@devlab.group/agent-commerce 2.4.1 → 2.5.0

package/dist/chunk-GA3O2A7R.js

@@ -0,0 +1,92 @@
+import { getAddress, encodeAbiParameters, keccak256 } from 'viem';
+import { createHash } from 'crypto';
+import { PERMIT2_ADDRESS } from '@x402/evm';
+
+// src/payments/x402/locator.ts
+var LOCATOR_VERSION = 1;
+var SECONDS = /^\d{1,13}$/;
+var MAX_DATE_MS = 864e13;
+function isoFromSeconds(seconds) {
+  const ms = SECONDS.test(seconds) ? Number(seconds) * 1e3 : Number.NaN;
+  return ms <= MAX_DATE_MS ? new Date(ms).toISOString() : void 0;
+}
+function eip3009Locator(network, asset, authorization) {
+  const { from, to, value, validAfter, validBefore, nonce } = authorization;
+  return withExpiry(
+    {
+      v: LOCATOR_VERSION,
+      network,
+      method: "eip3009",
+      asset: getAddress(asset),
+      from: getAddress(from),
+      to: getAddress(to),
+      value,
+      nonce: nonce.toLowerCase(),
+      validAfter,
+      validBefore
+    },
+    validBefore
+  );
+}
+function permit2Locator(network, transfer) {
+  const { asset, owner, to, amount, nonce, deadline, validAfter, proxy } = transfer;
+  return withExpiry(
+    {
+      v: LOCATOR_VERSION,
+      network,
+      method: "permit2",
+      asset: getAddress(asset),
+      owner: getAddress(owner),
+      to: getAddress(to),
+      amount,
+      nonce,
+      deadline,
+      validAfter,
+      proxy: getAddress(proxy)
+    },
+    deadline
+  );
+}
+function withExpiry(locator, seconds) {
+  const expiresAt = isoFromSeconds(seconds);
+  return expiresAt !== void 0 ? { ...locator, expiresAt } : locator;
+}
+function computeReplayKey(input) {
+  const encoded = encodeAbiParameters(
+    [{ type: "uint256" }, { type: "address" }, { type: "address" }, { type: "bytes32" }],
+    [BigInt(input.chainId), input.asset, input.from, input.nonce]
+  );
+  return keccak256(encoded);
+}
+function computePermit2ReplayKey(input) {
+  return keccak256(
+    encodeAbiParameters(
+      [
+        { type: "string" },
+        { type: "uint256" },
+        { type: "address" },
+        { type: "address" },
+        { type: "uint256" }
+      ],
+      [
+        "x402/exact/permit2/v1",
+        BigInt(input.chainId),
+        PERMIT2_ADDRESS,
+        input.owner,
+        BigInt(input.nonce)
+      ]
+    )
+  );
+}
+function computeSvmReplayKey(input) {
+  const digest = createHash("sha256").update("x402/exact/svm/v1\0").update(input.network).update("\0").update(Buffer.from(input.messageHash, "base64")).digest("hex");
+  return `0x${digest}`;
+}
+function computeNearReplayKey(input) {
+  const digest = createHash("sha256").update("x402/exact/near/v1\0").update(`${input.network}\0${input.senderId}\0${input.publicKey}\0${input.nonce.toString(10)}`).digest("hex");
+  return `0x${digest}`;
+}
+
+export { LOCATOR_VERSION, computeNearReplayKey, computePermit2ReplayKey, computeReplayKey, computeSvmReplayKey, eip3009Locator, isoFromSeconds, permit2Locator };
+//# sourceMappingURL=chunk-GA3O2A7R.js.map
+//# sourceMappingURL=chunk-GA3O2A7R.js.map

package/dist/chunk-GA3O2A7R.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/payments/x402/locator.ts","../src/payments/x402/replay-key.ts"],"names":[],"mappings":";;;;;AAQO,IAAM,eAAA,GAAkB;AAG/B,IAAM,OAAA,GAAU,YAAA;AAChB,IAAM,WAAA,GAAc,MAAA;AAMb,SAAS,eAAe,OAAA,EAAqC;AAClE,EAAA,MAAM,EAAA,GAAK,QAAQ,IAAA,CAAK,OAAO,IAAI,MAAA,CAAO,OAAO,CAAA,GAAI,GAAA,GAAO,MAAA,CAAO,GAAA;AACnE,EAAA,OAAO,MAAM,WAAA,GAAc,IAAI,KAAK,EAAE,CAAA,CAAE,aAAY,GAAI,MAAA;AAC1D;AAYO,SAAS,cAAA,CACd,OAAA,EACA,KAAA,EACA,aAAA,EACmC;AACnC,EAAA,MAAM,EAAE,IAAA,EAAM,EAAA,EAAI,OAAO,UAAA,EAAY,WAAA,EAAa,OAAM,GAAI,aAAA;AAC5D,EAAA,OAAO,UAAA;AAAA,IACL;AAAA,MACE,CAAA,EAAG,eAAA;AAAA,MACH,OAAA;AAAA,MACA,MAAA,EAAQ,SAAA;AAAA,MACR,KAAA,EAAO,WAAW,KAAK,CAAA;AAAA,MACvB,IAAA,EAAM,WAAW,IAAI,CAAA;AAAA,MACrB,EAAA,EAAI,WAAW,EAAE,CAAA;AAAA,MACjB,KAAA;AAAA,MACA,KAAA,EAAO,MAAM,WAAA,EAAY;AAAA,MACzB,UAAA;AAAA,MACA;AAAA,KACF;AAAA,IACA;AAAA,GACF;AACF;AAeO,SAAS,cAAA,CACd,SACA,QAAA,EACmC;AACnC,EAAA,MAAM,EAAE,OAAO,KAAA,EAAO,EAAA,EAAI,QAAQ,KAAA,EAAO,QAAA,EAAU,UAAA,EAAY,KAAA,EAAM,GAAI,QAAA;AACzE,EAAA,OAAO,UAAA;AAAA,IACL;AAAA,MACE,CAAA,EAAG,eAAA;AAAA,MACH,OAAA;AAAA,MACA,MAAA,EAAQ,SAAA;AAAA,MACR,KAAA,EAAO,WAAW,KAAK,CAAA;AAAA,MACvB,KAAA,EAAO,WAAW,KAAK,CAAA;AAAA,MACvB,EAAA,EAAI,WAAW,EAAE,CAAA;AAAA,MACjB,MAAA;AAAA,MACA,KAAA;AAAA,MACA,QAAA;AAAA,MACA,UAAA;AAAA,MACA,KAAA,EAAO,WAAW,KAAK;AAAA,KACzB;AAAA,IACA;AAAA,GACF;AACF;AAEA,SAAS,UAAA,CACP,SACA,OAAA,EACmC;AACnC,EAAA,MAAM,SAAA,GAAY,eAAe,OAAO,CAAA;AACxC,EAAA,OAAO,cAAc,MAAA,GAAY,EAAE,GAAG,OAAA,EAAS,WAAU,GAAI,OAAA;AAC/D;ACjFO,SAAS,iBAAiB,KAAA,EAA+B;AAC9D,EAAA,MAAM,OAAA,GAAU,mBAAA;AAAA,IACd,CAAC,EAAE,IAAA,EAAM,SAAA,EAAU,EAAG,EAAE,IAAA,EAAM,SAAA,EAAU,EAAG,EAAE,MAAM,SAAA,EAAU,EAAG,EAAE,IAAA,EAAM,WAAW,CAAA;AAAA,IACnF,CAAC,MAAA,CAAO,KAAA,CAAM,OAAO,CAAA,EAAG,MAAM,KAAA,EAAO,KAAA,CAAM,IAAA,EAAM,KAAA,CAAM,KAAK;AAAA,GAC9D;AACA,EAAA,OAAO,UAAU,OAAO,CAAA;AAC1B;AAOO,SAAS,wBAAwB,KAAA,EAI7B;AACT,EAAA,OAAO,SAAA;AAAA,IACL,mBAAA;AAAA,MACE;AAAA,QACE,EAAE,MAAM,QAAA,EAAS;AAAA,QACjB,EAAE,MAAM,SAAA,EAAU;AAAA,QAClB,EAAE,MAAM,SAAA,EAAU;AAAA,QAClB,EAAE,MAAM,SAAA,EAAU;AAAA,QAClB,EAAE,MAAM,SAAA;AAAU,OACpB;AAAA,MACA;AAAA,QACE,uBAAA;AAAA,QACA,MAAA,CAAO,MAAM,OAAO,CAAA;AAAA,QACpB,eAAA;AAAA,QACA,KAAA,CAAM,KAAA;AAAA,QACN,MAAA,CAAO,MAAM,KAAK;AAAA;AACpB;AACF,GACF;AACF;AAQO,SAAS,oBAAoB,KAAA,EAGzB;AACT,EAAA,MAAM,MAAA,GAAS,WAAW,QAAQ,CAAA,CAC/B,OAAO,qBAAqB,CAAA,CAC5B,MAAA,CAAO,KAAA,CAAM,OAAO,CAAA,CACpB,OAAO,IAAI,CAAA,CACX,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,KAAA,CAAM,aAAa,QAAQ,CAAC,CAAA,CAC/C,MAAA,CAAO,KAAK,CAAA;AACf,EAAA,OAAO,KAAK,MAAM,CAAA,CAAA;AACpB;AAQO,SAAS,qBAAqB,KAAA,EAK1B;AACT,EAAA,MAAM,MAAA,GAAS,UAAA,CAAW,QAAQ,CAAA,CAC/B,MAAA,CAAO,sBAAsB,CAAA,CAC7B,MAAA,CAAO,CAAA,EAAG,KAAA,CAAM,OAAO,CAAA,EAAA,EAAK,KAAA,CAAM,QAAQ,CAAA,EAAA,EAAK,KAAA,CAAM,SAAS,CAAA,EAAA,EAAK,KAAA,CAAM,KAAA,CAAM,QAAA,CAAS,EAAE,CAAC,CAAA,CAAE,CAAA,CAC7F,MAAA,CAAO,KAAK,CAAA;AACf,EAAA,OAAO,KAAK,MAAM,CAAA,CAAA;AACpB","file":"chunk-GA3O2A7R.js","sourcesContent":["/**\n * Public payment coordinates returned under `RECONCILIATION_METADATA_KEY`\n * for later reconciliation. Locators contain transfer details and derived\n * metadata, excluding signatures, payloads and transaction bytes. Field names\n * avoid \"token\" because the receipt store redacts values under such keys.\n */\nimport { getAddress } from 'viem';\n\nexport const LOCATOR_VERSION = 1;\n\n// Bound decimal input length to cover Date's range without parsing large integers\nconst SECONDS = /^\\d{1,13}$/;\nconst MAX_DATE_MS = 8.64e15;\n\n/**\n * Converts unsigned decimal Unix seconds to ISO time, or undefined for invalid\n * or out-of-range input\n */\nexport function isoFromSeconds(seconds: string): string | undefined {\n  const ms = SECONDS.test(seconds) ? Number(seconds) * 1000 : Number.NaN;\n  return ms <= MAX_DATE_MS ? new Date(ms).toISOString() : undefined;\n}\n\nexport interface Eip3009Authorization {\n  readonly from: string;\n  readonly to: string;\n  readonly value: string;\n  readonly validAfter: string;\n  readonly validBefore: string;\n  readonly nonce: string;\n}\n\n/** Builds the shared EIP-3009 locator used by x402 and MPP */\nexport function eip3009Locator(\n  network: string,\n  asset: string,\n  authorization: Eip3009Authorization,\n): Readonly<Record<string, unknown>> {\n  const { from, to, value, validAfter, validBefore, nonce } = authorization;\n  return withExpiry(\n    {\n      v: LOCATOR_VERSION,\n      network,\n      method: 'eip3009',\n      asset: getAddress(asset),\n      from: getAddress(from),\n      to: getAddress(to),\n      value,\n      nonce: nonce.toLowerCase(),\n      validAfter,\n      validBefore,\n    },\n    validBefore,\n  );\n}\n\nexport interface Permit2Transfer {\n  readonly asset: string;\n  readonly owner: string;\n  /** Recipient named in the signed witness for the x402 proxy transfer */\n  readonly to: string;\n  readonly amount: string;\n  readonly nonce: string;\n  readonly deadline: string;\n  readonly validAfter: string;\n  readonly proxy: string;\n}\n\n/** A Permit2 transfer's locator */\nexport function permit2Locator(\n  network: string,\n  transfer: Permit2Transfer,\n): Readonly<Record<string, unknown>> {\n  const { asset, owner, to, amount, nonce, deadline, validAfter, proxy } = transfer;\n  return withExpiry(\n    {\n      v: LOCATOR_VERSION,\n      network,\n      method: 'permit2',\n      asset: getAddress(asset),\n      owner: getAddress(owner),\n      to: getAddress(to),\n      amount,\n      nonce,\n      deadline,\n      validAfter,\n      proxy: getAddress(proxy),\n    },\n    deadline,\n  );\n}\n\nfunction withExpiry(\n  locator: Readonly<Record<string, unknown>>,\n  seconds: string,\n): Readonly<Record<string, unknown>> {\n  const expiresAt = isoFromSeconds(seconds);\n  return expiresAt !== undefined ? { ...locator, expiresAt } : locator;\n}\n","/**\n * `PaymentResult.replayKey` is derived from the payment authorization alone,\n * never from the request id, so the same authorization replayed on another\n * request collides in the receipt store's reservation. The MPP provider uses\n * the EIP-3009 derivation.\n */\nimport { createHash } from 'node:crypto';\nimport { PERMIT2_ADDRESS } from '@x402/evm';\nimport { encodeAbiParameters, keccak256 } from 'viem';\n\nexport interface ReplayKeyInput {\n  readonly chainId: number;\n  readonly asset: `0x${string}`;\n  readonly from: `0x${string}`;\n  readonly nonce: `0x${string}`;\n}\n\nexport function computeReplayKey(input: ReplayKeyInput): string {\n  const encoded = encodeAbiParameters(\n    [{ type: 'uint256' }, { type: 'address' }, { type: 'address' }, { type: 'bytes32' }],\n    [BigInt(input.chainId), input.asset, input.from, input.nonce],\n  );\n  return keccak256(encoded);\n}\n\n/**\n * Identifies a Permit2 authorization by chain, Permit2 contract, owner and\n * nonce. Nonces span all tokens and spenders, so asset and resource are excluded.\n * The tag separates these keys from EIP-3009 in the receipt store's unique column.\n */\nexport function computePermit2ReplayKey(input: {\n  readonly chainId: number;\n  readonly owner: `0x${string}`;\n  readonly nonce: string;\n}): string {\n  return keccak256(\n    encodeAbiParameters(\n      [\n        { type: 'string' },\n        { type: 'uint256' },\n        { type: 'address' },\n        { type: 'address' },\n        { type: 'uint256' },\n      ],\n      [\n        'x402/exact/permit2/v1',\n        BigInt(input.chainId),\n        PERMIT2_ADDRESS,\n        input.owner,\n        BigInt(input.nonce),\n      ],\n    ),\n  );\n}\n\n/**\n * Identifies a Solana `exact` payment by network and SHA-256 of the signed\n * message bytes. Excludes signatures, including the facilitator's fee payer\n * slot, so altered signatures keep the same key. `messageHash` is the SDK's\n * base64 `transactionMessageHash`.\n */\nexport function computeSvmReplayKey(input: {\n  readonly network: string;\n  readonly messageHash: string;\n}): string {\n  const digest = createHash('sha256')\n    .update('x402/exact/svm/v1\\0')\n    .update(input.network)\n    .update('\\0')\n    .update(Buffer.from(input.messageHash, 'base64'))\n    .digest('hex');\n  return `0x${digest}`;\n}\n\n/**\n * Identifies a NEAR `exact` payment by network, sender, curve-prefixed public\n * key (`ed25519:...`) and delegate nonce. Nonces are scoped per access key,\n * excluding token, recipient, relayer and signature; another key of the same\n * sender has an independent nonce scope.\n */\nexport function computeNearReplayKey(input: {\n  readonly network: string;\n  readonly senderId: string;\n  readonly publicKey: string;\n  readonly nonce: bigint;\n}): string {\n  const digest = createHash('sha256')\n    .update('x402/exact/near/v1\\0')\n    .update(`${input.network}\\0${input.senderId}\\0${input.publicKey}\\0${input.nonce.toString(10)}`)\n    .digest('hex');\n  return `0x${digest}`;\n}\n"]}

package/dist/{chunk-WZW5ORZH.js → chunk-VUCMBGUR.js}

@@ -1,4 +1,4 @@
-import { CommerceError } from './chunk-DTKU3Z2M.js';
+import { CommerceError } from './chunk-3OTCFFFT.js';
 import { existsSync, accessSync, constants, closeSync, openSync, mkdirSync, chmodSync } from 'fs';
 import { dirname } from 'path';
 import Database from 'better-sqlite3';
@@ -79,5 +79,5 @@ function restrictDatabasePermissions(path, label, logger) {
 }
 
 export { AP2_CHECKOUT_MANDATE_VCT, AP2_CHECKOUT_PROFILE, AP2_DEFAULT_CLOCK_SKEW_SECONDS, AP2_DIGEST_ALGORITHM, AP2_JWK_COORDINATE_BYTES, AP2_JWK_CURVE, AP2_JWK_MEMBERS, AP2_KEY_TYPE, AP2_MAX_CLOCK_SKEW_SECONDS, AP2_MODES, AP2_SIGNING_ALGORITHM, AP2_SPEC_VERSION, openSqliteDatabase };
-//# sourceMappingURL=chunk-WZW5ORZH.js.map
-//# sourceMappingURL=chunk-WZW5ORZH.js.map
+//# sourceMappingURL=chunk-VUCMBGUR.js.map
+//# sourceMappingURL=chunk-VUCMBGUR.js.map

