@atrib/verify 0.3.5 → 0.3.7

package/README.md

@@ -109,6 +109,65 @@ const result = await verifyRecord(record, {
 
 Each pending annotation is its own ADR scope when external consumers need it.
 
+### `verifyAp2ViEvidence(...)` and `verifyAp2ViEvidenceAsync(...)`
+
+AP2 / Verifiable Intent evidence checking for merchants and auditors. This runs outside the transaction detector path. It does not alter the graph, the settlement calculation, or record validity. It answers a narrower question: did the AP2 receipts and VI mandate chain form a coherent evidence bundle?
+
+```typescript
+import { verifyAp2ViEvidence, verifyAp2ViEvidenceAsync } from '@atrib/verify'
+
+const result = verifyAp2ViEvidence({
+  trustedIssuerKeys: [issuerJwk],
+  ap2: {
+    paymentReceipt,
+    checkoutReceipt,
+    closedPaymentMandate,
+    closedCheckoutMandate,
+  },
+  vi: {
+    credentials: [
+      { layer: 'L1', sdJwt: issuerCredential },
+      { layer: 'L2', sdJwt: userMandate },
+      { layer: 'L3_PAYMENT', sdJwt: agentPaymentMandate, parentPresentation },
+      { layer: 'L3_CHECKOUT', sdJwt: agentCheckoutMandate, parentPresentation },
+    ],
+  },
+})
+```
+
+Use the async verifier when AP2 receipts arrive as compact signed JWTs:
+
+```typescript
+const result = await verifyAp2ViEvidenceAsync(
+  {
+    receiptJwtIssuers: [
+      {
+        issuer: 'https://verifier.example',
+        audience: 'merchant:checkout',
+        metadataUrl: 'https://verifier.example/.well-known/ap2',
+      },
+    ],
+    ap2: {
+      paymentReceiptJwt,
+      closedPaymentMandate,
+    },
+  },
+  { receiptJwtPolicy: 'require' },
+)
+```
+
+Checks performed when evidence is present:
+
+- AP2 PaymentReceipt / CheckoutReceipt success, required fields, and `reference` binding to a closed mandate serialization or explicit closed-mandate hash.
+- Compact AP2 receipt JWT verification with `jose`, using trusted local JWKS, `jwksUrl`, or verifier metadata containing inline `jwks` or `jwks_uri`.
+- VI SD-JWT parsing for L1, L2, L3 payment, and L3 checkout credentials.
+- ES256 signatures: L1 via trusted issuer keys, L2 via L1 `cnf.jwk`, L3 via the L2 delegated agent key.
+- `sd_hash` links, disclosure digest links, autonomous L2 `cnf.jwk` consistency, and final checkout/payment binding.
+
+The default signature policy is `require`. Missing keys or invalid signatures make `valid` false while still returning a structured result. Use `signaturePolicy: "best-effort"` for structural triage where issuer keys are not yet available.
+
+The default receipt JWT policy is also `require`. Invalid receipt JWTs make `valid` false. Use `receiptJwtPolicy: "best-effort"` when decoded receipt objects are already available and JWT verification is an advisory signal.
+
 ### `calculate(options): Promise<RecommendationDocument>`
 
 Post-hoc calculation when no agent SDK was present. Always returns a fully-shaped document, unsigned with a warning if the merchant key is missing.
@@ -122,6 +181,8 @@ For advanced use (custom calculators, alternative signing flows), the package al
 - `isValidPolicy(doc)`: schema check for `PolicyDocument`
 - `signRecommendation(unsigned, privateKey)`: JCS + Ed25519 signing
 - `verifyRecommendationSignature(doc, publicKey)`: signature verification
+- `verifyAp2ViEvidence(bundle, options?)`: decoded AP2 / VI receipt and mandate-chain evidence checking
+- `verifyAp2ViEvidenceAsync(bundle, options?)`: compact AP2 receipt JWT verification plus the decoded evidence checks
 - `recommendationSigningInput(doc)`: the canonical bytes that get signed
 - `distributionsMatch(a, b)`: float-tolerant equality (within `1e-9` per recipient)
 - `fetchGraph(endpoint, contextId, treeSize?)`, `fetchSessionPolicyRecord`, `fetchPolicyDocument`
@@ -149,7 +210,7 @@ The merchant's payment pipeline never crashes because of an atrib problem. It ju
 
 ## Test coverage
 
-184 tests across 10 test files covering the [§4.6](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#46-the-calculation-algorithm) calculation algorithm, graph endpoint client, JCS canonicalization, Ed25519 signing, settlement recommendations, policy templates, policy builder, calculation edge cases, property-based testing with fast-check, and full `verify()` / `calculate()` paths including [§5.8](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#58-degradation-contract) degradation.
+320 tests across 21 test files covering the [§4.6](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#46-the-calculation-algorithm) calculation algorithm, graph endpoint client, JCS canonicalization, Ed25519 signing, settlement recommendations, policy templates, policy builder, calculation edge cases, property-based testing with fast-check, AP2 / VI evidence checking, and full `verify()` / `calculate()` paths including [§5.8](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#58-degradation-contract) degradation.
 
 Run them with `pnpm --filter @atrib/verify test`.
 
@@ -162,6 +223,7 @@ Run them with `pnpm --filter @atrib/verify test`.
 | [§4.6](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#46-the-calculation-algorithm)         | Pure calculation algorithm                           |
 | [§4.7](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#47-settlement-recommendation-document)         | Recommendation document signing/verification         |
 | [§5.5](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#55-atribverify-merchant-verification-library)         | `AtribVerifier` class. `verify()` and `calculate()` |
+| [§5.5.4](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#554-ap2--verifiable-intent-evidence-checks) | AP2 / VI evidence checks                             |
 | [§5.8](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#58-degradation-contract)         | Degradation contract; failures never break the host |
 
 The full protocol spec is at [`atrib-spec.md`](https://github.com/creatornader/atrib/blob/main/atrib-spec.md).

package/dist/ap2-vi-evidence.d.ts

@@ -0,0 +1,96 @@
+export type ViCredentialLayer = 'L1' | 'L2' | 'L3_PAYMENT' | 'L3_CHECKOUT';
+export type ViMode = 'immediate' | 'autonomous' | 'unknown';
+export interface ViCredentialInput {
+    layer: ViCredentialLayer;
+    sdJwt: string;
+    parentPresentation?: string;
+}
+export interface Ap2EvidenceInput {
+    paymentReceipt?: unknown;
+    checkoutReceipt?: unknown;
+    paymentReceiptJwt?: string;
+    checkoutReceiptJwt?: string;
+    closedPaymentMandate?: string;
+    closedCheckoutMandate?: string;
+    closedPaymentMandateHash?: string;
+    closedCheckoutMandateHash?: string;
+}
+export interface Ap2ReceiptJwtIssuer {
+    issuer?: string;
+    audience?: string | string[];
+    jwks?: JsonWebKey[] | {
+        keys: JsonWebKey[];
+    };
+    jwksUrl?: string;
+    metadataUrl?: string;
+}
+export interface Ap2ViEvidenceBundle {
+    ap2?: Ap2EvidenceInput;
+    vi?: {
+        credentials?: ViCredentialInput[];
+    };
+    trustedIssuerKeys?: JsonWebKey[];
+    receiptJwtIssuers?: Ap2ReceiptJwtIssuer[];
+}
+export interface VerifyAp2ViEvidenceOptions {
+    trustedIssuerKeys?: JsonWebKey[];
+    receiptJwtIssuers?: Ap2ReceiptJwtIssuer[];
+    receiptJwtPolicy?: 'require' | 'best-effort';
+    signaturePolicy?: 'require' | 'best-effort';
+    nowSeconds?: number;
+    clockSkewSeconds?: number;
+    fetch?: typeof fetch;
+}
+export interface SignatureCheck {
+    status: 'verified' | 'invalid' | 'not_checked';
+    reason?: string;
+}
+export interface ViCredentialCheck {
+    layer: ViCredentialLayer;
+    alg: string | null;
+    typ: string | null;
+    kid: string | null;
+    signature: SignatureCheck;
+    sdHashOk: boolean | null;
+    disclosuresOk: boolean | null;
+    mandateVcts: string[];
+}
+export interface Ap2ReceiptCheck {
+    present: boolean;
+    status: string | null;
+    success: boolean;
+    reference: string | null;
+    referenceOk: boolean | null;
+    missingFields: string[];
+    jwt?: Ap2ReceiptJwtCheck;
+}
+export interface Ap2ReceiptJwtCheck {
+    present: boolean;
+    verified: boolean;
+    issuer: string | null;
+    kid: string | null;
+    alg: string | null;
+    jwksSource: 'static' | 'jwks_url' | 'metadata' | null;
+    error?: string;
+}
+export interface Ap2EvidenceCheck {
+    paymentReceipt?: Ap2ReceiptCheck;
+    checkoutReceipt?: Ap2ReceiptCheck;
+}
+export interface ViEvidenceCheck {
+    mode: ViMode;
+    credentials: ViCredentialCheck[];
+    delegationOk: boolean | null;
+    checkoutPaymentBindingOk: boolean | null;
+}
+export interface Ap2ViEvidenceVerification {
+    valid: boolean;
+    transactionAccepted: boolean;
+    ap2: Ap2EvidenceCheck;
+    vi: ViEvidenceCheck;
+    errors: string[];
+    warnings: string[];
+}
+export declare function verifyAp2ViEvidence(bundle: Ap2ViEvidenceBundle, options?: VerifyAp2ViEvidenceOptions): Ap2ViEvidenceVerification;
+export declare function verifyAp2ViEvidenceAsync(bundle: Ap2ViEvidenceBundle, options?: VerifyAp2ViEvidenceOptions): Promise<Ap2ViEvidenceVerification>;
+//# sourceMappingURL=ap2-vi-evidence.d.ts.map

