@xfuel/verify 0.3.1 → 0.3.4

package/dist/issuer-pin.js

@@ -0,0 +1,567 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ISSUER_PIN_CHAIN_REFUSED = exports.ISSUER_ROTATION_UNCONTROLLED = exports.ISSUER_PIN_MUTABLE_REF = exports.ISSUER_PIN_DOWNGRADE = exports.ISSUER_SELF_SIG_INVALID = exports.ISSUER_PIN_HASH_MISMATCH = exports.ISSUER_PIN_MISMATCH = exports.PUBLISHED_ISSUER_PIN_KID = exports.ISSUER_PIN_REPO = exports.CITIZEN_FREEZE_PURPOSE = exports.CITIZEN_FREEZE_SCHEMA = exports.ISSUER_PIN_CHAIN_ID = exports.ISSUER_PIN_PATH = exports.ISSUER_PIN_SCHEMA = exports.ISSUER_PIN_VERSION = exports.ISSUER_ROTATION_CONTEXT = exports.ISSUER_REGISTRATION_CONTEXT = void 0;
+exports.issuerPinFileHash = issuerPinFileHash;
+exports.canonicalPublicKey = canonicalPublicKey;
+exports.registrationPreimage = registrationPreimage;
+exports.rotationStatement = rotationStatement;
+exports.serializeIssuerPin = serializeIssuerPin;
+exports.issuerPinContentUrl = issuerPinContentUrl;
+exports.loadIssuerPinBytes = loadIssuerPinBytes;
+exports.readIssuerPinClaim = readIssuerPinClaim;
+exports.verifyRegistrationSignature = verifyRegistrationSignature;
+exports.verifyCitizenRotation = verifyCitizenRotation;
+exports.assessIssuerPin = assessIssuerPin;
+/**
+ * Content-addressed issuer public key for a pinned era.
+ *
+ * The pin is a file at one git commit plus the SHA-256 of that file.
+ * This module does not fetch. A caller who fetches must use
+ * {@link issuerPinContentUrl}, which returns a URL only for a 40-hex
+ * commit and the fixed path. A branch name, HEAD, or main is
+ * ISSUER_PIN_MUTABLE_REF and no request is made.
+ *
+ * Sepolia only (`eip155:84532`). The registration self-signature is not a
+ * receipt. Rotation is a chit402.freeze.v1 control event signed by the
+ * previous pin key (`purpose: citizen_issuer_key`), not an edited file.
+ */
+const node_crypto_1 = require("node:crypto");
+const jws_js_1 = require("./jws.js");
+exports.ISSUER_REGISTRATION_CONTEXT = 'chit402-issuer-registration-v1';
+exports.ISSUER_ROTATION_CONTEXT = 'chit402-issuer-rotation-v1';
+exports.ISSUER_PIN_VERSION = 1;
+exports.ISSUER_PIN_SCHEMA = 'chit402.issuer_key_pin.v1';
+exports.ISSUER_PIN_PATH = 'docs/well-known/issuer-key.json';
+exports.ISSUER_PIN_CHAIN_ID = 'eip155:84532';
+exports.CITIZEN_FREEZE_SCHEMA = 'chit402.freeze.v1';
+exports.CITIZEN_FREEZE_PURPOSE = 'citizen_issuer_key';
+exports.ISSUER_PIN_REPO = 'XFuel-Lab/chit402';
+/**
+ * Kid of the Sepolia specimen in docs/well-known/issuer-key.json.
+ * A different kid is a rotation and needs the previous pin.
+ */
+exports.PUBLISHED_ISSUER_PIN_KID = 'kATmVjz6J8QvSTS-bS1NUjWaLs35o-PXYurO2blMf-c';
+exports.ISSUER_PIN_MISMATCH = 'ISSUER_PIN_MISMATCH';
+exports.ISSUER_PIN_HASH_MISMATCH = 'ISSUER_PIN_HASH_MISMATCH';
+exports.ISSUER_SELF_SIG_INVALID = 'ISSUER_SELF_SIG_INVALID';
+exports.ISSUER_PIN_DOWNGRADE = 'ISSUER_PIN_DOWNGRADE';
+exports.ISSUER_PIN_MUTABLE_REF = 'ISSUER_PIN_MUTABLE_REF';
+exports.ISSUER_ROTATION_UNCONTROLLED = 'ISSUER_ROTATION_UNCONTROLLED';
+exports.ISSUER_PIN_CHAIN_REFUSED = 'ISSUER_PIN_CHAIN_REFUSED';
+const COMMIT_SHA = /^[0-9a-f]{40}$/;
+const FILE_SHA = /^[0-9a-f]{64}$/;
+const CREATED_AT = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{3})?Z$/;
+function issuerPinFileHash(bytes) {
+    return (0, node_crypto_1.createHash)('sha256').update(Buffer.from(bytes, 'utf8')).digest('hex');
+}
+function canonicalPublicKey(jwk) {
+    return JSON.stringify({ crv: jwk.crv, kty: jwk.kty, x: jwk.x, y: jwk.y });
+}
+/**
+ * Registration preimage. The context, version, kid, created_at, and key
+ * are fixed fields, so a signature over another purpose or another key
+ * does not verify.
