@provian/mcp 0.0.0-stage → 1.2.1

package/dist/core/challenge.js

@@ -0,0 +1,536 @@
+"use strict";
+/**
+ * SIGNED CHALLENGES (`provian-challenge-v1`,) — the requester's half of burn-to-present, for
+ * the MCP tool core.
+ *
+ * SHARED CORE — canonical in `provian-mcp/src/core/`, mirrored byte-identically into
+ * `provian-backend/src/mcp/core/`. Edit only the canonical copy and run `scripts/sync-mcp-core.sh`.
+ *
+ * A byte-for-byte port of the relay's `core/presentation/challenge.ts` (signing string, predicate
+ * digest, parse, structural rules, Ed25519 verdict). The MCP core cannot import the relay or the
+ * SDK, so it carries its own audited copy, pinned by the fixed vectors in
+ * `challenge.test.ts` the same vectors every other package pins.
+ *
+ * A requester hands a presenter `{ v, audience, challenge, predicates?, issuedAt, expiresAt,
+ * presenter?, requester, sig }`. With `requester`/`sig` it is SIGNED (Ed25519): a domain requester
+ * with its own key published at `https://<domain>/.well-known/provian-requester.json`, a wallet
+ * requester by the RELAY with the Provian presentation key (`/v1/present/jwks`) after it
+ * authenticated that wallet. `audience === requester.id`, so the presentation's `aud` IS the
+ * verified requester. An unsigned legacy `{ audience, challenge, predicates? }` stays valid and is
+ * shown UNVERIFIED; a signed challenge failing any check is INVALID and refused (Unknown = Block).
+ *
+ * The one outbound fetch here (a domain requester's key document) is SSRF-guarded to the same bar
+ * as the relay (Security Invariant #6): hostname regex (no IP literals, no localhost), resolve and
+ * refuse ANY private address, pin the socket to the validated address (no DNS-rebinding TOCTOU),
+ * https only, no redirects, ≤ 64 KiB, ≤ 5 s. Node built-ins only, so the relay mirror compiles with
+ * nothing new.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.requesterString = exports.REQUESTER_KEYS_CACHE_MS = exports.REQUESTER_KEYS_TIMEOUT_MS = exports.REQUESTER_KEYS_MAX_BYTES = exports.CHALLENGE_DEFAULT_TTL_SECONDS = exports.CHALLENGE_MAX_TTL_SECONDS = exports.CHALLENGE_MIN_TTL_SECONDS = exports.REQUESTER_WELL_KNOWN_PATH = exports.CHALLENGE_ENVELOPE_VERSION = exports.CHALLENGE_SIGNING_TAG = void 0;
+exports.isSignedChallenge = isSignedChallenge;
+exports.parseChallengeEnvelope = parseChallengeEnvelope;
+exports.challengePredicatesDigest = challengePredicatesDigest;
+exports.challengeSigningString = challengeSigningString;
+exports.checkSignedStructure = checkSignedStructure;
+exports.verifyChallengeEnvelope = verifyChallengeEnvelope;
+exports.parseRequesterKeyDocument = parseRequesterKeyDocument;
+exports.describeVerdict = describeVerdict;
+exports.issueUnsignedChallenge = issueUnsignedChallenge;
+exports.isPrivateIp = isPrivateIp;
+exports.isAllowedRequesterDomain = isAllowedRequesterDomain;
+exports.clearRequesterKeyCache = clearRequesterKeyCache;
+exports.fetchRequesterKeysGuarded = fetchRequesterKeysGuarded;
+const crypto_1 = require("crypto");
+const promises_1 = __importDefault(require("dns/promises"));
+const net_1 = __importDefault(require("net"));
+const https_1 = require("https");
+const presentation_1 = require("./presentation");
+Object.defineProperty(exports, "requesterString", { enumerable: true, get: function () { return presentation_1.requesterString; } });
+const disclosure_request_1 = require("./disclosure-request");
+exports.CHALLENGE_SIGNING_TAG = 'provian-challenge-v1';
+exports.CHALLENGE_ENVELOPE_VERSION = 1;
+/** The requester key document path under the requester's domain. */
+exports.REQUESTER_WELL_KNOWN_PATH = '/.well-known/provian-requester.json';
+/** Signed-challenge lifetime bounds (seconds): 60 s .. 7 days. */
+exports.CHALLENGE_MIN_TTL_SECONDS = 60;
+exports.CHALLENGE_MAX_TTL_SECONDS = 7 * 24 * 3600;
+/** Local gates default to 15 minutes. */
+exports.CHALLENGE_DEFAULT_TTL_SECONDS = 900;
+exports.REQUESTER_KEYS_MAX_BYTES = 64 * 1024;
+exports.REQUESTER_KEYS_TIMEOUT_MS = 5000;
+exports.REQUESTER_KEYS_CACHE_MS = 5 * 60 * 1000;
+const DOMAIN_RE = /^(?=.{4,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z]{2,63}$/;
+const ADDRESS_RE = /^0x[0-9a-f]{40}$/;
+const KID_RE = /^[A-Za-z0-9._-]{1,128}$/;
+/** A Provian wallet id (agent wallet id / human wallet doc id): no separator characters. */
+const WALLET_ID_RE = /^[A-Za-z0-9_-]{1,128}$/;
+const BASE64URL_RE = /^[A-Za-z0-9_-]+$/;
+function isRecord(v) {
+    return typeof v === 'object' && v !== null && !Array.isArray(v);
+}
+/** True when the envelope carries a requester signature (identity claim). */
+function isSignedChallenge(env) {
+    return env.requester !== undefined || env.sig !== undefined;
+}
+/**
+ * Parse an untrusted challenge envelope (object or JSON string). Structural only — no signature
+ * check. Returns null when it is not a well-formed challenge (legacy or signed).
