@fabricorg/experiments-manifest-signing 0.0.1 → 0.1.0

package/dist/index.cjs

@@ -17,6 +17,14 @@ function canonicalSignedBytes(m) {
   return new TextEncoder().encode(canonicalSignedPayload(m));
 }
 
+// src/subtle.ts
+async function getSubtle() {
+  if (globalThis.crypto?.subtle) return globalThis.crypto.subtle;
+  const nodeCryptoSpecifier = "node:crypto";
+  const { webcrypto } = await import(nodeCryptoSpecifier);
+  return webcrypto.subtle;
+}
+
 // src/hash.ts
 async function sha256(data) {
   const subtle = await getSubtle();
@@ -28,15 +36,10 @@ function hexEncode(bytes) {
   for (let i = 0; i < bytes.length; i++) s += bytes[i].toString(16).padStart(2, "0");
   return s;
 }
-async function getSubtle() {
-  if (typeof crypto !== "undefined" && crypto.subtle) return crypto.subtle;
-  const { webcrypto } = await import('crypto');
-  return webcrypto.subtle;
-}
 
 // src/sign.ts
 async function signManifest(manifest, key) {
-  const subtle = await getSubtle2();
+  const subtle = await getSubtle();
   const payload = canonicalSignedBytes(manifest);
   const signedHash = await sha256(payload);
   const pkcs8 = ed25519PrivateKeyToPkcs8(hexDecode(key.privateKeyHex));
@@ -55,11 +58,6 @@ async function signManifest(manifest, key) {
     signedHash: hexEncode(signedHash)
   };
 }
-async function getSubtle2() {
-  if (typeof crypto !== "undefined" && crypto.subtle) return crypto.subtle;
-  const { webcrypto } = await import('crypto');
-  return webcrypto.subtle;
-}
 function hexDecode(hex) {
   if (hex.length % 2 !== 0) throw new Error("hexDecode: odd length");
   const out = new Uint8Array(hex.length / 2);
@@ -102,7 +100,7 @@ async function verifyManifest(manifest, options) {
   if (expectedHash !== manifest.signature.signedHash) {
     return { ok: false, reason: "signedHash-mismatch" };
   }
-  const subtle = await getSubtle3();
+  const subtle = await getSubtle();
   const pubKey = await subtle.importKey(
     "raw",
     hexDecode2(options.publicKeyHex),
@@ -118,11 +116,6 @@ async function verifyManifest(manifest, options) {
   );
   return valid ? { ok: true } : { ok: false, reason: "sig-invalid" };
 }
-async function getSubtle3() {
-  if (typeof crypto !== "undefined" && crypto.subtle) return crypto.subtle;
-  const { webcrypto } = await import('crypto');
-  return webcrypto.subtle;
-}
 function hexDecode2(hex) {
   if (hex.length % 2 !== 0) throw new Error("hexDecode: odd length");
   const out = new Uint8Array(hex.length / 2);
@@ -130,28 +123,6 @@ function hexDecode2(hex) {
   return out;
 }
 
-// src/keypair.ts
-async function generateKeypair(keyId) {
-  const subtle = await getSubtle4();
-  const kp = await subtle.generateKey({ name: "Ed25519" }, true, [
-    "sign",
-    "verify"
-  ]);
-  const rawPub = new Uint8Array(await subtle.exportKey("raw", kp.publicKey));
-  const pkcs8Priv = new Uint8Array(await subtle.exportKey("pkcs8", kp.privateKey));
-  const seed = pkcs8Priv.slice(pkcs8Priv.length - 32);
-  return {
-    publicKeyHex: hexEncode(rawPub),
-    privateKeyHex: hexEncode(seed),
-    keyId
-  };
-}
-async function getSubtle4() {
-  if (typeof crypto !== "undefined" && crypto.subtle) return crypto.subtle;
-  const { webcrypto } = await import('crypto');
-  return webcrypto.subtle;
-}
-
 // src/jwks.ts
 function jwksFromKeys(keys) {
   return {
@@ -181,7 +152,7 @@ async function verifyAgainstJwks(manifest, options) {
   const payload = canonicalSignedBytes(manifest);
   const expectedHash = hexEncode(await sha256(payload));
   if (expectedHash !== sig.signedHash) return { ok: false, reason: "signedHash-mismatch" };
-  const subtle = await getSubtle5();
+  const subtle = await getSubtle();
   const pubKey = await subtle.importKey(
     "raw",
     base64UrlToBytes(entry.x),
@@ -197,11 +168,6 @@ async function verifyAgainstJwks(manifest, options) {
   );
   return valid ? { ok: true } : { ok: false, reason: "sig-invalid" };
 }
-async function getSubtle5() {
-  if (typeof crypto !== "undefined" && crypto.subtle) return crypto.subtle;
-  const { webcrypto } = await import('crypto');
-  return webcrypto.subtle;
-}
 function hexToBytes(hex) {
   const out = new Uint8Array(hex.length / 2);
   for (let i = 0; i < out.length; i++) out[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);
@@ -224,12 +190,168 @@ function base64UrlToBytes(s) {
   return out;
 }
 
