@bounded-authority-protocol/verifier 0.2.0

package/dist/src/json.js

@@ -0,0 +1,473 @@
+import { fail } from "./error.js";
+import { resolve, MAXIMUM_BOUNDS } from "./bounds.js";
+// Null-prototype object tag — markers are Object.create(null) instances, keyed by raw UTF-8 string.
+// We store members as a Map keyed by the decoded string (UTF-8 byte sequence); insertion order is
+// preserved (Map iteration order = insertion order in JS).
+const MAX_INT = 9007199254740991;
+const MAX_FLOAT = 9007199254740991;
+// Safe byte access: returns -1 for out-of-bounds (so comparisons like `=== 0x22` are always safe).
+function byteAt(src, pos) {
+    return pos < src.length ? src[pos] : -1;
+}
+export function jsonDecode(src, bounds = MAXIMUM_BOUNDS) {
+    const maxJsonBytes = resolve(bounds, "json_bytes");
+    if (src.length > maxJsonBytes)
+        fail("json: input exceeds json_bytes bound");
+    const ctx = { src, pos: 0, bounds, nodes: 0, depth: 0 };
+    skipWs(ctx);
+    const value = parseValue(ctx, 0);
+    // REQ1-JSON-single-value: after the value, only JSON whitespace may remain.
+    skipWs(ctx);
+    if (ctx.pos !== src.length)
+        fail("json: trailing bytes");
+    // total_nodes budget.
+    if (ctx.nodes > resolve(bounds, "total_nodes")) {
+        fail("json: total_nodes bound exceeded");
+    }
+    return value;
+}
+function node(ctx) {
+    ctx.nodes++;
+}
+// Per-node-type depth gate (mirrors the official Jcs.encode/Json.decode model, corpus_independent
+// .mjs:1913): root value at level 0; a SCALAR is valid at level <= depth; a CONTAINER is valid at
+// level < depth (its children sit at level+1). A uniform `level > depth` gate wrongly accepts a
+// container at the deepest legal scalar level.
+function parseValue(ctx, level) {
+    const src = ctx.src;
+    const c = src[ctx.pos];
+    if (c === undefined)
+        fail("json: unexpected end of input");
+    let v;
+    if (c === 0x22 /* " */) {
+        if (level > resolve(ctx.bounds, "depth"))
+            fail("json: depth bound");
+        v = parseString(ctx);
+    }
+    else if (c === 0x7b /* { */) {
+        if (level >= resolve(ctx.bounds, "depth"))
+            fail("json: depth bound");
+        v = parseObject(ctx, level + 1);
+    }
+    else if (c === 0x5b /* [ */) {
+        if (level >= resolve(ctx.bounds, "depth"))
+            fail("json: depth bound");
+        v = parseArray(ctx, level + 1);
+    }
+    else if (c === 0x74 /* t */ || c === 0x66 /* f */) {
+        if (level > resolve(ctx.bounds, "depth"))
+            fail("json: depth bound");
+        v = parseBool(ctx);
+    }
+    else if (c === 0x6e /* n */) {
+        if (level > resolve(ctx.bounds, "depth"))
+            fail("json: depth bound");
+        v = parseNull(ctx);
+    }
+    else if (c === 0x2d /* - */ || (c >= 0x30 && c <= 0x39)) {
+        if (level > resolve(ctx.bounds, "depth"))
+            fail("json: depth bound");
+        v = parseNumber(ctx);
+    }
+    else
+        fail("json: unexpected byte");
+    return v;
+}
+function parseNull(ctx) {
+    node(ctx);
+    expectLit(ctx, "null");
+    return { t: "null" };
+}
+function parseBool(ctx) {
+    node(ctx);
+    const c = ctx.src[ctx.pos];
+    if (c === 0x74 /* t */) {
+        expectLit(ctx, "true");
+        return { t: "bool", v: true };
+    }
+    expectLit(ctx, "false");
+    return { t: "bool", v: false };
+}
+function expectLit(ctx, lit) {
+    const src = ctx.src;
+    const pos = ctx.pos;
+    for (let i = 0; i < lit.length; i++) {
+        if (src[pos + i] !== lit.charCodeAt(i))
+            fail(`json: expected ${lit}`);
+    }
+    ctx.pos += lit.length;
+}
+function parseString(ctx) {
+    node(ctx);
+    const start = ctx.pos;
+    const bytes = scanString(ctx, start);
+    // RFC 8259 §2.5 / REQ1-JSON-no-normalization: a JSON string's bytes MUST be valid UTF-8. The
+    // scanner copies raw bytes (multi-byte sequences pass through); validate here so an invalid byte
+    // (e.g. a lone 0xff) rejects as InvalidError rather than producing a wrong JCS digest or a
+    // non-InvalidError TextDecoder throw at a later utf8Str conversion.