+ */
+function parseChallengeEnvelope(raw) {
+    let obj = raw;
+    if (typeof raw === 'string') {
+        try {
+            obj = JSON.parse(raw);
+        }
+        catch {
+            return null;
+        }
+    }
+    if (!isRecord(obj))
+        return null;
+    const audience = typeof obj.audience === 'string' ? obj.audience.trim() : '';
+    const challenge = typeof obj.challenge === 'string' ? obj.challenge.trim() : '';
+    if (audience.length === 0 || audience.length > presentation_1.PRESENTATION_AUDIENCE_MAX_LEN)
+        return null;
+    if (challenge.length < presentation_1.PRESENTATION_CHALLENGE_MIN_LEN || challenge.length > presentation_1.PRESENTATION_CHALLENGE_MAX_LEN)
+        return null;
+    const predicates = (0, presentation_1.normalizePredicateRequests)(obj.predicates);
+    if (predicates === null)
+        return null;
+    const disclosures = (0, disclosure_request_1.normalizeDisclosureRequests)(obj.disclosures);
+    if (disclosures === null)
+        return null;
+    const env = { audience, challenge };
+    if (predicates.length > 0)
+        env.predicates = predicates;
+    if (disclosures.length > 0)
+        env.disclosures = disclosures;
+    if (obj.v !== undefined)
+        env.v = obj.v;
+    if (obj.issuedAt !== undefined)
+        env.issuedAt = obj.issuedAt;
+    if (obj.expiresAt !== undefined)
+        env.expiresAt = obj.expiresAt;
+    if (obj.presenter !== undefined)
+        env.presenter = obj.presenter;
+    if (obj.requester !== undefined)
+        env.requester = obj.requester;
+    if (obj.sig !== undefined)
+        env.sig = obj.sig;
+    return env;
+}
+/** sha256 hex of the canonical (sorted, normalized) predicate list — the signing-string commitment. */
+function challengePredicatesDigest(predicates) {
+    const canonical = (0, presentation_1.canonicalReputationDirective)({ redact: [], predicates: predicates ?? [] }).predicates;
+    return (0, crypto_1.createHash)('sha256').update(JSON.stringify(canonical), 'utf8').digest('hex');
+}
+/** The exact bytes a requester signs. Fixed line order, `\n`-joined, no trailing newline. */
+function challengeSigningString(env) {
+    const lines = [
+        exports.CHALLENGE_SIGNING_TAG,
+        `aud=${env.audience}`,
+        `chal=${env.challenge}`,
+        `iat=${env.issuedAt}`,
+        `exp=${env.expiresAt}`,
+        `req=${(0, presentation_1.requesterString)(env.requester)}`,
+        `kid=${env.requester.kid}`,
+        `presenter=${(env.presenter ?? '').toLowerCase()}`,
+        `predicates=${challengePredicatesDigest(env.predicates)}`,
+    ];
+    if (env.disclosures !== undefined && env.disclosures.length > 0)
+        lines.push(`disclosures=${(0, disclosure_request_1.challengeDisclosuresDigest)(env.disclosures)}`);
+    return lines.join('\n');
+}
+/** Structural rules for a SIGNED envelope (A.2), excluding the signature itself. */
+function checkSignedStructure(env) {
+    if (env.v !== exports.CHALLENGE_ENVELOPE_VERSION)
+        return 'unsupported_version';
+    const r = env.requester;
+    if (!isRecord(r) || (r.type !== 'domain' && r.type !== 'wallet') || typeof r.id !== 'string')
+        return 'bad_requester';
+    if (typeof r.kid !== 'string' || !KID_RE.test(r.kid))
+        return 'bad_requester';
+    if (r.type === 'domain') {
+        if (!DOMAIN_RE.test(r.id))
+            return 'bad_requester';
+        if (r.address !== undefined)
+            return 'bad_requester';
+    }
+    else {
+        if (!WALLET_ID_RE.test(r.id))
+            return 'bad_requester';
+        if (typeof r.address !== 'string' || !ADDRESS_RE.test(r.address))
+            return 'bad_requester';
+    }
+    if (env.audience !== r.id)
+        return 'audience_not_requester';
+    if (!Number.isInteger(env.issuedAt) || !Number.isInteger(env.expiresAt))
+        return 'bad_window';
+    const ttl = env.expiresAt - env.issuedAt;
+    if (ttl < exports.CHALLENGE_MIN_TTL_SECONDS || ttl > exports.CHALLENGE_MAX_TTL_SECONDS)
+        return 'bad_window';
+    if (env.presenter !== undefined && (typeof env.presenter !== 'string' || !ADDRESS_RE.test(env.presenter)))
+        return 'bad_presenter';
+    if (typeof env.sig !== 'string' || env.sig.length === 0)
+        return 'bad_signature';
+    return null;
+}
+function verifyEd25519(message, sigB64url, key) {
+    if (!BASE64URL_RE.test(sigB64url))
+        return false;
+    if (key.kty !== 'OKP' || key.crv !== 'Ed25519' || typeof key.x !== 'string')
+        return false;
+    const sig = Buffer.from(sigB64url, 'base64url');
+    if (sig.length !== 64)
+        return false;
+    try {
+        const pub = (0, crypto_1.createPublicKey)({ key: { kty: 'OKP', crv: 'Ed25519', x: key.x }, format: 'jwk' });
+        return (0, crypto_1.verify)(null, Buffer.from(message, 'utf8'), pub, sig);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Verify a challenge envelope the way a presenter surface must BEFORE burning (A.3). Unsigned →
+ * `unverified`; signed and every check passes → `verified` (or `expired` / `not_addressed` when
+ * the signature holds but the deadline passed / the challenge names another presenter); any
+ * failure → `invalid`. A domain requester needs `fetchRequesterKeys`; a wallet requester needs
+ * `provianKeys` (the Provian presentation JWKS, or a lazy loader for it).
