@mnemom/mnemom 0.17.35 → 0.17.36

package/node_modules/@mnemom/aip-verifier/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/crypto.ts","../src/verify.ts","../src/canonical.ts","../src/statements.ts","../src/verify-record.ts","../src/claim-table.ts","../src/claim-lint.ts","../src/render-estimate.ts","../src/sharecard.ts"],"names":["hexToBytes","bytesToHex","sha256","utf8ToBytes","verifyAsync","reasons","flags","statements","isObject"],"mappings":";;;;;;;AAsBO,SAAS,cAAc,GAAA,EAAyB;AACrD,EAAA,MAAM,MAAA,GAAS,KAAK,GAAG,CAAA;AACvB,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,MAAA,CAAO,MAAM,CAAA;AAC1C,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,MAAA,CAAO,QAAQ,CAAA,EAAA,EAAK;AACtC,IAAA,KAAA,CAAM,CAAC,CAAA,GAAI,MAAA,CAAO,UAAA,CAAW,CAAC,CAAA;AAAA,EAChC;AACA,EAAA,OAAO,KAAA;AACT;AAGO,SAAS,WAAW,GAAA,EAAyB;AAClD,EAAA,OAAOA,oBAAW,GAAG,CAAA;AACvB;AAOO,SAAS,UAAU,KAAA,EAAuB;AAC/C,EAAA,OAAOC,mBAAA,CAAWC,cAAA,CAAOC,oBAAA,CAAY,KAAK,CAAC,CAAC,CAAA;AAC9C;AAcA,eAAsB,eAAA,CACpB,SAAA,EACA,OAAA,EACA,SAAA,EACkB;AAClB,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,cAAc,SAAS,CAAA;AACxC,IAAA,MAAM,QAAA,GAAWA,qBAAY,OAAO,CAAA;AACpC,IAAA,OAAO,MAAMC,mBAAA,CAAY,QAAA,EAAU,QAAA,EAAU,SAAS,CAAA;AAAA,EACxD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAYO,SAAS,iBAAA,CACd,QAAA,EACA,QAAA,EACA,YAAA,EACS;AACT,EAAA,IAAI,OAAA,GAAU,QAAA;AAEd,EAAA,KAAA,MAAW,WAAW,QAAA,EAAU;AAC9B,IAAA,MAAM,IAAA,GACJ,QAAQ,QAAA,KAAa,MAAA,GACjB,QAAQ,IAAA,GAAO,OAAA,GACf,UAAU,OAAA,CAAQ,IAAA;AACxB,IAAA,OAAA,GAAU,UAAU,IAAI,CAAA;AAAA,EAC1B;AAEA,EAAA,OAAO,OAAA,KAAY,YAAA;AACrB;AAaO,SAAS,iBACd,aAAA,EACA,YAAA,EACA,OAAA,EACA,iBAAA,EACA,iBACA,SAAA,EACQ;AACR,EAAA,MAAM,OAAO,aAAA,IAAiB,SAAA;AAC9B,EAAA,MAAM,QAAA,GAAW;AAAA,IACf,IAAA;AAAA,IACA,YAAA;AAAA,IACA,OAAA;AAAA,IACA,iBAAA;AAAA,IACA,eAAA;AAAA,IACA;AAAA,GACF,CAAE,KAAK,GAAG,CAAA;AAEV,EAAA,OAAO,UAAU,QAAQ,CAAA;AAC3B;;;ACtFA,eAAsB,iBAAA,CACpB,aACA,OAAA,EAC6B;AAC7B,EAAA,MAAM,SAAA,GAAY,gBAAA,CAAiB,OAAA,CAAQ,SAAS,CAAA;AAEpD,EAAA,MAAM,SAAA,GAAY,MAAM,cAAA,CAAe,WAAA,EAAa,SAAS,CAAA;AAC7D,EAAA,MAAM,KAAA,GAAQ,WAAW,WAAW,CAAA;AACpC,EAAA,MAAM,MAAA,GAAS,WAAA,CAAY,WAAA,EAAa,OAAA,CAAQ,UAAU,CAAA;AAC1D,EAAA,MAAM,iBAAA,GAAoB,sBAAA;AAAA,IACxB,WAAA;AAAA,IACA,OAAA,CAAQ;AAAA,GACV;AAEA,EAAA,MAAM,QAAA,GACJ,SAAA,CAAU,KAAA,IACV,KAAA,CAAM,KAAA,KACL,MAAA,KAAW,IAAA,IAAQ,MAAA,CAAO,KAAA,CAAA,KAC1B,iBAAA,KAAsB,IAAA,IAAQ,iBAAA,CAAkB,KAAA,CAAA;AAEnD,EAAA,OAAO;AAAA,IACL,KAAA,EAAO,QAAA;AAAA,IACP,QAAQ,EAAE,SAAA,EAAW,KAAA,EAAO,MAAA,EAAQ,oBAAoB,iBAAA,EAAkB;AAAA,IAC1E,gBAAgB,WAAA,CAAY,cAAA;AAAA,IAC5B,WAAA,EAAA,iBAAa,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,GACtC;AACF;AAOA,SAAS,iBAAiB,GAAA,EAAsC;AAC9D,EAAA,IAAI,OAAO,QAAQ,QAAA,EAAU;AAC3B,IAAA,OAAO,WAAW,GAAG,CAAA;AAAA,EACvB;AACA,EAAA,OAAO,GAAA;AACT;AAGA,eAAe,cAAA,CACb,MACA,SAAA,EACsB;AACtB,EAAA,MAAM,EAAE,KAAA,EAAO,cAAA,EAAe,GAAI,KAAK,MAAA,CAAO,SAAA;AAE9C,EAAA,MAAM,KAAA,GAAQ,MAAM,eAAA,CAAgB,KAAA,EAAO,gBAAgB,SAAS,CAAA;AAEpE,EAAA,OAAO;AAAA,IACL,KAAA;AAAA,IACA,OAAA,EAAS,QACL,4BAAA,GACA;AAAA,GACN;AACF;AAGA,SAAS,WAAW,IAAA,EAAyC;AAC3D,EAAA,MAAM,QAAA,GAAW,gBAAA;AAAA,IACf,IAAA,CAAK,OAAO,KAAA,CAAM,eAAA;AAAA,IAClB,KAAK,OAAA,CAAQ,aAAA;AAAA,IACb,KAAK,MAAA,CAAO,OAAA;AAAA,IACZ,KAAK,iBAAA,CAAkB,mBAAA;AAAA,IACvB,KAAK,iBAAA,CAAkB,mBAAA;AAAA,IACvB,IAAA,CAAK;AAAA,GACP;AAEA,EAAA,MAAM,KAAA,GAAQ,QAAA,KAAa,IAAA,CAAK,MAAA,CAAO,KAAA,CAAM,UAAA;AAE7C,EAAA,OAAO;AAAA,IACL,KAAA;AAAA,IACA,OAAA,EAAS,QACL,qCAAA,GACA,CAAA,8BAAA,EAAiC,QAAQ,CAAA,MAAA,EAAS,IAAA,CAAK,MAAA,CAAO,KAAA,CAAM,UAAU,CAAA;AAAA,GACpF;AACF;AAGA,SAAS,WAAA,CACP,MACA,UAAA,EACoB;AACpB,EAAA,IAAI,IAAA,CAAK,MAAA,CAAO,MAAA,KAAW,IAAA,EAAM;AAC/B,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IAAI,eAAe,MAAA,EAAW;AAC5B,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,EAAE,SAAA,EAAW,eAAA,EAAiB,IAAA,EAAK,GAAI,KAAK,MAAA,CAAO,MAAA;AAGzD,EAAA,IAAI,SAAS,UAAA,EAAY;AACvB,IAAA,OAAO;AAAA,MACL,KAAA,EAAO,KAAA;AAAA,MACP,OAAA,EAAS,CAAA,yCAAA,EAA4C,IAAI,CAAA,WAAA,EAAc,UAAU,CAAA;AAAA,KACnF;AAAA,EACF;AAEA,EAAA,MAAM,KAAA,GAAQ,iBAAA,CAAkB,SAAA,EAAW,eAAA,EAAiB,UAAU,CAAA;AAEtE,EAAA,OAAO;AAAA,IACL,KAAA;AAAA,IACA,OAAA,EAAS,QACL,iCAAA,GACA;AAAA,GACN;AACF;AAYA,SAAS,sBAAA,CACP,MACA,eAAA,EACoB;AACpB,EAAA,MAAM,KAAA,GAAQ,KAAK,MAAA,CAAO,kBAAA;AAC1B,EAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,KAAA,KAAU,MAAA,EAAW;AACzC,IAAA,OAAO,IAAA;AAAA,EACT;AAGA,EAAA,IAAI,CAAC,CAAC,WAAA,EAAa,iBAAiB,EAAE,QAAA,CAAS,KAAA,CAAM,MAAM,CAAA,EAAG;AAC5D,IAAA,OAAO;AAAA,MACL,KAAA,EAAO,KAAA;AAAA,MACP,OAAA,EAAS,CAAA,mCAAA,EAAsC,KAAA,CAAM,MAAM,CAAA;AAAA,KAC7D;AAAA,EACF;AAGA,EAAA,IAAI,CAAC,MAAM,OAAA,IAAW,CAAC,MAAM,QAAA,IAAY,CAAC,MAAM,OAAA,EAAS;AACvD,IAAA,OAAO;AAAA,MACL,KAAA,EAAO,KAAA;AAAA,MACP,OAAA,EAAS;AAAA,KACX;AAAA,EACF;AAGA,EAAA,IAAI,eAAA,KAAoB,MAAA,IAAa,KAAA,CAAM,QAAA,KAAa,eAAA,EAAiB;AACvE,IAAA,OAAO;AAAA,MACL,KAAA,EAAO,KAAA;AAAA,MACP,OAAA,EAAS,CAAA,6BAAA,EAAgC,KAAA,CAAM,QAAQ,cAAc,eAAe,CAAA;AAAA,KACtF;AAAA,EACF;AAGA,EAAA,IAAI,OAAA;AAQJ,EAAA,IAAI;AACF,IAAA,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,KAAA,CAAM,OAAO,CAAA;AAAA,EACpC,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO;AAAA,MACL,KAAA,EAAO,KAAA;AAAA,MACP,OAAA,EAAS;AAAA,KACX;AAAA,EACF;AAGA,EAAA,IAAI,OAAA,CAAQ,YAAY,MAAA,EAAW;AACjC,IAAA,MAAM,WAAA,GAAc,KAAK,MAAA,CAAO,OAAA;AAChC,IAAA,IAAI,OAAA,CAAQ,YAAY,WAAA,EAAa;AACnC,MAAA,OAAO;AAAA,QACL,KAAA,EAAO,KAAA;AAAA,QACP,OAAA,EAAS,CAAA,iBAAA,EAAoB,OAAA,CAAQ,OAAO,yCAAyC,WAAW,CAAA,CAAA;AAAA,OAClG;AAAA,IACF;AAAA,EACF;AAGA,EAAA,IAAI,OAAA,CAAQ,kBAAkB,MAAA,EAAW;AACvC,IAAA,MAAM,gBAAA,GAAmB,KAAK,iBAAA,CAAkB,mBAAA;AAChD,IAAA,IAAI,OAAA,CAAQ,kBAAkB,gBAAA,EAAkB;AAC9C,MAAA,OAAO;AAAA,QACL,KAAA,EAAO,KAAA;AAAA,QACP,OAAA,EAAS,CAAA,sFAAA;AAAA,OACX;AAAA,IACF;AAAA,EACF;AAGA,EAAA,IAAI,OAAA,CAAQ,cAAc,MAAA,EAAW;AACnC,IAAA,MAAM,YAAA,GAAe,KAAK,iBAAA,CAAkB,SAAA;AAC5C,IAAA,IAAI,OAAA,CAAQ,cAAc,YAAA,EAAc;AACtC,MAAA,OAAO;AAAA,QACL,KAAA,EAAO,KAAA;AAAA,QACP,OAAA,EAAS,CAAA,wEAAA;AAAA,OACX;AAAA,IACF;AAAA,EACF;AAGA,EAAA,IAAI,OAAA,CAAQ,gBAAgB,MAAA,EAAW;AACrC,IAAA,MAAM,cAAA,GAAiB,KAAK,iBAAA,CAAkB,WAAA;AAC9C,IAAA,IAAI,OAAA,CAAQ,gBAAgB,cAAA,EAAgB;AAC1C,MAAA,OAAO;AAAA,QACL,KAAA,EAAO,KAAA;AAAA,QACP,OAAA,EAAS,CAAA,4EAAA;AAAA,OACX;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,KAAA,EAAO,IAAA;AAAA,IACP,OAAA,EAAS;AAAA,GACX;AACF;;;AC7PO,SAAS,cAAc,KAAA,EAAwB;AACpD,EAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,QAAA,EAAU;AAC/C,IAAA,OAAO,IAAA,CAAK,UAAU,KAAK,CAAA;AAAA,EAC7B;AACA,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACxB,IAAA,OAAO,IAAI,KAAA,CAAM,GAAA,CAAI,aAAa,CAAA,CAAE,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,MAAA,GAAS,KAAA;AACf,EAAA,MAAM,OAAA,GAAU,OAAO,IAAA,CAAK,MAAM,EAC/B,IAAA,EAAK,CACL,IAAI,CAAC,CAAA,KAAM,GAAG,IAAA,CAAK,SAAA,CAAU,CAAC,CAAC,CAAA,CAAA,EAAI,cAAc,MAAA,CAAO,CAAC,CAAC,CAAC,CAAA,CAAE,CAAA;AAChE,EAAA,OAAO,CAAA,CAAA,EAAI,OAAA,CAAQ,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA,CAAA;AAC9B;AAGO,SAAS,iBAAiB,KAAA,EAA2B;AAC1D,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,CAAC,wBAAA,CAAyB,IAAA,CAAK,KAAK,CAAA,EAAG;AACtE,IAAA,MAAM,IAAI,MAAM,eAAe,CAAA;AAAA,EACjC;AACA,EAAA,MAAM,GAAA,GAAM,KAAA,CAAM,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AACzE,EAAA,MAAM,MAAA,GAAS,MAAM,KAAA,CAAM,KAAA,CAAM,IAAI,CAAA,GAAK,GAAA,CAAI,MAAA,GAAS,CAAA,IAAM,CAAC,CAAA;AAC9D,EAAA,MAAM,MAAA,GAAS,KAAK,MAAM,CAAA;AAC1B,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,MAAA,CAAO,MAAM,CAAA;AACxC,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,MAAA,CAAO,MAAA,EAAQ,CAAA,EAAA,EAAK,GAAA,CAAI,CAAC,CAAA,GAAI,MAAA,CAAO,UAAA,CAAW,CAAC,CAAA;AACpE,EAAA,OAAO,GAAA;AACT;;;ACeO,IAAM,eAAA,GAAkB;AAAA,EAC7B,sBAAA;AAAA,EACA,iBAAA;AAAA,EACA,gBAAA;AAAA,EACA;AACF;AAIO,IAAM,UAAA,GAAa;AAyDnB,IAAM,iBAAA,GAAoB,CAAC,UAAA,EAAY,SAAA,EAAW,SAAS;AAuC3D,IAAM,OAAA,GAAU;AAAA,EACrB,aAAA,EAAe,eAAA;AAAA,EACf,WAAA,EAAa,aAAA;AAAA,EACb,eAAA,EAAiB,iBAAA;AAAA,EACjB,sBAAA,EAAwB,wBAAA;AAAA,EACxB,iBAAA,EAAmB,mBAAA;AAAA,EACnB,mBAAA,EAAqB,qBAAA;AAAA,EACrB,aAAA,EAAe,eAAA;AAAA,EACf,eAAA,EAAiB,iBAAA;AAAA,EACjB,iBAAA,EAAmB,mBAAA;AAAA,EACnB,oBAAA,EAAsB,sBAAA;AAAA,EACtB,kBAAA,EAAoB,oBAAA;AAAA,EACpB,yBAAA,EAA2B,2BAAA;AAAA,EAC3B,gBAAA,EAAkB,kBAAA;AAAA,EAClB,0BAAA,EAA4B,4BAAA;AAAA,EAC5B,2BAAA,EAA6B,6BAAA;AAAA,EAC7B,6BAAA,EAA+B;AACjC;AAKO,IAAM,KAAA,GAAQ;AAAA,EACnB,sBAAA,EAAwB,wBAAA;AAAA,EACxB,cAAA,EAAgB,gBAAA;AAAA,EAChB,8BAAA,EAAgC;AAClC;;;AC1IA,IAAM,SAAA,GAAY,gBAAA;AAElB,SAAS,SAAS,CAAA,EAA0C;AAC1D,EAAA,OAAO,OAAO,MAAM,QAAA,IAAY,CAAA,KAAM,QAAQ,CAAC,KAAA,CAAM,QAAQ,CAAC,CAAA;AAChE;AAOO,SAAS,oBAAoB,SAAA,EAA4C;AAC9E,EAAA,MAAM,EAAE,SAAA,EAAW,UAAA,EAAY,GAAG,MAAK,GAAI,SAAA;AAC3C,EAAA,OAAO,cAAc,IAAI,CAAA;AAC3B;AAGO,SAAS,gBAAgB,SAAA,EAA4C;AAC1E,EAAA,OAAOH,oBAAWC,cAAAA,CAAOC,oBAAAA,CAAY,oBAAoB,SAAS,CAAC,CAAC,CAAC,CAAA;AACvE;AAGA,SAAS,SAAA,CAAU,MAAkB,GAAA,EAAoD;AACvF,EAAA,MAAM,IAAA,GAAO,QAAA,CAAS,IAAI,CAAA,IAAK,KAAA,CAAM,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAA,GAAI,IAAA,CAAK,IAAA,GAAO,EAAC;AACvE,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,IAAA,CAAK,CAAC,CAAA,KAAiB,SAAS,CAAC,CAAA,IAAK,CAAA,CAAE,GAAA,KAAQ,GAAG,CAAA;AACpE,EAAA,IAAI,CAAC,GAAA,EAAK,OAAO,EAAE,MAAA,EAAQ,QAAQ,aAAA,EAAc;AAGjD,EAAA,IAAI,GAAA,CAAI,GAAA,KAAQ,OAAA,IAAW,GAAA,CAAI,GAAA,KAAQ,KAAA,IAAS,GAAA,CAAI,GAAA,KAAQ,SAAA,IAAa,OAAO,GAAA,CAAI,CAAA,KAAM,QAAA,EAAU;AAClG,IAAA,OAAO,EAAE,MAAA,EAAQ,OAAA,CAAQ,eAAA,EAAgB;AAAA,EAC3C;AACA,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,gBAAA,CAAiB,IAAI,CAAC,CAAA;AAAA,EAC9B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAE,MAAA,EAAQ,OAAA,CAAQ,eAAA,EAAgB;AAAA,EAC3C;AACA,EAAA,IAAI,IAAI,MAAA,KAAW,EAAA,SAAW,EAAE,MAAA,EAAQ,QAAQ,eAAA,EAAgB;AAChE,EAAA,OAAO,EAAE,GAAA,EAAI;AACf;AAEA,SAAS,gBAAgB,WAAA,EAAuC;AAC9D,EAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,WAAW,CAAA,SAAU,EAAC;AACzC,EAAA,MAAM,QAAyB,EAAC;AAChC,EAAA,KAAA,MAAW,KAAK,WAAA,EAAqC;AACnD,IAAA,IAAI,CAAC,QAAA,CAAS,CAAC,CAAA,EAAG;AAClB,IAAA,MAAM,UAAU,OAAO,CAAA,CAAE,aAAA,KAAkB,QAAA,GAAW,EAAE,aAAA,GAAgB,oBAAA;AACxE,IAAA,IAAI,OAAO,CAAA,CAAE,SAAA,KAAc,YAAY,CAAA,CAAE,SAAA,CAAU,WAAW,CAAA,EAAG;AAC/D,MAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,KAAA,CAAM,sBAAA,EAAwB,SAAS,CAAA;AAAA,IAC5D;AACA,IAAA,MAAM,KAAA,GACJ,OAAO,CAAA,CAAE,mBAAA,KAAwB,YACjC,CAAA,CAAE,mBAAA,CAAoB,MAAA,GAAS,CAAA,IAC/B,OAAO,CAAA,CAAE,oBAAA,KAAyB,QAAA,IAClC,CAAA,CAAE,qBAAqB,MAAA,GAAS,CAAA;AAClC,IAAA,IAAI,CAAC,OAAO,KAAA,CAAM,IAAA,CAAK,EAAE,IAAA,EAAM,KAAA,CAAM,cAAA,EAAgB,OAAA,EAAS,CAAA;AAAA,EAChE;AACA,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,iBAAiB,KAAA,EAA0B;AAClD,EAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,SAAU,EAAC;AACnC,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,KAAA,MAAW,QAAQ,KAAA,EAA0B;AAC3C,IAAA,IAAI,CAAC,SAAS,IAAI,CAAA,IAAK,CAAE,iBAAA,CAAwC,QAAA,CAAS,IAAA,CAAK,KAAe,CAAA,EAAG;AAC/F,MAAA,OAAA,CAAQ,IAAA,CAAK,QAAQ,2BAA2B,CAAA;AAChD,MAAA;AAAA,IACF;AACA,IAAA,IAAI,IAAA,CAAK,UAAU,SAAA,EAAW;AAC5B,MAAA,MAAM,MAAM,IAAA,CAAK,QAAA;AACjB,MAAA,MAAM,KACJ,QAAA,CAAS,GAAG,KACZ,MAAA,CAAO,SAAA,CAAU,IAAI,MAAM,CAAA,IAC3B,OAAO,SAAA,CAAU,GAAA,CAAI,KAAK,CAAA,IACzB,GAAA,CAAI,UAAqB,CAAA,IACzB,GAAA,CAAI,SAAqB,GAAA,CAAI,MAAA;AAChC,MAAA,IAAI,CAAC,EAAA,EAAI,OAAA,CAAQ,IAAA,CAAK,QAAQ,6BAA6B,CAAA;AAAA,IAC7D;AAAA,EACF;AACA,EAAA,OAAO,CAAC,GAAG,IAAI,GAAA,CAAI,OAAO,CAAC,CAAA;AAC7B;AASA,SAAS,eAAe,SAAA,EAA+C;AACrE,EAAA,MAAM,MAAiB,EAAC;AACxB,EAAA,IAAI,SAAA,CAAU,eAAA,KAAoB,MAAA,IAAa,SAAA,CAAU,oBAAoB,IAAA,EAAM;AACjF,IAAA,GAAA,CAAI,IAAA,CAAK,UAAU,eAAe,CAAA;AAAA,EACpC;AACA,EAAA,IAAI,UAAU,gBAAA,KAAqB,MAAA,EAAW,GAAA,CAAI,IAAA,CAAK,UAAU,gBAAgB,CAAA;AACjF,EAAA,IAAI,UAAU,aAAA,KAAkB,MAAA,EAAW,GAAA,CAAI,IAAA,CAAK,UAAU,aAAa,CAAA;AAC3E,EAAA,IAAI,SAAA,CAAU,oBAAoB,MAAA,EAAW;AAG3C,IAAA,IAAI,KAAA,CAAM,QAAQ,SAAA,CAAU,eAAe,GAAG,GAAA,CAAI,IAAA,CAAK,GAAG,SAAA,CAAU,eAAe,CAAA;AAAA,SAC9E,GAAA,CAAI,KAAK,IAAI,CAAA;AAAA,EACpB;AACA,EAAA,OAAO,GAAA;AACT;AAMA,eAAsB,eAAA,CACpB,WACA,IAAA,EACsC;AACtC,EAAA,MAAM,IAAA,GAAO,CACXE,QAAAA,EACA,OAAA,GAAgD,EAAC,MAChB;AAAA,IACjC,KAAA,EAAO,KAAA;AAAA,IACP,GAAA,EAAK,IAAA;AAAA,IACL,MAAA,EAAQ,IAAA;AAAA,IACR,cAAA,EAAgB,IAAA;AAAA,IAChB,OAAO,EAAC;AAAA,IACR,GAAG,OAAA;AAAA,IACH,OAAA,EAAAA;AAAA,GACF,CAAA;AAEA,EAAA,IAAI,CAAC,SAAS,SAAS,CAAA,SAAU,IAAA,CAAK,CAAC,OAAA,CAAQ,aAAa,CAAC,CAAA;AAC7D,EAAA,MAAM,MAAM,OAAO,SAAA,CAAU,GAAA,KAAQ,QAAA,GAAW,UAAU,GAAA,GAAM,IAAA;AAChE,EAAA,MAAM,MAAA,GAAS,gBAAgB,SAAS,CAAA;AACxC,EAAA,MAAM,MAAM,OAAO,SAAA,CAAU,cAAA,KAAmB,QAAA,GAAW,UAAU,cAAA,GAAiB,IAAA;AACtF,EAAA,MAAM,IAAA,GAAO,EAAE,GAAA,EAAK,MAAA,EAAQ,gBAAgB,GAAA,EAAI;AAEhD,EAAA,IAAI,CAAC,GAAA,IAAO,CAAE,eAAA,CAAsC,QAAA,CAAS,GAAG,CAAA,EAAG;AACjE,IAAA,OAAO,IAAA,CAAK,CAAC,OAAA,CAAQ,WAAW,GAAG,IAAI,CAAA;AAAA,EACzC;AAEA,EAAA,IAAI,SAAA,CAAU,GAAA,KAAQ,MAAA,IAAa,SAAA,CAAU,QAAQ,OAAA,EAAS;AAC5D,IAAA,OAAO,IAAA,CAAK,CAAC,OAAA,CAAQ,eAAe,GAAG,IAAI,CAAA;AAAA,EAC7C;AACA,EAAA,IAAI,CAAC,KAAK,OAAO,IAAA,CAAK,CAAC,OAAA,CAAQ,sBAAsB,GAAG,IAAI,CAAA;AAC5D,EAAA,IAAI,OAAO,SAAA,CAAU,SAAA,KAAc,YAAY,SAAA,CAAU,SAAA,CAAU,WAAW,CAAA,EAAG;AAC/E,IAAA,OAAO,IAAA,CAAK,CAAC,OAAA,CAAQ,iBAAiB,GAAG,IAAI,CAAA;AAAA,EAC/C;AACA,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,gBAAA,CAAiB,UAAU,SAAS,CAAA;AAAA,EAC5C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA,CAAK,CAAC,OAAA,CAAQ,mBAAmB,GAAG,IAAI,CAAA;AAAA,EACjD;AACA,EAAA,IAAI,GAAA,CAAI,WAAW,EAAA,EAAI,OAAO,KAAK,CAAC,OAAA,CAAQ,mBAAmB,CAAA,EAAG,IAAI,CAAA;AAEtE,EAAA,MAAM,QAAA,GAAW,SAAA,CAAU,IAAA,EAAM,GAAG,CAAA;AACpC,EAAA,IAAI,CAAC,SAAS,GAAA,EAAK,OAAO,KAAK,CAAC,QAAA,CAAS,MAAgB,CAAA,EAAG,IAAI,CAAA;AAEhE,EAAA,IAAI,KAAA,GAAQ,KAAA;AACZ,EAAA,IAAI;AACF,IAAA,KAAA,GAAQ,MAAMD,oBAAY,GAAA,EAAKD,oBAAAA,CAAY,oBAAoB,SAAS,CAAC,CAAA,EAAG,QAAA,CAAS,GAAG,CAAA;AAAA,EAC1F,CAAA,CAAA,MAAQ;AACN,IAAA,KAAA,GAAQ,KAAA;AAAA,EACV;AACA,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA,CAAK,CAAC,OAAA,CAAQ,iBAAiB,GAAG,IAAI,CAAA;AAEzD,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,KAAA,MAAW,CAAA,IAAK,cAAA,CAAe,SAAS,CAAA,EAAG;AACzC,IAAA,IAAI,OAAO,CAAA,KAAM,QAAA,IAAY,CAAC,SAAA,CAAU,IAAA,CAAK,CAAC,CAAA,EAAG;AAC/C,MAAA,OAAA,CAAQ,IAAA,CAAK,QAAQ,gBAAgB,CAAA;AACrC,MAAA;AAAA,IACF;AAAA,EACF;AACA,EAAA,IAAI,GAAA,KAAQ,oBAAoB,OAAA,CAAQ,IAAA,CAAK,GAAG,gBAAA,CAAiB,SAAA,CAAU,KAAK,CAAC,CAAA;AAEjF,EAAA,MAAM,QAAQ,GAAA,KAAQ,sBAAA,GAAyB,gBAAgB,SAAA,CAAU,WAAW,IAAI,EAAC;AAEzF,EAAA,OAAO;AAAA,IACL,KAAA,EAAO,QAAQ,MAAA,KAAW,CAAA;AAAA,IAC1B,GAAA;AAAA,IACA,MAAA;AAAA,IACA,cAAA,EAAgB,GAAA;AAAA,IAChB,OAAA;AAAA,IACA;AAAA,GACF;AACF;AAGA,IAAM,YAAA,GAAiE;AAAA,EACrE,eAAA,EAAiB,MAAA;AAAA,EACjB,eAAA,EAAiB,CAAC,sBAAsB,CAAA;AAAA,EACxC,gBAAA,EAAkB,CAAC,iBAAiB,CAAA;AAAA,EACpC,aAAA,EAAe,CAAC,sBAAA,EAAwB,iBAAA,EAAmB,gBAAgB;AAC7E,CAAA;AAWA,eAAsB,MAAA,CACpB,OACA,IAAA,EACmC;AACnC,EAAA,MAAM,WAAA,GAAA,iBAAc,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAC3C,EAAA,MAAM,MAAA,GAAS,CACb,KAAA,EACAE,QAAAA,EACAC,QACAC,WAAAA,MAC8B,EAAE,KAAA,EAAO,OAAA,EAAAF,QAAAA,EAAS,KAAA,EAAAC,MAAAA,EAAO,UAAA,EAAAC,aAAY,WAAA,EAAY,CAAA;AAEjF,EAAA,IAAI,CAAC,QAAA,CAAS,KAAK,CAAA,SAAU,MAAA,CAAO,KAAA,EAAO,CAAC,OAAA,CAAQ,oBAAoB,CAAA,EAAG,EAAC,EAAG,EAAE,CAAA;AAKjF,EAAA,IACE,KAAA,CAAM,GAAA,KAAQ,UAAA,IACd,KAAA,CAAM,OAAA,CAAQ,KAAA,CAAM,UAAU,CAAA,IAC9B,CAAE,eAAA,CAAsC,QAAA,CAAS,KAAA,CAAM,GAAa,CAAA,EACpE;AACA,IAAA,OAAO,MAAA,CAAO,OAAO,CAAC,OAAA,CAAQ,kBAAkB,CAAA,EAAG,EAAC,EAAG,EAAE,CAAA;AAAA,EAC3D;AAGA,EAAA,IAAI,KAAA,CAAM,QAAQ,UAAA,EAAY;AAC5B,IAAA,MAAM,GAAA,GAAM,MAAM,eAAA,CAAgB,KAAA,EAAO,IAAI,CAAA;AAC7C,IAAA,OAAO,OAAO,GAAA,CAAI,KAAA,EAAO,GAAA,CAAI,OAAA,CAAQ,IAAI,CAAC,CAAA,KAAM,CAAA,EAAA,EAAK,CAAC,EAAE,CAAA,EAAG,GAAA,CAAI,KAAA,EAAO,CAAC,GAAG,CAAC,CAAA;AAAA,EAC7E;AAEA,EAAA,MAAM,gBAAkC,KAAA,CAAM,OAAA,CAAQ,MAAM,UAAU,CAAA,GAAI,MAAM,UAAA,GAAa,IAAA;AAC7F,EAAA,IAAI,CAAC,aAAA,EAAe;AAClB,IAAA,OAAO,MAAA,CAAO,OAAO,CAAC,OAAA,CAAQ,yBAAyB,CAAA,EAAG,EAAC,EAAG,EAAE,CAAA;AAAA,EAClE;AAEA,EAAA,MAAM,aAA4C,EAAC;AACnD,EAAA,KAAA,MAAW,CAAA,IAAK,eAAe,UAAA,CAAW,IAAA,CAAK,MAAM,eAAA,CAAgB,CAAA,EAAG,IAAI,CAAC,CAAA;AAE7E,EAAA,MAAM,QAAA,uBAAe,GAAA,EAAyC;AAC9D,EAAA,UAAA,CAAW,OAAA,CAAQ,CAAC,CAAA,KAAM;AACxB,IAAA,IAAI,EAAE,MAAA,EAAQ,QAAA,CAAS,GAAA,CAAI,CAAA,CAAE,QAAQ,CAAC,CAAA;AAAA,EACxC,CAAC,CAAA;AAED,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,MAAM,QAAyB,EAAC;AAChC,EAAA,UAAA,CAAW,OAAA,CAAQ,CAAC,CAAA,EAAG,CAAA,KAAM;AAC3B,IAAA,CAAA,CAAE,OAAA,CAAQ,OAAA,CAAQ,CAAC,CAAA,KAAM,OAAA,CAAQ,IAAA,CAAK,CAAA,EAAG,CAAC,CAAA,CAAA,EAAI,CAAC,CAAA,CAAE,CAAC,CAAA;AAClD,IAAA,KAAA,CAAM,IAAA,CAAK,GAAG,CAAA,CAAE,KAAK,CAAA;AACrB,IAAA,MAAM,GAAA,GAAM,cAAc,CAAC,CAAA;AAC3B,IAAA,IAAI,CAAC,CAAA,CAAE,KAAA,IAAS,CAAC,QAAA,CAAS,GAAG,CAAA,EAAG;AAChC,IAAA,KAAA,MAAW,CAAC,KAAA,EAAO,OAAO,KAAK,MAAA,CAAO,OAAA,CAAQ,YAAY,CAAA,EAAG;AAC3D,MAAA,MAAM,KAAA,GAAQ,IAAI,KAAK,CAAA;AACvB,MAAA,MAAM,UAAU,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,GAAQ,CAAC,KAAK,CAAA;AACrD,MAAA,KAAA,MAAW,KAAK,OAAA,EAAS;AACvB,QAAA,IAAI,OAAO,MAAM,QAAA,EAAU;AAC3B,QAAA,MAAM,MAAA,GAAS,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA;AAC7B,QAAA,IAAI,CAAC,MAAA,EAAQ;AACX,UAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,MAAM,8BAAA,EAAgC,OAAA,EAAS,GAAG,CAAA;AACrE,UAAA;AAAA,QACF;AACA,QAAA,MAAM,UAAU,OAAA,KAAY,MAAA,GAAS,CAAC,CAAA,CAAE,GAAmB,CAAA,GAAI,OAAA;AAC/D,QAAA,IAAI,CAAC,OAAO,GAAA,IAAO,CAAC,QAAQ,QAAA,CAAS,MAAA,CAAO,GAAmB,CAAA,EAAG;AAChE,UAAA,OAAA,CAAQ,KAAK,CAAA,EAAG,CAAC,CAAA,CAAA,EAAI,OAAA,CAAQ,0BAA0B,CAAA,CAAE,CAAA;AAAA,QAC3D;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC,CAAA;AAED,EAAA,OAAO,OAAO,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG,OAAA,EAAS,OAAO,UAAU,CAAA;AAChE;;;ACrSO,IAAM,gBAAgB,CAAC,UAAA,EAAY,SAAA,EAAW,UAAA,EAAY,aAAa,SAAS;AAShF,IAAM,WAAW,CAAC,aAAA,EAAe,eAAA,EAAiB,YAAA,EAAc,cAAc,aAAa;AAG3F,IAAM,aAAA,GAAoC,CAAC,YAAA,EAAc,aAAa;AAGtE,IAAM,2BAAA,GAAkD,CAAC,YAAA,EAAc,YAAA,EAAc,aAAa;AAGlG,IAAM,KAAA,GAAQ,CAAC,KAAA,EAAO,SAAA,EAAW,SAAS,SAAS;AAQnD,IAAM,UAAA,GAAmC;AAAA,EAC9C,GAAA,EAAK,aAAA;AAAA,EACL,OAAA,EAAS,SAAA;AAAA,EACT,KAAA,EAAO,uBAAA;AAAA,EACP,OAAA,EAAS;AACX;AAGO,IAAM,sBAAsB,CAAC,MAAA,EAAQ,MAAA,EAAQ,OAAA,EAAS,cAAc,OAAO;AAU3E,SAAS,cAAA,CAAe,MAAY,OAAA,EAA2C;AACpF,EAAA,IAAI,IAAA,KAAS,KAAA,IAAS,OAAA,KAAY,MAAA,EAAQ,OAAO,IAAA;AACjD,EAAA,IAAI,IAAA,KAAS,SAAA,EAAW,OAAO,UAAA,CAAW,OAAA;AAC1C,EAAA,IAAI,SAAS,OAAA,EAAS,OAAO,YAAY,OAAA,GAAU,UAAA,CAAW,QAAQ,UAAA,CAAW,OAAA;AACjF,EAAA,OAAO,YAAY,OAAA,IAAW,OAAA,KAAY,YAAA,GAAe,UAAA,CAAW,UAAU,UAAA,CAAW,OAAA;AAC3F;AAGO,IAAM,UAAA,GAAa,CAAC,QAAA,EAAU,UAAA,EAAY,KAAK;AAa/C,IAAM,WAAA,GAAc;AAAA,EACzB,kBAAkB,EAAE,KAAA,EAAO,YAAY,YAAA,EAAc,KAAA,EAAO,eAAe,KAAA,EAAM;AAAA,EACjF,sBAAsB,EAAE,KAAA,EAAO,YAAY,YAAA,EAAc,KAAA,EAAO,eAAe,KAAA,EAAM;AAAA,EACrF,aAAa,EAAE,KAAA,EAAO,YAAY,YAAA,EAAc,KAAA,EAAO,eAAe,KAAA,EAAM;AAAA,EAC5E,yBAAyB,EAAE,KAAA,EAAO,YAAY,YAAA,EAAc,KAAA,EAAO,eAAe,KAAA,EAAM;AAAA,EACxF,cAAc,EAAE,KAAA,EAAO,YAAY,YAAA,EAAc,KAAA,EAAO,eAAe,KAAA,EAAM;AAAA,EAC7E,YAAY,EAAE,KAAA,EAAO,YAAY,YAAA,EAAc,KAAA,EAAO,eAAe,IAAA,EAAK;AAAA,EAC1E,SAAS,EAAE,KAAA,EAAO,YAAY,YAAA,EAAc,KAAA,EAAO,eAAe,IAAA,EAAK;AAAA,EACvE,UAAU,EAAE,KAAA,EAAO,YAAY,YAAA,EAAc,KAAA,EAAO,eAAe,KAAA,EAAM;AAAA;AAAA,EAEzE,WAAW,EAAE,KAAA,EAAO,YAAY,YAAA,EAAc,KAAA,EAAO,eAAe,KAAA,EAAM;AAAA,EAC1E,MAAM,EAAE,KAAA,EAAO,WAAW,YAAA,EAAc,IAAA,EAAM,eAAe,KAAA,EAAM;AAAA;AAAA,EAEnE,iBAAiB,EAAE,KAAA,EAAO,YAAY,YAAA,EAAc,KAAA,EAAO,eAAe,KAAA,EAAM;AAAA,EAChF,YAAY,EAAE,KAAA,EAAO,WAAW,YAAA,EAAc,IAAA,EAAM,eAAe,KAAA,EAAM;AAAA,EACzE,UAAU,EAAE,KAAA,EAAO,YAAY,YAAA,EAAc,KAAA,EAAO,eAAe,KAAA,EAAM;AAAA,EACzE,gBAAA,EAAkB;AAAA,IAChB,KAAA,EAAO,UAAA;AAAA,IACP,YAAA,EAAc,KAAA;AAAA,IACd,aAAA,EAAe,IAAA;AAAA,IACf,QAAA,EAAU,CAAC,aAAA,EAAe,eAAe;AAAA,GAC3C;AAAA,EACA,WAAW,EAAE,KAAA,EAAO,aAAa,YAAA,EAAc,KAAA,EAAO,eAAe,KAAA,EAAM;AAAA,EAC3E,SAAS,EAAE,KAAA,EAAO,WAAW,YAAA,EAAc,KAAA,EAAO,eAAe,KAAA;AACnE;AAIO,SAAS,aAAa,KAAA,EAAqC;AAChE,EAAA,OAAO,OAAO,UAAU,QAAA,IAAY,MAAA,CAAO,UAAU,cAAA,CAAe,IAAA,CAAK,aAAa,KAAK,CAAA;AAC7F;AAOO,IAAM,eAAA,GAAwD;AAAA,EACnE,YAAA,EAAc,YAAA;AAAA,EACd,SAAA,EAAW,SAAA;AAAA,EACX,WAAA,EAAa,WAAA;AAAA,EACb,cAAA,EAAgB,MAAA;AAAA,EAChB,iBAAA,EAAmB,iBAAA;AAAA,EACnB,iBAAA,EAAmB,sBAAA;AAAA,EACnB,qBAAA,EAAuB;AACzB;AAEA,IAAM,kBAAA,GAAqB,wBAAA;AAGpB,SAAS,gBAAgB,GAAA,EAAsC;AACpE,EAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,EAAU,OAAO,MAAA;AACpC,EAAA,IAAI,kBAAA,CAAmB,IAAA,CAAK,GAAG,CAAA,EAAG,OAAO,YAAA;AACzC,EAAA,OAAO,MAAA,CAAO,UAAU,cAAA,CAAe,IAAA,CAAK,iBAAiB,GAAG,CAAA,GAAI,eAAA,CAAgB,GAAG,CAAA,GAAI,MAAA;AAC7F;;;ACzCO,IAAM,UAAA,GAAa;AAAA,EACxB,kBAAA,EAAoB,oBAAA;AAAA,EACpB,cAAA,EAAgB,gBAAA;AAAA,EAChB,2BAAA,EAA6B,6BAAA;AAAA,EAC7B,oBAAA,EAAsB,sBAAA;AAAA,EACtB,oBAAA,EAAsB,sBAAA;AAAA,EACtB,6BAAA,EAA+B,+BAAA;AAAA,EAC/B,aAAA,EAAe,eAAA;AAAA,EACf,yBAAA,EAA2B,2BAAA;AAAA,EAC3B,iBAAA,EAAmB,mBAAA;AAAA,EACnB,oBAAA,EAAsB,sBAAA;AAAA,EACtB,WAAA,EAAa,aAAA;AAAA,EACb,kBAAA,EAAoB,oBAAA;AAAA,EACpB,uBAAA,EAAyB,yBAAA;AAAA,EACzB,wBAAA,EAA0B,0BAAA;AAAA,EAC1B,sBAAA,EAAwB,wBAAA;AAAA,EACxB,0BAAA,EAA4B,4BAAA;AAAA,EAC5B,oBAAA,EAAsB,sBAAA;AAAA,EACtB,sBAAA,EAAwB,wBAAA;AAAA,EACxB,4BAAA,EAA8B,8BAAA;AAAA,EAC9B,eAAA,EAAiB;AACnB;AAiCA,SAAS,SAAA,CAAU,MAAc,IAAA,EAA2B;AAC1D,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,EAAA,KAAA,MAAW,CAAA,IAAK,IAAA,CAAK,QAAA,CAAS,IAAA,CAAK,MAAM,CAAA,EAAG;AAC1C,IAAA,MAAM,OAAO,MAAA,CAAO,OAAA,CAAQ,CAAA,CAAE,MAAA,IAAU,EAAE,CAAA,CAAE,IAAA,CAAK,CAAC,GAAG,CAAC,MAAM,CAAA,KAAM,MAAS,IAAI,CAAC,CAAA;AAChF,IAAA,IAAI,SAAS,MAAA,EAAW;AACxB,IAAA,IAAI,SAAS,KAAA,EAAO;AAClB,MAAA,IAAA,CAAK,KAAA,EAAM;AACX,MAAA;AAAA,IACF;AACA,IAAA,IAAI,IAAA,CAAK,KAAA,EAAO,QAAA,CAAS,IAAI,GAAG,OAAO,IAAA;AACvC,IAAA,IAAI,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,CAAC,CAAC,KAAA,EAAO,IAAI,CAAA,KAAM,IAAA,KAAS,QAAQ,IAAA,CAAK,GAAA,CAAI,KAAK,CAAC,GAAG,OAAO,IAAA;AACjF,IAAA,IAAA,CAAK,IAAI,IAAI,CAAA;AAAA,EACf;AACA,EAAA,OAAO,KAAA;AACT;AAEA,IAAM,cAAA,GAAiB,wGAAA;AAKvB,IAAM,KAAA,GAAQ,sFAAA;AACd,IAAM,MAAA,GAAS,aAAA;AACf,IAAM,cAAA,GAAiB,qFAAA;AACvB,IAAM,WAAA,GACJ,0QAAA;AAEF,IAAM,kBAAA,GAAiC;AAAA,EACrC,MAAA,EACE,+HAAA;AAAA,EACF,KAAA,EAAO;AAAA,IACL,CAAC,WAAW,QAAQ,CAAA;AAAA,IACpB,CAAC,WAAW,MAAM,CAAA;AAAA,IAClB,CAAC,UAAU,SAAS;AAAA;AAExB,CAAA;AACA,IAAM,MAAA,GAAS,oBAAA;AAQf,IAAM,cAAA,GAA6B;AAAA,EACjC,MAAA,EACE,8LAAA;AAAA,EACF,KAAA,EAAO,CAAC,QAAQ,CAAA;AAAA,EAChB,KAAA,EAAO;AAAA,IACL,CAAC,UAAU,SAAS,CAAA;AAAA,IACpB,CAAC,WAAW,QAAQ;AAAA;AAExB,CAAA;AACA,IAAM,WAAA,GAAc,gBAAA;AAEpB,IAAM,gBAAA,GAAmB,0CAAA;AAGzB,IAAM,eAAA,GAAwC;AAAA,EAC5C,GAAA,EAAK,WAAA;AAAA,EACL,OAAA,EAAS,cAAA;AAAA,EACT,KAAA,EAAO,4BAAA;AAAA,EACP,OAAA,EAAS;AACX,CAAA;AAGA,IAAM,gBAAA,GAA2C;AAAA,EAC/C,GAAA,EAAK,CAAC,cAAA,EAAgB,aAAA,EAAe,cAAc,CAAA;AAAA,EACnD,OAAA,EAAS,CAAC,aAAA,EAAe,cAAc,CAAA;AAAA,EACvC,KAAA,EAAO,CAAC,cAAc,CAAA;AAAA,EACtB,OAAA,EAAS,CAAC,cAAA,EAAgB,aAAa;AACzC,CAAA;AAEA,SAASC,UAAS,CAAA,EAA0C;AAC1D,EAAA,OAAO,OAAO,MAAM,QAAA,IAAY,CAAA,KAAM,QAAQ,CAAC,KAAA,CAAM,QAAQ,CAAC,CAAA;AAChE;AAGA,SAAS,oBAAoB,GAAA,EAAuB;AAClD,EAAA,OACEA,UAAS,GAAG,CAAA,IACZ,OAAO,SAAA,CAAU,GAAA,CAAI,MAAM,CAAA,IAC3B,MAAA,CAAO,SAAA,CAAU,GAAA,CAAI,KAAK,CAAA,IACzB,GAAA,CAAI,UAAqB,CAAA,IACzB,GAAA,CAAI,SAAqB,GAAA,CAAI,MAAA;AAElC;AAGA,SAAS,cAAc,IAAA,EAA6B;AAClD,EAAA,MAAM,MAAM,IAAA,CAAK,QAAA;AACjB,EAAA,IAAI,GAAA,KAAQ,MAAA,EAAW,OAAO,mBAAA,CAAoB,GAAG,CAAA;AACrD,EAAA,MAAM,CAAA,GAAI,gBAAA,CAAiB,IAAA,CAAK,IAAA,CAAK,IAAI,CAAA;AACzC,EAAA,OAAO,CAAA,KAAM,IAAA,IAAQ,MAAA,CAAO,CAAA,CAAE,CAAC,CAAC,CAAA,IAAK,MAAA,CAAO,CAAA,CAAE,CAAC,CAAC,CAAA;AAClD;AAOA,SAAS,YAAA,CAAa,MAAY,OAAA,EAAoC;AACpE,EAAA,IAAI,IAAA,KAAS,OAAO,OAAO,KAAA;AAC3B,EAAA,IAAI,OAAA,KAAY,MAAA,EAAW,OAAO,IAAA,KAAS,YAAY,SAAA,GAAY,MAAA;AACnE,EAAA,IAAI,CAAE,mBAAA,CAA2C,QAAA,CAAS,OAAO,GAAG,OAAO,MAAA;AAC3E,EAAA,MAAM,IAAA,GAAO,cAAA,CAAe,IAAA,EAAM,OAA4B,CAAA;AAC9D,EAAA,OAAO,MAAM,IAAA,CAAK,CAAC,MAAM,UAAA,CAAW,CAAC,MAAM,IAAI,CAAA;AACjD;AAEA,SAAS,aAAa,CAAA,EAAmB;AACvC,EAAA,OAAO,CAAA,CAAE,OAAA,CAAQ,qBAAA,EAAuB,MAAM,CAAA;AAChD;AAEA,SAAS,eAAA,CAAgB,MAAc,IAAA,EAAwB;AAC7D,EAAA,IAAI,IAAA,KAAS,MAAA,IAAa,IAAA,KAAS,IAAA,EAAM,OAAO,KAAA;AAChD,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,MAAM,IAAA,GAAO,CAAC,CAAA,KAAqB;AACjC,IAAA,IAAI,OAAO,MAAM,QAAA,EAAU;AACzB,MAAA,IAAI,CAAA,CAAE,MAAA,IAAU,CAAA,EAAG,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,IACnC,WAAW,OAAO,CAAA,KAAM,QAAA,IAAY,OAAO,MAAM,SAAA,EAAW;AAC1D,MAAA,OAAA,CAAQ,IAAA,CAAK,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,IACxB,CAAA,MAAA,IAAW,KAAA,CAAM,OAAA,CAAQ,CAAC,CAAA,EAAG;AAC3B,MAAA,CAAA,CAAE,QAAQ,IAAI,CAAA;AAAA,IAChB,CAAA,MAAA,IAAWA,SAAAA,CAAS,CAAC,CAAA,EAAG;AACtB,MAAA,MAAA,CAAO,MAAA,CAAO,CAAC,CAAA,CAAE,OAAA,CAAQ,IAAI,CAAA;AAAA,IAC/B;AAAA,EACF,CAAA;AACA,EAAA,IAAA,CAAK,IAAI,CAAA;AACT,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG,OAAO,KAAA;AACjC,EAAA,IAAI;AACF,IAAA,OAAA,CAAQ,IAAA,CAAK,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AAAA,EACnC,CAAA,CAAA,MAAQ;AAAA,EAER;AACA,EAAA,OAAO,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,SAAS,CAAA,IAAK,IAAA,CAAK,QAAA,CAAS,CAAC,CAAC,CAAA;AAC7D;AAEA,SAAS,QAAA,CAAS,OAAA,EAAkB,IAAA,EAAoB,KAAA,EAAe,GAAA,EAA4B;AACjG,EAAA,MAAM,IAAA,GAAO,CAAC,IAAA,KAAyB;AACrC,IAAA,GAAA,CAAI,KAAK,EAAE,IAAA,EAAM,IAAA,EAAM,KAAA,EAAO,MAAMA,SAAAA,CAAS,IAAI,CAAA,IAAK,OAAO,KAAK,IAAA,KAAS,QAAA,GAAW,IAAA,CAAK,IAAA,GAAO,IAAI,CAAA;AAAA,EACxG,CAAA;AACA,EAAA,IAAI,CAACA,SAAAA,CAAS,IAAI,CAAA,IAAK,OAAO,IAAA,CAAK,IAAA,KAAS,QAAA,IAAY,OAAO,IAAA,CAAK,KAAA,KAAU,QAAA,EAAU;AACtF,IAAA,IAAA,CAAK,WAAW,kBAAkB,CAAA;AAClC,IAAA;AAAA,EACF;AACA,EAAA,MAAM,OAAO,IAAA,CAAK,IAAA;AAClB,EAAA,MAAM,MAAA,GAAS,aAAA,CAAc,QAAA,CAAS,OAAO,CAAA;AAE7C,EAAA,MAAM,KAAA,GAAQ,KAAK,KAAA,KAAU,MAAA,GAAY,KAAK,KAAA,GAAQ,eAAA,CAAgB,KAAK,GAAG,CAAA;AAG9E,EAAA,MAAM,MAAM,IAAA,CAAK,KAAA;AACjB,EAAA,IAAI,CAAE,aAAA,CAAoC,QAAA,CAAS,GAAG,CAAA,EAAG;AACvD,IAAA,IAAA,CAAK,WAAW,kBAAkB,CAAA;AAAA,EACpC,CAAA,MAAA,IAAW,UAAU,MAAA,EAAW;AAC9B,IAAA,IAAI,CAAC,YAAA,CAAa,KAAK,CAAA,EAAG;AACxB,MAAA,IAAA,CAAK,WAAW,kBAAkB,CAAA;AAAA,IACpC,CAAA,MAAO;AACL,MAAA,MAAM,KAAA,GAAyB,YAAY,KAAK,CAAA;AAChD,MAAA,IAAI,KAAA,CAAM,KAAA,KAAU,GAAA,EAAK,IAAA,CAAK,WAAW,kBAAkB,CAAA;AAC3D,MAAA,IAAI,MAAM,QAAA,IAAY,CAAE,MAAM,QAAA,CAAgC,QAAA,CAAS,OAAO,CAAA,EAAG;AAC/E,QAAA,IAAA,CAAK,WAAW,oBAAoB,CAAA;AAAA,MACtC;AAAA,IACF;AAAA,EACF;AAEA,EAAA,IAAI,GAAA,KAAQ,cAAc,cAAA,CAAe,IAAA,CAAK,IAAI,CAAA,EAAG,IAAA,CAAK,WAAW,kBAAkB,CAAA;AAEvF,EAAA,IAAI,eAAe,IAAA,CAAK,IAAI,CAAA,EAAG,IAAA,CAAK,WAAW,cAAc,CAAA;AAE7D,EAAA,MAAM,MAAA,GAAS,KAAA,KAAU,MAAA,IAAU,KAAA,KAAU,WAAA;AAC7C,EAAA,MAAM,YAAA,GAAe,KAAA,KAAU,YAAA,IAAgB,KAAA,KAAU,iBAAA;AACzD,EAAA,IAAA,CAAK,MAAA,IAAU,iBAAiB,KAAA,CAAM,IAAA,CAAK,IAAI,CAAA,EAAG,IAAA,CAAK,WAAW,2BAA2B,CAAA;AAC7F,EAAA,IAAI,KAAA,KAAU,UAAa,YAAA,CAAa,KAAK,KAAK,CAAC,WAAA,CAAY,KAAK,CAAA,CAAE,aAAA,EAAe;AACnF,IAAA,IAAI,CAAC,MAAA,IAAU,CAAC,YAAA,IAAgB,KAAA,CAAM,KAAK,IAAI,CAAA,EAAG,IAAA,CAAK,UAAA,CAAW,kBAAkB,CAAA;AAAA,EACtF;AAEA,EAAA,IAAI,MAAA,EAAQ;AACV,IAAA,IAAI,IAAA,CAAK,cAAc,UAAA,IAAc,MAAA,CAAO,KAAK,IAAI,CAAA,EAAG,IAAA,CAAK,UAAA,CAAW,oBAAoB,CAAA;AAC5F,IAAA,IAAI,IAAA,CAAK,SAAA,KAAc,KAAA,IAAS,CAAC,WAAA,CAAY,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,UAAA,CAAW,oBAAoB,CAAA;AAAA,EACtG;AAEA,EAAA,IAAI,GAAA,KAAQ,UAAA,IAAc,cAAA,CAAe,IAAA,CAAK,IAAI,CAAA,EAAG;AACnD,IAAA,IAAI,4BAA4B,QAAA,CAAS,OAAO,CAAA,EAAG,IAAA,CAAK,WAAW,6BAA6B,CAAA;AAAA,EAClG;AAEA,EAAA,IAAI,IAAA,CAAK,SAAS,MAAA,EAAW;AAC3B,IAAA,MAAM,IAAA,GAAQ,KAAA,CAA4B,QAAA,CAAS,IAAA,CAAK,IAAI,CAAA,GAAI,YAAA,CAAa,IAAA,CAAK,IAAA,EAAM,IAAA,CAAK,OAAO,CAAA,GAAI,MAAA;AACxG,IAAA,MAAM,IAAA,GAAO,OAAO,IAAA,CAAK,SAAA,KAAc,WAAW,IAAA,CAAK,SAAA,CAAU,MAAK,GAAI,EAAA;AAC1E,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,GAAS,CAAA,IAAK,IAAI,MAAA,CAAO,CAAA,iBAAA,EAAoB,YAAA,CAAa,IAAI,CAAC,CAAA,iBAAA,CAAmB,CAAA,CAAE,KAAK,IAAI,CAAA;AACpH,IAAA,IAAI,SAAS,MAAA,EAAW;AACtB,MAAA,IAAA,CAAK,WAAW,aAAa,CAAA;AAAA,IAC/B,CAAA,MAAA,IAAW,CAAC,eAAA,CAAgB,IAAI,CAAA,CAAE,IAAA,CAAK,IAAA,KAAS,KAAA,GAAQ,IAAA,CAAK,IAAA,EAAK,GAAI,IAAI,CAAA,EAAG;AAC3E,MAAA,IAAA,CAAK,WAAW,aAAa,CAAA;AAAA,IAC/B,CAAA,MAAA,IAAW,gBAAA,CAAiB,IAAI,CAAA,CAAE,IAAA,CAAK,CAAC,EAAA,KAAO,EAAA,CAAG,IAAA,CAAK,IAAI,CAAC,CAAA,EAAG;AAC7D,MAAA,IAAA,CAAK,WAAW,aAAa,CAAA;AAAA,IAC/B,CAAA,MAAA,IAAW,IAAA,KAAS,SAAA,IAAa,SAAA,IAAa,CAAC,MAAA,EAAQ;AAErD,MAAA,IAAA,CAAK,WAAW,aAAa,CAAA;AAAA,IAC/B;AACA,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,IAAI,SAAA,EAAW,IAAA,CAAK,UAAA,CAAW,iBAAiB,CAAA;AAAA,IAClD,CAAA,MAAA,IAAW,IAAA,KAAS,SAAA,IAAa,CAAC,SAAA,EAAW;AAC3C,MAAA,IAAA,CAAK,WAAW,yBAAyB,CAAA;AAAA,IAC3C;AAAA,EACF;AACA,EAAA,IAAI,gBAAgB,IAAA,EAAM,IAAA,CAAK,cAAc,CAAA,EAAG,IAAA,CAAK,WAAW,oBAAoB,CAAA;AAGpF,EAAA,IAAI,SAAA,CAAU,IAAA,EAAM,cAAc,CAAA,EAAG;AACnC,IAAA,IAAI,MAAA,EAAQ,IAAA,CAAK,UAAA,CAAW,sBAAsB,CAAA;AAClD,IAAA,IAAI,KAAA,KAAU,SAAA,EAAW,IAAA,CAAK,UAAA,CAAW,4BAA4B,CAAA;AAAA,EACvE;AAEA,EAAA,IAAI,YAAY,IAAA,CAAK,IAAI,CAAA,EAAG,IAAA,CAAK,WAAW,WAAW,CAAA;AACvD,EAAA,IAAI,UAAU,IAAA,EAAM,kBAAkB,CAAA,EAAG,IAAA,CAAK,WAAW,kBAAkB,CAAA;AAC3E,EAAA,IAAI,GAAA,KAAQ,WAAA,EAAa,IAAA,CAAK,UAAA,CAAW,uBAAuB,CAAA;AAChE,EAAA,IAAI,QAAQ,SAAA,EAAW;AAGrB,IAAA,MAAM,OAAA,GAAU,SAAS,mBAAA,CAAoB,IAAA,CAAK,QAAQ,CAAA,GAAI,KAAA,KAAU,YAAA,IAAgB,aAAA,CAAc,IAAI,CAAA;AAC1G,IAAA,IAAI,CAAC,OAAA,EAAS,IAAA,CAAK,UAAA,CAAW,wBAAwB,CAAA;AAAA,EACxD;AACA,EAAA,IAAI,MAAA,IAAU,QAAQ,UAAA,IAAc,GAAA,KAAQ,aAAa,GAAA,KAAQ,SAAA,EAAW,IAAA,CAAK,UAAA,CAAW,sBAAsB,CAAA;AACpH;AAGO,SAAS,cAAc,SAAA,EAAgC;AAC5D,EAAA,MAAM,aAA8B,EAAC;AACrC,EAAA,IAAI,CAACA,UAAS,SAAS,CAAA,IAAK,CAAC,KAAA,CAAM,OAAA,CAAQ,SAAA,CAAU,KAAK,CAAA,EAAG;AAC3D,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,UAAA,EAAY,CAAC,EAAE,IAAA,EAAM,UAAA,CAAW,eAAA,EAAiB,IAAA,EAAM,EAAA,EAAI,IAAA,EAAM,EAAA,EAAI,CAAA,EAAE;AAAA,EAC7F;AACA,EAAA,MAAM,UAAU,SAAA,CAAU,OAAA;AAC1B,EAAA,IAAI,CAAE,QAAA,CAAgC,QAAA,CAAS,OAAO,CAAA,EAAG;AACvD,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,UAAA,EAAY,CAAC,EAAE,IAAA,EAAM,UAAA,CAAW,eAAA,EAAiB,IAAA,EAAM,IAAI,IAAA,EAAM,MAAA,CAAO,OAAO,CAAA,EAAG,CAAA,EAAE;AAAA,EAC1G;AACA,EAAA,MAAM,QAAQ,SAAA,CAAU,KAAA;AACxB,EAAA,KAAA,CAAM,OAAA,CAAQ,CAAC,IAAA,EAAM,CAAA,KAAM,SAAS,OAAA,EAAoB,IAAA,EAAM,CAAA,EAAG,UAAU,CAAC,CAAA;AAE5E,EAAA,IAAI,YAAY,aAAA,EAAe;AAC7B,IAAA,MAAM,YAAY,KAAA,CAAM,IAAA;AAAA,MACtB,CAAC,CAAA,KAAMA,SAAAA,CAAS,CAAC,KAAK,CAAA,CAAE,KAAA,KAAU,SAAA,IAAa,OAAO,EAAE,IAAA,KAAS,QAAA,IAAY,MAAA,CAAO,IAAA,CAAK,EAAE,IAAI;AAAA,KACjG;AACA,IAAA,IAAI,CAAC,SAAA,EAAW,UAAA,CAAW,IAAA,CAAK,EAAE,IAAA,EAAM,UAAA,CAAW,0BAAA,EAA4B,IAAA,EAAM,EAAA,EAAI,IAAA,EAAM,EAAA,EAAI,CAAA;AAAA,EACrG;AAEA,EAAA,OAAO,EAAE,EAAA,EAAI,UAAA,CAAW,MAAA,KAAW,GAAG,UAAA,EAAW;AACnD;AAGO,SAAS,eAAe,UAAA,EAAqC;AAClE,EAAA,OAAO,UAAA,CAAW,IAAI,aAAa,CAAA;AACrC;AAgCO,SAAS,iBAAA,CACd,KAAA,EACA,IAAA,EACA,UAAA,EACgB;AAChB,EAAA,OAAO,KAAA,CAAM,GAAA,CAAI,CAAC,IAAA,KAAS;AACzB,IAAA,MAAM,GAAA,GAAoB,EAAE,KAAA,EAAO,IAAA,CAAK,KAAA,EAAO,KAAK,IAAA,CAAK,GAAA,EAAK,IAAA,EAAM,IAAA,CAAK,IAAA,EAAK;AAC9E,IAAA,IAAI,IAAA,CAAK,IAAI,UAAA,CAAW,OAAO,KAAK,IAAA,EAAM,GAAA,CAAI,YAAY,IAAA,CAAK,IAAA;AAC/D,IAAA,IAAI,IAAA,CAAK,GAAA,KAAQ,iBAAA,EAAmB,GAAA,CAAI,IAAA,GAAO,KAAA;AAC/C,IAAA,MAAM,GAAA,GAAM,0BAAA,CAA2B,IAAA,CAAK,IAAA,CAAK,GAAG,CAAA;AACpD,IAAA,IAAI,OAAO,UAAA,EAAY;AACrB,MAAA,MAAM,QAAQ,UAAA,CAAW,IAAA,CAAK,OAAO,GAAA,CAAI,CAAC,CAAC,CAAC,CAAA;AAC5C,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,GAAA,CAAI,OAAO,KAAA,CAAM,IAAA;AACjB,QAAA,GAAA,CAAI,UAAU,KAAA,CAAM,OAAA;AACpB,QAAA,IAAI,KAAA,CAAM,SAAA,EAAW,GAAA,CAAI,SAAA,GAAY,KAAA,CAAM,SAAA;AAAA,MAC7C;AAAA,IACF;AACA,IAAA,OAAO,GAAA;AAAA,EACT,CAAC,CAAA;AACH;;;ACzbO,IAAM,8BAAA,GAAiC;AAgBvC,IAAM,sBAAA,GAAyB;AAAA,EACpC,aAAA,EAAe,eAAA;AAAA,EACf,sBAAA,EAAwB,wBAAA;AAAA,EACxB,yBAAA,EAA2B,2BAAA;AAAA,EAC3B,aAAA,EAAe,eAAA;AAAA,EACf,gBAAA,EAAkB,kBAAA;AAAA,EAClB,gBAAA,EAAkB;AACpB;AASA,SAASA,UAAS,CAAA,EAA0C;AAC1D,EAAA,OAAO,OAAO,MAAM,QAAA,IAAY,CAAA,KAAM,QAAQ,CAAC,KAAA,CAAM,QAAQ,CAAC,CAAA;AAChE;AAGO,SAAS,kBAAkB,QAAA,EAA0C;AAC1E,EAAA,IAAI,CAACA,SAAAA,CAAS,QAAQ,CAAA,EAAG,OAAO,EAAE,SAAA,EAAW,KAAA,EAAO,OAAA,EAAS,CAAC,sBAAA,CAAuB,aAAa,CAAA,EAAE;AACpG,EAAA,MAAM,UAAkC,EAAC;AACzC,EAAA,IAAI,SAAS,MAAA,KAAW,aAAA,EAAe,OAAA,CAAQ,IAAA,CAAK,uBAAuB,sBAAsB,CAAA;AACjG,EAAA,MAAM,QAAQ,QAAA,CAAS,qBAAA;AACvB,EAAA,IAAI,OAAO,UAAU,QAAA,IAAY,CAAC,OAAO,QAAA,CAAS,KAAK,CAAA,IAAK,KAAA,GAAQ,8BAAA,EAAgC;AAClG,IAAA,OAAA,CAAQ,IAAA,CAAK,uBAAuB,yBAAyB,CAAA;AAAA,EAC/D;AACA,EAAA,IAAI,SAAS,SAAA,KAAc,IAAA,EAAM,OAAA,CAAQ,IAAA,CAAK,uBAAuB,aAAa,CAAA;AAClF,EAAA,IAAI,SAAS,YAAA,KAAiB,IAAA,EAAM,OAAA,CAAQ,IAAA,CAAK,uBAAuB,gBAAgB,CAAA;AACxF,EAAA,IAAI,OAAO,SAAS,eAAA,KAAoB,QAAA,IAAY,CAAC,MAAA,CAAO,QAAA,CAAS,QAAA,CAAS,eAAe,CAAA,EAAG;AAC9F,IAAA,OAAA,CAAQ,IAAA,CAAK,uBAAuB,gBAAgB,CAAA;AAAA,EACtD;AACA,EAAA,OAAO,EAAE,SAAA,EAAW,OAAA,CAAQ,MAAA,KAAW,GAAG,OAAA,EAAQ;AACpD;AAEO,IAAM,uBAAA,GAA0B;AAAA,EACrC,eAAA,EAAiB,iBAAA;AAAA,EACjB,4BAAA,EAA8B,8BAAA;AAAA,EAC9B,yBAAA,EAA2B;AAC7B;AAYO,SAAS,oBAAA,CAAqB,UAAmB,OAAA,EAA0C;AAChG,EAAA,IAAI,CAAE,QAAA,CAAgC,QAAA,CAAS,OAAO,CAAA,EAAG;AACvD,IAAA,OAAO,EAAE,MAAA,EAAQ,KAAA,EAAO,SAAS,CAAC,uBAAA,CAAwB,eAAe,CAAA,EAAE;AAAA,EAC7E;AACA,EAAA,IAAI,2BAAA,CAA4B,QAAA,CAAS,OAAkB,CAAA,EAAG;AAC5D,IAAA,OAAO,EAAE,MAAA,EAAQ,KAAA,EAAO,SAAS,CAAC,uBAAA,CAAwB,4BAA4B,CAAA,EAAE;AAAA,EAC1F;AACA,EAAA,MAAM,CAAA,GAAI,kBAAkB,QAAQ,CAAA;AACpC,EAAA,IAAI,CAAC,EAAE,SAAA,EAAW;AAChB,IAAA,OAAO,EAAE,MAAA,EAAQ,KAAA,EAAO,OAAA,EAAS,CAAC,wBAAwB,yBAAA,EAA2B,GAAG,CAAA,CAAE,OAAO,CAAA,EAAE;AAAA,EACrG;AACA,EAAA,OAAO,EAAE,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAS,EAAC,EAAE;AACrC;AC7EO,IAAM,cAAA,GAAiB;AAqC9B,IAAM,gBAAA,uBAAuB,GAAA,CAAI;AAAA,EAC/B,MAAA;AAAA,EAAQ,YAAA;AAAA,EAAc,WAAA;AAAA,EAAa,QAAA;AAAA,EAAU,aAAA;AAAA,EAAe,KAAA;AAAA,EAC5D,IAAA;AAAA,EAAM,UAAA;AAAA,EAAY,cAAA;AAAA,EAAgB,OAAA;AAAA,EAAS,QAAA;AAAA,EAAU,gBAAA;AAAA,EACrD,YAAA;AAAA,EAAc,SAAA;AAAA,EAAW,QAAA;AAAA,EAAU,OAAA;AAAA,EAAS,KAAA;AAAA,EAAO;AACrD,CAAC,CAAA;AAED,IAAM,SAAA,GAAY,CAAC,KAAA,EAAO,SAAA,EAAW,UAAU,WAAA,EAAa,gBAAA,EAAkB,YAAA,EAAc,OAAA,EAAS,WAAW,CAAA;AAChH,IAAM,WAAA,GAAc,CAAC,OAAA,EAAS,KAAK,CAAA;AACnC,IAAM,cAAA,GAAiB,CAAC,KAAA,EAAO,MAAM,CAAA;AACrC,IAAM,YAAY,CAAC,IAAA,EAAM,MAAA,EAAQ,OAAA,EAAS,SAAS,gBAAgB,CAAA;AACnE,IAAM,KAAA,GAAQ,gBAAA;AACd,IAAM,IAAA,GAAO,qBAAA;AAEb,IAAM,SAAA,GAAY,oBAAA;AAMlB,IAAM,KAAA,GAAQ,4BAAA;AACd,IAAM,SAAA,GAAY,EAAA;AAMX,IAAM,0BAAA,GAAgD;AAAA,EAC3D,sBAAA;AAAA,EACA,iBAAA;AAAA,EACA;AACF,CAAA;AACA,IAAM,aAAA,GAAgB,EAAA;AACtB,IAAM,OAAA,GAAU,wFAAA;AAEhB,SAAS,cAAA,CAAe,CAAA,EAAW,CAAA,EAAW,CAAA,EAAoB;AAChE,EAAA,IAAI,IAAI,CAAA,IAAK,CAAA,GAAI,EAAA,IAAM,CAAA,GAAI,GAAG,OAAO,KAAA;AACrC,EAAA,MAAM,GAAA,GAAM,CAAC,EAAA,EAAI,CAAA,GAAI,CAAA,KAAM,CAAA,KAAM,CAAA,GAAI,GAAA,KAAQ,CAAA,IAAK,CAAA,GAAI,GAAA,KAAQ,CAAA,CAAA,GAAK,EAAA,GAAK,IAAI,EAAA,EAAI,EAAA,EAAI,EAAA,EAAI,EAAA,EAAI,EAAA,EAAI,EAAA,EAAI,EAAA,EAAI,EAAA,EAAI,EAAA,EAAI,EAAE,CAAA,CAAE,CAAA,GAAI,CAAC,CAAA;AACzH,EAAA,OAAO,CAAA,IAAK,GAAA;AACd;AAEA,SAAS,UAAU,CAAA,EAAoB;AACrC,EAAA,MAAM,CAAA,GAAI,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA;AACxB,EAAA,IAAI,CAAC,GAAG,OAAO,KAAA;AACf,EAAA,MAAM,CAAC,CAAA,EAAG,EAAA,EAAI,CAAA,EAAG,GAAG,EAAA,EAAI,EAAE,CAAA,GAAI,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA,CAAE,IAAI,MAAM,CAAA;AACtD,EAAA,IAAI,CAAC,cAAA,CAAe,CAAA,EAAG,EAAA,EAAI,CAAC,CAAA,IAAK,CAAA,GAAI,EAAA,IAAM,EAAA,GAAK,EAAA,IAAM,EAAA,GAAK,EAAA,EAAI,OAAO,KAAA;AACtE,EAAA,IAAI,EAAE,CAAC,CAAA,KAAM,MAAA,KAAc,MAAA,CAAO,EAAE,CAAC,CAAC,CAAA,GAAI,EAAA,IAAM,OAAO,CAAA,CAAE,CAAC,CAAC,CAAA,GAAI,KAAK,OAAO,KAAA;AAC3E,EAAA,OAAO,IAAA;AACT;AAMO,SAAS,sBAAsB,IAAA,EAAuC;AAC3E,EAAA,MAAM,EAAE,SAAA,EAAW,UAAA,EAAY,GAAG,MAAK,GAAI,IAAA;AAC3C,EAAA,OAAO,cAAc,IAAI,CAAA;AAC3B;AAEA,SAAS,iBAAiB,CAAA,EAAuB;AAC/C,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,CAAA,IAAK,CAAA,EAAG,GAAA,IAAO,MAAA,CAAO,aAAa,CAAC,CAAA;AAC/C,EAAA,OAAO,IAAA,CAAK,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC5E;AAGA,SAAS,iBAAiB,CAAA,EAAuB;AAC/C,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,aAAA,IAAiB,CAAC,kBAAA,CAAmB,IAAA,CAAK,CAAC,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,eAAe,CAAA;AAC9F,EAAA,MAAM,SAAS,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,EAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,GAAI,MAAM,KAAA,CAAM,CAAA,EAAA,CAAI,IAAK,CAAA,CAAE,MAAA,GAAS,KAAM,CAAC,CAAA;AAChG,EAAA,MAAM,GAAA,GAAM,KAAK,MAAM,CAAA;AACvB,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,GAAA,CAAI,MAAM,CAAA;AACrC,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,CAAA,EAAA,EAAK,GAAA,CAAI,CAAC,CAAA,GAAI,GAAA,CAAI,UAAA,CAAW,CAAC,CAAA;AAC9D,EAAA,IAAI,GAAA,CAAI,MAAA,KAAW,EAAA,IAAM,gBAAA,CAAiB,GAAG,MAAM,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,yBAAyB,CAAA;AAC/F,EAAA,OAAO,GAAA;AACT;AAEA,SAAS,MAAM,CAAA,EAA0C;AACvD,EAAA,OAAO,OAAO,MAAM,QAAA,IAAY,CAAA,KAAM,QAAQ,CAAC,KAAA,CAAM,QAAQ,CAAC,CAAA;AAChE;AAEA,SAAS,SAAA,CAAU,GAAA,EAA8B,OAAA,EAAmB,KAAA,EAAe,MAAA,EAAwB;AACzG,EAAA,KAAA,MAAW,CAAA,IAAK,MAAA,CAAO,IAAA,CAAK,GAAG,CAAA,EAAG;AAChC,IAAA,IAAI,gBAAA,CAAiB,GAAA,CAAI,CAAA,CAAE,WAAA,EAAa,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,KAAK,CAAA,qBAAA,EAAwB,CAAC,CAAA,gBAAA,CAAkB,CAAA;AAAA,SAAA,IACjG,CAAC,OAAA,CAAQ,QAAA,CAAS,CAAC,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,KAAK,CAAA,iBAAA,EAAoB,CAAC,CAAA,CAAA,CAAG,CAAA;AAAA,EAC7E;AACA,EAAA,KAAA,MAAW,CAAA,IAAK,OAAA,EAAS,IAAI,EAAE,CAAA,IAAK,GAAA,CAAA,EAAM,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,KAAK,CAAA,iBAAA,EAAoB,CAAC,CAAA,CAAA,CAAG,CAAA;AACxF;AAGO,SAAS,uBAAuB,IAAA,EAAyB;AAC9D,EAAA,MAAM,SAAmB,EAAC;AAC1B,EAAA,IAAI,CAAC,KAAA,CAAM,IAAI,CAAA,EAAG,OAAO,CAAC,qBAAqB,CAAA;AAC/C,EAAA,SAAA,CAAU,IAAA,EAAM,SAAA,EAAW,MAAA,EAAQ,MAAM,CAAA;AACzC,EAAA,IAAI,KAAK,GAAA,KAAQ,cAAA,SAAuB,IAAA,CAAK,CAAA,kBAAA,EAAqB,cAAc,CAAA,CAAE,CAAA;AAClF,EAAA,IAAI,OAAO,IAAA,CAAK,OAAA,KAAY,QAAA,IAAY,CAAC,SAAA,CAAU,IAAA,CAAK,IAAA,CAAK,OAAO,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,gEAAgE,CAAA;AACnJ,EAAA,IAAI,OAAO,IAAA,CAAK,SAAA,KAAc,QAAA,IAAY,CAAC,SAAA,CAAU,IAAA,CAAK,SAAS,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,+CAA+C,CAAA;AACjI,EAAA,IAAI,OAAO,KAAK,cAAA,KAAmB,QAAA,IAAY,CAAC,IAAA,CAAK,cAAA,EAAgB,MAAA,CAAO,IAAA,CAAK,iDAAiD,CAAA;AAClI,EAAA,IAAI,OAAO,IAAA,CAAK,SAAA,KAAc,QAAA,EAAU,MAAA,CAAO,KAAK,kCAAkC,CAAA;AAAA,OACjF;AACH,IAAA,IAAI;AACF,MAAA,gBAAA,CAAiB,KAAK,SAAS,CAAA;AAAA,IACjC,CAAA,CAAA,MAAQ;AACN,MAAA,MAAA,CAAO,KAAK,kFAAkF,CAAA;AAAA,IAChG;AAAA,EACF;AAEA,EAAA,IAAI,CAAC,KAAA,CAAM,IAAA,CAAK,MAAM,CAAA,EAAG,MAAA,CAAO,KAAK,uBAAuB,CAAA;AAAA,OACvD;AACH,IAAA,SAAA,CAAU,IAAA,CAAK,MAAA,EAAQ,WAAA,EAAa,QAAA,EAAU,MAAM,CAAA;AACpD,IAAA,KAAA,MAAW,KAAK,WAAA,EAAa;AAC3B,MAAA,MAAM,CAAA,GAAI,IAAA,CAAK,MAAA,CAAO,CAAC,CAAA;AACvB,MAAA,IAAI,OAAO,CAAA,KAAM,QAAA,IAAY,CAAC,IAAA,CAAK,IAAA,CAAK,CAAC,CAAA,IAAK,CAAC,cAAA,CAAe,MAAA,CAAO,CAAA,CAAE,MAAM,CAAA,EAAG,CAAC,CAAC,CAAA,EAAG,MAAA,CAAO,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,CAAC,CAAC,CAAA,EAAG,MAAA,CAAO,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAC,CAAA,EAAG;AACnI,QAAA,MAAA,CAAO,IAAA,CAAK,CAAA,OAAA,EAAU,CAAC,CAAA,yCAAA,CAA2C,CAAA;AAAA,MACpE;AAAA,IACF;AACA,IAAA,MAAM,EAAE,KAAA,EAAO,GAAA,EAAI,GAAI,IAAA,CAAK,MAAA;AAC5B,IAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,OAAO,QAAQ,QAAA,IAAY,IAAA,CAAK,IAAA,CAAK,KAAK,KAAK,IAAA,CAAK,IAAA,CAAK,GAAG,CAAA,IAAK,QAAQ,GAAA,EAAK;AAC7G,MAAA,MAAA,CAAO,KAAK,8BAA8B,CAAA;AAAA,IAC5C;AAAA,EACF;AAEA,EAAA,MAAM,MAAA,uBAAa,GAAA,EAAY;AAC/B,EAAA,MAAM,UAAA,uBAAiB,GAAA,EAAY;AACnC,EAAA,MAAM,OAAA,uBAAc,GAAA,EAAY;AAChC,EAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,IAAA,CAAK,UAAU,CAAA,IAAK,IAAA,CAAK,UAAA,CAAW,MAAA,KAAW,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,uCAAuC,CAAA;AAAA;AAEtH,IAAA,IAAA,CAAK,UAAA,CAAW,OAAA,CAAQ,CAAC,CAAA,EAAG,CAAA,KAAM;AAChC,MAAA,IAAI,CAAC,KAAA,CAAM,CAAC,CAAA,EAAG,OAAO,KAAK,MAAA,CAAO,IAAA,CAAK,CAAA,WAAA,EAAc,CAAC,CAAA,gBAAA,CAAkB,CAAA;AACxE,MAAA,SAAA,CAAU,CAAA,EAAG,cAAA,EAAgB,CAAA,WAAA,EAAc,CAAC,KAAK,MAAM,CAAA;AACvD,MAAA,IAAI,OAAO,EAAE,GAAA,KAAQ,QAAA,IAAY,CAAC,0BAAA,CAA2B,QAAA,CAAS,CAAA,CAAE,GAAG,CAAA,EAAG;AAC5E,QAAA,MAAA,CAAO,IAAA,CAAK,cAAc,CAAC,CAAA,sBAAA,EAAyB,2BAA2B,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,MAC7F;AACA,MAAA,IAAI,OAAO,CAAA,CAAE,IAAA,KAAS,QAAA,IAAY,CAAC,KAAA,CAAM,IAAA,CAAK,CAAA,CAAE,IAAI,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAA,WAAA,EAAc,CAAC,CAAA,gCAAA,CAAkC,CAAA;AAAA,WAC/G,MAAA,CAAO,GAAA,CAAI,CAAA,CAAE,IAAI,CAAA;AAAA,IACxB,CAAC,CAAA;AAEH,EAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,IAAA,CAAK,KAAK,CAAA,IAAK,IAAA,CAAK,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,kCAAkC,CAAA;AAAA;AAEvG,IAAA,IAAA,CAAK,KAAA,CAAM,OAAA,CAAQ,CAAC,CAAA,EAAG,CAAA,KAAM;AAC3B,MAAA,IAAI,CAAC,KAAA,CAAM,CAAC,CAAA,EAAG,OAAO,KAAK,MAAA,CAAO,IAAA,CAAK,CAAA,MAAA,EAAS,CAAC,CAAA,gBAAA,CAAkB,CAAA;AACnE,MAAA,SAAA,CAAU,CAAA,EAAG,SAAA,EAAW,CAAA,MAAA,EAAS,CAAC,KAAK,MAAM,CAAA;AAC7C,MAAA,IAAI,OAAO,CAAA,CAAE,EAAA,KAAO,QAAA,IAAY,CAAC,SAAA,CAAU,IAAA,CAAK,CAAA,CAAE,EAAE,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAA,MAAA,EAAS,CAAC,CAAA,sDAAA,CAAwD,CAAA;AAAA,WAAA,IAC5H,OAAA,CAAQ,GAAA,CAAI,CAAA,CAAE,EAAE,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAA,MAAA,EAAS,CAAC,CAAA,yBAAA,EAA4B,CAAA,CAAE,EAAE,CAAA,CAAA,CAAG,CAAA;AAAA,WAChF,OAAA,CAAQ,GAAA,CAAI,CAAA,CAAE,EAAE,CAAA;AACrB,MAAA,IAAI,CAAA,CAAE,IAAA,KAAS,OAAA,IAAW,CAAA,CAAE,IAAA,KAAS,UAAU,MAAA,CAAO,IAAA,CAAK,CAAA,MAAA,EAAS,CAAC,CAAA,mCAAA,CAAqC,CAAA;AAC1G,MAAA,IAAI,OAAO,EAAE,KAAA,KAAU,QAAA,IAAY,CAAC,CAAA,CAAE,KAAA,IAAS,EAAE,KAAA,CAAM,MAAA,GAAS,aAAa,mBAAA,CAAoB,IAAA,CAAK,EAAE,KAAK,CAAA,IAAK,CAAC,KAAA,CAAM,IAAA,CAAK,CAAA,CAAE,KAAK,CAAA,EAAG;AACtI,QAAA,MAAA,CAAO,IAAA,CAAK,CAAA,MAAA,EAAS,CAAC,CAAA,uCAAA,EAA0C,SAAS,CAAA,sBAAA,CAAwB,CAAA;AAAA,MACnG;AACA,MAAA,IAAI,OAAO,CAAA,CAAE,KAAA,KAAU,QAAA,IAAY,CAAC,OAAO,aAAA,CAAc,CAAA,CAAE,KAAK,CAAA,IAAK,EAAE,KAAA,GAAQ,CAAA,SAAU,IAAA,CAAK,CAAA,MAAA,EAAS,CAAC,CAAA,uCAAA,CAAyC,CAAA;AACjJ,MAAA,IAAI,OAAO,CAAA,CAAE,cAAA,KAAmB,QAAA,IAAY,CAAC,KAAA,CAAM,IAAA,CAAK,CAAA,CAAE,cAAc,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAA,MAAA,EAAS,CAAC,CAAA,0CAAA,CAA4C,CAAA;AAAA,WAAA,IACpI,CAAC,MAAA,CAAO,GAAA,CAAI,CAAA,CAAE,cAAc,GAAG,MAAA,CAAO,IAAA,CAAK,CAAA,MAAA,EAAS,CAAC,CAAA,6CAAA,CAA+C,CAAA;AAAA,WACxG,UAAA,CAAW,GAAA,CAAI,CAAA,CAAE,cAAc,CAAA;AAAA,IACtC,CAAC,CAAA;AACH,EAAA,KAAA,MAAW,CAAA,IAAK,MAAA,EAAQ,IAAI,CAAC,UAAA,CAAW,GAAA,CAAI,CAAC,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAA,YAAA,EAAe,CAAC,CAAA,8BAAA,CAAgC,CAAA;AAC5G,EAAA,OAAO,MAAA;AACT;AAMA,eAAsB,eAAA,CACpB,MACA,OAAA,EACgC;AAChC,EAAA,MAAM,IAAA,GAAO,CAAC,MAAA,MAA6C,EAAE,OAAO,KAAA,EAAO,KAAA,EAAO,EAAC,EAAG,MAAA,EAAO,CAAA;AAC7F,EAAA,MAAM,WAAA,GAAc,uBAAuB,IAAI,CAAA;AAC/C,EAAA,IAAI,WAAA,CAAY,MAAA,GAAS,CAAA,EAAG,OAAO,KAAK,WAAW,CAAA;AACnD,EAAA,MAAM,CAAA,GAAI,IAAA;AACV,EAAA,IAAI,EAAA,GAAK,KAAA;AACT,EAAA,IAAI;AACF,IAAA,MAAM,EAAA,GAAK,OAAO,OAAA,CAAQ,SAAA,KAAc,WAAW,UAAA,CAAW,OAAA,CAAQ,SAAS,CAAA,GAAI,OAAA,CAAQ,SAAA;AAC3F,IAAA,EAAA,GAAK,MAAMJ,mBAAAA,CAAY,gBAAA,CAAiB,CAAA,CAAE,SAAS,CAAA,EAAGD,oBAAAA,CAAY,qBAAA,CAAsB,CAAuC,CAAC,CAAA,EAAG,EAAA,EAAI,EAAE,MAAA,EAAQ,OAAO,CAAA;AAAA,EAC1J,CAAA,CAAA,MAAQ;AACN,IAAA,EAAA,GAAK,KAAA;AAAA,EACP;AACA,EAAA,IAAI,CAAC,EAAA,EAAI,OAAO,IAAA,CAAK,CAAC,gCAAgC,CAAC,CAAA;AACvD,EAAA,OAAO,EAAE,KAAA,EAAO,IAAA,EAAM,KAAA,EAAO,CAAA,CAAE,MAAM,GAAA,CAAI,CAAC,CAAA,MAAO,EAAE,GAAG,CAAA,EAAE,CAAE,CAAA,EAAG,MAAA,EAAQ,EAAC,EAAE;AAC1E","file":"index.cjs","sourcesContent":["/**\n * Cryptographic helpers for AIP certificate verification.\n *\n * Uses @noble/ed25519 for signatures and @noble/hashes for SHA-256.\n * All operations are offline — no network calls.\n */\n\nimport { verifyAsync } from \"@noble/ed25519\";\nimport { sha256 } from \"@noble/hashes/sha2.js\";\nimport {\n  bytesToHex,\n  hexToBytes,\n  utf8ToBytes,\n} from \"@noble/hashes/utils.js\";\n\nimport type { MerkleSibling } from \"./types.js\";\n\n// ---------------------------------------------------------------------------\n// Encoding helpers\n// ---------------------------------------------------------------------------\n\n/** Decode a standard base-64 string to Uint8Array. */\nexport function base64ToUint8(b64: string): Uint8Array {\n  const binary = atob(b64);\n  const bytes = new Uint8Array(binary.length);\n  for (let i = 0; i < binary.length; i++) {\n    bytes[i] = binary.charCodeAt(i);\n  }\n  return bytes;\n}\n\n/** Decode a hex string to Uint8Array. */\nexport function hexToUint8(hex: string): Uint8Array {\n  return hexToBytes(hex);\n}\n\n// ---------------------------------------------------------------------------\n// SHA-256\n// ---------------------------------------------------------------------------\n\n/** SHA-256 hash of a UTF-8 string, returned as lowercase hex. */\nexport function sha256Hex(input: string): string {\n  return bytesToHex(sha256(utf8ToBytes(input)));\n}\n\n// ---------------------------------------------------------------------------\n// Ed25519 signature verification\n// ---------------------------------------------------------------------------\n\n/**\n * Verify an Ed25519 signature.\n *\n * @param signature - Base-64 encoded signature.\n * @param payload   - The signed payload string (UTF-8).\n * @param publicKey - Ed25519 public key as Uint8Array.\n * @returns `true` if valid, `false` otherwise.\n */\nexport async function verifySignature(\n  signature: string,\n  payload: string,\n  publicKey: Uint8Array,\n): Promise<boolean> {\n  try {\n    const sigBytes = base64ToUint8(signature);\n    const msgBytes = utf8ToBytes(payload);\n    return await verifyAsync(sigBytes, msgBytes, publicKey);\n  } catch {\n    return false;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Merkle proof verification\n// ---------------------------------------------------------------------------\n\n/**\n * Verify a Merkle inclusion proof by walking from leaf to root.\n *\n * Each sibling specifies whether it sits on the `\"left\"` or `\"right\"` side.\n * The combined hash at each level is `SHA-256(left || right)` in hex.\n */\nexport function verifyMerkleProof(\n  leafHash: string,\n  siblings: MerkleSibling[],\n  expectedRoot: string,\n): boolean {\n  let current = leafHash;\n\n  for (const sibling of siblings) {\n    const pair =\n      sibling.position === \"left\"\n        ? sibling.hash + current\n        : current + sibling.hash;\n    current = sha256Hex(pair);\n  }\n\n  return current === expectedRoot;\n}\n\n// ---------------------------------------------------------------------------\n// Chain hash computation\n// ---------------------------------------------------------------------------\n\n/**\n * Recompute a chain hash from its constituent parts.\n *\n * Format: `SHA-256(prevChainHash|checkpointId|verdict|thinkingBlockHash|inputCommitment|timestamp)`\n *\n * When `prevChainHash` is `null` the literal string `\"genesis\"` is used.\n */\nexport function computeChainHash(\n  prevChainHash: string | null,\n  checkpointId: string,\n  verdict: string,\n  thinkingBlockHash: string,\n  inputCommitment: string,\n  timestamp: string,\n): string {\n  const prev = prevChainHash ?? \"genesis\";\n  const preimage = [\n    prev,\n    checkpointId,\n    verdict,\n    thinkingBlockHash,\n    inputCommitment,\n    timestamp,\n  ].join(\"|\");\n\n  return sha256Hex(preimage);\n}\n","/**\n * Main certificate verification logic.\n *\n * Given a trusted public key (and optionally a Merkle root), verifies\n * an AIP Integrity Certificate entirely offline.\n */\n\nimport {\n  verifySignature,\n  computeChainHash,\n  verifyMerkleProof,\n  hexToUint8,\n} from \"./crypto.js\";\n\nimport type {\n  IntegrityCertificate,\n  VerificationResult,\n  VerifierOptions,\n  CheckResult,\n} from \"./types.js\";\n\n// ---------------------------------------------------------------------------\n// Public API\n// ---------------------------------------------------------------------------\n\n/**\n * Verify an AIP Integrity Certificate offline.\n *\n * Performs four checks:\n *\n * 1. **Signature** — Ed25519 verification of the signed payload.\n * 2. **Chain** — Recomputes chain hash and compares with the certificate.\n * 3. **Merkle** — If the certificate carries a Merkle proof *and*\n *    `options.merkleRoot` is supplied, verifies the inclusion proof.\n *    Otherwise the check is skipped (returns `null`).\n * 4. **Verdict derivation** — If the certificate carries a verdict derivation\n *    proof, verifies structural integrity (journal fields match certificate\n *    claims). STARK receipt verification is deferred to server-side.\n *\n * @param certificate - The integrity certificate to verify.\n * @param options     - Public key and optional Merkle root.\n * @returns Verification result with per-check details.\n */\nexport async function verifyCertificate(\n  certificate: IntegrityCertificate,\n  options: VerifierOptions,\n): Promise<VerificationResult> {\n  const publicKey = resolvePublicKey(options.publicKey);\n\n  const signature = await checkSignature(certificate, publicKey);\n  const chain = checkChain(certificate);\n  const merkle = checkMerkle(certificate, options.merkleRoot);\n  const verdictDerivation = checkVerdictDerivation(\n    certificate,\n    options.verdictDerivationImageId,\n  );\n\n  const allValid =\n    signature.valid &&\n    chain.valid &&\n    (merkle === null || merkle.valid) &&\n    (verdictDerivation === null || verdictDerivation.valid);\n\n  return {\n    valid: allValid,\n    checks: { signature, chain, merkle, verdict_derivation: verdictDerivation },\n    certificate_id: certificate.certificate_id,\n    verified_at: new Date().toISOString(),\n  };\n}\n\n// ---------------------------------------------------------------------------\n// Internal helpers\n// ---------------------------------------------------------------------------\n\n/** Normalize public key to Uint8Array. */\nfunction resolvePublicKey(key: string | Uint8Array): Uint8Array {\n  if (typeof key === \"string\") {\n    return hexToUint8(key);\n  }\n  return key;\n}\n\n/** Verify the Ed25519 signature over the signed payload. */\nasync function checkSignature(\n  cert: IntegrityCertificate,\n  publicKey: Uint8Array,\n): Promise<CheckResult> {\n  const { value, signed_payload } = cert.proofs.signature;\n\n  const valid = await verifySignature(value, signed_payload, publicKey);\n\n  return {\n    valid,\n    details: valid\n      ? \"Ed25519 signature is valid\"\n      : \"Ed25519 signature verification failed\",\n  };\n}\n\n/** Recompute chain hash and compare. */\nfunction checkChain(cert: IntegrityCertificate): CheckResult {\n  const expected = computeChainHash(\n    cert.proofs.chain.prev_chain_hash,\n    cert.subject.checkpoint_id,\n    cert.claims.verdict,\n    cert.input_commitments.thinking_block_hash,\n    cert.input_commitments.combined_commitment,\n    cert.issued_at,\n  );\n\n  const valid = expected === cert.proofs.chain.chain_hash;\n\n  return {\n    valid,\n    details: valid\n      ? \"Chain hash matches recomputed value\"\n      : `Chain hash mismatch: expected ${expected}, got ${cert.proofs.chain.chain_hash}`,\n  };\n}\n\n/** Verify Merkle inclusion proof, if present and root is provided. */\nfunction checkMerkle(\n  cert: IntegrityCertificate,\n  merkleRoot: string | undefined,\n): CheckResult | null {\n  if (cert.proofs.merkle === null) {\n    return null;\n  }\n\n  if (merkleRoot === undefined) {\n    return null;\n  }\n\n  const { leaf_hash, inclusion_proof, root } = cert.proofs.merkle;\n\n  // Verify that the certificate's stated root matches the expected root.\n  if (root !