@bsv/vsc 0.2.0-beta.1

package/dist/exchange.js

@@ -0,0 +1,491 @@
+/**
+ * External credential verification: the `vc-di-ecdsa-rdfc-2019@1` exchange
+ * profile (`spec/external-credential-profile.md`), a separate entry point
+ * (`@bsv/vsc/exchange`) from the SEAL verifier so that a foreign credential
+ * is never routed through `verifySeal` and the main entry's proof verifier
+ * keeps its pinned SEAL context allowlist.
+ *
+ * What is verified, each as its own check and never folded into one word:
+ * exact-byte parsing, the context set, the owned structural schema, the
+ * Data Integrity proof under `ecdsa-rdfc-2019` with a P-256 Multikey, the
+ * binding of that key to a `did:web` issuer document, the subject binding,
+ * the validity interval, the Bitstring status list, the issuer's authority
+ * under a named policy, and the availability of everything referenced.
+ *
+ * Two facts stay independent throughout. An RDF Data Integrity proof holds
+ * over canonicalised statements, so the same credential re-serialised with
+ * different whitespace still verifies; the exact-byte digest of what was
+ * issued is a different commitment, and a re-serialised copy has a different
+ * one. Both are reported, neither implies the other.
+ */
+import { createHash } from 'node:crypto';
+import { gunzipSync } from 'node:zlib';
+import { readFileSync } from 'node:fs';
+import jsigs from 'jsonld-signatures';
+import { DataIntegrityProof } from '@digitalbazaar/data-integrity';
+import { cryptosuite as ecdsaRdfc2019 } from '@digitalbazaar/ecdsa-rdfc-2019-cryptosuite';
+import { contexts as vcContexts } from '@digitalbazaar/credentials-context';
+import { contexts as diContexts } from '@digitalbazaar/data-integrity-context';
+import { contexts as multikeyContexts } from '@digitalbazaar/multikey-context';
+import { contexts as didContexts } from 'did-context';
+import { Ajv2020 } from 'ajv/dist/2020.js';
+import addFormats from 'ajv-formats';
+import { parseStrictJsonBytes } from './validation.js';
+import { verifyTemporal } from './verification.js';
+import { createDidWebResolver } from './did-web.js';
+export const EXTERNAL_REPRESENTATIONS = ['vc-di-ecdsa-rdfc-2019@1'];
+export const EXTERNAL_MEDIA_TYPE = 'application/vc+ld+json';
+export const EXTERNAL_CRYPTOSUITE = 'ecdsa-rdfc-2019';
+/** The profile limit on one credential's exact bytes: 256 KiB. */
+export const EXTERNAL_CREDENTIAL_LIMIT_BYTES = 262_144;
+export const VC_V2_CONTEXT = 'https://www.w3.org/ns/credentials/v2';
+export const DATA_INTEGRITY_V2_CONTEXT = 'https://w3id.org/security/data-integrity/v2';
+export const MULTIKEY_V1_CONTEXT = 'https://w3id.org/security/multikey/v1';
+export const DID_V1_CONTEXT = 'https://www.w3.org/ns/did/v1';
+/** The owned payload context of the profile, served from the package's artefact bytes and never fetched. */
+export const EXTERNAL_PASSPORT_CONTEXT_URL = 'urn:bsv:dpp:external-passport:context:1';
+export const EXTERNAL_PASSPORT_SCHEMA_ID = 'urn:bsv:dpp:external-passport:schema:1';
+/** The P-256 public key multicodec prefix as it appears in base58btc Multikey encoding. */
+const P256_MULTIBASE_PREFIX = 'zDn';
+const P384_MULTIBASE_PREFIX = 'z82';
+const P521_MULTIBASE_PREFIX = 'z2J9';
+// Two literal URLs rather than one built from a name: a bundler that follows
+// `new URL(literal, import.meta.url)` carries exactly that file as an asset,
+// while a URL assembled from a variable makes it carry the whole directory and
+// hand back the first file in it, which is the notice and not JSON.
+const artefact = (url) => JSON.parse(readFileSync(url, 'utf8'));
+export const EXTERNAL_PASSPORT_CONTEXT = artefact(new URL('../artifacts/external/dpp-external-passport-1.context.jsonld', import.meta.url));
+export const EXTERNAL_PASSPORT_SCHEMA = artefact(new URL('../artifacts/external/dpp-external-passport-1.schema.json', import.meta.url));
+/** The context sets the profile accepts by default: the VC 2.0 context alone, or with the Data Integrity context, each optionally followed by the owned payload context. */
+export const DEFAULT_CONTEXT_SETS = [
+    [VC_V2_CONTEXT],
+    [VC_V2_CONTEXT, DATA_INTEGRITY_V2_CONTEXT],
+    [VC_V2_CONTEXT, EXTERNAL_PASSPORT_CONTEXT_URL],
+    [VC_V2_CONTEXT, DATA_INTEGRITY_V2_CONTEXT, EXTERNAL_PASSPORT_CONTEXT_URL],
+];
+const ajv = new Ajv2020({ allErrors: true, strict: true });
+addFormats(ajv);
+let ownedValidator;
+/** The compiled owned schema, compiled once. */
+export function externalPassportSchemaValidator() {
+    ownedValidator ??= ajv.compile(EXTERNAL_PASSPORT_SCHEMA);
+    return ownedValidator;
+}
+/**
+ * The profile's document loader: the maintained VC 2.0, Data Integrity,
+ * Multikey and DID contexts, the owned payload context from the package's
+ * own bytes, and the caller's pinned documents (issuer DID documents, keys,
+ * status list credentials). Nothing else is served: a context or document a
+ * credential names that is not pinned is unavailable, and the SEAL profile
+ * context is refused by name so a foreign credential cannot borrow it.
