@xfuel/verify 0.1.1 → 0.3.0

package/dist/head-binding.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Payload v9 binds `(tree_head_hash, tolerance)` inside the issuer JWS.
+ * v8 and earlier omit the pair and keep their current verification path.
+ *
+ * The pair is read only from claims the caller has already verified.
+ * An unsigned outer copy that disagrees fails the check. Lockstep with
+ * `services/gateway/src/receipt-head-binding.js`.
+ */
+export declare const HEAD_BINDING_PAYLOAD_VERSION = 9;
+export type HeadBindingVerdict = 'not_present_legacy' | 'missing' | 'ok';
+export interface SignedHeadBinding {
+    verdict: HeadBindingVerdict;
+    tree_head_hash: string | null;
+    tolerance: unknown;
+}
+export declare function headBindingVerdict(claims: Record<string, unknown> | null | undefined): HeadBindingVerdict;
+/** Pair from verified claims. Does not read the unsigned receipt. */
+export declare function signedHeadBinding(claims: Record<string, unknown> | null | undefined): SignedHeadBinding;
+/** Which unsigned field disagrees, or null. v8 claims are not compared. */
+export declare function outerHeadDisagrees(receipt: {
+    tree_head_hash?: unknown;
+    tolerance?: unknown;
+} | null | undefined, claims: Record<string, unknown> | null | undefined): 'tree_head_hash' | 'tolerance' | null;
+//# sourceMappingURL=head-binding.d.ts.map

package/dist/head-binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"head-binding.d.ts","sourceRoot":"","sources":["../src/head-binding.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAE9C,MAAM,MAAM,kBAAkB,GAAG,oBAAoB,GAAG,SAAS,GAAG,IAAI,CAAC;AAEzE,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,GACjD,kBAAkB,CASpB;AAED,qEAAqE;AACrE,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,GACjD,iBAAiB,CAWnB;AAED,2EAA2E;AAC3E,wBAAgB,kBAAkB,CAChC,OAAO,EAAE;IAAE,cAAc,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,EAC7E,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,GACjD,gBAAgB,GAAG,WAAW,GAAG,IAAI,CAevC"}

package/dist/head-binding.js

@@ -0,0 +1,61 @@
+"use strict";
+/**
+ * Payload v9 binds `(tree_head_hash, tolerance)` inside the issuer JWS.
+ * v8 and earlier omit the pair and keep their current verification path.
+ *
+ * The pair is read only from claims the caller has already verified.
+ * An unsigned outer copy that disagrees fails the check. Lockstep with
+ * `services/gateway/src/receipt-head-binding.js`.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HEAD_BINDING_PAYLOAD_VERSION = void 0;
+exports.headBindingVerdict = headBindingVerdict;
+exports.signedHeadBinding = signedHeadBinding;
+exports.outerHeadDisagrees = outerHeadDisagrees;
+exports.HEAD_BINDING_PAYLOAD_VERSION = 9;
+function headBindingVerdict(claims) {
+    if (!claims || typeof claims !== 'object')
+        return 'not_present_legacy';
+    const version = Number(claims.payload_version);
+    if (!Number.isFinite(version) || version < exports.HEAD_BINDING_PAYLOAD_VERSION) {
+        return 'not_present_legacy';
+    }
+    if (!Object.prototype.hasOwnProperty.call(claims, 'tree_head_hash'))
+        return 'missing';
+    if (!Object.prototype.hasOwnProperty.call(claims, 'tolerance'))
+        return 'missing';
+    return 'ok';
+}
+/** Pair from verified claims. Does not read the unsigned receipt. */
+function signedHeadBinding(claims) {
+    const verdict = headBindingVerdict(claims);
+    if (verdict !== 'ok' || !claims) {
+        return { verdict: verdict === 'ok' ? 'missing' : verdict, tree_head_hash: null, tolerance: null };
+    }
+    const hash = claims.tree_head_hash;
+    return {
+        verdict,
+        tree_head_hash: hash == null || hash === '' ? null : String(hash),
+        tolerance: claims.tolerance ?? null,
+    };
+}
+/** Which unsigned field disagrees, or null. v8 claims are not compared. */
+function outerHeadDisagrees(receipt, claims) {
+    const signed = signedHeadBinding(claims);
+    if (signed.verdict !== 'ok' || !receipt || typeof receipt !== 'object')
+        return null;
+    if (Object.prototype.hasOwnProperty.call(receipt, 'tree_head_hash')) {
+        const outer = receipt.tree_head_hash == null || receipt.tree_head_hash === ''
+            ? null
+            : String(receipt.tree_head_hash);
+        if (outer !== signed.tree_head_hash)
+            return 'tree_head_hash';
+    }
+    if (Object.prototype.hasOwnProperty.call(receipt, 'tolerance')) {
+        if (JSON.stringify(receipt.tolerance ?? null) !== JSON.stringify(signed.tolerance ?? null)) {
+            return 'tolerance';
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=head-binding.js.map

package/dist/head-binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"head-binding.js","sourceRoot":"","sources":["../src/head-binding.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAYH,gDAWC;AAGD,8CAaC;AAGD,gDAkBC;AA1DY,QAAA,4BAA4B,GAAG,CAAC,CAAC;AAU9C,SAAgB,kBAAkB,CAChC,MAAkD;IAElD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,oBAAoB,CAAC;IACvE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,oCAA4B,EAAE,CAAC;QACxE,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC;QAAE,OAAO,SAAS,CAAC;IACtF,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC;QAAE,OAAO,SAAS,CAAC;IACjF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qEAAqE;AACrE,SAAgB,iBAAiB,CAC/B,MAAkD;IAElD,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,OAAO,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACpG,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,cAAc,CAAC;IACnC,OAAO;QACL,OAAO;QACP,cAAc,EAAE,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;QACjE,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;KACpC,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,SAAgB,kBAAkB,CAChC,OAA6E,EAC7E,MAAkD;IAElD,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACpF,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACpE,MAAM,KAAK,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,IAAI,OAAO,CAAC,cAAc,KAAK,EAAE;YAC3E,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,MAAM,CAAC,cAAc;YAAE,OAAO,gBAAgB,CAAC;IAC/D,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;QAC/D,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,EAAE,CAAC;YAC3F,OAAO,WAAW,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/index.d.ts

@@ -10,11 +10,15 @@
  *
  * See docs/specs/RECEIPT_V2_SEMANTICS.md for the verification algorithm.