== merkleRoot) {\n    return {\n      valid: false,\n      details: `Merkle root mismatch: certificate claims ${root}, expected ${merkleRoot}`,\n    };\n  }\n\n  const valid = verifyMerkleProof(leaf_hash, inclusion_proof, merkleRoot);\n\n  return {\n    valid,\n    details: valid\n      ? \"Merkle inclusion proof is valid\"\n      : \"Merkle inclusion proof verification failed\",\n  };\n}\n\n/**\n * Verify verdict derivation proof structural integrity.\n *\n * Checks that the journal fields in the proof match the certificate's claims\n * and input commitments. Does NOT verify the STARK receipt itself — that\n * requires the SP1 verifier (server-side or future WASM).\n *\n * If `expectedImageId` is provided, also verifies the proof was generated\n * by the expected guest program.\n */\nfunction checkVerdictDerivation(\n  cert: IntegrityCertificate,\n  expectedImageId: string | undefined,\n): CheckResult | null {\n  const proof = cert.proofs.verdict_derivation;\n  if (proof === null || proof === undefined) {\n    return null;\n  }\n\n  // Validate proof method\n  if (![\"SP1-STARK\", \"RISC-Zero-STARK\"].includes(proof.method)) {\n    return {\n      valid: false,\n      details: `Unknown verdict derivation method: ${proof.method}`,\n    };\n  }\n\n  // Validate required fields are present\n  if (!proof.journal || !proof.image_id || !proof.receipt) {\n    return {\n      valid: false,\n      details: \"Verdict derivation proof is missing required fields (journal, image_id, or receipt)\",\n    };\n  }\n\n  // If an expected image ID is provided, verify it matches\n  if (expectedImageId !== undefined && proof.image_id !== expectedImageId) {\n    return {\n      valid: false,\n      details: `Image ID mismatch: proof has ${proof.image_id}, expected ${expectedImageId}`,\n    };\n  }\n\n  // Parse the journal to verify structural integrity\n  let journal: {\n    verdict?: string;\n    action?: string;\n    concerns_hash?: string;\n    thinking_hash?: string;\n    card_hash?: string;\n    values_hash?: string;\n  };\n  try {\n    journal = JSON.parse(proof.journal);\n  } catch {\n    return {\n      valid: false,\n      details: \"Failed to parse verdict derivation journal as JSON\",\n    };\n  }\n\n  // Verify journal verdict matches certificate claims\n  if (journal.verdict !== undefined) {\n    const certVerdict = cert.claims.verdict;\n    if (journal.verdict !== certVerdict) {\n      return {\n        valid: false,\n        details: `Journal verdict \"${journal.verdict}\" does not match certificate verdict \"${certVerdict}\"`,\n      };\n    }\n  }\n\n  // Verify journal thinking_hash matches input commitments\n  if (journal.thinking_hash !== undefined) {\n    const certThinkingHash = cert.input_commitments.thinking_block_hash;\n    if (journal.thinking_hash !== certThinkingHash) {\n      return {\n        valid: false,\n        details: `Journal thinking_hash does not match certificate input_commitments.thinking_block_hash`,\n      };\n    }\n  }\n\n  // Verify journal card_hash matches input commitments\n  if (journal.card_hash !== undefined) {\n    const certCardHash = cert.input_commitments.card_hash;\n    if (journal.card_hash !== certCardHash) {\n      return {\n        valid: false,\n        details: `Journal card_hash does not match certificate input_commitments.card_hash`,\n      };\n    }\n  }\n\n  // Verify journal values_hash matches input commitments\n  if (journal.values_hash !== undefined) {\n    const certValuesHash = cert.input_commitments.values_hash;\n    if (journal.values_hash !== certValuesHash) {\n      return {\n        valid: false,\n        details: `Journal values_hash does not match certificate input_commitments.values_hash`,\n      };\n    }\n  }\n\n  return {\n    valid: true,\n    details: \"Verdict derivation proof is structurally valid (STARK receipt verification deferred to server)\",\n  };\n}\n","/**\n * Canonical JSON, byte-identical to mnemom-api `src/attestation/crypto.ts`\n * (`canonicalJson`): object keys sorted recursively, no whitespace, arrays\n * kept in order, primitives through `JSON.stringify`.\n *\n * Every signed record statement commits to this serialisation of the\n * statement minus its `signature` field, exactly the way\n * `AAP-TransparencyRoot/v1` does (mnemom-api `src/transparency/root_publisher.ts`).\n */\n\nexport function canonicalJson(value: unknown): string {\n  if (value === null || typeof value !== \"object\") {\n    return JSON.stringify(value);\n  }\n  if (Array.isArray(value)) {\n    return `[${value.map(canonicalJson).join(\",\")}]`;\n  }\n  const record = value as Record<string, unknown>;\n  const entries = Object.keys(record)\n    .sort()\n    .map((k) => `${JSON.stringify(k)}:${canonicalJson(record[k])}`);\n  return `{${entries.join(\",\")}}`;\n}\n\n/** Decode base64url (padding optional) to bytes. Throws on malformed input. */\nexport function base64urlToUint8(input: string): Uint8Array {\n  if (typeof input !== \"string\" || !/^[A-Za-z0-9_-]*={0,2}$/.test(input)) {\n    throw new Error(\"not base64url\");\n  }\n  const b64 = input.replace(/-/g, \"+\").replace(/_/g, \"/\").replace(/=+$/, \"\");\n  const padded = b64 + \"===\".slice(0, (4 - (b64.length % 4)) % 4);\n  const binary = atob(padded);\n  const out = new Uint8Array(binary.length);\n  for (let i = 0; i < binary.length; i++) out[i] = binary.charCodeAt(i);\n  return out;\n}\n","/**\n * Record statements: the four signed statement types the Mnemom record is\n * built from, their bundle, and the JWKS they verify against.\n *\n * Shape (design \"The record\", decisions T2, T3, T12):\n *\n * - Every statement carries `typ` (domain separation), `signing_key_id` (the\n *   `kid` of an Ed25519 key in the published JWKS) and a detached `signature`:\n *   base64url Ed25519 over `canonicalJson(statement minus signature)`.\n * - Statements link by digest. A statement's digest is the lowercase sha256\n *   hex of that same canonical commitment. `previous_digest` points at the\n *   previous build of the same record; a PR record lists the conduct records\n *   it rolls up; an outcome and a share card name the statement they derive\n *   from.\n * - A conduct record cites checkpoints by their signed `combined_commitment`\n *   (T12). A citation with no `card_hash` is flagged \"card hash not recorded\";\n *   one with no signed commitment is flagged \"card not bound\". Flags never\n *   make a statement invalid: they tell the reader how strong the binding is.\n * - A share card carries only measured lines, outcome lines, and verdict\n *   lines shown with their coverage. Any other class fails the card.\n */\n\n// ---------------------------------------------------------------------------\n// JWKS\n// ---------------------------------------------------------------------------\n\n/**\n * One key from the published JWKS. Only Ed25519 OKP keys with `alg: EdDSA`\n * are used: a key whose `alg` is absent or anything else is refused with\n * `key_not_ed25519`, so the field is required here as it is at runtime.\n */\nexport interface RecordJwk {\n  kty: string;\n  crv?: string;\n  x?: string;\n  kid?: string;\n  alg: string;\n  use?: string;\n  [k: string]: unknown;\n}\n\n/** The published key set, as served at `/v1/.well-known/jwks.json`. */\nexport interface RecordJwks {\n  keys: RecordJwk[];\n}\n\n// ---------------------------------------------------------------------------\n// Statements\n// ---------------------------------------------------------------------------\n\nexport const STATEMENT_TYPES = [\n  \"AAP-ConductRecord/v1\",\n  \"AAP-PRRecord/v1\",\n  \"AAP-Outcome/v1\",\n  \"AAP-ShareCard/v1\",\n] as const;\n\nexport type StatementTyp = (typeof STATEMENT_TYPES)[number];\n\nexport const BUNDLE_TYP = \"AAP-RecordBundle/v1\" as const;\n\n/** Fields every signed statement carries. */\nexport interface SignedStatementBase {\n  typ: StatementTyp;\n  /** `kid` of the signing key in the JWKS. */\n  signing_key_id: string;\n  /** base64url Ed25519 signature over `canonicalJson(statement minus signature)`. */\n  signature: string;\n  /** Optional, must equal `EdDSA` when present. */\n  alg?: string;\n  /** ISO 8601 time the statement was built. */\n  built_at?: string;\n  /** Digest of the previous build of this record, or null for the first build (T2). */\n  previous_digest?: string | null;\n  /** `kid` of the key that made `commitment_signature`, or null when the attestation failed open. */\n  commitment_key_id?: string | null;\n  /** Generic unit the statement is about, e.g. `pull_request`. */\n  unit_kind?: string;\n  [k: string]: unknown;\n}\n\n/** A checkpoint cited by a conduct record (T12). */\nexport interface CheckpointCitation {\n  checkpoint_id: string;\n  /** sha256 hex of the alignment card the checkpoint was judged against, or null when not recorded. */\n  card_hash?: string | null;\n  /** The checkpoint's signed `combined_commitment`, or null when none was signed. */\n  combined_commitment?: string | null;\n  /** The checkpoint certificate's signature over its own payload (own key, own payload per T3). */\n  commitment_signature?: string | null;\n  [k: string]: unknown;\n}\n\nexport interface ConductRecordStatement extends SignedStatementBase {\n  typ: \"AAP-ConductRecord/v1\";\n  /** Lineage the record is keyed on (T1), e.g. a conversation id. */\n  lineage_key?: string;\n  checkpoints?: CheckpointCitation[];\n}\n\nexport interface PRRecordStatement extends SignedStatementBase {\n  typ: \"AAP-PRRecord/v1\";\n  /** Digests of the conduct records this PR record rolls up. */\n  conduct_digests?: string[];\n  /** Head SHA from before the App's bundle commit. */\n  head_sha?: string;\n}\n\nexport interface OutcomeStatement extends SignedStatementBase {\n  typ: \"AAP-Outcome/v1\";\n  /** Digest of the PR record this outcome belongs to. */\n  pr_record_digest?: string;\n  merge_sha?: string;\n}\n\n/** Claim classes a share card may carry. */\nexport const CARD_LINE_CLASSES = [\"measured\", \"verdict\", \"outcome\"] as const;\nexport type CardLineClass = (typeof CARD_LINE_CLASSES)[number];\n\nexport interface ShareCardLine {\n  class: string;\n  text: string;\n  /** Required on a verdict line: \"N of M judged\". */\n  coverage?: { judged: number; total: number } | null;\n  [k: string]: unknown;\n}\n\nexport interface ShareCardStatement extends SignedStatementBase {\n  typ: \"AAP-ShareCard/v1\";\n  /** Digest of the statement the card's lines were taken from. */\n  source_digest?: string;\n  lines?: ShareCardLine[];\n}\n\nexport type SignedStatement =\n  | ConductRecordStatement\n  | PRRecordStatement\n  | OutcomeStatement\n  | ShareCardStatement;\n\n/** A customer-held bundle: statements in build order. */\nexport interface RecordBundle {\n  typ: typeof BUNDLE_TYP;\n  statements: SignedStatement[];\n  [k: string]: unknown;\n}\n\n// ---------------------------------------------------------------------------\n// Results\n// ---------------------------------------------------------------------------\n\n/**\n * Named reasons a statement fails. Stable strings: tampered fixtures assert\n * on them, and every renderer prints them as they are.\n */\nexport const REASONS = {\n  not_an_object: \"not_an_object\",\n  unknown_typ: \"unknown_typ\",\n  unsupported_alg: \"unsupported_alg\",\n  signing_key_id_missing: \"signing_key_id_missing\",\n  signature_missing: \"signature_missing\",\n  signature_malformed: \"signature_malformed\",\n  key_not_found: \"key_not_found\",\n  key_not_ed25519: \"key_not_ed25519\",\n  signature_invalid: \"signature_invalid\",\n  bundle_not_an_object: \"bundle_not_an_object\",\n  bundle_unknown_typ: \"bundle_unknown_typ\",\n  bundle_statements_missing: \"bundle_statements_missing\",\n  digest_malformed: \"digest_malformed\",\n  linked_statement_wrong_typ: \"linked_statement_wrong_typ\",\n  card_line_class_not_allowed: \"card_line_class_not_allowed\",\n  card_verdict_without_coverage: \"card_verdict_without_coverage\",\n} as const;\n\nexport type Reason = (typeof REASONS)[keyof typeof REASONS];\n\n/** Named flags. A flag weakens a binding but never invalidates a statement. */\nexport const FLAGS = {\n  card_hash_not_recorded: \"card hash not recorded\",\n  card_not_bound: \"card not bound\",\n  linked_statement_not_in_bundle: \"linked statement not in bundle\",\n} as const;\n\nexport type Flag = (typeof FLAGS)[keyof typeof FLAGS];\n\nexport interface StatementFlag {\n  flag: Flag;\n  /** `checkpoint_id` or the digest the flag is about. */\n  subject: string;\n}\n\nexport interface StatementVerificationResult {\n  valid: boolean;\n  typ: string | null;\n  /** sha256 hex of the canonical commitment, or null when the input is not an object. */\n  digest: string | null;\n  signing_key_id: string | null;\n  reasons: Reason[];\n  flags: StatementFlag[];\n}\n\nexport interface RecordVerificationResult {\n  valid: boolean;\n  /** Reasons at the bundle level, plus every statement reason prefixed by its index. */\n  reasons: string[];\n  flags: StatementFlag[];\n  statements: StatementVerificationResult[];\n  verified_at: string;\n}\n","/**\n * Offline verification of record statements and bundles.\n *\n * `verify(statement | bundle, jwks)` is the one entry point the CLI, CI,\n * the PR check and the web pages all call. It never touches the network:\n * the caller hands it the published JWKS.\n *\n * Order of checks for one statement, fail-closed, same as the SDK's\n * `JwksClient.verify` (mnemom-platform `shared/sdk/src/jwks.ts`):\n *\n * 1. shape and `typ` (domain separation, T3)\n * 2. `alg`, exact-match `EdDSA`, before any key material is touched\n * 3. `signing_key_id` and `signature` present and well formed\n * 4. key lookup by `kid`; the key must be an Ed25519 OKP key with `alg: EdDSA`\n * 5. Ed25519 over `canonicalJson(statement minus signature)`\n * 6. per-type rules (share card line classes, verdict coverage)\n * 7. flags on cited checkpoints (T12), which never change `valid`\n */\n\nimport { verifyAsync } from \"@noble/ed25519\";\nimport { sha256 } from \"@noble/hashes/sha2.js\";\nimport { bytesToHex, utf8ToBytes } from \"@noble/hashes/utils.js\";\n\nimport { canonicalJson, base64urlToUint8 } from \"./canonical.js\";\nimport {\n  BUNDLE_TYP,\n  CARD_LINE_CLASSES,\n  FLAGS,\n  REASONS,\n  STATEMENT_TYPES,\n  type CheckpointCitation,\n  type Reason,\n  type RecordBundle,\n  type RecordJwk,\n  type RecordJwks,\n  type RecordVerificationResult,\n  type ShareCardLine,\n  type SignedStatement,\n  type StatementFlag,\n  type StatementTyp,\n  type StatementVerificationResult,\n} from \"./statements.js\";\n\nconst DIGEST_RE = /^[0-9a-f]{64}$/;\n\nfunction isObject(v: unknown): v is Record<string, unknown> {\n  return typeof v === \"object\" && v !== null && !Array.isArray(v);\n}\n\n/**\n * The bytes a statement's signature covers: canonical JSON of the statement\n * with `signature` removed. Exported so a signer in another language can be\n * checked against it byte for byte.\n */\nexport function statementCommitment(statement: Record<string, unknown>): string {\n  const { signature: _signature, ...rest } = statement;\n  return canonicalJson(rest);\n}\n\n/** Lowercase sha256 hex of a statement's commitment: how statements link (T2). */\nexport function statementDigest(statement: Record<string, unknown>): string {\n  return bytesToHex(sha256(utf8ToBytes(statementCommitment(statement))));\n}\n\n/** Pick the Ed25519 key for `kid`, or say why none can be used. */\nfunction selectKey(jwks: RecordJwks, kid: string): { key?: Uint8Array; reason?: Reason } {\n  const keys = isObject(jwks) && Array.isArray(jwks.keys) ? jwks.keys : [];\n  const jwk = keys.find((k: RecordJwk) => isObject(k) && k.kid === kid);\n  if (!jwk) return { reason: REASONS.key_not_found };\n  // Exact-match allowlist on the key as well as the statement: a key that\n  // is not declared `EdDSA` is never used, whatever its curve says.\n  if (jwk.alg !== \"EdDSA\" || jwk.kty !== \"OKP\" || jwk.crv !== \"Ed25519\" || typeof jwk.x !== \"string\") {\n    return { reason: REASONS.key_not_ed25519 };\n  }\n  let key: Uint8Array;\n  try {\n    key = base64urlToUint8(jwk.x);\n  } catch {\n    return { reason: REASONS.key_not_ed25519 };\n  }\n  if (key.length !== 32) return { reason: REASONS.key_not_ed25519 };\n  return { key };\n}\n\nfunction checkpointFlags(checkpoints: unknown): StatementFlag[] {\n  if (!Array.isArray(checkpoints)) return [];\n  const flags: StatementFlag[] = [];\n  for (const c of checkpoints as CheckpointCitation[]) {\n    if (!isObject(c)) continue;\n    const subject = typeof c.checkpoint_id === \"string\" ? c.checkpoint_id : \"<no checkpoint_id>\";\n    if (typeof c.card_hash !