package/dist/{chunk-WZW5ORZH.js.map → chunk-VUCMBGUR.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/authorization/ap2/constants.ts","../src/storage/sqlite.ts"],"names":["fsConstants"],"mappings":";;;;;;AAQO,IAAM,gBAAA,GAAmB;AAOzB,IAAM,SAAA,GAAY,CAAC,QAAQ;AAO3B,IAAM,qBAAA,GAAwB;AAG9B,IAAM,YAAA,GAAe;AACrB,IAAM,aAAA,GAAgB;AAGtB,IAAM,wBAAA,GAA2B;AAOjC,IAAM,eAAA,GAAkB,CAAC,KAAA,EAAO,KAAA,EAAO,KAAK,GAAA,EAAK,KAAA,EAAO,OAAO,KAAK;AAOpE,IAAM,wBAAA,GAA2B;AAQjC,IAAM,oBAAA,GAAuB;AAO7B,IAAM,oBAAA,GAAuB;AAG7B,IAAM,8BAAA,GAAiC;AAMvC,IAAM,0BAAA,GAA6B;ACtCnC,SAAS,mBAAmB,OAAA,EAA+C;AAChF,EAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,MAAA,EAAO,GAAI,OAAA;AAChC,EAAA,MAAM,eAAe,IAAA,KAAS,UAAA;AAE9B,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,IAAI;AACF,MAAA,eAAA,CAAgB,OAAA,CAAQ,IAAI,CAAC,CAAA;AAAA,IAC/B,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,eAAA;AAAA,QACA,CAAA,EAAG,KAAK,CAAA,YAAA,EAAe,OAAA,CAAQ,IAAI,CAAC,CAAA,qBAAA,EAAwB,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA,CAAA;AAAA,QAClH,EAAE,OAAA,EAAS,EAAE,IAAA,IAAQ,KAAA;AAAM,OAC7B;AAAA,IACF;AAAA,EACF;AAIA,EAAA,IAAI,YAAA,IAAgB,UAAA,CAAW,IAAI,CAAA,EAAG;AACpC,IAAA,IAAI;AACF,MAAA,UAAA,CAAW,IAAA,EAAMA,UAAY,IAAI,CAAA;AAAA,IACnC,CAAA,CAAA,MAAQ;AACN,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,eAAA;AAAA,QACA,CAAA,EAAG,KAAK,CAAA,EAAA,EAAK,IAAI,CAAA,kDAAA,EAAqD,OAAO,OAAA,CAAQ,MAAA,KAAW,UAAA,GAAa,OAAA,CAAQ,MAAA,EAAO,GAAI,SAAS,CAAA,4KAAA,CAAA;AAAA,QACzI,EAAE,OAAA,EAAS,EAAE,IAAA,EAAK;AAAE,OACtB;AAAA,IACF;AAAA,EACF;AAOA,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,IAAI;AACF,MAAA,SAAA,CAAU,QAAA,CAAS,IAAA,EAAM,GAAA,EAAK,GAAK,CAAC,CAAA;AAAA,IACtC,CAAA,CAAA,MAAQ;AAAA,IAGR;AAAA,EACF;AAEA,EAAA,MAAM,EAAA,GAAK,IAAI,QAAA,CAAS,IAAI,CAAA;AAC5B,EAAA,EAAA,CAAG,OAAO,oBAAoB,CAAA;AAC9B,EAAA,EAAA,CAAG,OAAO,mBAAmB,CAAA;AAC7B,EAAA,IAAI,YAAA,EAAc,2BAAA,CAA4B,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AACjE,EAAA,OAAO,EAAA;AACT;AAKA,SAAS,gBAAgB,GAAA,EAAmB;AAC1C,EAAA,IAAI,UAAA,CAAW,GAAG,CAAA,EAAG;AACrB,EAAA,MAAM,MAAA,GAAS,QAAQ,GAAG,CAAA;AAC1B,EAAA,IAAI,MAAA,KAAW,GAAA,EAAK,eAAA,CAAgB,MAAM,CAAA;AAC1C,EAAA,IAAI;AACF,IAAA,SAAA,CAAU,GAAA,EAAK,EAAE,IAAA,EAAM,GAAA,EAAO,CAAA;AAAA,EAChC,SAAS,KAAA,EAAO;AAEd,IAAA,IAAK,KAAA,CAAgC,IAAA,KAAS,QAAA,EAAU,MAAM,KAAA;AAAA,EAChE;AACF;AAWA,SAAS,2BAAA,CAA4B,IAAA,EAAc,KAAA,EAAe,MAAA,EAAsB;AACtF,EAAA,KAAA,MAAW,IAAA,IAAQ,CAAC,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,IAAA,CAAA,EAAQ,CAAA,EAAG,IAAI,CAAA,IAAA,CAAM,CAAA,EAAG;AACvD,IAAA,IAAI;AACF,MAAA,SAAA,CAAU,MAAM,GAAK,CAAA;AAAA,IACvB,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,OAAQ,KAAA,CAAgC,IAAA;AAC9C,MAAA,IAAI,SAAS,QAAA,EAAU;AACvB,MAAA,MAAA,CAAO,IAAA;AAAA,QACL,EAAE,IAAA,EAAM,KAAA,EAAO,KAAA,EAAO,QAAQ,SAAA,EAAU;AAAA,QACxC;AAAA,OACF;AAAA,IACF;AAAA,EACF;AACF","file":"chunk-WZW5ORZH.js","sourcesContent":["/**\n * Pinned AP2 identifiers and key policy.\n *\n * AP2 v0.2.0 (2026-04-28, commit b4587ac) is the tagged release this gateway\n * verifies against; unversioned `main` is never implemented against. Config,\n * the verifier and `doctor` all read these, so a bump lands in one place.\n */\n\nexport const AP2_SPEC_VERSION = '0.2.0';\n\n/**\n * Direct only. Autonomous mode needs open mandates, cnf-bound agent keys and\n * constraint evaluation over `checkout.line_items`, none of which is\n * implemented, so it is refused rather than partly served.\n */\nexport const AP2_MODES = ['direct'] as const;\nexport type Ap2Mode = (typeof AP2_MODES)[number];\n\n/**\n * A single algorithm, so `alg=none` and the HMAC family are excluded by\n * construction rather than by a denylist\n */\nexport const AP2_SIGNING_ALGORITHM = 'ES256';\n\n/** The key type and curve ES256 implies. Any other pair is refused at load */\nexport const AP2_KEY_TYPE = 'EC';\nexport const AP2_JWK_CURVE = 'P-256';\n\n/** Byte length of a P-256 coordinate, before base64url encoding */\nexport const AP2_JWK_COORDINATE_BYTES = 32;\n\n/**\n * JWK members a verification key may carry. An allowlist, so private material\n * (`d`) and URL members (`x5u`, `jku`) are refused without the list naming\n * them. Keys are configured inline and never fetched; see docs/security.md.\n */\nexport const AP2_JWK_MEMBERS = ['kty', 'crv', 'x', 'y', 'kid', 'alg', 'use'] as const;\n\n/**\n * Compared against this literal, never as a prefix. `mandate.checkout.open.1`\n * carries spending constraints nothing here evaluates, so accepting it would\n * tell a buyer their limits were checked when nothing read them.\n */\nexport const AP2_CHECKOUT_MANDATE_VCT = 'mandate.checkout.1';\n\n/**\n * Merchant checkout JWTs declare this gateway-specific profile; AP2 leaves\n * the checkout payload out of scope. The identifier is a namespace that\n * clients do not dereference. Merchants sign it into each checkout JWT, so\n * changing the expected value would reject previously signed JWTs.\n */\nexport const AP2_CHECKOUT_PROFILE = 'agent-commerce/ap2/checkout/v1';\n\n/**\n * The only accepted SD-JWT `_sd_alg` (an absent one means sha-256). Any other\n * value is refused rather than hashed as sha-256, which would check a\n * presentation under an algorithm it never claimed.\n */\nexport const AP2_DIGEST_ALGORITHM = 'sha-256';\n\n/** Seconds of clock skew tolerated on mandate and checkout time claims */\nexport const AP2_DEFAULT_CLOCK_SKEW_SECONDS = 60;\n\n/**\n * Skew as wide as a mandate's validity window would stop `exp` rejecting\n * anything. An operator who needs more than five minutes has a clock to fix.\n */\nexport const AP2_MAX_CLOCK_SKEW_SECONDS = 300;\n","/**\n * Opens a SQLite file with owner-only permissions. Every store that keeps a\n * SQLite file opens it here, so the hardening below exists once: the file is\n * pre-created at 0600, the WAL sidecars are narrowed once WAL creates them, and\n * an existing but unwritable file fails at startup.\n *\n * Callers own their schema; this function migrates nothing.\n */\nimport {\n  accessSync,\n  chmodSync,\n  closeSync,\n  existsSync,\n  constants as fsConstants,\n  mkdirSync,\n  openSync,\n} from 'node:fs';\nimport { dirname } from 'node:path';\nimport Database from 'better-sqlite3';\nimport { CommerceError, type Logger } from '../core';\n\nexport interface OpenSqliteOptions {\n  /** File path, or ':memory:' for tests. Parent directory is created if missing */\n  readonly path: string;\n  /** Names the database in operator-facing errors, e.g. \"Receipt database\" */\n  readonly label: string;\n  readonly logger: Logger;\n}\n\nexport function openSqliteDatabase(options: OpenSqliteOptions): Database.Database {\n  const { path, label, logger } = options;\n  const isFileBacked = path !== ':memory:';\n\n  if (isFileBacked) {\n    try {\n      createDirectory(dirname(path));\n    } catch (cause) {\n      throw new CommerceError(\n        'STORAGE_ERROR',\n        `${label} directory \"${dirname(path)}\" cannot be created: ${cause instanceof Error ? cause.message : String(cause)}`,\n        { details: { path }, cause },\n      );\n    }\n  }\n\n  // Check write access at startup. SQLite can open a read-only database and\n  // report the problem only when the first write is attempted.\n  if (isFileBacked && existsSync(path)) {\n    try {\n      accessSync(path, fsConstants.W_OK);\n    } catch {\n      throw new CommerceError(\n        'STORAGE_ERROR',\n        `${label} \"${path}\" exists but is not writable by this process (uid ${typeof process.getuid === 'function' ? process.getuid() : 'unknown'}). If this is a container that recently changed user, an existing volume may still be owned by the previous one - recreate it (docker compose down -v) or fix its ownership.`,\n        { details: { path } },\n      );\n    }\n  }\n\n  // Create the file at 0600 before SQLite creates it at 0644 (less the umask).\n  // A chmod afterwards is too late: a local user who opens the file in between\n  // keeps a readable descriptor across the chmod. SQLite copies the main file's\n  // mode onto the -wal/-shm sidecars, so this covers all three. `mode` applies\n  // on creation only; an existing file is left to the chmod below.\n  if (isFileBacked) {\n    try {\n      closeSync(openSync(path, 'a', 0o600));\n    } catch {\n      // Silent on purpose: `new Database` reports the same cause with a better\n      // message, or the failure is harmless and the chmod below covers it\n    }\n  }\n\n  const db = new Database(path);\n  db.pragma('journal_mode = WAL');\n  db.pragma('foreign_keys = ON');\n  if (isFileBacked) restrictDatabasePermissions(path, label, logger);\n  return db;\n}\n\n// Create missing directory levels at 0700, preserving existing modes. Explicit\n// recursion avoids the recursive mkdir hang observed on Node 24.8.0 when /proc\n// returns ENOENT for a directory it cannot create.\nfunction createDirectory(dir: string): void {\n  if (existsSync(dir)) return;\n  const parent = dirname(dir);\n  if (parent !== dir) createDirectory(parent);\n  try {\n    mkdirSync(dir, { mode: 0o700 });\n  } catch (error) {\n    // Created by someone else in the meantime\n    if ((error as NodeJS.ErrnoException).code !== 'EEXIST') throw error;\n  }\n}\n\n/**\n * Narrows the database and its WAL sidecars to owner-only. The receipt ledger\n * holds no key material, but it does hold payer and payee addresses, amounts,\n * settlement hashes, replay keys and the commerce event log.\n *\n * Runs after `journal_mode = WAL`, which creates the sidecars, and also\n * tightens a database that already existed with a looser mode. A failure only\n * warns: a filesystem without POSIX modes must not stop the gateway starting.\n */\nfunction restrictDatabasePermissions(path: string, label: string, logger: Logger): void {\n  for (const file of [path, `${path}-wal`, `${path}-shm`]) {\n    try {\n      chmodSync(file, 0o600);\n    } catch (error) {\n      const code = (error as NodeJS.ErrnoException).code;\n      if (code === 'ENOENT') continue;\n      logger.warn(\n        { file, label, error: code ?? 'unknown' },\n        'could not restrict database permissions to owner-only',\n      );\n    }\n  }\n}\n"]}
+{"version":3,"sources":["../src/authorization/ap2/constants.ts","../src/storage/sqlite.ts"],"names":["fsConstants"],"mappings":";;;;;;AAQO,IAAM,gBAAA,GAAmB;AAOzB,IAAM,SAAA,GAAY,CAAC,QAAQ;AAO3B,IAAM,qBAAA,GAAwB;AAG9B,IAAM,YAAA,GAAe;AACrB,IAAM,aAAA,GAAgB;AAGtB,IAAM,wBAAA,GAA2B;AAOjC,IAAM,eAAA,GAAkB,CAAC,KAAA,EAAO,KAAA,EAAO,KAAK,GAAA,EAAK,KAAA,EAAO,OAAO,KAAK;AAOpE,IAAM,wBAAA,GAA2B;AAQjC,IAAM,oBAAA,GAAuB;AAO7B,IAAM,oBAAA,GAAuB;AAG7B,IAAM,8BAAA,GAAiC;AAMvC,IAAM,0BAAA,GAA6B;ACtCnC,SAAS,mBAAmB,OAAA,EAA+C;AAChF,EAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,MAAA,EAAO,GAAI,OAAA;AAChC,EAAA,MAAM,eAAe,IAAA,KAAS,UAAA;AAE9B,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,IAAI;AACF,MAAA,eAAA,CAAgB,OAAA,CAAQ,IAAI,CAAC,CAAA;AAAA,IAC/B,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,eAAA;AAAA,QACA,CAAA,EAAG,KAAK,CAAA,YAAA,EAAe,OAAA,CAAQ,IAAI,CAAC,CAAA,qBAAA,EAAwB,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA,CAAA;AAAA,QAClH,EAAE,OAAA,EAAS,EAAE,IAAA,IAAQ,KAAA;AAAM,OAC7B;AAAA,IACF;AAAA,EACF;AAIA,EAAA,IAAI,YAAA,IAAgB,UAAA,CAAW,IAAI,CAAA,EAAG;AACpC,IAAA,IAAI;AACF,MAAA,UAAA,CAAW,IAAA,EAAMA,UAAY,IAAI,CAAA;AAAA,IACnC,CAAA,CAAA,MAAQ;AACN,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,eAAA;AAAA,QACA,CAAA,EAAG,KAAK,CAAA,EAAA,EAAK,IAAI,CAAA,kDAAA,EAAqD,OAAO,OAAA,CAAQ,MAAA,KAAW,UAAA,GAAa,OAAA,CAAQ,MAAA,EAAO,GAAI,SAAS,CAAA,4KAAA,CAAA;AAAA,QACzI,EAAE,OAAA,EAAS,EAAE,IAAA,EAAK;AAAE,OACtB;AAAA,IACF;AAAA,EACF;AAOA,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,IAAI;AACF,MAAA,SAAA,CAAU,QAAA,CAAS,IAAA,EAAM,GAAA,EAAK,GAAK,CAAC,CAAA;AAAA,IACtC,CAAA,CAAA,MAAQ;AAAA,IAGR;AAAA,EACF;AAEA,EAAA,MAAM,EAAA,GAAK,IAAI,QAAA,CAAS,IAAI,CAAA;AAC5B,EAAA,EAAA,CAAG,OAAO,oBAAoB,CAAA;AAC9B,EAAA,EAAA,CAAG,OAAO,mBAAmB,CAAA;AAC7B,EAAA,IAAI,YAAA,EAAc,2BAAA,CAA4B,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AACjE,EAAA,OAAO,EAAA;AACT;AAKA,SAAS,gBAAgB,GAAA,EAAmB;AAC1C,EAAA,IAAI,UAAA,CAAW,GAAG,CAAA,EAAG;AACrB,EAAA,MAAM,MAAA,GAAS,QAAQ,GAAG,CAAA;AAC1B,EAAA,IAAI,MAAA,KAAW,GAAA,EAAK,eAAA,CAAgB,MAAM,CAAA;AAC1C,EAAA,IAAI;AACF,IAAA,SAAA,CAAU,GAAA,EAAK,EAAE,IAAA,EAAM,GAAA,EAAO,CAAA;AAAA,EAChC,SAAS,KAAA,EAAO;AAEd,IAAA,IAAK,KAAA,CAAgC,IAAA,KAAS,QAAA,EAAU,MAAM,KAAA;AAAA,EAChE;AACF;AAWA,SAAS,2BAAA,CAA4B,IAAA,EAAc,KAAA,EAAe,MAAA,EAAsB;AACtF,EAAA,KAAA,MAAW,IAAA,IAAQ,CAAC,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,IAAA,CAAA,EAAQ,CAAA,EAAG,IAAI,CAAA,IAAA,CAAM,CAAA,EAAG;AACvD,IAAA,IAAI;AACF,MAAA,SAAA,CAAU,MAAM,GAAK,CAAA;AAAA,IACvB,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,OAAQ,KAAA,CAAgC,IAAA;AAC9C,MAAA,IAAI,SAAS,QAAA,EAAU;AACvB,MAAA,MAAA,CAAO,IAAA;AAAA,QACL,EAAE,IAAA,EAAM,KAAA,EAAO,KAAA,EAAO,QAAQ,SAAA,EAAU;AAAA,QACxC;AAAA,OACF;AAAA,IACF;AAAA,EACF;AACF","file":"chunk-VUCMBGUR.js","sourcesContent":["/**\n * Pinned AP2 identifiers and key policy.\n *\n * AP2 v0.2.0 (2026-04-28, commit b4587ac) is the tagged release this gateway\n * verifies against; unversioned `main` is never implemented against. Config,\n * the verifier and `doctor` all read these, so a bump lands in one place.\n */\n\nexport const AP2_SPEC_VERSION = '0.2.0';\n\n/**\n * Direct only. Autonomous mode needs open mandates, cnf-bound agent keys and\n * constraint evaluation over `checkout.line_items`, none of which is\n * implemented, so it is refused rather than partly served.\n */\nexport const AP2_MODES = ['direct'] as const;\nexport type Ap2Mode = (typeof AP2_MODES)[number];\n\n/**\n * A single algorithm, so `alg=none` and the HMAC family are excluded by\n * construction rather than by a denylist\n */\nexport const AP2_SIGNING_ALGORITHM = 'ES256';\n\n/** The key type and curve ES256 implies. Any other pair is refused at load */\nexport const AP2_KEY_TYPE = 'EC';\nexport const AP2_JWK_CURVE = 'P-256';\n\n/** Byte length of a P-256 coordinate, before base64url encoding */\nexport const AP2_JWK_COORDINATE_BYTES = 32;\n\n/**\n * JWK members a verification key may carry. An allowlist, so private material\n * (`d`) and URL members (`x5u`, `jku`) are refused without the list naming\n * them. Keys are configured inline and never fetched; see docs/security.md.\n */\nexport const AP2_JWK_MEMBERS = ['kty', 'crv', 'x', 'y', 'kid', 'alg', 'use'] as const;\n\n/**\n * Compared against this literal, never as a prefix. `mandate.checkout.open.1`\n * carries spending constraints nothing here evaluates, so accepting it would\n * tell a buyer their limits were checked when nothing read them.\n */\nexport const AP2_CHECKOUT_MANDATE_VCT = 'mandate.checkout.1';\n\n/**\n * Merchant checkout JWTs declare this gateway-specific profile; AP2 leaves\n * the checkout payload out of scope. The identifier is a namespace that\n * clients do not dereference. Merchants sign it into each checkout JWT, so\n * changing the expected value would reject previously signed JWTs.\n */\nexport const AP2_CHECKOUT_PROFILE = 'agent-commerce/ap2/checkout/v1';\n\n/**\n * The only accepted SD-JWT `_sd_alg` (an absent one means sha-256). Any other\n * value is refused rather than hashed as sha-256, which would check a\n * presentation under an algorithm it never claimed.\n */\nexport const AP2_DIGEST_ALGORITHM = 'sha-256';\n\n/** Seconds of clock skew tolerated on mandate and checkout time claims */\nexport const AP2_DEFAULT_CLOCK_SKEW_SECONDS = 60;\n\n/**\n * Skew as wide as a mandate's validity window would stop `exp` rejecting\n * anything. An operator who needs more than five minutes has a clock to fix.\n */\nexport const AP2_MAX_CLOCK_SKEW_SECONDS = 300;\n","/**\n * Opens a SQLite file with owner-only permissions. Every store that keeps a\n * SQLite file opens it here, so the hardening below exists once: the file is\n * pre-created at 0600, the WAL sidecars are narrowed once WAL creates them, and\n * an existing but unwritable file fails at startup.\n *\n * Callers own their schema; this function migrates nothing.\n */\nimport {\n  accessSync,\n  chmodSync,\n  closeSync,\n  existsSync,\n  constants as fsConstants,\n  mkdirSync,\n  openSync,\n} from 'node:fs';\nimport { dirname } from 'node:path';\nimport Database from 'better-sqlite3';\nimport { CommerceError, type Logger } from '../core';\n\nexport interface OpenSqliteOptions {\n  /** File path, or ':memory:' for tests. Parent directory is created if missing */\n  readonly path: string;\n  /** Names the database in operator-facing errors, e.g. \"Receipt database\" */\n  readonly label: string;\n  readonly logger: Logger;\n}\n\nexport function openSqliteDatabase(options: OpenSqliteOptions): Database.Database {\n  const { path, label, logger } = options;\n  const isFileBacked = path !