+// src/delivery.ts
+async function verifyManifestDelivery(input, options) {
+  const parsed = parseDeliveryManifest(input);
+  if (!parsed.ok) return parsed;
+  if (options.revokedVersions?.includes(parsed.manifest.manifestVersion)) {
+    return { ok: false, reason: "manifest-revoked" };
+  }
+  const payload = {
+    schemaVersion: parsed.manifest.schemaVersion,
+    manifestVersion: parsed.manifest.manifestVersion,
+    tenantId: parsed.manifest.tenantId,
+    experiments: parsed.manifest.experiments
+  };
+  const actualHash = hexEncode(await sha256(new TextEncoder().encode(canonicalJson(payload))));
+  if (actualHash !== parsed.manifest.contentHash) {
+    return { ok: false, reason: "content-hash-mismatch" };
+  }
+  try {
+    const signature = await verifyAgainstJwks(parsed.manifest, options);
+    return signature.ok ? { ok: true, manifest: parsed.manifest } : signature;
+  } catch (error) {
+    return {
+      ok: false,
+      reason: "schema-invalid",
+      details: error instanceof Error ? error.message : String(error)
+    };
+  }
+}
+function parseManifestRevocations(input) {
+  if (!isRecord(input) || !Array.isArray(input.versions)) {
+    throw new Error("manifest revocations must contain a versions array");
+  }
+  const versions = input.versions;
+  if (!versions.every((version) => Number.isInteger(version) && Number(version) >= 0)) {
+    throw new Error("manifest revocation versions must be non-negative integers");
+  }
+  return [...new Set(versions)];
+}
+function parseDeliveryManifest(input) {
+  if (!isRecord(input)) return invalid("manifest must be an object");
+  if (input.schemaVersion !== 1) return invalid("unsupported schemaVersion");
+  if (!Number.isInteger(input.manifestVersion) || Number(input.manifestVersion) < 0) {
+    return invalid("manifestVersion must be a non-negative integer");
+  }
+  if (!isHex(input.contentHash, 64)) return invalid("contentHash must be SHA-256 hex");
+  if (!isNonEmptyString(input.tenantId)) return invalid("tenantId is required");
+  if (!isIsoDate(input.builtAt)) return invalid("builtAt must be an ISO timestamp");
+  if (!Array.isArray(input.experiments)) return invalid("experiments must be an array");
+  if (!isSignature(input.signature)) return invalid("a valid Ed25519 signature is required");
+  const experimentIds = /* @__PURE__ */ new Set();
+  for (const [index, experiment] of input.experiments.entries()) {
+    const issue = validateExperiment(experiment, experimentIds);
+    if (issue) return invalid(`experiments[${index}]: ${issue}`);
+  }
+  return { ok: true, manifest: input };
+}
+function validateExperiment(value, experimentIds) {
+  if (!isRecord(value)) return "must be an object";
+  for (const key of ["id", "name", "salt"]) {
+    if (!isNonEmptyString(value[key])) return `${key} is required`;
+  }
+  if (experimentIds.has(value.id)) return `duplicate experiment id ${value.id}`;
+  experimentIds.add(value.id);
+  if (value.state !== "running" && value.state !== "paused") return "invalid state";
+  if (!isRate(value.sampleRate)) return "sampleRate must be between 0 and 1";
+  if (typeof value.applyVariants !== "boolean") return "applyVariants must be boolean";
+  if (!Array.isArray(value.variants) || value.variants.length < 2) {
+    return "at least two variants are required";
+  }
+  const variantKeys = /* @__PURE__ */ new Set();
+  let declaredWeight = 0;
+  let weightedVariants = 0;
+  for (const [index, variant] of value.variants.entries()) {
+    if (!isRecord(variant) || !isNonEmptyString(variant.key)) {
+      return `variants[${index}].key is required`;
+    }
+    if (!isNonEmptyString(variant.name)) return `variants[${index}].name is required`;
+    if (variantKeys.has(variant.key)) return `duplicate variant key ${variant.key}`;
+    variantKeys.add(variant.key);
+    if (variant.weight !== void 0) {
+      if (!Number.isInteger(variant.weight) || Number(variant.weight) < 0 || Number(variant.weight) > 1e4) {
+        return `variants[${index}].weight must be an integer between 0 and 10000`;
+      }
+      weightedVariants += 1;
+      declaredWeight += Number(variant.weight);
+    }
+    if (variant.recipeSampleRate !== void 0 && !isRate(variant.recipeSampleRate)) {
+      return `variants[${index}].recipeSampleRate must be between 0 and 1`;
+    }
+  }
+  if (weightedVariants > 0 && weightedVariants !== value.variants.length) {
+    return "variant weights must be declared for every variant or none";
+  }
+  if (weightedVariants > 0 && declaredWeight !== 1e4) {
+    return "variant weights must sum to 10000";
+  }
+  for (const key of ["defaultVariantKey", "divertTo"]) {
+    if (value[key] !== void 0 && (!isNonEmptyString(value[key]) || !variantKeys.has(value[key]))) {
+      return `${key} must reference an existing variant`;
+    }
+  }
+  return null;
+}
+function canonicalJson(value) {
+  return JSON.stringify(sortDeep(value));
+}
+function sortDeep(value) {
+  if (Array.isArray(value)) return value.map(sortDeep);
+  if (isRecord(value)) {
+    const sorted = {};
+    for (const key of Object.keys(value).sort()) sorted[key] = sortDeep(value[key]);
+    return sorted;
+  }
+  return value;
+}
+function invalid(details) {
+  return { ok: false, reason: "schema-invalid", details };
+}
+function isRecord(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function isNonEmptyString(value) {
+  return typeof value === "string" && value.length > 0;
+}
+function isRate(value) {
+  return typeof value === "number" && Number.isFinite(value) && value >= 0 && value <= 1;
+}
+function isHex(value, length) {
+  return typeof value === "string" && new RegExp(`^[0-9a-f]{${length}}$`).test(value);
+}
+function isIsoDate(value) {
+  return typeof value === "string" && Number.isFinite(Date.parse(value));
+}
+function isSignature(value) {
+  return isRecord(value) && isNonEmptyString(value.keyId) && value.alg === "ed25519" && isHex(value.sig, 128) && isHex(value.signedHash, 64);
+}
+
+// src/keypair.ts
+async function generateKeypair(keyId) {
+  const subtle = await getSubtle();
+  const kp = await subtle.generateKey({ name: "Ed25519" }, true, [
+    "sign",
+    "verify"
+  ]);
+  const rawPub = new Uint8Array(await subtle.exportKey("raw", kp.publicKey));
+  const pkcs8Priv = new Uint8Array(await subtle.exportKey("pkcs8", kp.privateKey));
+  const seed = pkcs8Priv.slice(pkcs8Priv.length - 32);
+  return {
+    publicKeyHex: hexEncode(rawPub),
+    privateKeyHex: hexEncode(seed),
+    keyId
+  };
+}
+
 exports.canonicalSignedBytes = canonicalSignedBytes;
 exports.canonicalSignedPayload = canonicalSignedPayload;
 exports.generateKeypair = generateKeypair;
 exports.jwksFromKeys = jwksFromKeys;
+exports.parseManifestRevocations = parseManifestRevocations;
 exports.signManifest = signManifest;
 exports.verifyAgainstJwks = verifyAgainstJwks;
 exports.verifyManifest = verifyManifest;
+exports.verifyManifestDelivery = verifyManifestDelivery;
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/canonical.ts","../src/hash.ts","../src/sign.ts","../src/verify.ts","../src/keypair.ts","../src/jwks.ts"],"names":["getSubtle","hexDecode"],"mappings":";;;AASO,SAAS,uBAAuB,CAAA,EAA6B;AAClE,EAAA,OAAO,IAAA,CAAK,SAAA;AAAA,IACV;AAAA,MACE,aAAa,CAAA,CAAE,WAAA;AAAA,MACf,iBAAiB,CAAA,CAAE,eAAA;AAAA,MACnB,eAAe,CAAA,CAAE,aAAA;AAAA,MACjB,UAAU,CAAA,CAAE;AAAA,KACd;AAAA,IACA,IAAA;AAAA,IACA;AAAA,GACF;AACF;AAEO,SAAS,qBAAqB,CAAA,EAAiC;AACpE,EAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,sBAAA,CAAuB,CAAC,CAAC,CAAA;AAC3D;;;ACxBA,eAAsB,OAAO,IAAA,EAAuC;AAClE,EAAA,MAAM,MAAA,GAAS,MAAM,SAAA,EAAU;AAC/B,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,MAAA,CAAO,WAAW,IAAoB,CAAA;AAC/D,EAAA,OAAO,IAAI,WAAW,GAAG,CAAA;AAC3B;AAEO,SAAS,UAAU,KAAA,EAA2B;AACnD,EAAA,IAAI,CAAA,GAAI,EAAA;AACR,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,QAAQ,CAAA,EAAA,EAAK,CAAA,IAAK,KAAA,CAAM,CAAC,EAAG,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAClF,EAAA,OAAO,CAAA;AACT;AAEA,eAAe,SAAA,GAAmC;AAChD,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,MAAA,CAAO,MAAA,SAAe,MAAA,CAAO,MAAA;AAClE,EAAA,MAAM,EAAE,SAAA,EAAU,GAAI,MAAM,OAAO,QAAa,CAAA;AAChD,EAAA,OAAO,SAAA,CAAU,MAAA;AACnB;;;ACJA,eAAsB,YAAA,CACpB,UACA,GAAA,EAC4B;AAC5B,EAAA,MAAM,MAAA,GAAS,MAAMA,UAAAA,EAAU;AAC/B,EAAA,MAAM,OAAA,GAAU,qBAAqB,QAAQ,CAAA;AAC7C,EAAA,MAAM,UAAA,GAAa,MAAM,MAAA,CAAO,OAAO,CAAA;AAEvC,EAAA,MAAM,KAAA,GAAQ,wBAAA,CAAyB,SAAA,CAAU,GAAA,CAAI,aAAa,CAAC,CAAA;AACnE,EAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,SAAA;AAAA,IAC7B,OAAA;AAAA,IACA,KAAA;AAAA,IACA,EAAE,MAAM,SAAA,EAAU;AAAA,IAClB,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACT;AACA,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,IAAA,CAAK,EAAE,IAAA,EAAM,SAAA,EAAU,EAAG,SAAA,EAAW,OAAuB,CAAA;AACxF,EAAA,OAAO;AAAA,IACL,OAAO,GAAA,CAAI,KAAA;AAAA,IACX,GAAA,EAAK,SAAA;AAAA,IACL,GAAA,EAAK,SAAA,CAAU,IAAI,UAAA,CAAW,MAAM,CAAC,CAAA;AAAA,IACrC,UAAA,EAAY,UAAU,UAAU;AAAA,GAClC;AACF;AAEA,eAAeA,UAAAA,GAAmC;AAChD,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,MAAA,CAAO,MAAA,SAAe,MAAA,CAAO,MAAA;AAClE,EAAA,MAAM,EAAE,SAAA,EAAU,GAAI,MAAM,OAAO,QAAa,CAAA;AAChD,EAAA,OAAO,SAAA,CAAU,MAAA;AACnB;AAEA,SAAS,UAAU,GAAA,EAAyB;AAC1C,EAAA,IAAI,IAAI,MAAA,GAAS,CAAA,KAAM,GAAG,MAAM,IAAI,MAAM,uBAAuB,CAAA;AACjE,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,GAAA,CAAI,SAAS,CAAC,CAAA;AACzC,EAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,IAAI,MAAA,EAAQ,CAAA,EAAA,MAAS,CAAC,CAAA,GAAI,OAAO,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA,GAAI,CAAA,EAAG,IAAI,CAAA,GAAI,CAAC,GAAG,EAAE,CAAA;AAC7F,EAAA,OAAO,GAAA;AACT;AAGA,SAAS,yBAAyB,IAAA,EAA8B;AAC9D,EAAA,IAAI,KAAK,MAAA,KAAW,EAAA,EAAI,MAAM,IAAI,MAAM,+BAA+B,CAAA;AACvE,EAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAW;AAAA,IAC5B,EAAA;AAAA,IAAM,EAAA;AAAA,IAAM,CAAA;AAAA,IAAM,CAAA;AAAA,IAAM,CAAA;AAAA,IAAM,EAAA;AAAA,IAAM,CAAA;AAAA,IAAM,CAAA;AAAA,IAAM,CAAA;AAAA,IAAM,EAAA;AAAA,IAAM,GAAA;AAAA,IAAM,GAAA;AAAA,IAAM,CAAA;AAAA,IAAM,EAAA;AAAA,IAAM,CAAA;AAAA,IAAM;AAAA,GAC3F,CAAA;AACD,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,MAAA,CAAO,SAAS,EAAE,CAAA;AAC7C,EAAA,GAAA,CAAI,GAAA,CAAI,QAAQ,CAAC,CAAA;AACjB,EAAA,GAAA,CAAI,GAAA,CAAI,IAAA,EAAM,MAAA,CAAO,MAAM,CAAA;AAC3B,EAAA,OAAO,GAAA;AACT;;;AC7CA,eAAsB,cAAA,CACpB,UACA,OAAA,EACuB;AACvB,EAAA,IAAI,QAAA,CAAS,SAAA,CAAU,KAAA,KAAU,OAAA,CAAQ,aAAA,EAAe;AACtD,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,gBAAA,EAAiB;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,qBAAqB,QAAQ,CAAA;AAC7C,EAAA,MAAM,YAAA,GAAe,SAAA,CAAU,MAAM,MAAA,CAAO,OAAO,CAAC,CAAA;AACpD,EAAA,IAAI,YAAA,KAAiB,QAAA,CAAS,SAAA,CAAU,UAAA,EAAY;AAClD,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,qBAAA,EAAsB;AAAA,EACpD;AAEA,EAAA,MAAM,MAAA,GAAS,MAAMA,UAAAA,EAAU;AAC/B,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,SAAA;AAAA,IAC1B,KAAA;AAAA,IACAC,UAAAA,CAAU,QAAQ,YAAY,CAAA;AAAA,IAC9B,EAAE,MAAM,SAAA,EAAU;AAAA,IAClB,KAAA;AAAA,IACA,CAAC,QAAQ;AAAA,GACX;AACA,EAAA,MAAM,KAAA,GAAQ,MAAM,MAAA,CAAO,MAAA;AAAA,IACzB,EAAE,MAAM,SAAA,EAAU;AAAA,IAClB,MAAA;AAAA,IACAA,UAAAA,CAAU,QAAA,CAAS,SAAA,CAAU,GAAG,CAAA;AAAA,IAChC;AAAA,GACF;AACA,EAAA,OAAO,KAAA,GAAQ,EAAE,EAAA,EAAI,IAAA,KAAS,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,aAAA,EAAc;AACnE;AAEA,eAAeD,UAAAA,GAAmC;AAChD,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,MAAA,CAAO,MAAA,SAAe,MAAA,CAAO,MAAA;AAClE,EAAA,MAAM,EAAE,SAAA,EAAU,GAAI,MAAM,OAAO,QAAa,CAAA;AAChD,EAAA,OAAO,SAAA,CAAU,MAAA;AACnB;AAEA,SAASC,WAAU,GAAA,EAAyB;AAC1C,EAAA,IAAI,IAAI,MAAA,GAAS,CAAA,KAAM,GAAG,MAAM,IAAI,MAAM,uBAAuB,CAAA;AACjE,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,GAAA,CAAI,SAAS,CAAC,CAAA;AACzC,EAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,IAAI,MAAA,EAAQ,CAAA,EAAA,MAAS,CAAC,CAAA,GAAI,OAAO,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA,GAAI,CAAA,EAAG,IAAI,CAAA,GAAI,CAAC,GAAG,EAAE,CAAA;AAC7F,EAAA,OAAO,GAAA;AACT;;;AC5CA,eAAsB,gBAAgB,KAAA,EAAwC;AAC5E,EAAA,MAAM,MAAA,GAAS,MAAMD,UAAAA,EAAU;AAC/B,EAAA,MAAM,EAAA,GAAM,MAAM,MAAA,CAAO,WAAA,CAAY,EAAE,IAAA,EAAM,SAAA,IAAa,IAAA,EAAM;AAAA,IAC9D,MAAA;AAAA,IACA;AAAA,GACD,CAAA;AACD,EAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAW,MAAM,OAAO,SAAA,CAAU,KAAA,EAAO,EAAA,CAAG,SAAS,CAAC,CAAA;AACzE,EAAA,MAAM,SAAA,GAAY,IAAI,UAAA,CAAW,MAAM,OAAO,SAAA,CAAU,OAAA,EAAS,EAAA,CAAG,UAAU,CAAC,CAAA;AAE/E,EAAA,MAAM,IAAA,GAAO,SAAA,CAAU,KAAA,CAAM,SAAA,CAAU,SAAS,EAAE,CAAA;AAClD,EAAA,OAAO;AAAA,IACL,YAAA,EAAc,UAAU,MAAM,CAAA;AAAA,IAC9B,aAAA,EAAe,UAAU,IAAI,CAAA;AAAA,IAC7B;AAAA,GACF;AACF;AAEA,eAAeA,UAAAA,GAAmC;AAChD,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,MAAA,CAAO,MAAA,SAAe,MAAA,CAAO,MAAA;AAClE,EAAA,MAAM,EAAE,SAAA,EAAU,GAAI,MAAM,OAAO,QAAa,CAAA;AAChD,EAAA,OAAO,SAAA,CAAU,MAAA;AACnB;;;ACTO,SAAS,aACd,IAAA,EAKM;AACN,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,IAAA,CAAK,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,MACrB,KAAK,CAAA,CAAE,KAAA;AAAA,MACP,GAAA,EAAK,KAAA;AAAA,MACL,GAAA,EAAK,SAAA;AAAA,MACL,CAAA,EAAG,cAAA,CAAe,CAAA,CAAE,YAAY,CAAA;AAAA,MAChC,GAAA,EAAK,OAAA;AAAA,MACL,GAAA,EAAK,KAAA;AAAA,MACL,QAAQ,CAAA,CAAE;AAAA,KACZ,CAAE;AAAA,GACJ;AACF;AA6BA,eAAsB,iBAAA,CACpB,UACA,OAAA,EAC2B;AAC3B,EAAA,MAAM,MAAM,QAAA,CAAS,SAAA;AACrB,EAAA,IAAI,OAAA,CAAQ,kBAAkB,CAAC,OAAA,CAAQ,eAAe,QAAA,CAAS,GAAA,CAAI,KAAK,CAAA,EAAG;AACzE,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,qBAAA,EAAsB;AAAA,EACpD;AACA,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,IAAA,CAAK,IAAA,CAAK,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,GAAA,KAAQ,GAAA,CAAI,KAAK,CAAA;AAC/D,EAAA,IAAI,CAAC,KAAA,EAAO,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,QAAQ,aAAA,EAAc;AACtD,EAAA,IAAI,KAAA,CAAM,WAAW,SAAA,EAAW,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,QAAQ,aAAA,EAAc;AAE1E,EAAA,IAAI,OAAA,CAAQ,QAAA,IAAY,QAAA,CAAS,OAAA,EAAS;AACxC,IAAA,MAAM,GAAA,GAAA,CACH,OAAA,CAAQ,GAAA,KAAQ,0BAAU,IAAA,EAAK,CAAA,GAAI,CAAE,OAAA,KAAY,IAAI,IAAA,CAAK,QAAA,CAAS,OAAO,EAAE,OAAA,EAAQ;AACvF,IAAA,IAAI,GAAA,GAAM,QAAQ,QAAA,EAAU,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,QAAQ,eAAA,EAAgB;AAAA,EAC1E;AAEA,EAAA,MAAM,OAAA,GAAU,qBAAqB,QAAQ,CAAA;AAC7C,EAAA,MAAM,YAAA,GAAe,SAAA,CAAU,MAAM,MAAA,CAAO,OAAO,CAAC,CAAA;AACpD,EAAA,IAAI,YAAA,KAAiB,IAAI,UAAA,EAAY,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,QAAQ,qBAAA,EAAsB;AAEvF,EAAA,MAAM,MAAA,GAAS,MAAMA,UAAAA,EAAU;AAC/B,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,SAAA;AAAA,IAC1B,KAAA;AAAA,IACA,gBAAA,CAAiB,MAAM,CAAC,CAAA;AAAA,IACxB,EAAE,MAAM,SAAA,EAAU;AAAA,IAClB,KAAA;AAAA,IACA,CAAC,QAAQ;AAAA,GACX;AACA,EAAA,MAAM,KAAA,GAAQ,MAAM,MAAA,CAAO,MAAA;AAAA,IACzB,EAAE,MAAM,SAAA,EAAU;AAAA,IAClB,MAAA;AAAA,IACA,UAAA,CAAW,IAAI,GAAG,CAAA;AAAA,IAClB;AAAA,GACF;AACA,EAAA,OAAO,KAAA,GAAQ,EAAE,EAAA,EAAI,IAAA,KAAS,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,aAAA,EAAc;AACnE;AAEA,eAAeA,UAAAA,GAAmC;AAChD,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,MAAA,CAAO,MAAA,SAAe,MAAA,CAAO,MAAA;AAClE,EAAA,MAAM,EAAE,SAAA,EAAU,GAAI,MAAM,OAAO,QAAa,CAAA;AAChD,EAAA,OAAO,SAAA,CAAU,MAAA;AACnB;AAEA,SAAS,WAAW,GAAA,EAAyB;AAC3C,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,GAAA,CAAI,SAAS,CAAC,CAAA;AACzC,EAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,IAAI,MAAA,EAAQ,CAAA,EAAA,MAAS,CAAC,CAAA,GAAI,OAAO,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA,GAAI,CAAA,EAAG,IAAI,CAAA,GAAI,CAAC,GAAG,EAAE,CAAA;AAC7F,EAAA,OAAO,GAAA;AACT;AAEA,SAAS,eAAe,GAAA,EAAqB;AAC3C,EAAA,OAAO,gBAAA,CAAiB,UAAA,CAAW,GAAG,CAAC,CAAA;AACzC;AAEA,SAAS,iBAAiB,KAAA,EAA2B;AACnD,EAAA,IAAI,CAAA,GAAI,EAAA;AACR,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,MAAA,EAAQ,CAAA,EAAA,EAAK,CAAA,IAAK,MAAA,CAAO,YAAA,CAAa,KAAA,CAAM,CAAC,CAAE,CAAA;AACzE,EAAA,OAAO,IAAA,CAAK,CAAC,CAAA,CAAE,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,OAAO,GAAG,CAAA;AAC3E;AAEA,SAAS,iBAAiB,CAAA,EAAuB;AAC/C,EAAA,MAAM,MAAM,GAAA,CAAI,MAAA,CAAA,CAAQ,IAAK,CAAA,CAAE,MAAA,GAAS,KAAM,CAAC,CAAA;AAC/C,EAAA,MAAM,GAAA,GAAA,CAAO,IAAI,GAAA,EAAK,OAAA,CAAQ,MAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA;AAC1D,EAAA,MAAM,MAAA,GAAS,KAAK,GAAG,CAAA;AACvB,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,MAAA,CAAO,MAAM,CAAA;AACxC,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,MAAA,CAAO,MAAA,EAAQ,CAAA,EAAA,EAAK,GAAA,CAAI,CAAC,CAAA,GAAI,MAAA,CAAO,UAAA,CAAW,CAAC,CAAA;AACpE,EAAA,OAAO,GAAA;AACT","file":"index.cjs","sourcesContent":["import type { SignableManifest } from './types.js';\n\n/**\n * Canonical JSON of the signed payload — sorted keys, no whitespace.\n *\n * The payload is intentionally NOT the full manifest. It is the minimum that\n * binds a (manifestVersion, contentHash) pair to a tenant under a schema. See\n * ADR-0002.\n */\nexport function canonicalSignedPayload(m: SignableManifest): string {\n  return JSON.stringify(\n    {\n      contentHash: m.contentHash,\n      manifestVersion: m.manifestVersion,\n      schemaVersion: m.schemaVersion,\n      tenantId: m.tenantId,\n    },\n    null,\n    0,\n  );\n}\n\nexport function canonicalSignedBytes(m: SignableManifest): Uint8Array {\n  return new TextEncoder().encode(canonicalSignedPayload(m));\n}\n","export async function sha256(data: Uint8Array): Promise<Uint8Array> {\n  const subtle = await getSubtle();\n  const buf = await subtle.digest('SHA-256', data as BufferSource);\n  return new Uint8Array(buf);\n}\n\nexport function hexEncode(bytes: Uint8Array): string {\n  let s = '';\n  for (let i = 0; i < bytes.length; i++) s += bytes[i]!.toString(16).padStart(2, '0');\n  return s;\n}\n\nasync function getSubtle(): Promise<SubtleCrypto> {\n  if (typeof crypto !== 'undefined' && crypto.subtle) return crypto.subtle;\n  const { webcrypto } = await import('node:crypto');\n  return webcrypto.subtle as unknown as SubtleCrypto;\n}\n","import { canonicalSignedBytes } from './canonical.js';\nimport { hexEncode, sha256 } from './hash.js';\nimport type { ManifestSignature, SignableManifest } from './types.js';\n\n/** Universal-runtime Ed25519 signer (Node + Edge + browsers via crypto.subtle). */\nexport interface SignKey {\n  /** Raw 32-byte Ed25519 private key as hex. */\n  privateKeyHex: string;\n  /** Identifier for the key — included in the signature for rotation tracking. */\n  keyId: string;\n}\n\nexport async function signManifest(\n  manifest: SignableManifest,\n  key: SignKey,\n): Promise<ManifestSignature> {\n  const subtle = await getSubtle();\n  const payload = canonicalSignedBytes(manifest);\n  const signedHash = await sha256(payload);\n\n  const pkcs8 = ed25519PrivateKeyToPkcs8(hexDecode(key.privateKeyHex));\n  const cryptoKey = await subtle.importKey(\n    'pkcs8',\n    pkcs8 as BufferSource,\n    { name: 'Ed25519' },\n    false,\n    ['sign'],\n  );\n  const sigBuf = await subtle.sign({ name: 'Ed25519' }, cryptoKey, payload as BufferSource);\n  return {\n    keyId: key.keyId,\n    alg: 'ed25519',\n    sig: hexEncode(new Uint8Array(sigBuf)),\n    signedHash: hexEncode(signedHash),\n  };\n}\n\nasync function getSubtle(): Promise<SubtleCrypto> {\n  if (typeof crypto !== 'undefined' && crypto.subtle) return crypto.subtle;\n  const { webcrypto } = await import('node:crypto');\n  return webcrypto.subtle as unknown as SubtleCrypto;\n}\n\nfunction hexDecode(hex: string): Uint8Array {\n  if (hex.length % 2 !== 0) throw new Error('hexDecode: odd length');\n  const out = new Uint8Array(hex.length / 2);\n  for (let i = 0; i < out.length; i++) out[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);\n  return out;\n}\n\n/** Wrap a raw 32-byte Ed25519 seed into a minimal PKCS#8 envelope (RFC 8410). */\nfunction ed25519PrivateKeyToPkcs8(seed: Uint8Array): Uint8Array {\n  if (seed.length !== 32) throw new Error('ed25519 seed must be 32 bytes');\n  const prefix = new Uint8Array([\n    0x30, 0x2e, 0x02, 0x01, 0x00, 0x30, 0x05, 0x06, 0x03, 0x2b, 0x65, 0x70, 0x04, 0x22, 0x04, 0x20,\n  ]);\n  const out = new Uint8Array(prefix.length + 32);\n  out.set(prefix, 0);\n  out.set(seed, prefix.length);\n  return out;\n}\n","import { canonicalSignedBytes } from './canonical.js';\nimport { hexEncode, sha256 } from './hash.js';\nimport type { ManifestSignature, SignableManifest } from './types.js';\n\nexport interface VerifyOptions {\n  /** Hex-encoded raw 32-byte Ed25519 public key. */\n  publicKeyHex: string;\n  /** Required keyId — caller pins this at SDK init time. */\n  expectedKeyId: string;\n}\n\nexport type VerifyResult =\n  | { ok: true }\n  | { ok: false; reason: 'keyId-mismatch' | 'signedHash-mismatch' | 'sig-invalid' };\n\nexport async function verifyManifest(\n  manifest: SignableManifest & { signature: ManifestSignature },\n  options: VerifyOptions,\n): Promise<VerifyResult> {\n  if (manifest.signature.keyId !== options.expectedKeyId) {\n    return { ok: false, reason: 'keyId-mismatch' };\n  }\n  const payload = canonicalSignedBytes(manifest);\n  const expectedHash = hexEncode(await sha256(payload));\n  if (expectedHash !== manifest.signature.signedHash) {\n    return { ok: false, reason: 'signedHash-mismatch' };\n  }\n\n  const subtle = await getSubtle();\n  const pubKey = await subtle.importKey(\n    'raw',\n    hexDecode(options.publicKeyHex) as BufferSource,\n    { name: 'Ed25519' },\n    false,\n    ['verify'],\n  );\n  const valid = await subtle.verify(\n    { name: 'Ed25519' },\n    pubKey,\n    hexDecode(manifest.signature.sig) as BufferSource,\n    payload as BufferSource,\n  );\n  return valid ? { ok: true } : { ok: false, reason: 'sig-invalid' };\n}\n\nasync function getSubtle(): Promise<SubtleCrypto> {\n  if (typeof crypto !== 'undefined' && crypto.subtle) return crypto.subtle;\n  const { webcrypto } = await import('node:crypto');\n  return webcrypto.subtle as unknown as SubtleCrypto;\n}\n\nfunction hexDecode(hex: string): Uint8Array {\n  if (hex.length % 2 !== 0) throw new Error('hexDecode: odd length');\n  const out = new Uint8Array(hex.length / 2);\n  for (let i = 0; i < out.length; i++) out[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);\n  return out;\n}\n","/**\n * Ed25519 keypair generation for `fx dev` and tests. Production keys are\n * generated offline and stored in a secrets manager.\n */\nimport { hexEncode } from './hash.js';\n\nexport interface Ed25519Keypair {\n  publicKeyHex: string;\n  privateKeyHex: string;\n  keyId: string;\n}\n\nexport async function generateKeypair(keyId: string): Promise<Ed25519Keypair> {\n  const subtle = await getSubtle();\n  const kp = (await subtle.generateKey({ name: 'Ed25519' }, true, [\n    'sign',\n    'verify',\n  ])) as CryptoKeyPair;\n  const rawPub = new Uint8Array(await subtle.exportKey('raw', kp.publicKey));\n  const pkcs8Priv = new Uint8Array(await subtle.exportKey('pkcs8', kp.privateKey));\n  // PKCS#8 ed25519 = 16-byte prefix + 32-byte seed. Strip the prefix.\n  const seed = pkcs8Priv.slice(pkcs8Priv.length - 32);\n  return {\n    publicKeyHex: hexEncode(rawPub),\n    privateKeyHex: hexEncode(seed),\n    keyId,\n  };\n}\n\nasync function getSubtle(): Promise<SubtleCrypto> {\n  if (typeof crypto !== 'undefined' && crypto.subtle) return crypto.subtle;\n  const { webcrypto } = await import('node:crypto');\n  return webcrypto.subtle as unknown as SubtleCrypto;\n}\n","import { canonicalSignedBytes } from './canonical.js';\nimport { hexEncode, sha256 } from './hash.js';\nimport type { ManifestSignature, SignableManifest } from './types.js';\n\n/**\n * JWKS-style key set for a single org. Each entry is an Ed25519 public key\n * with a kid that matches a `manifest_keys.key_id` in the control plane.\n */\nexport interface JwksEntry {\n  kid: string;\n  kty: 'OKP';\n  crv: 'Ed25519';\n  /** Base64url-encoded raw 32-byte public key. */\n  x: string;\n  alg: 'EdDSA';\n  use: 'sig';\n  /** Lifecycle status — extension on top of the JWKS standard. */\n  status: 'active' | 'retiring' | 'retired';\n}\n\nexport interface Jwks {\n  keys: JwksEntry[];\n}\n\nexport function jwksFromKeys(\n  keys: readonly {\n    keyId: string;\n    publicKeyHex: string;\n    status: 'active' | 'retiring' | 'retired';\n  }[],\n): Jwks {\n  return {\n    keys: keys.map((k) => ({\n      kid: k.keyId,\n      kty: 'OKP',\n      crv: 'Ed25519',\n      x: hexToBase64Url(k.publicKeyHex),\n      alg: 'EdDSA',\n      use: 'sig',\n      status: k.status,\n    })),\n  };\n}\n\nexport interface VerifyAgainstJwksOptions {\n  jwks: Jwks;\n  /** Optional pinning. If set, rejects keys whose kid is not in this list. */\n  expectedKeyIds?: string[];\n  /** Reject manifests older than this many milliseconds (replay window). */\n  maxAgeMs?: number;\n  /** Override clock for tests. */\n  now?: () => Date;\n}\n\nexport type JwksVerifyResult =\n  | { ok: true }\n  | {\n      ok: false;\n      reason:\n        | 'unknown-key'\n        | 'retired-key'\n        | 'pinned-key-mismatch'\n        | 'signedHash-mismatch'\n        | 'sig-invalid'\n        | 'replay-window';\n    };\n\n/**\n * Verify a signed manifest against a JWKS document. Replaces ADR-0002's\n * single-key verifier when SDKs run in M3+ hosted mode.\n */\nexport async function verifyAgainstJwks(\n  manifest: SignableManifest & { signature: ManifestSignature; builtAt?: string },\n  options: VerifyAgainstJwksOptions,\n): Promise<JwksVerifyResult> {\n  const sig = manifest.signature;\n  if (options.expectedKeyIds && !options.expectedKeyIds.includes(sig.keyId)) {\n    return { ok: false, reason: 'pinned-key-mismatch' };\n  }\n  const entry = options.jwks.keys.find((k) => k.kid === sig.keyId);\n  if (!entry) return { ok: false, reason: 'unknown-key' };\n  if (entry.status === 'retired') return { ok: false, reason: 'retired-key' };\n\n  if (options.maxAgeMs && manifest.builtAt) {\n    const age =\n      (options.now ?? (() => new Date()))().getTime() - new Date(manifest.builtAt).getTime();\n    if (age > options.maxAgeMs) return { ok: false, reason: 'replay-window' };\n  }\n\n  const payload = canonicalSignedBytes(manifest);\n  const expectedHash = hexEncode(await sha256(payload));\n  if (expectedHash !== sig.signedHash) return { ok: false, reason: 'signedHash-mismatch' };\n\n  const subtle = await getSubtle();\n  const pubKey = await subtle.importKey(\n    'raw',\n    base64UrlToBytes(entry.x) as BufferSource,\n    { name: 'Ed25519' },\n    false,\n    ['verify'],\n  );\n  const valid = await subtle.verify(\n    { name: 'Ed25519' },\n    pubKey,\n    hexToBytes(sig.sig) as BufferSource,\n    payload as BufferSource,\n  );\n  return valid ? { ok: true } : { ok: false, reason: 'sig-invalid' };\n}\n\nasync function getSubtle(): Promise<SubtleCrypto> {\n  if (typeof crypto !== 'undefined' && crypto.subtle) return crypto.subtle;\n  const { webcrypto } = await import('node:crypto');\n  return webcrypto.subtle as unknown as SubtleCrypto;\n}\n\nfunction hexToBytes(hex: string): Uint8Array {\n  const out = new Uint8Array(hex.length / 2);\n  for (let i = 0; i < out.length; i++) out[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);\n  return out;\n}\n\nfunction hexToBase64Url(hex: string): string {\n  return bytesToBase64Url(hexToBytes(hex));\n}\n\nfunction bytesToBase64Url(bytes: Uint8Array): string {\n  let s = '';\n  for (let i = 0; i < bytes.length; i++) s += String.fromCharCode(bytes[i]!);\n  return btoa(s).replace(/=+$/g, '').replace(/\\+/g, '-').replace(/\\//g, '_');\n}\n\nfunction base64UrlToBytes(s: string): Uint8Array {\n  const pad = '='.repeat((4 - (s.length % 4)) % 4);\n  const b64 = (s + pad).replace(/-/g, '+').replace(/_/g, '/');\n  const binary = atob(b64);\n  const out = new Uint8Array(binary.length);\n  for (let i = 0; i < binary.length; i++) out[i] = binary.charCodeAt(i);\n  return out;\n}\n"]}
