@atlasauth/pca-sdjwt 0.0.0-stage → 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Atlas Authorization
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,54 @@
-# Temporary Holding Version
+# @atlasauth/pca-sdjwt
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+SD-JWT serialization of a Proof-Carrying Authority action proof (PCActn), so PCA proofs drop into existing JWT / SD-JWT tooling. The standard claims (`iss`, `sub`, `aud`, `iat`, `exp`, `ver`) stay in the clear; the capability claims (`action`, `plan`, `cap_chain`, `sig`, and so on) are selectively disclosable, with optional holder key binding (KB-JWT). It is a bridge, not a replacement: the PCActn's own canonical signature rides along as a disclosable `sig` claim and stays the source of truth.
+
+## Install
+
+```sh
+npm i @atlasauth/pca-sdjwt @atlasauth/pca jose
+```
+
+## Usage
+
+```ts
+import { issuePcaSdJwt, present, verifyPcaSdJwt, importEd25519PrivateKey } from '@atlasauth/pca-sdjwt';
+
+// Issuer: serialize a signed PCActn. `keyBinding: {}` embeds the leaf holder as the `cnf` key.
+const sdjwt = await issuePcaSdJwt(pcactn, { issuerKey, keyBinding: {} });
+
+// Holder: disclose only some claims and bind the presentation to the verifier (KB-JWT).
+const presentation = await present(sdjwt, ['action', 'sig'], {
+  keyBinding: {
+    holderKey: importEd25519PrivateKey(agentSecretKey), // raw 32-byte PCA seed -> jose key
+    audience: 'https://rs.example.com',
+    nonce: 'n-123',
+  },
+});
+
+// Verifier: fail-closed.
+const res = await verifyPcaSdJwt(presentation, {
+  issuerKey: issuerPublicKey,
+  expectedAudience: 'https://rs.example.com',
+  requireKeyBinding: true,
+  expectedNonce: 'n-123',
+  requiredDisclosures: ['action'],
+});
+if (res.ok) console.log(res.disclosed, res.keyBinding); // { action, sig }, { presented, verified, aud, nonce }
+else console.error(res.reason);
+```
+
+`issuerKey` is a jose `KeyLike` (a Node `KeyObject` works); the default algorithm is EdDSA.
+
+## API
+
+- `issuePcaSdJwt(pcactn, options)`, `present(sdjwt, claimNames, options?)`, `verifyPcaSdJwt(sdjwt, options)`.
+- Key helpers: `ed25519PublicJwk`, `importEd25519PrivateKey`, `importEd25519PublicKey` (bridge raw PCA Ed25519 keys to jose).
+- Constants: `PCA_CAPABILITY_CLAIMS`, `SD_ALG`, `PCA_SD_JWT_TYP`, `KB_JWT_TYP`, `DEFAULT_SIGNING_ALG`.
+
+## Status
+
+Experimental. Verifying an SD-JWT checks the issuer's JWT signature, disclosure digests and key binding. It does not re-run the PCA verification of the embedded chain, plan and `sig`; do that with `@atlasauth/pca` on the recovered claims. The SD-JWT specification is still moving, and this package is unaudited.
+
+## License
+
+MIT - see LICENSE

package/dist/index.d.ts

@@ -0,0 +1,198 @@
+/**
+ * @atlasauth/pca-sdjwt — SD-JWT serialization of a PCA `PCActn`.
+ *
+ * ┌──────────────────────────────────────────────────────────────────────────────────────────────┐
+ * │  A PCActn is an EPHEMERAL, signed proof-of-authority for ONE action (packages/pca `pcactn.ts`). │
+ * │  This package re-expresses that proof as an IETF SD-JWT so it drops into the JWT / SD-JWT        │
+ * │  verifiers the wider ecosystem already runs, with selective disclosure of the capability claims │
+ * │  and optional holder key-binding. It is a BRIDGE, not a replacement: the PCActn's own canonical  │
+ * │  signature (`sig`, over `thresholdMessage`) remains the source of truth; here it rides as a      │
+ * │  selectively-disclosable claim alongside the rest of the proof.                                  │
+ * └──────────────────────────────────────────────────────────────────────────────────────────────┘
+ *
+ * STANDARDS
+ *  - **IETF SD-JWT** (draft-ietf-oauth-selective-disclosure-jwt → RFC 9701 family): an issuer-signed JWT
+ *    whose payload carries `_sd` (an array of base64url SHA-256 digests of salted *Disclosures*) and
+ *    `_sd_alg: "sha-256"`, serialized as `<Issuer-signed JWT>~<Disclosure 1>~…~<Disclosure N>~[<KB-JWT>]`.
+ *    Each Disclosure is `base64url(UTF-8(JSON([salt, claim_name, claim_value])))`; its digest is
+ *    `base64url(SHA-256(ASCII(<Disclosure>)))`. A holder MAY drop Disclosures to withhold claims.
+ *  - **SD-JWT Key Binding**: the issuer-signed JWT carries a `cnf` confirmation claim holding the holder's
+ *    public JWK; at presentation the holder appends a **KB-JWT** (`typ: "kb+jwt"`) signed by that key, whose
+ *    payload binds `iat`, `aud`, optional `nonce`, and `sd_hash` = `base64url(SHA-256(ASCII(<everything up
+ *    to and including the last '~' before the KB-JWT>)))`. This is holder proof-of-possession.
+ *
+ * ──────────────────────────────────────────────────────────────────────────────────────────────────
+ *  CLAIM MAPPING  (PCActn  ↔  SD-JWT)
+ * ──────────────────────────────────────────────────────────────────────────────────────────────────
+ *  Standard JWT claims (always in the clear, so a plain JWT verifier reads them):
+ *    iss   ← `cap_chain[0].issuer`                 (the ROOT issuer = the principal public key)
+ *    sub   ← `cap_chain[last].holder`              (the acting agent — the leaf holder; the cnf key)
+ *    aud   ← `aud`                                 (the resource server / Atlas instance id)
+ *    iat   ← floor(`iat` / 1000)                   (PCActn `iat` is epoch MS; JWT NumericDate is seconds)
+ *    exp   ← ceil(`exp` / 1000)                    (PCActn `exp` is epoch MS; JWT NumericDate is seconds)
+ *    ver   ← `ver`                                 (protocol version; a stable, non-sensitive discriminator)
+ *
+ *  Capability claims (selectively-disclosable by default — one Disclosure + `_sd` digest each; the claim
+ *  name equals the PCActn field name so a full disclosure reconstructs the proof verbatim):
+ *    action, grant_ref, cap_chain, plan, attestation, provenance, freshness, counter, risk_claim,
+ *    nonce?, caution?, rationale_commitment?, progress_step?, prohibition_evidence?, tool_binding?,
+ *    alg?, pq_pk?, sig, pq_sig?, threshold?, zk_compliance?, bond_ref?
