@bsv/vsc 0.2.0-beta.1

package/dist/epcis.d.ts

@@ -0,0 +1,51 @@
+import type { JsonObject, Seal, StatusEntry } from './types.js';
+import { type EpcisSourceReference, type EpcisValidationFindings } from './epcis-source.js';
+export declare const EPCIS_VOCABULARY = "urn:bsv:vsc:vocab:epcis-roundtrip:0.1.0";
+export declare const EPCIS_TYPES: readonly ["ObjectEvent", "AggregationEvent", "TransformationEvent", "TransactionEvent", "AssociationEvent"];
+export interface EpcisMappingOptions {
+    id?: string;
+    issuer: string;
+    assertionMethod: string;
+    actorRole: string;
+    jurisdiction: string;
+    issuedAt: string;
+    recordedAt?: string;
+    validUntil?: string;
+    credentialStatus: StatusEntry;
+    chainOfCustody: Seal['chainOfCustody'];
+    /** EPCIS TransformationEvent has no action. Its VSC action requires an explicit mapping decision. */
+    transformationAction?: 'ADD' | 'OBSERVE' | 'DELETE';
+}
+/** Retains the complete source event in a signed JSON extension, allowing lossless round trips. */
+export declare function mapEpcisEvent(event: JsonObject, options: EpcisMappingOptions): Seal;
+/** Extraction preserves source data; callers must verify the credential before trusting it. */
+export declare function extractEpcisEvent(seal: Seal): JsonObject;
+export type EpcisMappingOutcome = 'lossless' | 'transformed' | 'unsupported' | 'insufficient-data';
+export interface EpcisMappingReport {
+    /** lossless: every source semantic the profile knows is carried; transformed: carried with the named losses; unsupported: the profile cannot express the event or a decision is missing; insufficient-data: the source lacks a required input that is never fabricated. */
+    mapping: EpcisMappingOutcome;
+    /** The unsigned SEAL, present for lossless and transformed only. */
+    seal?: Seal;
+    /** What the source lacks (insufficient-data) or what decision or feature is missing (unsupported). */
+    missing: string[];
+    /** Source semantics the SEAL's event vector does not carry and only the round-trip extension retains. */
+    unmapped: string[];
+    /** Source members retained in the signed round-trip extension. */
+    preserved: string[];
+    validation?: EpcisValidationFindings;
+}
+/**
+ * The explicit outcome of mapping one EPCIS event into the VSC profile.
+ * Wraps `mapEpcisEvent` without changing it: a refusal becomes a named
+ * outcome rather than an exception, a success is `lossless` only when the
+ * event carries nothing the profile cannot express, and a supplied source
+ * reference is signed into the SEAL beside the round-trip extension so the
+ * credential names the exact bytes and pointer it was mapped from. The SEAL
+ * is unsigned and unpublished: issuance is a separate, separately authorised
+ * step that also requires issuer, status and custody evidence.
+ */
+export declare function mapEpcisEventWithReport(event: JsonObject, options: EpcisMappingOptions, report?: {
+    sourceReference?: EpcisSourceReference;
+    validation?: EpcisValidationFindings;
+}): EpcisMappingReport;
+//# sourceMappingURL=epcis.d.ts.map

package/dist/epcis.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"epcis.d.ts","sourceRoot":"","sources":["../src/epcis.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAqB,IAAI,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACnF,OAAO,EAA2B,KAAK,oBAAoB,EAAE,KAAK,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACrH,eAAO,MAAM,gBAAgB,4CAA4C,CAAC;AAC1E,eAAO,MAAM,WAAW,6GAA0G,CAAC;AACnI,MAAM,WAAW,mBAAmB;IAClC,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IACxE,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IACjF,gBAAgB,EAAE,WAAW,CAAC;IAAC,cAAc,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACtE,qGAAqG;IACrG,oBAAoB,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAC;CACrD;AACD,mGAAmG;AACnG,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,mBAAmB,GAAG,IAAI,CA+CnF;AACD,+FAA+F;AAC/F,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,CAIxD;AAKD,MAAM,MAAM,mBAAmB,GAAG,UAAU,GAAG,aAAa,GAAG,aAAa,GAAG,mBAAmB,CAAC;AAEnG,MAAM,WAAW,kBAAkB;IACjC,2QAA2Q;IAC3Q,OAAO,EAAE,mBAAmB,CAAC;IAC7B,oEAAoE;IACpE,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,sGAAsG;IACtG,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,yGAAyG;IACzG,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,kEAAkE;IAClE,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,CAAC,EAAE,uBAAuB,CAAC;CACtC;AA+CD;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,GAAE;IAAE,eAAe,CAAC,EAAE,oBAAoB,CAAC;IAAC,UAAU,CAAC,EAAE,uBAAuB,CAAA;CAAO,GAAG,kBAAkB,CAyB1M"}

