@kya-os/mcp 1.10.1 → 1.12.0

package/dist/audit/verifier.js

@@ -0,0 +1,322 @@
+import { canonicalizeJson, canonicalizeJsonBytes } from '../utils/canonical-json.js';
+import { hashAuditValue } from './crypto.js';
+import { AUDIT_DIGEST_DOMAINS, buildAuditRecorderReceiptCore, digestAuditEntry, digestAuditEvidenceManifest, digestAuditEvent, } from './integrity.js';
+import { Rfc9162MerkleTree } from './merkle.js';
+import { auditObservationReceiptSchema, auditVerificationPolicySchema, signedAuditCheckpointSchema, signedAuditEntrySchema, } from './schemas.js';
+export const AUDIT_REASON_CODES = Object.freeze({
+    NOT_EVALUATED: 'AUDIT_NOT_EVALUATED',
+    SCHEMA_INVALID: 'AUDIT_SCHEMA_INVALID',
+    UNSUPPORTED_SUITE: 'AUDIT_UNSUPPORTED_SUITE',
+    UNSUPPORTED_ALGORITHM: 'AUDIT_UNSUPPORTED_ALGORITHM',
+    UNTRUSTED_RECORDER: 'AUDIT_UNTRUSTED_RECORDER',
+    SIGNATURE_INVALID: 'AUDIT_SIGNATURE_INVALID',
+    EVENT_DIGEST_MISMATCH: 'AUDIT_EVENT_DIGEST_MISMATCH',
+    EVIDENCE_MANIFEST_DIGEST_MISMATCH: 'AUDIT_EVIDENCE_MANIFEST_DIGEST_MISMATCH',
+    ENTRY_DIGEST_MISMATCH: 'AUDIT_ENTRY_DIGEST_MISMATCH',
+    RECEIPT_MISMATCH: 'AUDIT_RECEIPT_MISMATCH',
+    LEDGER_SCOPE_MISMATCH: 'AUDIT_LEDGER_SCOPE_MISMATCH',
+    SEQUENCE_GAP: 'AUDIT_SEQUENCE_GAP',
+    PREDECESSOR_MISMATCH: 'AUDIT_PREDECESSOR_MISMATCH',
+    GENESIS_INVALID: 'AUDIT_GENESIS_INVALID',
+    CHECKPOINT_MISSING: 'AUDIT_CHECKPOINT_MISSING',
+    CHECKPOINT_DIGEST_MISMATCH: 'AUDIT_CHECKPOINT_DIGEST_MISMATCH',
+    CHECKPOINT_SIGNATURE_INVALID: 'AUDIT_CHECKPOINT_SIGNATURE_INVALID',
+    CHECKPOINT_ROOT_MISMATCH: 'AUDIT_CHECKPOINT_ROOT_MISMATCH',
+    CHECKPOINT_RANGE_MISMATCH: 'AUDIT_CHECKPOINT_RANGE_MISMATCH',
+    CHECKPOINT_CHAIN_MISMATCH: 'AUDIT_CHECKPOINT_CHAIN_MISMATCH',
+    CHECKPOINT_FORK_DETECTED: 'AUDIT_CHECKPOINT_FORK_DETECTED',
+    MERKLE_PROOF_INVALID: 'AUDIT_MERKLE_PROOF_INVALID',
+    OBSERVER_EVIDENCE_MISSING: 'AUDIT_OBSERVER_EVIDENCE_MISSING',
+    OBSERVATION_DIGEST_MISMATCH: 'AUDIT_OBSERVATION_DIGEST_MISMATCH',
+    OBSERVATION_SIGNATURE_INVALID: 'AUDIT_OBSERVATION_SIGNATURE_INVALID',
+    OBSERVATION_SCOPE_MISMATCH: 'AUDIT_OBSERVATION_SCOPE_MISMATCH',
+    UNTRUSTED_OBSERVER: 'AUDIT_UNTRUSTED_OBSERVER',
+    OBSERVATION_STALE: 'AUDIT_OBSERVATION_STALE',
+    OBSERVATION_CHAIN_MISMATCH: 'AUDIT_OBSERVATION_CHAIN_MISMATCH',
+    UNTRUSTED_SUPPORTING_ANCHOR: 'AUDIT_UNTRUSTED_SUPPORTING_ANCHOR',
+    SUPPORTING_ANCHOR_INVALID: 'AUDIT_SUPPORTING_ANCHOR_INVALID',
+    AUTHORIZATION_EVIDENCE_MISSING: 'AUDIT_AUTHORIZATION_EVIDENCE_MISSING',
+    AUTHORIZATION_COLLATERAL_NOT_VERIFIED: 'AUDIT_AUTHORIZATION_COLLATERAL_NOT_VERIFIED',
+    CURRENT_AUTHORIZATION_NOT_EVALUATED: 'AUDIT_CURRENT_AUTHORIZATION_NOT_EVALUATED',
+    BUNDLE_SCHEMA_INVALID: 'AUDIT_BUNDLE_SCHEMA_INVALID',
+    BUNDLE_MANIFEST_DIGEST_MISMATCH: 'AUDIT_BUNDLE_MANIFEST_DIGEST_MISMATCH',
+    BUNDLE_SIGNATURE_INVALID: 'AUDIT_BUNDLE_SIGNATURE_INVALID',
+    BUNDLE_EXPORTER_UNAUTHORIZED: 'AUDIT_BUNDLE_EXPORTER_UNAUTHORIZED',
+    BUNDLE_INVENTORY_MISMATCH: 'AUDIT_BUNDLE_INVENTORY_MISMATCH',
+    BUNDLE_COMPONENT_DIGEST_MISMATCH: 'AUDIT_BUNDLE_COMPONENT_DIGEST_MISMATCH',
+    BUNDLE_SELECTION_INCOMPLETE: 'AUDIT_BUNDLE_SELECTION_INCOMPLETE',
+    VERIFICATION_POLICY_MISMATCH: 'AUDIT_VERIFICATION_POLICY_MISMATCH',
+    VERIFICATION_POLICY_INVALID: 'AUDIT_VERIFICATION_POLICY_INVALID',
+    EXPLICITLY_REDACTED: 'AUDIT_EXPLICITLY_REDACTED',
+    EXPLICITLY_DISPOSED: 'AUDIT_EXPLICITLY_DISPOSED',
+    EXPLICITLY_UNAVAILABLE: 'AUDIT_EXPLICITLY_UNAVAILABLE',
+});
+function dimension(verdict, reasonCodes = []) {
+    return { verdict, reasonCodes: [...new Set(reasonCodes)].sort() };
+}
+function sameSigner(left, right) {
+    return left.did === right.did && left.kid === right.kid && left.alg === right.alg;
+}
+function keyIsValidAt(policy, at) {
+    return (policy.validFrom === undefined || at >= policy.validFrom) &&
+        (policy.validUntil === undefined || at <= policy.validUntil);
+}
+function exactJson(left, right) {
+    try {
+        return canonicalizeJson(left) === canonicalizeJson(right);
+    }
+    catch {
+        return false;
+    }
+}
+function invalidPolicyReport(policy) {
+    const policyId = typeof policy === 'object' && policy !== null &&
+        typeof policy.policyId === 'string'
+        ? policy.policyId
+        : 'invalid-policy';
+    const invalid = dimension('invalid', [AUDIT_REASON_CODES.VERIFICATION_POLICY_INVALID]);
+    return {
+        schema: 'https://schema.kya-os.org/v1/protocol/audit/verification-report/v1.0.0',
+        policyId,
+        cryptographicIntegrity: invalid,
+        chainIntegrity: invalid,
+        checkpointIntegrity: invalid,
+        anchorIntegrity: invalid,
+        scopeEvidenceCompleteness: invalid,
+        authorizedAsObserved: dimension('indeterminate', [AUDIT_REASON_CODES.NOT_EVALUATED]),
+        currentAuthorization: dimension('indeterminate', [AUDIT_REASON_CODES.NOT_EVALUATED]),
+    };
+}
+/** Pure historical verifier. It never reads live nonce state or applies current freshness. */
+export class AuditArtifactVerifier {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async verifyEntries(entries, policy) {
+        if (!auditVerificationPolicySchema.safeParse(policy).success) {
+            return invalidPolicyReport(policy);
+        }
+        const verificationPolicy = policy;
+        const cryptoReasons = new Set();
+        const chainReasons = new Set();
+        const validatedEntries = [];
+        if (entries.length === 0) {
+            chainReasons.add(AUDIT_REASON_CODES.BUNDLE_SELECTION_INCOMPLETE);
+        }
+        for (const candidate of entries) {
+            const parsed = signedAuditEntrySchema.safeParse(candidate);
+            if (!parsed.success) {
+                cryptoReasons.add(AUDIT_REASON_CODES.SCHEMA_INVALID);
+                chainReasons.add(AUDIT_REASON_CODES.SCHEMA_INVALID);
+                continue;
+            }
+            const entry = parsed.data;
+            const index = validatedEntries.length;
+            await this.verifyEntry(entry, verificationPolicy, cryptoReasons);
+            this.verifyChainPosition(entry, validatedEntries[index - 1], index, chainReasons);
+            validatedEntries.push(entry);
+        }
+        const authorizationPresent = validatedEntries.some((entry) => entry.core.event.authorization !== undefined);
+        const [authorizedAsObserved, currentAuthorization] = this.options.authorization === undefined
+            ? [
+                dimension('indeterminate', [
+                    authorizationPresent
+                        ? AUDIT_REASON_CODES.AUTHORIZATION_COLLATERAL_NOT_VERIFIED
+                        : AUDIT_REASON_CODES.AUTHORIZATION_EVIDENCE_MISSING,
+                ]),
+                dimension('indeterminate', [
+                    AUDIT_REASON_CODES.CURRENT_AUTHORIZATION_NOT_EVALUATED,
+                ]),
+            ]
+            : await Promise.all([
+                this.options.authorization.verifyAsObserved(validatedEntries, verificationPolicy),
+                this.options.authorization.verifyCurrent(validatedEntries, verificationPolicy),
+            ]);
+        return {
+            schema: 'https://schema.kya-os.org/v1/protocol/audit/verification-report/v1.0.0',
+            policyId: verificationPolicy.policyId,
+            ...(this.options.verifiedAt === undefined ? {} : { verifiedAt: this.options.verifiedAt() }),
+            cryptographicIntegrity: dimension(cryptoReasons.size === 0 && entries.length > 0 ? 'valid' : 'invalid', cryptoReasons),
+            chainIntegrity: dimension(chainReasons.size === 0 && entries.length > 0 ? 'valid' : 'invalid', chainReasons),
+            checkpointIntegrity: dimension('indeterminate', [AUDIT_REASON_CODES.CHECKPOINT_MISSING]),
+            anchorIntegrity: dimension('indeterminate', [AUDIT_REASON_CODES.OBSERVER_EVIDENCE_MISSING]),
+            scopeEvidenceCompleteness: dimension(entries.length > 0 ? 'indeterminate' : 'invalid', [AUDIT_REASON_CODES.NOT_EVALUATED]),
+            authorizedAsObserved,
+            currentAuthorization,
+        };
+    }
+    async verifyCheckpoint(checkpoint, entries, policy) {
+        const reasons = new Set();
+        if (!auditVerificationPolicySchema.safeParse(policy).success) {
+            return dimension('invalid', [AUDIT_REASON_CODES.VERIFICATION_POLICY_INVALID]);
+        }
+        const parsedCheckpoint = signedAuditCheckpointSchema.safeParse(checkpoint);
+        if (!parsedCheckpoint.success) {
+            return dimension('invalid', [AUDIT_REASON_CODES.SCHEMA_INVALID]);
+        }
+        const validated = parsedCheckpoint.data;
+        const core = validated.core;
+        if (!policy.acceptedIntegritySuites.includes(core.integritySuite)) {
+            reasons.add(AUDIT_REASON_CODES.UNSUPPORTED_SUITE);
