@keelcodes/settlement 0.1.0

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,GAChB,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,kBAAkB,EAClB,UAAU,EACV,UAAU,EACV,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,qBAAqB,EACrB,SAAS,EACT,eAAe,EACf,oBAAoB,GACrB,MAAM,UAAU,CAAC;AASlB,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,sBAAsB,EACtB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACvB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,WAAW,CAAC;AAUnB,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,iBAAiB,EACjB,sBAAsB,EACtB,SAAS,EACT,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,EAChB,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,4BAA4B,EAC5B,mBAAmB,EACnB,cAAc,EACd,oBAAoB,GACrB,MAAM,UAAU,CAAC;AAalB,OAAO,EACL,YAAY,EACZ,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,cAAc,CAAC;AAWtB,OAAO,EACL,eAAe,EACf,WAAW,EACX,UAAU,EACV,gBAAgB,EAChB,UAAU,GACX,MAAM,YAAY,CAAC;AAUpB,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGhE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGrC,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AAc/F,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC"}

package/dist/ledger.d.ts

@@ -0,0 +1,37 @@
+import { type IntentStatus, type LedgerEntry, type LedgerEvent, type PaymentIntent, type Reconciliation, type SettlementReceipt } from './types.js';
+export interface AssetRef {
+    network: string;
+    asset: string;
+}
+/**
+ * An append-only reconciliation ledger.
+ *
+ * Nothing is stored mutably: intent status and balances are folded out of the
+ * event log on demand, so the log is the single source of truth and can be
+ * replayed or shipped anywhere. Receipt ids are deduplicated on append, which
+ * makes a replayed settlement a loud error instead of a double count.
+ */
+export declare class Ledger {
+    private readonly log;
+    private readonly receiptsById;
+    get events(): readonly LedgerEvent[];
+    append(event: LedgerEvent): void;
+    intents(): PaymentIntent[];
+    intentOf(id: string): PaymentIntent | undefined;
+    receipts(): SettlementReceipt[];
+    entries(): LedgerEntry[];
+    receiptsOf(intentId: string): SettlementReceipt[];
+    /** The latest lifecycle event for an intent decides its status. */
+    statusOf(intentId: string): IntentStatus;
+    /** Signed sum of `entry` movements — credits positive, debits negative. */
+    balanceOf(account: string, ref: AssetRef): bigint;
+    /** Every event touching an intent, in append order. */
+    trail(intentId: string): LedgerEvent[];
+    /**
+     * Cross-checks intents against receipts. Three failure modes are worth
+     * surfacing on their own: money that never arrived, receipts for intents the
+     * ledger never saw, and an intent paid twice.
+     */
+    reconcile(): Reconciliation;
+}
+//# sourceMappingURL=ledger.d.ts.map

package/dist/ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.d.ts","sourceRoot":"","sources":["../src/ledger.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACvB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;GAOG;AACH,qBAAa,MAAM;IACjB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAqB;IACzC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAwC;IAErE,IAAI,MAAM,IAAI,SAAS,WAAW,EAAE,CAEnC;IAED,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI;IAahC,OAAO,IAAI,aAAa,EAAE;IAI1B,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAI/C,QAAQ,IAAI,iBAAiB,EAAE;IAI/B,OAAO,IAAI,WAAW,EAAE;IAIxB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB,EAAE;IAIjD,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY;IAaxC,2EAA2E;IAC3E,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,GAAG,MAAM;IAWjD,uDAAuD;IACvD,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,EAAE;IAetC;;;;OAIG;IACH,SAAS,IAAI,cAAc;CA+B5B"}

