@attested-intelligence/aga-mcp-server 3.0.0 → 3.2.0

package/dist/sep/hybrid.js

@@ -0,0 +1,189 @@
+/**
+ * ML-DSA-65 + Ed25519 composite hybrid signature (SHARED_CRYPTO_FOUNDATION.md §2) — v2 profile.
+ *
+ * Byte-for-byte counterpart of the AGA Go/CIRCL construction in
+ * aga-k8s/internal/crypto/backends/hybrid.go AND of VerifyBundle's packages/integrity/src/hybrid.ts
+ * (this file is ported verbatim from the latter; only the hex/utf8 util import path differs). A
+ * signature produced by any of the three verifies under the others. Proven byte-identical Go<->JS by
+ * aga-k8s/internal/crypto/hybrid_xverify_test.go against the pinned cross-verify fixtures.
+ *
+ *   algorithm id : "ML-DSA-65+Ed25519-SHA256-JCS"
+ *   composite    : len32(a) || a || len32(b) || b   (len32 = 4-byte big-endian uint32)
+ *                  a = ML-DSA-65 component, b = Ed25519 component (for both keys and signatures)
+ *   ML-DSA-65    : FIPS 204, EXTERNAL interface, EMPTY context, DETERMINISTIC (rnd = zeros).
+ *   Ed25519      : RFC 8032, strict (zip215:false) with small-order public-key rejection.
+ *   acceptance   : AND — both component signatures must verify; no partial acceptance.
+ *
+ * The v1 zero-dependency reference verifier (aga-receipt-spec/verify/verify-sep.mjs, node:crypto only)
+ * does NOT import this; v2 lives in the agile engine, which carries the @noble dependency.
+ */
+import { ml_dsa65 } from '@noble/post-quantum/ml-dsa.js';
+import * as ed from '@noble/ed25519';
+import { sha512 } from '@noble/hashes/sha512';
+import { bytesToHex, hexToBytes, utf8ToBytes } from '@noble/hashes/utils';
+// @noble/ed25519 v2 needs a synchronous SHA-512 hook for synchronous sign/verify. Wiring it from
+// @noble/hashes keeps the stack dependency-pure (no node:crypto in the composite path).
+ed.etc.sha512Sync = (...m) => sha512(ed.etc.concatBytes(...m));
+/** The composite algorithm identifier, shared with AGA Go + VerifyBundle. */
+export const ALG_HYBRID = 'ML-DSA-65+Ed25519-SHA256-JCS';
+/** FIPS 204 ML-DSA-65 component byte lengths. */
+export const MLDSA65_PUBLIC_KEY_BYTES = 1952;
+export const MLDSA65_SECRET_KEY_BYTES = 4032;
+export const MLDSA65_SIGNATURE_BYTES = 3309;
+export const MLDSA65_SEED_BYTES = 32;
+/** Ed25519 component byte lengths (RFC 8032). */
+export const ED25519_PUBLIC_KEY_BYTES = 32;
+export const ED25519_SEED_BYTES = 32;
+export const ED25519_SIGNATURE_BYTES = 64;
+/** Encode two byte strings as len32(a) || a || len32(b) || b (4-byte big-endian lengths). */
+export function encodeComposite(a, b) {
+    const out = new Uint8Array(4 + a.length + 4 + b.length);
+    const dv = new DataView(out.buffer);
+    dv.setUint32(0, a.length, false); // big-endian
+    out.set(a, 4);
+    dv.setUint32(4 + a.length, b.length, false);
+    out.set(b, 8 + a.length);
+    return out;
+}
+/**
+ * Decode len32(a) || a || len32(b) || b into [a, b]. Fails closed: throws on a short buffer, a length
+ * prefix that overruns the data, or trailing bytes after b (extra bytes are rejected to remove a
+ * malleability surface — matches the Go DecodeComposite trailing-byte reject).
+ */
+export function decodeComposite(data) {
+    if (data.length < 8)
+        throw new Error('composite too short');
+    const dv = new DataView(data.buffer, data.byteOffset, data.byteLength);
+    const aLen = dv.getUint32(0, false);
+    if (4 + aLen + 4 > data.length)
+        throw new Error('first component length exceeds data');
+    const a = data.subarray(4, 4 + aLen);
+    const bLenOffset = 4 + aLen;
+    const bLen = dv.getUint32(bLenOffset, false);
+    const bStart = bLenOffset + 4;
+    if (bStart + bLen > data.length)
+        throw new Error('second component length exceeds data');
+    if (bStart + bLen !== data.length)
+        throw new Error('trailing bytes after composite');
+    const b = data.subarray(bStart, bStart + bLen);
+    return [a, b];
+}
+/** Derive the composite public key bytes from a hybrid secret key. */
+function compositePublicKey(sk) {
+    const mldsaPub = ml_dsa65.getPublicKey(sk.mldsa);
+    const edPub = ed.getPublicKey(sk.ed);
+    return encodeComposite(mldsaPub, edPub);
+}
+/** Lower-hex composite public key for a hybrid secret key. */
+export function hybridPublicKeyHex(sk) {
+    return bytesToHex(compositePublicKey(sk));
+}
+/** Generate a fresh ephemeral hybrid keypair. The secret key never leaves the caller. */
+export function generateHybridKeypair() {
+    const seed = ml_dsa65.keygen();
+    const secretKey = { mldsa: seed.secretKey, ed: ed.utils.randomPrivateKey() };
+    return { secretKey, publicKeyHex: hybridPublicKeyHex(secretKey) };
+}
+/** Deterministically derive a hybrid keypair from two 32-byte seeds (used by the cross-verify fixtures). */
+export function hybridKeypairFromSeeds(mldsaSeed, edSeed) {
+    if (mldsaSeed.length !== MLDSA65_SEED_BYTES)
+        throw new Error('ML-DSA seed must be 32 bytes');
+    if (edSeed.length !== ED25519_SEED_BYTES)
+        throw new Error('Ed25519 seed must be 32 bytes');
+    const secretKey = { mldsa: ml_dsa65.keygen(mldsaSeed).secretKey, ed: edSeed };
+    return { secretKey, publicKeyHex: hybridPublicKeyHex(secretKey) };
+}
+/** Sign raw message bytes, returning the composite signature bytes (trusted-input signing path). */
+export function signHybridBytes(message, sk) {
+    const mldsaSig = ml_dsa65.sign(message, sk.mldsa, { extraEntropy: false }); // empty ctx, deterministic
+    const edSig = ed.sign(message, sk.ed);
+    return encodeComposite(mldsaSig, edSig);
+}
+/** Sign a UTF-8 message; returns the lower-hex composite signature. */
+export function signHybrid(message, sk) {
+    return bytesToHex(signHybridBytes(utf8ToBytes(message), sk));
+}
+/** Strict, hardened Ed25519 verification over bytes (mirrors the v1 verifyHex hardening). */
+function edVerifyHardened(edPub, message, edSig) {
+    if (edPub.length !== ED25519_PUBLIC_KEY_BYTES || edSig.length !== ED25519_SIGNATURE_BYTES)
+        return false;
+    if (edPub.every((x) => x === 0))
+        return false; // reject the all-zero (identity) key
+    try {
+        if (ed.ExtendedPoint.fromHex(edPub).isSmallOrder())
+            return false; // reject small-order
+        return ed.verify(edSig, message, edPub, { zip215: false });
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Verify a composite signature over raw message bytes under a composite public key. Returns true only
+ * if BOTH the ML-DSA-65 and the Ed25519 components verify. Fails closed on any malformed/short/over-long
+ * composite or wrong component length.
+ */
+export function verifyHybridBytes(compositePub, message, compositeSig) {
+    let mldsaPub;
+    let edPub;
+    let mldsaSig;
+    let edSig;
+    try {
+        [mldsaPub, edPub] = decodeComposite(compositePub);
+        [mldsaSig, edSig] = decodeComposite(compositeSig);
+    }
+    catch {
+        return false;
+    }
+    if (mldsaPub.length !== MLDSA65_PUBLIC_KEY_BYTES)
+        return false;
+    if (mldsaSig.length !== MLDSA65_SIGNATURE_BYTES)
+        return false;
+    if (edPub.length !== ED25519_PUBLIC_KEY_BYTES)
+        return false;
+    if (edSig.length !== ED25519_SIGNATURE_BYTES)
+        return false;
+    let mldsaOk;
+    try {
+        mldsaOk = ml_dsa65.verify(mldsaSig, message, mldsaPub); // empty context (default)
+    }
+    catch {
+        return false;
+    }
+    if (!mldsaOk)
+        return false;
+    return edVerifyHardened(edPub, message, edSig);
+}
+/**
+ * Verify a lower-hex composite signature over a UTF-8 message under a lower-hex composite public key.
+ * Rejects malformed hex before touching the curve/lattice; never throws.
+ */
+export function verifyHybrid(pubHex, message, sigHex) {
+    if (typeof pubHex !== 'string' || typeof sigHex !== 'string')
+        return false;
+    // LOWERCASE-strict hex (no upper, no mixed). An uppercased hex decodes to the SAME bytes, so a
+    // case-insensitive accept would VERIFY a bundle a lowercase-strict stack (the Go/CIRCL oracle's
+    // isLowerHexEven, the v1 isHex guard) FAILS — a cross-stack verdict split. Mirrors the H5 lowercase
+    // discipline for Merkle siblings.
+    if (!/^[0-9a-f]+$/.test(pubHex) || pubHex.length % 2 !== 0)
+        return false;
+    if (!/^[0-9a-f]+$/.test(sigHex) || sigHex.length % 2 !== 0)
+        return false;
+    try {
+        return verifyHybridBytes(hexToBytes(pubHex), utf8ToBytes(message), hexToBytes(sigHex));
+    }
+    catch {
+        return false;
+    }
+}
+/** A v2 composite SepSigner from two 32-byte seeds (deterministic; for the producer + cross-verify tests). */
+export function hybridSignerFromSeeds(mldsaSeed, edSeed) {
+    const { secretKey, publicKeyHex } = hybridKeypairFromSeeds(mldsaSeed, edSeed);
+    return { algorithm: ALG_HYBRID, publicKeyHex, sign: (m) => signHybrid(m, secretKey) };
+}
+/** A v2 composite SepSigner from a fresh ephemeral keypair (the secret key is returned for persistence). */
+export function generateHybridSigner() {
+    const { secretKey, publicKeyHex } = generateHybridKeypair();
+    return { signer: { algorithm: ALG_HYBRID, publicKeyHex, sign: (m) => signHybrid(m, secretKey) }, secretKey };
+}
+//# sourceMappingURL=hybrid.js.map

