@axtary/actionpass 0.1.0 → 0.3.0

package/dist/status-list.d.ts

@@ -0,0 +1,167 @@
+import { type CryptoKey, type JWK, type KeyObject } from "jose";
+import { z } from "zod";
+export declare const ACTIONPASS_STATUS_STORE_VERSION = "axtary.actionpass_status_store.v0";
+export declare const ACTIONPASS_ISSUER_KEYRING_VERSION = "axtary.actionpass_issuer_keyring.v0";
+export declare const TOKEN_STATUS_LIST_TYP = "statuslist+jwt";
+export declare const AXTARY_STATUS_LIST_PROFILE = "axtary.status-list.v1";
+export declare const TokenStatusValueSchema: z.ZodUnion<readonly [z.ZodLiteral<0>, z.ZodLiteral<1>, z.ZodLiteral<2>]>;
+export type TokenStatusValue = z.infer<typeof TokenStatusValueSchema>;
+export declare const StatusListReferenceSchema: z.ZodObject<{
+    idx: z.ZodNumber;
+    uri: z.ZodString;
+}, z.core.$strip>;
+export type StatusListReference = z.infer<typeof StatusListReferenceSchema>;
+export declare const ActionPassStatusClaimSchema: z.ZodObject<{
+    status_list: z.ZodObject<{
+        idx: z.ZodNumber;
+        uri: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type ActionPassStatusClaim = z.infer<typeof ActionPassStatusClaimSchema>;
+export declare const StatusListSchema: z.ZodObject<{
+    bits: z.ZodUnion<readonly [z.ZodLiteral<1>, z.ZodLiteral<2>, z.ZodLiteral<4>, z.ZodLiteral<8>]>;
+    lst: z.ZodString;
+}, z.core.$strip>;
+export type StatusList = z.infer<typeof StatusListSchema>;
+export declare const StatusListTokenClaimsSchema: z.ZodObject<{
+    iss: z.ZodOptional<z.ZodString>;
+    sub: z.ZodString;
+    iat: z.ZodNumber;
+    exp: z.ZodNumber;
+    ttl: z.ZodNumber;
+    axtary_status_profile: z.ZodLiteral<"axtary.status-list.v1">;
+    status_list: z.ZodObject<{
+        bits: z.ZodUnion<readonly [z.ZodLiteral<1>, z.ZodLiteral<2>, z.ZodLiteral<4>, z.ZodLiteral<8>]>;
+        lst: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type StatusListTokenClaims = z.infer<typeof StatusListTokenClaimsSchema>;
+export declare const StatusStoreEntrySchema: z.ZodObject<{
+    passId: z.ZodString;
+    index: z.ZodNumber;
+    status: z.ZodUnion<readonly [z.ZodLiteral<0>, z.ZodLiteral<1>, z.ZodLiteral<2>]>;
+    updatedAt: z.ZodString;
+}, z.core.$strip>;
+export type StatusStoreEntry = z.infer<typeof StatusStoreEntrySchema>;
+export declare const ActionPassStatusStoreSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"axtary.actionpass_status_store.v0">;
+    uri: z.ZodString;
+    nextIndex: z.ZodNumber;
+    entries: z.ZodArray<z.ZodObject<{
+        passId: z.ZodString;
+        index: z.ZodNumber;
+        status: z.ZodUnion<readonly [z.ZodLiteral<0>, z.ZodLiteral<1>, z.ZodLiteral<2>]>;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type ActionPassStatusStoreData = z.infer<typeof ActionPassStatusStoreSchema>;
+export declare const IssuerKeyRecordSchema: z.ZodObject<{
+    kid: z.ZodString;
+    algorithm: z.ZodLiteral<"ES256">;
+    status: z.ZodEnum<{
+        active: "active";
+        retired: "retired";
+    }>;
+    createdAt: z.ZodString;
+    retireAfter: z.ZodOptional<z.ZodString>;
+    privateKeyPem: z.ZodString;
+    publicJwk: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$strip>;
+export type IssuerKeyRecord = z.infer<typeof IssuerKeyRecordSchema>;
+export declare const IssuerKeyringSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"axtary.actionpass_issuer_keyring.v0">;
+    activeKid: z.ZodString;
+    keys: z.ZodArray<z.ZodObject<{
+        kid: z.ZodString;
+        algorithm: z.ZodLiteral<"ES256">;
+        status: z.ZodEnum<{
+            active: "active";
+            retired: "retired";
+        }>;
+        createdAt: z.ZodString;
+        retireAfter: z.ZodOptional<z.ZodString>;
+        privateKeyPem: z.ZodString;
+        publicJwk: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type IssuerKeyringData = z.infer<typeof IssuerKeyringSchema>;
+export type IssuerSigningKey = {
+    kid: string;
+    privateKey: KeyObject;
+    publicJwk: JWK;
+};
+export type StatusListVerificationKeyResolver = (kid: string | undefined) => JWK | KeyObject | CryptoKey | Uint8Array | undefined | Promise<JWK | KeyObject | CryptoKey | Uint8Array | undefined>;
+export type VerifiedStatusList = {
+    token: string;
+    claims: StatusListTokenClaims;
+    fetchedAt: Date;
+    freshUntil: Date;
+    statuses: TokenStatusValue[];
+};
+export type StatusListFetchResponse = {
+    ok: boolean;
+    status: number;
+    text(): Promise<string>;
+};
+export type StatusListFetch = (input: string | URL, init?: {
+    headers?: Record<string, string>;
+    redirect?: "follow";
+}) => Promise<StatusListFetchResponse>;
+export declare function encodeStatusList(statuses: readonly TokenStatusValue[], bits?: 1 | 2 | 4 | 8): StatusList;
+export declare function decodeStatusList(input: StatusList, minimumSize?: number): TokenStatusValue[];
+export declare function signStatusListToken(input: {
+    issuer: string;
+    uri: string;
+    statuses: readonly TokenStatusValue[];
+    signingKey: KeyObject | CryptoKey | JWK | Uint8Array;
