@naulon/shared 0.0.1

package/dist/eventsink.js

@@ -0,0 +1,110 @@
+/**
+ * EventSink implementations. The default is an append-only JSONL file keyed off
+ * EVENTS_PATH, so the tollgate (writer) and the dashboard/attribution (readers)
+ * all agree on one ledger without a database. Swap in another EventSink to move
+ * to Postgres/Supabase — callers don't change.
+ */
+import { appendFile, mkdir, readFile } from "node:fs/promises";
+import { dirname, resolve } from "node:path";
+import { getConfig } from "./config.js";
+import { supabaseRest } from "./supabase.js";
+export function jsonlSink(path) {
+    const file = resolve(path ?? getConfig().EVENTS_PATH);
+    return {
+        async record(event) {
+            await mkdir(dirname(file), { recursive: true });
+            await appendFile(file, JSON.stringify(event) + "\n", "utf8");
+        },
+        async readAll(publisherId) {
+            try {
+                const raw = await readFile(file, "utf8");
+                const events = raw
+                    .split("\n")
+                    .filter((l) => l.trim())
+                    .map((l) => JSON.parse(l));
+                // jsonl is the single-box/dev backend, but honour the optional scope so a
+                // scoped read over a local ledger sees only that publisher's events.
+                return publisherId === undefined ? events : events.filter((e) => e.publisherId === publisherId);
+            }
+            catch (err) {
+                if (err.code === "ENOENT")
+                    return [];
+                throw err;
+            }
+        },
+        async get(id) {
+            try {
+                const raw = await readFile(file, "utf8");
+                for (const line of raw.split("\n")) {
+                    if (!line.trim())
+                        continue;
+                    const event = JSON.parse(line);
+                    if (event.id === id)
+                        return event; // short-circuit on first match
+                }
+                return undefined;
+            }
+            catch (err) {
+                if (err.code === "ENOENT")
+                    return undefined;
+                throw err;
+            }
+        },
+    };
+}
+/**
+ * Supabase-backed sink. Each event is stored as one row: its `id` (primary key,
+ * so a retried write is idempotent), its `at` timestamp (indexed, for ordering),
+ * and the whole `AttributedEvent` as a jsonb `data` column — so `readAll` hands
+ * back the exact shape the writer stored, with no field-by-field mapping to drift.
+ * This is the backend to use on serverless/multi-instance hosts with no shared disk.
+ */
+export function supabaseSink() {
+    const table = getConfig().SUPABASE_EVENTS_TABLE;
+    return {
+        async record(event) {
+            await supabaseRest(`/rest/v1/${table}?on_conflict=id`, {
+                method: "POST",
+                // Idempotent: a row with this id already? ignore, don't error.
+                headers: { Prefer: "resolution=ignore-duplicates" },
+                // `publisher` is a top-level column (not just inside `data`) so a scoped
+                // `readAll` can filter rows server-side. Null for single-tenant writes.
+                body: JSON.stringify([{ id: event.id, at: event.at, publisher: event.publisherId ?? null, data: event }]),
+            });
+        },
+        async readAll(publisherId) {
+            const scope = publisherId === undefined ? "" : `&publisher=eq.${encodeURIComponent(publisherId)}`;
+            const rows = (await supabaseRest(`/rest/v1/${table}?select=data&order=at.asc${scope}`));
+            return rows.map((r) => r.data);
+        },
+        async get(id) {
+            // Primary-key lookup — never reads the whole table.
+            const rows = (await supabaseRest(`/rest/v1/${table}?id=eq.${encodeURIComponent(id)}&select=data&limit=1`));
+            return rows[0]?.data;
+        },
+    };
+}
+/**
+ * Pick the EventSink the config asks for. JSONL file by default (offline, no
+ * creds); Supabase when EVENTS_BACKEND=supabase. Callers use this instead of
+ * naming a sink directly, so switching backends is one env var.