  */
+import { type InclusionStep } from './anchor-witness.js';
 import { computePaymentCommitment, computeInferenceBinding, type PaymentCommitmentInput, type InferenceBindingInput } from './binding.js';
 import { verifyBasePayer, parseBasePaymentRef, isEvmAddress, sumUsdcTransfersFromPayer, fetchBaseTransactionReceipt, USDC_ADDRESSES, ERC20_TRANSFER_TOPIC, BASE_RPC_URL, type BasePayerVerification, type BaseReceiptFetcher } from './base-payer.js';
 import { verifySolanaPayer, parseSolanaPaymentRef, isSolanaBase58Pubkey, extractUsdcTransfersFromTx, inferUsdcOutflowFromBalances, fetchSolanaTransaction, SOLANA_RPC_URL, SOLANA_USDC_MINT_MAINNET, SOLANA_USDC_MINT_DEVNET, type SolanaPayerVerification, type SolanaRpcFetcher, type SolanaRpcGetTransactionResult } from './solana-payer.js';
 import { verifyPayerBinding, receiptPayerClaimsFromEnvelope, decodeJwsPayload, type PayerBindingVerification, type ReceiptPayerClaims, type PayerRail } from './payer.js';
 import { resolvePinnedIssuerJwk, verifyIssuerJws } from './jws.js';
+import { type ReceiptLane, type ReceiptTreeHead } from './receipt-lane.js';
+import { type PreimageCheck } from './preimage.js';
+import { type IssuerHistoryCheck, type IssuerHistoryDocument } from './issuer-history.js';
 export { computePaymentCommitment, computeInferenceBinding, type PaymentCommitmentInput, type InferenceBindingInput, verifyBasePayer, parseBasePaymentRef, isEvmAddress, sumUsdcTransfersFromPayer, fetchBaseTransactionReceipt, USDC_ADDRESSES, ERC20_TRANSFER_TOPIC, BASE_RPC_URL, type BasePayerVerification, type BaseReceiptFetcher, verifySolanaPayer, parseSolanaPaymentRef, isSolanaBase58Pubkey, extractUsdcTransfersFromTx, inferUsdcOutflowFromBalances, fetchSolanaTransaction, SOLANA_RPC_URL, SOLANA_USDC_MINT_MAINNET, SOLANA_USDC_MINT_DEVNET, type SolanaPayerVerification, type SolanaRpcFetcher, type SolanaRpcGetTransactionResult, verifyPayerBinding, receiptPayerClaimsFromEnvelope, decodeJwsPayload, type PayerBindingVerification, type ReceiptPayerClaims, type PayerRail, };
 /** ZKVerifierSP1 contract on Base mainnet. */
 export declare const ZK_VERIFIER_ADDRESS = "0x9373499645292715a2275A78eD65B14215C41c06";
@@ -24,6 +28,7 @@ export declare const BASE_SEPOLIA_RPC_URL = "https://sepolia.base.org";
 export interface XFuelReceipt {
     schema?: string;
     task_id: string;
+    created_at?: number | string;
     status: string;
     proof_outcome?: string;
     verify_url?: string;
@@ -37,15 +42,28 @@ export interface XFuelReceipt {
     payment?: {
         rail?: string;
         ref?: string | null;
-        gross_amount?: string;
-        net_amount?: string;
-        fee_amount?: string;
-        fee_bps?: number;
-        protocol_fee_bps?: number;
-        platform_fee?: string;
-        platform_fee_bps?: number;
+        gross_amount?: string | null;
+        settled_amount?: string | null;
+        net_amount?: string | null;
+        fee_amount?: string | null;
+        fee_bps?: number | null;
+        protocol_fee_bps?: number | null;
+        platform_fee?: string | null;
+        platform_fee_bps?: number | null;
         asset?: string | null;
         payee?: string | null;
+        accounting?: {
+            kind?: string;
+            scope?: string;
+            note?: string;
+            internal_breakdown?: {
+                route_margin_bps?: number | null;
+                route_margin_amount?: string | null;
+                receipt_floor_amount?: string | null;
+                provider_cogs_amount?: string | null;
+                tier2_proof_amount?: string | null;
+            };
+        } | null;
     };
     payment_meta?: {
         network?: string;
@@ -75,14 +93,20 @@ export interface XFuelReceipt {
     signature?: {
         alg?: string;
         value?: string;
+        payload_version?: number;
+    };
+    hmac_attestation?: {
+        payload_version?: number;
     };
     issuer_signature?: {
         alg?: string;
         value?: string;
         kid?: string;
         jws?: string;
-        issuer_jwk?: Es256Jwk;
         payload_version?: number;
+        payload_hash?: string;
+        canonical_preimage?: string;
+        issuer_jwk?: Es256Jwk;
     };
     verification?: {
         source_of_truth?: string;
@@ -94,7 +118,45 @@ export interface XFuelReceipt {
         payer_wallet?: string | null;
         agent_pubkey?: string | null;
         api_key_hash?: string | null;
+        agent_id?: string | number | null;
+    } | null;
+    /** Book agent_id. Present on claim_id-era JWS payloads. Absent on older v8 receipts. */
+    claim_id?: string | null;
+    /**
+     * v9. Transparency-log head hash inside the issuer JWS. The outer copy is
+     * display only. Absent on v8 and earlier.