+ */
+async function verifyChallengeEnvelope(env, opts = {}) {
+    if (!isSignedChallenge(env))
+        return { status: 'unverified', envelope: env };
+    const structural = checkSignedStructure(env);
+    if (structural)
+        return { status: 'invalid', reason: structural, envelope: env };
+    const requester = env.requester;
+    const message = challengeSigningString({
+        audience: env.audience,
+        challenge: env.challenge,
+        issuedAt: env.issuedAt,
+        expiresAt: env.expiresAt,
+        requester,
+        presenter: env.presenter,
+        predicates: env.predicates,
+        disclosures: env.disclosures,
+    });
+    let keys;
+    if (requester.type === 'wallet') {
+        if (!opts.provianKeys)
+            return { status: 'invalid', reason: 'requester_key_unreachable', envelope: env };
+        const source = opts.provianKeys;
+        try {
+            keys = typeof source === 'function' ? await source() : source;
+        }
+        catch {
+            return { status: 'invalid', reason: 'requester_key_unreachable', envelope: env };
+        }
+    }
+    else {
+        if (!opts.fetchRequesterKeys)
+            return { status: 'invalid', reason: 'requester_key_unreachable', envelope: env };
+        try {
+            keys = await opts.fetchRequesterKeys(requester.id);
+        }
+        catch {
+            return { status: 'invalid', reason: 'requester_key_unreachable', envelope: env };
+        }
+    }
+    const key = keys.find((k) => isRecord(k) && k.kid === requester.kid);
+    if (!key)
+        return { status: 'invalid', reason: 'key_not_found', envelope: env };
+    if (!verifyEd25519(message, env.sig, key))
+        return { status: 'invalid', reason: 'bad_signature', envelope: env };
+    const identity = requester.type === 'wallet'
+        ? { type: 'wallet', id: requester.id, address: requester.address }
+        : { type: 'domain', id: requester.id };
+    const now = opts.nowSeconds ?? Math.floor(Date.now() / 1000);
+    if (now > env.expiresAt + presentation_1.PRESENTATION_CLOCK_SKEW_SECONDS)
+        return { status: 'expired', requester: identity, envelope: env };
+    if (env.presenter !== undefined && opts.presenterAddress !== undefined
+        && env.presenter !== opts.presenterAddress.toLowerCase()) {
+        return { status: 'not_addressed', requester: identity, envelope: env };
+    }
+    return { status: 'verified', requester: identity, envelope: env };
+}
+/** Parse a well-known requester key document body (or a JWKS). Throws on a malformed document. */
+function parseRequesterKeyDocument(body) {
+    if (!isRecord(body) || !Array.isArray(body.keys))
+        throw new Error('requester key document missing keys');
+    const keys = [];
+    for (const k of body.keys.slice(0, 16)) {
+        if (isRecord(k) && k.kty === 'OKP' && k.crv === 'Ed25519' && typeof k.x === 'string' && typeof k.kid === 'string') {
+            keys.push({ kty: 'OKP', crv: 'Ed25519', x: k.x, kid: k.kid });
+        }
+    }
+    return keys;
+}
+function identityLabel(r) {
+    return r.type === 'wallet' ? `${r.id} (${r.address ?? ''})` : r.id;
+}
+function describeVerdict(v) {
+    switch (v.status) {
+        case 'verified':
+            return { status: 'verified', identity: v.requester, display: `Requester: ${identityLabel(v.requester)} — verified` };
+        case 'unverified':
+            return { status: 'unverified', identity: null, display: `Requester: ${v.envelope.audience} — unverified (unsigned challenge)` };
+        case 'expired':
+            return { status: 'expired', identity: v.requester, display: `Requester: ${identityLabel(v.requester)} — challenge EXPIRED; do not burn or present` };
+        case 'not_addressed':
+            return { status: 'not_addressed', identity: v.requester, display: `Requester: ${identityLabel(v.requester)} — challenge is addressed to a DIFFERENT presenter; do not burn or present` };
+        default:
+            return { status: 'invalid', identity: null, reason: v.reason, display: `Signed challenge is INVALID (${v.reason}) — refuse; do not burn or present` };
+    }
+}
+/** A fresh unsigned (legacy) challenge in the wire shape. Presenters see it as UNVERIFIED. */
+function issueUnsignedChallenge(input) {
+    const issuedAt = input.nowSeconds ?? Math.floor(Date.now() / 1000);
+    const ttl = input.ttlSeconds ?? exports.CHALLENGE_DEFAULT_TTL_SECONDS;
+    const env = { audience: input.audience, challenge: (0, crypto_1.randomBytes)(32).toString('hex') };
+    if (input.predicates && input.predicates.length > 0)
+        env.predicates = [...input.predicates];
+    if (input.disclosures && input.disclosures.length > 0)
+        env.disclosures = [...input.disclosures];
+    env.issuedAt = issuedAt;
+    env.expiresAt = issuedAt + ttl;
+    if (input.presenter !== undefined)
+        env.presenter = input.presenter.toLowerCase();
+    return env;
+}
+// ---------------------------------------------------------------------------
+// Domain requester key discovery — SSRF-guarded (Security Invariant #6).
