@drm3/sdk 0.1.2

package/dist/receipts-api.js

@@ -0,0 +1,117 @@
+// @drm3/sdk/receipts - the public drop-in API (open a modal, resolve by id, mount).
+//
+//   openReceiptModal(chain, { registryUrl, resolverBase });
+//   openReceiptById("rcpt_…", { resolverBase: "https://your-app.example" });
+//   mountVerifyButton(el, chainOrReceiptOrId, cfg);
+import { verifyChainInto } from "./receipts-chain.js";
+import { appendDownload, buildModal, sealVerdict } from "./receipts-modal.js";
+import { loadRegistry, resolveReceipt } from "./receipts-registry.js";
+import { CHECK, injectStyles } from "./receipts-ui.js";
+import { isEd25519Supported } from "./receipts-verify.js";
+// The config of the most-recently-opened modal. Gated-leg "resolve this receipt"
+// links call openReceiptById with no cfg, and fall back to this so they resolve
+// against the same host/registry the current modal used. A module variable (always
+// writable) - never a property on window.drm3Receipts, which may be a read-only
+// esbuild namespace with getter-only exports.
+let activeCfg = {};
+// Verify + render a receipt chain you already hold. Opens the gorgeous modal, runs
+// the live tri-state verification, and seals with the aggregate verdict.
+export async function openReceiptModal(chain, cfg = activeCfg) {
+    if (typeof document === "undefined")
+        return;
+    registerGlobal(cfg);
+    const { final, addStep, settle, wait } = buildModal(cfg.title || "Provenance receipt", cfg.subtitle ||
+        "A signed, content-addressed receipt, verified <b>in your browser</b> against the public key registry. Each leg confirms only the one before it; anything it cannot open, it says so.");
+    if (!(await isEd25519Supported())) {
+        final.className = "drm3v-final bad";
+        final.innerHTML =
+            "This browser can't do Ed25519 in the page (try a recent Chrome, Safari, or Firefox). The receipts are still independently verifiable - see <b>status.drm3.network</b>.";
+        return;
+    }
+    if (!chain.length) {
+        final.className = "drm3v-final bad";
+        final.textContent = "No receipts attached.";
+        return;
+    }
+    const registry = await loadRegistry(cfg.registryUrl);
+    const counts = await verifyChainInto(chain, registry, addStep, settle, wait, cfg.contentRef);
+    await wait(200);
+    sealVerdict(final, counts);
+    if (chain.length === 1)
+        appendDownload(final, `receipt-${chain[0].id || "drm3"}.json`, chain[0].receipt_json || chain[0]);
+}
+// Resolve a receipt by its content-addressed id (DRM3 resolver convention) and
+// render it. The resolved envelope's `receipt` is treated as the chain head.
+export async function openReceiptById(id, cfg = activeCfg) {
+    if (typeof document === "undefined")
+        return;
+    registerGlobal(cfg);
+    const { final, addStep, settle, wait } = buildModal(cfg.title || "Provenance receipt", cfg.subtitle || "Resolved by its content-addressed id and verified <b>in your browser</b> against the public key registry.");
+    if (!(await isEd25519Supported())) {
+        final.className = "drm3v-final bad";
+        final.innerHTML = "This browser can't do Ed25519 in the page. The receipt is still independently verifiable - see <b>status.drm3.network</b>.";
+        return;
+    }
+    const resolved = await resolveReceipt(id, cfg);
+    if (!resolved?.receipt) {
+        final.className = "drm3v-final bad";
+        final.textContent = "This receipt isn't retrievable here (it may live on another host, or require access).";
+        return;
+    }
+    const rc = resolved.receipt;
+    const chain = [
+        {
+            id,
+            receipt_json: rc,
+            signature: rc.signature,
+            public_key: rc.public_key,
+            action: rc.action,
+        },
+    ];
+    const registry = await loadRegistry(cfg.registryUrl);
+    const counts = await verifyChainInto(chain, registry, addStep, settle, wait, cfg.contentRef);
+    await wait(200);
+    sealVerdict(final, counts);
+    appendDownload(final, `receipt-${id}.json`, rc);
+}
+// Mount a "Verify provenance" button into `target`. `source` is either a receipt
+// chain (array), a single receipt, or a string receipt-id to resolve on click.
+export function mountVerifyButton(target, source, cfg = {}) {
+    if (!target || typeof document === "undefined")
+        return;
+    injectStyles();
+    const btn = document.createElement("button");
+    btn.type = "button";
+    btn.className = "drm3v-trigger";
+    btn.innerHTML = `${CHECK}<span>Verify provenance in your browser</span>`;
+    btn.addEventListener("click", async () => {
+        const resolved = typeof source === "function" ? await source() : source;
+        if (typeof resolved === "string")
+            return void openReceiptById(resolved, cfg);
+        const chain = Array.isArray(resolved) ? resolved : [resolved];
+        return void openReceiptModal(chain, cfg);
+    });
+    target.appendChild(btn);
+}
+// Remember the active config (for gated-leg links) and ensure a stable global
+// exists so inline "resolve this receipt" links (rendered as HTML strings) can
+// reach the resolver cross-app. When the viewer is loaded as the prebuilt IIFE,
+// window.drm3Receipts is already the esbuild namespace (read-only getters) and
+// ALSO exposes these functions, so we leave it untouched - assigning onto it
+// throws ("only a getter"). We only create the global when it's absent (the
+// bundler-import path, where consumers import the functions directly).
+function registerGlobal(cfg) {
+    activeCfg = cfg;
+    if (typeof window === "undefined")
+        return;
+    const w = window;
+    if (!w.drm3Receipts) {
+        try {
+            w.drm3Receipts = { openReceiptById, openReceiptModal, mountVerifyButton };
+        }
+        catch {
+            /* read-only global already present - it exposes the API itself */
+        }
+    }
+}
+//# sourceMappingURL=receipts-api.js.map