+     */
+    tree_head_hash?: string | null;
+    /** v9. Clock tolerance bound inside the issuer JWS. Absent on v8 and earlier. */
+    tolerance?: {
+        base?: number;
+        solana?: number;
+    } | null;
+    /** Append position. Unsigned relative to the payment JWS; signed inside book_chain. */
+    book_seq?: number | null;
+    book_chain?: {
+        seq?: number | null;
+        row_hash?: string | null;
+    } | null;
+    /** Unsigned derived refusal section. Ignored by signature verification. */
+    receipt_lane?: {
+        anchor_at_binding?: {
+            root: string | null;
+            tree_size: number | null;
+            anchor_tx: string | null;
+            solana_signature: string | null;
+        } | null;
+        anchor_current?: {
+            root: string | null;
+            tree_size: number | null;
+            anchor_tx: string | null;
+            solana_signature: string | null;
+        } | null;
+        freeze?: boolean;
+        anchor_changed_since_binding?: boolean | null;
     } | null;
+    tree_head?: ReceiptTreeHead | null;
+    head?: ReceiptTreeHead | null;
 }
 /** JWK public key for ES256 verification. */
 export interface Es256Jwk {
@@ -114,12 +176,24 @@ export interface Jwks {
 export interface IssuerSignatureVerification {
     /** Whether an issuer signature was present to check. */
     checked: boolean;
-    /** True if the ECDSA signature is valid. */
+    /** True only when the signature verifies under a trusted key. */
     valid: boolean;
     /** Key ID from the signature. */
     kid?: string;
-    /** Reason for failure when valid=false. */
+    /** Reason for failure when valid=false. `key untrusted` means the verifying key is not in the trust set. */
     reason?: string;
+    /** True when the key used (or the only candidate key) is in the trust set. */
+    key_trusted?: boolean;
+    /** How the verifying key was trusted, when valid. */
+    trust?: 'jwks' | 'pinned_kid';
+    /** Verified JWS claims. Present only when valid is true. */
+    payload?: Record<string, unknown>;
+}
+/** Outer unsigned field disagrees with the JWS payload. */
+export interface ClaimMismatch {
+    field: string;
+    outer: string | null;
+    signed: string | null;
 }
 export interface BindingVerification {
     verified: boolean;
@@ -140,6 +214,10 @@ export interface PayerVerification {
     valid: boolean;
     rail?: PayerRail;
     reason?: string;
+    payer_wallet?: string | null;
+    payee?: string | null;
+    asset?: string | null;
+    amount?: string | null;
 }
 export interface ReceiptVerification {
     receipt_id: string;
@@ -150,33 +228,100 @@ export interface ReceiptVerification {
     output_hash: string | null;
     hub: string | null;
     model: string | null;
+    /** Gross amount from verified signed claims, in atomic USDC. Null when the signature is not trusted. */
     amount_usdc: string | null;
+    /** Settlement ref from verified signed claims. Null when the signature is not trusted. */
     tx: string | null;
+    /** Unsigned outer fields that disagree with the JWS payload. */
+    claim_mismatches: ClaimMismatch[];
+    /**
+     * `not_present_legacy` — v8 (or older) payload with no claim_id key. Still verifies.
+     * `ok` — claim_id-era payload, and a payment.ref is paired with a seat.
+     * `refused` — claim_id-era payload, payment.ref set, claim_id null.
+     */
+    claim_id: 'not_present_legacy' | 'ok' | 'refused';
+    /**
+     * v9 head binding from verified claims only. Null when the signature is not
+     * trusted, when the payload is v8 or earlier, or when the pair is missing.
+     * Never copied from the unsigned outer fields.
+     */
+    head_binding: {
+        tree_head_hash: string | null;
+        tolerance: unknown;
+    } | null;
+    /**
+     * Unsigned refusal decision beside book_seq. Not part of the payment JWS.
+     * freeze is true only for an unsettled receipt-lane row whose anchor changed
+     * after binding. It does not change `overall`.
+     */
+    receipt_lane: ReceiptLane;
+    /** Recompute of published preimages. Absent block is skipped unless requirePreimages. */
+    preimages: PreimageCheck;
+    /** Kid window against the signed issuer history. Unreachable is a warning unless strict. */
+    issuer_history: IssuerHistoryCheck;
+    warnings: string[];
     overall: 'verified' | 'partial' | 'failed';
     errors: string[];
 }
 /**
- * Canonical, order-stable payload an issuer signature covers.
- * MUST match `canonicalSignedPayload` in services/gateway/src/receipt.js exactly.