+ */
+export function getSink() {
+    return getConfig().EVENTS_BACKEND === "supabase" ? supabaseSink() : jsonlSink();
+}
+/** In-memory sink, handy for tests. */
+export function memorySink(seed = []) {
+    const events = [...seed];
+    return {
+        async record(event) {
+            events.push(event);
+        },
+        async readAll(publisherId) {
+            return publisherId === undefined ? [...events] : events.filter((e) => e.publisherId === publisherId);
+        },
+        async get(id) {
+            return events.find((e) => e.id === id);
+        },
+    };
+}
+//# sourceMappingURL=eventsink.js.map

package/dist/eventsink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eventsink.js","sourceRoot":"","sources":["../src/eventsink.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAG7C,MAAM,UAAU,SAAS,CAAC,IAAa;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC,WAAW,CAAC,CAAC;IACtD,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,KAAK;YAChB,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/D,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,WAAY;YACxB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACzC,MAAM,MAAM,GAAG,GAAG;qBACf,KAAK,CAAC,IAAI,CAAC;qBACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;qBACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAoB,CAAC,CAAC;gBAChD,0EAA0E;gBAC1E,qEAAqE;gBACrE,OAAO,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;YAClG,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,EAAE,CAAC;gBAChE,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,EAAE;YACV,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACzC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;wBAAE,SAAS;oBAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAC;oBAClD,IAAI,KAAK,CAAC,EAAE,KAAK,EAAE;wBAAE,OAAO,KAAK,CAAC,CAAC,+BAA+B;gBACpE,CAAC;gBACD,OAAO,SAAS,CAAC;YACnB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,SAAS,CAAC;gBACvE,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC,qBAAqB,CAAC;IAChD,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,KAAK;YAChB,MAAM,YAAY,CAAC,YAAY,KAAK,iBAAiB,EAAE;gBACrD,MAAM,EAAE,MAAM;gBACd,+DAA+D;gBAC/D,OAAO,EAAE,EAAE,MAAM,EAAE,8BAA8B,EAAE;gBACnD,yEAAyE;gBACzE,wEAAwE;gBACxE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;aAC1G,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,WAAY;YACxB,MAAM,KAAK,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;YAClG,MAAM,IAAI,GAAG,CAAC,MAAM,YAAY,CAC9B,YAAY,KAAK,4BAA4B,KAAK,EAAE,CACrD,CAAqC,CAAC;YACvC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,EAAE;YACV,oDAAoD;YACpD,MAAM,IAAI,GAAG,CAAC,MAAM,YAAY,CAC9B,YAAY,KAAK,UAAU,kBAAkB,CAAC,EAAE,CAAC,sBAAsB,CACxE,CAAqC,CAAC;YACvC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;QACvB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO;IACrB,OAAO,SAAS,EAAE,CAAC,cAAc,KAAK,UAAU,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;AAClF,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,UAAU,CAAC,OAA0B,EAAE;IACrD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACzB,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,KAAK;YAChB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,WAAY;YACxB,OAAO,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;QACvG,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,EAAE;YACV,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACzC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,14 @@
+export * from "./types.ts";
+export * from "./publisher.ts";
+export * from "./config.ts";
+export * from "./attribution.ts";
+export * from "./eventsink.ts";
+export * from "./observationsink.ts";
+export * from "./supabase.ts";
+export * from "./license.ts";
+export * from "./networks.ts";
+export * from "./eip3009.ts";
+export * from "./credits.ts";
+export * from "./settlementEmit.ts";
+export * from "./botAuthSign.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC"}

package/dist/index.js

@@ -0,0 +1,14 @@
+export * from "./types.js";
+export * from "./publisher.js";
+export * from "./config.js";
+export * from "./attribution.js";
+export * from "./eventsink.js";
+export * from "./observationsink.js";
+export * from "./supabase.js";
+export * from "./license.js";
+export * from "./networks.js";
+export * from "./eip3009.js";
+export * from "./credits.js";
+export * from "./settlementEmit.js";
+export * from "./botAuthSign.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC"}

package/dist/license.d.ts

@@ -0,0 +1,178 @@
+/**
+ * Citation License Token (CLT) — sign + verify. See docs/citation-license.md.
+ *
+ * A CLT is a signed, independently verifiable receipt the tollgate hands an agent
+ * when it pays: proof of who paid, how much USDC, for which essay, to which
+ * author wallet(s), settled on-chain. It is a signed projection of the
+ * AttributedEvent already recorded per payment (jti = event.id). Re-presenting a
+ * valid unexpired CLT re-reads that essay free within a short window — so the toll
+ * becomes an asset the payer wants, not a tax it evades.
+ *
+ * Format: a strict RFC 7519 JWT, EdDSA-signed (Ed25519, node:crypto — no dep),
+ * verifiable by an unmodified jose/pyjwt client. Domain data lives under one
+ * namespaced `naulon` claim so it never shadows a registered JWT claim.
