@keytrace/runner 0.0.3

package/README.md

@@ -0,0 +1,139 @@
+# @keytrace/runner
+
+Core verification library for Keytrace identity claims. Matches claim URIs to service providers, fetches proofs, and verifies ownership.
+
+This library is still very work in progress, and not fully built out for folks who want to run the full verification proofing system. You can use @keytrace/verify to get a list of claims and verify they are real based on public key encryption.
+
+This would allow you to do the HTTP and DNS requests necessary to make the initial proof.
+
+## Installation
+
+```bash
+npm install @keytrace/runner
+```
+
+## Usage
+
+### Verify a Claim
+
+```typescript
+import { createClaim, verifyClaim, ClaimStatus } from '@keytrace/runner';
+
+// Create and verify a claim
+const claim = createClaim('https://gist.github.com/octocat/abc123', 'did:plc:xyz789');
+const result = await verifyClaim(claim);
+
+if (result.status === ClaimStatus.VERIFIED) {
+  console.log('Claim verified!');
+  console.log('Identity:', result.identity);
+} else {
+  console.log('Verification failed:', result.errors);
+}
+```
+
+### Fetch a User's Profile and Claims
+
+```typescript
+import { fetchProfile, verifyAllClaims, getProfileSummary } from '@keytrace/runner';
+
+// Fetch profile and claims from ATProto
+const profile = await fetchProfile('alice.bsky.social');
+
+// Verify all claims
+const verified = await verifyAllClaims(profile);
+
+// Get summary
+const summary = getProfileSummary(verified);
+console.log(`${summary.verified}/${summary.total} claims verified`);
+```
+
+### Match URIs to Service Providers
+
+```typescript
+import { serviceProviders } from '@keytrace/runner';
+
+const matches = serviceProviders.matchUri('https://gist.github.com/octocat/abc123');
+// [{ provider: { id: 'github', name: 'GitHub', ... }, match: [...], isAmbiguous: false }]
+
+const matches2 = serviceProviders.matchUri('dns:example.com');
+// [{ provider: { id: 'dns', name: 'Domain', ... }, match: [...], isAmbiguous: false }]
+```
+
+## Service Providers
+
+Built-in providers for identity verification:
+
+| Provider | URI Pattern | Proof Location |
+|----------|-------------|----------------|
+| GitHub | `https://gist.github.com/user/id` | Gist content |
+| DNS | `dns:example.com` | TXT record |
+| Mastodon | `https://instance/@user` | Profile bio/fields |
+| Bluesky | `https://bsky.app/profile/handle` | Profile bio |
+| npm | `https://npmjs.com/package/keytrace-handle` | package.json |
+
+## API
+
+### Claims
+
+```typescript
+// Create a claim
+createClaim(uri: string, did: string): ClaimState
+
+// Match claim to service providers
+matchClaim(claim: ClaimState): void
+
+// Verify claim by fetching proof
+verifyClaim(claim: ClaimState, options?: VerifyOptions): Promise<ClaimVerificationResult>
+
+// Check if claim matches multiple providers
+isClaimAmbiguous(claim: ClaimState): boolean
+```
+
+### Profiles
+
+```typescript
+// Fetch profile and claims from ATProto
+fetchProfile(handleOrDid: string): Promise<FetchedProfile>
+
+// Verify all claims in a profile
+verifyAllClaims(profile: FetchedProfile): Promise<FetchedProfile>
+
+// Get verification summary
+getProfileSummary(profile: FetchedProfile): { total: number; verified: number; failed: number }
+```
+
+### Service Providers
+
+```typescript
+import { serviceProviders } from '@keytrace/runner';
+
+// Match URI to providers
+serviceProviders.matchUri(uri: string): ServiceProviderMatch[]
+
+// Get all providers
+serviceProviders.all: ServiceProvider[]
+
+// Get provider by ID
+serviceProviders.get(id: string): ServiceProvider | undefined
+```
+
+## Claim Status
+
+```typescript
+enum ClaimStatus {
+  INIT = 'init',           // Created, not yet matched
+  MATCHED = 'matched',     // URI matched to provider
+  VERIFIED = 'verified',   // Proof verified successfully
+  FAILED = 'failed',       // Proof verification failed
+  ERROR = 'error',         // Error during verification
+}
+```
+
+## Verification Options
+
+```typescript
+interface VerifyOptions {
+  timeout?: number;        // Request timeout in ms (default: 10000)
+  fetch?: typeof fetch;    // Custom fetch function
+}
+```