package/dist/receipts-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipts-api.js","sourceRoot":"","sources":["../src/receipts-api.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,EAAE;AACF,4DAA4D;AAC5D,6EAA6E;AAC7E,oDAAoD;AAEpD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAEtE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,iFAAiF;AACjF,gFAAgF;AAChF,mFAAmF;AACnF,gFAAgF;AAChF,8CAA8C;AAC9C,IAAI,SAAS,GAAiB,EAAE,CAAC;AAEjC,mFAAmF;AACnF,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAgB,EAAE,MAAoB,SAAS;IACpF,IAAI,OAAO,QAAQ,KAAK,WAAW;QAAE,OAAO;IAC5C,cAAc,CAAC,GAAG,CAAC,CAAC;IACpB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,CACjD,GAAG,CAAC,KAAK,IAAI,oBAAoB,EACjC,GAAG,CAAC,QAAQ;QACV,sLAAsL,CACzL,CAAC;IACF,IAAI,CAAC,CAAC,MAAM,kBAAkB,EAAE,CAAC,EAAE,CAAC;QAClC,KAAK,CAAC,SAAS,GAAG,iBAAiB,CAAC;QACpC,KAAK,CAAC,SAAS;YACb,wKAAwK,CAAC;QAC3K,OAAO;IACT,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,KAAK,CAAC,SAAS,GAAG,iBAAiB,CAAC;QACpC,KAAK,CAAC,WAAW,GAAG,uBAAuB,CAAC;QAC5C,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7F,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,cAAc,CAAC,KAAK,EAAE,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,MAAM,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5H,CAAC;AAED,+EAA+E;AAC/E,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EAAU,EAAE,MAAoB,SAAS;IAC7E,IAAI,OAAO,QAAQ,KAAK,WAAW;QAAE,OAAO;IAC5C,cAAc,CAAC,GAAG,CAAC,CAAC;IACpB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,CACjD,GAAG,CAAC,KAAK,IAAI,oBAAoB,EACjC,GAAG,CAAC,QAAQ,IAAI,2GAA2G,CAC5H,CAAC;IACF,IAAI,CAAC,CAAC,MAAM,kBAAkB,EAAE,CAAC,EAAE,CAAC;QAClC,KAAK,CAAC,SAAS,GAAG,iBAAiB,CAAC;QACpC,KAAK,CAAC,SAAS,GAAG,4HAA4H,CAAC;QAC/I,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;QACvB,KAAK,CAAC,SAAS,GAAG,iBAAiB,CAAC;QACpC,KAAK,CAAC,WAAW,GAAG,uFAAuF,CAAC;QAC5G,OAAO;IACT,CAAC;IACD,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAkC,CAAC;IACvD,MAAM,KAAK,GAAc;QACvB;YACE,EAAE;YACF,YAAY,EAAE,EAAE;YAChB,SAAS,EAAE,EAAE,CAAC,SAAmB;YACjC,UAAU,EAAE,EAAE,CAAC,UAAoB;YACnC,MAAM,EAAE,EAAE,CAAC,MAAgB;SAC5B;KACF,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7F,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3B,cAAc,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,iFAAiF;AACjF,+EAA+E;AAC/E,MAAM,UAAU,iBAAiB,CAC/B,MAA0B,EAC1B,MAAmH,EACnH,MAAoB,EAAE;IAEtB,IAAI,CAAC,MAAM,IAAI,OAAO,QAAQ,KAAK,WAAW;QAAE,OAAO;IACvD,YAAY,EAAE,CAAC;IACf,MAAM,GAAG,GAAG,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC7C,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;IACpB,GAAG,CAAC,SAAS,GAAG,eAAe,CAAC;IAChC,GAAG,CAAC,SAAS,GAAG,GAAG,KAAK,gDAAgD,CAAC;IACzE,GAAG,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,QAAQ,GAAG,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QACxE,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAAE,OAAO,KAAK,eAAe,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC7E,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC9D,OAAO,KAAK,gBAAgB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,8EAA8E;AAC9E,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAC/E,6EAA6E;AAC7E,4EAA4E;AAC5E,uEAAuE;AACvE,SAAS,cAAc,CAAC,GAAiB;IACvC,SAAS,GAAG,GAAG,CAAC;IAChB,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO;IAC1C,MAAM,CAAC,GAAG,MAA+D,CAAC;IAC1E,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,CAAC,CAAC,YAAY,GAAG,EAAE,eAAe,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;QACpE,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/receipts-chain.d.ts

@@ -0,0 +1,3 @@
+import { type AddStep, type ContentRef, type Counts, type Receipt, type RegKey, type Settle, type Wait } from "./receipts-types.js";
+export declare function verifyChainInto(chain: Receipt[], registry: Map<string, RegKey>, addStep: AddStep, settle: Settle, wait: Wait, contentRef?: ContentRef): Promise<Counts>;
+//# sourceMappingURL=receipts-chain.d.ts.map

package/dist/receipts-chain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipts-chain.d.ts","sourceRoot":"","sources":["../src/receipts-chain.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,KAAK,OAAO,EACZ,KAAK,UAAU,EACf,KAAK,MAAM,EAEX,KAAK,OAAO,EACZ,KAAK,MAAM,EACX,KAAK,MAAM,EAIX,KAAK,IAAI,EACV,MAAM,qBAAqB,CAAC;AA0B7B,wBAAsB,eAAe,CACnC,KAAK,EAAE,OAAO,EAAE,EAChB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC7B,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,IAAI,EACV,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,MAAM,CAAC,CAmFjB"}

