@attested-intelligence/aga-mcp-server 2.2.2 → 3.0.0-rc.0

package/package.json

@@ -1,93 +1,87 @@
-{
-  "name": "@attested-intelligence/aga-mcp-server",
-  "version": "2.2.2",
-  "description": "MCP server for cryptographic AI agent governance. Seal policy artifacts, enforce at runtime, prove with signed receipts and offline-verifiable evidence bundles.",
-  "mcpName": "io.github.attestedintelligence/aga-mcp-server",
-  "author": "Attested Intelligence Holdings LLC",
-  "license": "MIT",
-  "homepage": "https://attestedintelligence.com/technology",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/attestedintelligence/aga-mcp-server"
-  },
-  "bugs": {
-    "url": "https://github.com/attestedintelligence/aga-mcp-server/issues"
-  },
-  "type": "module",
-  "main": "dist/index.js",
-  "types": "dist/index.d.ts",
-  "files": [
-    "dist/",
-    "README.md",
-    "LICENSE"
-  ],
-  "bin": {
-    "aga-mcp-server": "dist/index.js",
-    "aga-proxy": "dist/proxy/index.js"
-  },
-  "scripts": {
-    "build": "tsc",
-    "start": "node dist/index.js",
-    "dev": "tsx src/index.ts",
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "test:crypto": "vitest run tests/crypto/",
-    "test:core": "vitest run tests/core/",
-    "test:integration": "vitest run tests/integration/",
-    "test:proxy": "vitest run tests/proxy/",
-    "proxy": "tsx src/proxy/index.ts",
-    "proxy:start": "tsx src/proxy/index.ts start",
-    "demo": "tsx scripts/demo.ts",
-    "benchmark": "tsx scripts/benchmark.ts",
-    "verify": "cd independent-verifier && npm test",
-    "lint": "tsc --noEmit",
-    "demo:standalone": "npx tsx standalone/main.ts",
-    "demo:scada": "npx tsx standalone/main.ts --scenario=scada",
-    "demo:drone": "npx tsx standalone/main.ts --scenario=drone",
-    "demo:agent": "npx tsx standalone/main.ts --scenario=ai-agent",
-    "demo:all": "npx tsx standalone/main.ts --scenario=all --non-interactive",
-    "watch": "npx tsx standalone/main.ts --watch",
-    "build:exe": "npx tsx standalone/build.ts",
-    "verify:evidence": "npx tsx standalone/verify-evidence.ts",
-    "prepublishOnly": "npm run build && npm run test"
-  },
-  "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.12.0",
-    "@noble/ed25519": "^2.1.0",
-    "@noble/hashes": "^1.7.0",
-    "commander": "^14.0.3",
-    "uuid": "^11.1.0",
-    "zod": "^3.24.0"
-  },
-  "optionalDependencies": {
-    "better-sqlite3": "^11.7.0"
-  },
-  "devDependencies": {
-    "@types/better-sqlite3": "^7.6.12",
-    "@types/node": "^22.10.0",
-    "@types/uuid": "^10.0.0",
-    "postject": "^1.0.0-alpha.6",
-    "tsx": "^4.19.0",
-    "typescript": "^5.7.0",
-    "vitest": "^2.1.0"
-  },
-  "engines": {
-    "node": ">=20.0.0"
-  },
-  "keywords": [
-    "mcp",
-    "mcp-server",
-    "model-context-protocol",
-    "ai-governance",
-    "ai-agent-security",
-    "agentic-ai",
-    "attestation",
-    "governance",
-    "cryptographic-enforcement",
-    "runtime-integrity",
-    "evidence-bundles",
-    "ed25519",
-    "policy-artifacts",
-    "attested-intelligence"
-  ]
-}
+{
+  "name": "@attested-intelligence/aga-mcp-server",
+  "version": "3.0.0-rc.0",
+  "description": "MCP server for cryptographic AI agent governance. Seal policy artifacts, enforce at runtime, prove with signed receipts and offline-verifiable evidence bundles.",
+  "author": "Attested Intelligence Holdings LLC",
+  "license": "MIT",
+  "homepage": "https://attestedintelligence.com/technology",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/attestedintelligence/aga-mcp-server"
+  },
+  "bugs": {
+    "url": "https://github.com/attestedintelligence/aga-mcp-server/issues"
+  },
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist/",
+    "README.md",
+    "LICENSE",
+    "SECURITY.md",
+    "THREAT_BOUNDARY.md",
+    "DEPLOYMENT.md"
+  ],
+  "bin": {
+    "aga-mcp-server": "dist/index.js",
+    "aga-proxy": "dist/proxy/index.js"
+  },
+  "scripts": {
+    "build": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\" && tsc",
+    "start": "node dist/index.js",
+    "dev": "tsx src/index.ts",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:crypto": "vitest run tests/crypto/",
+    "test:core": "vitest run tests/core/",
+    "test:integration": "vitest run tests/integration/",
+    "test:proxy": "vitest run tests/proxy/",
+    "test:conformance": "node fixtures/run-conformance.mjs",
+    "conformance:cross-stack": "node fixtures/cross-stack/run-all-stacks.mjs",
+    "check:pack": "node scripts/check-pack.mjs",
+    "check": "npm run build && npm run lint && npm run test && npm run test:conformance && npm run check:pack",
+    "proxy": "tsx src/proxy/index.ts",
+    "proxy:start": "tsx src/proxy/index.ts start",
+    "demo": "tsx scripts/demo.ts",
+    "benchmark": "tsx scripts/benchmark.ts",
+    "verify": "cd independent-verifier && npm test",
+    "lint": "tsc --noEmit",
+    "prepublishOnly": "npm run build && npm run test && npm run test:conformance && npm run check:pack"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.12.0",
+    "@noble/hashes": "^1.7.0",
+    "commander": "^14.0.3",
+    "zod": "^3.24.0"
+  },
+  "optionalDependencies": {
+    "better-sqlite3": "^11.7.0"
+  },
+  "devDependencies": {
+    "@types/better-sqlite3": "^7.6.12",
+    "@types/node": "^22.10.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.7.0",
+    "vitest": "^2.1.0"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "keywords": [
+    "mcp",
+    "mcp-server",
+    "model-context-protocol",
+    "ai-governance",
+    "ai-agent-security",
+    "agentic-ai",
+    "attestation",
+    "governance",
+    "cryptographic-enforcement",
+    "runtime-integrity",
+    "evidence-bundles",
+    "ed25519",
+    "policy-artifacts",
+    "attested-intelligence"
+  ]
+}