+ */
+export function createExternalDocumentLoader(documents = new Map(), options = {}) {
+    const builtins = new Map([
+        ...vcContexts, ...diContexts, ...multikeyContexts, ...didContexts,
+        [EXTERNAL_PASSPORT_CONTEXT_URL, EXTERNAL_PASSPORT_CONTEXT],
+    ]);
+    const didWeb = options.didWeb == null ? undefined : createDidWebResolver(options.didWeb);
+    return async (url) => {
+        if (url.startsWith('urn:bsv:vsc:'))
+            throw new Error(`Unsupported context: ${url} is the SEAL profile's and is never served to an external credential`);
+        const document = builtins.get(url) ?? documents.get(url);
+        if (document)
+            return { document: structuredClone(document), documentUrl: url, contextUrl: null };
+        if (didWeb != null && url.startsWith('did:web:'))
+            return didWeb(url);
+        throw new Error(`No document available: ${url}`);
+    };
+}
+/** Parse exact bytes strictly (duplicate keys, malformed UTF-8 and depth refused) under the profile's 256 KiB limit. The bytes are never re-serialised. */
+export function parseExternalCredentialBytes(bytes, limits = {}) {
+    const maxBytes = limits.maxBytes ?? EXTERNAL_CREDENTIAL_LIMIT_BYTES;
+    if (bytes.byteLength > maxBytes)
+        throw new Error(`Credential exceeds the ${maxBytes} byte profile limit`);
+    const value = parseStrictJsonBytes(bytes);
+    if (value == null || typeof value !== 'object' || Array.isArray(value))
+        throw new Error('A credential is a JSON object');
+    return { credential: value, digest: createHash('sha256').update(bytes).digest('hex'), byteLength: bytes.byteLength };
+}
+const good = (evidence) => ({ outcome: 'verified', issues: [], ...(evidence == null ? {} : { evidence }) });
+const fail = (code, message, outcome = 'invalid', path = '') => ({ outcome, issues: [{ code, path, message }] });
+const notEvaluated = () => fail('not_evaluated', 'Earlier validation did not permit this check', 'indeterminate');
+const isUri = (value) => typeof value === 'string' && /^[a-z][a-z0-9+.-]*:\S+$/i.test(value);
+const proofArray = (credential) => Array.isArray(credential.proof) ? credential.proof : credential.proof != null && typeof credential.proof === 'object' ? [credential.proof] : [];
+const sameList = (a, b) => a.length === b.length && a.every((v, i) => v === b[i]);
+function contextsCheck(credential, policy) {
+    const contexts = credential['@context'];
+    if (!Array.isArray(contexts) || contexts.length === 0)
+        return fail('context_missing', 'A credential declares its contexts as a non-empty array', 'invalid', '/@context');
+    if (contexts.some(c => typeof c !== 'string'))
+        return fail('context_inline', 'An inline context object is not a pinned artefact; it could redefine signed terms, so it is unsupported rather than trusted', 'unsupported', '/@context');
+    if (contexts[0] !== VC_V2_CONTEXT)
+        return fail('context_unsupported', 'The first context must be the W3C Verifiable Credentials 2.0 context', 'unsupported', '/@context');
+    if (!policy.allowedContextSets.some(set => sameList(set, contexts)))
+        return fail('context_unsupported', `The context set [${contexts.join(', ')}] is not one this profile pins`, 'unsupported', '/@context');
+    return good(contexts);
+}
+function schemaCheck(credential, validate) {
+    if (validate(credential))
+        return good([EXTERNAL_PASSPORT_SCHEMA_ID]);
+    return { outcome: 'invalid', issues: (validate.errors ?? []).map(e => ({ code: 'schema', path: e.instancePath, message: e.message ?? 'Invalid field' })) };
+}
+async function loadDocument(loader, url, resolved) {
+    try {
+        const { document } = await loader(url);
+        resolved.available.push(url);
+        return document;
+    }
+    catch {
+        resolved.unavailable.push(url);
+        return undefined;
+    }
+}
+/** Whether a DID document authorises a verification method for assertion, by identifier or by embedding. */
+function authorisesAssertion(didDocument, methodId) {
+    const relationships = didDocument.assertionMethod;
+    if (!Array.isArray(relationships))
+        return false;
+    return relationships.some(value => value === methodId || (typeof value === 'object' && value !== null && value.id === methodId));
+}
+/**
+ * The issuer binding: the issuer is a DID under an allowed method, its
+ * document resolves and identifies it, and every proof's verification method
+ * is a P-256 Multikey controlled by the issuer and listed under
+ * `assertionMethod`. Resolving a document establishes a key relationship and
+ * nothing more: no allocation authority, no accreditation.
+ */
+async function issuerBindingCheck(credential, proofs, policy, resolved) {
+    const issuer = credential.issuer;
+    if (typeof issuer !== 'string' || !issuer.startsWith('did:'))
+        return fail('issuer_not_did', 'The issuer must be a DID string; embedded issuer objects are not supported by this profile', 'unsupported', '/issuer');
+    const methods = policy.issuerPolicy?.allowedMethods ?? ['did:web'];
+    if (!methods.some(m => issuer.startsWith(`${m}:`)))
+        return fail('did_method_unsupported', `Issuer DID method is not one of ${methods.join(', ')}`, 'unsupported', '/issuer');
+    let didDocument;
+    if (policy.issuerPolicy?.resolve != null) {
+        try {
+            didDocument = await policy.issuerPolicy.resolve(issuer);
+            resolved.available.push(issuer);
+        }
+        catch {
+            resolved.unavailable.push(issuer);
+        }
+    }
+    else {
+        didDocument = await loadDocument(policy.documentLoader, issuer, resolved);
+    }
+    if (didDocument == null)
+        return fail('issuer_document_unavailable', `The issuer document ${issuer} could not be resolved`, 'indeterminate', '/issuer');
+    if (didDocument.id !== issuer)
+        return fail('issuer_document_mismatch', `The resolved document identifies ${String(didDocument.id)}, not the issuer ${issuer}`, 'invalid', '/issuer');
+    resolved.didDocument = didDocument;
+    if (proofs.length === 0)
+        return fail('proof_missing', 'A secured credential is required to bind an issuer to a key', 'invalid', '/proof');
+    const evidence = [issuer];
+    for (const proof of proofs) {
+        const methodId = proof.verificationMethod;
+        if (typeof methodId !== 'string' || methodId === '')
+            return fail('verification_method_missing', 'A proof names its verification method', 'invalid', '/proof/verificationMethod');
+        const method = await loadDocument(policy.documentLoader, methodId, resolved);
+        if (method == null)
+            return fail('verification_method_unavailable', `The verification method ${methodId} could not be resolved`, 'indeterminate', '/proof/verificationMethod');
+        const multibase = method.publicKeyMultibase;
+        if (method.type !== 'Multikey' || typeof multibase !== 'string')
+            return fail('key_type_unsupported', 'Only a Multikey verification method is supported by this profile', 'unsupported', '/proof/verificationMethod');
+        if (!multibase.startsWith(P256_MULTIBASE_PREFIX)) {
+            const curve = multibase.startsWith(P384_MULTIBASE_PREFIX) ? 'P-384' : multibase.startsWith(P521_MULTIBASE_PREFIX) ? 'P-521' : 'an unrecognised key type';
+            return fail('curve_unsupported', `The verification method is ${curve}; this profile supports P-256 only`, 'unsupported', '/proof/verificationMethod');
+        }
+        const controller = typeof method.controller === 'string' ? method.controller : method.controller?.id;
+        if (controller !== issuer)
+            return fail('key_controller_mismatch', `The key ${methodId} is controlled by ${String(controller)}, not the issuer ${issuer}`, 'invalid', '/proof/verificationMethod');
+        if (!authorisesAssertion(didDocument, methodId))
+            return fail('key_not_authorised', `The issuer document does not list ${methodId} under assertionMethod`, 'invalid', '/proof/verificationMethod');
+        evidence.push(methodId);
+    }
+    return good(evidence);
+}
+/**
+ * The proof itself: every proof is a Data Integrity proof under
+ * `ecdsa-rdfc-2019` for the assertion purpose, verified by the maintained
+ * suite with the issuer's resolved document as the controller. A set that
+ * mixes suites, or any other suite, is unsupported rather than failed.