+ *  (`disclosable` overrides this set; any capability claim NOT selected is emitted in the clear instead.)
+ *
+ *  cnf   → `{ jwk: <holder public JWK> }` when key-binding is requested (defaults to the leaf holder key).
+ *
+ * ──────────────────────────────────────────────────────────────────────────────────────────────────
+ *  AP2 / WIMSE ALIGNMENT
+ * ──────────────────────────────────────────────────────────────────────────────────────────────────
+ *  - **WIMSE** (IETF Workload Identity in Multi-System Environments): a workload-identity token is a JWT
+ *    whose SUBJECT is the acting workload, proof-of-possession–bound to a key in `cnf`. A PCA SD-JWT is
+ *    exactly that shape — `sub` is the acting agent (leaf holder) and `cnf` carries its PoP key — so a PCA
+ *    proof travels as a WIMSE-style WIT, with the authority chain + action attached as SD claims.
+ *  - **AP2** (Agent Payments Protocol): AP2 mandates are a chain of signed credentials that only ever
+ *    NARROW authority (Intent → Cart → Payment). A PCActn's `cap_chain` is the same attenuating chain, and
+ *    this SD-JWT is the single-action analogue of an AP2 mandate credential — `aud`/`exp` bound, holder
+ *    key-bound, selectively disclosable. See `@atlasauth/pca-ap2` for the full Intent→Cart→Payment bridge;
+ *    this package is the generic single-proof SD-JWT those mandates can be carried as.
+ */
+import { type JWK, type JWTPayload, type JWTHeaderParameters, type KeyLike } from 'jose';
+import type { PCActn } from '@atlasauth/pca';
+/** The SD-JWT hash algorithm (`_sd_alg`) this package emits and the only one it accepts. */
+export declare const SD_ALG: "sha-256";
+/** `typ` of the issuer-signed JWT — a PCA SD-JWT media type. */
+export declare const PCA_SD_JWT_TYP: "pca+sd-jwt";
+/** `typ` of the Key-Binding JWT, per the SD-JWT spec. */
+export declare const KB_JWT_TYP: "kb+jwt";
+/** Default JWS algorithm for both the issuer JWT and the KB-JWT (PCA leaf keys are Ed25519 ⇒ EdDSA). */
+export declare const DEFAULT_SIGNING_ALG: "EdDSA";
+/**
+ * The PCActn fields carried as selectively-disclosable capability claims by default (claim name == field
+ * name). The standard-mapped fields (`aud`/`iat`/`exp`) and the clear discriminator (`ver`) are excluded.
+ */
+export declare const PCA_CAPABILITY_CLAIMS: readonly string[];
+/** A `{ kty:'OKP', crv:'Ed25519', x }` JWK for a raw 32-byte Ed25519 public key. */
+export declare function ed25519PublicJwk(raw: Uint8Array): JWK;
+/** Import a raw 32-byte Ed25519 SEED (the PCA secret key) into a jose-signable `KeyLike`. */
+export declare function importEd25519PrivateKey(rawSeed: Uint8Array): KeyLike;
+/** Import a raw 32-byte Ed25519 public key into a jose-verifiable `KeyLike`. */
+export declare function importEd25519PublicKey(raw: Uint8Array): KeyLike;
+/** Holder key material to embed as the `cnf` confirmation claim (enables later KB-JWT binding). */
+export interface KeyBindingEmbed {
+    /**
+     * The holder's PUBLIC key for `cnf`: either a JWK, a raw 32-byte Ed25519 public key, or omitted. When
+     * omitted the leaf holder of the capability chain (`cap_chain[last].holder`, a b64u Ed25519 key) is used,
+     * binding the proof to the acting agent itself.
+     */
+    holderPublicKey?: JWK | Uint8Array;
+}
+export interface IssueOptions {
+    /** The issuer's signing key (jose `KeyLike`; a Node `KeyObject` works). EdDSA keys are the default. */
+    issuerKey: KeyLike | Uint8Array;
+    /**
+     * Capability claim names to make selectively-disclosable. Default: {@link PCA_CAPABILITY_CLAIMS}. Any
+     * capability claim NOT selected here is emitted in the CLEAR instead of behind a Disclosure.
+     */
+    disclosable?: readonly string[];
+    /** Embed a `cnf` holder key so the proof can later be KB-bound at presentation. */
+    keyBinding?: KeyBindingEmbed;
+    /** Override the `iss` claim (default: the capability chain's root issuer). */
+    iss?: string;
+    /** Override the `sub` claim (default: the capability chain's leaf holder). */
+    sub?: string;
+    /** Override the issuer JWT `typ` header (default {@link PCA_SD_JWT_TYP}). */
+    typ?: string;
+    /** JWS algorithm for the issuer JWT (default {@link DEFAULT_SIGNING_ALG}). */
+    signingAlg?: string;
+}
+/**
+ * Serialize a signed `PCActn` as an IETF SD-JWT: `<Issuer-signed JWT>~<Disclosure 1>~…~<Disclosure N>~`.
+ * The standard JWT claims (`iss`/`sub`/`aud`/`iat`/`exp`/`ver`) are in the clear; the capability claims are
+ * selectively disclosable (one Disclosure each, digests in `_sd`). No KB-JWT is attached at issuance — the
+ * holder attaches one at {@link present} time; `keyBinding` only embeds the `cnf` key that enables it.
+ */
+export declare function issuePcaSdJwt(pcActn: PCActn, options: IssueOptions): Promise<string>;
+/** Key-binding material the holder uses to sign a KB-JWT at presentation time. */
+export interface PresentKeyBinding {
+    /** The holder's signing key (jose `KeyLike`). Use {@link importEd25519PrivateKey} for a raw PCA seed. */
+    holderKey: KeyLike | Uint8Array;
+    /** The verifier this presentation is for (KB-JWT `aud`). */
+    audience: string;
+    /** Verifier-supplied anti-replay nonce (KB-JWT `nonce`). */
+    nonce?: string;
+    /** KB-JWT `iat` (unix seconds); defaults to now. */
+    iat?: number;
+    /** JWS algorithm for the KB-JWT (default {@link DEFAULT_SIGNING_ALG}). */
+    alg?: string;
+}
+export interface PresentOptions {
+    /** When set, append a KB-JWT proving holder possession of the `cnf` key over this exact presentation. */
+    keyBinding?: PresentKeyBinding;
+}
+/**
+ * Produce a holder presentation of an issued SD-JWT that discloses ONLY `selectClaims` (by claim name) and
+ * drops every other Disclosure. Any existing KB-JWT is stripped and, when `options.keyBinding` is given, a
+ * fresh KB-JWT is signed over the new presentation. Claim names that are not disclosable (they are in the
+ * clear, or absent) are simply ignored.