package/dist/core/bundle.d.ts

@@ -1,20 +0,0 @@
-import type { KeyPair, MerkleInclusionProof } from '../crypto/types.js';
-import type { EvidenceBundle, PolicyArtifact, SignedReceipt, CheckpointReference, VerificationTier } from './types.js';
-/**
- * Generate an evidence bundle. Original signature preserved for backward compatibility.
- * Tiered bundle generation (CAISI §3b):
- *   BRONZE - artifact + receipts only (proofs omitted)
- *   SILVER - artifact + receipts + Merkle proofs
- *   GOLD   - artifact + receipts + Merkle proofs + anchor checkpoint reference
- */
-export declare function generateBundle(artifact: PolicyArtifact, receipts: SignedReceipt[], proofs: MerkleInclusionProof[], checkpoint: CheckpointReference, kp: KeyPair, tier?: VerificationTier): EvidenceBundle;
-export interface VerificationResult {
-    step1_artifact_sig: boolean;
-    step2_receipt_sigs: boolean;
-    step3_merkle_proofs: boolean;
-    step4_anchor: 'SKIPPED_OFFLINE' | boolean;
-    overall: boolean;
-    errors: string[];
-}
-export declare function verifyBundleOffline(bundle: EvidenceBundle, pinnedPkHex: string): VerificationResult;
-//# sourceMappingURL=bundle.d.ts.map