package/dist/sep/hybrid.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hybrid.js","sourceRoot":"","sources":["../../src/sep/hybrid.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AACzD,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAG1E,iGAAiG;AACjG,wFAAwF;AACxF,EAAE,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC,GAAG,CAAe,EAAc,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAEzF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,UAAU,GAAG,8BAA8B,CAAC;AAEzD,iDAAiD;AACjD,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAC7C,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAC7C,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAC5C,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AACrC,iDAAiD;AACjD,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAC3C,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AACrC,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAQ1C,6FAA6F;AAC7F,MAAM,UAAU,eAAe,CAAC,CAAa,EAAE,CAAa;IAC1D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,aAAa;IAC/C,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACd,EAAE,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC5C,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACzB,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAgB;IAC9C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC5D,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACvF,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC;IAC5B,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,UAAU,GAAG,CAAC,CAAC;IAC9B,IAAI,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACzF,IAAI,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACrF,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/C,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAChB,CAAC;AAED,sEAAsE;AACtE,SAAS,kBAAkB,CAAC,EAAmB;IAC7C,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACrC,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,kBAAkB,CAAC,EAAmB;IACpD,OAAO,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,qBAAqB;IACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAoB,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,CAAC;IAC9F,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;AACpE,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,sBAAsB,CACpC,SAAqB,EACrB,MAAkB;IAElB,IAAI,SAAS,CAAC,MAAM,KAAK,kBAAkB;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC7F,IAAI,MAAM,CAAC,MAAM,KAAK,kBAAkB;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC3F,MAAM,SAAS,GAAoB,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;IAC/F,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;AACpE,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,eAAe,CAAC,OAAmB,EAAE,EAAmB;IACtE,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,2BAA2B;IACvG,MAAM,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACtC,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,EAAmB;IAC7D,OAAO,UAAU,CAAC,eAAe,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,6FAA6F;AAC7F,SAAS,gBAAgB,CAAC,KAAiB,EAAE,OAAmB,EAAE,KAAiB;IACjF,IAAI,KAAK,CAAC,MAAM,KAAK,wBAAwB,IAAI,KAAK,CAAC,MAAM,KAAK,uBAAuB;QAAE,OAAO,KAAK,CAAC;IACxG,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,qCAAqC;IACpF,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,YAAY,EAAE;YAAE,OAAO,KAAK,CAAC,CAAC,qBAAqB;QACvF,OAAO,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,YAAwB,EACxB,OAAmB,EACnB,YAAwB;IAExB,IAAI,QAAoB,CAAC;IACzB,IAAI,KAAiB,CAAC;IACtB,IAAI,QAAoB,CAAC;IACzB,IAAI,KAAiB,CAAC;IACtB,IAAI,CAAC;QACH,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;QAClD,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,wBAAwB;QAAE,OAAO,KAAK,CAAC;IAC/D,IAAI,QAAQ,CAAC,MAAM,KAAK,uBAAuB;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,KAAK,CAAC,MAAM,KAAK,wBAAwB;QAAE,OAAO,KAAK,CAAC;IAC5D,IAAI,KAAK,CAAC,MAAM,KAAK,uBAAuB;QAAE,OAAO,KAAK,CAAC;IAC3D,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,0BAA0B;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,OAAO,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,MAAe,EAAE,OAAe,EAAE,MAAe;IAC5E,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC3E,+FAA+F;IAC/F,gGAAgG;IAChG,oGAAoG;IACpG,kCAAkC;IAClC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACzE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACzE,IAAI,CAAC;QACH,OAAO,iBAAiB,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,8GAA8G;AAC9G,MAAM,UAAU,qBAAqB,CAAC,SAAqB,EAAE,MAAkB;IAC7E,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,sBAAsB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC9E,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC;AACxF,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,oBAAoB;IAClC,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,qBAAqB,EAAE,CAAC;IAC5D,OAAO,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC;AAC/G,CAAC"}

