@peac/protocol 0.9.18 → 0.10.0

package/dist/discovery.js

@@ -1,58 +1,349 @@
 "use strict";
 /**
- * PEAC discovery manifest parsing (/.well-known/peac.txt)
+ * PEAC Discovery - Issuer Configuration and Policy Manifest
+ *
+ * This module provides functions for:
+ * - Issuer configuration discovery (/.well-known/peac-issuer.json)
+ * - Policy manifest parsing (/.well-known/peac.txt)
+ *
+ * @see docs/specs/PEAC-ISSUER.md
+ * @see docs/specs/PEAC-TXT.md
  */
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseIssuerConfig = parseIssuerConfig;
+exports.fetchIssuerConfig = fetchIssuerConfig;
+exports.parsePolicyManifest = parsePolicyManifest;
+exports.fetchPolicyManifest = fetchPolicyManifest;
 exports.parseDiscovery = parseDiscovery;
 exports.fetchDiscovery = fetchDiscovery;
 const schema_1 = require("@peac/schema");
+// ============================================================================
+// Issuer Configuration (/.well-known/peac-issuer.json)
+// ============================================================================
 /**
- * Parse a PEAC discovery manifest from YAML-like text
+ * Parse PEAC issuer configuration from JSON
  *
- * @param text - PEAC discovery text (≤20 lines, ≤2000 bytes)
- * @returns Parsed discovery manifest
+ * @param json - JSON string or object
+ * @returns Parsed issuer configuration
+ * @throws Error if validation fails
  */
-function parseDiscovery(text) {
-    // Validate size
+function parseIssuerConfig(json) {
+    let config;
+    if (typeof json === 'string') {
+        const bytes = new TextEncoder().encode(json).length;
+        if (bytes > schema_1.PEAC_ISSUER_CONFIG_MAX_BYTES) {
+            throw new Error(`Issuer config exceeds ${schema_1.PEAC_ISSUER_CONFIG_MAX_BYTES} bytes (got ${bytes})`);
+        }
+        try {
+            config = JSON.parse(json);
+        }
+        catch {
+            throw new Error('Issuer config is not valid JSON');
+        }
+    }
+    else {
+        config = json;
+    }
+    if (typeof config !== 'object' || config === null) {
+        throw new Error('Issuer config must be an object');
+    }
+    const obj = config;
+    // Validate required fields
+    if (typeof obj.version !== 'string' || !obj.version) {
+        throw new Error('Missing required field: version');
+    }
+    if (typeof obj.issuer !== 'string' || !obj.issuer) {
+        throw new Error('Missing required field: issuer');
+    }
+    if (typeof obj.jwks_uri !== 'string' || !obj.jwks_uri) {
+        throw new Error('Missing required field: jwks_uri');
+    }
+    // Validate URL fields
+    if (!obj.issuer.startsWith('https://')) {
+        throw new Error('issuer must be an HTTPS URL');
+    }
+    if (!obj.jwks_uri.startsWith('https://')) {
+        throw new Error('jwks_uri must be an HTTPS URL');
+    }
+    // Validate optional fields
+    if (obj.verify_endpoint !== undefined) {
+        if (typeof obj.verify_endpoint !== 'string') {
+            throw new Error('verify_endpoint must be a string');
+        }
+        if (!obj.verify_endpoint.startsWith('https://')) {
+            throw new Error('verify_endpoint must be an HTTPS URL');
+        }
+    }
+    if (obj.receipt_versions !== undefined) {
+        if (!Array.isArray(obj.receipt_versions)) {
+            throw new Error('receipt_versions must be an array');
+        }
+    }
+    if (obj.algorithms !== undefined) {
+        if (!Array.isArray(obj.algorithms)) {
+            throw new Error('algorithms must be an array');
+        }
+    }
+    if (obj.payment_rails !== undefined) {
+        if (!Array.isArray(obj.payment_rails)) {
+            throw new Error('payment_rails must be an array');
+        }
+    }
+    return {
+        version: obj.version,
+        issuer: obj.issuer,
+        jwks_uri: obj.jwks_uri,
+        verify_endpoint: obj.verify_endpoint,
+        receipt_versions: obj.receipt_versions,
+        algorithms: obj.algorithms,
+        payment_rails: obj.payment_rails,
+        security_contact: obj.security_contact,
+    };
+}
+/**
+ * Fetch PEAC issuer configuration from an issuer URL
+ *
+ * @param issuerUrl - Issuer URL (https://)
+ * @returns Parsed issuer configuration
+ * @throws Error if fetch or validation fails
+ */
+async function fetchIssuerConfig(issuerUrl) {
+    if (!issuerUrl.startsWith('https://')) {
+        throw new Error('Issuer URL must be https://');
+    }
+    // Remove trailing slash for consistent URL construction
+    const baseUrl = issuerUrl.replace(/\/$/, '');
+    const configUrl = `${baseUrl}${schema_1.PEAC_ISSUER_CONFIG_PATH}`;
+    try {
+        const resp = await fetch(configUrl, {
+            headers: { Accept: 'application/json' },
+            signal: AbortSignal.timeout(10000),
+        });