+ *
+ * SECURITY — two invariants this module enforces (a regression in either is a
+ * free-read bypass; see the adversarial tests in license.test.ts):
+ *   1. verify IGNORES the token's `alg` header and hard-pins Ed25519. The public
+ *      key is world-readable at the JWKS endpoint, so trusting `alg` would allow
+ *      alg:none and HMAC-with-the-public-key forgery. The verify routine is fixed
+ *      to crypto.verify over the LITERAL received bytes; claims are parsed only
+ *      AFTER the signature passes.
+ *   2. mint/verify are PURE and take an explicit `now` (no ambient clock in
+ *      shared). mint reads only in-memory event fields — never the EventSink — so
+ *      a record() failure after settle still yields a valid receipt.
+ */
+import { type KeyObject } from "node:crypto";
+import { type TieBreak } from "./attribution.ts";
+import type { AttributedEvent, AuthorShare } from "./types.ts";
+/** A JSON Web Key for an Ed25519 public key (OKP). */
+export interface Jwk {
+    kty: "OKP";
+    crv: "Ed25519";
+    x: string;
+    kid: string;
+    use: "sig";
+    alg: "EdDSA";
+}
+export interface JwkSet {
+    keys: Jwk[];
+}
+/** A resolved signing key: the private key, its public key, and a stable kid. */
+export interface SigningKey {
+    privateKey: KeyObject;
+    publicKey: KeyObject;
+    kid: string;
+}
+/** The namespaced `naulon` claim — the domain payload. */
+export interface NaulonClaim {
+    v: 1;
+    slug: string;
+    title: string;
+    kind: AttributedEvent["kind"];
+    /** Integer micro-USDC as a string (e.g. "1000" = $0.001) — never a float. */
+    amount: string;
+    currency: "USDC";
+    network: {
+        chainId: number;
+        usdc: string;
+        gateway: string;
+    };
+    settlementRef: string;
+    /** Present in "full" payees mode. */
+    payees?: AuthorShare[];
+    /** Present in "hashed" payees mode. */
+    payeesHash?: string;
+    payTo?: string;
+}
+/**
+ * RFC 7800 confirmation claim. When present, the license is HOLDER-OF-KEY bound:
+ * a re-read must prove possession of the named wallet's key (an EIP-191 signature
+ * over a fresh challenge), so capturing the bearer token alone is not enough.
+ * `naulon:addr` is the lowercased payer wallet that must sign the proof.
+ */
+export interface ConfirmationClaim {
+    "naulon:addr": string;
+}
+/** The full CLT claim set (registered JWT claims + the `naulon` object). */
+export interface CitationLicenseClaims {
+    iss: string;
+    aud: string;
+    sub: string;
+    jti: string;
+    iat: number;
+    nbf: number;
+    exp: number;
+    naulon: NaulonClaim;
+    /** Present only on holder-of-key licenses (LICENSE_POP). RFC 7800. */
+    cnf?: ConfirmationClaim;
+}
+export interface MintInput {
+    event: AttributedEvent;
+    issuer: string;
+    audience: string;
+    ttlSeconds: number;
+    payeesMode: "full" | "hashed";
+    title: string;
+    network: {
+        chainId: number;
+        usdc: string;
+        gateway: string;
+    };
+    /**
+     * Tie-break for the hashed-mode `payTo` (the advertised primary recipient).
+     * MUST match the gate's `PRIMARY_PAYEE_TIEBREAK` so the license names exactly
+     * the wallet the on-chain leg paid and the settlement record flags `primary`.
+     * Defaults to `"wallet"` (the shared default). Unused in `full` payees mode.
+     */
+    tieBreak?: TieBreak;
+    /**
+     * When set, mint a HOLDER-OF-KEY license bound to this wallet (the payer): a
+     * re-read must present a proof-of-possession signed by it. Omit for a v1 bearer
+     * license. Must be a real address — never the zero-address fallback.
+     */
+    popBindAddress?: string;
+}
+export type VerifyResult = {
+    ok: true;
+    claims: CitationLicenseClaims;
+} | {
+    ok: false;
+    error: string;
+};
+/** Stable key id = base64url(SHA-256(raw public key))[:16]. */
+export declare function kidFor(publicKey: KeyObject): string;
+/** The public JWK for a signing key. */
+export declare function publicJwk(key: SigningKey): Jwk;
+/** A JWK Set advertising every supplied key (publish at the JWKS endpoint). */
+export declare function jwksOf(keys: SigningKey[]): JwkSet;
+/**
+ * Resolve the signing key from a config secret, or generate an EPHEMERAL one.