== ':memory:';\n\n  if (isFileBacked) {\n    try {\n      createDirectory(dirname(path));\n    } catch (cause) {\n      throw new CommerceError(\n        'STORAGE_ERROR',\n        `${label} directory \"${dirname(path)}\" cannot be created: ${cause instanceof Error ? cause.message : String(cause)}`,\n        { details: { path }, cause },\n      );\n    }\n  }\n\n  // Check write access at startup. SQLite can open a read-only database and\n  // report the problem only when the first write is attempted.\n  if (isFileBacked && existsSync(path)) {\n    try {\n      accessSync(path, fsConstants.W_OK);\n    } catch {\n      throw new CommerceError(\n        'STORAGE_ERROR',\n        `${label} \"${path}\" exists but is not writable by this process (uid ${typeof process.getuid === 'function' ? process.getuid() : 'unknown'}). If this is a container that recently changed user, an existing volume may still be owned by the previous one - recreate it (docker compose down -v) or fix its ownership.`,\n        { details: { path } },\n      );\n    }\n  }\n\n  // Create the file at 0600 before SQLite creates it at 0644 (less the umask).\n  // A chmod afterwards is too late: a local user who opens the file in between\n  // keeps a readable descriptor across the chmod. SQLite copies the main file's\n  // mode onto the -wal/-shm sidecars, so this covers all three. `mode` applies\n  // on creation only; an existing file is left to the chmod below.\n  if (isFileBacked) {\n    try {\n      closeSync(openSync(path, 'a', 0o600));\n    } catch {\n      // Silent on purpose: `new Database` reports the same cause with a better\n      // message, or the failure is harmless and the chmod below covers it\n    }\n  }\n\n  const db = new Database(path);\n  db.pragma('journal_mode = WAL');\n  db.pragma('foreign_keys = ON');\n  if (isFileBacked) restrictDatabasePermissions(path, label, logger);\n  return db;\n}\n\n// Create missing directory levels at 0700, preserving existing modes. Explicit\n// recursion avoids the recursive mkdir hang observed on Node 24.8.0 when /proc\n// returns ENOENT for a directory it cannot create.\nfunction createDirectory(dir: string): void {\n  if (existsSync(dir)) return;\n  const parent = dirname(dir);\n  if (parent !== dir) createDirectory(parent);\n  try {\n    mkdirSync(dir, { mode: 0o700 });\n  } catch (error) {\n    // Created by someone else in the meantime\n    if ((error as NodeJS.ErrnoException).code !== 'EEXIST') throw error;\n  }\n}\n\n/**\n * Narrows the database and its WAL sidecars to owner-only. The receipt ledger\n * holds no key material, but it does hold payer and payee addresses, amounts,\n * settlement hashes, replay keys and the commerce event log.\n *\n * Runs after `journal_mode = WAL`, which creates the sidecars, and also\n * tightens a database that already existed with a looser mode. A failure only\n * warns: a filesystem without POSIX modes must not stop the gateway starting.\n */\nfunction restrictDatabasePermissions(path: string, label: string, logger: Logger): void {\n  for (const file of [path, `${path}-wal`, `${path}-shm`]) {\n    try {\n      chmodSync(file, 0o600);\n    } catch (error) {\n      const code = (error as NodeJS.ErrnoException).code;\n      if (code === 'ENOENT') continue;\n      logger.warn(\n        { file, label, error: code ?? 'unknown' },\n        'could not restrict database permissions to owner-only',\n      );\n    }\n  }\n}\n"]}

package/dist/cli/{ap2-GWSP4LYY.js → ap2-YAPLERSC.js}

@@ -1,10 +1,11 @@
 import { buildAp2Descriptor } from './chunk-3EQBCFZY.js';
 export { AP2_CAPABILITIES, AP2_UNSUPPORTED, buildAp2Descriptor } from './chunk-3EQBCFZY.js';
-import { openSqliteDatabase } from './chunk-3MGAJ5FX.js';
+import { openSqliteDatabase } from './chunk-VJ4EO4LE.js';
 import { AP2_CHECKOUT_PROFILE, AP2_SIGNING_ALGORITHM, AP2_SPEC_VERSION, AP2_KEY_TYPE, AP2_JWK_CURVE, AP2_DIGEST_ALGORITHM, AP2_CHECKOUT_MANDATE_VCT } from './chunk-FHCFR2GS.js';
 export { AP2_CHECKOUT_MANDATE_VCT, AP2_CHECKOUT_PROFILE, AP2_DEFAULT_CLOCK_SKEW_SECONDS, AP2_DIGEST_ALGORITHM, AP2_MAX_CLOCK_SKEW_SECONDS, AP2_MODES, AP2_SIGNING_ALGORITHM, AP2_SPEC_VERSION } from './chunk-FHCFR2GS.js';
-import { PACKAGE_VERSION } from './chunk-ITWNSS2B.js';
-import { NOOP_LOGGER, systemClock, CommerceError } from './chunk-QQ3WY5L3.js';
+import { PACKAGE_VERSION } from './chunk-M7NXVRU5.js';
+import { NOOP_LOGGER, systemClock } from './chunk-IDY2735M.js';
+import { CommerceError } from './chunk-SYQLJXIU.js';
 import { isRecord } from './chunk-3M6U7ILB.js';
 import { SignJWT, importPKCS8, importJWK, jwtVerify, decodeProtectedHeader, decodeJwt } from 'jose';
 import canonicalize from 'canonicalize';
@@ -232,7 +233,11 @@ function createAp2ReplayStore(options) {
   );
   const transition = db.prepare(
     `UPDATE ap2_authorizations SET state = @state, updated_at = @at
-      WHERE reference = @reference AND state = 'reserved'`
+      WHERE reference = @reference AND state IN ('reserved', 'uncertain')
+        AND (@request_id IS NULL OR request_id = @request_id)`
+  );
+  const selectHolder = db.prepare(
+    "SELECT state, request_id FROM ap2_authorizations WHERE reference = ?"
   );
   const reserveTx = db.transaction((request) => {
     const at = new Date(now()).toISOString();
@@ -259,22 +264,32 @@ function createAp2ReplayStore(options) {
     });
     return { kind: "reserved" };
   });
-  const move = (reference, state) => {
-    transition.run({ reference, state, at: new Date(now()).toISOString() });
+  const move = (reference, state, requestId) => {
+    const { changes } = transition.run({
+      reference,
+      state,
+      request_id: requestId ?? null,
+      at: new Date(now()).toISOString()
+    });
+    if (changes > 0) return true;
+    const row = selectHolder.get(reference);
+    if (row === void 0) return false;
+    if (requestId !== void 0 && row.request_id !== requestId) return state === "released";
+    return row.state === state;
   };
   let closed = false;
   return {
     reserve(request) {
       return reserveTx(request);
     },
-    consume(reference) {
-      move(reference, "consumed");
+    consume(reference, requestId) {
+      return move(reference, "consumed", requestId);
     },
-    release(reference) {
-      move(reference, "released");
+    release(reference, requestId) {
+      return move(reference, "released", requestId);
     },
-    markUncertain(reference) {
-      move(reference, "uncertain");
+    markUncertain(reference, requestId) {
+      return move(reference, "uncertain", requestId);
     },
     stateOf(reference) {
       return selectByReference.get(reference)?.state;
@@ -626,11 +641,15 @@ function createAp2AuthorizationProvider(options) {
     };
   }
   const finalize = (action, reservationId, context) => {
+    let applied;
     try {
-      replay[action](reservationId);
+      applied = replay[action](reservationId, context.requestId);
     } catch (cause) {
       throw ap2Unavailable(`replay store could not record ${action}`, { ...context, cause });
     }
+    if (applied === false) {
+      throw ap2Unavailable(`replay store holds no matching reservation to ${action}`, context);
+    }
   };
   return {
     name: "ap2",
@@ -674,5 +693,5 @@ function createAp2AuthorizationProvider(options) {
 }
 
 export { AP2_REJECTION_REASONS, createAp2AuthorizationProvider, createAp2ReplayStore, createCheckoutJwt };
-//# sourceMappingURL=ap2-GWSP4LYY.js.map
-//# sourceMappingURL=ap2-GWSP4LYY.js.map
+//# sourceMappingURL=ap2-YAPLERSC.js.map
+//# sourceMappingURL=ap2-YAPLERSC.js.map

package/dist/cli/ap2-YAPLERSC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/authorization/ap2/errors.ts","../../src/authorization/ap2/sha256.ts","../../src/authorization/ap2/profile.ts","../../src/authorization/ap2/checkout-signer.ts","../../src/authorization/ap2/replay-store.ts","../../src/authorization/ap2/checkout-jwt.ts","../../src/authorization/ap2/sd-jwt.ts","../../src/authorization/ap2/trust.ts","../../src/authorization/ap2/verifier.ts","../../src/authorization/ap2/provider.ts"],"names":["jwtVerify"],"mappings":";;;;;;;;;;;;;;;AAqBO,IAAM,qBAAA,GAAwB;AAAA,EACnC,wBAAA;AAAA,EACA,kBAAA;AAAA,EACA,aAAA;AAAA,EACA,mBAAA;AAAA,EACA,gBAAA;AAAA,EACA,SAAA;AAAA,EACA,gBAAA;AAAA,EACA,0BAAA;AAAA,EACA,yBAAA;AAAA,EACA;AACF;AAIA,IAAM,QAAA,GAAyD;AAAA,EAC7D,sBAAA,EAAwB,6DAAA;AAAA,EACxB,gBAAA,EAAkB,iEAAA;AAAA,EAClB,WAAA,EAAa,+DAAA;AAAA,EACb,iBAAA,EAAmB,uCAAA;AAAA,EACnB,cAAA,EAAgB,+DAAA;AAAA,EAChB,OAAA,EAAS,0CAAA;AAAA,EACT,cAAA,EAAgB,mDAAA;AAAA,EAChB,wBAAA,EAA0B,sDAAA;AAAA,EAC1B,uBAAA,EAAyB,qEAAA;AAAA,EACzB,iBAAA,EAAmB;AACrB,CAAA;AASO,SAAS,WAAA,CACd,MAAA,EACA,OAAA,GAA2B,EAAC,EACb;AACf,EAAA,OAAO,IAAI,aAAA,CAAc,uBAAA,EAAyB,QAAA,CAAS,MAAM,CAAA,EAAG;AAAA,IAClE,OAAA,EAAS,EAAE,MAAA,EAAQ,KAAA,EAAO,MAAA,EAAO;AAAA,IACjC,GAAI,QAAQ,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,EAAW,OAAA,CAAQ,SAAA,EAAU,GAAI,EAAC;AAAA,IAC1E,GAAI,QAAQ,UAAA,KAAe,MAAA,GAAY,EAAE,UAAA,EAAY,OAAA,CAAQ,UAAA,EAAW,GAAI,EAAC;AAAA,IAC7E,GAAI,QAAQ,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,OAAA,CAAQ,KAAA,EAAM,GAAI;AAAC,GAC/D,CAAA;AACH;AAMO,SAAS,WAAA,CAAY,KAAA,EAAe,OAAA,GAA2B,EAAC,EAAkB;AACvF,EAAA,OAAO,IAAI,aAAA;AAAA,IACT,wBAAA;AAAA,IACA,gFAAA;AAAA,IACA;AAAA,MACE,SAAS,EAAE,MAAA,EAAQ,KAAA,EAAO,MAAA,EAAQ,YAAY,KAAA,EAAM;AAAA,MACpD,GAAI,QAAQ,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,EAAW,OAAA,CAAQ,SAAA,EAAU,GAAI,EAAC;AAAA,MAC1E,GAAI,QAAQ,UAAA,KAAe,MAAA,GAAY,EAAE,UAAA,EAAY,OAAA,CAAQ,UAAA,EAAW,GAAI;AAAC;AAC/E,GACF;AACF;AAMO,SAAS,cAAA,CAAe,MAAA,EAAgB,OAAA,GAA2B,EAAC,EAAkB;AAC3F,EAAA,OAAO,IAAI,aAAA;AAAA,IACT,oCAAA;AAAA,IACA,yHAAA;AAAA,IACA;AAAA,MACE,SAAS,EAAE,MAAA,EAAQ,KAAA,EAAO,MAAA,EAAQ,wBAAwB,MAAA,EAAO;AAAA,MACjE,GAAI,QAAQ,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,EAAW,OAAA,CAAQ,SAAA,EAAU,GAAI,EAAC;AAAA,MAC1E,GAAI,QAAQ,UAAA,KAAe,MAAA,GAAY,EAAE,UAAA,EAAY,OAAA,CAAQ,UAAA,EAAW,GAAI,EAAC;AAAA,MAC7E,GAAI,QAAQ,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,OAAA,CAAQ,KAAA,EAAM,GAAI;AAAC;AAChE,GACF;AACF;AChGO,SAAS,OAAO,IAAA,EAAmC;AACxD,EAAA,OAAO,WAAW,QAAQ,CAAA,CAAE,MAAA,CAAO,IAAI,EAAE,MAAA,EAAO;AAClD;;;ACeA,IAAM,uBAAA,GAA0B;AAAA,EAC9B,SAAA;AAAA,EACA,aAAA;AAAA,EACA,YAAA;AAAA,EACA,QAAA;AAAA,EACA,UAAA;AAAA,EACA;AACF,CAAA;AAgBO,SAAS,iBAAiB,KAAA,EAAwB;AACvD,EAAA,MAAM,SAAA,GAAY,YAAA,CAAa,KAAA,IAAS,EAAE,CAAA;AAI1C,EAAA,IAAI,cAAc,MAAA,EAAW;AAC3B,IAAA,MAAM,IAAI,aAAA,CAAc,gBAAA,EAAkB,4CAA4C,CAAA;AAAA,EACxF;AACA,EAAA,OAAO,MAAA,CAAO,SAAS,CAAA,CAAE,QAAA,CAAS,WAAW,CAAA;AAC/C;AAEA,IAAM,WAAA,GAAc,mBAAA;AAIpB,SAAS,cAAA,CAAe,UAAmB,QAAA,EAAuC;AAChF,EAAA,IAAI,OAAO,QAAA,KAAa,QAAA,IAAY,QAAA,KAAa,MAAA,EAAW;AAC1D,IAAA,IAAI,YAAY,IAAA,CAAK,QAAQ,KAAK,WAAA,CAAY,IAAA,CAAK,QAAQ,CAAA,EAAG;AAC5D,MAAA,OAAO,QAAA,CAAS,WAAA,EAAY,KAAM,QAAA,CAAS,WAAA,EAAY;AAAA,IACzD;AAAA,EACF;AACA,EAAA,OAAO,QAAA,KAAa,QAAA;AACtB;AAOA,eAAsB,qBAAA,CACpB,OAAA,EACA,OAAA,EACA,YAAA,EACe;AACf,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,cAAA,CAAe,gBAAgB,CAAA;AACvD,EAAA,IAAI,CAAC,QAAA,CAAS,OAAO,GAAG,MAAM,WAAA,CAAY,qBAAqB,YAAY,CAAA;AAE3E,EAAA,KAAA,MAAW,SAAS,uBAAA,EAAyB;AAC3C,IAAA,MAAM,KAAA,GAAQ,QAAQ,KAAK,CAAA;AAC3B,IAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,CAAM,WAAW,CAAA,EAAG;AACnD,MAAA,MAAM,WAAA,CAAY,qBAAqB,YAAY,CAAA;AAAA,IACrD;AAAA,EACF;AAEA,EAAA,MAAM,cAAc,OAAA,CAAQ,WAAA;AAC5B,EAAA,MAAM,iBAAA,GAAoB,gBAAA,CAAiB,OAAA,CAAQ,KAAK,CAAA;AAExD,EAAA,MAAM,SAAA,GAAqD;AAAA,IACzD,CAAC,WAAW,oBAAoB,CAAA;AAAA,IAChC,CAAC,aAAA,EAAe,OAAA,CAAQ,UAAU,CAAA;AAAA,IAClC,CAAC,cAAc,iBAAiB,CAAA;AAAA;AAAA;AAAA,IAGhC,CAAC,QAAA,EAAU,WAAA,CAAY,MAAM,CAAA;AAAA,IAC7B,CAAC,UAAA,EAAY,WAAA,CAAY,QAAQ,CAAA;AAAA,IACjC,CAAC,gBAAA,EAAkB,WAAA,CAAY,QAAQ;AAAA,GACzC;AAEA,EAAA,KAAA,MAAW,CAAC,KAAA,EAAO,QAAQ,CAAA,IAAK,SAAA,EAAW;AACzC,IAAA,IAAI,QAAQ,KAAK,CAAA,KAAM,UAAU,MAAM,WAAA,CAAY,qBAAqB,YAAY,CAAA;AAAA,EACtF;AAKA,EAAA,KAAA,MAAW,CAAC,KAAA,EAAO,QAAQ,CAAA,IAAK;AAAA,IAC9B,CAAC,aAAA,EAAe,WAAA,CAAY,WAAW,CAAA;AAAA,IACvC,CAAC,SAAA,EAAW,WAAA,CAAY,OAAO,CAAA;AAAA,IAC/B,CAAC,OAAA,EAAS,WAAA,CAAY,KAAK;AAAA,GAC7B,EAAY;AACV,IAAA,MAAM,QAAA,GAAW,QAAQ,KAAK,CAAA;AAC9B,IAAA,IAAI,QAAA,KAAa,MAAA,IAAa,QAAA,KAAa,MAAA,EAAW;AACtD,IAAA,IAAI,CAAC,eAAe,QAAA,EAAU,QAAQ,GAAG,MAAM,WAAA,CAAY,qBAAqB,YAAY,CAAA;AAAA,EAC9F;AACF;;;AC/CA,IAAM,0BAAA,GAA6B,GAAA;AAEnC,SAAS,WAAA,CAAY,OAAgB,KAAA,EAAuB;AAC1D,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,CAAM,WAAW,CAAA,EAAG;AACnD,IAAA,MAAM,IAAI,SAAA;AAAA,MACR,CAAA,mBAAA,EAAsB,KAAK,CAAA,sCAAA,EAAyC,QAAA,CAAS,KAAK,CAAC,CAAA;AAAA,KACrF;AAAA,EACF;AACA,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,SAAS,KAAA,EAAwB;AACxC,EAAA,OAAO,KAAA,KAAU,IAAA,GAAO,MAAA,GAAS,OAAO,KAAA;AAC1C;AAOA,eAAe,WACb,GAAA,EACwD;AACxD,EAAA,IAAI,OAAO,QAAQ,QAAA,EAAU;AAC3B,IAAA,IAAI,CAAC,GAAA,CAAI,QAAA,CAAS,mBAAmB,CAAA,EAAG;AACtC,MAAA,MAAM,IAAI,SAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAO,WAAA,CAAY,KAAK,qBAAqB,CAAA;AAAA,EAC/C;AACA,EAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,IAAY,GAAA,KAAQ,IAAA,EAAM;AAC3C,IAAA,MAAM,IAAI,UAAU,qEAAqE,CAAA;AAAA,EAC3F;AACA,EAAA,IAAI,GAAA,CAAI,GAAG,CAAA,KAAM,MAAA,EAAW;AAC1B,IAAA,MAAM,IAAI,SAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AACA,EAAA,IAAI,IAAI,KAAK,CAAA,KAAM,gBAAgB,GAAA,CAAI,KAAK,MAAM,aAAA,EAAe;AAC/D,IAAA,MAAM,IAAI,SAAA;AAAA,MACR,CAAA,sCAAA,EAAyC,YAAY,CAAA,CAAA,EAAI,aAAa,cAAc,qBAAqB,CAAA,QAAA;AAAA,KAC3G;AAAA,EACF;AACA,EAAA,OAAO,GAAA;AACT;AAMA,eAAsB,kBAAkB,OAAA,EAAoD;AAC1F,EAAA,MAAM,GAAA,GAAM,WAAA,CAAY,OAAA,CAAQ,GAAA,EAAK,KAAK,CAAA;AAC1C,EAAA,MAAM,MAAA,GAAS,WAAA,CAAY,OAAA,CAAQ,MAAA,EAAQ,QAAQ,CAAA;AACnD,EAAA,MAAM,QAAA,GAAW,WAAA,CAAY,OAAA,CAAQ,QAAA,EAAU,UAAU,CAAA;AACzD,EAAA,MAAM,UAAA,GAAa,WAAA,CAAY,OAAA,CAAQ,UAAA,EAAY,YAAY,CAAA;AAC/D,EAAA,MAAM,QAAA,GAAW,WAAA,CAAY,OAAA,CAAQ,QAAA,EAAU,UAAU,CAAA;AACzD,EAAA,MAAM,aAAA,GAAgB,WAAA,CAAY,OAAA,CAAQ,aAAA,EAAe,eAAe,CAAA;AAExE,EAAA,IAAI,OAAO,OAAA,CAAQ,MAAA,KAAW,QAAA,EAAU;AACtC,IAAA,MAAM,IAAI,SAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AACA,EAAA,MAAM,MAAA,GAAS,WAAA,CAAY,OAAA,CAAQ,MAAA,EAAQ,QAAQ,CAAA;AAEnD,EAAA,MAAM,GAAA,GAAM,MAAM,UAAA,CAAW,OAAA,CAAQ,UAAU,CAAA;AAC/C,EAAA,MAAM,QAAA,GAAW,IAAA,CAAK,KAAA,CAAA,CAAO,OAAA,CAAQ,GAAA,wBAAW,IAAA,EAAK,EAAG,OAAA,EAAQ,GAAI,GAAI,CAAA;AACxE,EAAA,MAAM,SAAA,GAAY,QAAQ,gBAAA,IAAoB,0BAAA;AAC9C,EAAA,IAAI,CAAC,MAAA,CAAO,SAAA,CAAU,SAAS,CAAA,IAAK,aAAa,CAAA,EAAG;AAClD,IAAA,MAAM,IAAI,UAAU,qEAAqE,CAAA;AAAA,EAC3F;