- *
- * Signed fields (15 total):
- *   1. task_id
- *   2. payment.rail
- *   3. payment.ref
- *   4. payment.gross_amount
- *   5. payment.net_amount
- *   6. payment.fee_amount
- *   7. payment.protocol_fee_bps ?? payment.fee_bps
- *   8. payment.platform_fee
- *   9. payment.platform_fee_bps
- *  10. provider_cogs.actual
- *  11. route.model
- *  12. route.model_commitment.commitment
- *  13. route.provider
- *  14. output.hash
- *  15. binding.expected_commitment
+ * HMAC payload version.
+ * Versions <= 7 keep the historical net/fee field list.
+ * Version 8 signs settled_amount plus the internal accounting breakdown.
+ * Lockstep with `canonicalPayloadVersion` in services/gateway/src/receipt.js
+ * for the v8 list (the v7 list here is the historical 15-field public formula).
+ */
+export declare function canonicalPayloadVersion(receipt: XFuelReceipt): number;
+/**
+ * Canonical, order-stable payload an HMAC issuer signature covers.
+ * v8 matches `canonicalSignedPayload` in services/gateway/src/receipt.js.
+ * v7 and earlier stay on the historical 15-field list so old signatures verify.
  */
 export declare function canonicalIssuerPayload(receipt: XFuelReceipt): string;
+export interface TransferLog {
+    address?: string;
+    topics?: string[];
+    data?: string;
+}
+export interface SettledAmountReconciliation {
+    checked: boolean;
+    /** True when the signed settled/net amount equals the USDC Transfer to payee. */
+    matches: boolean;
+    payload_version: number;
+    signed_field: 'settled_amount' | 'gross_amount' | 'net_amount' | null;
+    signed_amount: string | null;
+    transfer_amount: string | null;
+    payee: string | null;
+    reason?: string;
+}
+/**
+ * Sum USDC Transfer values to `payee` in a transaction's logs.
+ * Non-Transfer logs are ignored. When `usdcAddress` is set, other contracts are ignored.
+ */
+export declare function sumUsdcTransfersToPayee(logs: TransferLog[] | null | undefined, payee: string, usdcAddress?: string): bigint | null;
+export interface ReconcileSettledTransferOptions {
+    usdcAddress?: string;
+    /** JWKS treated as a trust root. Keys are matched by `kid`. */
+    jwks?: Jwks;
+    /**
+     * RFC 7638 thumbprints allowed as an offline pin.
+     * Omit to use the default production pin. Pass `[]` to disable the pin.
+     */
+    trustedKids?: readonly string[];
+}
+/**
+ * Optional on-chain reconciliation. Given a tx receipt's logs, the signed
+ * amount the payee was supposed to receive must equal the USDC Transfer to payee.
+ *
+ * The amount and payee come from JWS claims only after a key-trust check
+ * (JWKS by kid, or an embedded key whose thumbprint is a pinned kid). An
+ * untrusted signature does not contribute those facts.
+ *
+ * v8 compares `settled_amount` (falling back to `gross_amount`): that is the
+ * on-chain transfer. v7 and earlier compare `net_amount`, which those receipts
+ * defined as "amount after fees". A single direct transfer of gross will not
+ * match a net that subtracts a fee that never moved on chain.
+ */
+export declare function reconcileSettledTransfer(receipt: XFuelReceipt, logs: TransferLog[] | null | undefined, options?: ReconcileSettledTransferOptions): SettledAmountReconciliation;
 /**
  * Verify a receipt's ES256 issuer signature against a JWK (public key).
  * This is the public-key verification path — no shared secret required.
@@ -191,19 +336,17 @@ export declare function canonicalIssuerPayload(receipt: XFuelReceipt): string;
  */
 export declare function verifyIssuerSignature(receipt: XFuelReceipt, jwk: Es256Jwk): IssuerSignatureVerification;
 /**
- * Verify a receipt's ES256 issuer signature against a JWKS (key set).
- * Finds the matching key by kid and verifies.
+ * Verify an issuer signature against trusted keys only.
  *
- * @param receipt - Receipt JSON with issuer_signature
- * @param jwks - JWKS with keys array
- */
-export declare function verifyIssuerSignatureWithJwks(receipt: XFuelReceipt, jwks: Jwks): IssuerSignatureVerification;
-/**
- * Verify a receipt's payment binding locally (no network required).
+ * Trust, in order:
+ *   1. A JWKS entry matched by `kid` (supplied file or fetched issuer JWKS).
+ *   2. An embedded `issuer_jwk` whose RFC 7638 thumbprint equals a pinned trusted kid.
  *
- * This recomputes the commitment from the receipt's fields and compares
- * it to the stored `binding.expected_commitment`.
+ * An embedded key that merely verifies the bytes is `key untrusted`.
  */
+export declare function verifyIssuerSignatureWithJwks(receipt: XFuelReceipt, jwks?: Jwks, options?: {
+    trustedKids?: readonly string[];
+}): IssuerSignatureVerification;
 export declare function verifyBinding(receipt: XFuelReceipt): BindingVerification;
 /**
  * Verify a receipt's nullifier is anchored on-chain.
@@ -224,17 +367,39 @@ export declare const canonicalSignedPayload: typeof canonicalIssuerPayload;
  */
 export declare function hashCanonicalPayload(receipt: XFuelReceipt): string;
 /**
- * Full receipt verification — binding + issuer signature + optional nullifier check.
+ * claim_id-era receipts include the key even when the value is null.
+ * Older payloads omit the key and stay valid.
