@uncefact/untp-utils 0.2.0 → 0.3.0

package/build/bundle/refresh-main.test.js

@@ -0,0 +1,98 @@
+// Drives the refresh script's main() against a temporary copy of the bundle
+// with fetch stubbed, so the refusal, repair and dry-run paths are proven
+// without the network. The script is loaded by runtime URL (tsc's rootDir is
+// `src`); UNTP_ARTEFACTS_ROOT points it at the temporary tree.
+import { jest } from '@jest/globals';
+import { cp, mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+const scriptUrl = new URL('../../scripts/refresh-artefacts.mjs', import.meta.url).href;
+const packageRoot = new URL('../../', import.meta.url).pathname;
+describe('refresh-artefacts main', () => {
+    let root;
+    let script;
+    let exit;
+    let stubbed;
+    let fetchImpl;
+    const run = (argv) => script.main(argv, { fetchImpl });
+    beforeAll(async () => {
+        // The script resolves its root when it loads, so the temporary root is
+        // fixed before the import and refilled from the real bundle per test.
+        root = await mkdtemp(join(tmpdir(), 'untp-artefacts-'));
+        process.env.UNTP_ARTEFACTS_ROOT = root;
+        script = (await import(scriptUrl));
+    });
+    afterAll(async () => {
+        delete process.env.UNTP_ARTEFACTS_ROOT;
+        await rm(root, { recursive: true, force: true });
+    });
+    beforeEach(async () => {
+        await rm(join(root, 'artefacts'), { recursive: true, force: true });
+        await rm(join(root, 'src'), { recursive: true, force: true });
+        await cp(join(packageRoot, 'artefacts'), join(root, 'artefacts'), { recursive: true });
+        await cp(join(packageRoot, 'src', 'bundle'), join(root, 'src', 'bundle'), { recursive: true });
+        // Serve every source from the bundled copy on disk, so "published" equals "bundled".
+        stubbed = new Map();
+        for (const { file, source } of script.ARTEFACTS) {
+            stubbed.set(source, await readFile(join(packageRoot, 'artefacts', file), 'utf8'));
+        }
+        fetchImpl = (async (url) => {
+            const body = stubbed.get(String(url));
+            return body === undefined
+                ? new Response('missing', { status: 404 })
+                : new Response(body, { status: 200, headers: { 'content-type': 'application/json' } });
+        });
+        exit = jest.spyOn(process, 'exit').mockImplementation(((code) => {
+            throw new Error(`exit ${code}`);
+        }));
+        jest.spyOn(console, 'log').mockImplementation(() => { });
+        jest.spyOn(console, 'error').mockImplementation(() => { });
+    });
+    afterEach(() => {
+        jest.restoreAllMocks();
+    });
+    const corruptFile = 'context/untp/0.6.0/dia.json';
+    it('--check passes on a matching tree and writes nothing', async () => {
+        const before = await readFile(join(root, 'artefacts', 'manifest.json'), 'utf8');
+        await run(['--check']);
+        expect(exit).not.toHaveBeenCalled();
+        expect(await readFile(join(root, 'artefacts', 'manifest.json'), 'utf8')).toBe(before);
+    });
+    it('--check refuses a corrupt bundled copy, naming it, and writes nothing', async () => {
+        await writeFile(join(root, 'artefacts', corruptFile), '{not json');
+        await expect(run(['--check'])).rejects.toThrow('exit 1');
+        expect(await readFile(join(root, 'artefacts', corruptFile), 'utf8')).toBe('{not json');
+    });
+    it('a plain refresh also refuses a corrupt copy rather than hashing it', async () => {
+        await writeFile(join(root, 'artefacts', corruptFile), '{not json');
+        await expect(run([])).rejects.toThrow('exit 1');
+        expect(await readFile(join(root, 'artefacts', corruptFile), 'utf8')).toBe('{not json');
+    });
+    it('--force repairs a corrupt copy from the published source', async () => {
+        await writeFile(join(root, 'artefacts', corruptFile), '{not json');
+        await run(['--force']);
+        expect(exit).not.toHaveBeenCalled();
+        expect(JSON.parse(await readFile(join(root, 'artefacts', corruptFile), 'utf8'))).toHaveProperty('@context');
+    });
+    it('refuses a published copy that differs unless forced', async () => {
+        const entry = script.ARTEFACTS.find((a) => a.file === corruptFile);
+        stubbed.set(entry.source, JSON.stringify({ '@context': { changed: true } }));
+        await expect(run(['--check'])).rejects.toThrow('exit 1');
+        await expect(run([])).rejects.toThrow('exit 1');
+        await run(['--force']);
+        expect(JSON.parse(await readFile(join(root, 'artefacts', corruptFile), 'utf8'))).toEqual({
+            '@context': { changed: true },
+        });
+    });
+    it('writes nothing when a later fetch fails', async () => {
+        const entry = script.ARTEFACTS[script.ARTEFACTS.length - 1];
+        stubbed.delete(entry.source);
+        await writeFile(join(root, 'artefacts', corruptFile), '{not json');
+        await expect(run(['--force'])).rejects.toThrow(/answered 404/);
+        expect(await readFile(join(root, 'artefacts', corruptFile), 'utf8')).toBe('{not json');
+    });
+    it('rejects --check together with --force', async () => {
+        await expect(run(['--check', '--force'])).rejects.toThrow('exit 1');
+    });
+});
+//# sourceMappingURL=refresh-main.test.js.map