package/dist/actions/css-select.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Parse HTML and extract text content using a CSS selector.
+ * Uses cheerio for server-side HTML parsing.
+ */
+export declare function cssSelect(html: string, selector: string): string;
+//# sourceMappingURL=css-select.d.ts.map

package/dist/actions/css-select.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"css-select.d.ts","sourceRoot":"","sources":["../../src/actions/css-select.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAOhE"}

package/dist/actions/css-select.js

@@ -0,0 +1,14 @@
+import * as cheerio from "cheerio";
+/**
+ * Parse HTML and extract text content using a CSS selector.
+ * Uses cheerio for server-side HTML parsing.
+ */
+export function cssSelect(html, selector) {
+    const $ = cheerio.load(html);
+    const elements = $(selector);
+    if (elements.length === 0) {
+        throw new Error(`No elements matched selector: "${selector}"`);
+    }
+    return elements.first().text().trim();
+}
+//# sourceMappingURL=css-select.js.map

package/dist/actions/css-select.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"css-select.js","sourceRoot":"","sources":["../../src/actions/css-select.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,SAAS,CAAC;AAEnC;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,QAAgB;IACtD,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC7B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,GAAG,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;AACxC,CAAC"}

package/dist/actions/dns-txt.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Perform a DNS TXT record lookup for a domain.
+ * Node only - throws a descriptive error in browser environments.
+ */
+export declare function dnsTxt(domain: string): Promise<string[]>;
+//# sourceMappingURL=dns-txt.d.ts.map

package/dist/actions/dns-txt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns-txt.d.ts","sourceRoot":"","sources":["../../src/actions/dns-txt.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAsB,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAW9D"}

package/dist/actions/dns-txt.js

@@ -0,0 +1,17 @@
+/**
+ * Perform a DNS TXT record lookup for a domain.
+ * Node only - throws a descriptive error in browser environments.
+ */
+export async function dnsTxt(domain) {
+    let dns;
+    try {
+        dns = await import("node:dns/promises");
+    }
+    catch {
+        throw new Error("DNS TXT lookups are not available in the browser. " + "Use the server-side proxy endpoint (POST /api/proxy/dns) instead.");
+    }
+    const records = await dns.resolveTxt(domain);
+    // resolveTxt returns string[][] - flatten to string[]
+    return records.map((chunks) => chunks.join(""));
+}
+//# sourceMappingURL=dns-txt.js.map

package/dist/actions/dns-txt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns-txt.js","sourceRoot":"","sources":["../../src/actions/dns-txt.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,MAAc;IACzC,IAAI,GAAuC,CAAC;IAC5C,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,oDAAoD,GAAG,mEAAmE,CAAC,CAAC;IAC9I,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC7C,sDAAsD;IACtD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAClD,CAAC"}

package/dist/actions/http-get.d.ts

@@ -0,0 +1,6 @@
+import type { FetchFn } from "../types.js";
+/**
+ * Fetch a URL using the injected fetch function and return the response body as text.
+ */
+export declare function httpGet(url: string, fetchFn: FetchFn, timeout?: number): Promise<string>;
+//# sourceMappingURL=http-get.d.ts.map

package/dist/actions/http-get.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-get.d.ts","sourceRoot":"","sources":["../../src/actions/http-get.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C;;GAEG;AACH,wBAAsB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAa9F"}

package/dist/actions/http-get.js

@@ -0,0 +1,19 @@
+/**
+ * Fetch a URL using the injected fetch function and return the response body as text.
+ */
+export async function httpGet(url, fetchFn, timeout) {
+    const controller = new AbortController();
+    const timeoutId = timeout ? setTimeout(() => controller.abort(), timeout) : undefined;
+    try {
+        const response = await fetchFn(url, { signal: controller.signal });
+        if (!response.ok) {
+            throw new Error(`HTTP ${response.status}: ${response.statusText}`);
+        }
+        return await response.text();
+    }
+    finally {
+        if (timeoutId !== undefined)
+            clearTimeout(timeoutId);
+    }
+}
+//# sourceMappingURL=http-get.js.map