+    keyId: string;
+    now?: Date;
+    ttlSeconds?: number;
+    expiresInSeconds?: number;
+}): Promise<{
+    token: string;
+    claims: StatusListTokenClaims;
+}>;
+export declare function verifyStatusListToken(input: {
+    token: string;
+    uri: string;
+    issuer?: string;
+    verificationKeys: StatusListVerificationKeyResolver;
+    currentDate?: Date;
+    fetchedAt?: Date;
+}): Promise<VerifiedStatusList>;
+export declare class StatusListClient {
+    private readonly options;
+    private readonly cache;
+    constructor(options: {
+        issuer?: string;
+        verificationKeys: StatusListVerificationKeyResolver;
+        fetch?: StatusListFetch;
+        now?: () => Date;
+    });
+    status(referenceInput: StatusListReference): Promise<TokenStatusValue>;
+    clear(): void;
+}
+export declare class LocalActionPassStatusStore {
+    readonly filePath: string;
+    readonly uri: string;
+    constructor(filePath: string, uri: string);
+    static open(filePath: string): Promise<LocalActionPassStatusStore>;
+    read(): Promise<ActionPassStatusStoreData>;
+    allocate(passId: string, now?: Date): Promise<StatusListReference>;
+    setStatus(passId: string, status: TokenStatusValue, now?: Date): Promise<StatusStoreEntry>;
+    statusForPass(passId: string): Promise<TokenStatusValue | null>;
+    statuses(): Promise<TokenStatusValue[]>;
+}
+export declare function loadOrCreateIssuerKeyring(filePath: string, now?: Date): Promise<IssuerKeyringData>;
+export declare function rotateIssuerKeyring(input: {
+    filePath: string;
+    now?: Date;
+    retireAfterSeconds?: number;
+}): Promise<IssuerKeyringData>;
+export declare function issuerSigningKey(dataInput: IssuerKeyringData): IssuerSigningKey;
+export declare function issuerJwks(dataInput: IssuerKeyringData, now?: Date): {
+    keys: JWK[];
+};
+export declare function issuerVerificationKeyResolver(dataInput: IssuerKeyringData, kid: string | undefined, now?: Date): Promise<CryptoKey | KeyObject | Uint8Array | undefined>;
+//# sourceMappingURL=status-list.d.ts.map

package/dist/status-list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-list.d.ts","sourceRoot":"","sources":["../src/status-list.ts"],"names":[],"mappings":"AAKA,OAAO,EAKL,KAAK,SAAS,EACd,KAAK,GAAG,EACR,KAAK,SAAS,EACf,MAAM,MAAM,CAAC;AAEd,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,+BAA+B,sCAAsC,CAAC;AACnF,eAAO,MAAM,iCAAiC,wCAAwC,CAAC;AACvF,eAAO,MAAM,qBAAqB,mBAAmB,CAAC;AACtD,eAAO,MAAM,0BAA0B,0BAA0B,CAAC;AAElE,eAAO,MAAM,sBAAsB,0EAIjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,yBAAyB;;;iBAGpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,2BAA2B;;;;;iBAEtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,eAAO,MAAM,gBAAgB;;;iBAG3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,2BAA2B;;;;;;;;;;;iBAQtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,eAAO,MAAM,sBAAsB;;;;;iBAKjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,2BAA2B;;;;;;;;;;iBAKtC,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEpF,eAAO,MAAM,qBAAqB;;;;;;;;;;;iBAQhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;iBAI9B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEpE,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,GAAG,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,iCAAiC,GAAG,CAC9C,GAAG,EAAE,MAAM,GAAG,SAAS,KACpB,GAAG,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,OAAO,CACjE,GAAG,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CACrD,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,qBAAqB,CAAC;IAC9B,SAAS,EAAE,IAAI,CAAC;IAChB,UAAU,EAAE,IAAI,CAAC;IACjB,QAAQ,EAAE,gBAAgB,EAAE,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,CAC5B,KAAK,EAAE,MAAM,GAAG,GAAG,EACnB,IAAI,CAAC,EAAE;IACL,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB,KACE,OAAO,CAAC,uBAAuB,CAAC,CAAC;AAEtC,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,SAAS,gBAAgB,EAAE,EACrC,IAAI,GAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAK,GACtB,UAAU,CAkBZ;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,UAAU,EACjB,WAAW,SAAI,GACd,gBAAgB,EAAE,CAoBpB;AAED,wBAAsB,mBAAmB,CAAC,KAAK,EAAE;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACtC,UAAU,EAAE,SAAS,GAAG,SAAS,GAAG,GAAG,GAAG,UAAU,CAAC;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAA;CAAE,CAAC,CA+B5D;AAED,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,iCAAiC,CAAC;IACpD,WAAW,CAAC,EAAE,IAAI,CAAC;IACnB,SAAS,CAAC,EAAE,IAAI,CAAC;CAClB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAkC9B;AAED,qBAAa,gBAAgB;IAIzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAH1B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAyC;gBAG5C,OAAO,EAAE;QACxB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,gBAAgB,EAAE,iCAAiC,CAAC;QACpD,KAAK,CAAC,EAAE,eAAe,CAAC;QACxB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;KAClB;IAGG,MAAM,CAAC,cAAc,EAAE,mBAAmB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAyC5E,KAAK,IAAI,IAAI;CAGd;AAED,qBAAa,0BAA0B;IAEnC,QAAQ,CAAC,QAAQ,EAAE,MAAM;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM;gBADX,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM;WAGT,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAOlE,IAAI,IAAI,OAAO,CAAC,yBAAyB,CAAC;IAsB1C,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAa,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAsBxE,SAAS,CACb,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,gBAAgB,EACxB,GAAG,OAAa,GACf,OAAO,CAAC,gBAAgB,CAAC;IA0BtB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAK/D,QAAQ,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;CAQ9C;AAED,wBAAsB,yBAAyB,CAC7C,QAAQ,EAAE,MAAM,EAChB,GAAG,OAAa,GACf,OAAO,CAAC,iBAAiB,CAAC,CAoB5B;AAED,wBAAsB,mBAAmB,CAAC,KAAK,EAAE;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAyC7B;AAED,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,iBAAiB,GAAG,gBAAgB,CAa/E;AAED,wBAAgB,UAAU,CACxB,SAAS,EAAE,iBAAiB,EAC5B,GAAG,OAAa,GACf;IAAE,IAAI,EAAE,GAAG,EAAE,CAAA;CAAE,CAYjB;AAED,wBAAsB,6BAA6B,CACjD,SAAS,EAAE,iBAAiB,EAC5B,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,GAAG,OAAa,GACf,OAAO,CAAC,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC,CAIzD"}

package/dist/status-list.js

@@ -0,0 +1,450 @@
+import { createPrivateKey, generateKeyPairSync, randomUUID } from "node:crypto";
+import { mkdir, open, readFile, rename, rm } from "node:fs/promises";
+import { dirname } from "node:path";
+import { deflateSync, inflateSync } from "node:zlib";
+import { decodeProtectedHeader, importJWK, jwtVerify, SignJWT, } from "jose";
+import { lock } from "proper-lockfile";
+import { z } from "zod";
+export const ACTIONPASS_STATUS_STORE_VERSION = "axtary.actionpass_status_store.v0";
+export const ACTIONPASS_ISSUER_KEYRING_VERSION = "axtary.actionpass_issuer_keyring.v0";
+export const TOKEN_STATUS_LIST_TYP = "statuslist+jwt";
+export const AXTARY_STATUS_LIST_PROFILE = "axtary.status-list.v1";
+export const TokenStatusValueSchema = z.union([
+    z.literal(0),
+    z.literal(1),
+    z.literal(2),
+]);
+export const StatusListReferenceSchema = z.object({
+    idx: z.number().int().nonnegative(),
+    uri: z.string().url(),
+});
+export const ActionPassStatusClaimSchema = z.object({
+    status_list: StatusListReferenceSchema,
+});
+export const StatusListSchema = z.object({
+    bits: z.union([z.literal(1), z.literal(2), z.literal(4), z.literal(8)]),
+    lst: z.string().min(1),
+});
+export const StatusListTokenClaimsSchema = z.object({
+    iss: z.string().min(1).optional(),
+    sub: z.string().url(),
+    iat: z.number().int().positive(),
+    exp: z.number().int().positive(),
+    ttl: z.number().int().positive(),
+    axtary_status_profile: z.literal(AXTARY_STATUS_LIST_PROFILE),
+    status_list: StatusListSchema,
+});
+export const StatusStoreEntrySchema = z.object({
+    passId: z.string().min(1),
+    index: z.number().int().nonnegative(),
+    status: TokenStatusValueSchema,
+    updatedAt: z.string().datetime(),
+});
+export const ActionPassStatusStoreSchema = z.object({
+    schemaVersion: z.literal(ACTIONPASS_STATUS_STORE_VERSION),
+    uri: z.string().url(),
+    nextIndex: z.number().int().nonnegative(),
+    entries: z.array(StatusStoreEntrySchema),
+});
+export const IssuerKeyRecordSchema = z.object({
+    kid: z.string().min(1),
+    algorithm: z.literal("ES256"),
+    status: z.enum(["active", "retired"]),
+    createdAt: z.string().datetime(),
+    retireAfter: z.string().datetime().optional(),
+    privateKeyPem: z.string().min(1),
+    publicJwk: z.record(z.string(), z.unknown()),
+});
+export const IssuerKeyringSchema = z.object({
+    schemaVersion: z.literal(ACTIONPASS_ISSUER_KEYRING_VERSION),
+    activeKid: z.string().min(1),
+    keys: z.array(IssuerKeyRecordSchema).min(1),
+});
+export function encodeStatusList(statuses, bits = 2) {
+    const max = 2 ** bits - 1;
+    const perByte = 8 / bits;
+    const bytes = Buffer.alloc(Math.max(1, Math.ceil(statuses.length / perByte)));
+    statuses.forEach((status, index) => {
+        if (status > max) {
+            throw new Error(`status_value_exceeds_bits:${status}:${bits}`);
+        }
+        const byteIndex = Math.floor(index / perByte);
+        const shift = (index % perByte) * bits;
+        bytes[byteIndex] = bytes[byteIndex] | (status << shift);
+    });
+    return {
+        bits,
+        lst: deflateSync(bytes, { level: 9 }).toString("base64url"),
+    };
+}
+export function decodeStatusList(input, minimumSize = 0) {
+    const statusList = StatusListSchema.parse(input);
+    const bytes = inflateSync(Buffer.from(statusList.lst, "base64url"));
+    const perByte = 8 / statusList.bits;
+    const mask = 2 ** statusList.bits - 1;
+    const output = [];
+    for (const byte of bytes) {
+        for (let offset = 0; offset < perByte; offset += 1) {
+            output.push(TokenStatusValueSchema.parse((byte >> (offset * statusList.bits)) & mask));
+        }
+    }
+    if (output.length < minimumSize) {
+        throw new Error("status_list_index_out_of_range");
+    }
+    return output;
+}
+export async function signStatusListToken(input) {