package/dist/ledger.js

@@ -0,0 +1,114 @@
+import { SettlementError, } from './types.js';
+/**
+ * An append-only reconciliation ledger.
+ *
+ * Nothing is stored mutably: intent status and balances are folded out of the
+ * event log on demand, so the log is the single source of truth and can be
+ * replayed or shipped anywhere. Receipt ids are deduplicated on append, which
+ * makes a replayed settlement a loud error instead of a double count.
+ */
+export class Ledger {
+    log = [];
+    receiptsById = new Map();
+    get events() {
+        return this.log;
+    }
+    append(event) {
+        if (event.kind === 'receipt') {
+            if (this.receiptsById.has(event.receipt.id)) {
+                throw new SettlementError('duplicate-receipt', `receipt ${event.receipt.id} is already recorded`);
+            }
+            this.receiptsById.set(event.receipt.id, event.receipt);
+        }
+        this.log.push(event);
+    }
+    intents() {
+        return this.log.flatMap((event) => (event.kind === 'intent' ? [event.intent] : []));
+    }
+    intentOf(id) {
+        return this.intents().find((intent) => intent.id === id);
+    }
+    receipts() {
+        return [...this.receiptsById.values()];
+    }
+    entries() {
+        return this.log.flatMap((event) => (event.kind === 'entry' ? [event.entry] : []));
+    }
+    receiptsOf(intentId) {
+        return this.receipts().filter((receipt) => receipt.intentId === intentId);
+    }
+    /** The latest lifecycle event for an intent decides its status. */
+    statusOf(intentId) {
+        let status;
+        for (const event of this.log) {
+            if (event.kind === 'intent' && event.intent.id === intentId)
+                status = 'pending';
+            else if (event.kind === 'receipt' && event.receipt.intentId === intentId)
+                status = 'settled';
+            else if (event.kind === 'failure' && event.intentId === intentId)
+                status = 'failed';
+        }
+        if (status === undefined) {
+            throw new SettlementError('unknown-intent', `no intent ${intentId} in the ledger`);
+        }
+        return status;
+    }
+    /** Signed sum of `entry` movements — credits positive, debits negative. */
+    balanceOf(account, ref) {
+        return this.entries()
+            .filter((entry) => entry.account === account &&
+            entry.network === ref.network &&
+            entry.asset.toLowerCase() === ref.asset.toLowerCase())
+            .reduce((total, entry) => total + entry.amount, 0n);
+    }
+    /** Every event touching an intent, in append order. */
+    trail(intentId) {
+        return this.log.filter((event) => {
+            switch (event.kind) {
+                case 'intent':
+                    return event.intent.id === intentId;
+                case 'receipt':
+                    return event.receipt.intentId === intentId;
+                case 'failure':
+                    return event.intentId === intentId;
+                case 'entry':
+                    return event.entry.reference === intentId;
+            }
+        });
+    }
+    /**
+     * Cross-checks intents against receipts. Three failure modes are worth
+     * surfacing on their own: money that never arrived, receipts for intents the
+     * ledger never saw, and an intent paid twice.
+     */
+    reconcile() {
+        const intents = new Set();
+        for (const event of this.log) {
+            if (event.kind === 'intent')
+                intents.add(event.intent.id);
+        }
+        const byIntent = new Map();
+        const orphans = [];
+        for (const receipt of this.receipts()) {
+            const intentId = receipt.intentId;
+            if (intentId === undefined || !intents.has(intentId)) {
+                orphans.push(receipt.id);
+                continue;
+            }
+            const ids = byIntent.get(intentId) ?? [];
+            ids.push(receipt.id);
+            byIntent.set(intentId, ids);
+        }
+        const doubleSettled = [...byIntent.entries()]
+            .filter(([, ids]) => ids.length > 1)
+            .map(([intentId]) => intentId);
+        const unsettled = [...intents].filter((intentId) => !byIntent.has(intentId));
+        return {
+            unsettled,
+            orphans,
+            doubleSettled,
+            ok: unsettled.length === 0 && orphans.length === 0 && doubleSettled.length === 0,
+        };
+    }
+}
+//# sourceMappingURL=ledger.js.map