+    try {
+        DECODER.decode(bytes);
+    }
+    catch {
+        fail("json: string not valid UTF-8");
+    }
+    if (bytes.length > resolve(ctx.bounds, "string_bytes"))
+        fail("json: string_bytes bound");
+    return { t: "string", v: bytes };
+}
+// Scan a JSON string starting at the opening quote; return the decoded UTF-8 bytes. Validates escapes
+// and rejects unpaired surrogates / non-UTF-8 (REQ1-JSON-no-normalization: preserve without normalizing,
+// but the bytes must be valid UTF-8).
+function scanString(ctx, start) {
+    const src = ctx.src;
+    // Skip opening quote.
+    ctx.pos = start + 1;
+    const out = [];
+    for (;;) {
+        const c = src[ctx.pos];
+        if (c === undefined)
+            fail("json: unterminated string");
+        if (c === 0x22 /* " */) {
+            ctx.pos++;
+            return new Uint8Array(out);
+        }
+        if (c === 0x5c /* \ */) {
+            const e = src[ctx.pos + 1];
+            if (e === undefined)
+                fail("json: bad escape");
+            ctx.pos += 2;
+            switch (e) {
+                case 0x22:
+                    out.push(0x22);
+                    break;
+                case 0x5c:
+                    out.push(0x5c);
+                    break;
+                case 0x2f:
+                    out.push(0x2f);
+                    break;
+                case 0x62:
+                    out.push(0x08);
+                    break;
+                case 0x66:
+                    out.push(0x0c);
+                    break;
+                case 0x6e:
+                    out.push(0x0a);
+                    break;
+                case 0x72:
+                    out.push(0x0d);
+                    break;
+                case 0x74:
+                    out.push(0x09);
+                    break;
+                case 0x75: { // \uXXXX — 4 hex digits; handle surrogate pairs.
+                    const hi = parseHex4(ctx);
+                    if (hi >= 0xd800 && hi <= 0xdbff) {
+                        // High surrogate; require \uXXXX low surrogate.
+                        if (src[ctx.pos] !== 0x5c || src[ctx.pos + 1] !== 0x75) {
+                            fail("json: unpaired high surrogate");
+                        }
+                        ctx.pos += 2;
+                        const lo = parseHex4(ctx);
+                        if (lo < 0xdc00 || lo > 0xdfff)
+                            fail("json: bad low surrogate");
+                        const cp = 0x10000 + ((hi - 0xd800) << 10) + (lo - 0xdc00);
+                        encodeUtf8(cp, out);
+                    }
+                    else if (hi >= 0xdc00 && hi <= 0xdfff) {
+                        fail("json: unpaired low surrogate");
+                    }
+                    else {
+                        encodeUtf8(hi, out);
+                    }
+                    break;
+                }
+                default: fail("json: bad escape");
+            }
+        }
+        else if (c < 0x20) {
+            fail("json: unescaped control byte");
+        }
+        else {
+            // Copy raw byte (UTF-8 multi-byte sequences pass through as-is; validity checked at decode).
+            out.push(c);
+            ctx.pos++;
+        }
+    }
+}
+function parseHex4(ctx) {
+    const src = ctx.src;
+    let v = 0;
+    for (let i = 0; i < 4; i++) {
+        const c = src[ctx.pos];
+        if (c === undefined)
+            fail("json: bad \\u escape");
+        let d;
+        if (c >= 0x30 && c <= 0x39)
+            d = c - 0x30;
+        else if (c >= 0x41 && c <= 0x46)
+            d = c - 0x41 + 10;
+        else if (c >= 0x61 && c <= 0x66)
+            d = c - 0x61 + 10;
+        else
+            fail("json: bad \\u hex");
+        v = (v << 4) | d;
+        ctx.pos++;
+    }
+    return v;
+}
+function encodeUtf8(cp, out) {
+    if (cp < 0x80)
+        out.push(cp);
+    else if (cp < 0x800) {
+        out.push(0xc0 | (cp >> 6));
+        out.push(0x80 | (cp & 0x3f));
+    }
+    else if (cp < 0x10000) {
+        out.push(0xe0 | (cp >> 12));
+        out.push(0x80 | ((cp >> 6) & 0x3f));
+        out.push(0x80 | (cp & 0x3f));
+    }
+    else {
+        out.push(0xf0 | (cp >> 18));
+        out.push(0x80 | ((cp >> 12) & 0x3f));
+        out.push(0x80 | ((cp >> 6) & 0x3f));
+        out.push(0x80 | (cp & 0x3f));
+    }
+}
+function parseNumber(ctx) {
+    node(ctx);
+    const src = ctx.src;
+    const start = ctx.pos;
+    // Scan the RFC 8259 number lexeme: optional -, int part, optional frac, optional exp.