+ */
+export declare function claimIdVerdict(claims: Record<string, unknown> | null | undefined): 'not_present_legacy' | 'ok' | 'refused';
+/** Flag unsigned outer copies that disagree with the JWS payload. */
+export declare function diffOuterClaims(receipt: XFuelReceipt, claims: Record<string, unknown> | null): ClaimMismatch[];
+/** Fetch a JWKS document. Caller decides whether the URL is a trust root. */
+export declare function fetchIssuerJwks(uri: string, fetchImpl?: typeof fetch): Promise<Jwks>;
+/**
+ * Full receipt verification — trusted issuer signature, signed-claim facts,
+ * optional on-chain payer and nullifier checks.
  *
- * @param receipt The Chit402 receipt JSON
- * @param options.jwks JWKS for issuer signature verification (no network fetch)
- * @param options.checkNullifier Whether to verify nullifier on-chain (requires network)
- * @param options.rpcUrl RPC URL for on-chain checks
+ * Facts (amount, payer, payee, asset, tx, model) are taken only from a JWS
+ * that verified under a trusted key. The embedded `issuer_jwk` is not trusted
+ * unless its RFC 7638 thumbprint is a pinned kid, or the same key is in a JWKS.
  */
-/** Extract JWS claims for payer binding when present. */
+/** Extract JWS claims for payer binding. Prefers the JWS payload over the outer copy. */
 export declare function receiptPayerClaims(receipt: XFuelReceipt): ReceiptPayerClaims;
-export declare function verifyReceipt(receipt: XFuelReceipt, options?: {
+export interface VerifyReceiptOptions {
+    /** Caller-supplied JWKS. Every key in it is a trust root, matched by kid. */
     jwks?: Jwks;
+    /**
+     * Pinned trusted kids (RFC 7638 thumbprints). Defaults to the production
+     * api.chit402.com issuer kid. Pass `[]` to disable the offline pin.
+     */
+    trustedKids?: readonly string[];
+    /** Fetch JWKS from the receipt `jwks_uri` when its host is allowlisted. */
+    fetchJwks?: boolean;
+    /** Explicit JWKS URL. Any https URL is fetched; this is user-supplied trust. */
+    jwksUri?: string;
+    /** Hosts allowed for `fetchJwks`. Defaults to api.chit402.com. */
+    trustedJwksHosts?: readonly string[];
+    fetchImpl?: typeof fetch;
     checkNullifier?: boolean;
     checkPayer?: boolean;
     rpcUrl?: string;
@@ -242,8 +407,55 @@ export declare function verifyReceipt(receipt: XFuelReceipt, options?: {
     verifierAddress?: string;
     fetchSolanaTransaction?: SolanaRpcFetcher;
     fetchBaseReceipt?: BaseReceiptFetcher;
-}): Promise<ReceiptVerification>;
-export { resolvePinnedIssuerJwk, verifyIssuerJws, } from './jws.js';
+    /**
+     * Tree head to check against the signed `tree_head_hash`. An equal root is
+     * the issuance prefix and proves inclusion of this receipt. A different root
+     * verifies only when `inclusion` proves the leaf is in that head.
+     */
+    head?: ReceiptTreeHead | null;
+    /**
+     * Inclusion witness for `head` when its root is not the signed prefix.
+     * `leaf` is the 32-byte leaf hash hex. Without it the leaf is
+     * SHA-256(0x00 || `${task_id}|${row_hash}`).
+     */
+    inclusion?: {
+        leaf?: string | null;
+        leaf_index?: number | null;
+        tree_size?: number | null;
+        row_hash?: string | null;
+        proof?: InclusionStep[] | null;
+    } | null;
+    /**
+     * Fail when a recomputable hash has no preimage. A present `preimages`
+     * block is always checked, even when this is false.
+     */
+    requirePreimages?: boolean;
+    /** Signed issuer history document. Skips the network when set. */
+    issuerHistory?: IssuerHistoryDocument | null;
+    /** Fetch /.well-known/issuer-history.json. Unreachable warns unless strict. */
+    fetchIssuerHistory?: boolean;
+    /** Fail closed when the history cannot be loaded. */
+    strictIssuerHistory?: boolean;
+    /** Explicit history URL. Any https URL. */
+    issuerHistoryUrl?: string | null;
+    /** Exact issuer-history response bytes. SHA-256 must match a signed pin. */
+    issuerHistoryBytes?: string | null;
+    /** `--no-issuer-history`. A signed pin is not checked. */
+    skipIssuerHistory?: boolean;
+    /**
+     * Stored canonical object (the GET /preimage body). SHA-256 must match
+     * the signed payload_hash. Absent bytes are not rebuilt.