+ */
+async function proofCheck(credential, proofs, policy, resolved) {
+    if (proofs.length === 0)
+        return fail('proof_missing', 'A secured credential is required', 'invalid', '/proof');
+    for (const proof of proofs) {
+        if (proof.type !== 'DataIntegrityProof' || proof.cryptosuite !== EXTERNAL_CRYPTOSUITE) {
+            return fail('suite_unsupported', `Proof suite ${String(proof.type)}/${String(proof.cryptosuite ?? '')} is not ${EXTERNAL_CRYPTOSUITE}`, 'unsupported', '/proof');
+        }
+        if (proof.proofPurpose !== 'assertionMethod')
+            return fail('proof_purpose', 'The proof does not authorise an assertion', 'invalid', '/proof/proofPurpose');
+    }
+    if (resolved.didDocument == null)
+        return fail('issuer_document_unavailable', 'The proof cannot be evaluated without the issuer document', 'indeterminate', '/issuer');
+    const purpose = new jsigs.purposes.AssertionProofPurpose({ controller: resolved.didDocument });
+    const suite = new DataIntegrityProof({ cryptosuite: ecdsaRdfc2019 });
+    try {
+        const result = await jsigs.verify(credential, { suite, purpose, documentLoader: policy.documentLoader });
+        if (result.verified)
+            return good(proofs.map(p => p.verificationMethod));
+        const message = result.error?.message ?? result.results?.find((r) => r.error)?.error?.message ?? 'Cryptographic proof failed';
+        const detail = Array.isArray(result.error?.errors) ? result.error.errors.map((e) => e.message) : [];
+        const text = [message, ...detail].join('; ');
+        if (/not authori[sz]ed|proof purpose/i.test(text))
+            return fail('key_not_authorised', text, 'invalid', '/proof');
+        if (/No document available/.test(text))
+            return fail('referenced_artefact_unavailable', text, 'indeterminate', '/proof');
+        return fail('proof_failed', text, 'invalid', '/proof');
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return fail(/No document available/.test(message) ? 'referenced_artefact_unavailable' : 'proof_failed', message, /No document available/.test(message) ? 'indeterminate' : 'invalid', '/proof');
+    }
+}
+function subjectBindingCheck(credential, policy) {
+    const subject = credential.credentialSubject;
+    if (Array.isArray(subject))
+        return { check: fail('subject_structure_unsupported', 'This profile supports exactly one credential subject', 'unsupported', '/credentialSubject'), subjects: subject.map(s => s?.id).filter(isUri) };
+    if (subject == null || typeof subject !== 'object' || !isUri(subject.id))
+        return { check: fail('subject_structure_unsupported', 'The credential subject must carry an explicit URI identifier', 'unsupported', '/credentialSubject/id'), subjects: [] };
+    const id = subject.id;
+    if (policy.expectedSubject == null)
+        return { check: { outcome: 'not-required', issues: [{ code: 'subject_not_expected', path: '/credentialSubject/id', message: `No expected subject was supplied; the credential names ${id}` }], evidence: [id] }, subjects: [id] };
+    if (policy.expectedSubject === id)
+        return { check: good([id]), subjects: [id] };
+    const binding = policy.subjectBindingPolicy?.bindings.find(b => b.credentialSubject === id && b.passportId === policy.expectedSubject);
+    if (binding != null)
+        return { check: good([id, binding.evidenceRef, policy.subjectBindingPolicy.id]), subjects: [id] };
+    return { check: fail('subject_mismatch', `The credential names ${id}, not the expected ${policy.expectedSubject}, and no binding policy relates them`, 'invalid', '/credentialSubject/id'), subjects: [id] };
+}
+/**
+ * The W3C Bitstring Status List rules of the SEAL verifier, with the proof
+ * verifier a parameter so the list is checked under this profile's suite.
+ * Identifier, authorised list issuer, proof, validity, signed freshness,
+ * purpose, canonical encoding, bounded decompression and the bit are
+ * separate refusals; a stale list stays stale however recently fetched.
+ */
+export async function verifyBitstringStatus(credential, options, verifyProof) {
+    const entry = credential.credentialStatus;
+    const policy = options.statusPolicy;
+    if (entry == null) {
+        if (policy != null)
+            return fail('status_entry_missing', 'The status policy requires a status entry and the credential carries none', 'invalid', '/credentialStatus');
+        if (options.statusOptional === true)
+            return { outcome: 'not-required', issues: [{ code: 'status_not_required', path: '/credentialStatus', message: 'The selected profile option accepts a credential without status; revocation cannot be evaluated' }] };
+        return fail('status_policy_missing', 'No authenticated status evidence policy is configured', 'indeterminate', '/credentialStatus');
+    }
+    if (!policy)
+        return fail('status_policy_missing', 'No authenticated status evidence policy is configured', 'indeterminate', '/credentialStatus');
+    if (!policy.id || !Number.isFinite(policy.maxAgeMs) || policy.maxAgeMs <= 0 || policy.maxAgeMs > 7 * 24 * 60 * 60 * 1000)
+        return fail('status_policy_invalid', 'Status freshness must be explicitly bounded to no more than seven days');
+    if (entry.type !== 'BitstringStatusListEntry' || !['revocation', 'suspension'].includes(entry.statusPurpose) || typeof entry.statusListIndex !== 'string' || !/^(0|[1-9][0-9]*)$/.test(entry.statusListIndex) || typeof entry.statusListCredential !== 'string')
+        return fail('status_entry_invalid', 'A supported status entry with a canonical decimal index is required', 'invalid', '/credentialStatus');
+    const index = Number(entry.statusListIndex);
+    if (!Number.isSafeInteger(index))
+        return fail('status_index_invalid', 'Status index is out of range');
+    let list;
+    try {
+        list = await policy.resolve(entry.statusListCredential);
+    }
+    catch {
+        return fail('status_unavailable', 'Status evidence could not be retrieved', 'indeterminate');
+    }
+    if (!list || typeof list !== 'object' || list.id !== entry.statusListCredential || !Array.isArray(list.type) || !list.type.includes('BitstringStatusListCredential'))
+        return fail('status_identity', 'Status list identifier or credential type does not match');
+    const authorised = list.issuer === credential.issuer || policy.delegatedListIssuers?.[credential.issuer]?.includes(list.issuer);
+    if (!authorised)
+        return fail('status_issuer', 'The credential issuer has not been granted this status-list issuer by verifier policy');
+    const proof = await verifyProof(list);
+    if (proof.outcome !== 'verified')
+        return { ...proof, issues: proof.issues.map(i => ({ ...i, code: 'status_proof' })) };
+    const temporal = verifyTemporal(list, options.evaluationTime);
+    if (temporal.outcome !== 'verified')
+        return temporal;
+    if (Date.parse(options.evaluationTime) - Date.parse(list.validFrom) > policy.maxAgeMs)
+        return fail('status_stale', 'Signed status evidence exceeds the configured freshness interval', 'indeterminate');
+    const subject = list.credentialSubject;
+    if (!subject || subject.type !== 'BitstringStatusList' || subject.statusPurpose !== entry.statusPurpose || typeof subject.encodedList !== 'string' || !/^u[A-Za-z0-9_-]+$/.test(subject.encodedList))
+        return fail('status_payload', 'Status list purpose, subject type or encoding is invalid');
+    try {
+        const compressed = Buffer.from(subject.encodedList.slice(1), 'base64url');
+        if (`u${compressed.toString('base64url')}` !== subject.encodedList || compressed.length > 1_048_576)
+            return fail('status_encoding', 'Status list encoding is not canonical or exceeds the profile limit');
+        const bytes = gunzipSync(compressed, { maxOutputLength: 1_048_576 });
+        if (bytes.length < 16_384 || index >= bytes.length * 8)
+            return fail('status_index_invalid', 'Status list is too small or index is outside the list');
+        // W3C Bitstring Status List indexes each byte from most significant bit to least significant bit.
