@seedhape/core 0.1.0

package/dist/__tests__/tax-and-policy.test.js

@@ -0,0 +1,389 @@
+/**
+ * Tests for the two subsystems where a silent bug is expensive: the tax ledger
+ * (wrong numbers on a filing) and the policy engine (money leaving that
+ * shouldn't). Run with `node --test`.
+ */
+import { test, describe } from "node:test";
+import assert from "node:assert/strict";
+import { accrueTds, buildVdaTaxReport, consumeFifo, InsufficientLotsError, paiseToInr, RULES_FY_2026_27_SPECIFIED_PERSON, } from "../india/vda-tax.js";
+import { toInrPaise, inrToScaled } from "../india/fx.js";
+import { PolicyEngine, DEFAULT_POLICY_OPTIONS } from "../ap2/policy.js";
+import { buildIntentMandate, MandateValidationError } from "../mandate-builder.js";
+import { hashIntentMandate, listRoot } from "../ap2/mandates.js";
+import { matchesHostList } from "../ap2/policy.js";
+import { USDC } from "../types.js";
+const ASSET = USDC.base;
+const USER = "0x1111111111111111111111111111111111111111";
+const AGENT = "0x2222222222222222222222222222222222222222";
+const MERCHANT = "0x3333333333333333333333333333333333333333";
+function lot(id, usdc, inr, at) {
+    const quantity = BigInt(Math.round(Number(usdc) * 1e6));
+    return {
+        id,
+        userId: "u1",
+        quantity,
+        remaining: quantity,
+        costInrPaise: BigInt(Math.round(Number(inr) * 100)),
+        acquiredAt: at,
+        providerTxId: `tx-${id}`,
+        provider: "test",
+    };
+}
+// ---------------------------------------------------------------------------
+describe("FIFO cost basis", () => {
+    test("consumes oldest lots first and apportions cost proportionally", () => {
+        const lots = [
+            lot("a", "10", "880", 1000), // ₹88.00/USDC
+            lot("b", "10", "900", 2000), // ₹90.00/USDC
+        ];
+        // Spend 15 USDC for ₹1,350 of value.
+        const d = consumeFifo(lots, 15000000n, 135000n);
+        assert.equal(d.consumptions.length, 2);
+        assert.equal(d.consumptions[0].lotId, "a");
+        assert.equal(d.consumptions[0].quantity, 10000000n);
+        assert.equal(d.consumptions[1].lotId, "b");
+        assert.equal(d.consumptions[1].quantity, 5000000n);
+        // Cost = 880 + (900 * 5/10) = 880 + 450 = ₹1,330
+        assert.equal(d.costInrPaise, 133000n);
+        assert.equal(d.gainInrPaise, 2000n); // ₹20 gain
+        assert.equal(lots[0].remaining, 0n);
+        assert.equal(lots[1].remaining, 5000000n);
+    });
+    test("recognises a loss when the rate moves against the user", () => {
+        const lots = [lot("a", "10", "900", 1000)];
+        const d = consumeFifo(lots, 10000000n, 85000n); // spent when worth ₹850
+        assert.equal(d.gainInrPaise, -5000n);
+        assert.ok(d.gainInrPaise < 0n);
+    });
+    test("throws with the exact shortfall when lots are insufficient", () => {
+        const lots = [lot("a", "1", "88", 1000)];
+        assert.throws(() => consumeFifo(lots, 2000000n, 17600n), (e) => e instanceof InsufficientLotsError && e.shortfall === 1000000n);
+    });
+    test("rounding residue never lets total cost exceed what was paid", () => {
+        // 3 USDC costing ₹100 exactly; consume in three 1-USDC slices.
+        const lots = [lot("a", "3", "100", 1000)];
+        let total = 0n;
+        for (let i = 0; i < 3; i++) {
+            total += consumeFifo(lots, 1000000n, 3400n).costInrPaise;
+        }
+        assert.ok(total <= 10000n, `apportioned cost ${total} exceeded ₹100`);
+    });
+});
+// ---------------------------------------------------------------------------
+describe("Section 194S TDS accrual", () => {
+    const rules = RULES_FY_2026_27_SPECIFIED_PERSON; // ₹50,000 threshold
+    test("no TDS below the annual threshold", () => {
+        const a = accrueTds(rules, 100000n, 0n, 0n); // ₹1,000
+        assert.equal(a.tdsPaise, 0n);
+        assert.equal(a.thresholdCrossed, false);
+    });
+    test("crossing the threshold catches up on all prior consideration", () => {
+        // ₹49,000 already transferred, now another ₹2,000 → cumulative ₹51,000.
+        const a = accrueTds(rules, 200000n, 4900000n, 0n);
+        assert.equal(a.thresholdCrossed, true);
+        // Total due = 1% of ₹51,000 = ₹510 = 51,000 paise.
+        assert.equal(a.tdsPaise + a.catchUpPaise, 51000n);
+    });
+    test("after crossing, each transfer accrues only its own 1%", () => {
+        const a = accrueTds(rules, 100000n, 6000000n, 60000n);
+        assert.equal(a.thresholdCrossed, false);
+        assert.equal(a.catchUpPaise, 0n);
+        assert.equal(a.tdsPaise, 1000n); // 1% of ₹1,000
+    });
+});
+// ---------------------------------------------------------------------------
+describe("year-end report", () => {
+    test("losses are reported but never reduce the taxable base", () => {
+        const lots = [lot("a", "100", "9000", 1000)]; // ₹90/USDC
+        const spends = [
+            // Gain: 10 USDC used when worth ₹1,000 (cost ₹900)
+            mkSpend("s1", 10000000n, 100000n, 2000),
+            // Loss: 10 USDC used when worth ₹800 (cost ₹900)
+            mkSpend("s2", 10000000n, 80000n, 3000),
+        ];
+        const r = buildVdaTaxReport({ rules: RULES_FY_2026_27_SPECIFIED_PERSON, spends, lots });
+        assert.equal(r.totalGainsPaise, 10000n); // ₹100
+        assert.equal(r.totalLossesPaise, 10000n); // ₹100
+        assert.equal(r.netPaise, 0n);
+        // Tax is on gains only — the loss does NOT net off.