+ *
+ * `secret` may be a PKCS8 PEM or base64-encoded PKCS8 DER Ed25519 private key.
+ * If absent, an ephemeral key is generated with a loud warning — acceptable ONLY
+ * for single-instance mock/dev; config.ts fails loud when a stable key is
+ * required (real money or a supabase/multi-instance backend).
+ */
+export declare function loadSigningKey(secret?: string): SigningKey;
+/**
+ * Mint a compact-JWS CLT from a settled event. Pure: takes an explicit `now` and
+ * reads only the in-memory event — never the EventSink.
+ */
+export declare function mintLicense(input: MintInput, key: SigningKey, now: number): string;
+/**
+ * Verify a CLT against a JWK Set, issuer, audience and clock. Fails closed on any
+ * defect. The algorithm is pinned to Ed25519 regardless of the token header, and
+ * the signature is checked over the literal received bytes before any claim is
+ * read. `now` is epoch ms (the caller's clock); claims are epoch seconds.
+ */
+export declare function verifyLicense(jws: string, opts: {
+    now: number;
+    expectedIssuer: string;
+    expectedAudience: string;
+    jwks: JwkSet;
+}): VerifyResult;
+/** The wallet a holder-of-key license is bound to, or null for a v1 bearer license. */
+export declare function popBoundAddress(claims: CitationLicenseClaims): string | null;
+/** The fields a proof-of-possession is bound to. */
+export interface PopChallenge {
+    /** The gate's identity (= license aud); pins the proof to one deployment. */
+    aud: string;
+    /** The license id; pins the proof to one license. */
+    jti: string;
+    /** The essay slug; pins the proof to one article (defense in depth over jti). */
+    slug: string;
+    /** Unix seconds the proof was created; the gate enforces a freshness window. */
+    ts: number;
+    /** Single-use random salt; the gate spends it once to stop replay in-window. */
+    nonce: string;
+}
+/**
+ * The canonical bytes a holder signs (EIP-191 personal_sign) and the gate
+ * reconstructs to recover the signer. Pure and deterministic — no clock, no
+ * crypto here, just a fixed-order newline framing so signer and verifier agree
+ * byte-for-byte. Reject any `\n` in inputs would be belt-and-braces; jti/nonce
+ * are hex, aud/slug are controlled, so the framing is unambiguous in practice.
+ */
+export declare function popMessage(c: PopChallenge): string;
+//# sourceMappingURL=license.d.ts.map

package/dist/license.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"license.d.ts","sourceRoot":"","sources":["../src/license.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAOL,KAAK,SAAS,EACf,MAAM,aAAa,CAAC;AAErB,OAAO,EAAgB,KAAK,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAI/D,sDAAsD;AACtD,MAAM,WAAW,GAAG;IAClB,GAAG,EAAE,KAAK,CAAC;IACX,GAAG,EAAE,SAAS,CAAC;IACf,CAAC,EAAE,MAAM,CAAC;IACV,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,KAAK,CAAC;IACX,GAAG,EAAE,OAAO,CAAC;CACd;AACD,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,GAAG,EAAE,CAAC;CACb;AAED,iFAAiF;AACjF,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,0DAA0D;AAC1D,MAAM,WAAW,WAAW;IAC1B,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;IAC9B,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D,aAAa,EAAE,MAAM,CAAC;IACtB,qCAAqC;IACrC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;IACvB,uCAAuC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,4EAA4E;AAC5E,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,WAAW,CAAC;IACpB,sEAAsE;IACtE,GAAG,CAAC,EAAE,iBAAiB,CAAC;CACzB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,eAAe,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAA;CAAE,GAC3C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAWjC,+DAA+D;AAC/D,wBAAgB,MAAM,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,CAEnD;AAED,wCAAwC;AACxC,wBAAgB,SAAS,CAAC,GAAG,EAAE,UAAU,GAAG,GAAG,CAS9C;AAED,+EAA+E;AAC/E,wBAAgB,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,MAAM,CAEjD;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,CAiB1D;AAuBD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAyClF;AAcD;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACpF,YAAY,CA+Dd;AAID,uFAAuF;AACvF,wBAAgB,eAAe,CAAC,MAAM,EAAE,qBAAqB,GAAG,MAAM,GAAG,IAAI,CAG5E;AAED,oDAAoD;AACpD,MAAM,WAAW,YAAY;IAC3B,6EAA6E;IAC7E,GAAG,EAAE,MAAM,CAAC;IACZ,qDAAqD;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAC;IACb,gFAAgF;IAChF,EAAE,EAAE,MAAM,CAAC;IACX,gFAAgF;IAChF,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,YAAY,GAAG,MAAM,CAUlD"}

package/dist/license.js

@@ -0,0 +1,252 @@
+/**
+ * Citation License Token (CLT) — sign + verify. See docs/citation-license.md.