+// ---------------------------------------------------------------------------
+function parseIpv4(ip) {
+    const parts = ip.split('.');
+    if (parts.length !== 4)
+        return null;
+    const out = [];
+    for (const p of parts) {
+        if (!/^\d{1,3}$/.test(p))
+            return null;
+        const n = Number(p);
+        if (n > 255)
+            return null;
+        out.push(n);
+    }
+    return out;
+}
+/** Eight 16-bit segments, or null when the text (brackets / zone id tolerated) is not one IPv6 address. */
+function expandIpv6(raw) {
+    let text = raw.trim().replace(/^\[|\]$/g, '');
+    const zone = text.indexOf('%');
+    if (zone !== -1)
+        text = text.slice(0, zone);
+    if (text.length === 0 || !/^[0-9a-fA-F:.]+$/.test(text))
+        return null;
+    if (text.includes('.')) {
+        const lastColon = text.lastIndexOf(':');
+        if (lastColon === -1)
+            return null;
+        const v4 = parseIpv4(text.slice(lastColon + 1));
+        if (v4 === null)
+            return null;
+        text = `${text.slice(0, lastColon + 1)}${((v4[0] << 8) | v4[1]).toString(16)}:${((v4[2] << 8) | v4[3]).toString(16)}`;
+    }
+    const halves = text.split('::');
+    if (halves.length > 2)
+        return null;
+    const left = halves[0] ? halves[0].split(':') : [];
+    const right = halves.length === 2 && halves[1] ? halves[1].split(':') : [];
+    let segments;
+    if (halves.length === 2) {
+        const missing = 8 - left.length - right.length;
+        if (missing < 1)
+            return null;
+        segments = [...left, ...new Array(missing).fill('0'), ...right];
+    }
+    else {
+        segments = left;
+    }
+    if (segments.length !== 8)
+        return null;
+    const out = [];
+    for (const segment of segments) {
+        if (!/^[0-9a-fA-F]{1,4}$/.test(segment))
+            return null;
+        out.push(parseInt(segment, 16));
+    }
+    return out;
+}
+/**
+ * Private / internal / non-routable address predicate. Anything it cannot parse as a public IPv4 /
+ * IPv6 address is treated as private (fail-closed). A superset of the relay's `isPrivateIp`
+ * (adds CGNAT, multicast/reserved, IPv6 multicast, NAT64 / 6to4 which can embed a private v4).
+ */
+function isPrivateIp(ip) {
+    if (ip.includes(':')) {
+        // Judged on the PARSED segments, never the text: an uncompressed `0:0:0:0:0:0:0:1` or a
+        // bracketed literal spells the same loopback (2026-10-17 bug check).
+        const s = expandIpv6(ip);
+        if (s === null)
+            return true;
+        const zeroThrough = (n) => s.slice(0, n).every((x) => x === 0);
+        if (zeroThrough(8))
+            return true; // ::
+        if (zeroThrough(7) && s[7] === 1)
+            return true; // ::1
+        const embedded = `${s[6] >> 8}.${s[6] & 0xff}.${s[7] >> 8}.${s[7] & 0xff}`;
+        // Every IPv4-embedding form under ::/80 — mapped `::ffff:a.b.c.d`, translated `::ffff:0:a.b.c.d`
+        // (SIIT), compatible `::a.b.c.d` — is refused whatever it embeds: a public host is reached by its
+        // plain IPv4, and a translation path is a way to reach a private one .
+        if (zeroThrough(4) && (s[4] === 0 || s[4] === 0xffff) && (s[5] === 0 || s[5] === 0xffff))
+            return true;
+        if (s[0] === 0x0064 && s[1] === 0xff9b)
+            return isPrivateIp(embedded); // NAT64 — judged by the embedded v4
+        if (s[0] === 0x2002)
+            return isPrivateIp(`${s[1] >> 8}.${s[1] & 0xff}.${s[2] >> 8}.${s[2] & 0xff}`); // 6to4
+        if ((s[0] & 0xffc0) === 0xfe80)
+            return true; // link-local fe80::/10
+        if ((s[0] & 0xffc0) === 0xfec0)
+            return true; // site-local (deprecated)
+        if ((s[0] & 0xfe00) === 0xfc00)
+            return true; // unique local fc00::/7
+        if ((s[0] & 0xff00) === 0xff00)
+            return true; // multicast
+        if (s[0] === 0x2001 && s[1] === 0x0db8)
+            return true; // documentation — never routable
+        return false;
+    }
+    const p = parseIpv4(ip);
+    if (!p)
+        return true;
+    if (p[0] === 0 || p[0] === 10 || p[0] === 127)
+        return true;
+    if (p[0] === 100 && p[1] >= 64 && p[1] <= 127)
+        return true; // CGNAT 100.64/10
+    if (p[0] === 169 && p[1] === 254)
+        return true; // link-local incl. cloud metadata
+    if (p[0] === 172 && p[1] >= 16 && p[1] <= 31)
+        return true;
+    if (p[0] === 192 && p[1] === 168)
+        return true;
+    if (p[0] === 192 && p[1] === 0 && (p[2] === 0 || p[2] === 2))
+        return true;
+    if (p[0] === 198 && (p[1] === 18 || p[1] === 19))
+        return true; // benchmarking
+    if (p[0] >= 224)
+        return true; // multicast + reserved + broadcast
+    return false;
+}
+/** A requester domain the guard will fetch from: the spec's hostname regex, never localhost. */
+function isAllowedRequesterDomain(domain) {
+    if (!DOMAIN_RE.test(domain))
+        return false;
+    if (domain === 'localhost' || domain.endsWith('.localhost'))
+        return false;
+    return net_1.default.isIP(domain) === 0;
+}
+async function defaultResolve(hostname) {
+    const [v4, v6] = await Promise.all([
+        promises_1.default.resolve4(hostname).catch(() => []),
+        promises_1.default.resolve6(hostname).catch(() => []),
+    ]);
+    return [...v4, ...v6];
+}
+function pinnedGet(url, pinnedIp) {
+    const family = net_1.default.isIP(pinnedIp) === 6 ? 6 : 4;
+    // Node 20+ calls an Agent's lookup with `{ all: true }` (autoSelectFamily) and expects an ARRAY;
+    // the single-address answer fails the connection ("Invalid IP address: undefined"). Answer both.