+        assert.equal(r.taxOnGainsPaise, 3000n); // 30% of ₹100
+        assert.ok(r.warnings.some((w) => w.includes("NOT deductible")));
+    });
+    test("flags missing cost basis rather than silently assuming zero", () => {
+        const r = buildVdaTaxReport({
+            rules: RULES_FY_2026_27_SPECIFIED_PERSON,
+            spends: [mkSpend("s1", 5000000n, 44000n, 2000)],
+            lots: [],
+        });
+        assert.ok(r.warnings.some((w) => w.includes("no cost basis")));
+    });
+});
+// ---------------------------------------------------------------------------
+describe("FX conversion", () => {
+    test("converts USDC base units to paise without float drift", () => {
+        const rate = inrToScaled(88.42);
+        // 0.25 USDC at ₹88.42 = ₹22.105 → 2210 paise (truncated)
+        assert.equal(toInrPaise(250000n, 6, rate), 2210n);
+    });
+    test("handles micropayments below one paisa", () => {
+        const rate = inrToScaled(88);
+        // 0.0001 USDC = ₹0.0088 → 0 paise. Must not throw or go negative.
+        assert.equal(toInrPaise(100n, 6, rate), 0n);
+    });
+});
+describe("Indian digit grouping", () => {
+    test("groups in lakhs and crores, not thousands", () => {
+        assert.equal(paiseToInr(1234567800n), "1,23,45,678.00");
+        assert.equal(paiseToInr(50000n), "500.00");
+        assert.equal(paiseToInr(-12345n), "-123.45");
+    });
+});
+// ---------------------------------------------------------------------------
+describe("policy engine", () => {
+    const engine = new PolicyEngine();
+    function mandate(overrides = {}) {
+        const m = buildIntentMandate({
+            subject: USER,
+            agent: AGENT,
+            purpose: "Pay for weather and market data APIs",
+            maxPerTransaction: "0.50",
+            maxPerPeriod: "5.00",
+            period: "day",
+            maxTxPerPeriod: 50,
+            validForDays: 7,
+            asset: ASSET,
+            chainId: 8453,
+            ...overrides,
+        });
+        return { mandate: m, hash: hashIntentMandate(m), signature: "0xdead" };
+    }
+    const baseCtx = {
+        now: Math.floor(Date.now() / 1000),
+        history: [],
+        knownHosts: new Set(["api.known.in"]),
+    };
+    const candidate = {
+        resource: "https://api.known.in/v1/quote",
+        host: "api.known.in",
+        payTo: MERCHANT,
+        amount: 100000n, // 0.10 USDC
+        assetAddress: ASSET.address,
+        network: ASSET.network,
+    };
+    test("allows a payment inside every limit", () => {
+        const d = engine.evaluate(mandate(), candidate, baseCtx);
+        assert.equal(d.allowed, true);
+        assert.equal(d.reasons.length, 0);
+    });
+    test("blocks above the per-transaction cap with a readable reason", () => {
+        const d = engine.evaluate(mandate(), { ...candidate, amount: 600000n }, baseCtx);
+        assert.equal(d.allowed, false);
+        assert.ok(d.reasons.includes("PER_TX_CAP_EXCEEDED"));
+        assert.match(d.explanation, /per-payment cap/);
+    });
+    test("blocks once the rolling period budget is exhausted", () => {
+        // 10 x 0.495 = 4.95 spent; another 0.10 would reach 5.05 against a 5.00 cap.
+        const history = Array.from({ length: 10 }, (_, i) => mkSpend(`h${i}`, 495000n, 4300n, baseCtx.now - 100));
+        const d = engine.evaluate(mandate(), candidate, { ...baseCtx, history });
+        assert.equal(d.allowed, false);
+        assert.ok(d.reasons.includes("PERIOD_VALUE_CAP_EXCEEDED"));
+    });
+    test("spending exactly to the cap is allowed; one base unit more is not", () => {
+        // A ₹500/day cap must permit spending exactly ₹500, not ₹499.99.
