@atlasauth/pca-ciba 0.2.0 → 0.4.0

package/README.md

@@ -29,7 +29,7 @@ const a = agent({
   riskPolicy: { theta1: 0.3, theta2: 0.6 },
 });
 
-const review = reviewAction(a, 'stripe.payout', 'acct:1', { amount: 80 }, { goal: 'reconcile October refunds' });
+const review = reviewAction(a, 'stripe.payout', 'acct:1', { amount: 80, currency: 'USD', payee: 'acct:supplier-9' }, { goal: 'reconcile October refunds' });
 
 if (review.kind === 'step_up' && requiresCiba(review)) {
   const broker = createCibaBroker({ onComplete: (session) => console.log(session.status) }); // omit onComplete for POLL
@@ -51,13 +51,49 @@ if (review.kind === 'step_up' && requiresCiba(review)) {
 }
 ```
 
+### Against a real OpenID Provider
+
+`createCibaClient` talks to a provider's backchannel authentication and token endpoints (client authentication `client_secret_basic`) and implements the client side of POLL and PING:
+
+```ts
+import { createCibaClient, verifyPingCallback } from '@atlasauth/pca-ciba';
+
+const ciba = createCibaClient({
+  backchannelAuthenticationEndpoint: 'https://op.example/ciba/auth',
+  tokenEndpoint: 'https://op.example/token',
+  clientId: 'pca-agent',
+  clientSecret: process.env.CIBA_SECRET!,
+});
+
+const flow = await ciba.initiate(review.request, {
+  loginHint: 'owner@acme',
+  bindingMessage: { tokenOnly: true }, // for providers that restrict binding_message (see below)
+  stepUpScope: false,                  // for providers that only accept registered scopes
+});
+const result = await ciba.poller(flow).wait(); // 'approved' (with tokens) | 'denied' | 'expired'
+```
+
+The poller never polls faster than the provider's `interval`, adds 5 seconds on every `slow_down` (CIBA Core 11), stops at `expires_in`, and never re-sends a settled `auth_req_id`. For PING delivery pass `delivery: 'ping'`, check the provider's callback with `verifyPingCallback`, then call `poller.notify()` (which also wakes a `poll()`/`wait()` that is sleeping) and `poll()`. Concurrent `poll()` calls share one token request; thrown fetches, 5xx replies and non-JSON replies back the next poll off (the error has `retryable: true`, and `wait()` retries up to five in a row); every request has a timeout (`timeoutMs`, default 30 s) and `wait({ signal })` / `poll({ signal })` cancel the in-flight fetch. Endpoints must be `https://`; `allowInsecureHttp: true` exists for a local test provider only. A caller-supplied `clientNotificationToken` must be at least 22 characters (128 bits). The returned tokens are the provider's response and are not verified by this package.
+
+The message is rendered ONLY from a canonical structured action (`cibaActionFromStepUp`) in a fixed order, `Approve <verb> <amount> <CUR> to "<payee>" on <resource>` (tokenOnly: `Approve-<verb>-<amount>-<CUR>-to-<payee>-<resource>`), and fails loud rather than misstating the action (R3-05, breaking). `params` may hold only `amount` (number or plain decimal string), `currency` (3 letters, REQUIRED next to an amount and always shown; there is no `$` shorthand or USD default) and one payee field (`payee`, `to`, `recipient`, `beneficiary` or `destination`; REQUIRED next to an amount). Every other `params` key makes `toCibaAuthRequest` throw, so a hidden `amt`, `total` or `memo` can never ride along unseen. The payee is shown in full inside double quotes (at most 64 characters; control, bidirectional and invisible characters, quotes, backslashes and a "because you asked" clause are refused, not altered; tokenOnly needs an ASCII payee). The verb and resource are plain identifiers (`[A-Za-z0-9][A-Za-z0-9._:/#@+-]{0,63}`), never free text. With `bindingMessage.maxChars`, only the optional goal clause shrinks, and if the head alone does not fit it throws. Not covered: look-alike (homoglyph) characters inside an otherwise printable payee.
+
+Provider limits to know about: Keycloak accepts a `binding_message` of at most 50 characters from a narrow ASCII set without spaces, so the default rich message is refused with `invalid_binding_message` there; use `bindingMessage: { tokenOnly: true }`. In that mode the message is all-or-nothing: the amount must be a plain non-negative decimal (no sign or exponent), the currency a 3-letter code, and if `maxChars` cannot hold the verb, amount, currency and resource in full, `toCibaAuthRequest` throws rather than sending a shortened message. A provider that does not know the per-verb scope `urn:atlas:pca:stepup:<verb>` answers `invalid_scope`; pass `stepUpScope: false`.
+
 `toCibaAuthRequest(stepUp, opts?)` is the pure mapping from a step-up to a CIBA request, if you want to drive your own broker or a real OpenID provider.
 
 ## Status
 
-The broker is in-memory and models the CIBA lifecycle without any network; a production deployment would swap in a real OpenID provider. The package computes approval envelopes and the derived trust budget and authorises nothing on its own: `cibaDecisionToCosign` is only the budget-level effect. The cryptographic cosign (FROST) is produced and verified separately, and the resource server's verifier remains the authority. Cryptography in PCA is unaudited.
+Experimental. The broker is in-memory and models the CIBA lifecycle without any network; a production deployment would swap in a real OpenID provider. The package computes approval envelopes and the derived trust budget and authorises nothing on its own: `cibaDecisionToCosign` is only the budget-level effect. The cryptographic cosign (FROST) is produced and verified separately, and the resource server's verifier remains the authority. Cryptography in PCA is unaudited.
+
+The human decision is **unauthenticated data**. `resolve` and `cibaDecisionToCosign` take the decision string as given: the client does not verify the ID token, and the approval recharges the trust budget generically without being cryptographically bound to the action the human was shown. Do not treat a CIBA approval as an authorisation of a specific action; only the verified cosign (a signature over `thresholdMessage` of that PCActn) is. Verify the provider's ID token yourself, and bind the `binding_message` to the action digest, before you let a decision recharge a budget.
+
+What has been checked against OpenID Connect CIBA Core 1.0 (Final): the specification's own examples (committed with source URL and sha256) are replayed through the independent `openid-client` library (6.8.2), which also drives the broker end to end through a small HTTP provider written for the tests (initiate, poll through `authorization_pending`, approve, deny, expiry). The values the package emits are asserted against the specification's requirements: `auth_req_id` is unguessable (160 random bits, restricted character set), `requested_expiry` is a positive integer, `scope` carries `openid` and only valid scope-token characters, and `binding_message` is a single short line of plain text.
+
+Validated against a real provider: Keycloak 26.8.0 (official release distribution on OpenJDK 21, CIBA enabled, a mock authentication-channel device playing the human). Ten end-to-end checks run POLL approve, deny (cancelled and unauthorized), expiry (including a late approval that the provider refuses), PING delivery with a notification-token callback, `login_hint` by username, e-mail and different case, unknown-user, bad-secret, bad-scope, `user_code` and malformed `requested_expiry` errors, `slow_down` enforcement (an early poll is answered `slow_down`; the client backs off by 5 seconds), single-use of an approved `auth_req_id`, and the `binding_message` and scope limits above. The real request and response transcripts (tokens and credentials redacted) are committed as a fixture and replayed offline on every run. The live run is gated behind `PCA_CIBA_KEYCLOAK_URL`, and the repository's `scripts/run-keycloak-ciba.sh` reproduces it end to end and tears the provider down.
+
+Observed provider behaviour that differs from the specification: Keycloak does not honour `requested_expiry` (it returns its own `expires_in`), does not require `openid` in `scope`, reports an unknown user as `invalid_request` with description `invalid_user` rather than `unknown_user_id`, reports a bad client secret as `unauthorized_client`, and its stock user resolver supports `login_hint` only (`login_hint_token` and `id_token_hint` are refused with `invalid_user` unless a custom resolver is installed).
 
-Source and issues: https://github.com/Atlas-Authorization/pca
+Not validated: other providers (Auth0, Descope, Stytch and others were not tried), PUSH mode, signed authentication requests, `user_code`, `login_hint_token` and `id_token_hint` against a provider that supports them, and the in-memory broker's own token-endpoint behaviour against any real client. The in-memory broker remains a test double.
 
 ## License
 

package/dist/client.d.ts

@@ -0,0 +1,120 @@
+/**
+ * A network client for a real OpenID Provider's CIBA endpoints (OpenID CIBA Core 1.0): start a
+ * backchannel authentication request and wait for the human's decision by POLL or PING. It is the
+ * relying-party side that `createCibaBroker` (in-memory, test-double) models.
+ *
+ * Poll discipline follows CIBA Core 7.3 / 11: the client never polls faster than the `interval` the OP
+ * returned, adds at least 5 seconds to it on every `slow_down`, and stops at `expires_in`. A terminal
+ * answer (approved / denied / expired) is cached, so a settled flow is never re-sent to the token
+ * endpoint (an approved `auth_req_id` is single-use at real providers).
+ *
+ * The client authenticates with `client_secret_basic`. The returned tokens are the OP's response, not
+ * verified here: a caller that relies on the ID token must verify it with its own JOSE library.
+ */
+import { type CibaAuthRequest, type CibaRequestOptions } from './index';
+import type { StepUpRequest } from '@atlasauth/pca';
+export type CibaDelivery = 'poll' | 'ping';
+/** An error response from the OP (RFC 6749 5.2 / CIBA Core 13), or a malformed reply. */
+export declare class CibaProviderError extends Error {
+    readonly error: string;
+    readonly errorDescription: string | undefined;
+    readonly status: number;
+    /** True for failures worth retrying (network error, timeout, 5xx, non-JSON reply); not for a definitive OP answer. */
+    readonly retryable: boolean;
+    constructor(status: number, error: string, errorDescription?: string, retryable?: boolean);
+}
+export interface CibaClientConfig {
+    backchannelAuthenticationEndpoint: string;
+    tokenEndpoint: string;
+    clientId: string;
+    clientSecret: string;
+    /** Injectable for tests. Default global `fetch`. */
+    fetch?: typeof fetch;
+    /** Injectable for tests. Default `setTimeout`. */
+    sleep?: (ms: number) => Promise<void>;
+    /** Clock in ms. Default `Date.now`. */
+    now?: () => number;
+    /** Per-request timeout in ms for every call to the OP. Default 30000. */
+    timeoutMs?: number;
+    /**
+     * Permit `http://` endpoints. The client secret and the `auth_req_id` travel on these requests, so this
+     * is for local test providers only. Default false: a non-https endpoint is rejected.