+        }
+        if (!policy.acceptedAlgorithms.includes(core.issuer.alg)) {
+            reasons.add(AUDIT_REASON_CODES.UNSUPPORTED_ALGORITHM);
+        }
+        const epochPolicy = policy.trustedLedgerEpochs.find((candidate) => candidate.ledgerId === core.ledgerId &&
+            candidate.ledgerEpochId === core.ledgerEpochId);
+        if (!epochPolicy?.recorderKeys.some((candidate) => sameSigner(candidate.signer, core.issuer) && keyIsValidAt(candidate, core.createdAt))) {
+            reasons.add(AUDIT_REASON_CODES.UNTRUSTED_RECORDER);
+        }
+        const expectedDigest = await hashAuditValue(this.options.hasher, AUDIT_DIGEST_DOMAINS.checkpoint, core);
+        if (expectedDigest !== validated.checkpointDigest) {
+            reasons.add(AUDIT_REASON_CODES.CHECKPOINT_DIGEST_MISMATCH);
+        }
+        if (!(await this.options.signatures.verify(canonicalizeJsonBytes(core), validated.jws, core.issuer))) {
+            reasons.add(AUDIT_REASON_CODES.CHECKPOINT_SIGNATURE_INVALID);
+        }
+        const expectedSize = Number(core.treeSize);
+        const first = entries[0];
+        const last = entries[entries.length - 1];
+        if (!Number.isSafeInteger(expectedSize) ||
+            expectedSize !== entries.length ||
+            first?.core.sequence !== core.firstSequence ||
+            last?.core.sequence !== core.lastSequence ||
+            last?.entryDigest !== core.headEntryDigest ||
+            entries.some((entry) => entry.core.ledgerId !== core.ledgerId ||
+                entry.core.ledgerEpochId !== core.ledgerEpochId)) {
+            reasons.add(AUDIT_REASON_CODES.CHECKPOINT_RANGE_MISMATCH);
+        }
+        else {
+            const root = await new Rfc9162MerkleTree(this.options.hasher)
+                .root(entries.map((entry) => entry.entryDigest));
+            if (root !== core.rootDigest)
+                reasons.add(AUDIT_REASON_CODES.CHECKPOINT_ROOT_MISMATCH);
+        }
+        return dimension(reasons.size === 0 ? 'valid' : 'invalid', reasons);
+    }
+    async verifyObservation(checkpoint, receipt, policy) {
+        const reasons = new Set();
+        let freshnessIndeterminate = false;
+        if (!auditVerificationPolicySchema.safeParse(policy).success) {
+            return dimension('invalid', [AUDIT_REASON_CODES.VERIFICATION_POLICY_INVALID]);
+        }
+        const parsedCheckpoint = signedAuditCheckpointSchema.safeParse(checkpoint);
+        const parsedReceipt = auditObservationReceiptSchema.safeParse(receipt);
+        if (!parsedCheckpoint.success || !parsedReceipt.success) {
+            return dimension('invalid', [AUDIT_REASON_CODES.SCHEMA_INVALID]);
+        }
+        const validatedCheckpoint = parsedCheckpoint.data;
+        const validatedReceipt = parsedReceipt.data;
+        const core = validatedReceipt.core;
+        if (core.schema !==
+            'https://schema.kya-os.org/v1/protocol/audit/observation/v1.0.0') {
+            reasons.add(AUDIT_REASON_CODES.SCHEMA_INVALID);
+        }
+        if (core.ledgerId !== validatedCheckpoint.core.ledgerId ||
+            core.ledgerEpochId !== validatedCheckpoint.core.ledgerEpochId ||
+            core.checkpointDigest !== validatedCheckpoint.checkpointDigest ||
+            core.treeSize !== validatedCheckpoint.core.treeSize) {
+            reasons.add(AUDIT_REASON_CODES.OBSERVATION_SCOPE_MISMATCH);
+        }
+        if (!policy.acceptedAlgorithms.includes(core.observer.alg)) {
+            reasons.add(AUDIT_REASON_CODES.UNSUPPORTED_ALGORITHM);
+        }
+        if (!policy.trustedObservers.some((candidate) => sameSigner(candidate.signer, core.observer) &&
+            keyIsValidAt(candidate, core.observedAt))) {
+            reasons.add(AUDIT_REASON_CODES.UNTRUSTED_OBSERVER);
+        }
+        if (policy.requiredCheckpointFreshnessMs !== undefined) {
+            const now = this.options.verifiedAt?.();
+            if (now === undefined) {
+                reasons.add(AUDIT_REASON_CODES.NOT_EVALUATED);
+                freshnessIndeterminate = true;
+            }
+            else if (now - core.observedAt > policy.requiredCheckpointFreshnessMs) {
+                reasons.add(AUDIT_REASON_CODES.OBSERVATION_STALE);
+            }
+        }
+        const digest = await hashAuditValue(this.options.hasher, AUDIT_DIGEST_DOMAINS.observation, core);
+        if (digest !== validatedReceipt.observationDigest) {
+            reasons.add(AUDIT_REASON_CODES.OBSERVATION_DIGEST_MISMATCH);
+        }
+        if (!(await this.options.signatures.verify(canonicalizeJsonBytes(core), validatedReceipt.jws, core.observer))) {
+            reasons.add(AUDIT_REASON_CODES.OBSERVATION_SIGNATURE_INVALID);
+        }
+        const onlyIndeterminate = freshnessIndeterminate &&
+            [...reasons].every((reason) => reason === AUDIT_REASON_CODES.NOT_EVALUATED);
+        return dimension(reasons.size === 0 ? 'valid' : onlyIndeterminate ? 'indeterminate' : 'invalid', reasons);
+    }
+    async verifyEntry(entry, policy, reasons) {
+        if (!policy.acceptedIntegritySuites.includes(entry.core.integritySuite)) {
+            reasons.add(AUDIT_REASON_CODES.UNSUPPORTED_SUITE);
+        }
+        if (!policy.acceptedAlgorithms.includes(entry.core.recorder.alg)) {
+            reasons.add(AUDIT_REASON_CODES.UNSUPPORTED_ALGORITHM);
+        }
+        const epochPolicy = policy.trustedLedgerEpochs.find((candidate) => candidate.ledgerId === entry.core.ledgerId &&
+            candidate.ledgerEpochId === entry.core.ledgerEpochId);
+        const trustedKey = epochPolicy?.recorderKeys.find((candidate) => sameSigner(candidate.signer, entry.core.recorder) &&
+            keyIsValidAt(candidate, entry.core.recordedAt));
+        if (trustedKey === undefined)
+            reasons.add(AUDIT_REASON_CODES.UNTRUSTED_RECORDER);
+        const eventDigest = await digestAuditEvent(this.options.hasher, entry.core.event);
+        if (eventDigest !== entry.core.eventDigest || eventDigest !== entry.eventDigest) {
+            reasons.add(AUDIT_REASON_CODES.EVENT_DIGEST_MISMATCH);
+        }
+        const evidenceDigest = await digestAuditEvidenceManifest(this.options.hasher, entry.core.event);
+        if (evidenceDigest !== entry.core.evidenceManifestDigest) {
+            reasons.add(AUDIT_REASON_CODES.EVIDENCE_MANIFEST_DIGEST_MISMATCH);
+        }
+        const entryDigest = await digestAuditEntry(this.options.hasher, entry.core);
+        if (entryDigest !== entry.entryDigest)
+            reasons.add(AUDIT_REASON_CODES.ENTRY_DIGEST_MISMATCH);
+        const expectedReceipt = buildAuditRecorderReceiptCore(entry.core, entry.entryDigest);
+        if (!exactJson(expectedReceipt, entry.recorderReceipt.core)) {
+            reasons.add(AUDIT_REASON_CODES.RECEIPT_MISMATCH);
+        }
+        if (!(await this.options.signatures.verify(canonicalizeJsonBytes(entry.recorderReceipt.core), entry.recorderReceipt.jws, entry.core.recorder))) {
+            reasons.add(AUDIT_REASON_CODES.SIGNATURE_INVALID);
+        }
+    }
+    verifyChainPosition(entry, previous, index, reasons) {
+        if (previous === undefined) {
+            if (entry.core.sequence === '0') {
+                if (entry.core.previousEntryDigest !== null ||
+                    entry.core.event.eventType !== 'ledger.epoch.started') {
+                    reasons.add(AUDIT_REASON_CODES.GENESIS_INVALID);
+                }
+            }
+            else if (index === 0 && entry.core.previousEntryDigest === null) {
+                reasons.add(AUDIT_REASON_CODES.PREDECESSOR_MISMATCH);
+            }
+            return;
+        }
+        if (entry.core.ledgerId !== previous.core.ledgerId ||
+            entry.core.ledgerEpochId !== previous.core.ledgerEpochId) {
+            reasons.add(AUDIT_REASON_CODES.LEDGER_SCOPE_MISMATCH);
+        }
+        try {
+            if (BigInt(entry.core.sequence) !== BigInt(previous.core.sequence) + 1n) {
+                reasons.add(AUDIT_REASON_CODES.SEQUENCE_GAP);
+            }
+        }
+        catch {
+            reasons.add(AUDIT_REASON_CODES.SEQUENCE_GAP);
+        }
+        if (entry.core.previousEntryDigest !== previous.entryDigest) {
+            reasons.add(AUDIT_REASON_CODES.PREDECESSOR_MISMATCH);
+        }
+    }
+}
+export function mergeAuditDimensions(...values) {
+    if (values.length === 0) {
+        // An empty merge must never inherit a passing verdict by vacuous truth.
+        return dimension('indeterminate', [AUDIT_REASON_CODES.NOT_EVALUATED]);
+    }
+    const verdict = values.some((value) => value.verdict === 'invalid')
+        ? 'invalid'
+        : values.every((value) => value.verdict === 'valid') ? 'valid' : 'indeterminate';
+    return dimension(verdict, values.flatMap((value) => value.reasonCodes));
+}
+//# sourceMappingURL=verifier.js.map

