@atlasauth/pca-ap2 0.3.0 → 0.4.0

package/dist/sdjwt.js

@@ -0,0 +1,394 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Ap2Error = void 0;
+exports.b64uEncode = b64uEncode;
+exports.b64uDecode = b64uDecode;
+exports.isObject = isObject;
+exports.parseJson = parseJson;
+exports.isSdAlg = isSdAlg;
+exports.sdDigest = sdDigest;
+exports.assertP256Jwk = assertP256Jwk;
+exports.generateAp2KeyPair = generateAp2KeyPair;
+exports.ap2KeyPairFromPrivateJwk = ap2KeyPairFromPrivateJwk;
+exports.jwkThumbprint = jwkThumbprint;
+exports.hopSdJwt = hopSdJwt;
+exports.parseSdJwtHop = parseSdJwtHop;
+exports.sdHashOf = sdHashOf;
+exports.issuerJwtHashOf = issuerJwtHashOf;
+exports.verifyHopSignature = verifyHopSignature;
+exports.processDisclosures = processDisclosures;
+exports.newSalt = newSalt;
+exports.disclosureBuilder = disclosureBuilder;
+exports.signSdJwt = signSdJwt;
+exports.signJwtEs256 = signJwtEs256;
+exports.parseJwt = parseJwt;
+exports.verifyJwtEs256 = verifyJwtEs256;
+/**
+ * SD-JWT primitives for AP2 mandates (RFC 9901): strict compact parsing, disclosure processing, the
+ * `sd_hash` / `issuer_jwt_hash` binding digests, and ES256 (P-256) signing and verification.
+ *
+ * Nothing here implements a cryptographic primitive: SHA-2 and ECDSA come from `node:crypto`. The
+ * code is the SD-JWT *format* (what is hashed, in which order, which shapes are accepted) and it
+ * fails closed on every ambiguity (duplicate digests, unreferenced disclosures, malformed base64url,
+ * duplicate JSON keys, unknown `_sd_alg`, non-ES256 algorithms).
+ */
+const node_crypto_1 = require("node:crypto");
+/** Every failure raised while parsing or verifying carries a human-readable reason. */
+class Ap2Error extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'Ap2Error';
+    }
+}
+exports.Ap2Error = Ap2Error;
+// ---------------------------------------------------------------------------------------------
+// base64url + JSON helpers
+// ---------------------------------------------------------------------------------------------
+function b64uEncode(data) {
+    return Buffer.from(typeof data === 'string' ? Buffer.from(data, 'utf8') : data).toString('base64url');
+}
+/** Strict base64url decode: canonical alphabet, no padding, and the encoding must round-trip. */
+function b64uDecode(s, what) {
+    if (!/^[A-Za-z0-9_-]*$/.test(s))
+        throw new Ap2Error(`${what}: not base64url`);
+    const buf = Buffer.from(s, 'base64url');
+    if (buf.toString('base64url') !== s)
+        throw new Ap2Error(`${what}: non-canonical base64url`);
+    return buf;
+}
+function isObject(v) {
+    return typeof v === 'object' && v !== null && !Array.isArray(v);
+}
+/**
+ * Reject an object that repeats a key. `JSON.parse` silently keeps the last duplicate, which would let
+ * two parties read different claims out of the same signed bytes. Run on text that already parsed, so
+ * only string/brace structure needs tracking.
+ */
+function assertNoDuplicateKeys(text, what) {
+    const stack = [];
+    let expectKey = false;
+    for (let i = 0; i < text.length; i++) {
+        const c = text[i];
+        if (c === '"') {
+            let j = i + 1;
+            while (text[j] !== '"')
+                j += text[j] === '\\' ? 2 : 1;
+            const top = stack[stack.length - 1];
+            if (expectKey && top) {
+                const key = JSON.parse(text.slice(i, j + 1));
+                if (top.has(key))
+                    throw new Ap2Error(`${what}: duplicate key ${JSON.stringify(key)}`);
+                top.add(key);
+                expectKey = false;
+            }
+            i = j;
+        }
+        else if (c === '{') {
+            stack.push(new Set());
+            expectKey = true;
+        }
+        else if (c === '[') {
+            stack.push(null);
+            expectKey = false;
+        }
+        else if (c === '}' || c === ']') {
+            stack.pop();
+            expectKey = false;
+        }
+        else if (c === ',') {
+            expectKey = stack[stack.length - 1] instanceof Set;
+        }
+    }
+}
+/**
+ * JSON parse that rejects duplicate keys. Numbers are parsed as written (`1000.0` is accepted: the
+ * official Python SDK serialises float fields that way).
