@ftptech/canton-agent-wallet 0.1.15 → 0.1.17

package/dist/verify-prepared.d.ts

@@ -38,6 +38,16 @@ interface DecodedNode {
     kind?: NodeKind | undefined;
     /** For exercise nodes: the choice id + chosen value (money-critical args). */
     exercise?: DecodedExercise | undefined;
+    /** For create nodes: the created template's `module:entity` qualified name
+     *  (package-id dropped — it changes across upgrades) + the raw `Create.argument`
+     *  Value bytes. Lets an arm pin a NUMERIC (non-party) field of a CONSEQUENCE
+     *  create — e.g. the `amount` recorded on a created `X402Escrow` — which the
+     *  party-leaf backstop cannot see. undefined for non-create nodes / a create
+     *  carrying no decodable template / argument. */
+    create?: {
+        templateQualifiedName?: string | undefined;
+        argument?: Uint8Array | undefined;
+    } | undefined;
     /** node_id references this node declares as its children (Exercise.children /
      *  Rollback.children). Used to prove reachability from the single root so no
      *  orphan (extra-leg) node can hide in DamlTransaction.nodes. */
@@ -165,6 +175,17 @@ export declare class PreparedTransferMismatchError extends Error {
  * even though the numeric value is identical. Pure string math (no float) so
  * large amounts keep full precision. A non-numeric input is returned as-is, so
  * it still mismatches (fail-closed).
+ *
+ * UNIT-BY-SCHEME invariant: BOTH sides of every amount compare here are
+ * on-ledger Daml **Decimals** — `t.amount` is decoded from the prepared tx's
+ * `Value.numeric` (always a ledger Decimal) and `expect.amount` is the caller's
+ * INTENDED ledger Decimal (the relay/agent path sources `opts.amount` as the
+ * Decimal, never the x402 wire atomic value). `canonicalAmount` therefore only
+ * pads Decimals; it must NEVER be fed an atomic integer (an atomic "1" would
+ * canonicalize to "1.0000000000" and silently mis-compare against the ledger
+ * "0.0000000001"). If a future caller ever sources `expect.amount` from an
+ * atomic-scheme wire, it MUST first convert via
+ * `wireAmountToLedgerDecimal(scheme, amount)` from @ftptech/x402-canton-core.
  */
 export declare function canonicalAmount(raw: string): string;
 export declare function assertPreparedTransferMatches(preparedTransactionB64: string, expect: PreparedTransferExpectation): void;
@@ -259,6 +280,216 @@ export interface PreparedAcceptExpectation {
  * the agent throws.
  */
 export declare function assertPreparedAcceptMatches(preparedTransactionB64: string, expect: PreparedAcceptExpectation): void;
+interface ExtractedAllocation {
+    sender: string;
+    receiver: string;
+    amount: string;
+    instrumentAdmin: string;
+    instrumentId: string;
+    executor: string;
+    /** Decimal-string of the Value.timestamp varint (µs since epoch), or
+     *  undefined if not present as a timestamp leaf. */
+    allocateBefore?: string;
+    settleBefore?: string;
+}
+/**
+ * Extract the allocation's money/escrow-critical leaves from the
+ * `AllocationFactory_Allocate` choice argument, BY TYPE at each Daml
+ * DECLARATION-ORDER POSITION (what the participant binds), NOT by label — with
+ * the same label/position-divergence guard the cip56/v1 arms use. Fails closed
+ * on any wrong-type / missing money-critical field.
+ */
+export declare function extractAllocation(chosenValue: Uint8Array): ExtractedAllocation;
+/** Caller-intent expectation for an `AllocationFactory_Allocate`. Every field is
+ *  CALLER INTENT — none is taken from the relay's resolve response. */
+export interface PreparedAllocationExpectation {
+    /** The agent's own party — must be the transferLeg.sender. */
+    sender: string;
+    /**
+     * OWN-PARTY PIN (hardening). The agent's OWN party id, known independently of
+     * the relay (the wallet's party). The `AllocationFactory_Allocate` controller
+     * IS the sender, so the extracted `transferLeg.sender` MUST equal this value.