+ *
+ * A CLT is a signed, independently verifiable receipt the tollgate hands an agent
+ * when it pays: proof of who paid, how much USDC, for which essay, to which
+ * author wallet(s), settled on-chain. It is a signed projection of the
+ * AttributedEvent already recorded per payment (jti = event.id). Re-presenting a
+ * valid unexpired CLT re-reads that essay free within a short window — so the toll
+ * becomes an asset the payer wants, not a tax it evades.
+ *
+ * Format: a strict RFC 7519 JWT, EdDSA-signed (Ed25519, node:crypto — no dep),
+ * verifiable by an unmodified jose/pyjwt client. Domain data lives under one
+ * namespaced `naulon` claim so it never shadows a registered JWT claim.
+ *
+ * SECURITY — two invariants this module enforces (a regression in either is a
+ * free-read bypass; see the adversarial tests in license.test.ts):
+ *   1. verify IGNORES the token's `alg` header and hard-pins Ed25519. The public
+ *      key is world-readable at the JWKS endpoint, so trusting `alg` would allow
+ *      alg:none and HMAC-with-the-public-key forgery. The verify routine is fixed
+ *      to crypto.verify over the LITERAL received bytes; claims are parsed only
+ *      AFTER the signature passes.
+ *   2. mint/verify are PURE and take an explicit `now` (no ambient clock in
+ *      shared). mint reads only in-memory event fields — never the EventSink — so
+ *      a record() failure after settle still yields a valid receipt.
+ */
+import { createHash, createPrivateKey, createPublicKey, generateKeyPairSync, sign, verify, } from "node:crypto";
+import { toAtomicUsdc } from "./networks.js";
+import { primaryPayee } from "./attribution.js";
+// ── Key handling ──────────────────────────────────────────────────────────────
+/** Raw 32-byte Ed25519 public key bytes (from the OKP `x` parameter). */
+function rawPublicKey(publicKey) {
+    const jwk = publicKey.export({ format: "jwk" });
+    if (!jwk.x)
+        throw new Error("not an Ed25519 (OKP) public key");
+    return Buffer.from(jwk.x, "base64url");
+}
+/** Stable key id = base64url(SHA-256(raw public key))[:16]. */
+export function kidFor(publicKey) {
+    return createHash("sha256").update(rawPublicKey(publicKey)).digest("base64url").slice(0, 16);
+}
+/** The public JWK for a signing key. */
+export function publicJwk(key) {
+    return {
+        kty: "OKP",
+        crv: "Ed25519",
+        x: rawPublicKey(key.publicKey).toString("base64url"),
+        kid: key.kid,
+        use: "sig",
+        alg: "EdDSA",
+    };
+}
+/** A JWK Set advertising every supplied key (publish at the JWKS endpoint). */
+export function jwksOf(keys) {
+    return { keys: keys.map(publicJwk) };
+}
+/**
+ * Resolve the signing key from a config secret, or generate an EPHEMERAL one.
+ *
+ * `secret` may be a PKCS8 PEM or base64-encoded PKCS8 DER Ed25519 private key.
+ * If absent, an ephemeral key is generated with a loud warning — acceptable ONLY
+ * for single-instance mock/dev; config.ts fails loud when a stable key is
+ * required (real money or a supabase/multi-instance backend).