package/dist/audit/verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifier.js","sourceRoot":"","sources":["../../src/audit/verifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACrF,OAAO,EAAE,cAAc,EAAiD,MAAM,aAAa,CAAC;AAC5F,OAAO,EACL,oBAAoB,EACpB,6BAA6B,EAC7B,gBAAgB,EAChB,2BAA2B,EAC3B,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,6BAA6B,EAC7B,6BAA6B,EAC7B,2BAA2B,EAC3B,sBAAsB,GACvB,MAAM,cAAc,CAAC;AAYtB,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9C,aAAa,EAAE,qBAAqB;IACpC,cAAc,EAAE,sBAAsB;IACtC,iBAAiB,EAAE,yBAAyB;IAC5C,qBAAqB,EAAE,6BAA6B;IACpD,kBAAkB,EAAE,0BAA0B;IAC9C,iBAAiB,EAAE,yBAAyB;IAC5C,qBAAqB,EAAE,6BAA6B;IACpD,iCAAiC,EAAE,yCAAyC;IAC5E,qBAAqB,EAAE,6BAA6B;IACpD,gBAAgB,EAAE,wBAAwB;IAC1C,qBAAqB,EAAE,6BAA6B;IACpD,YAAY,EAAE,oBAAoB;IAClC,oBAAoB,EAAE,4BAA4B;IAClD,eAAe,EAAE,uBAAuB;IACxC,kBAAkB,EAAE,0BAA0B;IAC9C,0BAA0B,EAAE,kCAAkC;IAC9D,4BAA4B,EAAE,oCAAoC;IAClE,wBAAwB,EAAE,gCAAgC;IAC1D,yBAAyB,EAAE,iCAAiC;IAC5D,yBAAyB,EAAE,iCAAiC;IAC5D,wBAAwB,EAAE,gCAAgC;IAC1D,oBAAoB,EAAE,4BAA4B;IAClD,yBAAyB,EAAE,iCAAiC;IAC5D,2BAA2B,EAAE,mCAAmC;IAChE,6BAA6B,EAAE,qCAAqC;IACpE,0BAA0B,EAAE,kCAAkC;IAC9D,kBAAkB,EAAE,0BAA0B;IAC9C,iBAAiB,EAAE,yBAAyB;IAC5C,0BAA0B,EAAE,kCAAkC;IAC9D,2BAA2B,EAAE,mCAAmC;IAChE,yBAAyB,EAAE,iCAAiC;IAC5D,8BAA8B,EAAE,sCAAsC;IACtE,qCAAqC,EAAE,6CAA6C;IACpF,mCAAmC,EAAE,2CAA2C;IAChF,qBAAqB,EAAE,6BAA6B;IACpD,+BAA+B,EAAE,uCAAuC;IACxE,wBAAwB,EAAE,gCAAgC;IAC1D,4BAA4B,EAAE,oCAAoC;IAClE,yBAAyB,EAAE,iCAAiC;IAC5D,gCAAgC,EAAE,wCAAwC;IAC1E,2BAA2B,EAAE,mCAAmC;IAChE,4BAA4B,EAAE,oCAAoC;IAClE,2BAA2B,EAAE,mCAAmC;IAChE,mBAAmB,EAAE,2BAA2B;IAChD,mBAAmB,EAAE,2BAA2B;IAChD,sBAAsB,EAAE,8BAA8B;CAC9C,CAAC,CAAC;AAEZ,SAAS,SAAS,CAChB,OAA8C,EAC9C,cAAgC,EAAE;IAElC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,UAAU,CAAC,IAAe,EAAE,KAAgB;IACnD,OAAO,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC;AACpF,CAAC;AAED,SAAS,YAAY,CAAC,MAAgC,EAAE,EAAU;IAChE,OAAO,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,IAAI,MAAM,CAAC,SAAS,CAAC;QAC/D,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,SAAS,CAAC,IAAa,EAAE,KAAc;IAC9C,IAAI,CAAC;QACH,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAe;IAC1C,MAAM,QAAQ,GAAG,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAC5D,OAAQ,MAAiC,CAAC,QAAQ,KAAK,QAAQ;QAC/D,CAAC,CAAE,MAA+B,CAAC,QAAQ;QAC3C,CAAC,CAAC,gBAAgB,CAAC;IACrB,MAAM,OAAO,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAAC,CAAC;IACvF,OAAO;QACL,MAAM,EAAE,wEAAwE;QAChF,QAAQ;QACR,sBAAsB,EAAE,OAAO;QAC/B,cAAc,EAAE,OAAO;QACvB,mBAAmB,EAAE,OAAO;QAC5B,eAAe,EAAE,OAAO;QACxB,yBAAyB,EAAE,OAAO;QAClC,oBAAoB,EAAE,SAAS,CAAC,eAAe,EAAE,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;QACpF,oBAAoB,EAAE,SAAS,CAAC,eAAe,EAAE,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;KACrF,CAAC;AACJ,CAAC;AAqBD,8FAA8F;AAC9F,MAAM,OAAO,qBAAqB;IACH;IAA7B,YAA6B,OAAqC;QAArC,YAAO,GAAP,OAAO,CAA8B;IAAG,CAAC;IAEtE,KAAK,CAAC,aAAa,CACjB,OAA2B,EAC3B,MAA2C;QAE3C,IAAI,CAAC,6BAA6B,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;YAC7D,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,kBAAkB,GAAG,MAAmC,CAAC;QAC/D,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;QACxC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;QACvC,MAAM,gBAAgB,GAAyB,EAAE,CAAC;QAElD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,YAAY,CAAC,GAAG,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAAC;QACnE,CAAC;QAED,KAAK,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,aAAa,CAAC,GAAG,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC;gBACrD,YAAY,CAAC,GAAG,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC;gBACpD,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAA0B,CAAC;YAChD,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC;YACtC,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,kBAAkB,EAAE,aAAa,CAAC,CAAC;YACjE,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;YAClF,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QAED,MAAM,oBAAoB,GAAG,gBAAgB,CAAC,IAAI,CAChD,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CACxD,CAAC;QACF,MAAM,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,GAChD,IAAI,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS;YACtC,CAAC,CAAC;gBACE,SAAS,CAAC,eAAe,EAAE;oBACzB,oBAAoB;wBAClB,CAAC,CAAC,kBAAkB,CAAC,qCAAqC;wBAC1D,CAAC,CAAC,kBAAkB,CAAC,8BAA8B;iBACtD,CAAC;gBACF,SAAS,CAAC,eAAe,EAAE;oBACzB,kBAAkB,CAAC,mCAAmC;iBACvD,CAAC;aACH;YACH,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;gBACjF,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;aAC/E,CAAC,CAAC;QACT,OAAO;YACL,MAAM,EAAE,wEAAwE;YAChF,QAAQ,EAAE,kBAAkB,CAAC,QAAQ;YACrC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;YAC3F,sBAAsB,EAAE,SAAS,CAC/B,aAAa,CAAC,IAAI,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EACpE,aAAa,CACd;YACD,cAAc,EAAE,SAAS,CACvB,YAAY,CAAC,IAAI,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EACnE,YAAY,CACb;YACD,mBAAmB,EAAE,SAAS,CAAC,eAAe,EAAE,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;YACxF,eAAe,EAAE,SAAS,CAAC,eAAe,EAAE,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,CAAC;YAC3F,yBAAyB,EAAE,SAAS,CAClC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,EAChD,CAAC,kBAAkB,CAAC,aAAa,CAAC,CACnC;YACD,oBAAoB;YACpB,oBAAoB;SACrB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,UAAmC,EACnC,OAAsC,EACtC,MAAiC;QAEjC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,IAAI,CAAC,6BAA6B,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;YAC7D,OAAO,SAAS,CAAC,SAAS,EAAE,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC3E,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;YAC9B,OAAO,SAAS,CAAC,SAAS,EAAE,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAA+B,CAAC;QACnE,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YAClE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAChE,SAAS,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;YACpC,SAAS,CAAC,aAAa,KAAK,IAAI,CAAC,aAAa,CAAC,CAAC;QAClD,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAChD,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YACxF,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,cAAc,CACzC,IAAI,CAAC,OAAO,CAAC,MAAM,EACnB,oBAAoB,CAAC,UAAU,EAC/B,IAAI,CACL,CAAC;QACF,IAAI,cAAc,KAAK,SAAS,CAAC,gBAAgB,EAAE,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CACxC,qBAAqB,CAAC,IAAI,CAAC,EAC3B,SAAS,CAAC,GAAG,EACb,IAAI,CAAC,MAAM,CACZ,CAAC,EAAE,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,4BAA4B,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC;YACrC,YAAY,KAAK,OAAO,CAAC,MAAM;YAC/B,KAAK,EAAE,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,aAAa;YAC3C,IAAI,EAAE,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,YAAY;YACzC,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC,eAAe;YAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;gBAC3D,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,MAAM,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;iBAC1D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;YACnD,IAAI,IAAI,KAAK,IAAI,CAAC,UAAU;gBAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,SAAS,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,UAAmC,EACnC,OAAkC,EAClC,MAAiC;QAEjC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,IAAI,sBAAsB,GAAG,KAAK,CAAC;QACnC,IAAI,CAAC,6BAA6B,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;YAC7D,OAAO,SAAS,CAAC,SAAS,EAAE,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC3E,MAAM,aAAa,GAAG,6BAA6B,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACvE,IAAI,CAAC,gBAAgB,CAAC,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;YACxD,OAAO,SAAS,CAAC,SAAS,EAAE,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,mBAAmB,GAAG,gBAAgB,CAAC,IAA+B,CAAC;QAC7E,MAAM,gBAAgB,GAAG,aAAa,CAAC,IAAiC,CAAC;QACzE,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC;QACnC,IAAI,IAAI,CAAC,MAAM;YACb,gEAAgE,EAAE,CAAC;YACnE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,mBAAmB,CAAC,IAAI,CAAC,QAAQ;YACrD,IAAI,CAAC,aAAa,KAAK,mBAAmB,CAAC,IAAI,CAAC,aAAa;YAC7D,IAAI,CAAC,gBAAgB,KAAK,mBAAmB,CAAC,gBAAgB;YAC9D,IAAI,CAAC,QAAQ,KAAK,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAC9C,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC;YAC3C,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,MAAM,CAAC,6BAA6B,KAAK,SAAS,EAAE,CAAC;YACvD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;YACxC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;gBAC9C,sBAAsB,GAAG,IAAI,CAAC;YAChC,CAAC;iBAAM,IAAI,GAAG,GAAG,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,6BAA6B,EAAE,CAAC;gBACxE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,IAAI,CAAC,OAAO,CAAC,MAAM,EACnB,oBAAoB,CAAC,WAAW,EAChC,IAAI,CACL,CAAC;QACF,IAAI,MAAM,KAAK,gBAAgB,CAAC,iBAAiB,EAAE,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CACxC,qBAAqB,CAAC,IAAI,CAAC,EAC3B,gBAAgB,CAAC,GAAG,EACpB,IAAI,CAAC,QAAQ,CACd,CAAC,EAAE,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,iBAAiB,GAAG,sBAAsB;YAC9C,CAAC,GAAG,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,kBAAkB,CAAC,aAAa,CAAC,CAAC;QAC9E,OAAO,SAAS,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC5G,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,KAAyB,EACzB,MAAiC,EACjC,OAAoB;QAEpB,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YACxE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACjE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAChE,SAAS,CAAC,QAAQ,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ;YAC1C,SAAS,CAAC,aAAa,KAAK,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,WAAW,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAC9D,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;YACjD,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAClD,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;QAEjF,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClF,IAAI,WAAW,KAAK,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,WAAW,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;YAChF,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,2BAA2B,CACtD,IAAI,CAAC,OAAO,CAAC,MAAM,EACnB,KAAK,CAAC,IAAI,CAAC,KAAK,CACjB,CAAC;QACF,IAAI,cAAc,KAAK,KAAK,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,iCAAiC,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5E,IAAI,WAAW,KAAK,KAAK,CAAC,WAAW;YAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAC;QAE7F,MAAM,eAAe,GAAG,6BAA6B,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACrF,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5D,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CACxC,qBAAqB,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,EACjD,KAAK,CAAC,eAAe,CAAC,GAAG,EACzB,KAAK,CAAC,IAAI,CAAC,QAAQ,CACpB,CAAC,EAAE,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAEO,mBAAmB,CACzB,KAAyB,EACzB,QAAwC,EACxC,KAAa,EACb,OAAoB;QAEpB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,GAAG,EAAE,CAAC;gBAChC,IAAI,KAAK,CAAC,IAAI,CAAC,mBAAmB,KAAK,IAAI;oBACzC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,KAAK,sBAAsB,EAAE,CAAC;oBACxD,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAC;gBAClD,CAAC;YACH,CAAC;iBAAM,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,mBAAmB,KAAK,IAAI,EAAE,CAAC;gBAClE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,CAAC;YACvD,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI,CAAC,QAAQ;YAChD,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC;YACH,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC;gBACxE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,CAAC,mBAAmB,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC5D,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,oBAAoB,CAClC,GAAG,MAA6C;IAEhD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,wEAAwE;QACxE,OAAO,SAAS,CAAC,eAAe,EAAE,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC;QACjE,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;IACnF,OAAO,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;AAC1E,CAAC"}