+ */
+export declare function present(sdjwt: string, selectClaims: readonly string[], options?: PresentOptions): Promise<string>;
+/** Outcome of the key-binding check. */
+export interface KeyBindingResult {
+    /** Whether a KB-JWT was attached to the presentation. */
+    presented: boolean;
+    /** Whether the KB-JWT verified (signature, `sd_hash`, and any aud/nonce expectations). */
+    verified: boolean;
+    /** The KB-JWT `aud`, when present. */
+    aud?: string;
+    /** The KB-JWT `nonce`, when present. */
+    nonce?: string;
+}
+export interface VerifyOptions {
+    /** The issuer's public key (jose `KeyLike`). Use {@link importEd25519PublicKey} for a raw PCA key. */
+    issuerKey: KeyLike | Uint8Array;
+    /** Claim names that MUST be among the presented Disclosures (else verification fails). */
+    requiredDisclosures?: readonly string[];
+    /** When set, the `aud` claim MUST equal this (enforced on BOTH the issuer JWT and any KB-JWT). */
+    expectedAudience?: string;
+    /**
+     * The holder key the KB MUST be bound to. When set, verification REQUIRES a KB-JWT and requires that the
+     * issuer's `cnf` key equals this key (JWK, raw Ed25519 bytes, or a `KeyLike`).
+     */
+    keyBindingKey?: KeyLike | JWK | Uint8Array;
+    /** When set, the KB-JWT `nonce` MUST equal this. */
+    expectedNonce?: string;
+    /** Require a KB-JWT even without `keyBindingKey` (default false). */
+    requireKeyBinding?: boolean;
+    /** Permitted issuer-JWT JWS algorithms (default `['EdDSA']`). */
+    algorithms?: string[];
+    /** Permitted KB-JWT JWS algorithms (default `['EdDSA']`). */
+    kbAlgorithms?: string[];
+    /** Verification clock (unix ms); defaults to the real clock. */
+    now?: number;
+    /** Clock tolerance (seconds) passed through to jose. */
+    clockToleranceSec?: number;
+}
+export type VerifyResult = {
+    ok: true;
+    /** The issuer JWT payload (standard + any clear capability claims). */
+    payload: JWTPayload;
+    /** The issuer JWT protected header. */
+    protectedHeader: JWTHeaderParameters;
+    /** The capability claims recovered from the presented Disclosures. */
+    disclosed: Record<string, unknown>;
+    /** Clear capability claims ∪ disclosed capability claims (everything but the reserved std claims). */
+    claims: Record<string, unknown>;
+    keyBinding: KeyBindingResult;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * Verify a PCA SD-JWT, FAIL-CLOSED: any bad signature, unknown `_sd_alg`, unmatched/forged Disclosure,
+ * audience/expiry violation, or key-binding failure returns `{ ok: false }`. On success it returns the
+ * issuer payload, the recovered capability claims, and the key-binding outcome.
+ *
+ * Steps: (1) verify the issuer JWS (jose enforces `exp`/`nbf`, and `aud` when `expectedAudience` is set);
+ * (2) require `_sd_alg === "sha-256"` when any `_sd` is present; (3) for each presented Disclosure,
+ * recompute its digest and require it to appear in `_sd` (an unknown Disclosure is a tamper → fail);
+ * (4) enforce `requiredDisclosures`; (5) verify the KB-JWT when present/required.
+ */
+export declare function verifyPcaSdJwt(sdjwt: string, options: VerifyOptions): Promise<VerifyResult>;

package/dist/index.js

@@ -0,0 +1,417 @@
+"use strict";
+/**
+ * @atlasauth/pca-sdjwt — SD-JWT serialization of a PCA `PCActn`.
+ *
+ * ┌──────────────────────────────────────────────────────────────────────────────────────────────┐
+ * │  A PCActn is an EPHEMERAL, signed proof-of-authority for ONE action (packages/pca `pcactn.ts`). │
+ * │  This package re-expresses that proof as an IETF SD-JWT so it drops into the JWT / SD-JWT        │
+ * │  verifiers the wider ecosystem already runs, with selective disclosure of the capability claims │
+ * │  and optional holder key-binding. It is a BRIDGE, not a replacement: the PCActn's own canonical  │
+ * │  signature (`sig`, over `thresholdMessage`) remains the source of truth; here it rides as a      │
+ * │  selectively-disclosable claim alongside the rest of the proof.                                  │
+ * └──────────────────────────────────────────────────────────────────────────────────────────────┘
+ *
+ * STANDARDS
+ *  - **IETF SD-JWT** (draft-ietf-oauth-selective-disclosure-jwt → RFC 9701 family): an issuer-signed JWT
+ *    whose payload carries `_sd` (an array of base64url SHA-256 digests of salted *Disclosures*) and
+ *    `_sd_alg: "sha-256"`, serialized as `<Issuer-signed JWT>~<Disclosure 1>~…~<Disclosure N>~[<KB-JWT>]`.
+ *    Each Disclosure is `base64url(UTF-8(JSON([salt, claim_name, claim_value])))`; its digest is
+ *    `base64url(SHA-256(ASCII(<Disclosure>)))`. A holder MAY drop Disclosures to withhold claims.
+ *  - **SD-JWT Key Binding**: the issuer-signed JWT carries a `cnf` confirmation claim holding the holder's
+ *    public JWK; at presentation the holder appends a **KB-JWT** (`typ: "kb+jwt"`) signed by that key, whose
+ *    payload binds `iat`, `aud`, optional `nonce`, and `sd_hash` = `base64url(SHA-256(ASCII(<everything up
+ *    to and including the last '~' before the KB-JWT>)))`. This is holder proof-of-possession.