+    const now = input.now ?? new Date();
+    const issuedAt = Math.floor(now.getTime() / 1000);
+    const ttl = input.ttlSeconds ?? 60;
+    const expiresIn = input.expiresInSeconds ?? Math.max(ttl * 2, 120);
+    const claims = StatusListTokenClaimsSchema.parse({
+        iss: input.issuer,
+        sub: input.uri,
+        iat: issuedAt,
+        exp: issuedAt + expiresIn,
+        ttl,
+        axtary_status_profile: AXTARY_STATUS_LIST_PROFILE,
+        status_list: encodeStatusList(input.statuses),
+    });
+    const token = await new SignJWT({
+        ttl: claims.ttl,
+        axtary_status_profile: claims.axtary_status_profile,
+        status_list: claims.status_list,
+    })
+        .setProtectedHeader({
+        alg: "ES256",
+        kid: input.keyId,
+        typ: TOKEN_STATUS_LIST_TYP,
+    })
+        .setIssuer(input.issuer)
+        .setSubject(input.uri)
+        .setIssuedAt(issuedAt)
+        .setExpirationTime(claims.exp)
+        .sign(input.signingKey);
+    return { token, claims };
+}
+export async function verifyStatusListToken(input) {
+    const header = decodeProtectedHeader(input.token);
+    if (header.typ !== TOKEN_STATUS_LIST_TYP) {
+        throw new Error("status_list_type_invalid");
+    }
+    const key = await input.verificationKeys(header.kid);
+    if (!key) {
+        throw new Error(header.kid
+            ? `status_list_verification_key_not_found:${header.kid}`
+            : "status_list_verification_key_id_required");
+    }
+    const currentDate = input.currentDate ?? new Date();
+    const { payload } = await jwtVerify(input.token, key, {
+        issuer: input.issuer,
+        subject: input.uri,
+        algorithms: ["ES256"],
+        currentDate,
+    });
+    const claims = StatusListTokenClaimsSchema.parse(payload);
+    const freshnessEpoch = Math.min(claims.exp, claims.iat + claims.ttl);
+    const freshUntil = new Date(freshnessEpoch * 1000);
+    if (freshUntil.getTime() <= currentDate.getTime()) {
+        throw new Error("status_list_stale");
+    }
+    return {
+        token: input.token,
+        claims,
+        fetchedAt: input.fetchedAt ?? currentDate,
+        freshUntil,
+        statuses: decodeStatusList(claims.status_list),
+    };
+}
+export class StatusListClient {
+    options;
+    cache = new Map();
+    constructor(options) {
+        this.options = options;
+    }
+    async status(referenceInput) {
+        const reference = StatusListReferenceSchema.parse(referenceInput);
+        const now = this.options.now?.() ?? new Date();
+        let verified = this.cache.get(reference.uri);
+        if (!verified || verified.freshUntil.getTime() <= now.getTime()) {
+            const fetchImpl = this.options.fetch;
+            if (!fetchImpl) {
+                throw new Error("status_list_fetch_required");
+            }
+            let response;
+            try {
+                response = await fetchImpl(reference.uri, {
+                    headers: { accept: "application/statuslist+jwt" },
+                    redirect: "follow",
+                });
+            }
+            catch {
+                throw new Error("status_list_unreachable");
+            }
+            if (!response.ok) {
+                throw new Error(`status_list_http_error:${response.status}`);
+            }
+            const token = await response.text();
+            verified = await verifyStatusListToken({
+                token,
+                uri: reference.uri,
+                issuer: this.options.issuer,
+                verificationKeys: this.options.verificationKeys,
+                currentDate: now,
+                fetchedAt: now,
+            });
+            this.cache.set(reference.uri, verified);
+        }
+        const value = verified.statuses[reference.idx];
+        if (value === undefined) {
+            throw new Error("status_list_index_out_of_range");
+        }
+        return value;
+    }
+    clear() {
+        this.cache.clear();
+    }
+}
+export class LocalActionPassStatusStore {
+    filePath;
+    uri;
+    constructor(filePath, uri) {
+        this.filePath = filePath;
+        this.uri = uri;
+    }
+    static async open(filePath) {
+        const data = ActionPassStatusStoreSchema.parse(JSON.parse(await readFile(filePath, "utf8")));
+        return new LocalActionPassStatusStore(filePath, data.uri);
+    }
+    async read() {
+        try {
+            const parsed = ActionPassStatusStoreSchema.parse(JSON.parse(await readFile(this.filePath, "utf8")));
+            if (parsed.uri !== this.uri) {
+                throw new Error("status_store_uri_mismatch");
+            }
+            return parsed;
+        }
+        catch (error) {
+            if (isEnoent(error)) {
+                return {
+                    schemaVersion: ACTIONPASS_STATUS_STORE_VERSION,
+                    uri: this.uri,
+                    nextIndex: 0,
+                    entries: [],
+                };
+            }
+            throw error;
+        }
+    }