+     *
+     * This is asserted FIRST — before the positional `sender` pin and the foreign-
+     * party backstop — and is the load-bearing defense against a sender/receiver
+     * TRANSPOSITION: `transferLeg.sender` and `transferLeg.receiver` are BOTH Party
+     * leaves at ADJACENT declaration-order positions (field order CONFIRMED against
+     * canonical Splice source — see the field-order authority note above
+     * `extractAllocation`). If a malicious relay transposes those two leaves, it
+     * could otherwise present the agent as
+     * the RECEIVER while a position-pin alone might still line up. Pinning the
+     * extracted sender to the agent's own party fails CLOSED on ANY such transposition
+     * or wrong-position sender, REGARDLESS of field order — defense-in-depth, without
+     * needing the live vector. REQUIRED: callers thread `wallet.party` here.
+     */
+    expectedSender: string;
+    /** The intended recipient (merchant payTo from the 402). */
+    receiver: string;
+    /** The EXACT amount string the agent asked to pay. */
+    amount: string;
+    /** The instrument id the agent expects (e.g. "Amulet"). Caller intent. */
+    instrumentId: string;
+    /** The facilitator party that MUST be settlement.executor (extra.executor =
+     *  extra.facilitatorParty). Pinned by exact equality, fail-closed. This is the
+     *  escrow-trust anchor: only the executor (+ baked-in sender/receiver auth) can
+     *  later move the locked funds, so a relay naming an ATTACKER executor must be
+     *  refused. */
+    executor: string;
+    /** Optional, independently-trusted instrument admin (DSO) to pin AND exclude
+     *  from the foreign-party backstop outside its root position. */
+    instrumentAdmin?: string;
+    /** Optional, caller-intent synchronizer id. Pins SIGNED Metadata.synchronizer_id. */
+    synchronizerId?: string;
+    /** Optional, caller-intent template `module:entity` of the AllocationFactory. */
+    templateQualifiedName?: string;
+    /** Optional, caller-intent contract id of the AllocationFactory the exercise
+     *  targets. Pins Exercise.contract_id (resolve→prepare TOCTOU). */
+    expectedContractId?: string;
+    /** Inject Date.now() for testability of the timing sanity checks. */
+    nowMs?: number;
+}
+/**
+ * Assert the relay-returned `preparedTransaction` encodes EXACTLY the
+ * `AllocationFactory_Allocate` the agent intended. Throws
+ * `PreparedTransferMismatchError` on any mismatch and `PreparedDecodeError` if
+ * the bytes are not a decodable PreparedTransaction carrying a single allocate
+ * exercise. Call BEFORE signing the hash. Fail-closed: anything not positively
+ * proven to match the intent throws.
+ */
+export declare function assertPreparedAllocationMatches(preparedTransactionB64: string, expect: PreparedAllocationExpectation): void;
+/** Caller-intent expectation for an `Allocation_Withdraw` (reclaim) prepare. */
+export interface PreparedAllocationWithdrawExpectation {
+    /** The agent's own party — must be the authoritative submitter (act_as) AND
+     *  the choice's sole controller (allocation.transferLeg.sender). The ONLY
+     *  party permitted anywhere in the signed transaction. */
+    selfParty: string;
+    /** Caller intent: the AmuletAllocation cid being reclaimed. The root
+     *  exercise's `Exercise.contract_id` MUST equal this — REQUIRED (not optional
+     *  as in the pay arms), so the relay cannot point the withdraw at a different
+     *  contract than the one the caller resolved (resolve→prepare TOCTOU). */
+    allocationCid: string;
+    /** Inject Date.now() for testability of the timing sanity checks. */
+    nowMs?: number;
+    /** CALLER-INTENT reference parties that legitimately appear in a lock-expiry