+ *
+ * ──────────────────────────────────────────────────────────────────────────────────────────────────
+ *  CLAIM MAPPING  (PCActn  ↔  SD-JWT)
+ * ──────────────────────────────────────────────────────────────────────────────────────────────────
+ *  Standard JWT claims (always in the clear, so a plain JWT verifier reads them):
+ *    iss   ← `cap_chain[0].issuer`                 (the ROOT issuer = the principal public key)
+ *    sub   ← `cap_chain[last].holder`              (the acting agent — the leaf holder; the cnf key)
+ *    aud   ← `aud`                                 (the resource server / Atlas instance id)
+ *    iat   ← floor(`iat` / 1000)                   (PCActn `iat` is epoch MS; JWT NumericDate is seconds)
+ *    exp   ← ceil(`exp` / 1000)                    (PCActn `exp` is epoch MS; JWT NumericDate is seconds)
+ *    ver   ← `ver`                                 (protocol version; a stable, non-sensitive discriminator)
+ *
+ *  Capability claims (selectively-disclosable by default — one Disclosure + `_sd` digest each; the claim
+ *  name equals the PCActn field name so a full disclosure reconstructs the proof verbatim):
+ *    action, grant_ref, cap_chain, plan, attestation, provenance, freshness, counter, risk_claim,
+ *    nonce?, caution?, rationale_commitment?, progress_step?, prohibition_evidence?, tool_binding?,
+ *    alg?, pq_pk?, sig, pq_sig?, threshold?, zk_compliance?, bond_ref?
+ *  (`disclosable` overrides this set; any capability claim NOT selected is emitted in the clear instead.)
+ *
+ *  cnf   → `{ jwk: <holder public JWK> }` when key-binding is requested (defaults to the leaf holder key).
+ *
+ * ──────────────────────────────────────────────────────────────────────────────────────────────────
+ *  AP2 / WIMSE ALIGNMENT
+ * ──────────────────────────────────────────────────────────────────────────────────────────────────
+ *  - **WIMSE** (IETF Workload Identity in Multi-System Environments): a workload-identity token is a JWT
+ *    whose SUBJECT is the acting workload, proof-of-possession–bound to a key in `cnf`. A PCA SD-JWT is
+ *    exactly that shape — `sub` is the acting agent (leaf holder) and `cnf` carries its PoP key — so a PCA
+ *    proof travels as a WIMSE-style WIT, with the authority chain + action attached as SD claims.
+ *  - **AP2** (Agent Payments Protocol): AP2 mandates are a chain of signed credentials that only ever
+ *    NARROW authority (Intent → Cart → Payment). A PCActn's `cap_chain` is the same attenuating chain, and
+ *    this SD-JWT is the single-action analogue of an AP2 mandate credential — `aud`/`exp` bound, holder
+ *    key-bound, selectively disclosable. See `@atlasauth/pca-ap2` for the full Intent→Cart→Payment bridge;
+ *    this package is the generic single-proof SD-JWT those mandates can be carried as.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PCA_CAPABILITY_CLAIMS = exports.DEFAULT_SIGNING_ALG = exports.KB_JWT_TYP = exports.PCA_SD_JWT_TYP = exports.SD_ALG = void 0;
+exports.ed25519PublicJwk = ed25519PublicJwk;
+exports.importEd25519PrivateKey = importEd25519PrivateKey;
+exports.importEd25519PublicKey = importEd25519PublicKey;
+exports.issuePcaSdJwt = issuePcaSdJwt;
+exports.present = present;
+exports.verifyPcaSdJwt = verifyPcaSdJwt;
+const node_crypto_1 = require("node:crypto");
+const jose_1 = require("jose");
+// ===================================================================================================
+// Constants
+// ===================================================================================================
+/** The SD-JWT hash algorithm (`_sd_alg`) this package emits and the only one it accepts. */
+exports.SD_ALG = 'sha-256';
+/** `typ` of the issuer-signed JWT — a PCA SD-JWT media type. */
+exports.PCA_SD_JWT_TYP = 'pca+sd-jwt';
+/** `typ` of the Key-Binding JWT, per the SD-JWT spec. */
+exports.KB_JWT_TYP = 'kb+jwt';
+/** Default JWS algorithm for both the issuer JWT and the KB-JWT (PCA leaf keys are Ed25519 ⇒ EdDSA). */
+exports.DEFAULT_SIGNING_ALG = 'EdDSA';
+/**
+ * The PCActn fields carried as selectively-disclosable capability claims by default (claim name == field
+ * name). The standard-mapped fields (`aud`/`iat`/`exp`) and the clear discriminator (`ver`) are excluded.
+ */
+exports.PCA_CAPABILITY_CLAIMS = [
+    'action',
+    'grant_ref',
+    'cap_chain',
+    'plan',
+    'attestation',
+    'provenance',
+    'freshness',
+    'counter',
+    'risk_claim',
+    'nonce',
+    'caution',
+    'rationale_commitment',
+    'progress_step',
+    'prohibition_evidence',
+    'tool_binding',
+    'alg',
+    'pq_pk',
+    'sig',
+    'pq_sig',
+    'threshold',
+    'zk_compliance',
+    'bond_ref',
+];
+/** PCActn fields that become standard JWT claims (not eligible for a capability Disclosure). */
+const STANDARD_MAPPED = new Set(['aud', 'iat', 'exp']);
+/** Field carried in the clear as a discriminator (not disclosable). */
+const CLEAR_DISCRIMINATOR = 'ver';
+/** Reserved top-level claim names that are never treated as recovered capability claims. */
+const RESERVED_CLAIMS = new Set(['iss', 'sub', 'aud', 'iat', 'exp', '_sd', '_sd_alg', 'cnf']);
+// ===================================================================================================
+// base64url / sha-256 helpers (Node built-ins only; no new deps)
+// ===================================================================================================
+function b64uBytes(bytes) {
+    return Buffer.from(bytes).toString('base64url');
+}
+/** `base64url(SHA-256(ASCII(input)))` — the SD-JWT Disclosure digest / KB `sd_hash` construction. */
+function sha256b64u(asciiInput) {
+    return (0, node_crypto_1.createHash)('sha256').update(asciiInput, 'ascii').digest().toString('base64url');
+}
+function isPlainObject(v) {
+    return typeof v === 'object' && v !== null && !Array.isArray(v) && !(v instanceof Uint8Array);
+}
+function isJwk(v) {
+    return isPlainObject(v) && typeof v.kty === 'string';
+}
+// ===================================================================================================
+// Ed25519 raw-key ⇄ jose bridge (so the actual PCA leaf keys can issue / bind, not only jose keys)
+// ===================================================================================================
+// Fixed ASN.1 prefixes for a 32-byte Ed25519 key (RFC 8410): PKCS#8 private, SPKI public.