package/dist/receipts-chain.js

@@ -0,0 +1,121 @@
+// @drm3/sdk/receipts - the shared tri-state chain verifier.
+//
+// Same verifier for a single receipt or a full fetch→analyze→compose DAG. Renders
+// into caller-provided hooks and returns tri-state counts.
+import { esc, legDetail, prettyAction, shortHex, shortKey } from "./receipts-render.js";
+import { FAILED, UNVERIFIABLE_NO_ACCESS, VERIFIED, } from "./receipts-types.js";
+import { verifyReceipt } from "./receipts-verify.js";
+// Parent receipt ids this leg derives from: top-level parent_receipt_id plus
+// receipt_json.parent_id / inputs[].ref.
+function parentRefs(r, pj) {
+    const out = [];
+    const add = (v) => {
+        if (typeof v === "string" && v)
+            out.push(v);
+    };
+    add(r.parent_receipt_id);
+    add(pj?.parent_id);
+    for (const e of pj?.inputs || [])
+        if (e && typeof e === "object")
+            add(e.ref);
+    return out;
+}
+function safeParse(s) {
+    try {
+        return JSON.parse(s);
+    }
+    catch {
+        return null;
+    }
+}
+// ── shared chain verifier ────────────────────────────────────────────────────
+// Verify a receipt chain into caller-provided render hooks, returning tri-state
+// counts. Same verifier for a single receipt or a full fetch→analyze→compose DAG.
+export async function verifyChainInto(chain, registry, addStep, settle, wait, contentRef) {
+    const counts = { verified: 0, gated: 0, failed: 0 };
+    // The chain we hold is the set of legs THIS caller can retrieve. Any leg
+    // referenced by a parent link that is NOT in this set is gated - we can see the
+    // leg derived from it, but the receipt itself isn't retrievable. A STATE, not a fault.
+    const present = new Set();
+    for (const r of chain) {
+        const pj = (typeof r.receipt_json === "string" ? safeParse(r.receipt_json) : r.receipt_json);
+        if (r.id)
+            present.add(r.id);
+        if (typeof pj?.id === "string")
+            present.add(pj.id);
+    }
+    const referencedGated = new Set();
+    for (const r of chain) {
+        const pj = (typeof r.receipt_json === "string" ? safeParse(r.receipt_json) : r.receipt_json);
+        for (const pid of parentRefs(r, pj))
+            if (!present.has(pid))
+                referencedGated.add(pid);
+    }
+    // oldest first for a natural chain animation
+    const ordered = [...chain].reverse();
+    for (const r of ordered) {
+        const payload = (typeof r.receipt_json === "string" ? JSON.parse(r.receipt_json) : r.receipt_json);
+        const action = (r.action || payload?.action || r.receipt_type || "receipt");
+        const pub = (r.public_key || payload?.public_key || "").toLowerCase();
+        const signer = r.signer_path || payload?.metadata?._meta?.signer || "";
+        const el = addStep(prettyAction(action), signer ? `signer ${signer} · ${shortKey(pub)}` : shortKey(pub), legDetail(payload, contentRef));
+        await wait(420);
+        let ok = false;
+        try {
+            ok = await verifyReceipt(r);
+        }
+        catch {
+            ok = false;
+        }
+        const rec = registry.get(pub);
+        const known = registry.size === 0 || !!rec;
+        // Grade against the key's lifecycle. A receipt signed by a since-rotated
+        // (superseded/retired) key is STILL verified if its timestamp falls inside
+        // that key's window - the no-backfill state. Compromised/revoked => fail.
+        const ts = payload?.timestamp || r.timestamp || "";
+        let verdict = ok && known ? VERIFIED : FAILED;
+        let note = "";
+        if (ok && rec) {
+            if (rec.status === "compromised" || rec.status === "revoked") {
+                verdict = FAILED;
+                note = ` · ⚠ key ${rec.status}`;
+            }
+            else if (rec.status === "superseded" || rec.status === "retired") {
+                const inWindow = (!rec.valid_from || !ts || ts >= rec.valid_from) && (!rec.valid_until || !ts || ts <= rec.valid_until);
+                if (inWindow) {
+                    verdict = VERIFIED;
+                    note = ` · key since rotated${rec.valid_until ? ` ${rec.valid_until.slice(0, 10)}` : ""} (verified)`;
+                }
+                else {
+                    verdict = FAILED;
+                    note = " · ⚠ signed outside the key's validity window";
+                }
+            }
+        }
+        else if (ok && !known) {
+            note = " · ⚠ key not found in registry";
+        }
+        settle(el, verdict);
+        if (verdict === VERIFIED)
+            counts.verified++;
+        else
+            counts.failed++;
+        if (note) {
+            const meta = el.querySelector(".drm3v-meta");
+            if (meta)
+                meta.textContent += note;
+        }
+        await wait(180);
+    }
+    // Surface each referenced-but-unretrievable parent as its own gated leg, with the
+    // LINK: a resolve attempt against /receipts/:id so you can see where it lives.
+    for (const pid of referencedGated) {
+        const el = addStep("Upstream step (not accessible)", `referenced ${shortHex(pid)} · receipt not retrievable to you`, `<div class="drm3v-detail"><div class="drm3v-clinks"><a class="drm3v-clink" href="#" onclick="event.preventDefault();event.stopPropagation();window.drm3Receipts&&window.drm3Receipts.openReceiptById('${esc(pid)}')">resolve this receipt</a></div></div>`);
+        await wait(280);
+        settle(el, UNVERIFIABLE_NO_ACCESS);
+        counts.gated++;
+        await wait(120);
+    }
+    return counts;
+}
+//# sourceMappingURL=receipts-chain.js.map