+     */
+    allowInsecureHttp?: boolean;
+}
+export interface CibaInitiateOptions extends CibaRequestOptions {
+    /** Exactly one identifying hint is allowed (CIBA Core 7.1). `loginHint` comes from {@link CibaRequestOptions}. */
+    loginHintToken?: string;
+    idTokenHint?: string;
+    /** `ping` sends a `client_notification_token` (generated if not given); `poll` (default) sends none. */
+    delivery?: CibaDelivery;
+    clientNotificationToken?: string;
+    acrValues?: string;
+    userCode?: string;
+}
+export interface CibaFlow {
+    /** The OP-issued `auth_req_id`. */
+    authReqId: string;
+    expiresInSec: number;
+    /** Interval the OP asked for, in seconds. */
+    intervalSec: number;
+    /** ms epoch the OP answered. */
+    startedAt: number;
+    delivery: CibaDelivery;
+    clientNotificationToken?: string;
+    /** The request PCA derived (scope, binding message, ...) that was sent. */
+    request: CibaAuthRequest;
+}
+export interface CibaTokenResponse {
+    access_token: string;
+    token_type: string;
+    expires_in?: number;
+    id_token?: string;
+    refresh_token?: string;
+    scope?: string;
+}
+export type CibaPollResult = {
+    status: 'pending';
+    intervalSec: number;
+} | {
+    status: 'approved';
+    tokens: CibaTokenResponse;
+} | {
+    status: 'denied';
+    error: string;
+} | {
+    status: 'expired';
+};
+export interface CibaPoller {
+    /** Current poll interval in seconds (grows on `slow_down`). */
+    intervalSec(): number;
+    /** Sleep until the interval allows it, then ask the token endpoint once. */
+    poll(opts?: {
+        signal?: AbortSignal;
+    }): Promise<CibaPollResult>;
+    /** Poll until the flow settles; honours `signal`. */
+    wait(opts?: {
+        signal?: AbortSignal;
+    }): Promise<Exclude<CibaPollResult, {
+        status: 'pending';
+    }>>;
+    /** A PING arrived: the next `poll()` may go out immediately, and a `poll()`/`wait()` that is sleeping wakes now. */
+    notify(): void;
+}
+export interface CibaClient {
+    initiate(stepUp: StepUpRequest, opts?: CibaInitiateOptions): Promise<CibaFlow>;
+    poller(flow: CibaFlow): CibaPoller;
+}
+/** A fresh `client_notification_token` (CIBA Core 7.1: at least 128 bits of entropy, at most 1024 chars). */
+export declare function newClientNotificationToken(): string;
+export declare function createCibaClient(cfg: CibaClientConfig): CibaClient;
+/**
+ * Validate a PING callback (CIBA Core 10.2): `Authorization: Bearer <client_notification_token>` and a JSON
+ * body `{ "auth_req_id": ... }`. Returns the `auth_req_id` only when the bearer matches the token sent for
+ * that flow (constant-time comparison); throws otherwise. The callback carries no decision: call
+ * `poller.notify()` and then `poll()` to fetch it.
+ */
+export declare function verifyPingCallback(input: {
+    authorization: string | undefined;
+    body: unknown;
+}, flow: Pick<CibaFlow, 'authReqId' | 'clientNotificationToken'>): string;

package/dist/client.js

@@ -0,0 +1,330 @@
+"use strict";
+/**
+ * A network client for a real OpenID Provider's CIBA endpoints (OpenID CIBA Core 1.0): start a
+ * backchannel authentication request and wait for the human's decision by POLL or PING. It is the
+ * relying-party side that `createCibaBroker` (in-memory, test-double) models.
+ *
+ * Poll discipline follows CIBA Core 7.3 / 11: the client never polls faster than the `interval` the OP
+ * returned, adds at least 5 seconds to it on every `slow_down`, and stops at `expires_in`. A terminal
+ * answer (approved / denied / expired) is cached, so a settled flow is never re-sent to the token
+ * endpoint (an approved `auth_req_id` is single-use at real providers).
+ *
+ * The client authenticates with `client_secret_basic`. The returned tokens are the OP's response, not
+ * verified here: a caller that relies on the ID token must verify it with its own JOSE library.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CibaProviderError = void 0;
+exports.newClientNotificationToken = newClientNotificationToken;
+exports.createCibaClient = createCibaClient;
+exports.verifyPingCallback = verifyPingCallback;
+const node_crypto_1 = require("node:crypto");
+const index_1 = require("./index");
+const CIBA_GRANT = 'urn:openid:params:grant-type:ciba';
+/** CIBA Core 11: on `slow_down` the interval grows by at least 5 seconds. */
+const SLOW_DOWN_STEP_SEC = 5;
+/** An error response from the OP (RFC 6749 5.2 / CIBA Core 13), or a malformed reply. */
+class CibaProviderError extends Error {
+    error;
+    errorDescription;
+    status;
+    /** True for failures worth retrying (network error, timeout, 5xx, non-JSON reply); not for a definitive OP answer. */
+    retryable;
+    constructor(status, error, errorDescription, retryable = false) {
+        super(`ciba: provider returned ${String(status)} ${error}${errorDescription !== undefined ? ` (${errorDescription})` : ''}`);
+        this.name = 'CibaProviderError';
+        this.status = status;
+        this.error = error;
+        this.errorDescription = errorDescription;
+        this.retryable = retryable;
+    }
+}
+exports.CibaProviderError = CibaProviderError;
+async function readJson(res) {
+    const text = await res.text();
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch {
+        throw new CibaProviderError(res.status, 'invalid_response', 'the provider reply was not JSON', true);
+    }
+    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+        throw new CibaProviderError(res.status, 'invalid_response', 'the provider reply was not a JSON object');
+    }
+    return parsed;
+}
+function providerError(status, body) {
+    const error = typeof body['error'] === 'string' ? body['error'] : 'invalid_response';
+    const desc = typeof body['error_description'] === 'string' ? body['error_description'] : undefined;
+    return new CibaProviderError(status, error, desc);
+}
+function positiveInt(value, name, status) {
+    if (typeof value !== 'number' || !Number.isSafeInteger(value) || value <= 0) {
+        throw new CibaProviderError(status, 'invalid_response', `${name} must be a positive integer`);
+    }
+    return value;
+}
+const MIN_NOTIFICATION_TOKEN_CHARS = 22; // 22 base64url chars = 132 bits
+const MAX_NOTIFICATION_TOKEN_CHARS = 1024;
+const DEFAULT_TIMEOUT_MS = 30_000;
+const MAX_BACKOFF_MS = 60_000;
+const MAX_CONSECUTIVE_TRANSIENT = 5;
+function checkEndpoint(name, value, allowInsecure) {
+    let u;
+    try {
+        u = new URL(value);
+    }
+    catch {
+        throw new RangeError(`ciba: ${name} is not a valid URL`);
+    }
+    if (u.protocol === 'https:')
+        return;
+    if (u.protocol === 'http:' && allowInsecure)
+        return;
+    throw new RangeError(`ciba: ${name} must be an https:// URL (set allowInsecureHttp only for a local test provider)`);
+}
+/** A fresh `client_notification_token` (CIBA Core 7.1: at least 128 bits of entropy, at most 1024 chars). */
+function newClientNotificationToken() {
+    return (0, node_crypto_1.randomBytes)(32).toString('base64url');
+}
+function createCibaClient(cfg) {
+    const doFetch = cfg.fetch ?? fetch;
+    const clock = cfg.now ?? Date.now;
+    const timeoutMs = cfg.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    if (!Number.isFinite(timeoutMs) || timeoutMs <= 0)
+        throw new RangeError('ciba: timeoutMs must be a positive number');
+    checkEndpoint('backchannelAuthenticationEndpoint', cfg.backchannelAuthenticationEndpoint, cfg.allowInsecureHttp === true);
+    checkEndpoint('tokenEndpoint', cfg.tokenEndpoint, cfg.allowInsecureHttp === true);
+    const basic = `Basic ${Buffer.from(`${encodeURIComponent(cfg.clientId)}:${encodeURIComponent(cfg.clientSecret)}`).toString('base64')}`;
+    /** One request with a hard timeout; the caller's signal also cancels the fetch itself. */
+    async function post(url, form, signal) {
+        if (signal?.aborted === true)
+            throw new Error('ciba: wait aborted');
+        const ac = new AbortController();
+        const timer = setTimeout(() => ac.abort(new Error('timeout')), timeoutMs);
+        const onAbort = () => ac.abort(new Error('aborted'));
+        signal?.addEventListener('abort', onAbort, { once: true });
+        try {
+            return await doFetch(url, {
+                method: 'POST',
+                headers: { authorization: basic, 'content-type': 'application/x-www-form-urlencoded', accept: 'application/json' },
+                body: form.toString(),
+                signal: ac.signal,
+            });
+        }
+        catch (e) {
+            if (signal !== undefined && signal.aborted)
+                throw new Error('ciba: wait aborted');
+            throw new CibaProviderError(0, 'network_error', e instanceof Error ? e.message : 'request failed', true);
+        }
+        finally {
+            clearTimeout(timer);
+            signal?.removeEventListener('abort', onAbort);
+        }
+    }
+    return {
+        async initiate(stepUp, opts = {}) {
+            const hints = [opts.loginHint, opts.loginHintToken, opts.idTokenHint].filter((h) => h !== undefined);
+            if (hints.length !== 1) {
+                throw new RangeError('ciba: exactly one of loginHint, loginHintToken, idTokenHint is required (CIBA Core 7.1)');
+            }
+            const delivery = opts.delivery ?? 'poll';
+            const notificationToken = delivery === 'ping' ? (opts.clientNotificationToken ?? newClientNotificationToken()) : undefined;
+            if (opts.clientNotificationToken !== undefined &&
+                (opts.clientNotificationToken.length < MIN_NOTIFICATION_TOKEN_CHARS ||
+                    opts.clientNotificationToken.length > MAX_NOTIFICATION_TOKEN_CHARS ||
+                    !/^[\x21-\x7E]+$/.test(opts.clientNotificationToken))) {
+                throw new RangeError(`ciba: clientNotificationToken must be ${String(MIN_NOTIFICATION_TOKEN_CHARS)}..${String(MAX_NOTIFICATION_TOKEN_CHARS)} printable characters (>= 128 bits, CIBA Core 7.1)`);
+            }
+            const request = (0, index_1.toCibaAuthRequest)(stepUp, opts);
+            const form = new URLSearchParams({
+                scope: request.scope,
+                binding_message: request.binding_message,
+                requested_expiry: String(request.requested_expiry),
+            });
+            if (opts.loginHint !== undefined)
+                form.set('login_hint', opts.loginHint);
+            if (opts.loginHintToken !== undefined)
+                form.set('login_hint_token', opts.loginHintToken);
+            if (opts.idTokenHint !== undefined)
+                form.set('id_token_hint', opts.idTokenHint);
+            if (opts.acrValues !== undefined)
+                form.set('acr_values', opts.acrValues);
+            if (opts.userCode !== undefined)
+                form.set('user_code', opts.userCode);
+            if (notificationToken !== undefined)
+                form.set('client_notification_token', notificationToken);
+            const res = await post(cfg.backchannelAuthenticationEndpoint, form);
+            const body = await readJson(res);
+            if (!res.ok)
+                throw providerError(res.status, body);
+            const authReqId = body['auth_req_id'];
+            if (typeof authReqId !== 'string' || authReqId.length === 0) {
+                throw new CibaProviderError(res.status, 'invalid_response', 'auth_req_id missing');
+            }
+            const expiresInSec = positiveInt(body['expires_in'], 'expires_in', res.status);
+            // CIBA Core 7.3: `interval` is optional and defaults to 5 seconds.