+const ED25519_PKCS8_PREFIX = Buffer.from('302e020100300506032b657004220420', 'hex');
+const ED25519_SPKI_PREFIX = Buffer.from('302a300506032b6570032100', 'hex');
+/** A `{ kty:'OKP', crv:'Ed25519', x }` JWK for a raw 32-byte Ed25519 public key. */
+function ed25519PublicJwk(raw) {
+    if (raw.length !== 32)
+        throw new Error('pca-sdjwt: Ed25519 public key must be 32 bytes');
+    return { kty: 'OKP', crv: 'Ed25519', x: b64uBytes(raw) };
+}
+/** Import a raw 32-byte Ed25519 SEED (the PCA secret key) into a jose-signable `KeyLike`. */
+function importEd25519PrivateKey(rawSeed) {
+    if (rawSeed.length !== 32)
+        throw new Error('pca-sdjwt: Ed25519 private seed must be 32 bytes');
+    const der = Buffer.concat([ED25519_PKCS8_PREFIX, Buffer.from(rawSeed)]);
+    return (0, node_crypto_1.createPrivateKey)({ key: der, format: 'der', type: 'pkcs8' });
+}
+/** Import a raw 32-byte Ed25519 public key into a jose-verifiable `KeyLike`. */
+function importEd25519PublicKey(raw) {
+    if (raw.length !== 32)
+        throw new Error('pca-sdjwt: Ed25519 public key must be 32 bytes');
+    const der = Buffer.concat([ED25519_SPKI_PREFIX, Buffer.from(raw)]);
+    return (0, node_crypto_1.createPublicKey)({ key: der, format: 'der', type: 'spki' });
+}
+function decodeB64uToBytes(s) {
+    return new Uint8Array(Buffer.from(s, 'base64url'));
+}
+function leafHolderJwk(pcActn) {
+    const chain = pcActn.cap_chain;
+    const leaf = Array.isArray(chain) && chain.length > 0 ? chain[chain.length - 1] : undefined;
+    if (!leaf || typeof leaf.holder !== 'string' || leaf.holder.length === 0) {
+        throw new Error('pca-sdjwt: cannot derive holder key — cap_chain leaf holder is missing');
+    }
+    const raw = decodeB64uToBytes(leaf.holder);
+    return ed25519PublicJwk(raw);
+}
+function resolveCnfJwk(pcActn, kb) {
+    const hp = kb.holderPublicKey;
+    if (hp === undefined)
+        return leafHolderJwk(pcActn);
+    if (hp instanceof Uint8Array)
+        return ed25519PublicJwk(hp);
+    if (isJwk(hp))
+        return hp;
+    throw new Error('pca-sdjwt: keyBinding.holderPublicKey must be a JWK or a raw Ed25519 public key');
+}
+function toNumericDate(ms, label, round) {
+    if (typeof ms !== 'number' || !Number.isFinite(ms))
+        throw new Error(`pca-sdjwt: PCActn.${label} must be a finite number (epoch ms)`);
+    return round(ms / 1000);
+}
+function makeDisclosure(name, value) {
+    const salt = (0, node_crypto_1.randomBytes)(16).toString('base64url');
+    const encoded = Buffer.from(JSON.stringify([salt, name, value]), 'utf8').toString('base64url');
+    return { name, encoded, digest: sha256b64u(encoded) };
+}
+/**
+ * Serialize a signed `PCActn` as an IETF SD-JWT: `<Issuer-signed JWT>~<Disclosure 1>~…~<Disclosure N>~`.
+ * The standard JWT claims (`iss`/`sub`/`aud`/`iat`/`exp`/`ver`) are in the clear; the capability claims are
+ * selectively disclosable (one Disclosure each, digests in `_sd`). No KB-JWT is attached at issuance — the
+ * holder attaches one at {@link present} time; `keyBinding` only embeds the `cnf` key that enables it.
+ */
+async function issuePcaSdJwt(pcActn, options) {
+    if (!isPlainObject(pcActn))
+        throw new Error('pca-sdjwt: pcActn must be an object');
+    const chain = pcActn.cap_chain;
+    if (!Array.isArray(chain) || chain.length === 0)
+        throw new Error('pca-sdjwt: pcActn.cap_chain must be a non-empty array');
+    const root = chain[0];
+    const leaf = chain[chain.length - 1];
+    if (!root || typeof root.issuer !== 'string')
+        throw new Error('pca-sdjwt: cap_chain root issuer is missing');
+    if (!leaf || typeof leaf.holder !== 'string')
+        throw new Error('pca-sdjwt: cap_chain leaf holder is missing');
+    if (typeof pcActn.aud !== 'string' || pcActn.aud.length === 0)
+        throw new Error('pca-sdjwt: pcActn.aud is required');
+    const iss = options.iss ?? root.issuer;
+    const sub = options.sub ?? leaf.holder;
+    const iat = toNumericDate(pcActn.iat, 'iat', Math.floor);
+    let exp = toNumericDate(pcActn.exp, 'exp', Math.ceil);
+    if (exp <= iat)
+        exp = iat + 1; // keep exp strictly after iat even for sub-second lifetimes
+    const disclosableSet = new Set(options.disclosable ?? exports.PCA_CAPABILITY_CLAIMS);
+    const payload = { iss, sub, aud: pcActn.aud, iat, exp, [CLEAR_DISCRIMINATOR]: pcActn.ver, _sd_alg: exports.SD_ALG };
+    const disclosures = [];
+    const sd = [];
+    const record = pcActn;
+    for (const key of Object.keys(record)) {
+        if (STANDARD_MAPPED.has(key) || key === CLEAR_DISCRIMINATOR)
+            continue; // mapped to a standard/clear claim
+        const value = record[key];
+        if (value === undefined)
+            continue;
+        if (disclosableSet.has(key)) {
+            const d = makeDisclosure(key, value);
+            disclosures.push(d);
+            sd.push(d.digest);
+        }
+        else {
+            payload[key] = value; // caller chose to keep this capability claim in the clear
+        }
+    }
+    if (sd.length > 0)
+        payload._sd = sd;
+    if (options.keyBinding)
+        payload.cnf = { jwk: resolveCnfJwk(pcActn, options.keyBinding) };
+    const header = { alg: options.signingAlg ?? exports.DEFAULT_SIGNING_ALG, typ: options.typ ?? exports.PCA_SD_JWT_TYP };
+    const jwt = await new jose_1.SignJWT(payload).setProtectedHeader(header).sign(options.issuerKey);
+    // SD-JWT serialization: issuer JWT then each Disclosure, each terminated by '~'. No KB-JWT at issuance.