package/dist/receipts-chain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipts-chain.js","sourceRoot":"","sources":["../src/receipts-chain.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,EAAE;AACF,kFAAkF;AAClF,2DAA2D;AAE3D,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACxF,OAAO,EAIL,MAAM,EAIN,sBAAsB,EACtB,QAAQ,GAGT,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,6EAA6E;AAC7E,yCAAyC;AACzC,SAAS,UAAU,CAAC,CAAU,EAAE,EAAkC;IAChE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,CAAC,CAAU,EAAE,EAAE;QACzB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC;IACF,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;IACzB,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IACnB,KAAK,MAAM,CAAC,IAAK,EAAE,EAAE,MAAoC,IAAI,EAAE;QAAE,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5G,OAAO,GAAG,CAAC;AACb,CAAC;AACD,SAAS,SAAS,CAAC,CAAS;IAC1B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAA4B,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,gFAAgF;AAChF,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAgB,EAChB,QAA6B,EAC7B,OAAgB,EAChB,MAAc,EACd,IAAU,EACV,UAAuB;IAEvB,MAAM,MAAM,GAAW,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAE5D,yEAAyE;IACzE,gFAAgF;IAChF,uFAAuF;IACvF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAmC,CAAC;QAC/H,IAAI,CAAC,CAAC,EAAE;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,OAAO,EAAE,EAAE,EAAE,KAAK,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAmC,CAAC;QAC/H,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC;YAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvF,CAAC;IAED,6CAA6C;IAC7C,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAA4B,CAAC;QAC9H,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,IAAK,OAAO,EAAE,MAAiB,IAAI,CAAC,CAAC,YAAY,IAAI,SAAS,CAAW,CAAC;QAClG,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,IAAK,OAAO,EAAE,UAAqB,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAClF,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,IAAM,OAAO,EAAE,QAAoD,EAAE,KAAK,EAAE,MAAiB,IAAI,EAAE,CAAC;QAChI,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,MAAM,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;QACzI,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,IAAI,EAAE,GAAG,KAAK,CAAC;QACf,IAAI,CAAC;YACH,EAAE,GAAG,MAAM,aAAa,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,EAAE,GAAG,KAAK,CAAC;QACb,CAAC;QACD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;QAC3C,yEAAyE;QACzE,2EAA2E;QAC3E,0EAA0E;QAC1E,MAAM,EAAE,GAAI,OAAO,EAAE,SAAoB,IAAK,CAA4B,CAAC,SAAS,IAAI,EAAE,CAAC;QAC3F,IAAI,OAAO,GAAY,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;QACvD,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC;YACd,IAAI,GAAG,CAAC,MAAM,KAAK,aAAa,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC7D,OAAO,GAAG,MAAM,CAAC;gBACjB,IAAI,GAAG,YAAY,GAAG,CAAC,MAAM,EAAE,CAAC;YAClC,CAAC;iBAAM,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACnE,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;gBACxH,IAAI,QAAQ,EAAE,CAAC;oBACb,OAAO,GAAG,QAAQ,CAAC;oBACnB,IAAI,GAAG,uBAAuB,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC;gBACvG,CAAC;qBAAM,CAAC;oBACN,OAAO,GAAG,MAAM,CAAC;oBACjB,IAAI,GAAG,+CAA+C,CAAC;gBACzD,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;YACxB,IAAI,GAAG,gCAAgC,CAAC;QAC1C,CAAC;QACD,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACpB,IAAI,OAAO,KAAK,QAAQ;YAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;;YACvC,MAAM,CAAC,MAAM,EAAE,CAAC;QACrB,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,IAAI,GAAG,EAAE,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;YAC7C,IAAI,IAAI;gBAAE,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC;QACrC,CAAC;QACD,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,kFAAkF;IAClF,+EAA+E;IAC/E,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,MAAM,EAAE,GAAG,OAAO,CAChB,gCAAgC,EAChC,cAAc,QAAQ,CAAC,GAAG,CAAC,mCAAmC,EAC9D,yMAAyM,GAAG,CAAC,GAAG,CAAC,0CAA0C,CAC5P,CAAC;QACF,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,MAAM,CAAC,EAAE,EAAE,sBAAsB,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/receipts-modal.d.ts

@@ -0,0 +1,14 @@
+import { type AddStep, type Counts, type Settle, type Wait } from "./receipts-types.js";
+export declare function appendDownload(host: HTMLElement, filename: string, obj: unknown): void;
+interface ModalParts {
+    ov: HTMLElement;
+    steps: HTMLElement;
+    final: HTMLElement;
+    addStep: AddStep;
+    settle: Settle;
+    wait: Wait;
+}
+export declare function buildModal(title: string, subtitle: string): ModalParts;
+export declare function sealVerdict(final: HTMLElement, counts: Counts): void;
+export {};
+//# sourceMappingURL=receipts-modal.d.ts.map

package/dist/receipts-modal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipts-modal.d.ts","sourceRoot":"","sources":["../src/receipts-modal.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,MAAM,EAAE,KAAK,MAAM,EAAkD,KAAK,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAaxI,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,IAAI,CAQtF;AAED,UAAU,UAAU;IAClB,EAAE,EAAE,WAAW,CAAC;IAChB,KAAK,EAAE,WAAW,CAAC;IACnB,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,IAAI,CAAC;CACZ;AACD,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,CAgDtE;AAID,wBAAgB,WAAW,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAgBpE"}