+     */
+    canonicalPreimage?: string | null;
+}
+export declare function verifyReceipt(receipt: XFuelReceipt, options?: VerifyReceiptOptions): Promise<ReceiptVerification>;
+export { resolvePinnedIssuerJwk, verifyIssuerJws, DEFAULT_TRUSTED_ISSUER_KIDS, DEFAULT_TRUSTED_JWKS_HOSTS, KEY_UNTRUSTED, jwkThumbprint, isPinnedTrustedJwk, jwksHostAllowed, } from './jws.js';
+export { buildReceiptLane, receiptLaneFromVerification, receiptLaneDecision, deriveSettledBy, deriveSettled, anchorChangedSinceBinding, RECEIPT_LANE_SCHEMA, RECEIPT_LANE_RULE, RECEIPT_LANE_ORDERING, RECEIPT_LANE_BOUNDARY, type ReceiptLane, type SettledBy, type RegistryClassification, type LocalCheckHint, type AnchorIdentity, type ReceiptTreeHead, } from './receipt-lane.js';
+export { headBindingVerdict, signedHeadBinding, outerHeadDisagrees, HEAD_BINDING_PAYLOAD_VERSION, type HeadBindingVerdict, type SignedHeadBinding, } from './head-binding.js';
+export { isRefusalDocument, verifyRefusal, REFUSAL_SCHEMA, REFUSAL_PAYLOAD_VERSION, REFUSAL_PROVES, REFUSAL_DOES_NOT_PROVE, type RefusalDocument, type RefusalVerification, type RefusalJwks, } from './refusal.js';
+export { verifyAnchoredRoot, verifyMerkleInclusion, extractMemos, parseAnchorMemo, leafHash, ANCHOR_PROVES, ANCHOR_DOES_NOT_PROVE, SOLANA_GENESIS, BASE_MAINNET_CHAIN_ID, type AnchorWitnessResult, type AnchorReceipt, type AnchorInclusion, type AnchorHead, type VerifyAnchoredRootInput, } from './anchor-witness.js';
+export { verifyCanonicalPreimageBytes, CANONICAL_PAYLOAD_VERSION, } from './canonical-preimage.js';
+export { readIssuerHistoryPin, issuerHistoryDocumentHash, type IssuerHistoryPin, } from './issuer-history.js';
 declare const _default: {
     verifyBinding: typeof verifyBinding;
     verifyIssuerSignature: typeof verifyIssuerSignature;
@@ -261,7 +473,10 @@ declare const _default: {
     computePaymentCommitment: typeof computePaymentCommitment;
     computeInferenceBinding: typeof computeInferenceBinding;
     canonicalIssuerPayload: typeof canonicalIssuerPayload;
+    canonicalPayloadVersion: typeof canonicalPayloadVersion;
     canonicalSignedPayload: typeof canonicalIssuerPayload;
+    reconcileSettledTransfer: typeof reconcileSettledTransfer;
+    sumUsdcTransfersToPayee: typeof sumUsdcTransfersToPayee;
     hashCanonicalPayload: typeof hashCanonicalPayload;
     ZK_VERIFIER_ADDRESS: string;
     BASE_RPC_URL: string;

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC3B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,YAAY,EACZ,yBAAyB,EACzB,2BAA2B,EAC3B,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACpB,0BAA0B,EAC1B,4BAA4B,EAC5B,sBAAsB,EACtB,cAAc,EACd,wBAAwB,EACxB,uBAAuB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,6BAA6B,EACnC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,kBAAkB,EAClB,8BAA8B,EAC9B,gBAAgB,EAChB,KAAK,wBAAwB,EAC7B,KAAK,kBAAkB,EACvB,KAAK,SAAS,EACf,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAEnE,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,eAAe,EACf,mBAAmB,EACnB,YAAY,EACZ,yBAAyB,EACzB,2BAA2B,EAC3B,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACpB,0BAA0B,EAC1B,4BAA4B,EAC5B,sBAAsB,EACtB,cAAc,EACd,wBAAwB,EACxB,uBAAuB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,6BAA6B,EAClC,kBAAkB,EAClB,8BAA8B,EAC9B,gBAAgB,EAChB,KAAK,wBAAwB,EAC7B,KAAK,kBAAkB,EACvB,KAAK,SAAS,GACf,CAAC;AAEF,8CAA8C;AAC9C,eAAO,MAAM,mBAAmB,+CAA+C,CAAC;AAEhF,gCAAgC;AAChC,eAAO,MAAM,oBAAoB,6BAA6B,CAAC;AAO/D,0CAA0C;AAC1C,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE;QACN,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,gBAAgB,CAAC,EAAE;YACjB,UAAU,CAAC,EAAE,MAAM,CAAC;SACrB,GAAG,IAAI,CAAC;KACV,CAAC;IACF,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACvB,CAAC;IACF,YAAY,CAAC,EAAE;QACb,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,IAAI,CAAC;IACT,aAAa,CAAC,EAAE;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,MAAM,CAAC,EAAE;QACP,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,GAAG,IAAI,CAAC;IACT,KAAK,CAAC,EAAE;QACN,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,CAAC;IACF,OAAO,CAAC,EAAE;QACR,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,GAAG,IAAI,CAAC;IACT,SAAS,CAAC,EAAE;QACV,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,gBAAgB,CAAC,EAAE;QACjB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,UAAU,CAAC,EAAE,QAAQ,CAAC;QACtB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,YAAY,CAAC,EAAE;QACb,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC7B,CAAC;IACF,cAAc,CAAC,EAAE;QACf,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC9B,GAAG,IAAI,CAAC;CACV;AAED,6CAA6C;AAC7C,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,IAAI,CAAC;IACV,GAAG,EAAE,OAAO,CAAC;IACb,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;IACV,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,yCAAyC;AACzC,MAAM,WAAW,IAAI;IACnB,IAAI,EAAE,QAAQ,EAAE,CAAC;CAClB;AAED,8CAA8C;AAC9C,MAAM,WAAW,2BAA2B;IAC1C,wDAAwD;IACxD,OAAO,EAAE,OAAO,CAAC;IACjB,4CAA4C;IAC5C,KAAK,EAAE,OAAO,CAAC;IACf,iCAAiC;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2CAA2C;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,mBAAmB,CAAC;IAC7B,gBAAgB,EAAE,2BAA2B,CAAC;IAC9C,KAAK,EAAE,iBAAiB,CAAC;IACzB,SAAS,EAAE,qBAAqB,CAAC;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,OAAO,EAAE,