package/dist/sep/index.d.ts

@@ -10,5 +10,7 @@ export { nodeHash, merkleRoot, merkleProof, type MerkleProof } from './merkle.js
 export { SEP_ALGORITHM, SEP_RECEIPT_VERSION, SEP_RECEIPT_FIELDS, buildReceipt, leafHash, argumentsHash, safeArgumentsHash, UNCANONICALIZABLE_ARGS_HASH, type SepReceipt, type ReceiptInput, type Decision } from './receipt.js';
 export { buildCheckpoint, type SignedCheckpoint } from './checkpoint.js';
 export { SepGateway, type SepBundle, type SepGatewayOptions, type RecordInput } from './bundle.js';
-export { verifySepBundle, type SepVerificationResult, type VerifyStep } from './verify.js';
+export { verifySepBundle, type SepVerificationResult, type VerifyStep, type VerifyOptions } from './verify.js';
+export { verifyHybrid, verifyHybridBytes, signHybrid, signHybridBytes, hybridSignerFromSeeds, generateHybridSigner, generateHybridKeypair, hybridKeypairFromSeeds, encodeComposite, decodeComposite, type HybridSecretKey, } from './hybrid.js';
+export { ALG_ED25519, ALG_HYBRID, REGISTERED_PROFILES, ALL_PROFILES, isRegisteredProfile, validPublicKeyForProfile, verifyForProfile, } from './profiles.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/sep/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sep/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,YAAY,EAAE,mCAAmC,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACpG,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7I,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,KAAK,UAAU,EAAE,KAAK,YAAY,EAAE,KAAK,QAAQ,EAAE,MAAM,cAAc,CAAC;AAChO,OAAO,EAAE,eAAe,EAAE,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,KAAK,SAAS,EAAE,KAAK,iBAAiB,EAAE,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AACnG,OAAO,EAAE,eAAe,EAAE,KAAK,qBAAqB,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sep/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,YAAY,EAAE,mCAAmC,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACpG,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7I,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,KAAK,UAAU,EAAE,KAAK,YAAY,EAAE,KAAK,QAAQ,EAAE,MAAM,cAAc,CAAC;AAChO,OAAO,EAAE,eAAe,EAAE,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,KAAK,SAAS,EAAE,KAAK,iBAAiB,EAAE,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AACnG,OAAO,EAAE,eAAe,EAAE,KAAK,qBAAqB,EAAE,KAAK,UAAU,EAAE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAC/G,OAAO,EACL,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,eAAe,EAC5D,qBAAqB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,sBAAsB,EAC1F,eAAe,EAAE,eAAe,EAAE,KAAK,eAAe,GACvD,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,WAAW,EAAE,UAAU,EAAE,mBAAmB,EAAE,YAAY,EAC1D,mBAAmB,EAAE,wBAAwB,EAAE,gBAAgB,GAChE,MAAM,eAAe,CAAC"}

package/dist/sep/index.js

@@ -11,4 +11,6 @@ export { SEP_ALGORITHM, SEP_RECEIPT_VERSION, SEP_RECEIPT_FIELDS, buildReceipt, l
 export { buildCheckpoint } from './checkpoint.js';
 export { SepGateway } from './bundle.js';
 export { verifySepBundle } from './verify.js';
+export { verifyHybrid, verifyHybridBytes, signHybrid, signHybridBytes, hybridSignerFromSeeds, generateHybridSigner, generateHybridKeypair, hybridKeypairFromSeeds, encodeComposite, decodeComposite, } from './hybrid.js';
+export { ALG_ED25519, ALG_HYBRID, REGISTERED_PROFILES, ALL_PROFILES, isRegisteredProfile, validPublicKeyForProfile, verifyForProfile, } from './profiles.js';
 //# sourceMappingURL=index.js.map

package/dist/sep/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sep/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,YAAY,EAAE,mCAAmC,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACpG,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,KAAK,EAAkB,MAAM,aAAa,CAAC;AAC7I,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAoB,MAAM,aAAa,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,iBAAiB,EAAE,2BAA2B,EAAqD,MAAM,cAAc,CAAC;AAChO,OAAO,EAAE,eAAe,EAAyB,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,UAAU,EAA4D,MAAM,aAAa,CAAC;AACnG,OAAO,EAAE,eAAe,EAA+C,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sep/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,YAAY,EAAE,mCAAmC,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACpG,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,KAAK,EAAkB,MAAM,aAAa,CAAC;AAC7I,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAoB,MAAM,aAAa,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,iBAAiB,EAAE,2BAA2B,EAAqD,MAAM,cAAc,CAAC;AAChO,OAAO,EAAE,eAAe,EAAyB,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,UAAU,EAA4D,MAAM,aAAa,CAAC;AACnG,OAAO,EAAE,eAAe,EAAmE,MAAM,aAAa,CAAC;AAC/G,OAAO,EACL,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,eAAe,EAC5D,qBAAqB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,sBAAsB,EAC1F,eAAe,EAAE,eAAe,GACjC,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,WAAW,EAAE,UAAU,EAAE,mBAAmB,EAAE,YAAY,EAC1D,mBAAmB,EAAE,wBAAwB,EAAE,gBAAgB,GAChE,MAAM,eAAe,CAAC"}

package/dist/sep/profiles.d.ts

@@ -0,0 +1,22 @@
+import { ALG_HYBRID } from './hybrid.js';
+export { ALG_HYBRID };
+/** v1 classical profile identifier (same literal as SEP_ALGORITHM). */
+export declare const ALG_ED25519 = "Ed25519-SHA256-JCS";
+/** Registered profiles -> profile_version. The authoritative registry the dispatch consults. */
+export declare const REGISTERED_PROFILES: Readonly<Record<string, string>>;
+/** The profiles the agile engine implements (both). A v1-only verifier passes a restricted set. */
+export declare const ALL_PROFILES: readonly string[];
+/** True iff `algorithm` is a profile the registry knows about (regardless of which verifier implements it). */
+export declare function isRegisteredProfile(algorithm: unknown): boolean;
+/**
+ * Profile-parameterized public-key well-formedness (the H1 floor, per profile):
+ *  - v1: 64 lower-hex, canonical-y, small-order rejected (node:crypto wellFormedKey).
+ *  - v2: 3984 lower-hex, non-zero (the composite's component small-order rejection is enforced at verify).
+ */
+export declare function validPublicKeyForProfile(algorithm: string, pub: unknown): boolean;
+/**
+ * Verify a lower-hex signature over a canonical message under the named profile's primitive.
+ * Never throws; an unknown profile fails closed (false). v2 is composite AND-verify (no partial accept).
+ */
+export declare function verifyForProfile(algorithm: string, pub: string, message: string, sig: unknown): boolean;
+//# sourceMappingURL=profiles.d.ts.map

package/dist/sep/profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../src/sep/profiles.ts"],"names":[],"mappings":"AAaA,OAAO,EAAgB,UAAU,EAAE,MAAM,aAAa,CAAC;AAGvD,OAAO,EAAE,UAAU,EAAE,CAAC;AACtB,uEAAuE;AACvE,eAAO,MAAM,WAAW,uBAAgB,CAAC;AAEzC,gGAAgG;AAChG,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAGhE,CAAC;AAEF,mGAAmG;AACnG,eAAO,MAAM,YAAY,EAAE,SAAS,MAAM,EAA8B,CAAC;AAMzE,+GAA+G;AAC/G,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,OAAO,GAAG,OAAO,CAE/D;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAIjF;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAIvG"}