package/dist/ap2-vi-evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ap2-vi-evidence.d.ts","sourceRoot":"","sources":["../src/ap2-vi-evidence.ts"],"names":[],"mappings":"AAeA,MAAM,MAAM,iBAAiB,GAAG,IAAI,GAAG,IAAI,GAAG,YAAY,GAAG,aAAa,CAAA;AAC1E,MAAM,MAAM,MAAM,GAAG,WAAW,GAAG,YAAY,GAAG,SAAS,CAAA;AAE3D,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,iBAAiB,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC,yBAAyB,CAAC,EAAE,MAAM,CAAA;CACnC;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IAC5B,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG;QAAE,IAAI,EAAE,UAAU,EAAE,CAAA;KAAE,CAAA;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,CAAC,EAAE,gBAAgB,CAAA;IACtB,EAAE,CAAC,EAAE;QACH,WAAW,CAAC,EAAE,iBAAiB,EAAE,CAAA;KAClC,CAAA;IACD,iBAAiB,CAAC,EAAE,UAAU,EAAE,CAAA;IAChC,iBAAiB,CAAC,EAAE,mBAAmB,EAAE,CAAA;CAC1C;AAED,MAAM,WAAW,0BAA0B;IACzC,iBAAiB,CAAC,EAAE,UAAU,EAAE,CAAA;IAChC,iBAAiB,CAAC,EAAE,mBAAmB,EAAE,CAAA;IACzC,gBAAgB,CAAC,EAAE,SAAS,GAAG,aAAa,CAAA;IAC5C,eAAe,CAAC,EAAE,SAAS,GAAG,aAAa,CAAA;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,aAAa,CAAA;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,iBAAiB,CAAA;IACxB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,SAAS,EAAE,cAAc,CAAA;IACzB,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAA;IACxB,aAAa,EAAE,OAAO,GAAG,IAAI,CAAA;IAC7B,WAAW,EAAE,MAAM,EAAE,CAAA;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,WAAW,EAAE,OAAO,GAAG,IAAI,CAAA;IAC3B,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,GAAG,CAAC,EAAE,kBAAkB,CAAA;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAA;IAChB,QAAQ,EAAE,OAAO,CAAA;IACjB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,UAAU,EAAE,QAAQ,GAAG,UAAU,GAAG,UAAU,GAAG,IAAI,CAAA;IACrD,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,CAAC,EAAE,eAAe,CAAA;IAChC,eAAe,CAAC,EAAE,eAAe,CAAA;CAClC;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,iBAAiB,EAAE,CAAA;IAChC,YAAY,EAAE,OAAO,GAAG,IAAI,CAAA;IAC5B,wBAAwB,EAAE,OAAO,GAAG,IAAI,CAAA;CACzC;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,OAAO,CAAA;IACd,mBAAmB,EAAE,OAAO,CAAA;IAC5B,GAAG,EAAE,gBAAgB,CAAA;IACrB,EAAE,EAAE,eAAe,CAAA;IACnB,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB;AAujBD,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,mBAAmB,EAC3B,OAAO,GAAE,0BAA+B,GACvC,yBAAyB,CA0H3B;AAED,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,mBAAmB,EAC3B,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAAC,yBAAyB,CAAC,CAkFpC"}