+ */
+function parseJson(text, what) {
+    let v;
+    try {
+        v = JSON.parse(text);
+    }
+    catch (e) {
+        throw new Ap2Error(`${what}: invalid JSON (${e.message})`);
+    }
+    assertNoDuplicateKeys(text, what);
+    return v;
+}
+function decodeJsonSegment(segment, what) {
+    const v = parseJson(b64uDecode(segment, what).toString('utf8'), what);
+    if (!isObject(v))
+        throw new Ap2Error(`${what}: must be a JSON object`);
+    return v;
+}
+const NODE_HASH = { 'sha-256': 'sha256', 'sha-384': 'sha384', 'sha-512': 'sha512' };
+function isSdAlg(v) {
+    return v === 'sha-256' || v === 'sha-384' || v === 'sha-512';
+}
+/** base64url(hash(ascii(value))): the digest used for disclosures, `sd_hash` and `checkout_hash`. */
+function sdDigest(value, alg = 'sha-256') {
+    if (!/^[\x20-\x7e]*$/.test(value))
+        throw new Ap2Error('digest input must be ASCII');
+    return (0, node_crypto_1.createHash)(NODE_HASH[alg]).update(value, 'ascii').digest('base64url');
+}
+const B64U_43 = /^[A-Za-z0-9_-]{43}$/;
+/** Validate a public JWK against `types/jwk.json` and prove the point is on the curve. */
+function assertP256Jwk(jwk, what) {
+    if (!isObject(jwk))
+        throw new Ap2Error(`${what}: JWK must be an object`);
+    if (jwk.kty !== 'EC' || jwk.crv !== 'P-256')
+        throw new Ap2Error(`${what}: JWK must be EC P-256`);
+    if (typeof jwk.x !== 'string' || !B64U_43.test(jwk.x))
+        throw new Ap2Error(`${what}: bad JWK x`);
+    if (typeof jwk.y !== 'string' || !B64U_43.test(jwk.y))
+        throw new Ap2Error(`${what}: bad JWK y`);
+    if ('d' in jwk)
+        throw new Ap2Error(`${what}: JWK carries private material`);
+    if (jwk.alg !== undefined && jwk.alg !== 'ES256')
+        throw new Ap2Error(`${what}: JWK alg must be ES256`);
+    try {
+        (0, node_crypto_1.createPublicKey)({ key: { kty: 'EC', crv: 'P-256', x: jwk.x, y: jwk.y }, format: 'jwk' });
+    }
+    catch {
+        throw new Ap2Error(`${what}: JWK is not a valid P-256 point`);
+    }
+    return jwk;
+}
+function publicKeyObject(jwk) {
+    return (0, node_crypto_1.createPublicKey)({ key: { kty: 'EC', crv: 'P-256', x: jwk.x, y: jwk.y }, format: 'jwk' });
+}
+function generateAp2KeyPair(kid) {
+    const { publicKey, privateKey } = (0, node_crypto_1.generateKeyPairSync)('ec', { namedCurve: 'P-256' });
+    const pub = publicKey.export({ format: 'jwk' });
+    const publicJwk = {
+        kty: 'EC',
+        crv: 'P-256',
+        x: String(pub.x),
+        y: String(pub.y),
+        ...(kid !== undefined ? { kid } : {}),
+    };
+    return { publicJwk, privateKey };
+}
+/** Rebuild a key pair from a private JWK (`d` present), e.g. for fixtures. */
+function ap2KeyPairFromPrivateJwk(jwk) {
+    const privateKey = (0, node_crypto_1.createPrivateKey)({ key: jwk, format: 'jwk' });
+    const pub = (0, node_crypto_1.createPublicKey)(privateKey).export({ format: 'jwk' });
+    const kid = typeof jwk.kid === 'string' ? jwk.kid : undefined;
+    return {
+        privateKey,
+        publicJwk: { kty: 'EC', crv: 'P-256', x: String(pub.x), y: String(pub.y), ...(kid !== undefined ? { kid } : {}) },
+    };
+}
+/** RFC 7638 JWK thumbprint (SHA-256) of an EC P-256 key. */
+function jwkThumbprint(jwk) {
+    const canonical = `{"crv":"P-256","kty":"EC","x":"${jwk.x}","y":"${jwk.y}"}`;
+    return (0, node_crypto_1.createHash)('sha256').update(canonical, 'utf8').digest('base64url');
+}
+/** ES256 over `signingInput`; returns the 64-byte `r || s` JWS signature as base64url. */
+function es256Sign(privateKey, signingInput) {
+    return (0, node_crypto_1.sign)('sha256', Buffer.from(signingInput, 'ascii'), { key: privateKey, dsaEncoding: 'ieee-p1363' }).toString('base64url');
+}
+function es256Verify(jwk, signingInput, signature) {
+    if (signature.length !== 64)
+        return false;
+    return (0, node_crypto_1.verify)('sha256', Buffer.from(signingInput, 'ascii'), { key: publicKeyObject(jwk), dsaEncoding: 'ieee-p1363' }, signature);
+}
+/** The hop's `~`-joined serialisation: what `sd_hash` is computed over. */
+function hopSdJwt(hop) {
+    return `${hop.jwt}~${hop.disclosures.map((d) => `${d}~`).join('')}`;
+}
+/** Parse one SD-JWT (`jwt~d1~...~dn~`). The serialisation must end with `~`. */
+function parseSdJwtHop(token) {
+    if (typeof token !== 'string' || token.length === 0)
+        throw new Ap2Error('SD-JWT: empty');
+    if (token.startsWith('~'))
+        throw new Ap2Error('SD-JWT: empty issuer JWT');
+    if (!token.endsWith('~'))
+        throw new Ap2Error('SD-JWT: must end with "~" (a trailing KB-JWT is not an AP2 form)');
+    const parts = token.slice(0, -1).split('~');
+    const jwt = parts[0] ?? '';