+{"version":3,"sources":["../src/canonical.ts","../src/subtle.ts","../src/hash.ts","../src/sign.ts","../src/verify.ts","../src/jwks.ts","../src/delivery.ts","../src/keypair.ts"],"names":["hexDecode"],"mappings":";;;AASO,SAAS,uBAAuB,CAAA,EAA6B;AAClE,EAAA,OAAO,IAAA,CAAK,SAAA;AAAA,IACV;AAAA,MACE,aAAa,CAAA,CAAE,WAAA;AAAA,MACf,iBAAiB,CAAA,CAAE,eAAA;AAAA,MACnB,eAAe,CAAA,CAAE,aAAA;AAAA,MACjB,UAAU,CAAA,CAAE;AAAA,KACd;AAAA,IACA,IAAA;AAAA,IACA;AAAA,GACF;AACF;AAEO,SAAS,qBAAqB,CAAA,EAAiC;AACpE,EAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,sBAAA,CAAuB,CAAC,CAAC,CAAA;AAC3D;;;ACnBA,eAAsB,SAAA,GAAmC;AACvD,EAAA,IAAI,UAAA,CAAW,MAAA,EAAQ,MAAA,EAAQ,OAAO,WAAW,MAAA,CAAO,MAAA;AACxD,EAAA,MAAM,mBAAA,GAAsB,aAAA;AAC5B,EAAA,MAAM,EAAE,SAAA,EAAU,GAAI,MAAM,OAAO,mBAAA,CAAA;AACnC,EAAA,OAAO,SAAA,CAAU,MAAA;AACnB;;;ACRA,eAAsB,OAAO,IAAA,EAAuC;AAClE,EAAA,MAAM,MAAA,GAAS,MAAM,SAAA,EAAU;AAC/B,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,MAAA,CAAO,WAAW,IAAoB,CAAA;AAC/D,EAAA,OAAO,IAAI,WAAW,GAAG,CAAA;AAC3B;AAEO,SAAS,UAAU,KAAA,EAA2B;AACnD,EAAA,IAAI,CAAA,GAAI,EAAA;AACR,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,QAAQ,CAAA,EAAA,EAAK,CAAA,IAAK,KAAA,CAAM,CAAC,EAAG,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAClF,EAAA,OAAO,CAAA;AACT;;;ACCA,eAAsB,YAAA,CACpB,UACA,GAAA,EAC4B;AAC5B,EAAA,MAAM,MAAA,GAAS,MAAM,SAAA,EAAU;AAC/B,EAAA,MAAM,OAAA,GAAU,qBAAqB,QAAQ,CAAA;AAC7C,EAAA,MAAM,UAAA,GAAa,MAAM,MAAA,CAAO,OAAO,CAAA;AAEvC,EAAA,MAAM,KAAA,GAAQ,wBAAA,CAAyB,SAAA,CAAU,GAAA,CAAI,aAAa,CAAC,CAAA;AACnE,EAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,SAAA;AAAA,IAC7B,OAAA;AAAA,IACA,KAAA;AAAA,IACA,EAAE,MAAM,SAAA,EAAU;AAAA,IAClB,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACT;AACA,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,IAAA,CAAK,EAAE,IAAA,EAAM,SAAA,EAAU,EAAG,SAAA,EAAW,OAAuB,CAAA;AACxF,EAAA,OAAO;AAAA,IACL,OAAO,GAAA,CAAI,KAAA;AAAA,IACX,GAAA,EAAK,SAAA;AAAA,IACL,GAAA,EAAK,SAAA,CAAU,IAAI,UAAA,CAAW,MAAM,CAAC,CAAA;AAAA,IACrC,UAAA,EAAY,UAAU,UAAU;AAAA,GAClC;AACF;AAEA,SAAS,UAAU,GAAA,EAAyB;AAC1C,EAAA,IAAI,IAAI,MAAA,GAAS,CAAA,KAAM,GAAG,MAAM,IAAI,MAAM,uBAAuB,CAAA;AACjE,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,GAAA,CAAI,SAAS,CAAC,CAAA;AACzC,EAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,IAAI,MAAA,EAAQ,CAAA,EAAA,MAAS,CAAC,CAAA,GAAI,OAAO,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA,GAAI,CAAA,EAAG,IAAI,CAAA,GAAI,CAAC,GAAG,EAAE,CAAA;AAC7F,EAAA,OAAO,GAAA;AACT;AAGA,SAAS,yBAAyB,IAAA,EAA8B;AAC9D,EAAA,IAAI,KAAK,MAAA,KAAW,EAAA,EAAI,MAAM,IAAI,MAAM,+BAA+B,CAAA;AACvE,EAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAW;AAAA,IAC5B,EAAA;AAAA,IAAM,EAAA;AAAA,IAAM,CAAA;AAAA,IAAM,CAAA;AAAA,IAAM,CAAA;AAAA,IAAM,EAAA;AAAA,IAAM,CAAA;AAAA,IAAM,CAAA;AAAA,IAAM,CAAA;AAAA,IAAM,EAAA;AAAA,IAAM,GAAA;AAAA,IAAM,GAAA;AAAA,IAAM,CAAA;AAAA,IAAM,EAAA;AAAA,IAAM,CAAA;AAAA,IAAM;AAAA,GAC3F,CAAA;AACD,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,MAAA,CAAO,SAAS,EAAE,CAAA;AAC7C,EAAA,GAAA,CAAI,GAAA,CAAI,QAAQ,CAAC,CAAA;AACjB,EAAA,GAAA,CAAI,GAAA,CAAI,IAAA,EAAM,MAAA,CAAO,MAAM,CAAA;AAC3B,EAAA,OAAO,GAAA;AACT;;;ACvCA,eAAsB,cAAA,CACpB,UACA,OAAA,EACuB;AACvB,EAAA,IAAI,QAAA,CAAS,SAAA,CAAU,KAAA,KAAU,OAAA,CAAQ,aAAA,EAAe;AACtD,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,gBAAA,EAAiB;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,qBAAqB,QAAQ,CAAA;AAC7C,EAAA,MAAM,YAAA,GAAe,SAAA,CAAU,MAAM,MAAA,CAAO,OAAO,CAAC,CAAA;AACpD,EAAA,IAAI,YAAA,KAAiB,QAAA,CAAS,SAAA,CAAU,UAAA,EAAY;AAClD,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,qBAAA,EAAsB;AAAA,EACpD;AAEA,EAAA,MAAM,MAAA,GAAS,MAAM,SAAA,EAAU;AAC/B,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,SAAA;AAAA,IAC1B,KAAA;AAAA,IACAA,UAAAA,CAAU,QAAQ,YAAY,CAAA;AAAA,IAC9B,EAAE,MAAM,SAAA,EAAU;AAAA,IAClB,KAAA;AAAA,IACA,CAAC,QAAQ;AAAA,GACX;AACA,EAAA,MAAM,KAAA,GAAQ,MAAM,MAAA,CAAO,MAAA;AAAA,IACzB,EAAE,MAAM,SAAA,EAAU;AAAA,IAClB,MAAA;AAAA,IACAA,UAAAA,CAAU,QAAA,CAAS,SAAA,CAAU,GAAG,CAAA;AAAA,IAChC;AAAA,GACF;AACA,EAAA,OAAO,KAAA,GAAQ,EAAE,EAAA,EAAI,IAAA,KAAS,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,aAAA,EAAc;AACnE;AAEA,SAASA,WAAU,GAAA,EAAyB;AAC1C,EAAA,IAAI,IAAI,MAAA,GAAS,CAAA,KAAM,GAAG,MAAM,IAAI,MAAM,uBAAuB,CAAA;AACjE,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,GAAA,CAAI,SAAS,CAAC,CAAA;AACzC,EAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,IAAI,MAAA,EAAQ,CAAA,EAAA,MAAS,CAAC,CAAA,GAAI,OAAO,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA,GAAI,CAAA,EAAG,IAAI,CAAA,GAAI,CAAC,GAAG,EAAE,CAAA;AAC7F,EAAA,OAAO,GAAA;AACT;;;AC1BO,SAAS,aACd,IAAA,EAKM;AACN,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,IAAA,CAAK,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,MACrB,KAAK,CAAA,CAAE,KAAA;AAAA,MACP,GAAA,EAAK,KAAA;AAAA,MACL,GAAA,EAAK,SAAA;AAAA,MACL,CAAA,EAAG,cAAA,CAAe,CAAA,CAAE,YAAY,CAAA;AAAA,MAChC,GAAA,EAAK,OAAA;AAAA,MACL,GAAA,EAAK,KAAA;AAAA,MACL,QAAQ,CAAA,CAAE;AAAA,KACZ,CAAE;AAAA,GACJ;AACF;AA6BA,eAAsB,iBAAA,CACpB,UACA,OAAA,EAC2B;AAC3B,EAAA,MAAM,MAAM,QAAA,CAAS,SAAA;AACrB,EAAA,IAAI,OAAA,CAAQ,kBAAkB,CAAC,OAAA,CAAQ,eAAe,QAAA,CAAS,GAAA,CAAI,KAAK,CAAA,EAAG;AACzE,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,qBAAA,EAAsB;AAAA,EACpD;AACA,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,IAAA,CAAK,IAAA,CAAK,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,GAAA,KAAQ,GAAA,CAAI,KAAK,CAAA;AAC/D,EAAA,IAAI,CAAC,KAAA,EAAO,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,QAAQ,aAAA,EAAc;AACtD,EAAA,IAAI,KAAA,CAAM,WAAW,SAAA,EAAW,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,QAAQ,aAAA,EAAc;AAE1E,EAAA,IAAI,OAAA,CAAQ,QAAA,IAAY,QAAA,CAAS,OAAA,EAAS;AACxC,IAAA,MAAM,GAAA,GAAA,CACH,OAAA,CAAQ,GAAA,KAAQ,0BAAU,IAAA,EAAK,CAAA,GAAI,CAAE,OAAA,KAAY,IAAI,IAAA,CAAK,QAAA,CAAS,OAAO,EAAE,OAAA,EAAQ;AACvF,IAAA,IAAI,GAAA,GAAM,QAAQ,QAAA,EAAU,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,QAAQ,eAAA,EAAgB;AAAA,EAC1E;AAEA,EAAA,MAAM,OAAA,GAAU,qBAAqB,QAAQ,CAAA;AAC7C,EAAA,MAAM,YAAA,GAAe,SAAA,CAAU,MAAM,MAAA,CAAO,OAAO,CAAC,CAAA;AACpD,EAAA,IAAI,YAAA,KAAiB,IAAI,UAAA,EAAY,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,QAAQ,qBAAA,EAAsB;AAEvF,EAAA,MAAM,MAAA,GAAS,MAAM,SAAA,EAAU;AAC/B,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,SAAA;AAAA,IAC1B,KAAA;AAAA,IACA,gBAAA,CAAiB,MAAM,CAAC,CAAA;AAAA,IACxB,EAAE,MAAM,SAAA,EAAU;AAAA,IAClB,KAAA;AAAA,IACA,CAAC,QAAQ;AAAA,GACX;AACA,EAAA,MAAM,KAAA,GAAQ,MAAM,MAAA,CAAO,MAAA;AAAA,IACzB,EAAE,MAAM,SAAA,EAAU;AAAA,IAClB,MAAA;AAAA,IACA,UAAA,CAAW,IAAI,GAAG,CAAA;AAAA,IAClB;AAAA,GACF;AACA,EAAA,OAAO,KAAA,GAAQ,EAAE,EAAA,EAAI,IAAA,KAAS,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,aAAA,EAAc;AACnE;AAEA,SAAS,WAAW,GAAA,EAAyB;AAC3C,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,GAAA,CAAI,SAAS,CAAC,CAAA;AACzC,EAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,IAAI,MAAA,EAAQ,CAAA,EAAA,MAAS,CAAC,CAAA,GAAI,OAAO,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA,GAAI,CAAA,EAAG,IAAI,CAAA,GAAI,CAAC,GAAG,EAAE,CAAA;AAC7F,EAAA,OAAO,GAAA;AACT;AAEA,SAAS,eAAe,GAAA,EAAqB;AAC3C,EAAA,OAAO,gBAAA,CAAiB,UAAA,CAAW,GAAG,CAAC,CAAA;AACzC;AAEA,SAAS,iBAAiB,KAAA,EAA2B;AACnD,EAAA,IAAI,CAAA,GAAI,EAAA;AACR,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,MAAA,EAAQ,CAAA,EAAA,EAAK,CAAA,IAAK,MAAA,CAAO,YAAA,CAAa,KAAA,CAAM,CAAC,CAAE,CAAA;AACzE,EAAA,OAAO,IAAA,CAAK,CAAC,CAAA,CAAE,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,OAAO,GAAG,CAAA;AAC3E;AAEA,SAAS,iBAAiB,CAAA,EAAuB;AAC/C,EAAA,MAAM,MAAM,GAAA,CAAI,MAAA,CAAA,CAAQ,IAAK,CAAA,CAAE,MAAA,GAAS,KAAM,CAAC,CAAA;AAC/C,EAAA,MAAM,GAAA,GAAA,CAAO,IAAI,GAAA,EAAK,OAAA,CAAQ,MAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA;AAC1D,EAAA,MAAM,MAAA,GAAS,KAAK,GAAG,CAAA;AACvB,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,MAAA,CAAO,MAAM,CAAA;AACxC,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,MAAA,CAAO,MAAA,EAAQ,CAAA,EAAA,EAAK,GAAA,CAAI,CAAC,CAAA,GAAI,MAAA,CAAO,UAAA,CAAW,CAAC,CAAA;AACpE,EAAA,OAAO,GAAA;AACT;;;ACpGA,eAAsB,sBAAA,CACpB,OACA,OAAA,EACiC;AACjC,EAAA,MAAM,MAAA,GAAS,sBAAsB,KAAK,CAAA;AAC1C,EAAA,IAAI,CAAC,MAAA,CAAO,EAAA,EAAI,OAAO,MAAA;AACvB,EAAA,IAAI,QAAQ,eAAA,EAAiB,QAAA,CAAS,MAAA,CAAO,QAAA,CAAS,eAAe,CAAA,EAAG;AACtE,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,kBAAA,EAAmB;AAAA,EACjD;AAEA,EAAA,MAAM,OAAA,GAAU;AAAA,IACd,aAAA,EAAe,OAAO,QAAA,CAAS,aAAA;AAAA,IAC/B,eAAA,EAAiB,OAAO,QAAA,CAAS,eAAA;AAAA,IACjC,QAAA,EAAU,OAAO,QAAA,CAAS,QAAA;AAAA,IAC1B,WAAA,EAAa,OAAO,QAAA,CAAS;AAAA,GAC/B;AACA,EAAA,MAAM,UAAA,GAAa,SAAA,CAAU,MAAM,MAAA,CAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,aAAA,CAAc,OAAO,CAAC,CAAC,CAAC,CAAA;AAC3F,EAAA,IAAI,UAAA,KAAe,MAAA,CAAO,QAAA,CAAS,WAAA,EAAa;AAC9C,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,uBAAA,EAAwB;AAAA,EACtD;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,SAAA,GAAY,MAAM,iBAAA,CAAkB,MAAA,CAAO,UAAU,OAAO,CAAA;AAClE,IAAA,OAAO,SAAA,CAAU,KAAK,EAAE,EAAA,EAAI,MAAM,QAAA,EAAU,MAAA,CAAO,UAAS,GAAI,SAAA;AAAA,EAClE,SAAS,KAAA,EAAO;AACd,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,KAAA;AAAA,MACJ,MAAA,EAAQ,gBAAA;AAAA,MACR,SAAS,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,OAAO,KAAK;AAAA,KAChE;AAAA,EACF;AACF;AAEO,SAAS,yBAAyB,KAAA,EAA0B;AACjE,EAAA,IAAI,CAAC,SAAS,KAAK,CAAA,IAAK,CAAC,KAAA,CAAM,OAAA,CAAQ,KAAA,CAAM,QAAQ,CAAA,EAAG;AACtD,IAAA,MAAM,IAAI,MAAM,oDAAoD,CAAA;AAAA,EACtE;AACA,EAAA,MAAM,WAAW,KAAA,CAAM,QAAA;AACvB,EAAA,IAAI,CAAC,QAAA,CAAS,KAAA,CAAM,CAAC,OAAA,KAAY,MAAA,CAAO,SAAA,CAAU,OAAO,CAAA,IAAK,MAAA,CAAO,OAAO,CAAA,IAAK,CAAC,CAAA,EAAG;AACnF,IAAA,MAAM,IAAI,MAAM,4DAA4D,CAAA;AAAA,EAC9E;AACA,EAAA,OAAO,CAAC,GAAG,IAAI,GAAA,CAAI,QAAoB,CAAC,CAAA;AAC1C;AAEA,SAAS,sBACP,KAAA,EAG2D;AAC3D,EAAA,IAAI,CAAC,QAAA,CAAS,KAAK,CAAA,EAAG,OAAO,QAAQ,4BAA4B,CAAA;AACjE,EAAA,IAAI,KAAA,CAAM,aAAA,KAAkB,CAAA,EAAG,OAAO,QAAQ,2BAA2B,CAAA;AACzE,EAAA,IAAI,CAAC,MAAA,CAAO,SAAA,CAAU,KAAA,CAAM,eAAe,KAAK,MAAA,CAAO,KAAA,CAAM,eAAe,CAAA,GAAI,CAAA,EAAG;AACjF,IAAA,OAAO,QAAQ,gDAAgD,CAAA;AAAA,EACjE;AACA,EAAA,IAAI,CAAC,MAAM,KAAA,CAAM,WAAA,EAAa,EAAE,CAAA,EAAG,OAAO,QAAQ,iCAAiC,CAAA;AACnF,EAAA,IAAI,CAAC,gBAAA,CAAiB,KAAA,CAAM,QAAQ,CAAA,EAAG,OAAO,QAAQ,sBAAsB,CAAA;AAC5E,EAAA,IAAI,CAAC,SAAA,CAAU,KAAA,CAAM,OAAO,CAAA,EAAG,OAAO,QAAQ,kCAAkC,CAAA;AAChF,EAAA,IAAI,CAAC,MAAM,OAAA,CAAQ,KAAA,CAAM,WAAW,CAAA,EAAG,OAAO,QAAQ,8BAA8B,CAAA;AACpF,EAAA,IAAI,CAAC,WAAA,CAAY,KAAA,CAAM,SAAS,CAAA,EAAG,OAAO,QAAQ,uCAAuC,CAAA;AAEzF,EAAA,MAAM,aAAA,uBAAoB,GAAA,EAAY;AACtC,EAAA,KAAA,MAAW,CAAC,KAAA,EAAO,UAAU,KAAK,KAAA,CAAM,WAAA,CAAY,SAAQ,EAAG;AAC7D,IAAA,MAAM,KAAA,GAAQ,kBAAA,CAAmB,UAAA,EAAY,aAAa,CAAA;AAC1D,IAAA,IAAI,OAAO,OAAO,OAAA,CAAQ,eAAe,KAAK,CAAA,GAAA,EAAM,KAAK,CAAA,CAAE,CAAA;AAAA,EAC7D;AAEA,EAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,QAAA,EAAU,KAAA,EAAqC;AACpE;AAEA,SAAS,kBAAA,CAAmB,OAAgB,aAAA,EAA2C;AACrF,EAAA,IAAI,CAAC,QAAA,CAAS,KAAK,CAAA,EAAG,OAAO,mBAAA;AAC7B,EAAA,KAAA,MAAW,GAAA,IAAO,CAAC,IAAA,EAAM,MAAA,EAAQ,MAAM,CAAA,EAAY;AACjD,IAAA,IAAI,CAAC,iBAAiB,KAAA,CAAM,GAAG,CAAC,CAAA,EAAG,OAAO,GAAG,GAAG,CAAA,YAAA,CAAA;AAAA,EAClD;AACA,EAAA,IAAI,aAAA,CAAc,IAAI,KAAA,CAAM,EAAY,GAAG,OAAO,CAAA,wBAAA,EAA2B,MAAM,EAAY,CAAA,CAAA;AAC/F,EAAA,aAAA,CAAc,GAAA,CAAI,MAAM,EAAY,CAAA;AACpC,EAAA,IAAI,MAAM,KAAA,KAAU,SAAA,IAAa,KAAA,CAAM,KAAA,KAAU,UAAU,OAAO,eAAA;AAClE,EAAA,IAAI,CAAC,MAAA,CAAO,KAAA,CAAM,UAAU,GAAG,OAAO,oCAAA;AACtC,EAAA,IAAI,OAAO,KAAA,CAAM,aAAA,KAAkB,SAAA,EAAW,OAAO,+BAAA;AACrD,EAAA,IAAI,CAAC,MAAM,OAAA,CAAQ,KAAA,CAAM,QAAQ,CAAA,IAAK,KAAA,CAAM,QAAA,CAAS,MAAA,GAAS,CAAA,EAAG;AAC/D,IAAA,OAAO,oCAAA;AAAA,EACT;AAEA,EAAA,MAAM,WAAA,uBAAkB,GAAA,EAAY;AACpC,EAAA,IAAI,cAAA,GAAiB,CAAA;AACrB,EAAA,IAAI,gBAAA,GAAmB,CAAA;AACvB,EAAA,KAAA,MAAW,CAAC,KAAA,EAAO,OAAO,KAAK,KAAA,CAAM,QAAA,CAAS,SAAQ,EAAG;AACvD,IAAA,IAAI,CAAC,SAAS,OAAO,CAAA,IAAK,CAAC,gBAAA,CAAiB,OAAA,CAAQ,GAAG,CAAA,EAAG;AACxD,MAAA,OAAO,YAAY,KAAK,CAAA,iBAAA,CAAA;AAAA,IAC1B;AACA,IAAA,IAAI,CAAC,gBAAA,CAAiB,OAAA,CAAQ,IAAI,CAAA,EAAG,OAAO,YAAY,KAAK,CAAA,kBAAA,CAAA;AAC7D,IAAA,IAAI,WAAA,CAAY,IAAI,OAAA,CAAQ,GAAG,GAAG,OAAO,CAAA,sBAAA,EAAyB,QAAQ,GAAG,CAAA,CAAA;AAC7E,IAAA,WAAA,CAAY,GAAA,CAAI,QAAQ,GAAG,CAAA;AAC3B,IAAA,IAAI,OAAA,CAAQ,WAAW,MAAA,EAAW;AAChC,MAAA,IACE,CAAC,MAAA,CAAO,SAAA,CAAU,OAAA,CAAQ,MAAM,CAAA,IAChC,MAAA,CAAO,OAAA,CAAQ,MAAM,IAAI,CAAA,IACzB,MAAA,CAAO,OAAA,CAAQ,MAAM,IAAI,GAAA,EACzB;AACA,QAAA,OAAO,YAAY,KAAK,CAAA,+CAAA,CAAA;AAAA,MAC1B;AACA,MAAA,gBAAA,IAAoB,CAAA;AACpB,MAAA,cAAA,IAAkB,MAAA,CAAO,QAAQ,MAAM,CAAA;AAAA,IACzC;AACA,IAAA,IAAI,QAAQ,gBAAA,KAAqB,MAAA,IAAa,CAAC,MAAA,CAAO,OAAA,CAAQ,gBAAgB,CAAA,EAAG;AAC/E,MAAA,OAAO,YAAY,KAAK,CAAA,0CAAA,CAAA;AAAA,IAC1B;AAAA,EACF;AACA,EAAA,IAAI,gBAAA,GAAmB,CAAA,IAAK,gBAAA,KAAqB,KAAA,CAAM,SAAS,MAAA,EAAQ;AACtE,IAAA,OAAO,4DAAA;AAAA,EACT;AACA,EAAA,IAAI,gBAAA,GAAmB,CAAA,IAAK,cAAA,KAAmB,GAAA,EAAO;AACpD,IAAA,OAAO,mCAAA;AAAA,EACT;AACA,EAAA,KAAA,MAAW,GAAA,IAAO,CAAC,mBAAA,EAAqB,UAAU,CAAA,EAAY;AAC5D,IAAA,IACE,MAAM,GAAG,CAAA,KAAM,MAAA,KACd,CAAC,iBAAiB,KAAA,CAAM,GAAG,CAAC,CAAA,IAAK,CAAC,WAAA,CAAY,GAAA,CAAI,KAAA,CAAM,GAAG,CAAC,CAAA,CAAA,EAC7D;AACA,MAAA,OAAO,GAAG,GAAG,CAAA,mCAAA,CAAA;AAAA,IACf;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,cAAc,KAAA,EAAwB;AAC7C,EAAA,OAAO,IAAA,CAAK,SAAA,CAAU,QAAA,CAAS,KAAK,CAAC,CAAA;AACvC;AAEA,SAAS,SAAS,KAAA,EAAyB;AACzC,EAAA,IAAI,MAAM,OAAA,CAAQ,KAAK,GAAG,OAAO,KAAA,CAAM,IAAI,QAAQ,CAAA;AACnD,EAAA,IAAI,QAAA,CAAS,KAAK,CAAA,EAAG;AACnB,IAAA,MAAM,SAAkC,EAAC;AACzC,IAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,CAAE,IAAA,EAAK,EAAG,MAAA,CAAO,GAAG,CAAA,GAAI,QAAA,CAAS,KAAA,CAAM,GAAG,CAAC,CAAA;AAC9E,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,QAAQ,OAAA,EAAiB;AAChC,EAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAgB,MAAA,EAAQ,kBAA2B,OAAA,EAAQ;AAC1E;AAEA,SAAS,SAAS,KAAA,EAAkD;AAClE,EAAA,OAAO,KAAA,KAAU,QAAQ,OAAO,KAAA,KAAU,YAAY,CAAC,KAAA,CAAM,QAAQ,KAAK,CAAA;AAC5E;AAEA,SAAS,iBAAiB,KAAA,EAAiC;AACzD,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,CAAM,MAAA,GAAS,CAAA;AACrD;AAEA,SAAS,OAAO,KAAA,EAAyB;AACvC,EAAA,OAAO,OAAO,UAAU,QAAA,IAAY,MAAA,CAAO,SAAS,KAAK,CAAA,IAAK,KAAA,IAAS,CAAA,IAAK,KAAA,IAAS,CAAA;AACvF;AAEA,SAAS,KAAA,CAAM,OAAgB,MAAA,EAAiC;AAC9D,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,IAAI,MAAA,CAAO,aAAa,MAAM,CAAA,EAAA,CAAI,CAAA,CAAE,IAAA,CAAK,KAAK,CAAA;AACpF;AAEA,SAAS,UAAU,KAAA,EAAiC;AAClD,EAAA,OAAO,OAAO,UAAU,QAAA,IAAY,MAAA,CAAO,SAAS,IAAA,CAAK,KAAA,CAAM,KAAK,CAAC,CAAA;AACvE;AAEA,SAAS,YAAY,KAAA,EAA4C;AAC/D,EAAA,OACE,SAAS,KAAK,CAAA,IACd,iBAAiB,KAAA,CAAM,KAAK,KAC5B,KAAA,CAAM,GAAA,KAAQ,SAAA,IACd,KAAA,CAAM,MAAM,GAAA,EAAK,GAAG,KACpB,KAAA,CAAM,KAAA,CAAM,YAAY,EAAE,CAAA;AAE9B;;;AChMA,eAAsB,gBAAgB,KAAA,EAAwC;AAC5E,EAAA,MAAM,MAAA,GAAS,MAAM,SAAA,EAAU;AAC/B,EAAA,MAAM,EAAA,GAAM,MAAM,MAAA,CAAO,WAAA,CAAY,EAAE,IAAA,EAAM,SAAA,IAAa,IAAA,EAAM;AAAA,IAC9D,MAAA;AAAA,IACA;AAAA,GACD,CAAA;AACD,EAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAW,MAAM,OAAO,SAAA,CAAU,KAAA,EAAO,EAAA,CAAG,SAAS,CAAC,CAAA;AACzE,EAAA,MAAM,SAAA,GAAY,IAAI,UAAA,CAAW,MAAM,OAAO,SAAA,CAAU,OAAA,EAAS,EAAA,CAAG,UAAU,CAAC,CAAA;AAE/E,EAAA,MAAM,IAAA,GAAO,SAAA,CAAU,KAAA,CAAM,SAAA,CAAU,SAAS,EAAE,CAAA;AAClD,EAAA,OAAO;AAAA,IACL,YAAA,EAAc,UAAU,MAAM,CAAA;AAAA,IAC9B,aAAA,EAAe,UAAU,IAAI,CAAA;AAAA,IAC7B;AAAA,GACF;AACF","file":"index.cjs","sourcesContent":["import type { SignableManifest } from './types.js';\n\n/**\n * Canonical JSON of the signed payload — sorted keys, no whitespace.\n *\n * The payload is intentionally NOT the full manifest. It is the minimum that\n * binds a (manifestVersion, contentHash) pair to a tenant under a schema. See\n * ADR-0002.\n */\nexport function canonicalSignedPayload(m: SignableManifest): string {\n  return JSON.stringify(\n    {\n      contentHash: m.contentHash,\n      manifestVersion: m.manifestVersion,\n      schemaVersion: m.schemaVersion,\n      tenantId: m.tenantId,\n    },\n    null,\n    0,\n  );\n}\n\nexport function canonicalSignedBytes(m: SignableManifest): Uint8Array {\n  return new TextEncoder().encode(canonicalSignedPayload(m));\n}\n","/**\n * Resolve WebCrypto without forcing browser bundlers to resolve Node's built-in\n * crypto module. Modern browsers and supported Node releases use the global\n * implementation; the runtime-only import is a compatibility fallback.\n */\nexport async function getSubtle(): Promise<SubtleCrypto> {\n  if (globalThis.crypto?.subtle) return globalThis.crypto.subtle;\n  const nodeCryptoSpecifier = 'node:crypto';\n  const { webcrypto } = await import(nodeCryptoSpecifier);\n  return webcrypto.subtle as unknown as SubtleCrypto;\n}\n","import { getSubtle } from './subtle.js';\n\nexport async function sha256(data: Uint8Array): Promise<Uint8Array> {\n  const subtle = await getSubtle();\n  const buf = await subtle.digest('SHA-256', data as BufferSource);\n  return new Uint8Array(buf);\n}\n\nexport function hexEncode(bytes: Uint8Array): string {\n  let s = '';\n  for (let i = 0; i < bytes.length; i++) s += bytes[i]!.toString(16).padStart(2, '0');\n  return s;\n}\n","import { canonicalSignedBytes } from './canonical.js';\nimport { hexEncode, sha256 } from './hash.js';\nimport { getSubtle } from './subtle.js';\nimport type { ManifestSignature, SignableManifest } from './types.js';\n\n/** Universal-runtime Ed25519 signer (Node + Edge + browsers via crypto.subtle). */\nexport interface SignKey {\n  /** Raw 32-byte Ed25519 private key as hex. */\n  privateKeyHex: string;\n  /** Identifier for the key — included in the signature for rotation tracking. */\n  keyId: string;\n}\n\nexport async function signManifest(\n  manifest: SignableManifest,\n  key: SignKey,\n): Promise<ManifestSignature> {\n  const subtle = await getSubtle();\n  const payload = canonicalSignedBytes(manifest);\n  const signedHash = await sha256(payload);\n\n  const pkcs8 = ed25519PrivateKeyToPkcs8(hexDecode(key.privateKeyHex));\n  const cryptoKey = await subtle.importKey(\n    'pkcs8',\n    pkcs8 as BufferSource,\n    { name: 'Ed25519' },\n    false,\n    ['sign'],\n  );\n  const sigBuf = await subtle.sign({ name: 'Ed25519' }, cryptoKey, payload as BufferSource);\n  return {\n    keyId: key.keyId,\n    alg: 'ed25519',\n    sig: hexEncode(new Uint8Array(sigBuf)),\n    signedHash: hexEncode(signedHash),\n  };\n}\n\nfunction hexDecode(hex: string): Uint8Array {\n  if (hex.length % 2 !== 0) throw new Error('hexDecode: odd length');\n  const out = new Uint8Array(hex.length / 2);\n  for (let i = 0; i < out.length; i++) out[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);\n  return out;\n}\n\n/** Wrap a raw 32-byte Ed25519 seed into a minimal PKCS#8 envelope (RFC 8410). */\nfunction ed25519PrivateKeyToPkcs8(seed: Uint8Array): Uint8Array {\n  if (seed.length !== 32) throw new Error('ed25519 seed must be 32 bytes');\n  const prefix = new Uint8Array([\n    0x30, 0x2e, 0x02, 0x01, 0x00, 0x30, 0x05, 0x06, 0x03, 0x2b, 0x65, 0x70, 0x04, 0x22, 0x04, 0x20,\n  ]);\n  const out = new Uint8Array(prefix.length + 32);\n  out.set(prefix, 0);\n  out.set(seed, prefix.length);\n  return out;\n}\n","import { canonicalSignedBytes } from './canonical.js';\nimport { hexEncode, sha256 } from './hash.js';\nimport { getSubtle } from './subtle.js';\nimport type { ManifestSignature, SignableManifest } from './types.js';\n\nexport interface VerifyOptions {\n  /** Hex-encoded raw 32-byte Ed25519 public key. */\n  publicKeyHex: string;\n  /** Required keyId — caller pins this at SDK init time. */\n  expectedKeyId: string;\n}\n\nexport type VerifyResult =\n  | { ok: true }\n  | { ok: false; reason: 'keyId-mismatch' | 'signedHash-mismatch' | 'sig-invalid' };\n\nexport async function verifyManifest(\n  manifest: SignableManifest & { signature: ManifestSignature },\n  options: VerifyOptions,\n): Promise<VerifyResult> {\n  if (manifest.signature.keyId !== options.expectedKeyId) {\n    return { ok: false, reason: 'keyId-mismatch' };\n  }\n  const payload = canonicalSignedBytes(manifest);\n  const expectedHash = hexEncode(await sha256(payload));\n  if (expectedHash !== manifest.signature.signedHash) {\n    return { ok: false, reason: 'signedHash-mismatch' };\n  }\n\n  const subtle = await getSubtle();\n  const pubKey = await subtle.importKey(\n    'raw',\n    hexDecode(options.publicKeyHex) as BufferSource,\n    { name: 'Ed25519' },\n    false,\n    ['verify'],\n  );\n  const valid = await subtle.verify(\n    { name: 'Ed25519' },\n    pubKey,\n    hexDecode(manifest.signature.sig) as BufferSource,\n    payload as BufferSource,\n  );\n  return valid ? { ok: true } : { ok: false, reason: 'sig-invalid' };\n}\n\nfunction hexDecode(hex: string): Uint8Array {\n  if (hex.length % 2 !== 0) throw new Error('hexDecode: odd length');\n  const out = new Uint8Array(hex.length / 2);\n  for (let i = 0; i < out.length; i++) out[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);\n  return out;\n}\n","import { canonicalSignedBytes } from './canonical.js';\nimport { hexEncode, sha256 } from './hash.js';\nimport { getSubtle } from './subtle.js';\nimport type { ManifestSignature, SignableManifest } from './types.js';\n\n/**\n * JWKS-style key set for a single org. Each entry is an Ed25519 public key\n * with a kid that matches a `manifest_keys.key_id` in the control plane.\n */\nexport interface JwksEntry {\n  kid: string;\n  kty: 'OKP';\n  crv: 'Ed25519';\n  /** Base64url-encoded raw 32-byte public key. */\n  x: string;\n  alg: 'EdDSA';\n  use: 'sig';\n  /** Lifecycle status — extension on top of the JWKS standard. */\n  status: 'active' | 'retiring' | 'retired';\n}\n\nexport interface Jwks {\n  keys: JwksEntry[];\n}\n\nexport function jwksFromKeys(\n  keys: readonly {\n    keyId: string;\n    publicKeyHex: string;\n    status: 'active' | 'retiring' | 'retired';\n  }[],\n): Jwks {\n  return {\n    keys: keys.map((k) => ({\n      kid: k.keyId,\n      kty: 'OKP',\n      crv: 'Ed25519',\n      x: hexToBase64Url(k.publicKeyHex),\n      alg: 'EdDSA',\n      use: 'sig',\n      status: k.status,\n    })),\n  };\n}\n\nexport interface VerifyAgainstJwksOptions {\n  jwks: Jwks;\n  /** Optional pinning. If set, rejects keys whose kid is not in this list. */\n  expectedKeyIds?: string[];\n  /** Reject manifests older than this many milliseconds (replay window). */\n  maxAgeMs?: number;\n  /** Override clock for tests. */\n  now?: () => Date;\n}\n\nexport type JwksVerifyResult =\n  | { ok: true }\n  | {\n      ok: false;\n      reason:\n        | 'unknown-key'\n        | 'retired-key'\n        | 'pinned-key-mismatch'\n        | 'signedHash-mismatch'\n        | 'sig-invalid'\n        | 'replay-window';\n    };\n\n/**\n * Verify a signed manifest against a JWKS document. Replaces ADR-0002's\n * single-key verifier when SDKs run in M3+ hosted mode.\n */\nexport async function verifyAgainstJwks(\n  manifest: SignableManifest & { signature: ManifestSignature; builtAt?: string },\n  options: VerifyAgainstJwksOptions,\n): Promise<JwksVerifyResult> {\n  const sig = manifest.signature;\n  if (options.expectedKeyIds && !options.expectedKeyIds.includes(sig.keyId)) {\n    return { ok: false, reason: 'pinned-key-mismatch' };\n  }\n  const entry = options.jwks.keys.find((k) => k.kid === sig.keyId);\n  if (!entry) return { ok: false, reason: 'unknown-key' };\n  if (entry.status === 'retired') return { ok: false, reason: 'retired-key' };\n\n  if (options.maxAgeMs && manifest.builtAt) {\n    const age =\n      (options.now ?? (() => new Date()))().getTime() - new Date(manifest.builtAt).getTime();\n    if (age > options.maxAgeMs) return { ok: false, reason: 'replay-window' };\n  }\n\n  const payload = canonicalSignedBytes(manifest);\n  const expectedHash = hexEncode(await sha256(payload));\n  if (expectedHash !== sig.signedHash) return { ok: false, reason: 'signedHash-mismatch' };\n\n  const subtle = await getSubtle();\n  const pubKey = await subtle.importKey(\n    'raw',\n    base64UrlToBytes(entry.x) as BufferSource,\n    { name: 'Ed25519' },\n    false,\n    ['verify'],\n  );\n  const valid = await subtle.verify(\n    { name: 'Ed25519' },\n    pubKey,\n    hexToBytes(sig.sig) as BufferSource,\n    payload as BufferSource,\n  );\n  return valid ? { ok: true } : { ok: false, reason: 'sig-invalid' };\n}\n\nfunction hexToBytes(hex: string): Uint8Array {\n  const out = new Uint8Array(hex.length / 2);\n  for (let i = 0; i < out.length; i++) out[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);\n  return out;\n}\n\nfunction hexToBase64Url(hex: string): string {\n  return bytesToBase64Url(hexToBytes(hex));\n}\n\nfunction bytesToBase64Url(bytes: Uint8Array): string {\n  let s = '';\n  for (let i = 0; i < bytes.length; i++) s += String.fromCharCode(bytes[i]!);\n  return btoa(s).replace(/=+$/g, '').replace(/\\+/g, '-').replace(/\\//g, '_');\n}\n\nfunction base64UrlToBytes(s: string): Uint8Array {\n  const pad = '='.repeat((4 - (s.length % 4)) % 4);\n  const b64 = (s + pad).replace(/-/g, '+').replace(/_/g, '/');\n  const binary = atob(b64);\n  const out = new Uint8Array(binary.length);\n  for (let i = 0; i < binary.length; i++) out[i] = binary.charCodeAt(i);\n  return out;\n}\n","import { hexEncode, sha256 } from './hash.js';\nimport { type Jwks, type JwksVerifyResult, verifyAgainstJwks } from './jwks.js';\nimport type { ManifestSignature, SignableManifest } from './types.js';\n\nexport interface DeliveryManifest extends SignableManifest {\n  builtAt: string;\n  experiments: Array<Record<string, unknown>>;\n  signature: ManifestSignature;\n}\n\nexport interface VerifyManifestDeliveryOptions {\n  jwks: Jwks;\n  expectedKeyIds?: string[];\n  revokedVersions?: readonly number[];\n  maxAgeMs?: number;\n  now?: () => Date;\n}\n\ntype JwksFailureReason = Extract<JwksVerifyResult, { ok: false }>['reason'];\n\nexport type ManifestDeliveryFailure =\n  | 'schema-invalid'\n  | 'content-hash-mismatch'\n  | 'manifest-revoked'\n  | JwksFailureReason;\n\nexport type ManifestDeliveryResult =\n  | { ok: true; manifest: DeliveryManifest }\n  | { ok: false; reason: ManifestDeliveryFailure; details?: string };\n\n/**\n * Validate and authenticate an untrusted manifest response before an SDK uses it.\n * This function is WebCrypto-only and is shared by browser, edge, and Node SDKs.\n */\nexport async function verifyManifestDelivery(\n  input: unknown,\n  options: VerifyManifestDeliveryOptions,\n): Promise<ManifestDeliveryResult> {\n  const parsed = parseDeliveryManifest(input);\n  if (!parsed.ok) return parsed;\n  if (options.revokedVersions?.includes(parsed.manifest.manifestVersion)) {\n    return { ok: false, reason: 'manifest-revoked' };\n  }\n\n  const payload = {\n    schemaVersion: parsed.manifest.schemaVersion,\n    manifestVersion: parsed.manifest.manifestVersion,\n    tenantId: parsed.manifest.tenantId,\n    experiments: parsed.manifest.experiments,\n  };\n  const actualHash = hexEncode(await sha256(new TextEncoder().encode(canonicalJson(payload))));\n  if (actualHash !== parsed.manifest.contentHash) {\n    return { ok: false, reason: 'content-hash-mismatch' };\n  }\n\n  try {\n    const signature = await verifyAgainstJwks(parsed.manifest, options);\n    return signature.ok ? { ok: true, manifest: parsed.manifest } : signature;\n  } catch (error) {\n    return {\n      ok: false,\n      reason: 'schema-invalid',\n      details: error instanceof Error ? error.message : String(error),\n    };\n  }\n}\n\nexport function parseManifestRevocations(input: unknown): number[] {\n  if (!isRecord(input) || !Array.isArray(input.versions)) {\n    throw new Error('manifest revocations must contain a versions array');\n  }\n  const versions = input.versions;\n  if (!versions.every((version) => Number.isInteger(version) && Number(version) >= 0)) {\n    throw new Error('manifest revocation versions must be non-negative integers');\n  }\n  return [...new Set(versions as number[])];\n}\n\nfunction parseDeliveryManifest(\n  input: unknown,\n):\n  | { ok: true; manifest: DeliveryManifest }\n  | { ok: false; reason: 'schema-invalid'; details: string } {\n  if (!isRecord(input)) return invalid('manifest must be an object');\n  if (input.schemaVersion !== 1) return invalid('unsupported schemaVersion');\n  if (!Number.isInteger(input.manifestVersion) || Number(input.manifestVersion) < 0) {\n    return invalid('manifestVersion must be a non-negative integer');\n  }\n  if (!isHex(input.contentHash, 64)) return invalid('contentHash must be SHA-256 hex');\n  if (!isNonEmptyString(input.tenantId)) return invalid('tenantId is required');\n  if (!isIsoDate(input.builtAt)) return invalid('builtAt must be an ISO timestamp');\n  if (!Array.isArray(input.experiments)) return invalid('experiments must be an array');\n  if (!isSignature(input.signature)) return invalid('a valid Ed25519 signature is required');\n\n  const experimentIds = new Set<string>();\n  for (const [index, experiment] of input.experiments.entries()) {\n    const issue = validateExperiment(experiment, experimentIds);\n    if (issue) return invalid(`experiments[${index}]: ${issue}`);\n  }\n\n  return { ok: true, manifest: input as unknown as DeliveryManifest };\n}\n\nfunction validateExperiment(value: unknown, experimentIds: Set<string>): string | null {\n  if (!isRecord(value)) return 'must be an object';\n  for (const key of ['id', 'name', 'salt'] as const) {\n    if (!isNonEmptyString(value[key])) return `${key} is required`;\n  }\n  if (experimentIds.has(value.id as string)) return `duplicate experiment id ${value.id as string}`;\n  experimentIds.add(value.id as string);\n  if (value.state !== 'running' && value.state !== 'paused') return 'invalid state';\n  if (!isRate(value.sampleRate)) return 'sampleRate must be between 0 and 1';\n  if (typeof value.applyVariants !== 'boolean') return 'applyVariants must be boolean';\n  if (!Array.isArray(value.variants) || value.variants.length < 2) {\n    return 'at least two variants are required';\n  }\n\n  const variantKeys = new Set<string>();\n  let declaredWeight = 0;\n  let weightedVariants = 0;\n  for (const [index, variant] of value.variants.entries()) {\n    if (!isRecord(variant) || !isNonEmptyString(variant.key)) {\n      return `variants[${index}].key is required`;\n    }\n    if (!isNonEmptyString(variant.name)) return `variants[${index}].name is required`;\n    if (variantKeys.has(variant.key)) return `duplicate variant key ${variant.key}`;\n    variantKeys.add(variant.key);\n    if (variant.weight !== undefined) {\n      if (\n        !Number.isInteger(variant.weight) ||\n        Number(variant.weight) < 0 ||\n        Number(variant.weight) > 10000\n      ) {\n        return `variants[${index}].weight must be an integer between 0 and 10000`;\n      }\n      weightedVariants += 1;\n      declaredWeight += Number(variant.weight);\n    }\n    if (variant.recipeSampleRate !== undefined && !isRate(variant.recipeSampleRate)) {\n      return `variants[${index}].recipeSampleRate must be between 0 and 1`;\n    }\n  }\n  if (weightedVariants > 0 && weightedVariants !== value.variants.length) {\n    return 'variant weights must be declared for every variant or none';\n  }\n  if (weightedVariants > 0 && declaredWeight !== 10000) {\n    return 'variant weights must sum to 10000';\n  }\n  for (const key of ['defaultVariantKey', 'divertTo'] as const) {\n    if (\n      value[key] !== undefined &&\n      (!isNonEmptyString(value[key]) || !variantKeys.has(value[key]))\n    ) {\n      return `${key} must reference an existing variant`;\n    }\n  }\n  return null;\n}\n\nfunction canonicalJson(value: unknown): string {\n  return JSON.stringify(sortDeep(value));\n}\n\nfunction sortDeep(value: unknown): unknown {\n  if (Array.isArray(value)) return value.map(sortDeep);\n  if (isRecord(value)) {\n    const sorted: Record<string, unknown> = {};\n    for (const key of Object.keys(value).sort()) sorted[key] = sortDeep(value[key]);\n    return sorted;\n  }\n  return value;\n}\n\nfunction invalid(details: string) {\n  return { ok: false as const, reason: 'schema-invalid' as const, details };\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === 'object' && !Array.isArray(value);\n}\n\nfunction isNonEmptyString(value: unknown): value is string {\n  return typeof value === 'string' && value.length > 0;\n}\n\nfunction isRate(value: unknown): boolean {\n  return typeof value === 'number' && Number.isFinite(value) && value >= 0 && value <= 1;\n}\n\nfunction isHex(value: unknown, length: number): value is string {\n  return typeof value === 'string' && new RegExp(`^[0-9a-f]{${length}}$`).test(value);\n}\n\nfunction isIsoDate(value: unknown): value is string {\n  return typeof value === 'string' && Number.isFinite(Date.parse(value));\n}\n\nfunction isSignature(value: unknown): value is ManifestSignature {\n  return (\n    isRecord(value) &&\n    isNonEmptyString(value.keyId) &&\n    value.alg === 'ed25519' &&\n    isHex(value.sig, 128) &&\n    isHex(value.signedHash, 64)\n  );\n}\n","/**\n * Ed25519 keypair generation for `fx dev` and tests. Production keys are\n * generated offline and stored in a secrets manager.\n */\nimport { hexEncode } from './hash.js';\nimport { getSubtle } from './subtle.js';\n\nexport interface Ed25519Keypair {\n  publicKeyHex: string;\n  privateKeyHex: string;\n  keyId: string;\n}\n\nexport async function generateKeypair(keyId: string): Promise<Ed25519Keypair> {\n  const subtle = await getSubtle();\n  const kp = (await subtle.generateKey({ name: 'Ed25519' }, true, [\n    'sign',\n    'verify',\n  ])) as CryptoKeyPair;\n  const rawPub = new Uint8Array(await subtle.exportKey('raw', kp.publicKey));\n  const pkcs8Priv = new Uint8Array(await subtle.exportKey('pkcs8', kp.privateKey));\n  // PKCS#8 ed25519 = 16-byte prefix + 32-byte seed. Strip the prefix.\n  const seed = pkcs8Priv.slice(pkcs8Priv.length - 32);\n  return {\n    publicKeyHex: hexEncode(rawPub),\n    privateKeyHex: hexEncode(seed),\n    keyId,\n  };\n}\n"]}