package/dist/sep/profiles.js

@@ -0,0 +1,56 @@
+/**
+ * SEP profile registry + verification dispatch (ALGORITHM_AGILITY_SPEC.md).
+ *
+ * The construction (canon / leaf / Merkle / signed checkpoint / 6-step verify) is profile-INVARIANT;
+ * only the signature primitive and the public-key well-formedness change. This module is the single
+ * dispatch seam the verifier consults, so verify.ts never branches on a literal algorithm string:
+ *
+ *   v1  Ed25519-SHA256-JCS            -> ./crypto  (Ed25519, RFC 8032, node:crypto, small-order-rejected)
+ *   v2  ML-DSA-65+Ed25519-SHA256-JCS  -> ./hybrid  (composite, AND-verify, no partial acceptance)
+ *
+ * Adding a profile is an additive registry edit; existing profiles are never altered (frozen).
+ */
+import { verifyHex, wellFormedKey } from './crypto.js';
+import { verifyHybrid, ALG_HYBRID } from './hybrid.js';
+import { SEP_ALGORITHM } from './receipt.js';
+export { ALG_HYBRID };
+/** v1 classical profile identifier (same literal as SEP_ALGORITHM). */
+export const ALG_ED25519 = SEP_ALGORITHM; // 'Ed25519-SHA256-JCS'
+/** Registered profiles -> profile_version. The authoritative registry the dispatch consults. */
+export const REGISTERED_PROFILES = {
+    [ALG_ED25519]: '1',
+    [ALG_HYBRID]: '2',
+};
+/** The profiles the agile engine implements (both). A v1-only verifier passes a restricted set. */
+export const ALL_PROFILES = [ALG_ED25519, ALG_HYBRID];
+/** Composite public key = len32(1952)||mldsa||len32(32)||ed = 1992 bytes -> 3984 lower-hex chars. */
+const COMPOSITE_PUBLIC_KEY_HEX_LEN = 1992 * 2;
+const COMPOSITE_PUBKEY_RE = new RegExp(`^[0-9a-f]{${COMPOSITE_PUBLIC_KEY_HEX_LEN}}$`);
+/** True iff `algorithm` is a profile the registry knows about (regardless of which verifier implements it). */
+export function isRegisteredProfile(algorithm) {
+    return typeof algorithm === 'string' && Object.prototype.hasOwnProperty.call(REGISTERED_PROFILES, algorithm);
+}
+/**
+ * Profile-parameterized public-key well-formedness (the H1 floor, per profile):
+ *  - v1: 64 lower-hex, canonical-y, small-order rejected (node:crypto wellFormedKey).
+ *  - v2: 3984 lower-hex, non-zero (the composite's component small-order rejection is enforced at verify).
+ */
+export function validPublicKeyForProfile(algorithm, pub) {
+    if (algorithm === ALG_ED25519)
+        return wellFormedKey(pub);
+    if (algorithm === ALG_HYBRID)
+        return typeof pub === 'string' && !/^0+$/.test(pub) && COMPOSITE_PUBKEY_RE.test(pub);
+    return false;
+}
+/**
+ * Verify a lower-hex signature over a canonical message under the named profile's primitive.
+ * Never throws; an unknown profile fails closed (false). v2 is composite AND-verify (no partial accept).
+ */
+export function verifyForProfile(algorithm, pub, message, sig) {
+    if (algorithm === ALG_ED25519)
+        return typeof sig === 'string' && verifyHex(pub, message, sig);
+    if (algorithm === ALG_HYBRID)
+        return verifyHybrid(pub, message, sig);
+    return false;
+}
+//# sourceMappingURL=profiles.js.map

package/dist/sep/profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.js","sourceRoot":"","sources":["../../src/sep/profiles.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,UAAU,EAAE,CAAC;AACtB,uEAAuE;AACvE,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAAC,CAAC,uBAAuB;AAEjE,gGAAgG;AAChG,MAAM,CAAC,MAAM,mBAAmB,GAAqC;IACnE,CAAC,WAAW,CAAC,EAAE,GAAG;IAClB,CAAC,UAAU,CAAC,EAAE,GAAG;CAClB,CAAC;AAEF,mGAAmG;AACnG,MAAM,CAAC,MAAM,YAAY,GAAsB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;AAEzE,qGAAqG;AACrG,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAC,CAAC;AAC9C,MAAM,mBAAmB,GAAG,IAAI,MAAM,CAAC,aAAa,4BAA4B,IAAI,CAAC,CAAC;AAEtF,+GAA+G;AAC/G,MAAM,UAAU,mBAAmB,CAAC,SAAkB;IACpD,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;AAC/G,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,SAAiB,EAAE,GAAY;IACtE,IAAI,SAAS,KAAK,WAAW;QAAE,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;IACzD,IAAI,SAAS,KAAK,UAAU;QAAE,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnH,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,GAAW,EAAE,OAAe,EAAE,GAAY;IAC5F,IAAI,SAAS,KAAK,WAAW;QAAE,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAC9F,IAAI,SAAS,KAAK,UAAU;QAAE,OAAO,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACrE,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/sep/receipt.js.map

@@ -1 +1 @@
-{"version":3,"file":"receipt.js","sourceRoot":"","sources":["../../src/sep/receipt.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,YAAY,EAAE,mCAAmC,EAAE,MAAM,gBAAgB,CAAC;AACnF,OAAO,EAAE,SAAS,EAAkB,MAAM,aAAa,CAAC;AAExD,MAAM,CAAC,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAClD,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY;IACvE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,kBAAkB;IAC/D,gBAAgB,EAAE,uBAAuB,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW;CAC1E,CAAC;AAsCX,sGAAsG;AACtG,MAAM,UAAU,aAAa,CAAC,IAAa;IACzC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAClC,OAAO,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,SAAS,CAAC,kCAAkC,CAAC,CAAC;AAEzF;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAa;IAC7C,IAAI,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,2BAA2B,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAmB,EAAE,MAAiB;IACjE,MAAM,QAAQ,GAAG;QACf,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,eAAe,EAAE,mBAAmB;QACpC,SAAS,EAAE,aAAa;QACxB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,0FAA0F;QAC1F,UAAU,EAAE,KAAK,CAAC,UAAU,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;QACzG,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,YAAY;QACpC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,cAAc,EAAE,KAAK,CAAC,aAAa,IAAI,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC;QACrE,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,MAAM,CAAC,YAAY;KAChC,CAAC;IACF,mCAAmC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtD,OAAO,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,CAAC;AACpC,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,QAAQ,CAAC,OAAmB;IAC1C,OAAO,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"receipt.js","sourceRoot":"","sources":["../../src/sep/receipt.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,YAAY,EAAE,mCAAmC,EAAE,MAAM,gBAAgB,CAAC;AACnF,OAAO,EAAE,SAAS,EAAkB,MAAM,aAAa,CAAC;AAExD,MAAM,CAAC,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAClD,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY;IACvE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,kBAAkB;IAC/D,gBAAgB,EAAE,uBAAuB,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW;CAC1E,CAAC;AAsCX,sGAAsG;AACtG,MAAM,UAAU,aAAa,CAAC,IAAa;IACzC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAClC,OAAO,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,SAAS,CAAC,kCAAkC,CAAC,CAAC;AAEzF;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAa;IAC7C,IAAI,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,2BAA2B,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAmB,EAAE,MAAiB;IACjE,MAAM,QAAQ,GAAG;QACf,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,eAAe,EAAE,mBAAmB;QACpC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,0FAA0F;QAC1F,UAAU,EAAE,KAAK,CAAC,UAAU,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;QACzG,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,YAAY;QACpC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,cAAc,EAAE,KAAK,CAAC,aAAa,IAAI,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC;QACrE,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,MAAM,CAAC,YAAY;KAChC,CAAC;IACF,mCAAmC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtD,OAAO,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,CAAC;AACpC,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,QAAQ,CAAC,OAAmB;IAC1C,OAAO,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;AAC1C,CAAC"}