+    const lookupImpl = (_h, options, cb) => {
+        const all = typeof options === 'object' && options !== null && options.all === true;
+        if (all)
+            cb(null, [{ address: pinnedIp, family }]);
+        else
+            cb(null, pinnedIp, family);
+    };
+    const agent = new https_1.Agent({ lookup: lookupImpl });
+    return new Promise((resolve) => {
+        let settled = false;
+        const done = (v) => { if (!settled) {
+            settled = true;
+            resolve(v);
+        } };
+        const outbound = (0, https_1.request)(url, { method: 'GET', agent, timeout: exports.REQUESTER_KEYS_TIMEOUT_MS, headers: { accept: 'application/json' } }, (response) => {
+            const status = response.statusCode ?? 0;
+            if (status < 200 || status >= 300) {
+                response.resume();
+                done(null);
+                return;
+            } // no redirects
+            const chunks = [];
+            let total = 0;
+            response.on('data', (chunk) => {
+                total += chunk.length;
+                if (total > exports.REQUESTER_KEYS_MAX_BYTES) {
+                    outbound.destroy(new Error('too_large'));
+                    done(null);
+                    return;
+                }
+                chunks.push(chunk);
+            });
+            response.on('end', () => done(Buffer.concat(chunks)));
+            response.on('error', () => done(null));
+        });
+        const hardStop = setTimeout(() => { outbound.destroy(new Error('timeout')); done(null); }, exports.REQUESTER_KEYS_TIMEOUT_MS);
+        outbound.on('timeout', () => outbound.destroy(new Error('timeout')));
+        outbound.on('error', () => done(null));
+        outbound.on('close', () => clearTimeout(hardStop));
+        outbound.end();
+    }).finally(() => agent.destroy());
+}
+function withTimeout(p, ms, what) {
+    let timer;
+    return Promise.race([
+        p,
+        new Promise((_resolve, reject) => { timer = setTimeout(() => reject(new Error(`${what} timed out`)), ms); }),
+    ]).finally(() => { if (timer)
+        clearTimeout(timer); });
+}
+const keyCache = new Map();
+/** Clear the per-domain key cache (tests / key rotation). */
+function clearRequesterKeyCache() {
+    keyCache.clear();
+}
+/**
+ * Fetch a domain requester's Ed25519 keys, SSRF-guarded. Throws on any failure (the caller maps a
+ * throw to `requester_key_unreachable`, never to a verified identity). Cached 5 minutes per domain
+ * so one requester cannot turn a presenter surface into a request amplifier.
