@qed-proof/sdk 0.1.1

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/errors.ts","../src/primitives.ts","../src/schema.ts","../src/generated/receipt-schema.ts","../src/anchor.ts","../src/abi.ts","../src/verify.ts","../src/client.ts","../src/actions.ts"],"sourcesContent":["export { QedProof } from \"./client.js\";\nexport type {\n  QedProofOptions,\n  SubmitClaimOptions,\n  ClaimStatus,\n  WaitOptions,\n  Receipt,\n  ClaimSummary,\n  ListClaimsOptions,\n  ClaimPage,\n} from \"./client.js\";\nexport { QedProofError, RateLimitError } from \"./errors.js\";\nexport { verifyReceipt } from \"./verify.js\";\nexport type { VerifyReport, VerifyChecks, VerifyOptions } from \"./verify.js\";\nexport type { Keyset, Proof, AnchorResult } from \"./anchor.js\";\nexport * as actions from \"./actions.js\";\nexport type { ClaimAction } from \"./actions.js\";\nexport {\n  b64u,\n  b64uDecode,\n  jcs,\n  sha256,\n  keyId,\n  claimDigest,\n  leafHash,\n  rootFromInclusion,\n  verifySignature,\n  hasFloatValue,\n  hasFloatText,\n  SPEC_VERSION,\n  SIG_DOMAIN,\n} from \"./primitives.js\";\nexport type { PoAWReceiptPoaw01 as GeneratedReceipt } from \"./generated/receipt.js\";\n","export class QedProofError extends Error {\n  status: number;\n  detail: string;\n\n  constructor(status: number, detail: string) {\n    super(`QedProof API error ${status}: ${detail}`);\n    this.name = \"QedProofError\";\n    this.status = status;\n    this.detail = detail;\n  }\n}\n\nexport class RateLimitError extends QedProofError {\n  retryAfter: number | undefined;\n\n  constructor(detail: string, retryAfter: number | undefined) {\n    super(429, detail);\n    this.name = \"RateLimitError\";\n    this.retryAfter = retryAfter;\n  }\n}\n","/**\n * poaw_core, ported (SPEC.md §3, §5, §8). Deliberately small and dependency-light, mirroring\n * `oss/core-python/src/poaw_core/__init__.py` byte for byte in intent. No Node built-ins: only\n * Web Crypto-free pure JS (`@noble/curves`, `@noble/hashes`, `canonicalize`) so this runs on\n * Node, Deno and in browsers.\n */\nimport { ed25519 } from \"@noble/curves/ed25519\";\nimport { sha256 as nobleSha256 } from \"@noble/hashes/sha2\";\nimport canonicalizeJcs from \"canonicalize\";\n\nexport const SPEC_VERSION = \"poaw/0.1\";\nexport const SIG_DOMAIN = new TextEncoder().encode(\"POAW-RECEIPT-V0\\n\");\n\n// --- encoding (§3) -----------------------------------------------------------------------------\n\nexport function b64u(data: Uint8Array): string {\n  let binary = \"\";\n  for (let i = 0; i < data.length; i++) binary += String.fromCharCode(data[i]);\n  const base64 = btoa(binary);\n  return base64.replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nexport function b64uDecode(text: string): Uint8Array {\n  const padded = text + \"=\".repeat((4 - (text.length % 4)) % 4);\n  const base64 = padded.replace(/-/g, \"+\").replace(/_/g, \"/\");\n  const binary = atob(base64);\n  const out = new Uint8Array(binary.length);\n  for (let i = 0; i < binary.length; i++) out[i] = binary.charCodeAt(i);\n  return out;\n}\n\n/** RFC 8785 JCS, as UTF-8 bytes (matches Python's `rfc8785.dumps`, which returns bytes). */\nexport function jcs(obj: unknown): Uint8Array {\n  const text = canonicalizeJcs(obj as object);\n  if (text === undefined) {\n    throw new TypeError(\"jcs: value is not JSON-serializable\");\n  }\n  return new TextEncoder().encode(text);\n}\n\nexport function sha256(data: Uint8Array): Uint8Array {\n  return nobleSha256(data);\n}\n\nfunction concatBytes(...parts: Uint8Array[]): Uint8Array {\n  const total = parts.reduce((n, p) => n + p.length, 0);\n  const out = new Uint8Array(total);\n  let offset = 0;\n  for (const p of parts) {\n    out.set(p, offset);\n    offset += p.length;\n  }\n  return out;\n}\n\n/**\n * §3: receipts carry integers only. JSON.parse collapses the int/float distinction Python's\n * `json.loads` preserves (e.g. `1.0` parses to the same JS number as `1`), so this checks two\n * ways:\n *  - `hasFloatValue`: any value that is a non-integer finite number (catches every float that\n *    actually matters, e.g. `0.5` in vector 014-float-in-body.json).\n *  - `hasFloatText`: scans the raw JSON text (outside string literals) for a numeric token\n *    containing `.`, `e` or `E` — the same signal Python's tokenizer used to decide `float` vs\n *    `int`, for callers that still have the original text (files, HTTP bodies).\n * `verifyReceipt` OR's both when raw text is available, so nothing is hidden by `JSON.parse`.\n */\nexport function hasFloatValue(value: unknown): boolean {\n  if (typeof value === \"boolean\") return false;\n  if (typeof value === \"number\") return !Number.isInteger(value);\n  if (Array.isArray(value)) return value.some(hasFloatValue);\n  if (value !== null && typeof value === \"object\") {\n    return Object.values(value as Record<string, unknown>).some(hasFloatValue);\n  }\n  return false;\n}\n\nexport function hasFloatText(text: string): boolean {\n  let i = 0;\n  const n = text.length;\n  while (i < n) {\n    const ch = text[i];\n    if (ch === '\"') {\n      i++;\n      while (i < n) {\n        if (text[i] === \"\\\\\") {\n          i += 2;\n          continue;\n        }\n        if (text[i] === '\"') {\n          i++;\n          break;\n        }\n        i++;\n      }\n      continue;\n    }\n    if (ch === \"-\" || (ch >= \"0\" && ch <= \"9\")) {\n      const start = i;\n      if (ch === \"-\") i++;\n      let sawFloatChar = false;\n      while (i < n && text[i] >= \"0\" && text[i] <= \"9\") i++;\n      if (text[i] === \".\") {\n        sawFloatChar = true;\n        i++;\n        while (i < n && text[i] >= \"0\" && text[i] <= \"9\") i++;\n      }\n      if (text[i] === \"e\" || text[i] === \"E\") {\n        sawFloatChar = true;\n        i++;\n        if (text[i] === \"+\" || text[i] === \"-\") i++;\n        while (i < n && text[i] >= \"0\" && text[i] <= \"9\") i++;\n      }\n      if (i === start) i++; // safety, should not happen\n      if (sawFloatChar) return true;\n      continue;\n    }\n    i++;\n  }\n  return false;\n}\n\n// --- keys + signatures (§5) ---------------------------------------------------------------------\n\nexport function keyId(pkRaw: Uint8Array): string {\n  return \"ed25519:\" + b64u(sha256(pkRaw));\n}\n\nexport function verifySignature(pkRaw: Uint8Array, body: unknown, sigValue: string): boolean {\n  try {\n    const sig = b64uDecode(sigValue);\n    const message = concatBytes(SIG_DOMAIN, jcs(body));\n    return ed25519.verify(sig, message, pkRaw);\n  } catch {\n    return false;\n  }\n}\n\nexport function claimDigest(claim: Record<string, unknown>): string {\n  const stripped: Record<string, unknown> = {};\n  for (const k of Object.keys(claim)) {\n    if (k !== \"claim_digest\") stripped[k] = claim[k];\n  }\n  return b64u(sha256(jcs(stripped)));\n}\n\n// --- Merkle log, RFC 6962 (§8) ------------------------------------------------------------------\n\nexport function leafHash(receipt: { body: unknown; signature: unknown }): Uint8Array {\n  return sha256(concatBytes(new Uint8Array([0x00]), jcs({ body: receipt.body, signature: receipt.signature })));\n}\n\nfunction nodeHash(left: Uint8Array, right: Uint8Array): Uint8Array {\n  return sha256(concatBytes(new Uint8Array([0x01]), left, right));\n}\n\n/** Largest power of two strictly less than n (RFC 6962 §2.1). */\nfunction split(n: number): number {\n  let k = 1;\n  while (k << 1 < n) k <<= 1;\n  return k;\n}\n\nfunction bytesEqual(a: Uint8Array, b: Uint8Array): boolean {\n  if (a.length !== b.length) return false;\n  for (let i = 0; i < a.length; i++) if (a[i] !== b[i]) return false;\n  return true;\n}\n\n/**\n * RFC 9162 §2.1.3.2 audit-path verification. Returns the computed root, or null if the path is\n * malformed. Ported line for line from `poaw_core.root_from_inclusion`.\n */\nexport function rootFromInclusion(\n  index: number,\n  size: number,\n  leaf: Uint8Array,\n  path: Uint8Array[],\n): Uint8Array | null {\n  if (index >= size) return null;\n  let fn = index;\n  let sn = size - 1;\n  let r = leaf;\n  for (const p of path) {\n    if (sn === 0) return null;\n    if ((fn & 1) === 1 || fn === sn) {\n      r = nodeHash(p, r);\n      if ((fn & 1) === 0) {\n        while (fn !== 0 && (fn & 1) === 0) {\n          fn >>= 1;\n          sn >>= 1;\n        }\n      }\n    } else {\n      r = nodeHash(r, p);\n    }\n    fn >>= 1;\n    sn >>= 1;\n  }\n  return sn === 0 ? r : null;\n}\n\nexport { bytesEqual };\n","/**\n * Structural validation against the vendored receipt schema (Draft 2020-12), matching\n * `oss/spec/tools/check.py`'s use of `jsonschema.Draft202012Validator`.\n */\nimport Ajv2020 from \"ajv/dist/2020.js\";\nimport addFormats from \"ajv-formats\";\nimport { receiptSchema } from \"./generated/receipt-schema.js\";\n\nconst ajv = new Ajv2020({ allErrors: false, strict: false });\naddFormats(ajv);\nconst validate = ajv.compile(receiptSchema);\n\nexport function schemaValid(receipt: unknown): boolean {\n  return Boolean(validate(receipt));\n}\n","/**\n * This file is generated by scripts/copy-schema.mjs from ../../../src/receipt.schema.json\n * (the vendored PoAW receipt schema, synced from oss/spec). Do not edit by hand.\n */\nexport const receiptSchema = {\n  \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n  \"$id\": \"urn:poaw:schema:0.1:receipt\",\n  \"title\": \"PoAW receipt (poaw/0.1)\",\n  \"description\": \"Structural schema for a Proof of Agent Work receipt. Signature, inclusion and anchor checks are defined in SPEC.md and are not expressible in JSON Schema.\",\n  \"type\": \"object\",\n  \"required\": [\n    \"body\",\n    \"signature\"\n  ],\n  \"additionalProperties\": false,\n  \"properties\": {\n    \"body\": {\n      \"$ref\": \"#/$defs/body\"\n    },\n    \"signature\": {\n      \"$ref\": \"#/$defs/signature\"\n    },\n    \"proof\": {\n      \"$ref\": \"#/$defs/proof\"\n    }\n  },\n  \"$defs\": {\n    \"timestamp\": {\n      \"type\": \"string\",\n      \"pattern\": \"^\\\\d{4}-\\\\d{2}-\\\\d{2}T\\\\d{2}:\\\\d{2}:\\\\d{2}(\\\\.