+    async allocate(passId, now = new Date()) {
+        return withFileLock(this.filePath, async () => {
+            const data = await this.read();
+            const existing = data.entries.find((entry) => entry.passId === passId);
+            if (existing) {
+                return { idx: existing.index, uri: data.uri };
+            }
+            const entry = {
+                passId,
+                index: data.nextIndex,
+                status: 0,
+                updatedAt: now.toISOString(),
+            };
+            await writePrivateJson(this.filePath, {
+                ...data,
+                nextIndex: data.nextIndex + 1,
+                entries: [...data.entries, entry],
+            });
+            return { idx: entry.index, uri: data.uri };
+        });
+    }
+    async setStatus(passId, status, now = new Date()) {
+        TokenStatusValueSchema.parse(status);
+        return withFileLock(this.filePath, async () => {
+            const data = await this.read();
+            const existing = data.entries.find((entry) => entry.passId === passId);
+            const entry = existing
+                ? { ...existing, status, updatedAt: now.toISOString() }
+                : {
+                    passId,
+                    index: data.nextIndex,
+                    status,
+                    updatedAt: now.toISOString(),
+                };
+            const entries = [
+                ...data.entries.filter((candidate) => candidate.passId !== passId),
+                entry,
+            ].sort((left, right) => left.index - right.index);
+            await writePrivateJson(this.filePath, {
+                ...data,
+                nextIndex: existing ? data.nextIndex : data.nextIndex + 1,
+                entries,
+            });
+            return entry;
+        });
+    }
+    async statusForPass(passId) {
+        return (await this.read()).entries.find((entry) => entry.passId === passId)
+            ?.status ?? null;
+    }
+    async statuses() {
+        const data = await this.read();
+        const statuses = Array(data.nextIndex).fill(0);
+        for (const entry of data.entries) {
+            statuses[entry.index] = entry.status;
+        }
+        return statuses;
+    }
+}
+export async function loadOrCreateIssuerKeyring(filePath, now = new Date()) {
+    return withFileLock(filePath, async () => {
+        try {
+            return IssuerKeyringSchema.parse(JSON.parse(await readFile(filePath, "utf8")));
+        }
+        catch (error) {
+            if (!isEnoent(error)) {
+                throw error;
+            }
+        }
+        const key = createIssuerKeyRecord("active", now);
+        const data = {
+            schemaVersion: ACTIONPASS_ISSUER_KEYRING_VERSION,
+            activeKid: key.kid,
+            keys: [key],
+        };
+        await writePrivateJson(filePath, data);
+        return data;
+    });
+}
+export async function rotateIssuerKeyring(input) {
+    const now = input.now ?? new Date();
+    return withFileLock(input.filePath, async () => {
+        let data;
+        try {
+            data = IssuerKeyringSchema.parse(JSON.parse(await readFile(input.filePath, "utf8")));
+        }
+        catch (error) {
+            if (!isEnoent(error))
+                throw error;
+            const initial = createIssuerKeyRecord("active", now);
+            data = {
+                schemaVersion: ACTIONPASS_ISSUER_KEYRING_VERSION,
+                activeKid: initial.kid,
+                keys: [initial],
+            };
+        }
+        const retireAfter = new Date(now.getTime() + (input.retireAfterSeconds ?? 1200) * 1000).toISOString();
+        const keys = data.keys
+            .filter((key) => key.status === "active" ||
+            !key.retireAfter ||
+            Date.parse(key.retireAfter) > now.getTime())
+            .map((key) => key.kid === data.activeKid
+            ? { ...key, status: "retired", retireAfter }
+            : key);
+        const active = createIssuerKeyRecord("active", now);
+        const next = {
+            schemaVersion: ACTIONPASS_ISSUER_KEYRING_VERSION,
+            activeKid: active.kid,
+            keys: [...keys, active],
+        };
+        await writePrivateJson(input.filePath, next);
+        return next;
+    });
+}
+export function issuerSigningKey(dataInput) {
+    const data = IssuerKeyringSchema.parse(dataInput);
+    const active = data.keys.find((key) => key.kid === data.activeKid && key.status === "active");
+    if (!active) {
+        throw new Error("issuer_active_key_missing");
+    }
+    return {
+        kid: active.kid,
+        privateKey: createPrivateKey(active.privateKeyPem),
+        publicJwk: active.publicJwk,
+    };
+}
+export function issuerJwks(dataInput, now = new Date()) {
+    const data = IssuerKeyringSchema.parse(dataInput);
+    return {
+        keys: data.keys
+            .filter((key) => key.status === "active" ||
+            !key.retireAfter ||
+            Date.parse(key.retireAfter) > now.getTime())