package/dist/index.d.cts

@@ -58,13 +58,6 @@ declare function verifyManifest(manifest: SignableManifest & {
     signature: ManifestSignature;
 }, options: VerifyOptions): Promise<VerifyResult>;
 
-interface Ed25519Keypair {
-    publicKeyHex: string;
-    privateKeyHex: string;
-    keyId: string;
-}
-declare function generateKeypair(keyId: string): Promise<Ed25519Keypair>;
-
 /**
  * JWKS-style key set for a single org. Each entry is an Ed25519 public key
  * with a kid that matches a `manifest_keys.key_id` in the control plane.
@@ -112,4 +105,42 @@ declare function verifyAgainstJwks(manifest: SignableManifest & {
     builtAt?: string;
 }, options: VerifyAgainstJwksOptions): Promise<JwksVerifyResult>;
 
-export { type Ed25519Keypair, type Jwks, type JwksEntry, type JwksVerifyResult, type ManifestSignature, type SignKey, type SignableManifest, type SignedManifest, type VerifyAgainstJwksOptions, type VerifyOptions, type VerifyResult, canonicalSignedBytes, canonicalSignedPayload, generateKeypair, jwksFromKeys, signManifest, verifyAgainstJwks, verifyManifest };
+interface DeliveryManifest extends SignableManifest {
+    builtAt: string;
+    experiments: Array<Record<string, unknown>>;
+    signature: ManifestSignature;
+}
+interface VerifyManifestDeliveryOptions {
+    jwks: Jwks;
+    expectedKeyIds?: string[];
+    revokedVersions?: readonly number[];
+    maxAgeMs?: number;
+    now?: () => Date;
+}
+type JwksFailureReason = Extract<JwksVerifyResult, {
+    ok: false;
+}>['reason'];
+type ManifestDeliveryFailure = 'schema-invalid' | 'content-hash-mismatch' | 'manifest-revoked' | JwksFailureReason;
+type ManifestDeliveryResult = {
+    ok: true;
+    manifest: DeliveryManifest;
+} | {
+    ok: false;
+    reason: ManifestDeliveryFailure;
+    details?: string;
+};
+/**
+ * Validate and authenticate an untrusted manifest response before an SDK uses it.
+ * This function is WebCrypto-only and is shared by browser, edge, and Node SDKs.
+ */
+declare function verifyManifestDelivery(input: unknown, options: VerifyManifestDeliveryOptions): Promise<ManifestDeliveryResult>;
+declare function parseManifestRevocations(input: unknown): number[];
+
+interface Ed25519Keypair {
+    publicKeyHex: string;
+    privateKeyHex: string;
+    keyId: string;
+}
+declare function generateKeypair(keyId: string): Promise<Ed25519Keypair>;
+
+export { type DeliveryManifest, type Ed25519Keypair, type Jwks, type JwksEntry, type JwksVerifyResult, type ManifestDeliveryFailure, type ManifestDeliveryResult, type ManifestSignature, type SignKey, type SignableManifest, type SignedManifest, type VerifyAgainstJwksOptions, type VerifyManifestDeliveryOptions, type VerifyOptions, type VerifyResult, canonicalSignedBytes, canonicalSignedPayload, generateKeypair, jwksFromKeys, parseManifestRevocations, signManifest, verifyAgainstJwks, verifyManifest, verifyManifestDelivery };

package/dist/index.d.ts

@@ -58,13 +58,6 @@ declare function verifyManifest(manifest: SignableManifest & {
     signature: ManifestSignature;
 }, options: VerifyOptions): Promise<VerifyResult>;
 
-interface Ed25519Keypair {
-    publicKeyHex: string;
-    privateKeyHex: string;
-    keyId: string;
-}
-declare function generateKeypair(keyId: string): Promise<Ed25519Keypair>;
-
 /**
  * JWKS-style key set for a single org. Each entry is an Ed25519 public key
  * with a kid that matches a `manifest_keys.key_id` in the control plane.
@@ -112,4 +105,42 @@ declare function verifyAgainstJwks(manifest: SignableManifest & {
     builtAt?: string;
 }, options: VerifyAgainstJwksOptions): Promise<JwksVerifyResult>;
 