\\\\d{1,3})?Z$\"\n    },\n    \"b64url\": {\n      \"type\": \"string\",\n      \"pattern\": \"^[A-Za-z0-9_-]+$\"\n    },\n    \"keyId\": {\n      \"type\": \"string\",\n      \"pattern\": \"^ed25519:[A-Za-z0-9_-]{43}$\"\n    },\n    \"fingerprint\": {\n      \"type\": \"string\",\n      \"pattern\": \"^sha256:[A-Za-z0-9_-]{43}$\"\n    },\n    \"action\": {\n      \"type\": \"string\",\n      \"pattern\": \"^[a-z0-9]+(\\\\.[a-z0-9_]+){2}$\"\n    },\n    \"verdictValue\": {\n      \"enum\": [\n        \"verified\",\n        \"late\",\n        \"mismatch\",\n        \"failed\",\n        \"unverifiable\"\n      ]\n    },\n    \"reasonCode\": {\n      \"enum\": [\n        \"not_found\",\n        \"content_mismatch\",\n        \"target_mismatch\",\n        \"observed_after_tolerance\",\n        \"no_connection\",\n        \"permission_denied\",\n        \"rate_limited\",\n        \"destination_unavailable\",\n        \"unsupported_action\",\n        \"claim_ambiguous\",\n        \"verifier_error\"\n      ]\n    },\n    \"body\": {\n      \"type\": \"object\",\n      \"required\": [\n        \"spec_version\",\n        \"receipt_id\",\n        \"issued_at\",\n        \"issuer\",\n        \"agent\",\n        \"claim\",\n        \"observation\",\n        \"verdict\",\n        \"trust_level\"\n      ],\n      \"properties\": {\n        \"spec_version\": {\n          \"const\": \"poaw/0.1\"\n        },\n        \"receipt_id\": {\n          \"type\": \"string\",\n          \"minLength\": 1,\n          \"maxLength\": 128\n        },\n        \"issued_at\": {\n          \"$ref\": \"#/$defs/timestamp\"\n        },\n        \"issuer\": {\n          \"type\": \"object\",\n          \"required\": [\n            \"key_id\"\n          ],\n          \"properties\": {\n            \"key_id\": {\n              \"$ref\": \"#/$defs/keyId\"\n            },\n            \"name\": {\n              \"type\": \"string\",\n              \"maxLength\": 128\n            }\n          }\n        },\n        \"agent\": {\n          \"type\": \"object\",\n          \"required\": [\n            \"id\"\n          ],\n          \"properties\": {\n            \"id\": {\n              \"type\": \"string\",\n              \"minLength\": 1,\n              \"maxLength\": 256\n            },\n            \"erc8004\": {\n              \"type\": \"object\",\n              \"required\": [\n                \"chain\",\n                \"registry\",\n                \"agent_id\"\n              ],\n              \"properties\": {\n                \"chain\": {\n                  \"type\": \"string\",\n                  \"pattern\": \"^[-a-z0-9]{3,8}:[-_a-zA-Z0-9]{1,32}$\"\n                },\n                \"registry\": {\n                  \"type\": \"string\"\n                },\n                \"agent_id\": {\n                  \"type\": \"string\"\n                }\n              }\n            }\n          }\n        },\n        \"operator\": {\n          \"type\": \"string\",\n          \"maxLength\": 256\n        },\n        \"claim\": {\n          \"type\": \"object\",\n          \"required\": [\n            \"action\",\n            \"target\",\n            \"params\",\n            \"claimed_at\",\n            \"claim_digest\"\n          ],\n          \"properties\": {\n            \"action\": {\n              \"$ref\": \"#/$defs/action\"\n            },\n            \"target\": {\n              \"type\": \"string\",\n              \"minLength\": 1,\n              \"maxLength\": 512\n            },\n            \"params\": {\n              \"type\": \"object\"\n            },\n            \"claimed_at\": {\n              \"$ref\": \"#/$defs/timestamp\"\n            },\n            \"client_claim_id\": {\n              \"type\": \"string\",\n              \"maxLength\": 256\n            },\n            \"claim_digest\": {\n              \"$ref\": \"#/$defs/b64url\"\n            }\n          }\n        },\n        \"observation\": {\n          \"type\": \"object\",\n          \"required\": [\n            \"verifier\",\n            \"observed_at\",\n            \"deadline_at\",\n            \"attempts\",\n            \"facts\"\n          ],\n          \"properties\": {\n            \"verifier\": {\n              \"type\": \"object\",\n              \"required\": [\n                \"id\",\n                \"version\"\n              ],\n              \"properties\": {\n                \"id\": {\n                  \"$ref\": \"#/$defs/action\"\n                },\n                \"version\": {\n                  \"type\": \"string\",\n                  \"pattern\": \"^\\\\d+$\"\n                },\n                \"code_hash\": {\n                  \"$ref\": \"#/$defs/fingerprint\"\n                }\n              }\n            },\n            \"observed_at\": {\n              \"$ref\": \"#/$defs/timestamp\"\n            },\n            \"deadline_at\": {\n              \"$ref\": \"#/$defs/timestamp\"\n            },\n            \"attempts\": {\n              \"type\": \"integer\",\n              \"minimum\": 1\n            },\n            \"facts\": {\n              \"type\": \"object\"\n            }\n          }\n        },\n        \"verdict\": {\n          \"type\": \"object\",\n          \"required\": [\n            \"value\"\n          ],\n          \"properties\": {\n            \"value\": {\n              \"$ref\": \"#/$defs/verdictValue\"\n            },\n            \"reason_code\": {\n              \"$ref\": \"#/$defs/reasonCode\"\n            }\n          },\n          \"if\": {\n            \"properties\": {\n              \"value\": {\n                \"const\": \"unverifiable\"\n              }\n            }\n          },\n          \"then\": {\n            \"required\": [\n              \"value\",\n              \"reason_code\"\n            ]\n          }\n        },\n        \"trust_level\": {\n          \"type\": \"integer\",\n          \"minimum\": 1,\n          \"maximum\": 4\n        },\n        \"attestation\": {\n          \"type\": \"object\",\n          \"required\": [\n            \"type\",\n            \"document\"\n          ],\n          \"properties\": {\n            \"type\": {\n              \"type\": \"string\"\n            },\n            \"document\": {\n              \"$ref\": \"#/$defs/b64url\"\n            }\n          }\n        },\n        \"supersedes\": {\n          \"type\": \"string\"\n        }\n      },\n      \"if\": {\n        \"properties\": {\n          \"trust_level\": {\n            \"minimum\": 3\n          }\n        }\n      },\n      \"then\": {\n        \"required\": [\n          \"attestation\"\n        ],\n        \"properties\": {\n          \"observation\": {\n            \"properties\": {\n              \"verifier\": {\n                \"required\": [\n                  \"id\",\n                  \"version\",\n                  \"code_hash\"\n                ]\n              }\n            }\n          }\n        }\n      }\n    },\n    \"signature\": {\n      \"type\": \"object\",\n      \"required\": [\n        \"alg\",\n        \"key_id\",\n        \"value\"\n      ],\n      \"additionalProperties\": false,\n      \"properties\": {\n        \"alg\": {\n          \"const\": \"Ed25519\"\n        },\n        \"key_id\": {\n          \"$ref\": \"#/$defs/keyId\"\n        },\n        \"value\": {\n          \"type\": \"string\",\n          \"pattern\": \"^[A-Za-z0-9_-]{86}$\"\n        }\n      }\n    },\n    \"proof\": {\n      \"type\": \"object\",\n      \"required\": [\n        \"log_id\",\n        \"leaf_index\",\n        \"tree_size\",\n        \"root_hash\",\n        \"inclusion\"\n      ],\n      \"properties\": {\n        \"log_id\": {\n          \"$ref\": \"#/$defs/b64url\"\n        },\n        \"leaf_index\": {\n          \"type\": \"integer\",\n          \"minimum\": 0\n        },\n        \"tree_size\": {\n          \"type\": \"integer\",\n          \"minimum\": 1\n        },\n        \"root_hash\": {\n          \"$ref\": \"#/$defs/b64url\"\n        },\n        \"inclusion\": {\n          \"type\": \"array\",\n          \"items\": {\n            \"$ref\": \"#/$defs/b64url\"\n          }\n        },\n        \"anchor\": {\n          \"type\": \"object\",\n          \"required\": [\n            \"chain\",\n            \"scheme\",\n            \"uid\",\n            \"tx_hash\",\n            \"tree_size\"\n          ],\n          \"properties\": {\n            \"chain\": {\n              \"type\": \"string\"\n            },\n            \"scheme\": {\n              \"const\": \"eas\"\n            },\n            \"uid\": {\n              \"type\": \"string\",\n              \"pattern\": \"^0x[0-9a-fA-F]{64}$\"\n            },\n            \"tx_hash\": {\n              \"type\": \"string\",\n              \"pattern\": \"^0x[0-9a-fA-F]{64}$\"\n            },\n            \"tree_size\": {\n              \"type\": \"integer\",\n              \"minimum\": 1\n            }\n          }\n        }\n      }\n    }\n  }\n} as const;\n","/**\n * SPEC §8.4: check a receipt's `proof.anchor` (scheme `eas`) against a public JSON-RPC endpoint.\n * Ported from `oss/spec/tools/anchor_check.py`. Any doubt gives `ok: false` — never a pass.