+        if (bytes[Math.floor(index / 8)] & (1 << (7 - index % 8)))
+            return fail(entry.statusPurpose === 'revocation' ? 'revoked' : 'suspended', 'Credential status prevents acceptance');
+    }
+    catch {
+        return fail('status_encoding', 'Status list decompression failed or exceeded the profile limit');
+    }
+    return good([list.id, policy.id]);
+}
+function authorityCheck(issuer, policy) {
+    if (!policy.required)
+        return { outcome: 'not-required', issues: [{ code: 'authority_not_required', path: '', message: policy.reason }], evidence: [policy.id] };
+    if (issuer != null && policy.trustedIssuers.includes(issuer))
+        return good([policy.id, issuer]);
+    return fail('issuer_unauthorised', `${issuer ?? 'the issuer'} is not an issuer the policy ${policy.id} trusts for this claim`, 'invalid', '/issuer');
+}
+/**
+ * Verify one external credential from its exact bytes under the profile.
+ * Every check answers for itself; `issues` is the union of their issues.
+ * Nothing here consults a trust list the credential carries, and nothing
+ * here reads the credential under the SEAL profile's rules.
+ */
+export async function verifyExternalCredential({ bytes, representation, policy }) {
+    const digest = createHash('sha256').update(bytes).digest('hex');
+    const base = { representation: EXTERNAL_REPRESENTATIONS[0], mediaType: EXTERNAL_MEDIA_TYPE, subjects: [], types: [], digest, evidenceScope: 'provided-evidence' };
+    const finish = (checks, extra = {}) => ({ ...base, ...extra, checks, issues: Object.values(checks).flatMap(c => c.issues) });
+    const pending = notEvaluated();
+    if (!EXTERNAL_REPRESENTATIONS.includes(representation)) {
+        return finish({ parse: fail('representation_unsupported', `${representation} is not a representation this entry point verifies`, 'unsupported'), contexts: pending, schema: pending, proof: pending, issuerBinding: pending, subjectBinding: pending, temporal: pending, status: pending, authority: pending, availability: pending });
+    }
+    let parsed;
+    try {
+        parsed = parseExternalCredentialBytes(bytes);
+    }
+    catch (error) {
+        return finish({ parse: fail('parse', error instanceof Error ? error.message : String(error)), contexts: pending, schema: pending, proof: pending, issuerBinding: pending, subjectBinding: pending, temporal: pending, status: pending, authority: pending, availability: pending });
+    }
+    const credential = parsed.credential;
+    const types = Array.isArray(credential.type) ? credential.type.filter((t) => typeof t === 'string') : [];
+    const issuer = typeof credential.issuer === 'string' ? credential.issuer : undefined;
+    const credentialId = isUri(credential.id) ? credential.id : undefined;
+    const resolved = { unavailable: [], available: [] };
+    const proofs = proofArray(credential);
+    const contexts = contextsCheck(credential, policy.contextPolicy ?? { allowedContextSets: DEFAULT_CONTEXT_SETS });
+    const schema = schemaCheck(credential, policy.payloadSchema ?? externalPassportSchemaValidator());
+    const issuerBinding = await issuerBindingCheck(credential, proofs, policy, resolved);
+    // The proof is evaluated under pinned contexts and a resolved, supported
+    // issuer binding. An unsupported key or an unresolved document leaves the
+    // proof unsupported or indeterminate with the same reason; a binding that
+    // resolved and failed still lets the suite say what the signature does.
+    const proof = contexts.outcome !== 'verified'
+        ? fail('context_unsupported', 'The proof covers statements under contexts this profile does not pin, so it is not evaluated', 'unsupported', '/@context')
+        : issuerBinding.outcome === 'unsupported' || issuerBinding.outcome === 'indeterminate'
+            ? { outcome: issuerBinding.outcome, issues: issuerBinding.issues.map(i => ({ ...i, path: '/proof' })) }
+            : await proofCheck(credential, proofs, policy, resolved);
+    const { check: subjectBinding, subjects } = subjectBindingCheck(credential, policy);
+    const temporal = typeof credential.validFrom === 'string' ? verifyTemporal(credential, policy.evaluationTime) : fail('invalid_time', 'A credential states validFrom', 'invalid', '/validFrom');
+    const statusVerifier = async (list) => {
+        const listProofs = proofArray(list);
+        const listResolved = { unavailable: [], available: [] };
+        const listContexts = contextsCheck(list, policy.contextPolicy ?? { allowedContextSets: DEFAULT_CONTEXT_SETS });
+        if (listContexts.outcome !== 'verified')
+            return listContexts;
+        const binding = await issuerBindingCheck(list, listProofs, policy, listResolved);
+        resolved.unavailable.push(...listResolved.unavailable);
+        resolved.available.push(...listResolved.available);
+        if (binding.outcome !== 'verified')
+            return binding;
+        return proofCheck(list, listProofs, policy, listResolved);
+    };
+    const status = await verifyBitstringStatus(credential, { statusPolicy: policy.statusPolicy, statusOptional: policy.statusOptional, evaluationTime: policy.evaluationTime }, statusVerifier);
+    if (status.issues.some(i => i.code === 'status_unavailable') && typeof credential.credentialStatus?.statusListCredential === 'string')
+        resolved.unavailable.push(credential.credentialStatus.statusListCredential);
+    const authority = authorityCheck(issuer, policy.authorityPolicy);
+    const availability = resolved.unavailable.length === 0
+        ? good([...new Set(resolved.available)])
+        : { outcome: 'indeterminate', issues: [...new Set(resolved.unavailable)].map(url => ({ code: 'referenced_artefact_unavailable', path: '', message: `${url} was not available` })), evidence: [...new Set(resolved.available)] };
+    return finish({ parse: good([`sha256:${digest}`]), contexts, schema, proof, issuerBinding, subjectBinding, temporal, status, authority, availability }, { ...(credentialId == null ? {} : { credentialId }), ...(issuer == null ? {} : { issuer }), subjects, types });
+}
+/** The profile's issue codes that name a shared reason code of the report; anything else becomes an `x-external-` code. */
+const REASON_BY_ISSUE = {
+    representation_unsupported: 'representation-unsupported',
+    parse: 'decode-failed',
+    context_unsupported: 'suite-unsupported',
+    context_inline: 'suite-unsupported',
+    context_missing: 'suite-unsupported',
+    suite_unsupported: 'suite-unsupported',
+    curve_unsupported: 'suite-unsupported',
+    key_type_unsupported: 'suite-unsupported',
+    proof_missing: 'proof-absent',
+    proof_failed: 'signature-invalid',
+    proof_purpose: 'signature-invalid',
+    key_not_authorised: 'signature-invalid',