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;IAC3C,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,CAkBpE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,YAAY,EACrB,GAAG,EAAE,QAAQ,GACZ,2BAA2B,CA4B7B;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,YAAY,EACrB,IAAI,EAAE,IAAI,GACT,2BAA2B,CA2D7B;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,YAAY,GAAG,mBAAmB,CAsExE;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,YAAY,EACrB,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAO,GAC1D,OAAO,CAAC,qBAAqB,CAAC,CA2ChC;AAED;;;GAGG;AACH,eAAO,MAAM,sBAAsB,+BAAyB,CAAC;AAE7D;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,CAElE;AAED;;;;;;;GAOG;AACH,yDAAyD;AACzD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,YAAY,GAAG,kBAAkB,CAE5E;AAED,wBAAsB,aAAa,CACjC,OAAO,EAAE,YAAY,EACrB,OAAO,GAAE;IACP,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,sBAAsB,CAAC,EAAE,gBAAgB,CAAC;IAC1C,gBAAgB,CAAC,EAAE,kBAAkB,CAAC;CAClC,GACL,OAAO,CAAC,mBAAmB,CAAC,CAmK9B;AAED,OAAO,EACL,sBAAsB,EACtB,eAAe,GAChB,MAAM,UAAU,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;AAElB,wBAuBE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAmC,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE1F,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC3B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,YAAY,EACZ,yBAAyB,EACzB,2BAA2B,EAC3B,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACpB,0BAA0B,EAC1B,4BAA4B,EAC5B,sBAAsB,EACtB,cAAc,EACd,wBAAwB,EACxB,uBAAuB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,6BAA6B,EACnC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,kBAAkB,EAClB,8BAA8B,EAC9B,gBAAgB,EAChB,KAAK,wBAAwB,EAC7B,KAAK,kBAAkB,EACvB,KAAK,SAAS,EACf,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,sBAAsB,EACtB,eAAe,EAShB,MAAM,UAAU,CAAC;AAMlB,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,eAAe,EACrB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAA4B,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC3B,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,eAAe,EACf,mBAAmB,EACnB,YAAY,EACZ,yBAAyB,EACzB,2BAA2B,EAC3B,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACpB,0BAA0B,EAC1B,4BAA4B,EAC5B,sBAAsB,EACtB,cAAc,EACd,wBAAwB,EACxB,uBAAuB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,6BAA6B,EAClC,kBAAkB,EAClB,8BAA8B,EAC9B,gBAAgB,EAChB,KAAK,wBAAwB,EAC7B,KAAK,kBAAkB,EACvB,KAAK,SAAS,GACf,CAAC;AAEF,8CAA8C;AAC9C,eAAO,MAAM,mBAAmB,+CAA+C,CAAC;AAEhF,gCAAgC;AAChC,eAAO,MAAM,oBAAoB,6BAA6B,CAAC;AAO/D,0CAA0C;AAC1C,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE;QACN,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,gBAAgB,CAAC,EAAE;YACjB,UAAU,CAAC,EAAE,MAAM,CAAC;SACrB,GAAG,IAAI,CAAC;KACV,CAAC;IACF,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,UAAU,CAAC,EAAE;YACX,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,kBAAkB,CAAC,EAAE;gBACnB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;gBACjC,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;gBACpC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;gBACrC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;gBACrC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;aACpC,CAAC;SACH,GAAG,IAAI,CAAC;KACV,CAAC;IACF,YAAY,CAAC,EAAE;QACb,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,IAAI,CAAC;IACT,aAAa,CAAC,EAAE;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,MAAM,CAAC,EAAE;QACP,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,GAAG,IAAI,CAAC;IACT,KAAK,CAAC,EAAE;QACN,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,CAAC;IACF,OAAO,CAAC,EAAE;QACR,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,GAAG,IAAI,CAAC;IACT,SAAS,CAAC,EAAE;QACV,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,gBAAgB,CAAC,EAAE;QACjB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,gBAAgB,CAAC,EAAE;QACjB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,UAAU,CAAC,EAAE,QAAQ,CAAC;KACvB,CAAC;IACF,YAAY,CAAC,EAAE;QACb,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC7B,CAAC;IACF,cAAc,CAAC,EAAE;QACf,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;KACnC,GAAG,IAAI,CAAC;IACT,wFAAwF;IACxF,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,iFAAiF;IACjF,SAAS,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACtD,uFAAuF;IACvF,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IACtE,2EAA2E;IAC3E,YAAY,CAAC,EAAE;QACb,iBAAiB,CAAC,EAAE;YAClB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;YACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;YACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;YACzB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;SACjC,GAAG,IAAI,CAAC;QACT,cAAc,CAAC,EAAE;YACf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;YACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;YACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;YACzB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;SACjC,GAAG,IAAI,CAAC;QACT,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,4BAA4B,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;KAC/C,GAAG,IAAI,CAAC;IACT,SAAS,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACnC,IAAI,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;CAC/B;AAED,6CAA6C;AAC7C,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,IAAI,CAAC;IACV,GAAG,EAAE,OAAO,CAAC;IACb,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