\n */\nimport { keccak_256 } from \"@noble/hashes/sha3\";\nimport { b64uDecode, b64u, bytesEqual } from \"./primitives.js\";\nimport { decodeSingleDynamicTupleReturn, decodeTupleWithTrailingDynamic, bytesToHex0x, hexToBytes } from \"./abi.js\";\n\nconst EAS = \"0x4200000000000000000000000000000000000021\"; // OP-stack predeploy (Base mainnet + Base Sepolia)\n\nfunction selector(signature: string): Uint8Array {\n  return keccak_256(new TextEncoder().encode(signature)).slice(0, 4);\n}\n\nconst GET_SELECTOR = selector(\"getAttestation(bytes32)\");\nconst ATT_STATIC_KINDS = [\"bytes32\", \"bytes32\", \"uint64\", \"uint64\", \"uint64\", \"bytes32\", \"address\", \"address\", \"bool\"] as const;\nconst DATA_STATIC_KINDS = [\"bytes32\", \"uint64\", \"bytes32\", \"uint64\", \"bytes32\"] as const;\n\nexport interface Proof {\n  log_id: string;\n  leaf_index: number;\n  tree_size: number;\n  root_hash: string;\n  inclusion: string[];\n  anchor?: {\n    chain: string;\n    scheme: string;\n    uid: string;\n    tx_hash: string;\n    tree_size: number;\n  };\n}\n\nexport interface Keyset {\n  keys?: Array<{ key_id: string; public_key: string; valid_from: string; revoked_at: string | null }>;\n  anchor_addresses?: string[];\n  anchor_schemas?: string[];\n}\n\nexport interface AnchorResult {\n  ok: boolean;\n  reason: string;\n  proven_by: number | null;\n}\n\nasync function rpc(url: string, method: string, ...params: unknown[]): Promise<unknown> {\n  const res = await fetch(url, {\n    method: \"POST\",\n    headers: { \"content-type\": \"application/json\", \"user-agent\": \"qed-proof-sdk-js/0.1\" },\n    body: JSON.stringify({ jsonrpc: \"2.0\", id: 1, method, params }),\n  });\n  const body = (await res.json()) as { error?: { message?: string }; result?: unknown };\n  if (body && body.error) {\n    throw new Error(`${method}: ${body.error.message ?? \"rpc error\"}`);\n  }\n  return body.result;\n}\n\n/** Return {ok, reason, proven_by}. Any doubt → ok false, never a pass. */\nexport async function checkAnchor(proof: Proof, keyset: Keyset, rpcUrl: string): Promise<AnchorResult> {\n  const a = proof.anchor;\n  if (!a) return { ok: false, reason: \"unknown_scheme\", proven_by: null };\n  try {\n    if (a.scheme !== \"eas\") return { ok: false, reason: \"unknown_scheme\", proven_by: null };\n\n    const chainIdHex = (await rpc(rpcUrl, \"eth_chainId\")) as string;\n    const wantChainId = a.chain.split(\":\")[1];\n    if (BigInt(chainIdHex) !== BigInt(wantChainId)) {\n      return { ok: false, reason: \"rpc_chain_mismatch\", proven_by: null };\n    }\n\n    const uid = hexToBytes(a.uid);\n    const callData = new Uint8Array([...GET_SELECTOR, ...uid]);\n    const out = (await rpc(rpcUrl, \"eth_call\", { to: EAS, data: bytesToHex0x(callData) }, \"latest\")) as string;\n    const returnData = hexToBytes(out);\n    const { statics, dynamic } = decodeSingleDynamicTupleReturn(returnData, [...ATT_STATIC_KINDS], \"bytes\");\n    const [uid_, schema, time_, _exp, revokedAt, _ref, _recipient, attester, _revocable] = statics as [\n      Uint8Array,\n      Uint8Array,\n      bigint,\n      bigint,\n      bigint,\n      Uint8Array,\n      Uint8Array,\n      string,\n      boolean,\n    ];\n    const data = dynamic as Uint8Array;\n\n    if (!bytesEqual(uid_, uid) || time_ === 0n) {\n      return { ok: false, reason: \"attestation_not_found\", proven_by: null };\n    }\n    if (revokedAt !== 0n) {\n      return { ok: false, reason: \"attestation_revoked\", proven_by: null };\n    }\n    const attesterLower = (attester as string).toLowerCase();\n    const publishedAttesters = new Set((keyset.anchor_addresses ?? []).map((x) => x.toLowerCase()));\n    if (!publishedAttesters.has(attesterLower)) {\n      return { ok: false, reason: \"attester_not_published\", proven_by: null };\n    }\n    const schemaHex = \"0x\" + bytesToHex0x(schema).slice(2);\n    const publishedSchemas = new Set((keyset.anchor_schemas ?? []).map((x) => x.toLowerCase()));\n    if (!publishedSchemas.has(schemaHex.toLowerCase())) {\n      return { ok: false, reason: \"schema_not_published\", proven_by: null };\n    }\n\n    let decodedData: { statics: unknown[]; dynamic: unknown };\n    try {\n      decodedData = decodeTupleWithTrailingDynamic(data, [...DATA_STATIC_KINDS], \"string\");\n    } catch {\n      return { ok: false, reason: \"data_undecodable\", proven_by: null };\n    }\n    const [logId, size, root, _prevSize, _prevRoot] = decodedData.statics as [Uint8Array, bigint, Uint8Array, bigint, Uint8Array];\n\n    if (!bytesEqual(logId, b64uDecode(proof.log_id)) || size !== BigInt(a.tree_size)) {\n      return { ok: false, reason: \"log_or_size_mismatch\", proven_by: null };\n    }\n    if (a.tree_size !== proof.tree_size) {\n      // this issuer proves at the anchored size\n      return { ok: false, reason: \"consistency_proof_required\", proven_by: null };\n    }\n    if (!bytesEqual(root, b64uDecode(proof.root_hash))) {\n      return { ok: false, reason: \"root_mismatch\", proven_by: null };\n    }\n    return { ok: true, reason: \"anchored\", proven_by: Number(time_) };\n  } catch (exc) {\n    const name = exc instanceof Error ? exc.constructor.name : \"Error\";\n    return { ok: false, reason: `unreadable:${name}`, proven_by: null };\n  }\n}\n","/**\n * A tiny hand-written ABI decoder for exactly the two structs SPEC §8.4 needs (ported from\n * `oss/spec/tools/anchor_check.py`, which uses `eth_abi.decode`). Not a general ABI library:\n * it only decodes a tuple of N-1 static 32-byte-word fields followed by one trailing dynamic\n * field (`bytes` or `string`), which is exactly the shape of the EAS `Attestation` struct and\n * its decoded `data` payload.\n */\n\nexport type StaticFieldKind = \"bytes32\" | \"uint64\" | \"address\" | \"bool\";\n\nfunction readWord(data: Uint8Array, wordIndex: number): Uint8Array {\n  const start = wordIndex * 32;\n  return data.subarray(start, start + 32);\n}\n\nfunction decodeStaticField(word: Uint8Array, kind: StaticFieldKind): Uint8Array | bigint | string | boolean {\n  switch (kind) {\n    case \"bytes32\":\n      return word.slice();\n    case \"uint64\": {\n      let v = 0n;\n      for (let i = 24; i < 32; i++) v = (v << 8n) | BigInt(word[i]);\n      return v;\n    }\n    case \"address\": {\n      const bytes = word.subarray(12, 32);\n      return \"0x\" + Buffer_toHex(bytes);\n    }\n    case \"bool\":\n      return word[31] !== 0;\n  }\n}\n\nfunction Buffer_toHex(bytes: Uint8Array): string {\n  let s = \"\";\n  for (const b of bytes) s += b.toString(16).padStart(2, \"0\");\n  return s;\n}\n\n/**\n * Decodes a tuple made of `staticKinds` (each one 32-byte word), followed by exactly one\n * trailing dynamic field of type `bytes` or `string`. `data` is the tuple's own encoding region\n * (offsets inside it are relative to its start), matching how `eth_abi.decode([_ATT], ...)` and\n * the nested `abi_decode(_DATA, data)` call are used in `anchor_check.py`.\n */\nexport function decodeTupleWithTrailingDynamic(\n  data: Uint8Array,\n  staticKinds: StaticFieldKind[],\n  dynamicKind: \"bytes\" | \"string\",\n): { statics: Array<Uint8Array | bigint | string | boolean>; dynamic: Uint8Array | string } {\n  const statics = staticKinds.map((kind, i) => decodeStaticField(readWord(data, i), kind));\n  const offsetWord = readWord(data, staticKinds.length);\n  let offset = 0n;\n  for (const b of offsetWord) offset = (offset << 8n) | BigInt(b);\n  const off = Number(offset);\n  const lenWord = data.subarray(off, off + 32);\n  let len = 0n;\n  for (const b of lenWord) len = (len << 8n) | BigInt(b);\n  const length = Number(len);\n  const raw = data.subarray(off + 32, off + 32 + length);\n  const dynamic = dynamicKind === \"string\" ? new TextDecoder().decode(raw) : raw.slice();\n  return { statics, dynamic };\n}\n\n/**\n * Decodes the return value of a function whose Solidity signature returns a single dynamic\n * tuple (as `getAttestation(bytes32) returns (Attestation memory)` does): the outer word is an\n * offset to where the tuple's own head+tail encoding begins.\n */\nexport function decodeSingleDynamicTupleReturn(\n  returnData: Uint8Array,\n  staticKinds: StaticFieldKind[],\n  dynamicKind: \"bytes\" | \"string\",\n) {\n  const outerOffsetWord = readWord(returnData, 0);\n  let outerOffset = 0n;\n  for (const b of outerOffsetWord) outerOffset = (outerOffset << 8n) | BigInt(b);\n  const tupleStart = Number(outerOffset);\n  return decodeTupleWithTrailingDynamic(returnData.subarray(tupleStart), staticKinds, dynamicKind);\n}\n\nexport function bytesToHex0x(bytes: Uint8Array): string {\n  return \"0x\" + Buffer_toHex(bytes);\n}\n\nexport function hexToBytes(hex: string): Uint8Array {\n  const clean = hex.startsWith(\"0x\") ? hex.slice(2) : hex;\n  const out = new Uint8Array(clean.length / 2);\n  for (let i = 0; i < out.length; i++) out[i] = parseInt(clean.substr(i * 2, 2), 16);\n  return out;\n}\n","/**\n * Reference checker for PoAW receipts (SPEC.md §10), ported from `oss/spec/tools/check.py` and\n * `oss/spec/tools/anchor_check.py`. Offline it checks steps 1-4. With `rpcUrl` it also checks the\n * anchor against the chain (§8.4). Any doubt gives a failing check, never a pass.\n */\nimport {\n  b64uDecode,\n  claimDigest,\n  hasFloatValue,\n  hasFloatText,\n  keyId,\n  leafHash,\n  rootFromInclusion,\n  verifySignature,\n  b64u,\n} from \"./primitives.js\";\nimport { schemaValid } from \"./schema.js\";\nimport { checkAnchor, type Keyset, type Proof } from \"./anchor.js\";\n\nexport interface VerifyChecks {\n  spec_version: boolean;\n  schema: boolean;\n  integers_only: boolean;\n  key: boolean;\n  signature: boolean;\n  claim_digest: boolean;\n  inclusion: boolean | \"absent\";\n  anchor: boolean | \"absent\" | \"not_checked_offline\" | string;\n}\n\nexport interface VerifyReport {\n  checks: VerifyChecks;\n  valid: boolean;\n  verdict: string | null;\n  achieved_trust_level: number;\n  proven_by?: number | null;\n}\n\nexport interface VerifyOptions {\n  keys: Keyset;\n  rpcUrl?: string;\n}\n\ninterface ReceiptLike {\n  body?: Record<string, unknown>;\n  signature?: { key_id?: string; value?: string };\n  proof?: Proof;\n  [key: string]: unknown;\n}\n\n/**\n * Verify a PoAW receipt. `receipt` may be a parsed object or the raw JSON text — passing the raw\n * text lets the integers-only check catch a float written as e.g. `1.0` (indistinguishable from\n * the integer `1` after `JSON.parse`), matching Python's `json.loads` int/float distinction\n * exactly; a non-integer value like `0.5` is caught either way.\n */\n/**\n * The JSON text each receipt object was parsed from, when the SDK fetched it (`QedProof.getReceipt`). JSON.parse turns\n * `1.0` into `1`, which would hide a float SPEC §3 forbids, so verification reads the original text when it has it.