package/build/bundle/refresh-main.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-main.test.js","sourceRoot":"","sources":["../../src/bundle/refresh-main.test.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,0EAA0E;AAC1E,6EAA6E;AAC7E,+DAA+D;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAMjC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,qCAAqC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;AACvF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;AAEhE,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,IAAI,IAAY,CAAC;IACjB,IAAI,MAAc,CAAC;IACnB,IAAI,IAA6C,CAAC;IAClD,IAAI,OAA4B,CAAC;IACjC,IAAI,SAAuB,CAAC;IAC5B,MAAM,GAAG,GAAG,CAAC,IAAc,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAEjE,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,uEAAuE;QACvE,sEAAsE;QACtE,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,IAAI,CAAC;QACvC,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAW,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;QAClB,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QACvC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvF,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/F,qFAAqF;QACrF,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;QACpB,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACpF,CAAC;QACD,SAAS,GAAG,CAAC,KAAK,EAAE,GAA2B,EAAE,EAAE;YACjD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,OAAO,IAAI,KAAK,SAAS;gBACvB,CAAC,CAAC,IAAI,QAAQ,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;gBAC1C,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAC3F,CAAC,CAA4B,CAAC;QAC9B,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAa,EAAE,EAAE;YACvE,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC,CAAU,CAAC,CAAC;QACb,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACxD,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,6BAA6B,CAAC;IAElD,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC;QAChF,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACpC,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC;QACnE,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzD,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC;QACnE,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC;QACnE,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IAC9G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAE,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7E,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzD,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACvF,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;SAC9B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC5D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC;QACnE,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC/D,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/build/common/as-date-time.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Returns the date and time `value` refers to, when `value` is a well-formed
+ * RFC 3339 date-time for a day that exists. Otherwise returns `undefined`.
+ *
+ * `new Date()` alone is not enough. It accepts loose forms such as `2024-01-15`
+ * or `January 15, 2024`, and it quietly normalises an impossible date, turning
+ * `2024-02-30` into 1 March, which would report a date the document never
+ * asserted.
+ *
+ * `undefined` rather than `null` because this reports what a document does not
+ * usably contain. How to record that absence is the caller's decision.
+ */
+export declare function asDateTime(value: unknown): Date | undefined;

package/build/common/as-date-time.js

@@ -0,0 +1,44 @@
+/**
+ * Matches the JSON Schema `date-time` format (RFC 3339 section 5.6).
+ *
+ * As of UNTP 0.7.0, every data model declares a credential's `validFrom` and
+ * `validUntil` as `"type": "string", "format": "date-time"`, and that is what
+ * this system validates a payload against before signing it.
+ *
+ * The W3C VC Data Model 2.0 is looser: it requires only an XML Schema 1.1
+ * `dateTime`, which permits an offsetless local time, years outside four
+ * digits, and `24:00:00` (https://www.w3.org/TR/vc-data-model-2.0/#validity-period).
+ * A credential issued elsewhere may therefore carry a value this rejects, and
+ * it is reported as absent rather than guessed: with no timezone there is no
+ * way to tell which moment a local time such as `09:00` refers to.
+ */
+const RFC3339_DATE_TIME = /^\d{4}-\d{2}-\d{2}[Tt]\d{2}:\d{2}:\d{2}(\.\d+)?([Zz]|[+-]\d{2}:\d{2})$/;
+/**
+ * Returns the date and time `value` refers to, when `value` is a well-formed
+ * RFC 3339 date-time for a day that exists. Otherwise returns `undefined`.
+ *
+ * `new Date()` alone is not enough. It accepts loose forms such as `2024-01-15`
+ * or `January 15, 2024`, and it quietly normalises an impossible date, turning
+ * `2024-02-30` into 1 March, which would report a date the document never
+ * asserted.
+ *
+ * `undefined` rather than `null` because this reports what a document does not
+ * usably contain. How to record that absence is the caller's decision.
+ */
+export function asDateTime(value) {
+    if (typeof value !== 'string' || !RFC3339_DATE_TIME.test(value))
+        return undefined;
+    const parsed = new Date(value);
+    if (Number.isNaN(parsed.getTime()))
+        return undefined;
+    // Round-trip the calendar day: a normalised day (30 February) lands on a
+    // different day-of-month than the string names.
+    const day = Number(value.slice(8, 10));
+    const offsetMatch = /([+-])(\d{2}):(\d{2})$/.exec(value);
+    const offsetMinutes = offsetMatch
+        ? (offsetMatch[1] === '-' ? -1 : 1) * (Number(offsetMatch[2]) * 60 + Number(offsetMatch[3]))
+        : 0;
+    const local = new Date(parsed.getTime() + offsetMinutes * 60_000);
+    return local.getUTCDate() === day ? parsed : undefined;
+}
+//# sourceMappingURL=as-date-time.js.map