+    key_controller_mismatch: 'signature-invalid',
+    issuer_document_mismatch: 'signature-invalid',
+    issuer_not_did: 'suite-unsupported',
+    did_method_unsupported: 'suite-unsupported',
+    verification_method_missing: 'signature-invalid',
+    verification_method_unavailable: 'referenced-artefact-unavailable',
+    issuer_document_unavailable: 'referenced-artefact-unavailable',
+    referenced_artefact_unavailable: 'referenced-artefact-unavailable',
+    schema: 'schema-invalid',
+    not_yet_valid: 'not-yet-valid',
+    expired: 'expired',
+    invalid_time: 'time-invalid',
+    revoked: 'status-revoked',
+    suspended: 'status-suspended',
+    status_stale: 'status-stale',
+    status_unavailable: 'status-unknown',
+    status_policy_missing: 'policy-missing',
+    status_policy_invalid: 'policy-missing',
+    status_entry_missing: 'status-unset',
+    status_not_required: 'status-unset',
+    status_proof: 'status-unauthenticated',
+    status_issuer: 'status-unauthenticated',
+    status_identity: 'status-unauthenticated',
+    status_payload: 'status-unknown',
+    status_encoding: 'status-unknown',
+    status_index_invalid: 'status-unknown',
+    status_entry_invalid: 'status-purpose-unsupported',
+    issuer_unauthorised: 'authority-unconfirmed',
+    authority_not_required: 'authority-not-required',
+    subject_mismatch: 'subject-mismatch',
+    subject_structure_unsupported: 'suite-unsupported',
+    not_evaluated: 'not-inspected',
+};
+function partial(check) {
+    const detail = check.issues.length === 0 ? undefined : check.issues.map(i => ({ code: i.code, path: i.path, message: i.message }));
+    const refs = check.evidence == null ? {} : { evidenceRefs: check.evidence };
+    if (check.outcome === 'verified')
+        return { status: 'pass', ...refs };
+    const first = check.issues[0]?.code;
+    const reasonCode = first == null ? 'x-external-unspecified' : REASON_BY_ISSUE[first] ?? `x-external-${first.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '')}`;
+    if (check.outcome === 'not-required')
+        return { status: 'not-applicable', reasonCode, ...refs, ...(detail == null ? {} : { detail }) };
+    return { status: check.outcome === 'invalid' ? 'fail' : 'unknown', reasonCode, ...refs, ...(detail == null ? {} : { detail }) };
+}
+/** The worse of two answers: a failure outranks an unknown, an unknown outranks a pass. */
+function worst(a, b) {
+    const rank = (c) => c.status === 'fail' ? 3 : c.status === 'unknown' ? 2 : c.status === 'not-applicable' ? 1 : 0;
+    const chosen = rank(b) > rank(a) ? b : a;
+    const refs = [...new Set([...(a.evidenceRefs ?? []), ...(b.evidenceRefs ?? [])])];
+    return { ...chosen, ...(refs.length === 0 ? {} : { evidenceRefs: refs }) };
+}
+/**
+ * The verifier the report's `credentialVerifier` slot takes for this
+ * representation. The proof and issuer-binding checks answer `proof`
+ * together (a proof whose key its issuer never authorised does not verify
+ * under its own suite's controller rule); the schema, validity interval,
+ * status, authority and availability checks answer their own slots. The
+ * attestation type is the credential's first type after VerifiableCredential.
+ */
+export function externalCredentialVerifierFor(policy) {
+    return async (input) => {
+        if (!EXTERNAL_REPRESENTATIONS.includes(input.representation)) {
+            throw new Error(`this verifier handles ${EXTERNAL_REPRESENTATIONS.join(', ')} only, not ${input.representation}`);
+        }
+        const result = await verifyExternalCredential({ bytes: Uint8Array.from(input.bytes), representation: input.representation, policy: { ...policy, evaluationTime: policy.evaluationTime ?? input.checkedAt } });
+        const attestationType = result.types.find(t => t !== 'VerifiableCredential');
+        return {
+            ...(result.credentialId == null ? {} : { id: result.credentialId }),
+            ...(result.issuer == null ? {} : { issuer: result.issuer }),
+            subjects: result.subjects,
+            ...(attestationType == null ? {} : { attestationType }),
+            proof: worst(partial(result.checks.parse.outcome === 'verified' ? result.checks.proof : result.checks.parse), partial(result.checks.issuerBinding)),
+            schema: partial(result.checks.schema),
+            time: partial(result.checks.temporal),
+            status: partial(result.checks.status),
+            authority: partial(result.checks.authority),
+            availability: partial(result.checks.availability),
+        };
+    };
+}
+//# sourceMappingURL=exchange.js.map

package/dist/exchange.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exchange.js","sourceRoot":"","sources":["../src/exchange.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,KAAK,MAAM,mBAAmB,CAAC;AACtC,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,WAAW,IAAI,aAAa,EAAE,MAAM,4CAA4C,CAAC;AAC1F,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EAAE,QAAQ,IAAI,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,OAAO,EAAyB,MAAM,kBAAkB,CAAC;AAClE,OAAO,UAAU,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAGpD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,yBAAyB,CAAU,CAAC;AAE7E,MAAM,CAAC,MAAM,mBAAmB,GAAG,wBAAiC,CAAC;AACrE,MAAM,CAAC,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;AACtD,kEAAkE;AAClE,MAAM,CAAC,MAAM,+BAA+B,GAAG,OAAO,CAAC;AAEvD,MAAM,CAAC,MAAM,aAAa,GAAG,sCAAsC,CAAC;AACpE,MAAM,CAAC,MAAM,yBAAyB,GAAG,6CAA6C,CAAC;AACvF,MAAM,CAAC,MAAM,mBAAmB,GAAG,uCAAuC,CAAC;AAC3E,MAAM,CAAC,MAAM,cAAc,GAAG,8BAA8B,CAAC;AAC7D,4GAA4G;AAC5G,MAAM,CAAC,MAAM,6BAA6B,GAAG,yCAAyC,CAAC;AACvF,MAAM,CAAC,MAAM,2BAA2B,GAAG,wCAAwC,CAAC;AACpF,2FAA2F;AAC3F,MAAM,qBAAqB,GAAG,KAAK,CAAC;AACpC,MAAM,qBAAqB,GAAG,KAAK,CAAC;AACpC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAErC,6EAA6E;AAC7E,6EAA6E;AAC7E,+EAA+E;AAC/E,oEAAoE;AACpE,MAAM,QAAQ,GAAG,CAAC,GAAQ,EAAc,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAe,CAAC;AAC/F,MAAM,CAAC,MAAM,yBAAyB,GAAe,QAAQ,CAAC,IAAI,GAAG,CAAC,8DAA8D,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACxJ,MAAM,CAAC,MAAM,wBAAwB,GAAe,QAAQ,CAAC,IAAI,GAAG,CAAC,2DAA2D,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAEpJ,4KAA4K;AAC5K,MAAM,CAAC,MAAM,oBAAoB,GAAmC;IAClE,CAAC,aAAa,CAAC;IACf,CAAC,aAAa,EAAE,yBAAyB,CAAC;IAC1C,CAAC,aAAa,EAAE,6BAA6B,CAAC;IAC9C,CAAC,aAAa,EAAE,yBAAyB,EAAE,6BAA6B,CAAC;CAC1E,CAAC;AAEF,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAC1D,UAA8C,CAAC,GAAG,CAAC,CAAC;AACrD,IAAI,cAA4C,CAAC;AACjD,gDAAgD;AAChD,MAAM,UAAU,+BAA+B;IAC7C,cAAc,KAAK,GAAG,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACzD,OAAO,cAAc,CAAC;AACxB,CAAC;AAOD;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAAC,YAA6C,IAAI,GAAG,EAAE,EAAE,UAAiC,EAAE;IACtI,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAqB;QAC3C,GAAG,UAAU,EAAE,GAAG,UAAU,EAAE,GAAG,gBAAgB,EAAE,GAAG,WAAW;QACjE