+    const disclosures = parts.slice(1);
+    if (disclosures.some((d) => d.length === 0))
+        throw new Ap2Error('SD-JWT: empty disclosure segment');
+    const seg = jwt.split('.');
+    if (seg.length !== 3 || seg.some((s) => s.length === 0))
+        throw new Ap2Error('SD-JWT: issuer JWT must be header.payload.signature');
+    const [h, p, s] = seg;
+    const header = decodeJsonSegment(h, 'JWT header');
+    const payload = decodeJsonSegment(p, 'JWT payload');
+    const signature = b64uDecode(s, 'JWT signature');
+    const rawAlg = payload._sd_alg;
+    if (rawAlg !== undefined && !isSdAlg(rawAlg))
+        throw new Ap2Error(`SD-JWT: unsupported _sd_alg ${JSON.stringify(rawAlg)}`);
+    return {
+        raw: token,
+        jwt,
+        header,
+        payload,
+        disclosures,
+        sdAlg: isSdAlg(rawAlg) ? rawAlg : 'sha-256',
+        signingInput: `${h}.${p}`,
+        signature,
+    };
+}
+/** `sd_hash` of a hop: the digest of `<jwt>~<d1>~...~` (the on-wire form of the preceding hop). */
+function sdHashOf(hop, alg = hop.sdAlg) {
+    return sdDigest(hopSdJwt(hop), alg);
+}
+/** `issuer_jwt_hash` of a hop: the digest of the issuer-signed JWT alone. */
+function issuerJwtHashOf(hop, alg = hop.sdAlg) {
+    return sdDigest(hop.jwt, alg);
+}
+/** Verify the issuer JWT's ES256 signature. Anything other than `alg: ES256` is rejected. */
+function verifyHopSignature(hop, key) {
+    if (hop.header.alg !== 'ES256')
+        return false;
+    return es256Verify(assertP256Jwk(key, 'verification key'), hop.signingInput, hop.signature);
+}
+function decodeDisclosure(raw) {
+    const arr = parseJson(b64uDecode(raw, 'disclosure').toString('utf8'), 'disclosure');
+    if (!Array.isArray(arr))
+        throw new Ap2Error('disclosure: must be a JSON array');
+    if (typeof arr[0] !== 'string' || arr[0].length === 0)
+        throw new Ap2Error('disclosure: salt must be a non-empty string');
+    if (arr.length === 3) {
+        const name = arr[1];
+        if (typeof name !== 'string')
+            throw new Ap2Error('disclosure: claim name must be a string');
+        if (name === '_sd' || name === '...')
+            throw new Ap2Error(`disclosure: claim name ${name} is reserved`);
+        return { kind: 'property', name, value: arr[2], raw };
+    }
+    if (arr.length === 2)
+        return { kind: 'element', value: arr[1], raw };
+    throw new Ap2Error('disclosure: array must have 2 or 3 elements');
+}
+/**
+ * Resolve every selectively-disclosable claim in `payload` using `disclosures`. Returns the processed
+ * claims (`_sd`, `...` markers and `_sd_alg` removed). Throws if a disclosure is duplicated, is not
+ * referenced from the payload, collides with an existing claim, or is used in the wrong position.
+ */
+function processDisclosures(payload, disclosures, alg) {
+    const byDigest = new Map();
+    for (const raw of disclosures) {
+        const d = decodeDisclosure(raw);
+        const digest = sdDigest(raw, alg);
+        if (byDigest.has(digest))
+            throw new Ap2Error('SD-JWT: duplicate disclosure');
+        byDigest.set(digest, d);
+    }
+    const used = new Set();
+    const take = (digest, want) => {
+        const d = byDigest.get(digest);
+        if (!d)
+            return undefined; // decoy digest, or a disclosure the holder chose not to reveal
+        if (used.has(digest))
+            throw new Ap2Error('SD-JWT: a digest is referenced more than once');
+        if (d.kind !== want)
+            throw new Ap2Error(`SD-JWT: a ${d.kind} disclosure is referenced from a ${want} position`);
+        used.add(digest);
+        return d;
+    };
+    const walk = (node, depth) => {
+        if (depth > 32)
+            throw new Ap2Error('SD-JWT: nesting too deep');
+        if (Array.isArray(node)) {
+            const out = [];
+            for (const el of node) {
+                if (isObject(el) && '...' in el) {
+                    const keys = Object.keys(el);
+                    if (keys.length !== 1 || typeof el['...'] !== 'string')
+                        throw new Ap2Error('SD-JWT: malformed array digest placeholder');
+                    const d = take(el['...'], 'element');
+                    if (d)
+                        out.push(walk(d.value, depth + 1));
+                }
+                else
+                    out.push(walk(el, depth + 1));
+            }
+            return out;
+        }
+        if (isObject(node)) {
+            const out = {};
+            for (const [k, v] of Object.entries(node)) {
+                if (k === '_sd' || k === '_sd_alg')
+                    continue;
+                if (k === '...')