package/build/common/as-date-time.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"as-date-time.js","sourceRoot":"","sources":["../../src/common/as-date-time.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,MAAM,iBAAiB,GAAG,wEAAwE,CAAC;AAEnG;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClF,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IACrD,yEAAyE;IACzE,gDAAgD;IAChD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACvC,MAAM,WAAW,GAAG,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,aAAa,GAAG,WAAW;QAC/B,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5F,CAAC,CAAC,CAAC,CAAC;IACN,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,aAAa,GAAG,MAAM,CAAC,CAAC;IAClE,OAAO,KAAK,CAAC,UAAU,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC"}

package/build/common/as-date-time.test.d.ts

@@ -0,0 +1 @@
+export {};

package/build/common/as-date-time.test.js

@@ -0,0 +1,42 @@
+import { asDateTime } from './as-date-time.js';
+describe('asDateTime', () => {
+    it('returns the date and time a well-formed UTC value refers to', () => {
+        expect(asDateTime('2024-01-15T00:00:00Z')).toEqual(new Date('2024-01-15T00:00:00.000Z'));
+        expect(asDateTime('2024-01-15T10:30:00.250Z')).toEqual(new Date('2024-01-15T10:30:00.250Z'));
+    });
+    it('reads an offset value as the same moment in UTC', () => {
+        expect(asDateTime('2024-01-15T23:30:00+10:00')).toEqual(new Date('2024-01-15T13:30:00.000Z'));
+        expect(asDateTime('2024-01-15T00:30:00-05:00')).toEqual(new Date('2024-01-15T05:30:00.000Z'));
+    });
+    it('returns undefined for a day the calendar does not have, rather than normalising it', () => {
+        expect(asDateTime('2024-02-30T00:00:00Z')).toBeUndefined();
+        expect(asDateTime('2023-02-29T00:00:00Z')).toBeUndefined();
+    });
+    it('accepts a real leap day', () => {
+        expect(asDateTime('2024-02-29T00:00:00Z')).toEqual(new Date('2024-02-29T00:00:00.000Z'));
+    });
+    it('returns undefined for a leap second', () => {
+        // Well-formed RFC 3339, but JavaScript has no value for it.
+        expect(asDateTime('1990-12-31T23:59:60Z')).toBeUndefined();
+    });
+    it.each([
+        ['a date with no time', '2024-01-15'],
+        ['a human-readable date', 'January 15, 2024'],
+        ['a bare number', '0'],
+        ['nonsense', 'not-a-date'],
+        ['the empty string', ''],
+        ['a time with no zone', '2024-01-15T00:00:00'],
+    ])('returns undefined for %s', (_label, value) => {
+        expect(asDateTime(value)).toBeUndefined();
+    });
+    it.each([
+        ['number', 1705276800000],
+        ['null', null],
+        ['undefined', undefined],
+        ['Date', new Date()],
+        ['object', {}],
+    ])('returns undefined for a non-string %s', (_label, value) => {
+        expect(asDateTime(value)).toBeUndefined();
+    });
+});
+//# sourceMappingURL=as-date-time.test.js.map

package/build/common/as-date-time.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"as-date-time.test.js","sourceRoot":"","sources":["../../src/common/as-date-time.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;QACzF,MAAM,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAC9F,MAAM,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,GAAG,EAAE;QAC5F,MAAM,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC3D,MAAM,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,4DAA4D;QAC5D,MAAM,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,qBAAqB,EAAE,YAAY,CAAC;QACrC,CAAC,uBAAuB,EAAE,kBAAkB,CAAC;QAC7C,CAAC,eAAe,EAAE,GAAG,CAAC;QACtB,CAAC,UAAU,EAAE,YAAY,CAAC;QAC1B,CAAC,kBAAkB,EAAE,EAAE,CAAC;QACxB,CAAC,qBAAqB,EAAE,qBAAqB,CAAC;KAC/C,CAAC,CAAC,0BAA0B,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QAC/C,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,QAAQ,EAAE,aAAa,CAAC;QACzB,CAAC,MAAM,EAAE,IAAI,CAAC;QACd,CAAC,WAAW,EAAE,SAAS,CAAC;QACxB,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACpB,CAAC,QAAQ,EAAE,EAAE,CAAC;KACf,CAAC,CAAC,uCAAuC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QAC5D,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/build/common/as-non-empty-string.d.ts

@@ -1,7 +1,14 @@
 /**
- * Returns `value` if it is a non-empty string, otherwise `undefined`.
- * Useful inside parsers that emit a structured failure separately when a
- * required field is missing or malformed, so the type check and the
- * failure-emission policy stay decoupled.
+ * Returns `value` trimmed if it is a string with non-whitespace content,
+ * otherwise `undefined`.
+ *
+ * Surrounding whitespace is never meaningful in the values this reads (names,
+ * identifiers, labels), and a whitespace-only string carries no more
+ * information than an absent one, so both collapse to `undefined`.
+ *
+ * `undefined` rather than `null` because this reports what a document does
+ * not contain. Recording that absence as a stored or transmitted value is a
+ * separate decision, made by the caller at the boundary where a read becomes
+ * a row or a response.
  */
 export declare function asNonEmptyString(value: unknown): string | undefined;