\n * That way a fetched receipt verifies exactly as it does in the Python SDK and the reference checker.\n */\nexport const RECEIPT_TEXT = new WeakMap<object, string>();\n\nexport async function verifyReceipt(receipt: unknown | string, options: VerifyOptions): Promise<VerifyReport> {\n  const raw = typeof receipt === \"string\" ? receipt\n    : receipt && typeof receipt === \"object\" ? RECEIPT_TEXT.get(receipt as object) : undefined;\n  const parsed: ReceiptLike = typeof receipt === \"string\" ? JSON.parse(receipt) : ((receipt as ReceiptLike) ?? {});\n  const keyset = options.keys ?? {};\n\n  const checks = {} as VerifyChecks;\n\n  const body = (parsed && typeof parsed === \"object\" ? parsed.body : undefined) ?? {};\n  const version = String((body as Record<string, unknown>).spec_version ?? \"\");\n  const parts = version.split(\"/\");\n  checks.spec_version = parts[0] === \"poaw\" && (parts[parts.length - 1] ?? \"\").split(\".\")[0] === \"0\";\n\n  checks.schema = schemaValid(parsed);\n\n  const integerFail = raw !== undefined ? hasFloatText(raw) : hasFloatValue(parsed);\n  checks.integers_only = !integerFail;\n\n  const sig = (parsed && typeof parsed === \"object\" ? parsed.signature : undefined) ?? ({} as ReceiptLike[\"signature\"]);\n  const keys = keyset.keys ?? [];\n  const key = keys.find((k) => k.key_id === sig?.key_id);\n  const issued = String((body as Record<string, unknown>).issued_at ?? \"\");\n  const issuer = (body as Record<string, unknown>).issuer as { key_id?: string } | undefined;\n\n  let keyOk = false;\n  if (key && sig?.key_id === issuer?.key_id) {\n    try {\n      const computedKeyId = keyId(b64uDecode(key.public_key));\n      keyOk =\n        computedKeyId === key.key_id &&\n        key.valid_from <= issued &&\n        (key.revoked_at === null || key.revoked_at === undefined || issued < key.revoked_at);\n    } catch {\n      keyOk = false;\n    }\n  }\n  checks.key = keyOk;\n\n  let sigOk = false;\n  if (keyOk && key) {\n    try {\n      sigOk = verifySignature(b64uDecode(key.public_key), body, sig?.value ?? \"\");\n    } catch {\n      sigOk = false;\n    }\n  }\n  checks.signature = sigOk;\n\n  const claim = (body as Record<string, unknown>).claim;\n  checks.claim_digest =\n    Boolean(claim) &&\n    typeof claim === \"object\" &&\n    (claim as Record<string, unknown>).claim_digest === claimDigest(claim as Record<string, unknown>);\n\n  const proof = parsed && typeof parsed === \"object\" ? parsed.proof : undefined;\n  let provenBy: number | null | undefined;\n  if (!proof) {\n    checks.inclusion = \"absent\";\n  } else {\n    const root = rootFromInclusion(\n      proof.leaf_index,\n      proof.tree_size,\n      leafHash({ body: (parsed as ReceiptLike).body, signature: (parsed as ReceiptLike).signature }),\n      proof.inclusion.map((h) => b64uDecode(h)),\n    );\n    checks.inclusion = root !== null && b64u(root) === proof.root_hash;\n  }\n\n  if (!(proof && proof.anchor)) {\n    checks.anchor = \"absent\";\n  } else if (!options.rpcUrl) {\n    checks.anchor = \"not_checked_offline\";\n  } else {\n    const a = await checkAnchor(proof, keyset, options.rpcUrl);\n    checks.anchor = a.ok ? true : a.reason;\n    provenBy = a.proven_by;\n  }\n\n  const required: Array<keyof VerifyChecks> = [\n    \"spec_version\",\n    \"schema\",\n    \"integers_only\",\n    \"key\",\n    \"signature\",\n    \"claim_digest\",\n  ];\n  const valid = required.every((k) => checks[k] === true) && (checks.inclusion === true || checks.inclusion === \"absent\");\n\n  const achievedTrustLevel = valid ? (checks.inclusion === true && checks.anchor === true ? 2 : 1) : 0;\n  const verdictValue = (body as Record<string, unknown>).verdict as { value?: string } | undefined;\n  const verdict = valid ? (verdictValue?.value ?? null) : null;\n\n  const report: VerifyReport = {\n    checks,\n    valid,\n    verdict: verdict ?? null,\n    achieved_trust_level: achievedTrustLevel,\n  };\n  if (provenBy !== undefined) {\n    report.proven_by = provenBy;\n  }\n  return report;\n}\n","/**\n * The HTTP client. Shapes follow `oss/node/src/poaw_node/app.py`, `models.py` (`ClaimIn`) and\n * `store.py` (`claim_status`). Uses only `fetch` — no Node built-ins — so it runs on Node, Deno\n * and in browsers.\n */\nimport type { ClaimAction } from \"./actions.js\";\nimport { QedProofError, RateLimitError } from \"./errors.js\";\nimport { RECEIPT_TEXT, verifyReceipt, type VerifyReport } from \"./verify.js\";\nimport type { Keyset } from \"./anchor.js\";\n\nexport interface QedProofOptions {\n  apiKey?: string;\n  baseUrl?: string;\n  fetch?: typeof fetch;\n}\n\nexport interface SubmitClaimOptions {\n  agentId: string;\n  clientClaimId?: string;\n  claimedAt?: string | Date;\n}\n\nexport interface ClaimStatus {\n  claim_id: string;\n  created?: boolean;\n  state: \"queued\" | \"decided\";\n  attempts: number;\n  receipt_id: string | null;\n  verdict: string | null;\n}\n\nexport interface WaitOptions {\n  timeoutMs?: number;\n  pollIntervalMs?: number;\n}\n\nexport interface Receipt {\n  body: Record<string, unknown>;\n  signature: Record<string, unknown>;\n  proof?: Record<string, unknown>;\n  [key: string]: unknown;\n}\n\nexport interface ClaimSummary {\n  claim_id: string;\n  state: string;\n  attempts: number;\n  receipt_id: string | null;\n  verdict: string | null;\n}\n\nexport interface ListClaimsOptions {\n  limit?: number;\n  cursor?: string;\n  agentId?: string;\n  action?: string;\n  verdict?: string;\n  state?: string;\n}\n\nexport interface ClaimPage {\n  claims: ClaimSummary[];\n  nextCursor: string | null;\n}\n\nconst LIST_CLAIMS_DEFAULT_LIMIT = 50;\nconst LIST_CLAIMS_MIN_LIMIT = 1;\nconst LIST_CLAIMS_MAX_LIMIT = 200;\n\nconst DEFAULT_BASE_URL = \"https://api.qedproof.site\";\n\nfunction isoNow(): string {\n  return new Date().toISOString();\n}\n\nexport class QedProof {\n  private readonly apiKey?: string;\n  private readonly baseUrl: string;\n  private readonly fetchImpl: typeof fetch;\n\n  constructor(options: QedProofOptions = {}) {\n    this.apiKey = options.apiKey;\n    this.baseUrl = (options.baseUrl ?? DEFAULT_BASE_URL).replace(/\\/+$/, \"\");\n    this.fetchImpl = options.fetch ?? globalThis.fetch;\n    if (!this.fetchImpl) {\n      throw new Error(\"QedProof: no fetch implementation available; pass { fetch } explicitly\");\n    }\n  }\n\n  private async request(\n    method: string,\n    path: string,\n    { auth = true, body, text = false }: { auth?: boolean; body?: unknown; text?: boolean } = {},\n  ): Promise<unknown> {\n    const headers: Record<string, string> = { accept: \"application/json\" };\n    if (body !== undefined) headers[\"content-type\"] = \"application/json\";\n    if (auth) {\n      if (!this.apiKey) {\n        throw new QedProofError(401, \"no API key configured\");\n      }\n      headers[\"authorization\"] = `Bearer ${this.apiKey}`;\n    }\n    let res: Response;\n    try {\n      res = await this.fetchImpl(`${this.baseUrl}${path}`, {\n        method,\n        headers,\n        body: body !== undefined ? JSON.stringify(body) : undefined,\n      });\n    } catch (exc) {\n      // Never let a network failure leak the key: the message here never includes `this.apiKey`.\n      throw new QedProofError(0, `network error: ${exc instanceof Error ? exc.message : String(exc)}`);\n    }\n\n    if (res.status === 429) {\n      const retryAfterHeader = res.headers.get(\"retry-after\");\n      const retryAfter = retryAfterHeader ? Number(retryAfterHeader) : undefined;\n      let detail = \"rate limit exceeded\";\n      try {\n        const parsed = (await res.json()) as { detail?: string };\n        if (parsed?.detail) detail = parsed.detail;\n      } catch {\n        // ignore body parse failure, keep default detail\n      }\n      throw new RateLimitError(detail, Number.isFinite(retryAfter) ? retryAfter : undefined);\n    }\n\n    if (!res.ok) {\n      let detail = res.statusText;\n      try {\n        const parsed = (await res.json()) as { detail?: string };\n        if (parsed?.detail) detail = parsed.detail;\n      } catch {\n        // ignore body parse failure, keep statusText\n      }\n      throw new QedProofError(res.status, detail);\n    }\n\n    if (res.status === 204) return undefined;\n    if (text) return res.text();\n    return res.json();\n  }\n\n  async submitClaim(claim: ClaimAction, options: SubmitClaimOptions): Promise<ClaimStatus> {\n    const claimedAt = options.claimedAt instanceof Date ? options.claimedAt.toISOString() : (options.claimedAt ?? isoNow());\n    const body = {\n      client_claim_id: options.clientClaimId ?? cryptoRandomId(),\n      agent_id: options.agentId,\n      action: claim.action,\n      target: claim.target,\n      params: claim.params,\n      claimed_at: claimedAt,\n    };\n    return (await this.request(\"POST\", \"/v1/claims\", { body })) as ClaimStatus;\n  }\n\n  async getClaim(claimId: string): Promise<ClaimStatus> {\n    return (await this.request(\"GET\", `/v1/claims/${encodeURIComponent(claimId)}`)) as ClaimStatus;\n  }\n\n  async waitForVerdict(claimId: string, options: WaitOptions = {}): Promise<ClaimStatus> {\n    const timeoutMs = options.timeoutMs ?? 120_000;\n    const pollIntervalMs = options.pollIntervalMs ?? 2_000;\n    const deadline = Date.now() + timeoutMs;\n    for (;;) {\n      let wait = pollIntervalMs;\n      try {\n        const status = await this.getClaim(claimId);\n        if (status.state === \"decided\") return status;\n      } catch (exc) {\n        if (exc instanceof RateLimitError && exc.retryAfter !== undefined) {\n          wait = Math.max(wait, exc.retryAfter * 1000);\n        } else {\n          throw exc;\n        }\n      }\n      if (Date.now() >= deadline) {\n        throw new QedProofError(408, `timed out after ${timeoutMs}ms waiting for claim ${claimId} to decide`);\n      }\n      await sleep(Math.min(wait, Math.max(0, deadline - Date.now())));\n    }\n  }\n\n  /**\n   * `GET /v1/claims`, newest first. `options.limit` (1-200, default 50) is validated locally —\n   * out of range throws a `RangeError` before any request is made.