package/dist/core/bundle.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"bundle.d.ts","sourceRoot":"","sources":["../../src/core/bundle.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEvH;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAAE,UAAU,EAAE,mBAAmB,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,cAAc,CAUzM;AAED,MAAM,WAAW,kBAAkB;IACjC,kBAAkB,EAAE,OAAO,CAAC;IAAC,kBAAkB,EAAE,OAAO,CAAC;IACzD,mBAAmB,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,iBAAiB,GAAG,OAAO,CAAC;IACxE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;CACpC;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,GAAG,kBAAkB,CAanG"}

package/dist/core/bundle.js

@@ -1,45 +0,0 @@
-import { signStr, sigToB64, b64ToSig, hexToPk, verifyStr, pkToHex } from '../crypto/sign.js';
-import { verifyProof } from '../crypto/merkle.js';
-import { canonicalize } from '../utils/canonical.js';
-/**
- * Generate an evidence bundle. Original signature preserved for backward compatibility.
- * Tiered bundle generation (CAISI §3b):
- *   BRONZE - artifact + receipts only (proofs omitted)
- *   SILVER - artifact + receipts + Merkle proofs
- *   GOLD   - artifact + receipts + Merkle proofs + anchor checkpoint reference
- */
-export function generateBundle(artifact, receipts, proofs, checkpoint, kp, tier) {
-    const effectiveTier = tier ?? 'GOLD';
-    const bundleProofs = effectiveTier === 'BRONZE' ? [] : proofs;
-    const bundleCheckpoint = effectiveTier === 'GOLD' ? checkpoint : {
-        ...checkpoint,
-        transaction_id: effectiveTier === 'BRONZE' ? '' : checkpoint.transaction_id,
-        anchor_network: effectiveTier === 'BRONZE' ? '' : checkpoint.anchor_network,
-    };
-    const unsigned = { artifact, receipts, merkle_proofs: bundleProofs, checkpoint_reference: bundleCheckpoint, public_key: pkToHex(kp.publicKey), verification_tier: effectiveTier };
-    return { ...unsigned, bundle_signature: sigToB64(signStr(canonicalize(unsigned), kp.secretKey)) };
-}
-export function verifyBundleOffline(bundle, pinnedPkHex) {
-    const errors = [];
-    const { signature: aSig, ...aU } = bundle.artifact;
-    const s1 = verifyStr(b64ToSig(aSig), canonicalize(aU), hexToPk(pinnedPkHex));
-    if (!s1)
-        errors.push('Artifact signature failed');
-    let s2 = true;
-    for (const r of bundle.receipts) {
-        const { portal_signature, ...rU } = r;
-        if (!verifyStr(b64ToSig(portal_signature), canonicalize(rU), hexToPk(bundle.public_key))) {
-            s2 = false;
-            errors.push(`Receipt ${r.receipt_id} sig failed`);
-        }
-    }
-    let s3 = true;
-    for (const p of bundle.merkle_proofs) {
-        if (!verifyProof(p)) {
-            s3 = false;
-            errors.push(`Merkle proof failed leaf ${p.leafIndex}`);
-        }
-    }
-    return { step1_artifact_sig: s1, step2_receipt_sigs: s2, step3_merkle_proofs: s3, step4_anchor: 'SKIPPED_OFFLINE', overall: s1 && s2 && s3, errors };
-}
-//# sourceMappingURL=bundle.js.map

package/dist/core/bundle.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"bundle.js","sourceRoot":"","sources":["../../src/core/bundle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC7F,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAIrD;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,QAAwB,EAAE,QAAyB,EAAE,MAA8B,EAAE,UAA+B,EAAE,EAAW,EAAE,IAAuB;IACvL,MAAM,aAAa,GAAG,IAAI,IAAI,MAAM,CAAC;IACrC,MAAM,YAAY,GAAG,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9D,MAAM,gBAAgB,GAAwB,aAAa,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QACpF,GAAG,UAAU;QACb,cAAc,EAAE,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc;QAC3E,cAAc,EAAE,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc;KAC5E,CAAC;IACF,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,YAAY,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,iBAAiB,EAAE,aAAa,EAAE,CAAC;IAClL,OAAO,EAAE,GAAG,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;AACpG,CAAC;AAQD,MAAM,UAAU,mBAAmB,CAAC,MAAsB,EAAE,WAAmB;IAC7E,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC;IACnD,MAAM,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;IAC7E,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAClD,IAAI,EAAE,GAAG,IAAI,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,EAAE,gBAAgB,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YAAC,EAAE,GAAG,KAAK,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,UAAU,aAAa,CAAC,CAAC;QAAC,CAAC;IAC9J,CAAC;IACD,IAAI,EAAE,GAAG,IAAI,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,EAAE,GAAG,KAAK,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAAC,CAAC;IAAC,CAAC;IACtI,OAAO,EAAE,kBAAkB,EAAE,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE,YAAY,EAAE,iBAAiB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC;AACvJ,CAAC"}

package/dist/core/checkpoint.d.ts

@@ -1,8 +0,0 @@
-import type { ContinuityEvent, CheckpointReference, AnchorBatchPayload } from './types.js';
-import type { MerkleInclusionProof } from '../crypto/types.js';
-export declare function createCheckpoint(events: ContinuityEvent[], anchorNetwork?: string): {
-    checkpoint: CheckpointReference;
-    payload: AnchorBatchPayload;
-};
-export declare function eventInclusionProof(events: ContinuityEvent[], targetSeq: number): MerkleInclusionProof;
-//# sourceMappingURL=checkpoint.d.ts.map

package/dist/core/checkpoint.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"checkpoint.d.ts","sourceRoot":"","sources":["../../src/core/checkpoint.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAC3F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE/D,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,aAAa,SAAU,GAAG;IAAE,UAAU,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,kBAAkB,CAAA;CAAE,CASrJ;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,oBAAoB,CAItG"}

package/dist/core/checkpoint.js

@@ -1,21 +0,0 @@
-import { buildMerkleTree, inclusionProof } from '../crypto/merkle.js';
-import { utcNow } from '../utils/timestamp.js';
-import { uuid } from '../utils/uuid.js';
-export function createCheckpoint(events, anchorNetwork = 'local') {
-    if (!events.length)
-        throw new Error('No events to checkpoint');
-    const { root } = buildMerkleTree(events.map(e => e.leaf_hash));
-    const checkpoint = {
-        merkle_root: root, batch_start_sequence: events[0].sequence_number,
-        batch_end_sequence: events[events.length - 1].sequence_number,
-        anchor_network: anchorNetwork, transaction_id: `${anchorNetwork}:${uuid()}`, timestamp: utcNow(),
-    };
-    return { checkpoint, payload: { checkpoint_reference: checkpoint, leaf_count: events.length } };
-}
-export function eventInclusionProof(events, targetSeq) {
-    const idx = events.findIndex(e => e.sequence_number === targetSeq);
-    if (idx === -1)
-        throw new Error(`Sequence ${targetSeq} not in batch`);
-    return inclusionProof(events.map(e => e.leaf_hash), idx);
-}
-//# sourceMappingURL=checkpoint.js.map

package/dist/core/checkpoint.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"checkpoint.js","sourceRoot":"","sources":["../../src/core/checkpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAIxC,MAAM,UAAU,gBAAgB,CAAC,MAAyB,EAAE,aAAa,GAAG,OAAO;IACjF,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC/D,MAAM,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAwB;QACtC,WAAW,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe;QAClE,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,eAAe;QAC7D,cAAc,EAAE,aAAa,EAAE,cAAc,EAAE,GAAG,aAAa,IAAI,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;KACjG,CAAC;IACF,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,oBAAoB,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAyB,EAAE,SAAiB;IAC9E,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC;IACnE,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,YAAY,SAAS,eAAe,CAAC,CAAC;IACtE,OAAO,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;AAC3D,CAAC"}

package/dist/crypto/merkle.d.ts

@@ -1,8 +0,0 @@
-import type { HashHex, MerkleInclusionProof } from './types.js';
-export declare function buildMerkleTree(leaves: HashHex[]): {
-    root: HashHex;
-    layers: HashHex[][];
-};
-export declare function inclusionProof(leaves: HashHex[], idx: number): MerkleInclusionProof;
-export declare function verifyProof(proof: MerkleInclusionProof): boolean;
-//# sourceMappingURL=merkle.d.ts.map