package/dist/receipts-modal.js

@@ -0,0 +1,100 @@
+// @drm3/sdk/receipts - the modal scaffolding + step/seal DOM.
+//
+// Builds the overlay, wires close handlers, and exposes the addStep/settle/wait
+// render hooks the chain verifier drives. Also the download button + final seal.
+import { countsLine, esc } from "./receipts-render.js";
+import { UNVERIFIABLE_NO_ACCESS, VERIFIED } from "./receipts-types.js";
+import { CHECK, DOWNLOAD, LOCK, RECEIPT, injectStyles } from "./receipts-ui.js";
+// ── modal scaffolding ─────────────────────────────────────────────────────────
+function dlJSON(filename, obj) {
+    const blob = new Blob([JSON.stringify(obj, null, 2)], { type: "application/json" });
+    const url = URL.createObjectURL(blob);
+    const a = document.createElement("a");
+    a.href = url;
+    a.download = filename;
+    a.click();
+    setTimeout(() => URL.revokeObjectURL(url), 1000);
+}
+export function appendDownload(host, filename, obj) {
+    if (!obj)
+        return;
+    const btn = document.createElement("button");
+    btn.type = "button";
+    btn.className = "drm3v-dlbtn";
+    btn.innerHTML = `${DOWNLOAD}<span>Download receipt JSON</span>`;
+    btn.addEventListener("click", () => dlJSON(filename, obj));
+    host.appendChild(btn);
+}
+export function buildModal(title, subtitle) {
+    injectStyles();
+    const ov = document.createElement("div");
+    ov.className = "drm3v-ov";
+    ov.innerHTML = `<div class="drm3v-modal" role="dialog" aria-label="${esc(title)}">
+    <div class="drm3v-h"><h3>${RECEIPT}${esc(title)}</h3><button class="drm3v-x" aria-label="Close">&times;</button></div>
+    <div class="drm3v-sub">${subtitle}</div>
+    <div class="drm3v-steps"></div>
+    <div class="drm3v-final"></div></div>`;
+    document.body.appendChild(ov);
+    const close = () => ov.remove();
+    ov.addEventListener("click", (e) => {
+        if (e.target === ov)
+            close();
+    });
+    ov.querySelector(".drm3v-x")?.addEventListener("click", close);
+    const onEsc = (e) => {
+        if (e.key === "Escape") {
+            close();
+            document.removeEventListener("keydown", onEsc);
+        }
+    };
+    document.addEventListener("keydown", onEsc);
+    const steps = ov.querySelector(".drm3v-steps");
+    const final = ov.querySelector(".drm3v-final");
+    const addStep = (act, meta, detail) => {
+        const el = document.createElement("div");
+        el.className = "drm3v-step";
+        el.innerHTML = `<div class="drm3v-dot spin"></div><div class="drm3v-body"><div class="drm3v-act">${esc(act)}</div><div class="drm3v-meta">${esc(meta)}</div>${detail || ""}</div>`;
+        steps.appendChild(el);
+        requestAnimationFrame(() => el.classList.add("on"));
+        return el;
+    };
+    const settle = (el, verdict) => {
+        const dot = el.querySelector(".drm3v-dot");
+        if (verdict === VERIFIED) {
+            dot.className = "drm3v-dot ok";
+            dot.innerHTML = CHECK;
+        }
+        else if (verdict === UNVERIFIABLE_NO_ACCESS) {
+            dot.className = "drm3v-dot warn";
+            dot.innerHTML = LOCK;
+        }
+        else {
+            dot.className = "drm3v-dot bad";
+            dot.innerHTML = "&times;";
+        }
+    };
+    const wait = (ms) => new Promise((r) => setTimeout(r, ms));
+    return { ov, steps, final, addStep, settle, wait };
+}
+// Aggregate (mirrors drm3-verifier): any failed dominates; else any gated →
+// verified in part; else fully verified. A gated leg is normal, not a warning.
+export function sealVerdict(final, counts) {
+    if (counts.verified + counts.gated + counts.failed === 0) {
+        final.className = "drm3v-final bad";
+        final.textContent = "No receipts were found to verify.";
+        return;
+    }
+    if (counts.failed > 0) {
+        final.className = "drm3v-final bad";
+        final.innerHTML = `One or more signatures did not verify. That's exactly what provenance is for - it tells you when something doesn't add up.${countsLine(counts)}`;
+    }
+    else if (counts.gated > 0) {
+        final.className = "drm3v-final part";
+        final.innerHTML = `${LOCK} <b>Verified in part.</b> Every receipt you could retrieve carries a valid Ed25519 signature from a registered DRM3 signer, checked right here in your browser. ${counts.gated} upstream step${counts.gated === 1 ? "" : "s"} ${counts.gated === 1 ? "is" : "are"} referenced but not accessible to you - a normal access boundary, not a failure.${countsLine(counts)}`;
+    }
+    else {
+        final.className = "drm3v-final ok";
+        final.innerHTML = `${CHECK} <b>Verified.</b> Every receipt in this chain carries a valid Ed25519 signature from a registered DRM3 signer - checked right here in your browser.${countsLine(counts)}`;
+    }
+}
+//# sourceMappingURL=receipts-modal.js.map