+        const history = Array.from({ length: 10 }, (_, i) => mkSpend(`h${i}`, 490000n, 4300n, baseCtx.now - 100));
+        const atCap = engine.evaluate(mandate(), candidate, { ...baseCtx, history });
+        assert.equal(atCap.allowed, true, "exactly at the cap must be allowed");
+        const overCap = engine.evaluate(mandate(), { ...candidate, amount: 100001n }, { ...baseCtx, history });
+        assert.equal(overCap.allowed, false, "one base unit over the cap must block");
+    });
+    test("period window excludes spends older than periodSeconds", () => {
+        const m = mandate();
+        const stale = Array.from({ length: 20 }, (_, i) => mkSpend(`old${i}`, 495000n, 4300n, baseCtx.now - m.mandate.periodSeconds - 60));
+        const d = engine.evaluate(m, candidate, { ...baseCtx, history: stale });
+        assert.equal(d.allowed, true, "spends outside the rolling window must not count");
+    });
+    test("blocked and failed spends do not consume the budget", () => {
+        const history = Array.from({ length: 10 }, (_, i) => ({
+            ...mkSpend(`b${i}`, 495000n, 4300n, baseCtx.now - 100),
+            status: "blocked",
+        }));
+        const d = engine.evaluate(mandate(), candidate, { ...baseCtx, history });
+        assert.equal(d.allowed, true, "a refused payment must not eat the user's budget");
+    });
+    test("blocks a host outside the allowlist", () => {
+        const m = mandate({ allowedHosts: ["api.known.in"] });
+        const d = engine.evaluate(m, { ...candidate, host: "evil.example.com" }, baseCtx);
+        assert.equal(d.allowed, false);
+        assert.ok(d.reasons.includes("HOST_NOT_ALLOWLISTED"));
+    });
+    test("wildcard allowlist matches subdomains but not the attacker suffix trick", () => {
+        const m = mandate({ allowedHosts: ["*.trusted.in"] });
+        assert.equal(engine.evaluate(m, { ...candidate, host: "api.trusted.in" }, baseCtx).allowed, true);
+        assert.equal(engine.evaluate(m, { ...candidate, host: "trusted.in" }, baseCtx).allowed, true);
+        assert.equal(engine.evaluate(m, { ...candidate, host: "eviltrusted.in" }, baseCtx).allowed, false, "suffix match must not be a substring match");
+    });
+    test("blocks a retry loop before it drains the daily cap", () => {
+        const history = Array.from({ length: DEFAULT_POLICY_OPTIONS.maxRepeatsPerResource }, (_, i) => mkSpend(`r${i}`, 1000n, 10n, baseCtx.now - 5, candidate.resource));
+        const d = engine.evaluate(mandate(), candidate, { ...baseCtx, history });
+        assert.equal(d.allowed, false);
+        assert.ok(d.reasons.includes("RESOURCE_BURST_LIMIT"));
+    });
+    test("flags a price that jumped far above the historical median", () => {
+        const d = engine.evaluate(mandate(), candidate, {
+            ...baseCtx,
+            medianPriceForResource: 10000n, // usually 0.01 USDC, now asking 0.10
+        });
+        assert.equal(d.allowed, true);
+        assert.equal(d.requiresConfirmation, true);
+        assert.ok(d.reasons.includes("PRICE_ANOMALY"));
+    });
+    test("flags a first payment to an unknown host above the threshold", () => {
+        const d = engine.evaluate(mandate(), { ...candidate, host: "new.example.in", amount: 150000n }, baseCtx);
+        assert.equal(d.requiresConfirmation, true);
+        assert.ok(d.reasons.includes("NEW_HOST_ABOVE_THRESHOLD"));
+    });
+    test("does not flag a small first payment to an unknown host", () => {
+        // Trivial amounts to new hosts are the normal case for agent traffic;
+        // prompting on every one of them trains the user to click through.
+        const d = engine.evaluate(mandate(), { ...candidate, host: "new.example.in", amount: 1000n }, baseCtx);
+        assert.equal(d.allowed, true);
+        assert.equal(d.requiresConfirmation, false);
+    });
+    test("a flagged payment is still allowed, only gated", () => {
+        // requiresConfirmation must never silently become a hard block: the
+        // orchestrator decides, and a headless deployment defaults to refusing.
+        const d = engine.evaluate(mandate(), candidate, {
+            ...baseCtx,
+            medianPriceForResource: 10000n,
+        });
+        assert.equal(d.allowed, true);
+        assert.equal(d.requiresConfirmation, true);
+    });
+    test("blocks a revoked mandate", () => {
+        const m = { ...mandate(), revokedAt: baseCtx.now - 10 };
+        const d = engine.evaluate(m, candidate, baseCtx);
+        assert.equal(d.allowed, false);
+        assert.ok(d.reasons.includes("MANDATE_REVOKED"));
+    });
+    test("blocks a different asset even at a trivial amount", () => {
+        const d = engine.evaluate(mandate(), { ...candidate, assetAddress: "0x9999999999999999999999999999999999999999" }, baseCtx);
+        assert.equal(d.allowed, false);
+        assert.ok(d.reasons.includes("ASSET_NOT_AUTHORISED"));
+    });
+});
+describe("mandate builder guardrails", () => {
+    const base = {
+        subject: USER,
+        agent: AGENT,
+        purpose: "Pay for market data APIs",
+        maxPerTransaction: "0.50",
+        maxPerPeriod: "5.00",
+        period: "day",
+        maxTxPerPeriod: 50,
+        validForDays: 7,
+        asset: ASSET,
+        chainId: 8453,
+    };
+    test("rejects a mandate that never expires in practice", () => {
+        assert.throws(() => buildIntentMandate({ ...base, validForDays: 3650 }), MandateValidationError);
+    });
+    test("rejects per-tx caps that swallow the whole period budget", () => {
+        assert.throws(() => buildIntentMandate({ ...base, maxPerTransaction: "10", maxPerPeriod: "5" }), MandateValidationError);
+    });
+    test("rejects a vague purpose, since it is what the user reads when signing", () => {
+        assert.throws(() => buildIntentMandate({ ...base, purpose: "stuff" }), MandateValidationError);
+    });
+    test("allowlist commitment is order-independent and case-insensitive", () => {
+        assert.equal(listRoot(["API.Example.IN", "b.example.in"]), listRoot(["b.example.in", "api.example.in"]));
+    });
+});
+// ---------------------------------------------------------------------------
+function mkSpend(id, amount, inrPaise, createdAt, resource = "https://api.known.in/v1/quote") {
+    return {
+        id,
+        userId: "u1",
+        intentHash: "0xabc",
+        resource,
+        host: new URL(resource).host,