package/dist/ap2-vi-evidence.js

@@ -0,0 +1,586 @@
+// SPDX-License-Identifier: Apache-2.0
+import canonicalize from 'canonicalize';
+import { createPublicKey, verify as verifyEcdsa } from 'node:crypto';
+import { base64urlDecode, base64urlEncode, sha256 } from '@atrib/mcp';
+import { createLocalJWKSet, createRemoteJWKSet, customFetch, decodeJwt, decodeProtectedHeader, jwtVerify, } from 'jose';
+const textEncoder = new TextEncoder();
+const textDecoder = new TextDecoder();
+function isRecord(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+function isString(value) {
+    return typeof value === 'string';
+}
+function isNumber(value) {
+    return typeof value === 'number' && Number.isFinite(value);
+}
+function isJsonWebKeySet(value) {
+    return (isRecord(value) && Array.isArray(value['keys']) && value['keys'].every((key) => isRecord(key)));
+}
+function hashAscii(value) {
+    return base64urlEncode(sha256(textEncoder.encode(value)));
+}
+function decodeBase64urlJson(value) {
+    return JSON.parse(textDecoder.decode(base64urlDecode(value)));
+}
+function signatureCheck(status, reason) {
+    return reason === undefined ? { status } : { status, reason };
+}
+function collectDelegatePayloadDigests(payload) {
+    const digests = new Set();
+    const delegatePayload = payload['delegate_payload'];
+    if (!Array.isArray(delegatePayload))
+        return digests;
+    for (const item of delegatePayload) {
+        if (isRecord(item) && isString(item['...'])) {
+            digests.add(item['...']);
+        }
+    }
+    return digests;
+}
+function disclosureValue(decoded) {
+    if (!Array.isArray(decoded))
+        return undefined;
+    if (decoded.length === 2)
+        return decoded[1];
+    if (decoded.length >= 3)
+        return decoded[2];
+    return undefined;
+}
+function parseCredential(input) {
+    const [jwt, ...rawDisclosures] = input.sdJwt.split('~');
+    if (!jwt)
+        throw new Error('vi_jwt_malformed');
+    const parts = jwt.split('.');
+    if (parts.length !== 3 || !parts[0] || !parts[1] || !parts[2]) {
+        throw new Error('vi_jwt_malformed');
+    }
+    const header = decodeBase64urlJson(parts[0]);
+    const payload = decodeBase64urlJson(parts[1]);
+    if (!isRecord(header) || !isRecord(payload))
+        throw new Error('vi_jwt_malformed');
+    const disclosures = rawDisclosures
+        .filter((value) => value.length > 0)
+        .map((encoded) => {
+        const value = disclosureValue(decodeBase64urlJson(encoded));
+        return { encoded, digest: hashAscii(encoded), value };
+    });
+    const mandateValues = disclosures.flatMap((disclosure) => isRecord(disclosure.value) && isString(disclosure.value['vct']) ? [disclosure.value] : []);
+    return {
+        input,
+        jwt,
+        header,
+        payload,
+        signingInput: `${parts[0]}.${parts[1]}`,
+        signature: base64urlDecode(parts[2]),
+        disclosures,
+        mandateValues,
+    };
+}
+function getKid(jwk) {
+    const kid = jwk ? jwk['kid'] : undefined;
+    return isString(kid) ? kid : null;
+}
+function getCnfJwk(record) {
+    const cnf = record?.['cnf'];
+    if (!isRecord(cnf))
+        return undefined;
+    const jwk = cnf['jwk'];
+    return isRecord(jwk) ? jwk : undefined;
+}
+function canonicalJson(value) {
+    const canonical = canonicalize(value);
+    return typeof canonical === 'string' ? canonical : null;
+}
+function sameJson(left, right) {
+    const leftCanonical = canonicalJson(left);
+    const rightCanonical = canonicalJson(right);
+    return leftCanonical !== null && leftCanonical === rightCanonical;
+}
+function normalizeJwks(value) {
+    const keys = Array.isArray(value) ? value : value.keys;
+    return { keys: keys };
+}
+function verifyJwtSignature(parsed, publicJwk) {
+    const key = createPublicKey({ key: publicJwk, format: 'jwk' });
+    return verifyEcdsa('sha256', Buffer.from(parsed.signingInput, 'ascii'), { key, dsaEncoding: 'ieee-p1363' }, Buffer.from(parsed.signature));
+}
+function findIssuerKey(kid, keys) {
+    if (kid === null)
+        return keys[0];
+    return keys.find((key) => getKid(key) === kid);
+}
+function receiptJwtError(kind, code) {
+    return `ap2_${kind}_receipt_jwt_${code}`;
+}
+function addReceiptJwtFailure(verification, kind, code, policy) {
+    const error = receiptJwtError(kind, code);
+    verification.check.error = error;
+    if (policy === 'require')
+        verification.errors.push(error);
+    else
+        verification.warnings.push(error);
+}
+function findReceiptJwtIssuer(issuer, issuers) {
+    if (issuer !== null) {
+        const exact = issuers.find((candidate) => candidate.issuer === issuer);
+        if (exact)
+            return exact;
+    }
+    return issuers.find((candidate) => candidate.issuer === undefined);
+}
+async function fetchJson(url, fetchImpl) {
+    const fetchFn = fetchImpl ?? globalThis.fetch;
+    if (typeof fetchFn !== 'function')
+        throw new Error('fetch_unavailable');
+    const response = await fetchFn(url);
+    if (!response.ok)
+        throw new Error('metadata_fetch_failed');
+    return response.json();
+}
+async function resolveReceiptJwtKey(issuer, fetchImpl) {
+    const remoteOptions = fetchImpl ? { [customFetch]: fetchImpl } : undefined;
+    if (issuer.jwks) {
+        return {
+            getKey: createLocalJWKSet(normalizeJwks(issuer.jwks)),
+            source: 'static',
+        };
+    }
+    if (issuer.jwksUrl) {
+        return {
+            getKey: createRemoteJWKSet(new URL(issuer.jwksUrl), remoteOptions),
+            source: 'jwks_url',
+        };
+    }
+    if (issuer.metadataUrl) {
+        const metadata = await fetchJson(issuer.metadataUrl, fetchImpl);
+        if (!isRecord(metadata))
+            throw new Error('metadata_invalid');
+        const inlineJwks = metadata['jwks'];
+        if (isJsonWebKeySet(inlineJwks)) {
+            return {
+                getKey: createLocalJWKSet(normalizeJwks(inlineJwks)),
+                source: 'metadata',
+            };
+        }
+        const jwksUri = metadata['jwks_uri'];
+        if (isString(jwksUri)) {
+            return {
+                getKey: createRemoteJWKSet(new URL(jwksUri), remoteOptions),
+                source: 'metadata',
+            };
+        }
+        throw new Error('metadata_jwks_missing');
+    }
+    throw new Error('key_source_missing');
+}
+function expectedTyp(layer, typ) {
+    if (layer === 'L1')
+        return typ === 'sd+jwt';
+    if (layer === 'L2')
+        return typ === 'kb-sd-jwt' || typ === 'kb-sd-jwt+kb';
+    return typ === 'kb-sd-jwt';
+}
+function disclosureDigestsOk(parsed) {
+    if (parsed.disclosures.length === 0)
+        return null;
+    const sd = parsed.payload['_sd'];
+    const sdDigests = new Set(Array.isArray(sd) ? sd.filter(isString) : []);
+    const delegateDigests = collectDelegatePayloadDigests(parsed.payload);
+    return parsed.disclosures.every((disclosure) => sdDigests.has(disclosure.digest) || delegateDigests.has(disclosure.digest));
+}
+function initialCredentialCheck(parsed) {
+    const alg = isString(parsed.header['alg']) ? parsed.header['alg'] : null;
+    const typ = isString(parsed.header['typ']) ? parsed.header['typ'] : null;
+    const kid = isString(parsed.header['kid']) ? parsed.header['kid'] : null;
+    return {
+        layer: parsed.input.layer,
+        alg,
+        typ,
+        kid,
+        signature: signatureCheck('not_checked'),
+        sdHashOk: null,
+        disclosuresOk: disclosureDigestsOk(parsed),
+        mandateVcts: parsed.mandateValues.map((mandate) => String(mandate['vct'])),
+    };
+}
+function checkReceipt(value, requiredFields, expectedReference) {
+    if (!isRecord(value)) {
+        return {
+            present: value !== undefined,
+            status: null,
+            success: false,
+            reference: null,
+            referenceOk: null,
+            missingFields: ['receipt_object'],
+        };
+    }
+    const status = isString(value['status']) ? value['status'] : null;
+    const reference = isString(value['reference']) ? value['reference'] : null;
+    const missingFields = requiredFields.filter((field) => !isString(value[field]) && !isNumber(value[field]));
+    const success = status === 'Success';
+    const referenceOk = expectedReference === undefined ? null : reference === expectedReference;
+    return {
+        present: true,
+        status,
+        success,
+        reference,
+        referenceOk,
+        missingFields,
+    };
+}
+function emptyJwtReceiptCheck(jwt) {
+    return {
+        present: true,
+        status: null,
+        success: false,
+        reference: null,
+        referenceOk: null,
+        missingFields: ['receipt_object'],
+        jwt,
+    };
+}
+async function verifyReceiptJwt(kind, receiptJwt, issuers, policy, nowSeconds, clockSkewSeconds, fetchImpl) {
+    const verification = {
+        check: {
+            present: true,
+            verified: false,
+            issuer: null,
+            kid: null,
+            alg: null,
+            jwksSource: null,
+        },
+        errors: [],
+        warnings: [],
+    };
+    try {
+        const header = decodeProtectedHeader(receiptJwt);
+        const payload = decodeJwt(receiptJwt);
+        const issuer = isString(payload.iss) ? payload.iss : null;
+        verification.check.alg = isString(header.alg) ? header.alg : null;
+        verification.check.kid = isString(header.kid) ? header.kid : null;
+        verification.check.issuer = issuer;
+        if (header.alg !== 'ES256') {
+            addReceiptJwtFailure(verification, kind, 'alg_unsupported', policy);
+            return verification;
+        }
+        const issuerConfig = findReceiptJwtIssuer(issuer, issuers);
+        if (!issuerConfig) {
+            addReceiptJwtFailure(verification, kind, 'issuer_untrusted', policy);
+            return verification;
+        }
+        const key = await resolveReceiptJwtKey(issuerConfig, fetchImpl);
+        verification.check.jwksSource = key.source;
+        const verifyOptions = {
+            algorithms: ['ES256'],
+            clockTolerance: clockSkewSeconds,
+            currentDate: new Date(nowSeconds * 1000),
+        };
+        if (issuerConfig.audience !== undefined)
+            verifyOptions.audience = issuerConfig.audience;
+        if (issuerConfig.issuer !== undefined)
+            verifyOptions.issuer = issuerConfig.issuer;
+        const verified = await jwtVerify(receiptJwt, key.getKey, verifyOptions);
+        verification.check.verified = true;
+        verification.payload = verified.payload;
+        return verification;
+    }
+    catch (error) {
+        const code = error instanceof Error && error.message ? error.message : 'invalid';
+        addReceiptJwtFailure(verification, kind, code === 'fetch_unavailable' ? 'metadata_fetch_unavailable' : 'invalid', policy);
+        if (code !== 'invalid' && code !== 'fetch_unavailable') {
+            verification.warnings.push(`${receiptJwtError(kind, 'detail')}:${code}`);
+        }
+        return verification;
+    }
+}
+function expectedReceiptReference(serialized, explicitHash) {
+    if (explicitHash)
+        return explicitHash;
+    if (serialized)
+        return hashAscii(serialized);
+    return undefined;
+}
+function findMandates(parsedCredentials, vct) {
+    return parsedCredentials.flatMap((parsed) => parsed.mandateValues.filter((mandate) => mandate['vct'] === vct));
+}
+function checkCheckoutHash(mandates, errors) {
+    for (const mandate of mandates) {
+        const checkoutJwt = mandate['checkout_jwt'];
+        const checkoutHash = mandate['checkout_hash'];
+        if (!isString(checkoutJwt) || !isString(checkoutHash))
+            continue;
+        if (hashAscii(checkoutJwt) !== checkoutHash) {
+            errors.push('vi_checkout_hash_mismatch');
+        }
+    }
+}
+function checkPaymentCheckoutBinding(paymentMandates, checkoutMandates, errors) {
+    if (paymentMandates.length === 0 || checkoutMandates.length === 0)
+        return null;
+    const checkoutHashes = new Set(checkoutMandates.map((mandate) => mandate['checkout_hash']).filter(isString));
+    const ok = paymentMandates.every((mandate) => isString(mandate['transaction_id']) && checkoutHashes.has(mandate['transaction_id']));