package/dist/epcis.js

@@ -0,0 +1,171 @@
+import { randomUUID } from 'node:crypto';
+import { SEAL_CONTEXTS } from './context.js';
+import { validateSealStructure } from './validation.js';
+import { EPCIS_SOURCE_VOCABULARY } from './epcis-source.js';
+export const EPCIS_VOCABULARY = 'urn:bsv:vsc:vocab:epcis-roundtrip:0.1.0';
+export const EPCIS_TYPES = ['ObjectEvent', 'AggregationEvent', 'TransformationEvent', 'TransactionEvent', 'AssociationEvent'];
+/** Retains the complete source event in a signed JSON extension, allowing lossless round trips. */
+export function mapEpcisEvent(event, options) {
+    if (typeof event.type !== 'string' || !EPCIS_TYPES.includes(event.type))
+        throw new Error('Unsupported EPCIS event type');
+    const identifiers = [];
+    const add = (value) => {
+        if (typeof value !== 'string' || !/^(urn:epc:|https:\/\/)/.test(value))
+            throw new Error('Product identifier requires a supported EPCIS URI');
+        if (!identifiers.some(p => p.value === value))
+            identifiers.push({ scheme: 'EPC', value, schemeAuthority: 'GS1' });
+    };
+    const idFields = event.type === 'TransformationEvent' ? ['inputEPCList', 'outputEPCList'] : event.type === 'AggregationEvent' || event.type === 'AssociationEvent' ? ['childEPCs'] : ['epcList'];
+    for (const field of idFields) {
+        if (event[field] !== undefined && !Array.isArray(event[field]))
+            throw new Error(`Invalid ${field}`);
+        for (const value of event[field] ?? [])
+            add(value);
+    }
+    if (event.parentID !== undefined)
+        add(event.parentID);
+    for (const field of ['quantityList', 'inputQuantityList', 'outputQuantityList', 'childQuantityList']) {
+        if (event[field] !== undefined && !Array.isArray(event[field]))
+            throw new Error(`Invalid ${field}`);
+        for (const item of event[field] ?? []) {
+            if (!item || typeof item !== 'object' || typeof item.quantity !== 'number' || !Number.isFinite(item.quantity) || item.quantity < 0)
+                throw new Error(`Invalid ${field} quantity`);
+            add(item.epcClass);
+        }
+    }
+    if (!identifiers.length)
+        throw new Error('Insufficient product identifiers for VSC mapping');
+    const disposition = typeof event.disposition === 'string' ? event.disposition.replace(/^urn:epcglobal:cbv:disp:|^https:\/\/ref\.gs1\.org\/cbv\/Disp-/, '') : undefined;
+    if (typeof event.eventTime !== 'string' || typeof event.eventTimeZoneOffset !== 'string' || typeof event.bizStep !== 'string' || !disposition)
+        throw new Error('Event time, timezone, business step and disposition are required; they are never fabricated');
+    const action = event.type === 'TransformationEvent' ? options.transformationAction : event.action;
+    if (!['ADD', 'OBSERVE', 'DELETE'].includes(action))
+        throw new Error('An explicit supported action mapping is required');
+    const recordedAt = event.recordTime ?? options.recordedAt;
+    if (typeof recordedAt !== 'string')
+        throw new Error('Recorded time is required');
+    const id = options.id ?? `urn:uuid:${randomUUID()}`;
+    const seal = {
+        '@context': [...SEAL_CONTEXTS], type: ['VerifiableCredential', 'VSC-SEAL'], id,
+        issuer: options.issuer, issuanceDate: options.issuedAt, validFrom: options.issuedAt,
+        ...(options.validUntil ? { validUntil: options.validUntil } : {}), sealVersion: '1.0', sealTimestamp: options.issuedAt, correctionOf: null,
+        credentialSubject: { id, ...(options.chainOfCustody.parentSeals.length ? { predecessorCredentials: [...options.chainOfCustody.parentSeals] } : {}) },
+        credentialStatus: structuredClone(options.credentialStatus),
+        eventVector: {
+            what: { productIdentifiers: identifiers },
+            when: { eventTime: event.eventTime, recordedAt, timezone: event.eventTimeZoneOffset, timePrecision: /\.\d+/.test(event.eventTime) ? 'millisecond' : 'second' },
+            where: { jurisdiction: options.jurisdiction, ...(event.readPoint ? { readPoint: structuredClone(event.readPoint) } : {}), ...(event.bizLocation ? { businessLocation: structuredClone(event.bizLocation) } : {}) },
+            who: { actorDid: options.issuer, actorRole: options.actorRole, assertionMethod: options.assertionMethod },