+    let pos = start;
+    if (byteAt(src, pos) === 0x2d /* - */)
+        pos++;
+    // Integer part: 0 or [1-9][0-9]*
+    if (byteAt(src, pos) === 0x30)
+        pos++;
+    else {
+        const c = byteAt(src, pos);
+        if (c >= 0x31 && c <= 0x39) {
+            pos++;
+            let d = byteAt(src, pos);
+            while (d >= 0x30 && d <= 0x39) {
+                pos++;
+                d = byteAt(src, pos);
+            }
+        }
+        else
+            fail("json: bad number");
+    }
+    let isFloat = false;
+    if (byteAt(src, pos) === 0x2e /* . */) {
+        isFloat = true;
+        pos++;
+        const f = byteAt(src, pos);
+        if (!(f >= 0x30 && f <= 0x39))
+            fail("json: bad fraction");
+        let fd = byteAt(src, pos);
+        while (fd >= 0x30 && fd <= 0x39) {
+            pos++;
+            fd = byteAt(src, pos);
+        }
+    }
+    const ec = byteAt(src, pos);
+    if (ec === 0x65 /* e */ || ec === 0x45 /* E */) {
+        isFloat = true;
+        pos++;
+        const sign = byteAt(src, pos);
+        if (sign === 0x2b || sign === 0x2d)
+            pos++;
+        const e = byteAt(src, pos);
+        if (!(e >= 0x30 && e <= 0x39))
+            fail("json: bad exponent");
+        let ed = byteAt(src, pos);
+        while (ed >= 0x30 && ed <= 0x39) {
+            pos++;
+            ed = byteAt(src, pos);
+        }
+    }
+    const lexemeEnd = pos;
+    const lexeme = src.subarray(start, lexemeEnd);
+    // REQ1-JSON-raw-lexeme: 64-byte ceiling on the lexeme.
+    if (lexeme.length > resolve(ctx.bounds, "number_lexeme_bytes")) {
+        fail("json: number lexeme exceeds bound");
+    }
+    ctx.pos = lexemeEnd;
+    const text = asciiStr(lexeme);
+    if (isFloat) {
+        // REQ1-JSON-raw-lexeme: check the magnitude of the RAW lexeme by decimal arithmetic BEFORE
+        // Number() conversion. A lexeme like "9007199254740991.0001" rounds to the max binary64 value
+        // under Number(), so a post-conversion Math.abs(n) > MAX check accepts it — defeating the exact
+        // bound. The reference (json.ex magnitude_within?) compares the lexeme's significant digits
+        // against the maximum's digit string. Mirror that here.
+        if (!lexemeMagnitudeWithin(text, MAX_FLOAT))
+            fail("json: float magnitude bound");
+        const n = Number(text);
+        if (!Number.isFinite(n))
+            fail("json: float not finite");
+        return { t: "float", v: n };
+    }
+    if (!lexemeMagnitudeWithin(text, MAX_INT))
+        fail("json: integer magnitude bound");
+    const n = Number(text);
+    if (!Number.isSafeInteger(n))
+        fail("json: integer magnitude bound or unsafe");
+    return { t: "int", v: n };
+}
+// Exact decimal magnitude check of a number lexeme against `maximum`, mirroring the reference
+// (json.ex:298-349 magnitude_within? / compare_boundary). Returns true if |value| <= maximum.
+// Compares the lexeme's significant digits by their effective integer position — NOT the float
+// value (which loses precision). Handles sign, fraction, and exponent exactly.
+function lexemeMagnitudeWithin(text, maximum) {
+    const unsigned = text[0] === "-" || text[0] === "+" ? text.slice(1) : text;
+    // Split mantissa / exponent (sign already validated by the scanner).
+    let mantissa = unsigned;
+    let exponent = 0;
+    const eIdx = unsigned.search(/[eE]/);
+    if (eIdx !== -1) {
+        mantissa = unsigned.slice(0, eIdx);
+        exponent = parseInt(unsigned.slice(eIdx + 1), 10);
+    }
+    let integerDigits = mantissa;
+    let fractionDigits = "";
+    const dotIdx = mantissa.indexOf(".");
+    if (dotIdx !== -1) {
+        integerDigits = mantissa.slice(0, dotIdx);
+        fractionDigits = mantissa.slice(dotIdx + 1);
+    }
+    const digits = (integerDigits + fractionDigits).replace(/^0+/, "");
+    if (digits === "")
+        return true; // value is zero
+    const maximumDigits = String(maximum);
+    // Effective integer-position of the last significant digit (reference's integer_length).
+    const integerLength = digits.length + exponent - fractionDigits.length;
+    if (integerLength < maximumDigits.length)
+        return true;
+    if (integerLength > maximumDigits.length)
+        return false;
+    // Same digit-count boundary: compare the leading integer_part (padded/truncated to maximum's
+    // length) then require the leftover fractional_part to be all-zero if equal (compare_boundary).