+    if (!ok)
+        errors.push('vi_checkout_payment_binding_mismatch');
+    return ok;
+}
+function checkDelegation(openCheckoutMandates, openPaymentMandates, errors) {
+    const jwks = [...openCheckoutMandates, ...openPaymentMandates]
+        .map(getCnfJwk)
+        .filter((jwk) => jwk !== undefined);
+    if (jwks.length === 0)
+        return null;
+    const first = jwks[0];
+    const ok = jwks.every((jwk) => sameJson(jwk, first));
+    if (!ok)
+        errors.push('vi_l2_cnf_mismatch');
+    return ok;
+}
+function verifyCredentialSignatures(parsedCredentials, checks, trustedIssuerKeys, signaturePolicy, errors, warnings) {
+    const byLayer = new Map();
+    for (const parsed of parsedCredentials)
+        byLayer.set(parsed.input.layer, parsed);
+    const l1 = byLayer.get('L1');
+    const l2 = byLayer.get('L2');
+    const l1UserKey = getCnfJwk(l1?.payload);
+    const l2AgentKeys = l2?.mandateValues.map(getCnfJwk).filter((jwk) => jwk !== undefined) ?? [];
+    for (let index = 0; index < parsedCredentials.length; index += 1) {
+        const parsed = parsedCredentials[index];
+        const check = checks[index];
+        if (check.alg !== 'ES256') {
+            check.signature = signatureCheck('invalid', 'alg');
+            errors.push('vi_alg_unsupported');
+            continue;
+        }
+        let key;
+        if (parsed.input.layer === 'L1') {
+            key = findIssuerKey(check.kid, trustedIssuerKeys);
+        }
+        else if (parsed.input.layer === 'L2') {
+            key = l1UserKey;
+            if (key && getKid(key) !== null && check.kid !== getKid(key))
+                errors.push('vi_l2_kid_mismatch');
+        }
+        else {
+            key = l2AgentKeys.find((candidate) => getKid(candidate) === check.kid);
+        }
+        if (!key) {
+            check.signature = signatureCheck('not_checked', 'missing_key');
+            warnings.push(`vi_signature_key_missing:${parsed.input.layer}`);
+            if (signaturePolicy === 'require')
+                errors.push('vi_signature_key_missing');
+            continue;
+        }
+        try {
+            check.signature = verifyJwtSignature(parsed, key)
+                ? signatureCheck('verified')
+                : signatureCheck('invalid', 'signature');
+            if (check.signature.status === 'invalid')
+                errors.push('vi_signature_invalid');
+        }
+        catch {
+            check.signature = signatureCheck('invalid', 'signature');
+            errors.push('vi_signature_invalid');
+        }
+    }
+}
+function checkSdHash(parsedCredentials, checks, errors) {
+    const byLayer = new Map();
+    for (const parsed of parsedCredentials)
+        byLayer.set(parsed.input.layer, parsed);
+    const l1 = byLayer.get('L1');
+    for (let index = 0; index < parsedCredentials.length; index += 1) {
+        const parsed = parsedCredentials[index];
+        const check = checks[index];
+        if (parsed.input.layer === 'L1') {
+            check.sdHashOk = parsed.payload['sd_hash'] === undefined;
+            continue;
+        }
+        const sdHash = parsed.payload['sd_hash'];
+        if (!isString(sdHash)) {
+            check.sdHashOk = false;
+            errors.push('vi_sd_hash_missing');
+            continue;
+        }
+        let parentPresentation;
+        if (parsed.input.layer === 'L2') {
+            parentPresentation = l1?.input.sdJwt;
+        }
+        else {
+            parentPresentation = parsed.input.parentPresentation;
+        }
+        if (!parentPresentation) {
+            check.sdHashOk = null;
+            continue;
+        }
+        check.sdHashOk = hashAscii(parentPresentation) === sdHash;
+        if (!check.sdHashOk)
+            errors.push('vi_sd_hash_mismatch');
+    }
+}
+function checkTimeWindow(parsedCredentials, nowSeconds, clockSkewSeconds, errors) {
+    for (const parsed of parsedCredentials) {
+        const exp = parsed.payload['exp'];
+        if (isNumber(exp) && nowSeconds > exp + clockSkewSeconds)
+            errors.push('vi_credential_expired');
+        const iat = parsed.payload['iat'];
+        if (isNumber(iat) && nowSeconds + clockSkewSeconds < iat)
+            errors.push('vi_credential_iat_in_future');
+    }
+}
+export function verifyAp2ViEvidence(bundle, options = {}) {
+    const errors = [];
+    const warnings = [];
+    const signaturePolicy = options.signaturePolicy ?? 'require';
+    const trustedIssuerKeys = options.trustedIssuerKeys ?? bundle.trustedIssuerKeys ?? [];
+    const nowSeconds = options.nowSeconds ?? Math.floor(Date.now() / 1000);
+    const clockSkewSeconds = options.clockSkewSeconds ?? 300;
+    const parsedCredentials = [];
+    const credentialChecks = [];
+    for (const credential of bundle.vi?.credentials ?? []) {
+        try {
+            const parsed = parseCredential(credential);
+            const check = initialCredentialCheck(parsed);
+            parsedCredentials.push(parsed);
+            credentialChecks.push(check);
+            if (!expectedTyp(credential.layer, check.typ))
+                errors.push('vi_typ_mismatch');
+            if (check.disclosuresOk === false)
+                errors.push('vi_disclosure_digest_mismatch');
+        }
+        catch (error) {
+            const code = error instanceof Error && error.message ? error.message : 'vi_jwt_malformed';
+            errors.push(code);
+            credentialChecks.push({
+                layer: credential.layer,
+                alg: null,
+                typ: null,
+                kid: null,
+                signature: signatureCheck('invalid', 'parse'),
+                sdHashOk: null,
+                disclosuresOk: null,
+                mandateVcts: [],
+            });
+        }
+    }
+    checkSdHash(parsedCredentials, credentialChecks, errors);
+    checkTimeWindow(parsedCredentials, nowSeconds, clockSkewSeconds, errors);
+    verifyCredentialSignatures(parsedCredentials, credentialChecks, trustedIssuerKeys, signaturePolicy, errors, warnings);
+    const finalPaymentMandates = findMandates(parsedCredentials, 'mandate.payment.1');
+    const finalCheckoutMandates = findMandates(parsedCredentials, 'mandate.checkout.1');
+    const openPaymentMandates = findMandates(parsedCredentials, 'mandate.payment.open.1');
+    const openCheckoutMandates = findMandates(parsedCredentials, 'mandate.checkout.open.1');
+    checkCheckoutHash(finalCheckoutMandates, errors);
+    const checkoutPaymentBindingOk = checkPaymentCheckoutBinding(finalPaymentMandates, finalCheckoutMandates, errors);
+    const delegationOk = checkDelegation(openCheckoutMandates, openPaymentMandates, errors);
+    const mode = openPaymentMandates.length > 0 || openCheckoutMandates.length > 0
+        ? 'autonomous'
+        : finalPaymentMandates.length > 0 || finalCheckoutMandates.length > 0
+            ? 'immediate'
+            : 'unknown';
+    const ap2 = {};
+    const expectedPaymentReference = expectedReceiptReference(bundle.ap2?.closedPaymentMandate, bundle.ap2?.closedPaymentMandateHash);
+    const expectedCheckoutReference = expectedReceiptReference(bundle.ap2?.closedCheckoutMandate, bundle.ap2?.closedCheckoutMandateHash);
+    if (bundle.ap2?.paymentReceipt !== undefined) {
+        ap2.paymentReceipt = checkReceipt(bundle.ap2.paymentReceipt, ['status', 'iss', 'iat', 'reference', 'payment_id'], expectedPaymentReference);
+        if (!ap2.paymentReceipt.success)
+            errors.push('ap2_payment_receipt_not_success');
+        if (ap2.paymentReceipt.missingFields.length > 0)
+            errors.push('ap2_payment_receipt_missing_fields');
+        if (ap2.paymentReceipt.referenceOk === false)
+            errors.push('ap2_payment_receipt_reference_mismatch');
+    }
+    if (bundle.ap2?.checkoutReceipt !== undefined) {
+        ap2.checkoutReceipt = checkReceipt(bundle.ap2.checkoutReceipt, ['status', 'iss', 'iat', 'reference', 'order_id'], expectedCheckoutReference);
+        if (!ap2.checkoutReceipt.success)
+            errors.push('ap2_checkout_receipt_not_success');
+        if (ap2.checkoutReceipt.missingFields.length > 0)
+            errors.push('ap2_checkout_receipt_missing_fields');
+        if (ap2.checkoutReceipt.referenceOk === false)
+            errors.push('ap2_checkout_receipt_reference_mismatch');
+    }
+    const paymentAccepted = ap2.paymentReceipt?.success === true && ap2.paymentReceipt.referenceOk !== false;
+    const checkoutAccepted = ap2.checkoutReceipt?.success === true && ap2.checkoutReceipt.referenceOk !== false;
+    const transactionAccepted = paymentAccepted || checkoutAccepted;
+    const hasAp2Receipt = ap2.paymentReceipt?.present === true || ap2.checkoutReceipt?.present === true;
+    return {
+        valid: errors.length === 0 && (!hasAp2Receipt || transactionAccepted),
+        transactionAccepted,
+        ap2,
+        vi: {
+            mode,
+            credentials: credentialChecks,
+            delegationOk,
+            checkoutPaymentBindingOk,
+        },
+        errors: [...new Set(errors)],
+        warnings: [...new Set(warnings)],
+    };
+}
+export async function verifyAp2ViEvidenceAsync(bundle, options = {}) {
+    const ap2 = { ...bundle.ap2 };
+    const receiptJwtIssuers = options.receiptJwtIssuers ?? bundle.receiptJwtIssuers ?? [];
+    const receiptJwtPolicy = options.receiptJwtPolicy ?? 'require';
+    const nowSeconds = options.nowSeconds ?? Math.floor(Date.now() / 1000);
+    const clockSkewSeconds = options.clockSkewSeconds ?? 300;
+    const jwtErrors = [];
+    const jwtWarnings = [];
+    const paymentJwt = ap2.paymentReceiptJwt
+        ? await verifyReceiptJwt('payment', ap2.paymentReceiptJwt, receiptJwtIssuers, receiptJwtPolicy, nowSeconds, clockSkewSeconds, options.fetch)
+        : undefined;
+    if (paymentJwt) {
+        jwtErrors.push(...paymentJwt.errors);
+        jwtWarnings.push(...paymentJwt.warnings);
+        if (paymentJwt.payload) {
+            if (ap2.paymentReceipt !== undefined && !sameJson(ap2.paymentReceipt, paymentJwt.payload)) {
+                const code = receiptJwtError('payment', 'payload_mismatch');
+                if (receiptJwtPolicy === 'require')
+                    jwtErrors.push(code);
+                else
+                    jwtWarnings.push(code);
+            }
+            ap2.paymentReceipt = paymentJwt.payload;
+        }
+    }
+    const checkoutJwt = ap2.checkoutReceiptJwt
+        ? await verifyReceiptJwt('checkout', ap2.checkoutReceiptJwt, receiptJwtIssuers, receiptJwtPolicy, nowSeconds, clockSkewSeconds, options.fetch)
+        : undefined;
+    if (checkoutJwt) {
+        jwtErrors.push(...checkoutJwt.errors);
+        jwtWarnings.push(...checkoutJwt.warnings);
+        if (checkoutJwt.payload) {
+            if (ap2.checkoutReceipt !== undefined &&
+                !sameJson(ap2.checkoutReceipt, checkoutJwt.payload)) {
+                const code = receiptJwtError('checkout', 'payload_mismatch');
+                if (receiptJwtPolicy === 'require')
+                    jwtErrors.push(code);
+                else
+                    jwtWarnings.push(code);
+            }
+            ap2.checkoutReceipt = checkoutJwt.payload;
+        }
+    }
+    const result = verifyAp2ViEvidence({ ...bundle, ap2 }, options);
+    if (paymentJwt) {
+        if (result.ap2.paymentReceipt)
+            result.ap2.paymentReceipt.jwt = paymentJwt.check;
+        else
+            result.ap2.paymentReceipt = emptyJwtReceiptCheck(paymentJwt.check);
+    }
+    if (checkoutJwt) {
+        if (result.ap2.checkoutReceipt)
+            result.ap2.checkoutReceipt.jwt = checkoutJwt.check;
+        else
+            result.ap2.checkoutReceipt = emptyJwtReceiptCheck(checkoutJwt.check);
+    }
+    const errors = [...new Set([...result.errors, ...jwtErrors])];
+    const warnings = [...new Set([...result.warnings, ...jwtWarnings])];
+    const hasAp2Receipt = result.ap2.paymentReceipt?.present === true || result.ap2.checkoutReceipt?.present === true;
+    return {
+        ...result,
+        valid: errors.length === 0 && (!hasAp2Receipt || result.transactionAccepted),
+        errors,
+        warnings,
+    };
+}
+//# sourceMappingURL=ap2-vi-evidence.js.map