package/dist/receipts-modal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipts-modal.js","sourceRoot":"","sources":["../src/receipts-modal.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,EAAE;AACF,gFAAgF;AAChF,iFAAiF;AAEjF,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAA0C,sBAAsB,EAAE,QAAQ,EAA2B,MAAM,qBAAqB,CAAC;AACxI,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhF,iFAAiF;AACjF,SAAS,MAAM,CAAC,QAAgB,EAAE,GAAY;IAC5C,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACpF,MAAM,GAAG,GAAG,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,CAAC,GAAG,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC;IACb,CAAC,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACtB,CAAC,CAAC,KAAK,EAAE,CAAC;IACV,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;AACnD,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,IAAiB,EAAE,QAAgB,EAAE,GAAY;IAC9E,IAAI,CAAC,GAAG;QAAE,OAAO;IACjB,MAAM,GAAG,GAAG,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC7C,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;IACpB,GAAG,CAAC,SAAS,GAAG,aAAa,CAAC;IAC9B,GAAG,CAAC,SAAS,GAAG,GAAG,QAAQ,oCAAoC,CAAC;IAChE,GAAG,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;AACxB,CAAC;AAUD,MAAM,UAAU,UAAU,CAAC,KAAa,EAAE,QAAgB;IACxD,YAAY,EAAE,CAAC;IACf,MAAM,EAAE,GAAG,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACzC,EAAE,CAAC,SAAS,GAAG,UAAU,CAAC;IAC1B,EAAE,CAAC,SAAS,GAAG,sDAAsD,GAAG,CAAC,KAAK,CAAC;+BAClD,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC;6BACtB,QAAQ;;0CAEK,CAAC;IACzC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;IAChC,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;QACjC,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE;YAAE,KAAK,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,CAAC,CAAgB,EAAE,EAAE;QACjC,IAAI,CAAC,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YACvB,KAAK,EAAE,CAAC;YACR,QAAQ,CAAC,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC;IACF,QAAQ,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAE5C,MAAM,KAAK,GAAG,EAAE,CAAC,aAAa,CAAC,cAAc,CAAgB,CAAC;IAC9D,MAAM,KAAK,GAAG,EAAE,CAAC,aAAa,CAAC,cAAc,CAAgB,CAAC;IAC9D,MAAM,OAAO,GAAY,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QAC7C,MAAM,EAAE,GAAG,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACzC,EAAE,CAAC,SAAS,GAAG,YAAY,CAAC;QAC5B,EAAE,CAAC,SAAS,GAAG,oFAAoF,GAAG,CAAC,GAAG,CAAC,iCAAiC,GAAG,CAAC,IAAI,CAAC,SAAS,MAAM,IAAI,EAAE,QAAQ,CAAC;QACnL,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACtB,qBAAqB,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACpD,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;IACF,MAAM,MAAM,GAAW,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,EAAE,CAAC,aAAa,CAAC,YAAY,CAAgB,CAAC;QAC1D,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACzB,GAAG,CAAC,SAAS,GAAG,cAAc,CAAC;YAC/B,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC;QACxB,CAAC;aAAM,IAAI,OAAO,KAAK,sBAAsB,EAAE,CAAC;YAC9C,GAAG,CAAC,SAAS,GAAG,gBAAgB,CAAC;YACjC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,SAAS,GAAG,eAAe,CAAC;YAChC,GAAG,CAAC,SAAS,GAAG,SAAS,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC;IACF,MAAM,IAAI,GAAS,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACjE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACrD,CAAC;AAED,4EAA4E;AAC5E,+EAA+E;AAC/E,MAAM,UAAU,WAAW,CAAC,KAAkB,EAAE,MAAc;IAC5D,IAAI,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzD,KAAK,CAAC,SAAS,GAAG,iBAAiB,CAAC;QACpC,KAAK,CAAC,WAAW,GAAG,mCAAmC,CAAC;QACxD,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,SAAS,GAAG,iBAAiB,CAAC;QACpC,KAAK,CAAC,SAAS,GAAG,6HAA6H,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;IACtK,CAAC;SAAM,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QAC5B,KAAK,CAAC,SAAS,GAAG,kBAAkB,CAAC;QACrC,KAAK,CAAC,SAAS,GAAG,GAAG,IAAI,mKAAmK,MAAM,CAAC,KAAK,iBAAiB,MAAM,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,mFAAmF,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;IACrY,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,SAAS,GAAG,gBAAgB,CAAC;QACnC,KAAK,CAAC,SAAS,GAAG,GAAG,KAAK,sJAAsJ,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;IACvM,CAAC;AACH,CAAC"}

package/dist/receipts-registry.d.ts

@@ -0,0 +1,4 @@
+import type { RegKey, ResolvedReceipt, ViewerConfig } from "./receipts-types.js";
+export declare function loadRegistry(url?: string): Promise<Map<string, RegKey>>;
+export declare function resolveReceipt(id: string, cfg?: ViewerConfig): Promise<ResolvedReceipt | null>;
+//# sourceMappingURL=receipts-registry.d.ts.map

package/dist/receipts-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipts-registry.d.ts","sourceRoot":"","sources":["../src/receipts-registry.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,MAAM,EAAa,eAAe,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAO5F,wBAAsB,YAAY,CAAC,GAAG,GAAE,MAA6B,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAwBnG;AAOD,wBAAsB,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,GAAE,YAAiB,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAUxG"}