+            how: { eventType: event.type, eventTypeVocab: 'urn:epcis:cbv:v2', businessStep: event.bizStep, disposition, action: action },
+        },
+        extensions: { '+Dn': { '+D1': { vocabularyUrn: EPCIS_VOCABULARY, event: structuredClone(event) } } },
+        chainOfCustody: structuredClone(options.chainOfCustody),
+    };
+    const result = validateSealStructure(seal, { requireProof: false });
+    if (!result.valid)
+        throw new Error(result.errors.map(e => `${e.path}: ${e.message}`).join('; '));
+    return seal;
+}
+/** Extraction preserves source data; callers must verify the credential before trusting it. */
+export function extractEpcisEvent(seal) {
+    const source = Object.values(seal.extensions['+Dn']).find(v => v.vocabularyUrn === EPCIS_VOCABULARY);
+    if (!source || !source.event || typeof source.event !== 'object' || Array.isArray(source.event))
+        throw new Error('No supported EPCIS round-trip mapping');
+    return structuredClone(source.event);
+}
+/**
+ * Members whose meaning the VSC profile does not carry in its event vector:
+ * present in the round-trip extension, absent from any custody or event
+ * semantics a verifier evaluates. Each name matches an epcis-vsc@1
+ * mappingLimits entry so a result can cite it.
+ */
+const TRANSFORMED_MEMBERS = {
+    sensorElementList: 'sensor-elements',
+    sourceList: 'source-destination-parties',
+    destinationList: 'source-destination-parties',
+    bizTransactionList: 'business-transactions',
+    persistentDisposition: 'persistent-disposition',
+    ilmd: 'instance-lot-master-data',
+    certificationInfo: 'certification-info',
+    errorDeclaration: 'error-declaration',
+    transformationID: 'transformation-id',
+    quantityList: 'quantities',
+    childQuantityList: 'quantities',
+    inputQuantityList: 'quantities',
+    outputQuantityList: 'quantities',
+    '@context': 'event-level-context',
+};
+const CARRIED_MEMBERS = new Set(['type', 'eventTime', 'eventTimeZoneOffset', 'recordTime', 'eventID', 'action', 'bizStep', 'disposition', 'readPoint', 'bizLocation', 'epcList', 'childEPCs', 'parentID', 'inputEPCList', 'outputEPCList']);
+function classifyFailure(event, message) {
+    if (message.startsWith('Unsupported EPCIS event type'))
+        return { mapping: 'unsupported', missing: [`event type ${JSON.stringify(event.type)} is outside the five types the profile maps`] };
+    if (message.startsWith('An explicit supported action mapping is required')) {
+        return { mapping: 'unsupported', missing: [event.type === 'TransformationEvent' ? 'a TransformationEvent has no action; the mapping decision transformationAction was not supplied' : `action ${JSON.stringify(event.action)} is not ADD, OBSERVE or DELETE`] };
+    }
+    if (message.startsWith('Insufficient product identifiers'))
+        return { mapping: 'insufficient-data', missing: ['no product identifier the profile carries'] };
+    if (message.startsWith('Product identifier requires a supported EPCIS URI'))
+        return { mapping: 'unsupported', missing: ['an identifier is neither an EPC URN nor an HTTPS URI'] };
+    if (message.startsWith('Event time, timezone, business step and disposition are required')) {
+        const missing = [];
+        if (typeof event.eventTime !== 'string')
+            missing.push('eventTime');
+        if (typeof event.eventTimeZoneOffset !== 'string')
+            missing.push('eventTimeZoneOffset');
+        if (typeof event.bizStep !== 'string')
+            missing.push('bizStep');
+        if (typeof event.disposition !== 'string')
+            missing.push('disposition');
+        return { mapping: 'insufficient-data', missing: missing.length ? missing : ['eventTime, eventTimeZoneOffset, bizStep or disposition'] };
+    }
+    if (message.startsWith('Recorded time is required'))
+        return { mapping: 'insufficient-data', missing: ['recordTime, and no recordedAt was supplied'] };
+    if (/disposition/.test(message))
+        return { mapping: 'unsupported', missing: [`disposition ${JSON.stringify(event.disposition)} is not one the VSC profile's custody model names`] };
+    if (/quantity/.test(message))
+        return { mapping: 'unsupported', missing: ['a quantity element is not a finite non-negative number'] };
+    return { mapping: 'unsupported', missing: [message] };
+}
+/**
+ * The explicit outcome of mapping one EPCIS event into the VSC profile.