package/dist/ap2-vi-evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ap2-vi-evidence.js","sourceRoot":"","sources":["../src/ap2-vi-evidence.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,YAAY,MAAM,cAAc,CAAA;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,IAAI,WAAW,EAAE,MAAM,aAAa,CAAA;AACpE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AACrE,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,EACX,SAAS,EACT,qBAAqB,EACrB,SAAS,GACV,MAAM,MAAM,CAAA;AAyIb,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAA;AACrC,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAA;AAErC,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAA;AAClC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAC5D,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAC/F,CAAA;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AAC3D,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AAC/D,CAAC;AAED,SAAS,cAAc,CAAC,MAAgC,EAAE,MAAe;IACvE,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;AAC/D,CAAC;AAED,SAAS,6BAA6B,CAAC,OAAmB;IACxD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,MAAM,eAAe,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;IACnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC;QAAE,OAAO,OAAO,CAAA;IAEnD,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,OAAgB;IACvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAA;IAC7C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAA;IAC3C,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAA;IAC1C,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,KAAwB;IAC/C,MAAM,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACvD,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;IAE7C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;IACrC,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC5C,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;IAEhF,MAAM,WAAW,GAAG,cAAc;SAC/B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;SACnC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACf,MAAM,KAAK,GAAG,eAAe,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAA;QAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAA;IACvD,CAAC,CAAC,CAAA;IACJ,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CACvD,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAC1F,CAAA;IAED,OAAO;QACL,KAAK;QACL,GAAG;QACH,MAAM;QACN,OAAO;QACP,YAAY,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE;QACvC,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACpC,WAAW;QACX,aAAa;KACd,CAAA;AACH,CAAC;AAED,SAAS,MAAM,CAAC,GAAwC;IACtD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAE,GAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACxD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;AACnC,CAAC;AAED,SAAS,SAAS,CAAC,MAA8B;IAC/C,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,CAAA;IAC3B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAA;IACpC,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAA;IACtB,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAAkB,CAAC,CAAC,CAAC,SAAS,CAAA;AACxD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;IACrC,OAAO,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAA;AACzD,CAAC;AAED,SAAS,QAAQ,CAAC,IAAa,EAAE,KAAc;IAC7C,MAAM,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IACzC,MAAM,cAAc,GAAG,aAAa,CAAC,KAAK,CAAC,CAAA;IAC3C,OAAO,aAAa,KAAK,IAAI,IAAI,aAAa,KAAK,cAAc,CAAA;AACnE,CAAC;AAED,SAAS,aAAa,CAAC,KAA4C;IACjE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAA;IACtD,OAAO,EAAE,IAAI,EAAE,IAAa,EAAE,CAAA;AAChC,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAwB,EAAE,SAAqB;IACzE,MAAM,GAAG,GAAG,eAAe,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;IAC9D,OAAO,WAAW,CAChB,QAAQ,EACR,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,EACzC,EAAE,GAAG,EAAE,WAAW,EAAE,YAAY,EAAE,EAClC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAC9B,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAkB,EAAE,IAAkB;IAC3D,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAA;IAChC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,CAAA;AAChD,CAAC;AAED,SAAS,eAAe,CAAC,IAAiB,EAAE,IAAY;IACtD,OAAO,OAAO,IAAI,gBAAgB,IAAI,EAAE,CAAA;AAC1C,CAAC;AAED,SAAS,oBAAoB,CAC3B,YAAoC,EACpC,IAAiB,EACjB,IAAY,EACZ,MAAiC;IAEjC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACzC,YAAY,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAA;IAChC,IAAI,MAAM,KAAK,SAAS;QAAE,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;;QACpD,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AACxC,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAAqB,EACrB,OAA8B;IAE9B,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,CAAA;QACtE,IAAI,KAAK;YAAE,OAAO,KAAK,CAAA;IACzB,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,CAAA;AACpE,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,SAAmC;IACvE,MAAM,OAAO,GAAG,SAAS,IAAI,UAAU,CAAC,KAAK,CAAA;IAC7C,IAAI,OAAO,OAAO,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;IACvE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAA;IACnC,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;IAC1D,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAA;AACxB,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,MAA2B,EAC3B,SAAmC;IAEnC,MAAM,aAAa,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;IAE1E,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,OAAO;YACL,MAAM,EAAE,iBAAiB,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACrD,MAAM,EAAE,QAAQ;SACjB,CAAA;IACH,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO;YACL,MAAM,EAAE,kBAAkB,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC;YAClE,MAAM,EAAE,UAAU;SACnB,CAAA;IACH,CAAC;IAED,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;QAC/D,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;QAE5D,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAA;QACnC,IAAI,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC;YAChC,OAAO;gBACL,MAAM,EAAE,iBAAiB,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;gBACpD,MAAM,EAAE,UAAU;aACnB,CAAA;QACH,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAA;QACpC,IAAI,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACtB,OAAO;gBACL,MAAM,EAAE,kBAAkB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC;gBAC3D,MAAM,EAAE,UAAU;aACnB,CAAA;QACH,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;IAC1C,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;AACvC,CAAC;AAED,SAAS,WAAW,CAAC,KAAwB,EAAE,GAAkB;IAC/D,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,GAAG,KAAK,QAAQ,CAAA;IAC3C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,cAAc,CAAA;IACxE,OAAO,GAAG,KAAK,WAAW,CAAA;AAC5B,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAwB;IACnD,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAEhD,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAChC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IACvE,MAAM,eAAe,GAAG,6BAA6B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAErE,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,CAC7B,CAAC,UAAU,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAC3F,CAAA;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAwB;IACtD,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACxE,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACxE,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACxE,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK;QACzB,GAAG;QACH,GAAG;QACH,GAAG;QACH,SAAS,EAAE,cAAc,CAAC,aAAa,CAAC;QACxC,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,mBAAmB,CAAC,MAAM,CAAC;QAC1C,WAAW,EAAE,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;KAC3E,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CACnB,KAAc,EACd,cAAwB,EACxB,iBAA0B;IAE1B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO;YACL,OAAO,EAAE,KAAK,KAAK,SAAS;YAC5B,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,IAAI;YACjB,aAAa,EAAE,CAAC,gBAAgB,CAAC;SAClC,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACjE,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC1E,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,CACzC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAC9D,CAAA;IACD,MAAM,OAAO,GAAG,MAAM,KAAK,SAAS,CAAA;IACpC,MAAM,WAAW,GAAG,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,KAAK,iBAAiB,CAAA;IAE5F,OAAO;QACL,OAAO,EAAE,IAAI;QACb,MAAM;QACN,OAAO;QACP,SAAS;QACT,WAAW;QACX,aAAa;KACd,CAAA;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAuB;IACnD,OAAO;QACL,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,IAAI;QACf,WAAW,EAAE,IAAI;QACjB,aAAa,EAAE,CAAC,gBAAgB,CAAC;QACjC,GAAG;KACJ,CAAA;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,IAAiB,EACjB,UAAkB,EAClB,OAA8B,EAC9B,MAAiC,EACjC,UAAkB,EAClB,gBAAwB,EACxB,SAAmC;IAEnC,MAAM,YAAY,GAA2B;QAC3C,KAAK,EAAE;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,IAAI;YACZ,GAAG,EAAE,IAAI;YACT,GAAG,EAAE,IAAI;YACT,UAAU,EAAE,IAAI;SACjB;QACD,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE,EAAE;KACb,CAAA;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAA;QAChD,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;QACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;QAEzD,YAAY,CAAC,KAAK,CAAC,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;QACjE,YAAY,CAAC,KAAK,CAAC,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;QACjE,YAAY,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAA;QAElC,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;YAC3B,oBAAoB,CAAC,YAAY,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAA;YACnE,OAAO,YAAY,CAAA;QACrB,CAAC;QAED,MAAM,YAAY,GAAG,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC1D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,oBAAoB,CAAC,YAAY,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAA;YACpE,OAAO,YAAY,CAAA;QACrB,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAA;QAC/D,YAAY,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,MAAM,CAAA;QAE1C,MAAM,aAAa,GAAqB;YACtC,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,cAAc,EAAE,gBAAgB;YAChC,WAAW,EAAE,IAAI,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;SACzC,CAAA;QACD,IAAI,YAAY,CAAC,QAAQ,KAAK,SAAS;YAAE,aAAa,CAAC,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAA;QACvF,IAAI,YAAY,CAAC,MAAM,KAAK,SAAS;YAAE,aAAa,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAA;QAEjF,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;QAEvE,YAAY,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAA;QAClC,YAAY,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAqB,CAAA;QACrD,OAAO,YAAY,CAAA;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;QAChF,oBAAoB,CAClB,YAAY,EACZ,IAAI,EACJ,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,SAAS,EACvE,MAAM,CACP,CAAA;QACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACvD,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;QAC1E,CAAC;QACD,OAAO,YAAY,CAAA;IACrB,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,UAAmB,EAAE,YAAqB;IAC1E,IAAI,YAAY;QAAE,OAAO,YAAY,CAAA;IACrC,IAAI,UAAU;QAAE,OAAO,SAAS,CAAC,UAAU,CAAC,CAAA;IAC5C,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,iBAAqC,EAAE,GAAW;IACtE,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAC1C,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CACjE,CAAA;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAsB,EAAE,MAAgB;IACjE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;QAC3C,MAAM,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;QAC7C,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,SAAQ;QAC/D,IAAI,SAAS,CAAC,WAAW,CAAC,KAAK,YAAY,EAAE,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;QAC1C,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CAClC,eAA6B,EAC7B,gBAA8B,EAC9B,MAAgB;IAEhB,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAE9E,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAC7E,CAAA;IACD,MAAM,EAAE,GAAG,eAAe,CAAC,KAAK,CAC9B,CAAC,OAAO,EAAE,EAAE,CACV,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CACvF,CAAA;IACD,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAA;IAC5D,OAAO,EAAE,CAAA;AACX,CAAC;AAED,SAAS,eAAe,CACtB,oBAAkC,EAClC,mBAAiC,EACjC,MAAgB;IAEhB,MAAM,IAAI,GAAG,CAAC,GAAG,oBAAoB,EAAE,GAAG,mBAAmB,