-export { type Ed25519Keypair, type Jwks, type JwksEntry, type JwksVerifyResult, type ManifestSignature, type SignKey, type SignableManifest, type SignedManifest, type VerifyAgainstJwksOptions, type VerifyOptions, type VerifyResult, canonicalSignedBytes, canonicalSignedPayload, generateKeypair, jwksFromKeys, signManifest, verifyAgainstJwks, verifyManifest };
+interface DeliveryManifest extends SignableManifest {
+    builtAt: string;
+    experiments: Array<Record<string, unknown>>;
+    signature: ManifestSignature;
+}
+interface VerifyManifestDeliveryOptions {
+    jwks: Jwks;
+    expectedKeyIds?: string[];
+    revokedVersions?: readonly number[];
+    maxAgeMs?: number;
+    now?: () => Date;
+}
+type JwksFailureReason = Extract<JwksVerifyResult, {
+    ok: false;
+}>['reason'];
+type ManifestDeliveryFailure = 'schema-invalid' | 'content-hash-mismatch' | 'manifest-revoked' | JwksFailureReason;
+type ManifestDeliveryResult = {
+    ok: true;
+    manifest: DeliveryManifest;
+} | {
+    ok: false;
+    reason: ManifestDeliveryFailure;
+    details?: string;
+};
+/**
+ * Validate and authenticate an untrusted manifest response before an SDK uses it.
+ * This function is WebCrypto-only and is shared by browser, edge, and Node SDKs.
+ */
+declare function verifyManifestDelivery(input: unknown, options: VerifyManifestDeliveryOptions): Promise<ManifestDeliveryResult>;
+declare function parseManifestRevocations(input: unknown): number[];
+
+interface Ed25519Keypair {
+    publicKeyHex: string;
+    privateKeyHex: string;
+    keyId: string;
+}
+declare function generateKeypair(keyId: string): Promise<Ed25519Keypair>;
+
+export { type DeliveryManifest, type Ed25519Keypair, type Jwks, type JwksEntry, type JwksVerifyResult, type ManifestDeliveryFailure, type ManifestDeliveryResult, type ManifestSignature, type SignKey, type SignableManifest, type SignedManifest, type VerifyAgainstJwksOptions, type VerifyManifestDeliveryOptions, type VerifyOptions, type VerifyResult, canonicalSignedBytes, canonicalSignedPayload, generateKeypair, jwksFromKeys, parseManifestRevocations, signManifest, verifyAgainstJwks, verifyManifest, verifyManifestDelivery };

package/dist/index.js

@@ -15,6 +15,14 @@ function canonicalSignedBytes(m) {
   return new TextEncoder().encode(canonicalSignedPayload(m));
 }
 
+// src/subtle.ts
+async function getSubtle() {
+  if (globalThis.crypto?.subtle) return globalThis.crypto.subtle;
+  const nodeCryptoSpecifier = "node:crypto";
+  const { webcrypto } = await import(nodeCryptoSpecifier);
+  return webcrypto.subtle;
+}
+
 // src/hash.ts
 async function sha256(data) {
   const subtle = await getSubtle();
@@ -26,15 +34,10 @@ function hexEncode(bytes) {
   for (let i = 0; i < bytes.length; i++) s += bytes[i].toString(16).padStart(2, "0");
   return s;
 }
-async function getSubtle() {
-  if (typeof crypto !== "undefined" && crypto.subtle) return crypto.subtle;
-  const { webcrypto } = await import('crypto');
-  return webcrypto.subtle;
-}
 
 // src/sign.ts
 async function signManifest(manifest, key) {
-  const subtle = await getSubtle2();
+  const subtle = await getSubtle();
   const payload = canonicalSignedBytes(manifest);
   const signedHash = await sha256(payload);
   const pkcs8 = ed25519PrivateKeyToPkcs8(hexDecode(key.privateKeyHex));
@@ -53,11 +56,6 @@ async function signManifest(manifest, key) {
     signedHash: hexEncode(signedHash)
   };
 }
-async function getSubtle2() {
-  if (typeof crypto !== "undefined" && crypto.subtle) return crypto.subtle;
-  const { webcrypto } = await import('crypto');
-  return webcrypto.subtle;
-}
 function hexDecode(hex) {
   if (hex.length % 2 !== 0) throw new Error("hexDecode: odd length");
   const out = new Uint8Array(hex.length / 2);
@@ -100,7 +98,7 @@ async function verifyManifest(manifest, options) {
   if (expectedHash !== manifest.signature.signedHash) {
     return { ok: false, reason: "signedHash-mismatch" };
   }
-  const subtle = await getSubtle3();
+  const subtle = await getSubtle();
   const pubKey = await subtle.importKey(
     "raw",
     hexDecode2(options.publicKeyHex),
@@ -116,11 +114,6 @@ async function verifyManifest(manifest, options) {
   );
   return valid ? { ok: true } : { ok: false, reason: "sig-invalid" };
 }
-async function getSubtle3() {
-  if (typeof crypto !== "undefined" && crypto.subtle) return crypto.subtle;
-  const { webcrypto } = await import('crypto');
-  return webcrypto.subtle;
-}
 function hexDecode2(hex) {
   if (hex.length % 2 !== 0) throw new Error("hexDecode: odd length");
   const out = new Uint8Array(hex.length / 2);
@@ -128,28 +121,6 @@ function hexDecode2(hex) {
   return out;
 }
 
-// src/keypair.ts
-async function generateKeypair(keyId) {
-  const subtle = await getSubtle4();
-  const kp = await subtle.generateKey({ name: "Ed25519" }, true, [
-    "sign",
-    "verify"
-  ]);
-  const rawPub = new Uint8Array(await subtle.exportKey("raw", kp.publicKey));
-  const pkcs8Priv = new Uint8Array(await subtle.exportKey("pkcs8", kp.privateKey));
-  const seed = pkcs8Priv.slice(pkcs8Priv.length - 32);
-  return {
-    publicKeyHex: hexEncode(rawPub),
-    privateKeyHex: hexEncode(seed),
-    keyId
-  };
-}
-async function getSubtle4() {
-  if (typeof crypto !== "undefined" && crypto.subtle) return crypto.subtle;
-  const { webcrypto } = await import('crypto');
-  return webcrypto.subtle;
-}
-
 // src/jwks.ts
 function jwksFromKeys(keys) {
   return {
@@ -179,7 +150,7 @@ async function verifyAgainstJwks(manifest, options) {
   const payload = canonicalSignedBytes(manifest);
   const expectedHash = hexEncode(await sha256(payload));
   if (expectedHash !== sig.signedHash) return { ok: false, reason: "signedHash-mismatch" };
-  const subtle = await getSubtle5();
+  const subtle = await getSubtle();
   const pubKey = await subtle.importKey(
     "raw",
     base64UrlToBytes(entry.x),
@@ -195,11 +166,6 @@ async function verifyAgainstJwks(manifest, options) {
   );
   return valid ? { ok: true } : { ok: false, reason: "sig-invalid" };
 }
-async function getSubtle5() {
-  if (typeof crypto !== "undefined" && crypto.subtle) return crypto.subtle;
-  const { webcrypto } = await import('crypto');
-  return webcrypto.subtle;
-}
 function hexToBytes(hex) {
   const out = new Uint8Array(hex.length / 2);
   for (let i = 0; i < out.length; i++) out[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);
@@ -222,6 +188,160 @@ function base64UrlToBytes(s) {
   return out;
 }
 