package/dist/actions/http-get.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-get.js","sourceRoot":"","sources":["../../src/actions/http-get.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAW,EAAE,OAAgB,EAAE,OAAgB;IAC3E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEtF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;YAAS,CAAC;QACT,IAAI,SAAS,KAAK,SAAS;YAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;AACH,CAAC"}

package/dist/actions/index.d.ts

@@ -0,0 +1,6 @@
+export { httpGet } from "./http-get.js";
+export { jsonPath } from "./json-path.js";
+export { cssSelect } from "./css-select.js";
+export { regexMatch } from "./regex-match.js";
+export { dnsTxt } from "./dns-txt.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/actions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/actions/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC"}

package/dist/actions/index.js

@@ -0,0 +1,6 @@
+export { httpGet } from "./http-get.js";
+export { jsonPath } from "./json-path.js";
+export { cssSelect } from "./css-select.js";
+export { regexMatch } from "./regex-match.js";
+export { dnsTxt } from "./dns-txt.js";
+//# sourceMappingURL=index.js.map

package/dist/actions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/actions/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC"}

package/dist/actions/json-path.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Extract data from a JSON string (or parsed object) using a simple dot-notation path.
+ *
+ * Supports paths like:
+ *   "$.keytrace"      -> obj.keytrace
+ *   "$.data.name"     -> obj.data.name
+ *   "$.items[0].id"   -> obj.items[0].id
+ *
+ * The leading "$." is optional.
+ */
+export declare function jsonPath(data: string | object, selector: string): unknown;
+//# sourceMappingURL=json-path.d.ts.map

package/dist/actions/json-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-path.d.ts","sourceRoot":"","sources":["../../src/actions/json-path.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAkBzE"}

package/dist/actions/json-path.js

@@ -0,0 +1,26 @@
+/**
+ * Extract data from a JSON string (or parsed object) using a simple dot-notation path.
+ *
+ * Supports paths like:
+ *   "$.keytrace"      -> obj.keytrace
+ *   "$.data.name"     -> obj.data.name
+ *   "$.items[0].id"   -> obj.items[0].id
+ *
+ * The leading "$." is optional.
+ */
+export function jsonPath(data, selector) {
+    const obj = typeof data === "string" ? JSON.parse(data) : data;
+    // Strip leading $. if present
+    const path = selector.startsWith("$.") ? selector.slice(2) : selector;
+    // Split on dots and bracket notation
+    const segments = path.split(/\.|\[(\d+)\]/).filter((s) => s !== "" && s !== undefined);
+    let current = obj;
+    for (const segment of segments) {
+        if (current == null || typeof current !== "object") {
+            return undefined;
+        }
+        current = current[segment];
+    }
+    return current;
+}
+//# sourceMappingURL=json-path.js.map

package/dist/actions/json-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-path.js","sourceRoot":"","sources":["../../src/actions/json-path.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAqB,EAAE,QAAgB;IAC9D,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE/D,8BAA8B;IAC9B,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAEtE,qCAAqC;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC;IAEvF,IAAI,OAAO,GAAY,GAAG,CAAC;IAC3B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YACnD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,GAAI,OAAmC,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/actions/regex-match.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Match content against a regex pattern.
+ * Returns the first capture group if present, otherwise the full match.
+ */
+export declare function regexMatch(content: string, pattern: string): string;
+//# sourceMappingURL=regex-match.d.ts.map

package/dist/actions/regex-match.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"regex-match.d.ts","sourceRoot":"","sources":["../../src/actions/regex-match.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAQnE"}