+    return [jwt, ...disclosures.map((d) => d.encoded)].map((p) => `${p}~`).join('');
+}
+function parseSdJwt(sdjwt) {
+    if (typeof sdjwt !== 'string' || sdjwt.length === 0)
+        throw new Error('pca-sdjwt: empty SD-JWT');
+    const segments = sdjwt.split('~');
+    if (segments.length < 2)
+        throw new Error('pca-sdjwt: malformed SD-JWT (missing ~ separator)');
+    const jwt = segments[0];
+    if (jwt === undefined || jwt === '')
+        throw new Error('pca-sdjwt: empty issuer JWT');
+    const last = segments[segments.length - 1];
+    const disclosures = segments.slice(1, segments.length - 1).filter((s) => s.length > 0);
+    if (last === undefined || last === '') {
+        // No KB-JWT: the string ends with '~'. The whole string is the presentation head.
+        return { jwt, disclosures, presentationHead: sdjwt };
+    }
+    // KB-JWT present: head is everything up to and including the final '~' before it.
+    const presentationHead = sdjwt.slice(0, sdjwt.length - last.length);
+    return { jwt, disclosures, kbJwt: last, presentationHead };
+}
+function decodeDisclosure(encoded) {
+    let parsed;
+    try {
+        parsed = JSON.parse(Buffer.from(encoded, 'base64url').toString('utf8'));
+    }
+    catch {
+        throw new Error('pca-sdjwt: disclosure is not valid base64url JSON');
+    }
+    if (!Array.isArray(parsed) || parsed.length !== 3)
+        throw new Error('pca-sdjwt: disclosure must be a [salt, name, value] triple');
+    const salt = parsed[0];
+    const name = parsed[1];
+    if (typeof salt !== 'string' || typeof name !== 'string')
+        throw new Error('pca-sdjwt: disclosure salt and name must be strings');
+    return { salt, name, value: parsed[2] };
+}
+/**
+ * Produce a holder presentation of an issued SD-JWT that discloses ONLY `selectClaims` (by claim name) and
+ * drops every other Disclosure. Any existing KB-JWT is stripped and, when `options.keyBinding` is given, a
+ * fresh KB-JWT is signed over the new presentation. Claim names that are not disclosable (they are in the
+ * clear, or absent) are simply ignored.
+ */
+async function present(sdjwt, selectClaims, options) {
+    const parsed = parseSdJwt(sdjwt);
+    const keep = new Set(selectClaims);
+    const kept = [];
+    for (const encoded of parsed.disclosures) {
+        const { name } = decodeDisclosure(encoded);
+        if (keep.has(name))
+            kept.push(encoded);
+    }
+    const head = [parsed.jwt, ...kept].join('~') + '~';
+    if (!options?.keyBinding)
+        return head;
+    const kb = options.keyBinding;
+    const now = kb.iat ?? Math.floor(Date.now() / 1000);
+    const kbPayload = { iat: now, aud: kb.audience, sd_hash: sha256b64u(head) };
+    if (kb.nonce !== undefined)
+        kbPayload.nonce = kb.nonce;
+    const kbHeader = { alg: kb.alg ?? exports.DEFAULT_SIGNING_ALG, typ: exports.KB_JWT_TYP };
+    const kbJwt = await new jose_1.SignJWT(kbPayload).setProtectedHeader(kbHeader).sign(kb.holderKey);
+    return head + kbJwt;
+}
+async function jwkThumbX(k) {
+    if (k instanceof Uint8Array)
+        return b64uBytes(k);
+    if (isJwk(k))
+        return typeof k.x === 'string' ? k.x : undefined;
+    const j = await (0, jose_1.exportJWK)(k);
+    return typeof j.x === 'string' ? j.x : undefined;
+}
+/**
+ * Verify a PCA SD-JWT, FAIL-CLOSED: any bad signature, unknown `_sd_alg`, unmatched/forged Disclosure,
+ * audience/expiry violation, or key-binding failure returns `{ ok: false }`. On success it returns the
+ * issuer payload, the recovered capability claims, and the key-binding outcome.
+ *
+ * Steps: (1) verify the issuer JWS (jose enforces `exp`/`nbf`, and `aud` when `expectedAudience` is set);
+ * (2) require `_sd_alg === "sha-256"` when any `_sd` is present; (3) for each presented Disclosure,
+ * recompute its digest and require it to appear in `_sd` (an unknown Disclosure is a tamper → fail);
+ * (4) enforce `requiredDisclosures`; (5) verify the KB-JWT when present/required.
+ */
+async function verifyPcaSdJwt(sdjwt, options) {
+    try {
+        const parsed = parseSdJwt(sdjwt);
+        const algorithms = options.algorithms ?? [exports.DEFAULT_SIGNING_ALG];
+        const verified = await (0, jose_1.jwtVerify)(parsed.jwt, options.issuerKey, {
+            algorithms,
+            ...(options.expectedAudience !== undefined ? { audience: options.expectedAudience } : {}),
+            ...(options.now !== undefined ? { currentDate: new Date(options.now) } : {}),
+            ...(options.clockToleranceSec !== undefined ? { clockTolerance: options.clockToleranceSec } : {}),
+        });
+        const payload = verified.payload;
+        const protectedHeader = verified.protectedHeader;
+        // _sd / Disclosure matching.
+        const sdList = Array.isArray(payload._sd) ? payload._sd.filter((x) => typeof x === 'string') : [];
+        if (sdList.length > 0 && payload._sd_alg !== exports.SD_ALG) {
+            return { ok: false, reason: `unsupported _sd_alg (require "${exports.SD_ALG}")` };
+        }
+        const sdSet = new Set(sdList);
+        const disclosed = {};
+        const seenDigests = new Set();
+        for (const encoded of parsed.disclosures) {
+            const digest = sha256b64u(encoded);
+            if (!sdSet.has(digest))
+                return { ok: false, reason: 'a presented disclosure does not match any _sd digest (tampered)' };
+            if (seenDigests.has(digest))
+                return { ok: false, reason: 'duplicate disclosure' };
+            seenDigests.add(digest);
+            const { name, value } = decodeDisclosure(encoded);
+            if (Object.prototype.hasOwnProperty.call(disclosed, name))
+                return { ok: false, reason: `disclosure claim '${name}' appears more than once` };
+            disclosed[name] = value;
+        }
+        for (const required of options.requiredDisclosures ?? []) {
+            if (!Object.prototype.hasOwnProperty.call(disclosed, required)) {
+                return { ok: false, reason: `required disclosure '${required}' was not presented` };
+            }
+        }
+        // Key binding.