+    const maximumLength = maximumDigits.length;
+    let integerPart;
+    let fractionalPart;
+    if (digits.length >= maximumLength) {
+        integerPart = digits.slice(0, maximumLength);
+        fractionalPart = digits.slice(maximumLength);
+    }
+    else {
+        integerPart = digits + "0".repeat(maximumLength - digits.length);
+        fractionalPart = "";
+    }
+    return integerPart < maximumDigits || (integerPart === maximumDigits && /^[0]*$/.test(fractionalPart));
+}
+// Null-prototype object parse: Object.create(null) shape; duplicate keys reject at every depth.
+function parseObject(ctx, childLevel) {
+    node(ctx);
+    const src = ctx.src;
+    ctx.pos++; // skip {
+    const members = new Map();
+    let count = 0;
+    skipWs(ctx);
+    if (src[ctx.pos] === 0x7d /* } */) {
+        ctx.pos++;
+        return { t: "object", v: members };
+    }
+    for (;;) {
+        skipWs(ctx);
+        if (src[ctx.pos] !== 0x22 /* " */)
+            fail("json: expected member name");
+        const nameBytes = scanString(ctx, ctx.pos);
+        if (nameBytes.length > resolve(ctx.bounds, "key_bytes"))
+            fail("json: key_bytes bound");
+        // A member name's bytes MUST be valid UTF-8 (RFC 8259 §2.5 / REQ1-JSON-no-normalization).
+        // Validate before utf8Str so a lone 0xff in a name fails closed as InvalidError rather than
+        // throwing a non-InvalidError TypeError via the fatal TextDecoder (matches parseString above).
+        try {
+            DECODER.decode(nameBytes);
+        }
+        catch {
+            fail("json: member name not valid UTF-8");
+        }
+        const nameStr = utf8Str(nameBytes);
+        // REQ1-JSON-no-duplicate: reject before map conversion.
+        if (members.has(nameStr))
+            fail("json: duplicate member");
+        skipWs(ctx);
+        if (src[ctx.pos] !== 0x3a /* : */)
+            fail("json: expected colon");
+        ctx.pos++;
+        skipWs(ctx);
+        const value = parseValue(ctx, childLevel);
+        members.set(nameStr, value);
+        count++;
+        if (count > resolve(ctx.bounds, "object_members"))
+            fail("json: object_members bound");
+        skipWs(ctx);
+        const sep = src[ctx.pos];
+        if (sep === 0x2c /* , */) {
+            ctx.pos++;
+            continue;
+        }
+        if (sep === 0x7d /* } */) {
+            ctx.pos++;
+            break;
+        }
+        fail("json: expected , or }");
+    }
+    return { t: "object", v: members };
+}
+function parseArray(ctx, childLevel) {
+    node(ctx);
+    const src = ctx.src;
+    ctx.pos++; // skip [
+    const items = [];
+    skipWs(ctx);
+    if (src[ctx.pos] === 0x5d /* ] */) {
+        ctx.pos++;
+        return { t: "array", v: items };
+    }
+    for (;;) {
+        skipWs(ctx);
+        const value = parseValue(ctx, childLevel);
+        items.push(value);
+        if (items.length > resolve(ctx.bounds, "array_items"))
+            fail("json: array_items bound");
+        skipWs(ctx);
+        const sep = src[ctx.pos];
+        if (sep === 0x2c /* , */) {
+            ctx.pos++;
+            continue;
+        }
+        if (sep === 0x5d /* ] */) {
+            ctx.pos++;
+            break;
+        }
+        fail("json: expected , or ]");
+    }
+    return { t: "array", v: items };
+}
+const WS = new Set([0x20, 0x09, 0x0a, 0x0d]);
+function skipWs(ctx) {
+    const src = ctx.src;
+    while (WS.has(src[ctx.pos] ?? -1))
+        ctx.pos++;
+}
+function asciiStr(bytes) {
+    let s = "";
+    for (let i = 0; i < bytes.length; i++)
+        s += String.fromCharCode(bytes[i]);
+    return s;
+}
+// UTF-8 decode (TextDecoder is allowed in the library path — it is a pure transformation, not I/O).