package/dist/actions/regex-match.js

@@ -0,0 +1,14 @@
+/**
+ * Match content against a regex pattern.
+ * Returns the first capture group if present, otherwise the full match.
+ */
+export function regexMatch(content, pattern) {
+    const regex = new RegExp(pattern);
+    const match = content.match(regex);
+    if (!match) {
+        throw new Error(`Pattern "${pattern}" did not match content`);
+    }
+    // Return first capture group if available, otherwise the full match
+    return match[1] ?? match[0];
+}
+//# sourceMappingURL=regex-match.js.map

package/dist/actions/regex-match.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"regex-match.js","sourceRoot":"","sources":["../../src/actions/regex-match.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,OAAe;IACzD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,YAAY,OAAO,yBAAyB,CAAC,CAAC;IAChE,CAAC;IACD,oEAAoE;IACpE,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;AAC9B,CAAC"}

package/dist/claim.d.ts

@@ -0,0 +1,38 @@
+import { ClaimStatus } from "./types.js";
+import { type ServiceProviderMatch } from "./serviceProviders/index.js";
+import type { VerifyOptions, ClaimVerificationResult } from "./types.js";
+/**
+ * Validate a DID string. Accepts did:plc and did:web formats.
+ */
+export declare function isValidDid(did: string): boolean;
+/**
+ * A single identity claim linking a DID to an external account
+ */
+export interface ClaimState {
+    uri: string;
+    did: string;
+    status: ClaimStatus;
+    matches: ServiceProviderMatch[];
+    errors: string[];
+}
+/**
+ * Create a new claim state
+ */
+export declare function createClaim(uri: string, did: string): ClaimState;
+/**
+ * Match the claim URI against known service providers
+ */
+export declare function matchClaim(claim: ClaimState): void;
+/**
+ * Check if the claim is ambiguous (matches multiple providers)
+ */
+export declare function isClaimAmbiguous(claim: ClaimState): boolean;
+/**
+ * Get the matched service provider (first unambiguous match, or first match)
+ */
+export declare function getMatchedProvider(claim: ClaimState): ServiceProviderMatch | undefined;
+/**
+ * Verify the claim by fetching proof and checking for DID
+ */
+export declare function verifyClaim(claim: ClaimState, opts?: VerifyOptions): Promise<ClaimVerificationResult>;
+//# sourceMappingURL=claim.d.ts.map

package/dist/claim.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim.d.ts","sourceRoot":"","sources":["../src/claim.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,OAAO,EAAY,KAAK,oBAAoB,EAAuC,MAAM,6BAA6B,CAAC;AAEvH,OAAO,KAAK,EAAE,aAAa,EAAE,uBAAuB,EAAqD,MAAM,YAAY,CAAC;AAO5H;;GAEG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE/C;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,WAAW,CAAC;IACpB,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAChC,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,CAWhE;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAOlD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAE3D;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,GAAG,oBAAoB,GAAG,SAAS,CAEtF;AAED;;GAEG;AACH,wBAAsB,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA0E/G"}