+        if (!resp.ok) {
+            throw new Error(`Issuer config fetch failed: ${resp.status}`);
+        }
+        const text = await resp.text();
+        const config = parseIssuerConfig(text);
+        // Verify issuer matches
+        const normalizedExpected = baseUrl.replace(/\/$/, '');
+        const normalizedActual = config.issuer.replace(/\/$/, '');
+        if (normalizedActual !== normalizedExpected) {
+            throw new Error(`Issuer mismatch: expected ${normalizedExpected}, got ${normalizedActual}`);
+        }
+        return config;
+    }
+    catch (err) {
+        throw new Error(`Failed to fetch issuer config from ${issuerUrl}: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+// ============================================================================
+// Policy Manifest (/.well-known/peac.txt)
+// ============================================================================
+/**
+ * Detect if content is JSON or YAML
+ */
+function isJsonContent(text, contentType) {
+    if (contentType?.includes('application/json')) {
+        return true;
+    }
+    const firstChar = text.trimStart()[0];
+    return firstChar === '{';
+}
+/**
+ * Parse PEAC policy manifest from YAML or JSON
+ *
+ * @param text - Policy manifest text (YAML or JSON)
+ * @param contentType - Optional Content-Type header value
+ * @returns Parsed policy manifest
+ * @throws Error if validation fails
+ */
+function parsePolicyManifest(text, contentType) {
     const bytes = new TextEncoder().encode(text).length;
-    if (bytes > schema_1.PEAC_DISCOVERY_MAX_BYTES) {
-        throw new Error(`Discovery manifest exceeds ${schema_1.PEAC_DISCOVERY_MAX_BYTES} bytes (got ${bytes})`);
+    if (bytes > schema_1.PEAC_POLICY_MAX_BYTES) {
+        throw new Error(`Policy manifest exceeds ${schema_1.PEAC_POLICY_MAX_BYTES} bytes (got ${bytes})`);
     }
-    const lines = text.trim().split('\n');
-    if (lines.length > 20) {
-        throw new Error(`Discovery manifest exceeds 20 lines (got ${lines.length})`);
+    let manifest;
+    if (isJsonContent(text, contentType)) {
+        // Parse as JSON
+        try {
+            manifest = JSON.parse(text);
+        }
+        catch {
+            throw new Error('Policy manifest is not valid JSON');
+        }
+    }
+    else {
+        // Parse as simple YAML (key: value format)
+        manifest = parseSimpleYaml(text);
+    }
+    // Validate required fields
+    if (typeof manifest.version !== 'string' || !manifest.version) {
+        throw new Error('Missing required field: version');
+    }
+    // Validate version format: must be peac-policy/<major>.<minor>
+    if (!manifest.version.startsWith('peac-policy/')) {
+        throw new Error(`Invalid version format: "${manifest.version}". Must start with "peac-policy/" (e.g., "peac-policy/0.1")`);
     }
-    const discovery = {
-        payments: [],
+    if (manifest.usage !== 'open' && manifest.usage !== 'conditional') {
+        throw new Error('Missing or invalid field: usage (must be "open" or "conditional")');
+    }
+    return {
+        version: manifest.version,
+        usage: manifest.usage,
+        purposes: manifest.purposes,
+        receipts: manifest.receipts,
+        attribution: manifest.attribution,
+        rate_limit: manifest.rate_limit,
+        daily_limit: manifest.daily_limit,
+        negotiate: manifest.negotiate,
+        contact: manifest.contact,
+        license: manifest.license,
+        price: manifest.price,
+        currency: manifest.currency,
+        payment_methods: manifest.payment_methods,
+        payment_endpoint: manifest.payment_endpoint,
     };
-    let inPayments = false;
+}
+/**
+ * Parse simple YAML (key: value format, no complex features)
+ * Rejects YAML features that are security risks (anchors, aliases, tags)
+ */
+function parseSimpleYaml(text) {
+    const lines = text.split('\n');
+    const result = {};
+    // Security: reject YAML features that are dangerous
+    // Check merge keys first (they contain * which would trigger anchor check)
+    if (text.includes('<<:')) {
+        throw new Error('YAML merge keys are not allowed');
+    }
+    if (text.includes('&') || text.includes('*')) {
+        throw new Error('YAML anchors and aliases are not allowed');
+    }
+    if (/!\w+/.test(text)) {
+        throw new Error('YAML custom tags are not allowed');
+    }
+    // Count document separators
+    const docSeparators = text.match(/^---$/gm);
+    if (docSeparators && docSeparators.length > 1) {
+        throw new Error('Multi-document YAML is not allowed');
+    }
     for (const line of lines) {
         const trimmed = line.trim();
-        if (!trimmed || trimmed.startsWith('#')) {