,CAAC,6BAA6B,EAAE,yBAAyB,CAAC;KAC3D,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACzF,OAAO,KAAK,EAAC,GAAG,EAAC,EAAE;QACjB,IAAI,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,sEAAsE,CAAC,CAAC;QACvJ,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzD,IAAI,QAAQ;YAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QACjG,IAAI,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC;AACJ,CAAC;AASD,2JAA2J;AAC3J,MAAM,UAAU,4BAA4B,CAAC,KAAiB,EAAE,SAAgC,EAAE;IAChG,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,+BAA+B,CAAC;IACpE,IAAI,KAAK,CAAC,UAAU,GAAG,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,qBAAqB,CAAC,CAAC;IAC1G,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACzH,OAAO,EAAE,UAAU,EAAE,KAAmB,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;AACrI,CAAC;AAgDD,MAAM,IAAI,GAAG,CAAC,QAAmB,EAAS,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;AAC9H,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,OAAe,EAAE,UAA4B,SAAS,EAAE,IAAI,GAAG,EAAE,EAAS,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;AAC1J,MAAM,YAAY,GAAG,GAAU,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,8CAA8C,EAAE,eAAe,CAAC,CAAC;AACzH,MAAM,KAAK,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACvH,MAAM,UAAU,GAAG,CAAC,UAAsB,EAAW,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,IAAI,IAAI,IAAI,OAAO,UAAU,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5N,MAAM,QAAQ,GAAG,CAAC,CAAqB,EAAE,CAAqB,EAAW,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEnI,SAAS,aAAa,CAAC,UAAsB,EAAE,MAA6B;IAC1E,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,iBAAiB,EAAE,yDAAyD,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACzK,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC,gBAAgB,EAAE,6HAA6H,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;IACxO,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC,qBAAqB,EAAE,sEAAsE,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;IAC1K,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAoB,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,qBAAqB,EAAE,oBAAqB,QAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,gCAAgC,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;IACvO,OAAO,IAAI,CAAC,QAAoB,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,WAAW,CAAC,UAAsB,EAAE,QAA0B;IACrE,IAAI,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC;IACrE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,eAAe,EAAE,CAAC,CAAC,EAAE,CAAC;AAC7J,CAAC;AAID,KAAK,UAAU,YAAY,CAAC,MAAsB,EAAE,GAAW,EAAE,QAAkB;IACjF,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;QACvC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,4GAA4G;AAC5G,SAAS,mBAAmB,CAAC,WAAuB,EAAE,QAAgB;IACpE,MAAM,aAAa,GAAG,WAAW,CAAC,eAAe,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAK,KAAoB,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC;AACnJ,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,kBAAkB,CAAC,UAAsB,EAAE,MAAe,EAAE,MAAkC,EAAE,QAAkB;IAC/H,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IACjC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC,gBAAgB,EAAE,4FAA4F,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;IACpN,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,EAAE,cAAc,IAAI,CAAC,SAAS,CAAC,CAAC;IACnE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,wBAAwB,EAAE,mCAAmC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;IAC7K,IAAI,WAAmC,CAAC;IACxC,IAAI,MAAM,CAAC,YAAY,EAAE,OAAO,IAAI,IAAI,EAAE,CAAC;QACzC,IAAI,CAAC;YAAC,WAAW,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;IAChJ,CAAC;SAAM,CAAC;QACN,WAAW,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,WAAW,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,6BAA6B,EAAE,uBAAuB,MAAM,wBAAwB,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;IACvJ,IAAI,WAAW,CAAC,EAAE,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,0BAA0B,EAAE,oCAAoC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,oBAAoB,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACrL,QAAQ,CAAC,WAAW,GAAG,WAAW,CAAC;IACnC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,eAAe,EAAE,6DAA6D,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC1I,MAAM,QAAQ,GAAa,CAAC,MAAM,CAAC,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,kBAAkB,CAAC;QAC1C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC,6BAA6B,EAAE,uCAAuC,EAAE,SAAS,EAAE,2BAA2B,CAAC,CAAC;QACjL,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,cAAc,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC7E,IAAI,MAAM,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC,iCAAiC,EAAE,2BAA2B,QAAQ,wBAAwB,EAAE,eAAe,EAAE,2BAA2B,CAAC,CAAC;QAC9K,MAAM,SAAS,GAAG,MAAM,CAAC,kBAAkB,CAAC;QAC5C,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,SAAS,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,sBAAsB,EAAE,kEAAkE,EAAE,aAAa,EAAE,2BAA2B,CAAC,CAAC;QACrN,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACjD,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC;YACzJ,OAAO,IAAI,CAAC,mBAAmB,EAAE,8BAA8B,KAAK,oCAAoC,EAAE,aAAa,EAAE,2BAA2B,CAAC,CAAC;QACxJ,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,MAAM,CAAC,UAAqC,EAAE,EAAE,CAAC;QACjI,IAAI,UAAU,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC,yBAAyB,EAAE,WAAW,QAAQ,qBAAqB,MAAM,CAAC,UAAU,CAAC,oBAAoB,MAAM,EAAE,EAAE,SAAS,EAAE,2BAA2B,CAAC,CAAC;QAClM,IAAI,CAAC,mBAAmB,CAAC,WAAW,EAAE,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC,oBAAoB,EAAE,qCAAqC,QAAQ,wBAAwB,EAAE,SAAS,EAAE,2BAA2B,CAAC,CAAC;QAClM,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC;AACxB,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,UAAU,CAAC,UAAsB,EAAE,MAAe,EAAE,MAAkC,EAAE,QAAkB;IACvH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,eAAe,EAAE,kCAAkC,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC/G,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,IAAI,KAAK,CAAC,WAAW,KAAK,oBAAoB,EAAE,CAAC;YACtF,OAAO,IAAI,CAAC,mBAAmB,EAAE,eAAe,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,WAAW,oBAAoB,EAAE,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;QACnK,CAAC;QACD,IAAI,KAAK,CAAC,YAAY,KAAK,iBAAiB;YAAE,OAAO,IAAI,CAAC,eAAe,EAAE,2CAA2C,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;IAC5J,CAAC;IACD,IAAI,QAAQ,CAAC,WAAW,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,6BAA6B,EAAE,2DAA2D,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;IACtK,MAAM,OAAO,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/F,MAAM,KAAK,GAAG,IAAI,kBAAkB,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;QACzG,IAAI,MAAM,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACxE,MAAM,OAAO,GAAW,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,OAAO,IAAI,4BAA4B,CAAC;QACzJ,MAAM,MAAM,GAAa,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrH,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,oBAAoB,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAChH,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