@grantex/sdk 0.5.1 → 0.7.0

package/dist/verify.js

@@ -1,5 +1,61 @@
 import { createRemoteJWKSet, jwtVerify, decodeJwt } from 'jose';
+import { missingScopes } from './scopes.js';
 import { GrantexTokenError } from './errors.js';
+/** Claim holding Grantex's grant record fields (spec/grant-token-0.6.md). */
+export const GRANT_CLAIM = 'urn:grantex:grant';
+/**
+ * Legacy claim aliases and the standard claims that replace them. Reading an
+ * alias is deprecated in 0.6 and off by default from 0.7.
+ */
+export const LEGACY_CLAIM_ALIASES = Object.freeze({
+    agt: `${GRANT_CLAIM}.agent_did`,
+    dev: `${GRANT_CLAIM}.developer_id`,
+    grnt: `${GRANT_CLAIM}.grant_id`,
+    scp: 'scope',
+    parentAgt: 'act.sub',
+    parentGrnt: `${GRANT_CLAIM}.parent_grant_id`,
+    delegationDepth: `${GRANT_CLAIM}.delegation_depth`,
+});
+const MAX_ACTOR_CHAIN_DEPTH = 10;
+const warnedLegacyAliases = new Set();
+/** @internal Forget which legacy-alias warnings were emitted. Intended for tests. */
+export function clearLegacyClaimWarnings() {
+    warnedLegacyAliases.clear();
+}
+function warnLegacyAliases(aliases) {
+    for (const alias of aliases) {
+        if (warnedLegacyAliases.has(alias))
+            continue;
+        warnedLegacyAliases.add(alias);
+        const message = `Grant token claim "${alias}" is a legacy alias of ${LEGACY_CLAIM_ALIASES[alias]}. `
+            + 'Reading legacy claim aliases is deprecated and stops by default in 0.7; see docs/migration-0.6.md.';
+        if (typeof process !== 'undefined' && typeof process.emitWarning === 'function') {
+            process.emitWarning(message, { type: 'DeprecationWarning', code: 'GRANTEX_LEGACY_CLAIM' });
+        }
+        else if (typeof console !== 'undefined') {
+            console.warn(`DeprecationWarning: ${message}`);
+        }
+    }
+}
+/**
+ * Signature algorithms a grant token may use. Each maps to one key type (RSA
+ * for RS256, EC P-256 for ES256), and JOSE only selects a JWK Set key of that
+ * type, published for that algorithm, under the token's `kid`. `none`, the
+ * HMAC family and every other algorithm are refused.
+ */
+export const GRANT_TOKEN_ALGORITHMS = ['RS256', 'ES256'];
+function resolveAlgorithms(requested) {
+    if (requested === undefined)
+        return [...GRANT_TOKEN_ALGORITHMS];
+    if (!Array.isArray(requested) || requested.length === 0) {
+        throw new GrantexTokenError('algorithms must list at least one of RS256, ES256');
+    }
+    const unsupported = requested.filter((alg) => !GRANT_TOKEN_ALGORITHMS.includes(alg));
+    if (unsupported.length > 0) {
+        throw new GrantexTokenError(`Unsupported grant token algorithm ${unsupported.map(String).join(', ')}; allowed: ${GRANT_TOKEN_ALGORITHMS.join(', ')}`);
+    }
+    return [...new Set(requested)];
+}
 const PRODUCTION_JWKS_URI = 'https://api.grantex.dev/.well-known/jwks.json';
 const PRODUCTION_ISSUER = 'https://grantex.dev';
 const MAX_REMOTE_JWKS_RESOLVERS = 64;
@@ -31,11 +87,13 @@ export function clearRemoteJwksCache() {
 }
 /**
  * Verify a Grantex grant token locally using JWKS retrieved from the configured URI.
- * Algorithm is fixed to RS256 per SPEC §11 and cannot be overridden.