package/build/common/as-non-empty-string.js

@@ -1,10 +1,20 @@
 /**
- * Returns `value` if it is a non-empty string, otherwise `undefined`.
- * Useful inside parsers that emit a structured failure separately when a
- * required field is missing or malformed, so the type check and the
- * failure-emission policy stay decoupled.
+ * Returns `value` trimmed if it is a string with non-whitespace content,
+ * otherwise `undefined`.
+ *
+ * Surrounding whitespace is never meaningful in the values this reads (names,
+ * identifiers, labels), and a whitespace-only string carries no more
+ * information than an absent one, so both collapse to `undefined`.
+ *
+ * `undefined` rather than `null` because this reports what a document does
+ * not contain. Recording that absence as a stored or transmitted value is a
+ * separate decision, made by the caller at the boundary where a read becomes
+ * a row or a response.
  */
 export function asNonEmptyString(value) {
-    return typeof value === 'string' && value.length > 0 ? value : undefined;
+    if (typeof value !== 'string')
+        return undefined;
+    const trimmed = value.trim();
+    return trimmed.length > 0 ? trimmed : undefined;
 }
 //# sourceMappingURL=as-non-empty-string.js.map

package/build/common/as-non-empty-string.js.map

@@ -1 +1 @@
-{"version":3,"file":"as-non-empty-string.js","sourceRoot":"","sources":["../../src/common/as-non-empty-string.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC"}
+{"version":3,"file":"as-non-empty-string.js","sourceRoot":"","sources":["../../src/common/as-non-empty-string.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC"}

package/build/common/as-non-empty-string.test.js

@@ -2,11 +2,16 @@ import { asNonEmptyString } from './as-non-empty-string.js';
 describe('asNonEmptyString', () => {
     it('returns the value for a non-empty string', () => {
         expect(asNonEmptyString('foo')).toBe('foo');
-        expect(asNonEmptyString(' ')).toBe(' ');
         expect(asNonEmptyString('0')).toBe('0');
     });
-    it('returns undefined for the empty string', () => {
+    it('trims surrounding whitespace from the value it returns', () => {
+        expect(asNonEmptyString('  foo  ')).toBe('foo');
+        expect(asNonEmptyString('\tfoo\n')).toBe('foo');
+    });
+    it('returns undefined for the empty string and for whitespace only', () => {
         expect(asNonEmptyString('')).toBeUndefined();
+        expect(asNonEmptyString('   ')).toBeUndefined();
+        expect(asNonEmptyString('\n\t')).toBeUndefined();
     });
     it.each([
         ['number', 0],

package/build/common/as-non-empty-string.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"as-non-empty-string.test.js","sourceRoot":"","sources":["../../src/common/as-non-empty-string.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE5D,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,QAAQ,EAAE,CAAC,CAAC;QACb,CAAC,mBAAmB,EAAE,EAAE,CAAC;QACzB,CAAC,MAAM,EAAE,IAAI,CAAC;QACd,CAAC,WAAW,EAAE,SAAS,CAAC;QACxB,CAAC,cAAc,EAAE,IAAI,CAAC;QACtB,CAAC,eAAe,EAAE,KAAK,CAAC;QACxB,CAAC,QAAQ,EAAE,EAAE,CAAC;QACd,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC,KAAK,EAAE,GAAG,CAAC;KACb,CAAC,CAAC,0BAA0B,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QAC/C,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"as-non-empty-string.test.js","sourceRoot":"","sources":["../../src/common/as-non-empty-string.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE5D,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC7C,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAChD,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,QAAQ,EAAE,CAAC,CAAC;QACb,CAAC,mBAAmB,EAAE,EAAE,CAAC;QACzB,CAAC,MAAM,EAAE,IAAI,CAAC;QACd,CAAC,WAAW,EAAE,SAAS,CAAC;QACxB,CAAC,cAAc,EAAE,IAAI,CAAC;QACtB,CAAC,eAAe,EAAE,KAAK,CAAC;QACxB,CAAC,QAAQ,EAAE,EAAE,CAAC;QACd,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC,KAAK,EAAE,GAAG,CAAC;KACb,CAAC,CAAC,0BAA0B,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QAC/C,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/build/common/index.d.ts

@@ -0,0 +1,4 @@
+export * from './as-date-time.js';
+export * from './as-non-empty-string.js';
+export * from './require-string.js';
+export * from './validity-window.js';

package/build/common/index.js

@@ -0,0 +1,5 @@
+export * from './as-date-time.js';
+export * from './as-non-empty-string.js';
+export * from './require-string.js';
+export * from './validity-window.js';
+//# sourceMappingURL=index.js.map

package/build/common/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/common/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC"}