package/dist/claim.js

@@ -0,0 +1,253 @@
+import { ClaimStatus } from "./types.js";
+import { DEFAULT_TIMEOUT } from "./constants.js";
+import { matchUri } from "./serviceProviders/index.js";
+import * as fetchers from "./fetchers/index.js";
+// did:plc identifiers are base32-encoded, lowercase
+const DID_PLC_RE = /^did:plc:[a-z2-7]{24}$/;
+// did:web uses a domain name (with optional port and path segments encoded as colons)
+const DID_WEB_RE = /^did:web:[a-zA-Z0-9._:%-]+$/;
+/**
+ * Validate a DID string. Accepts did:plc and did:web formats.
+ */
+export function isValidDid(did) {
+    return DID_PLC_RE.test(did) || DID_WEB_RE.test(did);
+}
+/**
+ * Create a new claim state
+ */
+export function createClaim(uri, did) {
+    if (!isValidDid(did)) {
+        throw new Error(`Invalid DID format: ${did}`);
+    }
+    return {
+        uri,
+        did,
+        status: ClaimStatus.INIT,
+        matches: [],
+        errors: [],
+    };
+}
+/**
+ * Match the claim URI against known service providers
+ */
+export function matchClaim(claim) {
+    claim.matches = matchUri(claim.uri);
+    claim.status = claim.matches.length > 0 ? ClaimStatus.MATCHED : ClaimStatus.ERROR;
+    if (claim.matches.length === 0) {
+        claim.errors.push(`No service provider matched URI: ${claim.uri}`);
+    }
+}
+/**
+ * Check if the claim is ambiguous (matches multiple providers)
+ */
+export function isClaimAmbiguous(claim) {
+    return claim.matches.length > 1 || (claim.matches.length === 1 && claim.matches[0].isAmbiguous);
+}
+/**
+ * Get the matched service provider (first unambiguous match, or first match)
+ */
+export function getMatchedProvider(claim) {
+    return claim.matches[0];
+}
+/**
+ * Verify the claim by fetching proof and checking for DID
+ */
+export async function verifyClaim(claim, opts = {}) {
+    if (claim.status === ClaimStatus.INIT) {
+        matchClaim(claim);
+    }
+    if (claim.matches.length === 0) {
+        return {
+            status: ClaimStatus.ERROR,
+            errors: claim.errors,
+            timestamp: new Date(),
+        };
+    }
+    // Track proof details for the response
+    let proofDetails;
+    // Try each matched provider until one succeeds
+    for (const match of claim.matches) {
+        try {
+            const config = match.provider.processURI(claim.uri, match.match);
+            const proofData = await fetchProof(config.proof.request, opts);
+            // Build proof details
+            const patterns = generateProofPatterns(claim.did);
+            const targetResults = checkProofWithDetails(proofData, config.proof.target, patterns);
+            proofDetails = {
+                fetchUrl: config.proof.request.uri,
+                fetcher: config.proof.request.fetcher,
+                content: truncateContent(proofData),
+                targets: targetResults,
+                patterns,
+            };
+            const verified = targetResults.some((t) => t.matched);
+            if (verified) {
+                claim.status = ClaimStatus.VERIFIED;
+                // Extract identity metadata via postprocess if available
+                let identity;
+                if (match.provider.postprocess) {
+                    const metadata = match.provider.postprocess(proofData, match.match);
+                    identity = {
+                        subject: metadata.subject,
+                        avatarUrl: metadata.avatarUrl,
+                        profileUrl: metadata.profileUrl,
+                        displayName: metadata.displayName,
+                    };
+                }
+                return {
+                    status: ClaimStatus.VERIFIED,
+                    errors: [],
+                    timestamp: new Date(),
+                    identity,
+                    proofDetails,
+                };
+            }
+        }
+        catch (err) {
+            claim.errors.push(`${match.provider.id}: ${err instanceof Error ? err.message : "Unknown error"}`);
+        }
+        // Stop on unambiguous match
+        if (!match.isAmbiguous)
+            break;
+    }
+    claim.status = ClaimStatus.FAILED;
+    return {
+        status: ClaimStatus.FAILED,
+        errors: claim.errors,
+        timestamp: new Date(),
+        proofDetails,
+    };
+}
+async function fetchProof(request, opts) {
+    const fetcher = fetchers.get(request.fetcher);
+    if (!fetcher) {
+        throw new Error(`Unknown fetcher: ${request.fetcher}`);