+     *  withdraw but are NOT the sender: the allocation's executor / lock holder
+     *  (the facilitator) and the instrument admin (DSO). When the choice-context
+     *  carries `expire-lock`, the unlock + disclosed AmuletRules/round reference
+     *  these two parties, so they must be permitted — but ONLY as caller-pinned
+     *  values (never relay-derived), so a relay cannot smuggle a foreign recipient
+     *  by aliasing it to one of these. Omit on the empty-context (no-lock) path. */
+    facilitator?: string;
+    instrumentAdmin?: string;
+    /** CALLER-INTENT allocation RECEIVER (the merchant). In a "Design B" DIRECT
+     *  allocation the receiver is the MERCHANT (not the facilitator, as in the
+     *  "Design A" escrow where receiver == executor == facilitator), so the
+     *  legitimate on-ledger `Allocation_Withdraw` expire-lock choice-context
+     *  references the merchant party. When supplied, EXACTLY this one party is
+     *  added to the allowed-party set for the withdraw backstop (alongside
+     *  self/facilitator/instrumentAdmin) — never a wildcard. It MUST be pinned to
+     *  the allocation's known receiver by the caller (`reclaimAllocation`), never
+     *  taken from the relay, so a relay cannot smuggle a foreign recipient by
+     *  aliasing it to this value. Omit for Design A (receiver == facilitator) /
+     *  the empty-context (no-lock) path — behavior is then exactly as before. */
+    receiver?: string;
+}
+/**
+ * Assert the relay-returned `preparedTransaction` for the reclaim path encodes
+ * EXACTLY a single `Allocation_Withdraw` exercise, on the caller's own
+ * allocation cid, submitted by the agent — and is NOT a different (value-moving)
+ * choice, a withdraw of a different contract, an outbound drain, or a
+ * foreign-party submission. Throws `PreparedTransferMismatchError` on any
+ * mismatch and `PreparedDecodeError` if the bytes are not a decodable
+ * PreparedTransaction. Call BEFORE signing the hash. Fail-closed: anything not
+ * positively proven to be a self-withdraw of the caller's own allocation throws.
+ */
+export declare function assertPreparedAllocationWithdrawMatches(preparedTransactionB64: string, expect: PreparedAllocationWithdrawExpectation): void;
+/** Caller-intent expectation for an `X402EscrowOffer_Accept` (escrow ACCEPT). */
+export interface PreparedEscrowAcceptExpectation {
+    /** The agent's own party — the SENDER. Must be the authoritative submitter
+     *  (act_as) AND the choice's sole controller. Also an allowed escrow party. */
+    selfParty: string;
+    /** Caller intent: the `X402EscrowOffer` cid being accepted. The root exercise's
+     *  `Exercise.contract_id` MUST equal this — REQUIRED (not optional as in the pay
+     *  arms): the relay cannot point the accept at a different offer than the one the
+     *  caller resolved (resolve→prepare TOCTOU). */
+    offerCid: string;
+    /** Caller intent: the facilitator party. The created `X402Escrow` is signed by
+     *  {facilitator, sender}; the facilitator is the party that later settles the
+     *  allocation ALONE, so a relay-substituted facilitator could steer settlement
+     *  to an attacker. Pinned by exact equality and added to the allowed-party set;
+     *  a different facilitator anywhere is rejected. REQUIRED. */
+    facilitator: string;
+    /** Optional caller intent: the merchant party recorded (reference-only) on the
+     *  created `X402Escrow`. When the honest offer/escrow names a distinct merchant
+     *  party, the create's argument carries it — supply it so the backstop allows it;
+     *  omit it only when merchant == facilitator/sender (Design A collapses roles).