AAEA,EAAA,MAAM,aAAA,GAAwC;AAAA,IAC5C,OAAA,EAAS,oBAAA;AAAA,IACT,WAAA,EAAa,UAAA;AAAA,IACb,UAAA,EAAY,gBAAA,CAAiB,OAAA,CAAQ,KAAK,CAAA;AAAA,IAC1C,MAAA;AAAA,IACA,QAAA;AAAA,IACA,cAAA,EAAgB,aAAA;AAAA,IAChB,GAAI,QAAQ,WAAA,KAAgB,MAAA,GAAY,EAAE,WAAA,EAAa,OAAA,CAAQ,WAAA,EAAY,GAAI,EAAC;AAAA,IAChF,GAAI,QAAQ,OAAA,KAAY,MAAA,GAAY,EAAE,OAAA,EAAS,OAAA,CAAQ,OAAA,EAAQ,GAAI,EAAC;AAAA,IACpE,GAAI,QAAQ,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,OAAA,CAAQ,KAAA,EAAM,GAAI;AAAC,GAChE;AAEA,EAAA,OAAO,IAAI,OAAA,CAAQ,EAAE,cAAA,EAAgB,aAAA,EAAe,CAAA,CACjD,kBAAA,CAAmB,EAAE,GAAA,EAAK,uBAAuB,GAAA,EAAK,GAAA,EAAK,KAAA,EAAO,EAClE,SAAA,CAAU,MAAM,CAAA,CAChB,WAAA,CAAY,QAAQ,CAAA,CACpB,WAAA,CAAY,QAAQ,CAAA,CACpB,kBAAkB,QAAA,GAAW,SAAS,CAAA,CACtC,MAAA,CAAO,QAAQ,KAAA,IAAS,MAAA,CAAO,YAAY,CAAA,CAC3C,KAAK,GAAG,CAAA;AACb;;;ACtEO,SAAS,qBAAqB,OAAA,EAAgD;AACnF,EAAA,MAAM,MAAA,GAAS,QAAQ,MAAA,IAAU,WAAA;AACjC,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,KAAQ,MAAM,KAAK,GAAA,EAAI,CAAA;AAE3C,EAAA,MAAM,KAAe,kBAAA,CAAmB;AAAA,IACtC,MAAM,OAAA,CAAQ,IAAA;AAAA,IACd,KAAA,EAAO,4BAAA;AAAA,IACP;AAAA,GACD,CAAA;AACD,EAAA,OAAA,CAAQ,EAAE,CAAA;AAEV,EAAA,MAAM,oBAAoB,EAAA,CAAG,OAAA;AAAA,IAC3B;AAAA,GACF;AAGA,EAAA,MAAM,kBAAkB,EAAA,CAAG,OAAA;AAAA,IACzB,CAAA;AAAA,uEAAA;AAAA,GAEF;AACA,EAAA,MAAM,SAAS,EAAA,CAAG,OAAA;AAAA,IAChB,CAAA;AAAA;AAAA;AAAA;AAAA,+CAAA;AAAA,GAKF;AACA,EAAA,MAAM,YAAY,EAAA,CAAG,OAAA;AAAA,IACnB,CAAA;AAAA;AAAA,yDAAA;AAAA,GAGF;AAKA,EAAA,MAAM,aAAa,EAAA,CAAG,OAAA;AAAA,IACpB,CAAA;AAAA;AAAA,6DAAA;AAAA,GAGF;AACA,EAAA,MAAM,eAAe,EAAA,CAAG,OAAA;AAAA,IACtB;AAAA,GACF;AAEA,EAAA,MAAM,SAAA,GAAY,EAAA,CAAG,WAAA,CAAY,CAAC,OAAA,KAAyD;AACzF,IAAA,MAAM,KAAK,IAAI,IAAA,CAAK,GAAA,EAAK,EAAE,WAAA,EAAY;AAEvC,IAAA,MAAM,QAAA,GAAW,iBAAA,CAAkB,GAAA,CAAI,OAAA,CAAQ,SAAS,CAAA;AACxD,IAAA,IAAI,QAAA,KAAa,MAAA,IAAa,QAAA,CAAS,KAAA,KAAU,UAAA,EAAY;AAC3D,MAAA,OAAO,EAAE,IAAA,EAAM,UAAA,EAAY,KAAA,EAAO,SAAS,KAAA,EAA+B;AAAA,IAC5E;AAIA,IAAA,MAAM,eAAe,eAAA,CAAgB,GAAA,CAAI,OAAA,CAAQ,WAAA,EAAa,QAAQ,SAAS,CAAA;AAC/E,IAAA,IAAI,iBAAiB,MAAA,EAAW;AAC9B,MAAA,OAAO,EAAE,IAAA,EAAM,UAAA,EAAY,KAAA,EAAO,aAAa,KAAA,EAA+B;AAAA,IAChF;AAEA,IAAA,IAAI,aAAa,MAAA,EAAW;AAC1B,MAAA,SAAA,CAAU,GAAA,CAAI,EAAE,SAAA,EAAW,OAAA,CAAQ,WAAW,UAAA,EAAY,OAAA,CAAQ,SAAA,EAAW,EAAA,EAAI,CAAA;AACjF,MAAA,OAAO,EAAE,MAAM,UAAA,EAAW;AAAA,IAC5B;AAEA,IAAA,MAAA,CAAO,GAAA,CAAI;AAAA,MACT,WAAW,OAAA,CAAQ,SAAA;AAAA,MACnB,cAAc,OAAA,CAAQ,WAAA;AAAA,MACtB,gBAAgB,OAAA,CAAQ,aAAA;AAAA,MACxB,iBAAiB,OAAA,CAAQ,cAAA;AAAA,MACzB,aAAa,OAAA,CAAQ,UAAA;AAAA,MACrB,YAAY,OAAA,CAAQ,SAAA;AAAA,MACpB;AAAA,KACD,CAAA;AACD,IAAA,OAAO,EAAE,MAAM,UAAA,EAAW;AAAA,EAC5B,CAAC,CAAA;AAED,EAAA,MAAM,IAAA,GAAO,CAAC,SAAA,EAAmB,KAAA,EAA8B,SAAA,KAAgC;AAC7F,IAAA,MAAM,EAAE,OAAA,EAAQ,GAAI,UAAA,CAAW,GAAA,CAAI;AAAA,MACjC,SAAA;AAAA,MACA,KAAA;AAAA,MACA,YAAY,SAAA,IAAa,IAAA;AAAA,MACzB,IAAI,IAAI,IAAA,CAAK,GAAA,EAAK,EAAE,WAAA;AAAY,KACjC,CAAA;AACD,IAAA,IAAI,OAAA,GAAU,GAAG,OAAO,IAAA;AACxB,IAAA,MAAM,GAAA,GAAM,YAAA,CAAa,GAAA,CAAI,SAAS,CAAA;AACtC,IAAA,IAAI,GAAA,KAAQ,QAAW,OAAO,KAAA;AAG9B,IAAA,IAAI,cAAc,MAAA,IAAa,GAAA,CAAI,UAAA,KAAe,SAAA,SAAkB,KAAA,KAAU,UAAA;AAC9E,IAAA,OAAO,IAAI,KAAA,KAAU,KAAA;AAAA,EACvB,CAAA;AAEA,EAAA,IAAI,MAAA,GAAS,KAAA;AACb,EAAA,OAAO;AAAA,IACL,QAAQ,OAAA,EAAS;AACf,MAAA,OAAO,UAAU,OAAO,CAAA;AAAA,IAC1B,CAAA;AAAA,IACA,OAAA,CAAQ,WAAW,SAAA,EAAW;AAC5B,MAAA,OAAO,IAAA,CAAK,SAAA,EAAW,UAAA,EAAY,SAAS,CAAA;AAAA,IAC9C,CAAA;AAAA,IACA,OAAA,CAAQ,WAAW,SAAA,EAAW;AAC5B,MAAA,OAAO,IAAA,CAAK,SAAA,EAAW,UAAA,EAAY,SAAS,CAAA;AAAA,IAC9C,CAAA;AAAA,IACA,aAAA,CAAc,WAAW,SAAA,EAAW;AAClC,MAAA,OAAO,IAAA,CAAK,SAAA,EAAW,WAAA,EAAa,SAAS,CAAA;AAAA,IAC/C,CAAA;AAAA,IACA,QAAQ,SAAA,EAAW;AACjB,MAAA,OAAO,iBAAA,CAAkB,GAAA,CAAI,SAAS,CAAA,EAAG,KAAA;AAAA,IAC3C,CAAA;AAAA,IACA,KAAA,GAAQ;AACN,MAAA,IAAI,MAAA,EAAQ;AACZ,MAAA,MAAA,GAAS,IAAA;AACT,MAAA,EAAA,CAAG,KAAA,EAAM;AAAA,IACX;AAAA,GACF;AACF;AAGA,SAAS,QAAQ,EAAA,EAAoB;AACnC,EAAA,MAAM,UAAU,EAAA,CAAG,MAAA,CAAO,gBAAgB,EAAE,MAAA,EAAQ,MAAM,CAAA;AAC1D,EAAA,IAAI,WAAW,CAAA,EAAG;AAClB,EAAA,MAAM,KAAA,GAAQ,EAAA,CAAG,WAAA,CAAY,MAAM;AACjC,IAAA,EAAA,CAAG,IAAA,CAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAeP,CAAA;AACD,IAAA,EAAA,CAAG,OAAO,kBAAkB,CAAA;AAAA,EAC9B,CAAC,CAAA;AACD,EAAA,KAAA,EAAM;AACR;AClNA,eAAsB,iBAAA,CACpB,aAAA,EACA,IAAA,EACA,OAAA,EAC8B;AAC9B,EAAA,MAAM,OAAA,GAAU,cAAc,cAAc,CAAA;AAC5C,EAAA,MAAM,YAAA,GAAe,cAAc,eAAe,CAAA;AAClD,EAAA,IAAI,OAAO,OAAA,KAAY,QAAA,IAAY,OAAA,CAAQ,WAAW,CAAA,EAAG;AACvD,IAAA,MAAM,WAAA,CAAY,kBAAkB,OAAO,CAAA;AAAA,EAC7C;AACA,EAAA,IAAI,OAAO,YAAA,KAAiB,QAAA,IAAY,YAAA,CAAa,WAAW,CAAA,EAAG;AACjE,IAAA,MAAM,WAAA,CAAY,kBAAkB,OAAO,CAAA;AAAA,EAC7C;AAEA,EAAA,mBAAA,CAAoB,OAAA,EAAS,cAAc,OAAO,CAAA;AAGlD,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI,iBAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,sBAAsB,OAAO,CAAA;AACtC,IAAA,iBAAA,GAAoB,UAAU,OAAO,CAAA;AAAA,EACvC,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,YAAY,yBAAA,EAA2B,EAAE,GAAG,OAAA,EAAS,OAAO,CAAA;AAAA,EACpE;AAEA,EAAA,MAAM,EAAE,MAAA,EAAQ,GAAA,EAAI,GAAI,MAAM,IAAA,CAAK,KAAA,CAAM,OAAA,CAAQ,iBAAA,CAAkB,GAAA,EAAK,MAAA,CAAO,GAAA,EAAK,OAAO,CAAA;AAE3F,EAAA,MAAM,OAAA,GAA4B;AAAA,IAChC,UAAA,EAAY,CAAC,qBAAqB,CAAA;AAAA,IAClC,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,gBAAgB,IAAA,CAAK,gBAAA;AAAA,IACrB,WAAA,EAAa,IAAA,CAAK,KAAA,CAAM,GAAA;AAAI,GAC9B;AAEA,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,MAAM,SAAA,CAAU,OAAA,EAAS,KAAK,OAAO,CAAA;AACpD,IAAA,MAAA,GAAS,MAAA,CAAO,OAAA;AAAA,EAClB,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,YAAY,yBAAA,EAA2B,EAAE,GAAG,OAAA,EAAS,OAAO,CAAA;AAAA,EACpE;AAEA,EAAA,MAAM,GAAA,GAAM,OAAO,KAAK,CAAA;AACxB,EAAA,MAAM,GAAA,GAAM,OAAO,KAAK,CAAA;AACxB,EAAA,MAAM,GAAA,GAAM,OAAO,KAAK,CAAA;AAExB,EAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,IAAY,OAAO,QAAQ,QAAA,EAAU;AACtD,IAAA,MAAM,WAAA,CAAY,kBAAkB,OAAO,CAAA;AAAA,EAC7C;AAEA,EAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,IAAY,GAAA,CAAI,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,WAAA,CAAY,kBAAkB,OAAO,CAAA;AAAA,EAC7C;AACA,EAAA,MAAM,UAAA,GAAa,KAAK,KAAA,CAAM,IAAA,CAAK,MAAM,GAAA,EAAI,CAAE,OAAA,EAAQ,GAAI,GAAI,CAAA;AAC/D,EAAA,IAAI,MAAM,UAAA,GAAa,IAAA,CAAK,kBAAkB,MAAM,WAAA,CAAY,WAAW,OAAO,CAAA;AAElF,EAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,CAAO,MAAA,EAAQ,KAAA,EAAO,KAAK,MAAA,EAAO;AACrD;AAMA,SAAS,mBAAA,CAAoB,OAAA,EAAiB,QAAA,EAAkB,OAAA,EAAgC;AAE9F,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,OAAO,CAAA,CAAE,SAAS,WAAW,CAAA;AAGnD,EAAA,IAAI,MAAA,KAAW,QAAA,EAAU,MAAM,WAAA,CAAY,2BAA2B,OAAO,CAAA;AAC/E;AC7DA,SAAS,MAAA,CAAO,MAA4B,SAAA,EAA+B;AACzE,EAAA,IAAI,SAAA,CAAU,WAAA,EAAY,KAAM,oBAAA,EAAsB;AACpD,IAAA,MAAM,YAAY,wBAAwB,CAAA;AAAA,EAC5C;AACA,EAAA,OAAO,MAAA,CAAO,OAAO,IAAA,KAAS,QAAA,GAAW,OAAO,IAAI,UAAA,CAAW,IAAI,CAAC,CAAA;AACtE;AAQA,IAAM,eAAA,uBAA2C,GAAA,CAAI;AAAA,EACnD,WAAA;AAAA,EACA,WAAA;AAAA,EACA,cAAA;AAAA,EACA;AACF,CAAC,CAAA;AAED,eAAsB,aAAA,CACpB,YAAA,EACA,IAAA,EACA,OAAA,EAC0B;AAE1B,EAAA,IAAI,YAAA,CAAa,QAAA,CAAS,IAAI,CAAA,EAAG;AAC/B,IAAA,MAAM,WAAA,CAAY,4BAA4B,OAAO,CAAA;AAAA,EACvD;AAEA,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI,UAAA;AACJ,EAAA,IAAI;AAGF,IAAA,OAAA,GAAU,MAAM,WAAA,CAAY,YAAA,EAAc,MAAM,CAAA;AAChD,IAAA,UAAA,GAAa,UAAA,CAAW,YAAY,CAAA,CAAE,GAAA;AAAA,EACxC,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,YAAY,wBAAA,EAA0B,EAAE,GAAG,OAAA,EAAS,OAAO,CAAA;AAAA,EACnE;AAKA,EAAA,IAAI,OAAA,CAAQ,UAAU,MAAA,EAAW;AAC/B,IAAA,MAAM,WAAA,CAAY,4BAA4B,OAAO,CAAA;AAAA,EACvD;AAEA,EAAA,MAAM,UAAA,GAAa,QAAQ,GAAA,CAAI,OAAA;AAC/B,EAAA,MAAM,MAAA,GAAS,QAAQ,GAAA,CAAI,MAAA;AAC3B,EAAA,IAAI,CAAC,QAAA,CAAS,UAAU,KAAK,CAAC,QAAA,CAAS,MAAM,CAAA,EAAG;AAC9C,IAAA,MAAM,WAAA,CAAY,0BAA0B,OAAO,CAAA;AAAA,EACrD;AAIA,EAAA,IACE,eAAA,CAAgB,GAAA,CAAI,MAAA,CAAO,MAAA,CAAO,KAAK,CAAC,CAAC,CAAA,IACzC,UAAA,CAAW,SAAS,CAAA,KAAM,MAAA,IAC1B,UAAA,CAAW,iBAAiB,MAAM,MAAA,EAClC;AACA,IAAA,MAAM,WAAA,CAAY,4BAA4B,OAAO,CAAA;AAAA,EACvD;AAEA,EAAA,MAAM,EAAE,MAAA,EAAQ,GAAA,EAAI,GAAI,MAAM,IAAA,CAAK,KAAA,CAAM,OAAA,CAAQ,UAAA,CAAW,KAAK,CAAA,EAAG,MAAA,CAAO,KAAK,GAAG,OAAO,CAAA;AAI1F,EAAA,MAAM,WAAA,GAAc,UAAA,CAAW,KAAK,CAAA,KAAM,MAAA;AAC1C,EAAA,IAAI,CAAC,WAAA,IAAe,IAAA,CAAK,eAAA,KAAoB,IAAA,EAAM;AACjD,IAAA,MAAM,WAAA,CAAY,kBAAkB,OAAO,CAAA;AAAA,EAC7C;AAEA,EAAA,MAAM,OAAA,GAA4B;AAAA;AAAA;AAAA;AAAA,IAIhC,UAAA,EAAY,CAAC,qBAAqB,CAAA;AAAA;AAAA;AAAA,IAGlC,GAAI,UAAA,CAAW,KAAK,CAAA,KAAM,MAAA,GAAY,EAAE,MAAA,EAAQ,MAAA,CAAO,MAAA,EAAO,GAAI,EAAC;AAAA;AAAA;AAAA,IAGnE,GAAI,WAAA,GAAc,EAAE,UAAU,MAAA,CAAO,QAAA,KAAa,EAAC;AAAA,IACnD,gBAAgB,IAAA,CAAK,gBAAA;AAAA;AAAA,IAErB,WAAA,EAAa,IAAA,CAAK,KAAA,CAAM,GAAA;AAAI,GAC9B;AAEA,EAAA,IAAI,eAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,MAAMA,SAAAA,CAAU,UAAA,EAAY,KAAK,OAAO,CAAA;AACvD,IAAA,eAAA,GAAkB,MAAA,CAAO,OAAA;AAAA,EAC3B,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,WAAA,CAAY,oBAAoB,KAAK,CAAA,EAAG,EAAE,GAAG,OAAA,EAAS,OAAO,CAAA;AAAA,EACrE;AAEA,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AAGF,IAAA,MAAA,GAAU,MAAM,SAAA,CAAU,eAAA,EAAiB,OAAA,CAAQ,aAAa,MAAM,CAAA;AAAA,EAIxE,SAAS,KAAA,EAAO;AAEd,IAAA,MAAM,YAAY,wBAAA,EAA0B,EAAE,GAAG,OAAA,EAAS,OAAO,CAAA;AAAA,EACnE;AAEA,EAAA,MAAM,OAAA,GAAU,gBAAA,CAAiB,MAAA,EAAQ,OAAO,CAAA;AAGhD,EAAA,IAAI,OAAO,KAAK,CAAA,KAAM,UAAa,OAAA,CAAQ,KAAK,MAAM,MAAA,EAAW;AAC/D,IAAA,MAAM,WAAA,CAAY,4BAA4B,OAAO,CAAA;AAAA,EACvD;AACA,EAAA,4BAAA,CAA6B,SAAS,OAAO,CAAA;AAE7C,EAAA,IAAI,OAAA,CAAQ,aAAa,CAAA,KAAM,MAAA,EAAW;AACxC,IAAA,MAAM,WAAA,CAAY,4BAA4B,OAAO,CAAA;AAAA,EACvD;AACA,EAAA,gBAAA,CAAiB,CAAC,eAAA,EAAiB,OAAO,CAAA,EAAG,MAAM,OAAO,CAAA;AAE1D,EAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,CAAO,QAAQ,MAAA,EAAQ,OAAA,EAAS,aAAa,UAAA,EAAW;AAC3E;AAkBA,SAAS,gBAAA,CACP,QACA,OAAA,EACyB;AACzB,EAAA,MAAM,SAAA,GAAY,OAAO,kBAAkB,CAAA;AAE3C,EAAA,IAAI,CAAC,MAAM,OAAA,CAAQ,SAAS,GAAG,MAAM,WAAA,CAAY,4BAA4B,OAAO,CAAA;AACpF,EAAA,MAAM,SAAA,GAAY,SAAA,CAAU,MAAA,CAAO,QAAQ,CAAA;AAC3C,EAAA,MAAM,CAAC,IAAI,CAAA,GAAI,SAAA;AACf,EAAA,IAAI,SAAA,CAAU,WAAW,CAAA,IAAK,IAAA,KAAS,QAAW,MAAM,WAAA,CAAY,kBAAkB,OAAO,CAAA;AAC7F,EAAA,OAAO,IAAA;AACT;AAOA,SAAS,oBACP,KAAA,EACuE;AACvE,EAAA,MAAM,OAAQ,KAAA,EAA8B,IAAA;AAC5C,EAAA,IAAI,IAAA,KAAS,mBAAmB,OAAO,SAAA;AACvC,EAAA,IAAI,SAAS,iCAAA,EAAmC;AAC9C,IAAA,MAAM,EAAE,KAAA,EAAO,MAAA,EAAO,GAAI,KAAA;AAC1B,IAAA,IAAI,KAAA,KAAU,OAAO,OAAO,gBAAA;AAE5B,IAAA,IAAI,KAAA,KAAU,SAAS,KAAA,KAAU,KAAA;AAC/B,MAAA,OAAO,MAAA,KAAW,YAAY,gBAAA,GAAmB,SAAA;AAAA,EACrD;AACA,EAAA,OAAO,mBAAA;AACT;AAOA,SAAS,gBAAA,CACP,OAAA,EACA,IAAA,EACA,OAAA,EACM;AACN,EAAA,MAAM,UAAA,GAAa,KAAK,KAAA,CAAM,IAAA,CAAK,MAAM,GAAA,EAAI,CAAE,OAAA,EAAQ,GAAI,GAAI,CAAA;AAC/D,EAAA,IAAI,OAAA,GAAU,KAAA;AACd,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,MAAM,GAAA,GAAM,OAAO,KAAK,CAAA;AACxB,IAAA,MAAM,GAAA,GAAM,OAAO,KAAK,CAAA;AACxB,IAAA,IAAI,QAAQ,MAAA,EAAW;AACrB,MAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,EAAU,MAAM,WAAA,CAAY,kBAAkB,OAAO,CAAA;AACxE,MAAA,IAAI,OAAO,UAAA,GAAa,IAAA,CAAK,kBAAkB,MAAM,WAAA,CAAY,WAAW,OAAO,CAAA;AACnF,MAAA,OAAA,GAAU,IAAA;AAAA,IACZ;AACA,IAAA,MAAM,GAAA,GAAM,OAAO,KAAK,CAAA;AACxB,IAAA,IAAI,QAAQ,MAAA,EAAW;AACrB,MAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,EAAU,MAAM,WAAA,CAAY,kBAAkB,OAAO,CAAA;AACxE,MAAA,IAAI,MAAM,UAAA,GAAa,IAAA,CAAK,kBAAkB,MAAM,WAAA,CAAY,WAAW,OAAO,CAAA;AAAA,IACpF;AACA,IAAA,IAAI,QAAQ,MAAA,EAAW;AACrB,MAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,EAAU,MAAM,WAAA,CAAY,kBAAkB,OAAO,CAAA;AAGxE,MAAA,IAAI,MAAM,UAAA,GAAa,IAAA,CAAK,kBAAkB,MAAM,WAAA,CAAY,WAAW,OAAO,CAAA;AAAA,IACpF;AAAA,EACF;AACA,EAAA,IAAI,CAAC,WAAW,IAAA,CAAK,aAAA,KAAkB,MAAM,MAAM,WAAA,CAAY,kBAAkB,OAAO,CAAA;AAC1F;AAGA,SAAS,4BAAA,CACP,QACA,OAAA,EACM;AACN,EAAA,IAAI,MAAA,CAAO,KAAK,CAAA,KAAM,wBAAA,EAA0B;AAC9C,IAAA,MAAM,WAAA,CAAY,4BAA4B,OAAO,CAAA;AAAA,EACvD;AACF;ACjOO,SAAS,iBAAiB,OAAA,EAAsC;AACrE,EAAA,MAAM,QAAA,GAAW,IAAI,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,CAAC,KAAA,KAAU,CAAC,KAAA,CAAM,MAAA,EAAQ,KAAK,CAAC,CAAC,CAAA;AACtE,EAAA,MAAM,QAAA,uBAAe,GAAA,EAAsC;AAE3D,EAAA,SAAS,YAAA,CAAa,KAAc,OAAA,EAA4C;AAC9E,IAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,IAAY,GAAA,CAAI,WAAW,CAAA,EAAG;AAC/C,MAAA,MAAM,WAAA,CAAY,kBAAkB,OAAO,CAAA;AAAA,IAC7C;AACA,IAAA,MAAM,MAAA,GAAS,QAAA,CAAS,GAAA,CAAI,GAAG,CAAA;AAC/B,IAAA,IAAI,MAAA,KAAW,MAAA,EAAW,MAAM,WAAA,CAAY,oBAAoB,OAAO,CAAA;AACvE,IAAA,OAAO,MAAA;AAAA,EACT;AAIA,EAAA,SAAS,WAAA,CAAY,KAAa,OAAA,EAA4C;AAC5E,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,MAAA,CAAO,CAAC,KAAA,KAAU,KAAA,CAAM,IAAA,CAAK,IAAA,CAAK,CAAC,GAAA,KAAQ,GAAA,CAAI,GAAA,KAAQ,GAAG,CAAC,CAAA;AACnF,IAAA,MAAM,CAAC,IAAI,CAAA,GAAI,OAAA;AACf,IAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,IAAK,IAAA,KAAS,QAAW,MAAM,WAAA,CAAY,eAAe,OAAO,CAAA;AACxF,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,OAAO;AAAA;AAAA,IAEL,SAAA,GAA+B;AAC7B,MAAA,OAAO,CAAC,GAAG,QAAA,CAAS,IAAA,EAAM,CAAA;AAAA,IAC5B,CAAA;AAAA,IAEA,MAAM,OAAA,CAAQ,GAAA,EAAc,GAAA,EAAc,OAAA,EAAgD;AAGxF,MAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,IAAY,GAAA,CAAI,WAAW,CAAA,EAAG;AAC/C,QAAA,MAAM,WAAA,CAAY,eAAe,OAAO,CAAA;AAAA,MAC1C;AACA,MAAA,MAAM,MAAA,GAAS,QAAQ,MAAA,GAAY,WAAA,CAAY,KAAK,OAAO,CAAA,GAAI,YAAA,CAAa,GAAA,EAAK,OAAO,CAAA;AACxF,MAAA,MAAM,OAAA,GAAU,OAAO,IAAA,CAAK,IAAA,CAAK,CAAC,SAAA,KAAc,SAAA,CAAU,QAAQ,GAAG,CAAA;AACrE,MAAA,IAAI,OAAA,KAAY,MAAA,EAAW,MAAM,WAAA,CAAY,eAAe,OAAO,CAAA;AAInE,MAAA,MAAM,WAAW,IAAA,CAAK,SAAA,CAAU,CAAC,GAAA,EAAK,GAAG,CAAC,CAAA;AAC1C,MAAA,IAAI,OAAA,GAAU,QAAA,CAAS,GAAA,CAAI,QAAQ,CAAA;AACnC,MAAA,IAAI,YAAY,MAAA,EAAW;AACzB,QAAA,OAAA,GAAU,SAAA,CAAU,OAAA,CAAQ,GAAA,EAAY,qBAAqB,CAAA;AAC7D,QAAA,QAAA,CAAS,GAAA,CAAI,UAAU,OAAO,CAAA;AAAA,MAChC;AAEA,MAAA,IAAI;AACF,QAAA,OAAO,EAAE,MAAA,EAAQ,GAAA,EAAK,MAAM,OAAA,EAAQ;AAAA,MACtC,SAAS,KAAA,EAAO;AAId,QAAA,QAAA,CAAS,OAAO,QAAQ,CAAA;AACxB,QAAA,MAAM,eAAe,mDAAA,EAAqD;AAAA,UACxE,GAAG,OAAA;AAAA,UACH;AAAA,SACD,CAAA;AAAA,MACH;AAAA,IACF;AAAA,GACF;AACF;;;ACzDA,SAAS,iBAAiB,WAAA,EAA6B;AACrD,EAAA,OAAO,UAAU,MAAA,CAAO,WAAW,CAAA,CAAE,QAAA,CAAS,WAAW,CAAC,CAAA,CAAA;AAC5D;AAEO,SAAS,yBAAyB,OAAA,EAAiD;AAGxF,EAAA,MAAM,YAAA,GAAe,gBAAA,CAAiB,OAAA,CAAQ,MAAA,CAAO,MAAM,cAAc,CAAA;AACzE,EAAA,MAAM,aAAA,GAAgB,gBAAA,CAAiB,OAAA,CAAQ,MAAA,CAAO,MAAM,eAAe,CAAA;AAC3E,EAAA,MAAM,IAAA,GAAO,EAAE,KAAA,EAAO,OAAA,CAAQ,OAAO,gBAAA,EAAkB,OAAA,CAAQ,OAAO,gBAAA,EAAiB;AACvF,EAAA,MAAM,aAAA,GAAgB;AAAA,IACpB,GAAG,IAAA;AAAA,IACH,KAAA,EAAO,YAAA;AAAA,IACP,eAAA,EAAiB,OAAA,CAAQ,MAAA,CAAO,sBAAA,KAA2B,IAAA;AAAA,IAC3D,aAAA,EAAe,OAAA,CAAQ,MAAA,CAAO,oBAAA,KAAyB;AAAA,GACzD;AAEA,EAAA,OAAO;AAAA,IACL,MAAM,MAAA,CACJ,YAAA,EACA,OAAA,GAA2B,EAAC,EACM;AAClC,MAAA,IAAI,OAAO,YAAA,KAAiB,QAAA,IAAY,YAAA,CAAa,WAAW,CAAA,EAAG;AACjE,QAAA,MAAM,WAAA,CAAY,0BAA0B,OAAO,CAAA;AAAA,MACrD;AAEA,MAAA,MAAM,OAAA,GAAU,MAAM,aAAA,CAAc,YAAA,EAAc,eAAe,OAAO,CAAA;AACxE,MAAA,MAAM,WAAW,MAAM,iBAAA;AAAA,QACrB,OAAA,CAAQ,MAAA;AAAA,QACR,EAAE,GAAG,IAAA,EAAM,KAAA,EAAO,aAAA,EAAc;AAAA,QAChC;AAAA,OACF;AAEA,MAAA,OAAO;AAAA,QACL,SAAA,EAAW,gBAAA,CAAiB,OAAA,CAAQ,WAAW,CAAA;AAAA,QAC/C,eAAe,OAAA,CAAQ,MAAA;AAAA,QACvB,gBAAgB,QAAA,CAAS,MAAA;AAAA,QACzB,eAAe,QAAA,CAAS,KAAA;AAAA,QACxB,gBAAgB,QAAA,CAAS;AAAA,OAC3B;AAAA,IACF,CAAA;AAAA,IAEA,