-export { canonicalSignedBytes, canonicalSignedPayload, generateKeypair, jwksFromKeys, signManifest, verifyAgainstJwks, verifyManifest };
+// src/delivery.ts
+async function verifyManifestDelivery(input, options) {
+  const parsed = parseDeliveryManifest(input);
+  if (!parsed.ok) return parsed;
+  if (options.revokedVersions?.includes(parsed.manifest.manifestVersion)) {
+    return { ok: false, reason: "manifest-revoked" };
+  }
+  const payload = {
+    schemaVersion: parsed.manifest.schemaVersion,
+    manifestVersion: parsed.manifest.manifestVersion,
+    tenantId: parsed.manifest.tenantId,
+    experiments: parsed.manifest.experiments
+  };
+  const actualHash = hexEncode(await sha256(new TextEncoder().encode(canonicalJson(payload))));
+  if (actualHash !== parsed.manifest.contentHash) {
+    return { ok: false, reason: "content-hash-mismatch" };
+  }
+  try {
+    const signature = await verifyAgainstJwks(parsed.manifest, options);
+    return signature.ok ? { ok: true, manifest: parsed.manifest } : signature;
+  } catch (error) {
+    return {
+      ok: false,
+      reason: "schema-invalid",
+      details: error instanceof Error ? error.message : String(error)
+    };
+  }
+}
+function parseManifestRevocations(input) {
+  if (!isRecord(input) || !Array.isArray(input.versions)) {
+    throw new Error("manifest revocations must contain a versions array");
+  }
+  const versions = input.versions;
+  if (!versions.every((version) => Number.isInteger(version) && Number(version) >= 0)) {
+    throw new Error("manifest revocation versions must be non-negative integers");
+  }
+  return [...new Set(versions)];
+}
+function parseDeliveryManifest(input) {
+  if (!isRecord(input)) return invalid("manifest must be an object");
+  if (input.schemaVersion !== 1) return invalid("unsupported schemaVersion");
+  if (!Number.isInteger(input.manifestVersion) || Number(input.manifestVersion) < 0) {
+    return invalid("manifestVersion must be a non-negative integer");
+  }
+  if (!isHex(input.contentHash, 64)) return invalid("contentHash must be SHA-256 hex");
+  if (!isNonEmptyString(input.tenantId)) return invalid("tenantId is required");
+  if (!isIsoDate(input.builtAt)) return invalid("builtAt must be an ISO timestamp");
+  if (!Array.isArray(input.experiments)) return invalid("experiments must be an array");
+  if (!isSignature(input.signature)) return invalid("a valid Ed25519 signature is required");
+  const experimentIds = /* @__PURE__ */ new Set();
+  for (const [index, experiment] of input.experiments.entries()) {
+    const issue = validateExperiment(experiment, experimentIds);
+    if (issue) return invalid(`experiments[${index}]: ${issue}`);
+  }
+  return { ok: true, manifest: input };
+}
+function validateExperiment(value, experimentIds) {
+  if (!isRecord(value)) return "must be an object";
+  for (const key of ["id", "name", "salt"]) {
+    if (!isNonEmptyString(value[key])) return `${key} is required`;
+  }
+  if (experimentIds.has(value.id)) return `duplicate experiment id ${value.id}`;
+  experimentIds.add(value.id);
+  if (value.state !== "running" && value.state !== "paused") return "invalid state";
+  if (!isRate(value.sampleRate)) return "sampleRate must be between 0 and 1";
+  if (typeof value.applyVariants !== "boolean") return "applyVariants must be boolean";
+  if (!Array.isArray(value.variants) || value.variants.length < 2) {
+    return "at least two variants are required";
+  }
+  const variantKeys = /* @__PURE__ */ new Set();
+  let declaredWeight = 0;
+  let weightedVariants = 0;
+  for (const [index, variant] of value.variants.entries()) {
+    if (!isRecord(variant) || !isNonEmptyString(variant.key)) {
+      return `variants[${index}].key is required`;
+    }
+    if (!isNonEmptyString(variant.name)) return `variants[${index}].name is required`;
+    if (variantKeys.has(variant.key)) return `duplicate variant key ${variant.key}`;
+    variantKeys.add(variant.key);
+    if (variant.weight !== void 0) {
+      if (!Number.isInteger(variant.weight) || Number(variant.weight) < 0 || Number(variant.weight) > 1e4) {
+        return `variants[${index}].weight must be an integer between 0 and 10000`;
+      }
+      weightedVariants += 1;
+      declaredWeight += Number(variant.weight);
+    }
+    if (variant.recipeSampleRate !== void 0 && !isRate(variant.recipeSampleRate)) {
+      return `variants[${index}].recipeSampleRate must be between 0 and 1`;
+    }
+  }
+  if (weightedVariants > 0 && weightedVariants !== value.variants.length) {
+    return "variant weights must be declared for every variant or none";
+  }
+  if (weightedVariants > 0 && declaredWeight !== 1e4) {
+    return "variant weights must sum to 10000";
+  }
+  for (const key of ["defaultVariantKey", "divertTo"]) {
+    if (value[key] !== void 0 && (!isNonEmptyString(value[key]) || !variantKeys.has(value[key]))) {
+      return `${key} must reference an existing variant`;
+    }
+  }
+  return null;
+}
+function canonicalJson(value) {
+  return JSON.stringify(sortDeep(value));
+}
+function sortDeep(value) {
+  if (Array.isArray(value)) return value.map(sortDeep);
+  if (isRecord(value)) {
+    const sorted = {};
+    for (const key of Object.keys(value).sort()) sorted[key] = sortDeep(value[key]);
+    return sorted;
+  }
+  return value;
+}
+function invalid(details) {
+  return { ok: false, reason: "schema-invalid", details };
+}
+function isRecord(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function isNonEmptyString(value) {
+  return typeof value === "string" && value.length > 0;
+}
+function isRate(value) {
+  return typeof value === "number" && Number.isFinite(value) && value >= 0 && value <= 1;
+}
+function isHex(value, length) {
+  return typeof value === "string" && new RegExp(`^[0-9a-f]{${length}}$`).test(value);
+}
+function isIsoDate(value) {
+  return typeof value === "string" && Number.isFinite(Date.parse(value));
+}
+function isSignature(value) {
+  return isRecord(value) && isNonEmptyString(value.keyId) && value.alg === "ed25519" && isHex(value.sig, 128) && isHex(value.signedHash, 64);
+}
+
+// src/keypair.ts
+async function generateKeypair(keyId) {
+  const subtle = await getSubtle();
+  const kp = await subtle.generateKey({ name: "Ed25519" }, true, [
+    "sign",
+    "verify"
+  ]);
+  const rawPub = new Uint8Array(await subtle.exportKey("raw", kp.publicKey));
+  const pkcs8Priv = new Uint8Array(await subtle.exportKey("pkcs8", kp.privateKey));
+  const seed = pkcs8Priv.slice(pkcs8Priv.length - 32);
+  return {
+    publicKeyHex: hexEncode(rawPub),
+    privateKeyHex: hexEncode(seed),
+    keyId
+  };
+}
+
+export { canonicalSignedBytes, canonicalSignedPayload, generateKeypair, jwksFromKeys, parseManifestRevocations, signManifest, verifyAgainstJwks, verifyManifest, verifyManifestDelivery };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/canonical.ts","../src/hash.ts","../src/sign.ts","../src/verify.ts","../src/keypair.ts","../src/jwks.ts"],"names":["getSubtle","hexDecode"],"mappings":";AASO,SAAS,uBAAuB,CAAA,EAA6B;AAClE,EAAA,OAAO,IAAA,CAAK,SAAA;AAAA,IACV;AAAA,MACE,aAAa,CAAA,CAAE,WAAA;AAAA,MACf,iBAAiB,CAAA,CAAE,eAAA;AAAA,MACnB,eAAe,CAAA,CAAE,aAAA;AAAA,MACjB,UAAU,CAAA,CAAE;AAAA,KACd;AAAA,IACA,IAAA;AAAA,IACA;AAAA,GACF;AACF;AAEO,SAAS,qBAAqB,CAAA,EAAiC;AACpE,EAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,sBAAA,CAAuB,CAAC,CAAC,CAAA;AAC3D;;;ACxBA,eAAsB,OAAO,IAAA,EAAuC;AAClE,EAAA,MAAM,MAAA,GAAS,MAAM,SAAA,EAAU;AAC/B,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,MAAA,CAAO,WAAW,IAAoB,CAAA;AAC/D,EAAA,OAAO,IAAI,WAAW,GAAG,CAAA;AAC3B;AAEO,SAAS,UAAU,KAAA,EAA2B;AACnD,EAAA,IAAI,CAAA,GAAI,EAAA;AACR,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,QAAQ,CAAA,EAAA,EAAK,CAAA,IAAK,KAAA,CAAM,CAAC,EAAG,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAClF,EAAA,OAAO,CAAA;AACT;AAEA,eAAe,SAAA,GAAmC;AAChD,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,MAAA,CAAO,MAAA,SAAe,MAAA,CAAO,MAAA;AAClE,EAAA,MAAM,EAAE,SAAA,EAAU,GAAI,MAAM,OAAO,QAAa,CAAA;AAChD,EAAA,OAAO,SAAA,CAAU,MAAA;AACnB;;;ACJA,eAAsB,YAAA,CACpB,UACA,GAAA,EAC4B;AAC5B,EAAA,MAAM,MAAA,GAAS,MAAMA,UAAAA,EAAU;AAC/B,EAAA,MAAM,OAAA,GAAU,qBAAqB,QAAQ,CAAA;AAC7C,EAAA,MAAM,UAAA,GAAa,MAAM,MAAA,CAAO,OAAO,CAAA;AAEvC,EAAA,MAAM,KAAA,GAAQ,wBAAA,CAAyB,SAAA,CAAU,GAAA,CAAI,aAAa,CAAC,CAAA;AACnE,EAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,SAAA;AAAA,IAC7B,OAAA;AAAA,IACA,KAAA;AAAA,IACA,EAAE,MAAM,SAAA,EAAU;AAAA,IAClB,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACT;AACA,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,IAAA,CAAK,EAAE,IAAA,EAAM,SAAA,EAAU,EAAG,SAAA,EAAW,OAAuB,CAAA;AACxF,EAAA,OAAO;AAAA,IACL,OAAO,GAAA,CAAI,KAAA;AAAA,IACX,GAAA,EAAK,SAAA;AAAA,IACL,GAAA,EAAK,SAAA,CAAU,IAAI,UAAA,CAAW,MAAM,CAAC,CAAA;AAAA,IACrC,UAAA,EAAY,UAAU,UAAU;AAAA,GAClC;AACF;AAEA,eAAeA,UAAAA,GAAmC;AAChD,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,MAAA,CAAO,MAAA,SAAe,MAAA,CAAO,MAAA;AAClE,EAAA,MAAM,EAAE,SAAA,EAAU,GAAI,MAAM,OAAO,QAAa,CAAA;AAChD,EAAA,OAAO,SAAA,CAAU,MAAA;AACnB;AAEA,SAAS,UAAU,GAAA,EAAyB;AAC1C,EAAA,IAAI,IAAI,MAAA,GAAS,CAAA,KAAM,GAAG,MAAM,IAAI,MAAM,uBAAuB,CAAA;AACjE,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,GAAA,CAAI,SAAS,CAAC,CAAA;AACzC,EAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,IAAI,MAAA,EAAQ,CAAA,EAAA,MAAS,CAAC,CAAA,GAAI,OAAO,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA,GAAI,CAAA,EAAG,IAAI,CAAA,GAAI,CAAC,GAAG,EAAE,CAAA;AAC7F,EAAA,OAAO,GAAA;AACT;AAGA,SAAS,yBAAyB,IAAA,EAA8B;AAC9D,EAAA,IAAI,KAAK,MAAA,KAAW,EAAA,EAAI,MAAM,IAAI,MAAM,+BAA+B,CAAA;AACvE,EAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAW;AAAA,IAC5B,EAAA;AAAA,IAAM,EAAA;AAAA,IAAM,CAAA;AAAA,IAAM,CAAA;AAAA,IAAM,CAAA;AAAA,IAAM,EAAA;AAAA,IAAM,CAAA;AAAA,IAAM,CAAA;AAAA,IAAM,CAAA;AAAA,IAAM,EAAA;AAAA,IAAM,GAAA;AAAA,IAAM,GAAA;AAAA,IAAM,CAAA;AAAA,IAAM,EAAA;AAAA,IAAM,CAAA;AAAA,IAAM;AAAA,GAC3F,CAAA;AACD,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,MAAA,CAAO,SAAS,EAAE,CAAA;AAC7C,EAAA,GAAA,CAAI,GAAA,CAAI,QAAQ,CAAC,CAAA;AACjB,EAAA,GAAA,CAAI,GAAA,CAAI,IAAA,EAAM,MAAA,CAAO,MAAM,CAAA;AAC3B,EAAA,OAAO,GAAA;AACT;;;AC7CA,eAAsB,cAAA,CACpB,UACA,OAAA,EACuB;AACvB,EAAA,IAAI,QAAA,CAAS,SAAA,CAAU,KAAA,KAAU,OAAA,CAAQ,aAAA,EAAe;AACtD,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,gBAAA,EAAiB;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,qBAAqB,QAAQ,CAAA;AAC7C,EAAA,MAAM,YAAA,GAAe,SAAA,CAAU,MAAM,MAAA,CAAO,OAAO,CAAC,CAAA;AACpD,EAAA,IAAI,YAAA,KAAiB,QAAA,CAAS,SAAA,CAAU,UAAA,EAAY;AAClD,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,qBAAA,EAAsB;AAAA,EACpD;AAEA,EAAA,MAAM,MAAA,GAAS,MAAMA,UAAAA,EAAU;AAC/B,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,SAAA;AAAA,IAC1B,KAAA;AAAA,IACAC,UAAAA,CAAU,QAAQ,YAAY,CAAA;AAAA,IAC9B,EAAE,MAAM,SAAA,EAAU;AAAA,IAClB,KAAA;AAAA,IACA,CAAC,QAAQ;AAAA,GACX;AACA,EAAA,MAAM,KAAA,GAAQ,MAAM,MAAA,CAAO,MAAA;AAAA,IACzB,EAAE,MAAM,SAAA,EAAU;AAAA,IAClB,MAAA;AAAA,IACAA,UAAAA,CAAU,QAAA,CAAS,SAAA,CAAU,GAAG,CAAA;AAAA,IAChC;AAAA,GACF;AACA,EAAA,OAAO,KAAA,GAAQ,EAAE,EAAA,EAAI,IAAA,KAAS,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,aAAA,EAAc;AACnE;AAEA,eAAeD,UAAAA,GAAmC;AAChD,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,MAAA,CAAO,MAAA,SAAe,MAAA,CAAO,MAAA;AAClE,EAAA,MAAM,EAAE,SAAA,EAAU,GAAI,MAAM,OAAO,QAAa,CAAA;AAChD,EAAA,OAAO,SAAA,CAAU,MAAA;AACnB;AAEA,SAASC,WAAU,GAAA,EAAyB;AAC1C,EAAA,IAAI,IAAI,MAAA,GAAS,CAAA,KAAM,GAAG,MAAM,IAAI,MAAM,uBAAuB,CAAA;AACjE,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,GAAA,CAAI,SAAS,CAAC,CAAA;AACzC,EAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,IAAI,MAAA,EAAQ,CAAA,EAAA,MAAS,CAAC,CAAA,GAAI,OAAO,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA,GAAI,CAAA,EAAG,IAAI,CAAA,GAAI,CAAC,GAAG,EAAE,CAAA;AAC7F,EAAA,OAAO,GAAA;AACT;;;AC5CA,eAAsB,gBAAgB,KAAA,EAAwC;AAC5E,EAAA,MAAM,MAAA,GAAS,MAAMD,UAAAA,EAAU;AAC/B,EAAA,MAAM,EAAA,GAAM,MAAM,MAAA,CAAO,WAAA,CAAY,EAAE,IAAA,EAAM,SAAA,IAAa,IAAA,EAAM;AAAA,IAC9D,MAAA;AAAA,IACA;AAAA,GACD,CAAA;AACD,EAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAW,MAAM,OAAO,SAAA,CAAU,KAAA,EAAO,EAAA,CAAG,SAAS,CAAC,CAAA;AACzE,EAAA,MAAM,SAAA,GAAY,IAAI,UAAA,CAAW,MAAM,OAAO,SAAA,CAAU,OAAA,EAAS,EAAA,CAAG,UAAU,CAAC,CAAA;AAE/E,EAAA,MAAM,IAAA,GAAO,SAAA,CAAU,KAAA,CAAM,SAAA,CAAU,SAAS,EAAE,CAAA;AAClD,EAAA,OAAO;AAAA,IACL,YAAA,EAAc,UAAU,MAAM,CAAA;AAAA,IAC9B,aAAA,EAAe,UAAU,IAAI,CAAA;AAAA,IAC7B;AAAA,GACF;AACF;AAEA,eAAeA,UAAAA,GAAmC;AAChD,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,MAAA,CAAO,MAAA,SAAe,MAAA,CAAO,MAAA;AAClE,EAAA,MAAM,EAAE,SAAA,EAAU,GAAI,MAAM,OAAO,QAAa,CAAA;AAChD,EAAA,OAAO,SAAA,CAAU,MAAA;AACnB;;;ACTO,SAAS,aACd,IAAA,EAKM;AACN,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,IAAA,CAAK,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,MACrB,KAAK,CAAA,CAAE,KAAA;AAAA,MACP,GAAA,EAAK,KAAA;AAAA,MACL,GAAA,EAAK,SAAA;AAAA,MACL,CAAA,EAAG,cAAA,CAAe,CAAA,CAAE,YAAY,CAAA;AAAA,MAChC,GAAA,EAAK,OAAA;AAAA,MACL,GAAA,EAAK,KAAA;AAAA,MACL,QAAQ,CAAA,CAAE;AAAA,KACZ,CAAE;AAAA,GACJ;AACF;AA6BA,eAAsB,iBAAA,CACpB,UACA,OAAA,EAC2B;AAC3B,EAAA,MAAM,MAAM,QAAA,CAAS,SAAA;AACrB,EAAA,IAAI,OAAA,CAAQ,kBAAkB,CAAC,OAAA,CAAQ,eAAe,QAAA,CAAS,GAAA,CAAI,KAAK,CAAA,EAAG;AACzE,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,qBAAA,EAAsB;AAAA,EACpD;AACA,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,IAAA,CAAK,IAAA,CAAK,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,GAAA,KAAQ,GAAA,CAAI,KAAK,CAAA;AAC/D,EAAA,IAAI,CAAC,KAAA,EAAO,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,QAAQ,aAAA,EAAc;AACtD,EAAA,IAAI,KAAA,CAAM,WAAW,SAAA,EAAW,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,QAAQ,aAAA,EAAc;AAE1E,EAAA,IAAI,OAAA,CAAQ,QAAA,IAAY,QAAA,CAAS,OAAA,EAAS;AACxC,IAAA,MAAM,GAAA,GAAA,CACH,OAAA,CAAQ,GAAA,KAAQ,0BAAU,IAAA,EAAK,CAAA,GAAI,CAAE,OAAA,KAAY,IAAI,IAAA,CAAK,QAAA,CAAS,OAAO,EAAE,OAAA,EAAQ;AACvF,IAAA,IAAI,GAAA,GAAM,QAAQ,QAAA,EAAU,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,QAAQ,eAAA,EAAgB;AAAA,EAC1E;AAEA,EAAA,MAAM,OAAA,GAAU,qBAAqB,QAAQ,CAAA;AAC7C,EAAA,MAAM,YAAA,GAAe,SAAA,CAAU,MAAM,MAAA,CAAO,OAAO,CAAC,CAAA;AACpD,EAAA,IAAI,YAAA,KAAiB,IAAI,UAAA,EAAY,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,QAAQ,qBAAA,EAAsB;AAEvF,EAAA,MAAM,MAAA,GAAS,MAAMA,UAAAA,EAAU;AAC/B,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,SAAA;AAAA,IAC1B,KAAA;AAAA,IACA,gBAAA,CAAiB,MAAM,CAAC,CAAA;AAAA,IACxB,EAAE,MAAM,SAAA,EAAU;AAAA,IAClB,KAAA;AAAA,IACA,CAAC,QAAQ;AAAA,GACX;AACA,EAAA,MAAM,KAAA,GAAQ,MAAM,MAAA,CAAO,MAAA;AAAA,IACzB,EAAE,MAAM,SAAA,EAAU;AAAA,IAClB,MAAA;AAAA,IACA,UAAA,CAAW,IAAI,GAAG,CAAA;AAAA,IAClB;AAAA,GACF;AACA,EAAA,OAAO,KAAA,GAAQ,EAAE,EAAA,EAAI,IAAA,KAAS,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,aAAA,EAAc;AACnE;AAEA,eAAeA,UAAAA,GAAmC;AAChD,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,MAAA,CAAO,MAAA,SAAe,MAAA,CAAO,MAAA;AAClE,EAAA,MAAM,EAAE,SAAA,EAAU,GAAI,MAAM,OAAO,QAAa,CAAA;AAChD,EAAA,OAAO,SAAA,CAAU,MAAA;AACnB;AAEA,SAAS,WAAW,GAAA,EAAyB;AAC3C,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,GAAA,CAAI,SAAS,CAAC,CAAA;AACzC,EAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,IAAI,MAAA,EAAQ,CAAA,EAAA,MAAS,CAAC,CAAA,GAAI,OAAO,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA,GAAI,CAAA,EAAG,IAAI,CAAA,GAAI,CAAC,GAAG,EAAE,CAAA;AAC7F,EAAA,OAAO,GAAA;AACT;AAEA,SAAS,eAAe,GAAA,EAAqB;AAC3C,EAAA,OAAO,gBAAA,CAAiB,UAAA,CAAW,GAAG,CAAC,CAAA;AACzC;AAEA,SAAS,iBAAiB,KAAA,EAA2B;AACnD,EAAA,IAAI,CAAA,GAAI,EAAA;AACR,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,MAAA,EAAQ,CAAA,EAAA,EAAK,CAAA,IAAK,MAAA,CAAO,YAAA,CAAa,KAAA,CAAM,CAAC,CAAE,CAAA;AACzE,EAAA,OAAO,IAAA,CAAK,CAAC,CAAA,CAAE,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,OAAO,GAAG,CAAA;AAC3E;AAEA,SAAS,iBAAiB,CAAA,EAAuB;AAC/C,EAAA,MAAM,MAAM,GAAA,CAAI,MAAA,CAAA,CAAQ,IAAK,CAAA,CAAE,MAAA,GAAS,KAAM,CAAC,CAAA;AAC/C,EAAA,MAAM,GAAA,GAAA,CAAO,IAAI,GAAA,EAAK,OAAA,CAAQ,MAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA;AAC1D,EAAA,MAAM,MAAA,GAAS,KAAK,GAAG,CAAA;AACvB,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,MAAA,CAAO,MAAM,CAAA;AACxC,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,MAAA,CAAO,MAAA,EAAQ,CAAA,EAAA,EAAK,GAAA,CAAI,CAAC,CAAA,GAAI,MAAA,CAAO,UAAA,CAAW,CAAC,CAAA;AACpE,EAAA,OAAO,GAAA;AACT","file":"index.js","sourcesContent":["import type { SignableManifest } from './types.js';\n\n/**\n * Canonical JSON of the signed payload — sorted keys, no whitespace.\n *\n * The payload is intentionally NOT the full manifest. It is the minimum that\n * binds a (manifestVersion, contentHash) pair to a tenant under a schema. See\n * ADR-0002.\n */\nexport function canonicalSignedPayload(m: SignableManifest): string {\n  return JSON.stringify(\n    {\n      contentHash: m.contentHash,\n      manifestVersion: m.manifestVersion,\n      schemaVersion: m.schemaVersion,\n      tenantId: m.tenantId,\n    },\n    null,\n    0,\n  );\n}\n\nexport function canonicalSignedBytes(m: SignableManifest): Uint8Array {\n  return new TextEncoder().encode(canonicalSignedPayload(m));\n}\n","export async function sha256(data: Uint8Array): Promise<Uint8Array> {\n  const subtle = await getSubtle();\n  const buf = await subtle.digest('SHA-256', data as BufferSource);\n  return new Uint8Array(buf);\n}\n\nexport function hexEncode(bytes: Uint8Array): string {\n  let s = '';\n  for (let i = 0; i < bytes.length; i++) s += bytes[i]!.toString(16).padStart(2, '0');\n  return s;\n}\n\nasync function getSubtle(): Promise<SubtleCrypto> {\n  if (typeof crypto !== 'undefined' && crypto.subtle) return crypto.subtle;\n  const { webcrypto } = await import('node:crypto');\n  return webcrypto.subtle as unknown as SubtleCrypto;\n}\n","import { canonicalSignedBytes } from './canonical.js';\nimport { hexEncode, sha256 } from './hash.js';\nimport type { ManifestSignature, SignableManifest } from './types.js';\n\n/** Universal-runtime Ed25519 signer (Node + Edge + browsers via crypto.subtle). */\nexport interface SignKey {\n  /** Raw 32-byte Ed25519 private key as hex. */\n  privateKeyHex: string;\n  /** Identifier for the key — included in the signature for rotation tracking. */\n  keyId: string;\n}\n\nexport async function signManifest(\n  manifest: SignableManifest,\n  key: SignKey,\n): Promise<ManifestSignature> {\n  const subtle = await getSubtle();\n  const payload = canonicalSignedBytes(manifest);\n  const signedHash = await sha256(payload);\n\n  const pkcs8 = ed25519PrivateKeyToPkcs8(hexDecode(key.privateKeyHex));\n  const cryptoKey = await subtle.importKey(\n    'pkcs8',\n    pkcs8 as BufferSource,\n    { name: 'Ed25519' },\n    false,\n    ['sign'],\n  );\n  const sigBuf = await subtle.sign({ name: 'Ed25519' }, cryptoKey, payload as BufferSource);\n  return {\n    keyId: key.keyId,\n    alg: 'ed25519',\n    sig: hexEncode(new Uint8Array(sigBuf)),\n    signedHash: hexEncode(signedHash),\n  };\n}\n\nasync function getSubtle(): Promise<SubtleCrypto> {\n  if (typeof crypto !== 'undefined' && crypto.subtle) return crypto.subtle;\n  const { webcrypto } = await import('node:crypto');\n  return webcrypto.subtle as unknown as SubtleCrypto;\n}\n\nfunction hexDecode(hex: string): Uint8Array {\n  if (hex.length % 2 !== 0) throw new Error('hexDecode: odd length');\n  const out = new Uint8Array(hex.length / 2);\n  for (let i = 0; i < out.length; i++) out[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);\n  return out;\n}\n\n/** Wrap a raw 32-byte Ed25519 seed into a minimal PKCS#8 envelope (RFC 8410). */\nfunction ed25519PrivateKeyToPkcs8(seed: Uint8Array): Uint8Array {\n  if (seed.length !== 32) throw new Error('ed25519 seed must be 32 bytes');\n  const prefix = new Uint8Array([\n    0x30, 0x2e, 0x02, 0x01, 0x00, 0x30, 0x05, 0x06, 0x03, 0x2b, 0x65, 0x70, 0x04, 0x22, 0x04, 0x20,\n  ]);\n  const out = new Uint8Array(prefix.length + 32);\n  out.set(prefix, 0);\n  out.set(seed, prefix.length);\n  return out;\n}\n","import { canonicalSignedBytes } from './canonical.js';\nimport { hexEncode, sha256 } from './hash.js';\nimport type { ManifestSignature, SignableManifest } from './types.js';\n\nexport interface VerifyOptions {\n  /** Hex-encoded raw 32-byte Ed25519 public key. */\n  publicKeyHex: string;\n  /** Required keyId — caller pins this at SDK init time. */\n  expectedKeyId: string;\n}\n\nexport type VerifyResult =\n  | { ok: true }\n  | { ok: false; reason: 'keyId-mismatch' | 'signedHash-mismatch' | 'sig-invalid' };\n\nexport async function verifyManifest(\n  manifest: SignableManifest & { signature: ManifestSignature },\n  options: VerifyOptions,\n): Promise<VerifyResult> {\n  if (manifest.signature.keyId !== options.expectedKeyId) {\n    return { ok: false, reason: 'keyId-mismatch' };\n  }\n  const payload = canonicalSignedBytes(manifest);\n  const expectedHash = hexEncode(await sha256(payload));\n  if (expectedHash !