+                    throw new Ap2Error('SD-JWT: "..." is only valid as the sole key of an array element');
+                out[k] = walk(v, depth + 1);
+            }
+            const sd = node._sd;
+            if (sd !== undefined) {
+                if (!Array.isArray(sd) || sd.some((x) => typeof x !== 'string'))
+                    throw new Ap2Error('SD-JWT: _sd must be an array of strings');
+                for (const digest of sd) {
+                    const d = take(digest, 'property');
+                    if (!d || d.kind !== 'property')
+                        continue;
+                    if (Object.prototype.hasOwnProperty.call(out, d.name))
+                        throw new Ap2Error(`SD-JWT: disclosed claim ${d.name} collides with an existing claim`);
+                    out[d.name] = walk(d.value, depth + 1);
+                }
+            }
+            return out;
+        }
+        return node;
+    };
+    const result = walk(payload, 0);
+    if (used.size !== byDigest.size)
+        throw new Ap2Error('SD-JWT: a disclosure is not referenced by the signed payload');
+    return result;
+}
+// ---------------------------------------------------------------------------------------------
+// issuing
+// ---------------------------------------------------------------------------------------------
+function newSalt() {
+    return (0, node_crypto_1.randomBytes)(16).toString('base64url');
+}
+function disclosureBuilder(alg = 'sha-256', salt = newSalt) {
+    const disclosures = [];
+    return {
+        disclosures,
+        element(value) {
+            const raw = b64uEncode(JSON.stringify([salt(), value]));
+            disclosures.push(raw);
+            return { '...': sdDigest(raw, alg) };
+        },
+        property(name, value) {
+            const raw = b64uEncode(JSON.stringify([salt(), name, value]));
+            disclosures.push(raw);
+            return sdDigest(raw, alg);
+        },
+    };
+}
+/** Sign `payload` as an ES256 JWT and append `disclosures`: `<jwt>~<d1>~...~<dn>~`. */
+function signSdJwt(args) {
+    const header = b64uEncode(JSON.stringify({ alg: 'ES256', ...args.header }));
+    const payload = b64uEncode(JSON.stringify(args.payload));
+    const jwt = `${header}.${payload}.${es256Sign(args.privateKey, `${header}.${payload}`)}`;
+    return `${jwt}~${args.disclosures.map((d) => `${d}~`).join('')}`;
+}
+/** Sign an arbitrary compact JWT (used for merchant-signed `checkout_jwt`). */
+function signJwtEs256(args) {
+    const header = b64uEncode(JSON.stringify({ alg: 'ES256', typ: 'JWT', ...args.header }));
+    const payload = b64uEncode(JSON.stringify(args.payload));
+    return `${header}.${payload}.${es256Sign(args.privateKey, `${header}.${payload}`)}`;
+}
+function parseJwt(jwt, what) {
+    const seg = jwt.split('.');
+    if (seg.length !== 3 || seg.some((s) => s.length === 0))
+        throw new Ap2Error(`${what}: must be header.payload.signature`);
+    const [h, p, s] = seg;
+    return {
+        header: decodeJsonSegment(h, `${what} header`),
+        payload: decodeJsonSegment(p, `${what} payload`),
+        signingInput: `${h}.${p}`,
+        signature: b64uDecode(s, `${what} signature`),
+    };
+}
+function verifyJwtEs256(parsed, key) {
+    if (parsed.header.alg !== 'ES256')
+        return false;
+    return es256Verify(assertP256Jwk(key, 'verification key'), parsed.signingInput, parsed.signature);
+}
+//# sourceMappingURL=sdjwt.js.map

package/dist/sdjwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdjwt.js","sourceRoot":"","sources":["../src/sdjwt.ts"],"names":[],"mappings":";;;AAmCA,gCAEC;AAGD,gCAKC;AAED,4BAEC;AA0CD,8BASC;AAgBD,0BAEC;AAGD,4BAGC;AA2BD,sCAaC;AAMD,gDAWC;AAGD,4DAQC;AAGD,sCAGC;AAuCD,4BAEC;AAGD,sCA0BC;AAGD,4BAEC;AAGD,0CAEC;AAGD,gDAGC;AA6BD,gDA0DC;AAMD,0BAEC;AAUD,8CAeC;AAGD,8BAUC;AAGD,oCAIC;AASD,4BAUC;AAED,wCAGC;AAhcD;;;;;;;;GAQG;AACH,6CASqB;AAKrB,uFAAuF;AACvF,MAAa,QAAS,SAAQ,KAAK;IACjC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AALD,4BAKC;AAED,gGAAgG;AAChG,2BAA2B;AAC3B,gGAAgG;AAEhG,SAAgB,UAAU,CAAC,IAAyB;IAClD,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACxG,CAAC;AAED,iGAAiG;AACjG,SAAgB,UAAU,CAAC,CAAS,EAAE,IAAY;IAChD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,iBAAiB,CAAC,CAAC;IAC9E,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IACxC,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,2BAA2B,CAAC,CAAC;IAC5F,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,QAAQ,CAAC,CAAU;IACjC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,IAAY,EAAE,IAAY;IACvD,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAW,CAAC;QAC5B,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACtD,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACpC,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;gBACrB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAW,CAAC;gBACvD,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,mBAAmB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACtF,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACb,SAAS,GAAG,KAAK,CAAC;YACpB,CAAC;YACD,CAAC,GAAG,CAAC,CAAC;QACR,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;YACtB,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAClC,KAAK,CAAC,GAAG,EAAE,CAAC;YACZ,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACrB,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,YAAY,GAAG,CAAC;QACrD,