+ * The signature must be RS256 or ES256 (`GRANT_TOKEN_ALGORITHMS`); `options.algorithms`
+ * can narrow that list but never widen it.
  *
  * @throws {GrantexTokenError} if the token is invalid, expired, or missing required scopes.
  */
 export async function verifyGrantToken(token, options) {
+    const algorithms = resolveAlgorithms(options.algorithms);
     let jwksUri = options.jwksUri;
     let expectedIssuer = options.issuer;
     if (options.issuerDid?.startsWith('did:web:')) {
@@ -58,11 +116,14 @@ export async function verifyGrantToken(token, options) {
         }
     }
     const jwks = getRemoteJwksResolver(jwksUrl);
+    const legacyClaims = options.legacyClaims ?? true;
     let payload;
     try {
         const jwtOptions = {
-            algorithms: ['RS256'],
+            algorithms,
             issuer: expectedIssuer,
+            // Standard-only verification also requires the RFC 9068 token type.
+            ...(legacyClaims ? {} : { typ: 'at+jwt' }),
             ...(options.clockTolerance !== undefined
                 ? { clockTolerance: options.clockTolerance }
                 : {}),
@@ -77,14 +138,23 @@ export async function verifyGrantToken(token, options) {
         const message = err instanceof Error ? err.message : String(err);
         throw new GrantexTokenError(`Grant token verification failed: ${message}`);
     }
+    // Validate the claim shape before touching `scp`. A signed-but-foreign JWT
+    // from the same issuer (e.g. a session or OAuth access token) may carry no
+    // `scp`, or a string `scp` on which `.includes()` degrades to a substring
+    // match. Either way this must surface as a GrantexTokenError, not a
+    // TypeError or a false positive.
+    const verified = normalizeGrantClaims(payload, legacyClaims);
+    checkProofOfPossession(verified, options);
+    if (verified.legacyClaimsUsed !== undefined)
+        warnLegacyAliases(verified.legacyClaimsUsed);
     const requiredScopes = options.requiredScopes ?? [];
     if (requiredScopes.length > 0) {
-        const missing = requiredScopes.filter((s) => !payload.scp.includes(s));
+        const missing = missingScopes(verified.scopes, requiredScopes);
         if (missing.length > 0) {
             throw new GrantexTokenError(`Grant token is missing required scopes: ${missing.join(', ')}`);
         }
     }
-    return payloadToVerifiedGrant(payload);
+    return verified;
 }
 /**
  * Decode a grant token (without re-verifying the signature) and map it to
@@ -102,34 +172,171 @@ export function mapOnlineVerifyToVerifiedGrant(token) {
         const message = err instanceof Error ? err.message : String(err);
         throw new GrantexTokenError(`Failed to decode grant token: ${message}`);
     }
-    return claimsToVerifiedGrant(payload);
+    return normalizeGrantClaims(payload, true);
+}
+/**
+ * Map grant claims to a `VerifiedGrant`: standard claims first, legacy aliases
+ * where the standard claim is absent (unless `legacyClaims` is false). Used
+ * for `/v1/grants/verify` responses, which carry the aliases by design, so it
+ * emits no deprecation warning.
+ *
+ * @throws {GrantexTokenError} a required claim is missing, a claim is malformed,
+ *   or a standard claim and its alias disagree.