-            continue; // Skip empty lines and comments
+        // Skip empty lines, comments, and document markers
+        if (!trimmed || trimmed.startsWith('#') || trimmed === '---') {
+            continue;
         }
-        if (trimmed === 'payments:') {
-            inPayments = true;
+        // Parse key: value
+        const colonIndex = trimmed.indexOf(':');
+        if (colonIndex === -1)
             continue;
+        const key = trimmed.slice(0, colonIndex).trim();
+        let value = trimmed.slice(colonIndex + 1).trim();
+        // Parse value types
+        if (value === '') {
+            value = undefined;
         }
-        if (inPayments) {
-            // Support both "rail:" (new) and "scheme:" (deprecated) for backward compatibility
-            if (trimmed.startsWith('- rail:') || trimmed.startsWith('- scheme:')) {
-                const rail = trimmed.replace(/^- (rail|scheme):/, '').trim();
-                discovery.payments.push({ rail });
+        else if (typeof value === 'string') {
+            // Remove quotes if present
+            if ((value.startsWith('"') && value.endsWith('"')) ||
+                (value.startsWith("'") && value.endsWith("'"))) {
+                value = value.slice(1, -1);
+            }
+            // Parse arrays [a, b, c]
+            else if (value.startsWith('[') && value.endsWith(']')) {
+                const inner = value.slice(1, -1);
+                value = inner
+                    .split(',')
+                    .map((s) => s.trim())
+                    .filter((s) => s.length > 0);
             }
-            else if (trimmed.startsWith('info:')) {
-                const info = trimmed.replace('info:', '').trim();
-                if (discovery.payments.length > 0) {
-                    discovery.payments[discovery.payments.length - 1].info = info;
-                }
+            // Parse numbers
+            else if (/^-?\d+(\.\d+)?$/.test(value)) {
+                value = parseFloat(value);
             }
-            else if (!trimmed.startsWith(' ') && trimmed.includes(':')) {
-                // New top-level key, exit payments section
-                inPayments = false;
+            // Parse booleans
+            else if (value === 'true') {
+                value = true;
+            }
+            else if (value === 'false') {
+                value = false;
+            }
+        }
+        if (value !== undefined) {
+            result[key] = value;
+        }
+    }
+    return result;
+}
+/**
+ * Fetch PEAC policy manifest from a domain
+ *
+ * @param baseUrl - Base URL (https://example.com)
+ * @returns Parsed policy manifest
+ * @throws Error if fetch or validation fails
+ */
+async function fetchPolicyManifest(baseUrl) {
+    if (!baseUrl.startsWith('https://') && !baseUrl.startsWith('http://localhost')) {
+        throw new Error('Base URL must be https://');
+    }
+    const normalizedBase = baseUrl.replace(/\/$/, '');
+    const primaryUrl = `${normalizedBase}${schema_1.PEAC_POLICY_PATH}`;
+    const fallbackUrl = `${normalizedBase}${schema_1.PEAC_POLICY_FALLBACK_PATH}`;
+    // Try primary location first
+    try {
+        const resp = await fetch(primaryUrl, {
+            headers: { Accept: 'text/plain, application/json' },
+            signal: AbortSignal.timeout(5000),
+        });
+        if (resp.ok) {
+            const text = await resp.text();
+            const contentType = resp.headers.get('content-type') || undefined;
+            return parsePolicyManifest(text, contentType);
+        }
+        // If 404, try fallback
+        if (resp.status === 404) {
+            const fallbackResp = await fetch(fallbackUrl, {
+                headers: { Accept: 'text/plain, application/json' },
+                signal: AbortSignal.timeout(5000),
+            });
+            if (fallbackResp.ok) {
+                const text = await fallbackResp.text();
+                const contentType = fallbackResp.headers.get('content-type') || undefined;
+                return parsePolicyManifest(text, contentType);
             }
+            throw new Error('Policy manifest not found at primary or fallback location');
         }
-        if (!inPayments && trimmed.includes(':')) {
+        throw new Error(`Policy manifest fetch failed: ${resp.status}`);
+    }
+    catch (err) {
+        throw new Error(`Failed to fetch policy manifest from ${baseUrl}: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+// ============================================================================
+// Deprecated Legacy API (for backward compatibility)
+// ============================================================================
+/**
+ * @deprecated Use parseIssuerConfig instead. Will be removed in v1.0.