package/build/common/validity-window.d.ts

@@ -0,0 +1,45 @@
+/**
+ * The outcome of judging a credential's validity window at a point in time.
+ *
+ * - `pass`: the credential is within its window now. A credential with
+ *   neither bound is "valid indefinitely" (VCDM 2.0, Validity Period) and
+ *   passes.
+ * - `fail`: the credential is outside its window (`expired`,
+ *   `not_yet_valid`), or a bound is present but is malformed or in a form
+ *   this evaluator does not support (`unreadable_bound`). A present bound is
+ *   never dropped: a credential whose bound cannot be read is not the same
+ *   as a credential without one.
+ */
+export type ValidityWindowOutcome = {
+    result: 'pass';
+} | {
+    result: 'fail';
+    reason: 'expired' | 'not_yet_valid' | 'unreadable_bound';
+    message: string;
+};
+/**
+ * Judges the VCDM 2.0 `validFrom` and `validUntil` claims against `now`,
+ * comparing them as points on a timeline as the data model requires.
+ *
+ * Supported form: an XML Schema `dateTimeStamp` written as
+ * `YYYY-MM-DDTHH:MM:SS[.fraction]` followed by `Z` or an offset within
+ * `-14:00`..`+14:00`, with uppercase `T` and `Z`, naming a calendar day that
+ * exists. XML Schema's `24:00:00` end-of-day form, a lowercase separator, an
+ * offset outside that range, an impossible day and any non-string value are
+ * unreadable and fail as `unreadable_bound`, naming the bound, rather than
+ * being normalised to a date the credential never asserted.
+ *
+ * Comparison is at millisecond precision: a fraction finer than that in a
+ * bound is truncated when the bound is parsed, so a bound within the same
+ * millisecond as `now` is treated as reached. `now` must be a valid Date;
+ * an invalid one is a caller error and throws rather than judging anything.
+ *
+ * Verification providers may not enforce these claims for every securing
+ * mechanism (the pinned VCKit reads only the JOSE `exp` and `nbf` claims for
+ * a `vc+jwt` envelope), so every verification path applies this judgement
+ * to the credential's own claims.
+ */
+export declare function evaluateValidityWindow(claims: {
+    validFrom?: unknown;
+    validUntil?: unknown;
+}, now?: Date): ValidityWindowOutcome;

package/build/common/validity-window.js

@@ -0,0 +1,68 @@
+import { asDateTime } from './as-date-time.js';
+/**
+ * Judges the VCDM 2.0 `validFrom` and `validUntil` claims against `now`,
+ * comparing them as points on a timeline as the data model requires.
+ *
+ * Supported form: an XML Schema `dateTimeStamp` written as
+ * `YYYY-MM-DDTHH:MM:SS[.fraction]` followed by `Z` or an offset within
+ * `-14:00`..`+14:00`, with uppercase `T` and `Z`, naming a calendar day that
+ * exists. XML Schema's `24:00:00` end-of-day form, a lowercase separator, an
+ * offset outside that range, an impossible day and any non-string value are
+ * unreadable and fail as `unreadable_bound`, naming the bound, rather than
+ * being normalised to a date the credential never asserted.
+ *
+ * Comparison is at millisecond precision: a fraction finer than that in a
+ * bound is truncated when the bound is parsed, so a bound within the same
+ * millisecond as `now` is treated as reached. `now` must be a valid Date;
+ * an invalid one is a caller error and throws rather than judging anything.
+ *
+ * Verification providers may not enforce these claims for every securing
+ * mechanism (the pinned VCKit reads only the JOSE `exp` and `nbf` claims for
+ * a `vc+jwt` envelope), so every verification path applies this judgement
+ * to the credential's own claims.
+ */
+export function evaluateValidityWindow(claims, now = new Date()) {
+    if (!(now instanceof Date) || Number.isNaN(now.getTime())) {
+        throw new TypeError('evaluateValidityWindow requires a valid Date for now');
+    }
+    const from = readBound(claims.validFrom);
+    const until = readBound(claims.validUntil);
+    if (from.state === 'readable' && now < from.date) {
+        return {
+            result: 'fail',
+            reason: 'not_yet_valid',
+            message: `Credential is not yet valid: validFrom ${from.date.toISOString()} is after ${now.toISOString()}`,
+        };
+    }
+    if (until.state === 'readable' && now > until.date) {
+        return {
+            result: 'fail',
+            reason: 'expired',
+            message: `Credential has expired: validUntil ${until.date.toISOString()} is before ${now.toISOString()}`,
+        };
+    }
+    const unreadable = [
+        from.state === 'unreadable' ? 'validFrom' : null,
+        until.state === 'unreadable' ? 'validUntil' : null,
+    ].filter((name) => name !== null);
+    if (unreadable.length > 0) {
+        return {
+            result: 'fail',
+            reason: 'unreadable_bound',
+            message: `${unreadable.join(' and ')} could not be read as a date-time`,
+        };
+    }
+    return { result: 'pass' };
+}
+const DATE_TIME_STAMP = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?(?:Z|[+-](?:0\d|1[0-3]):[0-5]\d|[+-]14:00)$/;
+function readBound(value) {
+    // Only an omitted property is an absent bound; an explicit null is a
+    // present value the data model does not allow.
+    if (value === undefined)
+        return { state: 'absent' };
+    if (typeof value !== 'string' || !DATE_TIME_STAMP.test(value))
+        return { state: 'unreadable' };
+    const date = asDateTime(value);
+    return date === undefined ? { state: 'unreadable' } : { state: 'readable', date };
+}
+//# sourceMappingURL=validity-window.js.map

package/build/common/validity-window.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validity-window.js","sourceRoot":"","sources":["../../src/common/validity-window.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAkB/C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAqD,EACrD,MAAY,IAAI,IAAI,EAAE;IAEtB,IAAI,CAAC,CAAC,GAAG,YAAY,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACjD,OAAO;YACL,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE,0CAA0C,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,GAAG,CAAC,WAAW,EAAE,EAAE;SAC3G,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU,IAAI,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QACnD,OAAO;YACL,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,sCAAsC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,GAAG,CAAC,WAAW,EAAE,EAAE;SACzG,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;QAChD,KAAK,CAAC,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI;KACnD,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAClD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,kBAAkB;YAC1B,OAAO,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,mCAAmC;SACxE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAID,MAAM,eAAe,GAAG,2FAA2F,CAAC;AAEpH,SAAS,SAAS,CAAC,KAAc;IAC/B,qEAAqE;IACrE,+CAA+C;IAC/C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IAC9F,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AACpF,CAAC"}