;IACV,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,yCAAyC;AACzC,MAAM,WAAW,IAAI;IACnB,IAAI,EAAE,QAAQ,EAAE,CAAC;CAClB;AAED,8CAA8C;AAC9C,MAAM,WAAW,2BAA2B;IAC1C,wDAAwD;IACxD,OAAO,EAAE,OAAO,CAAC;IACjB,iEAAiE;IACjE,KAAK,EAAE,OAAO,CAAC;IACf,iCAAiC;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,4GAA4G;IAC5G,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC;IAC9B,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,2DAA2D;AAC3D,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,mBAAmB,CAAC;IAC7B,gBAAgB,EAAE,2BAA2B,CAAC;IAC9C,KAAK,EAAE,iBAAiB,CAAC;IACzB,SAAS,EAAE,qBAAqB,CAAC;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,wGAAwG;IACxG,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,0FAA0F;IAC1F,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,gEAAgE;IAChE,gBAAgB,EAAE,aAAa,EAAE,CAAC;IAClC;;;;OAIG;IACH,QAAQ,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,CAAC;IAClD;;;;OAIG;IACH,YAAY,EAAE;QACZ,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,SAAS,EAAE,OAAO,CAAC;KACpB,GAAG,IAAI,CAAC;IACT;;;;OAIG;IACH,YAAY,EAAE,WAAW,CAAC;IAC1B,yFAAyF;IACzF,SAAS,EAAE,aAAa,CAAC;IACzB,4FAA4F;IAC5F,cAAc,EAAE,kBAAkB,CAAC;IACnC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;IAC3C,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,CAWrE;AAgDD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,CAKpE;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,iFAAiF;IACjF,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,gBAAgB,GAAG,cAAc,GAAG,YAAY,GAAG,IAAI,CAAC;IACtE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAOD;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,WAAW,EAAE,GAAG,IAAI,GAAG,SAAS,EACtC,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,MAAM,GAAG,IAAI,CAgBf;AAED,MAAM,WAAW,+BAA+B;IAC9C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+DAA+D;IAC/D,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ;;;OAGG;IACH,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACjC;AA8CD;;;;;;;;;;;;GAYG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,YAAY,EACrB,IAAI,EAAE,WAAW,EAAE,GAAG,IAAI,GAAG,SAAS,EACtC,OAAO,GAAE,+BAAoC,GAC5C,2BAA2B,CAmF7B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,YAAY,EACrB,GAAG,EAAE,QAAQ,GACZ,2BAA2B,CA4B7B;AAgBD;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,YAAY,EACrB,IAAI,CAAC,EAAE,IAAI,EACX,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAO,GAChD,2BAA2B,CA8G7B;AAkBD,wBAAgB,aAAa,CAAC,OAAO,EAAE,YAAY,GAAG,mBAAmB,CAkFxE;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,YAAY,EACrB,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAO,GAC1D,OAAO,CAAC,qBAAqB,CAAC,CA2ChC;AAED;;;GAGG;AACH,eAAO,MAAM,sBAAsB,+BAAyB,CAAC;AAE7D;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,CAElE;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,GACjD,oBAAoB,GAAG,IAAI,GAAG,SAAS,CAWzC;AA+CD,qEAAqE;AACrE,wBAAgB,eAAe,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,aAAa,EAAE,CA4B9G;AA6HD,6EAA6E;AAC7E,wBAAsB,eAAe,CACnC,GAAG,EAAE,MAAM,EACX,SAAS,GAAE,OAAO,KAAwB,GACzC,OAAO,CAAC,IAAI,CAAC,CAOf;AAED;;;;;;;GAOG;AACH,yFAAyF;AACzF,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,YAAY,GAAG,kBAAkB,CAE5E;AAED,MAAM,WAAW,oBAAoB;IACnC,6EAA6E;IAC7E,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ;;;OAGG;IACH,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,2EAA2E;IAC3E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,sBAAsB,CAAC,EAAE,gBAAgB,CAAC;IAC1C,gBAAgB,CAAC,EAAE,kBAAkB,CAAC;IACtC;;;;OAIG;IACH,IAAI,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IAC9B;;;;OAIG;IACH,SAAS,CAAC,EAAE;QACV,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,KAAK,CAAC,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;KAChC,GAAG,IAAI,CAAC;IACT;;;OAGG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,kEAAkE;IAClE,aAAa,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC7C,+EAA+E;IAC/E,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,qDAAqD;IACrD,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,2CAA2C;IAC3C,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,4EAA4E;IAC5E,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,0DAA0D;IAC1D,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAyCD,wBAAsB,aAAa,CACjC,OAAO,EAAE,YAAY,EACrB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,mBAAmB,CAAC,CAkW9B;AAED,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,2BAA2B,EAC3B,0BAA0B,EAC1B,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,eAAe,GAChB,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,gBAAgB,EAChB,2BAA2B,EAC3B,mBAAmB,EACnB,eAAe,EACf,aAAa,EACb,yBAAyB,EACzB,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,eAAe,GACrB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,4BAA4B,EAC5B,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,GACvB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,uBAAuB,EACvB,cAAc,EACd,sBAAsB,EACtB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,WAAW,GACjB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,YAAY,EACZ,eAAe,EACf,QAAQ,EACR,aAAa,EACb,qBAAqB,EACrB,cAAc,EACd,qBAAqB,EACrB,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,UAAU,EACf,KAAK,uBAAuB,GAC7B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,KAAK,gBAAgB,GACtB,MAAM,qBAAqB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAE7B,wBA0BE"}