+ *
+ * Parse a PEAC discovery manifest from YAML-like text.
+ * This function is maintained for backward compatibility only.
+ */
+function parseDiscovery(text) {
+    const bytes = new TextEncoder().encode(text).length;
+    if (bytes > 2000) {
+        throw new Error(`Discovery manifest exceeds 2000 bytes (got ${bytes})`);
+    }
+    const lines = text.trim().split('\n');
+    if (lines.length > 20) {
+        throw new Error(`Discovery manifest exceeds 20 lines (got ${lines.length})`);
+    }
+    const discovery = {};
+    for (const line of lines) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith('#')) {
+            continue;
+        }
+        if (trimmed.includes(':')) {
             const [key, ...valueParts] = trimmed.split(':');
             const value = valueParts.join(':').trim();
             switch (key.trim()) {
@@ -63,19 +354,13 @@ function parseDiscovery(text) {
                     discovery.issuer = value;
                     break;
                 case 'verify':
-                    discovery.verify = value;
+                    discovery.verify_endpoint = value;
                     break;
                 case 'jwks':
-                    discovery.jwks = value;
-                    break;
-                case 'aipref':
-                    discovery.aipref = value;
-                    break;
-                case 'slos':
-                    discovery.slos = value;
+                    discovery.jwks_uri = value;
                     break;
                 case 'security':
-                    discovery.security = value;
+                    discovery.security_contact = value;
                     break;
             }
         }
@@ -85,17 +370,17 @@ function parseDiscovery(text) {
         throw new Error('Missing required field: version');
     if (!discovery.issuer)
         throw new Error('Missing required field: issuer');
-    if (!discovery.verify)
+    if (!discovery.verify_endpoint)
         throw new Error('Missing required field: verify');
-    if (!discovery.jwks)
+    if (!discovery.jwks_uri)
         throw new Error('Missing required field: jwks');
     return discovery;
 }
 /**
- * Fetch and parse PEAC discovery from an issuer URL
+ * @deprecated Use fetchIssuerConfig instead. Will be removed in v1.0.
  *
- * @param issuerUrl - Issuer URL (https://)
- * @returns Parsed discovery manifest
+ * Fetch and parse PEAC discovery from an issuer URL.
+ * This function is maintained for backward compatibility only.
  */
 async function fetchDiscovery(issuerUrl) {
     if (!issuerUrl.startsWith('https://')) {

package/dist/discovery.js.map

@@ -1 +1 @@
-{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../src/discovery.ts"],"names":[],"mappings":";AAAA;;GAEG;;AAUH,wCAkFC;AAQD,wCA0BC;AA5HD,yCAAuE;AAEvE;;;;;GAKG;AACH,SAAgB,cAAc,CAAC,IAAY;IACzC,gBAAgB;IAChB,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IACpD,IAAI,KAAK,GAAG,iCAAwB,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,8BAA8B,iCAAwB,eAAe,KAAK,GAAG,CAAC,CAAC;IACjG,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,4CAA4C,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,SAAS,GAA2B;QACxC,QAAQ,EAAE,EAAE;KACb,CAAC;IAEF,IAAI,UAAU,GAAG,KAAK,CAAC;IAEvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,SAAS,CAAC,gCAAgC;QAC5C,CAAC;QAED,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;YAC5B,UAAU,GAAG,IAAI,CAAC;YAClB,SAAS;QACX,CAAC;QAED,IAAI,UAAU,EAAE,CAAC;YACf,mFAAmF;YACnF,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBACrE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC7D,SAAS,CAAC,QAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACrC,CAAC;iBAAM,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjD,IAAI,SAAS,CAAC,QAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACnC,SAAS,CAAC,QAAS,CAAC,SAAS,CAAC,QAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC;gBAClE,CAAC;YACH,CAAC;iBAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7D,2CAA2C;gBAC3C,UAAU,GAAG,KAAK,CAAC;YACrB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,MAAM,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAE1C,QAAQ,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;gBACnB,KAAK,SAAS;oBACZ,SAAS,CAAC,OAAO,GAAG,KAAK,CAAC;oBAC1B,MAAM;gBACR,KAAK,QAAQ;oBACX,SAAS,CAAC,MAAM,GAAG,KAAK,CAAC;oBACzB,MAAM;gBACR,KAAK,QAAQ;oBACX,SAAS,CAAC,MAAM,GAAG,KAAK,CAAC;oBACzB,MAAM;gBACR,KAAK,MAAM;oBACT,SAAS,CAAC,IAAI,GAAG,KAAK,CAAC;oBACvB,MAAM;gBACR,KAAK,QAAQ;oBACX,SAAS,CAAC,MAAM,GAAG,KAAK,CAAC;oBACzB,MAAM;gBACR,KAAK,MAAM;oBACT,SAAS,CAAC,IAAI,GAAG,KAAK,CAAC;oBACvB,MAAM;gBACR,KAAK,UAAU;oBACb,SAAS,CAAC,QAAQ,GAAG,KAAK,CAAC;oBAC3B,MAAM;YACV,CAAC;QACH,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC3E,IAAI,CAAC,SAAS,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACzE,IAAI,CAAC,SAAS,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACzE,IAAI,CAAC,SAAS,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAErE,OAAO,SAA0B,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,cAAc,CAAC,SAAiB;IACpD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,YAAY,GAAG,GAAG,SAAS,uBAAuB,CAAC;IAEzD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE;YACrC,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE;YACjC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,kCAAkC,SAAS,KACzC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../src/discovery.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;AAwBH,8CAiFC;AASD,8CAqCC;AAyBD,kDAoDC;AAyFD,kDA8CC;AAYD,wCAkDC;AAQD,wCA0BC;AAzcD,yCASsB;AAEtB,+EAA+E;AAC/E,uDAAuD;AACvD,+EAA+E;AAE/E;;;;;;GAMG;AACH,SAAgB,iBAAiB,CAAC,IAAqB;IACrD,IAAI,MAAe,CAAC;IAEpB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QACpD,IAAI,KAAK,GAAG,qCAA4B,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,yBAAyB,qCAA4B,eAAe,KAAK,GAAG,CAAC,CAAC;QAChG,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,GAAG,GAAG,MAAiC,CAAC;IAE9C,2BAA2B;IAC3B,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,sBAAsB;IACtB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,2BAA2B;IAC3B,IAAI,GAAG,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACtC,IAAI,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,IAAI,GAAG,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,eAAe,EAAE,GAAG,CAAC,eAAqC;QAC1D,gBAAgB,EAAE,GAAG,CAAC,gBAAwC;QAC9D,UAAU,EAAE,GAAG,CAAC,UAAkC;QAClD,aAAa,EAAE,GAAG,CAAC,aAAqC;QACxD,gBAAgB,EAAE,GAAG,CAAC,gBAAsC;KAC7D,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,iBAAiB,CAAC,SAAiB;IACvD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IAED,wDAAwD;IACxD,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,GAAG,OAAO,GAAG,gCAAuB,EAAE,CAAC;IAEzD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;YAClC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;YACvC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;SACnC,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAEvC,wBAAwB;QACxB,MAAM,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACtD,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1D,IAAI,gBAAgB,KAAK,kBAAkB,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,6BAA6B,kBAAkB,SAAS,gBAAgB,EAAE,CAAC,CAAC;QAC9F,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,sCAAsC,SAAS,KAC7C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,0CAA0C;AAC1C,+EAA+E;AAE/E;;GAEG;AACH,SAAS,aAAa,CAAC,IAAY,EAAE,WAAoB;IACvD,IAAI,WAAW,EAAE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IACtC,OAAO,SAAS,KAAK,GAAG,CAAC;AAC3B,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,mBAAmB,CAAC,IAAY,EAAE,WAAoB;IACpE,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IACpD,IAAI,KAAK,GAAG,8BAAqB,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,2BAA2B,8BAAqB,eAAe,KAAK,GAAG,CAAC,CAAC;IAC3F,CAAC;IAED,IAAI,QAAiC,CAAC;IAEtC,IAAI,aAAa,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;QACrC,gBAAgB;QAChB,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,2CAA2C;QAC3C,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,2BAA2B;IAC3B,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,+DAA+D;IAC/D,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CACb,4BAA4B,QAAQ,CAAC,OAAO,6DAA6D,CAC1G,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,KAAK,KAAK,MAAM,IAAI,QAAQ,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;IAED,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,KAAK,EAAE,QAAQ,CAAC,KAA+B;QAC/C,QAAQ,EAAE,QAAQ,CAAC,QAAgC;QACnD,QAAQ,EAAE,QAAQ,CAAC,QAAwD;QAC3E,WAAW,EAAE,QAAQ,CAAC,WAA2D;QACjF,UAAU,EAAE,QAAQ,CAAC,UAAgC;QACrD,WAAW,EAAE,QAAQ,CAAC,WAAiC;QACvD,SAAS,EAAE,QAAQ,CAAC,SAA+B;QACnD,OAAO,EAAE,QAAQ,CAAC,OAA6B;QAC/C,OAAO,EAAE,QAAQ,CAAC,OAA6B;QAC/C,KAAK,EAAE,QAAQ,CAAC,KAA2B;QAC3C,QAAQ,EAAE,QAAQ,CAAC,QAA8B;QACjD,eAAe,EAAE,QAAQ,CAAC,eAAuC;QACjE,gBAAgB,EAAE,QAAQ,CAAC,gBAAsC;KAClE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,MAAM,GAA4B,EAAE,CAAC;IAE3C,oDAAoD;IACpD,2EAA2E;IAC3E,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,4BAA4B;IAC5B,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAE5B,mDAAmD;QACnD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;YAC7D,SAAS;QACX,CAAC;QAED,mBAAmB;QACnB,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,UAAU,KAAK,CAAC,CAAC;YAAE,SAAS;QAEhC,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,IAAI,KAAK,GAAY,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAE1D,oBAAoB;QACpB,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACjB,KAAK,GAAG,SAAS,CAAC;QACpB,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACrC,2BAA2B;YAC3B,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;gBACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7B,CAAC;YACD,yBAAyB;iBACpB,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBACjC,KAAK,GAAG,KAAK;qBACV,KAAK,CAAC,GAAG,CAAC;qBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;qBACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACjC,CAAC;YACD,gBAAgB;iBACX,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC;YACD,iBAAiB;iBACZ,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;gBAC1B,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;iBAAM,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;gBAC7B,KAAK,GAAG,KAAK,CAAC;YAChB,CAAC;QACH,CAAC;QAED,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,mBAAmB,CAAC,OAAe;IACvD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,GAAG,cAAc,GAAG,yBAAgB,EAAE,CAAC;IAC1D,MAAM,WAAW,GAAG,GAAG,cAAc,GAAG,kCAAyB,EAAE,CAAC;IAEpE,6BAA6B;IAC7B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE;YACnC,OAAO,EAAE,EAAE,MAAM,EAAE,8BAA8B,EAAE;YACnD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS,CAAC;YAClE,OAAO,mBAAmB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAChD,CAAC;QAED,uBAAuB;QACvB,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACxB,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE;gBAC5C,OAAO,EAAE,EAAE,MAAM,EAAE,8BAA8B,EAAE;gBACnD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;YAEH,IAAI,YAAY,CAAC,EAAE,EAAE,CAAC;gBACpB,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;gBACvC,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS,CAAC;gBAC1E,OAAO,mBAAmB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YAChD,CAAC;YAED,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,wCAAwC,OAAO,KAC7C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,qDAAqD;AACrD,+EAA+E;AAE/E;;;;;GAKG;AACH,SAAgB,cAAc,CAAC,IAAY;IACzC,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IACpD,IAAI,KAAK,GAAG,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,8CAA8C,KAAK,GAAG,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,4CAA4C,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,SAAS,GAA8B,EAAE,CAAC;IAEhD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,SAAS;QACX,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAE1C,QAAQ,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;gBACnB,KAAK,SAAS;oBACZ,SAAS,CAAC,OAAO,GAAG,KAAK,CAAC;oBAC1B,MAAM;gBACR,KAAK,QAAQ;oBACX,SAAS,CAAC,MAAM,GAAG,KAAK,CAAC;oBACzB,MAAM;gBACR,KAAK,QAAQ;oBACX,SAAS,CAAC,eAAe,GAAG,KAAK,CAAC;oBAClC,MAAM;gBACR,KAAK,MAAM;oBACT,SAAS,CAAC,QAAQ,GAAG,KAAK,CAAC;oBAC3B,MAAM;gBACR,KAAK,UAAU;oBACb,SAAS,CAAC,gBAAgB,GAAG,KAAK,CAAC;oBACnC,MAAM;YACV,CAAC;QACH,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC3E,IAAI,CAAC,SAAS,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACzE,IAAI,CAAC,SAAS,CAAC,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAClF,IAAI,CAAC,SAAS,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAEzE,OAAO,SAA0B,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,cAAc,CAAC,SAAiB;IACpD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,YAAY,GAAG,GAAG,SAAS,uBAAuB,CAAC;IAEzD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE;YACrC,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE;YACjC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,kCAAkC,SAAS,KACzC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/headers.d.ts

@@ -1,6 +1,7 @@
 /**
- * HTTP header utilities for PEAC receipts
+ * HTTP header utilities for PEAC receipts and purpose
  */
+import { type PurposeToken, type CanonicalPurpose, type PurposeReason } from '@peac/schema';
 /**
  * Set PEAC-Receipt header on a response
  *
@@ -21,4 +22,40 @@ export declare function getReceiptHeader(headers: Headers): string | null;
  * @param headers - Response headers
  */
 export declare function setVaryHeader(headers: Headers): void;
+/**
+ * Get PEAC-Purpose header from a request
+ *
+ * Parses the comma-separated purpose token list into an array.