package/build/common/validity-window.test.d.ts

@@ -0,0 +1 @@
+export {};

package/build/common/validity-window.test.js

@@ -0,0 +1,67 @@
+import { evaluateValidityWindow } from './validity-window.js';
+const NOW = new Date('2026-09-11T00:00:00.000Z');
+describe('evaluateValidityWindow', () => {
+    it('fails an expired credential, naming the bound', () => {
+        expect(evaluateValidityWindow({ validFrom: '2020-01-01T00:00:00Z', validUntil: '2021-01-01T00:00:00Z' }, NOW)).toEqual({
+            result: 'fail',
+            reason: 'expired',
+            message: expect.stringContaining('validUntil 2021-01-01T00:00:00.000Z'),
+        });
+    });
+    it('fails a credential that is not yet valid', () => {
+        expect(evaluateValidityWindow({ validFrom: '2035-01-01T00:00:00Z' }, NOW)).toMatchObject({
+            result: 'fail',
+            reason: 'not_yet_valid',
+        });
+    });
+    it('passes inside the window, exactly on a bound, and with no bound at all', () => {
+        expect(evaluateValidityWindow({ validFrom: '2026-01-01T00:00:00Z', validUntil: '2027-01-01T00:00:00Z' }, NOW)).toEqual({ result: 'pass' });
+        expect(evaluateValidityWindow({ validFrom: NOW.toISOString() }, NOW)).toEqual({ result: 'pass' });
+        expect(evaluateValidityWindow({ validUntil: NOW.toISOString() }, NOW)).toEqual({ result: 'pass' });
+        // VCDM 2.0: with neither bound the credential is valid indefinitely.
+        expect(evaluateValidityWindow({}, NOW)).toEqual({ result: 'pass' });
+        expect(evaluateValidityWindow({ validFrom: undefined, validUntil: undefined }, NOW)).toEqual({ result: 'pass' });
+        expect(evaluateValidityWindow({ validUntil: '2035-01-01T00:00:00+14:00' }, NOW)).toEqual({ result: 'pass' });
+        expect(evaluateValidityWindow({ validUntil: '2035-01-01T00:00:00.250-13:59' }, NOW)).toEqual({ result: 'pass' });
+    });
+    it('fails a bound that is present but not a date-time, and never normalises an impossible date', () => {
+        // A violated readable bound wins over an unreadable one; otherwise an
+        // unreadable bound fails the credential rather than being dropped.
+        expect(evaluateValidityWindow({ validFrom: 'yesterday', validUntil: '2021-01-01T00:00:00Z' }, NOW)).toMatchObject({
+            result: 'fail',
+            reason: 'expired',
+        });
+        expect(evaluateValidityWindow({ validFrom: '2020-01-01T00:00:00Z', validUntil: 'never' }, NOW)).toEqual({
+            result: 'fail',
+            reason: 'unreadable_bound',
+            message: 'validUntil could not be read as a date-time',
+        });
+        expect(evaluateValidityWindow({ validFrom: 12345, validUntil: {} }, NOW)).toMatchObject({
+            message: 'validFrom and validUntil could not be read as a date-time',
+        });
+        // 30 February is not a date; it must not become 2 March and then expire.
+        expect(evaluateValidityWindow({ validUntil: '2021-02-30T00:00:00Z' }, NOW)).toMatchObject({
+            reason: 'unreadable_bound',
+        });
+        // XML Schema's end-of-day form is outside the supported profile.
+        expect(evaluateValidityWindow({ validUntil: '2030-12-31T24:00:00Z' }, NOW)).toMatchObject({
+            reason: 'unreadable_bound',
+        });
+        // An explicit null is a present value the data model does not allow.
+        expect(evaluateValidityWindow({ validUntil: null }, NOW)).toMatchObject({ reason: 'unreadable_bound' });
+        // Only the dateTimeStamp form: uppercase separators and offsets within 14 hours.
+        expect(evaluateValidityWindow({ validUntil: '2035-01-01t00:00:00z' }, NOW)).toMatchObject({
+            reason: 'unreadable_bound',
+        });
+        expect(evaluateValidityWindow({ validUntil: '2035-01-01T00:00:00+23:59' }, NOW)).toMatchObject({
+            reason: 'unreadable_bound',
+        });
+        expect(evaluateValidityWindow({ validUntil: '2035-01-01T00:00:00+14:01' }, NOW)).toMatchObject({
+            reason: 'unreadable_bound',
+        });
+    });
+    it('refuses an invalid clock rather than judging against it', () => {
+        expect(() => evaluateValidityWindow({ validUntil: '2021-01-01T00:00:00Z' }, new Date('not a date'))).toThrow(TypeError);
+    });
+});
+//# sourceMappingURL=validity-window.test.js.map