cAAA,GAAiB;AACf,MAAA,OAAO,EAAE,SAAS,YAAA,CAAa,SAAA,IAAa,QAAA,EAAU,aAAA,CAAc,WAAU,EAAE;AAAA,IAClF;AAAA,GACF;AACF;;;ACtCO,SAAS,+BACd,OAAA,EAC0B;AAC1B,EAAA,MAAM,KAAA,GAAQ,QAAQ,KAAA,IAAS,WAAA;AAC/B,EAAA,MAAM,MAAA,GAAS,QAAQ,MAAA,IAAU,WAAA;AAEjC,EAAA,MAAM,WAAW,wBAAA,CAAyB,EAAE,QAAQ,OAAA,CAAQ,MAAA,EAAQ,OAAO,CAAA;AAC3E,EAAA,MAAM,MAAA,GACJ,OAAA,CAAQ,WAAA,IAAe,oBAAA,CAAqB,EAAE,IAAA,EAAM,OAAA,CAAQ,MAAA,CAAO,MAAA,CAAO,IAAA,EAAM,MAAA,EAAQ,CAAA;AAE1F,EAAA,MAAM,WAAA,GAAwC;AAAA,IAC5C,MAAA,EAAQ,KAAA;AAAA,IACR,OAAA,EAAS,gBAAA;AAAA,IACT,OAAA,EAAS;AAAA,GACX;AAEA,EAAA,eAAe,iBACb,OAAA,EACoC;AACpC,IAAA,MAAM,YAAA,GAAgC;AAAA,MACpC,WAAW,OAAA,CAAQ,SAAA;AAAA,MACnB,YAAY,OAAA,CAAQ;AAAA,KACtB;AAEA,IAAA,MAAM,UAAU,MAAM,QAAA,CAAS,OAAO,OAAA,CAAQ,UAAA,CAAW,SAAS,YAAY,CAAA;AAG9E,IAAA,MAAM,qBAAA,CAAsB,OAAA,EAAS,OAAA,EAAS,YAAY,CAAA;AAE1D,IAAA,IAAI,WAAA;AACJ,IAAA,IAAI;AACF,MAAA,WAAA,GAAc,OAAO,OAAA,CAAQ;AAAA,QAC3B,WAAW,OAAA,CAAQ,SAAA;AAAA,QACnB,aAAa,OAAA,CAAQ,aAAA;AAAA,QACrB,eAAe,OAAA,CAAQ,aAAA;AAAA,QACvB,gBAAgB,OAAA,CAAQ,cAAA;AAAA,QACxB,YAAY,OAAA,CAAQ,UAAA;AAAA,QACpB,WAAW,OAAA,CAAQ;AAAA,OACpB,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,eAAe,mCAAA,EAAqC,EAAE,GAAG,YAAA,EAAc,OAAO,CAAA;AAAA,IACtF;AAEA,IAAA,IAAI,WAAA,CAAY,SAAS,UAAA,EAAY;AACnC,MAAA,MAAM,WAAA,CAAY,WAAA,CAAY,KAAA,EAAO,YAAY,CAAA;AAAA,IACnD;AAEA,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,UAAA;AAAA,MACR,MAAA,EAAQ,KAAA;AAAA,MACR,WAAW,OAAA,CAAQ,SAAA;AAAA;AAAA;AAAA,MAGnB,eAAe,OAAA,CAAQ,SAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAKvB,QAAA,EAAU;AAAA,QACR,eAAe,OAAA,CAAQ,aAAA;AAAA,QACvB,gBAAgB,OAAA,CAAQ,cAAA;AAAA,QACxB,YAAY,OAAA,CAAQ;AAAA;AACtB,KACF;AAAA,EACF;AAEA,EAAA,MAAM,QAAA,GAAW,CACf,MAAA,EACA,aAAA,EACA,OAAA,KACS;AACT,IAAA,IAAI,OAAA;AACJ,IAAA,IAAI;AACF,MAAA,OAAA,GAAU,MAAA,CAAO,MAAM,CAAA,CAAE,aAAA,EAAe,QAAQ,SAAS,CAAA;AAAA,IAC3D,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,cAAA,CAAe,iCAAiC,MAAM,CAAA,CAAA,EAAI,EAAE,GAAG,OAAA,EAAS,OAAO,CAAA;AAAA,IACvF;AAEA,IAAA,IAAI,YAAY,KAAA,EAAO;AACrB,MAAA,MAAM,cAAA,CAAe,CAAA,8CAAA,EAAiD,MAAM,CAAA,CAAA,EAAI,OAAO,CAAA;AAAA,IACzF;AAAA,EACF,CAAA;AAEA,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,KAAA;AAAA,IACN,UAAA,EAAY,mBAAmB,eAAe,CAAA;AAAA,IAC9C,WAAA;AAAA,IACA,gBAAA;AAAA,IAEA,MAAM,OAAA,CAAQ,aAAA,EAAe,OAAA,EAAS;AACpC,MAAA,QAAA,CAAS,SAAA,EAAW,eAAe,OAAO,CAAA;AAAA,IAC5C,CAAA;AAAA,IACA,MAAM,OAAA,CAAQ,aAAA,EAAe,OAAA,EAAS;AACpC,MAAA,QAAA,CAAS,SAAA,EAAW,eAAe,OAAO,CAAA;AAAA,IAC5C,CAAA;AAAA,IACA,MAAM,aAAA,CAAc,aAAA,EAAe,OAAA,EAAS;AAC1C,MAAA,QAAA,CAAS,eAAA,EAAiB,eAAe,OAAO,CAAA;AAAA,IAClD,CAAA;AAAA,IAEA,MAAM,MAAA,GAAiC;AACrC,MAAA,MAAM,SAAA,GAAY,MAAM,WAAA,EAAY;AACpC,MAAA,MAAM,SAAA,GAAY,MAAM,MAAA,EAAO;AAC/B,MAAA,IAAI,SAAA,GAAY,IAAA;AAChB,MAAA,IAAI;AAGF,QAAA,MAAA,CAAO,QAAQ,cAAc,CAAA;AAAA,MAC/B,CAAA,CAAA,MAAQ;AACN,QAAA,SAAA,GAAY,KAAA;AAAA,MACd;AACA,MAAA,MAAM,aAAa,IAAA,CAAK,KAAA,CAAM,KAAA,CAAM,WAAA,KAAgB,SAAS,CAAA;AAC7D,MAAA,IAAI,CAAC,SAAA,EAAW;AAEd,QAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,SAAA,EAAW,UAAA,EAAY,QAAQ,0BAAA,EAA2B;AAAA,MACrF;AACA,MAAA,MAAM,OAAA,GAAU,SAAS,cAAA,EAAe;AACxC,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,MAAA;AAAA,QACR,SAAA;AAAA,QACA,UAAA;AAAA,QACA,MAAA,EAAQ,mBAAmB,OAAA,CAAQ,OAAA,CAAQ,MAAM,CAAA,kBAAA,EAAqB,OAAA,CAAQ,SAAS,MAAM,CAAA;AAAA,OAC/F;AAAA,IACF,CAAA;AAAA,IAEA,KAAA,GAAQ;AACN,MAAA,MAAA,CAAO,KAAA,EAAM;AAAA,IACf;AAAA,GACF;AACF","file":"ap2-YAPLERSC.js","sourcesContent":["/**\n * Every failure the AP2 verifier can report.\n *\n * `CommerceError.message` reaches the client, and a mandate carries the\n * buyer's purchase and often personal data, so messages are fixed phrases from\n * the list below. The machine-readable code goes in `details.reason` and the\n * original exception on `cause`, which is never serialized.\n *\n * Three codes: AUTHORIZATION_INVALID when the buyer's mandate is bad,\n * AUTHORIZATION_REPLAYED when it is good but spent, and\n * AUTHORIZATION_PROVIDER_UNAVAILABLE when our verifier never reached a\n * verdict. Blaming the buyer for our outage refuses a good mandate.\n */\nimport { CommerceError } from '../../core';\n\n/**\n * Coarse on purpose: a client learns roughly where its mandate was refused,\n * not which check failed. Finer detail is an oracle for probing trust policy,\n * so a mandate signed with a disallowed algorithm reports `invalid_signature`\n * and one declaring a digest other than sha-256 `malformed_presentation`.\n */\nexport const AP2_REJECTION_REASONS = [\n  'malformed_presentation',\n  'untrusted_issuer',\n  'unknown_key',\n  'invalid_signature',\n  'invalid_claims',\n  'expired',\n  'wrong_audience',\n  'unsupported_mandate_type',\n  'checkout_binding_failed',\n  'purchase_mismatch',\n] as const;\n\nexport type Ap2RejectionReason = (typeof AP2_REJECTION_REASONS)[number];\n\nconst MESSAGES: Readonly<Record<Ap2RejectionReason, string>> = {\n  malformed_presentation: 'The authorization is not a well-formed SD-JWT presentation.',\n  untrusted_issuer: 'The mandate was issued by a party this merchant does not trust.',\n  unknown_key: 'The mandate names a signing key this merchant does not trust.',\n  invalid_signature: 'The mandate signature did not verify.',\n  invalid_claims: 'The mandate is missing required claims or they are malformed.',\n  expired: 'The mandate is expired or not yet valid.',\n  wrong_audience: 'The mandate is addressed to a different audience.',\n  unsupported_mandate_type: 'The mandate is not a closed Direct Checkout Mandate.',\n  checkout_binding_failed: 'The merchant checkout document bound to the mandate did not verify.',\n  purchase_mismatch: 'The mandate does not authorize this purchase.',\n};\n\nexport interface Ap2ErrorContext {\n  readonly requestId?: string;\n  readonly resourceId?: string;\n  readonly cause?: unknown;\n}\n\n/** The buyer's mandate is bad. Fail closed */\nexport function ap2Rejected(\n  reason: Ap2RejectionReason,\n  context: Ap2ErrorContext = {},\n): CommerceError {\n  return new CommerceError('AUTHORIZATION_INVALID', MESSAGES[reason], {\n    details: { method: 'ap2', reason },\n    ...(context.requestId !== undefined ? { requestId: context.requestId } : {}),\n    ...(context.resourceId !== undefined ? { resourceId: context.resourceId } : {}),\n    ...(context.cause !== undefined ? { cause: context.cause } : {}),\n  });\n}\n\n/**\n * The mandate verified but has already been presented. A separate code from\n * a bad mandate: nothing is wrong with this mandate except that it is spent.\n */\nexport function ap2Replayed(state: string, context: Ap2ErrorContext = {}): CommerceError {\n  return new CommerceError(\n    'AUTHORIZATION_REPLAYED',\n    'This mandate has already been presented and cannot authorize another purchase.',\n    {\n      details: { method: 'ap2', reason: 'replayed', state },\n      ...(context.requestId !== undefined ? { requestId: context.requestId } : {}),\n      ...(context.resourceId !== undefined ? { resourceId: context.resourceId } : {}),\n    },\n  );\n}\n\n/**\n * The check never ran (a configured key that will not import, say). Retryable,\n * and never recorded against the payer: the mandate may be perfectly good.\n */\nexport function ap2Unavailable(detail: string, context: Ap2ErrorContext = {}): CommerceError {\n  return new CommerceError(\n    'AUTHORIZATION_PROVIDER_UNAVAILABLE',\n    'Authorization could not be verified right now. This is a merchant-side fault, not a problem with the presented mandate.',\n    {\n      details: { method: 'ap2', reason: 'verifier_unavailable', detail },\n      ...(context.requestId !== undefined ? { requestId: context.requestId } : {}),\n      ...(context.resourceId !== undefined ? { resourceId: context.resourceId } : {}),\n      ...(context.cause !== undefined ? { cause: context.cause } : {}),\n    },\n  );\n}\n","import { createHash } from 'node:crypto';\n\n/** SHA-256, the only digest AP2 verification and signing use. A string is hashed as UTF-8 */\nexport function sha256(data: string | Uint8Array): Buffer {\n  return createHash('sha256').update(data).digest();\n}\n","/**\n * Binds a verified mandate to the purchase in front of us. Without this\n * comparison a mandate approved for a $0.01 report would settle a $500 one.\n *\n * Everything is compared against the ALREADY RESOLVED request. Nothing is\n * taken from the mandate to shape the purchase, which would invert the\n * control.\n */\nimport canonicalize from 'canonicalize';\nimport { type AuthorizationVerificationContext, CommerceError } from '../../core';\nimport { isRecord } from '../../core/is-record';\nimport { AP2_CHECKOUT_PROFILE } from './constants';\nimport { type Ap2ErrorContext, ap2Rejected } from './errors';\nimport { sha256 } from './sha256';\nimport type { VerifiedCheckoutMandate } from './types';\n\n/**\n * All required. Absent is a mismatch, never a skipped check: a mandate that\n * will not say which resource or how much authorizes nothing in particular.\n */\nconst REQUIRED_PROFILE_CLAIMS = [\n  'profile',\n  'resource_id',\n  'input_hash',\n  'amount',\n  'currency',\n  'payment_method',\n] as const;\n\n/**\n * RFC 8785 (JCS) digest of the validated resource input.\n *\n * Binds a mandate to the exact request, not just to a resource and a price:\n * without it, one mandate for `translate` would authorize any translation.\n *\n * The merchant's signer, possibly in another language, agrees with this digest\n * only if it follows RFC 8785's number formatting and UTF-16 key ordering too;\n * sorting keys is not enough.\n *\n * The caller passes what the backend will receive: validated, reserved fields\n * stripped, no request id or transport metadata (the buyer could not have\n * known those when they approved).\n */\nexport function computeInputHash(input: unknown): string {\n  const canonical = canonicalize(input ?? {});\n  // undefined means JSON cannot represent the value (a function, say). On the\n  // gateway path the input already passed schema validation, so this is not a\n  // buyer error.\n  if (canonical === undefined) {\n    throw new CommerceError('INTERNAL_ERROR', 'resource input is not canonicalizable JSON');\n  }\n  return sha256(canonical).toString('base64url');\n}\n\nconst EVM_ADDRESS = /^0x[0-9a-f]{40}$/i;\n\n// EIP-55 encodes an address checksum through letter casing, so lowercase and\n// checksummed forms identify the same account. Other values compare exactly.\nfunction sameCoordinate(declared: unknown, expected: string | undefined): boolean {\n  if (typeof declared === 'string' && expected !== undefined) {\n    if (EVM_ADDRESS.test(declared) && EVM_ADDRESS.test(expected)) {\n      return declared.toLowerCase() === expected.toLowerCase();\n    }\n  }\n  return declared === expected;\n}\n\n/**\n * Throws on the first mismatch with one coarse reason. Which field disagreed\n * is not reported: a caller able to ask about one field at a time can read a\n * mandate's contents out of the gateway by elimination.\n */\nexport async function bindMandateToPurchase(\n  mandate: VerifiedCheckoutMandate,\n  context: AuthorizationVerificationContext,\n  errorContext: Ap2ErrorContext,\n): Promise<void> {\n  const profile = mandate.checkoutClaims['agent_commerce'];\n  if (!isRecord(profile)) throw ap2Rejected('purchase_mismatch', errorContext);\n\n  for (const claim of REQUIRED_PROFILE_CLAIMS) {\n    const value = profile[claim];\n    if (typeof value !== 'string' || value.length === 0) {\n      throw ap2Rejected('purchase_mismatch', errorContext);\n    }\n  }\n\n  const requirement = context.requirement;\n  const expectedInputHash = computeInputHash(context.input);\n\n  const mustMatch: readonly (readonly [string, unknown])[] = [\n    ['profile', AP2_CHECKOUT_PROFILE],\n    ['resource_id', context.resourceId],\n    ['input_hash', expectedInputHash],\n    // Decimal strings on both sides. Comparing numerically would make \"0.10\"\n    // and \"0.1\" equal, and a mandate says what it says.\n    ['amount', requirement.amount],\n    ['currency', requirement.currency],\n    ['payment_method', requirement.provider],\n  ];\n\n  for (const [claim, expected] of mustMatch) {\n    if (profile[claim] !== expected) throw ap2Rejected('purchase_mismatch', errorContext);\n  }\n\n  // Checked whenever EITHER side names one, which is the fail-closed reading.\n  // A mandate silent about the chain must not unlock a mainnet settlement, and\n  // one naming a chain the requirement lacks was approved for another rail.\n  for (const [claim, expected] of [\n    ['destination', requirement.destination],\n    ['network', requirement.network],\n    ['asset', requirement.asset],\n  ] as const) {\n    const declared = profile[claim];\n    if (declared === undefined && expected === undefined) continue;\n    if (!sameCoordinate(declared, expected)) throw ap2Rejected('purchase_mismatch', errorContext);\n  }\n}\n","/**\n * Merchant-side helper: mints the checkout JWT a Checkout Mandate binds.\n *\n * A merchant runs it in their own process, with their own key, to produce the\n * document the buyer approves; the gateway never calls it. It mirrors\n * `createPaymentProof`, which a buyer runs to produce a payment proof.\n *\n * It exists mainly for `input_hash`, an RFC 8785 digest. A serializer that\n * only sorts keys, as many non-JavaScript JSON libraries do, can disagree with\n * it on floats and non-ASCII keys, and the mandate is then refused with a\n * reason that does not name the field.\n */\nimport { importPKCS8, type JWK, SignJWT } from 'jose';\nimport {\n  AP2_CHECKOUT_PROFILE,\n  AP2_JWK_CURVE,\n  AP2_KEY_TYPE,\n  AP2_SIGNING_ALGORITHM,\n} from './constants';\nimport { computeInputHash } from './profile';\n\n/**\n * A private ES256 key: either a private JWK (the pair of the public one in the\n * gateway's `checkoutIssuers`) or a PKCS#8 PEM, as `openssl` emits it\n */\nexport type Ap2SigningKey = Readonly<Record<string, unknown>> | string;\n\nexport interface CreateCheckoutJwtOptions {\n  readonly privateKey: Ap2SigningKey;\n  /** Must match a `kid` configured under the gateway's `checkoutIssuers` */\n  readonly kid: string;\n  /** Must match that issuer's configured `issuer` */\n  readonly issuer: string;\n  /** Must match that issuer's configured `audience` */\n  readonly audience: string;\n\n  readonly resourceId: string;\n  /**\n   * The resource input this purchase is for, exactly as the buyer will send\n   * it: no reserved fields, no request id, no transport metadata\n   */\n  readonly input: unknown;\n\n  /**\n   * Decimal string, never a number, and compared as a string: `0.10` and `0.1`\n   * are different mandates. Take it from your own catalog rather than from\n   * whatever the agent asked for.