+            .map((key) => key.publicJwk),
+    };
+}
+export async function issuerVerificationKeyResolver(dataInput, kid, now = new Date()) {
+    if (!kid)
+        return undefined;
+    const jwk = issuerJwks(dataInput, now).keys.find((key) => key.kid === kid);
+    return jwk ? importJWK(jwk, "ES256") : undefined;
+}
+function createIssuerKeyRecord(status, now) {
+    const { privateKey, publicKey } = generateKeyPairSync("ec", {
+        namedCurve: "P-256",
+    });
+    const kid = `axtary-issuer-${randomUUID().slice(0, 12)}`;
+    return {
+        kid,
+        algorithm: "ES256",
+        status,
+        createdAt: now.toISOString(),
+        privateKeyPem: privateKey
+            .export({ type: "pkcs8", format: "pem" })
+            .toString(),
+        publicJwk: {
+            ...publicKey.export({ format: "jwk" }),
+            kid,
+            alg: "ES256",
+            use: "sig",
+        },
+    };
+}
+async function writePrivateJson(filePath, value) {
+    await mkdir(dirname(filePath), { recursive: true });
+    const tmpPath = `${filePath}.${process.pid}.${randomUUID()}.tmp`;
+    let renamed = false;
+    try {
+        const handle = await open(tmpPath, "wx", 0o600);
+        try {
+            await handle.writeFile(`${JSON.stringify(value, null, 2)}\n`, "utf8");
+            await handle.sync();
+        }
+        finally {
+            await handle.close();
+        }
+        await rename(tmpPath, filePath);
+        renamed = true;
+    }
+    finally {
+        if (!renamed) {
+            await rm(tmpPath, { force: true });
+        }
+    }
+}
+async function withFileLock(filePath, operation) {
+    await mkdir(dirname(filePath), { recursive: true });
+    const release = await lock(filePath, {
+        realpath: false,
+        lockfilePath: `${filePath}.lock`,
+        stale: 10_000,
+        update: 5_000,
+        retries: {
+            retries: 100,
+            factor: 1.2,
+            minTimeout: 10,
+            maxTimeout: 100,
+        },
+    });
+    try {
+        return await operation();
+    }
+    finally {
+        await release();
+    }
+}
+function isEnoent(error) {
+    return (error instanceof Error &&
+        "code" in error &&
+        error.code === "ENOENT");
+}
+//# sourceMappingURL=status-list.js.map

package/dist/status-list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-list.js","sourceRoot":"","sources":["../src/status-list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAChF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAErD,OAAO,EACL,qBAAqB,EACrB,SAAS,EACT,SAAS,EACT,OAAO,GAIR,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,+BAA+B,GAAG,mCAAmC,CAAC;AACnF,MAAM,CAAC,MAAM,iCAAiC,GAAG,qCAAqC,CAAC;AACvF,MAAM,CAAC,MAAM,qBAAqB,GAAG,gBAAgB,CAAC;AACtD,MAAM,CAAC,MAAM,0BAA0B,GAAG,uBAAuB,CAAC;AAElE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC;IAC5C,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACZ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACZ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;CACb,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACnC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CACtB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,WAAW,EAAE,yBAAyB;CACvC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACvB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACrB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,qBAAqB,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC5D,WAAW,EAAE,gBAAgB;CAC9B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACrC,MAAM,EAAE,sBAAsB;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC;IACzD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC;CACzC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAC7B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;CAC7C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC;IAC3D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC5C,CAAC,CAAC;AAqCH,MAAM,UAAU,gBAAgB,CAC9B,QAAqC,EACrC,OAAsB,CAAC;IAEvB,MAAM,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;IAC1B,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC;IACzB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAE9E,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QACjC,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,CAAC,KAAK,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC;QACvC,KAAK,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,SAAS,CAAE,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI;QACJ,GAAG,EAAE,WAAW,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,KAAiB,EACjB,WAAW,GAAG,CAAC;IAEf,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC;IACpC,MAAM,IAAI,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC;IACtC,MAAM,MAAM,GAAuB,EAAE,CAAC;IAEtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,CAAC,IAAI,CACT,sBAAsB,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAC1E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KASzC;IACC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,KAAK,CAAC