@orangecheck/sdk 1.10.0 → 1.12.0

package/dist/nostr.d.mts

@@ -1,4 +1,4 @@
-import { A as AttestationEnvelope, c as NostrEvent, I as IdentityBinding } from './types-D9Tb1roj.mjs';
+import { A as AttestationEnvelope, c as NostrEvent, I as IdentityBinding } from './types-BBRMCgMo.mjs';
 
 declare const ATTESTATION_EVENT_KIND = 30078;
 declare const DEFAULT_RELAYS: string[];

package/dist/nostr.d.ts

@@ -1,4 +1,4 @@
-import { A as AttestationEnvelope, c as NostrEvent, I as IdentityBinding } from './types-D9Tb1roj.js';
+import { A as AttestationEnvelope, c as NostrEvent, I as IdentityBinding } from './types-BBRMCgMo.js';
 
 declare const ATTESTATION_EVENT_KIND = 30078;
 declare const DEFAULT_RELAYS: string[];

package/dist/{types-D9Tb1roj.d.mts → types-BBRMCgMo.d.mts}

@@ -14,6 +14,7 @@ interface VerifyOptions {
     esploraMainnetBase?: string;
     esploraSignetBase?: string;
     esploraTestnetBase?: string;
+    coverSats?: number;
 }
 interface VerifyInput {
     addr?: string;

package/dist/{types-D9Tb1roj.d.ts → types-BBRMCgMo.d.ts}

@@ -14,6 +14,7 @@ interface VerifyOptions {
     esploraMainnetBase?: string;
     esploraSignetBase?: string;
     esploraTestnetBase?: string;
+    coverSats?: number;
 }
 interface VerifyInput {
     addr?: string;

package/dist/verify.d.mts

@@ -1,5 +1,5 @@
 export { ScoringAlgorithm, computeAllScores, computeScore } from './scoring.mjs';
-import { V as VerifyInput, a as VerifyOptions, b as VerifyOutcome, I as IdentityBinding, N as Network } from './types-D9Tb1roj.mjs';
+import { V as VerifyInput, a as VerifyOptions, b as VerifyOutcome, I as IdentityBinding, N as Network } from './types-BBRMCgMo.mjs';
 
 declare function parseCanonicalMessage(msg: string): {
     core: {

package/dist/verify.d.ts

@@ -1,5 +1,5 @@
 export { ScoringAlgorithm, computeAllScores, computeScore } from './scoring.js';
-import { V as VerifyInput, a as VerifyOptions, b as VerifyOutcome, I as IdentityBinding, N as Network } from './types-D9Tb1roj.js';
+import { V as VerifyInput, a as VerifyOptions, b as VerifyOutcome, I as IdentityBinding, N as Network } from './types-BBRMCgMo.js';
 
 declare function parseCanonicalMessage(msg: string): {
     core: {

package/dist/verify.js

@@ -1,28 +1,7 @@
 'use strict';
 
 var buffer = require('buffer');
-var bip322Js = require('bip322-js');
-var bitcoinMessage = require('bitcoinjs-message');
-
-function _interopNamespace(e) {
-  if (e && e.__esModule) return e;
-  var n = Object.create(null);
-  if (e) {
-    Object.keys(e).forEach(function (k) {
-      if (k !== 'default') {
-        var d = Object.getOwnPropertyDescriptor(e, k);
-        Object.defineProperty(n, k, d.get ? d : {
-          enumerable: true,
-          get: function () { return e[k]; }
-        });
-      }
-    });
-  }
-  n.default = e;
-  return Object.freeze(n);
-}
-
-var bitcoinMessage__namespace = /*#__PURE__*/_interopNamespace(bitcoinMessage);
+var bip322 = require('@orangecheck/bip322');
 
 // src/verify.ts
 
@@ -175,87 +154,79 @@ async function verifySignature({
   sig,
   scheme
 }) {
-  try {
-    const detectedScheme = scheme || detectSignatureScheme(addr, sig);
+  const detectedScheme = scheme || detectSignatureScheme(addr, sig);
+  log.debug(
+    { addr, msgLength: msg.length, sigLength: sig.length, scheme: detectedScheme },
+    "Verifying signature"
+  );
+  if (detectedScheme === "bip322") {
+    const sigBase64 = toBase64Maybe(sig);
     log.debug(
-      { addr, msgLength: msg.length, sigLength: sig.length, scheme: detectedScheme },
-      "Verifying signature"
+      { sigBase64: sigBase64.substring(0, 50) + "..." },
+      "Signature converted to base64"
     );
-    if (detectedScheme === "bip322") {
-      const sigBase64 = toBase64Maybe(sig);
-      log.debug(
-        { sigBase64: sigBase64.substring(0, 50) + "..." },
-        "Signature converted to base64"
-      );
-      log.debug(
-        {
-          msgFull: msg,
-          msgLines: msg.split("\n").length,
-          msgFirstLine: msg.split("\n")[0],
-          msgLastLine: msg.split("\n")[msg.split("\n").length - 1]
-        },
-        "Message being verified"
-      );
-      const ok = bip322Js.Verifier.verifySignature(addr, msg, sigBase64);
-      log.info({ addr, ok }, "BIP-322 verification result");
-      if (!ok) {
-        const isSegWit = addr.startsWith("bc1") || addr.startsWith("tb1");
-        if (isSegWit && sigBase64.length === 88) {
-          log.warn(
-            { addr, wallet: "possibly Electrum", sigLength: sigBase64.length },
-            "BIP-322 verification failed - likely Electrum wallet (does not support BIP-322 for SegWit)"
-          );
-        } else {
-          log.error(
-            {
-              addr,
-              sigLength: sigBase64.length,
-              msgLength: msg.length,
-              msgPreview: msg.substring(0, 200)
-            },
-            "BIP-322 verification failed - signature does not match message"
-          );
-        }
-      }
-      return ok ? "sig_ok_bip322" : "sig_invalid";
-    }
-    if (detectedScheme === "legacy") {
-      const sigBase64 = toBase64Maybe(sig);
-      if (!addr.startsWith("1") && !addr.startsWith("m") && !addr.startsWith("n")) {
-        log.warn({ addr }, "Legacy signature attempted on non-P2PKH address");
-        return "sig_unsupported_script";
-      }
-      log.debug(
-        {
-          addr,
-          sigBase64: sigBase64.substring(0, 50) + "...",
-          msgPreview: msg.substring(0, 100) + "...",
-          msgLength: msg.length
-        },
-        "Verifying legacy signature"
-      );
-      const ok = bitcoinMessage__namespace.verify(msg, addr, sigBase64);
-      log.info({ addr, ok, sigBase64Length: sigBase64.length }, "Legacy verification result");
-      if (!ok) {
+    log.debug(
+      {
+        msgFull: msg,
+        msgLines: msg.split("\n").length,
+        msgFirstLine: msg.split("\n")[0],
+        msgLastLine: msg.split("\n")[msg.split("\n").length - 1]
+      },
+      "Message being verified"
+    );
+    const ok = bip322.verifySignature(addr, msg, sigBase64);
+    log.info({ addr, ok }, "BIP-322 verification result");
+    if (!ok) {
+      const isSegWit = addr.startsWith("bc1") || addr.startsWith("tb1");
+      if (isSegWit && sigBase64.length === 88) {
+        log.warn(
+          { addr, wallet: "possibly Electrum", sigLength: sigBase64.length },
+          "BIP-322 verification failed - likely Electrum wallet (does not support BIP-322 for SegWit)"
+        );
+      } else {
         log.error(
           {
             addr,
-            msgFirstLine: msg.split("\n")[0],
-            sigFormat: sigBase64.substring(0, 10)
+            sigLength: sigBase64.length,
+            msgLength: msg.length,
+            msgPreview: msg.substring(0, 200)
           },
-          "Legacy signature verification failed - check message format and signature"
+          "BIP-322 verification failed - signature does not match message"
         );
       }
-      return ok ? "sig_ok_legacy" : "sig_invalid";
     }
-    return "invalid_scheme";
-  } catch (err) {
-    log.error(
-      { addr, error: err instanceof Error ? err.message : String(err) },
-      "Signature verification error"
+    return ok ? "sig_ok_bip322" : "sig_invalid";
+  }
+  if (detectedScheme === "legacy") {
+    const sigBase64 = toBase64Maybe(sig);
+    if (!addr.startsWith("1") && !addr.startsWith("m") && !addr.startsWith("n")) {
+      log.warn({ addr }, "Legacy signature attempted on non-P2PKH address");
+      return "sig_unsupported_script";
+    }
+    log.debug(
+      {
+        addr,
+        sigBase64: sigBase64.substring(0, 50) + "...",
+        msgPreview: msg.substring(0, 100) + "...",
+        msgLength: msg.length
+      },
+      "Verifying legacy signature"
     );
-    return "sig_invalid";
+    const ok = bip322.verifySignature(addr, msg, sigBase64);
+    log.info({ addr, ok, sigBase64Length: sigBase64.length }, "Legacy verification result");
+    if (!ok) {
+      log.error(
+        {
+          addr,
+          msgFirstLine: msg.split("\n")[0],
+          sigFormat: sigBase64.substring(0, 10)
+        },
+        "Legacy signature verification failed - check message format and signature"
+      );
+    }
+    return ok ? "sig_ok_legacy" : "sig_invalid";
   }
+  return "invalid_scheme";
 }
 function parseCanonicalMessage(msg) {
   const lines = msg.split("\n").map((l) => l.trim());
@@ -347,7 +318,7 @@ async function getAddressUtxos(address, network, opts) {
   log.error({ endpoints, error: lastError?.message, network }, "All Esplora endpoints failed");
   throw new Error(`esplora_all_failed: ${lastError?.message || "unknown"}`);
 }
-function computeMetrics(utxos, bondAmount) {
+function computeMetrics(utxos, bondAmount, coverSats) {
   const confirmedUtxos = utxos.filter((u) => u.status.confirmed);
   if (confirmedUtxos.length === 0) {
     return { sats_bonded: 0, days_unspent: 0, confirmed_balance: 0 };
@@ -380,13 +351,30 @@ function computeMetrics(utxos, bondAmount) {
     };
   }
   const sats_bonded = confirmed_balance;
+  if (coverSats !== void 0 && coverSats > 0) {
+    const sorted = [...confirmedUtxos].sort(
+      (a, b) => (a.status.block_height ?? Infinity) - (b.status.block_height ?? Infinity)
+    );
+    let sum = 0;
+    let youngestTime = 0;
+    for (const utxo of sorted) {
+      sum += utxo.value;
+      youngestTime = Math.max(youngestTime, utxo.status.block_time || Date.now() / 1e3);
+      if (sum >= coverSats) break;
+    }
+    const days_unspent2 = Math.max(
+      0,
+      Math.floor((Date.now() / 1e3 - youngestTime) / (24 * 60 * 60))
+    );
+    return { sats_bonded, days_unspent: days_unspent2, confirmed_balance };
+  }
   const oldestTime = Math.min(
     ...confirmedUtxos.map((u) => u.status.block_time || Date.now() / 1e3)
   );
   const days_unspent = Math.max(0, Math.floor((Date.now() / 1e3 - oldestTime) / (24 * 60 * 60)));
   return { sats_bonded, days_unspent, confirmed_balance };
 }
-async function verify2(input, opts = {}) {
+async function verify(input, opts = {}) {
   const codes = [];
   let network = "mainnet";
   try {
@@ -443,7 +431,8 @@ async function verify2(input, opts = {}) {
       });
       const { sats_bonded, days_unspent, confirmed_balance } = computeMetrics(
         utxos,
-        parsed.bond
+        parsed.bond,
+        opts.coverSats
       );
       if (parsed.bond !== void 0 && parsed.bond > 0) {
         if (confirmed_balance < parsed.bond) {
@@ -512,6 +501,6 @@ async function verify2(input, opts = {}) {
 exports.computeAllScores = computeAllScores;
 exports.computeScore = computeScore;
 exports.parseCanonicalMessage = parseCanonicalMessage;
-exports.verify = verify2;
+exports.verify = verify;
 //# sourceMappingURL=verify.js.map
 //# sourceMappingURL=verify.js.map