+ */
+async function fetchRequesterKeysGuarded(domain, deps = {}) {
+    if (!isAllowedRequesterDomain(domain))
+        throw new Error('requester domain is not a public DNS hostname');
+    const now = deps.nowMs ? deps.nowMs() : Date.now();
+    const hit = keyCache.get(domain);
+    if (hit && now - hit.atMs < exports.REQUESTER_KEYS_CACHE_MS)
+        return hit.keys;
+    const addresses = await withTimeout((deps.resolveHostname ?? defaultResolve)(domain), exports.REQUESTER_KEYS_TIMEOUT_MS, 'requester domain resolution');
+    if (addresses.length === 0)
+        throw new Error('requester domain does not resolve');
+    for (const addr of addresses) {
+        if (net_1.default.isIP(addr) === 0 || isPrivateIp(addr))
+            throw new Error('requester domain resolves to a private address');
+    }
+    const url = `https://${domain}${exports.REQUESTER_WELL_KNOWN_PATH}`;
+    const body = await withTimeout((deps.get ?? pinnedGet)(url, addresses[0]), exports.REQUESTER_KEYS_TIMEOUT_MS + 500, 'requester key fetch');
+    if (!body)
+        throw new Error('requester key document unreachable');
+    if (body.length > exports.REQUESTER_KEYS_MAX_BYTES)
+        throw new Error('requester key document too large');
+    let parsed;
+    try {
+        parsed = JSON.parse(body.toString('utf8'));
+    }
+    catch {
+        throw new Error('requester key document is not JSON');
+    }
+    const keys = parseRequesterKeyDocument(parsed);
+    if (keys.length === 0)
+        throw new Error('requester key document has no Ed25519 keys');
+    keyCache.set(domain, { keys, atMs: now });
+    return keys;
+}
+//# sourceMappingURL=challenge.js.map

package/dist/core/challenge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"challenge.js","sourceRoot":"","sources":["../../src/core/challenge.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;;;;;;AA8GH,8CAEC;AAMD,wDAwBC;AAGD,8DAGC;AAGD,wDAuBC;AAGD,oDAmBC;AAsBD,0DA+CC;AAGD,8DASC;AAoBD,0CAaC;AAGD,wDAiBC;AA0DD,kCAkCC;AAGD,4DAIC;AA+DD,wDAEC;AAOD,8DAqBC;AAxgBD,mCAA0F;AAC1F,4DAA+B;AAC/B,8CAAsB;AACtB,iCAAqE;AACrE,iDASwB;AAiCf,gGAnCP,8BAAe,OAmCO;AAhCxB,6DAAgI;AAEnH,QAAA,qBAAqB,GAAG,sBAAsB,CAAC;AAC/C,QAAA,0BAA0B,GAAG,CAAU,CAAC;AACrD,oEAAoE;AACvD,QAAA,yBAAyB,GAAG,qCAAqC,CAAC;AAC/E,kEAAkE;AACrD,QAAA,yBAAyB,GAAG,EAAE,CAAC;AAC/B,QAAA,yBAAyB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACvD,yCAAyC;AAC5B,QAAA,6BAA6B,GAAG,GAAG,CAAC;AAEpC,QAAA,wBAAwB,GAAG,EAAE,GAAG,IAAI,CAAC;AACrC,QAAA,yBAAyB,GAAG,IAAI,CAAC;AACjC,QAAA,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAErD,MAAM,SAAS,GAAG,uEAAuE,CAAC;AAC1F,MAAM,UAAU,GAAG,kBAAkB,CAAC;AACtC,MAAM,MAAM,GAAG,yBAAyB,CAAC;AACzC,4FAA4F;AAC5F,MAAM,YAAY,GAAG,wBAAwB,CAAC;AAC9C,MAAM,YAAY,GAAG,kBAAkB,CAAC;AAoExC,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,6EAA6E;AAC7E,SAAgB,iBAAiB,CAAC,GAAsB;IACtD,OAAO,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC;AAC9D,CAAC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,GAAY;IACjD,IAAI,GAAG,GAAY,GAAG,CAAC;IACvB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC;YAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IACvD,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,4CAA6B;QAAE,OAAO,IAAI,CAAC;IAC1F,IAAI,SAAS,CAAC,MAAM,GAAG,6CAA8B,IAAI,SAAS,CAAC,MAAM,GAAG,6CAA8B;QAAE,OAAO,IAAI,CAAC;IACxH,MAAM,UAAU,GAAG,IAAA,yCAA0B,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9D,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,WAAW,GAAG,IAAA,gDAA2B,EAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACjE,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,GAAG,GAA4B,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC7D,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC;IACvD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,CAAC,WAAW,GAAG,WAAW,CAAC;IAC1D,IAAI,GAAG,CAAC,CAAC,KAAK,SAAS;QAAE,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACvC,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS;QAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC5D,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;QAAE,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;IAC/D,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;QAAE,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;IAC/D,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;QAAE,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;IAC/D,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS;QAAE,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IAC7C,OAAO,GAAmC,CAAC;AAC7C,CAAC;AAED,uGAAuG;AACvG,SAAgB,yBAAyB,CAAC,UAAmD;IAC3F,MAAM,SAAS,GAAG,IAAA,2CAA4B,EAAC,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC;IACxG,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtF,CAAC;AAED,6FAA6F;AAC7F,SAAgB,sBAAsB,CAAC,GAStC;IACC,MAAM,KAAK,GAAG;QACZ,6BAAqB;QACrB,OAAO,GAAG,CAAC,QAAQ,EAAE;QACrB,QAAQ,GAAG,CAAC,SAAS,EAAE;QACvB,OAAO,GAAG,CAAC,QAAQ,EAAE;QACrB,OAAO,GAAG,CAAC,SAAS,EAAE;QACtB,OAAO,IAAA,8BAAe,EAAC,GAAG,CAAC,SAAS,CAAC,EAAE;QACvC,OAAO,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QAC1B,aAAa,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE;QAClD,cAAc,yBAAyB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE;KAC1D,CAAC;IACF,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,eAAe,IAAA,+CAA0B,EAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC1I,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,oFAAoF;AACpF,SAAgB,oBAAoB,CAAC,GAAsB;IACzD,IAAI,GAAG,CAAC,CAAC,KAAK,kCAA0B;QAAE,OAAO,qBAAqB,CAAC;IACvE,MAAM,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC;IACxB,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,eAAe,CAAC;IACrH,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;QAAE,OAAO,eAAe,CAAC;IAC7E,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACxB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,OAAO,eAAe,CAAC;QAClD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,eAAe,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,OAAO,eAAe,CAAC;QACrD,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAAE,OAAO,eAAe,CAAC;IAC3F,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC,EAAE;QAAE,OAAO,wBAAwB,CAAC;IAC3D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO,YAAY,CAAC;IAC7F,MAAM,GAAG,GAAI,GAAG,CAAC,SAAoB,GAAI,GAAG,CAAC,QAAmB,CAAC;IACjE,IAAI,GAAG,GAAG,iCAAyB,IAAI,GAAG,GAAG,iCAAyB;QAAE,OAAO,YAAY,CAAC;IAC5F,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAAE,OAAO,eAAe,CAAC;IAClI,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,eAAe,CAAC;IAChF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,OAAe,EAAE,SAAiB,EAAE,GAAiB;IAC1E,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC1F,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