package/dist/crypto/merkle.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"merkle.d.ts","sourceRoot":"","sources":["../../src/crypto/merkle.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAIhE,wBAAgB,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAA;CAAE,CAczF;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,oBAAoB,CAanF;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAMhE"}

package/dist/crypto/merkle.js

@@ -1,42 +0,0 @@
-import { sha256Str } from './hash.js';
-function pair(l, r) { return sha256Str(l + r); }
-export function buildMerkleTree(leaves) {
-    if (!leaves.length)
-        throw new Error('Empty leaf set');
-    if (leaves.length === 1)
-        return { root: leaves[0], layers: [leaves] };
-    const layers = [[...leaves]];
-    let cur = leaves;
-    while (cur.length > 1) {
-        const next = [];
-        for (let i = 0; i < cur.length; i += 2) {
-            next.push(pair(cur[i], i + 1 < cur.length ? cur[i + 1] : cur[i]));
-        }
-        layers.push(next);
-        cur = next;
-    }
-    return { root: cur[0], layers };
-}
-export function inclusionProof(leaves, idx) {
-    if (idx < 0 || idx >= leaves.length)
-        throw new RangeError(`Index ${idx} out of [0,${leaves.length})`);
-    const { root, layers } = buildMerkleTree(leaves);
-    const siblings = [];
-    let ci = idx;
-    for (let L = 0; L < layers.length - 1; L++) {
-        const layer = layers[L];
-        const isRight = ci % 2 === 1;
-        const si = isRight ? ci - 1 : (ci + 1 < layer.length ? ci + 1 : ci);
-        siblings.push({ hash: layer[si], position: isRight ? 'left' : 'right' });
-        ci = Math.floor(ci / 2);
-    }
-    return { leafHash: leaves[idx], leafIndex: idx, siblings, root };
-}
-export function verifyProof(proof) {
-    let h = proof.leafHash;
-    for (const s of proof.siblings) {
-        h = s.position === 'left' ? pair(s.hash, h) : pair(h, s.hash);
-    }
-    return h === proof.root;
-}
-//# sourceMappingURL=merkle.js.map

package/dist/crypto/merkle.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"merkle.js","sourceRoot":"","sources":["../../src/crypto/merkle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,SAAS,IAAI,CAAC,CAAU,EAAE,CAAU,IAAa,OAAO,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAE3E,MAAM,UAAU,eAAe,CAAC,MAAiB;IAC/C,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACtD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;IACtE,MAAM,MAAM,GAAgB,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;IAC1C,IAAI,GAAG,GAAG,MAAM,CAAC;IACjB,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,GAAc,EAAE,CAAC;QAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,GAAG,GAAG,IAAI,CAAC;IACb,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAiB,EAAE,GAAW;IAC3D,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,IAAI,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,UAAU,CAAC,SAAS,GAAG,cAAc,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACtG,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAqC,EAAE,CAAC;IACtD,IAAI,EAAE,GAAG,GAAG,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,OAAO,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7B,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACzE,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAA2B;IACrD,IAAI,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;IACvB,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC/B,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC;AAC1B,CAAC"}

package/dist/proxy/verify.d.ts

@@ -1,28 +0,0 @@
-/**
- * AGA Gateway Bundle Verifier
- * Verifies Ed25519-SHA256-JCS evidence bundles.
- * Uses ONLY @noble crypto - zero imports from ../core/ or ../crypto/.
- *
- * 5-step verification matching gateway, Python SDK, and browser verifier:
- * 1. Algorithm check
- * 2. Receipt signature verification
- * 3. Chain integrity (previous_receipt_hash linkage)
- * 4. Merkle inclusion proofs
- * 5. Bundle consistency (leaf hashes match receipts)
- *
- * Copyright (c) 2026 Attested Intelligence Holdings LLC
- * SPDX-License-Identifier: MIT
- */
-export interface GatewayVerificationResult {
-    algorithm_valid: boolean;
-    receipt_signatures_valid: boolean;
-    chain_integrity_valid: boolean;
-    merkle_proofs_valid: boolean;
-    bundle_consistent: boolean;
-    overall_valid: boolean;
-    receipts_checked: number;
-    algorithm: string;
-    error?: string;
-}
-export declare function verifyGatewayBundle(bundleJson: string): Promise<GatewayVerificationResult>;
-//# sourceMappingURL=verify.d.ts.map