package/dist/card/builder.d.ts

@@ -77,7 +77,7 @@ export declare class CardBuilder {
      */
     accountableTo(responsibleParty: string, opts?: AccountableToOptions): this;
     /**
-     * Advertise the per-request holder-of-key proof profile (`org.kya-os/proof@1`). This only NAMES
+     * Advertise the per-request holder-of-key proof profile (`org.kya-os/proof.v1`). This only NAMES
      * the profile — the proof itself is never on the static card; it rides per-request `_meta`.
      */
     usesProof(): this;

package/dist/card/builder.js

@@ -91,7 +91,7 @@ export class CardBuilder {
         return this;
     }
     /**
-     * Advertise the per-request holder-of-key proof profile (`org.kya-os/proof@1`). This only NAMES
+     * Advertise the per-request holder-of-key proof profile (`org.kya-os/proof.v1`). This only NAMES
      * the profile — the proof itself is never on the static card; it rides per-request `_meta`.
      */
     usesProof() {

package/dist/card/emit.d.ts

@@ -20,7 +20,7 @@
  * A stripped `_meta` degrades to a fetch, never a failure.
  */
 import { KYA_OS_CARD_META_KEY } from './resolve.js';
-import { type BitstringStatusListEntry, type EntityCard, type EntityType } from './schema.js';
+import { type ProofProfile, type BitstringStatusListEntry, type EntityCard, type EntityType } from './schema.js';
 /**
  * Shared emit option: override the card.json URL the web-anchored projections point at. Lets a
  * BARE `did:web` org root (which has no path-derived card path) publish via the shipped helpers,
@@ -37,7 +37,7 @@ export declare const A2A_ENTITY_CARD_EXT_DESCRIPTION = "KYA-OS typed DID-anchore
 /** JSON-LD `@context` namespace for the uniquely-ours AgentFacts axes. */
 export declare const AGENTFACTS_KYA_CONTEXT = "https://kya-os.org/ns/agentfacts/v1#";
 /** The per-request holder-of-key proof profile a card advertises (named, never inlined). */
-export declare const PROOF_PROFILE = "org.kya-os/proof@1";
+export declare const PROOF_PROFILE = "org.kya-os/proof.v1";
 /** A W3C DID-document `service[]` entry anchoring the card. */
 export interface DidServiceEntry {
     id: string;
@@ -85,7 +85,7 @@ export interface A2AExtension {
         entityType: 'agent';
         cardUrl: string;
         /** Emitted only when the card DECLARES a proof profile — consistent with the other rails. */
-        proofProfile?: typeof PROOF_PROFILE;
+        proofProfile?: ProofProfile;
     };
 }
 /** A NANDA AgentFacts JSON-LD projection. */

package/dist/card/emit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"emit.d.ts","sourceRoot":"","sources":["../../src/card/emit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAEL,oBAAoB,EAIrB,MAAM,cAAc,CAAC;AACtB,OAAO,EAGL,KAAK,wBAAwB,EAC7B,KAAK,UAAU,EACf,KAAK,UAAU,EAChB,MAAM,aAAa,CAAC;AAErB;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,iFAAiF;AACjF,eAAO,MAAM,uBAAuB,8CAA8C,CAAC;AACnF,qEAAqE;AACrE,eAAO,MAAM,+BAA+B,qDAAqD,CAAC;AAClG,0EAA0E;AAC1E,eAAO,MAAM,sBAAsB,yCAAyC,CAAC;AAC7E,4FAA4F;AAC5F,eAAO,MAAM,aAAa,uBAAmB,CAAC;AAI9C,+DAA+D;AAC/D,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,UAAU,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,wBAAwB,CAAC;CACvC;AAED,gFAAgF;AAChF,MAAM,MAAM,YAAY,GAAG;IAAE,oBAAoB,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5D,sFAAsF;AACtF,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,oBAAoB,EAAE,iBAAiB,GAAG,YAAY,CAAC,CAAC;AAEnG,+DAA+D;AAC/D,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,cAAc,CAAC;CACvB;AAED,0DAA0D;AAC1D,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE;QACN,EAAE,EAAE,MAAM,CAAC;QACX,UAAU,EAAE,OAAO,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,6FAA6F;QAC7F,YAAY,CAAC,EAAE,OAAO,aAAa,CAAC;KACrC,CAAC;CACH;AAED,6CAA6C;AAC7C,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,UAAU,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAID;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,GAAE,eAAoB,GAAG,eAAe,CAM/F;AAED,+FAA+F;AAC/F,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,UAAU,EAChB,IAAI,GAAE,eAAe,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAC/C,cAAc,CAKhB;AAED,4FAA4F;AAC5F,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,YAAY,CAE7D;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,UAAU,EAChB,IAAI,GAAE,eAAe,GAAG;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAO,GAClD,YAAY,CAkBd;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAazD"}
+{"version":3,"file":"emit.d.ts","sourceRoot":"","sources":["../../src/card/emit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAEL,oBAAoB,EAIrB,MAAM,cAAc,CAAC;AACtB,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,wBAAwB,EAC7B,KAAK,UAAU,EACf,KAAK,UAAU,EAChB,MAAM,aAAa,CAAC;AAErB;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,iFAAiF;AACjF,eAAO,MAAM,uBAAuB,8CAA8C,CAAC;AACnF,qEAAqE;AACrE,eAAO,MAAM,+BAA+B,qDAAqD,CAAC;AAClG,0EAA0E;AAC1E,eAAO,MAAM,sBAAsB,yCAAyC,CAAC;AAC7E,4FAA4F;AAC5F,eAAO,MAAM,aAAa,wBAAmB,CAAC;AAI9C,+DAA+D;AAC/D,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,UAAU,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,wBAAwB,CAAC;CACvC;AAED,gFAAgF;AAChF,MAAM,MAAM,YAAY,GAAG;IAAE,oBAAoB,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5D,sFAAsF;AACtF,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,oBAAoB,EAAE,iBAAiB,GAAG,YAAY,CAAC,CAAC;AAEnG,+DAA+D;AAC/D,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,cAAc,CAAC;CACvB;AAED,0DAA0D;AAC1D,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE;QACN,EAAE,EAAE,MAAM,CAAC;QACX,UAAU,EAAE,OAAO,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,6FAA6F;QAC7F,YAAY,CAAC,EAAE,YAAY,CAAC;KAC7B,CAAC;CACH;AAED,6CAA6C;AAC7C,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,UAAU,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAID;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,GAAE,eAAoB,GAAG,eAAe,CAM/F;AAED,+FAA+F;AAC/F,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,UAAU,EAChB,IAAI,GAAE,eAAe,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAC/C,cAAc,CAKhB;AAED,4FAA4F;AAC5F,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,YAAY,CAE7D;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,UAAU,EAChB,IAAI,GAAE,eAAe,GAAG;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAO,GAClD,YAAY,CAkBd;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAazD"}