+     *  A relay cannot widen the allowed set with it: it is pinned to caller intent. */
+    merchant?: string;
+    /** Optional caller intent: the instrument admin (DSO) recorded (reference-only)
+     *  on the created `X402Escrow`. Supply the independently-trusted DSO so the
+     *  create's instrumentAdmin field is allowed; omit when it coincides with an
+     *  already-allowed party. Never taken from the relay. */
+    instrumentAdmin?: string;
+    /** Optional caller intent: the Decimal `amount` the sender intends the escrow to
+     *  settle. When supplied, the created `X402Escrow`'s recorded `amount` (a Numeric
+     *  the party-leaf backstop CANNOT see) is pinned by canonical equality — closing
+     *  the amount-swap bypass where a malicious/buggy facilitator authored the offer
+     *  with an inflated amount and the sender blind-signs the accept, durably
+     *  authorizing an escrow that `X402Escrow_Settle` later settles at the larger
+     *  value (the on-ledger settle pins `leg.amount == escrow.amount`). Omit only when
+     *  the caller has no intended amount to assert. Never taken from the relay. */
+    amount?: string;
+    /** Optional caller-intent template `module:entity` of the `X402EscrowOffer`
+     *  (e.g. "X402Escrow:X402EscrowOffer"). Pins Exercise.template_id. */
+    templateQualifiedName?: string;
+    /** Optional caller-intent synchronizer id. Pins SIGNED Metadata.synchronizer_id. */
+    synchronizerId?: string;
+    /** Inject Date.now() for testability of the timing sanity checks. */
+    nowMs?: number;
+}
+/**
+ * Assert the relay-returned `preparedTransaction` for the escrow-accept path
+ * encodes EXACTLY a single `X402EscrowOffer_Accept` exercise, on the caller's own
+ * offer cid, submitted by the agent (sender) — and is NOT a different
+ * (value-moving) choice, an accept of a different contract, an outbound drain, or
+ * a foreign-party submission, and creates an `X402Escrow` only among the
+ * caller-intended parties. Throws `PreparedTransferMismatchError` on any mismatch
+ * and `PreparedDecodeError` if the bytes are not a decodable PreparedTransaction.
+ * Call BEFORE signing the hash. Fail-closed: anything not positively proven to be
+ * a self-submitted accept of the caller's own offer throws.
+ */
+export declare function assertPreparedEscrowAcceptMatches(preparedTransactionB64: string, expect: PreparedEscrowAcceptExpectation): void;
+/** Caller-intent expectation for a `SenderConsent` / `MerchantConsent` create. */
+export interface PreparedConsentCreateExpectation {
+    /** The agent's own party — the SIGNING party (sole signatory + sole submitter).
+     *  The created consent's [0] self-party (sender for SenderConsent, merchant for
+     *  MerchantConsent) MUST equal this; it is also the ONLY non-facilitator party
+     *  allowed anywhere. */
+    selfParty: string;
+    /** Caller intent: the facilitator party the consent names (its [1] field +
+     *  observer). A relay-substituted facilitator could later mint a both-party
+     *  consent and settle the agent's allocations, so it is pinned by exact equality
+     *  and is the only OTHER allowed party. REQUIRED. */
+    facilitator: string;
+    /** Which standing consent this is — selects the created-template qualified-name
+     *  pin and the [0] self-party field label ("sender" | "merchant"). */
+    consent: "sender" | "merchant";
+    /** Optional caller-intent synchronizer id. Pins SIGNED Metadata.synchronizer_id. */
+    synchronizerId?: string;
+    /** Inject Date.now() for testability of the timing sanity checks. */
+    nowMs?: number;
+}
+/**
+ * Assert the relay-returned `preparedTransaction` for the x402-direct consent-create
+ * path encodes EXACTLY a single `SenderConsent` / `MerchantConsent` create, signed
+ * by the agent, naming {selfParty, facilitator} — and is NOT a value-moving choice,
+ * a second leg, a relay-substituted facilitator, or a foreign-party submission.
+ * Throws `PreparedTransferMismatchError` on any mismatch and `PreparedDecodeError`
+ * if the bytes are not a decodable PreparedTransaction. Call BEFORE signing. Fail-
+ * closed: anything not positively proven to be a self-submitted consent create among
+ * exactly {selfParty, facilitator} throws.