package/dist/verify.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/canonical.ts","../src/scoring.ts","../src/utils/logger.ts","../src/verify.ts"],"names":["Buffer","Verifier","bitcoinMessage","days_unspent","verify"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,SAAS,WAAW,KAAA,EAA2B;AAC3C,EAAA,OAAO,MAAM,IAAA,CAAK,KAAK,CAAA,CAClB,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,QAAA,CAAS,EAAE,EAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAC1C,KAAK,EAAE,CAAA;AAChB;AAmCA,IAAM,oBAAA,GAAuB,oBAAA;AAC7B,IAAM,wBAAA,GAA2B,SAAA;AAEjC,SAAS,kBAAA,CAAmB,EAAE,QAAA,EAAU,UAAA,EAAW,EAA0B;AACzE,EAAA,IAAI,CAAC,oBAAA,CAAqB,IAAA,CAAK,QAAQ,CAAA,EAAG;AACtC,IAAA,MAAM,IAAI,KAAA;AAAA,MACN,CAAA,2BAAA,EAA8B,IAAA,CAAK,SAAA,CAAU,QAAQ,CAAC,CAAA,uCAAA;AAAA,KAC1D;AAAA,EACJ;AACA,EAAA,IAAI,CAAC,UAAA,IAAc,wBAAA,CAAyB,IAAA,CAAK,UAAU,CAAA,EAAG;AAC1D,IAAA,MAAM,IAAI,KAAA;AAAA,MACN,CAAA,6BAAA,EAAgC,IAAA,CAAK,SAAA,CAAU,UAAU,CAAC,CAAA,2DAAA;AAAA,KAC9D;AAAA,EACJ;AACJ;AA2BO,SAAS,gBAAgB,aAAA,EAA0C;AACtE,EAAA,IAAI,CAAC,aAAA,IAAiB,aAAA,CAAc,IAAA,OAAW,EAAA,EAAI;AAC/C,IAAA,OAAO,EAAC;AAAA,EACZ;AAIA,EAAA,IAAI,yBAAyB,IAAA,CAAK,aAAA,CAAc,QAAQ,IAAA,EAAM,EAAE,CAAC,CAAA,EAAG;AAChE,IAAA,MAAM,IAAI,MAAM,0DAA0D,CAAA;AAAA,EAC9E;AAEA,EAAA,MAAM,WAAW,aAAA,CAAc,KAAA,CAAM,GAAG,CAAA,CAAE,GAAA,CAAI,CAAC,OAAA,KAAY;AACvD,IAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,OAAA,CAAQ,GAAG,CAAA;AACtC,IAAA,IAAI,eAAe,EAAA,EAAI;AACnB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,iCAAA,EAAoC,OAAO,CAAA,CAAE,CAAA;AAAA,IACjE;AACA,IAAA,OAAO;AAAA,MACH,UAAU,OAAA,CAAQ,SAAA,CAAU,CAAA,EAAG,UAAU,EAAE,IAAA,EAAK;AAAA,MAChD,YAAY,OAAA,CAAQ,SAAA,CAAU,UAAA,GAAa,CAAC,EAAE,IAAA;AAAK,KACvD;AAAA,EACJ,CAAC,CAAA;AAED,EAAA,KAAA,MAAW,KAAK,QAAA,EAAU;AACtB,IAAA,IAAI,CAAC,CAAA,CAAE,QAAA,IAAY,CAAC,EAAE,UAAA,EAAY;AAC9B,MAAA,MAAM,IAAI,MAAM,CAAA,0BAAA,EAA6B,CAAA,CAAE,QAAQ,CAAA,CAAA,EAAI,CAAA,CAAE,UAAU,CAAA,CAAE,CAAA;AAAA,IAC7E;AACA,IAAA,kBAAA,CAAmB,CAAC,CAAA;AAAA,EACxB;AACA,EAAA,OAAO,QAAA;AACX;AA0EA,eAAsB,sBAAsB,OAAA,EAAkC;AAE1E,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAChC,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA;AAGnC,EAAA,MAAM,aAAa,MAAM,MAAA,CAAO,MAAA,CAAO,MAAA,CAAO,WAAW,IAAI,CAAA;AAG7D,EAAA,OAAO,UAAA,CAAW,IAAI,UAAA,CAAW,UAAU,CAAC,CAAA;AAChD;;;AC5MA,SAAS,OAAA,CAAQ,MAAc,IAAA,EAAsB;AACjD,EAAA,IAAI,IAAA,IAAQ,CAAA,IAAK,IAAA,IAAQ,CAAA,EAAG,OAAO,CAAA;AACnC,EAAA,OAAO,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,CAAI,CAAA,GAAI,IAAI,CAAA,IAAK,CAAA,GAAI,IAAA,GAAO,EAAA,CAAA,GAAM,GAAG,CAAA,GAAI,GAAA;AACpE;AAEA,SAAS,SAAA,CAAU,MAAc,IAAA,EAAoB;AACjD,EAAA,IAAI,IAAA,IAAQ,GAAA,IAAc,IAAA,IAAQ,GAAA,EAAK,OAAO,UAAA;AAC9C,EAAA,IAAI,IAAA,IAAQ,GAAA,IAAa,IAAA,IAAQ,GAAA,EAAK,OAAO,MAAA;AAC7C,EAAA,IAAI,IAAA,IAAQ,GAAA,IAAW,IAAA,IAAQ,EAAA,EAAI,OAAO,QAAA;AAC1C,EAAA,IAAI,IAAA,IAAQ,GAAA,IAAU,IAAA,IAAQ,EAAA,EAAI,OAAO,QAAA;AACzC,EAAA,OAAO,MAAA;AACX;AAEO,SAAS,YAAA,CAAa,IAAA,EAAc,IAAA,EAAc,MAAA,EAAoC;AACzF,EAAA,QAAQ,OAAO,SAAA;AAAW,IACtB,KAAK,IAAA;AACD,MAAA,OAAO,OAAA,CAAQ,MAAM,IAAI,CAAA;AAAA,IAC7B,KAAK,MAAA;AACD,MAAA,OAAO,SAAA,CAAU,MAAM,IAAI,CAAA;AAAA,IAC/B,KAAK,MAAA;AACD,MAAA,OAAO,IAAA;AAAA;AAEnB;AAEO,SAAS,gBAAA,CAAiB,MAAc,IAAA,EAAc;AACzD,EAAA,OAAO,EAAE,EAAA,EAAI,OAAA,CAAQ,IAAA,EAAM,IAAI,GAAG,IAAA,EAAM,SAAA,CAAU,IAAA,EAAM,IAAI,CAAA,EAAE;AAClE;ACGO,SAAS,aAAa,SAAA,EAA2B;AACpD,EAAA,MAAM,SAAA,GAAY,CAAC,KAAA,KAA8C;AAC7D,IAAyB,OAAO,KAAA;AAMJ,EAChC,CAAA;AAEA,EAAA,MAAM,gBAAgB,CAAC,GAAA,KAAwB,CAAA,CAAA,EAAI,SAAS,KAAK,GAAG,CAAA,CAAA;AAEpE,EAAA,OAAO;AAAA,IACH,KAAA,EAAO,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACtE,MAAA,IAAI,SAAA,CAAiB,CAAA,EAAG;AACpB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QACjD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,OAAA,IAAW,OAAO,GAAG,gBAAgB,CAAA;AAAA,QACrE;AAAA,MACJ;AAAA,IACJ,CAAA;AAAA,IACA,IAAA,EAAM,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACrE,MAAA,IAAI,SAAA,CAAgB,CAAA,EAAG;AACnB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QAChD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,OAAA,IAAW,MAAM,GAAG,gBAAgB,CAAA;AAAA,QACnE;AAAA,MACJ;AAAA,IACJ,CAAA;AAAA,IACA,IAAA,EAAM,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACrE,MAAA,IAAI,SAAA,CAAgB,CAAA,EAAG;AACnB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QAChD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,OAAA,IAAW,SAAS,GAAG,gBAAgB,CAAA;AAAA,QACtE;AAAA,MACJ;AAAA,IACJ,CAAA;AAAA,IACA,KAAA,EAAO,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACtE,MAAA,IAAI,SAAA,CAAiB,CAAA,EAAG;AACpB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QACjD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,OAAA,IAAW,OAAO,GAAG,gBAAgB,CAAA;AAAA,QACrE;AAAA,MACJ;AAAA,IACJ;AAAA,GACJ;AACJ;;;ACvEA,IAAM,GAAA,GAAM,aAAa,YAAY,CAAA;AAqCrC,SAAS,aAAa,CAAA,EAAoB;AACtC,EAAA,OAAO,iBAAiB,IAAA,CAAK,CAAC,CAAA,IAAK,CAAA,CAAE,SAAS,CAAA,KAAM,CAAA;AACxD;AAOA,SAAS,cAAc,GAAA,EAAqB;AACxC,EAAA,IAAI,YAAA,CAAa,GAAG,CAAA,EAAG;AACnB,IAAA,OAAOA,cAAO,IAAA,CAAK,GAAA,EAAK,KAAK,CAAA,CAAE,SAAS,QAAQ,CAAA;AAAA,EACpD;AACA,EAAA,OAAO,GAAA;AACX;AASA,SAAS,qBAAA,CAAsB,MAAc,GAAA,EAAqB;AAE9D,EAAA,MAAM,WAAW,IAAA,CAAK,UAAA,CAAW,KAAK,CAAA,IAAK,IAAA,CAAK,WAAW,KAAK,CAAA;AAChE,EAAA,IAAI,QAAA,EAAU;AACV,IAAA,OAAO,QAAA;AAAA,EACX;AAGA,EAAA,MAAM,SAAA,GAAY,cAAc,GAAG,CAAA;AACnC,EAAA,MAAM,kBAAkB,SAAA,CAAU,MAAA,KAAW,EAAA,IAAM,QAAA,CAAS,KAAK,SAAS,CAAA;AAE1E,EAAA,IAAI,eAAA,EAAiB;AACjB,IAAA,OAAO,QAAA;AAAA,EACX;AAGA,EAAA,OAAO,QAAA;AACX;AAEA,eAAe,eAAA,CAAgB;AAAA,EAC3B,IAAA;AAAA,EACA,GAAA;AAAA,EACA,GAAA;AAAA,EACA;AACJ,CAAA,EAA8C;AAC1C,EAAA,IAAI;AAEA,IAAA,MAAM,cAAA,GAAiB,MAAA,IAAU,qBAAA,CAAsB,IAAA,EAAM,GAAG,CAAA;AAEhE,IAAA,GAAA,CAAI,KAAA;AAAA,MACA,EAAE,MAAM,SAAA,EAAW,GAAA,CAAI,QAAQ,SAAA,EAAW,GAAA,CAAI,MAAA,EAAQ,MAAA,EAAQ,cAAA,EAAe;AAAA,MAC7E;AAAA,KACJ;AAEA,IAAA,IAAI,mBAAmB,QAAA,EAAU;AAC7B,MAAA,MAAM,SAAA,GAAY,cAAc,GAAG,CAAA;AACnC,MAAA,GAAA,CAAI,KAAA;AAAA,QACA,EAAE,SAAA,EAAW,SAAA,CAAU,UAAU,CAAA,EAAG,EAAE,IAAI,KAAA,EAAM;AAAA,QAChD;AAAA,OACJ;AAGA,MAAA,GAAA,CAAI,KAAA;AAAA,QACA;AAAA,UACI,OAAA,EAAS,GAAA;AAAA,UACT,QAAA,EAAU,GAAA,CAAI,KAAA,CAAM,IAAI,CAAA,CAAE,MAAA;AAAA,UAC1B,YAAA,EAAc,GAAA,CAAI,KAAA,CAAM,IAAI,EAAE,CAAC,CAAA;AAAA,UAC/B,WAAA,EAAa,GAAA,CAAI,KAAA,CAAM,IAAI,CAAA,CAAE,IAAI,KAAA,CAAM,IAAI,CAAA,CAAE,MAAA,GAAS,CAAC;AAAA,SAC3D;AAAA,QACA;AAAA,OACJ;AAEA,MAAA,MAAM,EAAA,GAAKC,iBAAA,CAAS,eAAA,CAAgB,IAAA,EAAM,KAAK,SAAS,CAAA;AACxD,MAAA,GAAA,CAAI,IAAA,CAAK,EAAE,IAAA,EAAM,EAAA,IAAM,6BAA6B,CAAA;AAEpD,MAAA,IAAI,CAAC,EAAA,EAAI;AAEL,QAAA,MAAM,WAAW,IAAA,CAAK,UAAA,CAAW,KAAK,CAAA,IAAK,IAAA,CAAK,WAAW,KAAK,CAAA;AAChE,QAAA,IAAI,QAAA,IAAY,SAAA,CAAU,MAAA,KAAW,EAAA,EAAI;AACrC,UAAA,GAAA,CAAI,IAAA;AAAA,YACA,EAAE,IAAA,EAAM,MAAA,EAAQ,mBAAA,EAAqB,SAAA,EAAW,UAAU,MAAA,EAAO;AAAA,YACjE;AAAA,WACJ;AAAA,QACJ,CAAA,MAAO;AACH,UAAA,GAAA,CAAI,KAAA;AAAA,YACA;AAAA,cACI,IAAA;AAAA,cACA,WAAW,SAAA,CAAU,MAAA;AAAA,cACrB,WAAW,GAAA,CAAI,MAAA;AAAA,cACf,UAAA,EAAY,GAAA,CAAI,SAAA,CAAU,CAAA,EAAG,GAAG;AAAA,aACpC;AAAA,YACA;AAAA,WACJ;AAAA,QACJ;AAAA,MACJ;AAEA,MAAA,OAAO,KAAK,eAAA,GAAkB,aAAA;AAAA,IAClC;AAEA,IAAA,IAAI,mBAAmB,QAAA,EAAU;AAC7B,MAAA,MAAM,SAAA,GAAY,cAAc,GAAG,CAAA;AAGnC,MAAA,IAAI,CAAC,IAAA,CAAK,UAAA,CAAW,GAAG,KAAK,CAAC,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,IAAK,CAAC,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,EAAG;AACzE,QAAA,GAAA,CAAI,IAAA,CAAK,EAAE,IAAA,EAAK,EAAG,iDAAiD,CAAA;AACpE,QAAA,OAAO,wBAAA;AAAA,MACX;AAEA,MAAA,GAAA,CAAI,KAAA;AAAA,QACA;AAAA,UACI,IAAA;AAAA,UACA,SAAA,EAAW,SAAA,CAAU,SAAA,CAAU,CAAA,EAAG,EAAE,CAAA,GAAI,KAAA;AAAA,UACxC,UAAA,EAAY,GAAA,CAAI,SAAA,CAAU,CAAA,EAAG,GAAG,CAAA,GAAI,KAAA;AAAA,UACpC,WAAW,GAAA,CAAI;AAAA,SACnB;AAAA,QACA;AAAA,OACJ;AACA,MAAA,MAAM,EAAA,GAAoBC,yBAAA,CAAA,MAAA,CAAO,GAAA,EAAK,IAAA,EAAM,SAAS,CAAA;AACrD,MAAA,GAAA,CAAI,IAAA,CAAK,EAAE,IAAA,EAAM,EAAA,EAAI,iBAAiB,SAAA,CAAU,MAAA,IAAU,4BAA4B,CAAA;AACtF,MAAA,IAAI,CAAC,EAAA,EAAI;AACL,QAAA,GAAA,CAAI,KAAA;AAAA,UACA;AAAA,YACI,IAAA;AAAA,YACA,YAAA,EAAc,GAAA,CAAI,KAAA,CAAM,IAAI,EAAE,CAAC,CAAA;AAAA,YAC/B,SAAA,EAAW,SAAA,CAAU,SAAA,CAAU,CAAA,EAAG,EAAE;AAAA,WACxC;AAAA,UACA;AAAA,SACJ;AAAA,MACJ;AACA,MAAA,OAAO,KAAK,eAAA,GAAkB,aAAA;AAAA,IAClC;AAEA,IAAA,OAAO,gBAAA;AAAA,EACX,SAAS,GAAA,EAAK;AACV,IAAA,GAAA,CAAI,KAAA;AAAA,MACA,EAAE,MAAM,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAA,EAAE;AAAA,MAChE;AAAA,KACJ;AACA,IAAA,OAAO,aAAA;AAAA,EACX;AACJ;AAGO,SAAS,sBAAsB,GAAA,EAAa;AAC/C,EAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,KAAA,CAAM,IAAI,CAAA,CAAE,IAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAM,CAAA;AAKjD,EAAA,MAAM,MAAA,GAAS,CAAC,MAAA,KAAuC;AACnD,IAAA,MAAM,SAAS,MAAA,GAAS,GAAA;AACxB,IAAA,MAAM,GAAA,GAAM,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,KAAM,EAAE,WAAA,EAAY,CAAE,UAAA,CAAW,MAAM,CAAC,CAAA;AAChE,IAAA,IAAI,CAAC,KAAK,OAAO,MAAA;AACjB,IAAA,MAAM,GAAA,GAAM,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA;AAC3B,IAAA,OAAO,GAAA,CAAI,KAAA,CAAM,GAAA,GAAM,CAAC,EAAE,IAAA,EAAK;AAAA,EACnC,CAAA;AAEA,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,SAAS,CAAA,IAAK,EAAA;AACrC,EAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,YAAY,CAAA,IAAK,EAAA;AAG9C,EAAA,IAAI,aAAgC,EAAC;AACrC,EAAA,IAAI;AACA,IAAA,UAAA,GAAa,gBAAgB,aAAa,CAAA;AAAA,EAC9C,SAAS,GAAA,EAAK;AACV,IAAA,GAAA,CAAI,KAAK,EAAE,aAAA,EAAe,KAAA,EAAO,GAAA,IAAO,kCAAkC,CAAA;AAAA,EAC9E;AAGA,EAAA,MAAM,QAAA,uBAAe,GAAA,CAAI;AAAA,IACrB,aAAA;AAAA,IACA,YAAA;AAAA,IACA,SAAA;AAAA,IACA,SAAA;AAAA,IACA,OAAA;AAAA,IACA,WAAA;AAAA,IACA;AAAA,GACH,CAAA;AACD,EAAA,MAAM,aAAqC,EAAC;AAC5C,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACtB,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAC5B,IAAA,IAAI,QAAQ,EAAA,EAAI;AAChB,IAAA,MAAM,GAAA,GAAM,KAAK,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA,CAAE,IAAA,GAAO,WAAA,EAAY;AAClD,IAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,GAAA,GAAM,CAAC,EAAE,IAAA,EAAK;AACrC,IAAA,IAAI,CAAC,SAAS,GAAA,CAAI,GAAG,KAAK,GAAA,EAAK,UAAA,CAAW,GAAG,CAAA,GAAI,GAAA;AAAA,EACrD;AAEA,EAAA,MAAM,OAAA,GAAW,UAAA,CAAW,SAAS,CAAA,IAAK,SAAA;AAG1C,EAAA,MAAM,OAAA,GAAU,WAAW,MAAM,CAAA;AACjC,EAAA,MAAM,IAAA,GAAO,OAAA,GAAU,QAAA,CAAS,OAAA,EAAS,EAAE,CAAA,GAAI,MAAA;AAE/C,EAAA,OAAO;AAAA,IACH,IAAA,EAAM,EAAE,OAAA,EAAS,UAAA,EAAW;AAAA,IAC5B,OAAA;AAAA,IACA,UAAA;AAAA,IACA,IAAA,EAAM,SAAS,MAAA,IAAa,CAAC,MAAM,IAAI,CAAA,IAAK,IAAA,GAAO,CAAA,GAAI,IAAA,GAAO;AAAA,GAClE;AACJ;AAkCA,eAAe,eAAA,CACX,OAAA,EACA,OAAA,EACA,IAAA,EAKsB;AAEtB,EAAA,MAAM,SAAA,GACF,YAAY,QAAA,GACN;AAAA,IACI,MAAM,iBAAA,IAAqB,kCAAA;AAAA,IAC3B;AAAA,GACJ,GACA,YAAY,SAAA,GACV;AAAA,IACI,MAAM,kBAAA,IAAsB,mCAAA;AAAA,IAC5B;AAAA,GACJ,GACA;AAAA,IACI,MAAM,kBAAA,IAAsB,2BAAA;AAAA,IAC5B;AAAA,GACJ;AAEZ,EAAA,IAAI,SAAA,GAA0B,IAAA;AAK9B,EAAA,KAAA,MAAW,QAAQ,SAAA,EAAW;AAC1B,IAAA,IAAI;AACA,MAAA,MAAM,GAAA,GAAM,CAAA,EAAG,IAAI,CAAA,SAAA,EAAY,OAAO,CAAA,KAAA,CAAA;AACtC,MAAA,GAAA,CAAI,KAAA,CAAM,EAAE,GAAA,EAAK,OAAA,IAAW,gBAAgB,CAAA;AAE5C,MAAA,MAAM,IAAA,GAAO,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,QAC1B,MAAA,EAAQ,KAAA;AAAA,QACR,OAAA,EAAS,EAAE,MAAA,EAAQ,kBAAA,EAAmB;AAAA,QACtC,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,GAAI;AAAA,OACnC,CAAA;AAED,MAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AACV,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,KAAA,EAAQ,IAAA,CAAK,MAAM,CAAA,CAAE,CAAA;AAAA,MACzC;AAEA,MAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,EAAK;AAG7B,MAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,EAAG;AACtB,QAAA,MAAM,IAAI,MAAM,kCAAkC,CAAA;AAAA,MACtD;AAGA,MAAA,KAAA,MAAW,QAAQ,IAAA,EAAM;AACrB,QAAA,IACI,OAAO,KAAK,KAAA,KAAU,QAAA,IACtB,OAAO,IAAA,CAAK,MAAA,KAAW,YACvB,OAAO,IAAA,CAAK,OAAO,SAAA,KAAc,SAAA,IACjC,OAAO,IAAA,CAAK,IAAA,KAAS,YACrB,OAAO,IAAA,CAAK,SAAS,QAAA,EACvB;AACE,UAAA,MAAM,IAAI,MAAM,wBAAwB,CAAA;AAAA,QAC5C;AAAA,MACJ;AAEA,MAAA,GAAA,CAAI,IAAA,CAAK,EAAE,IAAA,EAAM,KAAA,EAAO,KAAK,MAAA,EAAQ,OAAA,IAAW,4BAA4B,CAAA;AAC5E,MAAA,OAAO,IAAA;AAAA,IACX,SAAS,GAAA,EAAK;AACV,MAAA,SAAA,GAAY,eAAe,KAAA,GAAQ,GAAA,GAAM,IAAI,KAAA,CAAM,MAAA,CAAO,GAAG,CAAC,CAAA;AAC9D,MAAA,GAAA,CAAI,IAAA;AAAA,QACA,EAAE,IAAA,EAAM,KAAA,EAAO,SAAA,CAAU,SAAS,OAAA,EAAQ;AAAA,QAC1C;AAAA,OACJ;AAAA,IACJ;AAAA,EACJ;AAGA,EAAA,GAAA,CAAI,KAAA,CAAM,EAAE,SAAA,EAAW,KAAA,EAAO,WAAW,OAAA,EAAS,OAAA,IAAW,8BAA8B,CAAA;AAC3F,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,oBAAA,EAAuB,SAAA,EAAW,OAAA,IAAW,SAAS,CAAA,CAAE,CAAA;AAC5E;AAWA,SAAS,cAAA,CACL,OACA,UAAA,EAQF;AAEE,EAAA,MAAM,iBAAiB,KAAA,CAAM,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,OAAO,SAAS,CAAA;AAC7D,EAAA,IAAI,cAAA,CAAe,WAAW,CAAA,EAAG;AAC7B,IAAA,OAAO,EAAE,WAAA,EAAa,CAAA,EAAG,YAAA,EAAc,CAAA,EAAG,mBAAmB,CAAA,EAAE;AAAA,EACnE;AAGA,EAAA,MAAM,iBAAA,GAAoB,eAAe,MAAA,CAAO,CAAC,KAAK,CAAA,KAAM,GAAA,GAAM,CAAA,CAAE,KAAA,EAAO,CAAC,CAAA;AAG5E,EAAA,IAAI,UAAA,KAAe,MAAA,IAAa,UAAA,GAAa,CAAA,EAAG;AAE5C,IAAA,MAAM,MAAA,GAAS,CAAC,GAAG,cAAc,EAAE,IAAA,CAAK,CAAC,GAAG,CAAA,KAAM;AAC9C,MAAA,MAAM,OAAA,GAAU,CAAA,CAAE,MAAA,CAAO,YAAA,IAAgB,QAAA;AACzC,MAAA,MAAM,OAAA,GAAU,CAAA,CAAE,MAAA,CAAO,YAAA,IAAgB,QAAA;AACzC,MAAA,IAAI,OAAA,KAAY,OAAA,EAAS,OAAO,OAAA,GAAU,OAAA;AAC1C,MAAA,IAAI,CAAA,CAAE,SAAS,CAAA,CAAE,IAAA,SAAa,CAAA,CAAE,IAAA,CAAK,aAAA,CAAc,CAAA,CAAE,IAAI,CAAA;AACzD,MAAA,OAAO,CAAA,CAAE,OAAO,CAAA,CAAE,IAAA;AAAA,IACtB,CAAC,CAAA;AAGD,IAAA,IAAI,GAAA,GAAM,CAAA;AACV,IAAA,IAAI,YAAA,GAAe,CAAA;AACnB,IAAA,KAAA,MAAW,QAAQ,MAAA,EAAQ;AACvB,MAAA,GAAA,IAAO,IAAA,CAAK,KAAA;AACZ,MAAA,YAAA,GAAe,KAAK,GAAA,CAAI,YAAA,EAAc,IAAA,CAAK,MAAA,CAAO,cAAc,CAAC,CAAA;AACjE,MAAA,IAAI,OAAO,UAAA,EAAY;AAAA,IAC3B;AAGA,IAAA,MAAMC,gBAAe,IAAA,CAAK,GAAA;AAAA,MACtB,CAAA;AAAA,MACA,IAAA,CAAK,OAAO,IAAA,CAAK,GAAA,KAAQ,GAAA,GAAO,YAAA,KAAiB,EAAA,GAAK,EAAA,GAAK,EAAA,CAAG;AAAA,KAClE;AAEA,IAAA,OAAO;AAAA,MACH,WAAA,EAAa,UAAA;AAAA;AAAA,MACb,YAAA,EAAAA,aAAAA;AAAA,MACA;AAAA,KACJ;AAAA,EACJ;AAGA,EAAA,MAAM,WAAA,GAAc,iBAAA;AAGpB,EAAA,MAAM,aAAa,IAAA,CAAK,GAAA;AAAA,IACpB,GAAG,cAAA,CAAe,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,CAAO,UAAA,IAAc,IAAA,CAAK,GAAA,EAAI,GAAI,GAAI;AAAA,GACzE;AACA,EAAA,MAAM,YAAA,GAAe,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,KAAK,KAAA,CAAA,CAAO,IAAA,CAAK,GAAA,EAAI,GAAI,GAAA,GAAO,UAAA,KAAe,EAAA,GAAK,EAAA,GAAK,GAAG,CAAC,CAAA;AAE9F,EAAA,OAAO,EAAE,WAAA,EAAa,YAAA,EAAc,iBAAA,EAAkB;AAC1D;AA4BA,eAAsBC,OAAAA,CAAO,KAAA,EAAoB,IAAA,GAAsB,EAAC,EAA2B;AAC/F,EAAA,MAAM,QAAsB,EAAC;AAC7B,EAAA,IAAI,OAAA,GAAmB,SAAA;AAEvB,EAAA,IAAI;AAEA,IAAA,IAAI,CAAC,MAAM,GAAA,IAAO,CAAC,MAAM,IAAA,IAAQ,CAAC,MAAM,GAAA,EAAK;AACzC,MAAA,KAAA,CAAM,KAAK,aAAa,CAAA;AACxB,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,OAAA,EAAQ;AAAA,IACvC;AAGA,IAAA,MAAM,MAAA,GAAS,qBAAA,CAAsB,KAAA,CAAM,GAAG,CAAA;AAC9C,IAAA,OAAA,GAAU,OAAO,OAAA,IAAW,SAAA;AAG5B,IAAA,MAAM,cAAA,GAAiB,MAAM,qBAAA,CAAsB,KAAA,CAAM,GAAG,CAAA;AAG5D,IAAA,IAAI,MAAA,CAAO,IAAA,CAAK,OAAA,KAAY,KAAA,CAAM,IAAA,EAAM;AACpC,MAAA,KAAA,CAAM,KAAK,aAAa,CAAA;AACxB,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,SAAS,cAAA,EAAe;AAAA,IACvD;AAGA,IAAA,IAAA,CAAK,YAAY,SAAA,IAAa,OAAA,KAAY,QAAA,KAAa,CAAC,KAAK,QAAA,EAAU;AACnE,MAAA,KAAA,CAAM,KAAK,kBAAkB,CAAA;AAC7B,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,SAAS,cAAA,EAAe;AAAA,IACvD;AAMA,IAAA,IAAI,KAAK,WAAA,EAAa;AAClB,MAAA,MAAM,GAAA,GAAM,MAAA,CAAO,UAAA,CAAW,KAAK,CAAA;AACnC,MAAA,IAAI,CAAC,GAAA,IAAO,GAAA,KAAQ,IAAA,CAAK,WAAA,EAAa;AAClC,QAAA,KAAA,CAAM,KAAK,cAAc,CAAA;AACzB,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,SAAS,cAAA,EAAe;AAAA,MACvD;AAAA,IACJ;AAGA,IAAA,IAAI,MAAA,CAAO,UAAA,CAAW,SAAS,CAAA,EAAG;AAC9B,MAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,UAAA,CAAW,SAAS,CAAC,CAAA;AACnD,MAAA,IAAI,CAAC,OAAO,KAAA,CAAM,GAAG,KAAK,GAAA,GAAM,IAAA,CAAK,KAAI,EAAG;AACxC,QAAA,KAAA,CAAM,KAAK,SAAS,CAAA;AACpB,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,SAAS,cAAA,EAAe;AAAA,MACvD;AAAA,IACJ;AAGA,IAAA,MAAM,OAAA,GAAU,MAAM,eAAA,CAAgB;AAAA,MAClC,MAAM,KAAA,CAAM,IAAA;AAAA,MACZ,KAAK,KAAA,CAAM,GAAA;AAAA,MACX,KAAK,KAAA,CAAM,GAAA;AAAA,MACX,GAAI,KAAA,CAAM,MAAA,IAAU,EAAE,MAAA,EAAQ,MAAM,MAAA;AAAO,KAC9C,CAAA;AACD,IAAA,KAAA,CAAM,KAAK,OAAO,CAAA;AAElB,IAAA,MAAM,KAAA,GAAQ,OAAA,KAAY,eAAA,IAAmB,OAAA,KAAY,eAAA;AACzD,IAAA,IAAI,CAAC,KAAA,EAAO;AACR,MAAA,OAAO;AAAA,QACH,EAAA,EAAI,KAAA;AAAA,QACJ,KAAA;AAAA,QACA,OAAA;AAAA,QACA,cAAA;AAAA,QACA,UAAA,EAAY,OAAO,IAAA,CAAK;AAAA,OAC5B;AAAA,IACJ;AAGA,IAAA,IAAI;AACA,MAAA,MAAM,KAAA,GAAQ,MAAM,eAAA,CAAgB,KAAA,CAAM,MAAM,OAAA,EAAS;AAAA,QACrD,oBAAoB,IAAA,CAAK,kBAAA;AAAA,QACzB,mBAAmB,IAAA,CAAK;AAAA,OAC3B,CAAA;AAGD,MAAA,MAAM,EAAE,WAAA,EAAa,YAAA,EAAc,iBAAA,EAAkB,GAAI,cAAA;AAAA,QACrD,KAAA;AAAA,QACA,MAAA,CAAO;AAAA,OACX;AAGA,MAAA,IAAI,MAAA,CAAO,IAAA,KAAS,KAAA,CAAA,IAAa,MAAA,CAAO,OAAO,CAAA,EAAG;AAC9C,QAAA,IAAI,iBAAA,GAAoB,OAAO,IAAA,EAAM;AACjC,UAAA,KAAA,CAAM,KAAK,mBAAmB,CAAA;AAC9B,UAAA,GAAA,CAAI,IAAA;AAAA,YACA;AAAA,cACI,MAAM,MAAA,CAAO,IAAA;AAAA,cACb,iBAAA;AAAA,cACA,SAAS,KAAA,CAAM;AAAA,aACnB;AAAA,YACA;AAAA,WACJ;AACA,UAAA,OAAO;AAAA,YACH,EAAA,EAAI,KAAA;AAAA,YACJ,KAAA;AAAA,YACA,OAAA;AAAA,YACA,cAAA;AAAA,YACA,UAAA,EAAY,OAAO,IAAA,CAAK;AAAA,WAC5B;AAAA,QACJ;AAAA,MACJ;AAGA,MAAA,IAAI,eAAe,CAAA,EAAG;AAClB,QAAA,KAAA,CAAM,KAAK,WAAW,CAAA;AAEtB,QAAA,IAAI,KAAA,CAAM,KAAK,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,MAAA,CAAO,SAAS,CAAA,EAAG;AACxC,UAAA,KAAA,CAAM,KAAK,cAAc,CAAA;AAAA,QAC7B;AACA,QAAA,OAAO;AAAA,UACH,EAAA,EAAI,KAAA;AAAA,UACJ,KAAA;AAAA,UACA,OAAA;AAAA,UACA,cAAA;AAAA,UACA,UAAA,EAAY,OAAO,IAAA,CAAK;AAAA,SAC5B;AAAA,MACJ,CAAA,MAAO;AACH,QAAA,KAAA,CAAM,KAAK,gBAAgB,CAAA;AAAA,MAC/B;AAGA,MAAA,MAAM,OAAA,GAAmB;AAAA,QACrB,WAAA;AAAA,QACA,YAAA;AAAA,QACA,OAAQ,YAAA,CAAa,WAAA,EAAa,cAAc,EAAE,SAAA,EAAW,MAAM;AAAA,OACvE;AAEA,MAAA,OAAO;AAAA,QACH,EAAA,EAAI,IAAA;AAAA,QACJ,KAAA;AAAA,QACA,OAAA;AAAA,QACA,cAAA;AAAA,QACA,UAAA,EAAY,OAAO,IAAA,CAAK,UAAA;AAAA,QACxB;AAAA,OACJ;AAAA,IACJ,SAAS,SAAA,EAAW;AAChB,MAAA,GAAA,CAAI,KAAA,CAAM,EAAE,GAAA,EAAK,SAAA,IAAa,mBAAmB,CAAA;AACjD,MAAA,KAAA,CAAM,KAAK,aAAa,CAAA;AACxB,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,SAAS,cAAA,EAAe;AAAA,IACvD;AAAA,EACJ,SAAS,CAAA,EAAY;AACjB,IAAA,MAAM,MAAM,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,KAAK,cAAc,CAAA;AACvE,IAAA,IAAI,QAAQ,cAAA,EAAgB;AACxB,MAAA,KAAA,CAAM,KAAK,cAAc,CAAA;AAAA,IAC7B,CAAA,MAAO;AACH,MAAA,KAAA,CAAM,KAAK,aAAa,CAAA;AAAA,IAC5B;AACA,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,OAAA,EAAQ;AAAA,EACvC;AACJ","file":"verify.js","sourcesContent":["/**\n * Canonical message builder per SPEC.md §2\n *\n * - LF line endings, exactly one trailing LF\n * - 7 fixed core lines in strict order and wording\n * - Optional extensions appended as key: value with lexicographically sorted lowercase keys\n */\n\nimport type { AttestationEnvelope, IdentityBinding, Scheme } from './types';\n\n/**\n * Input for building a canonical message\n */\nexport interface CanonicalInput {\n    /** Bitcoin address */\n    address: string;\n    /** Optional identity bindings */\n    identities?: IdentityBinding[];\n}\n\n/**\n * Extension key-value pairs for canonical message\n */\nexport type Extensions = Record<string, string | undefined>;\n\n/**\n * Convert bytes to lowercase hex string\n * @param bytes - Byte array to convert\n * @returns Lowercase hex string\n */\nfunction toLowerHex(bytes: Uint8Array): string {\n    return Array.from(bytes)\n        .map((b) => b.toString(16).padStart(2, '0'))\n        .join('');\n}\n\n/**\n * Generate a random 16-byte nonce as lowercase hex\n * Uses Web Crypto API when available, falls back to Math.random()\n * @returns 32-character lowercase hex string\n */\nexport function randomNonce16BHexLower(): string {\n    const arr = new Uint8Array(16);\n\n    try {\n        if (typeof crypto !== 'undefined' && typeof crypto.getRandomValues === 'function') {\n            crypto.getRandomValues(arr);\n            return toLowerHex(arr);\n        }\n    } catch {\n        // Fall through to non-cryptographic fallback\n    }\n\n    // No silent Math.random fallback: a nonce is a load-bearing security\n    // primitive. A deployment without `crypto.getRandomValues` MUST fix its\n    // environment rather than sign with weak randomness.\n    throw new Error('crypto.getRandomValues unavailable — refusing to mint a weak nonce');\n}\n\n/**\n * Reject characters that would break the line-oriented canonical grammar\n * or the comma-separated identities list. If any of these slipped through,\n * an attacker could smuggle a forged `address:` or extension line into the\n * signed payload: `identities: alice\\naddress: bc1qEVIL…` would parse as a\n * second address line. Catch it at the boundary, not at verification time.\n *\n * Also rejects a colon in the identifier so a bad actor can't turn\n * `github:alice:extra` into a different protocol binding on parse.\n */\nconst IDENTITY_PROTOCOL_RE = /^[a-z][a-z0-9_-]*$/;\nconst IDENTITY_FORBIDDEN_CHARS = /[\\r\\n,]/;\n\nfunction assertSafeIdentity({ protocol, identifier }: IdentityBinding): void {\n    if (!IDENTITY_PROTOCOL_RE.test(protocol)) {\n        throw new Error(\n            `invalid identity protocol: ${JSON.stringify(protocol)} — must match /^[a-z][a-z0-9_-]*$/`\n        );\n    }\n    if (!identifier || IDENTITY_FORBIDDEN_CHARS.test(identifier)) {\n        throw new Error(\n            `invalid identity identifier: ${JSON.stringify(identifier)} — must be non-empty and contain no newlines or commas`\n        );\n    }\n}\n\n/**\n * Format identities as comma-separated protocol:identifier pairs, sorted lexicographically\n * @param identities - Array of identity bindings\n * @returns Comma-separated string of protocol:identifier pairs\n */\nexport function formatIdentities(identities: IdentityBinding[] = []): string {\n    if (identities.length === 0) {\n        return '';\n    }\n    for (const id of identities) assertSafeIdentity(id);\n\n    // Format as protocol:identifier and sort lexicographically\n    const formatted = identities\n        .map(({ protocol, identifier }) => `${protocol}:${identifier}`)\n        .sort();\n\n    return formatted.join(',');\n}\n\n/**\n * Parse identities from comma-separated protocol:identifier format\n * @param identitiesStr - Comma-separated identity string\n * @returns Array of identity bindings\n * @throws {Error} If identity format is invalid\n */\nexport function parseIdentities(identitiesStr: string): IdentityBinding[] {\n    if (!identitiesStr || identitiesStr.trim() === '') {\n        return [];\n    }\n    // The identities field lives on one line of the canonical message. If it\n    // contains a raw LF/CR, it's either corrupt or an attempt to smuggle a\n    // fake core line into the parser. Refuse instead of trying to recover.\n    if (IDENTITY_FORBIDDEN_CHARS.test(identitiesStr.replace(/,/g, ''))) {\n        throw new Error('identities field contains forbidden characters (newline)');\n    }\n\n    const bindings = identitiesStr.split(',').map((binding) => {\n        const colonIndex = binding.indexOf(':');\n        if (colonIndex === -1) {\n            throw new Error(`Invalid identity binding format: ${binding}`);\n        }\n        return {\n            protocol: binding.substring(0, colonIndex).trim(),\n            identifier: binding.substring(colonIndex + 1).trim(),\n        };\n    });\n\n    for (const b of bindings) {\n        if (!b.protocol || !b.identifier) {\n            throw new Error(`Invalid identity binding: ${b.protocol}:${b.identifier}`);\n        }\n        assertSafeIdentity(b);\n    }\n    return bindings;\n}\n\n/**\n * Optional deterministic overrides for message building. Only intended for\n * tests / conformance vectors; production callers should let the builder\n * mint a fresh nonce + timestamp per message.\n */\nexport interface BuildOptions {\n    /** 32-char lowercase hex. Default: freshly-generated cryptographic nonce. */\n    nonce?: string;\n    /** RFC-3339 UTC. Default: `new Date().toISOString()`. */\n    issuedAt?: string;\n}\n\n/**\n * Build a canonical message following OrangeCheck Protocol v0 specification\n * @param input - Canonical input with address and identities\n * @param extensions - Optional extension key-value pairs\n * @param options - Optional deterministic overrides (testing only)\n * @returns Canonical message string with LF line endings\n */\nexport function buildCanonicalMessage(\n    { address, identities }: CanonicalInput,\n    extensions: Extensions = {},\n    options: BuildOptions = {}\n): string {\n    const nonce = options.nonce ?? randomNonce16BHexLower();\n    if (!/^[0-9a-f]{32}$/.test(nonce)) {\n        throw new Error(`invalid nonce: must be 32 lowercase hex chars`);\n    }\n    const issuedAt = options.issuedAt ?? new Date().toISOString();\n\n    // Format identities\n    const identitiesStr = formatIdentities(identities);\n\n    // Core (strict wording + order per SPEC.md §2)\n    const core = [\n        'orangecheck',\n        `identities: ${identitiesStr}`,\n        `address: ${address}`,\n        'purpose: portable reputation attestation (non-custodial)',\n        `nonce: ${nonce}`,\n        `issued_at: ${issuedAt}`,\n        'ack: I attest control of this address and bind it to my identities.',\n    ];\n\n    // Normalize and sort extensions\n    const normExt: Record<string, string> = {};\n    for (const [k, v] of Object.entries(extensions)) {\n        if (v == null || v === '') {\n            continue;\n        }\n        const key = k.toLowerCase();\n        normExt[key] = String(v);\n    }\n\n    const extLines = Object.keys(normExt)\n        .sort()\n        .map((k) => `${k}: ${normExt[k]!}`);\n\n    const all = [...core, ...extLines];\n\n    // Join with LF and ensure exactly one trailing LF\n    return all.join('\\n') + '\\n';\n}\n\n/**\n * Generate attestation ID from canonical message\n *\n * attestation_id = SHA-256(canonical_message)\n *\n * @param message - Canonical message string\n * @returns Lowercase hex SHA-256 hash\n */\nexport async function generateAttestationId(message: string): Promise<string> {\n    // Convert message to UTF-8 bytes\n    const encoder = new TextEncoder();\n    const data = encoder.encode(message);\n\n    // Compute SHA-256 hash\n    const hashBuffer = await crypto.subtle.digest('SHA-256', data);\n\n    // Convert to lowercase hex\n    return toLowerHex(new Uint8Array(hashBuffer));\n}\n\n/**\n * Create an attestation envelope for publishing\n *\n * This wraps the canonical message with metadata for Nostr publishing\n *\n * @param message - Canonical message\n * @param signature - BIP-322 or legacy signature\n * @param scheme - Signature scheme used\n * @param address - Bitcoin address\n * @param identities - Identity bindings\n * @param extensions - Optional extensions\n * @returns Attestation envelope ready for publishing\n */\nexport async function createAttestationEnvelope(\n    message: string,\n    signature: string,\n    scheme: Scheme,\n    address: string,\n    identities: IdentityBinding[],\n    extensions: Extensions = {}\n): Promise<AttestationEnvelope> {\n    const attestation_id = await generateAttestationId(message);\n\n    // Extract issued_at from message\n    const issuedAtMatch = message.match(/issued_at: ([^\\n]+)/);\n    const issued_at = issuedAtMatch?.[1] ?? new Date().toISOString();\n\n    // Extract expires from extensions if present\n    const expires_at = extensions.expires;\n\n    // Extract relay hints from extensions if present\n    const relay_hints = extensions.relay_hints?.split(',').map((r) => r.trim());\n\n    // Extract publish targets from extensions if present\n    const publish_targets = extensions.publish?.split(',').map((t) => t.trim());\n\n    // Base64url encode the message\n    const encoder = new TextEncoder();\n    const messageBytes = encoder.encode(message);\n    const base64 = btoa(String.fromCharCode(...messageBytes));\n    const message_b64url = base64.replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=/g, '');\n\n    // Construct verification URL\n    const verification_url = `https://attest.ochk.io/attest/${attestation_id}`;\n\n    return {\n        attestation_id,\n        scheme,\n        address,\n        identities,\n        message,\n        message_b64url,\n        signature,\n        issued_at,\n        expires_at,\n        verification_url,\n        publish_targets,\n        relay_hints,\n    };\n}\n","/**\n * OrangeCheck Scoring\n *\n * The protocol registers exactly one scoring algorithm: `v0`. A `tier` helper\n * is also provided for UI convenience. RPs with specialized needs compute\n * their own score against raw metrics — the protocol does not ship an\n * algorithm zoo.\n *\n * See: docs/oc-protocol/registry/scoring.md\n */\n\nexport type ScoringAlgorithm = 'v0' | 'tier' | 'none';\nexport type Tier = 'platinum' | 'gold' | 'silver' | 'bronze' | 'none';\nexport type ScoreResult = number | Tier | null;\n\nexport interface ScoringConfig {\n    algorithm: ScoringAlgorithm;\n}\n\nfunction scoreV0(sats: number, days: number): number {\n    if (sats <= 0 || days <= 0) return 0;\n    return Math.round(Math.log(1 + sats) * (1 + days / 30) * 100) / 100;\n}\n\nfunction scoreTier(sats: number, days: number): Tier {\n    if (sats >= 10_000_000 && days >= 365) return 'platinum';\n    if (sats >= 1_000_000 && days >= 180) return 'gold';\n    if (sats >= 100_000 && days >= 90) return 'silver';\n    if (sats >= 10_000 && days >= 30) return 'bronze';\n    return 'none';\n}\n\nexport function computeScore(sats: number, days: number, config: ScoringConfig): ScoreResult {\n    switch (config.algorithm) {\n        case 'v0':\n            return scoreV0(sats, days);\n        case 'tier':\n            return scoreTier(sats, days);\n        case 'none':\n            return null;\n    }\n}\n\nexport function computeAllScores(sats: number, days: number) {\n    return { v0: scoreV0(sats, days), tier: scoreTier(sats, days) };\n}\n\nexport function formatScore(score: ScoreResult, algorithm: ScoringAlgorithm): string {\n    if (score === null || algorithm === 'none') return 'N/A';\n    if (algorithm === 'v0') return (score as number).toFixed(1);\n    const tier = score as Tier;\n    const labels: Record<Tier, string> = {\n        platinum: 'Platinum',\n        gold: 'Gold',\n        silver: 'Silver',\n        bronze: 'Bronze',\n        none: '—',\n    };\n    return labels[tier];\n}\n\nexport function getScoreColor(score: ScoreResult, algorithm: ScoringAlgorithm): string {\n    if (algorithm === 'tier') {\n        const colors: Record<Tier, string> = {\n            platinum: '#a855f7',\n            gold: '#eab308',\n            silver: '#94a3b8',\n            bronze: '#f97316',\n            none: '#64748b',\n        };\n        return colors[(score as Tier) ?? 'none'] ?? '#64748b';\n    }\n    const n = (score as number) ?? 0;\n    if (n >= 100) return '#22c55e';\n    if (n >= 50) return '#3b82f6';\n    if (n >= 20) return '#eab308';\n    return '#f97316';\n}\n\nexport function getTierNumber(tier: Tier): number {\n    const map: Record<Tier, number> = {\n        platinum: 4,\n        gold: 3,\n        silver: 2,\n        bronze: 1,\n        none: 0,\n    };\n    return map[tier] ?? 0;\n}\n","/**\n * Simple logger for SDK\n * Can be disabled in production builds\n */\n\n/**\n * Log level type\n */\nexport type LogLevel = 'debug' | 'info' | 'warn' | 'error' | 'none';\n\n/**\n * Logger context type\n */\nexport type LogContext = Record<string, unknown>;\n\n/**\n * Logger interface\n */\nexport interface Logger {\n    debug: (contextOrMessage: string | LogContext, message?: string) => void;\n    info: (contextOrMessage: string | LogContext, message?: string) => void;\n    warn: (contextOrMessage: string | LogContext, message?: string) => void;\n    error: (contextOrMessage: string | LogContext, message?: string) => void;\n}\n\nlet logLevel: LogLevel = 'none';\n\n/**\n * Set the global log level\n * @param level - Log level to set\n */\nexport function setLogLevel(level: LogLevel): void {\n    logLevel = level;\n}\n\n/**\n * Get the current log level\n * @returns Current log level\n */\nexport function getLogLevel(): LogLevel {\n    return logLevel;\n}\n\n/**\n * Create a namespaced logger\n * @param namespace - Logger namespace\n * @returns Logger instance\n */\nexport function createLogger(namespace: string): Logger {\n    const shouldLog = (level: Exclude<LogLevel, 'none'>): boolean => {\n        if (logLevel === 'none') return false;\n\n        const levels: Exclude<LogLevel, 'none'>[] = ['debug', 'info', 'warn', 'error'];\n        const currentLevelIndex = levels.indexOf(logLevel as Exclude<LogLevel, 'none'>);\n        const messageLevelIndex = levels.indexOf(level);\n\n        return messageLevelIndex >= currentLevelIndex;\n    };\n\n    const formatMessage = (msg: string): string => `[${namespace}] ${msg}`;\n\n    return {\n        debug: (contextOrMessage: string | LogContext, message?: string): void => {\n            if (shouldLog('debug')) {\n                if (typeof contextOrMessage === 'string') {\n                    console.debug(formatMessage(contextOrMessage));\n                } else {\n                    console.debug(formatMessage(message ?? 