+        const cnf = payload.cnf;
+        const cnfJwk = isPlainObject(cnf) && isJwk(cnf.jwk) ? cnf.jwk : undefined;
+        const keyBinding = { presented: parsed.kbJwt !== undefined, verified: false };
+        if (parsed.kbJwt !== undefined) {
+            if (cnfJwk === undefined)
+                return { ok: false, reason: 'KB-JWT presented but issuer JWT has no cnf key' };
+            if (options.keyBindingKey !== undefined) {
+                const [want, have] = await Promise.all([jwkThumbX(options.keyBindingKey), jwkThumbX(cnfJwk)]);
+                if (want === undefined || have === undefined || want !== have) {
+                    return { ok: false, reason: 'cnf key does not match the expected keyBindingKey' };
+                }
+            }
+            const kbAlgorithms = options.kbAlgorithms ?? [exports.DEFAULT_SIGNING_ALG];
+            const kbKey = await (0, jose_1.importJWK)(cnfJwk, kbAlgorithms[0] ?? exports.DEFAULT_SIGNING_ALG);
+            let kb;
+            try {
+                kb = await (0, jose_1.jwtVerify)(parsed.kbJwt, kbKey, {
+                    algorithms: kbAlgorithms,
+                    ...(options.expectedAudience !== undefined ? { audience: options.expectedAudience } : {}),
+                    ...(options.now !== undefined ? { currentDate: new Date(options.now) } : {}),
+                    ...(options.clockToleranceSec !== undefined ? { clockTolerance: options.clockToleranceSec } : {}),
+                });
+            }
+            catch (e) {
+                return { ok: false, reason: `KB-JWT signature/claims invalid: ${e.message}` };
+            }
+            if (kb.protectedHeader.typ !== exports.KB_JWT_TYP)
+                return { ok: false, reason: `KB-JWT typ must be "${exports.KB_JWT_TYP}"` };
+            if (kb.payload.sd_hash !== sha256b64u(parsed.presentationHead)) {
+                return { ok: false, reason: 'KB-JWT sd_hash does not cover this presentation' };
+            }
+            if (options.expectedNonce !== undefined && kb.payload.nonce !== options.expectedNonce) {
+                return { ok: false, reason: 'KB-JWT nonce does not match' };
+            }
+            keyBinding.verified = true;
+            if (typeof kb.payload.aud === 'string')
+                keyBinding.aud = kb.payload.aud;
+            if (typeof kb.payload.nonce === 'string')
+                keyBinding.nonce = kb.payload.nonce;
+        }
+        else if (options.keyBindingKey !== undefined || options.requireKeyBinding) {
+            return { ok: false, reason: 'key binding required but no KB-JWT was presented' };
+        }
+        // Recovered capability claims = clear (non-reserved) ∪ disclosed.
+        const claims = {};
+        for (const key of Object.keys(payload)) {
+            if (!RESERVED_CLAIMS.has(key))
+                claims[key] = payload[key];
+        }
+        for (const key of Object.keys(disclosed))
+            claims[key] = disclosed[key];
+        return { ok: true, payload, protectedHeader, disclosed, claims, keyBinding };
+    }
+    catch (e) {
+        return { ok: false, reason: e.message };
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;;;AA8FH,4CAGC;AAGD,0DAIC;AAGD,wDAIC;AAkFD,sCA4CC;AA2ED,0BAkBC;AA4ED,wCAyFC;AA7eD,6CAAyF;AACzF,+BASc;AAGd,sGAAsG;AACtG,YAAY;AACZ,sGAAsG;AAEtG,4FAA4F;AAC/E,QAAA,MAAM,GAAG,SAAkB,CAAC;AACzC,gEAAgE;AACnD,QAAA,cAAc,GAAG,YAAqB,CAAC;AACpD,yDAAyD;AAC5C,QAAA,UAAU,GAAG,QAAiB,CAAC;AAC5C,wGAAwG;AAC3F,QAAA,mBAAmB,GAAG,OAAgB,CAAC;AAEpD;;;GAGG;AACU,QAAA,qBAAqB,GAAsB;IACtD,QAAQ;IACR,WAAW;IACX,WAAW;IACX,MAAM;IACN,aAAa;IACb,YAAY;IACZ,WAAW;IACX,SAAS;IACT,YAAY;IACZ,OAAO;IACP,SAAS;IACT,sBAAsB;IACtB,eAAe;IACf,sBAAsB;IACtB,cAAc;IACd,KAAK;IACL,OAAO;IACP,KAAK;IACL,QAAQ;IACR,WAAW;IACX,eAAe;IACf,UAAU;CACX,CAAC;AAEF,gGAAgG;AAChG,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAC5E,uEAAuE;AACvE,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAClC,4FAA4F;AAC5F,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;AAEnH,sGAAsG;AACtG,iEAAiE;AACjE,sGAAsG;AAEtG,SAAS,SAAS,CAAC,KAAiB;IAClC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAClD,CAAC;AAED,qGAAqG;AACrG,SAAS,UAAU,CAAC,UAAkB;IACpC,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,aAAa,CAAC,CAAU;IAC/B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,KAAK,CAAC,CAAU;IACvB,OAAO,aAAa,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC;AACvD,CAAC;AAED,sGAAsG;AACtG,mGAAmG;AACnG,sGAAsG;AAEtG,0FAA0F;AAC1F,MAAM,oBAAoB,GAAG,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;AACpF,MAAM,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;AAE3E,oFAAoF;AACpF,SAAgB,gBAAgB,CAAC,GAAe;IAC9C,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACzF,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED,6FAA6F;AAC7F,SAAgB,uBAAuB,CAAC,OAAmB;IACzD,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAC/F,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,IAAA,8BAAgB,EAAC,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,gFAAgF;AAChF,SAAgB,sBAAsB,CAAC,GAAe;IACpD,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACzF,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACnE,OAAO,IAAA,6BAAe,EAAC,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AACpE,CAAC;AAoCD,SAAS,iBAAiB,CAAC,CAAS;IAClC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC;IAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,GAAG,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3C,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,EAAmB;IACxD,MAAM,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC;IAC9B,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,EAAE,YAAY,UAAU;QAAE,OAAO,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC1D,IAAI,KAAK,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IACzB,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;AACrG,CAAC;AAED,SAAS,aAAa,CAAC,EAAW,EAAE,KAAa,EAAE,KAA4B;IAC7E,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,KAAK,qCAAqC,CAAC,CAAC;IACrI,OAAO,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;AAC1B,CAAC;AASD,SAAS,cAAc,CAAC,IAAY,EAAE,KAAc;IAClD,MAAM,IAAI,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC/F,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,aAAa,CAAC,MAAc,EAAE,OAAqB;IACvE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC;IAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC1H,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC7G,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC7G,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAEpH,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC;IACvC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC;IACvC,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,IAAI,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,GAAG,IAAI,GAAG;QAAE,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,4DAA4D;IAE3F,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,6BAAqB,CAAC,CAAC;IAElG,MAAM,OAAO,GAAe,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,cAAM,EAAE,CAAC;IACxH,MAAM,WAAW,GAAiB,EAAE,CAAC;IACrC,MAAM,EAAE,GAAa,EAAE,CAAC;IAExB,MAAM,MAAM,GAAG,MAA4C,CAAC;IAC5D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,mBAAmB;YAAE,SAAS,CAAC,mCAAmC;QAC1G,