,wBAAe,EAAC,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9F,OAAO,IAAA,eAAY,EAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,uBAAuB,CAC3C,GAAsB,EACtB,OAKI,EAAE;IAEN,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;IAC5E,MAAM,UAAU,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,UAAU;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;IAChF,MAAM,SAAS,GAAG,GAAG,CAAC,SAA8B,CAAC;IACrD,MAAM,OAAO,GAAG,sBAAsB,CAAC;QACrC,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,QAAQ,EAAE,GAAG,CAAC,QAAkB;QAChC,SAAS,EAAE,GAAG,CAAC,SAAmB;QAClC,SAAS;QACT,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,WAAW,EAAE,GAAG,CAAC,WAAW;KAC7B,CAAC,CAAC;IAEH,IAAI,IAA6B,CAAC;IAClC,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,2BAA2B,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;QACxG,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC;QAChC,IAAI,CAAC;YAAC,IAAI,GAAG,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,2BAA2B,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;QAAC,CAAC;IACpK,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI,CAAC,kBAAkB;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,2BAA2B,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;QAC/G,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,2BAA2B,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;QAAC,CAAC;IACzJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,GAAG,CAAC,CAAC;IACrE,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;IAC/E,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,GAAa,EAAE,GAAG,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;IAE1H,MAAM,QAAQ,GAAsB,SAAS,CAAC,IAAI,KAAK,QAAQ;QAC7D,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE;QAClE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC7D,IAAI,GAAG,GAAI,GAAG,CAAC,SAAoB,GAAG,8CAA+B;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;IACxI,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS;WACjE,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,EAAE,CAAC;QAC3D,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AACpE,CAAC;AAED,kGAAkG;AAClG,SAAgB,yBAAyB,CAAC,IAAa;IACrD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzG,MAAM,IAAI,GAAmB,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QACvC,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YAClH,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAgBD,SAAS,aAAa,CAAC,CAAoB;IACzC,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,SAAgB,eAAe,CAAC,CAAmB;IACjD,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;QACjB,KAAK,UAAU;YACb,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,cAAc,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;QACvH,KAAK,YAAY;YACf,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,QAAQ,oCAAoC,EAAE,CAAC;QAClI,KAAK,SAAS;YACZ,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,cAAc,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,8CAA8C,EAAE,CAAC;QACvJ,KAAK,eAAe;YAClB,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,cAAc,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,4EAA4E,EAAE,CAAC;QAC3L;YACE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,gCAAgC,CAAC,CAAC,MAAM,oCAAoC,EAAE,CAAC;IAC1J,CAAC;AACH,CAAC;AAED,8FAA8F;AAC9F,SAAgB,sBAAsB,CAAC,KAOtC;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,IAAI,qCAA6B,CAAC;IAC9D,MAAM,GAAG,GAA4B,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAC9G,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,CAAC,UAAU,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5F,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,CAAC,WAAW,GAAG,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;IAChG,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACxB,GAAG,CAAC,SAAS,GAAG,QAAQ,GAAG,GAAG,CAAC;IAC/B,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QAAE,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;IACjF,OAAO,GAAmC,CAAC;AAC7C,CAAC;AAED,8EAA8E;AAC9E,yEAAyE;AACzE,8EAA8E;AAE9E,SAAS,SAAS,CAAC,EAAU;IAC3B,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,GAAG,GAAG;YAAE,OAAO,IAAI,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2GAA2G;AAC3G,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,IAAI,KAAK,CAAC,CAAC;QAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,SAAS,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAClC,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC;QAChD,IAAI,EAAE,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC7B,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;IACxH,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,IAAI,QAAkB,CAAC;IACvB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC/C,IAAI,OAAO,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7B,QAAQ,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,IAAI,KAAK,CAAS,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;IAC1E,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QACrD,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAgB,WAAW,CAAC,EAAU;IACpC,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,wFAAwF;QACxF,qEAAqE;QACrE,MAAM,CAAC,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC5B,MAAM,WAAW,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAChF,IAAI,WAAW,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,KAAK;QACtC,IAAI,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,MAAM;QACrD,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC;QAC3E,iGAAiG;QACjG,kGAAkG;QAClG,uEAAuE;QACvE,IAAI,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACtG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM;YAAE,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,oCAAoC;QAC1G,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM;YAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO;QAC3G,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC,CAAC,uBAAuB;QACpE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC,CAAC,0BAA0B;QACvE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC,CAAC,wBAAwB;QACrE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC,CAAC,YAAY;QACzD,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC,CAAC,iCAAiC;QACtF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,CAAC,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;IACxB,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC3D,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,kBAAkB;IAC9E,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,kCAAkC;IACjF,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC1D,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,eAAe;IAC9E,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,mCAAmC;IACjE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