+const DECODER = new TextDecoder("utf-8", { fatal: true });
+const ENCODER = new TextEncoder();
+export function utf8Str(bytes) {
+    return DECODER.decode(bytes);
+}
+export function strUtf8(s) {
+    return ENCODER.encode(s);
+}
+//# sourceMappingURL=json.js.map

package/dist/src/json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.js","sourceRoot":"","sources":["../../src/json.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,OAAO,EAAe,cAAc,EAAkB,MAAM,aAAa,CAAC;AAgCnF,oGAAoG;AACpG,kGAAkG;AAClG,2DAA2D;AAE3D,MAAM,OAAO,GAAG,gBAAgB,CAAC;AACjC,MAAM,SAAS,GAAG,gBAAgB,CAAC;AAEnC,mGAAmG;AACnG,SAAS,MAAM,CAAC,GAAe,EAAE,GAAW;IAC1C,OAAO,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC;AAUD,MAAM,UAAU,UAAU,CAAC,GAAe,EAAE,SAAiB,cAAc;IACzE,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,EAAE,YAAyB,CAAC,CAAC;IAChE,IAAI,GAAG,CAAC,MAAM,GAAG,YAAY;QAAE,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAc,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACnE,MAAM,CAAC,GAAG,CAAC,CAAC;IACZ,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACjC,4EAA4E;IAC5E,MAAM,CAAC,GAAG,CAAC,CAAC;IACZ,IAAI,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC,MAAM;QAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACzD,sBAAsB;IACtB,IAAI,GAAG,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,aAA0B,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,IAAI,CAAC,GAAc;IAC1B,GAAG,CAAC,KAAK,EAAE,CAAC;AACd,CAAC;AAED,kGAAkG;AAClG,kGAAkG;AAClG,gGAAgG;AAChG,+CAA+C;AAC/C,SAAS,UAAU,CAAC,GAAc,EAAE,KAAa;IAC/C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IACpB,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,CAAC,KAAK,SAAS;QAAE,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC3D,IAAI,CAAS,CAAC;IACd,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,IAAI,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAoB,CAAC;YAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACjF,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;SAAM,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QAC9B,IAAI,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAoB,CAAC;YAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAClF,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAClC,CAAC;SAAM,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QAC9B,IAAI,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAoB,CAAC;YAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAClF,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACjC,CAAC;SAAM,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QACpD,IAAI,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAoB,CAAC;YAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACjF,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;SAAM,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QAC9B,IAAI,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAoB,CAAC;YAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACjF,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;SAAM,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;QAC1D,IAAI,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAoB,CAAC;YAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACjF,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;;QAAM,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACrC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,SAAS,CAAC,GAAc;IAC/B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvB,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;AACvB,CAAC;AACD,SAAS,SAAS,CAAC,GAAc;IAC/B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;IAC5B,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACvB,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;IAChC,CAAC;IACD,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACxB,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,SAAS,CAAC,GAAc,EAAE,GAAW;IAC5C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IACpB,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,IAAI,CAAC,kBAAkB,GAAG,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC;AACxB,CAAC;AAED,SAAS,WAAW,CAAC,GAAc;IACjC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC;IACtB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACrC,6FAA6F;IAC7F,iGAAiG;IACjG,2FAA2F;IAC3F,oEAAoE;IACpE,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,8BAA8B,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,cAA2B,CAAC;QAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACtG,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;AACnC,CAAC;AAED,sGAAsG;AACtG,yGAAyG;AACzG,sCAAsC;AACtC,SAAS,UAAU,CAAC,GAAc,EAAE,KAAa;IAC/C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IACpB,sBAAsB;IACtB,GAAG,CAAC,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC;IACpB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,SAAS,CAAC;QACR,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,SAAS;YAAE,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YACvB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;YAC3B,IAAI,CAAC,KAAK,SAAS;gBAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAC9C,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;YACb,QAAQ,CAAC,EAAE,CAAC;gBACV,KAAK,IAAI;oBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAAC,MAAM;gBACjC,KAAK,IAAI;oBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAAC,MAAM;gBACjC,KAAK,IAAI;oBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAAC,MAAM;gBACjC,KAAK,IAAI;oBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAAC,MAAM;gBACjC,KAAK,IAAI;oBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAAC,MAAM;gBACjC,KAAK,IAAI;oBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAAC,MAAM;gBACjC,KAAK,IAAI;oBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAAC,MAAM;gBACjC,KAAK,IAAI;oBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAAC,MAAM;gBACjC