CAAC;SAC3D,GAAG,CAAC,SAAS,CAAC;SACd,MAAM,CAAC,CAAC,GAAG,EAAqB,EAAE,CAAC,GAAG,KAAK,SAAS,CAAC,CAAA;IACxD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;IACrB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAA;IACpD,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;IAC1C,OAAO,EAAE,CAAA;AACX,CAAC;AAED,SAAS,0BAA0B,CACjC,iBAAqC,EACrC,MAA2B,EAC3B,iBAA+B,EAC/B,eAA0C,EAC1C,MAAgB,EAChB,QAAkB;IAElB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuC,CAAA;IAC9D,KAAK,MAAM,MAAM,IAAI,iBAAiB;QAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IAE/E,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC5B,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC5B,MAAM,SAAS,GAAG,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IACxC,MAAM,WAAW,GACf,EAAE,EAAE,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAqB,EAAE,CAAC,GAAG,KAAK,SAAS,CAAC,IAAI,EAAE,CAAA;IAE9F,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,iBAAiB,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACjE,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAE,CAAA;QACxC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAE,CAAA;QAC5B,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;YAC1B,KAAK,CAAC,SAAS,GAAG,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;YAClD,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;YACjC,SAAQ;QACV,CAAC;QAED,IAAI,GAA2B,CAAA;QAC/B,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAChC,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAA;QACnD,CAAC;aAAM,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACvC,GAAG,GAAG,SAAS,CAAA;YACf,IAAI,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC;gBAC1D,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;QACrC,CAAC;aAAM,CAAC;YACN,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,CAAA;QACxE,CAAC;QAED,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,KAAK,CAAC,SAAS,GAAG,cAAc,CAAC,aAAa,EAAE,aAAa,CAAC,CAAA;YAC9D,QAAQ,CAAC,IAAI,CAAC,4BAA4B,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA;YAC/D,IAAI,eAAe,KAAK,SAAS;gBAAE,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAA;YAC1E,SAAQ;QACV,CAAC;QAED,IAAI,CAAC;YACH,KAAK,CAAC,SAAS,GAAG,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC;gBAC/C,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC;gBAC5B,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;YAC1C,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS;gBAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,CAAC,SAAS,GAAG,cAAc,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;YACxD,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,iBAAqC,EACrC,MAA2B,EAC3B,MAAgB;IAEhB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuC,CAAA;IAC9D,KAAK,MAAM,MAAM,IAAI,iBAAiB;QAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IAE/E,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAE5B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,iBAAiB,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACjE,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAE,CAAA;QACxC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAE,CAAA;QAE5B,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAChC,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,SAAS,CAAA;YACxD,SAAQ;QACV,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QACxC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACtB,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAA;YACtB,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;YACjC,SAAQ;QACV,CAAC;QAED,IAAI,kBAAsC,CAAA;QAC1C,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAChC,kBAAkB,GAAG,EAAE,EAAE,KAAK,CAAC,KAAK,CAAA;QACtC,CAAC;aAAM,CAAC;YACN,kBAAkB,GAAG,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAA;QACtD,CAAC;QAED,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAA;YACrB,SAAQ;QACV,CAAC;QAED,KAAK,CAAC,QAAQ,GAAG,SAAS,CAAC,kBAAkB,CAAC,KAAK,MAAM,CAAA;QACzD,IAAI,CAAC,KAAK,CAAC,QAAQ;YAAE,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAA;IACzD,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACtB,iBAAqC,EACrC,UAAkB,EAClB,gBAAwB,EACxB,MAAgB;IAEhB,KAAK,MAAM,MAAM,IAAI,iBAAiB,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QACjC,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,UAAU,GAAG,GAAG,GAAG,gBAAgB;YAAE,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;QAC9F,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QACjC,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,UAAU,GAAG,gBAAgB,GAAG,GAAG;YACtD,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAA;IAC9C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,MAA2B,EAC3B,UAAsC,EAAE;IAExC,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,SAAS,CAAA;IAC5D,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,MAAM,CAAC,iBAAiB,IAAI,EAAE,CAAA;IACrF,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IACtE,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,GAAG,CAAA;IAExD,MAAM,iBAAiB,GAAuB,EAAE,CAAA;IAChD,MAAM,gBAAgB,GAAwB,EAAE,CAAA;IAChD,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,EAAE,EAAE,WAAW,IAAI,EAAE,EAAE,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,eAAe,CAAC,UAAU,CAAC,CAAA;YAC1C,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAA;YAC5C,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YAC9B,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAE5B,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;YAC7E,IAAI,KAAK,CAAC,aAAa,KAAK,KAAK;gBAAE,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAA;QACjF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAA;YACzF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACjB,gBAAgB,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,GAAG,EAAE,IAAI;gBACT,GAAG,EAAE,IAAI;gBACT,GAAG,EAAE,IAAI;gBACT,SAAS,EAAE,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC;gBAC7C,QAAQ,EAAE,IAAI;gBACd,aAAa,EAAE,IAAI;gBACnB,WAAW,EAAE,EAAE;aAChB,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,WAAW,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAA;IACxD,eAAe,CAAC,iBAAiB,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAA;IACxE,0BAA0B,CACxB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,MAAM,EACN,QAAQ,CACT,CAAA;IAED,MAAM,oBAAoB,GAAG,YAAY,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAA;IACjF,MAAM,qBAAqB,GAAG,YAAY,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,CAAA;IACnF,MAAM,mBAAmB,GAAG,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC,CAAA;IACrF,MAAM,oBAAoB,GAAG,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC,CAAA;IAEvF,iBAAiB,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAA;IAChD,MAAM,wBAAwB,GAAG,2BAA2B,CAC1D,oBAAoB,EACpB,qBAAqB,EACrB,MAAM,CACP,CAAA;IACD,MAAM,YAAY,GAAG,eAAe,CAAC,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAA;IACvF,MAAM,IAAI,GACR,mBAAmB,CAAC,MAAM,GAAG,CAAC,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC;QAC/D,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,IAAI,qBAAqB,CAAC,MAAM,GAAG,CAAC;YACnE,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,SAAS,CAAA;IAEjB,MAAM,GAAG,GAAqB,EAAE,CAAA;IAChC,MAAM,wBAAwB,GAAG,wBAAwB,CACvD,MAAM,CAAC,GAAG,EAAE,oBAAoB,EAChC,MAAM,CAAC,GAAG,EAAE,wBAAwB,CACrC,CAAA;IACD,MAAM,yBAAyB,GAAG,wBAAwB,CACxD,MAAM,CAAC,GAAG,EAAE,qBAAqB,EACjC,MAAM,CAAC,GAAG,EAAE,yBAAyB,CACtC,CAAA;IAED,IAAI,MAAM,CAAC,GAAG,EAAE,cAAc,KAAK,SAAS,EAAE,CAAC;QAC7C,GAAG,CAAC,cAAc,GAAG,YAAY,CAC/B,MAAM,CAAC,GAAG,CAAC,cAAc,EACzB,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,YAAY,CAAC,EACnD,wBAAwB,CACzB,CAAA;QACD,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO;YAAE,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAA;QAC/E,IAAI,GAAG,CAAC,cAAc,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAA;QACnD,IAAI,GAAG,CAAC,cAAc,CAAC,WAAW,KAAK,KAAK;YAC1C,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAA;IACzD,CAAC;IAED,IAAI,MAAM,CAAC,GAAG,EAAE,eAAe,KAAK,SAAS,EAAE,CAAC;QAC9C,GAAG,CAAC,eAAe,GAAG,YAAY,CAChC,MAAM,CAAC,GAAG,CAAC,eAAe,EAC1B,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,CAAC,EACjD,yBAAyB,CAC1B,CAAA;QACD,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,OAAO;YAAE,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAA;QACjF,IAAI,GAAG,CAAC,eAAe,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAA;QACpD,IAAI,GAAG,CAAC,eAAe,CAAC,WAAW,KAAK,KAAK;YAC3C,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAA;IAC1D,CAAC;IAED,MAAM,eAAe,GACnB,GAAG,CAAC,cAAc,EAAE,OAAO,KAAK,IAAI,IAAI,GAAG,CAAC,cAAc,CAAC,WAAW,KAAK,KAAK,CAAA;IAClF,MAAM,gBAAgB,GACpB,GAAG,CAAC,eAAe,EAAE,OAAO,KAAK,IAAI,IAAI,GAAG,CAAC,eAAe,CAAC,WAAW,KAAK,KAAK,CAAA;IACpF,MAAM,mBAAmB,GAAG,eAAe,IAAI,gBAAgB,CAAA;IAC/D,MAAM,aAAa,GACjB,GAAG,CAAC,cAAc,EAAE,OAAO,KAAK,IAAI,IAAI,GAAG,CAAC,eAAe,EAAE,OAAO,KAAK,IAAI,CAAA;IAE/E,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,aAAa,IAAI,mBAAmB,CAAC;QACrE,mBAAmB;QACnB,GAAG;QACH,EAAE,EAAE;YACF,IAAI;YACJ,WAAW,EAAE,gBAAgB;YAC7B,YAAY;YACZ,wBAAwB;SACzB;QACD,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;KACjC,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAA2B,EAC3B,UAAsC,EAAE;IAExC,MAAM,GAAG,GAAqB,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,CAAA;IAC/C,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,MAAM,CAAC,iBAAiB,IAAI,EAAE,CAAA;IACrF,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,SAAS,CAAA;IAC9D,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IACtE,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,GAAG,CAAA;IACxD,MAAM,SAAS,GAAa,EAAE,CAAA;IAC9B,MAAM,WAAW,GAAa,EAAE,CAAA;IAEhC,MAAM,UAAU,GAAG,GAAG,CAAC,iBAAiB;QACtC,CAAC,CAAC,MAAM,gBAAgB,CACpB,SAAS,EACT,GAAG,CAAC,iBAAiB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,UAAU,EACV,gBAAgB,EAChB,OAAO,CAAC,KAAK,CACd;QACH,CAAC,CAAC,SAAS,CAAA;IACb,IAAI,UAAU,EAAE,CAAC;QACf,SAAS,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;QACpC,WAAW,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;QACxC,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACvB,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1F,MAAM,IAAI,GAAG,eAAe,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAA;gBAC3D,IAAI,gBAAgB,KAAK,SAAS;oBAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;;oBACnD,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC7B,CAAC;YACD,GAAG,CAAC,cAAc,GAAG,UAAU,CAAC,OAAO,CAAA;QACzC,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,GAAG,CAAC,kBAAkB;QACxC,CAAC,CAAC,MAAM,gBAAgB,CACpB,UAAU,EACV,GAAG,CAAC,kBAAkB,EACtB,iBAAiB,EACjB,gBAAgB,EAChB,UAAU,EACV,gBAAgB,EAChB,OAAO,CAAC,KAAK,CACd;QACH,CAAC,CAAC,SAAS,CAAA;IACb,IAAI,WAAW,EAAE,CAAC;QAChB,SAAS,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;QACrC,WAAW,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAA;QACzC,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;YACxB,IACE,GAAG,CAAC,eAAe,KAAK,SAAS;gBACjC,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,OAAO,CAAC,EACnD,CAAC;gBACD,MAAM,IAAI,GAAG,eAAe,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAA;gBAC5D,IAAI,gBAAgB,KAAK,SAAS;oBAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;;oBACnD,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC7B,CAAC;YACD,GAAG,CAAC,eAAe,GAAG,WAAW,CAAC,OAAO,CAAA;QAC3C,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,CAAA;IAE/D,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,GAAG,CAAC,cAAc;YAAE,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,GAAG,GAAG,UAAU,CAAC,KAAK,CAAA;;YAC1E,MAAM,CAAC,GAAG,CAAC,cAAc,GAAG,oBAAoB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;IACzE,CAAC;IACD,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,MAAM,CAAC,GAAG,CAAC,eAAe;YAAE,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,GAAG,WAAW,CAAC,KAAK,CAAA;;YAC7E,MAAM,CAAC,GAAG,CAAC,eAAe,GAAG,oBAAoB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;IAC3E,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAA;IAC7D,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;IACnE,MAAM,aAAa,GACjB,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,KAAK,IAAI,CAAA;IAE7F,OAAO;QACL,GAAG,MAAM;QACT,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,aAAa,IAAI,MAAM,CAAC,mBAAmB,CAAC;QAC5E,MAAM;QACN,QAAQ;KACT,CAAA;AACH,CAAC"}