+ * Normalizes tokens (lowercase, trim whitespace), deduplicates.
+ *
+ * @param headers - Request headers
+ * @returns Array of normalized PurposeToken values, empty if header missing
+ */
+export declare function getPurposeHeader(headers: Headers): PurposeToken[];
+/**
+ * Set PEAC-Purpose-Applied header on a response
+ *
+ * Indicates which purpose(s) were enforced for this request.
+ *
+ * @param headers - Response headers
+ * @param purpose - Single canonical purpose that was enforced
+ */
+export declare function setPurposeAppliedHeader(headers: Headers, purpose: CanonicalPurpose): void;
+/**
+ * Set PEAC-Purpose-Reason header on a response
+ *
+ * Explains WHY the purpose was enforced as it was (audit trail).
+ *
+ * @param headers - Response headers
+ * @param reason - Purpose reason enum value
+ */
+export declare function setPurposeReasonHeader(headers: Headers, reason: PurposeReason): void;
+/**
+ * Set Vary: PEAC-Purpose header for caching
+ *
+ * If response behavior varies by declared purpose, MUST set this header.
+ *
+ * @param headers - Response headers
+ */
+export declare function setVaryPurposeHeader(headers: Headers): void;
 //# sourceMappingURL=headers.d.ts.map

package/dist/headers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"headers.d.ts","sourceRoot":"","sources":["../src/headers.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAE3E;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAEhE;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAWpD"}
+{"version":3,"file":"headers.d.ts","sourceRoot":"","sources":["../src/headers.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAML,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EACnB,MAAM,cAAc,CAAC;AAEtB;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAE3E;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAEhE;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAWpD;AAMD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,YAAY,EAAE,CAMjE;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,GAAG,IAAI,CAEzF;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,GAAG,IAAI,CAEpF;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAU3D"}

package/dist/headers.js

@@ -1,11 +1,15 @@
 "use strict";
 /**
- * HTTP header utilities for PEAC receipts
+ * HTTP header utilities for PEAC receipts and purpose
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.setReceiptHeader = setReceiptHeader;
 exports.getReceiptHeader = getReceiptHeader;
 exports.setVaryHeader = setVaryHeader;
+exports.getPurposeHeader = getPurposeHeader;
+exports.setPurposeAppliedHeader = setPurposeAppliedHeader;
+exports.setPurposeReasonHeader = setPurposeReasonHeader;
+exports.setVaryPurposeHeader = setVaryPurposeHeader;
 const schema_1 = require("@peac/schema");
 /**
  * Set PEAC-Receipt header on a response
@@ -43,4 +47,64 @@ function setVaryHeader(headers) {
         headers.set('Vary', schema_1.PEAC_RECEIPT_HEADER);
     }
 }
+// -----------------------------------------------------------------------------
+// Purpose Header Utilities (v0.9.24+)
+// -----------------------------------------------------------------------------
+/**
+ * Get PEAC-Purpose header from a request
+ *
+ * Parses the comma-separated purpose token list into an array.
+ * Normalizes tokens (lowercase, trim whitespace), deduplicates.
+ *
+ * @param headers - Request headers
+ * @returns Array of normalized PurposeToken values, empty if header missing
+ */
+function getPurposeHeader(headers) {
+    const value = headers.get(schema_1.PEAC_PURPOSE_HEADER);
+    if (!value) {
+        return [];
+    }
+    return (0, schema_1.parsePurposeHeader)(value);
+}
+/**
+ * Set PEAC-Purpose-Applied header on a response
+ *
+ * Indicates which purpose(s) were enforced for this request.
+ *
+ * @param headers - Response headers
+ * @param purpose - Single canonical purpose that was enforced
+ */
+function setPurposeAppliedHeader(headers, purpose) {
+    headers.set(schema_1.PEAC_PURPOSE_APPLIED_HEADER, purpose);
+}
+/**
+ * Set PEAC-Purpose-Reason header on a response
+ *
+ * Explains WHY the purpose was enforced as it was (audit trail).
+ *
+ * @param headers - Response headers
+ * @param reason - Purpose reason enum value
+ */
+function setPurposeReasonHeader(headers, reason) {
+    headers.set(schema_1.PEAC_PURPOSE_REASON_HEADER, reason);
+}
+/**
+ * Set Vary: PEAC-Purpose header for caching
+ *
+ * If response behavior varies by declared purpose, MUST set this header.