\n   */\n  async listClaims(options: ListClaimsOptions = {}): Promise<ClaimPage> {\n    const limit = options.limit ?? LIST_CLAIMS_DEFAULT_LIMIT;\n    if (limit < LIST_CLAIMS_MIN_LIMIT || limit > LIST_CLAIMS_MAX_LIMIT) {\n      throw new RangeError(`limit must be between ${LIST_CLAIMS_MIN_LIMIT} and ${LIST_CLAIMS_MAX_LIMIT}, got ${limit}`);\n    }\n    const query: Record<string, string> = { limit: String(limit) };\n    if (options.cursor !== undefined) query.cursor = options.cursor;\n    if (options.agentId !== undefined) query.agent_id = options.agentId;\n    if (options.action !== undefined) query.action = options.action;\n    if (options.verdict !== undefined) query.verdict = options.verdict;\n    if (options.state !== undefined) query.state = options.state;\n    const qs = new URLSearchParams(query).toString();\n    const data = (await this.request(\"GET\", `/v1/claims?${qs}`)) as { claims: ClaimSummary[]; next_cursor: string | null };\n    return { claims: data.claims, nextCursor: data.next_cursor };\n  }\n\n  /** Yields every claim matching the filters, following `nextCursor` until exhausted. */\n  async *iterClaims(options: Omit<ListClaimsOptions, \"cursor\" | \"limit\"> & { pageSize?: number } = {}): AsyncGenerator<ClaimSummary> {\n    const { pageSize, ...filters } = options;\n    let cursor: string | undefined;\n    for (;;) {\n      const page = await this.listClaims({ ...filters, limit: pageSize, cursor });\n      yield* page.claims;\n      if (page.nextCursor === null) return;\n      cursor = page.nextCursor;\n    }\n  }\n\n  /** Receipts are designed to be shared and checked by anyone (SPEC §1): no Authorization header. */\n  async getReceipt(receiptId: string): Promise<Receipt> {\n    const text = (await this.request(\"GET\", `/v1/receipts/${encodeURIComponent(receiptId)}`, { auth: false, text: true })) as string;\n    const receipt = JSON.parse(text) as Receipt;\n    RECEIPT_TEXT.set(receipt as object, text);\n    return receipt;\n  }\n\n  /** Public by design: `/.well-known/poaw-keys.json` (SPEC §5.2, §8.4). */\n  async getKeys(): Promise<Keyset> {\n    return (await this.request(\"GET\", \"/.well-known/poaw-keys.json\", { auth: false })) as Keyset;\n  }\n\n  async verify(receipt: unknown | string, options: { keys?: Keyset; rpcUrl?: string } = {}): Promise<VerifyReport> {\n    const keys = options.keys ?? (await this.getKeys());\n    return verifyReceipt(receipt, { keys, rpcUrl: options.rpcUrl });\n  }\n}\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\nfunction cryptoRandomId(): string {\n  const g = globalThis as { crypto?: { randomUUID?: () => string } };\n  if (g.crypto?.randomUUID) return g.crypto.randomUUID();\n  return `claim-${Date.now()}-${Math.random().toString(36).slice(2)}`;\n}\n","/**\n * Typed helpers for the five live actions plus `http.url.status`, matching the wire shape the\n * node's verifiers expect (`oss/spec/profiles/*.md`, `oss/node/src/poaw_node/verifiers/*.py`).\n * Validation here is cheap and local — it never calls the network — but it fails fast with a\n * clear message before the claim is submitted, since params are copied into public receipts.\n */\n\nexport interface ClaimAction {\n  action: string;\n  target: string;\n  params: Record<string, unknown>;\n}\n\nconst REPO_RE = /^[A-Za-z0-9_.-]+\\/[A-Za-z0-9_.-]+$/;\nconst SHA_RE = /^[0-9a-f]{40}$/;\nconst HANDLE_RE = /^@[A-Za-z0-9_]{1,15}$/;\nconst POST_ID_RE = /^[0-9]{1,20}$/;\nconst HEX64_RE = /^[0-9a-f]{64}$/;\nconst SLACK_TARGET_RE = /^slack:\\/\\/(T[A-Z0-9]{2,20})\\/([CG][A-Z0-9]{2,20})$/;\nconst SLACK_TS_RE = /^[0-9]{10}\\.[0-9]{6}$/;\n\nfunction assert(condition: unknown, message: string): asserts condition {\n  if (!condition) throw new TypeError(message);\n}\n\nexport function githubCommitPush(input: { target: string; sha: string; branch: string }): ClaimAction {\n  assert(REPO_RE.test(input.target), \"githubCommitPush: target must be 'owner/repo'\");\n  assert(SHA_RE.test(input.sha), \"githubCommitPush: sha must be 40 lowercase hex characters\");\n  assert(input.branch && input.branch.length > 0, \"githubCommitPush: branch is required\");\n  return { action: \"github.commit.push\", target: input.target, params: { sha: input.sha, branch: input.branch } };\n}\n\nexport function githubPrOpen(input: { target: string; number: number; base?: string; headSha?: string }): ClaimAction {\n  assert(REPO_RE.test(input.target), \"githubPrOpen: target must be 'owner/repo'\");\n  assert(Number.isInteger(input.number) && input.number >= 1, \"githubPrOpen: number must be a positive integer\");\n  if (input.headSha !== undefined) {\n    assert(SHA_RE.test(input.headSha), \"githubPrOpen: headSha must be 40 lowercase hex characters\");\n  }\n  const params: Record<string, unknown> = { number: input.number };\n  if (input.base !== undefined) params.base = input.base;\n  if (input.headSha !== undefined) params.head_sha = input.headSha;\n  return { action: \"github.pr.open\", target: input.target, params };\n}\n\nexport function githubChecksPass(input: { target: string; sha: string }): ClaimAction {\n  assert(REPO_RE.test(input.target), \"githubChecksPass: target must be 'owner/repo'\");\n  assert(SHA_RE.test(input.sha), \"githubChecksPass: sha must be 40 lowercase hex characters\");\n  return { action: \"github.checks.pass\", target: input.target, params: { sha: input.sha } };\n}\n\nexport function xPostPublish(input: { target: string; postId: string; textSha256?: string }): ClaimAction {\n  assert(HANDLE_RE.test(input.target), \"xPostPublish: target must be an @handle\");\n  assert(POST_ID_RE.test(input.postId), \"xPostPublish: postId must be digits\");\n  if (input.textSha256 !== undefined) {\n    assert(HEX64_RE.test(input.textSha256), \"xPostPublish: textSha256 must be 64 lowercase hex characters\");\n  }\n  const params: Record<string, unknown> = { post_id: input.postId };\n  if (input.textSha256 !== undefined) params.text_sha256 = input.textSha256;\n  return { action: \"x.post.publish\", target: input.target, params };\n}\n\nexport function slackMessagePost(input: { target: string; ts: string; textSha256?: string }): ClaimAction {\n  assert(SLACK_TARGET_RE.test(input.target), \"slackMessagePost: target must be slack://<team_id>/<channel_id>\");\n  assert(SLACK_TS_RE.test(input.ts), \"slackMessagePost: ts must match ^[0-9]{10}\\\\.[0-9]{6}$\");\n  if (input.textSha256 !== undefined) {\n    assert(HEX64_RE.test(input.textSha256), \"slackMessagePost: textSha256 must be 64 lowercase hex characters\");\n  }\n  const params: Record<string, unknown> = { ts: input.ts };\n  if (input.textSha256 !== undefined) params.text_sha256 = input.textSha256;\n  return { action: \"slack.message.post\", target: input.target, params };\n}\n\nexport function httpUrlStatus(input: { target: string; status?: number; contentFingerprint?: string }): ClaimAction {\n  let url: URL;\n  try {\n    url = new URL(input.target);\n  } catch {\n    throw new TypeError(\"httpUrlStatus: target must be a valid URL\");\n  }\n  assert(url.protocol === \"https:\", \"httpUrlStatus: target must be an https:// URL\");\n  const params: Record<string, unknown> = {};\n  if (input.status !== undefined) {\n    assert(Number.isInteger(input.status), \"httpUrlStatus: status must be an integer\");\n    params.status = input.status;\n  }\n  if (input.contentFingerprint !== undefined) params.content_fingerprint = input.contentFingerprint;\n  return { action: \"http.url.status\", target: input.target, params };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAO,IAAM,gBAAN,cAA4B,MAAM;AAAA,EACvC;AAAA,EACA;AAAA,EAEA,YAAY,QAAgB,QAAgB;AAC1C,UAAM,sBAAsB,MAAM,KAAK,MAAM,EAAE;AAC/C,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,SAAS;AAAA,EAChB;AACF;AAEO,IAAM,iBAAN,cAA6B,cAAc;AAAA,EAChD;AAAA,EAEA,YAAY,QAAgB,YAAgC;AAC1D,UAAM,KAAK,MAAM;AACjB,SAAK,OAAO;AACZ,SAAK,aAAa;AAAA,EACpB;AACF;;;ACdA,qBAAwB;AACxB,kBAAsC;AACtC,0BAA4B;AAErB,IAAM,eAAe;AACrB,IAAM,aAAa,IAAI,YAAY,EAAE,OAAO,mBAAmB;AAI/D,SAAS,KAAK,MAA0B;AAC7C,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,IAAK,WAAU,OAAO,aAAa,KAAK,CAAC,CAAC;AAC3E,QAAM,SAAS,KAAK,MAAM;AAC1B,SAAO,OAAO,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,EAAE;AACzE;AAEO,SAAS,WAAW,MAA0B;AACnD,QAAM,SAAS,OAAO,IAAI,QAAQ,IAAK,KAAK,SAAS,KAAM,CAAC;AAC5D,QAAM,SAAS,OAAO,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AAC1D,QAAM,SAAS,KAAK,MAAM;AAC1B,QAAM,MAAM,IAAI,WAAW,OAAO,MAAM;AACxC,WAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,IAAK,KAAI,CAAC,IAAI,OAAO,WAAW,CAAC;AACpE,SAAO;AACT;AAGO,SAAS,IAAI,KAA0B;AAC5C,QAAM,WAAO,oBAAAA,SAAgB,GAAa;AAC1C,MAAI,SAAS,QAAW;AACtB,UAAM,IAAI,UAAU,qCAAqC;AAAA,EAC3D;AACA,SAAO,IAAI,YAAY,EAAE,OAAO,IAAI;AACtC;AAEO,SAAS,OAAO,MAA8B;AACnD,aAAO,YAAAC,QAAY,IAAI;AACzB;AAEA,SAAS,eAAe,OAAiC;AACvD,QAAM,QAAQ,MAAM,OAAO,CAAC,GAAG,MAAM,IAAI,EAAE,QAAQ,CAAC;AACpD,QAAM,MAAM,IAAI,WAAW,KAAK;AAChC,MAAI,SAAS;AACb,aAAW,KAAK,OAAO;AACrB,QAAI,IAAI,GAAG,MAAM;AACjB,cAAU,EAAE;AAAA,EACd;AACA,SAAO;AACT;AAaO,SAAS,cAAc,OAAyB;AACrD,MAAI,OAAO,UAAU,UAAW,QAAO;AACvC,MAAI,OAAO,UAAU,SAAU,QAAO,CAAC,OAAO,UAAU,KAAK;AAC7D,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,KAAK,aAAa;AACzD,MAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;AAC/C,WAAO,OAAO,OAAO,KAAgC,EAAE,KAAK,aAAa;AAAA,EAC3E;AACA,SAAO;AACT;AAEO,SAAS,aAAa,MAAuB;AAClD,MAAI,IAAI;AACR,QAAM,IAAI,KAAK;AACf,SAAO,IAAI,GAAG;AACZ,UAAM,KAAK,KAAK,CAAC;AACjB,QAAI,OAAO,KAAK;AACd;AACA,aAAO,IAAI,GAAG;AACZ,YAAI,KAAK,CAAC,MAAM,MAAM;AACpB,eAAK;AACL;AAAA,QACF;AACA,YAAI,KAAK,CAAC,MAAM,KAAK;AACnB;AACA;AAAA,QACF;AACA;AAAA,MACF;AACA;AAAA,IACF;AACA,QAAI,OAAO,OAAQ,MAAM,OAAO,MAAM,KAAM;AAC1C,YAAM,QAAQ;AACd,UAAI,OAAO,IAAK;AAChB,UAAI,eAAe;AACnB,aAAO,IAAI,KAAK,KAAK,CAAC,KAAK,OAAO,KAAK,CAAC,KAAK,IAAK;AAClD,UAAI,KAAK,CAAC,MAAM,KAAK;AACnB,uBAAe;AACf;AACA,eAAO,IAAI,KAAK,KAAK,CAAC,KAAK,OAAO,KAAK,CAAC,KAAK,IAAK;AAAA,MACpD;AACA,UAAI,KAAK,CAAC,MAAM,