+ */
+export function claimsToVerifiedGrant(payload, options = {}) {
+    return normalizeGrantClaims(payload, options.legacyClaims ?? true);
+}
+function isPlainObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function parseActor(value) {
+    let current = value;
+    for (let depth = 1;; depth += 1) {
+        if (!isPlainObject(current) || typeof current['sub'] !== 'string' || current['sub'].length === 0) {
+            throw new GrantexTokenError('Grant token act claim must be an object with a non-empty string sub');
+        }
+        if (current['act'] === undefined)
+            break;
+        if (depth >= MAX_ACTOR_CHAIN_DEPTH) {
+            throw new GrantexTokenError(`Grant token act chain is deeper than ${MAX_ACTOR_CHAIN_DEPTH}`);
+        }
+        current = current['act'];
+    }
+    return value;
 }
-export function claimsToVerifiedGrant(payload) {
-    if (typeof payload.jti !== 'string' ||
-        typeof payload.sub !== 'string' ||
-        typeof payload.agt !== 'string' ||
-        typeof payload.dev !== 'string' ||
-        !Array.isArray(payload.scp) ||
-        typeof payload.iat !== 'number' ||
-        typeof payload.exp !== 'number') {
-        throw new GrantexTokenError('Grant token is missing required claims (jti, sub, agt, dev, scp, iat, exp)');
+function stringClaim(record, name, label) {
+    const value = record[name];
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== 'string' || value.length === 0) {
+        throw new GrantexTokenError(`Grant token claim ${label} must be a non-empty string`);
+    }
+    return value;
+}
+function depthClaim(record, name, label) {
+    const value = record[name];
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== 'number' || !Number.isSafeInteger(value) || value < 0) {
+        throw new GrantexTokenError(`Grant token claim ${label} must be a non-negative integer`);
+    }
+    return value;
+}
+function checkProofOfPossession(grant, options) {
+    if (options.requireProofOfPossession === true && options.proofJkt === undefined) {
+        throw new GrantexTokenError('Proof of possession is required but no proof key thumbprint (proofJkt) was given');
+    }
+    if (options.proofJkt === undefined)
+        return;
+    const jkt = grant.cnf?.jkt;
+    if (typeof jkt !== 'string') {
+        throw new GrantexTokenError('Grant token is not key-bound (no cnf.jkt) but proof of possession is required');
+    }
+    const a = new TextEncoder().encode(jkt);
+    const b = new TextEncoder().encode(options.proofJkt);
+    let diff = a.length ^ b.length;
+    for (let i = 0; i < Math.max(a.length, b.length); i += 1)
+        diff |= (a[i] ?? 0) ^ (b[i] ?? 0);
+    if (diff !== 0)
+        throw new GrantexTokenError('Grant token cnf.jkt does not match the proof key');
+}
+const NON_NULLABLE_CLAIMS = [GRANT_CLAIM, 'scope', 'scp', 'act', 'cnf', 'client_id', 'aud', 'authorization_details'];
+function normalizeGrantClaims(payload, legacyClaims) {
+    // A claim present with a null value is refused, never treated as absent.
+    for (const name of NON_NULLABLE_CLAIMS) {
+        if (payload[name] === null)
+            throw new GrantexTokenError(`Grant token claim ${name} must not be null`);
+    }
+    const used = [];
+    const read = (alias, standard, legacy) => {
+        if (!legacyClaims)
+            return standard;
+        const aliasValue = legacy();
+        if (standard !== undefined && aliasValue !== undefined
+            && JSON.stringify(standard) !== JSON.stringify(aliasValue)) {
+            throw new GrantexTokenError(`Grant token claim ${LEGACY_CLAIM_ALIASES[alias]} disagrees with its legacy alias ${alias}`);
+        }
+        if (standard === undefined && aliasValue !== undefined)
+            used.push(alias);
+        return standard ?? aliasValue;
+    };
+    const rawGrant = payload[GRANT_CLAIM];
+    if (rawGrant !== undefined && !isPlainObject(rawGrant)) {
+        throw new GrantexTokenError(`Grant token claim ${GRANT_CLAIM} must be an object`);
+    }
+    const grant = rawGrant ?? {};
+    const rawScope = payload['scope'];
+    if (rawScope !== undefined && typeof rawScope !== 'string') {
+        throw new GrantexTokenError('Grant token claim scope must be a space-delimited string');
+    }
+    const legacyScopes = () => {
+        const scp = payload['scp'];
+        if (scp === undefined)
+            return undefined;
+        if (!Array.isArray(scp) || scp.some((s) => typeof s !== 'string')) {
+            throw new GrantexTokenError('Grant token claim scp must be an array of strings');
+        }
+        return scp;
+    };
+    let scopes;
+    if (legacyClaims && rawGrant === undefined && payload['scp'] !== undefined) {
+        // A pre-0.6 token: scope, when present, is a lossy join of scp.