+        payTo: MERCHANT,
+        amount,
+        asset: ASSET,
+        inrPaise,
+        fxRateScaled: inrToScaled(88),
+        status: "settled",
+        createdAt,
+        settledAt: createdAt,
+    };
+}
+// ---------------------------------------------------------------------------
+describe("host matching", () => {
+    test("portless allowlist entry matches any port", () => {
+        assert.ok(matchesHostList("api.example.in:8443", ["api.example.in"]));
+        assert.ok(matchesHostList("api.example.in", ["api.example.in"]));
+    });
+    test("explicit port in the allowlist must match exactly", () => {
+        assert.ok(matchesHostList("api.example.in:8443", ["api.example.in:8443"]));
+        assert.equal(matchesHostList("api.example.in:9999", ["api.example.in:8443"]), false);
+    });
+    test("wildcard matches subdomains on a label boundary only", () => {
+        assert.ok(matchesHostList("a.example.in", ["*.example.in"]));
+        assert.ok(matchesHostList("deep.a.example.in", ["*.example.in"]));
+        assert.ok(matchesHostList("example.in", ["*.example.in"]));
+        assert.equal(matchesHostList("evilexample.in", ["*.example.in"]), false);
+        assert.equal(matchesHostList("evil-example.in", ["*.example.in"]), false);
+        assert.equal(matchesHostList("example.in.evil.com", ["*.example.in"]), false);
+    });
+    test("IPv6 literals survive port stripping", () => {
+        assert.ok(matchesHostList("[::1]:8080", ["[::1]"]));
+        assert.ok(matchesHostList("[::1]", ["[::1]"]));
+    });
+    test("matching is case-insensitive", () => {
+        assert.ok(matchesHostList("API.Example.IN", ["api.example.in"]));
+    });
+});
+describe("anomaly detection on unseen resources", () => {
+    const engine = new PolicyEngine();
+    const m = (() => {
+        const x = buildIntentMandate({
+            subject: USER, agent: AGENT, purpose: "Pay for market data APIs",
+            maxPerTransaction: "0.50", maxPerPeriod: "5.00", period: "day",
+            maxTxPerPeriod: 50, validForDays: 7, asset: ASSET, chainId: 8453,
+        });
+        return { mandate: x, hash: hashIntentMandate(x), signature: "0xdead" };
+    })();
+    const ctx = {
+        now: Math.floor(Date.now() / 1000),
+        history: [],
+        knownHosts: new Set(["api.known.in"]),
+        medianPriceOverall: 10000n, // user typically pays 0.01 USDC
+    };
+    const cand = {
+        resource: "https://api.known.in/v1/never-seen-before",
+        host: "api.known.in",
+        payTo: MERCHANT,
+        amount: 400000n, // 40x typical, but under the 0.50 per-tx cap
+        assetAddress: ASSET.address,
+        network: ASSET.network,
+    };
+    test("flags a first-time resource priced far above the user's norm", () => {
+        // This is the prompt-injection shape: a new URL, a big price, under the cap.
+        const d = engine.evaluate(m, cand, ctx);
+        assert.equal(d.allowed, true, "still legal under the mandate");
+        assert.equal(d.requiresConfirmation, true, "but must not go through silently");
+        assert.ok(d.reasons.includes("ABOVE_TYPICAL_SPEND"));
+        assert.match(d.explanation, /content it read/);
+    });
+    test("does not flag ordinary payments near the user's norm", () => {
+        const d = engine.evaluate(m, { ...cand, amount: 20000n }, ctx);
+        assert.equal(d.requiresConfirmation, false);
+    });
+    test("floor suppresses noise for users whose median is tiny", () => {
+        const d = engine.evaluate(m, { ...cand, amount: 30000n }, { ...ctx, medianPriceOverall: 100n });
+        assert.equal(d.requiresConfirmation, false, "0.03 USDC is below the anomaly floor");
+    });
+    test("no overall history means no overall anomaly signal", () => {
+        const d = engine.evaluate(m, cand, { ...ctx, medianPriceOverall: undefined });
+        assert.equal(d.reasons.includes("ABOVE_TYPICAL_SPEND"), false);
+    });
+});
+//# sourceMappingURL=tax-and-policy.test.js.map

package/dist/__tests__/tax-and-policy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tax-and-policy.test.js","sourceRoot":"","sources":["../../src/__tests__/tax-and-policy.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,WAAW,EACX,qBAAqB,EACrB,UAAU,EACV,iCAAiC,GAClC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAGnC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC;AACxB,MAAM,IAAI,GAAG,4CAAqD,CAAC;AACnE,MAAM,KAAK,GAAG,4CAAqD,CAAC;AACpE,MAAM,QAAQ,GAAG,4CAAqD,CAAC;AAEvE,SAAS,GAAG,CAAC,EAAU,EAAE,IAAY,EAAE,GAAW,EAAE,EAAU;IAC5D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACxD,OAAO;QACL,EAAE;QACF,MAAM,EAAE,IAAI;QACZ,QAAQ;QACR,SAAS,EAAE,QAAQ;QACnB,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;QACnD,UAAU,EAAE,EAAE;QACd,YAAY,EAAE,MAAM,EAAE,EAAE;QACxB,QAAQ,EAAE,MAAM;KACjB,CAAC;AACJ,CAAC;AAED,8EAA8E;AAE9E,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,IAAI,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACzE,MAAM,IAAI,GAAG;YACX,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,cAAc;YAC3C,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,cAAc;SAC5C,CAAC;QACF,qCAAqC;QACrC,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,SAAW,EAAE,OAAQ,CAAC,CAAC;QAEnD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAW,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAU,CAAC,CAAC;QAErD,iDAAiD;QACjD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,EAAE,OAAQ,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,EAAE,KAAM,CAAC,CAAC,CAAC,WAAW;QACjD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,QAAU,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAClE,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,SAAW,EAAE,MAAO,CAAC,CAAC,CAAC,wBAAwB;QAC3E,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,KAAM,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,GAAG,EAAE,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACtE,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,QAAU,EAAE,MAAO,CAAC,EAC5C,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,YAAY,qBAAqB,IAAI,CAAC,CAAC,SAAS,KAAK,QAAU,CACjF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACvE,+DAA+D;QAC/D,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1C,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,KAAK,IAAI,WAAW,CAAC,IAAI,EAAE,QAAU,EAAE,KAAM,CAAC,CAAC,YAAY,CAAC;QAC9D,CAAC;QACD,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI,MAAO,EAAE,oBAAoB,KAAK,gBAAgB,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAE9E,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,MAAM,KAAK,GAAG,iCAAiC,CAAC,CAAC,oBAAoB;IAErE,IAAI,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,OAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS;QACvD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC7B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACxE,wEAAwE;QACxE,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,OAAQ,EAAE,QAAU,EAAE,EAAE,CAAC,CAAC;QACrD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;QACvC,mDAAmD;QACnD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,YAAY,EAAE,MAAO,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,uDAAuD,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,OAAQ,EAAE,QAAU,EAAE,MAAO,CAAC,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAM,CAAC,CAAC,CAAC,eAAe;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAE9E,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,IAAI,CAAC,uDAAuD,EAAE,GAAG,EAAE;QACjE,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW;QAEzD,MAAM,MAAM,GAAkB;YAC5B,mDAAmD;YACnD,OAAO,CAAC,IAAI,EAAE,SAAW,EAAE,OAAQ,EAAE,IAAI,CAAC;YAC1C,iDAAiD;YACjD,OAAO,CAAC,IAAI,EAAE,SAAW,EAAE,MAAO,EAAE,IAAI,CAAC;SAC1C,CAAC;QAEF,MAAM,CAAC,GAAG,iBAAiB,CAAC,EAAE,KAAK,EAAE,iCAAiC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAExF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,EAAE,MAAO,CAAC,CAAC,CAAC,OAAO;QACjD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,EAAE,MAAO,CAAC,CAAC,CAAC,OAAO;QAClD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC7B,oDAAoD;QACpD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,EAAE,KAAM,CAAC,CAAC,CAAC,cAAc;QACvD,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,GAAG,iBAAiB,CAAC;YAC1B,KAAK,EAAE,iCAAiC;YACxC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,QAAU,EAAE,MAAO,EAAE,IAAI,CAAC,CAAC;YAClD,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAE9E,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,IAAI,CAAC,uDAAuD,EAAE,GAAG,EAAE;QACjE,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAChC,yDAAyD;QACzD,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,OAAQ,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,KAAM,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,uCAAuC,EAAE,GAAG,EAAE;QACjD,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QAC7B,kEAAkE;QAClE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,IAAI,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,WAAc,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAC3D,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,MAAO,CAAC,EAAE,SAAS,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAE9E,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,MAAM,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;IAElC,SAAS,OAAO,CAAC,YAA+D,EAAE;QAChF,MAAM,CAAC,GAAG,kBAAkB,CAAC;YAC3B,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,sCAAsC;YAC/C,iBAAiB,EAAE,MAAM;YACzB,YAAY,EAAE,MAAM;YACpB,MAAM,EAAE,KAAK;YACb,cAAc,EAAE,EAAE;YAClB,YAAY,EAAE,CAAC;YACf,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,IAAI;YACb,GAAG,SAAS;SACb,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAyB,CAAC;IAChG,CAAC;IAED,MAAM,OAAO,GAAG;QACd,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAClC,OAAO,EAAE,EAAmB;QAC5B,UAAU,EAAE,IAAI,GAAG,CAAS,CAAC,cAAc,CAAC,CAAC;KAC9C,CAAC;IAEF,MAAM,SAAS,GAAG;QAChB,QAAQ,EAAE,+BAA+B;QACzC,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,QAAQ;QACf,MAAM,EAAE,OAAQ,EAAE,YAAY;QAC9B,YAAY,EAAE,KAAK,CAAC,OAAO;QAC3B,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC;IAEF,IAAI,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,SAAS,EAAE,MAAM,EAAE,OAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;QAClF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC/B,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC9D,6EAA6E;QAC7E,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAClD,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,OAAQ,EAAE,KAAM,EAAE,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC,CACtD,CAAC;QACF,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC/B,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC7E,iEAAiE;QACjE,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAClD,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,OAAQ,EAAE,KAAM,EAAE,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC,CACtD,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7E,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,oCAAoC,CAAC,CAAC;QAExE,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAC7B,OAAO,EAAE,EACT,EAAE,GAAG,SAAS,EAAE,MAAM,EAAE,OAAQ,EAAE,EAClC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CACxB,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,uCAAuC,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAChD,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,OAAQ,EAAE,KAAM,EAAE,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,GAAG,EAAE,CAAC,CACjF,CAAC;QACF,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACxE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,kDAAkD,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC/D,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACpD,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,OAAQ,EAAE,KAAM,EAAE,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC;YACxD,MAAM,EAAE,SAAkB;SAC3B,CAAC,CAAC,CAAC;QACJ,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,kDAAkD,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,OAAO,CAAC,CAAC;QAClF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC/B,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACnF,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,OAAO,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAClG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,OAAO,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9F,MAAM,CAAC,KAAK,CACV,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,OAAO,CAAC,CAAC,OAAO,EAC7E,KAAK,EACL,4CAA4C,CAC7C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,sBAAsB,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC5F,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,KAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,GAAG,CAAC,EAAE,SAAS,CAAC,QAAQ,CAAC,CACnE,CAAC;QACF,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC/B,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE;YAC9C,GAAG,OAAO;YACV,sBAAsB,EAAE,MAAO,EAAE,qCAAqC;SACvE,