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACrC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,0DAA0D;QAClF,CAAC;IACH,CAAC;IACD,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,GAAG,EAAE,CAAC;IAEpC,IAAI,OAAO,CAAC,UAAU;QAAE,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;IAEzF,MAAM,MAAM,GAAwB,EAAE,GAAG,EAAE,OAAO,CAAC,UAAU,IAAI,2BAAmB,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,sBAAc,EAAE,CAAC;IAC3H,MAAM,GAAG,GAAG,MAAM,IAAI,cAAO,CAAC,OAAO,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAE1F,wGAAwG;IACxG,OAAO,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAClF,CAAC;AAeD,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAChG,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAC9F,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACpF,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvF,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QACtC,kFAAkF;QAClF,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;IACD,kFAAkF;IAClF,MAAM,gBAAgB,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IACpE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACjI,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACjI,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1C,CAAC;AAyBD;;;;;GAKG;AACI,KAAK,UAAU,OAAO,CAAC,KAAa,EAAE,YAA+B,EAAE,OAAwB;IACpG,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IACnC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACnD,IAAI,CAAC,OAAO,EAAE,UAAU;QAAE,OAAO,IAAI,CAAC;IAEtC,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC;IAC9B,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACpD,MAAM,SAAS,GAAe,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;IACxF,IAAI,EAAE,CAAC,KAAK,KAAK,SAAS;QAAE,SAAS,CAAC,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC;IACvD,MAAM,QAAQ,GAAwB,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,2BAAmB,EAAE,GAAG,EAAE,kBAAU,EAAE,CAAC;IAC9F,MAAM,KAAK,GAAG,MAAM,IAAI,cAAO,CAAC,SAAS,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3F,OAAO,IAAI,GAAG,KAAK,CAAC;AACtB,CAAC;AA2DD,KAAK,UAAU,SAAS,CAAC,CAA6B;IACpD,IAAI,CAAC,YAAY,UAAU;QAAE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,MAAM,CAAC,GAAG,MAAM,IAAA,gBAAS,EAAC,CAAC,CAAC,CAAC;IAC7B,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACnD,CAAC;AAED;;;;;;;;;GASG;AACI,KAAK,UAAU,cAAc,CAAC,KAAa,EAAE,OAAsB;IACxE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,2BAAmB,CAAC,CAAC;QAE/D,MAAM,QAAQ,GAAG,MAAM,IAAA,gBAAS,EAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,EAAE;YAC9D,UAAU;YACV,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,GAAG,CAAC,OAAO,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClG,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QACjC,MAAM,eAAe,GAAG,QAAQ,CAAC,eAAe,CAAC;QAEjD,6BAA6B;QAC7B,MAAM,MAAM,GAAa,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzH,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,KAAK,cAAM,EAAE,CAAC;YACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,cAAM,IAAI,EAAE,CAAC;QAC5E,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,SAAS,GAA4B,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;QACtC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iEAAiE,EAAE,CAAC;YACxH,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;YAClF,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACxB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAClD,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,IAAI,0BAA0B,EAAE,CAAC;YAC7I,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC1B,CAAC;QAED,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,mBAAmB,IAAI,EAAE,EAAE,CAAC;YACzD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAC/D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,QAAQ,qBAAqB,EAAE,CAAC;YACtF,CAAC;QACH,CAAC;QAED,eAAe;QACf,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACxB,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,MAAM,UAAU,GAAqB,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAEhG,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gDAAgD,EAAE,CAAC;YACzG,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;gBACxC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC9F,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAC9D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mDAAmD,EAAE,CAAC;gBACpF,CAAC;YACH,CAAC;YACD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,CAAC,2BAAmB,CAAC,CAAC;YACnE,MAAM,KAAK,GAAG,MAAM,IAAA,gBAAS,EAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,2BAAmB,CAAC,CAAC;YAC9E,IAAI,EAAE,CAAC;YACP,IAAI,CAAC;gBACH,EAAE,GAAG,MAAM,IAAA,gBAAS,EAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE;oBACxC,UAAU,EAAE,YAAY;oBACxB,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzF,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5E,GAAG,CAAC,OAAO,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAClG,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAqC,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;YAC3F,CAAC;YACD,IAAI,EAAE,CAAC,eAAe,CAAC,GAAG,KAAK,kBAAU;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,kBAAU,GAAG,EAAE,CAAC;YAC9G,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,KAAK,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC/D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iDAAiD,EAAE,CAAC;YAClF,CAAC;YACD,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;gBACtF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;YAC9D,CAAC;YACD,UAAU,CAAC,QAAQ,GAAG,IAAI,CAAC;YAC3B,IAAI,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,KAAK,QAAQ;gBAAE,UAAU,CAAC,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;YACxE,IAAI,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,QAAQ;gBAAE,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QAChF,CAAC;aAAM,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAC5E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kDAAkD,EAAE,CAAC;QACnF,CAAC;QAED,kEAAkE;QAClE,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5D,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAEvE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC/E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;IACrD,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,57 @@
 {
   "name": "@atlasauth/pca-sdjwt",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.2.0",
+  "description": "SD-JWT serialization of a PCActn for PCA: emit/verify a PCActn (and its capability claims) as a selectively-disclosable SD-JWT so PCA proofs drop into existing JWT/SD-JWT verifiers and align with WIMSE / AP2 mandate shape.",
+  "keywords": [
+    "sd-jwt",
+    "selective disclosure",
+    "jwt",
+    "agent authorization",
+    "proof-carrying authority",
+    "pca",
+    "ai agents"
+  ],
+  "license": "MIT",
+  "homepage": "https://github.com/Atlas-Authorization/pca#readme",
+  "bugs": {
+    "url": "https://github.com/Atlas-Authorization/pca/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Atlas-Authorization/pca.git",
+    "directory": "packages/pca-sdjwt"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "dependencies": {
+    "jose": "^5.9.6",
+    "@atlasauth/pca": "0.2.0"
+  },
+  "devDependencies": {
+    "typescript": "^5.6.3",
+    "vitest": "^2.1.4"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run"
+  }
 }