package/dist/ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.js","sourceRoot":"","sources":["../src/ledger.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,GAOhB,MAAM,YAAY,CAAC;AAOpB;;;;;;;GAOG;AACH,MAAM,OAAO,MAAM;IACA,GAAG,GAAkB,EAAE,CAAC;IACxB,YAAY,GAAG,IAAI,GAAG,EAA6B,CAAC;IAErE,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,KAAkB;QACvB,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,eAAe,CACvB,mBAAmB,EACnB,WAAW,KAAK,CAAC,OAAO,CAAC,EAAE,sBAAsB,CAClD,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtF,CAAC;IAED,QAAQ,CAAC,EAAU;QACjB,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,QAAQ;QACN,OAAO,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpF,CAAC;IAED,UAAU,CAAC,QAAgB;QACzB,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IAC5E,CAAC;IAED,mEAAmE;IACnE,QAAQ,CAAC,QAAgB;QACvB,IAAI,MAAgC,CAAC;QACrC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,QAAQ;gBAAE,MAAM,GAAG,SAAS,CAAC;iBAC3E,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ;gBAAE,MAAM,GAAG,SAAS,CAAC;iBACxF,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ;gBAAE,MAAM,GAAG,QAAQ,CAAC;QACtF,CAAC;QACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,aAAa,QAAQ,gBAAgB,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,2EAA2E;IAC3E,SAAS,CAAC,OAAe,EAAE,GAAa;QACtC,OAAO,IAAI,CAAC,OAAO,EAAE;aAClB,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,OAAO,KAAK,OAAO;YACzB,KAAK,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO;YAC7B,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CACxD;aACA,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,uDAAuD;IACvD,KAAK,CAAC,QAAgB;QACpB,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YAC/B,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;gBACnB,KAAK,QAAQ;oBACX,OAAO,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,QAAQ,CAAC;gBACtC,KAAK,SAAS;oBACZ,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC;gBAC7C,KAAK,SAAS;oBACZ,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC;gBACrC,KAAK,OAAO;oBACV,OAAO,KAAK,CAAC,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC;YAC9C,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,SAAS;QACP,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC7C,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;YAClC,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACzB,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACzC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACrB,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC9B,CAAC;QAED,MAAM,aAAa,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;aAC1C,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;aACnC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,SAAS,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE7E,OAAO;YACL,SAAS;YACT,OAAO;YACP,aAAa;YACb,EAAE,EAAE,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;SACjF,CAAC;IACJ,CAAC;CACF"}

package/dist/mpp.d.ts

@@ -0,0 +1,78 @@
+import { type PaymentIntent } from './types.js';
+/**
+ * MPP — the Machine Payments Protocol, i.e. the `Payment` HTTP authentication
+ * scheme of IETF `draft-httpauth-payment-00` (Tempo Labs / Stripe).
+ *
+ * The core spec is payment-method agnostic: a challenge names a registered
+ * payment method and carries a method-specific `request` blob. Keel therefore
+ * models the *core* surface exactly — challenge, credential, status semantics —
+ * and keeps `request` opaque, decoded by whichever method spec the caller
+ * implements. Nothing method-specific is guessed at here.
+ */
+export declare const MPP_SCHEME = "Payment";
+/** Server → client, carries the receipt once payment is verified. */
+export declare const MPP_RECEIPT_HEADER = "Payment-Receipt";
+/** Status codes from the draft's response table (draft §4.2). */
+export declare const MPP_STATUS: {
+    readonly granted: 200;
+    /** Payment barrier: fresh challenge, or a problem describing why it failed. */
+    readonly paymentRequired: 402;
+    /** Payment was valid, but policy denies access — a fresh challenge would not help. */
+    readonly policyDenied: 403;
+};
+/** Problem `code` values the draft defines for 402 responses. */
+export type MppProblemCode = 'malformed-credential' | 'invalid-challenge' | 'verification-failed';
+export interface MppChallenge {
+    /** Challenge id; single-use, so a replay is rejected as `invalid-challenge`. */
+    id: string;
+    /** Registered payment method identifier. */
+    method: string;
+    /** Registered payment intent identifier, e.g. a one-time charge. */
+    intent: string;
+    /** base64url JSON, method-specific. Opaque to the core protocol. */
+    request: string;
+    /** Any further challenge parameters, preserved verbatim. */
+    params?: Record<string, string>;
+}
+export type MppResponseKind = 'challenge' | 'granted' | 'policy-denied' | 'other';
+/**
+ * Classifies a response to a payment attempt.
+ *
+ * The distinction that matters: 403 means the payment *was* accepted but policy
+ * denied access, so re-paying is pointless — only 402 is a retry signal.
+ */
+export declare function classifyMppResponse(status: number): MppResponseKind;
+/** Parses a `WWW-Authenticate: Payment …` challenge. */
+export declare function parseWwwAuthenticate(headerValue: string): MppChallenge;
+/** Serialises a `WWW-Authenticate: Payment …` challenge. */
+export declare function formatWwwAuthenticate(challenge: MppChallenge): string;
+/** Encodes a method-specific request blob for the `request` challenge param. */
+export declare function encodeMppRequest(value: unknown): string;
+/** Decodes the method-specific `request` blob using the caller's method spec. */
+export declare function decodeMppRequest<T>(challenge: MppChallenge): T;
+export interface MppIntentArgs {
+    payer: string;
+    payee: string;
+    network: string;
+    asset: string;
+    amount: bigint;
+    reference?: string;
+    expiresAt?: string;
+    metadata?: Record<string, unknown>;
+}
+/**
+ * Builds the client-side intent for a challenge. The value terms come from the
+ * caller's method-specific decode of `request`; the challenge only supplies the
+ * identity.
+ */
+export declare function mppIntent(challenge: MppChallenge, args: MppIntentArgs): PaymentIntent;
+/** Renders the `Authorization: Payment <token>` credential header. */
+export declare function formatCredential(token: string): string;
+export interface MppCredential {
+    scheme: string;
+    /** Method-specific proof, opaque to the core protocol. */
+    token: string;
+}
+/** Parses an `Authorization: Payment <token>` credential header. */
+export declare function parseCredential(headerValue: string): MppCredential;
+//# sourceMappingURL=mpp.d.ts.map