package/dist/proxy/verify.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/proxy/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAiDH,MAAM,WAAW,yBAAyB;IACxC,eAAe,EAAE,OAAO,CAAC;IACzB,wBAAwB,EAAE,OAAO,CAAC;IAClC,qBAAqB,EAAE,OAAO,CAAC;IAC/B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,aAAa,EAAE,OAAO,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAID,wBAAsB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC,CA2HhG"}

package/dist/proxy/verify.js

@@ -1,182 +0,0 @@
-/**
- * AGA Gateway Bundle Verifier
- * Verifies Ed25519-SHA256-JCS evidence bundles.
- * Uses ONLY @noble crypto - zero imports from ../core/ or ../crypto/.
- *
- * 5-step verification matching gateway, Python SDK, and browser verifier:
- * 1. Algorithm check
- * 2. Receipt signature verification
- * 3. Chain integrity (previous_receipt_hash linkage)
- * 4. Merkle inclusion proofs
- * 5. Bundle consistency (leaf hashes match receipts)
- *
- * Copyright (c) 2026 Attested Intelligence Holdings LLC
- * SPDX-License-Identifier: MIT
- */
-import * as ed from '@noble/ed25519';
-import { sha512 } from '@noble/hashes/sha512';
-import { sha256 } from '@noble/hashes/sha256';
-import { bytesToHex, hexToBytes } from '@noble/hashes/utils';
-// Ed25519 setup
-ed.etc.sha512Sync = (...m) => {
-    const total = m.reduce((n, a) => n + a.length, 0);
-    const buf = new Uint8Array(total);
-    let off = 0;
-    for (const a of m) {
-        buf.set(a, off);
-        off += a.length;
-    }
-    return sha512(buf);
-};
-const enc = new TextEncoder();
-// ── RFC 8785 Canonicalization ────────────────────────────────
-function deepSortKeys(obj) {
-    if (obj === null || obj === undefined || typeof obj !== 'object')
-        return obj;
-    if (Array.isArray(obj))
-        return obj.map(deepSortKeys);
-    const sorted = {};
-    for (const key of Object.keys(obj).sort()) {
-        sorted[key] = deepSortKeys(obj[key]);
-    }
-    return sorted;
-}
-function canonicalize(obj) {
-    return JSON.stringify(deepSortKeys(obj));
-}
-function sha256Hex(data) {
-    return bytesToHex(sha256(enc.encode(data)));
-}
-function merkleNodeHash(leftHex, rightHex) {
-    const left = hexToBytes(leftHex);
-    const right = hexToBytes(rightHex);
-    const combined = new Uint8Array(left.length + right.length);
-    combined.set(left, 0);
-    combined.set(right, left.length);
-    return bytesToHex(sha256(combined));
-}
-// ── 5-step verification ─────────────────────────────────────
-export async function verifyGatewayBundle(bundleJson) {
-    let bundle;
-    try {
-        bundle = JSON.parse(bundleJson);
-    }
-    catch {
-        return {
-            algorithm_valid: false, receipt_signatures_valid: false,
-            chain_integrity_valid: false, merkle_proofs_valid: false,
-            bundle_consistent: false, overall_valid: false,
-            receipts_checked: 0, algorithm: '', error: 'Invalid JSON',
-        };
-    }
-    const result = {
-        algorithm_valid: false, receipt_signatures_valid: false,
-        chain_integrity_valid: false, merkle_proofs_valid: false,
-        bundle_consistent: false, overall_valid: false,
-        receipts_checked: bundle.receipts?.length ?? 0,
-        algorithm: bundle.algorithm ?? '',
-    };
-    // Step 1: Algorithm
-    if (bundle.algorithm !== 'Ed25519-SHA256-JCS') {
-        result.error = `unsupported algorithm: ${bundle.algorithm}`;
-        return result;
-    }
-    for (const r of bundle.receipts) {
-        if (r.algorithm !== 'Ed25519-SHA256-JCS') {
-            result.error = `receipt has wrong algorithm: ${r.algorithm}`;
