CAAC,SAAS,KAAK,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAC5F,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;IACjE,CAAC;IAED,6DAA6D;IAC7D,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC,CAAC,UAAU,CAAC,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAClG,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IAE/F,sEAAsE;IACtE,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,KAAK,uBAAuB,CAAC,CAAC,UAAU,CAAC,KAAK,eAAe,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,KAAK,uBAAuB,CAAC,CAAC,KAAK,CAAC,KAAK,eAAe,CAAC,CAAC;IACpG,CAAC;IAED,oFAAoF;IACpF,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,QAAQ,2BAA2B,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AAC/C,CAAC;AAED,sGAAsG;AACtG,SAAgB,aAAa,CAC3B,MAAqB,EACrB,IAAiB,EACjB,OAAuB;IAEvB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;AACxF,CAAC;AAsBD;;;GAGG;AACH,SAAS,aAAa,CAAC,KAAa,EAAE,QAAgB;IACpD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,EAAE,EAAE,CAAC;QACjE,MAAM,IAAI,UAAU,CAAC,mDAAmD,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,IAAI,QAAQ,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,UAAU,CAAC,gBAAgB,MAAM,CAAC,KAAK,CAAC,6CAA6C,QAAQ,WAAW,CAAC,CAAC;IACtH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC;AAsBD;;;;;GAKG;AACU,QAAA,cAAc,GAAsB;IAC/C,IAAI,EAAE,MAAM;IACZ,MAAM,CAAC,OAAO,EAAE,GAAG;QACjB,MAAM,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACrC,MAAM,OAAO,GAAG,GAAG,EAAE,OAAO,IAAI,cAAc,CAAC;QAC/C,MAAM,WAAW,GAAG;YAClB,MAAM,EAAE,OAAO;YACf,OAAO;YACP,wFAAwF;YACxF,iBAAiB,EAAE,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC,CAAC;YACrE,QAAQ,EAAE,GAAG,EAAE,WAAW,IAAI,EAAE;YAChC,WAAW,EAAE,uBAAuB,EAAE,CAAC,SAAS,EAAE;YAClD,KAAK,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,IAAI,EAAE;YACtC,KAAK,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,QAAQ;YACvC,QAAQ,EAAE,kBAAkB;YAC5B,iBAAiB,EAAE,GAAG,EAAE,iBAAiB,IAAI,EAAE;SAChD,CAAC;QACF,8FAA8F;QAC9F,6FAA6F;QAC7F,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAC1B,IAAI,CAAC,SAAS,CAAC;YACb,WAAW,EAAE,CAAC;YACd,MAAM,EAAE,OAAO;YACf,OAAO;YACP,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;SAC7F,CAAC,EACF,MAAM,CACP,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrB,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,OAAO,EAAE;gBACP,UAAU,EAAE,GAAG;gBACf,WAAW,EAAE,CAAC;gBACd,KAAK,EAAE,8BAA8B;gBACrC,OAAO,EAAE,CAAC,WAAW,CAAC;gBACtB,MAAM,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE;aAClC;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF;;;;;GAKG;AACU,QAAA,mBAAmB,GAAsB;IACpD,IAAI,EAAE,YAAY;IAClB,MAAM,CAAC,OAAO,EAAE,GAAG;QACjB,MAAM,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACrC,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,OAAO,EAAE;gBACP,oBAAoB,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,IAAI,EAAE;gBACnD,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC;gBACzC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE;gBAC1C,aAAa,EAAE,EAAE,CAAC,aAAa;gBAC/B,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnD;SACF,CAAC;IACJ,CAAC;CACF,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA;;;;;;GAMG;AACH,0CAAwB;AACxB,6CAA2B;AAC3B,gDAA8B;AAC9B,0CAAwB;AACxB,wCAAsB;AACtB,+CAA6B;AAE7B,iGAAiG;AACpF,QAAA,UAAU,GAAG,0CAA0C,CAAC"}

package/dist/mandates.d.ts

@@ -0,0 +1,140 @@
+/**
+ * AP2 mandate claim shapes (Intent/Cart/Payment, closed and open) and their validators.
+ *
+ * The shapes follow the official AP2 JSON Schemas (`checkout_mandate`, `open_checkout_mandate`,
+ * `payment_mandate`, `open_payment_mandate` and `types/*`). The validators are hand-written, check at
+ * least what those schemas check (the test-suite runs both against the same documents) and are
+ * stricter in places where a lax reading would be unsafe (non-negative safe-integer amounts,
+ * well-formed JWKs).