,iCAAiC,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;QACxH,OAAO,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,cAAc,EAAE,OAAO,EAAE,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAClM,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAsB,EAAE,MAAkC;IACrF,MAAM,OAAO,GAAG,UAAU,CAAC,iBAAiB,CAAC;IAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,+BAA+B,EAAE,sDAAsD,EAAE,aAAa,EAAE,oBAAoB,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAE,CAAgB,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAClP,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAE,OAAsB,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,+BAA+B,EAAE,8DAA8D,EAAE,aAAa,EAAE,uBAAuB,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACxQ,MAAM,EAAE,GAAI,OAAsB,CAAC,EAAY,CAAC;IAChD,IAAI,MAAM,CAAC,eAAe,IAAI,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,0DAA0D,EAAE,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;IACtQ,IAAI,MAAM,CAAC,eAAe,KAAK,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;IAChF,MAAM,OAAO,GAAG,MAAM,CAAC,oBAAoB,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,KAAK,EAAE,IAAI,CAAC,CAAC,UAAU,KAAK,MAAM,CAAC,eAAe,CAAC,CAAC;IACvI,IAAI,OAAO,IAAI,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,oBAAqB,CAAC,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;IACxH,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,wBAAwB,EAAE,sBAAsB,MAAM,CAAC,eAAe,sCAAsC,EAAE,SAAS,EAAE,uBAAuB,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;AAC/M,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAAsB,EACtB,OAA0F,EAC1F,WAAiD;IAEjD,MAAM,KAAK,GAAG,UAAU,CAAC,gBAA0C,CAAC;IACpE,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IACpC,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,MAAM,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC,sBAAsB,EAAE,2EAA2E,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;QACrK,IAAI,OAAO,CAAC,cAAc,KAAK,IAAI;YAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,iGAAiG,EAAE,CAAC,EAAE,CAAC;QAC1P,OAAO,IAAI,CAAC,uBAAuB,EAAE,uDAAuD,EAAE,eAAe,EAAE,mBAAmB,CAAC,CAAC;IACtI,CAAC;IACD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC,uBAAuB,EAAE,uDAAuD,EAAE,eAAe,EAAE,mBAAmB,CAAC,CAAC;IACjJ,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;QAAE,OAAO,IAAI,CAAC,uBAAuB,EAAE,wEAAwE,CAAC,CAAC;IACzO,IAAI,KAAK,CAAC,IAAI,KAAK,0BAA0B,IAAI,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAuB,CAAC,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,OAAO,KAAK,CAAC,oBAAoB,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,sBAAsB,EAAE,qEAAqE,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACtZ,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,sBAAsB,EAAE,8BAA8B,CAAC,CAAC;IACtG,IAAI,IAAgB,CAAC;IACrB,IAAI,CAAC;QAAC,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC,oBAAoB,EAAE,wCAAwC,EAAE,eAAe,CAAC,CAAC;IAAC,CAAC;IACxK,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,oBAAoB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,+BAA+B,CAAC;QAAE,OAAO,IAAI,CAAC,iBAAiB,EAAE,0DAA0D,CAAC,CAAC;IACjQ,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,IAAI,MAAM,CAAC,oBAAoB,EAAE,CAAC,UAAU,CAAC,MAAgB,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1I,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC,eAAe,EAAE,uFAAuF,CAAC,CAAC;IACvI,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,IAAkB,CAAC,CAAC;IACpD,IAAI,KAAK,CAAC,OAAO,KAAK,UAAU;QAAE,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC;IACvH,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAC9D,IAAI,QAAQ,CAAC,OAAO,KAAK,UAAU;QAAE,OAAO,QAAQ,CAAC;IACrD,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC,cAAc,EAAE,kEAAkE,EAAE,eAAe,CAAC,CAAC;IACxM,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC;IACvC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,qBAAqB,IAAI,OAAO,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC,gBAAgB,EAAE,0DAA0D,CAAC,CAAC;IAChS,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QAC1E,IAAI,IAAI,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,OAAO,CAAC,WAAW,IAAI,UAAU,CAAC,MAAM,GAAG,SAAS;YAAE,OAAO,IAAI,CAAC,iBAAiB,EAAE,oEAAoE,CAAC,CAAC;QAC1M,MAAM,KAAK,GAAG,UAAU,CAAC,UAAU,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,sBAAsB,EAAE,uDAAuD,CAAC,CAAC;QACrJ,kGAAkG;QAClG,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,KAAK,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,uCAAuC,CAAC,CAAC;IAClL,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC,iBAAiB,EAAE,gEAAgE,CAAC,CAAC;IAAC,CAAC;IAC7G,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,cAAc,CAAC,MAA0B,EAAE,MAA+B;IACjF,IAAI,CAAC,MAAM,CAAC,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;IAChK,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/F,OAAO,IAAI,CAAC,qBAAqB,EAAE,GAAG,MAAM,IAAI,YAAY,gCAAgC,MAAM,CAAC,EAAE,wBAAwB,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AACvJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAqF;IACjK,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,EAAE,cAAc,EAAE,wBAAwB,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,mBAAiD,EAAE,QAAQ,EAAE,EAAc,EAAE,KAAK,EAAE,EAAc,EAAE,MAAM,EAAE,aAAa,EAAE,mBAA4B,EAAE,CAAC;IACjO,MAAM,MAAM,GAAG,CAAC,MAAsC,EAAE,QAAuC,EAAE,EAAwB,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAClN,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;IAC/B,IAAI,CAAE,wBAA8C,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QAC9E,OAAO,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,4BAA4B,EAAE,GAAG,cAAc,oDAAoD,EAAE,aAAa,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;IACzU,CAAC;IACD,IAAI,MAAgC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;IACtR,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACrC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtH,MAAM,MAAM,GAAG,OAAO,UAAU,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,MAAM,YAAY,GAAG,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,MAAM,QAAQ,GAAa,EAAE,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IAEtC,MAAM,QAAQ,GAAG,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,CAAC,CAAC;IACjH,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,aAAa,IAAI,+BAA+B,EAAE,CAAC,CAAC;IAClG,MAAM,aAAa,GAAG,MAAM,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACrF,yEAAyE;IACzE,0EAA0E;IAC1E,0EAA0E;IAC1E,wEAAwE;IACxE,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,KAAK,UAAU;QAC3C,CAAC,CAAC,IAAI,CAAC,qBAAqB,EAAE,8FAA8F,EAAE,aAAa,EAAE,WAAW,CAAC;QACzJ,CAAC,CAAC,aAAa,CAAC,OAAO,KAAK,aAAa,IAAI,aAAa,CAAC,OAAO,KAAK,eAAe;YACpF,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE;YACvG,CAAC,CAAC,MAAM,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC7D,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,mBAAmB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACpF,MAAM,QAAQ,GAAG,OAAO,UAAU,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,UAAmC,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