+            const intervalSec = body['interval'] === undefined ? 5 : positiveInt(body['interval'], 'interval', res.status);
+            return {
+                authReqId,
+                expiresInSec,
+                intervalSec,
+                startedAt: clock(),
+                delivery,
+                ...(notificationToken !== undefined ? { clientNotificationToken: notificationToken } : {}),
+                request,
+            };
+        },
+        poller(flow) {
+            let intervalMs = flow.intervalSec * 1000;
+            let nextAt = flow.startedAt + intervalMs;
+            const deadline = flow.startedAt + flow.expiresInSec * 1000;
+            let settled;
+            let inflight;
+            let wake;
+            let failures = 0;
+            /** Sleep `ms`, ending early on notify() or on the caller's abort. */
+            async function pause(ms, signal) {
+                let timer;
+                let onAbort;
+                const racers = [
+                    cfg.sleep !== undefined ? cfg.sleep(ms) : new Promise((r) => { timer = setTimeout(r, ms); }),
+                    new Promise((r) => { wake = r; }),
+                ];
+                if (signal !== undefined) {
+                    racers.push(new Promise((r) => { onAbort = () => r(); signal.addEventListener('abort', onAbort, { once: true }); }));
+                }
+                try {
+                    await Promise.race(racers);
+                }
+                finally {
+                    wake = undefined;
+                    if (timer !== undefined)
+                        clearTimeout(timer);
+                    if (signal !== undefined && onAbort !== undefined)
+                        signal.removeEventListener('abort', onAbort);
+                }
+                if (signal?.aborted === true)
+                    throw new Error('ciba: wait aborted');
+            }
+            function backoff() {
+                failures += 1;
+                const delay = Math.min(MAX_BACKOFF_MS, intervalMs * 2 ** Math.min(failures, 6));
+                nextAt = clock() + delay;
+            }
+            async function doPoll(signal) {
+                if (settled !== undefined)
+                    return settled;
+                const wait = nextAt - clock();
+                if (wait > 0)
+                    await pause(wait, signal);
+                if (settled !== undefined)
+                    return settled;
+                if (clock() >= deadline) {
+                    settled = { status: 'expired' };
+                    return settled;
+                }
+                let res;
+                let body;
+                try {
+                    res = await post(cfg.tokenEndpoint, new URLSearchParams({ grant_type: CIBA_GRANT, auth_req_id: flow.authReqId }), signal);
+                    if (res.status >= 500) {
+                        await res.text().catch(() => '');
+                        throw new CibaProviderError(res.status, 'server_error', 'the provider answered with a server error', true);
+                    }
+                    body = await readJson(res);
+                }
+                catch (e) {
+                    if (e instanceof CibaProviderError && e.retryable)
+                        backoff();
+                    throw e;
+                }
+                failures = 0;
+                nextAt = clock() + intervalMs;
+                if (res.ok) {
+                    const at = body['access_token'];
+                    const tt = body['token_type'];
+                    if (typeof at !== 'string' || typeof tt !== 'string') {
+                        throw new CibaProviderError(res.status, 'invalid_response', 'token response lacks access_token / token_type');
+                    }
+                    settled = { status: 'approved', tokens: body };
+                    return settled;
+                }
+                const err = providerError(res.status, body);
+                switch (err.error) {
+                    case 'authorization_pending':
+                        return { status: 'pending', intervalSec: intervalMs / 1000 };
+                    case 'slow_down':
+                        intervalMs += SLOW_DOWN_STEP_SEC * 1000;
+                        nextAt = clock() + intervalMs;
+                        return { status: 'pending', intervalSec: intervalMs / 1000 };
+                    case 'access_denied':
+                        settled = { status: 'denied', error: err.error };
+                        return settled;
+                    case 'expired_token':
+                        settled = { status: 'expired' };
+                        return settled;
+                    default:
+                        throw err;
+                }
+            }
+            const poller = {
+                intervalSec: () => intervalMs / 1000,
+                notify() {
+                    nextAt = clock();
+                    wake?.();
+                },
+                // Concurrent callers share one in-flight request: an approved auth_req_id is single-use at real OPs.
+                poll(opts = {}) {
+                    if (inflight !== undefined)
+                        return inflight;
+                    const p = doPoll(opts.signal).finally(() => {
+                        inflight = undefined;
+                    });
+                    inflight = p;
+                    return p;
+                },
+                async wait(opts = {}) {
+                    let transient = 0;
+                    for (;;) {
+                        if (opts.signal?.aborted === true)
+                            throw new Error('ciba: wait aborted');
+                        try {
+                            const r = await poller.poll(opts.signal !== undefined ? { signal: opts.signal } : {});
+                            transient = 0;
+                            if (r.status !== 'pending')
+                                return r;
+                        }
+                        catch (e) {
+                            if (!(e instanceof CibaProviderError) || !e.retryable || ++transient >= MAX_CONSECUTIVE_TRANSIENT)
+                                throw e;
+                        }
+                    }
+                },
+            };
+            return poller;
+        },
+    };
+}
+/**
+ * Validate a PING callback (CIBA Core 10.2): `Authorization: Bearer <client_notification_token>` and a JSON
+ * body `{ "auth_req_id": ... }`. Returns the `auth_req_id` only when the bearer matches the token sent for
+ * that flow (constant-time comparison); throws otherwise. The callback carries no decision: call
+ * `poller.notify()` and then `poll()` to fetch it.
+ */
+function verifyPingCallback(input, flow) {
+    if (flow.clientNotificationToken === undefined)
+        throw new Error('ciba: flow was not started in ping mode');
+    const m = /^bearer +(\S+)$/i.exec(input.authorization ?? '');
+    if (m === null)
+        throw new Error('ciba: ping callback lacks a bearer token');
+    const digest = (v) => (0, node_crypto_1.createHash)('sha256').update(v).digest();
+    if (!(0, node_crypto_1.timingSafeEqual)(digest(m[1]), digest(flow.clientNotificationToken))) {
+        throw new Error('ciba: ping callback bearer does not match the client_notification_token');
+    }
+    const id = typeof input.body === 'object' && input.body !== null ? input.body['auth_req_id'] : undefined;
+    if (typeof id !== 'string' || id !== flow.authReqId)
+        throw new Error('ciba: ping callback auth_req_id does not match this flow');
+    return id;
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAuJH,gEAEC;AAED,4CA2MC;AAQD,gDAcC;AA1XD,6CAAuE;AACvE,mCAA2F;AAG3F,MAAM,UAAU,GAAG,mCAAmC,CAAC;AACvD,6EAA6E;AAC7E,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAI7B,yFAAyF;AACzF,MAAa,iBAAkB,SAAQ,KAAK;IACjC,KAAK,CAAS;IACd,gBAAgB,CAAqB;IACrC,MAAM,CAAS;IACxB,sHAAsH;IAC7G,SAAS,CAAU;IAC5B,YAAY,MAAc,EAAE,KAAa,EAAE,gBAAyB,EAAE,SAAS,GAAG,KAAK;QACrF,KAAK,CAAC,2BAA2B,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,gBAAgB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7H,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAdD,8CAcC;AA8ED,KAAK,UAAU,QAAQ,CAAC,GAAa;IACnC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,kBAAkB,EAAE,iCAAiC,EAAE,IAAI,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,kBAAkB,EAAE,0CAA0C,CAAC,CAAC;IAC1G,CAAC;IACD,OAAO,MAAiC,CAAC;AAC3C,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,IAA6B;IAClE,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC;IACrF,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,mBAAmB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnG,OAAO,IAAI,iBAAiB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY,EAAE,MAAc;IAC/D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,iBAAiB,CAAC,MAAM,EAAE,kBAAkB,EAAE,GAAG,IAAI,6BAA6B,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,4BAA4B,GAAG,EAAE,CAAC,CAAC,gCAAgC;AACzE,MAAM,4BAA4B,GAAG,IAAI,CAAC;AAC1C,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAEpC,SAAS,aAAa,CAAC,IAAY,EAAE,KAAa,EAAE,aAAsB;IACxE,IAAI,CAAM,CAAC;IACX,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAAC,SAAS,IAAI,qBAAqB,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO;IACpC,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,aAAa;QAAE,OAAO;IACpD,MAAM,IAAI,UAAU,CAAC,SAAS,IAAI,iFAAiF,CAAC,CAAC;AACvH,CAAC;AAED,6GAA6G;AAC7G,SAAgB,0BAA0B;IACxC,OAAO,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,SAAgB,gBAAgB,CAAC,GAAqB;IACpD,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC;IACnC,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAClC,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,kBAAkB,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,2CAA2C,CAAC,CAAC;IACrH,aAAa,CAAC,mCAAmC,EAAE,GAAG,CAAC,iCAAiC,EAAE,GAAG,CAAC,iBAAiB,KAAK,IAAI,CAAC,CAAC;IAC1H,aAAa,CAAC,eAAe,EAAE,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,iBAAiB,KAAK,IAAI,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IAEvI,0FAA0F;IAC1F,KAAK,UAAU,IAAI,CAAC,GAAW,EAAE,IAAqB,EAAE,MAAoB;QAC1E,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACpE,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACrD,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,GAAG,EAAE;gBACxB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,cAAc,EAAE,mCAAmC,EAAE,MAAM,EAAE,kBAAkB,EAAE;gBAClH,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;gBACrB,MAAM,EAAE,EAAE,CAAC,MAAM;aAClB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,MAAM,KAAK,SAAS,IAAK,MAAsB,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACnG,MAAM,IAAI,iBAAiB,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;QAC3G,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,GAAG,EAAE;YAC9B,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;YACrG,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,UAAU,CAAC,yFAAyF,CAAC,CAAC;YAClH,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC;YACzC,MAAM,iBAAiB,GAAG,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,IAAI,0BAA0B,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3H,IACE,IAAI,CAAC,uBAAuB,KAAK,SAAS;gBAC1C,CAAC,IAAI,CAAC,uBAAuB,CAAC,MAAM,GAAG,4BAA4B;oBACjE,IAAI,CAAC,uBAAuB,CAAC,MAAM,GAAG,4BAA4B;oBAClE,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,EACvD,CAAC;gBACD,MAAM,IAAI,UAAU,CAClB,yCAAyC,MAAM,CAAC,4BAA4B,CAAC,KAAK,MAAM,CAAC,4BAA4B,CAAC,oDAAoD,CAC3K,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,IAAA,yBAAiB,EAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAChD,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;gBAC/B,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,eAAe,EAAE,OAAO,CAAC,eAAe;gBACxC,gBAAgB,EAAE,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC;aACnD,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;gBAAE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACzE,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS;gBAAE,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;YACzF,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;gBAAE,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YAChF,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;gBAAE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACzE,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;gBAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtE,IAAI,iBAAiB,KAAK,SAAS;gBAAE,IAAI,CAAC,GAAG,CAAC,2BAA2B,EAAE,iBAAiB,CAAC,CAAC;YAC9F,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,iCAAiC,EAAE,IAAI,CAAC,CAAC;YACpE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACnD,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;YACtC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5D,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,kBAAkB,EAAE,qBAAqB,CAAC,CAAC;YACrF,CAAC;YACD,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YAC/E,mEAAmE;YACnE,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YAC/G,OAAO;gBACL,SAAS;gBACT,YAAY;gBACZ,WAAW;gBACX,SAAS,EAAE,KAAK,EAAE;gBAClB,QAAQ;gBACR,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1F,OAAO;aACR,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,IAAI;YACT,IAAI,UAAU,GAAG,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACzC,IAAI,MAAM,GAAG,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC;YACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YAC3D,IAAI,OAAmE,CAAC;YACxE,IAAI,QAA6C,CAAC;YAClD,IAAI,IAA8B,CAAC;YACnC,IAAI,QAAQ,GAAG,CAAC,CAAC;YAEjB,qEAAqE;YACrE,KAAK,UAAU,KAAK,CAAC,EAAU,EAAE,MAAoB;gBACnD,IAAI,KAAgD,CAAC;gBACrD,IAAI,OAAiC,CAAC;gBACtC,MAAM,MAAM,GAAoB;oBAC9B,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,GAAG,KAAK,GAAG,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;oBAClG,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;iBACxC,CAAC;gBACF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,GAAG,OAAO,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7H,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC7B,CAAC;wBAAS,CAAC;oBACT,IAAI,GAAG,SAAS,CAAC;oBACjB,IAAI,KAAK,KAAK,SAAS;wBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;oBAC7C,IAAI,MAAM,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS;wBAAE,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAClG,CAAC;gBACD,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACtE,CAAC;YAED,SAAS,OAAO;gBACd,QAAQ,IAAI,CAAC,CAAC;gBACd,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,UAAU,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;gBAChF,MAAM,GAAG,KAAK,EAAE,GAAG,KAAK,CAAC;YAC3B,CAAC;YAED,KAAK,UAAU,MAAM,CAAC,MAAoB;gBACxC,IAAI,OAAO,KAAK,SAAS;oBAAE,OAAO,OAAO,CAAC;gBAC1C,MAAM,IAAI,GAAG,MAAM,GAAG,KAAK,EAAE,CAAC;gBAC9B,IAAI,IAAI,GAAG,CAAC;oBAAE,MAAM,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACxC,IAAI,OAAO,KAAK,SAAS;oBAAE,OAAO,OAAO,CAAC;gBAC1C,IAAI,KAAK,EAAE,IAAI,QAAQ,EAAE,CAAC;oBACxB,OAAO,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;oBAChC,OAAO,OAAO,CAAC;gBACjB,CAAC;gBACD,IAAI,GAAa,CAAC;gBAClB,IAAI,IAA6B,CAAC;gBAClC,IAAI,CAAC;oBACH,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,eAAe,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;oBAC1H,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;wBACtB,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;wBACjC,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,2CAA2C,EAAE,IAAI,CAAC,CAAC;oBAC7G,CAAC;oBACD,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC7B,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,IAAI,CAAC,YAAY,iBAAiB,IAAI,CAAC,CAAC,SAAS;wBAAE,OAAO,EAAE,CAAC;oBAC7D,MAAM,CAAC,CAAC;gBACV,CAAC;gBACD,QAAQ,GAAG,CAAC,CAAC;gBACb,MAAM,GAAG,KAAK,EAAE,GAAG,UAAU,CAAC;gBAC9B,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;oBACX,MAAM,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;oBAChC,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;oBAC9B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;wBACrD,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,kBAAkB,EAAE,gDAAgD,CAAC,CAAC;oBAChH,CAAC;oBACD,OAAO,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAoC,EAAE,CAAC;oBAC/E,OAAO,OAAO,CAAC;gBACjB,CAAC;gBACD,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBAC5C,QAAQ,GAAG,CAAC,KAAK,EAAE,CAAC;oBAClB,KAAK,uBAAuB;wBAC1B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,GAAG,IAAI,EAAE,CAAC;oBAC/D,KAAK,WAAW;wBACd,UAAU,IAAI,kBAAkB,GAAG,IAAI,CAAC;wBACxC,MAAM,GAAG,KAAK,EAAE,GAAG,UAAU,CAAC;wBAC9B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,GAAG,IAAI,EAAE,CAAC;oBAC/D,KAAK,eAAe;wBAClB,OAAO,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;wBACjD,OAAO,OAAO,CAAC;oBACjB,KAAK,eAAe;wBAClB,OAAO,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;wBAChC,OAAO,OAAO,CAAC;oBACjB;wBACE,MAAM,GAAG,CAAC;gBACd,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAe;gBACzB,WAAW,EAAE,GAAG,EAAE,CAAC,UAAU,GAAG,IAAI;gBACpC,MAAM;oBACJ,MAAM,GAAG,KAAK,EAAE,CAAC;oBACjB,IAAI,EAAE,EAAE,CAAC;gBACX,CAAC;gBACD,qGAAqG;gBACrG,IAAI,CAAC,IAAI,GAAG,EAAE;oBACZ,IAAI,QAAQ,KAAK,SAAS;wBAAE,OAAO,QAAQ,CAAC;oBAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;wBACzC,QAAQ,GAAG,SAAS,CAAC;oBACvB,CAAC,CAAC,CAAC;oBACH,QAAQ,GAAG,CAAC,CAAC;oBACb,OAAO,CAAC,CAAC;gBACX,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE;oBAClB,IAAI,SAAS,GAAG,CAAC,CAAC;oBAClB,SAAS,CAAC;wBACR,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI;4BAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;wBACzE,IAAI,CAAC;4BACH,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;4BACtF,SAAS,GAAG,CAAC,CAAC;4BACd,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;gCAAE,OAAO,CAAC,CAAC;wBACvC,CAAC;wBAAC,OAAO,CAAC,EAAE,CAAC;4BACX,IAAI,CAAC,CAAC,CAAC,YAAY,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,SAAS,IAAI,yBAAyB;gCAAE,MAAM,CAAC,CAAC;wBAC7G,CAAC;oBACH,CAAC;gBACH,CAAC;aACF,CAAC;YACF,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,kBAAkB,CAChC,KAA2D,EAC3D,IAA6D;IAE7D,IAAI,IAAI,CAAC,uBAAuB,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC3G,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACtE,IAAI,CAAC,IAAA,6BAAe,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAW,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,EAAE,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAE,KAAK,CAAC,IAAgC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtI,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IACjI,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/index.d.ts

@@ -53,16 +53,66 @@ export interface CibaAuthRequest {
 }
 /** Options shared by `toCibaAuthRequest` and the broker's `start`. */
 export interface CibaRequestOptions {
-    /** Override the `requested_expiry` (seconds). Default 300. */
+    /** Override the `requested_expiry` (seconds). Must be a positive integer (CIBA Core 7.1). Default 300. */
     expiresInSec?: number;
+    /**
+     * Use this `auth_req_id` instead of the deterministic derivation. CIBA Core 7.3 requires an
+     * `auth_req_id` to carry at least 128 bits of entropy and use only `A-Za-z0-9.-_`; the default
+     * derivation hashes PUBLIC step-up fields and is therefore NOT secret. {@link createCibaBroker}
+     * always supplies a fresh random value here.
+     */
+    authReqId?: string;
+    /**
+     * Include the per-verb step-up scope `urn:atlas:pca:stepup:<verb>` next to `openid`. Default `true`.
+     * Real providers reject scopes that are not registered for the client (Keycloak answers `invalid_scope`),
+     * and per-verb scopes are open-ended, so set `false` when the OP has no such scope; the verb is then
+     * carried by the `binding_message` alone.
+     */
+    stepUpScope?: boolean;
     /** CIBA `login_hint` for the OP: the identifier of the human to notify. */
     loginHint?: string;
+    /**
+     * Constrain the `binding_message` for providers that restrict it. CIBA Core 7.1 only says the message
+     * SHOULD be short and plain text; real providers enforce more (Keycloak 26.8 accepts at most 50
+     * characters from a narrow ASCII set and rejects spaces, `$`, `:`, `,`, `(`, `)` and `@` with
+     * `invalid_binding_message`). With `tokenOnly` the message is rendered as hyphen-joined tokens using only
+     * `A-Za-z0-9._-` (for example `Approve-stripe.payout-80-USD-acct-1`), cut at `maxChars` on a token
+     * boundary. Default: the rich one-line form, unchanged.