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,iDAAiD;oBAC5D,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;oBAC1B,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,EAAE,CAAC;wBACjC,gDAAgD;wBAChD,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;4BACvD,IAAI,CAAC,+BAA+B,CAAC,CAAC;wBACxC,CAAC;wBACD,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;wBACb,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;wBAC1B,IAAI,EAAE,GAAG,MAAM,IAAI,EAAE,GAAG,MAAM;4BAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC;wBAChE,MAAM,EAAE,GAAG,OAAO,GAAG,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;wBAC3D,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;oBACtB,CAAC;yBAAM,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,EAAE,CAAC;wBACxC,IAAI,CAAC,8BAA8B,CAAC,CAAC;oBACvC,CAAC;yBAAM,CAAC;wBACN,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;oBACtB,CAAC;oBACD,MAAM;gBACR,CAAC;gBACD,OAAO,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;YACpB,IAAI,CAAC,8BAA8B,CAAC,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,6FAA6F;YAC7F,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACZ,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,GAAc;IAC/B,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IACpB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,SAAS;YAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAClD,IAAI,CAAS,CAAC;QACd,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI;YAAE,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;aACpC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI;YAAE,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;aAC9C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI;YAAE,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;;YAC9C,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC/B,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACjB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,UAAU,CAAC,EAAU,EAAE,GAAa;IAC3C,IAAI,EAAE,GAAG,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;SACvB,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC;QACpB,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAC/B,CAAC;SAAM,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QACpC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QACpC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAc;IACjC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IACpB,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC;IACtB,sFAAsF;IACtF,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,IAAI,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,IAAI,CAAC,OAAO;QAAE,GAAG,EAAE,CAAC;IAC7C,iCAAiC;IACjC,IAAI,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,IAAI;QAAE,GAAG,EAAE,CAAC;SAChC,CAAC;QACJ,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;YAC3B,GAAG,EAAE,CAAC;YACN,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACzB,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;gBAAC,GAAG,EAAE,CAAC;gBAAC,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAAC,CAAC;QACjE,CAAC;;YAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QACtC,OAAO,GAAG,IAAI,CAAC;QACf,GAAG,EAAE,CAAC;QACN,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC;YAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC1D,IAAI,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1B,OAAO,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;YAAC,GAAG,EAAE,CAAC;YAAC,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAAC,CAAC;IACpE,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5B,IAAI,EAAE,KAAK,IAAI,CAAC,OAAO,IAAI,EAAE,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/C,OAAO,GAAG,IAAI,CAAC;QACf,GAAG,EAAE,CAAC;QACN,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9B,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,GAAG,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC;YAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC1D,IAAI,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1B,OAAO,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;YAAC,GAAG,EAAE,CAAC;YAAC,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAAC,CAAC;IACpE,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,CAAC;IACtB,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC9C,uDAAuD;IACvD,IAAI,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,qBAAkC,CAAC,EAAE,CAAC;QAC5E,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAC5C,CAAC;IACD,GAAG,CAAC,GAAG,GAAG,SAAS,CAAC;IACpB,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,OAAO,EAAE,CAAC;QACZ,2FAA2F;QAC3F,8FAA8F;QAC9F,gGAAgG;QAChG,4FAA4F;QAC5F,wDAAwD;QACxD,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,SAAS,CAAC;YAAE,IAAI,CAAC,6BAA6B,CAAC,CAAC;QACjF,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACxD,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC;QAAE,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACjF,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,yCAAyC,CAAC,CAAC;IAC9E,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;AAC5B,CAAC;AAED,8FAA8F;AAC9F,8FAA8F;AAC9F,+FAA+F;AAC/F,+EAA+E;AAC/E,SAAS,qBAAqB,CAAC,IAAY,EAAE,OAAe;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3E,qEAAqE;IACrE,IAAI,QAAQ,GAAG,QAAQ,CAAC;IACxB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;QAChB,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACnC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,aAAa,GAAG,QAAQ,CAAC;IAC7B,IAAI,cAAc,GAAG,EAAE,CAAC;IACxB,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QAClB,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1C,cAAc,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,aAAa,GAAG,cAAc,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACnE,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC,CAAC,gBAAgB;IAChD,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACtC,yFAAyF;IACzF,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,GAAG,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC;IACvE,IAAI,aAAa,GAAG,aAAa,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,aAAa,GAAG,aAAa,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACvD,6FAA6F;IAC7F,gGAAgG;IAChG,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC;IAC3C,IAAI,WAAmB,CAAC;IACxB,IAAI,cAAsB,CAAC;IAC3B,IAAI,MAAM,CAAC,MAAM,IAAI,aAAa,EAAE,CAAC;QACnC,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;QAC7C,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,WAAW,GAAG,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACjE,cAAc,GAAG,EAAE,CAAC;IACtB,CAAC;IACD,OAAO,WAAW,GAAG,aAAa,IAAI,CACpC,WAAW,KAAK,aAAa,IAAI,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,SAAS,WAAW,CAAC,GAAc,EAAE,UAAkB;IACrD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IACpB,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,SAAS;IACpB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,CAAC,GAAG,CAAC,CAAC;IACZ,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;IACrC,CAAC;IACD,SAAS,CAAC;QACR,MAAM,CAAC,GAAG,CAAC,CAAC;QACZ,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACtE,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,SAAS,CAAC,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,WAAwB,CAAC;YAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACpG,0FAA0F;QAC1F,4FAA4F;QAC5F,+FAA+F;QAC/F,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,mCAAmC,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QACnC,wDAAwD;QACxD,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACzD,MAAM,CAAC,GAAG,CAAC,CAAC;QACZ,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAChE,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,MAAM,CAAC,GAAG,CAAC,CAAC;QACZ,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5B,KAAK,EAAE,CAAC;QACR,IAAI,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,gBAA6B,CAAC;YAAE,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACnG,MAAM,CAAC,GAAG,CAAC,CAAC;QACZ,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,GAAG,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YACzB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YACzB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,MAAM;QACR,CAAC;QACD,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,UAAU,CAAC,GAAc,EAAE,UAAkB;IACpD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IACpB,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,SAAS;IACpB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,CAAC,GAAG,CAAC,CAAC;IACZ,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;IAClC,CAAC;IACD,SAAS,CAAC;QACR,MAAM,CAAC,GAAG,CAAC,CAAC;QACZ,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,aAA0B,CAAC;YAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACpG,MAAM,CAAC,GAAG,CAAC,CAAC;QACZ,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,GAAG,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YACzB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YACzB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,MAAM;QACR,CAAC;QACD,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAC7C,SAAS,MAAM,CAAC,GAAc;IAC5B,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IACpB,OAAO,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,GAAG,CAAC,GAAG,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,QAAQ,CAAC,KAAiB;IACjC,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IAC3E,OAAO,CAAC,CAAC;AACX,CAAC;AAED,oGAAoG;AACpG,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC1D,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,UAAU,OAAO,CAAC,KAAiB;IACvC,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,CAAS;IAC/B,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC"}

package/dist/src/jwk.d.ts

@@ -0,0 +1,14 @@
+import { type Result } from "./error.js";
+import { type Bounds } from "./bounds.js";
+export interface OkpPublic {
+    readonly crv: "Ed25519";
+    readonly kty: "OKP";
+    readonly x: string;
+}
+export declare function jwkEncodePublic(rawKey: Uint8Array, bounds?: Bounds): Uint8Array;
+export declare function jwkDecodePublic(input: Uint8Array, bounds?: Bounds): Result<Uint8Array>;
+export declare function jwkFromPublicKey(rawKey: Uint8Array): OkpPublic;
+export declare function thumbprintPreimage(jwk: OkpPublic): Uint8Array;
+export declare function thumbprint(jwk: OkpPublic): string;
+export declare function thumbprintRaw(jwk: OkpPublic): Uint8Array;
+export declare function publicKeyThumbprintRaw(rawKey: Uint8Array): Uint8Array;

package/dist/src/jwk.js

@@ -0,0 +1,77 @@
+import { fail, assert, ok, err } from "./error.js";
+import { base64urlDecode, base64urlEncode } from "./base64url.js";
+import { sha256 } from "./ed25519.js";
+import { jcsEncode } from "./jcs.js";
+import { jsonDecode, strUtf8, utf8Str } from "./json.js";
+import { resolve, MAXIMUM_BOUNDS } from "./bounds.js";
+// Encode a raw 32-byte Ed25519 public key as the canonical OKP JCS JSON bytes.
+export function jwkEncodePublic(rawKey, bounds = MAXIMUM_BOUNDS) {
+    assert(rawKey.length === 32, "jwk.encode_public: public key width must be 32");
+    const jwk = jwkFromPublicKey(rawKey);
+    // The encoded form is the JCS of {crv, kty, x} in lexicographic order. Build the tagged object.
+    const members = new Map([
+        ["crv", { t: "string", v: strUtf8(jwk.crv) }],
+        ["kty", { t: "string", v: strUtf8(jwk.kty) }],
+        ["x", { t: "string", v: strUtf8(jwk.x) }],
+    ]);
+    void resolve(bounds, "jcs_bytes");
+    return jcsEncode({ t: "object", v: members }, bounds);
+}
+// Decode an OKP public JWK from bytes (the JSON text). Returns the raw 32-byte key.
+export function jwkDecodePublic(input, bounds = MAXIMUM_BOUNDS) {
+    // Decode the JSON, then validate the closed OKP shape.