,+BAA+B,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;IACxN,MAAM,cAAc,GAAG,KAAK,EAAE,IAAgB,EAAkB,EAAE;QAChE,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,YAAY,GAAa,EAAE,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAClE,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC/G,IAAI,YAAY,CAAC,OAAO,KAAK,UAAU;YAAE,OAAO,YAAY,CAAC;QAC7D,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;QACjF,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;QACvD,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,OAAO,CAAC,OAAO,KAAK,UAAU;YAAE,OAAO,OAAO,CAAC;QACnD,OAAO,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IAC5D,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,UAAU,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,EAAE,cAAc,CAAC,CAAC;IAC5L,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,IAAI,OAAQ,UAAU,CAAC,gBAA2C,EAAE,oBAAoB,KAAK,QAAQ;QAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAE,UAAU,CAAC,gBAA+B,CAAC,oBAA8B,CAAC,CAAC;IACzQ,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IACjE,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;QACpD,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QACxC,CAAC,CAAC,EAAE,OAAO,EAAE,eAAwB,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,GAAG,oBAAoB,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;IAE3O,OAAO,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;AACzQ,CAAC;AAaD,2HAA2H;AAC3H,MAAM,eAAe,GAAqC;IACxD,0BAA0B,EAAE,4BAA4B;IACxD,KAAK,EAAE,eAAe;IACtB,mBAAmB,EAAE,mBAAmB;IACxC,cAAc,EAAE,mBAAmB;IACnC,eAAe,EAAE,mBAAmB;IACpC,iBAAiB,EAAE,mBAAmB;IACtC,iBAAiB,EAAE,mBAAmB;IACtC,oBAAoB,EAAE,mBAAmB;IACzC,aAAa,EAAE,cAAc;IAC7B,YAAY,EAAE,mBAAmB;IACjC,aAAa,EAAE,mBAAmB;IAClC,kBAAkB,EAAE,mBAAmB;IACvC,uBAAuB,EAAE,mBAAmB;IAC5C,wBAAwB,EAAE,mBAAmB;IAC7C,cAAc,EAAE,mBAAmB;IACnC,sBAAsB,EAAE,mBAAmB;IAC3C,2BAA2B,EAAE,mBAAmB;IAChD,+BAA+B,EAAE,iCAAiC;IAClE,2BAA2B,EAAE,iCAAiC;IAC9D,+BAA+B,EAAE,iCAAiC;IAClE,MAAM,EAAE,gBAAgB;IACxB,aAAa,EAAE,eAAe;IAC9B,OAAO,EAAE,SAAS;IAClB,YAAY,EAAE,cAAc;IAC5B,OAAO,EAAE,gBAAgB;IACzB,SAAS,EAAE,kBAAkB;IAC7B,YAAY,EAAE,cAAc;IAC5B,kBAAkB,EAAE,gBAAgB;IACpC,qBAAqB,EAAE,gBAAgB;IACvC,qBAAqB,EAAE,gBAAgB;IACvC,oBAAoB,EAAE,cAAc;IACpC,mBAAmB,EAAE,cAAc;IACnC,YAAY,EAAE,wBAAwB;IACtC,aAAa,EAAE,wBAAwB;IACvC,eAAe,EAAE,wBAAwB;IACzC,cAAc,EAAE,gBAAgB;IAChC,eAAe,EAAE,gBAAgB;IACjC,oBAAoB,EAAE,gBAAgB;IACtC,oBAAoB,EAAE,4BAA4B;IAClD,mBAAmB,EAAE,uBAAuB;IAC5C,sBAAsB,EAAE,wBAAwB;IAChD,gBAAgB,EAAE,kBAAkB;IACpC,6BAA6B,EAAE,mBAAmB;IAClD,aAAa,EAAE,eAAe;CAC/B,CAAC;AAEF,SAAS,OAAO,CAAC,KAAY;IAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACnI,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC5E,IAAI,KAAK,CAAC,OAAO,KAAK,UAAU;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC;IACrE,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;IACpC,MAAM,UAAU,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,cAAc,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC;IAChL,IAAI,KAAK,CAAC,OAAO,KAAK,cAAc;QAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACtI,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;AAClI,CAAC;AAED,2FAA2F;AAC3F,SAAS,KAAK,CAAC,CAAqB,EAAE,CAAqB;IACzD,MAAM,IAAI,GAAG,CAAC,CAAqB,EAAU,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7I,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAC7E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,6BAA6B,CAAC,MAAwF;IACpI,OAAO,KAAK,EAAC,KAAK,EAAC,EAAE;QACnB,IAAI,CAAE,wBAA8C,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,yBAAyB,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;QACpH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC9M,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,sBAAsB,CAAC,CAAC;QAC7E,OAAO;YACL,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;YACnE,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YAC3D,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;YACvD,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YACnJ,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;YACrC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;YACrC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;YACrC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;YAC3C,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;SAClD,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,10 @@
+export * from './types.js';
+export * from './context.js';
+export * from './validation.js';
+export * from './crypto.js';
+export { sealSchema } from './schema.js';
+export * from './verification.js';
+export * from './epcis.js';
+export * from './did-web.js';
+export * from './epcis-source.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC"}

package/dist/index.js

@@ -0,0 +1,10 @@
+export * from './types.js';
+export * from './context.js';
+export * from './validation.js';
+export * from './crypto.js';
+export { sealSchema } from './schema.js';
+export * from './verification.js';
+export * from './epcis.js';
+export * from './did-web.js';
+export * from './epcis-source.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC"}

package/dist/jcs.d.ts

@@ -0,0 +1,25 @@
+/**
+ * RFC 8785, the JSON Canonicalization Scheme, as one small exact function.
+ *
+ * Object members are sorted by the UTF-16 code units of their names, which
+ * is what JavaScript's default string comparison does; numbers are written
+ * as ECMAScript's Number-to-string conversion writes them, which is what
+ * JSON.stringify writes for a finite number; strings are escaped as
+ * JSON.stringify escapes them (section 3.2.2.2: the short escapes, then
+ * \u00xx for the remaining control characters, everything else literal).
+ * Anything JSON cannot carry (undefined, a function, a symbol, a bigint, a
+ * non-finite number, a lone surrogate) is refused by name, so two
+ * implementations that both accept a value hash the same bytes.
+ *
+ * The EPCIS event-body digest (epcis-source.ts) is the reason this exists in
+ * this package: a retained source is compared by the digest of its canonical
+ * form, never by its formatting.
+ */
+export declare class JcsError extends Error {
+    constructor(path: string, detail: string);
+}
+/** The RFC 8785 canonical JSON text of a value. Throws JcsError for anything JSON cannot carry. */
+export declare function canonicalizeJcs(value: unknown): string;
+/** The canonical text as UTF-8 bytes, the form a digest is taken over. */
+export declare function canonicalJcsBytes(value: unknown): Uint8Array;
+//# sourceMappingURL=jcs.d.ts.map

package/dist/jcs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jcs.d.ts","sourceRoot":"","sources":["../src/jcs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,QAAS,SAAQ,KAAK;gBACrB,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAIzC;AAiCD,mGAAmG;AACnG,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEtD;AAED,0EAA0E;AAC1E,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CAE5D"}