+     */
+    bindingMessage?: {
+        maxChars?: number;
+        tokenOnly?: boolean;
+    };
+    /** CIBA `interval` (seconds, positive integer): minimum poll spacing the OP/broker enforces. Default 5. */
+    interval?: number;
     /**
      * The agent's human-facing name used in the binding message ("because you asked <actsFor> to …"),
      * e.g. `"support-bot"`. Default `"your agent"`.
      */
     actsFor?: string;
 }
+/**
+ * R3-05: the approval message is rendered ONLY from this canonical, fixed-order structure. Anything in the
+ * step-up that is not part of it is not shown, so it is REFUSED: the person must never approve something the
+ * message does not display.
+ */
+export interface CibaAction {
+    verb: string;
+    /** Plain non-negative decimal, shown in full. Present together with `currency` and `payee`. */
+    amount?: string;
+    /** 3-letter currency code, upper-cased; always shown next to the amount. */
+    currency?: string;
+    /** Who receives the value. Required whenever `amount` is present. */
+    payee?: string;
+    resource: string;
+}
+/** Plain-ASCII rendering of a payee: itself when ASCII, else the punycode of each word (or \u escapes when IDNA refuses). */
+export declare function asciiForm(payee: string): string;
+/**
+ * Build the canonical action from a step-up. Fail loud (R3-05): unknown `params` keys, a nested or malformed amount,
+ * a missing currency or payee next to an amount, two different payee fields, and non-identifier verb / resource all throw.
+ */
+export declare function cibaActionFromStepUp(stepUp: StepUpRequest): CibaAction;
 /**
  * Map a PCA {@link StepUpRequest} to a {@link CibaAuthRequest}. Pure: derives a stable `auth_req_id`
  * from the step-up id, renders the `binding_message`, and carries the scope / expiry / poll interval.
@@ -97,6 +147,19 @@ export interface CibaBrokerOptions {
      */
     onComplete?: (session: CibaSession) => void;
 }
+/**
+ * What a CIBA token request (CIBA Core 10.1 / 11) gets back from the broker: `ok` exactly once on
+ * approval; otherwise the OAuth `error` the token endpoint must return. After `slow_down`, `interval`
+ * is the new minimum spacing in seconds (the old one plus 5, CIBA Core 11).
+ */
+export type CibaTokenOutcome = {
+    ok: true;
+    session: CibaSession;
+} | {
+    ok: false;
+    error: 'authorization_pending' | 'slow_down' | 'access_denied' | 'expired_token' | 'invalid_grant';
+    interval: number;
+};
 /** The in-memory CIBA broker returned by {@link createCibaBroker}. */
 export interface CibaBroker {
     /** Begin a backchannel flow for a step-up; returns the CIBA auth request (status starts `pending`). */
@@ -105,6 +168,13 @@ export interface CibaBroker {
     poll(auth_req_id: string): {
         status: CibaStatus;
     };
+    /**
+     * Token-endpoint semantics for POLL mode (CIBA Core 11): enforces the poll `interval` (a request that
+     * arrives sooner than `interval` seconds after the previous one gets `slow_down` and the interval grows
+     * by 5 s), and makes a successful approval single-use (a replayed `auth_req_id` gets `invalid_grant`).
+     * Unlike {@link CibaBroker.poll}, which is a side-effect-free status read.
+     */
+    token(auth_req_id: string): CibaTokenOutcome;
     /** The human acts out-of-band: approve or deny. Fires `onComplete` (PING/PUSH) if configured. */
     resolve(auth_req_id: string, decision: 'approve' | 'deny', by: string): CibaSession;
     /** Read a full session snapshot (status computed at read time), or `undefined` if unknown. */
@@ -145,3 +215,4 @@ export interface CibaCosignResult {
 export declare function cibaDecisionToCosign(decision: 'approve' | 'deny', budget: TrustBudget, policy: RiskPolicy, now: number, opts?: {
     full?: boolean;
 }): CibaCosignResult;
+export * from './client';

package/dist/index.js

@@ -26,41 +26,227 @@
  * Everything here is pure or in-memory and authorises nothing on its own: the resource server's verifier
  * (`requirePCA` / the adjudicator) and the FROST cosigners remain the run-time authority.
  */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.asciiForm = asciiForm;
+exports.cibaActionFromStepUp = cibaActionFromStepUp;
 exports.toCibaAuthRequest = toCibaAuthRequest;
 exports.createCibaBroker = createCibaBroker;
 exports.requiresCiba = requiresCiba;
 exports.cibaDecisionToCosign = cibaDecisionToCosign;
+const node_crypto_1 = require("node:crypto");
+const node_url_1 = require("node:url");
 const pca_1 = require("@atlasauth/pca");
 const DEFAULT_EXPIRY_SEC = 300;
 const DEFAULT_INTERVAL_SEC = 5;
-/** A short "$480" / "480 EUR" fragment from a step-up's params, or "" when there's no amount. */
-function amountFragment(params) {
-    if (!params)
-        return '';
-    const amt = params['amount'];
-    if (typeof amt !== 'number' || !Number.isFinite(amt))
-        return '';
-    const cur = params['currency'];
-    if (typeof cur === 'string' && cur.length > 0 && cur.toLowerCase() !== 'usd') {
-        return ` ${amt} ${cur.toUpperCase()}`;
+/** CIBA Core 7.3: `auth_req_id` characters are restricted to A-Z a-z 0-9 . - _ . */
+const AUTH_REQ_ID_RE = /^[A-Za-z0-9._-]+$/;
+/** 128 bits of base64url is 22 characters; reject anything shorter (CIBA Core 7.3). */
+const MIN_AUTH_REQ_ID_LEN = 22;
+/** RFC 6749 3.3 `scope-token`: %x21 / %x23-5B / %x5D-7E. */
+const SCOPE_TOKEN_RE = /^[\x21\x23-\x5B\x5D-\x7E]+$/;
+/** The goal text is free-form (agent / user supplied); cap what is shown to a person on a small screen. */
+const MAX_GOAL_CHARS = 100;
+/**
+ * Make untrusted text safe for a one-line, plain-text approval prompt (CIBA Core 7.1: `binding_message`
+ * SHOULD be short and use a limited set of plain-text characters): control characters, line breaks and
+ * bidi / zero-width formatting characters become spaces, runs of whitespace collapse.
+ */
+function plainText(value) {
+    return value
+        .replace(/[\p{Cc}\p{Cf}\u2028\u2029]/gu, ' ')
+        .replace(/\s+/gu, ' ')
+        .trim();
+}
+function clip(value, max) {
+    const chars = Array.from(value);
+    return chars.length <= max ? value : `${chars.slice(0, max - 1).join('')}…`;
+}
+const FORGED_CLAUSE_RE = /because\s+you\s+asked/i;
+/** Keys of `params` the renderer displays. Every other key makes the request unrenderable. */
+const PAYEE_KEYS = ['payee', 'to', 'recipient', 'beneficiary', 'destination'];
+const DISPLAYED_PARAM_KEYS = new Set(['amount', 'currency', ...PAYEE_KEYS]);
+/** verb / resource are identifiers, never free text: this class cannot hold quotes, spaces, bidi or control characters. */
+const IDENT_RE = /^[A-Za-z0-9][A-Za-z0-9._:/#@+-]{0,63}$/;
+const MAX_PAYEE_CHARS = 64;
+/** Control, format (bidi, zero-width, joiners), line/paragraph separators, specials and unpaired surrogates. */
+const UNDISPLAYABLE_RE = /[\p{Cc}\p{Cf}\p{Cs}\p{Co}\p{Cn}\u2028\u2029\uFFF9-\uFFFD]/u;
+function identifier(value, what) {
+    if (typeof value !== 'string' || !IDENT_RE.test(value)) {
+        throw new RangeError(`ciba: the step-up ${what} must be a plain identifier (letters, digits and . _ : / # @ + -, at most 64 characters); refusing to render free text in the approval message`);
+    }
+    if (FORGED_CLAUSE_RE.test(value))
+        throw new RangeError(`ciba: the step-up ${what} contains an approval-explanation clause`);
+    return value;
+}
+function payeeText(value) {
+    if (typeof value !== 'string')
+        throw new RangeError('ciba: the payee must be a string (a nested value cannot be shown to the approver)');
+    const t = value.normalize('NFC');
+    if (t.length === 0 || t.trim() !== t || /\s{2,}/u.test(t))
+        throw new RangeError('ciba: the payee must be non-empty without leading, trailing or repeated whitespace');
+    if (UNDISPLAYABLE_RE.test(t) || /[\r\n\t]/.test(t))
+        throw new RangeError('ciba: the payee contains control, bidirectional or invisible characters and cannot be displayed');
+    if (/["\\]/.test(t))
+        throw new RangeError('ciba: the payee must not contain quote or backslash characters');
+    if (Array.from(t).length > MAX_PAYEE_CHARS)
+        throw new RangeError(`ciba: the payee is longer than ${String(MAX_PAYEE_CHARS)} characters; refusing to truncate what the person approves`);
+    if (FORGED_CLAUSE_RE.test(t))
+        throw new RangeError('ciba: the payee contains an approval-explanation clause');
+    // R4-13 lookalikes. NFC already composed what can be composed, so any combining mark left is a stacked/decorative one;
+    // compatibility forms (fullwidth, ligatures, circled letters) differ from their plain look-alike under NFKC; and a payee
+    // that mixes scripts ("Pаypal", Cyrillic а) is the classic homograph. All are refused. A payee in ONE non-Latin script is
+    // legitimate, so it is allowed but rendered WITH its ASCII form (see `asciiForm`) so a whole-script look-alike
+    // ("аррlе" in Cyrillic) is never shown as just the text it imitates.