OAAO,KAAK,CAAC,MAAM,KAAK;AACtC,uBAAe;AACf;AACA,YAAI,KAAK,CAAC,MAAM,OAAO,KAAK,CAAC,MAAM,IAAK;AACxC,eAAO,IAAI,KAAK,KAAK,CAAC,KAAK,OAAO,KAAK,CAAC,KAAK,IAAK;AAAA,MACpD;AACA,UAAI,MAAM,MAAO;AACjB,UAAI,aAAc,QAAO;AACzB;AAAA,IACF;AACA;AAAA,EACF;AACA,SAAO;AACT;AAIO,SAAS,MAAM,OAA2B;AAC/C,SAAO,aAAa,KAAK,OAAO,KAAK,CAAC;AACxC;AAEO,SAAS,gBAAgB,OAAmB,MAAe,UAA2B;AAC3F,MAAI;AACF,UAAM,MAAM,WAAW,QAAQ;AAC/B,UAAM,UAAU,YAAY,YAAY,IAAI,IAAI,CAAC;AACjD,WAAO,uBAAQ,OAAO,KAAK,SAAS,KAAK;AAAA,EAC3C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,YAAY,OAAwC;AAClE,QAAM,WAAoC,CAAC;AAC3C,aAAW,KAAK,OAAO,KAAK,KAAK,GAAG;AAClC,QAAI,MAAM,eAAgB,UAAS,CAAC,IAAI,MAAM,CAAC;AAAA,EACjD;AACA,SAAO,KAAK,OAAO,IAAI,QAAQ,CAAC,CAAC;AACnC;AAIO,SAAS,SAAS,SAA4D;AACnF,SAAO,OAAO,YAAY,IAAI,WAAW,CAAC,CAAI,CAAC,GAAG,IAAI,EAAE,MAAM,QAAQ,MAAM,WAAW,QAAQ,UAAU,CAAC,CAAC,CAAC;AAC9G;AAEA,SAAS,SAAS,MAAkB,OAA+B;AACjE,SAAO,OAAO,YAAY,IAAI,WAAW,CAAC,CAAI,CAAC,GAAG,MAAM,KAAK,CAAC;AAChE;AASA,SAAS,WAAW,GAAe,GAAwB;AACzD,MAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,WAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,IAAK,KAAI,EAAE,CAAC,MAAM,EAAE,CAAC,EAAG,QAAO;AAC7D,SAAO;AACT;AAMO,SAAS,kBACd,OACA,MACA,MACA,MACmB;AACnB,MAAI,SAAS,KAAM,QAAO;AAC1B,MAAI,KAAK;AACT,MAAI,KAAK,OAAO;AAChB,MAAI,IAAI;AACR,aAAW,KAAK,MAAM;AACpB,QAAI,OAAO,EAAG,QAAO;AACrB,SAAK,KAAK,OAAO,KAAK,OAAO,IAAI;AAC/B,UAAI,SAAS,GAAG,CAAC;AACjB,WAAK,KAAK,OAAO,GAAG;AAClB,eAAO,OAAO,MAAM,KAAK,OAAO,GAAG;AACjC,iBAAO;AACP,iBAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF,OAAO;AACL,UAAI,SAAS,GAAG,CAAC;AAAA,IACnB;AACA,WAAO;AACP,WAAO;AAAA,EACT;AACA,SAAO,OAAO,IAAI,IAAI;AACxB;;;ACnMA,eAAoB;AACpB,yBAAuB;;;ACDhB,IAAM,gBAAgB;AAAA,EAC3B,WAAW;AAAA,EACX,OAAO;AAAA,EACP,SAAS;AAAA,EACT,eAAe;AAAA,EACf,QAAQ;AAAA,EACR,YAAY;AAAA,IACV;AAAA,IACA;AAAA,EACF;AAAA,EACA,wBAAwB;AAAA,EACxB,cAAc;AAAA,IACZ,QAAQ;AAAA,MACN,QAAQ;AAAA,IACV;AAAA,IACA,aAAa;AAAA,MACX,QAAQ;AAAA,IACV;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,IACV;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,aAAa;AAAA,MACX,QAAQ;AAAA,MACR,WAAW;AAAA,IACb;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,WAAW;AAAA,IACb;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,WAAW;AAAA,IACb;AAAA,IACA,eAAe;AAAA,MACb,QAAQ;AAAA,MACR,WAAW;AAAA,IACb;AAAA,IACA,UAAU;AAAA,MACR,QAAQ;AAAA,MACR,WAAW;AAAA,IACb;AAAA,IACA,gBAAgB;AAAA,MACd,QAAQ;AAAA,QACN;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ,QAAQ;AAAA,QACN;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,QAAQ;AAAA,MACR,YAAY;AAAA,QACV;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA,cAAc;AAAA,QACZ,gBAAgB;AAAA,UACd,SAAS;AAAA,QACX;AAAA,QACA,cAAc;AAAA,UACZ,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,aAAa;AAAA,QACf;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,QACV;AAAA,QACA,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,YAAY;AAAA,YACV;AAAA,UACF;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,cACR,QAAQ;AAAA,YACV;AAAA,YACA,QAAQ;AAAA,cACN,QAAQ;AAAA,cACR,aAAa;AAAA,YACf;AAAA,UACF;AAAA,QACF;AAAA,QACA,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,YAAY;AAAA,YACV;AAAA,UACF;AAAA,UACA,cAAc;AAAA,YACZ,MAAM;AAAA,cACJ,QAAQ;AAAA,cACR,aAAa;AAAA,cACb,aAAa;AAAA,YACf;AAAA,YACA,WAAW;AAAA,cACT,QAAQ;AAAA,cACR,YAAY;AAAA,gBACV;AAAA,gBACA;AAAA,gBACA;AAAA,cACF;AAAA,cACA,cAAc;AAAA,gBACZ,SAAS;AAAA,kBACP,QAAQ;AAAA,kBACR,WAAW;AAAA,gBACb;AAAA,gBACA,YAAY;AAAA,kBACV,QAAQ;AAAA,gBACV;AAAA,gBACA,YAAY;AAAA,kBACV,QAAQ;AAAA,gBACV;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,QACA,YAAY;AAAA,UACV,QAAQ;AAAA,UACR,aAAa;AAAA,QACf;AAAA,QACA,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,YAAY;AAAA,YACV;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,UACA,cAAc;AAAA,YACZ,UAAU;AAAA,cACR,QAAQ;AAAA,YACV;AAAA,YACA,UAAU;AAAA,cACR,QAAQ;AAAA,cACR,aAAa;AAAA,cACb,aAAa;AAAA,YACf;AAAA,YACA,UAAU;AAAA,cACR,QAAQ;AAAA,YACV;AAAA,YACA,cAAc;AAAA,cACZ,QAAQ;AAAA,YACV;AAAA,YACA,mBAAmB;AAAA,cACjB,QAAQ;AAAA,cACR,aAAa;AAAA,YACf;AAAA,YACA,gBAAgB;AAAA,cACd,QAAQ;AAAA,YACV;AAAA,UACF;AAAA,QACF;AAAA,QACA,eAAe;AAAA,UACb,QAAQ;AAAA,UACR,YAAY;AAAA,YACV;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,UACA,cAAc;AAAA,YACZ,YAAY;AAAA,cACV,QAAQ;AAAA,cACR,YAAY;AAAA,gBACV;AAAA,gBACA;AAAA,cACF;AAAA,cACA,cAAc;AAAA,gBACZ,MAAM;AAAA,kBACJ,QAAQ;AAAA,gBACV;AAAA,gBACA,WAAW;AAAA,kBACT,QAAQ;AAAA,kBACR,WAAW;AAAA,gBACb;AAAA,gBACA,aAAa;AAAA,kBACX,QAAQ;AAAA,gBACV;AAAA,cACF;AAAA,YACF;AAAA,YACA,eAAe;AAAA,cACb,QAAQ;AAAA,YACV;AAAA,YACA,eAAe;AAAA,cACb,QAAQ;AAAA,YACV;AAAA,YACA,YAAY;AAAA,cACV,QAAQ;AAAA,cACR,WAAW;AAAA,YACb;AAAA,YACA,SAAS;AAAA,cACP,QAAQ;AAAA,YACV;AAAA,UACF;AAAA,QACF;AAAA,QACA,WAAW;AAAA,UACT,QAAQ;AAAA,UACR,YAAY;AAAA,YACV;AAAA,UACF;AAAA,UACA,cAAc;AAAA,YACZ,SAAS;AAAA,cACP,QAAQ;AAAA,YACV;AAAA,YACA,eAAe;AAAA,cACb,QAAQ;AAAA,YACV;AAAA,UACF;AAAA,UACA,MAAM;AAAA,YACJ,cAAc;AAAA,cACZ,SAAS;AAAA,gBACP,SAAS;AAAA,cACX;AAAA,YACF;AAAA,UACF;AAAA,UACA,QAAQ;AAAA,YACN,YAAY;AAAA,cACV;AAAA,cACA;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,QACA,eAAe;AAAA,UACb,QAAQ;AAAA,UACR,WAAW;AAAA,UACX,WAAW;AAAA,QACb;AAAA,QACA,eAAe;AAAA,UACb,QAAQ;AAAA,UACR,YAAY;AAAA,YACV;AAAA,YACA;AAAA,UACF;AAAA,UACA,cAAc;AAAA,YACZ,QAAQ;AAAA,cACN,QAAQ;AAAA,YACV;AAAA,YACA,YAAY;AAAA,cACV,QAAQ;AAAA,YACV;AAAA,UACF;AAAA,QACF;AAAA,QACA,cAAc;AAAA,UACZ,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,MAAM;AAAA,QACJ,cAAc;AAAA,UACZ,eAAe;AAAA,YACb,WAAW;AAAA,UACb;AAAA,QACF;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,YAAY;AAAA,UACV;AAAA,QACF;AAAA,QACA,cAAc;AAAA,UACZ,eAAe;AAAA,YACb,cAAc;AAAA,cACZ,YAAY;AAAA,gBACV,YAAY;AAAA,kBACV;AAAA,kBACA;AAAA,kBACA;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,aAAa;AAAA,MACX,QAAQ;AAAA,MACR,YAAY;AAAA,QACV;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA,wBAAwB;AAAA,MACxB,cAAc;AAAA,QACZ,OAAO;AAAA,UACL,SAAS;AAAA,QACX;AAAA,QACA,UAAU;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,WAAW;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,YAAY;AAAA,QACV;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA,cAAc;AAAA,QACZ,UAAU;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,cAAc;AAAA,UACZ,QAAQ;AAAA,UACR,WAAW;AAAA,QACb;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,WAAW;AAAA,QACb;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,QACV;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,SAAS;AAAA,YACP,QAAQ;AAAA,UACV;AAAA,QACF;AAAA,QACA,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,YAAY;AAAA,YACV;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,UACA,cAAc;AAAA,YACZ,SAAS;AAAA,cACP,QAAQ;AAAA,YACV;AAAA,YACA,UAAU;AAAA,cACR,SAAS;AAAA,YACX;AAAA,YACA,OAAO;AAAA,cACL,QAAQ;AAAA,cACR,WAAW;AAAA,YACb;AAAA,YACA,WAAW;AAAA,cACT,QAAQ;AAAA,cACR,WAAW;AAAA,YACb;AAAA,YACA,aAAa;AAAA,cACX,QAAQ;AAAA,cACR,WAAW;AAAA,YACb;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;AD1XA,IAAM,MAAM,IAAI,SAAAC,QAAQ,EAAE,WAAW,OAAO,QAAQ,MAAM,CAAC;AAAA,IAC3D,mBAAAC,SAAW,GAAG;AACd,IAAM,WAAW,IAAI,QAAQ,aAAa;AAEnC,SAAS,YAAY,SAA2B;AACrD,SAAO,QAAQ,SAAS,OAAO,CAAC;AAClC;;;AEVA,kBAA2B;;;ACM3B,SAAS,SAAS,MAAkB,WAA+B;AACjE,QAAM,QAAQ,YAAY;AAC1B,SAAO,KAAK,SAAS,OAAO,QAAQ,EAAE;AACxC;AAEA,SAAS,kBAAkB,MAAkB,MAA+D;AAC1G,UAAQ,MAAM;AAAA,IACZ,KAAK;AACH,aAAO,KAAK,MAAM;AAAA,IACpB,KAAK,UAAU;AACb,UAAI,IAAI;AACR,eAAS,IAAI,IAAI,IAAI,IAAI,IAAK,KAAK,KAAK,KAAM,OAAO,KAAK,CAAC,CAAC;AAC5D,aAAO;AAAA,IACT;AAAA,IACA,KAAK,WAAW;AACd,YAAM,QAAQ,KAAK,SAAS,IAAI,EAAE;AAClC,aAAO,OAAO,aAAa,KAAK;AAAA,IAClC;AAAA,IACA,KAAK;AACH,aAAO,KAAK,EAAE,MAAM;AAAA,EACxB;AACF;AAEA,SAAS,aAAa,OAA2B;AAC/C,MAAI,IAAI;AACR,aAAW,KAAK,MAAO,MAAK,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAC1D,SAAO;AACT;AAQO,SAAS,+BACd,MACA,aACA,aAC0F;AAC1F,QAAM,UAAU,YAAY,IAAI,CAAC,MAAM,MAAM,kBAAkB,SAAS,MAAM,CAAC,GAAG,IAAI,CAAC;AACvF,QAAM,aAAa,SAAS,MAAM,YAAY,MAAM;AACpD,MAAI,SAAS;AACb,aAAW,KAAK,WAAY,UAAU,UAAU,KAAM,OAAO,CAAC;AAC9D,QAAM,MAAM,OAAO,MAAM;AACzB,QAAM,UAAU,KAAK,SAAS,KAAK,MAAM,EAAE;AAC3C,MAAI,MAAM;AACV,aAAW,KAAK,QAAS,OAAO,OAAO,KAAM,OAAO,CAAC;AACrD,QAAM,SAAS,OAAO,GAAG;AACzB,QAAM,MAAM,KAAK,SAAS,MAAM,IAAI,MAAM,KAAK,MAAM;AACrD,QAAM,UAAU,gBAAgB,WAAW,IAAI,YAAY,EAAE,OAAO,GAAG,IAAI,IAAI,MAAM;AACrF,SAAO,EAAE,SAAS,QAAQ;AAC5B;AAOO,SAAS,+BACd,YACA,aACA,aACA;AACA,QAAM,kBAAkB,SAAS,YAAY,CAAC;AAC9C,MAAI,cAAc;AAClB,aAAW,KAAK,gBAAiB,eAAe,eAAe,KAAM,OAAO,CAAC;AAC7E,QAAM,aAAa,OAAO,WAAW;AACrC,SAAO,+BAA+B,WAAW,SAAS,UAAU,GAAG,aAAa,WAAW;AACjG;AAEO,SAAS,aAAa,OAA2B;AACtD,SAAO,OAAO,aAAa,KAAK;AAClC;AAEO,SAAS,WAAW,KAAyB;AAClD,QAAM,QAAQ,IAAI,WAAW,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI;AACpD,QAAM,MAAM,IAAI,WAAW,MAAM,SAAS,CAAC;AAC3C,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,IAAK,KAAI,CAAC,IAAI,SAAS,MAAM,OAAO,IAAI,GAAG,CAAC,GAAG,EAAE;AACjF,SAAO;AACT;;;ADlFA,IAAM,MAAM;AAEZ,SAAS,SAAS,WAA+B;AAC/C,aAAO,wBAAW,IAAI,YAAY,EAAE,OAAO,SAAS,CAAC,EAAE,MAAM,GAAG,CAAC;AACnE;AAEA,IAAM,eAAe,SAAS,yBAAyB;AACvD,IAAM,mBAAmB,CAAC,WAAW,WAAW,UAAU,UAAU,UAAU,WAAW,WAAW,WAAW,MAAM;AACrH,IAAM,oBAAoB,CAAC,WAAW,UAAU,WAAW,UAAU,SAAS;AA6B9E,eAAe,IAAI,KAAa,WAAmB,QAAqC;AACtF,QAAM,MAAM,MAAM,MAAM,KAAK;AAAA,IAC3B,QAAQ;AAAA,IACR,SAAS,EAAE,gBAAgB,oBAAoB,cAAc,uBAAuB;AAAA,IACpF,MAAM,KAAK,UAAU,EAAE,SAAS,OAAO,IAAI,GAAG,QAAQ,OAAO,CAAC;AAAA,EAChE,CAAC;AACD,QAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,MAAI,QAAQ,KAAK,OAAO;AACtB,UAAM,IAAI,MAAM,GAAG,MAAM,KAAK,KAAK,MAAM,WAAW,WAAW,EAAE;AAAA,EACnE;AACA,SAAO,KAAK;AACd;AAGA,eAAsB,YAAY,OAAc,QAAgB,QAAuC;AACrG,QAAM,IAAI,MAAM;AAChB,MAAI,CAAC,EAAG,QAAO,EAAE,IAAI,OAAO,QAAQ,kBAAkB,WAAW,KAAK;AACtE,MAAI;AACF,QAAI,EAAE,WAAW,MAAO,QAAO,EAAE,IAAI,OAAO,QAAQ,kBAAkB,WAAW,KAAK;AAEtF,UAAM,aAAc,MAAM,IAAI,QAAQ,aAAa;AACnD,UAAM,cAAc,EAAE,MAAM,MAAM,GAAG,EAAE,CAAC;AACxC,QAAI,OAAO,UAAU,MAAM,OAAO,WAAW,GAAG;AAC9C,aAAO,EAAE,IAAI,OAAO,QAAQ,sBAAsB,WAAW,KAAK;AAAA,IACpE;AAEA,UAAM,MAAM,WAAW,EAAE,GAAG;AAC5B,UAAM,WAAW,IAAI,WAAW,CAAC,GAAG,cAAc,GAAG,GAAG,CAAC;AACzD,UAAM,MAAO,MAAM,IAAI,QAAQ,YAAY,EAAE,IAAI,KAAK,MAAM,aAAa,QAAQ,EAAE,GAAG,QAAQ;AAC9F,UAAM,aAAa,WAAW,GAAG;AACjC,UAAM,EAAE,SAAS,QAAQ,IAAI,+BAA+B,YAAY,CAAC,GAAG,gBAAgB,GAAG,OAAO;AACtG,UAAM,CAAC,MAAM,QAAQ,OAAO,MAAM,WAAW,MAAM,YAAY,UAAU,UAAU,IAAI;AAWvF,UAAM,OAAO;AAEb,QAAI,CAAC,WAAW,MAAM,GAAG,KAAK,UAAU,IAAI;AAC1C,aAAO,EAAE,IAAI,OAAO,QAAQ,yBAAyB,WAAW,KAAK;AAAA,IACvE;AACA,QAAI,cAAc,IAAI;AACpB,aAAO,EAAE,IAAI,OAAO,QAAQ,uBAAuB,WAAW,KAAK;AAAA,IACrE;AACA,UAAM,gBAAiB,SAAoB,YAAY;AACvD,UAAM,qBAAqB,IAAI,KAAK,OAAO,oBAAoB,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAC9F,QAAI,CAAC,mBAAmB,IAAI,aAAa,GAAG;AAC1C,aAAO,EAAE,IAAI,OAAO,QAAQ,0BAA0B,WAAW,KAAK;AAAA,IACxE;AACA,UAAM,YAAY,OAAO,aAAa,MAAM,EAAE,MAAM,CAAC;AACrD,UAAM,mBAAmB,IAAI,KAAK,OAAO,kBAAkB,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAC1F,QAAI,CAAC,iBAAiB,IAAI,UAAU,YAAY,CAAC,GAAG;AAClD,aAAO,EAAE,IAAI,OAAO,QAAQ,wBAAwB,WAAW,KAAK;AAAA,IACtE;AAEA,QAAI;AACJ,QAAI;AACF,oBAAc,+BAA+B,MAAM,CAAC,GAAG,iBAAiB,GAAG,QAAQ;AAAA,IACrF,QAAQ;AACN,aAAO,EAAE,IAAI,OAAO,QAAQ,oBAAoB,WAAW,KAAK;AAAA,IAClE;AACA,UAAM,CAAC,OAAO,MAAM,MAAM,WAAW,SAAS,IAAI,YAAY;AAE9D,QAAI,CAAC,WAAW,OAAO,WAAW,MAAM,MAAM,CAAC,KAAK,SAAS,OAAO,EAAE,SAAS,GAAG;AAChF,aAAO,EAAE,IAAI,OAAO,QAAQ,wBAAwB,WAAW,KAAK;AAAA,IACtE;AACA,QAAI,EAAE,cAAc,MAAM,WAAW;AAEnC,aAAO,EAAE,IAAI,OAAO,QAAQ,8BAA8B,WAAW,KAAK;AAAA,IAC5E;AACA,QAAI,CAAC,WAAW,MAAM,WAAW,MAAM,SAAS,CAAC,GAAG;AAClD,aAAO,EAAE,IAAI,OAAO,QAAQ,iBAAiB,WAAW,KAAK;AAAA,IAC/D;AACA,WAAO,EAAE,IAAI,MAAM,QAAQ,YAAY,WAAW,OAAO,KAAK,EAAE;AAAA,EAClE,SAAS,KAAK;AACZ,UAAM,OAAO,eAAe,QAAQ,IAAI,YAAY,OAAO;AAC3D,WAAO,EAAE,IAAI,OAAO,QAAQ,cAAc,IAAI,IAAI,WAAW,KAAK;AAAA,EACpE;AACF;;;AEpEO,IAAM,eAAe,oBAAI,QAAwB;AAExD,eAAsB,cAAc,SAA2B,SAA+C;AAC5G,QAAM,MAAM,OAAO,YAAY,WAAW,UACtC,WAAW,OAAO,YAAY,WAAW,aAAa,IAAI,OAAiB,IAAI;AACnF,QAAM,SAAsB,OAAO,YAAY,WAAW,KAAK,MAAM,OAAO,IAAM,WAA2B,CAAC;AAC9G,QAAM,SAAS,QAAQ,QAAQ,CAAC;AAEhC,QAAM,SAAS,CAAC;AAEhB,QAAM,QAAQ,UAAU,OAAO,WAAW,WAAW,OAAO,OAAO,WAAc,CAAC;AAClF,QAAM,UAAU,OAAQ,KAAiC,gBAAgB,EAAE;AAC3E,QAAM,QAAQ,QAAQ,MAAM,GAAG;AAC/B,SAAO,eAAe,MAAM,CAAC,MAAM,WAAW,MAAM,MAAM,SAAS,CAAC,KAAK,IAAI,MAAM,GAAG,EAAE,CAAC,MAAM;AAE/F,SAAO,SAAS,YAAY,MAAM;AAElC,QAAM,cAAc,QAAQ,SAAY,aAAa,GAAG,IAAI,cAAc,MAAM;AAChF,SAAO,gBAAgB,CAAC;AAExB,QAAM,OAAO,UAAU,OAAO,WAAW,WAAW,OAAO,YAAY,WAAe,CAAC;AACvF,QAAM,OAAO,OAAO,QAAQ,CAAC;AAC7B,QAAM,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,WAAW,KAAK,MAAM;AACrD,QAAM,SAAS,OAAQ,KAAiC,aAAa,EAAE;AACvE,QAAM,SAAU,KAAiC;AAEjD,MAAI,QAAQ;AACZ,MAAI,OAAO,KAAK,WAAW,QAAQ,QAAQ;AACzC,QAAI;AACF,YAAM,gBAAgB,MAAM,WAAW,IAAI,UAAU,CAAC;AACtD,cACE,kBAAkB,IAAI,UACtB,IAAI,cAAc,WACjB,IAAI,eAAe,QAAQ,IAAI,eAAe,UAAa,SAAS,IAAI;AAAA,IAC7E,QAAQ;AACN,cAAQ;AAAA,IACV;AAAA,EACF;AACA,SAAO,MAAM;AAEb,MAAI,QAAQ;AACZ,MAAI,SAAS,KAAK;AAChB,QAAI;AACF,cAAQ,gBAAgB,WAAW,IAAI,UAAU,GAAG,MAAM,KAAK,SAAS,EAAE;AAAA,IAC5E,QAAQ;AACN,cAAQ;AAAA,IACV;AAAA,EACF;AACA,SAAO,YAAY;AAEnB,QAAM,QAAS,KAAiC;AAChD,SAAO,eACL,QAAQ,KAAK,KACb,OAAO,UAAU,YAChB,MAAkC,iBAAiB,YAAY,KAAgC;AAElG,QAAM,QAAQ,UAAU,OAAO,WAAW,WAAW,OAAO,QAAQ;AACpE,MAAI;AACJ,MAAI,CAAC,OAAO;AACV,WAAO,YAAY;AAAA,EACrB,OAAO;AACL,UAAM,OAAO;AAAA,MACX,MAAM;AAAA,MACN,MAAM;AAAA,MACN,SAAS,EAAE,MAAO,OAAuB,MAAM,WAAY,OAAuB,UAAU,CAAC;AAAA,MAC7F,MAAM,UAAU,IAAI,CAAC,MAAM,WAAW,CAAC,CAAC;AAAA,IAC1C;AACA,WAAO,YAAY,SAAS,QAAQ,KAAK,IAAI,MAAM,MAAM;AAAA,EAC3D;AAEA,MAAI,EAAE,SAAS,MAAM,SAAS;AAC5B,WAAO,SAAS;AAAA,EAClB,WAAW,CAAC,QAAQ,QAAQ;AAC1B,WAAO,SAAS;AAAA,EAClB,OAAO;AACL,UAAM,IAAI,MAAM,YAAY,OAAO,QAAQ,QAAQ,MAAM;AACzD,WAAO,SAAS,EAAE,KAAK,OAAO,EAAE;AAChC,eAAW,EAAE;AAAA,EACf;AAEA,QAAM,WAAsC;AAAA,IAC1C;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,QAAM,QAAQ,SAAS,MAAM,CAAC,MAAM,OAAO,CAAC,MAAM,IAAI,MAAM,OAAO,cAAc,QAAQ,OAAO,cAAc;AAE9G,QAAM,qBAAqB,QAAS,OAAO,cAAc,QAAQ,OAAO,WAAW,OAAO,IAAI,IAAK;AACnG,QAAM,eAAgB,KAAiC;AACvD,QAAM,UAAU,QAAS,cAAc,SAAS,OAAQ;AAExD,QAAM,SAAuB;AAAA,IAC3B;AAAA,IACA;AAAA,IACA,SAAS,WAAW;AAAA,IACpB,sBAAsB;AAAA,EACxB;AACA,MAAI,aAAa,QAAW;AAC1B,WAAO,YAAY;AAAA,EACrB;AACA,SAAO;AACT;;;ACpGA,IAAM,4BAA4B;AAClC,IAAM,wBAAwB;AAC9B,IAAM,wBAAwB;AAE9B,IAAM,mBAAmB;AAEzB,SAAS,SAAiB;AACxB,UAAO,oBAAI,KAAK,GAAE,YAAY;AAChC;AAEO,IAAM,WAAN,MAAe;AAAA,EACH;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,UAA2B,CAAC,GAAG;AACzC,SAAK,SAAS,QAAQ;AACtB,SAAK,WAAW,QAAQ,WAAW,kBAAkB,QAAQ,QAAQ,EAAE;AACvE,SAAK,YAAY,QAAQ,SAAS,WAAW;AAC7C,QAAI,CAAC,KAAK,WAAW;AACnB,YAAM,IAAI,MAAM,wEAAwE;AAAA,IAC1F;AAAA,EACF;AAAA,EAEA,MAAc,QACZ,QACA,MACA,EAAE,OAAO,MAAM,MAAM,OAAO,MAAM,IAAwD,CAAC,GACzE;AAClB,UAAM,UAAkC,EAAE,QAAQ,mBAAmB;AACrE,QAAI,SAAS,OAAW,SAAQ,cAAc,IAAI;AAClD,QAAI,MAAM;AACR,UAAI,CAAC,KAAK,QAAQ;AAChB,cAAM,IAAI,cAAc,KAAK,uBAAuB;AAAA,MACtD;AACA,cAAQ,eAAe,IAAI,UAAU,KAAK,MAAM;AAAA,IAClD;AACA,QAAI;AACJ,QAAI;AACF,YAAM,MAAM,KAAK,UAAU,GAAG,KAAK,OAAO,GAAG,IAAI,IAAI;AAAA,QACnD;AAAA,QACA;AAAA,QACA,MAAM,SAAS,SAAY,KAAK,UAAU,IAAI,IAAI;AAAA,MACpD,CAAC;AAAA,IACH,SAAS,KAAK;AAEZ,YAAM,IAAI,cAAc,GAAG,kBAAkB,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,EAAE;AAAA,IACjG;AAEA,QAAI,IAAI,WAAW,KAAK;AACtB,YAAM,mBAAmB,IAAI,QAAQ,IAAI,aAAa;AACtD,YAAM,aAAa,mBAAmB,OAAO,gBAAgB,IAAI;AACjE,UAAI,SAAS;AACb,UAAI;AACF,cAAM,SAAU,MAAM,IAAI,KAAK;AAC/B,YAAI,QAAQ,OAAQ,UAAS,OAAO;AAAA,MACtC,QAAQ;AAAA,MAER;AACA,YAAM,IAAI,eAAe,QAAQ,OAAO,SAAS,UAAU,IAAI,aAAa,MAAS;AAAA,IACvF;AAEA,QAAI,CAAC,IAAI,IAAI;AACX,UAAI,SAAS,IAAI;AACjB,UAAI;AACF,cAAM,SAAU,MAAM,IAAI,KAAK;AAC/B,YAAI,QAAQ,OAAQ,UAAS,OAAO;AAAA,MACtC,QAAQ;AAAA,MAER;AACA,YAAM,IAAI,cAAc,IAAI,QAAQ,MAAM;AAAA,IAC5C;AAEA,QAAI,IAAI,WAAW,IAAK,QAAO;AAC/B,QAAI,KAAM,QAAO,IAAI,KAAK;AAC1B,WAAO,IAAI,KAAK;AAAA,EAClB;AAAA,EAEA,MAAM,YAAY,OAAoB,SAAmD;AACvF,UAAM,YAAY,QAAQ,qBAAqB,OAAO,QAAQ,UAAU,YAAY,IAAK,QAAQ,aAAa,OAAO;AACrH,UAAM,OAAO;AAAA,MACX,iBAAiB,QAAQ,iBAAiB,eAAe;AAAA,MACzD,UAAU,QAAQ;AAAA,MAClB,QAAQ,MAAM;AAAA,MACd,QAAQ,MAAM;AAAA,MACd,QAAQ,MAAM;AAAA,MACd,YAAY;AAAA,IACd;AACA,WAAQ,MAAM,KAAK,QAAQ,QAAQ,cAAc,EAAE,KAAK,CAAC;AAAA,EAC3D;AAAA,EAEA,MAAM,SAAS,SAAuC;AACpD,WAAQ,MAAM,KAAK,QAAQ,OAAO,cAAc,mBAAmB,OAAO,CAAC,EAAE;AAAA,EAC/E;AAAA,EAEA,MAAM,eAAe,SAAiB,UAAuB,CAAC,GAAyB;AACrF,UAAM,YAAY,QAAQ,aAAa;AACvC,UAAM,iBAAiB,QAAQ,kBAAkB;AACjD,UAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,eAAS;AACP,UAAI,OAAO;AACX,UAAI;AACF,cAAM,SAAS,MAAM,KAAK,SAAS,OAAO;AAC1C,YAAI,OAAO,UAAU,UAAW,QAAO;AAAA,MACzC,SAAS,KAAK;AACZ,YAAI,eAAe,kBAAkB,IAAI,eAAe,QAAW;AACjE,iBAAO,KAAK,IAAI,MAAM,IAAI,aAAa,GAAI;AAAA,QAC7C,OAAO;AACL,gBAAM;AAAA,QACR;AAAA,MACF;AACA,UAAI,KAAK,IAAI,KAAK,UAAU;AAC1B,cAAM,IAAI,cAAc,KAAK,mBAAmB,SAAS,wBAAwB,OAAO,YAAY;AAAA,MACtG;AACA,YAAM,MAAM,KAAK,IAAI,MAAM,KAAK,IAAI,GAAG,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC;AAAA,IAChE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,WAAW,UAA6B,CAAC,GAAuB;AACpE,UAAM,QAAQ,QAAQ,SAAS;AAC/B,QAAI,QAAQ,yBAAyB,QAAQ,uBAAuB;AAClE,YAAM,IAAI,WAAW,yBAAyB,qBAAqB,QAAQ,qBAAqB,SAAS,KAAK,EAAE;AAAA,IAClH;AACA,UAAM,QAAgC,EAAE,OAAO,OAAO,KAAK,EAAE;AAC7D,QAAI,QAAQ,WAAW,OAAW,OAAM,SAAS,QAAQ;AACzD,QAAI,QAAQ,YAAY,OAAW,OAAM,WAAW,QAAQ;AAC5D,QAAI,QAAQ,WAAW,OAAW,OAAM,SAAS,QAAQ;AACzD,QAAI,QAAQ,YAAY,OAAW,OAAM,UAAU,QAAQ;AAC3D,QAAI,QAAQ,UAAU,OAAW,OAAM,QAAQ,QAAQ;AACvD,UAAM,KAAK,IAAI,gBAAgB,KAAK,EAAE,SAAS;AAC/C,UAAM,OAAQ,MAAM,KAAK,QAAQ,OAAO,cAAc,EAAE,EAAE;AAC1D,WAAO,EAAE,QAAQ,KAAK,QAAQ,YAAY,KAAK,YAAY;AAAA,EAC7D;AAAA;AAAA,EAGA,OAAO,WAAW,UAA+E,CAAC,GAAiC;AACjI,UAAM,EAAE,UAAU,GAAG,QAAQ,IAAI;AACjC,QAAI;AACJ,eAAS;AACP,YAAM,OAAO,MAAM,KAAK,WAAW,EAAE,GAAG,SAAS,OAAO,UAAU,OAAO,CAAC;AAC1E,aAAO,KAAK;AACZ,UAAI,KAAK,eAAe,KAAM;AAC9B,eAAS,KAAK;AAAA,IAChB;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,WAAW,WAAqC;AACpD,UAAM,OAAQ,MAAM,KAAK,QAAQ,OAAO,gBAAgB,mBAAmB,SAAS,CAAC,IAAI,EAAE,MAAM,OAAO,MAAM,KAAK,CAAC;AACpH,UAAM,UAAU,KAAK,MAAM,IAAI;AAC/B,iBAAa,IAAI,SAAmB,IAAI;AACxC,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,MAAM,UAA2B;AAC/B,WAAQ,MAAM,KAAK,QAAQ,OAAO,+BAA+B,EAAE,MAAM,MAAM,CAAC;AAAA,EAClF;AAAA,EAEA,MAAM,OAAO,SAA2B,UAA8C,CAAC,GAA0B;AAC/G,UAAM,OAAO,QAAQ,QAAS,MAAM,KAAK,QAAQ;AACjD,WAAO,cAAc,SAAS,EAAE,MAAM,QAAQ,QAAQ,OAAO,CAAC;AAAA,EAChE;AACF;AAEA,SAAS,MAAM,IAA2B;AACxC,SAAO,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AACzD;AAEA,SAAS,iBAAyB;AAChC,QAAM,IAAI;AACV,MAAI,EAAE,QAAQ,WAAY,QAAO,EAAE,OAAO,WAAW;AACrD,SAAO,SAAS,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AACnE;;;AClPA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAaA,IAAM,UAAU;AAChB,IAAM,SAAS;AACf,IAAM,YAAY;AAClB,IAAM,aAAa;AACnB,IAAM,WAAW;AACjB,IAAM,kBAAkB;AACxB,IAAM,cAAc;AAEpB,SAAS,OAAO,WAAoB,SAAoC;AACtE,MAAI,CAAC,UAAW,OAAM,IAAI,UAAU,OAAO;AAC7C;AAEO,SAAS,iBAAiB,OAAqE;AACpG,SAAO,QAAQ,KAAK,MAAM,MAAM,GAAG,+CAA+C;AAClF,SAAO,OAAO,KAAK,MAAM,GAAG,GAAG,2DAA2D;AAC1F,SAAO,MAAM,UAAU,MAAM,OAAO,SAAS,GAAG,sCAAsC;AACtF,SAAO,EAAE,QAAQ,sBAAsB,QAAQ,MAAM,QAAQ,QAAQ,EAAE,KAAK,MAAM,KAAK,QAAQ,MAAM,OAAO,EAAE;AAChH;AAEO,SAAS,aAAa,OAAyF;AACpH,SAAO,QAAQ,KAAK,MAAM,MAAM,GAAG,2CAA2C;AAC9E,SAAO,OAAO,UAAU,MAAM,MAAM,KAAK,MAAM,UAAU,GAAG,iDAAiD;AAC7G,MAAI,MAAM,YAAY,QAAW;AAC/B,WAAO,OAAO,KAAK,MAAM,OAAO,GAAG,2DAA2D;AAAA,EAChG;AACA,QAAM,SAAkC,EAAE,QAAQ,MAAM,OAAO;AAC/D,MAAI,MAAM,SAAS,OAAW,QAAO,OAAO,MAAM;AAClD,MAAI,MAAM,YAAY,OAAW,QAAO,WAAW,MAAM;AACzD,SAAO,EAAE,QAAQ,kBAAkB,QAAQ,MAAM,QAAQ,OAAO;AAClE;AAEO,SAAS,iBAAiB,OAAqD;AACpF,SAAO,QAAQ,KAAK,MAAM,MAAM,GAAG,+CAA+C;AAClF,SAAO,OAAO,KAAK,MAAM,GAAG,GAAG,2DAA2D;AAC1F,SAAO,EAAE,QAAQ,sBAAsB,QAAQ,MAAM,QAAQ,QAAQ,EAAE,KAAK,MAAM,IAAI,EAAE;AAC1F;AAEO,SAAS,aAAa,OAA6E;AACxG,SAAO,UAAU,KAAK,MAAM,MAAM,GAAG,yCAAyC;AAC9E,SAAO,WAAW,KAAK,MAAM,MAAM,GAAG,qCAAqC;AAC3E,MAAI,MAAM,eAAe,QAAW;AAClC,WAAO,SAAS,KAAK,MAAM,UAAU,GAAG,8DAA8D;AAAA,EACxG;AACA,QAAM,SAAkC,EAAE,SAAS,MAAM,OAAO;AAChE,MAAI,MAAM,eAAe,OAAW,QAAO,cAAc,MAAM;AAC/D,SAAO,EAAE,QAAQ,kBAAkB,QAAQ,MAAM,QAAQ,OAAO;AAClE;AAEO,SAAS,iBAAiB,OAAyE;AACxG,SAAO,gBAAgB,KAAK,MAAM,MAAM,GAAG,iEAAiE;AAC5G,SAAO,YAAY,KAAK,MAAM,EAAE,GAAG,wDAAwD;AAC3F,MAAI,MAAM,eAAe,QAAW;AAClC,WAAO,SAAS,KAAK,MAAM,UAAU,GAAG,kEAAkE;AAAA,EAC5G;AACA,QAAM,SAAkC,EAAE,IAAI,MAAM,GAAG;AACvD,MAAI,MAAM,eAAe,OAAW,QAAO,cAAc,MAAM;AAC/D,SAAO,EAAE,QAAQ,sBAAsB,QAAQ,MAAM,QAAQ,OAAO;AACtE;AAEO,SAAS,cAAc,OAAsF;AAClH,MAAI;AACJ,MAAI;AACF,UAAM,IAAI,IAAI,MAAM,MAAM;AAAA,EAC5B,QAAQ;AACN,UAAM,IAAI,UAAU,2CAA2C;AAAA,EACjE;AACA,SAAO,IAAI,aAAa,UAAU,+CAA+C;AACjF,QAAM,SAAkC,CAAC;AACzC,MAAI,MAAM,WAAW,QAAW;AAC9B,WAAO,OAAO,UAAU,MAAM,MAAM,GAAG,0CAA0C;AACjF,WAAO,SAAS,MAAM;AAAA,EACxB;AACA,MAAI,MAAM,uBAAuB,OAAW,QAAO,sBAAsB,MAAM;AAC/E,SAAO,EAAE,QAAQ,mBAAmB,QAAQ,MAAM,QAAQ,OAAO;AACnE;","names":["canonicalizeJcs","nobleSha256","Ajv2020","addFormats"]}

package/dist/index.d.cts

@@ -0,0 +1,317 @@
+/**
+ * Typed helpers for the five live actions plus `http.url.status`, matching the wire shape the
+ * node's verifiers expect (`oss/spec/profiles/*.md`, `oss/node/src/poaw_node/verifiers/*.py`).