'Debug'), contextOrMessage);\n                }\n            }\n        },\n        info: (contextOrMessage: string | LogContext, message?: string): void => {\n            if (shouldLog('info')) {\n                if (typeof contextOrMessage === 'string') {\n                    console.info(formatMessage(contextOrMessage));\n                } else {\n                    console.info(formatMessage(message ?? 'Info'), contextOrMessage);\n                }\n            }\n        },\n        warn: (contextOrMessage: string | LogContext, message?: string): void => {\n            if (shouldLog('warn')) {\n                if (typeof contextOrMessage === 'string') {\n                    console.warn(formatMessage(contextOrMessage));\n                } else {\n                    console.warn(formatMessage(message ?? 'Warning'), contextOrMessage);\n                }\n            }\n        },\n        error: (contextOrMessage: string | LogContext, message?: string): void => {\n            if (shouldLog('error')) {\n                if (typeof contextOrMessage === 'string') {\n                    console.error(formatMessage(contextOrMessage));\n                } else {\n                    console.error(formatMessage(message ?? 'Error'), contextOrMessage);\n                }\n            }\n        },\n    };\n}\n\n/**\n * Log verification error\n * @param protocol - Identity protocol\n * @param identifier - Identity identifier\n * @param error - Error object\n * @param context - Additional context\n */\nexport function logVerificationError(\n    protocol: string,\n    identifier: string,\n    error: Error,\n    context?: LogContext\n): void {\n    const logger = createLogger('identity-verification');\n    logger.error(\n        {\n            protocol,\n            identifier,\n            error: error.message,\n            stack: error.stack,\n            ...context,\n        },\n        'Verification failed'\n    );\n}\n","/**\n * OrangeCheck Protocol Verification\n *\n * Core verification logic for BIP-322 and legacy signatures,\n * UTXO analysis, and reputation metrics computation\n */\n\nimport type { ScoringAlgorithm } from './scoring';\nimport type {\n    IdentityBinding,\n    Metrics,\n    Network,\n    Scheme,\n    StatusCode,\n    VerifyInput,\n    VerifyOptions,\n    VerifyOutcome,\n} from './types';\n\nimport { Buffer } from 'buffer';\n\nimport { Verifier } from 'bip322-js';\nimport * as bitcoinMessage from 'bitcoinjs-message';\n\nimport { generateAttestationId, parseIdentities } from './canonical';\nimport { computeAllScores, computeScore } from './scoring';\nimport { createLogger } from './utils/logger';\n\nconst log = createLogger('ocp/verify');\n\n/**\n * Scoring function per OCP v0 specification (SPEC.md §6)\n * Formula: score = round( ln(1 + sats_bonded) * (1 + days_unspent / 30), 2 )\n *\n * This produces an unbounded score that combines both sats and time.\n * Typical ranges:\n * - 10k sats, 30 days ≈ 18\n * - 100k sats, 90 days ≈ 46\n * - 1M sats, 365 days ≈ 182\n * - 100M sats, 365 days ≈ 243\n */\n/**\n * Export scoring functions for use in other modules\n */\nexport { computeScore, computeAllScores, type ScoringAlgorithm };\n\n/**\n * Input for signature verification\n */\ninterface SignatureVerifyInput {\n    /** Bitcoin address */\n    addr: string;\n    /** Message to verify */\n    msg: string;\n    /** Signature (hex or base64) */\n    sig: string;\n    /** Optional signature scheme (auto-detected if not provided) */\n    scheme?: Scheme;\n}\n\n/**\n * Check if a string looks like hexadecimal\n * @param s - String to check\n * @returns True if string is valid hex with even length\n */\nfunction looksLikeHex(s: string): boolean {\n    return /^[0-9a-fA-F]+$/.test(s) && s.length % 2 === 0;\n}\n\n/**\n * Convert signature to base64 if it's in hex format\n * @param sig - Signature (hex or base64)\n * @returns Signature in base64 format\n */\nfunction toBase64Maybe(sig: string): string {\n    if (looksLikeHex(sig)) {\n        return Buffer.from(sig, 'hex').toString('base64');\n    }\n    return sig;\n}\n\n/**\n * Auto-detect signature scheme based on address type and signature format\n *\n * @param addr - Bitcoin address\n * @param sig - Signature\n * @returns Detected scheme ('bip322' or 'legacy')\n */\nfunction detectSignatureScheme(addr: string, sig: string): Scheme {\n    // SegWit and Taproot addresses MUST use BIP-322\n    const isSegWit = addr.startsWith('bc1') || addr.startsWith('tb1');\n    if (isSegWit) {\n        return 'bip322';\n    }\n\n    // For P2PKH addresses, check if signature looks like legacy format\n    const sigBase64 = toBase64Maybe(sig);\n    const looksLikeLegacy = sigBase64.length === 88 && /^[IHG]/.test(sigBase64);\n\n    if (looksLikeLegacy) {\n        return 'legacy';\n    }\n\n    // Default to BIP-322\n    return 'bip322';\n}\n\nasync function verifySignature({\n    addr,\n    msg,\n    sig,\n    scheme,\n}: SignatureVerifyInput): Promise<StatusCode> {\n    try {\n        // Auto-detect scheme if not explicitly provided\n        const detectedScheme = scheme || detectSignatureScheme(addr, sig);\n\n        log.debug(\n            { addr, msgLength: msg.length, sigLength: sig.length, scheme: detectedScheme },\n            'Verifying signature'\n        );\n\n        if (detectedScheme === 'bip322') {\n            const sigBase64 = toBase64Maybe(sig);\n            log.debug(\n                { sigBase64: sigBase64.substring(0, 50) + '...' },\n                'Signature converted to base64'\n            );\n\n            // Log the full message for debugging\n            log.debug(\n                {\n                    msgFull: msg,\n                    msgLines: msg.split('\\n').length,\n                    msgFirstLine: msg.split('\\n')[0],\n                    msgLastLine: msg.split('\\n')[msg.split('\\n').length - 1],\n                },\n                'Message being verified'\n            );\n\n            const ok = Verifier.verifySignature(addr, msg, sigBase64);\n            log.info({ addr, ok }, 'BIP-322 verification result');\n\n            if (!ok) {\n                // Check if this looks like an Electrum signature (88 chars, base64)\n                const isSegWit = addr.startsWith('bc1') || addr.startsWith('tb1');\n                if (isSegWit && sigBase64.length === 88) {\n                    log.warn(\n                        { addr, wallet: 'possibly Electrum', sigLength: sigBase64.length },\n                        'BIP-322 verification failed - likely Electrum wallet (does not support BIP-322 for SegWit)'\n                    );\n                } else {\n                    log.error(\n                        {\n                            addr,\n                            sigLength: sigBase64.length,\n                            msgLength: msg.length,\n                            msgPreview: msg.substring(0, 200),\n                        },\n                        'BIP-322 verification failed - signature does not match message'\n                    );\n                }\n            }\n\n            return ok ? 'sig_ok_bip322' : 'sig_invalid';\n        }\n\n        if (detectedScheme === 'legacy') {\n            const sigBase64 = toBase64Maybe(sig);\n\n            // Legacy policy: P2PKH only (address must start with '1' for mainnet or 'm'/'n' for testnet)\n            if (!addr.startsWith('1') && !addr.startsWith('m') && !addr.startsWith('n')) {\n                log.warn({ addr }, 'Legacy signature attempted on non-P2PKH address');\n                return 'sig_unsupported_script';\n            }\n\n            log.debug(\n                {\n                    addr,\n                    sigBase64: sigBase64.substring(0, 50) + '...',\n                    msgPreview: msg.substring(0, 100) + '...',\n                    msgLength: msg.length,\n                },\n                'Verifying legacy signature'\n            );\n            const ok = bitcoinMessage.verify(msg, addr, sigBase64);\n            log.info({ addr, ok, sigBase64Length: sigBase64.length }, 'Legacy verification result');\n            if (!ok) {\n                log.error(\n                    {\n                        addr,\n                        msgFirstLine: msg.split('\\n')[0],\n                        sigFormat: sigBase64.substring(0, 10),\n                    },\n                    'Legacy signature verification failed - check message format and signature'\n                );\n            }\n            return ok ? 'sig_ok_legacy' : 'sig_invalid';\n        }\n\n        return 'invalid_scheme';\n    } catch (err) {\n        log.error(\n            { addr, error: err instanceof Error ? err.message : String(err) },\n            'Signature verification error'\n        );\n        return 'sig_invalid';\n    }\n}\n\n// Canonical message parsing per SPEC + our builder (lowercase keys, extensions)\nexport function parseCanonicalMessage(msg: string) {\n    const lines = msg.split('\\n').map((l) => l.trim());\n    // `.split(':', 2)[1]` truncates values containing a colon (e.g. URLs in\n    // extensions, or npubs in identities). Use the first colon as the\n    // separator and keep everything after it — same approach as the\n    // extensions loop below.\n    const getVal = (prefix: string): string | undefined => {\n        const needle = prefix + ':';\n        const hit = lines.find((l) => l.toLowerCase().startsWith(needle));\n        if (!hit) return undefined;\n        const idx = hit.indexOf(':');\n        return hit.slice(idx + 1).trim();\n    };\n\n    const address = getVal('address') || '';\n    const identitiesStr = getVal('identities') || '';\n\n    // Parse identities\n    let identities: IdentityBinding[] = [];\n    try {\n        identities = parseIdentities(identitiesStr);\n    } catch (err) {\n        log.warn({ identitiesStr, error: err }, 'Failed to parse identities field');\n    }\n\n    // Extensions: collect all key: value pairs excluding core known keys\n    const coreKeys = new Set([\n        'orangecheck',\n        'identities',\n        'address',\n        'purpose',\n        'nonce',\n        'issued_at',\n        'ack',\n    ]);\n    const extensions: Record<string, string> = {};\n    for (const line of lines) {\n        const idx = line.indexOf(':');\n        if (idx === -1) continue;\n        const key = line.slice(0, idx).trim().toLowerCase();\n        const val = line.slice(idx + 1).trim();\n        if (!coreKeys.has(key) && val) extensions[key] = val;\n    }\n\n    const network = (extensions['network'] || 'mainnet') as Network;\n\n    // Parse bond extension if present (integer satoshis)\n    const bondStr = extensions['bond'];\n    const bond = bondStr ? parseInt(bondStr, 10) : undefined;\n\n    return {\n        core: { address, identities },\n        network,\n        extensions,\n        bond: bond !== undefined && !isNaN(bond) && bond > 0 ? bond : undefined,\n    };\n}\n\n/**\n * UTXO type from Esplora API\n */\ninterface EsploraUtxo {\n    /** Transaction ID */\n    txid: string;\n    /** Output index */\n    vout: number;\n    /** Value in satoshis */\n    value: number;\n    /** Confirmation status */\n    status: {\n        /** Whether UTXO is confirmed */\n        confirmed: boolean;\n        /** Block height (if confirmed) */\n        block_height?: number;\n        /** Block timestamp (if confirmed) */\n        block_time?: number;\n    };\n}\n\n/**\n * Fetch UTXOs for an address from Esplora API\n *\n * Tries multiple endpoints in order with automatic fallback\n *\n * @param address - Bitcoin address\n * @param network - Bitcoin network\n * @param opts - Optional custom Esplora endpoints\n * @returns Array of UTXOs\n * @throws {Error} If all endpoints fail\n */\nasync function getAddressUtxos(\n    address: string,\n    network: Network,\n    opts?: {\n        esploraMainnetBase?: string;\n        esploraSignetBase?: string;\n        esploraTestnetBase?: string;\n    }\n): Promise<EsploraUtxo[]> {\n    // Define primary and fallback endpoints\n    const endpoints =\n        network === 'signet'\n            ? [\n                  opts?.esploraSignetBase || 'https://mempool.space/signet/api',\n                  'https://blockstream.info/signet/api',\n              ]\n            : network === 'testnet'\n              ? [\n                    opts?.esploraTestnetBase || 'https://mempool.space/testnet/api',\n                    'https://blockstream.info/testnet/api',\n                ]\n              : [\n                    opts?.esploraMainnetBase || 'https://mempool.space/api',\n                    'https://blockstream.info/api',\n                ];\n\n    let lastError: Error | null = null;\n\n    // Try each endpoint in order. Per-endpoint timeout kept tight (5s) so\n    // a slow upstream doesn't stack against the next one; callers who want\n    // a hard overall deadline should wrap this call with their own timeout.\n    for (const base of endpoints) {\n        try {\n            const url = `${base}/address/${address}/utxo`;\n            log.debug({ url, network }, 'Fetching UTXOs');\n\n            const resp = await fetch(url, {\n                method: 'GET',\n                headers: { Accept: 'application/json' },\n                signal: AbortSignal.timeout(5000),\n            });\n\n            if (!resp.ok) {\n                throw new Error(`HTTP ${resp.status}`);\n            }\n\n            const data = await resp.json();\n\n            // Validate response structure\n            if (!Array.isArray(data)) {\n                throw new Error('Invalid response: expected array');\n            }\n\n            // Validate each UTXO has required fields\n            for (const utxo of data) {\n                if (\n                    typeof utxo.value !== 'number' ||\n                    typeof utxo.status !== 'object' ||\n                    typeof utxo.status.confirmed !== 'boolean' ||\n                    typeof utxo.txid !== 'string' ||\n                    typeof utxo.vout !== 'number'\n                ) {\n                    throw new Error('Invalid UTXO structure');\n                }\n            }\n\n            log.info({ base, count: data.length, network }, 'UTXOs fetched successfully');\n            return data as EsploraUtxo[];\n        } catch (err) {\n            lastError = err instanceof Error ? err : new Error(String(err));\n            log.warn(\n                { base, error: lastError.message, network },\n                'Esplora endpoint failed, trying next'\n            );\n        }\n    }\n\n    // All endpoints failed\n    log.error({ endpoints, error: lastError?.message, network }, 'All Esplora endpoints failed');\n    throw new Error(`esplora_all_failed: ${lastError?.message || 'unknown'}`);\n}\n\n/**\n * Enhanced metrics computation per SPEC.md §5.4 and §6.1\n *\n * Supports bond extension with oldest-first greedy UTXO selection\n *\n * @param utxos - Array of UTXOs from Esplora\n * @param bondAmount - Optional bond amount (enables greedy selection)\n * @returns Computed metrics (sats_bonded, days_unspent, confirmed_balance)\n */\nfunction computeMetrics(\n    utxos: EsploraUtxo[],\n    bondAmount?: number\n): {\n    /** Bonded satoshis (confirmed balance or bond amount) */\n    sats_bonded: number;\n    /** Days since oldest/youngest UTXO */\n    days_unspent: number;\n    /** Total confirmed balance */\n    confirmed_balance: number;\n} {\n    // Filter out unconfirmed UTXOs\n    const confirmedUtxos = utxos.filter((u) => u.status.confirmed);\n    if (confirmedUtxos.length === 0) {\n        return { sats_bonded: 0, days_unspent: 0, confirmed_balance: 0 };\n    }\n\n    // Compute total confirmed balance\n    const confirmed_balance = confirmedUtxos.reduce((sum, u) => sum + u.value, 0);\n\n    // If bond extension is present, use oldest-first greedy algorithm\n    if (bondAmount !== undefined && bondAmount > 0) {\n        // Sort UTXOs by (block_height ASC, txid ASC, vout ASC) - oldest first\n        const sorted = [...confirmedUtxos].sort((a, b) => {\n            const heightA = a.status.block_height ?? Infinity;\n            const heightB = b.status.block_height ?? Infinity;\n            if (heightA !== heightB) return heightA - heightB;\n            if (a.txid !