-            return result;
-        }
-    }
-    result.algorithm_valid = true;
-    // Step 2: Receipt signatures
-    try {
-        for (const receipt of bundle.receipts) {
-            const { signature, ...unsigned } = receipt;
-            const canonical = canonicalize(unsigned);
-            const sig = hexToBytes(signature);
-            const pk = hexToBytes(receipt.public_key);
-            if (!ed.verify(sig, enc.encode(canonical), pk)) {
-                result.error = `Receipt ${receipt.receipt_id} signature failed`;
-                return result;
-            }
-        }
-        result.receipt_signatures_valid = true;
-    }
-    catch (e) {
-        result.error = `signature verification error: ${e}`;
-        return result;
-    }
-    // Step 3: Chain integrity
-    try {
-        const receipts = bundle.receipts;
-        if (receipts.length > 0 && receipts[0].previous_receipt_hash !== '') {
-            result.error = 'First receipt previous_receipt_hash must be empty';
-            return result;
-        }
-        for (let i = 1; i < receipts.length; i++) {
-            const expectedHash = sha256Hex(canonicalize(receipts[i - 1]));
-            if (receipts[i].previous_receipt_hash !== expectedHash) {
-                result.error = `Chain break at receipt ${i}`;
-                return result;
-            }
-        }
-        result.chain_integrity_valid = true;
-    }
-    catch (e) {
-        result.error = `chain integrity error: ${e}`;
-        return result;
-    }
-    // Step 4: Merkle proofs
-    try {
-        for (const proof of bundle.merkle_proofs) {
-            let currentHash = proof.leaf_hash;
-            for (let i = 0; i < proof.siblings.length; i++) {
-                if (proof.directions[i] === 'left') {
-                    currentHash = merkleNodeHash(proof.siblings[i], currentHash);
-                }
-                else {
-                    currentHash = merkleNodeHash(currentHash, proof.siblings[i]);
-                }
-            }
-            if (currentHash !== bundle.merkle_root) {
-                result.error = `Merkle proof failed for leaf ${proof.leaf_index}`;
-                return result;
-            }
-            if (proof.merkle_root !== bundle.merkle_root) {
-                result.error = `Proof root mismatch at leaf ${proof.leaf_index}`;
-                return result;
-            }
-        }
-        result.merkle_proofs_valid = true;
-    }
-    catch (e) {
-        result.error = `merkle proof error: ${e}`;
-        return result;
-    }
-    // Step 5: Bundle consistency
-    try {
-        if (bundle.merkle_proofs.length !== bundle.receipts.length) {
-            result.error = 'Proof count != receipt count';
-            return result;
-        }
-        for (let i = 0; i < bundle.receipts.length; i++) {
-            const leafHash = sha256Hex(canonicalize(bundle.receipts[i]));
-            if (bundle.merkle_proofs[i].leaf_hash !== leafHash) {
-                result.error = `Leaf hash mismatch at receipt ${i}`;
-                return result;
-            }
-            if (bundle.merkle_proofs[i].leaf_index !== i) {
-                result.error = `Leaf index mismatch at receipt ${i}`;
-                return result;
-            }
-        }
-        result.bundle_consistent = true;
-    }
-    catch (e) {
-        result.error = `consistency error: ${e}`;
-        return result;
-    }
-    result.overall_valid = true;
-    return result;
-}
-//# sourceMappingURL=verify.js.map