+    if (/\p{M}/u.test(t))
+        throw new RangeError('ciba: the payee contains combining marks and cannot be shown unambiguously');
+    if (t.normalize('NFKC') !== t)
+        throw new RangeError('ciba: the payee contains compatibility/fullwidth characters that imitate plain ones');
+    if (scriptsOf(t).size > 1)
+        throw new RangeError('ciba: the payee mixes writing systems (a homograph risk); refusing so the person never approves a look-alike');
+    return t;
+}
+/** Writing-system groups present in `t` (letters only; digits, punctuation and spaces are script-neutral). */
+const SCRIPT_GROUPS = [
+    ['latin', /\p{Script=Latin}/u],
+    ['cyrillic', /\p{Script=Cyrillic}/u],
+    ['greek', /\p{Script=Greek}/u],
+    ['armenian', /\p{Script=Armenian}/u],
+    ['hebrew', /\p{Script=Hebrew}/u],
+    ['arabic', /\p{Script=Arabic}/u],
+    ['cjk', /[\p{Script=Han}\p{Script=Hiragana}\p{Script=Katakana}\p{Script=Hangul}\p{Script=Bopomofo}]/u],
+    ['indic-thai', /[\p{Script=Devanagari}\p{Script=Bengali}\p{Script=Tamil}\p{Script=Thai}\p{Script=Georgian}]/u],
+];
+function scriptsOf(t) {
+    const found = new Set();
+    for (const ch of t) {
+        if (!/\p{L}/u.test(ch))
+            continue;
+        const g = SCRIPT_GROUPS.find(([, re]) => re.test(ch));
+        found.add(g ? g[0] : 'other:' + ch);
+    }
+    return found;
+}
+/** Plain-ASCII rendering of a payee: itself when ASCII, else the punycode of each word (or \u escapes when IDNA refuses). */
+function asciiForm(payee) {
+    if (/^[\x20-\x7E]*$/.test(payee))
+        return payee;
+    return payee
+        .split(' ')
+        .map((w) => (/^[\x20-\x7E]*$/.test(w) ? w : (0, node_url_1.domainToASCII)(w) || Array.from(w, (c) => (c.codePointAt(0) > 0x7e ? `\\u{${c.codePointAt(0).toString(16)}}` : c)).join('')))
+        .join(' ');
+}
+/**
+ * Build the canonical action from a step-up. Fail loud (R3-05): unknown `params` keys, a nested or malformed amount,
+ * a missing currency or payee next to an amount, two different payee fields, and non-identifier verb / resource all throw.
+ */
+function cibaActionFromStepUp(stepUp) {
+    const params = (stepUp.params ?? {});
+    if (params === null || typeof params !== 'object' || Array.isArray(params))
+        throw new RangeError('ciba: step-up params must be an object');
+    const unknown = Object.keys(params).filter((k) => !DISPLAYED_PARAM_KEYS.has(k) && params[k] !== undefined);
+    if (unknown.length > 0) {
+        throw new RangeError(`ciba: step-up params field(s) ${unknown.join(', ')} are not displayed in the approval message (displayable: amount, currency, ${PAYEE_KEYS.join('/')}); refusing so the person never approves a hidden field`);
+    }
+    const present = (v) => v !== undefined && v !== null;
+    const action = { verb: identifier(stepUp.verb, 'verb'), resource: identifier(stepUp.resource, 'resource') };
+    const payeeKeys = PAYEE_KEYS.filter((k) => present(params[k]));
+    if (payeeKeys.length > 1)
+        throw new RangeError(`ciba: more than one payee field (${payeeKeys.join(', ')}) in params; the approver would see only one`);
+    const hasAmount = present(params['amount']);
+    if (hasAmount) {
+        const amt = params['amount'];
+        const text = typeof amt === 'number' && Number.isFinite(amt) ? String(amt) : typeof amt === 'string' ? amt : '';
+        if (!PLAIN_AMOUNT_RE.test(text))
+            throw new RangeError('ciba: the binding message needs a plain non-negative decimal amount (no sign or exponent)');
+        const cur = params['currency'];
+        if (typeof cur !== 'string' || !CURRENCY_RE.test(cur))
+            throw new RangeError('ciba: the binding message needs a 3-letter currency code next to the amount');
+        if (payeeKeys.length === 0)
+            throw new RangeError('ciba: an amount needs a payee (payee / to / recipient / beneficiary / destination) so the approver sees who receives it');
+        action.amount = text;
+        action.currency = cur.toUpperCase();
     }
-    return ` $${amt}`;
+    else if (present(params['currency'])) {
+        throw new RangeError('ciba: a currency without an amount cannot be displayed');
+    }
+    if (payeeKeys.length === 1)
+        action.payee = payeeText(params[payeeKeys[0]]);
+    return action;
 }
+/** A plain non-negative decimal: no sign, no exponent, no leading junk. */
+const PLAIN_AMOUNT_RE = /^(?:0|[1-9][0-9]*)(?:\.[0-9]+)?$/;
+const CURRENCY_RE = /^[A-Za-z]{3}$/;
 /**
- * Build the CIBA `binding_message`: the one-line human-readable approval context. Combines the
- * verb + optional amount + resource with the goal-lineage ("because you asked <agent> to '<goal>'").
- * Falls back to the salted goal commitment when the plaintext goal isn't carried on the step-up, so
- * lineage is always present.
+ * Build the CIBA `binding_message`: the one-line human-readable approval context, in the FIXED order
+ * `Approve <verb> <amount> <CUR> to "<payee>" on <resource>`. The head is built from the canonical action and is NEVER
+ * truncated; only the optional goal-lineage clause ("because you asked <agent> to '<goal>'") may shrink or drop to fit
+ * `maxChars`. If the head alone does not fit, throw. Falls back to the salted goal commitment when the plaintext goal
+ * isn't carried on the step-up.
  */
-function bindingMessage(stepUp, actsFor) {
-    const head = `Approve ${stepUp.verb}${amountFragment(stepUp.params)} on ${stepUp.resource}`;
-    const goalText = stepUp.goal !== undefined && stepUp.goal.length > 0
-        ? stepUp.goal
+function bindingMessage(stepUp, actsFor, maxChars) {
+    const a = cibaActionFromStepUp(stepUp);
+    const head = `Approve ${a.verb}` +
+        (a.amount !== undefined ? ` ${a.amount} ${a.currency}` : '') +
+        (a.payee !== undefined ? ` to "${a.payee}"${/^[\x20-\x7E]*$/.test(a.payee) ? '' : ` [non-ASCII name; ASCII form: ${asciiForm(a.payee)}]`}` : '') +
+        ` on ${a.resource}`;
+    const limit = maxChars ?? Infinity;
+    if (Array.from(head).length > limit) {
+        throw new RangeError(`ciba: the binding message needs ${String(Array.from(head).length)} characters but bindingMessage.maxChars is ${String(maxChars)}; refusing to truncate what the person approves`);
+    }
+    const plainGoal = stepUp.goal !== undefined ? plainText(stepUp.goal).replace(/['\u2018\u2019]/g, '\u2032') : '';
+    const goalText = plainGoal.length > 0
+        ? clip(plainGoal, MAX_GOAL_CHARS)
         : stepUp.goalCommit.length > 0
             ? `goal ${stepUp.goalCommit.slice(0, 10)}…`
             : undefined;
-    return goalText === undefined ? head : `${head} — because you asked ${actsFor} to '${goalText}'`;
+    if (goalText === undefined)
+        return head;
+    const prefix = ` — because you asked ${actsFor} to '`;
+    const room = limit - Array.from(head + prefix).length - 1;
+    if (room >= Array.from(goalText).length)
+        return `${head}${prefix}${goalText}'`;
+    if (room >= 8)
+        return `${head}${prefix}${clip(goalText, room)}'`;
+    return head;
+}
+function tokenise(value) {
+    return value.replace(/[^A-Za-z0-9._-]+/g, '-').replace(/-{2,}/g, '-').replace(/^[-.]+|[-.]+$/g, '');
+}
+/**
+ * The compact, provider-safe rendering used by `bindingMessage: { tokenOnly: true }`, same fixed order:
+ * `Approve-<verb>-<amount>-<CUR>-to-<payee>-<resource>`. The message is the human's only view of what they approve,
+ * so it is all-or-nothing: the same canonical action as the rich form, a payee that is not plain ASCII (tokenising
+ * would silently drop characters) or a limit that would cut any field throws instead of sending a different message.
+ */
+function compactBindingMessage(stepUp, maxChars) {
+    const a = cibaActionFromStepUp(stepUp);
+    if (a.payee !== undefined && !/^[\x20-\x7E]+$/.test(a.payee)) {
+        throw new RangeError('ciba: tokenOnly binding message needs an ASCII payee (tokenising would drop characters the person must see)');
+    }
+    const raw = ['Approve', a.verb, ...(a.amount !== undefined ? [a.amount, a.currency] : []), ...(a.payee !== undefined ? ['to', a.payee] : []), a.resource];
+    const parts = raw.map(tokenise);
+    if (parts.some((p) => p.length === 0)) {
+        throw new RangeError('ciba: tokenOnly binding message cannot represent the verb, payee or resource');
+    }
+    const out = parts.join('-');
+    if (out.length > maxChars) {
+        throw new RangeError(`ciba: the binding message needs ${String(out.length)} characters but bindingMessage.maxChars is ${String(maxChars)}; refusing to truncate what the person approves`);
+    }
+    return out;
 }
 /**
  * Map a PCA {@link StepUpRequest} to a {@link CibaAuthRequest}. Pure: derives a stable `auth_req_id`
@@ -68,14 +254,39 @@ function bindingMessage(stepUp, actsFor) {
  * Does not start a flow or notify anyone — that's the broker.
  */
 function toCibaAuthRequest(stepUp, opts = {}) {
-    const actsFor = opts.actsFor !== undefined && opts.actsFor.length > 0 ? opts.actsFor : 'your agent';
-    const auth_req_id = (0, pca_1.hashCanonical)({ d: 'atlas-pca/ciba/auth_req_id/v1', stepUp: stepUp.id });
+    const actsFor = opts.actsFor !== undefined && plainText(opts.actsFor).length > 0 ? clip(plainText(opts.actsFor), 40) : 'your agent';
+    const requestedExpiry = opts.expiresInSec !== undefined ? opts.expiresInSec : DEFAULT_EXPIRY_SEC;
+    if (!Number.isSafeInteger(requestedExpiry) || requestedExpiry <= 0) {
+        throw new RangeError(`ciba: requested_expiry must be a positive integer number of seconds, got ${String(requestedExpiry)}`);
+    }
+    // The verb is spliced into ONE scope-token. A space in it would otherwise smuggle in extra scope tokens.