+ *
+ * @param headers - Response headers
+ */
+function setVaryPurposeHeader(headers) {
+    const existing = headers.get('Vary');
+    if (existing) {
+        const varies = existing.split(',').map((v) => v.trim());
+        if (!varies.includes(schema_1.PEAC_PURPOSE_HEADER)) {
+            headers.set('Vary', `${existing}, ${schema_1.PEAC_PURPOSE_HEADER}`);
+        }
+    }
+    else {
+        headers.set('Vary', schema_1.PEAC_PURPOSE_HEADER);
+    }
+}
 //# sourceMappingURL=headers.js.map

package/dist/headers.js.map

@@ -1 +1 @@
-{"version":3,"file":"headers.js","sourceRoot":"","sources":["../src/headers.ts"],"names":[],"mappings":";AAAA;;GAEG;;AAUH,4CAEC;AAQD,4CAEC;AAOD,sCAWC;AAtCD,yCAAmD;AAEnD;;;;;GAKG;AACH,SAAgB,gBAAgB,CAAC,OAAgB,EAAE,UAAkB;IACnE,OAAO,CAAC,GAAG,CAAC,4BAAmB,EAAE,UAAU,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;GAKG;AACH,SAAgB,gBAAgB,CAAC,OAAgB;IAC/C,OAAO,OAAO,CAAC,GAAG,CAAC,4BAAmB,CAAC,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,SAAgB,aAAa,CAAC,OAAgB;IAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,QAAQ,EAAE,CAAC;QACb,iCAAiC;QACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,4BAAmB,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,QAAQ,KAAK,4BAAmB,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,4BAAmB,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC"}
+{"version":3,"file":"headers.js","sourceRoot":"","sources":["../src/headers.ts"],"names":[],"mappings":";AAAA;;GAEG;;AAmBH,4CAEC;AAQD,4CAEC;AAOD,sCAWC;AAeD,4CAMC;AAUD,0DAEC;AAUD,wDAEC;AASD,oDAUC;AA/GD,yCASsB;AAEtB;;;;;GAKG;AACH,SAAgB,gBAAgB,CAAC,OAAgB,EAAE,UAAkB;IACnE,OAAO,CAAC,GAAG,CAAC,4BAAmB,EAAE,UAAU,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;GAKG;AACH,SAAgB,gBAAgB,CAAC,OAAgB;IAC/C,OAAO,OAAO,CAAC,GAAG,CAAC,4BAAmB,CAAC,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,SAAgB,aAAa,CAAC,OAAgB;IAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,QAAQ,EAAE,CAAC;QACb,iCAAiC;QACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,4BAAmB,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,QAAQ,KAAK,4BAAmB,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,4BAAmB,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,sCAAsC;AACtC,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,SAAgB,gBAAgB,CAAC,OAAgB;IAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,4BAAmB,CAAC,CAAC;IAC/C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,IAAA,2BAAkB,EAAC,KAAK,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,uBAAuB,CAAC,OAAgB,EAAE,OAAyB;IACjF,OAAO,CAAC,GAAG,CAAC,oCAA2B,EAAE,OAAO,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,sBAAsB,CAAC,OAAgB,EAAE,MAAqB;IAC5E,OAAO,CAAC,GAAG,CAAC,mCAA0B,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,oBAAoB,CAAC,OAAgB;IACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,4BAAmB,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,QAAQ,KAAK,4BAAmB,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,4BAAmB,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -4,6 +4,8 @@
  */
 export * from './issue';
 export * from './verify';
+export * from './verify-local';
 export * from './headers';
 export * from './discovery';
+export { generateKeypair, verify } from '@peac/crypto';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAG5B,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -18,8 +18,14 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.verify = exports.generateKeypair = void 0;
 __exportStar(require("./issue"), exports);
 __exportStar(require("./verify"), exports);
+__exportStar(require("./verify-local"), exports);
 __exportStar(require("./headers"), exports);
 __exportStar(require("./discovery"), exports);
+// Re-export crypto utilities for single-package quickstart
+var crypto_1 = require("@peac/crypto");
+Object.defineProperty(exports, "generateKeypair", { enumerable: true, get: function () { return crypto_1.generateKeypair; } });
+Object.defineProperty(exports, "verify", { enumerable: true, get: function () { return crypto_1.verify; } });
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;;;;;;;;;;;AAEH,0CAAwB;AACxB,2CAAyB;AACzB,4CAA0B;AAC1B,8CAA4B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;;;;;;;;;;;;AAEH,0CAAwB;AACxB,2CAAyB;AACzB,iDAA+B;AAC/B,4CAA0B;AAC1B,8CAA4B;AAE5B,2DAA2D;AAC3D,uCAAuD;AAA9C,yGAAA,eAAe,OAAA;AAAE,gGAAA,MAAM,OAAA"}