+ */
+export function loadSigningKey(secret) {
+    let privateKey;
+    if (secret && secret.trim()) {
+        privateKey = parsePrivateKey(secret.trim());
+    }
+    else {
+        console.warn("[license] LICENSE_SIGNING_KEY not set — generating an EPHEMERAL Ed25519 key. " +
+            "Valid only for single-instance mock/dev: outstanding licenses break on restart and " +
+            "across instances. Set LICENSE_SIGNING_KEY for any real or multi-instance deploy.");
+        privateKey = generateKeyPairSync("ed25519").privateKey;
+    }
+    const publicKey = createPublicKey(privateKey);
+    if (publicKey.asymmetricKeyType !== "ed25519") {
+        throw new Error("LICENSE_SIGNING_KEY must be an Ed25519 private key");
+    }
+    return { privateKey, publicKey, kid: kidFor(publicKey) };
+}
+function parsePrivateKey(secret) {
+    if (secret.includes("BEGIN"))
+        return createPrivateKey(secret);
+    return createPrivateKey({ key: Buffer.from(secret, "base64"), format: "der", type: "pkcs8" });
+}
+// ── Mint ──────────────────────────────────────────────────────────────────────
+function b64urlJson(value) {
+    return Buffer.from(JSON.stringify(value), "utf8").toString("base64url");
+}
+/** Deterministic canonical JSON of payees (sorted, fixed field order) for hashing. */
+function canonicalPayees(payees) {
+    const sorted = [...payees].sort((a, b) => a.authorId.localeCompare(b.authorId) || a.wallet.localeCompare(b.wallet));
+    return JSON.stringify(sorted.map((p) => [p.authorId, p.wallet, p.share]));
+}
+/**
+ * Mint a compact-JWS CLT from a settled event. Pure: takes an explicit `now` and
+ * reads only the in-memory event — never the EventSink.
+ */
+export function mintLicense(input, key, now) {
+    const { event } = input;
+    const iat = Math.floor(now / 1000);
+    const naulon = {
+        v: 1,
+        slug: event.slug,
+        title: input.title,
+        kind: event.kind,
+        amount: toAtomicUsdc(event.amount),
+        currency: "USDC",
+        network: input.network,
+        settlementRef: event.settlementRef,
+    };
+    if (input.payeesMode === "hashed") {
+        naulon.payeesHash = createHash("sha256").update(canonicalPayees(event.payees)).digest("base64url");
+        naulon.payTo = primaryPayee(event.payees, input.tieBreak);
+    }
+    else {
+        naulon.payees = event.payees.map((p) => ({ authorId: p.authorId, wallet: p.wallet, share: p.share }));
+    }
+    const payload = {
+        iss: input.issuer,
+        aud: input.audience,
+        sub: event.payerAddress,
+        jti: event.id,
+        iat,
+        nbf: iat,
+        exp: iat + input.ttlSeconds,
+        naulon,
+    };
+    // Holder-of-key: bind the license to the payer wallet so a re-read needs a
+    // proof-of-possession, not just the token. Lowercased for a canonical compare.
+    if (input.popBindAddress) {
+        payload.cnf = { "naulon:addr": input.popBindAddress.toLowerCase() };
+    }
+    const header = { alg: "EdDSA", typ: "JWT", kid: key.kid };
+    const signingInput = `${b64urlJson(header)}.${b64urlJson(payload)}`;
+    const sig = sign(null, Buffer.from(signingInput, "ascii"), key.privateKey);
+    return `${signingInput}.${sig.toString("base64url")}`;
+}
+// ── Verify ──────────────────────────────────────────────────────────────────
+const BASE64URL = /^[A-Za-z0-9_-]+$/;
+// JOSE header params that change how a token is interpreted — reject them all.
+const FORBIDDEN_HEADER_PARAMS = ["crit", "jku", "x5u", "jwk", "x5c"];
+/** Negative clock-skew tolerance (seconds) on nbf/iat only. */
+const SKEW_SECONDS = 60;
+function fail(error) {
+    return { ok: false, error };
+}
+/**
+ * Verify a CLT against a JWK Set, issuer, audience and clock. Fails closed on any
+ * defect. The algorithm is pinned to Ed25519 regardless of the token header, and
+ * the signature is checked over the literal received bytes before any claim is
+ * read. `now` is epoch ms (the caller's clock); claims are epoch seconds.