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,SAAS,CAAC,IAAY,EAAE,IAAY;IAClD,IAAI,CAAU,CAAC;IACf,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,mBAAoB,CAAW,CAAC,OAAO,GAAG,CAAC,CAAC;IACxE,CAAC;IACD,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,IAAY;IACtD,MAAM,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;IACtE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,yBAAyB,CAAC,CAAC;IACvE,OAAO,CAAC,CAAC;AACX,CAAC;AAQD,MAAM,SAAS,GAA0B,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AAE3G,SAAgB,OAAO,CAAC,CAAU;IAChC,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS,CAAC;AAC/D,CAAC;AAED,qGAAqG;AACrG,SAAgB,QAAQ,CAAC,KAAa,EAAE,MAAa,SAAS;IAC5D,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,4BAA4B,CAAC,CAAC;IACpF,OAAO,IAAA,wBAAU,EAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC/E,CAAC;AAwBD,MAAM,OAAO,GAAG,qBAAqB,CAAC;AAEtC,0FAA0F;AAC1F,SAAgB,aAAa,CAAC,GAAY,EAAE,IAAY;IACtD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,yBAAyB,CAAC,CAAC;IACzE,IAAI,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,wBAAwB,CAAC,CAAC;IACjG,IAAI,OAAO,GAAG,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,aAAa,CAAC,CAAC;IAChG,IAAI,OAAO,GAAG,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,aAAa,CAAC,CAAC;IAChG,IAAI,GAAG,IAAI,GAAG;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,gCAAgC,CAAC,CAAC;IAC5E,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,yBAAyB,CAAC,CAAC;IACvG,IAAI,CAAC;QACH,IAAA,6BAAe,EAAC,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,kCAAkC,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,GAAyB,CAAC;AACnC,CAAC;AAED,SAAS,eAAe,CAAC,GAAY;IACnC,OAAO,IAAA,6BAAe,EAAC,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AAClG,CAAC;AAED,SAAgB,kBAAkB,CAAC,GAAY;IAC7C,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAA,iCAAmB,EAAC,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IACrF,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,GAAY;QACzB,GAAG,EAAE,IAAI;QACT,GAAG,EAAE,OAAO;QACZ,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAChB,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAChB,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtC,CAAC;IACF,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACnC,CAAC;AAED,8EAA8E;AAC9E,SAAgB,wBAAwB,CAAC,GAA4B;IACnE,MAAM,UAAU,GAAG,IAAA,8BAAgB,EAAC,EAAE,GAAG,EAAE,GAAY,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,IAAA,6BAAe,EAAC,UAAU,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,OAAO;QACL,UAAU;QACV,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;KAClH,CAAC;AACJ,CAAC;AAED,4DAA4D;AAC5D,SAAgB,aAAa,CAAC,GAAY;IACxC,MAAM,SAAS,GAAG,kCAAkC,GAAG,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC;IAC7E,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC5E,CAAC;AAED,0FAA0F;AAC1F,SAAS,SAAS,CAAC,UAAqB,EAAE,YAAoB;IAC5D,OAAO,IAAA,kBAAQ,EAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACtI,CAAC;AAED,SAAS,WAAW,CAAC,GAAY,EAAE,YAAoB,EAAE,SAAiB;IACxE,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,IAAA,oBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE,SAAS,CAAC,CAAC;AACvI,CAAC;AA4BD,2EAA2E;AAC3E,SAAgB,QAAQ,CAAC,GAA0C;IACjE,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,gFAAgF;AAChF,SAAgB,aAAa,CAAC,KAAa;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,eAAe,CAAC,CAAC;IACzF,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,0BAA0B,CAAC,CAAC;IAC1E,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,kEAAkE,CAAC,CAAC;IACjH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3B,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,kCAAkC,CAAC,CAAC;IACpG,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,qDAAqD,CAAC,CAAC;IACnI,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,GAA+B,CAAC;IAClD,MAAM,MAAM,GAAG,iBAAiB,CAAC,CAAC,EAAE,YAAY,CAAc,CAAC;IAC/D,MAAM,OAAO,GAAG,iBAAiB,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAC/B,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,+BAA+B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1H,OAAO;QACL,GAAG,EAAE,KAAK;QACV,GAAG;QACH,MAAM;QACN,OAAO;QACP,WAAW;QACX,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QAC3C,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;QACzB,SAAS;KACV,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,SAAgB,QAAQ,CAAC,GAAa,EAAE,MAAa,GAAG,CAAC,KAAK;IAC5D,OAAO,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AACtC,CAAC;AAED,6EAA6E;AAC7E,SAAgB,eAAe,CAAC,GAAa,EAAE,MAAa,GAAG,CAAC,KAAK;IACnE,OAAO,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAChC,CAAC;AAED,6FAA6F;AAC7F,SAAgB,kBAAkB,CAAC,GAAa,EAAE,GAAY;IAC5D,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAC7C,OAAO,WAAW,CAAC,aAAa,CAAC,GAAG,EAAE,kBAAkB,CAAC,EAAE,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;AAC9F,CAAC;AAUD,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC;IACpF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,kCAAkC,CAAC,CAAC;IAChF,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,6CAA6C,CAAC,CAAC;IACzH,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,QAAQ,CAAC,yCAAyC,CAAC,CAAC;QAC5F,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK;YAAE,MAAM,IAAI,QAAQ,CAAC,0BAA0B,IAAI,cAAc,CAAC,CAAC;QACvG,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAS,EAAE,GAAG,EAAE,CAAC;IAChE,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAS,EAAE,GAAG,EAAE,CAAC;IAC7E,MAAM,IAAI,QAAQ,CAAC,6CAA6C,CAAC,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