package/dist/card/emit.js.map

@@ -1 +1 @@
-{"version":3,"file":"emit.js","sourceRoot":"","sources":["../../src/card/emit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,eAAe,EACf,gBAAgB,GAIjB,MAAM,aAAa,CAAC;AAYrB,iFAAiF;AACjF,MAAM,CAAC,MAAM,uBAAuB,GAAG,2CAA2C,CAAC;AACnF,qEAAqE;AACrE,MAAM,CAAC,MAAM,+BAA+B,GAAG,kDAAkD,CAAC;AAClG,0EAA0E;AAC1E,MAAM,CAAC,MAAM,sBAAsB,GAAG,sCAAsC,CAAC;AAC7E,4FAA4F;AAC5F,MAAM,CAAC,MAAM,aAAa,GAAG,gBAAgB,CAAC;AAuE9C,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAgB,EAAE,OAAwB,EAAE;IAC5E,OAAO;QACL,EAAE,EAAE,sBAAsB;QAC1B,IAAI,EAAE,wBAAwB;QAC9B,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;KAClE,CAAC;AACJ,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,gBAAgB,CAC9B,IAAgB,EAChB,OAA8C,EAAE;IAEhD,MAAM,KAAK,GAAqC,IAAI,CAAC,KAAK;QACxD,CAAC,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;QAC7E,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACtB,OAAO,EAAE,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,CAAC;AAC3C,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,cAAc,CAAC,IAAgB;IAC7C,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,gBAAgB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAC7E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAgB,EAChB,OAAiD,EAAE;IAEnD,IAAI,IAAI,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,gFAAgF,IAAI,CAAC,UAAU,IAAI,CACpG,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAA2B;QACrC,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,UAAU,EAAE,OAAO;QACnB,OAAO,EAAE,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;KAC1D,CAAC;IACF,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;QAAE,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IAC7E,OAAO;QACL,GAAG,EAAE,uBAAuB;QAC5B,WAAW,EAAE,+BAA+B;QAC5C,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,KAAK;QAChC,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAgB;IAC3C,MAAM,KAAK,GAAe;QACxB,UAAU,EAAE,EAAE,GAAG,EAAE,sBAAsB,EAAE;QAC3C,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,UAAU,EAAE,IAAI,CAAC,IAAI;QACrB,gBAAgB,EAAE,IAAI,CAAC,UAAU;KAClC,CAAC;IACF,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS;QAAE,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC;IAC7E,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;QAAE,KAAK,CAAC,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7F,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS;QAAE,KAAK,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC;IAC/F,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;QAAE,KAAK,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;IACnF,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS;QAAE,KAAK,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC;IACtF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+EAA+E;AAE/E;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,IAAgB;IACnC,MAAM,OAAO,GAAsB,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IACjG,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,CAAC,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC/F,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS;QAAE,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC;IAC1F,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS;QAAE,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;IACjF,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IAC9E,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACxE,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"emit.js","sourceRoot":"","sources":["../../src/card/emit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,eAAe,EACf,gBAAgB,GAKjB,MAAM,aAAa,CAAC;AAYrB,iFAAiF;AACjF,MAAM,CAAC,MAAM,uBAAuB,GAAG,2CAA2C,CAAC;AACnF,qEAAqE;AACrE,MAAM,CAAC,MAAM,+BAA+B,GAAG,kDAAkD,CAAC;AAClG,0EAA0E;AAC1E,MAAM,CAAC,MAAM,sBAAsB,GAAG,sCAAsC,CAAC;AAC7E,4FAA4F;AAC5F,MAAM,CAAC,MAAM,aAAa,GAAG,gBAAgB,CAAC;AAuE9C,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAgB,EAAE,OAAwB,EAAE;IAC5E,OAAO;QACL,EAAE,EAAE,sBAAsB;QAC1B,IAAI,EAAE,wBAAwB;QAC9B,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;KAClE,CAAC;AACJ,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,gBAAgB,CAC9B,IAAgB,EAChB,OAA8C,EAAE;IAEhD,MAAM,KAAK,GAAqC,IAAI,CAAC,KAAK;QACxD,CAAC,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;QAC7E,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACtB,OAAO,EAAE,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,CAAC;AAC3C,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,cAAc,CAAC,IAAgB;IAC7C,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,gBAAgB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAC7E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAgB,EAChB,OAAiD,EAAE;IAEnD,IAAI,IAAI,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,gFAAgF,IAAI,CAAC,UAAU,IAAI,CACpG,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAA2B;QACrC,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,UAAU,EAAE,OAAO;QACnB,OAAO,EAAE,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;KAC1D,CAAC;IACF,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;QAAE,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IAC7E,OAAO;QACL,GAAG,EAAE,uBAAuB;QAC5B,WAAW,EAAE,+BAA+B;QAC5C,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,KAAK;QAChC,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAgB;IAC3C,MAAM,KAAK,GAAe;QACxB,UAAU,EAAE,EAAE,GAAG,EAAE,sBAAsB,EAAE;QAC3C,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,UAAU,EAAE,IAAI,CAAC,IAAI;QACrB,gBAAgB,EAAE,IAAI,CAAC,UAAU;KAClC,CAAC;IACF,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS;QAAE,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC;IAC7E,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;QAAE,KAAK,CAAC,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7F,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS;QAAE,KAAK,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC;IAC/F,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;QAAE,KAAK,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;IACnF,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS;QAAE,KAAK,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC;IACtF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+EAA+E;AAE/E;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,IAAgB;IACnC,MAAM,OAAO,GAAsB,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IACjG,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,CAAC,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC/F,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS;QAAE,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC;IAC1F,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS;QAAE,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;IACjF,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IAC9E,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACxE,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/card/index.d.ts

@@ -13,7 +13,7 @@
  *   - cimd        (./cimd):    BIND the L1 CIMD on-ramp — `client_id` ⇄ `did:web`, DID-keyed
  *                              JWKS, and the fail-closed origin/`alsoKnownAs` substitution graft.
  *   - proof       (./proof):   MINT + VERIFY the stateless per-request holder-of-key proof
- *                              (`org.kya-os/proof@1`) — sender-constrained, fail-closed.
+ *                              (`org.kya-os/proof.v1`) — sender-constrained, fail-closed.
  *   - delegation  (./delegation): VALIDATE the W3C VC 2.0 + ZCAP-LD delegation chain — CRISP
  *                              attenuation + continuity, `responsibleParty`/leaf-invoker, fail-closed.
  *   - builder     (./builder):  the fluent `card()` chain — the 10-minute path to a valid card.

package/dist/card/index.js

@@ -13,7 +13,7 @@
  *   - cimd        (./cimd):    BIND the L1 CIMD on-ramp — `client_id` ⇄ `did:web`, DID-keyed
  *                              JWKS, and the fail-closed origin/`alsoKnownAs` substitution graft.
  *   - proof       (./proof):   MINT + VERIFY the stateless per-request holder-of-key proof
- *                              (`org.kya-os/proof@1`) — sender-constrained, fail-closed.
+ *                              (`org.kya-os/proof.v1`) — sender-constrained, fail-closed.
  *   - delegation  (./delegation): VALIDATE the W3C VC 2.0 + ZCAP-LD delegation chain — CRISP
  *                              attenuation + continuity, `responsibleParty`/leaf-invoker, fail-closed.
  *   - builder     (./builder):  the fluent `card()` chain — the 10-minute path to a valid card.

package/dist/card/middleware.d.ts

@@ -10,7 +10,7 @@
  *     both immutably (a shallow clone; a stripped `_meta` degrades to a fetch, never a failure).
  *
  *   - `requireProof(deps, { minLevel? })` — the VERIFY side. Returns a per-request guard that
- *     reads the holder-of-key proof from `_meta['org.kya-os/proof@1']`, RECOMPUTES it via
+ *     reads the holder-of-key proof from `_meta['org.kya-os/request-proof']` (legacy `org.kya-os/proof.v1` accepted), RECOMPUTES it via
  *     `./proof` ({@link verifyCardProof}) — every binding, fail-closed — enforces a minimum
  *     assurance, and returns a 401-shaped result on any failure. The caller passes the exact
  *     `{ method, params }` the client signed (i.e. WITHOUT `_meta`), so the recomputed
@@ -94,7 +94,7 @@ export interface RequireProofOptions {
 }
 /**
  * Build a per-request holder-of-key guard from the pre-bound proof-verification seams. The returned
- * guard reads `_meta['org.kya-os/proof@1']`, RECOMPUTES it against the request via {@link verifyCardProof},
+ * guard reads `_meta['org.kya-os/request-proof']` (legacy `org.kya-os/proof.v1` accepted), RECOMPUTES it against the request via {@link verifyCardProof},
  * enforces `opts.minLevel`, and returns `{ ok: true, did, level }` or a 401-shaped rejection. Fail-closed
  * throughout: a missing proof, a broken binding, a throwing verifier, or an assurance below `minLevel`
  * all reject.
@@ -106,7 +106,9 @@ export interface RequireProofOptions {
  * request FAILS CLOSED (`nonce_seam_missing`).
  */
 export declare function requireProof(deps: VerifyProofDeps, opts?: RequireProofOptions): ProofGuard;
-/** Read the card proof (`org.kya-os/proof@1`) out of a `_meta` record (undefined when absent / not an
- *  object). A legacy session proof under `org.kya-os/proof` is a different key and is simply not seen. */
+/** Read the card proof out of a `_meta` record (undefined when absent / not an object). Reads the
+ *  canonical `org.kya-os/request-proof` key, falling back to the earlier draft key (`org.kya-os/proof.v1`,
+ *  accepted for one major version); the canonical key wins when both are present. A legacy session
+ *  proof under `org.kya-os/proof` is a different key and is simply not seen. */
 export declare function readCardProof(meta: unknown): unknown;
 //# sourceMappingURL=middleware.d.ts.map