\n   */\n  readonly amount: string;\n  readonly currency: string;\n  /** The rail that will settle, e.g. `x402` */\n  readonly paymentMethod: string;\n\n  /**\n   * Settlement coordinates. Required whenever the gateway's requirement names\n   * them, which under x402 is always. A mandate silent about the chain will\n   * not unlock a settlement on one.\n   */\n  readonly destination?: string;\n  readonly network?: string;\n  readonly asset?: string;\n\n  /** Defaults to a random UUID. Recorded on the receipt and used for replay defense */\n  readonly jwtId?: string;\n  /** Defaults to 900: a human approval sits inside this window */\n  readonly expiresInSeconds?: number;\n  /** Injectable so a test need not move the wall clock */\n  readonly now?: Date;\n}\n\nconst DEFAULT_EXPIRES_IN_SECONDS = 900;\n\nfunction requireText(value: unknown, field: string): string {\n  if (typeof value !== 'string' || value.length === 0) {\n    throw new TypeError(\n      `createCheckoutJwt: ${field} must be a non-empty string, received ${describe(value)}`,\n    );\n  }\n  return value;\n}\n\nfunction describe(value: unknown): string {\n  return value === null ? 'null' : typeof value;\n}\n\n/**\n * Every rejection here is a mistake that would otherwise surface as an opaque\n * verification failure much later: the public half of the pair, the wrong key\n * type, or a PEM that is not PKCS#8\n */\nasync function resolveKey(\n  key: Ap2SigningKey,\n): Promise<JWK | Awaited<ReturnType<typeof importPKCS8>>> {\n  if (typeof key === 'string') {\n    if (!key.includes('BEGIN PRIVATE KEY')) {\n      throw new TypeError(\n        'createCheckoutJwt: a string privateKey must be a PKCS#8 PEM beginning \"-----BEGIN PRIVATE KEY-----\"',\n      );\n    }\n    return importPKCS8(key, AP2_SIGNING_ALGORITHM);\n  }\n  if (typeof key !== 'object' || key === null) {\n    throw new TypeError('createCheckoutJwt: privateKey must be a private JWK or a PKCS#8 PEM');\n  }\n  if (key['d'] === undefined) {\n    throw new TypeError(\n      'createCheckoutJwt: privateKey is a public JWK (no \"d\"). Use the private half of the pair whose public key is configured under checkoutIssuers',\n    );\n  }\n  if (key['kty'] !== AP2_KEY_TYPE || key['crv'] !== AP2_JWK_CURVE) {\n    throw new TypeError(\n      `createCheckoutJwt: privateKey must be ${AP2_KEY_TYPE}/${AP2_JWK_CURVE}, the pair ${AP2_SIGNING_ALGORITHM} implies`,\n    );\n  }\n  return key as JWK;\n}\n\n/**\n * Returns the compact JWT to hand to the agent, which wraps it in the Checkout\n * Mandate the buyer signs\n */\nexport async function createCheckoutJwt(options: CreateCheckoutJwtOptions): Promise<string> {\n  const kid = requireText(options.kid, 'kid');\n  const issuer = requireText(options.issuer, 'issuer');\n  const audience = requireText(options.audience, 'audience');\n  const resourceId = requireText(options.resourceId, 'resourceId');\n  const currency = requireText(options.currency, 'currency');\n  const paymentMethod = requireText(options.paymentMethod, 'paymentMethod');\n\n  if (typeof options.amount === 'number') {\n    throw new TypeError(\n      'createCheckoutJwt: amount must be a decimal string, not a number. It is compared as a string, so 0.1 and \"0.10\" are different mandates',\n    );\n  }\n  const amount = requireText(options.amount, 'amount');\n\n  const key = await resolveKey(options.privateKey);\n  const issuedAt = Math.floor((options.now ?? new Date()).getTime() / 1000);\n  const expiresIn = options.expiresInSeconds ?? DEFAULT_EXPIRES_IN_SECONDS;\n  if (!Number.isInteger(expiresIn) || expiresIn <= 0) {\n    throw new TypeError('createCheckoutJwt: expiresInSeconds must be a positive whole number');\n  }\n\n  const agentCommerce: Record<string, string> = {\n    profile: AP2_CHECKOUT_PROFILE,\n    resource_id: resourceId,\n    input_hash: computeInputHash(options.input),\n    amount,\n    currency,\n    payment_method: paymentMethod,\n    ...(options.destination !== undefined ? { destination: options.destination } : {}),\n    ...(options.network !== undefined ? { network: options.network } : {}),\n    ...(options.asset !== undefined ? { asset: options.asset } : {}),\n  };\n\n  return new SignJWT({ agent_commerce: agentCommerce })\n    .setProtectedHeader({ alg: AP2_SIGNING_ALGORITHM, kid, typ: 'JWT' })\n    .setIssuer(issuer)\n    .setAudience(audience)\n    .setIssuedAt(issuedAt)\n    .setExpirationTime(issuedAt + expiresIn)\n    .setJti(options.jwtId ?? crypto.randomUUID())\n    .sign(key);\n}\n","/**\n * Durable record of which mandates have been spent.\n *\n * Its own table in its own file: a payment replay key is needed only until its\n * authorization's `validBefore`, after which it cannot settle, while a consumed\n * mandate must stay consumed for as long as the merchant can be asked what they\n * delivered. Hence no retention sweep, unlike the ACP idempotency store:\n * deleting a `consumed` row makes that mandate spendable again. If the table\n * ever needs bounding, archive `released` rows and leave the rest.\n *\n * Settlement and replay-state updates are separate transactions. A crash\n * between them leaves the mandate `reserved`, blocking retries until its\n * payment is resolved and the hold is updated. This favors a refused retry\n * over a possible second payment.\n */\nimport type { Database } from 'better-sqlite3';\nimport { type Logger, NOOP_LOGGER } from '../../core';\nimport { openSqliteDatabase } from '../../storage/sqlite';\n\n/**\n * `released` permits another reservation; other states block reuse.\n * `uncertain` records an unknown settlement outcome and stays blocked until\n * payment resolution is followed by a consume or release update.\n */\nexport type Ap2AuthorizationState = 'reserved' | 'consumed' | 'released' | 'uncertain';\n\n/**\n * A digest and a few identifiers: everything replay defense needs, and nothing\n * a leaked database would hand an attacker\n */\nexport interface Ap2ReservationRequest {\n  /**\n   * Digest of the ISSUER-SIGNED TOKEN, not of the presentation. Selective\n   * disclosure gives one mandate many presentation strings, so keying on the\n   * presentation would let it be spent once per disclosed subset.\n   */\n  readonly reference: string;\n  /** `jti` of the merchant checkout JWT the mandate binds */\n  readonly checkoutJti: string;\n  readonly mandateIssuer: string;\n  readonly checkoutIssuer: string;\n  readonly resourceId: string;\n  readonly requestId: string;\n}\n\nexport type Ap2ReservationResult =\n  | { readonly kind: 'reserved' }\n  /** Already reserved, consumed or uncertain; refuse this reservation */\n  | { readonly kind: 'replayed'; readonly state: Ap2AuthorizationState };\n\n// A store written against 2.4 returns nothing, which counts as applied; only an\n// explicit false is a refusal\n// biome-ignore lint/suspicious/noConfusingVoidType: keeps void-returning stores assignable\ntype TransitionResult = boolean | void;\n\nexport interface Ap2ReplayStore {\n  /** Atomically claim a mandate, or report that something already holds it */\n  reserve(request: Ap2ReservationRequest): Ap2ReservationResult;\n  /**\n   * Mark the mandate permanently spent, targeting only the supplied\n   * `requestId` when present. Returns true when the matching reservation is\n   * consumed, including on a repeated call, and false otherwise.\n   */\n  consume(reference: string, requestId?: string): TransitionResult;\n  /**\n   * Release a reservation for reuse. Returns true if it is released or the\n   * supplied `requestId` differs from the current holder; a different holder\n   * is left unchanged. Returns false otherwise.\n   */\n  release(reference: string, requestId?: string): TransitionResult;\n  /**\n   * Record an unknown settlement outcome for operator review and block reuse.\n   * Returns true when the matching reservation is uncertain, including on a\n   * repeated call, and false otherwise.\n   */\n  markUncertain(reference: string, requestId?: string): TransitionResult;\n  /** Current state, for tests and diagnostics */\n  stateOf(reference: string): Ap2AuthorizationState | undefined;\n  close(): void;\n}\n\nexport interface Ap2ReplayStoreOptions {\n  /** File path, or ':memory:' for tests */\n  readonly path: string;\n  readonly logger?: Logger;\n  /** Injectable so tests need not move the wall clock */\n  readonly now?: () => number;\n}\n\ninterface StateRow {\n  state: string;\n}\n\nexport function createAp2ReplayStore(options: Ap2ReplayStoreOptions): Ap2ReplayStore {\n  const logger = options.logger ?? NOOP_LOGGER;\n  const now = options.now ?? (() => Date.now());\n\n  const db: Database = openSqliteDatabase({\n    path: options.path,\n    label: 'AP2 authorization database',\n    logger,\n  });\n  migrate(db);\n\n  const selectByReference = db.prepare<[string], StateRow>(\n    'SELECT state FROM ap2_authorizations WHERE reference = ?',\n  );\n  // Two mandates can bind one checkout document, giving two references, so\n  // the reference alone would not catch the second one\n  const selectLiveByJti = db.prepare<[string, string], StateRow>(\n    `SELECT state FROM ap2_authorizations\n      WHERE checkout_jti = ? AND reference != ? AND state != 'released'`,\n  );\n  const insert = db.prepare(\n    `INSERT INTO ap2_authorizations\n       (reference, checkout_jti, mandate_issuer, checkout_issuer, resource_id, request_id,\n        state, created_at, updated_at)\n     VALUES (@reference, @checkout_jti, @mandate_issuer, @checkout_issuer, @resource_id,\n             @request_id, 'reserved', @at, @at)`,\n  );\n  const reReserve = db.prepare(\n    `UPDATE ap2_authorizations\n        SET state = 'reserved', request_id = @request_id, updated_at = @at\n      WHERE reference = @reference AND state = 'released'`,\n  );\n  // These updates leave consumed and released rows unchanged; a consumed\n  // mandate must not become reusable. reserve() can claim released rows again.\n  // When supplied, requestId prevents a late update from changing another\n  // request's reservation.\n  const transition = db.prepare(\n    `UPDATE ap2_authorizations SET state = @state, updated_at = @at\n      WHERE reference = @reference AND state IN ('reserved', 'uncertain')\n        AND (@request_id IS NULL OR request_id = @request_id)`,\n  );\n  const selectHolder = db.prepare<[string], StateRow & { request_id: string }>(\n    'SELECT state, request_id FROM ap2_authorizations WHERE reference = ?',\n  );\n\n  const reserveTx = db.transaction((request: Ap2ReservationRequest): Ap2ReservationResult => {\n    const at = new Date(now()).toISOString();\n\n    const existing = selectByReference.get(request.reference);\n    if (existing !== undefined && existing.state !== 'released') {\n      return { kind: 'replayed', state: existing.state as Ap2AuthorizationState };\n    }\n\n    // Checked for a released reference too: another mandate may have reserved\n    // or spent the same checkout while this one was released\n    const sameCheckout = selectLiveByJti.get(request.checkoutJti, request.reference);\n    if (sameCheckout !== undefined) {\n      return { kind: 'replayed', state: sameCheckout.state as Ap2AuthorizationState };\n    }\n\n    if (existing !== undefined) {\n      reReserve.run({ reference: request.reference, request_id: request.requestId, at });\n      return { kind: 'reserved' };\n    }\n\n    insert.run({\n      reference: request.reference,\n      checkout_jti: request.checkoutJti,\n      mandate_issuer: request.mandateIssuer,\n      checkout_issuer: request.checkoutIssuer,\n      resource_id: request.resourceId,\n      request_id: request.requestId,\n      at,\n    });\n    return { kind: 'reserved' };\n  });\n\n  const move = (reference: string, state: Ap2AuthorizationState, requestId?: string): boolean => {\n    const { changes } = transition.run({\n      reference,\n      state,\n      request_id: requestId ?? null,\n      at: new Date(now()).toISOString(),\n    });\n    if (changes > 0) return true;\n    const row = selectHolder.get(reference);\n    if (row === undefined) return false;\n    // A different holder can follow a release and re-reservation; acknowledge\n    // an old release without changing the current reservation\n    if (requestId !== undefined && row.request_id !== requestId) return state === 'released';\n    return row.state === state;\n  };\n\n  let closed = false;\n  return {\n    reserve(request) {\n      return reserveTx(request);\n    },\n    consume(reference, requestId) {\n      return move(reference, 'consumed', requestId);\n    },\n    release(reference, requestId) {\n      return move(reference, 'released', requestId);\n    },\n    markUncertain(reference, requestId) {\n      return move(reference, 'uncertain', requestId);\n    },\n    stateOf(reference) {\n      return selectByReference.get(reference)?.state as Ap2AuthorizationState | undefined;\n    },\n    close() {\n      if (closed) return;\n      closed = true;\n      db.close();\n    },\n  };\n}\n\n// `PRAGMA user_version`, so reopening an existing file is a no-op check\nfunction migrate(db: Database): void {\n  const current = db.pragma('user_version', { simple: true }) as number;\n  if (current >= 1) return;\n  const apply = db.transaction(() => {\n    db.exec(`\n      CREATE TABLE IF NOT EXISTS ap2_authorizations (\n        reference        TEXT PRIMARY KEY,\n        checkout_jti     TEXT NOT NULL,\n        mandate_issuer   TEXT NOT NULL,\n        checkout_issuer  TEXT NOT NULL,\n        resource_id      TEXT NOT NULL,\n        request_id       TEXT NOT NULL,\n        state            TEXT NOT NULL\n                         CHECK (state IN ('reserved', 'consumed', 'released', 'uncertain')),\n        created_at       TEXT NOT NULL,\n        updated_at       TEXT NOT NULL\n      );\n      CREATE INDEX IF NOT EXISTS idx_ap2_authorizations_checkout_jti\n        ON ap2_authorizations(checkout_jti);\n    `);\n    db.pragma('user_version = 1');\n  });\n  apply();\n}\n","/**\n * Stage two: the merchant checkout JWT the mandate binds.\n *\n * Two things have to hold. The hash proves the buyer approved *this* document;\n * the signature proves the merchant issued it. Hash alone accepts a document\n * the buyer wrote themselves; signature alone accepts a genuine merchant\n * document this mandate never covered.