package/dist/sep/verify.d.ts

@@ -3,12 +3,17 @@ export interface VerifyStep {
     ok: boolean;
 }
 export interface SepVerificationResult {
-    verdict: 'VERIFIED' | 'FAILED';
-    /** Human-readable headline — makes integrity-only vs provenance-verified unmistakable. */
+    verdict: 'VERIFIED' | 'FAILED' | 'UNSUPPORTED_PROFILE';
+    /** Human-readable headline — makes integrity-only vs provenance-verified vs unsupported unmistakable. */
     summary: string;
     issuerVerified: boolean;
     pinned: boolean;
     steps: VerifyStep[];
 }
-export declare function verifySepBundle(bundle: any, expectedPublicKey?: string): SepVerificationResult;
+export interface VerifyOptions {
+    /** Profiles this verifier claims to implement. Defaults to both (the agile engine). A v1-only
+     *  verifier passes [ALG_ED25519] so a v2 bundle returns UNSUPPORTED_PROFILE rather than FAILED. */
+    supportedProfiles?: readonly string[];
+}
+export declare function verifySepBundle(bundle: any, expectedPublicKey?: string, opts?: VerifyOptions): SepVerificationResult;
 //# sourceMappingURL=verify.d.ts.map

package/dist/sep/verify.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/sep/verify.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,UAAU;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,OAAO,CAAC;CAAE;AAC1D,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,UAAU,GAAG,QAAQ,CAAC;IAC/B,0FAA0F;IAC1F,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,UAAU,EAAE,CAAC;CACrB;AA4CD,wBAAgB,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,qBAAqB,CAsG9F"}
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/sep/verify.ts"],"names":[],"mappings":"AAqBA,MAAM,WAAW,UAAU;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,OAAO,CAAC;CAAE;AAC1D,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,UAAU,GAAG,QAAQ,GAAG,qBAAqB,CAAC;IACvD,yGAAyG;IACzG,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,UAAU,EAAE,CAAC;CACrB;AACD,MAAM,WAAW,aAAa;IAC5B;uGACmG;IACnG,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAyCD,wBAAgB,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,aAAa,GAAG,qBAAqB,CAsHpH"}