,OAAmB,EAAE,WAAqB,EAAE,GAAU;IACvF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC/C,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,8BAA8B,CAAC,CAAC;QAC7E,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC1B,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,IAA4B,EAA0B,EAAE;QACpF,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC,CAAC,+DAA+D;QACzF,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,+CAA+C,CAAC,CAAC;QAC1F,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI;YAAE,MAAM,IAAI,QAAQ,CAAC,aAAa,CAAC,CAAC,IAAI,oCAAoC,IAAI,WAAW,CAAC,CAAC;QAChH,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjB,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,CAAC,IAAU,EAAE,KAAa,EAAQ,EAAE;QAC/C,IAAI,KAAK,GAAG,EAAE;YAAE,MAAM,IAAI,QAAQ,CAAC,0BAA0B,CAAC,CAAC;QAC/D,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,GAAG,GAAW,EAAE,CAAC;YACvB,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;gBACtB,IAAI,QAAQ,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;oBAChC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC,KAAK,CAAC,KAAK,QAAQ;wBAAE,MAAM,IAAI,QAAQ,CAAC,4CAA4C,CAAC,CAAC;oBACzH,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC;oBACrC,IAAI,CAAC;wBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC5C,CAAC;;oBAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;YACvC,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,MAAM,GAAG,GAAe,EAAE,CAAC;YAC3B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,SAAS;oBAAE,SAAS;gBAC7C,IAAI,CAAC,KAAK,KAAK;oBAAE,MAAM,IAAI,QAAQ,CAAC,iEAAiE,CAAC,CAAC;gBACvG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAC9B,CAAC;YACD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC;YACpB,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;gBACrB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;oBAAE,MAAM,IAAI,QAAQ,CAAC,yCAAyC,CAAC,CAAC;gBAC/H,KAAK,MAAM,MAAM,IAAI,EAAc,EAAE,CAAC;oBACpC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;oBACnC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU;wBAAE,SAAS;oBAC1C,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC;wBAAE,MAAM,IAAI,QAAQ,CAAC,2BAA2B,CAAC,CAAC,IAAI,kCAAkC,CAAC,CAAC;oBAC/I,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBACzC,CAAC;YACH,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAe,CAAC;IAC9C,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;QAAE,MAAM,IAAI,QAAQ,CAAC,8DAA8D,CAAC,CAAC;IACpH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gGAAgG;AAChG,UAAU;AACV,gGAAgG;AAEhG,SAAgB,OAAO;IACrB,OAAO,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAUD,SAAgB,iBAAiB,CAAC,MAAa,SAAS,EAAE,OAAqB,OAAO;IACpF,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,OAAO;QACL,WAAW;QACX,OAAO,CAAC,KAAK;YACX,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;YACxD,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtB,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;QACvC,CAAC;QACD,QAAQ,CAAC,IAAI,EAAE,KAAK;YAClB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;YAC9D,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtB,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,SAAgB,SAAS,CAAC,IAKzB;IACC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC,EAAE,CAAC;IACzF,OAAO,GAAG,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AACnE,CAAC;AAED,+EAA+E;AAC/E,SAAgB,YAAY,CAAC,IAAkF;IAC7G,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxF,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,OAAO,GAAG,MAAM,IAAI,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC,EAAE,CAAC;AACtF,CAAC;AASD,SAAgB,QAAQ,CAAC,GAAW,EAAE,IAAY;IAChD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,oCAAoC,CAAC,CAAC;IACzH,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,GAA+B,CAAC;IAClD,OAAO;QACL,MAAM,EAAE,iBAAiB,CAAC,CAAC,EAAE,GAAG,IAAI,SAAS,CAAc;QAC3D,OAAO,EAAE,iBAAiB,CAAC,CAAC,EAAE,GAAG,IAAI,UAAU,CAAC;QAChD,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;QACzB,SAAS,EAAE,UAAU,CAAC,CAAC,EAAE,GAAG,IAAI,YAAY,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,SAAgB,cAAc,CAAC,MAAiB,EAAE,GAAY;IAC5D,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAChD,OAAO,WAAW,CAAC,aAAa,CAAC,GAAG,EAAE,kBAAkB,CAAC,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;AACpG,CAAC"}

package/dist/settlement.d.ts

@@ -0,0 +1,47 @@
+import { type Amount, type PaymentMandateClaims } from './mandates';
+/** Context the caller supplies for building a rail-specific settlement payload. */
+export interface SettlementContext {
+    /** Protected resource URL (x402). */
+    resourceUrl?: string;
+    /** Payee address / account (x402 `payTo`, Stripe `on_behalf_of`). */
+    payTo?: string;
+    /** Rail network, e.g. an x402 chain id like `base-sepolia`. */
+    network?: string;
+    /** x402 `asset`: the token contract address. Defaults to the mandate's currency code (a placeholder; supply the address). */
+    asset?: string;
+    /** x402: decimals of the asset, used to convert the mandate amount to atomic units. Default 6 (USDC). */
+    decimals?: number;
+    /** x402 `maxTimeoutSeconds`: how long the payer has to complete payment. Default 60. */
+    maxTimeoutSeconds?: number;
+}
+/**
+ * Convert integer minor units to an integer string of atomic units. Scales by `10 ** (decimals - exponent)`
+ * with BigInt, so no float is involved; when the asset has fewer decimals than the currency the
+ * division must be exact. Throws otherwise (fail closed).