+    try {
+        const value = jsonDecode(input, bounds);
+        if (value.t !== "object")
+            fail("jwk.decode_public: not an object");
+        const obj = value.v;
+        if (obj.size !== 3)
+            fail("jwk.decode_public: closed members");
+        const crv = obj.get("crv");
+        const kty = obj.get("kty");
+        const x = obj.get("x");
+        if (!crv || !kty || !x)
+            fail("jwk.decode_public: missing member");
+        if (crv.t !== "string" || utf8Str(crv.v) !== "Ed25519")
+            fail("jwk.decode_public: crv");
+        if (kty.t !== "string" || utf8Str(kty.v) !== "OKP")
+            fail("jwk.decode_public: kty");
+        if (x.t !== "string")
+            fail("jwk.decode_public: x");
+        const raw = base64urlDecode(x.v);
+        if (raw.length !== 32)
+            fail("jwk.decode_public: x width");
+        return ok(raw);
+    }
+    catch (e) {
+        if (e instanceof Error && e.name === "InvalidError")
+            return err();
+        throw e;
+    }
+}
+export function jwkFromPublicKey(rawKey) {
+    assert(rawKey.length === 32, "jwk: public key width");
+    return { crv: "Ed25519", kty: "OKP", x: utf8Str(base64urlEncode(rawKey)) };
+}
+// RFC 7638 thumbprint preimage: the JCS bytes of {crv, kty, x} (lexicographic order).
+export function thumbprintPreimage(jwk) {
+    const members = new Map([
+        ["crv", { t: "string", v: strUtf8(jwk.crv) }],
+        ["kty", { t: "string", v: strUtf8(jwk.kty) }],
+        ["x", { t: "string", v: strUtf8(jwk.x) }],
+    ]);
+    return jcsEncode({ t: "object", v: members });
+}
+// Thumbprint as base64url SHA-256 of the preimage.
+export function thumbprint(jwk) {
+    return utf8Str(base64urlEncode(sha256(thumbprintPreimage(jwk))));
+}
+// Raw 32-byte thumbprint.
+export function thumbprintRaw(jwk) {
+    return sha256(thumbprintPreimage(jwk));
+}
+// Raw 32-byte thumbprint directly from a raw 32-byte public key.
+export function publicKeyThumbprintRaw(rawKey) {
+    return thumbprintRaw(jwkFromPublicKey(rawKey));
+}
+//# sourceMappingURL=jwk.js.map

package/dist/src/jwk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwk.js","sourceRoot":"","sources":["../../src/jwk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,EAAe,EAAE,EAAE,GAAG,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,OAAO,EAAe,cAAc,EAAkB,MAAM,aAAa,CAAC;AAanF,+EAA+E;AAC/E,MAAM,UAAU,eAAe,CAAC,MAAkB,EAAE,SAAiB,cAAc;IACjF,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,EAAE,EAAE,gDAAgD,CAAC,CAAC;IAC/E,MAAM,GAAG,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACrC,gGAAgG;IAChG,MAAM,OAAO,GAAG,IAAI,GAAG,CAAgB;QACrC,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAW,CAAC;QACtD,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAW,CAAC;QACtD,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAW,CAAC;KACnD,CAAC,CAAC;IACH,KAAK,OAAO,CAAC,MAAM,EAAE,WAAwB,CAAC,CAAC;IAC/C,OAAO,SAAS,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;AACxD,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,eAAe,CAAC,KAAiB,EAAE,SAAiB,cAAc;IAChF,uDAAuD;IACvD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,CAAC,KAAK,QAAQ;YAAE,IAAI,CAAC,kCAAkC,CAAC,CAAC;QACnE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;YAAE,IAAI,CAAC,mCAAmC,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;YAAE,IAAI,CAAC,mCAAmC,CAAC,CAAC;QAClE,IAAI,GAAG,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACvF,IAAI,GAAG,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK;YAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACnF,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ;YAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;YAAE,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC1D,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc;YAAE,OAAO,GAAG,EAAE,CAAC;QAClE,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAkB;IACjD,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,EAAE,EAAE,uBAAuB,CAAC,CAAC;IACtD,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;AAC7E,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,kBAAkB,CAAC,GAAc;IAC/C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAgB;QACrC,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAW,CAAC;QACtD,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAW,CAAC;QACtD,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAW,CAAC;KACnD,CAAC,CAAC;IACH,OAAO,SAAS,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,UAAU,CAAC,GAAc;IACvC,OAAO,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,0BAA0B;AAC1B,MAAM,UAAU,aAAa,CAAC,GAAc;IAC1C,OAAO,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,sBAAsB,CAAC,MAAkB;IACvD,OAAO,aAAa,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;AACjD,CAAC"}

package/dist/src/selector.d.ts

@@ -0,0 +1,16 @@
+import { type Tagged } from "./json.js";
+import { type Bounds } from "./bounds.js";
+export type Selector = {
+    readonly kind: "all";
+} | {
+    readonly kind: "equals";
+    readonly path: string[];
+    readonly value: Tagged;
+} | {
+    readonly kind: "one_of";
+    readonly path: string[];
+    readonly values: Tagged[];
+};
+export declare function parseSelector(obj: Tagged, bounds?: Bounds): Selector;
+export declare function semanticIdentity(value: Tagged): Uint8Array;
+export declare function selectorMatches(sel: Selector, castArguments: Tagged): boolean;