+    }
+    console.log(`[runner] Fetching proof: ${request.fetcher} ${request.uri} (format: ${request.format})`);
+    const data = await fetcher.fetch(request.uri, {
+        format: request.format,
+        timeout: opts.timeout ?? DEFAULT_TIMEOUT,
+        headers: request.options?.headers,
+    });
+    const fileKeys = data && typeof data === "object" && "files" in data ? Object.keys(data.files) : [];
+    console.log(`[runner] Fetched proof, files: ${JSON.stringify(fileKeys)}`);
+    return data;
+}
+function checkProofWithDetails(data, targets, patterns) {
+    console.log(`[runner] Checking proof, patterns: ${JSON.stringify(patterns)}`);
+    console.log(`[runner] Proof targets: ${JSON.stringify(targets.map((t) => t.path.join(".")))}`);
+    const results = [];
+    for (const target of targets) {
+        const values = extractValues(data, target.path);
+        console.log(`[runner] Target ${target.path.join(".")}: found ${values.length} value(s)${values.length > 0 ? `: ${JSON.stringify(values.map((v) => v.slice(0, 100)))}` : ""}`);
+        let matched = false;
+        for (const value of values) {
+            if (matchesPattern(value, patterns, target.relation)) {
+                console.log(`[runner] Match found at ${target.path.join(".")} (relation: ${target.relation})`);
+                matched = true;
+                break;
+            }
+        }
+        results.push({
+            path: target.path,
+            relation: target.relation,
+            valuesFound: values.map((v) => v.slice(0, 500)), // Truncate long values
+            matched,
+        });
+    }
+    if (!results.some((r) => r.matched)) {
+        console.log(`[runner] No match found in any target`);
+    }
+    return results;
+}
+function truncateContent(data) {
+    const MAX_LENGTH = 2000;
+    let content;
+    if (data === null || data === undefined) {
+        return "(no content returned)";
+    }
+    if (typeof data === "string") {
+        content = data;
+    }
+    else {
+        try {
+            content = JSON.stringify(data, null, 2);
+        }
+        catch {
+            content = String(data);
+        }
+    }
+    if (content.length > MAX_LENGTH) {
+        return content.slice(0, MAX_LENGTH) + "\n... (truncated)";
+    }
+    return content;
+}
+function generateProofPatterns(did) {
+    const patterns = [did];
+    if (did.startsWith("did:plc:")) {
+        patterns.push(did.replace("did:plc:", ""));
+    }
+    return patterns;
+}
+function extractValues(data, path) {
+    const results = [];
+    extractValuesRecursive(data, path, 0, results);
+    return results;
+}
+function extractValuesRecursive(data, path, index, results) {
+    if (data === null || data === undefined)
+        return;
+    if (index >= path.length) {
+        if (typeof data === "string") {
+            results.push(data);
+        }
+        else if (Array.isArray(data)) {
+            for (const item of data) {
+                if (typeof item === "string") {
+                    results.push(item);
+                }
+            }
+        }
+        return;
+    }
+    const key = path[index];
+    if (key === "*") {
+        if (Array.isArray(data)) {
+            // Wildcard for arrays: iterate all items
+            for (const item of data) {
+                extractValuesRecursive(item, path, index + 1, results);
+            }
+        }
+        else if (typeof data === "object" && data !== null) {
+            // Wildcard for objects: iterate all values
+            const record = data;
+            for (const value of Object.values(record)) {
+                extractValuesRecursive(value, path, index + 1, results);
+            }
+        }
+    }
+    else if (typeof data === "object" && data !== null) {
+        const record = data;
+        extractValuesRecursive(record[key], path, index + 1, results);
+    }
+}
+function matchesPattern(value, patterns, relation) {
+    for (const pattern of patterns) {
+        switch (relation) {
+            case "contains":
+                if (value.includes(pattern))
+                    return true;
+                break;
+            case "equals":
+                if (value === pattern)
+                    return true;
+                break;
+            case "startsWith":
+                if (value.startsWith(pattern))
+                    return true;
+                break;
+        }
+    }
+    return false;
+}
+//# sourceMappingURL=claim.js.map