+ */
+export declare function toAtomicUnits(amount: Amount, decimals: number): string;
+/** A rail-specific settlement payload shape. No network is performed; this is the wire shape only. */
+export interface SettlementInstruction {
+    rail: string;
+    amount: Amount;
+    merchant?: string;
+    /** The rail-specific payload (structural). */
+    payload: Readonly<Record<string, unknown>>;
+}
+export interface SettlementBackend {
+    readonly rail: string;
+    /** Build the rail payload for a (presumed-verified) closed Payment Mandate. Pure; no network. */
+    settle(payment: PaymentMandateClaims, ctx?: SettlementContext): SettlementInstruction;
+}
+/**
+ * Coinbase x402 adapter: the HTTP 402 `Payment Required` challenge (`accepts`) plus the `X-PAYMENT`
+ * request header (standard base64 of the JSON payment payload). The payload is a placeholder envelope,
+ * not a signed authorization: the real rail settles on-chain.
+ */
+export declare const x402Settlement: SettlementBackend;
+/**
+ * Stripe Shared Payment Token adapter: a shared token the buyer's agent grants the merchant to pull a
+ * bounded amount. The mandate amount is already in minor units, which is what Stripe takes. The token
+ * is the mandate's payment instrument id, never a raw PAN.
+ */
+export declare const stripeSptSettlement: SettlementBackend;

package/dist/settlement.js

@@ -0,0 +1,91 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stripeSptSettlement = exports.x402Settlement = void 0;
+exports.toAtomicUnits = toAtomicUnits;
+/**
+ * Settlement backends: the rails PCA's governance feeds. STRUCTURAL ONLY, no network.
+ *
+ * A backend turns a payment mandate that has ALREADY been verified (`verifyPaymentChain` /
+ * `verifyPurchase`, plus `verifyPcaBinding` for the PCA side) into the rail's wire shape. Amounts are
+ * the mandate's integer minor units; nothing here accepts a decimal.
+ */
+const sdjwt_1 = require("./sdjwt");
+const mandates_1 = require("./mandates");
+/**
+ * Convert integer minor units to an integer string of atomic units. Scales by `10 ** (decimals - exponent)`
+ * with BigInt, so no float is involved; when the asset has fewer decimals than the currency the
+ * division must be exact. Throws otherwise (fail closed).
+ */
+function toAtomicUnits(amount, decimals) {
+    if (!Number.isInteger(decimals) || decimals < 0 || decimals > 18)
+        throw new RangeError(`x402: decimals must be an integer in 0..18, got ${String(decimals)}`);
+    if (!Number.isSafeInteger(amount.amount) || amount.amount < 0)
+        throw new RangeError(`x402: amount ${String(amount.amount)} cannot be expressed in atomic units with ${decimals} decimals`);
+    const exp = (0, mandates_1.currencyExponent)(amount.currency);
+    const minor = BigInt(amount.amount);
+    if (decimals >= exp)
+        return String(minor * 10n ** BigInt(decimals - exp));
+    const div = 10n ** BigInt(exp - decimals);
+    if (minor % div !== 0n)
+        throw new RangeError(`x402: amount ${String(amount.amount)} cannot be expressed in atomic units with ${decimals} decimals`);
+    return String(minor / div);
+}
+/**
+ * Coinbase x402 adapter: the HTTP 402 `Payment Required` challenge (`accepts`) plus the `X-PAYMENT`
+ * request header (standard base64 of the JSON payment payload). The payload is a placeholder envelope,
+ * not a signed authorization: the real rail settles on-chain.
+ */
+exports.x402Settlement = {
+    rail: 'x402',
+    settle(payment, ctx) {
+        const network = ctx?.network ?? 'base-sepolia';
+        const requirement = {
+            scheme: 'exact',
+            network,
+            // x402 v1: `maxAmountRequired` is a string in ATOMIC token units, not a decimal amount.
+            maxAmountRequired: toAtomicUnits(payment.payment_amount, ctx?.decimals ?? 6),
+            resource: ctx?.resourceUrl ?? '',
+            description: `AP2 payment mandate ${payment.transaction_id}`,
+            payTo: ctx?.payTo ?? payment.payee.id,
+            asset: ctx?.asset ?? payment.payment_amount.currency,
+            mimeType: 'application/json',
+            maxTimeoutSeconds: ctx?.maxTimeoutSeconds ?? 60,
+        };
+        const xPayment = Buffer.from(JSON.stringify({
+            x402Version: 1,
+            scheme: 'exact',
+            network,
+            payload: { transactionId: payment.transaction_id, amount: payment.payment_amount.amount, currency: payment.payment_amount.currency },
+        }), 'utf8').toString('base64');
+        return {
+            rail: 'x402',
+            amount: payment.payment_amount,
+            merchant: payment.payee.id,
+            payload: { httpStatus: 402, x402Version: 1, error: 'X-PAYMENT header is required', accepts: [requirement], header: { 'X-PAYMENT': xPayment } },
+        };
+    },
+};
+/**
+ * Stripe Shared Payment Token adapter: a shared token the buyer's agent grants the merchant to pull a
+ * bounded amount. The mandate amount is already in minor units, which is what Stripe takes. The token
+ * is the mandate's payment instrument id, never a raw PAN.