+ * Validation here is cheap and local — it never calls the network — but it fails fast with a
+ * clear message before the claim is submitted, since params are copied into public receipts.
+ */
+interface ClaimAction {
+    action: string;
+    target: string;
+    params: Record<string, unknown>;
+}
+declare function githubCommitPush(input: {
+    target: string;
+    sha: string;
+    branch: string;
+}): ClaimAction;
+declare function githubPrOpen(input: {
+    target: string;
+    number: number;
+    base?: string;
+    headSha?: string;
+}): ClaimAction;
+declare function githubChecksPass(input: {
+    target: string;
+    sha: string;
+}): ClaimAction;
+declare function xPostPublish(input: {
+    target: string;
+    postId: string;
+    textSha256?: string;
+}): ClaimAction;
+declare function slackMessagePost(input: {
+    target: string;
+    ts: string;
+    textSha256?: string;
+}): ClaimAction;
+declare function httpUrlStatus(input: {
+    target: string;
+    status?: number;
+    contentFingerprint?: string;
+}): ClaimAction;
+
+type actions_ClaimAction = ClaimAction;
+declare const actions_githubChecksPass: typeof githubChecksPass;
+declare const actions_githubCommitPush: typeof githubCommitPush;
+declare const actions_githubPrOpen: typeof githubPrOpen;
+declare const actions_httpUrlStatus: typeof httpUrlStatus;
+declare const actions_slackMessagePost: typeof slackMessagePost;
+declare const actions_xPostPublish: typeof xPostPublish;
+declare namespace actions {
+  export { type actions_ClaimAction as ClaimAction, actions_githubChecksPass as githubChecksPass, actions_githubCommitPush as githubCommitPush, actions_githubPrOpen as githubPrOpen, actions_httpUrlStatus as httpUrlStatus, actions_slackMessagePost as slackMessagePost, actions_xPostPublish as xPostPublish };
+}
+
+interface Proof$1 {
+    log_id: string;
+    leaf_index: number;
+    tree_size: number;
+    root_hash: string;
+    inclusion: string[];
+    anchor?: {
+        chain: string;
+        scheme: string;
+        uid: string;
+        tx_hash: string;
+        tree_size: number;
+    };
+}
+interface Keyset {
+    keys?: Array<{
+        key_id: string;
+        public_key: string;
+        valid_from: string;
+        revoked_at: string | null;
+    }>;
+    anchor_addresses?: string[];
+    anchor_schemas?: string[];
+}
+interface AnchorResult {
+    ok: boolean;
+    reason: string;
+    proven_by: number | null;
+}
+
+interface VerifyChecks {
+    spec_version: boolean;
+    schema: boolean;
+    integers_only: boolean;
+    key: boolean;
+    signature: boolean;
+    claim_digest: boolean;
+    inclusion: boolean | "absent";
+    anchor: boolean | "absent" | "not_checked_offline" | string;
+}
+interface VerifyReport {
+    checks: VerifyChecks;
+    valid: boolean;
+    verdict: string | null;
+    achieved_trust_level: number;
+    proven_by?: number | null;
+}
+interface VerifyOptions {
+    keys: Keyset;
+    rpcUrl?: string;
+}
+declare function verifyReceipt(receipt: unknown | string, options: VerifyOptions): Promise<VerifyReport>;
+
+/**
+ * The HTTP client. Shapes follow `oss/node/src/poaw_node/app.py`, `models.py` (`ClaimIn`) and
+ * `store.py` (`claim_status`). Uses only `fetch` — no Node built-ins — so it runs on Node, Deno
+ * and in browsers.
+ */
+
+interface QedProofOptions {
+    apiKey?: string;
+    baseUrl?: string;
+    fetch?: typeof fetch;
+}
+interface SubmitClaimOptions {
+    agentId: string;
+    clientClaimId?: string;
+    claimedAt?: string | Date;
+}
+interface ClaimStatus {
+    claim_id: string;
+    created?: boolean;
+    state: "queued" | "decided";
+    attempts: number;
+    receipt_id: string | null;
+    verdict: string | null;
+}
+interface WaitOptions {
+    timeoutMs?: number;
+    pollIntervalMs?: number;
+}
+interface Receipt {
+    body: Record<string, unknown>;
+    signature: Record<string, unknown>;
+    proof?: Record<string, unknown>;
+    [key: string]: unknown;
+}
+interface ClaimSummary {
+    claim_id: string;
+    state: string;
+    attempts: number;
+    receipt_id: string | null;
+    verdict: string | null;
+}
+interface ListClaimsOptions {
+    limit?: number;
+    cursor?: string;
+    agentId?: string;
+    action?: string;
+    verdict?: string;
+    state?: string;
+}
+interface ClaimPage {
+    claims: ClaimSummary[];
+    nextCursor: string | null;
+}
+declare class QedProof {
+    private readonly apiKey?;
+    private readonly baseUrl;
+    private readonly fetchImpl;
+    constructor(options?: QedProofOptions);
+    private request;
+    submitClaim(claim: ClaimAction, options: SubmitClaimOptions): Promise<ClaimStatus>;
+    getClaim(claimId: string): Promise<ClaimStatus>;
+    waitForVerdict(claimId: string, options?: WaitOptions): Promise<ClaimStatus>;
+    /**
+     * `GET /v1/claims`, newest first. `options.limit` (1-200, default 50) is validated locally —
+     * out of range throws a `RangeError` before any request is made.
+     */
+    listClaims(options?: ListClaimsOptions): Promise<ClaimPage>;
+    /** Yields every claim matching the filters, following `nextCursor` until exhausted. */
+    iterClaims(options?: Omit<ListClaimsOptions, "cursor" | "limit"> & {
+        pageSize?: number;
+    }): AsyncGenerator<ClaimSummary>;
+    /** Receipts are designed to be shared and checked by anyone (SPEC §1): no Authorization header. */
+    getReceipt(receiptId: string): Promise<Receipt>;
+    /** Public by design: `/.well-known/poaw-keys.json` (SPEC §5.2, §8.4). */
+    getKeys(): Promise<Keyset>;
+    verify(receipt: unknown | string, options?: {
+        keys?: Keyset;
+        rpcUrl?: string;
+    }): Promise<VerifyReport>;
+}
+
+declare class QedProofError extends Error {
+    status: number;
+    detail: string;
+    constructor(status: number, detail: string);
+}
+declare class RateLimitError extends QedProofError {
+    retryAfter: number | undefined;
+    constructor(detail: string, retryAfter: number | undefined);
+}
+
+declare const SPEC_VERSION = "poaw/0.1";
+declare const SIG_DOMAIN: Uint8Array<ArrayBuffer>;
+declare function b64u(data: Uint8Array): string;
+declare function b64uDecode(text: string): Uint8Array;
+/** RFC 8785 JCS, as UTF-8 bytes (matches Python's `rfc8785.dumps`, which returns bytes). */
+declare function jcs(obj: unknown): Uint8Array;
+declare function sha256(data: Uint8Array): Uint8Array;
+/**
+ * §3: receipts carry integers only. JSON.parse collapses the int/float distinction Python's
+ * `json.loads` preserves (e.g. `1.0` parses to the same JS number as `1`), so this checks two
+ * ways:
+ *  - `hasFloatValue`: any value that is a non-integer finite number (catches every float that
+ *    actually matters, e.g. `0.5` in vector 014-float-in-body.json).
+ *  - `hasFloatText`: scans the raw JSON text (outside string literals) for a numeric token
+ *    containing `.`, `e` or `E` — the same signal Python's tokenizer used to decide `float` vs
+ *    `int`, for callers that still have the original text (files, HTTP bodies).
+ * `verifyReceipt` OR's both when raw text is available, so nothing is hidden by `JSON.parse`.
+ */
+declare function hasFloatValue(value: unknown): boolean;
+declare function hasFloatText(text: string): boolean;
+declare function keyId(pkRaw: Uint8Array): string;
+declare function verifySignature(pkRaw: Uint8Array, body: unknown, sigValue: string): boolean;
+declare function claimDigest(claim: Record<string, unknown>): string;
+declare function leafHash(receipt: {
+    body: unknown;
+    signature: unknown;
+}): Uint8Array;
+/**
+ * RFC 9162 §2.1.3.2 audit-path verification. Returns the computed root, or null if the path is
+ * malformed. Ported line for line from `poaw_core.root_from_inclusion`.
+ */
+declare function rootFromInclusion(index: number, size: number, leaf: Uint8Array, path: Uint8Array[]): Uint8Array | null;
+
+/**
+ * This file was automatically generated by `npm run gen:types` from
+ * ../../../src/receipt.schema.json (the vendored PoAW receipt schema). Do not edit by hand.
+ */
+type Timestamp = string;
+type KeyId = string;
+type Action = string;
+type B64Url = string;
+type Fingerprint = string;
+type VerdictValue = "verified" | "late" | "mismatch" | "failed" | "unverifiable";
+type ReasonCode = "not_found" | "content_mismatch" | "target_mismatch" | "observed_after_tolerance" | "no_connection" | "permission_denied" | "rate_limited" | "destination_unavailable" | "unsupported_action" | "claim_ambiguous" | "verifier_error";
+/**
+ * Structural schema for a Proof of Agent Work receipt. Signature, inclusion and anchor checks are defined in SPEC.md and are not expressible in JSON Schema.
+ */
+interface PoAWReceiptPoaw01 {
+    body: Body;
+    signature: Signature;
+    proof?: Proof;
+}
+interface Body {
+    spec_version: "poaw/0.1";
+    receipt_id: string;
+    issued_at: Timestamp;
+    issuer: {
+        key_id: KeyId;
+        name?: string;
+    };
+    agent: {
+        id: string;
+        erc8004?: {
+            chain: string;
+            registry: string;
+            agent_id: string;
+        };
+    };
+    operator?: string;
+    claim: {
+        action: Action;
+        target: string;
+        params: {};
+        claimed_at: Timestamp;
+        client_claim_id?: string;
+        claim_digest: B64Url;
+    };
+    observation: {
+        verifier: {
+            id: Action;
+            version: string;
+            code_hash?: Fingerprint;
+        };
+        observed_at: Timestamp;
+        deadline_at: Timestamp;
+        attempts: number;
+        facts: {};
+    };
+    verdict: {
+        value: VerdictValue;
+        reason_code?: ReasonCode;
+    };
+    trust_level: number;
+    attestation?: {
+        type: string;
+        document: B64Url;
+    };
+    supersedes?: string;
+}
+interface Signature {
+    alg: "Ed25519";
+    key_id: KeyId;
+    value: string;
+}
+interface Proof {
+    log_id: B64Url;
+    leaf_index: number;
+    tree_size: number;
+    root_hash: B64Url;
+    inclusion: B64Url[];
+    anchor?: {
+        chain: string;
+        scheme: "eas";
+        uid: string;
+        tx_hash: string;
+        tree_size: number;
+    };
+}
+
+export { type AnchorResult, type ClaimAction, type ClaimPage, type ClaimStatus, type ClaimSummary, type PoAWReceiptPoaw01 as GeneratedReceipt, type Keyset, type ListClaimsOptions, type Proof$1 as Proof, QedProof, QedProofError, type QedProofOptions, RateLimitError, type Receipt, SIG_DOMAIN, SPEC_VERSION, type SubmitClaimOptions, type VerifyChecks, type VerifyOptions, type VerifyReport, type WaitOptions, actions, b64u, b64uDecode, claimDigest, hasFloatText, hasFloatValue, jcs, keyId, leafHash, rootFromInclusion, sha256, verifyReceipt, verifySignature };