+ * Wraps `mapEpcisEvent` without changing it: a refusal becomes a named
+ * outcome rather than an exception, a success is `lossless` only when the
+ * event carries nothing the profile cannot express, and a supplied source
+ * reference is signed into the SEAL beside the round-trip extension so the
+ * credential names the exact bytes and pointer it was mapped from. The SEAL
+ * is unsigned and unpublished: issuance is a separate, separately authorised
+ * step that also requires issuer, status and custody evidence.
+ */
+export function mapEpcisEventWithReport(event, options, report = {}) {
+    const preserved = Object.keys(event).filter((key) => key !== 'type');
+    const base = { preserved, ...(report.validation == null ? {} : { validation: report.validation }) };
+    let seal;
+    try {
+        seal = mapEpcisEvent(event, options);
+    }
+    catch (cause) {
+        const message = cause instanceof Error ? cause.message : String(cause);
+        return { ...classifyFailure(event, message), unmapped: [], ...base };
+    }
+    if (report.sourceReference != null) {
+        if (report.sourceReference.vocabularyUrn !== EPCIS_SOURCE_VOCABULARY)
+            throw new Error('a source reference carries the epcis-source vocabulary');
+        seal.extensions['+Dn'][EPCIS_SOURCE_VOCABULARY] = structuredClone(report.sourceReference);
+        const check = validateSealStructure(seal, { requireProof: false });
+        if (!check.valid)
+            throw new Error(check.errors.map(e => `${e.path}: ${e.message}`).join('; '));
+    }
+    const unmapped = new Set();
+    for (const key of Object.keys(event)) {
+        if (CARRIED_MEMBERS.has(key))
+            continue;
+        unmapped.add(TRANSFORMED_MEMBERS[key] ?? `extension:${key}`);
+    }
+    if (event.type === 'TransformationEvent')
+        unmapped.add('transformation-action-decision');
+    const identifierCount = seal.eventVector.what.productIdentifiers.length;
+    if (identifierCount > 1)
+        unmapped.add('multi-product-event');
+    return { mapping: unmapped.size === 0 ? 'lossless' : 'transformed', seal, missing: [], unmapped: [...unmapped].sort(), ...base };
+}
+//# sourceMappingURL=epcis.js.map

package/dist/epcis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"epcis.js","sourceRoot":"","sources":["../src/epcis.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD,OAAO,EAAE,uBAAuB,EAA2D,MAAM,mBAAmB,CAAC;AACrH,MAAM,CAAC,MAAM,gBAAgB,GAAG,yCAAyC,CAAC;AAC1E,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,aAAa,EAAC,kBAAkB,EAAC,qBAAqB,EAAC,kBAAkB,EAAC,kBAAkB,CAAU,CAAC;AAQnI,mGAAmG;AACnG,MAAM,UAAU,aAAa,CAAC,KAAiB,EAAE,OAA4B;IAC3E,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAkC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACvJ,MAAM,WAAW,GAAwB,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,CAAC,KAAc,EAAE,EAAE;QAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAC7I,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC;YAAE,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;IACpH,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC,CAAC,CAAC,cAAc,EAAC,eAAe,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,kBAAkB,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAChM,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;QACpG,KAAK,MAAM,KAAK,IAAK,KAAK,CAAC,KAAK,CAA2B,IAAI,EAAE;YAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;QAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtD,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAC,mBAAmB,EAAC,oBAAoB,EAAC,mBAAmB,CAAC,EAAE,CAAC;QAClG,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;QACpG,KAAK,MAAM,IAAI,IAAK,KAAK,CAAC,KAAK,CAA8B,IAAI,EAAE,EAAE,CAAC;YACpE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;YACjL,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAC7F,MAAM,WAAW,GAAG,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,+DAA+D,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvK,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,mBAAmB,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAC;IAC9P,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;IAClG,IAAI,CAAC,CAAC,KAAK,EAAC,SAAS,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAgB,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAChI,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC;IAC1D,IAAI,OAAO,UAAU,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACjF,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,YAAY,UAAU,EAAE,EAAE,CAAC;IACpD,MAAM,IAAI,GAAS;QACjB,UAAU,EAAE,CAAC,GAAG,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,sBAAsB,EAAC,UAAU,CAAC,EAAE,EAAE;QAC7E,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ;QACnF,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI;QAC1I,iBAAiB,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QACpJ,gBAAgB,EAAE,eAAe,