+ */
+export declare function assertPreparedConsentCreateMatches(preparedTransactionB64: string, expect: PreparedConsentCreateExpectation): void;
 /**
  * How to bind the relay-returned `hash` to the `preparedTransaction` bytes the
  * agent just structurally validated. Exactly one of these must hold for a

package/dist/verify-prepared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify-prepared.d.ts","sourceRoot":"","sources":["../src/verify-prepared.ts"],"names":[],"mappings":"AA0wBA,UAAU,eAAe;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,UAAU,CAAC;IACxB;;;;kEAI8D;IAC9D,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC;;;;qDAIiD;IACjD,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5C;AAED;iFACiF;AACjF,KAAK,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,GAAG,UAAU,GAAG,cAAc,CAAC;AAE9E;;;;;;;GAOG;AACH,UAAU,WAAW;IACnB,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;IACf;;;qCAGiC;IACjC,iBAAiB,EAAE,OAAO,CAAC;IAC3B;0EACsE;IACtE,IAAI,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACvC;;qEAEiE;IACjE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB;;;+EAG2E;IAC3E,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB;;;;;;qEAMiE;IACjE,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,UAAU,eAAe;IACvB,+EAA+E;IAC/E,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,sEAAsE;IACtE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,gFAAgF;IAChF,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB;6EACyE;IACzE,SAAS,EAAE,eAAe,EAAE,CAAC;IAC7B;qEACiE;IACjE,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC;;mFAE+E;IAC/E,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC;;;2EAGuE;IACvE,mBAAmB,EAAE,UAAU,EAAE,CAAC;IAClC;;;;;;sEAMkE;IAClE,sBAAsB,EAAE,MAAM,EAAE,CAAC;CAClC;AA6KD;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,sBAAsB,EAAE,MAAM,GAAG,eAAe,CAsI9E;AA+eD,UAAU,iBAAiB;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;CACtB;AAyED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,UAAU,GAAG,iBAAiB,CAwD1E;AAMD,MAAM,WAAW,2BAA2B;IAC1C,2EAA2E;IAC3E,MAAM,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,QAAQ,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;OAMG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB;;;;mFAI+E;IAC/E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;kCAG8B;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;+CAG2C;IAC3C,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;mFAG+E;IAC/E,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,6BAA8B,SAAQ,KAAK;gBAC1C,OAAO,EAAE,MAAM;CAI5B;AAyBD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAUnD;AAED,wBAAgB,6BAA6B,CAC3C,sBAAsB,EAAE,MAAM,EAC9B,MAAM,EAAE,2BAA2B,GAClC,IAAI,CA0FN;AAyCD,UAAU,8BAA8B;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd;;gEAE4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;kFAC8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,4BAA4B,CAC1C,WAAW,EAAE,UAAU,GACtB,8BAA8B,CAwDhC;AAED;uEACuE;AACvE,MAAM,WAAW,wCAAwC;IACvD,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,MAAM,EAAE,MAAM,CAAC;IACf;mFAC+E;IAC/E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;uCAMmC;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;uFAEmF;IACnF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;+DAE2D;IAC3D,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;sDAGkD;IAClD,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,wBAAgB,0CAA0C,CACxD,sBAAsB,EAAE,MAAM,EAC9B,MAAM,EAAE,wCAAwC,GAC/C,IAAI,CAyIN;AAqCD,oFAAoF;AACpF,MAAM,WAAW,yBAAyB;IACxC,4EAA4E;IAC5E,SAAS,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CACzC,sBAAsB,EAAE,MAAM,EAC9B,MAAM,EAAE,yBAAyB,GAChC,IAAI,CAyBN;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