+ */
+import { type Json, type JsonObject, type P256Jwk } from './sdjwt';
+export declare const VCT_CHECKOUT = "mandate.checkout.1";
+export declare const VCT_CHECKOUT_OPEN = "mandate.checkout.open.1";
+export declare const VCT_PAYMENT = "mandate.payment.1";
+export declare const VCT_PAYMENT_OPEN = "mandate.payment.open.1";
+/** Namespaced claim carrying PCA's own proof inside a mandate object (see `pca.ts`). */
+export declare const PCA_CLAIM = "x_pca";
+/** ISO 4217 minor-unit exponent for `currency` (2 for any code not in the 0/3/4-digit tables). */
+export declare function currencyExponent(currency: string): number;
+/**
+ * Convert a major-unit amount (e.g. `120.5` USD) to integer minor units (`12050`). Throws unless the
+ * amount is exactly representable with the currency's exponent: float drift (`0.1 + 0.2`) is refused
+ * rather than rounded away.
+ */
+export declare function toMinorUnits(major: number, currency: string): number;
+/** Integer minor units to the major-unit number PCA budgets use (exact for any safe integer). */
+export declare function fromMinorUnits(minor: number, currency: string): number;
+export interface Merchant {
+    id: string;
+    name: string;
+    website?: string;
+}
+export interface Amount {
+    /** Integer minor units per ISO 4217 (27999 = USD 279.99). */
+    amount: number;
+    currency: string;
+}
+export interface PaymentInstrument {
+    id: string;
+    type: string;
+    description?: string;
+}
+export interface Pisp {
+    legal_name: string;
+    brand_name: string;
+    domain_name: string;
+}
+export interface CheckoutItem {
+    id: string;
+    title: string;
+}
+export type Frequency = 'ON_DEMAND' | 'DAILY' | 'WEEKLY' | 'BIWEEKLY' | 'MONTHLY' | 'QUARTERLY' | 'ANNUALLY';
+export declare const FREQUENCIES: readonly Frequency[];
+export type PaymentConstraint = {
+    type: 'payment.agent_recurrence';
+    frequency: Frequency;
+    max_occurrences?: number;
+} | {
+    type: 'payment.allowed_payees';
+    allowed: Merchant[];
+} | {
+    type: 'payment.allowed_payment_instruments';
+    allowed: PaymentInstrument[];
+} | {
+    type: 'payment.allowed_pisps';
+    allowed: Pisp[];
+} | {
+    type: 'payment.amount_range';
+    currency: string;
+    max: number;
+    min?: number;
+} | {
+    type: 'payment.budget';
+    currency: string;
+    max: number;
+} | {
+    type: 'payment.execution_date';
+    not_before?: string;
+    not_after?: string;
+} | {
+    type: 'payment.reference';
+    conditional_transaction_id: string;
+};
+export interface LineItemRequirement {
+    id: string;
+    acceptable_items: CheckoutItem[];
+    quantity: number;
+}
+export type CheckoutConstraint = {
+    type: 'checkout.allowed_merchants';
+    allowed: Merchant[];
+} | {
+    type: 'checkout.line_items';
+    items: LineItemRequirement[];
+};
+interface Common {
+    iat?: number;
+    exp?: number;
+    [PCA_CLAIM]?: JsonObject;
+}
+export interface OpenPaymentMandateClaims extends Common {
+    vct: typeof VCT_PAYMENT_OPEN;
+    constraints: PaymentConstraint[];
+    cnf: {
+        jwk: P256Jwk;
+    };
+    payee?: Merchant;
+    payment_amount?: Amount;
+    payment_instrument?: PaymentInstrument;
+    pisp?: Pisp;
+    execution_date?: string;
+    risk_data?: JsonObject;
+}
+export interface PaymentMandateClaims extends Common {
+    vct: typeof VCT_PAYMENT;
+    transaction_id: string;
+    payee: Merchant;
+    payment_amount: Amount;
+    payment_instrument: PaymentInstrument;
+    pisp?: Pisp;
+    execution_date?: string;
+    risk_data?: JsonObject;
+}
+export interface OpenCheckoutMandateClaims extends Common {
+    vct: typeof VCT_CHECKOUT_OPEN;
+    constraints: CheckoutConstraint[];
+    cnf: {
+        jwk: P256Jwk;
+    };
+}
+export interface CheckoutMandateClaims extends Common {
+    vct: typeof VCT_CHECKOUT;
+    checkout_jwt: string;
+    checkout_hash: string;
+}
+export declare function openPaymentMandateProblems(v: unknown): string[];
+export declare function paymentMandateProblems(v: unknown): string[];
+export declare function openCheckoutMandateProblems(v: unknown): string[];
+export declare function checkoutMandateProblems(v: unknown): string[];
+export declare function assertValid<T>(v: unknown, problems: (v: unknown) => string[], what: string): T;
+export type { Json };