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAC3D,WAAW,EAAE;YACX,IAAI,EAAE,EAAE,kBAAkB,EAAE,WAAW,EAAE;YACzC,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,mBAAmB,EAAE,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE;YAC9J,KAAK,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YAClN,GAAG,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE;YACzG,GAAG,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,cAAc,EAAE,kBAAkB,EAAE,YAAY,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAsC,EAAE;SAC7J;QACD,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,aAAa,EAAE,gBAAgB,EAAE,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE;QACpG,cAAc,EAAE,eAAe,CAAC,OAAO,CAAC,cAAc,CAAC;KACxD,CAAC;IACF,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACjG,OAAO,IAAI,CAAC;AACd,CAAC;AACD,+FAA+F;AAC/F,MAAM,UAAU,iBAAiB,CAAC,IAAU;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,gBAAgB,CAAC,CAAC;IACrG,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC1J,OAAO,eAAe,CAAC,MAAM,CAAC,KAAK,CAAe,CAAC;AACrD,CAAC;AAqBD;;;;;GAKG;AACH,MAAM,mBAAmB,GAA2B;IAClD,iBAAiB,EAAE,iBAAiB;IACpC,UAAU,EAAE,4BAA4B;IACxC,eAAe,EAAE,4BAA4B;IAC7C,kBAAkB,EAAE,uBAAuB;IAC3C,qBAAqB,EAAE,wBAAwB;IAC/C,IAAI,EAAE,0BAA0B;IAChC,iBAAiB,EAAE,oBAAoB;IACvC,gBAAgB,EAAE,mBAAmB;IACrC,gBAAgB,EAAE,mBAAmB;IACrC,YAAY,EAAE,YAAY;IAC1B,iBAAiB,EAAE,YAAY;IAC/B,iBAAiB,EAAE,YAAY;IAC/B,kBAAkB,EAAE,YAAY;IAChC,UAAU,EAAE,qBAAqB;CAClC,CAAC;AACF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,qBAAqB,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC,CAAC;AAE5O,SAAS,eAAe,CAAC,KAAiB,EAAE,OAAe;IACzD,IAAI,OAAO,CAAC,UAAU,CAAC,8BAA8B,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,6CAA6C,CAAC,EAAE,CAAC;IAC5L,IAAI,OAAO,CAAC,UAAU,CAAC,kDAAkD,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC,CAAC,iGAAiG,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,gCAAgC,CAAC,EAAE,CAAC;IAClQ,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,CAAC,kCAAkC,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,2CAA2C,CAAC,EAAE,CAAC;IAC5J,IAAI,OAAO,CAAC,UAAU,CAAC,mDAAmD,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,sDAAsD,CAAC,EAAE,CAAC;IAClL,IAAI,OAAO,CAAC,UAAU,CAAC,kEAAkE,CAAC,EAAE,CAAC;QAC3F,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;YAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnE,IAAI,OAAO,KAAK,CAAC,mBAAmB,KAAK,QAAQ;YAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACvF,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/D,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;YAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACvE,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,wDAAwD,CAAC,EAAE,CAAC;IAC1I,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,CAAC,2BAA2B,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,4CAA4C,CAAC,EAAE,CAAC;IACtJ,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,mDAAmD,CAAC,EAAE,CAAC;IACnL,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,wDAAwD,CAAC,EAAE,CAAC;IACrI,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;AACxD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAiB,EAAE,OAA4B,EAAE,SAA2F,EAAE;IACpL,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;IACpG,IAAI,IAAU,CAAC;IACf,IAAI,CAAC;QACH,IAAI,GAAG,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,EAAE,GAAG,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC;IACvE,CAAC;IACD,IAAI,MAAM,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC;QACnC,IAAI,MAAM,CAAC,eAAe,CAAC,aAAa,KAAK,uBAAuB;YAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAChJ,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,uBAAuB,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC1F,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,KAAK,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACvC,QAAQ,CAAC,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,aAAa,GAAG,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAqB;QAAE,QAAQ,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;IACzF,MAAM,eAAe,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC;IACxE,IAAI,eAAe,GAAG,CAAC;QAAE,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC7D,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC;AACnI,CAAC"}

package/dist/exchange.d.ts

@@ -0,0 +1,175 @@
+import { type ValidateFunction } from 'ajv/dist/2020.js';
+import type { Check, DocumentLoader, Issue, JsonObject, StatusPolicy } from './types.js';
+export declare const EXTERNAL_REPRESENTATIONS: readonly ["vc-di-ecdsa-rdfc-2019@1"];
+export type ExternalRepresentation = (typeof EXTERNAL_REPRESENTATIONS)[number];
+export declare const EXTERNAL_MEDIA_TYPE: "application/vc+ld+json";
+export declare const EXTERNAL_CRYPTOSUITE = "ecdsa-rdfc-2019";
+/** The profile limit on one credential's exact bytes: 256 KiB. */
+export declare const EXTERNAL_CREDENTIAL_LIMIT_BYTES = 262144;
+export declare const VC_V2_CONTEXT = "https://www.w3.org/ns/credentials/v2";