== b.txid) return a.txid.localeCompare(b.txid);\n            return a.vout - b.vout;\n        });\n\n        // Greedily select UTXOs until sum >= bond\n        let sum = 0;\n        let youngestTime = 0;\n        for (const utxo of sorted) {\n            sum += utxo.value;\n            youngestTime = Math.max(youngestTime, utxo.status.block_time || 0);\n            if (sum >= bondAmount) break;\n        }\n\n        // Age is computed from the youngest UTXO in the bonded set\n        const days_unspent = Math.max(\n            0,\n            Math.floor((Date.now() / 1000 - youngestTime) / (24 * 60 * 60))\n        );\n\n        return {\n            sats_bonded: bondAmount, // Use exactly bond amount (ignore surplus)\n            days_unspent,\n            confirmed_balance,\n        };\n    }\n\n    // Default behavior (no bond extension): sum all confirmed UTXOs\n    const sats_bonded = confirmed_balance;\n\n    // Find the oldest confirmed UTXO for days_unspent\n    const oldestTime = Math.min(\n        ...confirmedUtxos.map((u) => u.status.block_time || Date.now() / 1000)\n    );\n    const days_unspent = Math.max(0, Math.floor((Date.now() / 1000 - oldestTime) / (24 * 60 * 60)));\n\n    return { sats_bonded, days_unspent, confirmed_balance };\n}\n\n/**\n * Verify an OrangeCheck attestation\n *\n * This is the main verification function that:\n * 1. Validates the canonical message format\n * 2. Verifies the Bitcoin signature (BIP-322 or legacy)\n * 3. Fetches and analyzes UTXOs\n * 4. Computes reputation metrics\n *\n * @param input - Verification input (message, address, signature)\n * @param opts - Optional verification options (test mode, audience, esplora bases)\n * @returns Verification outcome with status codes and metrics\n *\n * @example\n * ```typescript\n * const result = await verify({\n *   msg: canonicalMessage,\n *   addr: 'bc1q...',\n *   sig: 'AkcwRAIg...',\n * });\n *\n * if (result.ok) {\n *   console.log('Score:', result.metrics?.score);\n * }\n * ```\n */\nexport async function verify(input: VerifyInput, opts: VerifyOptions = {}): Promise<VerifyOutcome> {\n    const codes: StatusCode[] = [];\n    let network: Network = 'mainnet';\n\n    try {\n        // Check if we have required fields\n        if (!input.msg || !input.addr || !input.sig) {\n            codes.push('bad_request');\n            return { ok: false, codes, network };\n        }\n\n        // Parse canonical message with extensions\n        const parsed = parseCanonicalMessage(input.msg);\n        network = parsed.network || 'mainnet';\n\n        // Compute attestation ID\n        const attestation_id = await generateAttestationId(input.msg);\n\n        // Validate address consistency\n        if (parsed.core.address !== input.addr) {\n            codes.push('bad_request');\n            return { ok: false, codes, network, attestation_id };\n        }\n\n        // Testnet/Signet policy enforcement\n        if ((network === 'testnet' || network === 'signet') && !opts.testMode) {\n            codes.push('network_testmode');\n            return { ok: false, codes, network, attestation_id };\n        }\n\n        // Optional policy checks for extensions.\n        // `aud` binds the attestation to an origin. If the caller passed\n        // `expectedAud`, the check must be load-bearing — a mismatch is a\n        // phishing signal, not an advisory. Fail hard (spec-aligned).\n        if (opts.expectedAud) {\n            const aud = parsed.extensions['aud'];\n            if (!aud || aud !== opts.expectedAud) {\n                codes.push('aud_mismatch');\n                return { ok: false, codes, network, attestation_id };\n            }\n        }\n\n        // Check message expiration\n        if (parsed.extensions['expires']) {\n            const exp = Date.parse(parsed.extensions['expires']);\n            if (!Number.isNaN(exp) && exp < Date.now()) {\n                codes.push('expired');\n                return { ok: false, codes, network, attestation_id };\n            }\n        }\n\n        // Enhanced signature verification\n        const sigCode = await verifySignature({\n            addr: input.addr,\n            msg: input.msg,\n            sig: input.sig,\n            ...(input.scheme && { scheme: input.scheme }),\n        });\n        codes.push(sigCode);\n\n        const sigOk = sigCode === 'sig_ok_bip322' || sigCode === 'sig_ok_legacy';\n        if (!sigOk) {\n            return {\n                ok: false,\n                codes,\n                network,\n                attestation_id,\n                identities: parsed.core.identities,\n            };\n        }\n\n        // Enhanced UTXO analysis and metrics computation\n        try {\n            const utxos = await getAddressUtxos(input.addr, network, {\n                esploraMainnetBase: opts.esploraMainnetBase,\n                esploraSignetBase: opts.esploraSignetBase,\n            });\n\n            // Compute metrics with bond extension support (SPEC.md §5.4)\n            const { sats_bonded, days_unspent, confirmed_balance } = computeMetrics(\n                utxos,\n                parsed.bond\n            );\n\n            // If bond extension is present, enforce minimum balance (SPEC.md §5.4.c)\n            if (parsed.bond !== undefined && parsed.bond > 0) {\n                if (confirmed_balance < parsed.bond) {\n                    codes.push('bond_insufficient');\n                    log.warn(\n                        {\n                            bond: parsed.bond,\n                            confirmed_balance,\n                            address: input.addr,\n                        },\n                        'Bond extension: insufficient balance'\n                    );\n                    return {\n                        ok: false,\n                        codes,\n                        network,\n                        attestation_id,\n                        identities: parsed.core.identities,\n                    };\n                }\n            }\n\n            // Analyze bond status\n            if (sats_bonded <= 0) {\n                codes.push('bond_zero');\n                // Check for pending UTXOs\n                if (utxos.some((u) => !u.status.confirmed)) {\n                    codes.push('bond_pending');\n                }\n                return {\n                    ok: false,\n                    codes,\n                    network,\n                    attestation_id,\n                    identities: parsed.core.identities,\n                };\n            } else {\n                codes.push('bond_confirmed');\n            }\n\n            // Compute final metrics with enhanced scoring\n            const metrics: Metrics = {\n                sats_bonded,\n                days_unspent,\n                score: (computeScore(sats_bonded, days_unspent, { algorithm: 'v0' }) as number),\n            };\n\n            return {\n                ok: true,\n                codes,\n                network,\n                attestation_id,\n                identities: parsed.core.identities,\n                metrics,\n            };\n        } catch (utxoError) {\n            log.error({ err: utxoError }, 'UTXO fetch failed');\n            codes.push('bad_request');\n            return { ok: false, codes, network, attestation_id };\n        }\n    } catch (e: unknown) {\n        const msg = e instanceof Error ? e.message : String(e ?? 'decode_error');\n        if (msg === 'decode_error') {\n            codes.push('decode_error');\n        } else {\n            codes.push('bad_request');\n        }\n        return { ok: false, codes, network };\n    }\n}\n"]}
+{"version":3,"sources":["../src/canonical.ts","../src/scoring.ts","../src/utils/logger.ts","../src/verify.ts"],"names":["Buffer","verifyBitcoinSignature","days_unspent"],"mappings":";;;;;;;;AA8BA,SAAS,WAAW,KAAA,EAA2B;AAC3C,EAAA,OAAO,MAAM,IAAA,CAAK,KAAK,CAAA,CAClB,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,QAAA,CAAS,EAAE,EAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAC1C,KAAK,EAAE,CAAA;AAChB;AAmCA,IAAM,oBAAA,GAAuB,oBAAA;AAC7B,IAAM,wBAAA,GAA2B,SAAA;AAEjC,SAAS,kBAAA,CAAmB,EAAE,QAAA,EAAU,UAAA,EAAW,EAA0B;AACzE,EAAA,IAAI,CAAC,oBAAA,CAAqB,IAAA,CAAK,QAAQ,CAAA,EAAG;AACtC,IAAA,MAAM,IAAI,KAAA;AAAA,MACN,CAAA,2BAAA,EAA8B,IAAA,CAAK,SAAA,CAAU,QAAQ,CAAC,CAAA,uCAAA;AAAA,KAC1D;AAAA,EACJ;AACA,EAAA,IAAI,CAAC,UAAA,IAAc,wBAAA,CAAyB,IAAA,CAAK,UAAU,CAAA,EAAG;AAC1D,IAAA,MAAM,IAAI,KAAA;AAAA,MACN,CAAA,6BAAA,EAAgC,IAAA,CAAK,SAAA,CAAU,UAAU,CAAC,CAAA,2DAAA;AAAA,KAC9D;AAAA,EACJ;AACJ;AA2BO,SAAS,gBAAgB,aAAA,EAA0C;AACtE,EAAA,IAAI,CAAC,aAAA,IAAiB,aAAA,CAAc,IAAA,OAAW,EAAA,EAAI;AAC/C,IAAA,OAAO,EAAC;AAAA,EACZ;AAIA,EAAA,IAAI,yBAAyB,IAAA,CAAK,aAAA,CAAc,QAAQ,IAAA,EAAM,EAAE,CAAC,CAAA,EAAG;AAChE,IAAA,MAAM,IAAI,MAAM,0DAA0D,CAAA;AAAA,EAC9E;AAEA,EAAA,MAAM,WAAW,aAAA,CAAc,KAAA,CAAM,GAAG,CAAA,CAAE,GAAA,CAAI,CAAC,OAAA,KAAY;AACvD,IAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,OAAA,CAAQ,GAAG,CAAA;AACtC,IAAA,IAAI,eAAe,EAAA,EAAI;AACnB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,iCAAA,EAAoC,OAAO,CAAA,CAAE,CAAA;AAAA,IACjE;AACA,IAAA,OAAO;AAAA,MACH,UAAU,OAAA,CAAQ,SAAA,CAAU,CAAA,EAAG,UAAU,EAAE,IAAA,EAAK;AAAA,MAChD,YAAY,OAAA,CAAQ,SAAA,CAAU,UAAA,GAAa,CAAC,EAAE,IAAA;AAAK,KACvD;AAAA,EACJ,CAAC,CAAA;AAED,EAAA,KAAA,MAAW,KAAK,QAAA,EAAU;AACtB,IAAA,IAAI,CAAC,CAAA,CAAE,QAAA,IAAY,CAAC,EAAE,UAAA,EAAY;AAC9B,MAAA,MAAM,IAAI,MAAM,CAAA,0BAAA,EAA6B,CAAA,CAAE,QAAQ,CAAA,CAAA,EAAI,CAAA,CAAE,UAAU,CAAA,CAAE,CAAA;AAAA,IAC7E;AACA,IAAA,kBAAA,CAAmB,CAAC,CAAA;AAAA,EACxB;AACA,EAAA,OAAO,QAAA;AACX;AA0EA,eAAsB,sBAAsB,OAAA,EAAkC;AAE1E,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAChC,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA;AAGnC,EAAA,MAAM,aAAa,MAAM,MAAA,CAAO,MAAA,CAAO,MAAA,CAAO,WAAW,IAAI,CAAA;AAG7D,EAAA,OAAO,UAAA,CAAW,IAAI,UAAA,CAAW,UAAU,CAAC,CAAA;AAChD;;;AC5MA,SAAS,OAAA,CAAQ,MAAc,IAAA,EAAsB;AACjD,EAAA,IAAI,IAAA,IAAQ,CAAA,IAAK,IAAA,IAAQ,CAAA,EAAG,OAAO,CAAA;AACnC,EAAA,OAAO,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,CAAI,CAAA,GAAI,IAAI,CAAA,IAAK,CAAA,GAAI,IAAA,GAAO,EAAA,CAAA,GAAM,GAAG,CAAA,GAAI,GAAA;AACpE;AAEA,SAAS,SAAA,CAAU,MAAc,IAAA,EAAoB;AACjD,EAAA,IAAI,IAAA,IAAQ,GAAA,IAAc,IAAA,IAAQ,GAAA,EAAK,OAAO,UAAA;AAC9C,EAAA,IAAI,IAAA,IAAQ,GAAA,IAAa,IAAA,IAAQ,GAAA,EAAK,OAAO,MAAA;AAC7C,EAAA,IAAI,IAAA,IAAQ,GAAA,IAAW,IAAA,IAAQ,EAAA,EAAI,OAAO,QAAA;AAC1C,EAAA,IAAI,IAAA,IAAQ,GAAA,IAAU,IAAA,IAAQ,EAAA,EAAI,OAAO,QAAA;AACzC,EAAA,OAAO,MAAA;AACX;AAEO,SAAS,YAAA,CAAa,IAAA,EAAc,IAAA,EAAc,MAAA,EAAoC;AACzF,EAAA,QAAQ,OAAO,SAAA;AAAW,IACtB,KAAK,IAAA;AACD,MAAA,OAAO,OAAA,CAAQ,MAAM,IAAI,CAAA;AAAA,IAC7B,KAAK,MAAA;AACD,MAAA,OAAO,SAAA,CAAU,MAAM,IAAI,CAAA;AAAA,IAC/B,KAAK,MAAA;AACD,MAAA,OAAO,IAAA;AAAA;AAEnB;AAEO,SAAS,gBAAA,CAAiB,MAAc,IAAA,EAAc;AACzD,EAAA,OAAO,EAAE,EAAA,EAAI,OAAA,CAAQ,IAAA,EAAM,IAAI,GAAG,IAAA,EAAM,SAAA,CAAU,IAAA,EAAM,IAAI,CAAA,EAAE;AAClE;ACGO,SAAS,aAAa,SAAA,EAA2B;AACpD,EAAA,MAAM,SAAA,GAAY,CAAC,KAAA,KAA8C;AAC7D,IAAyB,OAAO,KAAA;AAMJ,EAChC,CAAA;AAEA,EAAA,MAAM,gBAAgB,CAAC,GAAA,KAAwB,CAAA,CAAA,EAAI,SAAS,KAAK,GAAG,CAAA,CAAA;AAEpE,EAAA,OAAO;AAAA,IACH,KAAA,EAAO,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACtE,MAAA,IAAI,SAAA,CAAiB,CAAA,EAAG;AACpB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QACjD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,OAAA,IAAW,OAAO,GAAG,gBAAgB,CAAA;AAAA,QACrE;AAAA,MACJ;AAAA,IACJ,CAAA;AAAA,IACA,IAAA,EAAM,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACrE,MAAA,IAAI,SAAA,CAAgB,CAAA,EAAG;AACnB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QAChD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,OAAA,IAAW,MAAM,GAAG,gBAAgB,CAAA;AAAA,QACnE;AAAA,MACJ;AAAA,IACJ,CAAA;AAAA,IACA,IAAA,EAAM,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACrE,MAAA,IAAI,SAAA,CAAgB,CAAA,EAAG;AACnB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QAChD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,OAAA,IAAW,SAAS,GAAG,gBAAgB,CAAA;AAAA,QACtE;AAAA,MACJ;AAAA,IACJ,CAAA;AAAA,IACA,KAAA,EAAO,CAAC,gBAAA,EAAuC,OAAA,KAA2B;AACtE,MAAA,IAAI,SAAA,CAAiB,CAAA,EAAG;AACpB,QAAA,IAAI,OAAO,qBAAqB,QAAA,EAAU;AACtC,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,gBAAgB,CAAC,CAAA;AAAA,QACjD,CAAA,MAAO;AACH,UAAA,OAAA,CAAQ,KAAA,CAAM,aAAA,CAAc,OAAA,IAAW,OAAO,GAAG,gBAAgB,CAAA;AAAA,QACrE;AAAA,MACJ;AAAA,IACJ;AAAA,GACJ;AACJ;;;ACxEA,IAAM,GAAA,GAAM,aAAa,YAAY,CAAA;AAqCrC,SAAS,aAAa,CAAA,EAAoB;AACtC,EAAA,OAAO,iBAAiB,IAAA,CAAK,CAAC,CAAA,IAAK,CAAA,CAAE,SAAS,CAAA,KAAM,CAAA;AACxD;AAOA,SAAS,cAAc,GAAA,EAAqB;AACxC,EAAA,IAAI,YAAA,CAAa,GAAG,CAAA,EAAG;AACnB,IAAA,OAAOA,cAAO,IAAA,CAAK,GAAA,EAAK,KAAK,CAAA,CAAE,SAAS,QAAQ,CAAA;AAAA,EACpD;AACA,EAAA,OAAO,GAAA;AACX;AASA,SAAS,qBAAA,CAAsB,MAAc,GAAA,EAAqB;AAE9D,EAAA,MAAM,WAAW,IAAA,CAAK,UAAA,CAAW,KAAK,CAAA,IAAK,IAAA,CAAK,WAAW,KAAK,CAAA;AAChE,EAAA,IAAI,QAAA,EAAU;AACV,IAAA,OAAO,QAAA;AAAA,EACX;AAGA,EAAA,MAAM,SAAA,GAAY,cAAc,GAAG,CAAA;AACnC,EAAA,MAAM,kBAAkB,SAAA,CAAU,MAAA,KAAW,EAAA,IAAM,QAAA,CAAS,KAAK,SAAS,CAAA;AAE1E,EAAA,IAAI,eAAA,EAAiB;AACjB,IAAA,OAAO,QAAA;AAAA,EACX;AAGA,EAAA,OAAO,QAAA;AACX;AAEA,eAAe,eAAA,CAAgB;AAAA,EAC3B,IAAA;AAAA,EACA,GAAA;AAAA,EACA,GAAA;AAAA,EACA;AACJ,CAAA,EAA8C;AAE1C,EAAA,MAAM,cAAA,GAAiB,MAAA,IAAU,qBAAA,CAAsB,IAAA,EAAM,GAAG,CAAA;AAEhE,EAAA,GAAA,CAAI,KAAA;AAAA,IACA,EAAE,MAAM,SAAA,EAAW,GAAA,CAAI,QAAQ,SAAA,EAAW,GAAA,CAAI,MAAA,EAAQ,MAAA,EAAQ,cAAA,EAAe;AAAA,IAC7E;AAAA,GACJ;AAEA,EAAA,IAAI,mBAAmB,QAAA,EAAU;AAC7B,IAAA,MAAM,SAAA,GAAY,cAAc,GAAG,CAAA;AACnC,IAAA,GAAA,CAAI,KAAA;AAAA,MACA,EAAE,SAAA,EAAW,SAAA,CAAU,UAAU,CAAA,EAAG,EAAE,IAAI,KAAA,EAAM;AAAA,MAChD;AAAA,KACJ;AAGA,IAAA,GAAA,CAAI,KAAA;AAAA,MACA;AAAA,QACI,OAAA,EAAS,GAAA;AAAA,QACT,QAAA,EAAU,GAAA,CAAI,KAAA,CAAM,IAAI,CAAA,CAAE,MAAA;AAAA,QAC1B,YAAA,EAAc,GAAA,CAAI,KAAA,CAAM,IAAI,EAAE,CAAC,CAAA;AAAA,QAC/B,WAAA,EAAa,GAAA,CAAI,KAAA,CAAM,IAAI,CAAA,CAAE,IAAI,KAAA,CAAM,IAAI,CAAA,CAAE,MAAA,GAAS,CAAC;AAAA,OAC3D;AAAA,MACA;AAAA,KACJ;AAEA,IAAA,MAAM,EAAA,GAAKC,sBAAA,CAAuB,IAAA,EAAM,GAAA,EAAK,SAAS,CAAA;AACtD,IAAA,GAAA,CAAI,IAAA,CAAK,EAAE,IAAA,EAAM,EAAA,IAAM,6BAA6B,CAAA;AAEpD,IAAA,IAAI,CAAC,EAAA,EAAI;AAEL,MAAA,MAAM,WAAW,IAAA,CAAK,UAAA,CAAW,KAAK,CAAA,IAAK,IAAA,CAAK,WAAW,KAAK,CAAA;AAChE,MAAA,IAAI,QAAA,IAAY,SAAA,CAAU,MAAA,KAAW,EAAA,EAAI;AACrC,QAAA,GAAA,CAAI,IAAA;AAAA,UACA,EAAE,IAAA,EAAM,MAAA,EAAQ,mBAAA,EAAqB,SAAA,EAAW,UAAU,MAAA,EAAO;AAAA,UACjE;AAAA,SACJ;AAAA,MACJ,CAAA,MAAO;AACH,QAAA,GAAA,CAAI,KAAA;AAAA,UACA;AAAA,YACI,IAAA;AAAA,YACA,WAAW,SAAA,CAAU,MAAA;AAAA,YACrB,WAAW,GAAA,CAAI,MAAA;AAAA,YACf,UAAA,EAAY,GAAA,CAAI,SAAA,CAAU,CAAA,EAAG,GAAG;AAAA,WACpC;AAAA,UACA;AAAA,SACJ;AAAA,MACJ;AAAA,IACJ;AAEA,IAAA,OAAO,KAAK,eAAA,GAAkB,aAAA;AAAA,EAClC;AAEA,EAAA,IAAI,mBAAmB,QAAA,EAAU;AAC7B,IAAA,MAAM,SAAA,GAAY,cAAc,GAAG,CAAA;AAGnC,IAAA,IAAI,CAAC,IAAA,CAAK,UAAA,CAAW,GAAG,KAAK,CAAC,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,IAAK,CAAC,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,EAAG;AACzE,MAAA,GAAA,CAAI,IAAA,CAAK,EAAE,IAAA,EAAK,EAAG,iDAAiD,CAAA;AACpE,MAAA,OAAO,wBAAA;AAAA,IACX;AAEA,IAAA,GAAA,CAAI,KAAA;AAAA,MACA;AAAA,QACI,IAAA;AAAA,QACA,SAAA,EAAW,SAAA,CAAU,SAAA,CAAU,CAAA,EAAG,EAAE,CAAA,GAAI,KAAA;AAAA,QACxC,UAAA,EAAY,GAAA,CAAI,SAAA,CAAU,CAAA,EAAG,GAAG,CAAA,GAAI,KAAA;AAAA,QACpC,WAAW,GAAA,CAAI;AAAA,OACnB;AAAA,MACA;AAAA,KACJ;AACA,IAAA,MAAM,EAAA,GAAKA,sBAAA,CAAuB,IAAA,EAAM,GAAA,EAAK,SAAS,CAAA;AACtD,IAAA,GAAA,CAAI,IAAA,CAAK,EAAE,IAAA,EAAM,EAAA,EAAI,iBAAiB,SAAA,CAAU,MAAA,IAAU,4BAA4B,CAAA;AACtF,IAAA,IAAI,CAAC,EAAA,EAAI;AACL,MAAA,GAAA,CAAI,KAAA;AAAA,QACA;AAAA,UACI,IAAA;AAAA,UACA,YAAA,EAAc,GAAA,CAAI,KAAA,CAAM,IAAI,EAAE,CAAC,CAAA;AAAA,UAC/B,SAAA,EAAW,SAAA,CAAU,SAAA,CAAU,CAAA,EAAG,EAAE;AAAA,SACxC;AAAA,QACA;AAAA,OACJ;AAAA,IACJ;AACA,IAAA,OAAO,KAAK,eAAA,GAAkB,aAAA;AAAA,EAClC;AAEA,EAAA,OAAO,gBAAA;AACX;AAGO,SAAS,sBAAsB,GAAA,EAAa;AAC/C,EAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,KAAA,CAAM,IAAI,CAAA,CAAE,IAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAM,CAAA;AAKjD,EAAA,MAAM,MAAA,GAAS,CAAC,MAAA,KAAuC;AACnD,IAAA,MAAM,SAAS,MAAA,GAAS,GAAA;AACxB,IAAA,MAAM,GAAA,GAAM,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,KAAM,EAAE,WAAA,EAAY,CAAE,UAAA,CAAW,MAAM,CAAC,CAAA;AAChE,IAAA,IAAI,CAAC,KAAK,OAAO,MAAA;AACjB,IAAA,MAAM,GAAA,GAAM,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA;AAC3B,IAAA,OAAO,GAAA,CAAI,KAAA,CAAM,GAAA,GAAM,CAAC,EAAE,IAAA,EAAK;AAAA,EACnC,CAAA;AAEA,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,SAAS,CAAA,IAAK,EAAA;AACrC,EAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