package/dist/receipts-registry.js

@@ -0,0 +1,54 @@
+// @drm3/sdk/receipts - the public-key registry loader + resolve-by-id fetch.
+//
+// No trust in the host: the registry is fetched once per URL and cached, and used
+// only to grade a signer against the key it CLAIMED across that key's lifecycle.
+// The default registry mirrors STATUS_HUB in ./index.
+const DEFAULT_REGISTRY_URL = "https://status.drm3.network/.well-known/drm3-keys.json";
+// ── key registry (per-URL cached) ────────────────────────────────────────────
+const registryCache = new Map();
+export async function loadRegistry(url = DEFAULT_REGISTRY_URL) {
+    const cached = registryCache.get(url);
+    if (cached)
+        return cached;
+    const map = new Map();
+    try {
+        const reg = (await (await fetch(url)).json());
+        for (const svc of reg.services || []) {
+            for (const k of svc.current || [])
+                if (k.key)
+                    map.set(k.key.toLowerCase(), { status: k.status || "current", valid_from: k.valid_from, valid_until: k.valid_until });
+            // history keys signed real receipts; a superseded/retired key still verifies
+            // within its window. Don't overwrite a current entry if the same key appears in both.
+            for (const k of svc.history || [])
+                if (k.key && !map.has(k.key.toLowerCase()))
+                    map.set(k.key.toLowerCase(), { status: k.status || "superseded", valid_from: k.valid_from, valid_until: k.valid_until });
+        }
+        for (const k of reg.keys || [])
+            if (k.key && !map.has(k.key.toLowerCase()))
+                map.set(k.key.toLowerCase(), { status: "current" }); // v1 compat
+    }
+    catch {
+        /* registry unreachable → signature still proves authorship; we just can't confirm publication */
+    }
+    registryCache.set(url, map);
+    return map;
+}
+// Resolve a receipt by its content-addressed id through the DRM3 resolver
+// convention (GET {resolverBase}/receipts/:id, drm3-provenance/spec/
+// RESOLVER-CONVENTION). The attestation is public and keyed purely by id. Returns
+// the resolver envelope, or null when the host has no such receipt / it isn't
+// retrievable. A full cross-host walk resolves signer → registry → resolverBase first.
+export async function resolveReceipt(id, cfg = {}) {
+    try {
+        const base = cfg.resolverBase || "";
+        const r = await fetch(`${base}/receipts/${encodeURIComponent(id)}`, cfg.headers ? { headers: cfg.headers } : undefined);
+        if (!r.ok)
+            return null;
+        const j = (await r.json());
+        return j?.ok && j.receipt ? j : null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=receipts-registry.js.map

package/dist/receipts-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipts-registry.js","sourceRoot":"","sources":["../src/receipts-registry.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,EAAE;AACF,kFAAkF;AAClF,iFAAiF;AAIjF,sDAAsD;AACtD,MAAM,oBAAoB,GAAG,wDAAwD,CAAC;AAEtF,gFAAgF;AAChF,MAAM,aAAa,GAAG,IAAI,GAAG,EAA+B,CAAC;AAC7D,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc,oBAAoB;IACnE,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAG3C,CAAC;QACF,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YACrC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE;gBAC/B,IAAI,CAAC,CAAC,GAAG;oBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YACnI,6EAA6E;YAC7E,sFAAsF;YACtF,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE;gBAC/B,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACxC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC/H,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE;YAAE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,YAAY;IAC/I,CAAC;IAAC,MAAM,CAAC;QACP,iGAAiG;IACnG,CAAC;IACD,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,0EAA0E;AAC1E,qEAAqE;AACrE,kFAAkF;AAClF,8EAA8E;AAC9E,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAU,EAAE,MAAoB,EAAE;IACrE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,aAAa,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACxH,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAoB,CAAC;QAC9C,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/receipts-render.d.ts

@@ -0,0 +1,9 @@
+import type { ContentRef, Counts } from "./receipts-types.js";
+export declare const esc: (s: string) => string;
+export declare function shortHex(h: string): string;
+export declare function shortKey(k: string): string;
+export declare function prettyAction(a: string): string;
+export declare function monoColor(s: string): string;
+export declare function countsLine(c: Counts): string;
+export declare function legDetail(payload: Record<string, unknown>, contentRef?: ContentRef): string;
+//# sourceMappingURL=receipts-render.d.ts.map

package/dist/receipts-render.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipts-render.d.ts","sourceRoot":"","sources":["../src/receipts-render.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAG9D,eAAO,MAAM,GAAG,GAAI,GAAG,MAAM,KAAG,MAAuH,CAAC;AACxJ,wBAAgB,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAG1C;AACD,wBAAgB,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAG1C;AAGD,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAS9C;AAED,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAI3C;AACD,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE5C;AAWD,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,EAAE,UAAU,GAAG,MAAM,CAyB3F"}