+        scopes = legacyScopes();
+        used.push('scp');
+    }
+    else {
+        scopes = read('scp', rawScope?.split(' ').filter((s) => s.length > 0), legacyScopes);
+    }
+    const agentDid = read('agt', stringClaim(grant, 'agent_did', `${GRANT_CLAIM}.agent_did`), () => stringClaim(payload, 'agt', 'agt'));
+    const developerId = read('dev', stringClaim(grant, 'developer_id', `${GRANT_CLAIM}.developer_id`), () => stringClaim(payload, 'dev', 'dev'));
+    const grantId = read('grnt', stringClaim(grant, 'grant_id', `${GRANT_CLAIM}.grant_id`), () => stringClaim(payload, 'grnt', 'grnt'));
+    const parentGrantId = read('parentGrnt', stringClaim(grant, 'parent_grant_id', `${GRANT_CLAIM}.parent_grant_id`), () => stringClaim(payload, 'parentGrnt', 'parentGrnt'));
+    const delegationDepth = read('delegationDepth', depthClaim(grant, 'delegation_depth', `${GRANT_CLAIM}.delegation_depth`), () => depthClaim(payload, 'delegationDepth', 'delegationDepth'));
+    const act = payload['act'] === undefined ? undefined : parseActor(payload['act']);
+    const parentAgentDid = read('parentAgt', parentGrantId !== undefined || delegationDepth !== undefined ? act?.sub : undefined, () => stringClaim(payload, 'parentAgt', 'parentAgt'));
+    const jti = payload['jti'];
+    const sub = payload['sub'];
+    const iat = payload['iat'];
+    const exp = payload['exp'];
+    if (typeof jti !== 'string' || typeof sub !== 'string' || typeof iat !== 'number' || typeof exp !== 'number'
+        || scopes === undefined || agentDid === undefined || developerId === undefined) {
+        throw new GrantexTokenError(legacyClaims
+            ? 'Grant token is missing required claims (jti, sub, iat, exp, scope or scp, agent_did or agt, developer_id or dev)'
+            : `Grant token is missing required claims (jti, sub, iat, exp, scope, ${GRANT_CLAIM}.agent_did, ${GRANT_CLAIM}.developer_id)`);
+    }
+    const clientId = payload['client_id'];
+    if (clientId !== undefined && (typeof clientId !== 'string' || clientId.length === 0)) {
+        throw new GrantexTokenError('Grant token claim client_id must be a non-empty string');
+    }
+    const cnf = payload['cnf'];
+    if (cnf !== undefined && !isPlainObject(cnf)) {
+        throw new GrantexTokenError('Grant token claim cnf must be an object');
+    }
+    const aud = payload['aud'];
+    if (aud !== undefined && typeof aud !== 'string'
+        && !(Array.isArray(aud) && aud.every((value) => typeof value === 'string'))) {
+        throw new GrantexTokenError('Grant token claim aud must be a string or an array of strings');
     }
     return {
-        tokenId: payload.jti,
-        grantId: payload.grnt ?? payload.jti,
-        principalId: payload.sub,
-        agentDid: payload.agt,
-        developerId: payload.dev,
-        ...(payload.client_id !== undefined ? { clientId: payload.client_id } : {}),
-        scopes: payload.scp,
-        issuedAt: payload.iat,
-        expiresAt: payload.exp,
-        ...(payload.parentAgt !== undefined ? { parentAgentDid: payload.parentAgt } : {}),
-        ...(payload.parentGrnt !== undefined ? { parentGrantId: payload.parentGrnt } : {}),
-        ...(payload.delegationDepth !== undefined ? { delegationDepth: payload.delegationDepth } : {}),
+        tokenId: jti,
+        grantId: grantId ?? jti,
+        principalId: sub,
+        agentDid,
+        developerId,
+        ...(typeof clientId === 'string' ? { clientId } : {}),
+        scopes,
+        issuedAt: iat,
+        expiresAt: exp,
+        ...(parentAgentDid !== undefined ? { parentAgentDid } : {}),
+        ...(parentGrantId !== undefined ? { parentGrantId } : {}),
+        ...(delegationDepth !== undefined ? { delegationDepth } : {}),
+        ...(payload['authorization_details'] !== undefined