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACxE,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CACvB,OAAO,EAAE,EACT,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAQ,EAAE,EAC1D,OAAO,CACR,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAClE,sEAAsE;QACtE,mEAAmE;QACnE,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CACvB,OAAO,EAAE,EACT,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAM,EAAE,EACxD,OAAO,CACR,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,gDAAgD,EAAE,GAAG,EAAE;QAC1D,oEAAoE;QACpE,wEAAwE;QACxE,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE;YAC9C,GAAG,OAAO;YACV,sBAAsB,EAAE,MAAO;SAChC,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,0BAA0B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,GAAG,EAAE,EAAE,CAAC;QACxD,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC/B,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CACvB,OAAO,EAAE,EACT,EAAE,GAAG,SAAS,EAAE,YAAY,EAAE,4CAA4C,EAAE,EAC5E,OAAO,CACR,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC/B,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,MAAM,IAAI,GAAG;QACX,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE,0BAA0B;QACnC,iBAAiB,EAAE,MAAM;QACzB,YAAY,EAAE,MAAM;QACpB,MAAM,EAAE,KAAc;QACtB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,CAAC;QACf,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE,IAAI;KACd,CAAC;IAEF,IAAI,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,EACzD,sBAAsB,CACvB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,0DAA0D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE,GAAG,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,EACjF,sBAAsB,CACvB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,uEAAuE,EAAE,GAAG,EAAE;QACjF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,sBAAsB,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,gEAAgE,EAAE,GAAG,EAAE;QAC1E,MAAM,CAAC,KAAK,CACV,QAAQ,CAAC,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC,EAC5C,QAAQ,CAAC,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAC7C,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAE9E,SAAS,OAAO,CACd,EAAU,EACV,MAAc,EACd,QAAgB,EAChB,SAAiB,EACjB,QAAQ,GAAG,+BAA+B;IAE1C,OAAO;QACL,EAAE;QACF,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,OAAO;QACnB,QAAQ;QACR,IAAI,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI;QAC5B,KAAK,EAAE,QAAQ;QACf,MAAM;QACN,KAAK,EAAE,KAAK;QACZ,QAAQ;QACR,YAAY,EAAE,WAAW,CAAC,EAAE,CAAC;QAC7B,MAAM,EAAE,SAAS;QACjB,SAAS;QACT,SAAS,EAAE,SAAS;KACrB,CAAC;AACJ,CAAC;AAED,8EAA8E;AAE9E,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,IAAI,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,qBAAqB,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACtE,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,gBAAgB,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,qBAAqB,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3E,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,qBAAqB,EAAE,CAAC,qBAAqB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,cAAc,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,mBAAmB,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,YAAY,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;QAC3D,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,gBAAgB,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACzE,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,iBAAiB,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1E,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,qBAAqB,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACpD,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,gBAAgB,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,MAAM,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;IAClC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE;QACd,MAAM,CAAC,GAAG,kBAAkB,CAAC;YAC3B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,0BAA0B;YAChE,iBAAiB,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;YAC9D,cAAc,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI;SACjE,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAyB,CAAC;IAChG,CAAC,CAAC,EAAE,CAAC;IAEL,MAAM,GAAG,GAAG;QACV,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAClC,OAAO,EAAE,EAAmB;QAC5B,UAAU,EAAE,IAAI,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;QACrC,kBAAkB,EAAE,MAAO,EAAE,gCAAgC;KAC9D,CAAC;IAEF,MAAM,IAAI,GAAG;QACX,QAAQ,EAAE,2CAA2C;QACrD,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,QAAQ;QACf,MAAM,EAAE,OAAQ,EAAE,6CAA6C;QAC/D,YAAY,EAAE,KAAK,CAAC,OAAO;QAC3B,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC;IAEF,IAAI,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACxE,6EAA6E;QAC7E,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,+BAA+B,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,EAAE,IAAI,EAAE,kCAAkC,CAAC,CAAC;QAC/E,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QAChE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,uDAAuD,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAO,EAAE,EAAE,EAAE,GAAG,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;QACjG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,EAAE,KAAK,EAAE,sCAAsC,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,GAAG,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,KAAK,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/web-bot-auth.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=web-bot-auth.test.d.ts.map

package/dist/__tests__/web-bot-auth.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-bot-auth.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/web-bot-auth.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/web-bot-auth.test.js

@@ -0,0 +1,33 @@
+import assert from "node:assert/strict";
+import { generateKeyPairSync } from "node:crypto";
+import test from "node:test";
+import { signWebBotAuth, signWebBotAuthDirectory, verifyWebBotAuth } from "../web-bot-auth.js";
+test("signs and verifies a Web Bot Auth request with replay protection", async () => {
+    const { privateKey, publicKey } = generateKeyPairSync("ed25519");
+    const headers = signWebBotAuth({ url: "https://api.example.test/v1/data", signatureAgent: "https://bot.example.test", keyId: "bot-key-1", privateKey, now: 1_800_000_000, nonce: "nonce-1" });
+    let consumed = false;
+    const verified = await verifyWebBotAuth({ url: "https://api.example.test/v1/data", headers, publicKey, expectedKeyId: "bot-key-1", now: 1_800_000_010, consumeNonce: () => { if (consumed)