package/dist/claim.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim.js","sourceRoot":"","sources":["../src/claim.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAkE,MAAM,6BAA6B,CAAC;AACvH,OAAO,KAAK,QAAQ,MAAM,qBAAqB,CAAC;AAGhD,oDAAoD;AACpD,MAAM,UAAU,GAAG,wBAAwB,CAAC;AAC5C,sFAAsF;AACtF,MAAM,UAAU,GAAG,6BAA6B,CAAC;AAEjD;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACtD,CAAC;AAaD;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,GAAW;IAClD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,OAAO;QACL,GAAG;QACH,GAAG;QACH,MAAM,EAAE,WAAW,CAAC,IAAI;QACxB,OAAO,EAAE,EAAE;QACX,MAAM,EAAE,EAAE;KACX,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,KAAiB;IAC1C,KAAK,CAAC,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC;IAElF,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAiB;IAChD,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;AAClG,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAiB;IAClD,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAiB,EAAE,OAAsB,EAAE;IAC3E,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;QACtC,UAAU,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO;YACL,MAAM,EAAE,WAAW,CAAC,KAAK;YACzB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC;IACJ,CAAC;IAED,uCAAuC;IACvC,IAAI,YAAsC,CAAC;IAE3C,+CAA+C;IAC/C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACjE,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAE/D,sBAAsB;YACtB,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClD,MAAM,aAAa,GAAG,qBAAqB,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAEtF,YAAY,GAAG;gBACb,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG;gBAClC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO;gBACrC,OAAO,EAAE,eAAe,CAAC,SAAS,CAAC;gBACnC,OAAO,EAAE,aAAa;gBACtB,QAAQ;aACT,CAAC;YAEF,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAEtD,IAAI,QAAQ,EAAE,CAAC;gBACb,KAAK,CAAC,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC;gBAEpC,yDAAyD;gBACzD,IAAI,QAAsC,CAAC;gBAC3C,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;oBAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;oBACpE,QAAQ,GAAG;wBACT,OAAO,EAAE,QAAQ,CAAC,OAAO;wBACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;wBAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;wBAC/B,WAAW,EAAE,QAAQ,CAAC,WAAW;qBAClC,CAAC;gBACJ,CAAC;gBAED,OAAO;oBACL,MAAM,EAAE,WAAW,CAAC,QAAQ;oBAC5B,MAAM,EAAE,EAAE;oBACV,SAAS,EAAE,IAAI,IAAI,EAAE;oBACrB,QAAQ;oBACR,YAAY;iBACb,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QACrG,CAAC;QAED,4BAA4B;QAC5B,IAAI,CAAC,KAAK,CAAC,WAAW;YAAE,MAAM;IAChC,CAAC;IAED,KAAK,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;IAClC,OAAO;QACL,MAAM,EAAE,WAAW,CAAC,MAAM;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,IAAI,IAAI,EAAE;QACrB,YAAY;KACb,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,OAAqB,EAAE,IAAmB;IAClE,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,4BAA4B,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,aAAa,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IACtG,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE;QAC5C,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,eAAe;QACxC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO;KAClC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAE,IAAgC,CAAC,KAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3I,OAAO,CAAC,GAAG,CAAC,kCAAkC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC1E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAa,EAAE,OAAsB,EAAE,QAAkB;IACtF,OAAO,CAAC,GAAG,CAAC,sCAAsC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAE/F,MAAM,OAAO,GAAwB,EAAE,CAAC;IAExC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,MAAM,YAAY,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAE9K,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrD,OAAO,CAAC,GAAG,CAAC,2BAA2B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC;gBAC/F,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM;YACR,CAAC;QACH,CAAC;QAED,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,uBAAuB;YACxE,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;IACvD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,eAAe,CAAC,IAAa;IACpC,MAAM,UAAU,GAAG,IAAI,CAAC;IACxB,IAAI,OAAe,CAAC;IAEpB,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACxC,OAAO,uBAAuB,CAAC;IACjC,CAAC;IAED,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,GAAG,mBAAmB,CAAC;IAC5D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW;IACxC,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,CAAC;IAEvB,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,aAAa,CAAC,IAAa,EAAE,IAAc;IAClD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,sBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAC/C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAa,EAAE,IAAc,EAAE,KAAa,EAAE,OAAiB;IAC7F,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO;IAEhD,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;gBACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC7B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAExB,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;QAChB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,yCAAyC;YACzC,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;gBACxB,sBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACrD,2CAA2C;YAC3C,MAAM,MAAM,GAAG,IAA+B,CAAC;YAC/C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1C,sBAAsB,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,IAA+B,CAAC;QAC/C,sBAAsB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,QAAkB,EAAE,QAA8C;IACvG,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,UAAU;gBACb,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACzC,MAAM;YACR,KAAK,QAAQ;gBACX,IAAI,KAAK,KAAK,OAAO;oBAAE,OAAO,IAAI,CAAC;gBACnC,MAAM;YACR,KAAK,YAAY;gBACf,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAC3C,MAAM;QACV,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}