package/dist/mpp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mpp.d.ts","sourceRoot":"","sources":["../src/mpp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgC,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAG9E;;;;;;;;;GASG;AAEH,eAAO,MAAM,UAAU,YAAY,CAAC;AAEpC,qEAAqE;AACrE,eAAO,MAAM,kBAAkB,oBAAoB,CAAC;AAEpD,iEAAiE;AACjE,eAAO,MAAM,UAAU;;IAErB,+EAA+E;;IAE/E,sFAAsF;;CAE9E,CAAC;AAEX,iEAAiE;AACjE,MAAM,MAAM,cAAc,GAAG,sBAAsB,GAAG,mBAAmB,GAAG,qBAAqB,CAAC;AAIlG,MAAM,WAAW,YAAY;IAC3B,gFAAgF;IAChF,EAAE,EAAE,MAAM,CAAC;IACX,4CAA4C;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG,SAAS,GAAG,eAAe,GAAG,OAAO,CAAC;AAElF;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,CAKnE;AAED,wDAAwD;AACxD,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,YAAY,CA8BtE;AAED,4DAA4D;AAC5D,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,YAAY,GAAG,MAAM,CAWrE;AAED,gFAAgF;AAChF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEvD;AAED,iFAAiF;AACjF,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,SAAS,EAAE,YAAY,GAAG,CAAC,CAE9D;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,aAAa,CAcrF;AAED,sEAAsE;AACtE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKtD;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;CACf;AAED,oEAAoE;AACpE,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,aAAa,CAgBlE"}