,YAAY,CAAA,IAAK,EAAA;AAG9C,EAAA,IAAI,aAAgC,EAAC;AACrC,EAAA,IAAI;AACA,IAAA,UAAA,GAAa,gBAAgB,aAAa,CAAA;AAAA,EAC9C,SAAS,GAAA,EAAK;AACV,IAAA,GAAA,CAAI,KAAK,EAAE,aAAA,EAAe,KAAA,EAAO,GAAA,IAAO,kCAAkC,CAAA;AAAA,EAC9E;AAGA,EAAA,MAAM,QAAA,uBAAe,GAAA,CAAI;AAAA,IACrB,aAAA;AAAA,IACA,YAAA;AAAA,IACA,SAAA;AAAA,IACA,SAAA;AAAA,IACA,OAAA;AAAA,IACA,WAAA;AAAA,IACA;AAAA,GACH,CAAA;AACD,EAAA,MAAM,aAAqC,EAAC;AAC5C,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACtB,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAC5B,IAAA,IAAI,QAAQ,EAAA,EAAI;AAChB,IAAA,MAAM,GAAA,GAAM,KAAK,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA,CAAE,IAAA,GAAO,WAAA,EAAY;AAClD,IAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,GAAA,GAAM,CAAC,EAAE,IAAA,EAAK;AACrC,IAAA,IAAI,CAAC,SAAS,GAAA,CAAI,GAAG,KAAK,GAAA,EAAK,UAAA,CAAW,GAAG,CAAA,GAAI,GAAA;AAAA,EACrD;AAEA,EAAA,MAAM,OAAA,GAAW,UAAA,CAAW,SAAS,CAAA,IAAK,SAAA;AAG1C,EAAA,MAAM,OAAA,GAAU,WAAW,MAAM,CAAA;AACjC,EAAA,MAAM,IAAA,GAAO,OAAA,GAAU,QAAA,CAAS,OAAA,EAAS,EAAE,CAAA,GAAI,MAAA;AAE/C,EAAA,OAAO;AAAA,IACH,IAAA,EAAM,EAAE,OAAA,EAAS,UAAA,EAAW;AAAA,IAC5B,OAAA;AAAA,IACA,UAAA;AAAA,IACA,IAAA,EAAM,SAAS,MAAA,IAAa,CAAC,MAAM,IAAI,CAAA,IAAK,IAAA,GAAO,CAAA,GAAI,IAAA,GAAO;AAAA,GAClE;AACJ;AAkCA,eAAe,eAAA,CACX,OAAA,EACA,OAAA,EACA,IAAA,EAKsB;AAEtB,EAAA,MAAM,SAAA,GACF,YAAY,QAAA,GACN;AAAA,IACI,MAAM,iBAAA,IAAqB,kCAAA;AAAA,IAC3B;AAAA,GACJ,GACA,YAAY,SAAA,GACV;AAAA,IACI,MAAM,kBAAA,IAAsB,mCAAA;AAAA,IAC5B;AAAA,GACJ,GACA;AAAA,IACI,MAAM,kBAAA,IAAsB,2BAAA;AAAA,IAC5B;AAAA,GACJ;AAEZ,EAAA,IAAI,SAAA,GAA0B,IAAA;AAK9B,EAAA,KAAA,MAAW,QAAQ,SAAA,EAAW;AAC1B,IAAA,IAAI;AACA,MAAA,MAAM,GAAA,GAAM,CAAA,EAAG,IAAI,CAAA,SAAA,EAAY,OAAO,CAAA,KAAA,CAAA;AACtC,MAAA,GAAA,CAAI,KAAA,CAAM,EAAE,GAAA,EAAK,OAAA,IAAW,gBAAgB,CAAA;AAE5C,MAAA,MAAM,IAAA,GAAO,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,QAC1B,MAAA,EAAQ,KAAA;AAAA,QACR,OAAA,EAAS,EAAE,MAAA,EAAQ,kBAAA,EAAmB;AAAA,QACtC,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,GAAI;AAAA,OACnC,CAAA;AAED,MAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AACV,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,KAAA,EAAQ,IAAA,CAAK,MAAM,CAAA,CAAE,CAAA;AAAA,MACzC;AAEA,MAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,EAAK;AAG7B,MAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,EAAG;AACtB,QAAA,MAAM,IAAI,MAAM,kCAAkC,CAAA;AAAA,MACtD;AAGA,MAAA,KAAA,MAAW,QAAQ,IAAA,EAAM;AACrB,QAAA,IACI,OAAO,KAAK,KAAA,KAAU,QAAA,IACtB,OAAO,IAAA,CAAK,MAAA,KAAW,YACvB,OAAO,IAAA,CAAK,OAAO,SAAA,KAAc,SAAA,IACjC,OAAO,IAAA,CAAK,IAAA,KAAS,YACrB,OAAO,IAAA,CAAK,SAAS,QAAA,EACvB;AACE,UAAA,MAAM,IAAI,MAAM,wBAAwB,CAAA;AAAA,QAC5C;AAAA,MACJ;AAEA,MAAA,GAAA,CAAI,IAAA,CAAK,EAAE,IAAA,EAAM,KAAA,EAAO,KAAK,MAAA,EAAQ,OAAA,IAAW,4BAA4B,CAAA;AAC5E,MAAA,OAAO,IAAA;AAAA,IACX,SAAS,GAAA,EAAK;AACV,MAAA,SAAA,GAAY,eAAe,KAAA,GAAQ,GAAA,GAAM,IAAI,KAAA,CAAM,MAAA,CAAO,GAAG,CAAC,CAAA;AAC9D,MAAA,GAAA,CAAI,IAAA;AAAA,QACA,EAAE,IAAA,EAAM,KAAA,EAAO,SAAA,CAAU,SAAS,OAAA,EAAQ;AAAA,QAC1C;AAAA,OACJ;AAAA,IACJ;AAAA,EACJ;AAGA,EAAA,GAAA,CAAI,KAAA,CAAM,EAAE,SAAA,EAAW,KAAA,EAAO,WAAW,OAAA,EAAS,OAAA,IAAW,8BAA8B,CAAA;AAC3F,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,oBAAA,EAAuB,SAAA,EAAW,OAAA,IAAW,SAAS,CAAA,CAAE,CAAA;AAC5E;AAWA,SAAS,cAAA,CACL,KAAA,EACA,UAAA,EACA,SAAA,EAQF;AAEE,EAAA,MAAM,iBAAiB,KAAA,CAAM,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,OAAO,SAAS,CAAA;AAC7D,EAAA,IAAI,cAAA,CAAe,WAAW,CAAA,EAAG;AAC7B,IAAA,OAAO,EAAE,WAAA,EAAa,CAAA,EAAG,YAAA,EAAc,CAAA,EAAG,mBAAmB,CAAA,EAAE;AAAA,EACnE;AAGA,EAAA,MAAM,iBAAA,GAAoB,eAAe,MAAA,CAAO,CAAC,KAAK,CAAA,KAAM,GAAA,GAAM,CAAA,CAAE,KAAA,EAAO,CAAC,CAAA;AAG5E,EAAA,IAAI,UAAA,KAAe,MAAA,IAAa,UAAA,GAAa,CAAA,EAAG;AAE5C,IAAA,MAAM,MAAA,GAAS,CAAC,GAAG,cAAc,EAAE,IAAA,CAAK,CAAC,GAAG,CAAA,KAAM;AAC9C,MAAA,MAAM,OAAA,GAAU,CAAA,CAAE,MAAA,CAAO,YAAA,IAAgB,QAAA;AACzC,MAAA,MAAM,OAAA,GAAU,CAAA,CAAE,MAAA,CAAO,YAAA,IAAgB,QAAA;AACzC,MAAA,IAAI,OAAA,KAAY,OAAA,EAAS,OAAO,OAAA,GAAU,OAAA;AAC1C,MAAA,IAAI,CAAA,CAAE,SAAS,CAAA,CAAE,IAAA,SAAa,CAAA,CAAE,IAAA,CAAK,aAAA,CAAc,CAAA,CAAE,IAAI,CAAA;AACzD,MAAA,OAAO,CAAA,CAAE,OAAO,CAAA,CAAE,IAAA;AAAA,IACtB,CAAC,CAAA;AAGD,IAAA,IAAI,GAAA,GAAM,CAAA;AACV,IAAA,IAAI,YAAA,GAAe,CAAA;AACnB,IAAA,KAAA,MAAW,QAAQ,MAAA,EAAQ;AACvB,MAAA,GAAA,IAAO,IAAA,CAAK,KAAA;AACZ,MAAA,YAAA,GAAe,KAAK,GAAA,CAAI,YAAA,EAAc,IAAA,CAAK,MAAA,CAAO,cAAc,CAAC,CAAA;AACjE,MAAA,IAAI,OAAO,UAAA,EAAY;AAAA,IAC3B;AAGA,IAAA,MAAMC,gBAAe,IAAA,CAAK,GAAA;AAAA,MACtB,CAAA;AAAA,MACA,IAAA,CAAK,OAAO,IAAA,CAAK,GAAA,KAAQ,GAAA,GAAO,YAAA,KAAiB,EAAA,GAAK,EAAA,GAAK,EAAA,CAAG;AAAA,KAClE;AAEA,IAAA,OAAO;AAAA,MACH,WAAA,EAAa,UAAA;AAAA;AAAA,MACb,YAAA,EAAAA,aAAAA;AAAA,MACA;AAAA,KACJ;AAAA,EACJ;AAGA,EAAA,MAAM,WAAA,GAAc,iBAAA;AAIpB,EAAA,IAAI,SAAA,KAAc,MAAA,IAAa,SAAA,GAAY,CAAA,EAAG;AAC1C,IAAA,MAAM,MAAA,GAAS,CAAC,GAAG,cAAc,CAAA,CAAE,IAAA;AAAA,MAC/B,CAAC,GAAG,CAAA,KAAA,CAAO,CAAA,CAAE,OAAO,YAAA,IAAgB,QAAA,KAAa,CAAA,CAAE,MAAA,CAAO,YAAA,IAAgB,QAAA;AAAA,KAC9E;AACA,IAAA,IAAI,GAAA,GAAM,CAAA;AACV,IAAA,IAAI,YAAA,GAAe,CAAA;AACnB,IAAA,KAAA,MAAW,QAAQ,MAAA,EAAQ;AACvB,MAAA,GAAA,IAAO,IAAA,CAAK,KAAA;AACZ,MAAA,YAAA,GAAe,IAAA,CAAK,IAAI,YAAA,EAAc,IAAA,CAAK,OAAO,UAAA,IAAc,IAAA,CAAK,GAAA,EAAI,GAAI,GAAI,CAAA;AACjF,MAAA,IAAI,OAAO,SAAA,EAAW;AAAA,IAC1B;AACA,IAAA,MAAMA,gBAAe,IAAA,CAAK,GAAA;AAAA,MACtB,CAAA;AAAA,MACA,IAAA,CAAK,OAAO,IAAA,CAAK,GAAA,KAAQ,GAAA,GAAO,YAAA,KAAiB,EAAA,GAAK,EAAA,GAAK,EAAA,CAAG;AAAA,KAClE;AACA,IAAA,OAAO,EAAE,WAAA,EAAa,YAAA,EAAAA,aAAAA,EAAc,iBAAA,EAAkB;AAAA,EAC1D;AAGA,EAAA,MAAM,aAAa,IAAA,CAAK,GAAA;AAAA,IACpB,GAAG,cAAA,CAAe,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,CAAO,UAAA,IAAc,IAAA,CAAK,GAAA,EAAI,GAAI,GAAI;AAAA,GACzE;AACA,EAAA,MAAM,YAAA,GAAe,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,KAAK,KAAA,CAAA,CAAO,IAAA,CAAK,GAAA,EAAI,GAAI,GAAA,GAAO,UAAA,KAAe,EAAA,GAAK,EAAA,GAAK,GAAG,CAAC,CAAA;AAE9F,EAAA,OAAO,EAAE,WAAA,EAAa,YAAA,EAAc,iBAAA,EAAkB;AAC1D;AA4BA,eAAsB,MAAA,CAAO,KAAA,EAAoB,IAAA,GAAsB,EAAC,EAA2B;AAC/F,EAAA,MAAM,QAAsB,EAAC;AAC7B,EAAA,IAAI,OAAA,GAAmB,SAAA;AAEvB,EAAA,IAAI;AAEA,IAAA,IAAI,CAAC,MAAM,GAAA,IAAO,CAAC,MAAM,IAAA,IAAQ,CAAC,MAAM,GAAA,EAAK;AACzC,MAAA,KAAA,CAAM,KAAK,aAAa,CAAA;AACxB,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,OAAA,EAAQ;AAAA,IACvC;AAGA,IAAA,MAAM,MAAA,GAAS,qBAAA,CAAsB,KAAA,CAAM,GAAG,CAAA;AAC9C,IAAA,OAAA,GAAU,OAAO,OAAA,IAAW,SAAA;AAG5B,IAAA,MAAM,cAAA,GAAiB,MAAM,qBAAA,CAAsB,KAAA,CAAM,GAAG,CAAA;AAG5D,IAAA,IAAI,MAAA,CAAO,IAAA,CAAK,OAAA,KAAY,KAAA,CAAM,IAAA,EAAM;AACpC,MAAA,KAAA,CAAM,KAAK,aAAa,CAAA;AACxB,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,SAAS,cAAA,EAAe;AAAA,IACvD;AAGA,IAAA,IAAA,CAAK,YAAY,SAAA,IAAa,OAAA,KAAY,QAAA,KAAa,CAAC,KAAK,QAAA,EAAU;AACnE,MAAA,KAAA,CAAM,KAAK,kBAAkB,CAAA;AAC7B,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,SAAS,cAAA,EAAe;AAAA,IACvD;AAMA,IAAA,IAAI,KAAK,WAAA,EAAa;AAClB,MAAA,MAAM,GAAA,GAAM,MAAA,CAAO,UAAA,CAAW,KAAK,CAAA;AACnC,MAAA,IAAI,CAAC,GAAA,IAAO,GAAA,KAAQ,IAAA,CAAK,WAAA,EAAa;AAClC,QAAA,KAAA,CAAM,KAAK,cAAc,CAAA;AACzB,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,SAAS,cAAA,EAAe;AAAA,MACvD;AAAA,IACJ;AAGA,IAAA,IAAI,MAAA,CAAO,UAAA,CAAW,SAAS,CAAA,EAAG;AAC9B,MAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,UAAA,CAAW,SAAS,CAAC,CAAA;AACnD,MAAA,IAAI,CAAC,OAAO,KAAA,CAAM,GAAG,KAAK,GAAA,GAAM,IAAA,CAAK,KAAI,EAAG;AACxC,QAAA,KAAA,CAAM,KAAK,SAAS,CAAA;AACpB,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,SAAS,cAAA,EAAe;AAAA,MACvD;AAAA,IACJ;AAGA,IAAA,MAAM,OAAA,GAAU,MAAM,eAAA,CAAgB;AAAA,MAClC,MAAM,KAAA,CAAM,IAAA;AAAA,MACZ,KAAK,KAAA,CAAM,GAAA;AAAA,MACX,KAAK,KAAA,CAAM,GAAA;AAAA,MACX,GAAI,KAAA,CAAM,MAAA,IAAU,EAAE,MAAA,EAAQ,MAAM,MAAA;AAAO,KAC9C,CAAA;AACD,IAAA,KAAA,CAAM,KAAK,OAAO,CAAA;AAElB,IAAA,MAAM,KAAA,GAAQ,OAAA,KAAY,eAAA,IAAmB,OAAA,KAAY,eAAA;AACzD,IAAA,IAAI,CAAC,KAAA,EAAO;AACR,MAAA,OAAO;AAAA,QACH,EAAA,EAAI,KAAA;AAAA,QACJ,KAAA;AAAA,QACA,OAAA;AAAA,QACA,cAAA;AAAA,QACA,UAAA,EAAY,OAAO,IAAA,CAAK;AAAA,OAC5B;AAAA,IACJ;AAGA,IAAA,IAAI;AACA,MAAA,MAAM,KAAA,GAAQ,MAAM,eAAA,CAAgB,KAAA,CAAM,MAAM,OAAA,EAAS;AAAA,QACrD,oBAAoB,IAAA,CAAK,kBAAA;AAAA,QACzB,mBAAmB,IAAA,CAAK;AAAA,OAC3B,CAAA;AAGD,MAAA,MAAM,EAAE,WAAA,EAAa,YAAA,EAAc,iBAAA,EAAkB,GAAI,cAAA;AAAA,QACrD,KAAA;AAAA,QACA,MAAA,CAAO,IAAA;AAAA,QACP,IAAA,CAAK;AAAA,OACT;AAGA,MAAA,IAAI,MAAA,CAAO,IAAA,KAAS,KAAA,CAAA,IAAa,MAAA,CAAO,OAAO,CAAA,EAAG;AAC9C,QAAA,IAAI,iBAAA,GAAoB,OAAO,IAAA,EAAM;AACjC,UAAA,KAAA,CAAM,KAAK,mBAAmB,CAAA;AAC9B,UAAA,GAAA,CAAI,IAAA;AAAA,YACA;AAAA,cACI,MAAM,MAAA,CAAO,IAAA;AAAA,cACb,iBAAA;AAAA,cACA,SAAS,KAAA,CAAM;AAAA,aACnB;AAAA,YACA;AAAA,WACJ;AACA,UAAA,OAAO;AAAA,YACH,EAAA,EAAI,KAAA;AAAA,YACJ,KAAA;AAAA,YACA,OAAA;AAAA,YACA,cAAA;AAAA,YACA,UAAA,EAAY,OAAO,IAAA,CAAK;AAAA,WAC5B;AAAA,QACJ;AAAA,MACJ;AAGA,MAAA,IAAI,eAAe,CAAA,EAAG;AAClB,QAAA,KAAA,CAAM,KAAK,WAAW,CAAA;AAEtB,QAAA,IAAI,KAAA,CAAM,KAAK,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,MAAA,CAAO,SAAS,CAAA,EAAG;AACxC,UAAA,KAAA,CAAM,KAAK,cAAc,CAAA;AAAA,QAC7B;AACA,QAAA,OAAO;AAAA,UACH,EAAA,EAAI,KAAA;AAAA,UACJ,KAAA;AAAA,UACA,OAAA;AAAA,UACA,cAAA;AAAA,UACA,UAAA,EAAY,OAAO,IAAA,CAAK;AAAA,SAC5B;AAAA,MACJ,CAAA,MAAO;AACH,QAAA,KAAA,CAAM,KAAK,gBAAgB,CAAA;AAAA,MAC/B;AAGA,MAAA,MAAM,OAAA,GAAmB;AAAA,QACrB,WAAA;AAAA,QACA,YAAA;AAAA,QACA,OAAQ,YAAA,CAAa,WAAA,EAAa,cAAc,EAAE,SAAA,EAAW,MAAM;AAAA,OACvE;AAEA,MAAA,OAAO;AAAA,QACH,EAAA,EAAI,IAAA;AAAA,QACJ,KAAA;AAAA,QACA,OAAA;AAAA,QACA,cAAA;AAAA,QACA,UAAA,EAAY,OAAO,IAAA,CAAK,UAAA;AAAA,QACxB;AAAA,OACJ;AAAA,IACJ,SAAS,SAAA,EAAW;AAChB,MAAA,GAAA,CAAI,KAAA,CAAM,EAAE,GAAA,EAAK,SAAA,IAAa,mBAAmB,CAAA;AACjD,MAAA,KAAA,CAAM,KAAK,aAAa,CAAA;AACxB,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,SAAS,cAAA,EAAe;AAAA,IACvD;AAAA,EACJ,SAAS,CAAA,EAAY;AACjB,IAAA,MAAM,MAAM,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,KAAK,cAAc,CAAA;AACvE,IAAA,IAAI,QAAQ,cAAA,EAAgB;AACxB,MAAA,KAAA,CAAM,KAAK,cAAc,CAAA;AAAA,IAC7B,CAAA,MAAO;AACH,MAAA,KAAA,CAAM,KAAK,aAAa,CAAA;AAAA,IAC5B;AACA,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,OAAA,EAAQ;AAAA,EACvC;AACJ","file":"verify.js","sourcesContent":["/**\n * Canonical message builder per SPEC.md §2\n *\n * - LF line endings, exactly one trailing LF\n * - 7 fixed core lines in strict order and wording\n * - Optional extensions appended as key: value with lexicographically sorted lowercase keys\n */\n\nimport type { AttestationEnvelope, IdentityBinding, Scheme } from './types';\n\n/**\n * Input for building a canonical message\n */\nexport interface CanonicalInput {\n    /** Bitcoin address */\n    address: string;\n    /** Optional identity bindings */\n    identities?: IdentityBinding[];\n}\n\n/**\n * Extension key-value pairs for canonical message\n */\nexport type Extensions = Record<string, string | undefined>;\n\n/**\n * Convert bytes to lowercase hex string\n * @param bytes - Byte array to convert\n * @returns Lowercase hex string\n */\nfunction toLowerHex(bytes: Uint8Array): string {\n    return Array.from(bytes)\n        .map((b) => b.toString(16).padStart(2, '0'))\n        .join('');\n}\n\n/**\n * Generate a random 16-byte nonce as lowercase hex\n * Uses Web Crypto API when available, falls back to Math.random()\n * @returns 32-character lowercase hex string\n */\nexport function randomNonce16BHexLower(): string {\n    const arr = new Uint8Array(16);\n\n    try {\n        if (typeof crypto !== 'undefined' && typeof crypto.getRandomValues === 'function') {\n            crypto.getRandomValues(arr);\n            return toLowerHex(arr);\n        }\n    } catch {\n        // Fall through to non-cryptographic fallback\n    }\n\n    // No silent Math.random fallback: a nonce is a load-bearing security\n    // primitive. A deployment without `crypto.getRandomValues` MUST fix its\n    // environment rather than sign with weak randomness.\n    throw new Error('crypto.getRandomValues unavailable — refusing to mint a weak nonce');\n}\n\n/**\n * Reject characters that would break the line-oriented canonical grammar\n * or the comma-separated identities list. If any of these slipped through,\n * an attacker could smuggle a forged `address:` or extension line into the\n * signed payload: `identities: alice\\naddress: bc1qEVIL…` would parse as a\n * second address line. Catch it at the boundary, not at verification time.\n *\n * Also rejects a colon in the identifier so a bad actor can't turn\n * `github:alice:extra` into a different protocol binding on parse.\n */\nconst IDENTITY_PROTOCOL_RE = /^[a-z][a-z0-9_-]*$/;\nconst IDENTITY_FORBIDDEN_CHARS = /[\\r\\n,]/;\n\nfunction assertSafeIdentity({ protocol, identifier }: IdentityBinding): void {\n    if (!IDENTITY_PROTOCOL_RE.test(protocol)) {\n        throw new Error(\n            `invalid identity protocol: ${JSON.stringify(protocol)} — must match /^[a-z][a-z0-9_-]*$/`\n        );\n    }\n    if (!identifier || IDENTITY_FORBIDDEN_CHARS.test(identifier)) {\n        throw new Error(\n            `invalid identity identifier: ${JSON.stringify(identifier)} — must be non-empty and contain no newlines or commas`\n        );\n    }\n}\n\n/**\n * Format identities as comma-separated protocol:identifier pairs, sorted lexicographically\n * @param identities - Array of identity bindings\n * @returns Comma-separated string of protocol:identifier pairs\n */\nexport function formatIdentities(identities: IdentityBinding[] = []): string {\n    if (identities.length === 0) {\n        return '';\n    }\n    for (const id of identities) assertSafeIdentity(id);\n\n    // Format as protocol:identifier and sort lexicographically\n    const formatted = identities\n        .map(({ protocol, identifier }) => `${protocol}:${identifier}`)\n        .sort();\n\n    return formatted.join(',');\n}\n\n/**\n * Parse identities from comma-separated protocol:identifier format\n * @param identitiesStr - Comma-separated identity string\n * @returns Array of identity bindings\n * @throws {Error} If identity format is invalid\n */\nexport function parseIdentities(identitiesStr: string): IdentityBinding[] {\n    if (!identitiesStr || identitiesStr.trim() === '') {\n        return [];\n    }\n    // The identities field lives on one line of the canonical message. If it\n    // contains a raw LF/CR, it's either corrupt or an attempt to smuggle a\n    // fake core line into the parser. Refuse instead of trying to recover.\n    if (IDENTITY_FORBIDDEN_CHARS.test(identitiesStr.replace(/,/g, ''))) {\n        throw new Error('identities field contains forbidden characters (newline)');\n    }\n\n    const bindings = identitiesStr.split(',').map((binding) => {\n        const colonIndex = binding.indexOf(':');\n        if (colonIndex === -1) {\n            throw new Error(`Invalid identity binding format: ${binding}`);\n        }\n        return {\n            protocol: binding.substring(0, colonIndex).trim(),\n            identifier: binding.substring(colonIndex + 1).trim(),\n        };\n    });\n\n    for (const b of bindings) {\n        if (!b.protocol || !b.identifier) {\n            throw new Error(`Invalid identity binding: ${b.protocol}:${b.identifier}`);\n        }\n        assertSafeIdentity(b);\n    }\n    return bindings;\n}\n\n/**\n * Optional deterministic overrides for message building. Only intended for\n * tests / conformance vectors; production callers should let the builder\n * mint a fresh nonce + timestamp per message.\n */\nexport interface BuildOptions {\n    /** 32-char lowercase hex. Default: freshly-generated cryptographic nonce. */\n    nonce?: string;\n    /** RFC-3339 UTC. Default: `new Date().toISOString()`. */\n    issuedAt?: string;\n}\n\n/**\n * Build a canonical message following OrangeCheck Protocol v0 specification\n * @param input - Canonical input with address and identities\n * @param extensions - Optional extension key-value pairs\n * @param options - Optional deterministic overrides (testing only)\n * @returns Canonical message string with LF line endings\n */\nexport function buildCanonicalMessage(\n    { address, identities }: CanonicalInput,\n    extensions: Extensions = {},\n    options: BuildOptions = {}\n): string {\n    const nonce = options.nonce ?? randomNonce16BHexLower();\n    if (!