,gBAAgB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAAC;QAC/C,GAAG,EAAE,KAAK,CAAC,MAAM;QACjB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,EAAE,QAAQ;QACb,GAAG,EAAE,QAAQ,GAAG,SAAS;QACzB,GAAG;QACH,qBAAqB,EAAE,0BAA0B;QACjD,WAAW,EAAE,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC;KAC9C,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,IAAI,OAAO,CAAC;QAC9B,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;QACnD,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC;SACC,kBAAkB,CAAC;QAClB,GAAG,EAAE,OAAO;QACZ,GAAG,EAAE,KAAK,CAAC,KAAK;QAChB,GAAG,EAAE,qBAAqB;KAC3B,CAAC;SACD,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;SACvB,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;SACrB,WAAW,CAAC,QAAQ,CAAC;SACrB,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC;SAC7B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAE1B,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAO3C;IACC,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,GAAG,KAAK,qBAAqB,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACrD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,MAAM,CAAC,GAAG;YACR,CAAC,CAAC,0CAA0C,MAAM,CAAC,GAAG,EAAE;YACxD,CAAC,CAAC,0CAA0C,CAC/C,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,IAAI,EAAE,CAAC;IACpD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE;QACpD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,GAAG;QAClB,UAAU,EAAE,CAAC,OAAO,CAAC;QACrB,WAAW;KACZ,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IACnD,IAAI,UAAU,CAAC,OAAO,EAAE,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC;IAED,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM;QACN,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,WAAW;QACzC,UAAU;QACV,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,gBAAgB;IAIR;IAHF,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IAE/D,YACmB,OAKhB;QALgB,YAAO,GAAP,OAAO,CAKvB;IACA,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,cAAmC;QAC9C,MAAM,SAAS,GAAG,yBAAyB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;QAC/C,IAAI,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAE7C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;YAChE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YACrC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAChD,CAAC;YACD,IAAI,QAAiC,CAAC;YACtC,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE;oBACxC,OAAO,EAAE,EAAE,MAAM,EAAE,4BAA4B,EAAE;oBACjD,QAAQ,EAAE,QAAQ;iBACnB,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAC7C,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/D,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACpC,QAAQ,GAAG,MAAM,qBAAqB,CAAC;gBACrC,KAAK;gBACL,GAAG,EAAE,SAAS,CAAC,GAAG;gBAClB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;gBAC3B,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB;gBAC/C,WAAW,EAAE,GAAG;gBAChB,SAAS,EAAE,GAAG;aACf,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF;AAED,MAAM,OAAO,0BAA0B;IAE1B;IACA;IAFX,YACW,QAAgB,EAChB,GAAW;QADX,aAAQ,GAAR,QAAQ,CAAQ;QAChB,QAAG,GAAH,GAAG,CAAQ;IACnB,CAAC;IAEJ,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAgB;QAChC,MAAM,IAAI,GAAG,2BAA2B,CAAC,KAAK,CAC5C,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAC7C,CAAC;QACF,OAAO,IAAI,0BAA0B,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAC9C,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAClD,CAAC;YACF,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpB,OAAO;oBACL,aAAa,EAAE,+BAA+B;oBAC9C,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,SAAS,EAAE,CAAC;oBACZ,OAAO,EAAE,EAAE;iBACZ,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;QAC7C,OAAO,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;YACvE,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;YAChD,CAAC;YACD,MAAM,KAAK,GAAqB;gBAC9B,MAAM;gBACN,KAAK,EAAE,IAAI,CAAC,SAAS;gBACrB,MAAM,EAAE,CAAC;gBACT,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;aAC7B,CAAC;YACF,MAAM,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE;gBACpC,GAAG,IAAI;gBACP,SAAS,EAAE,IAAI,CAAC,SAAS,GAAG,CAAC;gBAC7B,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC;aAClC,CAAC,CAAC;YACH,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS,CACb,MAAc,EACd,MAAwB,EACxB,GAAG,GAAG,IAAI,IAAI,EAAE;QAEhB,sBAAsB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;YACvE,MAAM,KAAK,GAAqB,QAAQ;gBACtC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE;gBACvD,CAAC,CAAC;oBACE,MAAM;oBACN,KAAK,EAAE,IAAI,CAAC,SAAS;oBACrB,MAAM;oBACN,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;iBAC7B,CAAC;YACN,MAAM,OAAO,GAAG;gBACd,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC;gBAClE,KAAK;aACN,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAClD,MAAM,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE;gBACpC,GAAG,IAAI;gBACP,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC;gBACzD,OAAO;aACR,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAAc;QAChC,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;YACzE,EAAE,MAAM,IAAI,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,KAAK,CAAmB,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjE,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;QACvC,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,QAAgB,EAChB,GAAG,GAAG,IAAI,IAAI,EAAE;IAEhB,OAAO,YAAY,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;QACvC,IAAI,CAAC;YACH,OAAO,mBAAmB,CAAC,KAAK,CAC9B,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAC7C,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrB,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,qBAAqB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACjD,MAAM,IAAI,GAAsB;YAC9B,aAAa,EAAE,iCAAiC;YAChD,SAAS,EAAE,GAAG,CAAC,GAAG;YAClB,IAAI,EAAE,CAAC,GAAG,CAAC;SACZ,CAAC;QACF,MAAM,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAIzC;IACC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACpC,OAAO,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;QAC7C,IAAI,IAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAC9B,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CACnD,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAClC,MAAM,OAAO,GAAG,qBAAqB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACrD,IAAI,GAAG;gBACL,aAAa,EAAE,iCAAiC;gBAChD,SAAS,EAAE,OAAO,CAAC,GAAG;gBACtB,IAAI,EAAE,CAAC,OAAO,CAAC;aAChB,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,IAAI,CAC1B,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,kBAAkB,IAAI,IAAI,CAAC,GAAG,IAAI,CAC1D,CAAC,WAAW,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI;aACnB,MAAM,CACL,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,CAAC,MAAM,KAAK,QAAQ;YACvB,CAAC,GAAG,CAAC,WAAW;YAChB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,CAC9C;aACA,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACX,GAAG,CAAC,GAAG,KAAK,IAAI,CAAC,SAAS;YACxB,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,SAAkB,EAAE,WAAW,EAAE;YACrD,CAAC,CAAC,GAAG,CACR,CAAC;QACJ,MAAM,MAAM,GAAG,qBAAqB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACpD,MAAM,IAAI,GAAsB;YAC9B,aAAa,EAAE,iCAAiC;YAChD,SAAS,EAAE,MAAM,CAAC,GAAG;YACrB,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;SACxB,CAAC;QACF,MAAM,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,SAA4B;IAC3D,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAC3B,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,CAC/D,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO;QACL,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,UAAU,EAAE,gBAAgB,CAAC,MAAM,CAAC,aAAa,CAAC;QAClD,SAAS,EAAE,MAAM,CAAC,SAAgB;KACnC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,SAA4B,EAC5B,GAAG,GAAG,IAAI,IAAI,EAAE;IAEhB,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAClD,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;aACZ,MAAM,CACL,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,CAAC,MAAM,KAAK,QAAQ;YACvB,CAAC,GAAG,CAAC,WAAW;YAChB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,CAC9C;aACA,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAgB,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,SAA4B,EAC5B,GAAuB,EACvB,GAAG,GAAG,IAAI,IAAI,EAAE;IAEhB,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IAC3E,OAAO,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACnD,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAA4B,EAC5B,GAAS;IAET,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,mBAAmB,CAAC,IAAI,EAAE;QAC1D,UAAU,EAAE,OAAO;KACpB,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,iBAAiB,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACzD,OAAO;QACL,GAAG;QACH,SAAS,EAAE,OAAO;QAClB,MAAM;QACN,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;QAC5B,aAAa,EAAE,UAAU;aACtB,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;aACxC,QAAQ,EAAE;QACb,SAAS,EAAE;YACT,GAAI,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAS;YAC/C,GAAG;YACH,GAAG,EAAE,OAAO;YACZ,GAAG,EAAE,KAAK;SACX;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAgB,EAAE,KAAc;IAC9D,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IACjE,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACtE,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QACD,MAAM,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAChC,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,QAAgB,EAChB,SAA2B;IAE3B,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE;QACnC,QAAQ,EAAE,KAAK;QACf,YAAY,EAAE,GAAG,QAAQ,OAAO;QAChC,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,KAAK;QACb,OAAO,EAAE;YACP,OAAO,EAAE,GAAG;YACZ,MAAM,EAAE,GAAG;YACX,UAAU,EAAE,EAAE;YACd,UAAU,EAAE,GAAG;SAChB;KACF,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,EAAE,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,CACL,KAAK,YAAY,KAAK;QACtB,MAAM,IAAI,KAAK;QACd,KAA+B,CAAC,IAAI,KAAK,QAAQ,CACnD,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@axtary/actionpass",
-  "version": "0.1.0",
+  "version": "0.3.0",
   "private": false,
   "description": "Scoped, signed ActionPass artifacts for runtime-governed AI agent actions.",
   "type": "module",
@@ -40,6 +40,8 @@
   "types": "./dist/index.d.ts",
   "dependencies": {
     "jose": "^6.2.3",
+    "pgsql-ast-parser": "^12.0.2",
+    "proper-lockfile": "^4.1.2",
     "zod": "^4.4.3"
   }
 }