\n */\nimport { decodeJwt, decodeProtectedHeader, type JWTVerifyOptions, jwtVerify } from 'jose';\nimport type { Clock } from '../../core';\nimport { AP2_SIGNING_ALGORITHM } from './constants';\nimport { type Ap2ErrorContext, ap2Rejected } from './errors';\nimport { sha256 } from './sha256';\nimport type { TrustStore } from './trust';\n\nexport interface VerifiedCheckoutJwt {\n  readonly issuer: string;\n  readonly jwtId: string;\n  readonly claims: Readonly<Record<string, unknown>>;\n}\n\n/**\n * `mandateClaims` must come from an already-verified mandate: `checkout_hash`\n * is worth nothing unless the issuer signed it\n */\nexport async function verifyCheckoutJwt(\n  mandateClaims: Readonly<Record<string, unknown>>,\n  deps: { readonly trust: TrustStore; readonly clock: Clock; readonly clockSkewSeconds: number },\n  context: Ap2ErrorContext,\n): Promise<VerifiedCheckoutJwt> {\n  const compact = mandateClaims['checkout_jwt'];\n  const expectedHash = mandateClaims['checkout_hash'];\n  if (typeof compact !== 'string' || compact.length === 0) {\n    throw ap2Rejected('invalid_claims', context);\n  }\n  if (typeof expectedHash !== 'string' || expectedHash.length === 0) {\n    throw ap2Rejected('invalid_claims', context);\n  }\n\n  requireMatchingHash(compact, expectedHash, context);\n\n  // Unverified, and read only to pick which configured key to try\n  let header: ReturnType<typeof decodeProtectedHeader>;\n  let unverifiedPayload: ReturnType<typeof decodeJwt>;\n  try {\n    header = decodeProtectedHeader(compact);\n    unverifiedPayload = decodeJwt(compact);\n  } catch (cause) {\n    throw ap2Rejected('checkout_binding_failed', { ...context, cause });\n  }\n\n  const { issuer, key } = await deps.trust.resolve(unverifiedPayload.iss, header.kid, context);\n\n  const options: JWTVerifyOptions = {\n    algorithms: [AP2_SIGNING_ALGORITHM],\n    issuer: issuer.issuer,\n    audience: issuer.audience,\n    clockTolerance: deps.clockSkewSeconds,\n    currentDate: deps.clock.now(),\n  };\n\n  let claims: Record<string, unknown>;\n  try {\n    const result = await jwtVerify(compact, key, options);\n    claims = result.payload as Record<string, unknown>;\n  } catch (cause) {\n    throw ap2Rejected('checkout_binding_failed', { ...context, cause });\n  }\n\n  const exp = claims['exp'];\n  const iat = claims['iat'];\n  const jti = claims['jti'];\n  // jose validates a time claim only when present, so requiring them is ours\n  if (typeof exp !== 'number' || typeof iat !== 'number') {\n    throw ap2Rejected('invalid_claims', context);\n  }\n  // `jti` is what replay defense and the receipt record, so it is required\n  if (typeof jti !== 'string' || jti.length === 0) {\n    throw ap2Rejected('invalid_claims', context);\n  }\n  const nowSeconds = Math.floor(deps.clock.now().getTime() / 1000);\n  if (iat > nowSeconds + deps.clockSkewSeconds) throw ap2Rejected('expired', context);\n\n  return { issuer: issuer.issuer, jwtId: jti, claims };\n}\n\n/**\n * Hashes the compact JWT as it arrived. Re-encoding the parsed claims would\n * hash a different document from the one being verified.\n */\nfunction requireMatchingHash(compact: string, expected: string, context: Ap2ErrorContext): void {\n  // sha-256 only: `_sd_alg` was already pinned to it upstream\n  const actual = sha256(compact).toString('base64url');\n  // Plain comparison: both sides are public to anyone holding the\n  // presentation, so there is no secret for timing to leak\n  if (actual !== expected) throw ap2Rejected('checkout_binding_failed', context);\n}\n","/**\n * Parse the presentation, verify the issuer's signature, resolve disclosures,\n * and read the mandate from `delegate_payload`.\n *\n * `@sd-jwt/core` handles disclosures, including malformed, duplicate, and\n * unreferenced disclosures. `jose` verifies the signature. This module applies\n * the configured key, algorithm, audience, and time policy.\n */\nimport { decodeSdJwt, getClaims, splitSdJwt } from '@sd-jwt/core';\nimport { type JWTVerifyOptions, jwtVerify } from 'jose';\nimport type { Clock } from '../../core';\nimport { isRecord } from '../../core/is-record';\nimport { AP2_CHECKOUT_MANDATE_VCT, AP2_DIGEST_ALGORITHM, AP2_SIGNING_ALGORITHM } from './constants';\nimport { type Ap2ErrorContext, ap2Rejected } from './errors';\nimport { sha256 } from './sha256';\nimport type { TrustStore } from './trust';\n\nexport interface VerifiedMandate {\n  readonly issuer: string;\n  /** The mandate element, with its nested disclosures resolved */\n  readonly claims: Readonly<Record<string, unknown>>;\n  /**\n   * The issuer-signed token on its own, without the disclosures.\n   *\n   * This, not the presentation string, is the stable identity of a mandate:\n   * disclosing or withholding an optional claim rewrites the presentation and\n   * leaves the signed token untouched. Replay defense keys on a digest of it.\n   */\n  readonly signedToken: string;\n}\n\n/**\n * `@sd-jwt/core` passes the algorithm it read from `_sd_alg`, so this is also\n * where a presentation declaring anything but sha-256 is refused\n */\nfunction hasher(data: string | ArrayBuffer, algorithm: string): Uint8Array {\n  if (algorithm.toLowerCase() !== AP2_DIGEST_ALGORITHM) {\n    throw ap2Rejected('malformed_presentation');\n  }\n  return sha256(typeof data === 'string' ? data : new Uint8Array(data));\n}\n\n/**\n * Order is the security boundary here: nothing is trusted until `jwtVerify`\n * returns. `kid` and `iss` are read before that only to pick which configured\n * key to try, and picking wrong just makes the signature fail.\n */\n// Both spellings of the renamed Delegate SD-JWT hop types\nconst KEY_BOUND_TYPES: ReadonlySet<string> = new Set([\n  'kb+sd-jwt',\n  'kb-sd-jwt',\n  'kb+sd-jwt+kb',\n  'kb-sd-jwt+kb',\n]);\n\nexport async function verifyMandate(\n  presentation: string,\n  deps: MandatePolicy,\n  context: Ap2ErrorContext,\n): Promise<VerifiedMandate> {\n  // Direct mode does not verify `~~`-joined delegation chains.\n  if (presentation.includes('~~')) {\n    throw ap2Rejected('unsupported_mandate_type', context);\n  }\n\n  let decoded: Awaited<ReturnType<typeof decodeSdJwt>>;\n  let encodedJws: string;\n  try {\n    // Covers a malformed base JWT, a disclosure that will not decode, a\n    // duplicate digest, and an `_sd_alg` other than sha-256\n    decoded = await decodeSdJwt(presentation, hasher);\n    encodedJws = splitSdJwt(presentation).jwt;\n  } catch (cause) {\n    throw ap2Rejected('malformed_presentation', { ...context, cause });\n  }\n\n  // Direct mode issues no key-bound mandates, so one arriving here belongs to\n  // a flow we do not verify. Ignoring it would mean silently not checking a\n  // proof that was sent.\n  if (decoded.kbJwt !== undefined) {\n    throw ap2Rejected('unsupported_mandate_type', context);\n  }\n\n  const rawPayload = decoded.jwt.payload;\n  const header = decoded.jwt.header;\n  if (!isRecord(rawPayload) || !isRecord(header)) {\n    throw ap2Rejected('malformed_presentation', context);\n  }\n\n  // Reject a delegation hop presented without its mandate. Its type or\n  // preceding-token hash identifies it.\n  if (\n    KEY_BOUND_TYPES.has(String(header['typ'])) ||\n    rawPayload['sd_hash'] !== undefined ||\n    rawPayload['issuer_jwt_hash'] !== undefined\n  ) {\n    throw ap2Rejected('unsupported_mandate_type', context);\n  }\n\n  const { issuer, key } = await deps.trust.resolve(rawPayload['iss'], header['kid'], context);\n\n  // AP2 permits an absent `aud`. If present, it must match the issuer's\n  // configured audience. The checkout JWT has a separate audience check.\n  const hasAudience = rawPayload['aud'] !== undefined;\n  if (!hasAudience && deps.requireAudience === true) {\n    throw ap2Rejected('invalid_claims', context);\n  }\n\n  const options: JWTVerifyOptions = {\n    // Redundant with one resolved EC key, which already refuses `alg: none` and\n    // a forged HMAC. It stops the header picking the algorithm if a key set is\n    // ever resolved instead.\n    algorithms: [AP2_SIGNING_ALGORITHM],\n    // Also redundant, since the key was resolved *from* `iss`, and kept as a\n    // backstop for a resolver that matches on something else\n    ...(rawPayload['iss'] !== undefined ? { issuer: issuer.issuer } : {}),\n    // Not redundant: `aud` is the presenter's claim, checked against the\n    // configured value\n    ...(hasAudience ? { audience: issuer.audience } : {}),\n    clockTolerance: deps.clockSkewSeconds,\n    // Injected clock, not jose's `Date.now()`, so expiry is testable\n    currentDate: deps.clock.now(),\n  };\n\n  let verifiedPayload: Record<string, unknown>;\n  try {\n    const result = await jwtVerify(encodedJws, key, options);\n    verifiedPayload = result.payload as Record<string, unknown>;\n  } catch (cause) {\n    throw ap2Rejected(classifyJoseFailure(cause), { ...context, cause });\n  }\n\n  let claims: Record<string, unknown>;\n  try {\n    // Against the VERIFIED payload: the decoded one would match disclosures\n    // against digests nobody signed\n    claims = (await getClaims(verifiedPayload, decoded.disclosures, hasher)) as Record<\n      string,\n      unknown\n    >;\n  } catch (cause) {\n    // Where an appended disclosure that no digest references is refused\n    throw ap2Rejected('malformed_presentation', { ...context, cause });\n  }\n\n  const mandate = delegatedMandate(claims, context);\n  // This verifier rejects KB-JWTs, so it cannot check a `cnf` holder-key\n  // binding. Reject the mandate rather than ignore the binding.\n  if (claims['cnf'] !== undefined || mandate['cnf'] !== undefined) {\n    throw ap2Rejected('unsupported_mandate_type', context);\n  }\n  requireClosedCheckoutMandate(mandate, context);\n  // Closed mandates cannot carry constraints this verifier does not evaluate\n  if (mandate['constraints'] !== undefined) {\n    throw ap2Rejected('unsupported_mandate_type', context);\n  }\n  requireFreshness([verifiedPayload, mandate], deps, context);\n\n  return { issuer: issuer.issuer, claims: mandate, signedToken: encodedJws };\n}\n\n/** What the verifier enforces beyond the signature */\nexport interface MandatePolicy {\n  readonly trust: TrustStore;\n  readonly clock: Clock;\n  readonly clockSkewSeconds: number;\n  /** Refuse a mandate with no `aud` */\n  readonly requireAudience?: boolean;\n  /** Refuse a mandate with no `exp`, at the top level or in the mandate content */\n  readonly requireExpiry?: boolean;\n}\n\n/**\n * Read the single object in `delegate_payload` after disclosure resolution.\n * The reference SDK discloses this element. If none or multiple are present,\n * there is no single mandate to check.\n */\nfunction delegatedMandate(\n  claims: Record<string, unknown>,\n  context: Ap2ErrorContext,\n): Record<string, unknown> {\n  const delegated = claims['delegate_payload'];\n  // One shape only: claims at the top level are refused, not read a second way\n  if (!Array.isArray(delegated)) throw ap2Rejected('unsupported_mandate_type', context);\n  const disclosed = delegated.filter(isRecord);\n  const [only] = disclosed;\n  if (disclosed.length !== 1 || only === undefined) throw ap2Rejected('invalid_claims', context);\n  return only;\n}\n\n/**\n * Matched on jose's stable error `code`, not its message. A client is owed\n * \"expired\" versus \"did not verify\"; anything finer describes our checks back\n * to whoever is probing them.\n */\nfunction classifyJoseFailure(\n  cause: unknown,\n): 'expired' | 'wrong_audience' | 'invalid_claims' | 'invalid_signature' {\n  const code = (cause as { code?: unknown })?.code;\n  if (code === 'ERR_JWT_EXPIRED') return 'expired';\n  if (code === 'ERR_JWT_CLAIM_VALIDATION_FAILED') {\n    const { claim, reason } = cause as { claim?: unknown; reason?: unknown };\n    if (claim === 'aud') return 'wrong_audience';\n    // `invalid` is jose's reason for a time claim that is not a number\n    if (claim === 'nbf' || claim === 'exp')\n      return reason === 'invalid' ? 'invalid_claims' : 'expired';\n  }\n  return 'invalid_signature';\n}\n\n/**\n * Check `exp`, `nbf` and `iat` on the signed token and the disclosed mandate.\n * `jose` checks only the token's time claims. AP2 requires none of them;\n * policy can require `exp` in either location.\n */\nfunction requireFreshness(\n  sources: readonly Record<string, unknown>[],\n  deps: MandatePolicy,\n  context: Ap2ErrorContext,\n): void {\n  const nowSeconds = Math.floor(deps.clock.now().getTime() / 1000);\n  let expires = false;\n  for (const claims of sources) {\n    const exp = claims['exp'];\n    const iat = claims['iat'];\n    if (exp !== undefined) {\n      if (typeof exp !== 'number') throw ap2Rejected('invalid_claims', context);\n      if (exp <= nowSeconds - deps.clockSkewSeconds) throw ap2Rejected('expired', context);\n      expires = true;\n    }\n    const nbf = claims['nbf'];\n    if (nbf !== undefined) {\n      if (typeof nbf !== 'number') throw ap2Rejected('invalid_claims', context);\n      if (nbf > nowSeconds + deps.clockSkewSeconds) throw ap2Rejected('expired', context);\n    }\n    if (iat !== undefined) {\n      if (typeof iat !== 'number') throw ap2Rejected('invalid_claims', context);\n      // A future `iat` is a broken signer, or a mandate minted to outlive its\n      // own expiry window\n      if (iat > nowSeconds + deps.clockSkewSeconds) throw ap2Rejected('expired', context);\n    }\n  }\n  if (!expires && deps.requireExpiry === true) throw ap2Rejected('invalid_claims', context);\n}\n\n// Exactly `mandate.checkout.1`; see AP2_CHECKOUT_MANDATE_VCT for why\nfunction requireClosedCheckoutMandate(\n  claims: Record<string, unknown>,\n  context: Ap2ErrorContext,\n): void {\n  if (claims['vct'] !== AP2_CHECKOUT_MANDATE_VCT) {\n    throw ap2Rejected('unsupported_mandate_type', context);\n  }\n}\n","/**\n * Static key resolution.\n *\n * Every key was written into `config.yaml` by an operator. No JWKS fetch, no\n * `jku`, no `x5u`. A mandate's `iss` and `kid`, or its `kid` alone when it\n * names no issuer, only choose *which* trusted key verifies it; anything\n * unrecognized is refused, so a mandate can never nominate its own signer.\n *\n * Not a \"try every key\" loop: that would make `kid` advisory and accept a\n * mandate that named a key it was not signed with.\n */\nimport { importJWK, type JWK } from 'jose';\nimport { AP2_SIGNING_ALGORITHM } from './constants';\nimport { type Ap2ErrorContext, ap2Rejected, ap2Unavailable } from './errors';\nimport type { Ap2TrustedIssuer } from './types';\n\n/** Named off `importJWK` because `CryptoKey` is a DOM type we do not load */\nexport type VerificationKey = Awaited<ReturnType<typeof importJWK>>;\n\nexport interface ResolvedKey {\n  readonly issuer: Ap2TrustedIssuer;\n  readonly key: VerificationKey;\n}\n\n/**\n * Resolves `(iss, kid)` against one configured issuer list. Caches the import\n * promise, not the key, so concurrent requests for a cold key share one import.