+export declare const DATA_INTEGRITY_V2_CONTEXT = "https://w3id.org/security/data-integrity/v2";
+export declare const MULTIKEY_V1_CONTEXT = "https://w3id.org/security/multikey/v1";
+export declare const DID_V1_CONTEXT = "https://www.w3.org/ns/did/v1";
+/** The owned payload context of the profile, served from the package's artefact bytes and never fetched. */
+export declare const EXTERNAL_PASSPORT_CONTEXT_URL = "urn:bsv:dpp:external-passport:context:1";
+export declare const EXTERNAL_PASSPORT_SCHEMA_ID = "urn:bsv:dpp:external-passport:schema:1";
+export declare const EXTERNAL_PASSPORT_CONTEXT: JsonObject;
+export declare const EXTERNAL_PASSPORT_SCHEMA: JsonObject;
+/** The context sets the profile accepts by default: the VC 2.0 context alone, or with the Data Integrity context, each optionally followed by the owned payload context. */
+export declare const DEFAULT_CONTEXT_SETS: readonly (readonly string[])[];
+/** The compiled owned schema, compiled once. */
+export declare function externalPassportSchemaValidator(): ValidateFunction;
+export interface ExternalLoaderOptions {
+    /** A bounded `did:web` resolver for identifiers the caller has not pinned; absent, an unpinned DID is unavailable. */
+    didWeb?: {
+        allowedOrigins: readonly string[];
+        fetcher?: typeof globalThis.fetch;
+        timeoutMs?: number;
+        maxBytes?: number;
+    };
+}
+/**
+ * The profile's document loader: the maintained VC 2.0, Data Integrity,
+ * Multikey and DID contexts, the owned payload context from the package's
+ * own bytes, and the caller's pinned documents (issuer DID documents, keys,
+ * status list credentials). Nothing else is served: a context or document a
+ * credential names that is not pinned is unavailable, and the SEAL profile
+ * context is refused by name so a foreign credential cannot borrow it.
+ */
+export declare function createExternalDocumentLoader(documents?: ReadonlyMap<string, JsonObject>, options?: ExternalLoaderOptions): DocumentLoader;
+export interface ParsedExternalCredential {
+    credential: JsonObject;
+    /** SHA-256 of the exact bytes, lower-case hex. */
+    digest: string;
+    byteLength: number;
+}
+/** Parse exact bytes strictly (duplicate keys, malformed UTF-8 and depth refused) under the profile's 256 KiB limit. The bytes are never re-serialised. */
+export declare function parseExternalCredentialBytes(bytes: Uint8Array, limits?: {
+    maxBytes?: number;
+}): ParsedExternalCredential;
+export interface ExternalContextPolicy {
+    allowedContextSets: readonly (readonly string[])[];
+}
+export interface ExternalIssuerPolicy {
+    /** DID methods the profile accepts for the issuer, for example `did:web`. */
+    allowedMethods: readonly string[];
+    /** Resolves an issuer DID to its document; defaults to the document loader. */
+    resolve?: (did: string) => Promise<JsonObject>;
+}
+export type ExternalAuthorityPolicy = {
+    id: string;
+    required: false;
+    reason: string;
+} | {
+    id: string;
+    required: true;
+    trustedIssuers: readonly string[];
+};
+export interface SubjectBindingPolicy {
+    id: string;
+    bindings: ReadonlyArray<{
+        credentialSubject: string;
+        passportId: string;
+        evidenceRef: string;
+    }>;
+}
+export interface ExternalVerificationPolicy {
+    documentLoader: DocumentLoader;
+    contextPolicy?: ExternalContextPolicy;
+    /** A compiled JSON Schema 2020-12 validator; defaults to the owned external passport schema. */
+    payloadSchema?: ValidateFunction;
+    issuerPolicy?: ExternalIssuerPolicy;
+    statusPolicy?: StatusPolicy;
+    /** Only with no status policy: a profile option recording that a credential without status is accepted with a stated limitation. */
+    statusOptional?: boolean;
+    authorityPolicy: ExternalAuthorityPolicy;
+    expectedSubject?: string;
+    subjectBindingPolicy?: SubjectBindingPolicy;
+    evaluationTime: string;
+}
+export interface ExternalVerification {
+    representation: ExternalRepresentation;
+    mediaType: typeof EXTERNAL_MEDIA_TYPE;
+    credentialId?: string;
+    issuer?: string;
+    subjects: string[];
+    types: string[];
+    digest: string;
+    checks: {
+        parse: Check;
+        contexts: Check;
+        schema: Check;
+        proof: Check;
+        issuerBinding: Check;
+        subjectBinding: Check;
+        temporal: Check;
+        status: Check;
+        authority: Check;
+        availability: Check;
+    };
+    issues: Issue[];
+    /** Verification concerns the supplied bytes and the pinned or resolved documents; it establishes no global freshness. */
+    evidenceScope: 'provided-evidence';
+}
+/**
+ * The W3C Bitstring Status List rules of the SEAL verifier, with the proof
+ * verifier a parameter so the list is checked under this profile's suite.