== \"string\" || c.card_hash.length === 0) {\n      flags.push({ flag: FLAGS.card_hash_not_recorded, subject });\n    }\n    const bound =\n      typeof c.combined_commitment === \"string\" &&\n      c.combined_commitment.length > 0 &&\n      typeof c.commitment_signature === \"string\" &&\n      c.commitment_signature.length > 0;\n    if (!bound) flags.push({ flag: FLAGS.card_not_bound, subject });\n  }\n  return flags;\n}\n\nfunction shareCardReasons(lines: unknown): Reason[] {\n  if (!Array.isArray(lines)) return [];\n  const reasons: Reason[] = [];\n  for (const line of lines as ShareCardLine[]) {\n    if (!isObject(line) || !(CARD_LINE_CLASSES as readonly string[]).includes(line.class as string)) {\n      reasons.push(REASONS.card_line_class_not_allowed);\n      continue;\n    }\n    if (line.class === \"verdict\") {\n      const cov = line.coverage;\n      const ok =\n        isObject(cov) &&\n        Number.isInteger(cov.judged) &&\n        Number.isInteger(cov.total) &&\n        (cov.judged as number) >= 0 &&\n        (cov.total as number) >= (cov.judged as number);\n      if (!ok) reasons.push(REASONS.card_verdict_without_coverage);\n    }\n  }\n  return [...new Set(reasons)];\n}\n\n/**\n * Every digest reference a statement carries, as written. An absent field\n * is skipped, and `previous_digest: null` is the first build (T2); anything\n * else that is not a 64-hex string is reported as `digest_malformed` rather\n * than dropped, so a non-string entry in `conduct_digests` cannot pass\n * unnoticed.\n */\nfunction digestFieldsOf(statement: Record<string, unknown>): unknown[] {\n  const out: unknown[] = [];\n  if (statement.previous_digest !== undefined && statement.previous_digest !== null) {\n    out.push(statement.previous_digest);\n  }\n  if (statement.pr_record_digest !== undefined) out.push(statement.pr_record_digest);\n  if (statement.source_digest !== undefined) out.push(statement.source_digest);\n  if (statement.conduct_digests !== undefined) {\n    // `conduct_digests` is a list; anything else is malformed even when it\n    // happens to look like one digest.\n    if (Array.isArray(statement.conduct_digests)) out.push(...statement.conduct_digests);\n    else out.push(null);\n  }\n  return out;\n}\n\n/**\n * Verify one signed statement against the published JWKS.\n * Never throws and never calls the network.\n */\nexport async function verifyStatement(\n  statement: unknown,\n  jwks: RecordJwks,\n): Promise<StatementVerificationResult> {\n  const fail = (\n    reasons: Reason[],\n    partial: Partial<StatementVerificationResult> = {},\n  ): StatementVerificationResult => ({\n    valid: false,\n    typ: null,\n    digest: null,\n    signing_key_id: null,\n    flags: [],\n    ...partial,\n    reasons,\n  });\n\n  if (!isObject(statement)) return fail([REASONS.not_an_object]);\n  const typ = typeof statement.typ === \"string\" ? statement.typ : null;\n  const digest = statementDigest(statement);\n  const kid = typeof statement.signing_key_id === \"string\" ? statement.signing_key_id : null;\n  const base = { typ, digest, signing_key_id: kid };\n\n  if (!typ || !(STATEMENT_TYPES as readonly string[]).includes(typ)) {\n    return fail([REASONS.unknown_typ], base);\n  }\n  // Algorithm-confusion guard: before any key lookup.\n  if (statement.alg !== undefined && statement.alg !== \"EdDSA\") {\n    return fail([REASONS.unsupported_alg], base);\n  }\n  if (!kid) return fail([REASONS.signing_key_id_missing], base);\n  if (typeof statement.signature !== \"string\" || statement.signature.length === 0) {\n    return fail([REASONS.signature_missing], base);\n  }\n  let sig: Uint8Array;\n  try {\n    sig = base64urlToUint8(statement.signature);\n  } catch {\n    return fail([REASONS.signature_malformed], base);\n  }\n  if (sig.length !== 64) return fail([REASONS.signature_malformed], base);\n\n  const selected = selectKey(jwks, kid);\n  if (!selected.key) return fail([selected.reason as Reason], base);\n\n  let sigOk = false;\n  try {\n    sigOk = await verifyAsync(sig, utf8ToBytes(statementCommitment(statement)), selected.key);\n  } catch {\n    sigOk = false;\n  }\n  if (!sigOk) return fail([REASONS.signature_invalid], base);\n\n  const reasons: Reason[] = [];\n  for (const d of digestFieldsOf(statement)) {\n    if (typeof d !== \"string\" || !DIGEST_RE.test(d)) {\n      reasons.push(REASONS.digest_malformed);\n      break;\n    }\n  }\n  if (typ === \"AAP-ShareCard/v1\") reasons.push(...shareCardReasons(statement.lines));\n\n  const flags = typ === \"AAP-ConductRecord/v1\" ? checkpointFlags(statement.checkpoints) : [];\n\n  return {\n    valid: reasons.length === 0,\n    typ,\n    digest,\n    signing_key_id: kid,\n    reasons,\n    flags,\n  };\n}\n\n/** Which statement types a link field may point at. */\nconst LINK_TARGETS: Record<string, readonly StatementTyp[] | \"same\"> = {\n  previous_digest: \"same\",\n  conduct_digests: [\"AAP-ConductRecord/v1\"],\n  pr_record_digest: [\"AAP-PRRecord/v1\"],\n  source_digest: [\"AAP-ConductRecord/v1\", \"AAP-PRRecord/v1\", \"AAP-Outcome/v1\"],\n};\n\n/**\n * Verify a statement or a whole bundle against the published JWKS.\n *\n * For a bundle every statement is verified on its own, then the links\n * between them are checked: a digest that names a statement in the bundle\n * must name one of the right type. A digest that names nothing in the\n * bundle is flagged, not failed, because a long session's earlier\n * statements may live outside the bundle (design, open questions).\n */\nexport async function verify(\n  input: SignedStatement | RecordBundle | unknown,\n  jwks: RecordJwks,\n): Promise<RecordVerificationResult> {\n  const verified_at = new Date().toISOString();\n  const result = (\n    valid: boolean,\n    reasons: string[],\n    flags: StatementFlag[],\n    statements: StatementVerificationResult[],\n  ): RecordVerificationResult => ({ valid, reasons, flags, statements, verified_at });\n\n  if (!isObject(input)) return result(false, [REASONS.bundle_not_an_object], [], []);\n\n  // Something shaped like a bundle (it carries `statements`) under a typ\n  // that is neither the bundle typ nor a statement typ: say so, instead of\n  // reporting it as one unknown statement.\n  if (\n    input.typ !== BUNDLE_TYP &&\n    Array.isArray(input.statements) &&\n    !(STATEMENT_TYPES as readonly string[]).includes(input.typ as string)\n  ) {\n    return result(false, [REASONS.bundle_unknown_typ], [], []);\n  }\n\n  // A bare statement.\n  if (input.typ !== BUNDLE_TYP) {\n    const one = await verifyStatement(input, jwks);\n    return result(one.valid, one.reasons.map((r) => `0:${r}`), one.flags, [one]);\n  }\n\n  const rawStatements: unknown[] | null = Array.isArray(input.statements) ? input.statements : null;\n  if (!rawStatements) {\n    return result(false, [REASONS.bundle_statements_missing], [], []);\n  }\n\n  const statements: StatementVerificationResult[] = [];\n  for (const s of rawStatements) statements.push(await verifyStatement(s, jwks));\n\n  const byDigest = new Map<string, StatementVerificationResult>();\n  statements.forEach((s) => {\n    if (s.digest) byDigest.set(s.digest, s);\n  });\n\n  const reasons: string[] = [];\n  const flags: StatementFlag[] = [];\n  statements.forEach((s, i) => {\n    s.reasons.forEach((r) => reasons.push(`${i}:${r}`));\n    flags.push(...s.flags);\n    const raw = rawStatements[i];\n    if (!s.valid || !isObject(raw)) return;\n    for (const [field, targets] of Object.entries(LINK_TARGETS)) {\n      const value = raw[field];\n      const digests = Array.isArray(value) ? value : [value];\n      for (const d of digests) {\n        if (typeof d !== \"string\") continue;\n        const linked = byDigest.get(d);\n        if (!linked) {\n          flags.push({ flag: FLAGS.linked_statement_not_in_bundle, subject: d });\n          continue;\n        }\n        const allowed = targets === \"same\" ? [s.typ as StatementTyp] : targets;\n        if (!linked.typ || !allowed.includes(linked.typ as StatementTyp)) {\n          reasons.push(`${i}:${REASONS.linked_statement_wrong_typ}`);\n        }\n      }\n    }\n  });\n\n  return result(reasons.length === 0, reasons, flags, statements);\n}\n","/**\n * The claim table (design decision T5): one table mapping record fields to\n * the claim class they may be rendered as and, for goal and protection lines,\n * the verb each mode produces. Every renderer and the verifier read this\n * table; copy is never written per renderer.\n *\n * Rules the table encodes (design \"Claim classes and verbs\", \"Cost\",\n * \"Share cards\"):\n * - A line is exactly one class. \"Safe\", \"correct\" and \"prevented\" never appear.\n * - No protection or goal line carries a dollar figure.\n * - An implicit goal line never says \"sealed\"; goals off read \"not checked\".\n * - The verb comes from the area's mode at the time of the act and, for a\n *   protection act, its verdict. \"Stopped\" shows the tool name and never its\n *   arguments; on a card, no tool name at all.\n * - Cards carry measured, outcome and covered verdict lines only. Estimates\n *   and savings never appear on a card or a PR comment (T8).\n * - No benchmark line ships until the head-to-head is published with its\n *   losing arms; no savings percentage appears anywhere until then.\n */\n\nexport const CLAIM_CLASSES = [\"measured\", \"verdict\", \"estimate\", \"benchmark\", \"outcome\"] as const;\nexport type ClaimClass = (typeof CLAIM_CLASSES)[number];\n\n/**\n * Where a rendering is shown. Cards are the share card and the period card.\n * `share_card` is the `AAP-ShareCard/v1` record statement's lines\n * (`RecordShareCardLine`, statements.ts: `{class, text, coverage}`), the shape\n * `verify` checks; not the MNE-9022 numeric card (sharecard.ts `ShareCardLine`).\n */\nexport const SURFACES = [\"record_page\", \"check_summary\", \"pr_comment\", \"share_card\", \"period_card\"] as const;\nexport type Surface = (typeof SURFACES)[number];\n\nexport const CARD_SURFACES: readonly Surface[] = [\"share_card\", \"period_card\"];\n\n/** Surfaces that never show the savings estimate, even once it qualifies (T8). */\nexport const ESTIMATE_FORBIDDEN_SURFACES: readonly Surface[] = [\"pr_comment\", \"share_card\", \"period_card\"];\n\n/** Protection and goal area modes, as stored at the act. */\nexport const MODES = [\"off\", \"observe\", \"nudge\", \"enforce\"] as const;\nexport type Mode = (typeof MODES)[number];\n\n/**\n * The verb each mode produces at its strongest verdict. `off` produces no line, or\n * \"not checked\". A protection act's verb also depends on its verdict: see\n * `protectionVerb`.\n */\nexport const MODE_VERBS: Record<Mode, string> = {\n  off: \"not checked\",\n  observe: \"flagged\",\n  nudge: \"flagged, agent nudged\",\n  enforce: \"stopped\",\n};\n\n/** A protection act's verdict, as stored at the act (mnemom-api `ProtectionVerdict`). */\nexport const PROTECTION_VERDICTS = [\"pass\", \"warn\", \"nudge\", \"quarantine\", \"block\"] as const;\nexport type ProtectionVerdict = (typeof PROTECTION_VERDICTS)[number];\n\n/**\n * The verb one protection act produces, from the mode and verdict stored at the act; null\n * means the act has no line (mode off, or a pass). Mirrors mnemom-api\n * `src/record/claims.ts` `protectionVerb`: under enforce only a block or quarantine\n * \"stopped\" anything and anything else is \"flagged\"; under nudge only a nudge verdict\n * reads \"flagged, agent nudged\".\n */\nexport function protectionVerb(mode: Mode, verdict: ProtectionVerdict): string | null {\n  if (mode === \"off\" || verdict === \"pass\") return null;\n  if (mode === \"observe\") return MODE_VERBS.observe;\n  if (mode === \"nudge\") return verdict === \"nudge\" ? MODE_VERBS.nudge : MODE_VERBS.observe;\n  return verdict === \"block\" || verdict === \"quarantine\" ? MODE_VERBS.enforce : MODE_VERBS.observe;\n}\n\n/** How the goal was set. An implicit goal is never read as sealed (T16). */\nexport const GOAL_MODES = [\"sealed\", \"implicit\", \"off\"] as const;\nexport type GoalMode = (typeof GOAL_MODES)[number];\n\nexport interface ClaimTableEntry {\n  class: ClaimClass;\n  /** True for the goal and protection areas: the verb comes from the mode. */\n  verb_by_mode: boolean;\n  /** True when the line may carry a money figure (model cost and μ only). */\n  money_allowed: boolean;\n  /** Surfaces this field may appear on; absent means every surface. */\n  surfaces?: readonly Surface[];\n}\n\nexport const CLAIM_TABLE = {\n  commits_recorded: { class: \"measured\", verb_by_mode: false, money_allowed: false },\n  messages_from_person: { class: \"measured\", verb_by_mode: false, money_allowed: false },\n  compactions: { class: \"measured\", verb_by_mode: false, money_allowed: false },\n  tokens_sent_vs_reaching: { class: \"measured\", verb_by_mode: false, money_allowed: false },\n  peak_context: { class: \"measured\", verb_by_mode: false, money_allowed: false },\n  model_cost: { class: \"measured\", verb_by_mode: false, money_allowed: true },\n  mu_cost: { class: \"measured\", verb_by_mode: false, money_allowed: true },\n  approval: { class: \"measured\", verb_by_mode: false, money_allowed: false },\n  /** How the goal was set: \"sealed contract\", \"implicit goal\" or \"not checked\" (M7: its own measured line). */\n  goal_mode: { class: \"measured\", verb_by_mode: false, money_allowed: false },\n  goal: { class: \"verdict\", verb_by_mode: true, money_allowed: false },\n  /** The protection area's mode when no act is shown: \"not checked\" under off. */\n  protection_mode: { class: \"measured\", verb_by_mode: false, money_allowed: false },\n  protection: { class: \"verdict\", verb_by_mode: true, money_allowed: false },\n  autonomy: { class: \"measured\", verb_by_mode: false, money_allowed: false },\n  savings_estimate: {\n    class: \"estimate\",\n    verb_by_mode: false,\n    money_allowed: true,\n    surfaces: [\"record_page\", \"check_summary\"],\n  },\n  benchmark: { class: \"benchmark\", verb_by_mode: false, money_allowed: false },\n  outcome: { class: \"outcome\", verb_by_mode: false, money_allowed: false },\n} as const satisfies Record<string, ClaimTableEntry>;\n\nexport type ClaimField = keyof typeof CLAIM_TABLE;\n\nexport function isClaimField(field: unknown): field is ClaimField {\n  return typeof field === \"string\" && Object.prototype.hasOwnProperty.call(CLAIM_TABLE, field);\n}\n\n/**\n * Line keys the builder (mnemom-api `src/record/claims.ts`) writes on a\n * statement's `lines[]`, mapped to the claim-table field each one renders\n * (cross-lane pick M6). `protection.act.<n>` maps to `protection` for any n.\n */\nexport const LINE_KEY_FIELDS: Readonly<Record<string, ClaimField>> = {\n  \"cost.model\": \"model_cost\",\n  \"cost.mu\": \"mu_cost\",\n  \"goal.mode\": \"goal_mode\",\n  \"goal.verdict\": \"goal\",\n  \"protection.mode\": \"protection_mode\",\n  \"people.messages\": \"messages_from_person\",\n  \"context.compactions\": \"compactions\",\n};\n\nconst PROTECTION_ACT_KEY = /^protection\\.act\\.\\d+$/;\n\n/** The claim-table field a statement line key renders, or undefined for a key the table does not know. */\nexport function fieldForLineKey(key: unknown): ClaimField | undefined {\n  if (typeof key !== \"string\") return undefined;\n  if (PROTECTION_ACT_KEY.test(key)) return \"protection\";\n  return Object.prototype.hasOwnProperty.call(LINE_KEY_FIELDS, key) ? LINE_KEY_FIELDS[key] : undefined;\n}\n","/**\n * claim-lint: the mechanical check every rendering passes (criterion K1.17).\n *\n * A rendering is a surface plus the lines shown on it. Each line names its\n * class, its text, and when it comes from a mode-bearing area, the mode stored\n * at the act. The lint returns every violation with a stable rule name; it\n * never rewrites a line.\n *\n * Line shape (cross-lane pick M6): a signed statement carries\n * `{class, key, text}` per line, with the builder's keys (`cost.model`,\n * `goal.verdict`, `protection.act.0`, ...). The renderer attaches `mode`,\n * `verdict`, `goal_mode`, `tool_name` and `coverage` from the statement's\n * `goal` and `protection` blocks before linting. The lint resolves `field`\n * from `key` when `field` is absent, and off a card reads a verdict line's\n * coverage from the \"<n> of <m> turns judged\" words when no `coverage` object\n * is attached.\n *\n * On `share_card` the lines are the record share card statement's lines\n * (`RecordShareCardLine`, statements.ts `{class, text, coverage}`), the ones\n * `verify` checks in `shareCardReasons`. The MNE-9022 card (sharecard.ts,\n * `{id, kind, label, value, statement_hash}`) carries no `class` and is not a\n * `Rendering`; linting its lines as-is reports `one_class_per_line` on each.