gGAAgG;AAChG,SAAgB,wBAAwB,CAAC,MAAc;IACrD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1E,OAAO,aAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAUD,KAAK,UAAU,cAAc,CAAC,QAAgB;IAC5C,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjC,kBAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAc,CAAC;QAClD,kBAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAc,CAAC;KACnD,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,SAAS,CAAC,GAAW,EAAE,QAAgB;IAC9C,MAAM,MAAM,GAAG,aAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,iGAAiG;IACjG,iGAAiG;IACjG,MAAM,UAAU,GAAG,CAAC,EAAU,EAAE,OAAgB,EAAE,EAAgC,EAAQ,EAAE;QAC1F,MAAM,GAAG,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAK,OAA6B,CAAC,GAAG,KAAK,IAAI,CAAC;QAC3G,IAAI,GAAG;YAAE,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;;YAC9C,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,aAAU,CAAC,EAAE,MAAM,EAAE,UAA2C,EAAE,CAAC,CAAC;IACtF,OAAO,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE;QAC5C,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,IAAI,GAAG,CAAC,CAAgB,EAAQ,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;YAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC;QAC3F,MAAM,QAAQ,GAAG,IAAA,eAAY,EAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,iCAAyB,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE;YACrJ,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC;YACxC,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;gBAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC,CAAC,eAAe;YAC7F,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACpC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;gBACtB,IAAI,KAAK,GAAG,gCAAwB,EAAE,CAAC;oBAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;oBAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAAC,OAAO;gBAAC,CAAC;gBACvG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACtD,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,iCAAyB,CAAC,CAAC;QACtH,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACrE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACvC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnD,QAAQ,CAAC,GAAG,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,WAAW,CAAI,CAAa,EAAE,EAAU,EAAE,IAAY;IAC7D,IAAI,KAAgD,CAAC;IACrD,OAAO,OAAO,CAAC,IAAI,CAAC;QAClB,CAAC;QACD,IAAI,OAAO,CAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAG,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;KAChH,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,KAAK;QAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkD,CAAC;AAE3E,6DAA6D;AAC7D,SAAgB,sBAAsB;IACpC,QAAQ,CAAC,KAAK,EAAE,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,yBAAyB,CAAC,MAAc,EAAE,OAA8B,EAAE;IAC9F,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACxG,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACnD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,GAAG,IAAI,GAAG,GAAG,GAAG,CAAC,IAAI,GAAG,+BAAuB;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC;IAErE,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,CAAC,IAAI,CAAC,eAAe,IAAI,cAAc,CAAC,CAAC,MAAM,CAAC,EAAE,iCAAyB,EAAE,6BAA6B,CAAC,CAAC;IAChJ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACjF,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,aAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACnH,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,MAAM,GAAG,iCAAyB,EAAE,CAAC;IAC5D,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,SAAS,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,iCAAyB,GAAG,GAAG,EAAE,qBAAqB,CAAC,CAAC;IACnI,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACjE,IAAI,IAAI,CAAC,MAAM,GAAG,gCAAwB;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAChG,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAAC,CAAC;IACpH,MAAM,IAAI,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACrF,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/core/crypto.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Agent-key crypto for the MCP tool core.
+ *
+ * SHARED CORE — canonical in `provian-mcp/src/core/`, mirrored into
+ * `provian-backend/src/mcp/core/`. Edit only the canonical copy.
+ *
+ * Line-for-line ports of the SDK's key handling so the relay accepts
+ * signatures from either package interchangeably:
+ *   - generateAgentKeyPair / signPoPChallenge ← provian-agent-sdk/src/wallet.ts
+ *     (Node crypto secp256k1 keygen; PoP challenge signed with
+ *     createSign('SHA256') → DER hex, exactly what
+ *     POST /v1/agent/wallet/create verifies)
+ *
+ * Deliberately Node-crypto-only (zero npm deps beyond the vendored keccak):
+ * the mirror compiles inside the relay with no new dependencies. EIP-191
+ * signing (external-address one-shot linking, local mode only) is NOT here —
+ * it is injected by the local stdio server via ToolContext.signEip191; the
+ * remote endpoint refuses private-key material by design.
+ */
+export interface AgentKeyPair {
+    /** 32-byte private key, hex, no 0x prefix. */
+    privateKey: string;
+    /** 64-byte uncompressed public key (no 04 prefix), hex. */
+    publicKey: string;
+    /** EIP-55 checksummed EVM address. */
+    address: string;
+}
+/**
+ * Generate a new secp256k1 key pair using Node.js crypto and derive the
+ * EVM address (keccak256 of the raw public key, last 20 bytes).
+ */
+export declare function generateAgentKeyPair(): AgentKeyPair;
+/**
+ * Sign a wallet-create proof-of-possession challenge with the agent's
+ * private key. Plain ECDSA-SHA256 over the challenge string, DER-encoded
+ * hex — byte-identical to the SDK's `signMessage` and exactly what the
+ * relay's challenge verifier expects.
+ */
+export declare function signPoPChallenge(privateKeyHex: string, challenge: string): string;
+/** Derive the EIP-55 checksummed EVM address for a hex private key. */
+export declare function deriveAddressFromPrivateKey(privateKeyHex: string): string;
+/** Derive the 64-byte uncompressed public key (without the 04 prefix). */
+export declare function derivePublicKeyFromPrivateKey(privateKeyHex: string): string;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/core/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/core/crypto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH,MAAM,WAAW,YAAY;IAC3B,8CAA8C;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,2DAA2D;IAC3D,SAAS,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,IAAI,YAAY,CAmBnD;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAWjF;AAED,uEAAuE;AACvE,wBAAgB,2BAA2B,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAOzE;AAED,0EAA0E;AAC1E,wBAAgB,6BAA6B,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAmB3E"}