package/dist/proxy/verify.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/proxy/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAE7D,gBAAgB;AAChB,EAAE,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC,GAAG,CAAe,EAAE,EAAE;IACzC,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC;IAAC,CAAC;IACxD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC,CAAC;AAEF,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;AAE9B,gEAAgE;AAEhE,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAC7E,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACrD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAA8B,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACrE,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAE,GAA+B,CAAC,GAAG,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,QAAgB;IACvD,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5D,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,OAAO,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;AACtC,CAAC;AAgBD,+DAA+D;AAE/D,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,UAAkB;IAC1D,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,eAAe,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK;YACvD,qBAAqB,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK;YACxD,iBAAiB,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK;YAC9C,gBAAgB,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc;SAC1D,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAA8B;QACxC,eAAe,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK;QACvD,qBAAqB,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK;QACxD,iBAAiB,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK;QAC9C,gBAAgB,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC;QAC9C,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;KAClC,CAAC;IAEF,oBAAoB;IACpB,IAAI,MAAM,CAAC,SAAS,KAAK,oBAAoB,EAAE,CAAC;QAC9C,MAAM,CAAC,KAAK,GAAG,0BAA0B,MAAM,CAAC,SAAS,EAAE,CAAC;QAC5D,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,SAAS,KAAK,oBAAoB,EAAE,CAAC;YACzC,MAAM,CAAC,KAAK,GAAG,gCAAgC,CAAC,CAAC,SAAS,EAAE,CAAC;YAC7D,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IACD,MAAM,CAAC,eAAe,GAAG,IAAI,CAAC;IAE9B,6BAA6B;IAC7B,IAAI,CAAC;QACH,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAC;YAC3C,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;YACzC,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;YAClC,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC1C,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;gBAC/C,MAAM,CAAC,KAAK,GAAG,WAAW,OAAO,CAAC,UAAU,mBAAmB,CAAC;gBAChE,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QACD,MAAM,CAAC,wBAAwB,GAAG,IAAI,CAAC;IACzC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,KAAK,GAAG,iCAAiC,CAAC,EAAE,CAAC;QACpD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,0BAA0B;IAC1B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,qBAAqB,KAAK,EAAE,EAAE,CAAC;YACpE,MAAM,CAAC,KAAK,GAAG,mDAAmD,CAAC;YACnE,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9D,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,qBAAqB,KAAK,YAAY,EAAE,CAAC;gBACvD,MAAM,CAAC,KAAK,GAAG,0BAA0B,CAAC,EAAE,CAAC;gBAC7C,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QACD,MAAM,CAAC,qBAAqB,GAAG,IAAI,CAAC;IACtC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,KAAK,GAAG,0BAA0B,CAAC,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,wBAAwB;IACxB,IAAI,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzC,IAAI,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC;YAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC/C,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;oBACnC,WAAW,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;gBAC/D,CAAC;qBAAM,CAAC;oBACN,WAAW,GAAG,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/D,CAAC;YACH,CAAC;YACD,IAAI,WAAW,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvC,MAAM,CAAC,KAAK,GAAG,gCAAgC,KAAK,CAAC,UAAU,EAAE,CAAC;gBAClE,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;gBAC7C,MAAM,CAAC,KAAK,GAAG,+BAA+B,KAAK,CAAC,UAAU,EAAE,CAAC;gBACjE,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QACD,MAAM,CAAC,mBAAmB,GAAG,IAAI,CAAC;IACpC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,KAAK,GAAG,uBAAuB,CAAC,EAAE,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,6BAA6B;IAC7B,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC3D,MAAM,CAAC,KAAK,GAAG,8BAA8B,CAAC;YAC9C,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAChD,MAAM,QAAQ,GAAG,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7D,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;gBACnD,MAAM,CAAC,KAAK,GAAG,iCAAiC,CAAC,EAAE,CAAC;gBACpD,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;gBAC7C,MAAM,CAAC,KAAK,GAAG,kCAAkC,CAAC,EAAE,CAAC;gBACrD,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QACD,MAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAClC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,KAAK,GAAG,sBAAsB,CAAC,EAAE,CAAC;QACzC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;IAC5B,OAAO,MAAM,CAAC;AAChB,CAAC"}