package/dist/card/middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/card/middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEzD,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,cAAc,EACpB,MAAM,WAAW,CAAC;AACnB,OAAO,EAGL,KAAK,cAAc,EAEnB,KAAK,eAAe,EACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAI9C,wFAAwF;AACxF,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,yFAAyF;AACzF,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC;IACpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,kGAAkG;AAClG,MAAM,WAAW,cAAc;IAC7B,uFAAuF;IACvF,QAAQ,EAAE,UAAU,CAAC;IACrB;;;OAGG;IACH,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,8DAA8D;IAC9D,UAAU,EAAE,cAAc,CAAC;IAC3B,qGAAqG;IACrG,eAAe,CAAC,CAAC,SAAS,cAAc,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,GAAG;QAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IACjG,0GAA0G;IAC1G,gBAAgB,CAAC,CAAC,SAAS,eAAe,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG;QAAE,OAAO,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC;CACpF;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,cAAc,CA4B9F;AAsBD,kGAAkG;AAClG,MAAM,MAAM,aAAa,GAAG,cAAc,CAAC;AAE3C,gFAAgF;AAChF,MAAM,MAAM,aAAa,GAAG,eAAe,GAAG,eAAe,GAAG,0BAA0B,CAAC;AAE3F,iGAAiG;AACjG,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,qGAAqG;AACrG,MAAM,MAAM,eAAe,GACvB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GACrE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,GAAG,CAAC;IAAC,KAAK,EAAE,cAAc,CAAA;CAAE,CAAC;AAEtD;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;AAEvF,wCAAwC;AACxC,MAAM,WAAW,mBAAmB;IAClC,sFAAsF;IACtF,QAAQ,CAAC,EAAE,aAAa,CAAC;CAC1B;AAKD;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,GAAE,mBAAwB,GAAG,UAAU,CAsB9F;AAED;0GAC0G;AAC1G,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAEpD"}
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/card/middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEzD,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,cAAc,EACpB,MAAM,WAAW,CAAC;AACnB,OAAO,EAIL,KAAK,cAAc,EAEnB,KAAK,eAAe,EACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAI9C,wFAAwF;AACxF,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,yFAAyF;AACzF,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC;IACpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,kGAAkG;AAClG,MAAM,WAAW,cAAc;IAC7B,uFAAuF;IACvF,QAAQ,EAAE,UAAU,CAAC;IACrB;;;OAGG;IACH,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,8DAA8D;IAC9D,UAAU,EAAE,cAAc,CAAC;IAC3B,qGAAqG;IACrG,eAAe,CAAC,CAAC,SAAS,cAAc,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,GAAG;QAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IACjG,0GAA0G;IAC1G,gBAAgB,CAAC,CAAC,SAAS,eAAe,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG;QAAE,OAAO,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC;CACpF;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,cAAc,CA4B9F;AAsBD,kGAAkG;AAClG,MAAM,MAAM,aAAa,GAAG,cAAc,CAAC;AAE3C,gFAAgF;AAChF,MAAM,MAAM,aAAa,GAAG,eAAe,GAAG,eAAe,GAAG,0BAA0B,CAAC;AAE3F,iGAAiG;AACjG,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,qGAAqG;AACrG,MAAM,MAAM,eAAe,GACvB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GACrE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,GAAG,CAAC;IAAC,KAAK,EAAE,cAAc,CAAA;CAAE,CAAC;AAEtD;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;AAEvF,wCAAwC;AACxC,MAAM,WAAW,mBAAmB;IAClC,sFAAsF;IACtF,QAAQ,CAAC,EAAE,aAAa,CAAC;CAC1B;AAKD;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,GAAE,mBAAwB,GAAG,UAAU,CAsB9F;AAED;;;gFAGgF;AAChF,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAGpD"}

package/dist/card/middleware.js

@@ -10,7 +10,7 @@
  *     both immutably (a shallow clone; a stripped `_meta` degrades to a fetch, never a failure).
  *
  *   - `requireProof(deps, { minLevel? })` — the VERIFY side. Returns a per-request guard that
- *     reads the holder-of-key proof from `_meta['org.kya-os/proof@1']`, RECOMPUTES it via
+ *     reads the holder-of-key proof from `_meta['org.kya-os/request-proof']` (legacy `org.kya-os/proof.v1` accepted), RECOMPUTES it via
  *     `./proof` ({@link verifyCardProof}) — every binding, fail-closed — enforces a minimum
  *     assurance, and returns a 401-shaped result on any failure. The caller passes the exact
  *     `{ method, params }` the client signed (i.e. WITHOUT `_meta`), so the recomputed
@@ -20,7 +20,7 @@
  */
 import { isRecord } from '../utils/guards.js';
 import { toDidServiceEntry, toServerCardMeta, } from './emit.js';
-import { verifyCardProof, KYA_OS_CARD_PROOF_META_KEY, } from './proof/index.js';
+import { verifyCardProof, KYA_OS_CARD_PROOF_META_KEY, LEGACY_CARD_PROOF_META_KEY, } from './proof/index.js';
 /**
  * Bundle a card into its three discovery artifacts and hand back immutable mounters. `opts.byRef`
  * projects the `_meta` as a lazy-fetch `cardRef` instead of an inline summary. NOTE: the DID
@@ -66,7 +66,7 @@ function appendService(didDoc, entry) {
 const ASSURANCE_RANK = { 'L3-minus': 1, L3: 2 };
 /**
  * Build a per-request holder-of-key guard from the pre-bound proof-verification seams. The returned
- * guard reads `_meta['org.kya-os/proof@1']`, RECOMPUTES it against the request via {@link verifyCardProof},
+ * guard reads `_meta['org.kya-os/request-proof']` (legacy `org.kya-os/proof.v1` accepted), RECOMPUTES it against the request via {@link verifyCardProof},
  * enforces `opts.minLevel`, and returns `{ ok: true, did, level }` or a 401-shaped rejection. Fail-closed
  * throughout: a missing proof, a broken binding, a throwing verifier, or an assurance below `minLevel`
  * all reject.
@@ -81,7 +81,7 @@ export function requireProof(deps, opts = {}) {
     return async (req, meta) => {
         const proof = readCardProof(meta);
         if (proof === undefined) {
-            return fail('proof_missing', 'no org.kya-os/proof@1 in _meta', ['proof_missing']);
+            return fail('proof_missing', 'no org.kya-os/request-proof in _meta', ['proof_missing']);
         }
         const result = await recompute(proof, req, deps);
         if (!result.ok || result.did === undefined || result.level === undefined) {
@@ -100,10 +100,14 @@ export function requireProof(deps, opts = {}) {
         };
     };
 }
-/** Read the card proof (`org.kya-os/proof@1`) out of a `_meta` record (undefined when absent / not an
- *  object). A legacy session proof under `org.kya-os/proof` is a different key and is simply not seen. */
+/** Read the card proof out of a `_meta` record (undefined when absent / not an object). Reads the
+ *  canonical `org.kya-os/request-proof` key, falling back to the earlier draft key (`org.kya-os/proof.v1`,
+ *  accepted for one major version); the canonical key wins when both are present. A legacy session
+ *  proof under `org.kya-os/proof` is a different key and is simply not seen. */
 export function readCardProof(meta) {
-    return isRecord(meta) ? meta[KYA_OS_CARD_PROOF_META_KEY] : undefined;
+    if (!isRecord(meta))
+        return undefined;
+    return meta[KYA_OS_CARD_PROOF_META_KEY] ?? meta[LEGACY_CARD_PROOF_META_KEY];
 }
 /** Recompute the proof, fail-closed: a throwing verifier demotes to a rejected result (never escapes). */
 async function recompute(proof, req, deps) {