/^[0-9a-f]{32}$/.test(nonce)) {\n        throw new Error(`invalid nonce: must be 32 lowercase hex chars`);\n    }\n    const issuedAt = options.issuedAt ?? new Date().toISOString();\n\n    // Format identities\n    const identitiesStr = formatIdentities(identities);\n\n    // Core (strict wording + order per SPEC.md §2)\n    const core = [\n        'orangecheck',\n        `identities: ${identitiesStr}`,\n        `address: ${address}`,\n        'purpose: portable reputation attestation (non-custodial)',\n        `nonce: ${nonce}`,\n        `issued_at: ${issuedAt}`,\n        'ack: I attest control of this address and bind it to my identities.',\n    ];\n\n    // Normalize and sort extensions\n    const normExt: Record<string, string> = {};\n    for (const [k, v] of Object.entries(extensions)) {\n        if (v == null || v === '') {\n            continue;\n        }\n        const key = k.toLowerCase();\n        normExt[key] = String(v);\n    }\n\n    const extLines = Object.keys(normExt)\n        .sort()\n        .map((k) => `${k}: ${normExt[k]!}`);\n\n    const all = [...core, ...extLines];\n\n    // Join with LF and ensure exactly one trailing LF\n    return all.join('\\n') + '\\n';\n}\n\n/**\n * Generate attestation ID from canonical message\n *\n * attestation_id = SHA-256(canonical_message)\n *\n * @param message - Canonical message string\n * @returns Lowercase hex SHA-256 hash\n */\nexport async function generateAttestationId(message: string): Promise<string> {\n    // Convert message to UTF-8 bytes\n    const encoder = new TextEncoder();\n    const data = encoder.encode(message);\n\n    // Compute SHA-256 hash\n    const hashBuffer = await crypto.subtle.digest('SHA-256', data);\n\n    // Convert to lowercase hex\n    return toLowerHex(new Uint8Array(hashBuffer));\n}\n\n/**\n * Create an attestation envelope for publishing\n *\n * This wraps the canonical message with metadata for Nostr publishing\n *\n * @param message - Canonical message\n * @param signature - BIP-322 or legacy signature\n * @param scheme - Signature scheme used\n * @param address - Bitcoin address\n * @param identities - Identity bindings\n * @param extensions - Optional extensions\n * @returns Attestation envelope ready for publishing\n */\nexport async function createAttestationEnvelope(\n    message: string,\n    signature: string,\n    scheme: Scheme,\n    address: string,\n    identities: IdentityBinding[],\n    extensions: Extensions = {}\n): Promise<AttestationEnvelope> {\n    const attestation_id = await generateAttestationId(message);\n\n    // Extract issued_at from message\n    const issuedAtMatch = message.match(/issued_at: ([^\\n]+)/);\n    const issued_at = issuedAtMatch?.[1] ?? new Date().toISOString();\n\n    // Extract expires from extensions if present\n    const expires_at = extensions.expires;\n\n    // Extract relay hints from extensions if present\n    const relay_hints = extensions.relay_hints?.split(',').map((r) => r.trim());\n\n    // Extract publish targets from extensions if present\n    const publish_targets = extensions.publish?.split(',').map((t) => t.trim());\n\n    // Base64url encode the message\n    const encoder = new TextEncoder();\n    const messageBytes = encoder.encode(message);\n    const base64 = btoa(String.fromCharCode(...messageBytes));\n    const message_b64url = base64.replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=/g, '');\n\n    // Construct verification URL\n    const verification_url = `https://attest.ochk.io/attest/${attestation_id}`;\n\n    return {\n        attestation_id,\n        scheme,\n        address,\n        identities,\n        message,\n        message_b64url,\n        signature,\n        issued_at,\n        expires_at,\n        verification_url,\n        publish_targets,\n        relay_hints,\n    };\n}\n","/**\n * OrangeCheck Scoring\n *\n * The protocol registers exactly one scoring algorithm: `v0`. A `tier` helper\n * is also provided for UI convenience. RPs with specialized needs compute\n * their own score against raw metrics — the protocol does not ship an\n * algorithm zoo.\n *\n * See: docs/oc-protocol/registry/scoring.md\n */\n\nexport type ScoringAlgorithm = 'v0' | 'tier' | 'none';\nexport type Tier = 'platinum' | 'gold' | 'silver' | 'bronze' | 'none';\nexport type ScoreResult = number | Tier | null;\n\nexport interface ScoringConfig {\n    algorithm: ScoringAlgorithm;\n}\n\nfunction scoreV0(sats: number, days: number): number {\n    if (sats <= 0 || days <= 0) return 0;\n    return Math.round(Math.log(1 + sats) * (1 + days / 30) * 100) / 100;\n}\n\nfunction scoreTier(sats: number, days: number): Tier {\n    if (sats >= 10_000_000 && days >= 365) return 'platinum';\n    if (sats >= 1_000_000 && days >= 180) return 'gold';\n    if (sats >= 100_000 && days >= 90) return 'silver';\n    if (sats >= 10_000 && days >= 30) return 'bronze';\n    return 'none';\n}\n\nexport function computeScore(sats: number, days: number, config: ScoringConfig): ScoreResult {\n    switch (config.algorithm) {\n        case 'v0':\n            return scoreV0(sats, days);\n        case 'tier':\n            return scoreTier(sats, days);\n        case 'none':\n            return null;\n    }\n}\n\nexport function computeAllScores(sats: number, days: number) {\n    return { v0: scoreV0(sats, days), tier: scoreTier(sats, days) };\n}\n\nexport function formatScore(score: ScoreResult, algorithm: ScoringAlgorithm): string {\n    if (score === null || algorithm === 'none') return 'N/A';\n    if (algorithm === 'v0') return (score as number).toFixed(1);\n    const tier = score as Tier;\n    const labels: Record<Tier, string> = {\n        platinum: 'Platinum',\n        gold: 'Gold',\n        silver: 'Silver',\n        bronze: 'Bronze',\n        none: '—',\n    };\n    return labels[tier];\n}\n\nexport function getScoreColor(score: ScoreResult, algorithm: ScoringAlgorithm): string {\n    if (algorithm === 'tier') {\n        const colors: Record<Tier, string> = {\n            platinum: '#a855f7',\n            gold: '#eab308',\n            silver: '#94a3b8',\n            bronze: '#f97316',\n            none: '#64748b',\n        };\n        return colors[(score as Tier) ?? 'none'] ?? '#64748b';\n    }\n    const n = (score as number) ?? 0;\n    if (n >= 100) return '#22c55e';\n    if (n >= 50) return '#3b82f6';\n    if (n >= 20) return '#eab308';\n    return '#f97316';\n}\n\nexport function getTierNumber(tier: Tier): number {\n    const map: Record<Tier, number> = {\n        platinum: 4,\n        gold: 3,\n        silver: 2,\n        bronze: 1,\n        none: 0,\n    };\n    return map[tier] ?? 0;\n}\n","/**\n * Simple logger for SDK\n * Can be disabled in production builds\n */\n\n/**\n * Log level type\n */\nexport type LogLevel = 'debug' | 'info' | 'warn' | 'error' | 'none';\n\n/**\n * Logger context type\n */\nexport type LogContext = Record<string, unknown>;\n\n/**\n * Logger interface\n */\nexport interface Logger {\n    debug: (contextOrMessage: string | LogContext, message?: string) => void;\n    info: (contextOrMessage: string | LogContext, message?: string) => void;\n    warn: (contextOrMessage: string | LogContext, message?: string) => void;\n    error: (contextOrMessage: string | LogContext, message?: string) => void;\n}\n\nlet logLevel: LogLevel = 'none';\n\n/**\n * Set the global log level\n * @param level - Log level to set\n */\nexport function setLogLevel(level: LogLevel): void {\n    logLevel = level;\n}\n\n/**\n * Get the current log level\n * @returns Current log level\n */\nexport function getLogLevel(): LogLevel {\n    return logLevel;\n}\n\n/**\n * Create a namespaced logger\n * @param namespace - Logger namespace\n * @returns Logger instance\n */\nexport function createLogger(namespace: string): Logger {\n    const shouldLog = (level: Exclude<LogLevel, 'none'>): boolean => {\n        if (logLevel === 'none') return false;\n\n        const levels: Exclude<LogLevel, 'none'>[] = ['debug', 'info', 'warn', 'error'];\n        const currentLevelIndex = levels.indexOf(logLevel as Exclude<LogLevel, 'none'>);\n        const messageLevelIndex = levels.indexOf(level);\n\n        return messageLevelIndex >= currentLevelIndex;\n    };\n\n    const formatMessage = (msg: string): string => `[${namespace}] ${msg}`;\n\n    return {\n        debug: (contextOrMessage: string | LogContext, message?: string): void => {\n            if (shouldLog('debug')) {\n                if (typeof contextOrMessage === 'string') {\n                    console.debug(formatMessage(contextOrMessage));\n                } else {\n                    console.debug(formatMessage(message ?? 'Debug'), contextOrMessage);\n                }\n            }\n        },\n        info: (contextOrMessage: string | LogContext, message?: string): void => {\n            if (shouldLog('info')) {\n                if (typeof contextOrMessage === 'string') {\n                    console.info(formatMessage(contextOrMessage));\n                } else {\n                    console.info(formatMessage(message ?? 'Info'), contextOrMessage);\n                }\n            }\n        },\n        warn: (contextOrMessage: string | LogContext, message?: string): void => {\n            if (shouldLog('warn')) {\n                if (typeof contextOrMessage === 'string') {\n                    console.warn(formatMessage(contextOrMessage));\n                } else {\n                    console.warn(formatMessage(message ?? 'Warning'), contextOrMessage);\n                }\n            }\n        },\n        error: (contextOrMessage: string | LogContext, message?: string): void => {\n            if (shouldLog('error')) {\n                if (typeof contextOrMessage === 'string') {\n                    console.error(formatMessage(contextOrMessage));\n                } else {\n                    console.error(formatMessage(message ?? 'Error'), contextOrMessage);\n                }\n            }\n        },\n    };\n}\n\n/**\n * Log verification error\n * @param protocol - Identity protocol\n * @param identifier - Identity identifier\n * @param error - Error object\n * @param context - Additional context\n */\nexport function logVerificationError(\n    protocol: string,\n    identifier: string,\n    error: Error,\n    context?: LogContext\n): void {\n    const logger = createLogger('identity-verification');\n    logger.error(\n        {\n            protocol,\n            identifier,\n            error: error.message,\n            stack: error.stack,\n            ...context,\n        },\n        'Verification failed'\n    );\n}\n","/**\n * OrangeCheck Protocol Verification\n *\n * Core verification logic for BIP-322 and legacy signatures,\n * UTXO analysis, and reputation metrics computation\n */\n\nimport type { ScoringAlgorithm } from './scoring';\nimport type {\n    IdentityBinding,\n    Metrics,\n    Network,\n    Scheme,\n    StatusCode,\n    VerifyInput,\n    VerifyOptions,\n    VerifyOutcome,\n} from './types';\n\nimport { Buffer } from 'buffer';\n\nimport { verifySignature as verifyBitcoinSignature } from '@orangecheck/bip322';\n\nimport { generateAttestationId, parseIdentities } from './canonical';\nimport { computeAllScores, computeScore } from './scoring';\nimport { createLogger } from './utils/logger';\n\nconst log = createLogger('ocp/verify');\n\n/**\n * Scoring function per OCP v0 specification (SPEC.md §6)\n * Formula: score = round( ln(1 + sats_bonded) * (1 + days_unspent / 30), 2 )\n *\n * This produces an unbounded score that combines both sats and time.\n * Typical ranges:\n * - 10k sats, 30 days ≈ 18\n * - 100k sats, 90 days ≈ 46\n * - 1M sats, 365 days ≈ 182\n * - 100M sats, 365 days ≈ 243\n */\n/**\n * Export scoring functions for use in other modules\n */\nexport { computeScore, computeAllScores, type ScoringAlgorithm };\n\n/**\n * Input for signature verification\n */\ninterface SignatureVerifyInput {\n    /** Bitcoin address */\n    addr: string;\n    /** Message to verify */\n    msg: string;\n    /** Signature (hex or base64) */\n    sig: string;\n    /** Optional signature scheme (auto-detected if not provided) */\n    scheme?: Scheme;\n}\n\n/**\n * Check if a string looks like hexadecimal\n * @param s - String to check\n * @returns True if string is valid hex with even length\n */\nfunction looksLikeHex(s: string): boolean {\n    return /^[0-9a-fA-F]+$/.test(s) && s.length % 2 === 0;\n}\n\n/**\n * Convert signature to base64 if it's in hex format\n * @param sig - Signature (hex or base64)\n * @returns Signature in base64 format\n */\nfunction toBase64Maybe(sig: string): string {\n    if (looksLikeHex(sig)) {\n        return Buffer.from(sig, 'hex').toString('base64');\n    }\n    return sig;\n}\n\n/**\n * Auto-detect signature scheme based on address type and signature format\n *\n * @param addr - Bitcoin address\n * @param sig - Signature\n * @returns Detected scheme ('bip322' or 'legacy')\n */\nfunction detectSignatureScheme(addr: string, sig: string): Scheme {\n    // SegWit and Taproot addresses MUST use BIP-322\n    const isSegWit = addr.startsWith('bc1') || addr.startsWith('tb1');\n    if (isSegWit) {\n        return 'bip322';\n    }\n\n    // For P2PKH addresses, check if signature looks like legacy format\n    const sigBase64 = toBase64Maybe(sig);\n    const looksLikeLegacy = sigBase64.length === 88 && /^[IHG]/.test(sigBase64);\n\n    if (looksLikeLegacy) {\n        return 'legacy';\n    }\n\n    // Default to BIP-322\n    return 'bip322';\n}\n\nasync function verifySignature({\n    addr,\n    msg,\n    sig,\n    scheme,\n}: SignatureVerifyInput): Promise<StatusCode> {\n    // Auto-detect scheme if not explicitly provided\n    const detectedScheme = scheme || detectSignatureScheme(addr, sig);\n\n    log.debug(\n        { addr, msgLength: msg.length, sigLength: sig.length, scheme: detectedScheme },\n        'Verifying signature'\n    );\n\n    if (detectedScheme === 'bip322') {\n        const sigBase64 = toBase64Maybe(sig);\n        log.debug(\n            { sigBase64: sigBase64.substring(0, 50) + '...' },\n            'Signature converted to base64'\n        );\n\n        // Log the full message for debugging\n        log.debug(\n            {\n                msgFull: msg,\n                msgLines: msg.split('\\n').length,\n                msgFirstLine: msg.split('\\n')[0],\n                msgLastLine: msg.split('\\n')[msg.split('\\n').length - 1],\n            },\n            'Message being verified'\n        );\n\n        const ok = verifyBitcoinSignature(addr, msg, sigBase64);\n        log.info({ addr, ok }, 'BIP-322 verification result');\n\n        if (!ok) {\n            // Check if this looks like an Electrum signature (88 chars, base64)\n            const isSegWit = addr.startsWith('bc1') || addr.startsWith('tb1');\n            if (isSegWit && sigBase64.length === 88) {\n                log.warn(\n                    { addr, wallet: 'possibly Electrum', sigLength: sigBase64.length },\n                    'BIP-322 verification failed - likely Electrum wallet (does not support BIP-322 for SegWit)'\n                );\n            } else {\n                log.error(\n                    {\n                        addr,\n                        sigLength: sigBase64.length,\n                        msgLength: msg.length,\n                        msgPreview: msg.substring(0, 200),\n                    },\n                    'BIP-322 verification failed - signature does not match message'\n                );\n            }\n        }\n\n        return ok ? 'sig_ok_bip322' : 'sig_invalid';\n    }\n\n    if (detectedScheme === 'legacy') {\n        const sigBase64 = toBase64Maybe(sig);\n\n        // Legacy policy: P2PKH only (address must start with '1' for mainnet or 'm'/'n' for testnet)\n        if (!addr.startsWith('1') && !addr.startsWith('m') && !addr.startsWith('n')) {\n            log.warn({ addr }, 'Legacy signature attempted on non-P2PKH address');\n            return 'sig_unsupported_script';\n        }\n\n        log.debug(\n            {\n                addr,\n                sigBase64: sigBase64.substring(0, 50) + '...',\n                msgPreview: msg.substring(0, 100) + '...',\n                msgLength: msg.length,\n            },\n            'Verifying legacy signature'\n        );\n        const ok = verifyBitcoinSignature(addr, msg, sigBase64);\n        log.info({ addr, ok, sigBase64Length: sigBase64.length }, 'Legacy verification result');\n        if (!ok) {\n            log.error(\n                {\n                    addr,\n                    msgFirstLine: msg.split('\\n')[0],\n                    sigFormat: sigBase64.substring(0, 10),\n                },\n                'Legacy signature verification failed - check message format and signature'\n            );\n        }\n        return ok ? 