== manifest.signature.signedHash) {\n    return { ok: false, reason: 'signedHash-mismatch' };\n  }\n\n  const subtle = await getSubtle();\n  const pubKey = await subtle.importKey(\n    'raw',\n    hexDecode(options.publicKeyHex) as BufferSource,\n    { name: 'Ed25519' },\n    false,\n    ['verify'],\n  );\n  const valid = await subtle.verify(\n    { name: 'Ed25519' },\n    pubKey,\n    hexDecode(manifest.signature.sig) as BufferSource,\n    payload as BufferSource,\n  );\n  return valid ? { ok: true } : { ok: false, reason: 'sig-invalid' };\n}\n\nasync function getSubtle(): Promise<SubtleCrypto> {\n  if (typeof crypto !== 'undefined' && crypto.subtle) return crypto.subtle;\n  const { webcrypto } = await import('node:crypto');\n  return webcrypto.subtle as unknown as SubtleCrypto;\n}\n\nfunction hexDecode(hex: string): Uint8Array {\n  if (hex.length % 2 !== 0) throw new Error('hexDecode: odd length');\n  const out = new Uint8Array(hex.length / 2);\n  for (let i = 0; i < out.length; i++) out[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);\n  return out;\n}\n","/**\n * Ed25519 keypair generation for `fx dev` and tests. Production keys are\n * generated offline and stored in a secrets manager.\n */\nimport { hexEncode } from './hash.js';\n\nexport interface Ed25519Keypair {\n  publicKeyHex: string;\n  privateKeyHex: string;\n  keyId: string;\n}\n\nexport async function generateKeypair(keyId: string): Promise<Ed25519Keypair> {\n  const subtle = await getSubtle();\n  const kp = (await subtle.generateKey({ name: 'Ed25519' }, true, [\n    'sign',\n    'verify',\n  ])) as CryptoKeyPair;\n  const rawPub = new Uint8Array(await subtle.exportKey('raw', kp.publicKey));\n  const pkcs8Priv = new Uint8Array(await subtle.exportKey('pkcs8', kp.privateKey));\n  // PKCS#8 ed25519 = 16-byte prefix + 32-byte seed. Strip the prefix.\n  const seed = pkcs8Priv.slice(pkcs8Priv.length - 32);\n  return {\n    publicKeyHex: hexEncode(rawPub),\n    privateKeyHex: hexEncode(seed),\n    keyId,\n  };\n}\n\nasync function getSubtle(): Promise<SubtleCrypto> {\n  if (typeof crypto !== 'undefined' && crypto.subtle) return crypto.subtle;\n  const { webcrypto } = await import('node:crypto');\n  return webcrypto.subtle as unknown as SubtleCrypto;\n}\n","import { canonicalSignedBytes } from './canonical.js';\nimport { hexEncode, sha256 } from './hash.js';\nimport type { ManifestSignature, SignableManifest } from './types.js';\n\n/**\n * JWKS-style key set for a single org. Each entry is an Ed25519 public key\n * with a kid that matches a `manifest_keys.key_id` in the control plane.\n */\nexport interface JwksEntry {\n  kid: string;\n  kty: 'OKP';\n  crv: 'Ed25519';\n  /** Base64url-encoded raw 32-byte public key. */\n  x: string;\n  alg: 'EdDSA';\n  use: 'sig';\n  /** Lifecycle status — extension on top of the JWKS standard. */\n  status: 'active' | 'retiring' | 'retired';\n}\n\nexport interface Jwks {\n  keys: JwksEntry[];\n}\n\nexport function jwksFromKeys(\n  keys: readonly {\n    keyId: string;\n    publicKeyHex: string;\n    status: 'active' | 'retiring' | 'retired';\n  }[],\n): Jwks {\n  return {\n    keys: keys.map((k) => ({\n      kid: k.keyId,\n      kty: 'OKP',\n      crv: 'Ed25519',\n      x: hexToBase64Url(k.publicKeyHex),\n      alg: 'EdDSA',\n      use: 'sig',\n      status: k.status,\n    })),\n  };\n}\n\nexport interface VerifyAgainstJwksOptions {\n  jwks: Jwks;\n  /** Optional pinning. If set, rejects keys whose kid is not in this list. */\n  expectedKeyIds?: string[];\n  /** Reject manifests older than this many milliseconds (replay window). */\n  maxAgeMs?: number;\n  /** Override clock for tests. */\n  now?: () => Date;\n}\n\nexport type JwksVerifyResult =\n  | { ok: true }\n  | {\n      ok: false;\n      reason:\n        | 'unknown-key'\n        | 'retired-key'\n        | 'pinned-key-mismatch'\n        | 'signedHash-mismatch'\n        | 'sig-invalid'\n        | 'replay-window';\n    };\n\n/**\n * Verify a signed manifest against a JWKS document. Replaces ADR-0002's\n * single-key verifier when SDKs run in M3+ hosted mode.\n */\nexport async function verifyAgainstJwks(\n  manifest: SignableManifest & { signature: ManifestSignature; builtAt?: string },\n  options: VerifyAgainstJwksOptions,\n): Promise<JwksVerifyResult> {\n  const sig = manifest.signature;\n  if (options.expectedKeyIds && !options.expectedKeyIds.includes(sig.keyId)) {\n    return { ok: false, reason: 'pinned-key-mismatch' };\n  }\n  const entry = options.jwks.keys.find((k) => k.kid === sig.keyId);\n  if (!entry) return { ok: false, reason: 'unknown-key' };\n  if (entry.status === 'retired') return { ok: false, reason: 'retired-key' };\n\n  if (options.maxAgeMs && manifest.builtAt) {\n    const age =\n      (options.now ?? (() => new Date()))().getTime() - new Date(manifest.builtAt).getTime();\n    if (age > options.maxAgeMs) return { ok: false, reason: 'replay-window' };\n  }\n\n  const payload = canonicalSignedBytes(manifest);\n  const expectedHash = hexEncode(await sha256(payload));\n  if (expectedHash !== sig.signedHash) return { ok: false, reason: 'signedHash-mismatch' };\n\n  const subtle = await getSubtle();\n  const pubKey = await subtle.importKey(\n    'raw',\n    base64UrlToBytes(entry.x) as BufferSource,\n    { name: 'Ed25519' },\n    false,\n    ['verify'],\n  );\n  const valid = await subtle.verify(\n    { name: 'Ed25519' },\n    pubKey,\n    hexToBytes(sig.sig) as BufferSource,\n    payload as BufferSource,\n  );\n  return valid ? { ok: true } : { ok: false, reason: 'sig-invalid' };\n}\n\nasync function getSubtle(): Promise<SubtleCrypto> {\n  if (typeof crypto !== 'undefined' && crypto.subtle) return crypto.subtle;\n  const { webcrypto } = await import('node:crypto');\n  return webcrypto.subtle as unknown as SubtleCrypto;\n}\n\nfunction hexToBytes(hex: string): Uint8Array {\n  const out = new Uint8Array(hex.length / 2);\n  for (let i = 0; i < out.length; i++) out[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);\n  return out;\n}\n\nfunction hexToBase64Url(hex: string): string {\n  return bytesToBase64Url(hexToBytes(hex));\n}\n\nfunction bytesToBase64Url(bytes: Uint8Array): string {\n  let s = '';\n  for (let i = 0; i < bytes.length; i++) s += String.fromCharCode(bytes[i]!);\n  return btoa(s).replace(/=+$/g, '').replace(/\\+/g, '-').replace(/\\//g, '_');\n}\n\nfunction base64UrlToBytes(s: string): Uint8Array {\n  const pad = '='.repeat((4 - (s.length % 4)) % 4);\n  const b64 = (s + pad).replace(/-/g, '+').replace(/_/g, '/');\n  const binary = atob(b64);\n  const out = new Uint8Array(binary.length);\n  for (let i = 0; i < binary.length; i++) out[i] = binary.charCodeAt(i);\n  return out;\n}\n"]}
+{"version":3,"sources":["../src/canonical.ts","../src/subtle.ts","../src/hash.ts","../src/sign.ts","../src/verify.ts","../src/jwks.ts","../src/delivery.ts","../src/keypair.ts"],"names":["hexDecode"],"mappings":";AASO,SAAS,uBAAuB,CAAA,EAA6B;AAClE,EAAA,OAAO,IAAA,CAAK,SAAA;AAAA,IACV;AAAA,MACE,aAAa,CAAA,CAAE,WAAA;AAAA,MACf,iBAAiB,CAAA,CAAE,eAAA;AAAA,MACnB,eAAe,CAAA,CAAE,aAAA;AAAA,MACjB,UAAU,CAAA,CAAE;AAAA,KACd;AAAA,IACA,IAAA;AAAA,IACA;AAAA,GACF;AACF;AAEO,SAAS,qBAAqB,CAAA,EAAiC;AACpE,EAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,sBAAA,CAAuB,CAAC,CAAC,CAAA;AAC3D;;;ACnBA,eAAsB,SAAA,GAAmC;AACvD,EAAA,IAAI,UAAA,CAAW,MAAA,EAAQ,MAAA,EAAQ,OAAO,WAAW,MAAA,CAAO,MAAA;AACxD,EAAA,MAAM,mBAAA,GAAsB,aAAA;AAC5B,EAAA,MAAM,EAAE,SAAA,EAAU,GAAI,MAAM,OAAO,mBAAA,CAAA;AACnC,EAAA,OAAO,SAAA,CAAU,MAAA;AACnB;;;ACRA,eAAsB,OAAO,IAAA,EAAuC;AAClE,EAAA,MAAM,MAAA,GAAS,MAAM,SAAA,EAAU;AAC/B,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,MAAA,CAAO,WAAW,IAAoB,CAAA;AAC/D,EAAA,OAAO,IAAI,WAAW,GAAG,CAAA;AAC3B;AAEO,SAAS,UAAU,KAAA,EAA2B;AACnD,EAAA,IAAI,CAAA,GAAI,EAAA;AACR,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,QAAQ,CAAA,EAAA,EAAK,CAAA,IAAK,KAAA,CAAM,CAAC,EAAG,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAClF,EAAA,OAAO,CAAA;AACT;;;ACCA,eAAsB,YAAA,CACpB,UACA,GAAA,EAC4B;AAC5B,EAAA,MAAM,MAAA,GAAS,MAAM,SAAA,EAAU;AAC/B,EAAA,MAAM,OAAA,GAAU,qBAAqB,QAAQ,CAAA;AAC7C,EAAA,MAAM,UAAA,GAAa,MAAM,MAAA,CAAO,OAAO,CAAA;AAEvC,EAAA,MAAM,KAAA,GAAQ,wBAAA,CAAyB,SAAA,CAAU,GAAA,CAAI,aAAa,CAAC,CAAA;AACnE,EAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,SAAA;AAAA,IAC7B,OAAA;AAAA,IACA,KAAA;AAAA,IACA,EAAE,MAAM,SAAA,EAAU;AAAA,IAClB,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACT;AACA,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,IAAA,CAAK,EAAE,IAAA,EAAM,SAAA,EAAU,EAAG,SAAA,EAAW,OAAuB,CAAA;AACxF,EAAA,OAAO;AAAA,IACL,OAAO,GAAA,CAAI,KAAA;AAAA,IACX,GAAA,EAAK,SAAA;AAAA,IACL,GAAA,EAAK,SAAA,CAAU,IAAI,UAAA,CAAW,MAAM,CAAC,CAAA;AAAA,IACrC,UAAA,EAAY,UAAU,UAAU;AAAA,GAClC;AACF;AAEA,SAAS,UAAU,GAAA,EAAyB;AAC1C,EAAA,IAAI,IAAI,MAAA,GAAS,CAAA,KAAM,GAAG,MAAM,IAAI,MAAM,uBAAuB,CAAA;AACjE,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,GAAA,CAAI,SAAS,CAAC,CAAA;AACzC,EAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,IAAI,MAAA,EAAQ,CAAA,EAAA,MAAS,CAAC,CAAA,GAAI,OAAO,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA,GAAI,CAAA,EAAG,IAAI,CAAA,GAAI,CAAC,GAAG,EAAE,CAAA;AAC7F,EAAA,OAAO,GAAA;AACT;AAGA,SAAS,yBAAyB,IAAA,EAA8B;AAC9D,EAAA,IAAI,KAAK,MAAA,KAAW,EAAA,EAAI,MAAM,IAAI,MAAM,+BAA+B,CAAA;AACvE,EAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAW;AAAA,IAC5B,EAAA;AAAA,IAAM,EAAA;AAAA,IAAM,CAAA;AAAA,IAAM,CAAA;AAAA,IAAM,CAAA;AAAA,IAAM,EAAA;AAAA,IAAM,CAAA;AAAA,IAAM,CAAA;AAAA,IAAM,CAAA;AAAA,IAAM,EAAA;AAAA,IAAM,GAAA;AAAA,IAAM,GAAA;AAAA,IAAM,CAAA;AAAA,IAAM,EAAA;AAAA,IAAM,CAAA;AAAA,IAAM;AAAA,GAC3F,CAAA;AACD,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,MAAA,CAAO,SAAS,EAAE,CAAA;AAC7C,EAAA,GAAA,CAAI,GAAA,CAAI,QAAQ,CAAC,CAAA;AACjB,EAAA,GAAA,CAAI,GAAA,CAAI,IAAA,EAAM,MAAA,CAAO,MAAM,CAAA;AAC3B,EAAA,OAAO,GAAA;AACT;;;ACvCA,eAAsB,cAAA,CACpB,UACA,OAAA,EACuB;AACvB,EAAA,IAAI,QAAA,CAAS,SAAA,CAAU,KAAA,KAAU,OAAA,CAAQ,aAAA,EAAe;AACtD,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,gBAAA,EAAiB;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,qBAAqB,QAAQ,CAAA;AAC7C,EAAA,MAAM,YAAA,GAAe,SAAA,CAAU,MAAM,MAAA,CAAO,OAAO,CAAC,CAAA;AACpD,EAAA,IAAI,YAAA,KAAiB,QAAA,CAAS,SAAA,CAAU,UAAA,EAAY;AAClD,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,qBAAA,EAAsB;AAAA,EACpD;AAEA,EAAA,MAAM,MAAA,GAAS,MAAM,SAAA,EAAU;AAC/B,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,SAAA;AAAA,IAC1B,KAAA;AAAA,IACAA,UAAAA,CAAU,QAAQ,YAAY,CAAA;AAAA,IAC9B,EAAE,MAAM,SAAA,EAAU;AAAA,IAClB,KAAA;AAAA,IACA,CAAC,QAAQ;AAAA,GACX;AACA,EAAA,MAAM,KAAA,GAAQ,MAAM,MAAA,CAAO,MAAA;AAAA,IACzB,EAAE,MAAM,SAAA,EAAU;AAAA,IAClB,MAAA;AAAA,IACAA,UAAAA,CAAU,QAAA,CAAS,SAAA,CAAU,GAAG,CAAA;AAAA,IAChC;AAAA,GACF;AACA,EAAA,OAAO,KAAA,GAAQ,EAAE,EAAA,EAAI,IAAA,KAAS,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,aAAA,EAAc;AACnE;AAEA,SAASA,WAAU,GAAA,EAAyB;AAC1C,EAAA,IAAI,IAAI,MAAA,GAAS,CAAA,KAAM,GAAG,MAAM,IAAI,MAAM,uBAAuB,CAAA;AACjE,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,GAAA,CAAI,SAAS,CAAC,CAAA;AACzC,EAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,IAAI,MAAA,EAAQ,CAAA,EAAA,MAAS,CAAC,CAAA,GAAI,OAAO,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA,GAAI,CAAA,EAAG,IAAI,CAAA,GAAI,CAAC,GAAG,EAAE,CAAA;AAC7F,EAAA,OAAO,GAAA;AACT;;;AC1BO,SAAS,aACd,IAAA,EAKM;AACN,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,IAAA,CAAK,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,MACrB,KAAK,CAAA,CAAE,KAAA;AAAA,MACP,GAAA,EAAK,KAAA;AAAA,MACL,GAAA,EAAK,SAAA;AAAA,MACL,CAAA,EAAG,cAAA,CAAe,CAAA,CAAE,YAAY,CAAA;AAAA,MAChC,GAAA,EAAK,OAAA;AAAA,MACL,GAAA,EAAK,KAAA;AAAA,MACL,QAAQ,CAAA,CAAE;AAAA,KACZ,CAAE;AAAA,GACJ;AACF;AA6BA,eAAsB,iBAAA,CACpB,UACA,OAAA,EAC2B;AAC3B,EAAA,MAAM,MAAM,QAAA,CAAS,SAAA;AACrB,EAAA,IAAI,OAAA,CAAQ,kBAAkB,CAAC,OAAA,CAAQ,eAAe,QAAA,CAAS,GAAA,CAAI,KAAK,CAAA,EAAG;AACzE,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,qBAAA,EAAsB;AAAA,EACpD;AACA,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,IAAA,CAAK,IAAA,CAAK,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,GAAA,KAAQ,GAAA,CAAI,KAAK,CAAA;AAC/D,EAAA,IAAI,CAAC,KAAA,EAAO,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,QAAQ,aAAA,EAAc;AACtD,EAAA,IAAI,KAAA,CAAM,WAAW,SAAA,EAAW,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,QAAQ,aAAA,EAAc;AAE1E,EAAA,IAAI,OAAA,CAAQ,QAAA,IAAY,QAAA,CAAS,OAAA,EAAS;AACxC,IAAA,MAAM,GAAA,GAAA,CACH,OAAA,CAAQ,GAAA,KAAQ,0BAAU,IAAA,EAAK,CAAA,GAAI,CAAE,OAAA,KAAY,IAAI,IAAA,CAAK,QAAA,CAAS,OAAO,EAAE,OAAA,EAAQ;AACvF,IAAA,IAAI,GAAA,GAAM,QAAQ,QAAA,EAAU,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,QAAQ,eAAA,EAAgB;AAAA,EAC1E;AAEA,EAAA,MAAM,OAAA,GAAU,qBAAqB,QAAQ,CAAA;AAC7C,EAAA,MAAM,YAAA,GAAe,SAAA,CAAU,MAAM,MAAA,CAAO,OAAO,CAAC,CAAA;AACpD,EAAA,IAAI,YAAA,KAAiB,IAAI,UAAA,EAAY,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,QAAQ,qBAAA,EAAsB;AAEvF,EAAA,MAAM,MAAA,GAAS,MAAM,SAAA,EAAU;AAC/B,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,SAAA;AAAA,IAC1B,KAAA;AAAA,IACA,gBAAA,CAAiB,MAAM,CAAC,CAAA;AAAA,IACxB,EAAE,MAAM,SAAA,EAAU;AAAA,IAClB,KAAA;AAAA,IACA,CAAC,QAAQ;AAAA,GACX;AACA,EAAA,MAAM,KAAA,GAAQ,MAAM,MAAA,CAAO,MAAA;AAAA,IACzB,EAAE,MAAM,SAAA,EAAU;AAAA,IAClB,MAAA;AAAA,IACA,UAAA,CAAW,IAAI,GAAG,CAAA;AAAA,IAClB;AAAA,GACF;AACA,EAAA,OAAO,KAAA,GAAQ,EAAE,EAAA,EAAI,IAAA,KAAS,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,aAAA,EAAc;AACnE;AAEA,SAAS,WAAW,GAAA,EAAyB;AAC3C,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,GAAA,CAAI,SAAS,CAAC,CAAA;AACzC,EAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,IAAI,MAAA,EAAQ,CAAA,EAAA,MAAS,CAAC,CAAA,GAAI,OAAO,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA,GAAI,CAAA,EAAG,IAAI,CAAA,GAAI,CAAC,GAAG,EAAE,CAAA;AAC7F,EAAA,OAAO,GAAA;AACT;AAEA,SAAS,eAAe,GAAA,EAAqB;AAC3C,EAAA,OAAO,gBAAA,CAAiB,UAAA,CAAW,GAAG,CAAC,CAAA;AACzC;AAEA,SAAS,iBAAiB,KAAA,EAA2B;AACnD,EAAA,IAAI,CAAA,GAAI,EAAA;AACR,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,MAAA,EAAQ,CAAA,EAAA,EAAK,CAAA,IAAK,MAAA,CAAO,YAAA,CAAa,KAAA,CAAM,CAAC,CAAE,CAAA;AACzE,EAAA,OAAO,IAAA,CAAK,CAAC,CAAA,CAAE,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,OAAO,GAAG,CAAA;AAC3E;AAEA,SAAS,iBAAiB,CAAA,EAAuB;AAC/C,EAAA,MAAM,MAAM,GAAA,CAAI,MAAA,CAAA,CAAQ,IAAK,CAAA,CAAE,MAAA,GAAS,KAAM,CAAC,CAAA;AAC/C,EAAA,MAAM,GAAA,GAAA,CAAO,IAAI,GAAA,EAAK,OAAA,CAAQ,MAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA;AAC1D,EAAA,MAAM,MAAA,GAAS,KAAK,GAAG,CAAA;AACvB,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,MAAA,CAAO,MAAM,CAAA;AACxC,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,MAAA,CAAO,MAAA,EAAQ,CAAA,EAAA,EAAK,GAAA,CAAI,CAAC,CAAA,GAAI,MAAA,CAAO,UAAA,CAAW,CAAC,CAAA;AACpE,EAAA,OAAO,GAAA;AACT;;;ACpGA,eAAsB,sBAAA,CACpB,OACA,OAAA,EACiC;AACjC,EAAA,MAAM,MAAA,GAAS,sBAAsB,KAAK,CAAA;AAC1C,EAAA,IAAI,CAAC,MAAA,CAAO,EAAA,EAAI,OAAO,MAAA;AACvB,EAAA,IAAI,QAAQ,eAAA,EAAiB,QAAA,CAAS,MAAA,CAAO,QAAA,CAAS,eAAe,CAAA,EAAG;AACtE,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,kBAAA,EAAmB;AAAA,EACjD;AAEA,EAAA,MAAM,OAAA,GAAU;AAAA,IACd,aAAA,EAAe,OAAO,QAAA,CAAS,aAAA;AAAA,IAC/B,eAAA,EAAiB,OAAO,QAAA,CAAS,eAAA;AAAA,IACjC,QAAA,EAAU,OAAO,QAAA,CAAS,QAAA;AAAA,IAC1B,WAAA,EAAa,OAAO,QAAA,CAAS;AAAA,GAC/B;AACA,EAAA,MAAM,UAAA,GAAa,SAAA,CAAU,MAAM,MAAA,CAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,aAAA,CAAc,OAAO,CAAC,CAAC,CAAC,CAAA;AAC3F,EAAA,IAAI,UAAA,KAAe,MAAA,CAAO,QAAA,CAAS,WAAA,EAAa;AAC9C,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,uBAAA,EAAwB;AAAA,EACtD;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,SAAA,GAAY,MAAM,iBAAA,CAAkB,MAAA,CAAO,UAAU,OAAO,CAAA;AAClE,IAAA,OAAO,SAAA,CAAU,KAAK,EAAE,EAAA,EAAI,MAAM,QAAA,EAAU,MAAA,CAAO,UAAS,GAAI,SAAA;AAAA,EAClE,SAAS,KAAA,EAAO;AACd,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,KAAA;AAAA,MACJ,MAAA,EAAQ,gBAAA;AAAA,MACR,SAAS,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,OAAO,KAAK;AAAA,KAChE;AAAA,EACF;AACF;AAEO,SAAS,yBAAyB,KAAA,EAA0B;AACjE,EAAA,IAAI,CAAC,SAAS,KAAK,CAAA,IAAK,CAAC,KAAA,CAAM,OAAA,CAAQ,KAAA,CAAM,QAAQ,CAAA,EAAG;AACtD,IAAA,MAAM,IAAI,MAAM,oDAAoD,CAAA;AAAA,EACtE;AACA,EAAA,MAAM,WAAW,KAAA,CAAM,QAAA;AACvB,EAAA,IAAI,CAAC,QAAA,CAAS,KAAA,CAAM,CAAC,OAAA,KAAY,MAAA,CAAO,SAAA,CAAU,OAAO,CAAA,IAAK,MAAA,CAAO,OAAO,CAAA,IAAK,CAAC,CAAA,EAAG;AACnF,IAAA,MAAM,IAAI,MAAM,4DAA4D,CAAA;AAAA,EAC9E;AACA,EAAA,OAAO,CAAC,GAAG,IAAI,GAAA,CAAI,QAAoB,CAAC,CAAA;AAC1C;AAEA,SAAS,sBACP,KAAA,EAG2D;AAC3D,EAAA,IAAI,CAAC,QAAA,CAAS,KAAK,CAAA,EAAG,OAAO,QAAQ,4BAA4B,CAAA;AACjE,EAAA,IAAI,KAAA,CAAM,aAAA,KAAkB,CAAA,EAAG,OAAO,QAAQ,2BAA2B,CAAA;AACzE,EAAA,IAAI,CAAC,MAAA,CAAO,SAAA,CAAU,KAAA,CAAM,eAAe,KAAK,MAAA,CAAO,KAAA,CAAM,eAAe,CAAA,GAAI,CAAA,EAAG;AACjF,IAAA,OAAO,QAAQ,gDAAgD,CAAA;AAAA,EACjE;AACA,EAAA,IAAI,CAAC,MAAM,KAAA,CAAM,WAAA,EAAa,EAAE,CAAA,EAAG,OAAO,QAAQ,iCAAiC,CAAA;AACnF,EAAA,IAAI,CAAC,gBAAA,CAAiB,KAAA,CAAM,QAAQ,CAAA,EAAG,OAAO,QAAQ,sBAAsB,CAAA;AAC5E,EAAA,IAAI,CAAC,SAAA,CAAU,KAAA,CAAM,OAAO,CAAA,EAAG,OAAO,QAAQ,kCAAkC,CAAA;AAChF,EAAA,IAAI,CAAC,MAAM,OAAA,CAAQ,KAAA,CAAM,WAAW,CAAA,EAAG,OAAO,QAAQ,8BAA8B,CAAA;AACpF,EAAA,IAAI,CAAC,WAAA,CAAY,KAAA,CAAM,SAAS,CAAA,EAAG,OAAO,QAAQ,uCAAuC,CAAA;AAEzF,EAAA,MAAM,aAAA,uBAAoB,GAAA,EAAY;AACtC,EAAA,KAAA,MAAW,CAAC,KAAA,EAAO,UAAU,KAAK,KAAA,CAAM,WAAA,CAAY,SAAQ,EAAG;AAC7D,IAAA,MAAM,KAAA,GAAQ,kBAAA,CAAmB,UAAA,EAAY,aAAa,CAAA;AAC1D,IAAA,IAAI,OAAO,OAAO,OAAA,CAAQ,eAAe,KAAK,CAAA,GAAA,EAAM,KAAK,CAAA,CAAE,CAAA;AAAA,EAC7D;AAEA,EAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,QAAA,EAAU,KAAA,EAAqC;AACpE;AAEA,SAAS,kBAAA,CAAmB,OAAgB,aAAA,EAA2C;AACrF,EAAA,IAAI,CAAC,QAAA,CAAS,KAAK,CAAA,EAAG,OAAO,mBAAA;AAC7B,EAAA,KAAA,MAAW,GAAA,IAAO,CAAC,IAAA,EAAM,MAAA,EAAQ,MAAM,CAAA,EAAY;AACjD,IAAA,IAAI,CAAC,iBAAiB,KAAA,CAAM,GAAG,CAAC,CAAA,EAAG,OAAO,GAAG,GAAG,CAAA,YAAA,CAAA;AAAA,EAClD;AACA,EAAA,IAAI,aAAA,CAAc,IAAI,KAAA,CAAM,EAAY,GAAG,OAAO,CAAA,wBAAA,EAA2B,MAAM,EAAY,CAAA,CAAA;AAC/F,EAAA,aAAA,CAAc,GAAA,CAAI,MAAM,EAAY,CAAA;AACpC,EAAA,IAAI,MAAM,KAAA,KAAU,SAAA,IAAa,KAAA,CAAM,KAAA,KAAU,UAAU,OAAO,eAAA;AAClE,EAAA,IAAI,CAAC,MAAA,CAAO,KAAA,CAAM,UAAU,GAAG,OAAO,oCAAA;AACtC,EAAA,IAAI,OAAO,KAAA,CAAM,aAAA,KAAkB,SAAA,EAAW,OAAO,+BAAA;AACrD,EAAA,IAAI,CAAC,MAAM,OAAA,CAAQ,KAAA,CAAM,QAAQ,CAAA,IAAK,KAAA,CAAM,QAAA,CAAS,MAAA,GAAS,CAAA,EAAG;AAC/D,IAAA,OAAO,oCAAA;AAAA,EACT;AAEA,EAAA,MAAM,WAAA,uBAAkB,GAAA,EAAY;AACpC,EAAA,IAAI,cAAA,GAAiB,CAAA;AACrB,EAAA,IAAI,gBAAA,GAAmB,CAAA;AACvB,EAAA,KAAA,MAAW,CAAC,KAAA,EAAO,OAAO,KAAK,KAAA,CAAM,QAAA,CAAS,SAAQ,EAAG;AACvD,IAAA,IAAI,CAAC,SAAS,OAAO,CAAA,IAAK,CAAC,gBAAA,CAAiB,OAAA,CAAQ,GAAG,CAAA,EAAG;AACxD,MAAA,OAAO,YAAY,KAAK,CAAA,iBAAA,CAAA;AAAA,IAC1B;AACA,IAAA,IAAI,CAAC,gBAAA,CAAiB,OAAA,CAAQ,IAAI,CAAA,EAAG,OAAO,YAAY,KAAK,CAAA,kBAAA,CAAA;AAC7D,IAAA,IAAI,WAAA,CAAY,IAAI,OAAA,CAAQ,GAAG,GAAG,OAAO,CAAA,sBAAA,EAAyB,QAAQ,GAAG,CAAA,CAAA;AAC7E,IAAA,WAAA,CAAY,GAAA,CAAI,QAAQ,GAAG,CAAA;AAC3B,IAAA,IAAI,OAAA,CAAQ,WAAW,MAAA,EAAW;AAChC,MAAA,IACE,CAAC,MAAA,CAAO,SAAA,CAAU,OAAA,CAAQ,MAAM,CAAA,IAChC,MAAA,CAAO,OAAA,CAAQ,MAAM,IAAI,CAAA,IACzB,MAAA,CAAO,OAAA,CAAQ,MAAM,IAAI,GAAA,EACzB;AACA,QAAA,OAAO,YAAY,KAAK,CAAA,+CAAA,CAAA;AAAA,MAC1B;AACA,MAAA,gBAAA,IAAoB,CAAA;AACpB,MAAA,cAAA,IAAkB,MAAA,CAAO,QAAQ,MAAM,CAAA;AAAA,IACzC;AACA,IAAA,IAAI,QAAQ,gBAAA,KAAqB,MAAA,IAAa,CAAC,MAAA,CAAO,OAAA,CAAQ,gBAAgB,CAAA,EAAG;AAC/E,MAAA,OAAO,YAAY,KAAK,CAAA,0CAAA,CAAA;AAAA,IAC1B;AAAA,EACF;AACA,EAAA,IAAI,gBAAA,GAAmB,CAAA,IAAK,gBAAA,KAAqB,KAAA,CAAM,SAAS,MAAA,EAAQ;AACtE,IAAA,OAAO,4DAAA;AAAA,EACT;AACA,EAAA,IAAI,gBAAA,GAAmB,CAAA,IAAK,cAAA,KAAmB,GAAA,EAAO;AACpD,IAAA,OAAO,mCAAA;AAAA,EACT;AACA,EAAA,KAAA,MAAW,GAAA,IAAO,CAAC,mBAAA,EAAqB,UAAU,CAAA,EAAY;AAC5D,IAAA,IACE,MAAM,GAAG,CAAA,KAAM,MAAA,KACd,CAAC,iBAAiB,KAAA,CAAM,GAAG,CAAC,CAAA,IAAK,CAAC,WAAA,CAAY,GAAA,CAAI,KAAA,CAAM,GAAG,CAAC,CAAA,CAAA,EAC7D;AACA,MAAA,OAAO,GAAG,GAAG,CAAA,mCAAA,CAAA;AAAA,IACf;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,cAAc,KAAA,EAAwB;AAC7C,EAAA,OAAO,IAAA,CAAK,SAAA,CAAU,QAAA,CAAS,KAAK,CAAC,CAAA;AACvC;AAEA,SAAS,SAAS,KAAA,EAAyB;AACzC,EAAA,IAAI,MAAM,OAAA,CAAQ,KAAK,GAAG,OAAO,KAAA,CAAM,IAAI,QAAQ,CAAA;AACnD,EAAA,IAAI,QAAA,CAAS,KAAK,CAAA,EAAG;AACnB,IAAA,MAAM,SAAkC,EAAC;AACzC,IAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,CAAE,IAAA,EAAK,EAAG,MAAA,CAAO,GAAG,CAAA,GAAI,QAAA,CAAS,KAAA,CAAM,GAAG,CAAC,CAAA;AAC9E,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,QAAQ,OAAA,EAAiB;AAChC,EAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAgB,MAAA,EAAQ,kBAA2B,OAAA,EAAQ;AAC1E;AAEA,SAAS,SAAS,KAAA,EAAkD;AAClE,EAAA,OAAO,KAAA,KAAU,QAAQ,OAAO,KAAA,KAAU,YAAY,CAAC,KAAA,CAAM,QAAQ,KAAK,CAAA;AAC5E;AAEA,SAAS,iBAAiB,KAAA,EAAiC;AACzD,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,CAAM,MAAA,GAAS,CAAA;AACrD;AAEA,SAAS,OAAO,KAAA,EAAyB;AACvC,EAAA,OAAO,OAAO,UAAU,QAAA,IAAY,MAAA,CAAO,SAAS,KAAK,CAAA,IAAK,KAAA,IAAS,CAAA,IAAK,KAAA,IAAS,CAAA;AACvF;AAEA,SAAS,KAAA,CAAM,OAAgB,MAAA,EAAiC;AAC9D,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,IAAI,MAAA,CAAO,aAAa,MAAM,CAAA,EAAA,CAAI,CAAA,CAAE,IAAA,CAAK,KAAK,CAAA;AACpF;AAEA,SAAS,UAAU,KAAA,EAAiC;AAClD,EAAA,OAAO,OAAO,UAAU,QAAA,IAAY,MAAA,CAAO,SAAS,IAAA,CAAK,KAAA,CAAM,KAAK,CAAC,CAAA;AACvE;AAEA,SAAS,YAAY,KAAA,EAA4C;AAC/D,EAAA,OACE,SAAS,KAAK,CAAA,IACd,iBAAiB,KAAA,CAAM,KAAK,KAC5B,KAAA,CAAM,GAAA,KAAQ,SAAA,IACd,KAAA,CAAM,MAAM,GAAA,EAAK,GAAG,KACpB,KAAA,CAAM,KAAA,CAAM,YAAY,EAAE,CAAA;AAE9B;;;AChMA,eAAsB,gBAAgB,KAAA,EAAwC;AAC5E,EAAA,MAAM,MAAA,GAAS,MAAM,SAAA,EAAU;AAC/B,EAAA,MAAM,EAAA,GAAM,MAAM,MAAA,CAAO,WAAA,CAAY,EAAE,IAAA,EAAM,SAAA,IAAa,IAAA,EAAM;AAAA,IAC9D,MAAA;AAAA,IACA;AAAA,GACD,CAAA;AACD,EAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAW,MAAM,OAAO,SAAA,CAAU,KAAA,EAAO,EAAA,CAAG,SAAS,CAAC,CAAA;AACzE,EAAA,MAAM,SAAA,GAAY,IAAI,UAAA,CAAW,MAAM,OAAO,SAAA,CAAU,OAAA,EAAS,EAAA,CAAG,UAAU,CAAC,CAAA;AAE/E,EAAA,MAAM,IAAA,GAAO,SAAA,CAAU,KAAA,CAAM,SAAA,CAAU,SAAS,EAAE,CAAA;AAClD,EAAA,OAAO;AAAA,IACL,YAAA,EAAc,UAAU,MAAM,CAAA;AAAA,IAC9B,aAAA,EAAe,UAAU,IAAI,CAAA;AAAA,IAC7B;AAAA,GACF;AACF","file":"index.js","sourcesContent":["import type { SignableManifest } from './types.js';\n\n/**\n * Canonical JSON of the signed payload — sorted keys, no whitespace.