\n *\n * Rules, each from the claim table (T5) and the design's claim rules:\n *   one_class_per_line          class is one of the five, and matches the field's class\n *   forbidden_word              \"safe\", \"correct\", \"prevented\" never appear\n *   money_on_goal_or_protection no dollar figure on a goal or protection line\n *   implicit_goal_sealed        an implicit goal line never says \"sealed\"\n *   goal_off_not_checked        with goals off the goal line reads \"not checked\"\n *   estimate_on_forbidden_surface  no estimate or savings on a card or PR comment\n *   verb_mismatch               the verb is the one the mode and the act's verdict produce, exactly\n *                               (mnemom-api `protectionVerb`); a tool name follows \"stopped\" only\n *   enforce_without_tool_name   \"stopped\" names the tool off-card\n *   tool_name_on_card           a card never shows a tool name\n *   tool_arguments_shown        tool arguments never appear\n *   trust_claim                 no minutes-to-trust, review-time or re-checking claim\n *   savings_percentage          no savings percentage anywhere until the board exists\n *   benchmark_not_published     no benchmark line ships yet\n *   verdict_without_coverage    off a card, a goal verdict always shows its coverage (\"N of M turns\n *                               judged\") and a protection act, one recorded decision, carries none;\n *                               on a card every verdict line carries a `coverage` object, as\n *                               `verify` requires (`card_verdict_without_coverage`)\n *   card_class_not_allowed      a card carries measured, outcome and verdict lines only\n *   period_card_without_revert  a period card renders its reverts\n *   field_not_on_surface        the field is not shown on this surface\n *   provisional_mu_on_card      a provisional μ amount (\"≈ N μ (pending)\", A-S-001) never appears on a card:\n *                               cards keep K1.17 and read \"μ pending\" at most\n *   provisional_mu_off_cost_line a provisional μ amount appears on the μ cost line and nowhere else\n */\n\nimport {\n  CARD_SURFACES,\n  CLAIM_CLASSES,\n  CLAIM_TABLE,\n  ESTIMATE_FORBIDDEN_SURFACES,\n  MODES,\n  MODE_VERBS,\n  PROTECTION_VERDICTS,\n  SURFACES,\n  fieldForLineKey,\n  isClaimField,\n  protectionVerb,\n  type ClaimClass,\n  type ClaimTableEntry,\n  type GoalMode,\n  type Mode,\n  type ProtectionVerdict,\n  type Surface,\n} from \"./claim-table.js\";\n\nexport interface RenderedLine {\n  /** Record field the line renders; when present its class must match the claim table. */\n  field?: string;\n  /** Builder line key (`cost.model`, `goal.verdict`, `protection.act.0`, ...); resolves `field` when that is absent. */\n  key?: string;\n  class: string;\n  text: string;\n  /** Mode stored at the act, for goal and protection lines. */\n  mode?: Mode;\n  /** Verdict stored at a protection act; required with nudge and enforce, whose verb depends on it. */\n  verdict?: ProtectionVerdict;\n  /** How the goal was set, for goal lines. */\n  goal_mode?: GoalMode;\n  /** Tool the act concerned; shown only after \"stopped\", and never on a card. */\n  tool_name?: string;\n  /** Never rendered; present here only so the lint can prove it is absent from the text. */\n  tool_arguments?: unknown;\n  /** \"N of M judged\". Required on every verdict line on a card; off a card a goal verdict may say it in words instead. */\n  coverage?: { judged: number; total: number } | null;\n  [k: string]: unknown;\n}\n\nexport interface Rendering {\n  surface: Surface;\n  lines: RenderedLine[];\n  [k: string]: unknown;\n}\n\nexport const LINT_RULES = {\n  one_class_per_line: \"one_class_per_line\",\n  forbidden_word: \"forbidden_word\",\n  money_on_goal_or_protection: \"money_on_goal_or_protection\",\n  implicit_goal_sealed: \"implicit_goal_sealed\",\n  goal_off_not_checked: \"goal_off_not_checked\",\n  estimate_on_forbidden_surface: \"estimate_on_forbidden_surface\",\n  verb_mismatch: \"verb_mismatch\",\n  enforce_without_tool_name: \"enforce_without_tool_name\",\n  tool_name_on_card: \"tool_name_on_card\",\n  tool_arguments_shown: \"tool_arguments_shown\",\n  trust_claim: \"trust_claim\",\n  savings_percentage: \"savings_percentage\",\n  benchmark_not_published: \"benchmark_not_published\",\n  verdict_without_coverage: \"verdict_without_coverage\",\n  card_class_not_allowed: \"card_class_not_allowed\",\n  period_card_without_revert: \"period_card_without_revert\",\n  field_not_on_surface: \"field_not_on_surface\",\n  provisional_mu_on_card: \"provisional_mu_on_card\",\n  provisional_mu_off_cost_line: \"provisional_mu_off_cost_line\",\n  unknown_surface: \"unknown_surface\",\n} as const;\n\nexport type LintRule = (typeof LINT_RULES)[keyof typeof LINT_RULES];\n\nexport interface LintViolation {\n  rule: LintRule;\n  /** Index of the line in the rendering, or -1 for a rendering-level violation. */\n  line: number;\n  text: string;\n}\n\nexport interface LintResult {\n  ok: boolean;\n  violations: LintViolation[];\n}\n\n/**\n * A rule about two things in one clause (\"38% … cheaper\", \"50 mmu … pending\"), read in a\n * single left-to-right pass so the cost stays linear in the line's length; a regex bridge\n * such as `\\d+%[^.\\n]*\\bword\\b` re-scans the clause from every start (CodeQL\n * js/polynomial-redos). `tokens` is global; its named groups are the tokens, `brk` (a\n * full stop or newline outside a number) ends the clause. A number is one token: its digit\n * run always matches and its tail (\"%\", \"mmu\") is an optional named group, so no match can\n * fail after reading digits and no number is re-read from inside its run.\n */\ninterface ClauseRule {\n  tokens: RegExp;\n  /** [first, then]: the rule holds when `then` follows `first` in one clause. */\n  pairs: ReadonlyArray<readonly [string, string]>;\n  /** Tokens that make the rule hold on their own. */\n  alone?: readonly string[];\n}\n\nfunction clauseHas(text: string, rule: ClauseRule): boolean {\n  const seen = new Set<string>();\n  for (const m of text.matchAll(rule.tokens)) {\n    const kind = Object.entries(m.groups ?? {}).find(([, v]) => v !== undefined)?.[0];\n    if (kind === undefined) continue;\n    if (kind === \"brk\") {\n      seen.clear();\n      continue;\n    }\n    if (rule.alone?.includes(kind)) return true;\n    if (rule.pairs.some(([first, then]) => then === kind && seen.has(first))) return true;\n    seen.add(kind);\n  }\n  return false;\n}\n\nconst FORBIDDEN_WORD = /\\b(safe|safely|unsafe|correct|correctly|incorrect|prevent|prevents|prevented|preventing|prevention)\\b/i;\n/**\n * A currency figure. A spelled-out amount is read from the first digit of its run only\n * (`(?<!\\d,+)`), so a long \"9,9,9,…\" is scanned once rather than from every digit.\n */\nconst MONEY = /(?:\\$|€|£|¥)\\s?\\d|\\b(?<!\\d,+)\\d[\\d,]*(?:\\.\\d+)?\\s?(?:USD|EUR|GBP|dollars?|cents?)\\b/i;\nconst SEALED = /\\bsealed\\b/i;\nconst ESTIMATE_WORDS = /\\b(estimate[ds]?|estimation|saving|savings|saved|would have cost|counterfactual)\\b/i;\nconst TRUST_CLAIM =\n  /\\b(minutes?|seconds?|hours?)\\s+to\\s+trust\\b|\\btrust(ed)?\\s+in\\s+(under\\s+|about\\s+)?\\d+\\s*(minutes?|seconds?|hours?|min|s|h)\\b|\\breview[- ]time\\b|\\btime\\s+to\\s+review\\b|\\bwithout\\s+re-?check(ing)?\\b|\\bno\\s+need\\s+to\\s+(re-?check|review)\\b|\\btrust(ed)?\\s+without\\b/i;\n/** A savings percentage: a percent and a saving word in one clause, either order (\"less\" only after). */\nconst SAVINGS_PERCENTAGE: ClauseRule = {\n  tokens:\n    /\\d+(?<percent>(?:\\.\\d+)?\\s?%)?|\\b(?<less>less)\\b|\\b(?<saving>sav(?:e[sd]?|ings?)|cheaper|reduction|reduced)\\b|(?<brk>[.\\n])/gi,\n  pairs: [\n    [\"percent\", \"saving\"],\n    [\"percent\", \"less\"],\n    [\"saving\", \"percent\"],\n  ],\n};\nconst REVERT = /\\brevert(s|ed)?\\b/i;\n/**\n * A provisional μ amount (A-S-001): an approximate figure with a pending marker,\n * \"≈ 50000 mmu (pending)\" or \"≈ 50 μ (pending)\". A bare \"μ pending\" (K1.4) carries no\n * amount and is not provisional. Either half alone is enough to count: a \"≈\" before a\n * figure, or a figure with \"pending\" beside it, so a renderer cannot shed one marker to\n * slip the amount onto a card.\n */\nconst PROVISIONAL_MU: ClauseRule = {\n  tokens:\n    /(?<approx>(?:≈|~|\\bapprox(?:\\.|imately)?\\b|\\babout\\b)\\s*\\d[\\d,]*(?:\\.\\d+)?\\s*(?:mmu\\b|mu\\b|μ|µ))|\\d[\\d,]*(?<amount>(?:\\.\\d+)?\\s*(?:mmu\\b|mu\\b|μ|µ))?|\\b(?<pending>pending)\\b|(?<brk>[.\\n])/gi,\n  alone: [\"approx\"],\n  pairs: [\n    [\"amount\", \"pending\"],\n    [\"pending\", \"amount\"],\n  ],\n};\nconst NOT_CHECKED = /^not checked$/i;\n/** Coverage written into a verdict line's words by the builder: \"4 of 12 turns judged\". */\nconst COVERAGE_IN_TEXT = /\\b(\\d+)\\s+of\\s+(\\d+)\\s+turns\\s+judged\\b/i;\n\n/** Each verb's words, keyed by the mode whose `MODE_VERBS` entry it is. */\nconst MODE_VERB_REGEX: Record<Mode, RegExp> = {\n  off: NOT_CHECKED,\n  observe: /\\bflagged\\b/i,\n  nudge: /\\bflagged, agent nudged\\b/i,\n  enforce: /\\bstopped\\b/i,\n};\n\n/** Verbs that must not appear beside a verb: another verb read as this one. */\nconst OTHER_MODE_VERBS: Record<Mode, RegExp[]> = {\n  off: [/\\bflagged\\b/i, /\\bnudged\\b/i, /\\bstopped\\b/i],\n  observe: [/\\bnudged\\b/i, /\\bstopped\\b/i],\n  nudge: [/\\bstopped\\b/i],\n  enforce: [/\\bflagged\\b/i, /\\bnudged\\b/i],\n};\n\nfunction isObject(v: unknown): v is Record<string, unknown> {\n  return typeof v === \"object\" && v !== null && !Array.isArray(v);\n}\n\n/** A `coverage` object as `verify` accepts it on a share card line (verify-record.ts `shareCardReasons`). */\nfunction coverageObjectValid(cov: unknown): boolean {\n  return (\n    isObject(cov) &&\n    Number.isInteger(cov.judged) &&\n    Number.isInteger(cov.total) &&\n    (cov.judged as number) >= 0 &&\n    (cov.total as number) >= (cov.judged as number)\n  );\n}\n\n/** Coverage from the attached object, or, when none is attached, from the builder's words. */\nfunction coverageShown(line: RenderedLine): boolean {\n  const cov = line.coverage;\n  if (cov !== undefined) return coverageObjectValid(cov);\n  const m = COVERAGE_IN_TEXT.exec(line.text);\n  return m !== null && Number(m[2]) >= Number(m[1]);\n}\n\n/**\n * The verb a mode-bearing line must show, as the `MODE_VERBS` key it reads as, or undefined\n * when the line should not exist or its verb cannot be known: a pass verdict, an unknown\n * verdict, or nudge or enforce with no verdict attached (each has two verbs).\n */\nfunction expectedVerb(mode: Mode, verdict: unknown): Mode | undefined {\n  if (mode === \"off\") return \"off\";\n  if (verdict === undefined) return mode === \"observe\" ? \"observe\" : undefined;\n  if (!(PROTECTION_VERDICTS as readonly unknown[]).includes(verdict)) return undefined;\n  const verb = protectionVerb(mode, verdict as ProtectionVerdict);\n  return MODES.find((m) => MODE_VERBS[m] === verb);\n}\n\nfunction escapeRegExp(s: string): string {\n  return s.replace(/[.*+?^${}()|[\\]\\\\]/g, \"\\\\$&\");\n}\n\nfunction argumentsAppear(text: string, args: unknown): boolean {\n  if (args === undefined || args === null) return false;\n  const needles: string[] = [];\n  const walk = (v: unknown): void => {\n    if (typeof v === \"string\") {\n      if (v.length >= 3) needles.push(v);\n    } else if (typeof v === \"number\" || typeof v === \"boolean\") {\n      needles.push(String(v));\n    } else if (Array.isArray(v)) {\n      v.forEach(walk);\n    } else if (isObject(v)) {\n      Object.values(v).forEach(walk);\n    }\n  };\n  walk(args);\n  if (needles.length === 0) return false;\n  try {\n    needles.push(JSON.stringify(args));\n  } catch {\n    /* unserialisable arguments: the walked values are enough */\n  }\n  return needles.some((n) => n.length > 0 && text.includes(n));\n}\n\nfunction lintLine(surface: Surface, line: RenderedLine, index: number, out: LintViolation[]): void {\n  const push = (rule: LintRule): void => {\n    out.push({ rule, line: index, text: isObject(line) && typeof line.text === \"string\" ? line.text : \"\" });\n  };\n  if (!isObject(line) || typeof line.text !== \"string\" || typeof line.class !== \"string\") {\n    push(LINT_RULES.one_class_per_line);\n    return;\n  }\n  const text = line.text;\n  const onCard = CARD_SURFACES.includes(surface);\n  // The field named on the line wins; a builder key resolves it otherwise (M6).\n  const field = line.field !== undefined ? line.field : fieldForLineKey(line.key);\n\n  // one class per line: a known class, and the field's class when the field is named.\n  const cls = line.class as ClaimClass;\n  if (!(CLAIM_CLASSES as readonly string[]).includes(cls)) {\n    push(LINT_RULES.one_class_per_line);\n  } else if (field !== undefined) {\n    if (!isClaimField(field)) {\n      push(LINT_RULES.one_class_per_line);\n    } else {\n      const entry: ClaimTableEntry = CLAIM_TABLE[field];\n      if (entry.class !== cls) push(LINT_RULES.one_class_per_line);\n      if (entry.surfaces && !(entry.surfaces as readonly Surface[]).includes(surface)) {\n        push(LINT_RULES.field_not_on_surface);\n      }\n    }\n  }\n  // A line of one class never borrows another class's words.\n  if (cls !== \"estimate\" && ESTIMATE_WORDS.test(text)) push(LINT_RULES.one_class_per_line);\n\n  if (FORBIDDEN_WORD.test(text)) push(LINT_RULES.forbidden_word);\n\n  const isGoal = field === \"goal\" || field === \"goal_mode\";\n  const isProtection = field === \"protection\" || field === \"protection_mode\";\n  if ((isGoal || isProtection) && MONEY.test(text)) push(LINT_RULES.money_on_goal_or_protection);\n  if (field !== undefined && isClaimField(field) && !CLAIM_TABLE[field].money_allowed) {\n    if (!isGoal && !isProtection && MONEY.test(text)) push(LINT_RULES.one_class_per_line);\n  }\n\n  if (isGoal) {\n    if (line.goal_mode === \"implicit\" && SEALED.test(text)) push(LINT_RULES.implicit_goal_sealed);\n    if (line.goal_mode === \"off\" && !NOT_CHECKED.test(text.trim())) push(LINT_RULES.goal_off_not_checked);\n  }\n\n  if (cls === \"estimate\" || ESTIMATE_WORDS.test(text)) {\n    if (ESTIMATE_FORBIDDEN_SURFACES.includes(surface)) push(LINT_RULES.estimate_on_forbidden_surface);\n  }\n\n  if (line.mode !== undefined) {\n    const verb = (MODES as readonly string[]).includes(line.mode) ? expectedVerb(line.mode, line.verdict) : undefined;\n    const name = typeof line.tool_name === \"string\" ? line.tool_name.trim() : \"\";\n    const nameShown = name.length > 0 && new RegExp(`(^|[^A-Za-z0-9_])${escapeRegExp(name)}([^A-Za-z0-9_]|$)`).test(text);\n    if (verb === undefined) {\n      push(LINT_RULES.verb_mismatch);\n    } else if (!MODE_VERB_REGEX[verb].test(verb === \"off\" ? text.trim() : text)) {\n      push(LINT_RULES.verb_mismatch);\n    } else if (OTHER_MODE_VERBS[verb].some((re) => re.test(text))) {\n      push(LINT_RULES.verb_mismatch);\n    } else if (verb !== \"enforce\" && nameShown && !onCard) {\n      // The builder names the tool after \"stopped\" only (mnemom-api `protectionActLine`).\n      push(LINT_RULES.verb_mismatch);\n    }\n    if (onCard) {\n      if (nameShown) push(LINT_RULES.tool_name_on_card);\n    } else if (verb === \"enforce\" && !nameShown) {\n      push(LINT_RULES.enforce_without_tool_name);\n    }\n  }\n  if (argumentsAppear(text, line.tool_arguments)) push(LINT_RULES.tool_arguments_shown);\n\n  // A-S-001: a provisional μ amount lives on the μ cost line and never on a card (K1.17).\n  if (clauseHas(text, PROVISIONAL_MU)) {\n    if (onCard) push(LINT_RULES.provisional_mu_on_card);\n    if (field !== \"mu_cost\") push(LINT_RULES.provisional_mu_off_cost_line);\n  }\n\n  if (TRUST_CLAIM.test(text)) push(LINT_RULES.trust_claim);\n  if (clauseHas(text, SAVINGS_PERCENTAGE)) push(LINT_RULES.savings_percentage);\n  if (cls === \"benchmark\") push(LINT_RULES.benchmark_not_published);\n  if (cls === \"verdict\") {\n    // A card carries the coverage object on every verdict line, the rule `verify` enforces on a\n    // signed share card; off a card a protection act has none and a goal verdict may say it in words.\n    const covered = onCard ? coverageObjectValid(line.coverage) : field === \"protection\" || coverageShown(line);\n    if (!covered) push(LINT_RULES.verdict_without_coverage);\n  }\n  if (onCard && cls !== \"measured\" && cls !== \"verdict\" && cls !