+            return false; consumed = true; return true; } });
+    assert.equal(verified.nonce, "nonce-1");
+    await assert.rejects(() => verifyWebBotAuth({ url: "https://api.example.test/v1/data", headers, publicKey, now: 1_800_000_010, consumeNonce: () => false }), /already consumed/);
+});
+test("rejects unsafe agents, expiry, and altered request authority", async () => {
+    const { privateKey, publicKey } = generateKeyPairSync("ed25519");
+    assert.throws(() => signWebBotAuth({ url: "http://api.example.test/data", signatureAgent: "https://bot.example.test", keyId: "k", privateKey }), /HTTPS/);
+    const headers = signWebBotAuth({ url: "https://api.example.test/data", signatureAgent: "https://bot.example.test", keyId: "k", privateKey, now: 1_800_000_000, expiresInSeconds: 1 });
+    await assert.rejects(() => verifyWebBotAuth({ url: "https://api.example.test/data", headers, publicKey, now: 1_800_000_001 }), /expired/);
+    await assert.rejects(() => verifyWebBotAuth({ url: "https://api.example.test/data", headers, publicKey, now: 1_800_000_002 }), /expired/);
+    let consumed = 0;
+    await assert.rejects(() => verifyWebBotAuth({ url: "https://other.example.test/data", headers, publicKey, now: 1_800_000_000, consumeNonce: () => { consumed += 1; return true; } }), /verification failed/);
+    assert.equal(consumed, 0);
+    const longLived = signWebBotAuth({ url: "https://api.example.test/data", signatureAgent: "https://bot.example.test", keyId: "k", privateKey, now: 1_800_000_000, expiresInSeconds: 301 });
+    await assert.rejects(() => verifyWebBotAuth({ url: "https://api.example.test/data", headers: longLived, publicKey }), /invalid timestamps/);
+});
+test("signs a Web Bot Auth key directory with the required directory tag", () => {
+    const { privateKey } = generateKeyPairSync("ed25519");
+    const headers = signWebBotAuthDirectory({ url: "https://bot.example.test/.well-known/http-message-signatures-directory", keyId: "bot-key-1", privateKey, now: 1_800_000_000, nonce: "directory-1" });
+    assert.match(headers["Signature-Input"], /;req\)/);
+    assert.match(headers["Signature-Input"], /tag="http-message-signatures-directory"/);
+    assert.match(headers.Signature, /^sig1=:[^:]+:$/);
+});
+//# sourceMappingURL=web-bot-auth.test.js.map

package/dist/__tests__/web-bot-auth.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-bot-auth.test.js","sourceRoot":"","sources":["../../src/__tests__/web-bot-auth.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE/F,IAAI,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;IAClF,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,GAAG,EAAE,kCAAkC,EAAE,cAAc,EAAE,0BAA0B,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC9L,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,GAAG,EAAE,kCAAkC,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,EAAE,aAAa,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,IAAI,QAAQ;YAAE,OAAO,KAAK,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5O,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACxC,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,kCAAkC,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,aAAa,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,kBAAkB,CAAC,CAAC;AACnL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;IAC9E,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACjE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,8BAA8B,EAAE,cAAc,EAAE,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAC1J,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,GAAG,EAAE,+BAA+B,EAAE,cAAc,EAAE,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,aAAa,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC,CAAC;IACtL,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,+BAA+B,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;IAC1I,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,+BAA+B,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;IAC1I,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,iCAAiC,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,aAAa,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,QAAQ,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,qBAAqB,CAAC,CAAC;IAC7M,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC1B,MAAM,SAAS,GAAG,cAAc,CAAC,EAAE,GAAG,EAAE,+BAA+B,EAAE,cAAc,EAAE,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,aAAa,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1L,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,+BAA+B,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,EAAE,oBAAoB,CAAC,CAAC;AAC9I,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oEAAoE,EAAE,GAAG,EAAE;IAC9E,MAAM,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,uBAAuB,CAAC,EAAE,GAAG,EAAE,wEAAwE,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;IACrM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,QAAQ,CAAC,CAAC;IACnD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,yCAAyC,CAAC,CAAC;IACpF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC"}

package/dist/__tests__/x402-solana.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=x402-solana.test.d.ts.map

package/dist/__tests__/x402-solana.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"x402-solana.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/x402-solana.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/x402-solana.test.js

@@ -0,0 +1,155 @@
+import { test } from "node:test";
+import assert from "node:assert/strict";
+import { createServer } from "node:http";
+import { generateKeyPairSigner } from "@solana/kit";
+import { X402Client, PaymentDeclinedError } from "../x402/client.js";
+const SOLANA_MAINNET = "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp";
+const SOLANA_USDC = "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v";
+test("reads a Solana v2 challenge from PAYMENT-REQUIRED and selects it", async () => {
+    const challenge = {
+        x402Version: 2,
+        resource: {
+            url: "http://127.0.0.1:4021/data",
+            description: "Solana-priced data",
+            mimeType: "application/json",
+        },
+        accepts: [{
+                scheme: "exact",
+                network: SOLANA_MAINNET,
+                amount: "1000",
+                asset: SOLANA_USDC,
+                payTo: "9MkM5Ra48KFcSv9HDQ8sb3C3r5HjouEwGQ6sp1cx1vde",
+                maxTimeoutSeconds: 300,