package/build/common/validity-window.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validity-window.test.js","sourceRoot":"","sources":["../../src/common/validity-window.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC;AAEjD,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CACJ,sBAAsB,CAAC,EAAE,SAAS,EAAE,sBAAsB,EAAE,UAAU,EAAE,sBAAsB,EAAE,EAAE,GAAG,CAAC,CACvG,CAAC,OAAO,CAAC;YACR,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,qCAAqC,CAAC;SACxE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,sBAAsB,CAAC,EAAE,SAAS,EAAE,sBAAsB,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC;YACvF,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,eAAe;SACxB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,CACJ,sBAAsB,CAAC,EAAE,SAAS,EAAE,sBAAsB,EAAE,UAAU,EAAE,sBAAsB,EAAE,EAAE,GAAG,CAAC,CACvG,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9B,MAAM,CAAC,sBAAsB,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAClG,MAAM,CAAC,sBAAsB,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACnG,qEAAqE;QACrE,MAAM,CAAC,sBAAsB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACpE,MAAM,CAAC,sBAAsB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACjH,MAAM,CAAC,sBAAsB,CAAC,EAAE,UAAU,EAAE,2BAA2B,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7G,MAAM,CAAC,sBAAsB,CAAC,EAAE,UAAU,EAAE,+BAA+B,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACnH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4FAA4F,EAAE,GAAG,EAAE;QACpG,sEAAsE;QACtE,mEAAmE;QACnE,MAAM,CAAC,sBAAsB,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,sBAAsB,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC;YAChH,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,sBAAsB,CAAC,EAAE,SAAS,EAAE,sBAAsB,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YACtG,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,kBAAkB;YAC1B,OAAO,EAAE,6CAA6C;SACvD,CAAC,CAAC;QACH,MAAM,CAAC,sBAAsB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC;YACtF,OAAO,EAAE,2DAA2D;SACrE,CAAC,CAAC;QACH,yEAAyE;QACzE,MAAM,CAAC,sBAAsB,CAAC,EAAE,UAAU,EAAE,sBAAsB,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC;YACxF,MAAM,EAAE,kBAAkB;SAC3B,CAAC,CAAC;QACH,iEAAiE;QACjE,MAAM,CAAC,sBAAsB,CAAC,EAAE,UAAU,EAAE,sBAAsB,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC;YACxF,MAAM,EAAE,kBAAkB;SAC3B,CAAC,CAAC;QACH,qEAAqE;QACrE,MAAM,CAAC,sBAAsB,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACxG,iFAAiF;QACjF,MAAM,CAAC,sBAAsB,CAAC,EAAE,UAAU,EAAE,sBAAsB,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC;YACxF,MAAM,EAAE,kBAAkB;SAC3B,CAAC,CAAC;QACH,MAAM,CAAC,sBAAsB,CAAC,EAAE,UAAU,EAAE,2BAA2B,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC;YAC7F,MAAM,EAAE,kBAAkB;SAC3B,CAAC,CAAC;QACH,MAAM,CAAC,sBAAsB,CAAC,EAAE,UAAU,EAAE,2BAA2B,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC;YAC7F,MAAM,EAAE,kBAAkB;SAC3B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,EAAE,UAAU,EAAE,sBAAsB,EAAE,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAC1G,SAAS,CACV,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/build/loaders/index.d.ts

@@ -1,3 +1,5 @@
 export { SchemaLoaderError, SchemaLoaderNetworkError, SchemaLoaderHttpError, SchemaLoaderInvalidJsonError, } from './errors.js';
 export { createSchemaLoader, type SchemaLoader } from './schema-loader.js';
 export { createJsonLdDocumentLoader, type JsonLdDocumentLoaderOptions, type LoadedRemoteDocument, } from './jsonld-document-loader.js';
+export { isHostDeliveryFailure } from '../bundle/fallback.js';
+export type { BundledFallbackEvent, BundledFallbackOptions } from '../bundle/fallback.js';

package/build/loaders/index.js

@@ -1,4 +1,5 @@
 export { SchemaLoaderError, SchemaLoaderNetworkError, SchemaLoaderHttpError, SchemaLoaderInvalidJsonError, } from './errors.js';
 export { createSchemaLoader } from './schema-loader.js';
 export { createJsonLdDocumentLoader, } from './jsonld-document-loader.js';
+export { isHostDeliveryFailure } from '../bundle/fallback.js';
 //# sourceMappingURL=index.js.map

package/build/loaders/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/loaders/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACxB,qBAAqB,EACrB,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,kBAAkB,EAAqB,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EACL,0BAA0B,GAG3B,MAAM,6BAA6B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/loaders/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACxB,qBAAqB,EACrB,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,kBAAkB,EAAqB,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EACL,0BAA0B,GAG3B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC"}