== \"outcome\") push(LINT_RULES.card_class_not_allowed);\n}\n\n/** Lint one rendering. Never throws; a malformed rendering is a violation. */\nexport function lintRendering(rendering: unknown): LintResult {\n  const violations: LintViolation[] = [];\n  if (!isObject(rendering) || !Array.isArray(rendering.lines)) {\n    return { ok: false, violations: [{ rule: LINT_RULES.unknown_surface, line: -1, text: \"\" }] };\n  }\n  const surface = rendering.surface;\n  if (!(SURFACES as readonly unknown[]).includes(surface)) {\n    return { ok: false, violations: [{ rule: LINT_RULES.unknown_surface, line: -1, text: String(surface) }] };\n  }\n  const lines = rendering.lines as RenderedLine[];\n  lines.forEach((line, i) => lintLine(surface as Surface, line, i, violations));\n\n  if (surface === \"period_card\") {\n    const hasRevert = lines.some(\n      (l) => isObject(l) && l.class === \"outcome\" && typeof l.text === \"string\" && REVERT.test(l.text),\n    );\n    if (!hasRevert) violations.push({ rule: LINT_RULES.period_card_without_revert, line: -1, text: \"\" });\n  }\n\n  return { ok: violations.length === 0, violations };\n}\n\n/** Lint several renderings and keep each result keyed by its position. */\nexport function lintRenderings(renderings: unknown[]): LintResult[] {\n  return renderings.map(lintRendering);\n}\n\n/** The `goal` block a conduct record statement carries (mnemom-api `src/record/builder.ts`). */\nexport interface StatementGoalBlock {\n  mode: GoalMode;\n  [k: string]: unknown;\n}\n\n/** One entry of a conduct record statement's `protection.acts[]`. */\nexport interface StatementProtectionAct {\n  mode: Mode;\n  verdict: ProtectionVerdict;\n  tool_name: string | null;\n  [k: string]: unknown;\n}\n\n/** A statement line as the builder signs it: one class, a stable key, the words shown. */\nexport interface StatementLine {\n  class: string;\n  key: string;\n  text: string;\n}\n\n/**\n * Attach the lint context a signed statement's lines leave out (cross-lane\n * pick M6). The statement carries `{class, key, text}` only; this returns the\n * same lines with `goal_mode` on `goal.*` lines, and `mode`, `verdict` and\n * `tool_name` on `protection.act.*` lines, read from the statement's `goal`\n * and `protection.acts` blocks (`protection.act.<i>` is `acts[i]`). Coverage\n * stays in the verdict line's words; a card renderer attaches the `coverage`\n * object itself. The text is never changed.\n */\nexport function attachLineContext(\n  lines: readonly StatementLine[],\n  goal: StatementGoalBlock | null | undefined,\n  protection: { acts: readonly StatementProtectionAct[] } | null | undefined,\n): RenderedLine[] {\n  return lines.map((line) => {\n    const out: RenderedLine = { class: line.class, key: line.key, text: line.text };\n    if (line.key.startsWith(\"goal.\") && goal) out.goal_mode = goal.mode;\n    if (line.key === \"protection.mode\") out.mode = \"off\";\n    const act = /^protection\\.act\\.(\\d+)$/.exec(line.key);\n    if (act && protection) {\n      const entry = protection.acts[Number(act[1])];\n      if (entry) {\n        out.mode = entry.mode;\n        out.verdict = entry.verdict;\n        if (entry.tool_name) out.tool_name = entry.tool_name;\n      }\n    }\n    return out;\n  });\n}\n","/**\n * The render-estimate rule (criterion K4.4, design decision T8).\n *\n * The savings estimate stays off every rendering until the estimator gives a\n * conservative net lower bound. Today's estimator overstates: it uses median\n * benchmark savings, starts counting at 60k tokens, does not subtract μ, and\n * never shows a loss. `estimateQualifies` is the registry's rule written as a\n * pure function over the estimator's self-description, so a renderer and the\n * verifier reach the same answer. Even when it qualifies, the estimate never\n * appears on a PR comment or a share card.\n */\n\nimport { ESTIMATE_FORBIDDEN_SURFACES, SURFACES, type Surface } from \"./claim-table.js\";\n\n/** Tokens above which the gateway's context work is counted (the 200k line). */\nexport const ESTIMATE_COUNTING_FLOOR_TOKENS = 200_000;\n\nexport interface EstimateDescription {\n  /** How the per-request saving is derived. Only a lower bound qualifies. */\n  method: \"lower_bound\" | \"median\" | \"mean\" | string;\n  /** Tokens from which the estimator starts counting. Must be at least the 200k line. */\n  counting_floor_tokens: number;\n  /** True when μ is subtracted from the gross saving. */\n  net_of_mu: boolean;\n  /** True when the estimator reports a loss as a negative figure rather than clamping at zero. */\n  reports_loss: boolean;\n  /** The net lower bound itself, in the same currency as model cost. */\n  net_lower_bound?: number;\n  [k: string]: unknown;\n}\n\nexport const ESTIMATE_DISQUALIFIERS = {\n  not_an_object: \"not_an_object\",\n  method_not_lower_bound: \"method_not_lower_bound\",\n  counting_floor_below_200k: \"counting_floor_below_200k\",\n  not_net_of_mu: \"not_net_of_mu\",\n  never_shows_loss: \"never_shows_loss\",\n  value_not_finite: \"value_not_finite\",\n} as const;\n\nexport type EstimateDisqualifier = (typeof ESTIMATE_DISQUALIFIERS)[keyof typeof ESTIMATE_DISQUALIFIERS];\n\nexport interface EstimateQualification {\n  qualifies: boolean;\n  reasons: EstimateDisqualifier[];\n}\n\nfunction isObject(v: unknown): v is Record<string, unknown> {\n  return typeof v === \"object\" && v !== null && !Array.isArray(v);\n}\n\n/** The registry's `estimate_qualifies` rule: a conservative net lower bound. */\nexport function estimateQualifies(estimate: unknown): EstimateQualification {\n  if (!isObject(estimate)) return { qualifies: false, reasons: [ESTIMATE_DISQUALIFIERS.not_an_object] };\n  const reasons: EstimateDisqualifier[] = [];\n  if (estimate.method !== \"lower_bound\") reasons.push(ESTIMATE_DISQUALIFIERS.method_not_lower_bound);\n  const floor = estimate.counting_floor_tokens;\n  if (typeof floor !== \"number\" || !Number.isFinite(floor) || floor < ESTIMATE_COUNTING_FLOOR_TOKENS) {\n    reasons.push(ESTIMATE_DISQUALIFIERS.counting_floor_below_200k);\n  }\n  if (estimate.net_of_mu !== true) reasons.push(ESTIMATE_DISQUALIFIERS.not_net_of_mu);\n  if (estimate.reports_loss !== true) reasons.push(ESTIMATE_DISQUALIFIERS.never_shows_loss);\n  if (typeof estimate.net_lower_bound !== \"number\" || !Number.isFinite(estimate.net_lower_bound)) {\n    reasons.push(ESTIMATE_DISQUALIFIERS.value_not_finite);\n  }\n  return { qualifies: reasons.length === 0, reasons };\n}\n\nexport const RENDER_ESTIMATE_REASONS = {\n  unknown_surface: \"unknown_surface\",\n  surface_never_shows_estimate: \"surface_never_shows_estimate\",\n  estimate_does_not_qualify: \"estimate_does_not_qualify\",\n} as const;\n\nexport interface RenderEstimateDecision {\n  render: boolean;\n  reasons: string[];\n}\n\n/**\n * Whether a rendering on `surface` may show the estimate. False on a PR\n * comment or any card regardless of the estimate; otherwise the registry's\n * rule decides. A missing estimate never renders.\n */\nexport function shouldRenderEstimate(estimate: unknown, surface: unknown): RenderEstimateDecision {\n  if (!(SURFACES as readonly unknown[]).includes(surface)) {\n    return { render: false, reasons: [RENDER_ESTIMATE_REASONS.unknown_surface] };\n  }\n  if (ESTIMATE_FORBIDDEN_SURFACES.includes(surface as Surface)) {\n    return { render: false, reasons: [RENDER_ESTIMATE_REASONS.surface_never_shows_estimate] };\n  }\n  const q = estimateQualifies(estimate);\n  if (!q.qualifies) {\n    return { render: false, reasons: [RENDER_ESTIMATE_REASONS.estimate_does_not_qualify, ...q.reasons] };\n  }\n  return { render: true, reasons: [] };\n}\n","/**\n * AAP-ShareCard/v1 — canonicalizer and offline verifier (MNE-9022).\n *\n * A share card is a signed set of numeric lines, each committing to the hash\n * of the signed statement it was derived from. Signing follows the\n * AAP-TransparencyRoot/v1 pattern (mnemom-api src/transparency/root_publisher.ts):\n * Ed25519 over canonical JSON (sorted keys, no whitespace) of the card MINUS\n * `signature`, with its own pinned `typ`. Renderers must display only the\n * `lines` returned by a successful verification.\n *\n * This module verifies only. It never handles private keys.\n */\n\nimport { verifyAsync } from \"@noble/ed25519\";\nimport { utf8ToBytes } from \"@noble/hashes/utils.js\";\n\nimport { canonicalJson } from \"./canonical.js\";\nimport { hexToUint8 } from \"./crypto.js\";\n\nexport const SHARE_CARD_TYP = \"AAP-ShareCard/v1\";\n\nexport type ShareCardLineKind = \"count\" | \"revert\";\n\nexport interface ShareCardLine {\n  id: string;\n  kind: ShareCardLineKind;\n  label: string;\n  value: number;\n  statement_hash: string;\n}\n\nexport interface ShareCardStatementRef {\n  typ: string;\n  hash: string;\n}\n\nexport interface ShareCard {\n  typ: string;\n  card_id: string;\n  period: { start: string; end: string };\n  issued_at: string;\n  signing_key_id: string;\n  statements: ShareCardStatementRef[];\n  lines: ShareCardLine[];\n  /** base64url Ed25519 signature over canonicalJson(card minus signature). */\n  signature: string;\n}\n\nexport interface ShareCardVerification {\n  valid: boolean;\n  /** Empty unless `valid`. Renderers must show only these. */\n  lines: ShareCardLine[];\n  errors: string[];\n}\n\n/** Keys that identify a repo, branch, PR or commit; never allowed anywhere. */\nconst IDENTIFYING_KEYS = new Set([\n  \"repo\", \"repository\", \"repo_name\", \"branch\", \"branch_name\", \"ref\",\n  \"pr\", \"pr_title\", \"pull_request\", \"title\", \"commit\", \"commit_message\",\n  \"commit_sha\", \"message\", \"author\", \"email\", \"url\", \"path\",\n]);\n\nconst CARD_KEYS = [\"typ\", \"card_id\", \"period\", \"issued_at\", \"signing_key_id\", \"statements\", \"lines\", \"signature\"];\nconst PERIOD_KEYS = [\"start\", \"end\"];\nconst STATEMENT_KEYS = [\"typ\", \"hash\"];\nconst LINE_KEYS = [\"id\", \"kind\", \"label\", \"value\", \"statement_hash\"];\nconst HEX64 = /^[0-9a-f]{64}$/;\nconst DATE = /^\\d{4}-\\d{2}-\\d{2}$/;\n/** Opaque identifiers: no \"/\", no free text. Mirrored in schemas/aap-sharecard.schema.json. */\nconst OPAQUE_ID = /^[a-z0-9_-]{1,64}$/;\n/**\n * TODO(MNE-9022): label -> fixed label ID enum pending format sign-off.\n * Until then labels are restricted to a short, plain-text charset so they\n * cannot carry repo paths, branches, PR refs or URLs.\n */\nconst LABEL = /^[A-Za-z0-9 .,()+-]{1,40}$/;\nconst LABEL_MAX = 40;\n/**\n * Statement types a v1 card may commit to: the three signed record statements\n * (C5-R3). The share card itself (\"AAP-ShareCard/v1\") and the bundle are not\n * valid sources. Mirrored in schemas/aap-sharecard.schema.json.\n */\nexport const SHARE_CARD_STATEMENT_TYPES: readonly string[] = [\n  \"AAP-ConductRecord/v1\",\n  \"AAP-PRRecord/v1\",\n  \"AAP-Outcome/v1\",\n];\nconst SIGNATURE_LEN = 86; // 64 bytes, unpadded base64url\nconst RFC3339 = /^(\\d{4})-(\\d{2})-(\\d{2})T(\\d{2}):(\\d{2}):(\\d{2})(?:\\.\\d+)?(?:Z|([+-])(\\d{2}):(\\d{2}))$/;\n\nfunction isCalendarDate(y: number, m: number, d: number): boolean {\n  if (m < 1 || m > 12 || d < 1) return false;\n  const dim = [31, y % 4 === 0 && (y % 100 !== 0 || y % 400 === 0) ? 29 : 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31][m - 1]!;\n  return d <= dim;\n}\n\nfunction isRfc3339(v: string): boolean {\n  const m = RFC3339.exec(v);\n  if (!m) return false;\n  const [y, mo, d, h, mi, se] = m.slice(1, 7).map(Number) as [number, number, number, number, number, number];\n  if (!isCalendarDate(y, mo, d) || h > 23 || mi > 59 || se > 59) return false;\n  if (m[7] !== undefined && (Number(m[8]) > 23 || Number(m[9]) > 59)) return false;\n  return true;\n}\n\n/** Sorted-key, whitespace-free JSON; identical to mnemom-api canonicalJson. One implementation for every signed statement (canonical.ts). */\nexport { canonicalJson };\n\n/** The exact string that is signed: canonical JSON of the card minus `signature`. */\nexport function shareCardSigningInput(card: Record<string, unknown>): string {\n  const { signature: _signature, ...rest } = card;\n  return canonicalJson(rest);\n}\n\nfunction bytesToBase64url(b: Uint8Array): string {\n  let bin = \"\";\n  for (const x of b) bin += String.fromCharCode(x);\n  return btoa(bin).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\n/** Strict decode: exactly 86 chars that re-encode to the identical string (no malleable trailing bits). */\nfunction base64urlToBytes(s: string): Uint8Array {\n  if (s.length !== SIGNATURE_LEN || !/^[A-Za-z0-9_-]+$/.test(s)) throw new Error(\"bad base64url\");\n  const padded = s.replace(/-/g, \"+\").replace(/_/g, \"/\") + \"===\".slice(0, (4 - (s.length % 4)) % 4);\n  const bin = atob(padded);\n  const out = new Uint8Array(bin.length);\n  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);\n  if (out.length !== 64 || bytesToBase64url(out) !== s) throw new Error(\"non-canonical base64url\");\n  return out;\n}\n\nfunction isObj(v: unknown): v is Record<string, unknown> {\n  return typeof v === \"object\" && v !== null && !Array.isArray(v);\n}\n\nfunction exactKeys(obj: Record<string, unknown>, allowed: string[], where: string, errors: string[]): void {\n  for (const k of Object.keys(obj)) {\n    if (IDENTIFYING_KEYS.has(k.toLowerCase())) errors.push(`${where}: identifying field \"${k}\" is not allowed`);\n    else if (!allowed.includes(k)) errors.push(`${where}: unknown field \"${k}\"`);\n  }\n  for (const k of allowed) if (!(k in obj)) errors.push(`${where}: missing field \"${k}\"`);\n}\n\n/** Structural validation (no signature check). Returns error strings. */\nexport function validateShareCardShape(card: unknown): string[] {\n  const errors: string[] = [];\n  if (!isObj(card)) return [\"card: not an object\"];\n  exactKeys(card, CARD_KEYS, \"card\", errors);\n  if (card.typ !== SHARE_CARD_TYP) errors.push(`card: typ must be ${SHARE_CARD_TYP}`);\n  if (typeof card.card_id !== \"string\" || !OPAQUE_ID.test(card.card_id)) errors.push(\"card: card_id must be an opaque id matching ^[a-z0-9_-]{1,64}$\");\n  if (typeof card.issued_at !== \"string\" || !isRfc3339(card.issued_at)) errors.push(\"card: issued_at must be an RFC 3339 date-time\");\n  if (typeof card.signing_key_id !== \"string\" || !card.signing_key_id) errors.push(\"card: signing_key_id must be a non-empty string\");\n  if (typeof card.signature !== \"string\") errors.push(\"card: signature must be a string\");\n  else {\n    try {\n      base64urlToBytes(card.signature);\n    } catch {\n      errors.push(\"card: signature must be a canonical 86-char unpadded base64url Ed25519 signature\");\n    }\n  }\n\n  if (!isObj(card.period)) errors.push(\"period: not an object\");\n  else {\n    exactKeys(card.period, PERIOD_KEYS, \"period\", errors);\n    for (const k of PERIOD_KEYS) {\n      const v = card.period[k];\n      if (typeof v !== \"string\" || !DATE.test(v) || !isCalendarDate(Number(v.slice(0, 4)), Number(v.slice(5, 7)), Number(v.slice(8, 10)))) {\n        errors.push(`period.${k}: must be a real calendar date YYYY-MM-DD`);\n      }\n    }\n    const { start, end } = card.period;\n    if (typeof start === \"string\" && typeof end === \"string\" && DATE.test(start) && DATE.test(end) && start > end) {\n      errors.push(\"period: start must be <= end\");\n    }\n  }\n\n  const hashes = new Set<string>();\n  const referenced = new Set<string>();\n  const lineIds = new Set<string>();\n  if (!Array.isArray(card.statements) || card.statements.length === 0) errors.push(\"statements: must be a non-empty array\");\n  else\n    card.statements.forEach((s, i) => {\n      if (!isObj(s)) return void errors.push(`statements[${i}]: not an object`);\n      exactKeys(s, STATEMENT_KEYS, `statements[${i}]`, errors);\n      if (typeof s.typ !== \"string\" || !SHARE_CARD_STATEMENT_TYPES.includes(s.typ)) {\n        errors.push(`statements[${i}].typ: must be one of ${SHARE_CARD_STATEMENT_TYPES.join(\", \")}`);\n      }\n      if (typeof s.hash !== \"string\" || !HEX64.test(s.hash)) errors.push(`statements[${i}].hash: must be 64 lowercase hex`);\n      else hashes.add(s.hash);\n    });\n\n  if (!Array.isArray(card.lines) || card.lines.length === 0) errors.push(\"lines: must be a non-empty array\");\n  else\n    card.lines.forEach((l, i) => {\n      if (!isObj(l)) return void errors.push(`lines[${i}]: not an object`);\n      exactKeys(l, LINE_KEYS, `lines[${i}]`, errors);\n      if (typeof l.id !== \"string\" || !OPAQUE_ID.test(l.id)) errors.push(`lines[${i}].id: must be an opaque id matching ^[a-z0-9_-]{1,64}$`);\n      else if (lineIds.has(l.id)) errors.push(`lines[${i}].id: duplicate line id \"${l.id}\"`);\n      else lineIds.add(l.id);\n      if (l.kind !== \"count\" && l.kind !== \"revert\") errors.push(`lines[${i}].kind: must be \"count\" or \"revert\"`);\n      if (typeof l.label !== \"string\" || !l.label || l.label.length > LABEL_MAX || /[/#]|:\\/\\/|www\\./i.test(l.label) || !LABEL.test(l.label)) {\n        errors.push(`lines[${i}].label: must be short plain text (max ${LABEL_MAX}), no \"/\", \"#\" or URLs`);\n      }\n      if (typeof l.value !== \"number\" || !Number.isSafeInteger(l.value) || l.value < 0) errors.push(`lines[${i}].value: must be a non-negative integer`);\n      if (typeof l.statement_hash !== \"string\" || !HEX64.test(l.statement_hash)) errors.push(`lines[${i}].statement_hash: must be 64 lowercase hex`);\n      else if (!hashes.has(l.statement_hash)) errors.push(`lines[${i}].statement_hash: not committed in statements`);\n      else referenced.add(l.statement_hash);\n    });\n  for (const h of hashes) if (!referenced.has(h)) errors.push(`statements: ${h} is not referenced by any line`);\n  return errors;\n}\n\n/**\n * Verify a share card offline against a trusted Ed25519 public key.\n * Fails closed: on any error `lines` is empty so nothing can be rendered.\n */\nexport async function verifyShareCard(\n  card: unknown,\n  options: { publicKey: string | Uint8Array },\n): Promise<ShareCardVerification> {\n  const fail = (errors: string[]): ShareCardVerification => ({ valid: false, lines: [], errors });\n  const shapeErrors = validateShareCardShape(card);\n  if (shapeErrors.length > 0) return fail(shapeErrors);\n  const c = card as ShareCard;\n  let ok = false;\n  try {\n    const pk = typeof options.publicKey === \"string\" ? hexToUint8(options.publicKey) : options.publicKey;\n    ok = await verifyAsync(base64urlToBytes(c.signature), utf8ToBytes(shareCardSigningInput(c as unknown as Record<string, unknown>)), pk, { zip215: false });\n  } catch {\n    ok = false;\n  }\n  if (!ok) return fail([\"signature: verification failed\"]);\n  return { valid: true, lines: c.lines.map((l) => ({ ...l })), errors: [] };\n}\n"]}