+            ? { authorizationDetails: payload['authorization_details'] }
+            : {}),
+        ...(act !== undefined ? { act } : {}),
+        ...(cnf !== undefined ? { cnf: cnf } : {}),
+        ...(typeof aud === 'string' || Array.isArray(aud) ? { audience: aud } : {}),
+        ...(used.length > 0 ? { legacyClaimsUsed: used } : {}),
     };
 }
-function payloadToVerifiedGrant(payload) {
-    return claimsToVerifiedGrant(payload);
-}
 //# sourceMappingURL=verify.js.map

package/dist/verify.js.map

@@ -1 +1 @@
-{"version":3,"file":"verify.js","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGhD,MAAM,mBAAmB,GAAG,+CAA+C,CAAC;AAC5E,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAChD,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAIrC,iFAAiF;AACjF,2EAA2E;AAC3E,+EAA+E;AAC/E,uDAAuD;AACvD,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAA8B,CAAC;AAElE,SAAS,qBAAqB,CAAC,OAAY;IACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAC9B,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,mBAAmB,CAAC,IAAI,IAAI,yBAAyB,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAA2B,CAAC;QAC7E,IAAI,MAAM,KAAK,SAAS;YAAE,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/D,CAAC;IACD,mBAAmB,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC5C,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,oBAAoB;IAClC,mBAAmB,CAAC,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAa,EACb,OAAgC;IAEhC,IAAI,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAC9B,IAAI,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;IACpC,IAAI,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9E,OAAO,GAAG,WAAW,MAAM,wBAAwB,CAAC;QACpD,cAAc,KAAK,WAAW,MAAM,EAAE,CAAC;IACzC,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACjC,wEAAwE;IACxE,sDAAsD;IACtD,OAAO,CAAC,IAAI,GAAG,EAAE,CAAC;IAClB,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,mBAAmB,EAAE,CAAC;YAC5D,cAAc,GAAG,iBAAiB,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,wBAAwB,CAAC;gBAClE,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,wBAAwB,CAAC,MAAM,CAAC,EAAE;gBACnF,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;QAChE,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAE5C,IAAI,OAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,UAAU,GAAG;YACjB,UAAU,EAAE,CAAC,OAAO,CAAa;YACjC,MAAM,EAAE,cAAc;YACtB,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS;gBACtC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE;gBAC5C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS;gBAChC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;gBAChC,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QACxD,OAAO,GAAG,MAAM,CAAC,OAAuC,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnD,MAAM,IAAI,iBAAiB,CAAC,oCAAoC,OAAO,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;IACpD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,iBAAiB,CACzB,2CAA2C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,sBAAsB,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAAC,KAAa;IAC1D,IAAI,OAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,OAAO,GAAG,SAAS,CAAC,KAAK,CAAiC,CAAC;IAC7D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,iBAAiB,CAAC,iCAAiC,OAAO,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,qBAAqB,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAA0B;IAC9D,IACE,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;QAC/B,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;QAC/B,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;QAC/B,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;QAC/B,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;QAC3B,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;QAC/B,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,EAC/B,CAAC;QACD,MAAM,IAAI,iBAAiB,CACzB,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,GAAG;QACpB,OAAO,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG;QACpC,WAAW,EAAE,OAAO,CAAC,GAAG;QACxB,QAAQ,EAAE,OAAO,CAAC,GAAG;QACrB,WAAW,EAAE,OAAO,CAAC,GAAG;QACxB,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,MAAM,EAAE,OAAO,CAAC,GAAG;QACnB,QAAQ,EAAE,OAAO,CAAC,GAAG;QACrB,SAAS,EAAE,OAAO,CAAC,GAAG;QACtB,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/F,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,OAA0B;IACxD,OAAO,qBAAqB,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC"}