package/dist/sep/verify.js

@@ -1,21 +1,27 @@
 /**
- * SEP §6 verifier — a faithful TypeScript port of the normative reference
- * aga-receipt-spec/verify/verify-sep.mjs. Same six steps, same semantics, same crypto
- * (node:crypto), so its verdicts match the reference byte-for-byte. See SPEC_PRECEDENCE.md.
+ * SEP §6 verifier — the ONE agile + hardened verifier (ALGORITHM_AGILITY_SPEC.md).
+ *
+ * The six-step construction and the H1–H11 hardening below are a faithful port of the normative
+ * reference aga-receipt-spec/verify/verify-sep.mjs and are PROFILE-INVARIANT. Only the signature
+ * primitive and the key well-formedness are dispatched per profile (./profiles): v1 Ed25519
+ * (node:crypto) and v2 ML-DSA-65+Ed25519 composite (AND-verify). The verdict is a trichotomy:
+ *   VERIFIED (exit 0) | FAILED (exit 1) | UNSUPPORTED_PROFILE (exit 3).
+ * UNSUPPORTED_PROFILE is returned — with NO soundness claim — when the bundle declares a registered
+ * profile this verifier does not implement (e.g. a v1-only build handed a v2 bundle). An UNKNOWN /
+ * unregistered algorithm is FAILED, never a false VERIFIED, never a partial verify.
  */
 import { canonicalize } from './canonical.js';
-import { sha256Hex, wellFormedKey, verifyHex, isHex } from './crypto.js';
+import { sha256Hex, isHex } from './crypto.js';
 import { nodeHash } from './merkle.js';
-import { SEP_ALGORITHM, SEP_RECEIPT_FIELDS } from './receipt.js';
+import { SEP_RECEIPT_FIELDS } from './receipt.js';
 import { SEP_CHECKPOINT_FIELDS } from './checkpoint.js';
+import { isRegisteredProfile, validPublicKeyForProfile, verifyForProfile, ALL_PROFILES, REGISTERED_PROFILES, } from './profiles.js';
 const leaf = (r) => sha256Hex(canonicalize(r));
 const strip = (o, f) => Object.fromEntries(Object.entries(o).filter(([k]) => k !== f));
 /**
- * Canonical SEP timestamp validation (cross-stack unified). A timestamp is VALID iff it
- * matches the EXACT fixed-width UTC form Date.prototype.toISOString() emits AND its calendar
- * fields are in range — computed with PURE INTEGER ARITHMETIC, no Date/parser, so every
- * verifier reaches a byte-identical verdict. Uses the literal [0-9] class (not \d, which
- * matches Unicode digits and would diverge from the other stacks).
+ * Canonical SEP timestamp validation (cross-stack unified). A timestamp is VALID iff it matches the
+ * EXACT fixed-width UTC form Date.prototype.toISOString() emits AND its calendar fields are in range —
+ * pure integer arithmetic, no Date/parser, so every verifier reaches a byte-identical verdict.
  */
 const TS_RE = /^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}\.[0-9]{3}Z$/;
 const isLeap = (y) => y % 4 === 0 && (y % 100 !== 0 || y % 400 === 0);
@@ -36,10 +42,9 @@ const isValidTimestamp = (ts) => {
         && second >= 0 && second <= 59;
 };
 /**
- * Strict-schema floor: the object must carry EXACTLY the canonical fields — no extra,
- * unknown, or "__proto__"-injected keys (Object.keys counts a JSON-parsed "__proto__" as
- * an own key, so a 16th key fails the count). This is the cross-stack-robust rule: every
- * conformant verifier rejects the identical bundles.
+ * Strict-schema floor: the object must carry EXACTLY the canonical fields — no extra, unknown, or
+ * "__proto__"-injected keys (Object.keys counts a JSON-parsed "__proto__" as an own key, so a 16th
+ * key fails the count). Cross-stack-robust: every conformant verifier rejects the identical bundles.
  */
 const hasExactKeys = (o, fields) => {
     if (!o || typeof o !== 'object' || Array.isArray(o))
@@ -47,24 +52,41 @@ const hasExactKeys = (o, fields) => {
     const keys = Object.keys(o);
     return keys.length === fields.length && fields.every((f) => Object.prototype.hasOwnProperty.call(o, f));
 };
-export function verifySepBundle(bundle, expectedPublicKey) {
-    // Robust contract: a malformed/hostile bundle (e.g. a receipt with a deeply-nested value
-    // that overflows the depth-bounded canonicalize) yields FAILED, never a thrown exception.
-    const pinned = isHex(expectedPublicKey, 64);
+export function verifySepBundle(bundle, expectedPublicKey, opts) {
+    const supported = opts?.supportedProfiles ?? ALL_PROFILES;
+    const algorithm = typeof bundle?.algorithm === 'string' ? bundle.algorithm : '';
+    // Trichotomy: a REGISTERED profile this verifier does not implement -> UNSUPPORTED_PROFILE. No
+    // soundness claim is made (the verifier neither passes nor fails the bundle's content). An unknown /
+    // unregistered algorithm falls through to the structural floor below and FAILS.
+    if (isRegisteredProfile(algorithm) && !supported.includes(algorithm)) {
+        return {
+            verdict: 'UNSUPPORTED_PROFILE',
+            summary: `UNSUPPORTED_PROFILE — this verifier does not implement profile '${algorithm}' (v${REGISTERED_PROFILES[algorithm]}); no soundness claim is made`,
+            issuerVerified: false,
+            pinned: false,
+            steps: [{ name: 'profile_support', ok: false }],
+        };
+    }
+    // Robust contract: a malformed/hostile bundle yields FAILED, never a thrown exception.
+    let pinned = false;
     try {
         const steps = [];
         const add = (name, ok) => { steps.push({ name, ok }); return ok; };
         const receipts = Array.isArray(bundle?.receipts) ? bundle.receipts : [];
         const proofs = Array.isArray(bundle?.merkle_proofs) ? bundle.merkle_proofs : [];
         const pub = bundle?.public_key;
-        // §6.1 structural floor — incl. STRICT receipt schema (exactly the canonical fields;
-        // rejects extra/unknown keys and "__proto__" injection on every signed receipt).
-        add('structural', bundle?.algorithm === SEP_ALGORITHM && wellFormedKey(pub)
+        // A pin is honored only if it is well-formed for the bundle's (supported, registered) profile;
+        // a malformed pin is an integrity-only check (pinned=false), never a silent provenance pass.
+        pinned = isRegisteredProfile(algorithm) && supported.includes(algorithm)
+            && typeof expectedPublicKey === 'string' && validPublicKeyForProfile(algorithm, expectedPublicKey);
+        // §6.1 structural floor — supported registered profile + profile-valid key + STRICT receipt schema
+        // (exactly the canonical fields; rejects extra/unknown keys and "__proto__" injection).
+        add('structural', isRegisteredProfile(algorithm) && supported.includes(algorithm) && validPublicKeyForProfile(algorithm, pub)
             && receipts.length > 0 && proofs.length === receipts.length
             && receipts.every((r) => hasExactKeys(r, SEP_RECEIPT_FIELDS)));
-        // §6.2 receipt signatures (against the bundle key; provenance handled in §6.6)
-        add('receipt_signatures', receipts.length > 0 && receipts.every((r) => verifyHex(pub, canonicalize(strip(r, 'signature')), r.signature)));
-        // §6.3 chain + ordering
+        // §6.2 receipt signatures, verified under the bundle's profile primitive (provenance is §6.6)
+        add('receipt_signatures', receipts.length > 0 && receipts.every((r) => verifyForProfile(algorithm, pub, canonicalize(strip(r, 'signature')), r.signature)));
+        // §6.3 chain + ordering — canonical fixed-width timestamps, non-decreasing (lexicographic compare)