+ * Identifier, authorised list issuer, proof, validity, signed freshness,
+ * purpose, canonical encoding, bounded decompression and the bit are
+ * separate refusals; a stale list stays stale however recently fetched.
+ */
+export declare function verifyBitstringStatus(credential: JsonObject, options: {
+    statusPolicy?: StatusPolicy;
+    statusOptional?: boolean;
+    evaluationTime: string;
+}, verifyProof: (list: JsonObject) => Promise<Check>): Promise<Check>;
+/**
+ * Verify one external credential from its exact bytes under the profile.
+ * Every check answers for itself; `issues` is the union of their issues.
+ * Nothing here consults a trust list the credential carries, and nothing
+ * here reads the credential under the SEAL profile's rules.
+ */
+export declare function verifyExternalCredential({ bytes, representation, policy }: {
+    bytes: Uint8Array;
+    representation: string;
+    policy: ExternalVerificationPolicy;
+}): Promise<ExternalVerification>;
+/** A check's answer in the verification report's vocabulary (`spec/verification.md`); the shape mirrors `PartialCheck` in @bsv/dpp-core, restated here because this package does not depend on it. */
+export interface ReportPartialCheck {
+    status: 'pass' | 'fail' | 'unknown' | 'not-applicable';
+    reasonCode?: string;
+    evidenceRefs?: string[];
+    detail?: unknown;
+}
+/** What the report's credential verifier slot returns; mirrors `ExternalCredentialVerification` in @bsv/dpp-core. */
+export interface ReportCredentialVerification {
+    id?: string;
+    issuer?: string;
+    subjects?: string[];
+    attestationType?: string;
+    proof: ReportPartialCheck;
+    schema: ReportPartialCheck;
+    time: ReportPartialCheck;
+    status: ReportPartialCheck;
+    authority: ReportPartialCheck;
+    availability?: ReportPartialCheck;
+}
+export type ReportCredentialVerifier = (input: {
+    representation: string;
+    mediaType?: string;
+    bytes: number[];
+    digest: string;
+    checkedAt: string;
+}) => Promise<ReportCredentialVerification>;
+/**
+ * The verifier the report's `credentialVerifier` slot takes for this
+ * representation. The proof and issuer-binding checks answer `proof`
+ * together (a proof whose key its issuer never authorised does not verify
+ * under its own suite's controller rule); the schema, validity interval,
+ * status, authority and availability checks answer their own slots. The
+ * attestation type is the credential's first type after VerifiableCredential.