+ */
+export function verifyLicense(jws, opts) {
+    if (typeof jws !== "string" || jws.length === 0)
+        return fail("empty token");
+    if (jws.length > 4096)
+        return fail("token too large");
+    const parts = jws.split(".");
+    if (parts.length !== 3)
+        return fail("malformed token (need 3 segments)");
+    const [h, p, s] = parts;
+    if (!BASE64URL.test(h) || !BASE64URL.test(p) || !BASE64URL.test(s)) {
+        return fail("non-base64url segment");
+    }
+    let header;
+    try {
+        header = JSON.parse(Buffer.from(h, "base64url").toString("utf8"));
+    }
+    catch {
+        return fail("undecodable header");
+    }
+    // Pin the algorithm — never select the verify routine from the header. This
+    // rejects alg:"none" and any HMAC (HS256-with-the-public-key) forgery.
+    if (header.alg !== "EdDSA")
+        return fail("unsupported alg (only EdDSA)");
+    if (header.typ !== "JWT")
+        return fail("unexpected typ");
+    for (const param of FORBIDDEN_HEADER_PARAMS) {
+        if (param in header)
+            return fail(`forbidden header param: ${param}`);
+    }
+    const kid = header.kid;
+    if (typeof kid !== "string")
+        return fail("missing kid");
+    const jwk = opts.jwks.keys.find((k) => k.kid === kid);
+    if (!jwk)
+        return fail("kid not in JWKS");
+    let publicKey;
+    try {
+        publicKey = createPublicKey({ key: jwk, format: "jwk" });
+    }
+    catch {
+        return fail("invalid JWKS key");
+    }
+    // Verify over the LITERAL received bytes — not a re-serialized payload.
+    const sigBytes = Buffer.from(s, "base64url");
+    let valid = false;
+    try {
+        valid = verify(null, Buffer.from(`${h}.${p}`, "ascii"), publicKey, sigBytes);
+    }
+    catch {
+        return fail("verification error");
+    }
+    if (!valid)
+        return fail("invalid signature");
+    // Only now is it safe to read claims.
+    let claims;
+    try {
+        claims = JSON.parse(Buffer.from(p, "base64url").toString("utf8"));
+    }
+    catch {
+        return fail("undecodable payload");
+    }
+    if (claims.iss !== opts.expectedIssuer)
+        return fail("issuer mismatch");
+    if (claims.aud !== opts.expectedAudience)
+        return fail("audience mismatch");
+    const nowSec = Math.floor(opts.now / 1000);
+    if (!Number.isFinite(claims.exp) || nowSec >= claims.exp)
+        return fail("expired");
+    if (Number.isFinite(claims.nbf) && nowSec < claims.nbf - SKEW_SECONDS)
+        return fail("not yet valid");
+    if (Number.isFinite(claims.iat) && claims.iat > nowSec + SKEW_SECONDS)
+        return fail("issued in the future");
+    return { ok: true, claims };
+}
+// ── Holder-of-key proof-of-possession (P5) ───────────────────────────────────
+/** The wallet a holder-of-key license is bound to, or null for a v1 bearer license. */
+export function popBoundAddress(claims) {
+    const addr = claims.cnf?.["naulon:addr"];
+    return typeof addr === "string" && addr ? addr.toLowerCase() : null;
+}
+/**
+ * The canonical bytes a holder signs (EIP-191 personal_sign) and the gate
+ * reconstructs to recover the signer. Pure and deterministic — no clock, no
+ * crypto here, just a fixed-order newline framing so signer and verifier agree
+ * byte-for-byte. Reject any `\n` in inputs would be belt-and-braces; jti/nonce
+ * are hex, aud/slug are controlled, so the framing is unambiguous in practice.