package/dist/receipts-render.js

@@ -0,0 +1,83 @@
+// @drm3/sdk/receipts - display helpers + the per-leg detail panel renderer.
+//
+// Pure string builders (no DOM). Everything they render comes straight out of the
+// signed receipt.
+// ── display helpers ───────────────────────────────────────────────────────────
+export const esc = (s) => String(s).replace(/[&<>"]/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;" })[c]);
+export function shortHex(h) {
+    const x = String(h || "").replace(/^(ed25519|sha256|sha1):/, "");
+    return x ? `${x.slice(0, 10)}…${x.slice(-6)}` : "-";
+}
+export function shortKey(k) {
+    const h = String(k || "").replace(/^ed25519:/, "");
+    return h ? `ed25519:${h.slice(0, 8)}…${h.slice(-6)}` : "-";
+}
+// Humanize an action id. Apps with domain-specific actions can pass their own
+// label by pre-formatting; this is the neutral default.
+export function prettyAction(a) {
+    if (/fetch/i.test(a))
+        return "Fetched & extracted";
+    if (/analy/i.test(a))
+        return "AI analysis";
+    if (/scrape|extract/i.test(a))
+        return "Content extracted";
+    if (/digest|compose/i.test(a))
+        return "Composed";
+    if (/infer/i.test(a))
+        return "Inference";
+    return String(a || "receipt")
+        .replace(/[._-]/g, " ")
+        .replace(/\b\w/g, (c) => c.toUpperCase());
+}
+// Deterministic monogram tint for a name (no network favicon calls).
+export function monoColor(s) {
+    let h = 0;
+    for (let i = 0; i < s.length; i++)
+        h = (h * 31 + s.charCodeAt(i)) % 360;
+    return `hsl(${h} 52% 64%)`;
+}
+export function countsLine(c) {
+    return `<span class="drm3v-counts">${c.verified} verified · ${c.gated} not accessible · ${c.failed} failed</span>`;
+}
+function fieldRow(label, value, mono = false) {
+    return `<div class="drm3v-kv"><span>${esc(label)}</span>${mono ? `<code>${esc(value)}</code>` : `<b>${esc(value)}</b>`}</div>`;
+}
+// The SUBSTANCE behind a leg's green check: WHAT produced it (model · provider, or
+// the extractor), the exact input→output hashes the signature covers, when it was
+// signed, the signer's own plain-English attestation of what the hash is over, and
+// links to the content so you can SEE and re-check it. Everything comes straight
+// out of the signed receipt.
+export function legDetail(payload, contentRef) {
+    const meta = (payload?.metadata?._meta || {});
+    const rows = [];
+    const model = String(meta.model || "");
+    const provider = String(meta.provider || "");
+    if (model)
+        rows.push(fieldRow("model", provider ? `${model} · ${provider}` : model));
+    else if (meta.extractor)
+        rows.push(fieldRow("extractor", String(meta.extractor)));
+    const ih = String(payload.input_hash || "");
+    const oh = String(payload.output_hash || "");
+    if (ih)
+        rows.push(fieldRow("input", shortHex(ih), true));
+    if (oh)
+        rows.push(fieldRow("output", shortHex(oh), true));
+    if (payload.timestamp) {
+        const d = new Date(String(payload.timestamp));
+        if (!Number.isNaN(d.getTime()))
+            rows.push(fieldRow("signed", d.toUTCString()));
+    }
+    const att = String(meta.attestation || "");
+    const attHtml = att ? `<div class="drm3v-att">${esc(att)}</div>` : "";
+    const links = [];
+    // New tab - the panel is a modal; same-tab nav would load the content BEHIND it.
+    if (contentRef?.ourUrl)
+        links.push(`<a class="drm3v-clink" href="${esc(contentRef.ourUrl)}" target="_blank" rel="noopener">read the copy ↗</a>`);
+    if (contentRef?.origUrl)
+        links.push(`<a class="drm3v-clink" href="${esc(contentRef.origUrl)}" target="_blank" rel="noopener noreferrer">original source ↗</a>`);
+    const linksHtml = links.length ? `<div class="drm3v-clinks">${links.join("")}</div>` : "";
+    if (!rows.length && !attHtml && !linksHtml)
+        return "";
+    return `<div class="drm3v-detail">${rows.join("")}${attHtml}${linksHtml}</div>`;
+}
+//# sourceMappingURL=receipts-render.js.map

package/dist/receipts-render.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipts-render.js","sourceRoot":"","sources":["../src/receipts-render.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,EAAE;AACF,kFAAkF;AAClF,kBAAkB;AAIlB,iFAAiF;AACjF,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAW,CAAC,CAAC;AACxJ,MAAM,UAAU,QAAQ,CAAC,CAAS;IAChC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC;IACjE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;AACtD,CAAC;AACD,MAAM,UAAU,QAAQ,CAAC,CAAS;IAChC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACnD,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;AAC7D,CAAC;AACD,8EAA8E;AAC9E,wDAAwD;AACxD,MAAM,UAAU,YAAY,CAAC,CAAS;IACpC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,qBAAqB,CAAC;IACnD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,aAAa,CAAC;IAC3C,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,mBAAmB,CAAC;IAC1D,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,UAAU,CAAC;IACjD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,WAAW,CAAC;IACzC,OAAO,MAAM,CAAC,CAAC,IAAI,SAAS,CAAC;SAC1B,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAC9C,CAAC;AACD,qEAAqE;AACrE,MAAM,UAAU,SAAS,CAAC,CAAS;IACjC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;IACxE,OAAO,OAAO,CAAC,WAAW,CAAC;AAC7B,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,OAAO,8BAA8B,CAAC,CAAC,QAAQ,eAAe,CAAC,CAAC,KAAK,qBAAqB,CAAC,CAAC,MAAM,gBAAgB,CAAC;AACrH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,KAAa,EAAE,IAAI,GAAG,KAAK;IAC1D,OAAO,+BAA+B,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC;AACjI,CAAC;AAED,mFAAmF;AACnF,kFAAkF;AAClF,mFAAmF;AACnF,iFAAiF;AACjF,6BAA6B;AAC7B,MAAM,UAAU,SAAS,CAAC,OAAgC,EAAE,UAAuB;IACjF,MAAM,IAAI,GAAG,CAAE,OAAO,EAAE,QAAoC,EAAE,KAAK,IAAI,EAAE,CAA4B,CAAC;IACtG,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC7C,IAAI,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;SAChF,IAAI,IAAI,CAAC,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC7C,IAAI,EAAE;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACzD,IAAI,EAAE;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1D,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,0BAA0B,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,iFAAiF;IACjF,IAAI,UAAU,EAAE,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,gCAAgC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,sDAAsD,CAAC,CAAC;IACjJ,IAAI,UAAU,EAAE,OAAO;QACrB,KAAK,CAAC,IAAI,CAAC,gCAAgC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,mEAAmE,CAAC,CAAC;IACzI,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,6BAA6B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1F,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IACtD,OAAO,6BAA6B,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,OAAO,GAAG,SAAS,QAAQ,CAAC;AAClF,CAAC"}