+    const stepUpScope = `urn:atlas:pca:stepup:${stepUp.verb}`;
+    if (!SCOPE_TOKEN_RE.test(stepUpScope)) {
+        throw new RangeError('ciba: the step-up verb cannot be carried as an OAuth scope-token (RFC 6749 3.3)');
+    }
+    const scope = opts.stepUpScope === false ? 'openid' : `openid ${stepUpScope}`;
+    const interval = opts.interval !== undefined ? opts.interval : DEFAULT_INTERVAL_SEC;
+    if (!Number.isSafeInteger(interval) || interval <= 0) {
+        throw new RangeError(`ciba: interval must be a positive integer number of seconds, got ${String(interval)}`);
+    }
+    const auth_req_id = opts.authReqId ?? (0, pca_1.hashCanonical)({ d: 'atlas-pca/ciba/auth_req_id/v1', stepUp: stepUp.id });
+    if (!AUTH_REQ_ID_RE.test(auth_req_id) || auth_req_id.length < MIN_AUTH_REQ_ID_LEN || auth_req_id.length > 1024) {
+        throw new RangeError('ciba: auth_req_id must use only A-Za-z0-9.-_ and be 22..1024 characters (CIBA Core 7.3)');
+    }
+    const bm = opts.bindingMessage;
+    if (bm?.maxChars !== undefined && (!Number.isSafeInteger(bm.maxChars) || bm.maxChars < 1)) {
+        throw new RangeError('ciba: bindingMessage.maxChars must be a positive integer');
+    }
+    const maxChars = bm?.maxChars ?? 50;
+    const binding_message = bm?.tokenOnly === true
+        ? compactBindingMessage(stepUp, maxChars)
+        : bindingMessage(stepUp, actsFor, bm?.maxChars);
     return {
         auth_req_id,
-        binding_message: bindingMessage(stepUp, actsFor),
-        scope: `openid urn:atlas:pca:stepup:${stepUp.verb}`,
-        requested_expiry: opts.expiresInSec !== undefined ? opts.expiresInSec : DEFAULT_EXPIRY_SEC,
-        interval: DEFAULT_INTERVAL_SEC,
+        binding_message,
+        scope,
+        requested_expiry: requestedExpiry,
+        interval,
         ...(opts.loginHint !== undefined ? { login_hint: opts.loginHint } : {}),
         stepUpId: stepUp.id,
         tier: stepUp.tier,
@@ -112,16 +323,30 @@ function snapshot(s, now) {
 function createCibaBroker(opts = {}) {
     const clock = opts.now ?? Date.now;
     const sessions = new Map();
+    /** step-up id -> the auth_req_id of its live (pending or approved) flow, so a repeated `start` is idempotent. */
+    const liveByStepUp = new Map();
     return {
         start(stepUp, reqOpts) {
-            const request = toCibaAuthRequest(stepUp, reqOpts);
-            const createdAt = clock();
+            const now = clock();
+            const existingId = liveByStepUp.get(stepUp.id);
+            const existing = existingId !== undefined ? sessions.get(existingId) : undefined;
+            if (existing !== undefined) {
+                const st = effectiveStatus(existing, now);
+                // Never reset a flow that is still waiting or already approved: that would silently discard a decision.
+                if (st === 'pending' || st === 'approved')
+                    return existing.request;
+            }
+            // CIBA Core 7.3: an unguessable auth_req_id (160 random bits, base64url) per flow.
+            const request = toCibaAuthRequest(stepUp, { ...reqOpts, authReqId: (0, node_crypto_1.randomBytes)(20).toString('base64url') });
+            const createdAt = now;
             const stored = {
                 request,
                 createdAt,
                 expiresAt: createdAt + request.requested_expiry * 1000,
+                interval: request.interval,
             };
             sessions.set(request.auth_req_id, stored);
+            liveByStepUp.set(stepUp.id, request.auth_req_id);
             return request;
         },
         poll(auth_req_id) {
@@ -130,6 +355,29 @@ function createCibaBroker(opts = {}) {
                 throw new Error(`ciba: unknown auth_req_id ${auth_req_id}`);
             return { status: effectiveStatus(s, clock()) };
         },
+        token(auth_req_id) {
+            const s = sessions.get(auth_req_id);
+            if (!s)
+                return { ok: false, error: 'invalid_grant', interval: DEFAULT_INTERVAL_SEC };
+            const now = clock();
+            if (s.consumed)
+                return { ok: false, error: 'invalid_grant', interval: s.interval };
+            const tooSoon = s.lastPollAt !== undefined && now - s.lastPollAt < s.interval * 1000;
+            s.lastPollAt = now;
+            if (tooSoon) {
+                s.interval += 5;
+                return { ok: false, error: 'slow_down', interval: s.interval };
+            }
+            const st = effectiveStatus(s, now);
+            if (st === 'pending')
+                return { ok: false, error: 'authorization_pending', interval: s.interval };
+            if (st === 'denied')
+                return { ok: false, error: 'access_denied', interval: s.interval };
+            if (st === 'expired')
+                return { ok: false, error: 'expired_token', interval: s.interval };
+            s.consumed = true;
+            return { ok: true, session: snapshot(s, now) };
+        },
         resolve(auth_req_id, decision, by) {
             const s = sessions.get(auth_req_id);
             if (!s)
@@ -178,4 +426,5 @@ function cibaDecisionToCosign(decision, budget, policy, now, opts = {}) {
         return { budget: (0, pca_1.applyCosign)(budget, policy, now, opts), cosigned: true };
     return { budget, cosigned: false };
 }
+__exportStar(require("./client"), exports);
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;;AAyFH,8CAaC;AAmFD,4CAyCC;AAUD,oCAEC;AAoBD,oDASC;AAzQD,wCAOwB;AA2CxB,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAE/B,iGAAiG;AACjG,SAAS,cAAc,CAAC,MAA+B;IACrD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChE,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAC/B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;QAC7E,OAAO,IAAI,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;IACxC,CAAC;IACD,OAAO,KAAK,GAAG,EAAE,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,MAAqB,EAAE,OAAe;IAC5D,MAAM,IAAI,GAAG,WAAW,MAAM,CAAC,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC5F,MAAM,QAAQ,GACZ,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QACjD,CAAC,CAAC,MAAM,CAAC,IAAI;QACb,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;YAC5B,CAAC,CAAC,QAAQ,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG;YAC3C,CAAC,CAAC,SAAS,CAAC;IAClB,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,wBAAwB,OAAO,QAAQ,QAAQ,GAAG,CAAC;AACnG,CAAC;AAED;;;;GAIG;AACH,SAAgB,iBAAiB,CAAC,MAAqB,EAAE,OAA2B,EAAE;IACpF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;IACpG,MAAM,WAAW,GAAG,IAAA,mBAAa,EAAC,EAAE,CAAC,EAAE,+BAA+B,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7F,OAAO;QACL,WAAW;QACX,eAAe,EAAE,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC;QAChD,KAAK,EAAE,+BAA+B,MAAM,CAAC,IAAI,EAAE;QACnD,gBAAgB,EAAE,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB;QAC1F,QAAQ,EAAE,oBAAoB;QAC9B,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,IAAI,EAAE,MAAM,CAAC,IAAI;KAClB,CAAC;AACJ,CAAC;AAwDD,uGAAuG;AACvG,SAAS,eAAe,CAAC,CAAgB,EAAE,GAAW;IACpD,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAChD,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC;IAC3C,IAAI,GAAG,IAAI,CAAC,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,CAAgB,EAAE,GAAW;IAC7C,OAAO;QACL,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW;QAClC,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,MAAM,EAAE,eAAe,CAAC,CAAC,EAAE,GAAG,CAAC;QAC/B,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,GAAG,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAAC,OAA0B,EAAE;IAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;IAElD,OAAO;QACL,KAAK,CAAC,MAAM,EAAE,OAAO;YACnB,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,SAAS,GAAG,KAAK,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAkB;gBAC5B,OAAO;gBACP,SAAS;gBACT,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI;aACvD,CAAC;YACF,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAC1C,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,WAAW;YACd,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACpC,IAAI,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,WAAW,EAAE,CAAC,CAAC;YACpE,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACjD,CAAC;QACD,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,EAAE;YAC/B,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACpC,IAAI,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,WAAW,EAAE,CAAC,CAAC;YACpE,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,eAAe,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACxC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,wBAAwB,WAAW,cAAc,OAAO,EAAE,CAAC,CAAC;YAC9E,CAAC;YACD,CAAC,CAAC,QAAQ,GAAG,QAAQ,CAAC;YACtB,CAAC,CAAC,SAAS,GAAG,EAAE,CAAC;YACjB,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC;YAClB,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC9B,IAAI,IAAI,CAAC,UAAU;gBAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,GAAG,CAAC,WAAW;YACb,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACpC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9C,CAAC;KACF,CAAC;AACJ,CAAC;AAED,sGAAsG;AAEtG;;;;;GAKG;AACH,SAAgB,YAAY,CAAC,MAAc;IACzC,OAAO,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC;AAChE,CAAC;AAUD;;;;;;;;;GASG;AACH,SAAgB,oBAAoB,CAClC,QAA4B,EAC5B,MAAmB,EACnB,MAAkB,EAClB,GAAW,EACX,OAA2B,EAAE;IAE7B,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,IAAA,iBAAW,EAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACtG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACrC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;;;;;;;;;;;;;;;;AAuLH,8BAMC;AAMD,oDA0BC;AAyED,8CAuCC;AAyGD,4CAwEC;AAUD,oCAEC;AAoBD,oDASC;AAriBD,6CAA0C;AAC1C,uCAAyC;AACzC,wCAOwB;AAoExB,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,oFAAoF;AACpF,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAC3C,uFAAuF;AACvF,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,4DAA4D;AAC5D,MAAM,cAAc,GAAG,6BAA6B,CAAC;AACrD,2GAA2G;AAC3G,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B;;;;GAIG;AACH,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK;SACT,OAAO,CAAC,8BAA8B,EAAE,GAAG,CAAC;SAC5C,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,IAAI,CAAC,KAAa,EAAE,GAAW;IACtC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,OAAO,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC;AAC9E,CAAC;AAED,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;AAkBlD,8FAA8F;AAC9F,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,CAAU,CAAC;AACvF,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC;AACjG,2HAA2H;AAC3H,MAAM,QAAQ,GAAG,wCAAwC,CAAC;AAC1D,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,gHAAgH;AAChH,MAAM,gBAAgB,GAAG,4DAA4D,CAAC;AAEtF,SAAS,UAAU,CAAC,KAAc,EAAE,IAAY;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,UAAU,CAAC,qBAAqB,IAAI,gJAAgJ,CAAC,CAAC;IAClM,CAAC;IACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,qBAAqB,IAAI,0CAA0C,CAAC,CAAC;IAC5H,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,UAAU,CAAC,mFAAmF,CAAC,CAAC;IACzI,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,oFAAoF,CAAC,CAAC;IACtK,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,iGAAiG,CAAC,CAAC;IAC5K,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,gEAAgE,CAAC,CAAC;IAC5G,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,eAAe;QAAE,MAAM,IAAI,UAAU,CAAC,kCAAkC,MAAM,CAAC,eAAe,CAAC,4DAA4D,CAAC,CAAC;IACxL,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