+                extra: { feePayer: "D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM" },
+            }],
+    };
+    let authorisedNetwork;
+    const client = new X402Client({
+        allowedNetworks: [SOLANA_MAINNET],
+        allowedAssets: [SOLANA_USDC],
+        absoluteMaxPerPayment: 10000n,
+        outboundPolicy: { allowPrivateNetworks: true },
+        fetchImpl: async () => new Response("{}", {
+            status: 402,
+            headers: {
+                "content-type": "application/json",
+                "payment-required": Buffer.from(JSON.stringify(challenge)).toString("base64"),
+            },
+        }),
+        authorise: async ({ requirement }) => {
+            authorisedNetwork = requirement.network;
+            return { approved: true };
+        },
+    });
+    await assert.rejects(() => client.fetch("http://127.0.0.1:4021/data"), (error) => error instanceof PaymentDeclinedError && error.reason === "SIGNER_UNAVAILABLE");
+    assert.equal(authorisedNetwork, SOLANA_MAINNET);
+    const quote = await client.quote("http://127.0.0.1:4021/data");
+    assert.equal(quote?.accepts[0].maxAmountRequired, "1000");
+    assert.equal(quote?.accepts[0].extra?.feePayer, challenge.accepts[0].extra.feePayer);
+});
+test("treats Solana asset addresses as case-sensitive", async () => {
+    const challenge = {
+        x402Version: 2,
+        accepts: [{
+                scheme: "exact",
+                network: SOLANA_MAINNET,
+                amount: "1000",
+                asset: SOLANA_USDC,
+                payTo: "9MkM5Ra48KFcSv9HDQ8sb3C3r5HjouEwGQ6sp1cx1vde",
+                maxTimeoutSeconds: 300,
+                extra: { feePayer: "D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM" },
+            }],
+    };
+    const client = new X402Client({
+        allowedNetworks: [SOLANA_MAINNET],
+        allowedAssets: [SOLANA_USDC.toLowerCase()],
+        absoluteMaxPerPayment: 10000n,
+        outboundPolicy: { allowPrivateNetworks: true },
+        fetchImpl: async () => new Response(JSON.stringify(challenge), { status: 402 }),
+        authorise: async () => ({ approved: true }),
+    });
+    await assert.rejects(() => client.fetch("http://127.0.0.1:4021/data"), (error) => error instanceof PaymentDeclinedError && error.reason === "NO_ACCEPTABLE_REQUIREMENT");
+});
+test("creates and submits an official exact-SVM payment payload", async () => {
+    const mint = Buffer.alloc(82);
+    mint[44] = 6; // decimals
+    mint[45] = 1; // initialized
+    const rpc = createServer((req, res) => {
+        const chunks = [];
+        req.on("data", (chunk) => chunks.push(Buffer.from(chunk)));
+        req.on("end", () => {
+            const request = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+            const result = request.method === "getAccountInfo"
+                ? {
+                    context: { slot: 1 },
+                    value: {
+                        data: [mint.toString("base64"), "base64"],
+                        executable: false,
+                        lamports: 1,
+                        owner: "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA",
+                        rentEpoch: 0,
+                        space: mint.length,
+                    },
+                }
+                : { context: { slot: 1 }, value: { blockhash: "11111111111111111111111111111111", lastValidBlockHeight: 100 } };
+            res.setHeader("content-type", "application/json");
+            res.end(JSON.stringify({ jsonrpc: "2.0", id: request.id, result }));
+        });
+    });
+    await new Promise((resolve) => rpc.listen(0, "127.0.0.1", resolve));
+    const address = rpc.address();
+    assert.ok(address && typeof address === "object");
+    try {
+        const signer = await generateKeyPairSigner();
+        const challenge = {
+            x402Version: 2,
+            resource: { url: "http://127.0.0.1:4021/data", description: "Solana data", mimeType: "application/json" },
+            accepts: [{
+                    scheme: "exact",
+                    network: SOLANA_MAINNET,
+                    amount: "1000",
+                    asset: SOLANA_USDC,
+                    payTo: "9MkM5Ra48KFcSv9HDQ8sb3C3r5HjouEwGQ6sp1cx1vde",
+                    maxTimeoutSeconds: 300,
+                    extra: {
+                        feePayer: "D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM",
+                        recentBlockhash: "11111111111111111111111111111111",
+                    },
+                }],
+        };
+        let calls = 0;
+        let submitted;
+        const settlement = { success: true, transaction: "5KtPn3C2ExampleSolanaSignature", network: SOLANA_MAINNET, payer: String(signer.address) };
+        const client = new X402Client({
+            svmSigner: signer,
+            svmRpcUrl: `http://127.0.0.1:${address.port}`,
+            allowedNetworks: [SOLANA_MAINNET],
+            allowedAssets: [SOLANA_USDC],
+            absoluteMaxPerPayment: 10000n,
+            outboundPolicy: { allowPrivateNetworks: true },
+            authorise: async () => ({ approved: true }),
+            fetchImpl: async (_url, init) => {
+                calls += 1;
+                if (calls === 1) {
+                    return new Response("{}", { status: 402, headers: { "payment-required": Buffer.from(JSON.stringify(challenge)).toString("base64") } });
+                }
+                const header = new Headers(init?.headers).get("payment-signature");
+                assert.ok(header);
+                submitted = JSON.parse(Buffer.from(header, "base64").toString("utf8"));
+                return new Response("paid", {
+                    status: 200,
+                    headers: { "payment-response": Buffer.from(JSON.stringify(settlement)).toString("base64") },
+                });
+            },
+        });
+        const result = await client.fetch(challenge.resource.url);
+        assert.equal(result.paid, true);
+        assert.equal(result.settlement?.transaction, settlement.transaction);
+        assert.equal((submitted?.accepted).network, SOLANA_MAINNET);
+        assert.equal(typeof (submitted?.payload).transaction, "string");
+    }
+    finally {
+        await new Promise((resolve, reject) => rpc.close((error) => error ? reject(error) : resolve()));
+    }
+});
+//# sourceMappingURL=x402-solana.test.js.map