'sig_ok_legacy' : 'sig_invalid';\n    }\n\n    return 'invalid_scheme';\n}\n\n// Canonical message parsing per SPEC + our builder (lowercase keys, extensions)\nexport function parseCanonicalMessage(msg: string) {\n    const lines = msg.split('\\n').map((l) => l.trim());\n    // `.split(':', 2)[1]` truncates values containing a colon (e.g. URLs in\n    // extensions, or npubs in identities). Use the first colon as the\n    // separator and keep everything after it — same approach as the\n    // extensions loop below.\n    const getVal = (prefix: string): string | undefined => {\n        const needle = prefix + ':';\n        const hit = lines.find((l) => l.toLowerCase().startsWith(needle));\n        if (!hit) return undefined;\n        const idx = hit.indexOf(':');\n        return hit.slice(idx + 1).trim();\n    };\n\n    const address = getVal('address') || '';\n    const identitiesStr = getVal('identities') || '';\n\n    // Parse identities\n    let identities: IdentityBinding[] = [];\n    try {\n        identities = parseIdentities(identitiesStr);\n    } catch (err) {\n        log.warn({ identitiesStr, error: err }, 'Failed to parse identities field');\n    }\n\n    // Extensions: collect all key: value pairs excluding core known keys\n    const coreKeys = new Set([\n        'orangecheck',\n        'identities',\n        'address',\n        'purpose',\n        'nonce',\n        'issued_at',\n        'ack',\n    ]);\n    const extensions: Record<string, string> = {};\n    for (const line of lines) {\n        const idx = line.indexOf(':');\n        if (idx === -1) continue;\n        const key = line.slice(0, idx).trim().toLowerCase();\n        const val = line.slice(idx + 1).trim();\n        if (!coreKeys.has(key) && val) extensions[key] = val;\n    }\n\n    const network = (extensions['network'] || 'mainnet') as Network;\n\n    // Parse bond extension if present (integer satoshis)\n    const bondStr = extensions['bond'];\n    const bond = bondStr ? parseInt(bondStr, 10) : undefined;\n\n    return {\n        core: { address, identities },\n        network,\n        extensions,\n        bond: bond !== undefined && !isNaN(bond) && bond > 0 ? bond : undefined,\n    };\n}\n\n/**\n * UTXO type from Esplora API\n */\ninterface EsploraUtxo {\n    /** Transaction ID */\n    txid: string;\n    /** Output index */\n    vout: number;\n    /** Value in satoshis */\n    value: number;\n    /** Confirmation status */\n    status: {\n        /** Whether UTXO is confirmed */\n        confirmed: boolean;\n        /** Block height (if confirmed) */\n        block_height?: number;\n        /** Block timestamp (if confirmed) */\n        block_time?: number;\n    };\n}\n\n/**\n * Fetch UTXOs for an address from Esplora API\n *\n * Tries multiple endpoints in order with automatic fallback\n *\n * @param address - Bitcoin address\n * @param network - Bitcoin network\n * @param opts - Optional custom Esplora endpoints\n * @returns Array of UTXOs\n * @throws {Error} If all endpoints fail\n */\nasync function getAddressUtxos(\n    address: string,\n    network: Network,\n    opts?: {\n        esploraMainnetBase?: string;\n        esploraSignetBase?: string;\n        esploraTestnetBase?: string;\n    }\n): Promise<EsploraUtxo[]> {\n    // Define primary and fallback endpoints\n    const endpoints =\n        network === 'signet'\n            ? [\n                  opts?.esploraSignetBase || 'https://mempool.space/signet/api',\n                  'https://blockstream.info/signet/api',\n              ]\n            : network === 'testnet'\n              ? [\n                    opts?.esploraTestnetBase || 'https://mempool.space/testnet/api',\n                    'https://blockstream.info/testnet/api',\n                ]\n              : [\n                    opts?.esploraMainnetBase || 'https://mempool.space/api',\n                    'https://blockstream.info/api',\n                ];\n\n    let lastError: Error | null = null;\n\n    // Try each endpoint in order. Per-endpoint timeout kept tight (5s) so\n    // a slow upstream doesn't stack against the next one; callers who want\n    // a hard overall deadline should wrap this call with their own timeout.\n    for (const base of endpoints) {\n        try {\n            const url = `${base}/address/${address}/utxo`;\n            log.debug({ url, network }, 'Fetching UTXOs');\n\n            const resp = await fetch(url, {\n                method: 'GET',\n                headers: { Accept: 'application/json' },\n                signal: AbortSignal.timeout(5000),\n            });\n\n            if (!resp.ok) {\n                throw new Error(`HTTP ${resp.status}`);\n            }\n\n            const data = await resp.json();\n\n            // Validate response structure\n            if (!Array.isArray(data)) {\n                throw new Error('Invalid response: expected array');\n            }\n\n            // Validate each UTXO has required fields\n            for (const utxo of data) {\n                if (\n                    typeof utxo.value !== 'number' ||\n                    typeof utxo.status !== 'object' ||\n                    typeof utxo.status.confirmed !== 'boolean' ||\n                    typeof utxo.txid !== 'string' ||\n                    typeof utxo.vout !== 'number'\n                ) {\n                    throw new Error('Invalid UTXO structure');\n                }\n            }\n\n            log.info({ base, count: data.length, network }, 'UTXOs fetched successfully');\n            return data as EsploraUtxo[];\n        } catch (err) {\n            lastError = err instanceof Error ? err : new Error(String(err));\n            log.warn(\n                { base, error: lastError.message, network },\n                'Esplora endpoint failed, trying next'\n            );\n        }\n    }\n\n    // All endpoints failed\n    log.error({ endpoints, error: lastError?.message, network }, 'All Esplora endpoints failed');\n    throw new Error(`esplora_all_failed: ${lastError?.message || 'unknown'}`);\n}\n\n/**\n * Enhanced metrics computation per SPEC.md §5.4 and §6.1\n *\n * Supports bond extension with oldest-first greedy UTXO selection\n *\n * @param utxos - Array of UTXOs from Esplora\n * @param bondAmount - Optional bond amount (enables greedy selection)\n * @returns Computed metrics (sats_bonded, days_unspent, confirmed_balance)\n */\nfunction computeMetrics(\n    utxos: EsploraUtxo[],\n    bondAmount?: number,\n    coverSats?: number\n): {\n    /** Bonded satoshis (confirmed balance or bond amount) */\n    sats_bonded: number;\n    /** Days since oldest/youngest UTXO */\n    days_unspent: number;\n    /** Total confirmed balance */\n    confirmed_balance: number;\n} {\n    // Filter out unconfirmed UTXOs\n    const confirmedUtxos = utxos.filter((u) => u.status.confirmed);\n    if (confirmedUtxos.length === 0) {\n        return { sats_bonded: 0, days_unspent: 0, confirmed_balance: 0 };\n    }\n\n    // Compute total confirmed balance\n    const confirmed_balance = confirmedUtxos.reduce((sum, u) => sum + u.value, 0);\n\n    // If bond extension is present, use oldest-first greedy algorithm\n    if (bondAmount !== undefined && bondAmount > 0) {\n        // Sort UTXOs by (block_height ASC, txid ASC, vout ASC) - oldest first\n        const sorted = [...confirmedUtxos].sort((a, b) => {\n            const heightA = a.status.block_height ?? Infinity;\n            const heightB = b.status.block_height ?? Infinity;\n            if (heightA !== heightB) return heightA - heightB;\n            if (a.txid !== b.txid) return a.txid.localeCompare(b.txid);\n            return a.vout - b.vout;\n        });\n\n        // Greedily select UTXOs until sum >= bond\n        let sum = 0;\n        let youngestTime = 0;\n        for (const utxo of sorted) {\n            sum += utxo.value;\n            youngestTime = Math.max(youngestTime, utxo.status.block_time || 0);\n            if (sum >= bondAmount) break;\n        }\n\n        // Age is computed from the youngest UTXO in the bonded set\n        const days_unspent = Math.max(\n            0,\n            Math.floor((Date.now() / 1000 - youngestTime) / (24 * 60 * 60))\n        );\n\n        return {\n            sats_bonded: bondAmount, // Use exactly bond amount (ignore surplus)\n            days_unspent,\n            confirmed_balance,\n        };\n    }\n\n    // Default behavior (no bond extension): sum all confirmed UTXOs\n    const sats_bonded = confirmed_balance;\n\n    // A checker asking for an amount gets the age of the coins that make it\n    // up, oldest first, not the age of whichever coin is oldest.\n    if (coverSats !== undefined && coverSats > 0) {\n        const sorted = [...confirmedUtxos].sort(\n            (a, b) => (a.status.block_height ?? Infinity) - (b.status.block_height ?? Infinity)\n        );\n        let sum = 0;\n        let youngestTime = 0;\n        for (const utxo of sorted) {\n            sum += utxo.value;\n            youngestTime = Math.max(youngestTime, utxo.status.block_time || Date.now() / 1000);\n            if (sum >= coverSats) break;\n        }\n        const days_unspent = Math.max(\n            0,\n            Math.floor((Date.now() / 1000 - youngestTime) / (24 * 60 * 60))\n        );\n        return { sats_bonded, days_unspent, confirmed_balance };\n    }\n\n    // Find the oldest confirmed UTXO for days_unspent\n    const oldestTime = Math.min(\n        ...confirmedUtxos.map((u) => u.status.block_time || Date.now() / 1000)\n    );\n    const days_unspent = Math.max(0, Math.floor((Date.now() / 1000 - oldestTime) / (24 * 60 * 60)));\n\n    return { sats_bonded, days_unspent, confirmed_balance };\n}\n\n/**\n * Verify an OrangeCheck attestation\n *\n * This is the main verification function that:\n * 1. Validates the canonical message format\n * 2. Verifies the Bitcoin signature (BIP-322 or legacy)\n * 3. Fetches and analyzes UTXOs\n * 4. Computes reputation metrics\n *\n * @param input - Verification input (message, address, signature)\n * @param opts - Optional verification options (test mode, audience, esplora bases)\n * @returns Verification outcome with status codes and metrics\n *\n * @example\n * ```typescript\n * const result = await verify({\n *   msg: canonicalMessage,\n *   addr: 'bc1q...',\n *   sig: 'AkcwRAIg...',\n * });\n *\n * if (result.ok) {\n *   console.log('Score:', result.metrics?.score);\n * }\n * ```\n */\nexport async function verify(input: VerifyInput, opts: VerifyOptions = {}): Promise<VerifyOutcome> {\n    const codes: StatusCode[] = [];\n    let network: Network = 'mainnet';\n\n    try {\n        // Check if we have required fields\n        if (!input.msg || !input.addr || !input.sig) {\n            codes.push('bad_request');\n            return { ok: false, codes, network };\n        }\n\n        // Parse canonical message with extensions\n        const parsed = parseCanonicalMessage(input.msg);\n        network = parsed.network || 'mainnet';\n\n        // Compute attestation ID\n        const attestation_id = await generateAttestationId(input.msg);\n\n        // Validate address consistency\n        if (parsed.core.address !== input.addr) {\n            codes.push('bad_request');\n            return { ok: false, codes, network, attestation_id };\n        }\n\n        // Testnet/Signet policy enforcement\n        if ((network === 'testnet' || network === 'signet') && !opts.testMode) {\n            codes.push('network_testmode');\n            return { ok: false, codes, network, attestation_id };\n        }\n\n        // Optional policy checks for extensions.\n        // `aud` binds the attestation to an origin. If the caller passed\n        // `expectedAud`, the check must be load-bearing — a mismatch is a\n        // phishing signal, not an advisory. Fail hard (spec-aligned).\n        if (opts.expectedAud) {\n            const aud = parsed.extensions['aud'];\n            if (!aud || aud !== opts.expectedAud) {\n                codes.push('aud_mismatch');\n                return { ok: false, codes, network, attestation_id };\n            }\n        }\n\n        // Check message expiration\n        if (parsed.extensions['expires']) {\n            const exp = Date.parse(parsed.extensions['expires']);\n            if (!Number.isNaN(exp) && exp < Date.now()) {\n                codes.push('expired');\n                return { ok: false, codes, network, attestation_id };\n            }\n        }\n\n        // Enhanced signature verification\n        const sigCode = await verifySignature({\n            addr: input.addr,\n            msg: input.msg,\n            sig: input.sig,\n            ...(input.scheme && { scheme: input.scheme }),\n        });\n        codes.push(sigCode);\n\n        const sigOk = sigCode === 'sig_ok_bip322' || sigCode === 'sig_ok_legacy';\n        if (!sigOk) {\n            return {\n                ok: false,\n                codes,\n                network,\n                attestation_id,\n                identities: parsed.core.identities,\n            };\n        }\n\n        // Enhanced UTXO analysis and metrics computation\n        try {\n            const utxos = await getAddressUtxos(input.addr, network, {\n                esploraMainnetBase: opts.esploraMainnetBase,\n                esploraSignetBase: opts.esploraSignetBase,\n            });\n\n            // Compute metrics with bond extension support (SPEC.md §5.4)\n            const { sats_bonded, days_unspent, confirmed_balance } = computeMetrics(\n                utxos,\n                parsed.bond,\n                opts.coverSats\n            );\n\n            // If bond extension is present, enforce minimum balance (SPEC.md §5.4.c)\n            if (parsed.bond !== undefined && parsed.bond > 0) {\n                if (confirmed_balance < parsed.bond) {\n                    codes.push('bond_insufficient');\n                    log.warn(\n                        {\n                            bond: parsed.bond,\n                            confirmed_balance,\n                            address: input.addr,\n                        },\n                        'Bond extension: insufficient balance'\n                    );\n                    return {\n                        ok: false,\n                        codes,\n                        network,\n                        attestation_id,\n                        identities: parsed.core.identities,\n                    };\n                }\n            }\n\n            // Analyze bond status\n            if (sats_bonded <= 0) {\n                codes.push('bond_zero');\n                // Check for pending UTXOs\n                if (utxos.some((u) => !u.status.confirmed)) {\n                    codes.push('bond_pending');\n                }\n                return {\n                    ok: false,\n                    codes,\n                    network,\n                    attestation_id,\n                    identities: parsed.core.identities,\n                };\n            } else {\n                codes.push('bond_confirmed');\n            }\n\n            // Compute final metrics with enhanced scoring\n            const metrics: Metrics = {\n                sats_bonded,\n                days_unspent,\n                score: (computeScore(sats_bonded, days_unspent, { algorithm: 'v0' }) as number),\n            };\n\n            return {\n                ok: true,\n                codes,\n                network,\n                attestation_id,\n                identities: parsed.core.identities,\n                metrics,\n            };\n        } catch (utxoError) {\n            log.error({ err: utxoError }, 'UTXO fetch failed');\n            codes.push('bad_request');\n            return { ok: false, codes, network, attestation_id };\n        }\n    } catch (e: unknown) {\n        const msg = e instanceof Error ? e.message : String(e ?? 'decode_error');\n        if (msg === 'decode_error') {\n            codes.push('decode_error');\n        } else {\n            codes.push('bad_request');\n        }\n        return { ok: false, codes, network };\n    }\n}\n"]}