\n *\n * The payload is intentionally NOT the full manifest. It is the minimum that\n * binds a (manifestVersion, contentHash) pair to a tenant under a schema. See\n * ADR-0002.\n */\nexport function canonicalSignedPayload(m: SignableManifest): string {\n  return JSON.stringify(\n    {\n      contentHash: m.contentHash,\n      manifestVersion: m.manifestVersion,\n      schemaVersion: m.schemaVersion,\n      tenantId: m.tenantId,\n    },\n    null,\n    0,\n  );\n}\n\nexport function canonicalSignedBytes(m: SignableManifest): Uint8Array {\n  return new TextEncoder().encode(canonicalSignedPayload(m));\n}\n","/**\n * Resolve WebCrypto without forcing browser bundlers to resolve Node's built-in\n * crypto module. Modern browsers and supported Node releases use the global\n * implementation; the runtime-only import is a compatibility fallback.\n */\nexport async function getSubtle(): Promise<SubtleCrypto> {\n  if (globalThis.crypto?.subtle) return globalThis.crypto.subtle;\n  const nodeCryptoSpecifier = 'node:crypto';\n  const { webcrypto } = await import(nodeCryptoSpecifier);\n  return webcrypto.subtle as unknown as SubtleCrypto;\n}\n","import { getSubtle } from './subtle.js';\n\nexport async function sha256(data: Uint8Array): Promise<Uint8Array> {\n  const subtle = await getSubtle();\n  const buf = await subtle.digest('SHA-256', data as BufferSource);\n  return new Uint8Array(buf);\n}\n\nexport function hexEncode(bytes: Uint8Array): string {\n  let s = '';\n  for (let i = 0; i < bytes.length; i++) s += bytes[i]!.toString(16).padStart(2, '0');\n  return s;\n}\n","import { canonicalSignedBytes } from './canonical.js';\nimport { hexEncode, sha256 } from './hash.js';\nimport { getSubtle } from './subtle.js';\nimport type { ManifestSignature, SignableManifest } from './types.js';\n\n/** Universal-runtime Ed25519 signer (Node + Edge + browsers via crypto.subtle). */\nexport interface SignKey {\n  /** Raw 32-byte Ed25519 private key as hex. */\n  privateKeyHex: string;\n  /** Identifier for the key — included in the signature for rotation tracking. */\n  keyId: string;\n}\n\nexport async function signManifest(\n  manifest: SignableManifest,\n  key: SignKey,\n): Promise<ManifestSignature> {\n  const subtle = await getSubtle();\n  const payload = canonicalSignedBytes(manifest);\n  const signedHash = await sha256(payload);\n\n  const pkcs8 = ed25519PrivateKeyToPkcs8(hexDecode(key.privateKeyHex));\n  const cryptoKey = await subtle.importKey(\n    'pkcs8',\n    pkcs8 as BufferSource,\n    { name: 'Ed25519' },\n    false,\n    ['sign'],\n  );\n  const sigBuf = await subtle.sign({ name: 'Ed25519' }, cryptoKey, payload as BufferSource);\n  return {\n    keyId: key.keyId,\n    alg: 'ed25519',\n    sig: hexEncode(new Uint8Array(sigBuf)),\n    signedHash: hexEncode(signedHash),\n  };\n}\n\nfunction hexDecode(hex: string): Uint8Array {\n  if (hex.length % 2 !== 0) throw new Error('hexDecode: odd length');\n  const out = new Uint8Array(hex.length / 2);\n  for (let i = 0; i < out.length; i++) out[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);\n  return out;\n}\n\n/** Wrap a raw 32-byte Ed25519 seed into a minimal PKCS#8 envelope (RFC 8410). */\nfunction ed25519PrivateKeyToPkcs8(seed: Uint8Array): Uint8Array {\n  if (seed.length !== 32) throw new Error('ed25519 seed must be 32 bytes');\n  const prefix = new Uint8Array([\n    0x30, 0x2e, 0x02, 0x01, 0x00, 0x30, 0x05, 0x06, 0x03, 0x2b, 0x65, 0x70, 0x04, 0x22, 0x04, 0x20,\n  ]);\n  const out = new Uint8Array(prefix.length + 32);\n  out.set(prefix, 0);\n  out.set(seed, prefix.length);\n  return out;\n}\n","import { canonicalSignedBytes } from './canonical.js';\nimport { hexEncode, sha256 } from './hash.js';\nimport { getSubtle } from './subtle.js';\nimport type { ManifestSignature, SignableManifest } from './types.js';\n\nexport interface VerifyOptions {\n  /** Hex-encoded raw 32-byte Ed25519 public key. */\n  publicKeyHex: string;\n  /** Required keyId — caller pins this at SDK init time. */\n  expectedKeyId: string;\n}\n\nexport type VerifyResult =\n  | { ok: true }\n  | { ok: false; reason: 'keyId-mismatch' | 'signedHash-mismatch' | 'sig-invalid' };\n\nexport async function verifyManifest(\n  manifest: SignableManifest & { signature: ManifestSignature },\n  options: VerifyOptions,\n): Promise<VerifyResult> {\n  if (manifest.signature.keyId !== options.expectedKeyId) {\n    return { ok: false, reason: 'keyId-mismatch' };\n  }\n  const payload = canonicalSignedBytes(manifest);\n  const expectedHash = hexEncode(await sha256(payload));\n  if (expectedHash !== manifest.signature.signedHash) {\n    return { ok: false, reason: 'signedHash-mismatch' };\n  }\n\n  const subtle = await getSubtle();\n  const pubKey = await subtle.importKey(\n    'raw',\n    hexDecode(options.publicKeyHex) as BufferSource,\n    { name: 'Ed25519' },\n    false,\n    ['verify'],\n  );\n  const valid = await subtle.verify(\n    { name: 'Ed25519' },\n    pubKey,\n    hexDecode(manifest.signature.sig) as BufferSource,\n    payload as BufferSource,\n  );\n  return valid ? { ok: true } : { ok: false, reason: 'sig-invalid' };\n}\n\nfunction hexDecode(hex: string): Uint8Array {\n  if (hex.length % 2 !== 0) throw new Error('hexDecode: odd length');\n  const out = new Uint8Array(hex.length / 2);\n  for (let i = 0; i < out.length; i++) out[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);\n  return out;\n}\n","import { canonicalSignedBytes } from './canonical.js';\nimport { hexEncode, sha256 } from './hash.js';\nimport { getSubtle } from './subtle.js';\nimport type { ManifestSignature, SignableManifest } from './types.js';\n\n/**\n * JWKS-style key set for a single org. Each entry is an Ed25519 public key\n * with a kid that matches a `manifest_keys.key_id` in the control plane.\n */\nexport interface JwksEntry {\n  kid: string;\n  kty: 'OKP';\n  crv: 'Ed25519';\n  /** Base64url-encoded raw 32-byte public key. */\n  x: string;\n  alg: 'EdDSA';\n  use: 'sig';\n  /** Lifecycle status — extension on top of the JWKS standard. */\n  status: 'active' | 'retiring' | 'retired';\n}\n\nexport interface Jwks {\n  keys: JwksEntry[];\n}\n\nexport function jwksFromKeys(\n  keys: readonly {\n    keyId: string;\n    publicKeyHex: string;\n    status: 'active' | 'retiring' | 'retired';\n  }[],\n): Jwks {\n  return {\n    keys: keys.map((k) => ({\n      kid: k.keyId,\n      kty: 'OKP',\n      crv: 'Ed25519',\n      x: hexToBase64Url(k.publicKeyHex),\n      alg: 'EdDSA',\n      use: 'sig',\n      status: k.status,\n    })),\n  };\n}\n\nexport interface VerifyAgainstJwksOptions {\n  jwks: Jwks;\n  /** Optional pinning. If set, rejects keys whose kid is not in this list. */\n  expectedKeyIds?: string[];\n  /** Reject manifests older than this many milliseconds (replay window). */\n  maxAgeMs?: number;\n  /** Override clock for tests. */\n  now?: () => Date;\n}\n\nexport type JwksVerifyResult =\n  | { ok: true }\n  | {\n      ok: false;\n      reason:\n        | 'unknown-key'\n        | 'retired-key'\n        | 'pinned-key-mismatch'\n        | 'signedHash-mismatch'\n        | 'sig-invalid'\n        | 'replay-window';\n    };\n\n/**\n * Verify a signed manifest against a JWKS document. Replaces ADR-0002's\n * single-key verifier when SDKs run in M3+ hosted mode.\n */\nexport async function verifyAgainstJwks(\n  manifest: SignableManifest & { signature: ManifestSignature; builtAt?: string },\n  options: VerifyAgainstJwksOptions,\n): Promise<JwksVerifyResult> {\n  const sig = manifest.signature;\n  if (options.expectedKeyIds && !options.expectedKeyIds.includes(sig.keyId)) {\n    return { ok: false, reason: 'pinned-key-mismatch' };\n  }\n  const entry = options.jwks.keys.find((k) => k.kid === sig.keyId);\n  if (!entry) return { ok: false, reason: 'unknown-key' };\n  if (entry.status === 'retired') return { ok: false, reason: 'retired-key' };\n\n  if (options.maxAgeMs && manifest.builtAt) {\n    const age =\n      (options.now ?? (() => new Date()))().getTime() - new Date(manifest.builtAt).getTime();\n    if (age > options.maxAgeMs) return { ok: false, reason: 'replay-window' };\n  }\n\n  const payload = canonicalSignedBytes(manifest);\n  const expectedHash = hexEncode(await sha256(payload));\n  if (expectedHash !== sig.signedHash) return { ok: false, reason: 'signedHash-mismatch' };\n\n  const subtle = await getSubtle();\n  const pubKey = await subtle.importKey(\n    'raw',\n    base64UrlToBytes(entry.x) as BufferSource,\n    { name: 'Ed25519' },\n    false,\n    ['verify'],\n  );\n  const valid = await subtle.verify(\n    { name: 'Ed25519' },\n    pubKey,\n    hexToBytes(sig.sig) as BufferSource,\n    payload as BufferSource,\n  );\n  return valid ? { ok: true } : { ok: false, reason: 'sig-invalid' };\n}\n\nfunction hexToBytes(hex: string): Uint8Array {\n  const out = new Uint8Array(hex.length / 2);\n  for (let i = 0; i < out.length; i++) out[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);\n  return out;\n}\n\nfunction hexToBase64Url(hex: string): string {\n  return bytesToBase64Url(hexToBytes(hex));\n}\n\nfunction bytesToBase64Url(bytes: Uint8Array): string {\n  let s = '';\n  for (let i = 0; i < bytes.length; i++) s += String.fromCharCode(bytes[i]!);\n  return btoa(s).replace(/=+$/g, '').replace(/\\+/g, '-').replace(/\\//g, '_');\n}\n\nfunction base64UrlToBytes(s: string): Uint8Array {\n  const pad = '='.repeat((4 - (s.length % 4)) % 4);\n  const b64 = (s + pad).replace(/-/g, '+').replace(/_/g, '/');\n  const binary = atob(b64);\n  const out = new Uint8Array(binary.length);\n  for (let i = 0; i < binary.length; i++) out[i] = binary.charCodeAt(i);\n  return out;\n}\n","import { hexEncode, sha256 } from './hash.js';\nimport { type Jwks, type JwksVerifyResult, verifyAgainstJwks } from './jwks.js';\nimport type { ManifestSignature, SignableManifest } from './types.js';\n\nexport interface DeliveryManifest extends SignableManifest {\n  builtAt: string;\n  experiments: Array<Record<string, unknown>>;\n  signature: ManifestSignature;\n}\n\nexport interface VerifyManifestDeliveryOptions {\n  jwks: Jwks;\n  expectedKeyIds?: string[];\n  revokedVersions?: readonly number[];\n  maxAgeMs?: number;\n  now?: () => Date;\n}\n\ntype JwksFailureReason = Extract<JwksVerifyResult, { ok: false }>['reason'];\n\nexport type ManifestDeliveryFailure =\n  | 'schema-invalid'\n  | 'content-hash-mismatch'\n  | 'manifest-revoked'\n  | JwksFailureReason;\n\nexport type ManifestDeliveryResult =\n  | { ok: true; manifest: DeliveryManifest }\n  | { ok: false; reason: ManifestDeliveryFailure; details?: string };\n\n/**\n * Validate and authenticate an untrusted manifest response before an SDK uses it.\n * This function is WebCrypto-only and is shared by browser, edge, and Node SDKs.\n */\nexport async function verifyManifestDelivery(\n  input: unknown,\n  options: VerifyManifestDeliveryOptions,\n): Promise<ManifestDeliveryResult> {\n  const parsed = parseDeliveryManifest(input);\n  if (!parsed.ok) return parsed;\n  if (options.revokedVersions?.includes(parsed.manifest.manifestVersion)) {\n    return { ok: false, reason: 'manifest-revoked' };\n  }\n\n  const payload = {\n    schemaVersion: parsed.manifest.schemaVersion,\n    manifestVersion: parsed.manifest.manifestVersion,\n    tenantId: parsed.manifest.tenantId,\n    experiments: parsed.manifest.experiments,\n  };\n  const actualHash = hexEncode(await sha256(new TextEncoder().encode(canonicalJson(payload))));\n  if (actualHash !== parsed.manifest.contentHash) {\n    return { ok: false, reason: 'content-hash-mismatch' };\n  }\n\n  try {\n    const signature = await verifyAgainstJwks(parsed.manifest, options);\n    return signature.ok ? { ok: true, manifest: parsed.manifest } : signature;\n  } catch (error) {\n    return {\n      ok: false,\n      reason: 'schema-invalid',\n      details: error instanceof Error ? error.message : String(error),\n    };\n  }\n}\n\nexport function parseManifestRevocations(input: unknown): number[] {\n  if (!isRecord(input) || !Array.isArray(input.versions)) {\n    throw new Error('manifest revocations must contain a versions array');\n  }\n  const versions = input.versions;\n  if (!versions.every((version) => Number.isInteger(version) && Number(version) >= 0)) {\n    throw new Error('manifest revocation versions must be non-negative integers');\n  }\n  return [...new Set(versions as number[])];\n}\n\nfunction parseDeliveryManifest(\n  input: unknown,\n):\n  | { ok: true; manifest: DeliveryManifest }\n  | { ok: false; reason: 'schema-invalid'; details: string } {\n  if (!isRecord(input)) return invalid('manifest must be an object');\n  if (input.schemaVersion !== 1) return invalid('unsupported schemaVersion');\n  if (!Number.isInteger(input.manifestVersion) || Number(input.manifestVersion) < 0) {\n    return invalid('manifestVersion must be a non-negative integer');\n  }\n  if (!isHex(input.contentHash, 64)) return invalid('contentHash must be SHA-256 hex');\n  if (!isNonEmptyString(input.tenantId)) return invalid('tenantId is required');\n  if (!isIsoDate(input.builtAt)) return invalid('builtAt must be an ISO timestamp');\n  if (!Array.isArray(input.experiments)) return invalid('experiments must be an array');\n  if (!isSignature(input.signature)) return invalid('a valid Ed25519 signature is required');\n\n  const experimentIds = new Set<string>();\n  for (const [index, experiment] of input.experiments.entries()) {\n    const issue = validateExperiment(experiment, experimentIds);\n    if (issue) return invalid(`experiments[${index}]: ${issue}`);\n  }\n\n  return { ok: true, manifest: input as unknown as DeliveryManifest };\n}\n\nfunction validateExperiment(value: unknown, experimentIds: Set<string>): string | null {\n  if (!isRecord(value)) return 'must be an object';\n  for (const key of ['id', 'name', 'salt'] as const) {\n    if (!isNonEmptyString(value[key])) return `${key} is required`;\n  }\n  if (experimentIds.has(value.id as string)) return `duplicate experiment id ${value.id as string}`;\n  experimentIds.add(value.id as string);\n  if (value.state !== 'running' && value.state !== 'paused') return 'invalid state';\n  if (!isRate(value.sampleRate)) return 'sampleRate must be between 0 and 1';\n  if (typeof value.applyVariants !== 'boolean') return 'applyVariants must be boolean';\n  if (!Array.isArray(value.variants) || value.variants.length < 2) {\n    return 'at least two variants are required';\n  }\n\n  const variantKeys = new Set<string>();\n  let declaredWeight = 0;\n  let weightedVariants = 0;\n  for (const [index, variant] of value.variants.entries()) {\n    if (!isRecord(variant) || !isNonEmptyString(variant.key)) {\n      return `variants[${index}].key is required`;\n    }\n    if (!isNonEmptyString(variant.name)) return `variants[${index}].name is required`;\n    if (variantKeys.has(variant.key)) return `duplicate variant key ${variant.key}`;\n    variantKeys.add(variant.key);\n    if (variant.weight !== undefined) {\n      if (\n        !Number.isInteger(variant.weight) ||\n        Number(variant.weight) < 0 ||\n        Number(variant.weight) > 10000\n      ) {\n        return `variants[${index}].weight must be an integer between 0 and 10000`;\n      }\n      weightedVariants += 1;\n      declaredWeight += Number(variant.weight);\n    }\n    if (variant.recipeSampleRate !== undefined && !isRate(variant.recipeSampleRate)) {\n      return `variants[${index}].recipeSampleRate must be between 0 and 1`;\n    }\n  }\n  if (weightedVariants > 0 && weightedVariants !== value.variants.length) {\n    return 'variant weights must be declared for every variant or none';\n  }\n  if (weightedVariants > 0 && declaredWeight !== 10000) {\n    return 'variant weights must sum to 10000';\n  }\n  for (const key of ['defaultVariantKey', 'divertTo'] as const) {\n    if (\n      value[key] !== undefined &&\n      (!isNonEmptyString(value[key]) || !variantKeys.has(value[key]))\n    ) {\n      return `${key} must reference an existing variant`;\n    }\n  }\n  return null;\n}\n\nfunction canonicalJson(value: unknown): string {\n  return JSON.stringify(sortDeep(value));\n}\n\nfunction sortDeep(value: unknown): unknown {\n  if (Array.isArray(value)) return value.map(sortDeep);\n  if (isRecord(value)) {\n    const sorted: Record<string, unknown> = {};\n    for (const key of Object.keys(value).sort()) sorted[key] = sortDeep(value[key]);\n    return sorted;\n  }\n  return value;\n}\n\nfunction invalid(details: string) {\n  return { ok: false as const, reason: 'schema-invalid' as const, details };\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === 'object' && !Array.isArray(value);\n}\n\nfunction isNonEmptyString(value: unknown): value is string {\n  return typeof value === 'string' && value.length > 0;\n}\n\nfunction isRate(value: unknown): boolean {\n  return typeof value === 'number' && Number.isFinite(value) && value >= 0 && value <= 1;\n}\n\nfunction isHex(value: unknown, length: number): value is string {\n  return typeof value === 'string' && new RegExp(`^[0-9a-f]{${length}}$`).test(value);\n}\n\nfunction isIsoDate(value: unknown): value is string {\n  return typeof value === 'string' && Number.isFinite(Date.parse(value));\n}\n\nfunction isSignature(value: unknown): value is ManifestSignature {\n  return (\n    isRecord(value) &&\n    isNonEmptyString(value.keyId) &&\n    value.alg === 'ed25519' &&\n    isHex(value.sig, 128) &&\n    isHex(value.signedHash, 64)\n  );\n}\n","/**\n * Ed25519 keypair generation for `fx dev` and tests. Production keys are\n * generated offline and stored in a secrets manager.\n */\nimport { hexEncode } from './hash.js';\nimport { getSubtle } from './subtle.js';\n\nexport interface Ed25519Keypair {\n  publicKeyHex: string;\n  privateKeyHex: string;\n  keyId: string;\n}\n\nexport async function generateKeypair(keyId: string): Promise<Ed25519Keypair> {\n  const subtle = await getSubtle();\n  const kp = (await subtle.generateKey({ name: 'Ed25519' }, true, [\n    'sign',\n    'verify',\n  ])) as CryptoKeyPair;\n  const rawPub = new Uint8Array(await subtle.exportKey('raw', kp.publicKey));\n  const pkcs8Priv = new Uint8Array(await subtle.exportKey('pkcs8', kp.privateKey));\n  // PKCS#8 ed25519 = 16-byte prefix + 32-byte seed. Strip the prefix.\n  const seed = pkcs8Priv.slice(pkcs8Priv.length - 32);\n  return {\n    publicKeyHex: hexEncode(rawPub),\n    privateKeyHex: hexEncode(seed),\n    keyId,\n  };\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fabricorg/experiments-manifest-signing",
-  "version": "0.0.1",
+  "version": "0.1.0",
   "description": "Ed25519 sign + verify utilities for Fabric Experiments manifests. Works in Node, Edge, and browsers.",
   "license": "MIT",
   "type": "module",
@@ -10,28 +10,20 @@
   "module": "./dist/index.js",
   "exports": {
     ".": {
-      "import": {
-        "types": "./dist/index.d.ts",
-        "default": "./dist/index.js"
-      },
-      "require": {
-        "types": "./dist/index.d.cts",
-        "default": "./dist/index.cjs"
-      }
+      "import": { "types": "./dist/index.d.ts", "default": "./dist/index.js" },
+      "require": { "types": "./dist/index.d.cts", "default": "./dist/index.cjs" }
     }
   },
-  "files": [
-    "dist"
-  ],
-  "devDependencies": {
-    "tsup": "^8.3.5",
-    "typescript": "^5.8.3",
-    "vitest": "^2.1.8"
-  },
+  "files": ["dist"],
   "scripts": {
     "build": "tsup",
     "type-check": "tsc --noEmit",
     "test": "vitest run",
     "clean": "rm -rf dist"
+  },
+  "devDependencies": {
+    "tsup": "^8.3.5",
+    "typescript": "^5.8.3",
+    "vitest": "^3.2.7"
   }
-}
+}

package/LICENSE

@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) 2026 Fabric
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
-THE SOFTWARE.