         const leaves = receipts.map(leaf);
         let chain = receipts.length > 0;
         let prevTs = null;
@@ -72,9 +94,6 @@ export function verifySepBundle(bundle, expectedPublicKey) {
             const expectPrev = i === 0 ? '' : leaves[i - 1];
             if ((receipts[i].previous_receipt_hash || '') !== expectPrev)
                 chain = false;
-            // Canonical timestamps: each must match the fixed-width UTC form and be calendar-valid
-            // (pure integer arithmetic, no Date parser). Because the form is fixed-width zero-padded
-            // UTC, non-decreasing ordering is a PLAIN STRING (lexicographic) compare; EQUAL allowed.
             const ts = receipts[i].timestamp;
             if (!isValidTimestamp(ts))
                 chain = false;
@@ -85,7 +104,10 @@ export function verifySepBundle(bundle, expectedPublicKey) {
             }
         }
         add('chain_and_ordering', chain);
-        // §6.4 merkle: recompute leaf from content, walk proof, single root, index bijection
+        // §6.4 merkle: recompute leaf from content, walk proof, single root, index bijection. directions is
+        // UNSIGNED — require a well-formed array of EXACTLY "left"/"right" tokens (same length as siblings),
+        // and each sibling a lowercase 64-hex (an uppercase sibling decodes to the same bytes and would VERIFY
+        // on a case-insensitive stack while Python FAILS — the cross-stack split this guard closes).
         let root = null;
         let merkle = proofs.length === receipts.length && proofs.length > 0;
         const seen = new Set();
@@ -96,18 +118,14 @@ export function verifySepBundle(bundle, expectedPublicKey) {
             if (recomputed === null || recomputed !== p.leaf_hash)
                 merkle = false;
             let cur = p.leaf_hash;
-            // directions is UNSIGNED, so it must be a well-formed array of EXACTLY "left"/"right" tokens
-            // (same length as siblings). Otherwise the merkle step FAILS — without this, JS/Go would treat a
-            // rewritten token (e.g. "right"->"RIGHT") as a "right" fallthrough and still walk to the correct
-            // root and VERIFY, while Python FAILS: a cross-stack disagreement. (Matches Python's strictness.)
             const sib = Array.isArray(p.siblings) ? p.siblings : [];
             const dir = Array.isArray(p.directions) ? p.directions : [];
-            if (dir.length !== sib.length || !dir.every((d) => d === 'left' || d === 'right'))
+            if (dir.length !== sib.length || !dir.every((d) => d === 'left' || d === 'right') || !sib.every((s) => isHex(s, 64)))
                 merkle = false;
             for (let j = 0; j < sib.length; j++)
                 cur = dir[j] === 'left' ? nodeHash(sib[j], cur) : nodeHash(cur, sib[j]);
             if (p.merkle_root !== cur)
-                merkle = false; // the proof's own claimed root must match what it walks to (L-7)
+                merkle = false; // the proof's own claimed root must match what it walks to
             if (root === null)
                 root = cur;
             else if (root !== cur)
@@ -115,40 +133,40 @@ export function verifySepBundle(bundle, expectedPublicKey) {
         }
         const bijection = seen.size === receipts.length && [...seen].every((n) => Number.isInteger(n) && n >= 0 && n < receipts.length);
         add('merkle_and_bijection', merkle && bijection);
-        // §6.5 mandatory signed checkpoint — STRICT schema (exactly the canonical fields) + the
-        // bound algorithm value, then signature + root/count/head binding.
+        // §6.5 mandatory signed checkpoint — STRICT schema (exactly the canonical fields) + the SAME profile
+        // as the bundle, then signature (profile primitive) + root/count/head binding.
         const cp = bundle?.checkpoint;
         let cpOk = false;
         if (hasExactKeys(cp, SEP_CHECKPOINT_FIELDS)) {
-            cpOk = cp.algorithm === SEP_ALGORITHM
-                && verifyHex(pub, canonicalize(strip(cp, 'signature')), cp.signature)
+            cpOk = cp.algorithm === algorithm
+                && verifyForProfile(algorithm, pub, canonicalize(strip(cp, 'signature')), cp.signature)
                 && root !== null && cp.merkle_root === root
                 && cp.leaf_count === receipts.length
                 && cp.head_leaf_hash === (leaves.length ? leaves[leaves.length - 1] : '');
         }
         add('signed_checkpoint', cpOk);
-        // §6.5b cross-field consistency: per-receipt identity + the UNSIGNED envelope must agree
-        // with the signed/recomputed values, so nothing outside the signed objects can mislead a
-        // consumer that reads the envelope (M-1/M-2/L-3).
+        // §6.5b cross-field consistency: per-receipt identity + the UNSIGNED envelope must agree with the
+        // signed/recomputed values, so nothing outside the signed objects can mislead an envelope reader.
         const cpGatewayId = (cp && typeof cp === 'object') ? cp.gateway_id : undefined;
         const cpGeneratedAt = (cp && typeof cp === 'object') ? cp.generated_at : undefined;
         add('envelope_consistency', receipts.length > 0
-            && receipts.every((r) => r.public_key === pub) // every receipt is signed under the bundle key (L-3)
-            && receipts.every((r) => r.gateway_id === bundle?.gateway_id) // receipts ↔ envelope gateway_id
-            && cpGatewayId === bundle?.gateway_id // checkpoint ↔ envelope gateway_id (M-2)
-            && bundle?.generated_at === cpGeneratedAt // envelope generated_at ↔ signed checkpoint (T6)
-            && root !== null && bundle?.merkle_root === root); // envelope merkle_root ↔ recomputed (M-1)
-        // §6.6 provenance (only when a key is pinned)
+            && receipts.every((r) => r.public_key === pub)
+            && receipts.every((r) => r.gateway_id === bundle?.gateway_id)
+            && cpGatewayId === bundle?.gateway_id
+            && bundle?.generated_at === cpGeneratedAt
+            && root !== null && bundle?.merkle_root === root);
+        // §6.6 provenance (only when a well-formed key is pinned)
         const issuerVerified = pinned && pub === expectedPublicKey;
         if (pinned)
             add('gateway_key_match', issuerVerified);
         const verdict = steps.every((s) => s.ok) ? 'VERIFIED' : 'FAILED';
         const failed = steps.filter((s) => !s.ok).map((s) => s.name);
+        const profileTag = `${algorithm} (v${REGISTERED_PROFILES[algorithm] ?? '?'})`;
         const summary = verdict === 'FAILED'
             ? `FAILED — bundle did not verify (failed: ${failed.join(', ') || 'unknown'})`
             : pinned
-                ? 'VERIFIED (provenance verified — issued by the pinned gateway key)'
-                : 'VERIFIED (integrity only — NOT provenance; pass the gateway key to prove who issued it)';
+                ? `VERIFIED (${profileTag}; provenance verified — issued by the pinned gateway key)`
+                : `VERIFIED (${profileTag}; integrity only — NOT provenance; pass the gateway key to prove who issued it)`;
         return { verdict, summary, issuerVerified, pinned, steps };
     }
     catch (e) {