package/dist/mpp.js

@@ -0,0 +1,129 @@
+import { SettlementError, assertCaip2 } from './types.js';
+import { authScheme, decodeJsonPayload, encodeJsonPayload, formatAuthHeader, parseAuthHeader } from './wire.js';
+/**
+ * MPP — the Machine Payments Protocol, i.e. the `Payment` HTTP authentication
+ * scheme of IETF `draft-httpauth-payment-00` (Tempo Labs / Stripe).
+ *
+ * The core spec is payment-method agnostic: a challenge names a registered
+ * payment method and carries a method-specific `request` blob. Keel therefore
+ * models the *core* surface exactly — challenge, credential, status semantics —
+ * and keeps `request` opaque, decoded by whichever method spec the caller
+ * implements. Nothing method-specific is guessed at here.
+ */
+export const MPP_SCHEME = 'Payment';
+/** Server → client, carries the receipt once payment is verified. */
+export const MPP_RECEIPT_HEADER = 'Payment-Receipt';
+/** Status codes from the draft's response table (draft §4.2). */
+export const MPP_STATUS = {
+    granted: 200,
+    /** Payment barrier: fresh challenge, or a problem describing why it failed. */
+    paymentRequired: 402,
+    /** Payment was valid, but policy denies access — a fresh challenge would not help. */
+    policyDenied: 403,
+};
+const REQUIRED_PARAMS = ['id', 'method', 'intent', 'request'];
+/**
+ * Classifies a response to a payment attempt.
+ *
+ * The distinction that matters: 403 means the payment *was* accepted but policy
+ * denied access, so re-paying is pointless — only 402 is a retry signal.
+ */
+export function classifyMppResponse(status) {
+    if (status === MPP_STATUS.granted)
+        return 'granted';
+    if (status === MPP_STATUS.paymentRequired)
+        return 'challenge';
+    if (status === MPP_STATUS.policyDenied)
+        return 'policy-denied';
+    return 'other';
+}
+/** Parses a `WWW-Authenticate: Payment …` challenge. */
+export function parseWwwAuthenticate(headerValue) {
+    const scheme = authScheme(headerValue);
+    if (scheme.toLowerCase() !== MPP_SCHEME.toLowerCase()) {
+        throw new SettlementError('malformed-payload', `expected the ${MPP_SCHEME} auth scheme, got ${JSON.stringify(scheme)}`);
+    }
+    const { params } = parseAuthHeader(headerValue);
+    const challenge = {
+        id: params['id'] ?? '',
+        method: params['method'] ?? '',
+        intent: params['intent'] ?? '',
+        request: params['request'] ?? '',
+    };
+    for (const field of REQUIRED_PARAMS) {
+        if (challenge[field] === '') {
+            throw new SettlementError('missing-field', `Payment challenge is missing ${field}`);
+        }
+    }
+    const extra = Object.entries(params).filter(([name]) => !REQUIRED_PARAMS.includes(name));
+    if (extra.length > 0) {
+        challenge.params = Object.fromEntries(extra);
+    }
+    return challenge;
+}
+/** Serialises a `WWW-Authenticate: Payment …` challenge. */
+export function formatWwwAuthenticate(challenge) {
+    return formatAuthHeader({
+        scheme: MPP_SCHEME,
+        params: {
+            id: challenge.id,
+            method: challenge.method,
+            intent: challenge.intent,
+            request: challenge.request,
+            ...(challenge.params ?? {}),
+        },
+    });
+}
+/** Encodes a method-specific request blob for the `request` challenge param. */
+export function encodeMppRequest(value) {
+    return encodeJsonPayload(value, { urlSafe: true });
+}
+/** Decodes the method-specific `request` blob using the caller's method spec. */
+export function decodeMppRequest(challenge) {
+    return decodeJsonPayload(challenge.request);
+}
+/**
+ * Builds the client-side intent for a challenge. The value terms come from the
+ * caller's method-specific decode of `request`; the challenge only supplies the
+ * identity.
+ */
+export function mppIntent(challenge, args) {
+    const intent = {
+        id: challenge.id,
+        protocol: 'mpp',
+        network: assertCaip2(args.network, 'network'),
+        asset: args.asset,
+        amount: args.amount,
+        payer: args.payer,
+        payee: args.payee,
+    };
+    if (args.reference !== undefined)
+        intent.reference = args.reference;
+    if (args.expiresAt !== undefined)
+        intent.expiresAt = args.expiresAt;
+    if (args.metadata !== undefined)
+        intent.metadata = args.metadata;
+    return intent;
+}
+/** Renders the `Authorization: Payment <token>` credential header. */
+export function formatCredential(token) {
+    if (token.trim() === '') {
+        throw new SettlementError('missing-field', 'payment credential token is empty');
+    }
+    return `${MPP_SCHEME} ${token}`;
+}
+/** Parses an `Authorization: Payment <token>` credential header. */
+export function parseCredential(headerValue) {
+    const trimmed = headerValue.trim();
+    const separator = trimmed.indexOf(' ');
+    const scheme = separator === -1 ? trimmed : trimmed.slice(0, separator);
+    const token = separator === -1 ? '' : trimmed.slice(separator + 1).trim();
+    if (scheme.toLowerCase() !== MPP_SCHEME.toLowerCase()) {
+        throw new SettlementError('malformed-payload', `expected the ${MPP_SCHEME} auth scheme, got ${JSON.stringify(scheme)}`);
+    }
+    if (token === '') {
+        throw new SettlementError('missing-field', 'payment credential token is empty');
+    }
+    return { scheme, token };
+}
+//# sourceMappingURL=mpp.js.map