\n */\nexport function createTrustStore(issuers: readonly Ap2TrustedIssuer[]) {\n  const byIssuer = new Map(issuers.map((entry) => [entry.issuer, entry]));\n  const imported = new Map<string, Promise<VerificationKey>>();\n\n  function issuerByName(iss: unknown, context: Ap2ErrorContext): Ap2TrustedIssuer {\n    if (typeof iss !== 'string' || iss.length === 0) {\n      throw ap2Rejected('invalid_claims', context);\n    }\n    const issuer = byIssuer.get(iss);\n    if (issuer === undefined) throw ap2Rejected('untrusted_issuer', context);\n    return issuer;\n  }\n\n  // AP2 mandates may omit `iss`; the reference SDK mints none. The `kid` then\n  // selects the issuer, and a `kid` that two issuers share selects neither.\n  function issuerByKid(kid: string, context: Ap2ErrorContext): Ap2TrustedIssuer {\n    const matches = issuers.filter((entry) => entry.keys.some((key) => key.kid === kid));\n    const [only] = matches;\n    if (matches.length !== 1 || only === undefined) throw ap2Rejected('unknown_key', context);\n    return only;\n  }\n\n  return {\n    /** Every trusted issuer id, for diagnostics. Never the keys themselves */\n    issuerIds(): readonly string[] {\n      return [...byIssuer.keys()];\n    },\n\n    async resolve(iss: unknown, kid: unknown, context: Ap2ErrorContext): Promise<ResolvedKey> {\n      // Not defaulted to the issuer's only key: mid-rotation there are two,\n      // and the gateway should not guess which one signed this\n      if (typeof kid !== 'string' || kid.length === 0) {\n        throw ap2Rejected('unknown_key', context);\n      }\n      const issuer = iss === undefined ? issuerByKid(kid, context) : issuerByName(iss, context);\n      const trusted = issuer.keys.find((candidate) => candidate.kid === kid);\n      if (trusted === undefined) throw ap2Rejected('unknown_key', context);\n\n      // JSON, not a joined string: both halves are operator-chosen and could\n      // contain whatever separator we picked\n      const cacheKey = JSON.stringify([iss, kid]);\n      let pending = imported.get(cacheKey);\n      if (pending === undefined) {\n        pending = importJWK(trusted.jwk as JWK, AP2_SIGNING_ALGORITHM);\n        imported.set(cacheKey, pending);\n      }\n\n      try {\n        return { issuer, key: await pending };\n      } catch (cause) {\n        // Config already checked this JWK member by member, so reaching here\n        // means our config is broken, not the mandate. Drop the cached\n        // rejection so the next request retries the import.\n        imported.delete(cacheKey);\n        throw ap2Unavailable('configured verification key could not be imported', {\n          ...context,\n          cause,\n        });\n      }\n    },\n  };\n}\n\nexport type TrustStore = ReturnType<typeof createTrustStore>;\n","/**\n * The Direct Checkout Mandate verifier: mandate signature first, then the\n * merchant checkout JWT it binds. Either stage failing is a refusal.\n *\n * Verification establishes that a trusted issuer signed the mandate, its\n * supplied time and audience claims pass policy, and it binds a checkout JWT\n * signed by a trusted merchant issuer. `bindMandateToPurchase` separately\n * checks the purchase before settlement.\n */\nimport type { Clock } from '../../core';\nimport { verifyCheckoutJwt } from './checkout-jwt';\nimport { type Ap2ErrorContext, ap2Rejected } from './errors';\nimport { verifyMandate } from './sd-jwt';\nimport { sha256 } from './sha256';\nimport { createTrustStore } from './trust';\nimport type { EnabledAp2Config, VerifiedCheckoutMandate } from './types';\n\nexport interface Ap2VerifierOptions {\n  readonly config: EnabledAp2Config;\n  readonly clock: Clock;\n}\n\nexport interface Ap2MandateVerifier {\n  verify(presentation: string, context?: Ap2ErrorContext): Promise<VerifiedCheckoutMandate>;\n  /** Trusted issuer ids, for the provider's health detail. Never keys */\n  trustedIssuers(): { readonly mandate: readonly string[]; readonly checkout: readonly string[] };\n}\n\n/**\n * Algorithm-prefixed so a future digest change is visible in stored references\n * rather than silently producing unequal values for one mandate\n */\nfunction mandateReference(signedToken: string): string {\n  return `sha256:${sha256(signedToken).toString('base64url')}`;\n}\n\nexport function createAp2MandateVerifier(options: Ap2VerifierOptions): Ap2MandateVerifier {\n  // Two stores, not one list: signing the merchant's checkout documents must\n  // not confer the power to issue mandates\n  const mandateTrust = createTrustStore(options.config.trust.mandateIssuers);\n  const checkoutTrust = createTrustStore(options.config.trust.checkoutIssuers);\n  const deps = { clock: options.clock, clockSkewSeconds: options.config.clockSkewSeconds };\n  const mandatePolicy = {\n    ...deps,\n    trust: mandateTrust,\n    requireAudience: options.config.requireMandateAudience === true,\n    requireExpiry: options.config.requireMandateExpiry === true,\n  };\n\n  return {\n    async verify(\n      presentation: string,\n      context: Ap2ErrorContext = {},\n    ): Promise<VerifiedCheckoutMandate> {\n      if (typeof presentation !== 'string' || presentation.length === 0) {\n        throw ap2Rejected('malformed_presentation', context);\n      }\n\n      const mandate = await verifyMandate(presentation, mandatePolicy, context);\n      const checkout = await verifyCheckoutJwt(\n        mandate.claims,\n        { ...deps, trust: checkoutTrust },\n        context,\n      );\n\n      return {\n        reference: mandateReference(mandate.signedToken),\n        mandateIssuer: mandate.issuer,\n        checkoutIssuer: checkout.issuer,\n        checkoutJwtId: checkout.jwtId,\n        checkoutClaims: checkout.claims,\n      };\n    },\n\n    trustedIssuers() {\n      return { mandate: mandateTrust.issuerIds(), checkout: checkoutTrust.issuerIds() };\n    },\n  };\n}\n","/**\n * The AP2 authorization provider: the seam between core's generic contract and\n * the mandate machinery.\n *\n * It owns its replay store, so whoever creates it must call `close()`:\n * `createGateway` does not close authorization providers.\n */\nimport type {\n  AdapterHealth,\n  AuthorizationFinalizeContext,\n  AuthorizationProvider,\n  AuthorizationRequirement,\n  AuthorizationVerification,\n  AuthorizationVerificationContext,\n  Clock,\n  Logger,\n} from '../../core';\nimport { NOOP_LOGGER, systemClock } from '../../core';\nimport { PACKAGE_VERSION } from '../../version';\nimport { AP2_CHECKOUT_PROFILE, AP2_SPEC_VERSION } from './constants';\nimport { buildAp2Descriptor } from './descriptor';\nimport { type Ap2ErrorContext, ap2Replayed, ap2Unavailable } from './errors';\nimport { bindMandateToPurchase } from './profile';\nimport { type Ap2ReplayStore, createAp2ReplayStore } from './replay-store';\nimport type { EnabledAp2Config } from './types';\nimport { createAp2MandateVerifier } from './verifier';\n\nexport interface Ap2AuthorizationProviderOptions {\n  readonly config: EnabledAp2Config;\n  readonly clock?: Clock;\n  readonly logger?: Logger;\n  /** Injectable so tests need not touch the filesystem */\n  readonly replayStore?: Ap2ReplayStore;\n}\n\nexport interface Ap2AuthorizationProvider extends AuthorizationProvider {\n  /** Closes the replay store */\n  close(): void;\n}\n\nexport function createAp2AuthorizationProvider(\n  options: Ap2AuthorizationProviderOptions,\n): Ap2AuthorizationProvider {\n  const clock = options.clock ?? systemClock;\n  const logger = options.logger ?? NOOP_LOGGER;\n\n  const verifier = createAp2MandateVerifier({ config: options.config, clock });\n  const replay =\n    options.replayStore ?? createAp2ReplayStore({ path: options.config.replay.path, logger });\n\n  const requirement: AuthorizationRequirement = {\n    method: 'ap2',\n    version: AP2_SPEC_VERSION,\n    profile: AP2_CHECKOUT_PROFILE,\n  };\n\n  async function verifyAndReserve(\n    context: AuthorizationVerificationContext,\n  ): Promise<AuthorizationVerification> {\n    const errorContext: Ap2ErrorContext = {\n      requestId: context.requestId,\n      resourceId: context.resourceId,\n    };\n\n    const mandate = await verifier.verify(context.submission.payload, errorContext);\n    // Before reserving, not after: a mandate that does not authorize this\n    // purchase must stay spendable on the purchase it does authorize\n    await bindMandateToPurchase(mandate, context, errorContext);\n\n    let reservation: ReturnType<Ap2ReplayStore['reserve']>;\n    try {\n      reservation = replay.reserve({\n        reference: mandate.reference,\n        checkoutJti: mandate.checkoutJwtId,\n        mandateIssuer: mandate.mandateIssuer,\n        checkoutIssuer: mandate.checkoutIssuer,\n        resourceId: context.resourceId,\n        requestId: context.requestId,\n      });\n    } catch (cause) {\n      throw ap2Unavailable('replay store could not be written', { ...errorContext, cause });\n    }\n\n    if (reservation.kind === 'replayed') {\n      throw ap2Replayed(reservation.state, errorContext);\n    }\n\n    return {\n      status: 'verified',\n      method: 'ap2',\n      reference: mandate.reference,\n      // The reservation handle is the reference itself, so the two can never\n      // name different mandates\n      reservationId: mandate.reference,\n      // Opaque identifiers an operator can reconcile with. Never a claim from\n      // the mandate: those carry the buyer's purchase and their personal data.\n      // `checkoutId`, not `checkoutJwtId` - the receipt store redacts any key\n      // that reads as secret-shaped, and \"jwt\" is on that list.\n      metadata: {\n        mandateIssuer: mandate.mandateIssuer,\n        checkoutIssuer: mandate.checkoutIssuer,\n        checkoutId: mandate.checkoutJwtId,\n      },\n    };\n  }\n\n  const finalize = (\n    action: 'consume' | 'release' | 'markUncertain',\n    reservationId: string,\n    context: AuthorizationFinalizeContext,\n  ): void => {\n    let applied: ReturnType<Ap2ReplayStore[typeof action]>;\n    try {\n      applied = replay[action](reservationId, context.requestId);\n    } catch (cause) {\n      throw ap2Unavailable(`replay store could not record ${action}`, { ...context, cause });\n    }\n    // Reject an explicit false so callers do not record an unconfirmed hold update\n    if (applied === false) {\n      throw ap2Unavailable(`replay store holds no matching reservation to ${action}`, context);\n    }\n  };\n\n  return {\n    name: 'ap2',\n    descriptor: buildAp2Descriptor(PACKAGE_VERSION),\n    requirement,\n    verifyAndReserve,\n\n    async consume(reservationId, context) {\n      finalize('consume', reservationId, context);\n    },\n    async release(reservationId, context) {\n      finalize('release', reservationId, context);\n    },\n    async markUncertain(reservationId, context) {\n      finalize('markUncertain', reservationId, context);\n    },\n\n    async health(): Promise<AdapterHealth> {\n      const startedAt = clock.monotonicMs();\n      const checkedAt = clock.nowIso();\n      let available = true;\n      try {\n        // A read against the real table, so a database that opened but cannot\n        // be queried is caught here rather than on the first purchase\n        replay.stateOf('health-probe');\n      } catch {\n        available = false;\n      }\n      const durationMs = Math.round(clock.monotonicMs() - startedAt);\n      if (!available) {\n        // A fixed token, never a sentence built from the caught error\n        return { status: 'fail', checkedAt, durationMs, detail: 'replay-store-unavailable' };\n      }\n      const trusted = verifier.trustedIssuers();\n      return {\n        status: 'pass',\n        checkedAt,\n        durationMs,\n        detail: `mandate-issuers=${trusted.mandate.length} checkout-issuers=${trusted.checkout.length}`,\n      };\n    },\n\n    close() {\n      replay.close();\n    },\n  };\n}\n"]}

package/dist/cli/{chunk-G2JEY7MB.js → chunk-2J2IQQ4X.js}

@@ -1,10 +1,11 @@
-import { ACP_WELL_KNOWN_PATH, DEFAULT_CONFIG_FILENAME, ACP_CHECKOUT_OPERATIONS, isObjectSchemaNode, extractPathParameterNames, findUnparsedBraceToken, ACP_OPERATION_INPUT_KEYS, ACP_OPERATION_OPTIONAL_INPUT_KEYS, ACP_SESSION_ID_INPUT_KEY } from './chunk-PIMFPCNZ.js';
-import { MPP_DEFAULT_NETWORK, isMppNetwork, MPP_NETWORKS, MPP_DEFAULT_PAYMENT_FLOW, MPP_MIN_CHALLENGE_SECRET_LENGTH, MPP_PROFILE } from './chunk-AA3FIEAR.js';
-import { resolveX402Deployment, resolveX402Option } from './chunk-WYOGIANL.js';
-import { X402_PAYMENT_FLOWS, validateCustomNetworks, findX402Network, X402_DEFAULT_PAYMENT_FLOW, isEvmAddress, isEvmZeroAddress } from './chunk-OZ4LAWBK.js';
+import { ACP_WELL_KNOWN_PATH, DEFAULT_CONFIG_FILENAME, ACP_CHECKOUT_OPERATIONS, isObjectSchemaNode, extractPathParameterNames, findUnparsedBraceToken, ACP_OPERATION_INPUT_KEYS, ACP_OPERATION_OPTIONAL_INPUT_KEYS, ACP_SESSION_ID_INPUT_KEY } from './chunk-Z34UMZBB.js';
 import { AP2_SPEC_VERSION, AP2_MODES, AP2_DEFAULT_CLOCK_SKEW_SECONDS, AP2_JWK_MEMBERS, AP2_KEY_TYPE, AP2_SIGNING_ALGORITHM, AP2_JWK_CURVE, AP2_JWK_COORDINATE_BYTES, AP2_MAX_CLOCK_SKEW_SECONDS } from './chunk-FHCFR2GS.js';
 import { MCP_TOOL_NAME_PATTERN } from './chunk-TPC4EJLT.js';
-import { PROTOCOL_NAMES, PAYMENT_METHOD_NAMES, CommerceError, RESERVED_INPUT_FIELDS } from './chunk-QQ3WY5L3.js';
+import { MPP_DEFAULT_NETWORK, isMppNetwork, MPP_NETWORKS, MPP_DEFAULT_PAYMENT_FLOW, MPP_MIN_CHALLENGE_SECRET_LENGTH, MPP_PROFILE } from './chunk-AA3FIEAR.js';
+import { resolveX402Deployment, resolveX402Option } from './chunk-4H2QLHQI.js';
+import { X402_PAYMENT_FLOWS, validateCustomNetworks, findX402Network, X402_DEFAULT_PAYMENT_FLOW, isEvmAddress, isEvmZeroAddress } from './chunk-5R7DM5LM.js';
+import { PROTOCOL_NAMES, PAYMENT_METHOD_NAMES, RESERVED_INPUT_FIELDS } from './chunk-IDY2735M.js';
+import { CommerceError } from './chunk-SYQLJXIU.js';
 import { isRecord } from './chunk-3M6U7ILB.js';
 import { promises } from 'fs';
 import * as path from 'path';
@@ -1757,5 +1758,5 @@ function resolveConfigPath(explicitPath, env, cwd) {
 }
 
 export { loadConfig, parseConfig, substituteEnv };
-//# sourceMappingURL=chunk-G2JEY7MB.js.map
-//# sourceMappingURL=chunk-G2JEY7MB.js.map
+//# sourceMappingURL=chunk-2J2IQQ4X.js.map
+//# sourceMappingURL=chunk-2J2IQQ4X.js.map