package/build/loaders/jsonld-document-loader.d.ts

@@ -1,4 +1,5 @@
 import type { ResolveDocumentOptions } from '../resolvers/index.js';
+import type { BundledFallbackOptions } from '../bundle/fallback.js';
 import type { TtlCache } from '../cache/ttl-cache.js';
 /**
  * The subset of jsonld's `RemoteDocument` shape this loader returns. Carries
@@ -13,17 +14,18 @@ export interface LoadedRemoteDocument {
     document: unknown;
 }
 /** Options for {@link createJsonLdDocumentLoader}. */
-export interface JsonLdDocumentLoaderOptions extends ResolveDocumentOptions {
+export interface JsonLdDocumentLoaderOptions extends ResolveDocumentOptions, BundledFallbackOptions {
     /** `Accept` header for `@context` fetches. Defaults to JSON-LD then JSON. */
     accept?: string;
     /**
      * Optional cache, keyed by URL, for resolved `@context` documents. When
      * supplied, a document fetched once is reused for the cache's TTL rather
-     * than re-fetched on every expansion. Only successful fetches are cached
+     * than re-fetched on every expansion. Only successful loads are cached
      * (the {@link TtlCache} contract does not cache rejected fetches), so a
-     * URL the guard rejects is re-checked every time. A successfully fetched
-     * and parsed document is cached even if downstream JSON-LD processing
-     * later rejects it.
+     * URL the guard rejects is re-checked every time; a bundled copy served
+     * after a host failure counts as a successful load and is cached like a
+     * fetched one. A successfully loaded document is cached even if
+     * downstream JSON-LD processing later rejects it.
      */
     cache?: TtlCache<LoadedRemoteDocument>;
 }

package/build/loaders/jsonld-document-loader.js

@@ -1,3 +1,4 @@
+import { withBundledFallback } from '../bundle/fallback.js';
 /** Default `Accept` for `@context` documents: JSON-LD, falling back to JSON. */
 const CONTEXT_ACCEPT_HEADER = 'application/ld+json, application/json;q=0.9';
 /**
@@ -17,8 +18,8 @@ const CONTEXT_ACCEPT_HEADER = 'application/ld+json, application/json;q=0.9';
  * @see https://github.com/uncefact/tests-untp/issues/707
  */
 export function createJsonLdDocumentLoader(options) {
-    const { cache, accept, ...resolverOptions } = options ?? {};
-    const load = async (url) => {
+    const { cache, accept, bundledFallback, onBundledFallback, ...resolverOptions } = options ?? {};
+    const fetchContext = async (url) => {
         // Lazy import: the resolver stack pulls in undici, which jsdom test
         // environments cannot evaluate, so it loads at fetch time to keep this
         // module importable there.
@@ -29,6 +30,14 @@ export function createJsonLdDocumentLoader(options) {
         });
         return { documentUrl: finalUrl, document: json };
     };
+    // A bundled context is served under the URL that was requested, since no
+    // redirect was followed to reach it.
+    const load = async (url) => {
+        const fetched = await withBundledFallback(url, { bundledFallback, onBundledFallback }, () => fetchContext(url));
+        return 'documentUrl' in fetched && 'document' in fetched
+            ? fetched
+            : { documentUrl: url, document: fetched };
+    };
     return cache ? (url) => cache.get(url, () => load(url)) : load;
 }
 //# sourceMappingURL=jsonld-document-loader.js.map

package/build/loaders/jsonld-document-loader.js.map

@@ -1 +1 @@
-{"version":3,"file":"jsonld-document-loader.js","sourceRoot":"","sources":["../../src/loaders/jsonld-document-loader.ts"],"names":[],"mappings":"AAgCA,gFAAgF;AAChF,MAAM,qBAAqB,GAAG,6CAA6C,CAAC;AAE5E;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAAqC;IAErC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,eAAe,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;IAE5D,MAAM,IAAI,GAAG,KAAK,EAAE,GAAW,EAAiC,EAAE;QAChE,oEAAoE;QACpE,uEAAuE;QACvE,2BAA2B;QAC3B,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QACtE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE;YACxD,GAAG,eAAe;YAClB,MAAM,EAAE,MAAM,IAAI,qBAAqB;SACxC,CAAC,CAAC;QACH,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACnD,CAAC,CAAC;IAEF,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjE,CAAC"}
+{"version":3,"file":"jsonld-document-loader.js","sourceRoot":"","sources":["../../src/loaders/jsonld-document-loader.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAiC5D,gFAAgF;AAChF,MAAM,qBAAqB,GAAG,6CAA6C,CAAC;AAE5E;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAAqC;IAErC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,iBAAiB,EAAE,GAAG,eAAe,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;IAEhG,MAAM,YAAY,GAAG,KAAK,EAAE,GAAW,EAAiC,EAAE;QACxE,oEAAoE;QACpE,uEAAuE;QACvE,2BAA2B;QAC3B,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QACtE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE;YACxD,GAAG,eAAe;YAClB,MAAM,EAAE,MAAM,IAAI,qBAAqB;SACxC,CAAC,CAAC;QACH,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACnD,CAAC,CAAC;IAEF,yEAAyE;IACzE,qCAAqC;IACrC,MAAM,IAAI,GAAG,KAAK,EAAE,GAAW,EAAiC,EAAE;QAChE,MAAM,OAAO,GAAG,MAAM,mBAAmB,CACvC,GAAG,EACH,EAAE,eAAe,EAAE,iBAAiB,EAAE,EACtC,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CACxB,CAAC;QACF,OAAO,aAAa,IAAI,OAAO,IAAI,UAAU,IAAI,OAAO;YACtD,CAAC,CAAE,OAAgC;YACnC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC9C,CAAC,CAAC;IAEF,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjE,CAAC"}