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGhD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,WAAW,GAAG,mBAAmB,CAAC;AAE/C;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAqC,MAAM,CAAC,MAAM,CAAC;IAClF,GAAG,EAAE,GAAG,WAAW,YAAY;IAC/B,GAAG,EAAE,GAAG,WAAW,eAAe;IAClC,IAAI,EAAE,GAAG,WAAW,WAAW;IAC/B,GAAG,EAAE,OAAO;IACZ,SAAS,EAAE,SAAS;IACpB,UAAU,EAAE,GAAG,WAAW,kBAAkB;IAC5C,eAAe,EAAE,GAAG,WAAW,mBAAmB;CACnD,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACjC,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;AAE9C,qFAAqF;AACrF,MAAM,UAAU,wBAAwB;IACtC,mBAAmB,CAAC,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,iBAAiB,CAAC,OAA0B;IACnD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QAC7C,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,sBAAsB,KAAK,0BAA0B,oBAAoB,CAAC,KAAK,CAAC,IAAI;cAChG,oGAAoG,CAAC;QACzG,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YAChF,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAC7F,CAAC;aAAM,IAAI,OAAO,OAAO,KAAK,WAAW,EAAE,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,uBAAuB,OAAO,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,OAAO,EAAE,OAAO,CAAU,CAAC;AAGlE,SAAS,iBAAiB,CAAC,SAAwC;IACjE,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,sBAAsB,CAAC,CAAC;IAChE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,iBAAiB,CAAC,mDAAmD,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAClC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAE,sBAA4C,CAAC,QAAQ,CAAC,GAAG,CAAC,CACtE,CAAC;IACF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,iBAAiB,CACzB,qCAAqC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACzH,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,mBAAmB,GAAG,+CAA+C,CAAC;AAC5E,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAChD,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAIrC,iFAAiF;AACjF,2EAA2E;AAC3E,+EAA+E;AAC/E,uDAAuD;AACvD,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAA8B,CAAC;AAElE,SAAS,qBAAqB,CAAC,OAAY;IACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAC9B,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,mBAAmB,CAAC,IAAI,IAAI,yBAAyB,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAA2B,CAAC;QAC7E,IAAI,MAAM,KAAK,SAAS;YAAE,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/D,CAAC;IACD,mBAAmB,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC5C,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,oBAAoB;IAClC,mBAAmB,CAAC,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAa,EACb,OAAgC;IAEhC,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAC9B,IAAI,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;IACpC,IAAI,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9E,OAAO,GAAG,WAAW,MAAM,wBAAwB,CAAC;QACpD,cAAc,KAAK,WAAW,MAAM,EAAE,CAAC;IACzC,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACjC,wEAAwE;IACxE,sDAAsD;IACtD,OAAO,CAAC,IAAI,GAAG,EAAE,CAAC;IAClB,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,mBAAmB,EAAE,CAAC;YAC5D,cAAc,GAAG,iBAAiB,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,wBAAwB,CAAC;gBAClE,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,wBAAwB,CAAC,MAAM,CAAC,EAAE;gBACnF,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;QAChE,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAE5C