+ */
+exports.stripeSptSettlement = {
+    rail: 'stripe-spt',
+    settle(payment, ctx) {
+        if (payment.payment_instrument.type !== 'shared_payment_token')
+            throw new sdjwt_1.Ap2Error(`stripe-spt: the payment instrument must be of type shared_payment_token, got ${payment.payment_instrument.type}`);
+        return {
+            rail: 'stripe-spt',
+            amount: payment.payment_amount,
+            merchant: payment.payee.id,
+            payload: {
+                shared_payment_token: payment.payment_instrument.id,
+                amount: payment.payment_amount.amount,
+                currency: payment.payment_amount.currency.toLowerCase(),
+                ...(ctx?.payTo ? { on_behalf_of: ctx.payTo } : {}),
+            },
+        };
+    },
+};
+//# sourceMappingURL=settlement.js.map

package/dist/settlement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settlement.js","sourceRoot":"","sources":["../src/settlement.ts"],"names":[],"mappings":";;;AA+BA,sCASC;AAxCD;;;;;;GAMG;AACH,mCAAmC;AACnC,yCAAsF;AAkBtF;;;;GAIG;AACH,SAAgB,aAAa,CAAC,MAAc,EAAE,QAAgB;IAC5D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,EAAE;QAAE,MAAM,IAAI,UAAU,CAAC,mDAAmD,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC9J,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,6CAA6C,QAAQ,WAAW,CAAC,CAAC;IAC3L,MAAM,GAAG,GAAG,IAAA,2BAAgB,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,QAAQ,IAAI,GAAG;QAAE,OAAO,MAAM,CAAC,KAAK,GAAG,GAAG,IAAI,MAAM,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,GAAG,IAAI,MAAM,CAAC,GAAG,GAAG,QAAQ,CAAC,CAAC;IAC1C,IAAI,KAAK,GAAG,GAAG,KAAK,EAAE;QAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,6CAA6C,QAAQ,WAAW,CAAC,CAAC;IACpJ,OAAO,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;AAC7B,CAAC;AAiBD;;;;GAIG;AACU,QAAA,cAAc,GAAsB;IAC/C,IAAI,EAAE,MAAM;IACZ,MAAM,CAAC,OAAO,EAAE,GAAG;QACjB,MAAM,OAAO,GAAG,GAAG,EAAE,OAAO,IAAI,cAAc,CAAC;QAC/C,MAAM,WAAW,GAAG;YAClB,MAAM,EAAE,OAAO;YACf,OAAO;YACP,wFAAwF;YACxF,iBAAiB,EAAE,aAAa,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC,CAAC;YAC5E,QAAQ,EAAE,GAAG,EAAE,WAAW,IAAI,EAAE;YAChC,WAAW,EAAE,uBAAuB,OAAO,CAAC,cAAc,EAAE;YAC5D,KAAK,EAAE,GAAG,EAAE,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE;YACrC,KAAK,EAAE,GAAG,EAAE,KAAK,IAAI,OAAO,CAAC,cAAc,CAAC,QAAQ;YACpD,QAAQ,EAAE,kBAAkB;YAC5B,iBAAiB,EAAE,GAAG,EAAE,iBAAiB,IAAI,EAAE;SAChD,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAC1B,IAAI,CAAC,SAAS,CAAC;YACb,WAAW,EAAE,CAAC;YACd,MAAM,EAAE,OAAO;YACf,OAAO;YACP,OAAO,EAAE,EAAE,aAAa,EAAE,OAAO,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE;SACrI,CAAC,EACF,MAAM,CACP,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrB,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,OAAO,CAAC,cAAc;YAC9B,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;YAC1B,OAAO,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE;SAC/I,CAAC;IACJ,CAAC;CACF,CAAC;AAEF;;;;GAIG;AACU,QAAA,mBAAmB,GAAsB;IACpD,IAAI,EAAE,YAAY;IAClB,MAAM,CAAC,OAAO,EAAE,GAAG;QACjB,IAAI,OAAO,CAAC,kBAAkB,CAAC,IAAI,KAAK,sBAAsB;YAAE,MAAM,IAAI,gBAAQ,CAAC,gFAAgF,OAAO,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC;QACtM,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,OAAO,CAAC,cAAc;YAC9B,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;YAC1B,OAAO,EAAE;gBACP,oBAAoB,EAAE,OAAO,CAAC,kBAAkB,CAAC,EAAE;gBACnD,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,MAAM;gBACrC,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,WAAW,EAAE;gBACvD,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnD;SACF,CAAC;IACJ,CAAC;CACF,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@atlasauth/pca-ap2",
-  "version": "0.3.0",
-  "description": "AP2-modelled Intent/Cart/Payment mandate chain for PCA (a PCA rendition, not the SD-JWT AP2 wire format): map the grant/budget to signed mandates; PCA governs, x402 / Stripe Shared-Payment-Tokens settle.",
+  "version": "0.4.0",
+  "description": "AP2 (Agent Payments Protocol) Intent/Cart/Payment mandates as real SD-JWT credentials (integer minor units, key binding), bound to a PCA grant and action proof; x402 / Stripe Shared-Payment-Token settlement shapes.",
   "keywords": [
     "ap2",
     "agent payments protocol",
@@ -32,8 +32,8 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@atlasauth/pca-payments": "0.3.0",
-    "@atlasauth/pca": "0.3.0"
+    "@atlasauth/pca": "0.4.0",
+    "@atlasauth/pca-payments": "0.4.0"
   },
   "devDependencies": {
     "ajv": "8.20.0",