package/dist/mpp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mpp.js","sourceRoot":"","sources":["../src/mpp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,WAAW,EAAsB,MAAM,YAAY,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAEhH;;;;;;;;;GASG;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,SAAS,CAAC;AAEpC,qEAAqE;AACrE,MAAM,CAAC,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAEpD,iEAAiE;AACjE,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,OAAO,EAAE,GAAG;IACZ,+EAA+E;IAC/E,eAAe,EAAE,GAAG;IACpB,sFAAsF;IACtF,YAAY,EAAE,GAAG;CACT,CAAC;AAKX,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AAiBvE;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,IAAI,MAAM,KAAK,UAAU,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACpD,IAAI,MAAM,KAAK,UAAU,CAAC,eAAe;QAAE,OAAO,WAAW,CAAC;IAC9D,IAAI,MAAM,KAAK,UAAU,CAAC,YAAY;QAAE,OAAO,eAAe,CAAC;IAC/D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACvC,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;QACtD,MAAM,IAAI,eAAe,CACvB,mBAAmB,EACnB,gBAAgB,UAAU,qBAAqB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CACxE,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;IAEhD,MAAM,SAAS,GAAiB;QAC9B,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE;QACtB,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE;QAC9B,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE;QAC9B,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE;KACjC,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAC5B,MAAM,IAAI,eAAe,CAAC,eAAe,EAAE,gCAAgC,KAAK,EAAE,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CACzC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAE,eAAqC,CAAC,QAAQ,CAAC,IAAI,CAAC,CACnE,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,qBAAqB,CAAC,SAAuB;IAC3D,OAAO,gBAAgB,CAAC;QACtB,MAAM,EAAE,UAAU;QAClB,MAAM,EAAE;YACN,EAAE,EAAE,SAAS,CAAC,EAAE;YAChB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,GAAG,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;SAC5B;KACF,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,iBAAiB,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,gBAAgB,CAAI,SAAuB;IACzD,OAAO,iBAAiB,CAAI,SAAS,CAAC,OAAO,CAAC,CAAC;AACjD,CAAC;AAaD;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,SAAuB,EAAE,IAAmB;IACpE,MAAM,MAAM,GAAkB;QAC5B,EAAE,EAAE,SAAS,CAAC,EAAE;QAChB,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC;QAC7C,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC;IACF,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;QAAE,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACpE,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;QAAE,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACpE,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IACjE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,eAAe,CAAC,eAAe,EAAE,mCAAmC,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,GAAG,UAAU,IAAI,KAAK,EAAE,CAAC;AAClC,CAAC;AAQD,oEAAoE;AACpE,MAAM,UAAU,eAAe,CAAC,WAAmB;IACjD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAE1E,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;QACtD,MAAM,IAAI,eAAe,CACvB,mBAAmB,EACnB,gBAAgB,UAAU,qBAAqB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CACxE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,eAAe,CAAC,eAAe,EAAE,mCAAmC,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC"}