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC;IAClD,IAAI,OAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,UAAU,GAAG;YACjB,UAAU;YACV,MAAM,EAAE,cAAc;YACtB,oEAAoE;YACpE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;YAC1C,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS;gBACtC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE;gBAC5C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS;gBAChC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;gBAChC,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QACxD,OAAO,GAAG,MAAM,CAAC,OAAuC,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnD,MAAM,IAAI,iBAAiB,CAAC,oCAAoC,OAAO,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,2EAA2E;IAC3E,2EAA2E;IAC3E,0EAA0E;IAC1E,oEAAoE;IACpE,iCAAiC;IACjC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAA6C,EAAE,YAAY,CAAC,CAAC;IACnG,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC1C,IAAI,QAAQ,CAAC,gBAAgB,KAAK,SAAS;QAAE,iBAAiB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAE1F,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;IACpD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC/D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,iBAAiB,CACzB,2CAA2C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAAC,KAAa;IAC1D,IAAI,OAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,OAAO,GAAG,SAAS,CAAC,KAAK,CAAiC,CAAC;IAC7D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,iBAAiB,CAAC,iCAAiC,OAAO,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,oBAAoB,CAAC,OAA6C,EAAE,IAAI,CAAC,CAAC;AACnF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAoD,EACpD,OAAO,GAA+B,EAAE;IAExC,OAAO,oBAAoB,CAAC,OAAkC,EAAE,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,GAAY,KAAK,CAAC;IAC7B,KAAK,IAAI,KAAK,GAAG,CAAC,GAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjG,MAAM,IAAI,iBAAiB,CAAC,qEAAqE,CAAC,CAAC;QACrG,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,SAAS;YAAE,MAAM;QACxC,IAAI,KAAK,IAAI,qBAAqB,EAAE,CAAC;YACnC,MAAM,IAAI,iBAAiB,CAAC,wCAAwC,qBAAqB,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,KAAmB,CAAC;AAC7B,CAAC;AAED,SAAS,WAAW,CAAC,MAA+B,EAAE,IAAY,EAAE,KAAa;IAC/E,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,iBAAiB,CAAC,qBAAqB,KAAK,6BAA6B,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,MAA+B,EAAE,IAAY,EAAE,KAAa;IAC9E,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,iBAAiB,CAAC,qBAAqB,KAAK,iCAAiC,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAoB,EAAE,OAAgC;IACpF,IAAI,OAAO,CAAC,wBAAwB,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChF,MAAM,IAAI,iBAAiB,CAAC,kFAAkF,CAAC,CAAC;IAClH,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO;IAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC;IAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,iBAAiB,CAAC,+EAA+E,CAAC,CAAC;IAC/G,CAAC;IACD,MAAM,CAAC,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,CAAC,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;QAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5F,IAAI,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,kDAAkD,CAAC,CAAC;AAClG,CAAC;AAED,MAAM,mBAAmB,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,uBAAuB,CAAC,CAAC;AAErH,SAAS,oBAAoB,CAAC,OAAgC,EAAE,YAAqB;IACnF,yEAAyE;IACzE,KAAK,MAAM,IAAI,IAAI,mBAAmB,EAAE,CAAC;QACvC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI;YAAE,MAAM,IAAI,iBAAiB,CAAC,qBAAqB,IAAI,mBAAmB,CAAC,CAAC;IACxG,CAAC;IACD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,CAAI,KAAa,EAAE,QAAuB,EAAE,MAA2B,EAAiB,EAAE;QACrG,IAAI,CAAC,YAAY;YAAE,OAAO,QAAQ,CAAC;QACnC,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC;QAC5B,IAAI,QAAQ,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS;eAC/C,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,iBAAiB,CACzB,qBAAqB,oBAAoB,CAAC,KAAK,CAAC,oCAAoC,KAAK,EAAE,CAC5F,