;;;;;;;;;;;;;;OAiBG;IACH,aAAa,CAAC,EAAE,CAAC,sBAAsB,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAC7E;;;;;;;;;;;;OAYG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,iFAAiF;AACjF,qBAAa,4BAA6B,SAAQ,KAAK;gBACzC,OAAO,EAAE,MAAM;CAI5B;AAgBD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAsB,iBAAiB,CACrC,sBAAsB,EAAE,MAAM,EAC9B,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,IAAI,CAAC,CA4Df;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,sBAAsB,EAAE,MAAM,EAC9B,OAAO,EAAE,MAAM,GACd,OAAO,CAIT;AAoDD;6EAC6E;AAC7E,qBAAa,+BAAgC,SAAQ,KAAK;gBAC5C,OAAO,EAAE,MAAM;CAI5B;AAED,uEAAuE;AACvE,MAAM,WAAW,6BAA6B;IAC5C,+EAA+E;IAC/E,gBAAgB,EAAE,MAAM,CAAC;IACzB,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AA+BD;;;;GAIG;AACH,wBAAgB,gCAAgC,CAC9C,yBAAyB,EAAE,MAAM,EAAE,EACnC,MAAM,EAAE,6BAA6B,GACpC,IAAI,CA0EN"}
+{"version":3,"file":"verify-prepared.d.ts","sourceRoot":"","sources":["../src/verify-prepared.ts"],"names":[],"mappings":"AAy2BA,UAAU,eAAe;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,UAAU,CAAC;IACxB;;;;kEAI8D;IAC9D,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC;;;;qDAIiD;IACjD,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5C;AAED;iFACiF;AACjF,KAAK,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,GAAG,UAAU,GAAG,cAAc,CAAC;AAE9E;;;;;;;GAOG;AACH,UAAU,WAAW;IACnB,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;IACf;;;qCAGiC;IACjC,iBAAiB,EAAE,OAAO,CAAC;IAC3B;0EACsE;IACtE,IAAI,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACvC;;;;;qDAKiD;IACjD,MAAM,CAAC,EACH;QAAE,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,EAAE,UAAU,GAAG,SAAS,CAAA;KAAE,GACjF,SAAS,CAAC;IACd;;qEAEiE;IACjE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB;;;+EAG2E;IAC3E,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB;;;;;;qEAMiE;IACjE,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,UAAU,eAAe;IACvB,+EAA+E;IAC/E,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,sEAAsE;IACtE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,gFAAgF;IAChF,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB;6EACyE;IACzE,SAAS,EAAE,eAAe,EAAE,CAAC;IAC7B;qEACiE;IACjE,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC;;mFAE+E;IAC/E,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC;;;2EAGuE;IACvE,mBAAmB,EAAE,UAAU,EAAE,CAAC;IAClC;;;;;;sEAMkE;IAClE,sBAAsB,EAAE,MAAM,EAAE,CAAC;CAClC;AA6LD;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,sBAAsB,EAAE,MAAM,GAAG,eAAe,CAuI9E;AA+oBD,UAAU,iBAAiB;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;CACtB;AAyED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,UAAU,GAAG,iBAAiB,CAwD1E;AAMD,MAAM,WAAW,2BAA2B;IAC1C,2EAA2E;IAC3E,MAAM,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,QAAQ,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;OAMG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB;;;;mFAI+E;IAC/E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;kCAG8B;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;+CAG2C;IAC3C,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;mFAG+E;IAC/E,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,6BAA8B,SAAQ,KAAK;gBAC1C,OAAO,EAAE,MAAM;CAI5B;AAyBD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAUnD;AAED,wBAAgB,6BAA6B,CAC3C,sBAAsB,EAAE,MAAM,EAC9B,MAAM,EAAE,2BAA2B,GAClC,IAAI,CA0FN;AAyCD,UAAU,8BAA8B;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd;;gEAE4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;kFAC8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,4BAA4B,CAC1C,WAAW,EAAE,UAAU,GACtB,8BAA8B,CAwDhC;AAED;uEACuE;AACvE,MAAM,WAAW,wCAAwC;IACvD,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,MAAM,EAAE,MAAM,CAAC;IACf;mFAC+E;