package/dist/sep/verify.js.map

@@ -1 +1 @@
-{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/sep/verify.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAYxD,MAAM,IAAI,GAAG,CAAC,CAAU,EAAU,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;AAChE,MAAM,KAAK,GAAG,CAAC,CAA0B,EAAE,CAAS,EAA2B,EAAE,CAC/E,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEjE;;;;;;GAMG;AACH,MAAM,KAAK,GAAG,oEAAoE,CAAC;AACnF,MAAM,MAAM,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC;AACvF,MAAM,WAAW,GAAG,CAAC,CAAS,EAAE,CAAS,EAAU,EAAE,CACnD,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3E,MAAM,gBAAgB,GAAG,CAAC,EAAW,EAAW,EAAE;IAChD,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACxC,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE;WAC3B,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC;WAC3C,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE;WACvB,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,EAAE;WAC3B,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,EAAE,CAAC;AACnC,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,YAAY,GAAG,CAAC,CAAU,EAAE,MAAyB,EAAW,EAAE;IACtE,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAA4B,CAAC,CAAC;IACvD,OAAO,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1G,CAAC,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,MAAW,EAAE,iBAA0B;IACrE,yFAAyF;IACzF,0FAA0F;IAC1F,MAAM,MAAM,GAAG,KAAK,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC;QACL,MAAM,KAAK,GAAiB,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAW,EAAW,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7F,MAAM,QAAQ,GAAU,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,MAAM,MAAM,GAAU,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,MAAM,GAAG,GAAW,MAAM,EAAE,UAAU,CAAC;QAEvC,qFAAqF;QACrF,iFAAiF;QACjF,GAAG,CAAC,YAAY,EACd,MAAM,EAAE,SAAS,KAAK,aAAa,IAAI,aAAa,CAAC,GAAG,CAAC;eACtD,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;eACxD,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC;QAEjE,+EAA+E;QAC/E,GAAG,CAAC,oBAAoB,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAE1I,wBAAwB;QACxB,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,KAAK,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QAChC,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAChD,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,qBAAqB,IAAI,EAAE,CAAC,KAAK,UAAU;gBAAE,KAAK,GAAG,KAAK,CAAC;YAC5E,uFAAuF;YACvF,yFAAyF;YACzF,yFAAyF;YACzF,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACjC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAAE,KAAK,GAAG,KAAK,CAAC;iBACpC,CAAC;gBAAC,IAAI,MAAM,KAAK,IAAI,IAAI,EAAE,GAAG,MAAM;oBAAE,KAAK,GAAG,KAAK,CAAC;gBAAC,MAAM,GAAG,EAAE,CAAC;YAAC,CAAC;QAC1E,CAAC;QACD,GAAG,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;QAEjC,qFAAqF;QACrF,IAAI,IAAI,GAAkB,IAAI,CAAC;QAC/B,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YACvB,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACtF,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,CAAC,CAAC,SAAS;gBAAE,MAAM,GAAG,KAAK,CAAC;YACtE,IAAI,GAAG,GAAG,CAAC,CAAC,SAAS,CAAC;YACtB,6FAA6F;YAC7F,iGAAiG;YACjG,iGAAiG;YACjG,kGAAkG;YAClG,MAAM,GAAG,GAAa,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,MAAM,GAAG,GAAa,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,OAAO,CAAC;gBAAE,MAAM,GAAG,KAAK,CAAC;YAClG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;gBAAE,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7G,IAAI,CAAC,CAAC,WAAW,KAAK,GAAG;gBAAE,MAAM,GAAG,KAAK,CAAC,CAAU,iEAAiE;YACrH,IAAI,IAAI,KAAK,IAAI;gBAAE,IAAI,GAAG,GAAG,CAAC;iBAAM,IAAI,IAAI,KAAK,GAAG;gBAAE,MAAM,GAAG,KAAK,CAAC;QACvE,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAChI,GAAG,CAAC,sBAAsB,EAAE,MAAM,IAAI,SAAS,CAAC,CAAC;QAEjD,wFAAwF;QACxF,mEAAmE;QACnE,MAAM,EAAE,GAAG,MAAM,EAAE,UAAU,CAAC;QAC9B,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,IAAI,YAAY,CAAC,EAAE,EAAE,qBAAqB,CAAC,EAAE,CAAC;YAC5C,IAAI,GAAG,EAAE,CAAC,SAAS,KAAK,aAAa;mBAChC,SAAS,CAAC,GAAG,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC;mBAClE,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC,WAAW,KAAK,IAAI;mBACxC,EAAE,CAAC,UAAU,KAAK,QAAQ,CAAC,MAAM;mBACjC,EAAE,CAAC,cAAc,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;QAE/B,yFAAyF;QACzF,yFAAyF;QACzF,kDAAkD;QAClD,MAAM,WAAW,GAAG,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAE,EAA8B,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5G,MAAM,aAAa,GAAG,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAE,EAA8B,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAChH,GAAG,CAAC,sBAAsB,EACxB,QAAQ,CAAC,MAAM,GAAG,CAAC;eAChB,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,GAAG,CAAC,CAAe,qDAAqD;eAC/G,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,MAAM,EAAE,UAAU,CAAC,CAAC,iCAAiC;eAC5F,WAAW,KAAK,MAAM,EAAE,UAAU,CAAyB,yCAAyC;eACpG,MAAM,EAAE,YAAY,KAAK,aAAa,CAAqB,iDAAiD;eAC5G,IAAI,KAAK,IAAI,IAAI,MAAM,EAAE,WAAW,KAAK,IAAI,CAAC,CAAC,CAAY,0CAA0C;QAE1G,8CAA8C;QAC9C,MAAM,cAAc,GAAG,MAAM,IAAI,GAAG,KAAK,iBAAiB,CAAC;QAC3D,IAAI,MAAM;YAAE,GAAG,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC;QAErD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;QACjE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,OAAO,KAAK,QAAQ;YAClC,CAAC,CAAC,2CAA2C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,GAAG;YAC9E,CAAC,CAAC,MAAM;gBACN,CAAC,CAAC,mEAAmE;gBACrE,CAAC,CAAC,yFAAyF,CAAC;QAChG,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,kDAAkD,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC3L,CAAC;AACH,CAAC"}
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/sep/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EACL,mBAAmB,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,YAAY,EAAE,mBAAmB,GACnG,MAAM,eAAe,CAAC;AAiBvB,MAAM,IAAI,GAAG,CAAC,CAAU,EAAU,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;AAChE,MAAM,KAAK,GAAG,CAAC,CAA0B,EAAE,CAAS,EAA2B,EAAE,CAC/E,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEjE;;;;GAIG;AACH,MAAM,KAAK,GAAG,oEAAoE,CAAC;AACnF,MAAM,MAAM,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC;AACvF,MAAM,WAAW,GAAG,CAAC,CAAS,EAAE,CAAS,EAAU,EAAE,CACnD,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3E,MAAM,gBAAgB,GAAG,CAAC,EAAW,EAAW,EAAE;IAChD,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACxC,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE;WAC3B,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC;WAC3C,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE;WACvB,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,EAAE;WAC3B,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,EAAE,CAAC;AACnC,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,YAAY,GAAG,CAAC,CAAU,EAAE,MAAyB,EAAW,EAAE;IACtE,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAA4B,CAAC,CAAC;IACvD,OAAO,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1G,CAAC,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,MAAW,EAAE,iBAA0B,EAAE,IAAoB;IAC3F,MAAM,SAAS,GAAG,IAAI,EAAE,iBAAiB,IAAI,YAAY,CAAC;IAC1D,MAAM,SAAS,GAAW,OAAO,MAAM,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAM,CAAC,SAAoB,CAAC,CAAC,CAAC,EAAE,CAAC;IAEpG,+FAA+F;IAC/F,qGAAqG;IACrG,gFAAgF;IAChF,IAAI,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACrE,OAAO;YACL,OAAO,EAAE,qBAAqB;YAC9B,OAAO,EAAE,mEAAmE,SAAS,OAAO,mBAAmB,CAAC,SAAS,CAAC,+BAA+B;YACzJ,cAAc,EAAE,KAAK;YACrB,MAAM,EAAE,KAAK;YACb,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;SAChD,CAAC;IACJ,CAAC;IAED,uFAAuF;IACvF,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,KAAK,GAAiB,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAW,EAAW,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7F,MAAM,QAAQ,GAAU,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,MAAM,MAAM,GAAU,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,MAAM,GAAG,GAAW,MAAM,EAAE,UAAU,CAAC;QAEvC,+FAA+F;QAC/F,6FAA6F;QAC7F,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC;eACnE,OAAO,iBAAiB,KAAK,QAAQ,IAAI,wBAAwB,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;QAErG,mGAAmG;QACnG,wFAAwF;QACxF,GAAG,CAAC,YAAY,EACd,mBAAmB,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,wBAAwB,CAAC,SAAS,EAAE,GAAG,CAAC;eACxG,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;eACxD,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC;QAEjE,8FAA8F;QAC9F,GAAG,CAAC,oBAAoB,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAE5J,mGAAmG;QACnG,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,KAAK,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QAChC,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAChD,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,qBAAqB,IAAI,EAAE,CAAC,KAAK,UAAU;gBAAE,KAAK,GAAG,KAAK,CAAC;YAC5E,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACjC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAAE,KAAK,GAAG,KAAK,CAAC;iBACpC,CAAC;gBAAC,IAAI,MAAM,KAAK,IAAI,IAAI,EAAE,GAAG,MAAM;oBAAE,KAAK,GAAG,KAAK,CAAC;gBAAC,MAAM,GAAG,EAAE,CAAC;YAAC,CAAC;QAC1E,CAAC;QACD,GAAG,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;QAEjC,oGAAoG;QACpG,qGAAqG;QACrG,uGAAuG;QACvG,6FAA6F;QAC7F,IAAI,IAAI,GAAkB,IAAI,CAAC;QAC/B,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YACvB,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACtF,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,CAAC,CAAC,SAAS;gBAAE,MAAM,GAAG,KAAK,CAAC;YACtE,IAAI,GAAG,GAAG,CAAC,CAAC,SAAS,CAAC;YACtB,MAAM,GAAG,GAAa,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,MAAM,GAAG,GAAa,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAAE,MAAM,GAAG,KAAK,CAAC;YACrI,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;gBAAE,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7G,IAAI,CAAC,CAAC,WAAW,KAAK,GAAG;gBAAE,MAAM,GAAG,KAAK,CAAC,CAAU,2DAA2D;YAC/G,IAAI,IAAI,KAAK,IAAI;gBAAE,IAAI,GAAG,GAAG,CAAC;iBAAM,IAAI,IAAI,KAAK,GAAG;gBAAE,MAAM,GAAG,KAAK,CAAC;QACvE,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAChI,GAAG,CAAC,sBAAsB,EAAE,MAAM,IAAI,SAAS,CAAC,CAAC;QAEjD,qGAAqG;QACrG,+EAA+E;QAC/E,MAAM,EAAE,GAAG,MAAM,EAAE,UAAU,CAAC;QAC9B,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,IAAI,YAAY,CAAC,EAAE,EAAE,qBAAqB,CAAC,EAAE,CAAC;YAC5C,IAAI,GAAG,EAAE,CAAC,SAAS,KAAK,SAAS;mBAC5B,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC;mBACpF,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC,WAAW,KAAK,IAAI;mBACxC,EAAE,CAAC,UAAU,KAAK,QAAQ,CAAC,MAAM;mBACjC,EAAE,CAAC,cAAc,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;QAE/B,kGAAkG;QAClG,kGAAkG;QAClG,MAAM,WAAW,GAAG,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAE,EAA8B,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5G,MAAM,aAAa,GAAG,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAE,EAA8B,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAChH,GAAG,CAAC,sBAAsB,EACxB,QAAQ,CAAC,MAAM,GAAG,CAAC;eAChB,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,GAAG,CAAC;eAC3C,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,MAAM,EAAE,UAAU,CAAC;eAC1D,WAAW,KAAK,MAAM,EAAE,UAAU;eAClC,MAAM,EAAE,YAAY,KAAK,aAAa;eACtC,IAAI,KAAK,IAAI,IAAI,MAAM,EAAE,WAAW,KAAK,IAAI,CAAC,CAAC;QAEpD,0DAA0D;QAC1D,MAAM,cAAc,GAAG,MAAM,IAAI,GAAG,KAAK,iBAAiB,CAAC;QAC3D,IAAI,MAAM;YAAE,GAAG,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC;QAErD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;QACjE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,GAAG,SAAS,MAAM,mBAAmB,CAAC,SAAS,CAAC,IAAI,GAAG,GAAG,CAAC;QAC9E,MAAM,OAAO,GAAG,OAAO,KAAK,QAAQ;YAClC,CAAC,CAAC,2CAA2C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,GAAG;YAC9E,CAAC,CAAC,MAAM;gBACN,CAAC,CAAC,aAAa,UAAU,2DAA2D;gBACpF,CAAC,CAAC,aAAa,UAAU,iFAAiF,CAAC;QAC/G,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC7D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,kDAAkD,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC3L,CAAC;AACH,CAAC"}