package/dist/card/middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/card/middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EACL,iBAAiB,EACjB,gBAAgB,GAGjB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,eAAe,EACf,0BAA0B,GAI3B,MAAM,kBAAkB,CAAC;AAkC1B;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,IAAgB,EAAE,OAA4B,EAAE;IAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,uFAAuF,IAAI,CAAC,EAAE,MAAM;YAClG,mDAAmD,CACtD,CAAC;IACJ,CAAC;IACD,iGAAiG;IACjG,mGAAmG;IACnG,8FAA8F;IAC9F,MAAM,eAAe,GAAG,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChD,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,eAAe;QACf,UAAU;QACV,eAAe,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,eAAe,CAAC,UAAU,EAAE,UAAU,CAAC;QACxE,gBAAgB,EAAE,CAAC,MAAM,EAAE,EAAE;YAC3B,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,CAAC,EAAE,6DAA6D;oBAC1F,6EAA6E,CAChF,CAAC;YACJ,CAAC;YACD,OAAO,aAAa,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QAChD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,SAAS,eAAe,CACtB,UAAa,EACb,IAAoB;IAEpB,OAAO,EAAE,GAAG,UAAU,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC;AAC5E,CAAC;AAED,uGAAuG;AACvG,SAAS,aAAa,CACpB,MAAS,EACT,KAAsB;IAEtB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5E,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;AACrD,CAAC;AAkCD,8FAA8F;AAC9F,MAAM,cAAc,GAAmC,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;AAEhF;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,YAAY,CAAC,IAAqB,EAAE,OAA4B,EAAE;IAChF,OAAO,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,eAAe,EAAE,gCAAgC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACzE,OAAO,IAAI,CAAC,eAAe,EAAE,oCAAoC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,IAAI,IAAI,CAAC,QAAQ,IAAI,cAAc,CAAC,KAAK,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3E,MAAM,OAAO,GAAG,mBAAmB,KAAK,0BAA0B,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClF,OAAO,IAAI,CAAC,0BAA0B,EAAE,OAAO,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC;QACjF,CAAC;QACD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,KAAK;YACL,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;0GAC0G;AAC1G,MAAM,UAAU,aAAa,CAAC,IAAa;IACzC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED,0GAA0G;AAC1G,KAAK,UAAU,SAAS,CACtB,KAAc,EACd,GAAgB,EAChB,IAAqB;IAErB,IAAI,CAAC;QACH,OAAO,MAAM,eAAe,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,sBAAsB,CAAC,EAAE,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,8BAA8B;AAC9B,SAAS,IAAI,CAAC,IAAmB,EAAE,OAAe,EAAE,OAAiB;IACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;AACvE,CAAC"}
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/card/middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EACL,iBAAiB,EACjB,gBAAgB,GAGjB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,eAAe,EACf,0BAA0B,EAC1B,0BAA0B,GAI3B,MAAM,kBAAkB,CAAC;AAkC1B;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,IAAgB,EAAE,OAA4B,EAAE;IAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,uFAAuF,IAAI,CAAC,EAAE,MAAM;YAClG,mDAAmD,CACtD,CAAC;IACJ,CAAC;IACD,iGAAiG;IACjG,mGAAmG;IACnG,8FAA8F;IAC9F,MAAM,eAAe,GAAG,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChD,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,eAAe;QACf,UAAU;QACV,eAAe,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,eAAe,CAAC,UAAU,EAAE,UAAU,CAAC;QACxE,gBAAgB,EAAE,CAAC,MAAM,EAAE,EAAE;YAC3B,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,CAAC,EAAE,6DAA6D;oBAC1F,6EAA6E,CAChF,CAAC;YACJ,CAAC;YACD,OAAO,aAAa,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QAChD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,SAAS,eAAe,CACtB,UAAa,EACb,IAAoB;IAEpB,OAAO,EAAE,GAAG,UAAU,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC;AAC5E,CAAC;AAED,uGAAuG;AACvG,SAAS,aAAa,CACpB,MAAS,EACT,KAAsB;IAEtB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5E,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;AACrD,CAAC;AAkCD,8FAA8F;AAC9F,MAAM,cAAc,GAAmC,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;AAEhF;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,YAAY,CAAC,IAAqB,EAAE,OAA4B,EAAE;IAChF,OAAO,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,eAAe,EAAE,sCAAsC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACzE,OAAO,IAAI,CAAC,eAAe,EAAE,oCAAoC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,IAAI,IAAI,CAAC,QAAQ,IAAI,cAAc,CAAC,KAAK,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3E,MAAM,OAAO,GAAG,mBAAmB,KAAK,0BAA0B,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClF,OAAO,IAAI,CAAC,0BAA0B,EAAE,OAAO,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC;QACjF,CAAC;QACD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,KAAK;YACL,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;;;gFAGgF;AAChF,MAAM,UAAU,aAAa,CAAC,IAAa;IACzC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACtC,OAAO,IAAI,CAAC,0BAA0B,CAAC,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC;AAC9E,CAAC;AAED,0GAA0G;AAC1G,KAAK,UAAU,SAAS,CACtB,KAAc,EACd,GAAgB,EAChB,IAAqB;IAErB,IAAI,CAAC;QACH,OAAO,MAAM,eAAe,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,sBAAsB,CAAC,EAAE,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,8BAA8B;AAC9B,SAAS,IAAI,CAAC,IAAmB,EAAE,OAAe,EAAE,OAAiB;IACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;AACvE,CAAC"}

package/dist/card/proof/build.d.ts

@@ -1,8 +1,8 @@
 /**
  * KYA-OS Entity Card proof — MINT (`buildCardProof`).
  *
- * Mint a stateless, sender-constrained `org.kya-os/proof@1` for one request and return it under the
- * card proof's OWN `_meta` key ({@link KYA_OS_CARD_PROOF_META_KEY} = `org.kya-os/proof@1`), distinct
+ * Mint a stateless, sender-constrained `org.kya-os/proof.v1` for one request and return it under the
+ * card proof's OWN `_meta` key ({@link KYA_OS_CARD_PROOF_META_KEY} = `org.kya-os/request-proof`), distinct
  * from the legacy session proof's `org.kya-os/proof` so the two coexist. The proof binds:
  * `requestHash` → THIS body (JCS), `audience` → THIS recipient, `nonce` + `created`/`expires` → NOW,
  * `kid` → the signing DID key, and (optionally) `cnf.jkt` → the token's RFC 9449 sender-constraint.
@@ -11,7 +11,7 @@
 import type { ToolRequest } from '../../proof/generator.js';
 import { KYA_OS_CARD_PROOF_META_KEY, type BuildProofContext, type CardProofMeta, type ProofSigner } from './types.js';
 /**
- * Mint an `org.kya-os/proof@1` for `req`, signed by `signer`, bound to `ctx`. Returns the proof
+ * Mint an `org.kya-os/proof.v1` for `req`, signed by `signer`, bound to `ctx`. Returns the proof
  * keyed by {@link KYA_OS_CARD_PROOF_META_KEY} so it can be spread straight into an MCP request
  * `_meta`. The `cnf.jkt` is `ctx.cnfJkt` when given, else the signer's own key thumbprint, else
  * omitted (an L3-minus proof — still bound by request + audience + nonce + key).

package/dist/card/proof/build.js

@@ -1,8 +1,8 @@
 /**
  * KYA-OS Entity Card proof — MINT (`buildCardProof`).
  *
- * Mint a stateless, sender-constrained `org.kya-os/proof@1` for one request and return it under the
- * card proof's OWN `_meta` key ({@link KYA_OS_CARD_PROOF_META_KEY} = `org.kya-os/proof@1`), distinct
+ * Mint a stateless, sender-constrained `org.kya-os/proof.v1` for one request and return it under the
+ * card proof's OWN `_meta` key ({@link KYA_OS_CARD_PROOF_META_KEY} = `org.kya-os/request-proof`), distinct
  * from the legacy session proof's `org.kya-os/proof` so the two coexist. The proof binds:
  * `requestHash` → THIS body (JCS), `audience` → THIS recipient, `nonce` + `created`/`expires` → NOW,
  * `kid` → the signing DID key, and (optionally) `cnf.jkt` → the token's RFC 9449 sender-constraint.
@@ -12,7 +12,7 @@ import { canonicalPayloadBytes, computeRequestHash } from './canonical.js';
 import { httpSignatureBaseBytes } from './http-sig.js';
 import { DEFAULT_TTL_SEC, KYA_OS_CARD_PROOF_META_KEY, MAX_TTL_SEC, PROOF_PROFILE_V1, } from './types.js';
 /**
- * Mint an `org.kya-os/proof@1` for `req`, signed by `signer`, bound to `ctx`. Returns the proof
+ * Mint an `org.kya-os/proof.v1` for `req`, signed by `signer`, bound to `ctx`. Returns the proof
  * keyed by {@link KYA_OS_CARD_PROOF_META_KEY} so it can be spread straight into an MCP request
  * `_meta`. The `cnf.jkt` is `ctx.cnfJkt` when given, else the signer's own key thumbprint, else
  * omitted (an L3-minus proof — still bound by request + audience + nonce + key).

package/dist/card/proof/canonical.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"canonical.d.ts","sourceRoot":"","sources":["../../../src/card/proof/canonical.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAIhD;mEACmE;AACnE,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,CAAC,CAAC,EAAE,MAAM,CAAC;CACZ;AAmCD,4BAA4B;AAC5B,wBAAsB,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAEnE;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAIrG;AAED,oGAAoG;AACpG,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,aAAa,EACxB,SAAS,EAAE,UAAU,EACrB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,OAAO,CAAC,CAQlB;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAInG;AAED,iGAAiG;AACjG,wBAAsB,cAAc,CAClC,SAAS,EAAE,aAAa,EACxB,SAAS,EAAE,UAAU,EACrB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,OAAO,CAAC,CAclB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAM1E;AAaD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAI1D;AAED,+FAA+F;AAC/F,wBAAgB,aAAa,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAa1E;AAED,8FAA8F;AAC9F,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,aAAa,GAAG,UAAU,CAErE;AAED,oGAAoG;AACpG,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAExD"}
+{"version":3,"file":"canonical.d.ts","sourceRoot":"","sources":["../../../src/card/proof/canonical.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAIhD;mEACmE;AACnE,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,CAAC,CAAC,EAAE,MAAM,CAAC;CACZ;AAmCD,4BAA4B;AAC5B,wBAAsB,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAEnE;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAIrG;AAED,oGAAoG;AACpG,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,aAAa,EACxB,SAAS,EAAE,UAAU,EACrB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,OAAO,CAAC,CAQlB;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAInG;AAED,iGAAiG;AACjG,wBAAsB,cAAc,CAClC,SAAS,EAAE,aAAa,EACxB,SAAS,EAAE,UAAU,EACrB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,OAAO,CAAC,CAclB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAO1E;AA6BD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAI1D;AAED,+FAA+F;AAC/F,wBAAgB,aAAa,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAa1E;AAED,8FAA8F;AAC9F,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,aAAa,GAAG,UAAU,CAErE;AAED,oGAAoG;AACpG,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAExD"}