IAC/E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;uCAMmC;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;uFAEmF;IACnF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;+DAE2D;IAC3D,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;sDAGkD;IAClD,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,wBAAgB,0CAA0C,CACxD,sBAAsB,EAAE,MAAM,EAC9B,MAAM,EAAE,wCAAwC,GAC/C,IAAI,CAyIN;AAqCD,oFAAoF;AACpF,MAAM,WAAW,yBAAyB;IACxC,4EAA4E;IAC5E,SAAS,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CACzC,sBAAsB,EAAE,MAAM,EAC9B,MAAM,EAAE,yBAAyB,GAChC,IAAI,CAyBN;AAsFD,UAAU,mBAAmB;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB;wDACoD;IACpD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,UAAU,GAAG,mBAAmB,CAmE9E;AAED;uEACuE;AACvE,MAAM,WAAW,6BAA6B;IAC5C,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;;;;;;;;;;OAgBG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,MAAM,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,YAAY,EAAE,MAAM,CAAC;IACrB;;;;mBAIe;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB;qEACiE;IACjE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qFAAqF;IACrF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iFAAiF;IACjF,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;uEACmE;IACnE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,wBAAgB,+BAA+B,CAC7C,sBAAsB,EAAE,MAAM,EAC9B,MAAM,EAAE,6BAA6B,GACpC,IAAI,CAgLN;AA+DD,gFAAgF;AAChF,MAAM,WAAW,qCAAqC;IACpD;;8DAE0D;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB;;;8EAG0E;IAC1E,aAAa,EAAE,MAAM,CAAC;IACtB,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;oFAMgF;IAChF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;;;;iFAU6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;GASG;AACH,wBAAgB,uCAAuC,CACrD,sBAAsB,EAAE,MAAM,EAC9B,MAAM,EAAE,qCAAqC,GAC5C,IAAI,CAyEN;AAmMD,iFAAiF;AACjF,MAAM,WAAW,+BAA+B;IAC9C;mFAC+E;IAC/E,SAAS,EAAE,MAAM,CAAC;IAClB;;;oDAGgD;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;kEAI8D;IAC9D,WAAW,EAAE,MAAM,CAAC;IACpB;;;;uFAImF;IACnF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;6DAGyD;IACzD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;mFAO+E;IAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;0EACsE;IACtE,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,oFAAoF;IACpF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iCAAiC,CAC/C,sBAAsB,EAAE,MAAM,EAC9B,MAAM,EAAE,+BAA+B,GACtC,IAAI,CAgFN;AA4CD,kFAAkF;AAClF,MAAM,WAAW,gCAAgC;IAC/C;;;4BAGwB;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB;;;yDAGqD;IACrD,WAAW,EAAE,MAAM,CAAC;IACpB;0EACsE;IACtE,OAAO,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC/B,oFAAoF;IACpF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AA+BD;;;;;;;;;GASG;AACH,wBAAgB,kCAAkC,CAChD,sBAAsB,EAAE,MAAM,EAC9B,MAAM,EAAE,gCAAgC,GACvC,IAAI,CAyEN;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;;;;;;;;;;;;;;OAiBG;IACH,aAAa,CAAC,EAAE,CAAC,sBAAsB,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAC7E;;;;;;;;;;;;OAYG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,iFAAiF;AACjF,qBAAa,4BAA6B,SAAQ,KAAK;gBACzC,OAAO,EAAE,MAAM;CAI5B;AAgBD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAsB,iBAAiB,CACrC,sBAAsB,EAAE,MAAM,EAC9B,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,IAAI,CAAC,CA4Df;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,sBAAsB,EAAE,MAAM,EAC9B,OAAO,EAAE,MAAM,GACd,OAAO,CAIT;AAoDD;6EAC6E;AAC7E,qBAAa,+BAAgC,SAAQ,KAAK;gBAC5C,OAAO,EAAE,MAAM;CAI5B;AAED,uEAAuE;AACvE,MAAM,WAAW,6BAA6B;IAC5C,+EAA+E;IAC/E,gBAAgB,EAAE,MAAM,CAAC;IACzB,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AA+BD;;;;GAIG;AACH,wBAAgB,gCAAgC,CAC9C,yBAAyB,EAAE,MAAM,EAAE,EACnC,MAAM,EAAE,6BAA6B,GACpC,IAAI,CA0EN"}