package/dist/rails.d.ts

@@ -0,0 +1,132 @@
+import { type Caip2, type PaymentIntent } from './types.js';
+/**
+ * Protocol-agnostic rail selection for fiat / stablecoin orchestration.
+ *
+ * A {@link PaymentIntent} says *what* the payer wants to move; a
+ * {@link PaymentRail} says *how* it could move. This module is the glue between
+ * the two: it filters a catalogue of rails down to the ones that can honour an
+ * intent under a set of constraints, then picks one deterministically.
+ *
+ * Four rail kinds are modelled, none of which require a protocol codec here:
+ *
+ * - `x402` / `mpp` — HTTP payment handshakes whose codecs live in their own
+ *   modules; routing only needs to know the rail can settle the terms.
+ * - `chain` — a direct on-chain stablecoin transfer.
+ * - `fiat` — a hosted checkout. The rail carries an **opaque** `checkout`
+ *   handle; Keel never inspects it, and the hosted-checkout specifics (session
+ *   creation, redirect, capture) are entirely host-side. No PSP is integrated
+ *   and no dependency is added.
+ *
+ * Selection is pure and deterministic: same inputs, same rail. Ties are broken
+ * by cost, then priority hint, then a fixed kind order, then rail id.
+ */
+/** The kinds of rail this layer can route across. */
+export type RailKind = 'x402' | 'mpp' | 'chain' | 'fiat';
+/** The stable order used as the final, documented kind tie-break. */
+export declare const RAIL_KIND_ORDER: readonly RailKind[];
+/** An asset a rail can settle, in its own denomination. */
+export interface RailAsset {
+    /**
+     * Canonical reference: a token contract address (or `native`) for on-chain
+     * rails, an ISO-4217 code (e.g. `usd`) for fiat rails.
+     */
+    address: string;
+    /** Display ticker, e.g. `USDC` or `USD`. */
+    symbol: string;
+    /** Minor units per whole unit: 6 for USDC, 2 for USD. */
+    decimals: number;
+    /** Networks this asset is accepted on; defaults to the rail's `networks`. */
+    networks?: readonly Caip2[];
+}
+/** A way an intent could be settled. Descriptors are data — no live client. */
+export interface PaymentRail {
+    kind: RailKind;
+    /** Stable identifier, unique within a catalogue. */
+    id: string;
+    /** CAIP-2 networks this rail can settle on. */
+    networks: readonly Caip2[];
+    /** Assets this rail accepts. */
+    assets: readonly RailAsset[];
+    /** Opaque destination/payTo (a chain address, a merchant id, …). */
+    payTo: string;
+    /**
+     * Opaque hosted-checkout handle. Required for `fiat` rails and ignored for
+     * every other kind; its meaning is owned by the host's checkout integration.
+     */
+    checkout?: string;
+    /** Extra fee the rail charges, in atomic units of the settled asset. */
+    cost?: bigint;
+    /** Tie-break hint after cost; lower wins. */
+    priority?: number;
+}
+/** Constraints a payer applies on top of the intent. */
+export interface RailConstraints {
+    /** Only these rail kinds are acceptable. */
+    kinds?: readonly RailKind[];
+    /**
+     * Only these networks are acceptable. The intent's own `network` must be one
+     * of them, since a plan settles on the intent's network.
+     */
+    networks?: readonly Caip2[];
+    /** Only these assets (address or symbol, case-insensitive) are acceptable. */
+    assets?: readonly string[];
+    /** Cap on `amount + cost`, in atomic units. */
+    maxAmount?: bigint;
+}
+/** The concrete terms of a selected rail: what the host would actually pay. */
+export interface RoutePlan {
+    railId: string;
+    kind: RailKind;
+    network: Caip2;
+    asset: RailAsset;
+    /** Payment amount in atomic units. */
+    amount: bigint;
+    /** `amount` rendered against `asset.decimals`. */
+    amountDecimal: string;
+    /** Rail fee in atomic units. */
+    cost: bigint;
+    /** `amount + cost`. */
+    total: bigint;
+    payTo: string;
+    /** Present only for `fiat` rails; opaque, host-defined. */
+    checkoutHandle?: string;
+}
+export interface RailSelection {
+    rail: PaymentRail;
+    plan: RoutePlan;
+}
+/**
+ * Parses a human decimal amount into atomic units for `decimals` places, e.g.
+ * `parseUnits('0.01', 6) === 10000n`.
+ *
+ * Hand-rolled on purpose rather than delegated to `viem`'s `parseUnits`. viem
+ * rounds when the input carries more fractional digits than the asset supports
+ * (`1.234` at 2dp yields `123n`), and its parsing rules have changed between
+ * releases — inheriting either is a poor foundation for settlement arithmetic.
+ * More fractional digits than the asset supports is an error here, not a silent
+ * truncation: rounding someone's money is a bug, not a convenience.
+ *
+ * `rails.units.viem.test.ts` pins both the agreement on the accepted domain and
+ * this intentional divergence, so neither can drift unnoticed.
+ */
+export declare function parseUnits(value: string, decimals: number): bigint;
+/**
+ * Renders atomic units as a human decimal amount, trimming trailing zeros so
+ * that `parseUnits(formatUnits(n, d), d) === n` round-trips exactly.
+ */
+export declare function formatUnits(value: bigint, decimals: number): string;
+/**
+ * Resolves the asset descriptor for `assetRef` on `network`, proving the rail
+ * accepts it there. Throws a `requirement-mismatch` rather than routing a
+ * payment the rail cannot actually settle.
+ */
+export declare function resolveRailAsset(rail: PaymentRail, network: Caip2, assetRef: string): RailAsset;
+/**
+ * Picks the cheapest eligible rail for an intent and materialises the plan.
+ *
+ * Throws `no-acceptable-requirement` when nothing can satisfy the intent and
+ * constraints — never returns a "best effort" pick, because silently routing a
+ * payment on terms the payer did not accept is how an agent overpays.
+ */
+export declare function selectRail(rails: readonly PaymentRail[], intent: PaymentIntent, constraints?: RailConstraints): RailSelection;
+//# sourceMappingURL=rails.d.ts.map