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzE,OAAO,QAAQ,IAAI,UAAU,CAAC;IAChC,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,iBAAiB,CAAC,qBAAqB,WAAW,oBAAoB,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,IAAI,EAAE,CAAC;IAE7B,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC3D,MAAM,IAAI,iBAAiB,CAAC,0DAA0D,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,YAAY,GAAG,GAAyB,EAAE;QAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,iBAAiB,CAAC,mDAAmD,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,GAAe,CAAC;IACzB,CAAC,CAAC;IACF,IAAI,MAA4B,CAAC;IACjC,IAAI,YAAY,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,SAAS,EAAE,CAAC;QAC3E,gEAAgE;QAChE,MAAM,GAAG,YAAY,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,WAAW,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IACpI,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,WAAW,eAAe,CAAC,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7I,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,WAAW,WAAW,CAAC,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpI,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,WAAW,kBAAkB,CAAC,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;IAC1K,MAAM,eAAe,GAAG,IAAI,CAAC,iBAAiB,EAAE,UAAU,CAAC,KAAK,EAAE,kBAAkB,EAAE,GAAG,WAAW,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC3L,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAClF,MAAM,cAAc,GAAG,IAAI,CACzB,WAAW,EACX,aAAa,KAAK,SAAS,IAAI,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,EACnF,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,CACrD,CAAC;IAEF,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3B,IACE,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ;WACrG,MAAM,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,EAC9E,CAAC;QACD,MAAM,IAAI,iBAAiB,CACzB,YAAY;YACV,CAAC,CAAC,kHAAkH;YACpH,CAAC,CAAC,sEAAsE,WAAW,eAAe,WAAW,gBAAgB,CAChI,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,iBAAiB,CAAC,wDAAwD,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,iBAAiB,CAAC,yCAAyC,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,GAAG,KAAK,QAAQ;WACzC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,iBAAiB,CAAC,+DAA+D,CAAC,CAAC;IAC/F,CAAC;IAED,OAAO;QACL,OAAO,EAAE,GAAG;QACZ,OAAO,EAAE,OAAO,IAAI,GAAG;QACvB,WAAW,EAAE,GAAG;QAChB,QAAQ;QACR,WAAW;QACX,GAAG,CAAC,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,MAAM;QACN,QAAQ,EAAE,GAAG;QACb,SAAS,EAAE,GAAG;QACd,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,OAAO,CAAC,uBAAuB,CAAC,KAAK,SAAS;YAChD,CAAC,CAAC,EAAE,oBAAoB,EAAE,OAAO,CAAC,uBAAuB,CAAC,EAAE;YAC5D,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAuB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvD,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@grantex/sdk",
-  "version": "0.5.1",
+  "version": "0.7.0",
   "description": "TypeScript SDK for the Grantex delegated authorization protocol",
   "author": {
     "name": "Sanjeev Kumar",
@@ -17,6 +17,10 @@
       "import": "./dist/index.js",
       "types": "./dist/index.d.ts"
     },
+    "./evidence": {
+      "import": "./dist/evidence/index.js",
+      "types": "./dist/evidence/index.d.ts"
+    },
     "./manifests/*": {
       "import": "./dist/manifests/*.js",
       "types": "./dist/manifests/*.d.ts"
@@ -30,7 +34,8 @@
   "types": "./dist/index.d.ts",
   "files": [
     "dist",
-    "README.md"
+    "README.md",
+    "NOTICE"
   ],
   "scripts": {
     "build": "tsc -p tsconfig.build.json",
@@ -46,9 +51,13 @@
   },
   "devDependencies": {
     "@types/node": "^26.0.0",
-    "@vitest/coverage-v8": "^4.1.2",
+    "@types/pg": "^8.23.1",
+    "@vitest/coverage-v8": "^5.0.0",
+    "ajv": "^8.20.0",
+    "ioredis": "^6.0.0",
+    "pg": "^8.23.0",
     "typescript": "^7.0.2",
-    "vitest": "^4.1.2"
+    "vitest": "^5.0.0"
   },
   "engines": {
     "node": ">=18.0.0"