package/dist/index.d.ts

@@ -8,8 +8,10 @@ export { buildPolicy, policyFrom } from './policy-builder.js';
 export { fetchGraph, fetchSessionPolicyRecord, fetchPolicyDocument } from './graph-fetch.js';
 export { buildRevocationRegistry, applyRevocation } from './revocations.js';
 export type { RevocationEntry, RevocationReason, MinimalRecord } from './revocations.js';
+export { verifyAp2ViEvidence, verifyAp2ViEvidenceAsync } from './ap2-vi-evidence.js';
+export type { Ap2EvidenceCheck, Ap2EvidenceInput, Ap2ReceiptJwtCheck, Ap2ReceiptJwtIssuer, Ap2ReceiptCheck, Ap2ViEvidenceBundle, Ap2ViEvidenceVerification, SignatureCheck, VerifyAp2ViEvidenceOptions, ViCredentialCheck, ViCredentialInput, ViCredentialLayer, ViEvidenceCheck, ViMode, } from './ap2-vi-evidence.js';
 export { resolveIdentity } from './resolve-identity.js';
 export type { IdentityResolution, IdentityResolutionMethod, KeyRevocationStatus, ResolveIdentityOptions, IdentityClaim, CapabilityEnvelope, } from './resolve-identity.js';
-export type { GraphNode, GraphEdge, GraphResponse, EventType, EdgeType, GapNode, VerificationState, PolicyDocument, PolicyConstraints, EdgeWeights, Modifier, DistributionMethod, CreatorPolicySnapshot, CreatorPolicyEntry, SessionPolicyRecord, Distribution, RecommendationDocument, VerificationResult, } from './types.js';
+export type { GraphNode, GraphEdge, GraphResponse, EventType, EdgeType, GapNode, VerificationState, ReferenceStatus, PolicyDocument, PolicyConstraints, EdgeWeights, Modifier, DistributionMethod, CreatorPolicySnapshot, CreatorPolicyEntry, SessionPolicyRecord, Distribution, RecommendationDocument, VerificationResult, } from './types.js';
 export { graphLabelFromEventTypeUri } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAC7C,YAAY,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAO3E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,YAAY,EACV,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,oBAAoB,CAAA;AAG3B,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAGzE,OAAO,EACL,kBAAkB,EAClB,6BAA6B,EAC7B,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,qBAAqB,CAAA;AAG5B,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAG7D,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAG5F,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAC3E,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAGxF,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,YAAY,EACV,kBAAkB,EAClB,wBAAwB,EACxB,mBAAmB,EACnB,sBAAsB,EACtB,aAAa,EACb,kBAAkB,GACnB,MAAM,uBAAuB,CAAA;AAG9B,YAAY,EACV,SAAS,EACT,SAAS,EACT,aAAa,EACb,SAAS,EACT,QAAQ,EACR,OAAO,EACP,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,WAAW,EACX,QAAQ,EACR,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAClB,mBAAmB,EACnB,YAAY,EACZ,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAC7C,YAAY,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAO3E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,YAAY,EACV,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,oBAAoB,CAAA;AAG3B,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAGzE,OAAO,EACL,kBAAkB,EAClB,6BAA6B,EAC7B,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,qBAAqB,CAAA;AAG5B,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAG7D,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAG5F,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAC3E,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAGxF,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAA;AACpF,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,yBAAyB,EACzB,cAAc,EACd,0BAA0B,EAC1B,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,MAAM,GACP,MAAM,sBAAsB,CAAA;AAG7B,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,YAAY,EACV,kBAAkB,EAClB,wBAAwB,EACxB,mBAAmB,EACnB,sBAAsB,EACtB,aAAa,EACb,kBAAkB,GACnB,MAAM,uBAAuB,CAAA;AAG9B,YAAY,EACV,SAAS,EACT,SAAS,EACT,aAAa,EACb,SAAS,EACT,QAAQ,EACR,OAAO,EACP,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,WAAW,EACX,QAAQ,EACR,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAClB,mBAAmB,EACnB,YAAY,EACZ,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAA"}

package/dist/index.js

@@ -18,6 +18,8 @@ export { buildPolicy, policyFrom } from './policy-builder.js';
 export { fetchGraph, fetchSessionPolicyRecord, fetchPolicyDocument } from './graph-fetch.js';
 // Revocation registry (§1.9)
 export { buildRevocationRegistry, applyRevocation } from './revocations.js';
+// AP2 / Verifiable Intent evidence checks. Off the settlement critical path.
+export { verifyAp2ViEvidence, verifyAp2ViEvidenceAsync } from './ap2-vi-evidence.js';
 // Identity resolution (§6.3 9-step verifier consultation)
 export { resolveIdentity } from './resolve-identity.js';
 export { graphLabelFromEventTypeUri } from './types.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,+CAA+C;AAE/C,4BAA4B;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAG7C,wEAAwE;AACxE,uEAAuE;AACvE,sEAAsE;AACtE,uEAAuE;AACvE,4DAA4D;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAOjD,uEAAuE;AACvE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAEzE,sDAAsD;AACtD,OAAO,EACL,kBAAkB,EAClB,6BAA6B,EAC7B,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,qBAAqB,CAAA;AAE5B,mDAAmD;AACnD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAE7D,+BAA+B;AAC/B,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAE5F,6BAA6B;AAC7B,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAG3E,0DAA0D;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AA+BvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,+CAA+C;AAE/C,4BAA4B;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAG7C,wEAAwE;AACxE,uEAAuE;AACvE,sEAAsE;AACtE,uEAAuE;AACvE,4DAA4D;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAOjD,uEAAuE;AACvE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAEzE,sDAAsD;AACtD,OAAO,EACL,kBAAkB,EAClB,6BAA6B,EAC7B,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,qBAAqB,CAAA;AAE5B,mDAAmD;AACnD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAE7D,+BAA+B;AAC/B,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAE5F,6BAA6B;AAC7B,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAG3E,6EAA6E;AAC7E,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAA;AAkBpF,0DAA0D;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAgCvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAA"}

package/dist/types.d.ts

@@ -20,7 +20,7 @@
 export type EventType = 'tool_call' | 'transaction' | 'observation' | 'directory_anchor' | 'annotation' | 'revision' | 'gap_node' | 'dangling_node' | 'extension';
 /**
  * Map an attribution record's event_type URI to a graph-layer short label.
- * Atrib normative URIs map to their canonical short label; everything else
+ * atrib normative URIs map to their canonical short label; everything else
  * collapses to `'extension'` (the graph-layer opaque-typed category).
  */
 export declare function graphLabelFromEventTypeUri(uri: string): EventType;
@@ -44,13 +44,30 @@ export type VerificationState = 'unsigned' | 'signature_valid' | 'log_committed'
  * state when (creator_key, log_index) falls after a key_revocation.
  */
  | 'revoked_after_revocation';
+export type ReferenceStatus = 
+/**
+ * The referenced record exists in the graph service, but it was outside
+ * the current response scope.
+ */
+'external'
+/**
+ * The graph service could not find the referenced record in its global
+ * store.
+ */
+ | 'missing'
+/**
+ * The graph response did not have a global reference resolver available.
+ * Older or offline graph builders can only say the target was absent from
+ * the resolved set.
+ */
+ | 'unresolved';
 /** A node in the attribution graph (§3.5.2). */
 export interface GraphNode {
     id: string;
     event_type: EventType;
     /**
      * The original event_type URI from the underlying record (§1.2.4), or
-     * null for synthetic nodes (gap_node). Atrib normative URIs are present
+     * null for synthetic nodes (gap_node). atrib normative URIs are present
      * as their canonical strings; extension URIs are preserved verbatim.
      * Graph clients that need to filter by URI rather than short label use
      * this field.
@@ -64,6 +81,22 @@ export interface GraphNode {
     log_index: number | null;
     verification_state: VerificationState;
     is_genesis: boolean;
+    /**
+     * Present on synthetic reference placeholders. `external` means the target
+     * exists globally but was outside the current response scope; `missing`
+     * means the graph service could not find the target globally.
+     */
+    reference_status?: ReferenceStatus;
+    /** Full record hash for a synthetic reference placeholder when available. */
+    reference_hash?: string;
+    /** Provenance token for a synthetic provenance placeholder when available. */
+    reference_token?: string;
+    /** Context id of the referenced record when `reference_status` is external. */
+    reference_context_id?: string | null;
+    /** Event type of the referenced record when `reference_status` is external. */
+    reference_event_type?: EventType | null;
+    /** Log index of the referenced record when `reference_status` is external. */
+    reference_log_index?: number | null;
 }
 /** An edge in the attribution graph (§3.5.3). */
 export interface GraphEdge {
@@ -77,9 +110,24 @@ export interface GraphEdge {
      * record in the resolved set. Per spec §3.2.4 steps 6 + 7, dangling
      * references MUST be surfaced as edges (not silently dropped) so verifiers
      * can see what the agent claimed even when the upstream isn't accessible.
-     * Only INFORMED_BY and PROVENANCE_OF edges can be dangling.
+     * INFORMED_BY, PROVENANCE_OF, ANNOTATES, and REVISES edges can be dangling.
      */
     dangling?: boolean;
+    /**
+     * Classification for a dangling edge target. Older graph builders may omit
+     * this and only set `dangling: true`.
+     */
+    reference_status?: ReferenceStatus;
+    /** Full record hash for a dangling record-hash reference when available. */
+    reference_hash?: string;
+    /** Provenance token for a dangling provenance reference when available. */
+    reference_token?: string;
+    /** Context id of the referenced record when `reference_status` is external. */
+    reference_context_id?: string | null;
+    /** Event type of the referenced record when `reference_status` is external. */
+    reference_event_type?: EventType | null;
+    /** Log index of the referenced record when `reference_status` is external. */
+    reference_log_index?: number | null;
     /**
      * Optional reason annotation. Currently used by PROVENANCE_OF dangling
      * edges with the value `"no_token_source_in_record_set"` per spec §3.2.4