,yDAAyD,CAAC,CAAC;IAC9G,uHAAuH;IACvH,yHAAyH;IACzH,0HAA0H;IAC1H,+GAA+G;IAC/G,qEAAqE;IACrE,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,4EAA4E,CAAC,CAAC;IACzH,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,qFAAqF,CAAC,CAAC;IAC3I,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,8GAA8G,CAAC,CAAC;IAChK,OAAO,CAAC,CAAC;AACX,CAAC;AAED,8GAA8G;AAC9G,MAAM,aAAa,GAA2C;IAC5D,CAAC,OAAO,EAAE,mBAAmB,CAAC;IAC9B,CAAC,UAAU,EAAE,sBAAsB,CAAC;IACpC,CAAC,OAAO,EAAE,mBAAmB,CAAC;IAC9B,CAAC,UAAU,EAAE,sBAAsB,CAAC;IACpC,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IAChC,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IAChC,CAAC,KAAK,EAAE,6FAA6F,CAAC;IACtG,CAAC,YAAY,EAAE,8FAA8F,CAAC;CAC/G,CAAC;AACF,SAAS,SAAS,CAAC,CAAS;IAC1B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QACnB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,SAAS;QACjC,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACtD,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6HAA6H;AAC7H,SAAgB,SAAS,CAAC,KAAa;IACrC,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,OAAO,KAAK;SACT,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAA,wBAAa,EAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;SACzK,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAgB,oBAAoB,CAAC,MAAqB;IACxD,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAC;IAChE,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,wCAAwC,CAAC,CAAC;IAC3I,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAC3G,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,UAAU,CAAC,iCAAiC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,8EAA8E,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;IACvO,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,CAAU,EAAW,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,CAAC;IACvE,MAAM,MAAM,GAAe,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;IACxH,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,oCAAoC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IACvJ,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC5C,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAChH,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,2FAA2F,CAAC,CAAC;QACnJ,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;QAC/B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,6EAA6E,CAAC,CAAC;QAC3J,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,yHAAyH,CAAC,CAAC;QAC5K,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,MAAM,CAAC,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IACtC,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,UAAU,CAAC,wDAAwD,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,CAAC,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;IAC5E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,2EAA2E;AAC3E,MAAM,eAAe,GAAG,kCAAkC,CAAC;AAC3D,MAAM,WAAW,GAAG,eAAe,CAAC;AAEpC;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,MAAqB,EAAE,OAAe,EAAE,QAAiB;IAC/E,MAAM,CAAC,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,IAAI,GACR,WAAW,CAAC,CAAC,IAAI,EAAE;QACnB,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iCAAiC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChJ,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtB,MAAM,KAAK,GAAG,QAAQ,IAAI,QAAQ,CAAC;IACnC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QACpC,MAAM,IAAI,UAAU,CAAC,mCAAmC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,8CAA8C,MAAM,CAAC,QAAQ,CAAC,iDAAiD,CAAC,CAAC;IAC1M,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChH,MAAM,QAAQ,GACZ,SAAS,CAAC,MAAM,GAAG,CAAC;QAClB,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC;QACjC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;YAC5B,CAAC,CAAC,QAAQ,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG;YAC3C,CAAC,CAAC,SAAS,CAAC;IAClB,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,MAAM,GAAG,wBAAwB,OAAO,OAAO,CAAC;IACtD,MAAM,IAAI,GAAG,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1D,IAAI,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM;QAAE,OAAO,GAAG,IAAI,GAAG,MAAM,GAAG,QAAQ,GAAG,CAAC;IAC/E,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC;IACjE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAO,KAAK,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;AACtG,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,MAAqB,EAAE,QAAgB;IACpE,MAAM,CAAC,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,UAAU,CAAC,6GAA6G,CAAC,CAAC;IACtI,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC3J,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,UAAU,CAAC,8EAA8E,CAAC,CAAC;IACvG,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,GAAG,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,UAAU,CAClB,mCAAmC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,8CAA8C,MAAM,CAAC,QAAQ,CAAC,iDAAiD,CACrK,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAgB,iBAAiB,CAAC,MAAqB,EAAE,OAA2B,EAAE;IACpF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;IACpI,MAAM,eAAe,GAAG,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC;IACjG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,eAAe,IAAI,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,UAAU,CAAC,4EAA4E,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAC9H,CAAC;IACD,yGAAyG;IACzG,MAAM,WAAW,GAAG,wBAAwB,MAAM,CAAC,IAAI,EAAE,CAAC;IAC1D,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,UAAU,CAAC,iFAAiF,CAAC,CAAC;IAC1G,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,WAAW,EAAE,CAAC;IAC9E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACpF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,UAAU,CAAC,oEAAoE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC/G,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,IAAI,IAAA,mBAAa,EAAC,EAAE,CAAC,EAAE,+BAA+B,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/G,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,mBAAmB,IAAI,WAAW,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QAC/G,MAAM,IAAI,UAAU,CAAC,yFAAyF,CAAC,CAAC;IAClH,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC;IAC/B,IAAI,EAAE,EAAE,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC;QAC1F,MAAM,IAAI,UAAU,CAAC,0DAA0D,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,QAAQ,GAAG,EAAE,EAAE,QAAQ,IAAI,EAAE,CAAC;IACpC,MAAM,eAAe,GACnB,EAAE,EAAE,SAAS,KAAK,IAAI;QACpB,CAAC,CAAC,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC;QACzC,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;IACpD,OAAO;QACL,WAAW;QACX,eAAe;QACf,KAAK;QACL,gBAAgB,EAAE,eAAe;QACjC,QAAQ;QACR,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,IAAI,EAAE,MAAM,CAAC,IAAI;KAClB,CAAC;AACJ,CAAC;AA8ED,uGAAuG;AACvG,SAAS,eAAe,CAAC,CAAgB,EAAE,GAAW;IACpD,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAChD,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC;IAC3C,IAAI,GAAG,IAAI,CAAC,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,CAAgB,EAAE,GAAW;IAC7C,OAAO;QACL,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW;QAClC,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,MAAM,EAAE,eAAe,CAAC,CAAC,EAAE,GAAG,CAAC;QAC/B,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,GAAG,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAAC,OAA0B,EAAE;IAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;IAClD,iHAAiH;IACjH,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE/C,OAAO;QACL,KAAK,CAAC,MAAM,EAAE,OAAO;YACnB,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;YACpB,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC/C,MAAM,QAAQ,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACjF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,EAAE,GAAG,eAAe,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAC1C,wGAAwG;gBACxG,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,UAAU;oBAAE,OAAO,QAAQ,CAAC,OAAO,CAAC;YACrE,CAAC;YACD,mFAAmF;YACnF,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,EAAE,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YAC5G,MAAM,SAAS,GAAG,GAAG,CAAC;YACtB,MAAM,MAAM,GAAkB;gBAC5B,OAAO;gBACP,SAAS;gBACT,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI;gBACtD,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC;YACF,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAC1C,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;YACjD,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,WAAW;YACd,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACpC,IAAI,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,WAAW,EAAE,CAAC,CAAC;YACpE,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACjD,CAAC;QACD,KAAK,CAAC,WAAW;YACf,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACpC,IAAI,CAAC,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAC;YACrF,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;YACpB,IAAI,CAAC,CAAC,QAAQ;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;YACnF,MAAM,OAAO,GAAG,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,GAAG,GAAG,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrF,CAAC,CAAC,UAAU,GAAG,GAAG,CAAC;YACnB,IAAI,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC;gBAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;YACjE,CAAC;YACD,MAAM,EAAE,GAAG,eAAe,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACnC,IAAI,EAAE,KAAK,SAAS;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;YACjG,IAAI,EAAE,KAAK,QAAQ;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;YACxF,IAAI,EAAE,KAAK,SAAS;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;YACzF,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC;YAClB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QACjD,CAAC;QACD,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,EAAE;YAC/B,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACpC,IAAI,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,WAAW,EAAE,CAAC,CAAC;YACpE,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,eAAe,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACxC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,wBAAwB,WAAW,cAAc,OAAO,EAAE,CAAC,CAAC;YAC9E,CAAC;YACD,CAAC,CAAC,QAAQ,GAAG,QAAQ,CAAC;YACtB,CAAC,CAAC,SAAS,GAAG,EAAE,CAAC;YACjB,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC;YAClB,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC9B,IAAI,IAAI,CAAC,UAAU;gBAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,GAAG,CAAC,WAAW;YACb,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACpC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9C,CAAC;KACF,CAAC;AACJ,CAAC;AAED,sGAAsG;AAEtG;;;;;GAKG;AACH,SAAgB,YAAY,CAAC,MAAc;IACzC,OAAO,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC;AAChE,CAAC;AAUD;;;;;;;;;GASG;AACH,SAAgB,oBAAoB,CAClC,QAA4B,EAC5B,MAAmB,EACnB,MAAkB,EAClB,GAAW,EACX,OAA2B,EAAE;IAE7B,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,IAAA,iBAAW,EAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACtG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACrC,CAAC;AAED,2CAAyB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atlasauth/pca-ciba",
-  "version": "0.2.0",
+  "version": "0.4.0",
   "description": "CIBA (Client-Initiated Backchannel Authentication) bridge for PCA FROST step-up: turn a step-up request into a backchannel human-approval flow with risk-adaptive gating.",
   "keywords": [
     "ciba",
@@ -32,9 +32,10 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@atlasauth/pca": "0.2.0"
+    "@atlasauth/pca": "0.4.0"
   },
   "devDependencies": {
+    "openid-client": "6.8.2",
     "typescript": "^5.6.3",
     "vitest": "^2.1.4"
   },