+ */
+export function popMessage(c) {
+    return [
+        "naulon-pop",
+        "v=1",
+        `aud=${c.aud}`,
+        `jti=${c.jti}`,
+        `slug=${c.slug}`,
+        `ts=${c.ts}`,
+        `nonce=${c.nonce}`,
+    ].join("\n");
+}
+//# sourceMappingURL=license.js.map

package/dist/license.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"license.js","sourceRoot":"","sources":["../src/license.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,IAAI,EACJ,MAAM,GAEP,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAiB,MAAM,kBAAkB,CAAC;AA8F/D,iFAAiF;AAEjF,yEAAyE;AACzE,SAAS,YAAY,CAAC,SAAoB;IACxC,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAmB,CAAC;IAClE,IAAI,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC/D,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;AACzC,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,MAAM,CAAC,SAAoB;IACzC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/F,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,SAAS,CAAC,GAAe;IACvC,OAAO;QACL,GAAG,EAAE,KAAK;QACV,GAAG,EAAE,SAAS;QACd,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QACpD,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,GAAG,EAAE,KAAK;QACV,GAAG,EAAE,OAAO;KACb,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,MAAM,CAAC,IAAkB;IACvC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;AACvC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,MAAe;IAC5C,IAAI,UAAqB,CAAC;IAC1B,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5B,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,IAAI,CACV,+EAA+E;YAC7E,qFAAqF;YACrF,kFAAkF,CACrF,CAAC;QACF,UAAU,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC;IACzD,CAAC;IACD,MAAM,SAAS,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,SAAS,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC9D,OAAO,gBAAgB,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAChG,CAAC;AAED,iFAAiF;AAEjF,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC1E,CAAC;AAED,sFAAsF;AACtF,SAAS,eAAe,CAAC,MAAqB;IAC5C,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CACnF,CAAC;IACF,OAAO,IAAI,CAAC,SAAS,CACnB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CACnD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,KAAgB,EAAE,GAAe,EAAE,GAAW;IACxE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IAEnC,MAAM,MAAM,GAAgB;QAC1B,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC;QAClC,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,aAAa,EAAE,KAAK,CAAC,aAAa;KACnC,CAAC;IACF,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACnG,MAAM,CAAC,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5D,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACxG,CAAC;IAED,MAAM,OAAO,GAA0B;QACrC,GAAG,EAAE,KAAK,CAAC,MAAM;QACjB,GAAG,EAAE,KAAK,CAAC,QAAQ;QACnB,GAAG,EAAE,KAAK,CAAC,YAAY;QACvB,GAAG,EAAE,KAAK,CAAC,EAAE;QACb,GAAG;QACH,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,GAAG,GAAG,KAAK,CAAC,UAAU;QAC3B,MAAM;KACP,CAAC;IACF,2EAA2E;IAC3E,+EAA+E;IAC/E,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,GAAG,EAAE,aAAa,EAAE,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE,EAAE,CAAC;IACtE,CAAC;IAED,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;IAC1D,MAAM,YAAY,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;IACpE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IAC3E,OAAO,GAAG,YAAY,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,+EAA+E;AAE/E,MAAM,SAAS,GAAG,kBAAkB,CAAC;AACrC,+EAA+E;AAC/E,MAAM,uBAAuB,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AACrE,+DAA+D;AAC/D,MAAM,YAAY,GAAG,EAAE,CAAC;AAExB,SAAS,IAAI,CAAC,KAAa;IACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAW,EACX,IAAqF;IAErF,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC;IAC5E,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI;QAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAEtD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACzE,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,KAAiC,CAAC;IACpD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,OAAO,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA4B,CAAC;IAC/F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACpC,CAAC;IACD,4EAA4E;IAC5E,uEAAuE;IACvE,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC,8BAA8B,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACxD,KAAK,MAAM,KAAK,IAAI,uBAAuB,EAAE,CAAC;QAC5C,IAAI,KAAK,IAAI,MAAM;YAAE,OAAO,IAAI,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IACvB,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC;IAExD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IACtD,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACzC,IAAI,SAAoB,CAAC;IACzB,IAAI,CAAC;QACH,SAAS,GAAG,eAAe,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAClC,CAAC;IAED,wEAAwE;IACxE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAC7C,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAE7C,sCAAsC;IACtC,IAAI,MAA6B,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA0B,CAAC;IAC7F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,cAAc;QAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACvE,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAE3E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,IAAI,MAAM,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC;IACjF,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,GAAG,MAAM,CAAC,GAAG,GAAG,YAAY;QAAE,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC;IACpG,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,GAAG,MAAM,GAAG,YAAY;QAAE,OAAO,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAE3G,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED,gFAAgF;AAEhF,uFAAuF;AACvF,MAAM,UAAU,eAAe,CAAC,MAA6B;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,CAAC;IACzC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAgBD;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,CAAe;IACxC,OAAO;QACL,YAAY;QACZ,KAAK;QACL,OAAO,CAAC,CAAC,GAAG,EAAE;QACd,OAAO,CAAC,CAAC,GAAG,EAAE;QACd,QAAQ,CAAC,CAAC,IAAI,EAAE;QAChB,MAAM,CAAC,CAAC,EAAE,EAAE;QACZ,SAAS,CAAC,CAAC,KAAK,EAAE;KACnB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}