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AAMH;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,SAAS,GAAG,WAAW,GAAG,aAAa,GAAG,aAAa,GAAG,kBAAkB,GAAG,YAAY,GAAG,UAAU,GAAG,UAAU,GAAG,eAAe,GAAG,WAAW,CAAA;AAEjK;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAiBjE;AAED,0FAA0F;AAC1F,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,UAAU,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,KAAK,CAAA;CACd;AAED,MAAM,MAAM,QAAQ,GAChB,gBAAgB,GAChB,kBAAkB,GAClB,kBAAkB,GAClB,cAAc,GACd,eAAe,GACf,aAAa,GACb,eAAe,GACf,WAAW,GACX,SAAS,CAAA;AAEb,MAAM,MAAM,iBAAiB,GACzB,UAAU,GACV,iBAAiB,GACjB,eAAe,GACf,WAAW;AACb;;;;;;;GAOG;GACD,0BAA0B,CAAA;AAE9B,gDAAgD;AAChD,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,SAAS,CAAA;IACrB;;;;;;OAMG;IACH,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,kBAAkB,EAAE,iBAAiB,CAAA;IACrC,UAAU,EAAE,OAAO,CAAA;CACpB;AAED,iDAAiD;AACjD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,QAAQ,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,OAAO,CAAA;IACjB;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,wCAAwC;AACxC,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,WAAW,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,eAAe,EAAE,OAAO,CAAA;IACxB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,KAAK,EAAE,SAAS,EAAE,CAAA;IAClB,KAAK,EAAE,SAAS,EAAE,CAAA;CACnB;AAMD,MAAM,MAAM,kBAAkB,GAAG,cAAc,GAAG,OAAO,GAAG,UAAU,CAAA;AAEtE,MAAM,WAAW,WAAW;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,MAAM,QAAQ,GAChB;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAA;AAE5C,MAAM,WAAW,iBAAiB;IAChC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED,gCAAgC;AAChC,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,WAAW,CAAA;IACzB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,IAAI,CAAC,EAAE,UAAU,GAAG,SAAS,GAAG,SAAS,CAAA;IACzC,YAAY,CAAC,EAAE,WAAW,CAAA;IAC1B,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAA;IACtB,YAAY,CAAC,EAAE,kBAAkB,CAAA;IACjC,WAAW,CAAC,EAAE,iBAAiB,CAAA;CAChC;AAED,iFAAiF;AACjF,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE;QACZ,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,iBAAiB,CAAC,EAAE,MAAM,CAAA;QAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAA;KAC7B,CAAA;IACD,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB;AAED,kEAAkE;AAClE,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,YAAY,GAAG,cAAc,GAAG,oBAAoB,GAAG,WAAW,CAAA;IAC1E,0DAA0D;IAC1D,MAAM,CAAC,EAAE,qBAAqB,GAAG,SAAS,CAAA;CAC3C;AAED,2EAA2E;AAC3E,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,WAAW,CAAA;IACzB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,kBAAkB,EAAE,CAAA;IACtC,aAAa,EAAE,MAAM,CAAA;IACrB,mBAAmB,EAAE;QACnB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KACvC,CAAA;IACD,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB;AAMD,+EAA+E;AAC/E,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;AAEjD,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,WAAW,CAAA;IACzB,aAAa,EAAE,2BAA2B,CAAA;IAC1C,UAAU,EAAE,MAAM,CAAA;IAClB,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,MAAM,CAAA;IACxB,gBAAgB,EAAE,MAAM,CAAA;IACxB,eAAe,EAAE,MAAM,CAAA;IACvB,aAAa,EAAE,MAAM,CAAA;IACrB,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE,YAAY,CAAA;IAC1B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,kEAAkE;AAClE,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,OAAO,CAAA;IACd,WAAW,EAAE,OAAO,CAAA;IACpB,SAAS,EAAE,OAAO,CAAA;IAClB,YAAY,EAAE,YAAY,CAAA;IAC1B,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,gBAAgB,EAAE,MAAM,CAAA;CACzB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AAMH;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,SAAS,GAAG,WAAW,GAAG,aAAa,GAAG,aAAa,GAAG,kBAAkB,GAAG,YAAY,GAAG,UAAU,GAAG,UAAU,GAAG,eAAe,GAAG,WAAW,CAAA;AAEjK;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAiBjE;AAED,0FAA0F;AAC1F,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,UAAU,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,KAAK,CAAA;CACd;AAED,MAAM,MAAM,QAAQ,GAChB,gBAAgB,GAChB,kBAAkB,GAClB,kBAAkB,GAClB,cAAc,GACd,eAAe,GACf,aAAa,GACb,eAAe,GACf,WAAW,GACX,SAAS,CAAA;AAEb,MAAM,MAAM,iBAAiB,GACzB,UAAU,GACV,iBAAiB,GACjB,eAAe,GACf,WAAW;AACb;;;;;;;GAOG;GACD,0BAA0B,CAAA;AAE9B,MAAM,MAAM,eAAe;AACzB;;;GAGG;AACD,UAAU;AACZ;;;GAGG;GACD,SAAS;AACX;;;;GAIG;GACD,YAAY,CAAA;AAEhB,gDAAgD;AAChD,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,SAAS,CAAA;IACrB;;;;;;OAMG;IACH,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,kBAAkB,EAAE,iBAAiB,CAAA;IACrC,UAAU,EAAE,OAAO,CAAA;IACnB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,eAAe,CAAA;IAClC,6EAA6E;IAC7E,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,8EAA8E;IAC9E,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,+EAA+E;IAC/E,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,+EAA+E;IAC/E,oBAAoB,CAAC,EAAE,SAAS,GAAG,IAAI,CAAA;IACvC,8EAA8E;IAC9E,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACpC;AAED,iDAAiD;AACjD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,QAAQ,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,OAAO,CAAA;IACjB;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,eAAe,CAAA;IAClC,4EAA4E;IAC5E,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,2EAA2E;IAC3E,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,+EAA+E;IAC/E,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,+EAA+E;IAC/E,oBAAoB,CAAC,EAAE,SAAS,GAAG,IAAI,CAAA;IACvC,8EAA8E;IAC9E,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,wCAAwC;AACxC,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,WAAW,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,eAAe,EAAE,OAAO,CAAA;IACxB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,KAAK,EAAE,SAAS,EAAE,CAAA;IAClB,KAAK,EAAE,SAAS,EAAE,CAAA;CACnB;AAMD,MAAM,MAAM,kBAAkB,GAAG,cAAc,GAAG,OAAO,GAAG,UAAU,CAAA;AAEtE,MAAM,WAAW,WAAW;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,MAAM,QAAQ,GAChB;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAA;AAE5C,MAAM,WAAW,iBAAiB;IAChC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED,gCAAgC;AAChC,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,WAAW,CAAA;IACzB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,IAAI,CAAC,EAAE,UAAU,GAAG,SAAS,GAAG,SAAS,CAAA;IACzC,YAAY,CAAC,EAAE,WAAW,CAAA;IAC1B,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAA;IACtB,YAAY,CAAC,EAAE,kBAAkB,CAAA;IACjC,WAAW,CAAC,EAAE,iBAAiB,CAAA;CAChC;AAED,iFAAiF;AACjF,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE;QACZ,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,iBAAiB,CAAC,EAAE,MAAM,CAAA;QAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAA;KAC7B,CAAA;IACD,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB;AAED,kEAAkE;AAClE,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,YAAY,GAAG,cAAc,GAAG,oBAAoB,GAAG,WAAW,CAAA;IAC1E,0DAA0D;IAC1D,MAAM,CAAC,EAAE,qBAAqB,GAAG,SAAS,CAAA;CAC3C;AAED,2EAA2E;AAC3E,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,WAAW,CAAA;IACzB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,kBAAkB,EAAE,CAAA;IACtC,aAAa,EAAE,MAAM,CAAA;IACrB,mBAAmB,EAAE;QACnB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KACvC,CAAA;IACD,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB;AAMD,+EAA+E;AAC/E,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;AAEjD,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,WAAW,CAAA;IACzB,aAAa,EAAE,2BAA2B,CAAA;IAC1C,UAAU,EAAE,MAAM,CAAA;IAClB,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,MAAM,CAAA;IACxB,gBAAgB,EAAE,MAAM,CAAA;IACxB,eAAe,EAAE,MAAM,CAAA;IACvB,aAAa,EAAE,MAAM,CAAA;IACrB,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE,YAAY,CAAA;IAC1B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,kEAAkE;AAClE,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,OAAO,CAAA;IACd,WAAW,EAAE,OAAO,CAAA;IACpB,SAAS,EAAE,OAAO,CAAA;IAClB,YAAY,EAAE,YAAY,CAAA;IAC1B,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,gBAAgB,EAAE,MAAM,CAAA;CACzB"}

package/dist/types.js

@@ -1,7 +1,7 @@
 // SPDX-License-Identifier: Apache-2.0
 /**
  * Map an attribution record's event_type URI to a graph-layer short label.
- * Atrib normative URIs map to their canonical short label; everything else
+ * atrib normative URIs map to their canonical short label; everything else
  * collapses to `'extension'` (the graph-layer opaque-typed category).
  */
 export function graphLabelFromEventTypeUri(uri) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atrib/verify",
-  "version": "0.3.5",
+  "version": "0.3.7",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -30,13 +30,14 @@
     "@noble/ed25519": "^3.1.0",
     "@noble/hashes": "^2.2.0",
     "canonicalize": "^3.0.0",
-    "@atrib/mcp": "0.11.0"
+    "jose": "6.2.3",
+    "@atrib/mcp": "0.12.0"
   },
   "devDependencies": {
-    "@types/node": "^25.8.0",
+    "@types/node": "^25.9.1",
     "fast-check": "^4.8.0",
     "typescript": "^6.0.3",
-    "vitest": "^4.1.6"
+    "vitest": "^4.1.7"
   },
   "repository": {
     "type": "git",