package/dist/rails.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rails.d.ts","sourceRoot":"","sources":["../src/rails.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,KAAK,KAAK,EAAE,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAE7E;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,qDAAqD;AACrD,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,MAAM,CAAC;AAEzD,qEAAqE;AACrE,eAAO,MAAM,eAAe,EAAE,SAAS,QAAQ,EAAqC,CAAC;AAErF,2DAA2D;AAC3D,MAAM,WAAW,SAAS;IACxB;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,QAAQ,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,SAAS,KAAK,EAAE,CAAC;CAC7B;AAED,+EAA+E;AAC/E,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,CAAC;IACf,oDAAoD;IACpD,EAAE,EAAE,MAAM,CAAC;IACX,+CAA+C;IAC/C,QAAQ,EAAE,SAAS,KAAK,EAAE,CAAC;IAC3B,gCAAgC;IAChC,MAAM,EAAE,SAAS,SAAS,EAAE,CAAC;IAC7B,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wDAAwD;AACxD,MAAM,WAAW,eAAe;IAC9B,4CAA4C;IAC5C,KAAK,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IAC5B;;;OAGG;IACH,QAAQ,CAAC,EAAE,SAAS,KAAK,EAAE,CAAC;IAC5B,8EAA8E;IAC9E,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,+EAA+E;AAC/E,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,QAAQ,CAAC;IACf,OAAO,EAAE,KAAK,CAAC;IACf,KAAK,EAAE,SAAS,CAAC;IACjB,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,aAAa,EAAE,MAAM,CAAC;IACtB,gCAAgC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,uBAAuB;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,2DAA2D;IAC3D,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,WAAW,CAAC;IAClB,IAAI,EAAE,SAAS,CAAC;CACjB;AAaD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAalE;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CASnE;AAgBD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,CAS/F;AAoDD;;;;;;GAMG;AACH,wBAAgB,UAAU,CACxB,KAAK,EAAE,SAAS,WAAW,EAAE,EAC7B,MAAM,EAAE,aAAa,EACrB,WAAW,GAAE,eAAoB,GAChC,aAAa,CA6Bf"}