+ */
+export declare function externalCredentialVerifierFor(policy: Omit<ExternalVerificationPolicy, 'evaluationTime'> & {
+    evaluationTime?: string;
+}): ReportCredentialVerifier;
+//# sourceMappingURL=exchange.d.ts.map

package/dist/exchange.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exchange.d.ts","sourceRoot":"","sources":["../src/exchange.ts"],"names":[],"mappings":"AA8BA,OAAO,EAAW,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAKlE,OAAO,KAAK,EAAE,KAAK,EAAc,cAAc,EAAE,KAAK,EAAE,UAAU,EAAS,YAAY,EAAE,MAAM,YAAY,CAAC;AAE5G,eAAO,MAAM,wBAAwB,sCAAuC,CAAC;AAC7E,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC/E,eAAO,MAAM,mBAAmB,EAAG,wBAAiC,CAAC;AACrE,eAAO,MAAM,oBAAoB,oBAAoB,CAAC;AACtD,kEAAkE;AAClE,eAAO,MAAM,+BAA+B,SAAU,CAAC;AAEvD,eAAO,MAAM,aAAa,yCAAyC,CAAC;AACpE,eAAO,MAAM,yBAAyB,gDAAgD,CAAC;AACvF,eAAO,MAAM,mBAAmB,0CAA0C,CAAC;AAC3E,eAAO,MAAM,cAAc,iCAAiC,CAAC;AAC7D,4GAA4G;AAC5G,eAAO,MAAM,6BAA6B,4CAA4C,CAAC;AACvF,eAAO,MAAM,2BAA2B,2CAA2C,CAAC;AAWpF,eAAO,MAAM,yBAAyB,EAAE,UAA+G,CAAC;AACxJ,eAAO,MAAM,wBAAwB,EAAE,UAA4G,CAAC;AAEpJ,4KAA4K;AAC5K,eAAO,MAAM,oBAAoB,EAAE,SAAS,CAAC,SAAS,MAAM,EAAE,CAAC,EAK9D,CAAC;AAKF,gDAAgD;AAChD,wBAAgB,+BAA+B,IAAI,gBAAgB,CAGlE;AAED,MAAM,WAAW,qBAAqB;IACpC,sHAAsH;IACtH,MAAM,CAAC,EAAE;QAAE,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1H;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,SAAS,GAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAa,EAAE,OAAO,GAAE,qBAA0B,GAAG,cAAc,CAaxJ;AAED,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,UAAU,CAAC;IACvB,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,2JAA2J;AAC3J,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,wBAAwB,CAM5H;AAED,MAAM,WAAW,qBAAqB;IAAG,kBAAkB,EAAE,SAAS,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,CAAA;CAAE;AAC7F,MAAM,WAAW,oBAAoB;IACnC,6EAA6E;IAC7E,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,+EAA+E;IAC/E,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;CAChD;AACD,MAAM,MAAM,uBAAuB,GAC/B;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/C;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,IAAI,CAAC;IAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AACtE,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,aAAa,CAAC;QAAE,iBAAiB,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjG;AACD,MAAM,WAAW,0BAA0B;IACzC,cAAc,EAAE,cAAc,CAAC;IAC/B,aAAa,CAAC,EAAE,qBAAqB,CAAC;IACtC,gGAAgG;IAChG,aAAa,CAAC,EAAE,gBAAgB,CAAC;IACjC,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,oIAAoI;IACpI,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,eAAe,EAAE,uBAAuB,CAAC;IACzC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,sBAAsB,CAAC;IACvC,SAAS,EAAE,OAAO,mBAAmB,CAAC;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE;QACN,KAAK,EAAE,KAAK,CAAC;QAAC,QAAQ,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,KAAK,CAAC;QAAC,aAAa,EAAE,KAAK,CAAC;QACjF,cAAc,EAAE,KAAK,CAAC;QAAC,QAAQ,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,KAAK,CAAC;QAAC,SAAS,EAAE,KAAK,CAAC;QAAC,YAAY,EAAE,KAAK,CAAC;KAC9F,CAAC;IACF,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,yHAAyH;IACzH,aAAa,EAAE,mBAAmB,CAAC;CACpC;AAiID;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE;IAAE,YAAY,CAAC,EAAE,YAAY,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,EAC1F,WAAW,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,KAAK,CAAC,GAChD,OAAO,CAAC,KAAK,CAAC,CAkChB;AAQD;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,0BAA0B,CAAA;CAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAsDlM;AAID,sMAAsM;AACtM,MAAM,WAAW,kBAAkB;IAAG,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,gBAAgB,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE;AAC9J,qHAAqH;AACrH,MAAM,WAAW,4BAA4B;IAC3C,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAC5E,KAAK,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAC;IAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAC;IAAC,SAAS,EAAE,kBAAkB,CAAC;IAAC,YAAY,CAAC,EAAE,kBAAkB,CAAC;CAC/K;AACD,MAAM,MAAM,wBAAwB,GAAG,CAAC,KAAK,EAAE;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC,4BAA4B,CAAC,CAAC;AAoE5L;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,IAAI,CAAC,0BAA0B,EAAE,gBAAgB,CAAC,GAAG;IAAE,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,wBAAwB,CAoBhK"}