package/node_modules/@mnemom/aip-verifier/dist/index.d.cts

@@ -0,0 +1,330 @@
+import { S as SignedStatement, R as RecordBundle, a as RecordJwks, b as RecordVerificationResult, c as StatementVerificationResult } from './claim-lint-CVITIRcU.cjs';
+export { B as BUNDLE_TYP, C as CARD_LINE_CLASSES, d as CARD_SURFACES, e as CLAIM_CLASSES, f as CLAIM_TABLE, g as CardLineClass, h as CheckpointCitation, i as ClaimClass, j as ClaimField, k as ClaimTableEntry, l as ConductRecordStatement, E as ESTIMATE_FORBIDDEN_SURFACES, F as FLAGS, m as Flag, G as GOAL_MODES, n as GoalMode, L as LINE_KEY_FIELDS, o as LINT_RULES, p as LintResult, q as LintRule, r as LintViolation, M as MODES, s as MODE_VERBS, t as Mode, O as OutcomeStatement, P as PROTECTION_VERDICTS, u as PRRecordStatement, v as ProtectionVerdict, w as REASONS, x as Reason, y as RecordJwk, z as RecordShareCardLine, A as RenderedLine, D as Rendering, H as STATEMENT_TYPES, I as SURFACES, J as ShareCardStatement, K as SignedStatementBase, N as StatementFlag, Q as StatementGoalBlock, T as StatementLine, U as StatementProtectionAct, V as StatementTyp, W as Surface, X as attachLineContext, Y as fieldForLineKey, Z as isClaimField, _ as lintRendering, $ as lintRenderings, a0 as protectionVerb } from './claim-lint-CVITIRcU.cjs';
+
+/**
+ * Certificate and proof types for AIP integrity verification.
+ *
+ * These types describe the structure of an integrity certificate
+ * produced by the AIP attestation pipeline, and the result of
+ * verifying one offline.
+ */
+/** A single concern identified during integrity analysis. */
+interface CertificateConcern {
+    category: string;
+    severity: string;
+    description: string;
+}
+/** Subject of the integrity certificate — identifies what was analyzed. */
+interface CertificateSubject {
+    checkpoint_id: string;
+    agent_id: string;
+    session_id: string;
+    card_id: string;
+}
+/** Claims made by the integrity analysis. */
+interface CertificateClaims {
+    verdict: string;
+    concerns: CertificateConcern[];
+    confidence: number;
+    reasoning_summary: string;
+    analysis_model: string;
+    analysis_duration_ms: number;
+}
+/** Cryptographic commitments over the analysis inputs. */
+interface InputCommitments {
+    thinking_block_hash: string;
+    card_hash: string;
+    values_hash: string;
+    context_hash: string;
+    model_version: string;
+    combined_commitment: string;
+}
+/** Ed25519 signature proof. */
+interface SignatureProof {
+    algorithm: "Ed25519";
+    key_id: string;
+    value: string;
+    signed_payload: string;
+}
+/** Hash-chain position proof. */
+interface ChainProof {
+    chain_hash: string;
+    prev_chain_hash: string | null;
+    position: number;
+}
+/** A single sibling node in a Merkle inclusion proof. */
+interface MerkleSibling {
+    hash: string;
+    position: "left" | "right";
+}
+/** Merkle tree inclusion proof. */
+interface MerkleProof {
+    leaf_hash: string;
+    leaf_index: number;
+    root: string;
+    tree_size: number;
+    inclusion_proof: MerkleSibling[];
+}
+/** Zero-knowledge verdict derivation proof (SP1 STARK). */
+interface VerdictDerivationProof {
+    method: "SP1-STARK" | "RISC-Zero-STARK";
+    image_id: string;
+    receipt: string;
+    journal: string;
+    verified_at: string;
+}
+/** All cryptographic proofs attached to a certificate. */
+interface CertificateProofs {
+    signature: SignatureProof;
+    chain: ChainProof;
+    merkle: MerkleProof | null;
+    verdict_derivation: VerdictDerivationProof | null;
+}
+/** Verification endpoint URLs (informational, not used offline). */
+interface VerificationEndpoints {
+    keys_url: string;
+    certificate_url: string;
+    verify_url: string;
+}
+/**
+ * An AIP Integrity Certificate.
+ *
+ * Produced by the attestation pipeline and cryptographically bound
+ * to the integrity checkpoint it attests.
+ */
+interface IntegrityCertificate {
+    "@context": "https://mnemom.ai/aip/v1";
+    type: "IntegrityCertificate";
+    version: "1.0.0";
+    certificate_id: string;
+    issued_at: string;
+    subject: CertificateSubject;
+    claims: CertificateClaims;
+    input_commitments: InputCommitments;
+    proofs: CertificateProofs;
+    verification: VerificationEndpoints;
+}
+/** Result of a single verification check. */
+interface CheckResult {
+    valid: boolean;
+    details: string;
+}
+/** Aggregated result of verifying an integrity certificate. */
+interface VerificationResult {
+    valid: boolean;
+    checks: {
+        signature: CheckResult;
+        chain: CheckResult;
+        merkle: CheckResult | null;
+        verdict_derivation: CheckResult | null;
+    };
+    certificate_id: string;
+    verified_at: string;
+}
+/** Options for the certificate verifier. */
+interface VerifierOptions {
+    /** Ed25519 public key as hex string or Uint8Array. */
+    publicKey: string | Uint8Array;
+    /** Expected Merkle root (hex). If provided, Merkle proof is verified against it. */
+    merkleRoot?: string;
+    /** Expected SP1 image ID (hex). If provided, verdict derivation proof is checked against it. */
+    verdictDerivationImageId?: string;
+}
+
+/**
+ * Main certificate verification logic.
+ *
+ * Given a trusted public key (and optionally a Merkle root), verifies
+ * an AIP Integrity Certificate entirely offline.
+ */
+
+/**
+ * Verify an AIP Integrity Certificate offline.
+ *
+ * Performs four checks:
+ *
+ * 1. **Signature** — Ed25519 verification of the signed payload.
+ * 2. **Chain** — Recomputes chain hash and compares with the certificate.
+ * 3. **Merkle** — If the certificate carries a Merkle proof *and*
+ *    `options.merkleRoot` is supplied, verifies the inclusion proof.
+ *    Otherwise the check is skipped (returns `null`).
+ * 4. **Verdict derivation** — If the certificate carries a verdict derivation
+ *    proof, verifies structural integrity (journal fields match certificate
+ *    claims). STARK receipt verification is deferred to server-side.
+ *
+ * @param certificate - The integrity certificate to verify.
+ * @param options     - Public key and optional Merkle root.
+ * @returns Verification result with per-check details.
+ */
+declare function verifyCertificate(certificate: IntegrityCertificate, options: VerifierOptions): Promise<VerificationResult>;
+
+/**
+ * Offline verification of record statements and bundles.
+ *
+ * `verify(statement | bundle, jwks)` is the one entry point the CLI, CI,
+ * the PR check and the web pages all call. It never touches the network:
+ * the caller hands it the published JWKS.
+ *
+ * Order of checks for one statement, fail-closed, same as the SDK's
+ * `JwksClient.verify` (mnemom-platform `shared/sdk/src/jwks.ts`):
+ *
+ * 1. shape and `typ` (domain separation, T3)
+ * 2. `alg`, exact-match `EdDSA`, before any key material is touched
+ * 3. `signing_key_id` and `signature` present and well formed
+ * 4. key lookup by `kid`; the key must be an Ed25519 OKP key with `alg: EdDSA`
+ * 5. Ed25519 over `canonicalJson(statement minus signature)`
+ * 6. per-type rules (share card line classes, verdict coverage)
+ * 7. flags on cited checkpoints (T12), which never change `valid`
+ */
+
+/**
+ * The bytes a statement's signature covers: canonical JSON of the statement
+ * with `signature` removed. Exported so a signer in another language can be
+ * checked against it byte for byte.
+ */
+declare function statementCommitment(statement: Record<string, unknown>): string;
+/** Lowercase sha256 hex of a statement's commitment: how statements link (T2). */
+declare function statementDigest(statement: Record<string, unknown>): string;
+/**
+ * Verify one signed statement against the published JWKS.
+ * Never throws and never calls the network.
+ */
+declare function verifyStatement(statement: unknown, jwks: RecordJwks): Promise<StatementVerificationResult>;
+/**
+ * Verify a statement or a whole bundle against the published JWKS.
+ *
+ * For a bundle every statement is verified on its own, then the links
+ * between them are checked: a digest that names a statement in the bundle
+ * must name one of the right type. A digest that names nothing in the
+ * bundle is flagged, not failed, because a long session's earlier
+ * statements may live outside the bundle (design, open questions).
+ */
+declare function verify(input: SignedStatement | RecordBundle | unknown, jwks: RecordJwks): Promise<RecordVerificationResult>;
+
+/**
+ * The render-estimate rule (criterion K4.4, design decision T8).
+ *
+ * The savings estimate stays off every rendering until the estimator gives a
+ * conservative net lower bound. Today's estimator overstates: it uses median
+ * benchmark savings, starts counting at 60k tokens, does not subtract μ, and
+ * never shows a loss. `estimateQualifies` is the registry's rule written as a
+ * pure function over the estimator's self-description, so a renderer and the
+ * verifier reach the same answer. Even when it qualifies, the estimate never
+ * appears on a PR comment or a share card.
+ */
+/** Tokens above which the gateway's context work is counted (the 200k line). */
+declare const ESTIMATE_COUNTING_FLOOR_TOKENS = 200000;
+interface EstimateDescription {
+    /** How the per-request saving is derived. Only a lower bound qualifies. */
+    method: "lower_bound" | "median" | "mean" | string;
+    /** Tokens from which the estimator starts counting. Must be at least the 200k line. */
+    counting_floor_tokens: number;
+    /** True when μ is subtracted from the gross saving. */
+    net_of_mu: boolean;
+    /** True when the estimator reports a loss as a negative figure rather than clamping at zero. */
+    reports_loss: boolean;
+    /** The net lower bound itself, in the same currency as model cost. */
+    net_lower_bound?: number;
+    [k: string]: unknown;
+}
+declare const ESTIMATE_DISQUALIFIERS: {
+    readonly not_an_object: "not_an_object";
+    readonly method_not_lower_bound: "method_not_lower_bound";
+    readonly counting_floor_below_200k: "counting_floor_below_200k";
+    readonly not_net_of_mu: "not_net_of_mu";
+    readonly never_shows_loss: "never_shows_loss";
+    readonly value_not_finite: "value_not_finite";
+};
+type EstimateDisqualifier = (typeof ESTIMATE_DISQUALIFIERS)[keyof typeof ESTIMATE_DISQUALIFIERS];
+interface EstimateQualification {
+    qualifies: boolean;
+    reasons: EstimateDisqualifier[];
+}
+/** The registry's `estimate_qualifies` rule: a conservative net lower bound. */
+declare function estimateQualifies(estimate: unknown): EstimateQualification;
+declare const RENDER_ESTIMATE_REASONS: {
+    readonly unknown_surface: "unknown_surface";
+    readonly surface_never_shows_estimate: "surface_never_shows_estimate";
+    readonly estimate_does_not_qualify: "estimate_does_not_qualify";
+};
+interface RenderEstimateDecision {
+    render: boolean;
+    reasons: string[];
+}
+/**
+ * Whether a rendering on `surface` may show the estimate. False on a PR
+ * comment or any card regardless of the estimate; otherwise the registry's
+ * rule decides. A missing estimate never renders.
+ */
+declare function shouldRenderEstimate(estimate: unknown, surface: unknown): RenderEstimateDecision;
+
+/**
+ * Canonical JSON, byte-identical to mnemom-api `src/attestation/crypto.ts`
+ * (`canonicalJson`): object keys sorted recursively, no whitespace, arrays
+ * kept in order, primitives through `JSON.stringify`.
+ *
+ * Every signed record statement commits to this serialisation of the
+ * statement minus its `signature` field, exactly the way
+ * `AAP-TransparencyRoot/v1` does (mnemom-api `src/transparency/root_publisher.ts`).
+ */
+declare function canonicalJson(value: unknown): string;
+
+/**
+ * AAP-ShareCard/v1 — canonicalizer and offline verifier (MNE-9022).
+ *
+ * A share card is a signed set of numeric lines, each committing to the hash
+ * of the signed statement it was derived from. Signing follows the
+ * AAP-TransparencyRoot/v1 pattern (mnemom-api src/transparency/root_publisher.ts):
+ * Ed25519 over canonical JSON (sorted keys, no whitespace) of the card MINUS
+ * `signature`, with its own pinned `typ`. Renderers must display only the
+ * `lines` returned by a successful verification.
+ *
+ * This module verifies only. It never handles private keys.
+ */
+
+declare const SHARE_CARD_TYP = "AAP-ShareCard/v1";
+type ShareCardLineKind = "count" | "revert";
+interface ShareCardLine {
+    id: string;
+    kind: ShareCardLineKind;
+    label: string;
+    value: number;
+    statement_hash: string;
+}
+interface ShareCardStatementRef {
+    typ: string;
+    hash: string;
+}
+interface ShareCard {
+    typ: string;
+    card_id: string;
+    period: {
+        start: string;
+        end: string;
+    };
+    issued_at: string;
+    signing_key_id: string;
+    statements: ShareCardStatementRef[];
+    lines: ShareCardLine[];
+    /** base64url Ed25519 signature over canonicalJson(card minus signature). */
+    signature: string;
+}
+interface ShareCardVerification {
+    valid: boolean;
+    /** Empty unless `valid`. Renderers must show only these. */
+    lines: ShareCardLine[];
+    errors: string[];
+}
+/** The exact string that is signed: canonical JSON of the card minus `signature`. */
+declare function shareCardSigningInput(card: Record<string, unknown>): string;
+/** Structural validation (no signature check). Returns error strings. */
+declare function validateShareCardShape(card: unknown): string[];
+/**
+ * Verify a share card offline against a trusted Ed25519 public key.
+ * Fails closed: on any error `lines` is empty so nothing can be rendered.
+ */
+declare function verifyShareCard(card: unknown, options: {
+    publicKey: string | Uint8Array;
+}): Promise<ShareCardVerification>;
+
+export { type CertificateClaims, type CertificateConcern, type CertificateProofs, type CertificateSubject, type ChainProof, type CheckResult, ESTIMATE_COUNTING_FLOOR_TOKENS, ESTIMATE_DISQUALIFIERS, type EstimateDescription, type EstimateDisqualifier, type EstimateQualification, type InputCommitments, type IntegrityCertificate, type MerkleProof, type MerkleSibling, RENDER_ESTIMATE_REASONS, RecordBundle, RecordJwks, RecordVerificationResult, type RenderEstimateDecision, SHARE_CARD_TYP, type ShareCard, type ShareCardLine, type ShareCardLineKind, type ShareCardStatementRef, type ShareCardVerification, type SignatureProof, SignedStatement, StatementVerificationResult, type VerdictDerivationProof, type VerificationEndpoints, type VerificationResult, type VerifierOptions, canonicalJson, estimateQualifies, shareCardSigningInput, shouldRenderEstimate, statementCommitment, statementDigest, validateShareCardShape, verify, verifyCertificate, verifyShareCard, verifyStatement };