+ */
+function registrationPreimage(input) {
+    return [
+        exports.ISSUER_REGISTRATION_CONTEXT,
+        String(exports.ISSUER_PIN_VERSION),
+        input.kid,
+        input.createdAt,
+        canonicalPublicKey(input.jwk),
+    ].join('\n');
+}
+function rotationStatement(input) {
+    return [
+        exports.ISSUER_ROTATION_CONTEXT,
+        String(exports.ISSUER_PIN_VERSION),
+        input.priorKid,
+        input.nextKid,
+        input.pinSha256,
+        input.pinCommit,
+        input.createdAt,
+        exports.ISSUER_PIN_CHAIN_ID,
+    ].join('\n');
+}
+function serializeIssuerPin(doc) {
+    const body = {
+        schema: exports.ISSUER_PIN_SCHEMA,
+        version: exports.ISSUER_PIN_VERSION,
+        chain_id: doc.chain_id,
+        created_at: doc.created_at,
+        jwk: {
+            kty: doc.jwk.kty,
+            crv: doc.jwk.crv,
+            x: doc.jwk.x,
+            y: doc.jwk.y,
+            kid: doc.jwk.kid,
+            alg: 'ES256',
+            use: 'sig',
+        },
+        self_signature: doc.self_signature,
+        control: doc.control,
+    };
+    return `${JSON.stringify(body, null, 2)}\n`;
+}
+/**
+ * URL of the pin blob at one commit. A branch, HEAD, or any non-40-hex
+ * ref returns ISSUER_PIN_MUTABLE_REF and does not build a URL.
+ */
+function issuerPinContentUrl(commit, path = exports.ISSUER_PIN_PATH) {
+    if (!COMMIT_SHA.test(commit) || path !== exports.ISSUER_PIN_PATH) {
+        return { ok: false, code: exports.ISSUER_PIN_MUTABLE_REF };
+    }
+    return {
+        ok: true,
+        url: `https://raw.githubusercontent.com/${exports.ISSUER_PIN_REPO}/${commit}/${path}`,
+    };
+}
+async function loadIssuerPinBytes(ref, fetchImpl) {
+    const url = issuerPinContentUrl(ref.commit, ref.path);
+    if (!url.ok)
+        return { ok: false, code: url.code };
+    const buf = await fetchImpl(url.url);
+    const bytes = Buffer.from(buf).toString('utf8');
+    const expect = ref.sha256.toLowerCase();
+    if (!FILE_SHA.test(expect) || issuerPinFileHash(bytes) !== expect) {
+        return { ok: false, code: exports.ISSUER_PIN_HASH_MISMATCH };
+    }
+    return { ok: true, bytes };
+}
+function singleLine(value) {
+    return value.length > 0 && !/[\r\n]/.test(value);
+}
+function publicKeyOf(jwk) {
+    return (0, node_crypto_1.createPublicKey)({
+        key: { kty: jwk.kty, crv: jwk.crv, x: jwk.x, y: jwk.y },
+        format: 'jwk',
+    });
+}
+function asJwk(value) {
+    return value;
+}
+function readRecord(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return null;
+    return value;
+}
+function readIssuerPinClaim(doc) {
+    const root = readRecord(doc);
+    const pin = readRecord(root?.issuer_key_pin);
+    if (!pin)
+        return { claimed: false, ref: null };
+    const commit = typeof pin.commit === 'string' ? pin.commit : '';
+    const path = typeof pin.path === 'string' ? pin.path : '';
+    const sha256 = typeof pin.sha256 === 'string' ? pin.sha256 : '';
+    const ref = (commit || path || sha256)
+        ? { commit, path: path || exports.ISSUER_PIN_PATH, sha256: sha256.toLowerCase() }
+        : null;
+    return { claimed: true, ref };
+}
+function parsePinDocument(bytes) {
+    let raw;
+    try {
+        raw = JSON.parse(bytes);
+    }
+    catch {
+        return { ok: false, code: exports.ISSUER_PIN_MISMATCH };
+    }
+    const doc = readRecord(raw);
+    if (!doc)
+        return { ok: false, code: exports.ISSUER_PIN_MISMATCH };
+    if (doc.schema !== exports.ISSUER_PIN_SCHEMA || doc.version !== exports.ISSUER_PIN_VERSION) {
+        return { ok: false, code: exports.ISSUER_PIN_MISMATCH };
+    }
+    if (doc.chain_id !== exports.ISSUER_PIN_CHAIN_ID) {
+        return { ok: false, code: exports.ISSUER_PIN_CHAIN_REFUSED };
+    }
+    if (typeof doc.created_at !== 'string' || !CREATED_AT.test(doc.created_at)) {
+        return { ok: false, code: exports.ISSUER_PIN_MISMATCH };
+    }
+    const jwk = readRecord(doc.jwk);
+    if (!jwk || !(0, jws_js_1.isEs256PublicJwk)(asJwk(jwk)))
+        return { ok: false, code: exports.ISSUER_PIN_MISMATCH };
+    if ('d' in jwk)
+        return { ok: false, code: exports.ISSUER_PIN_MISMATCH };
+    const key = asJwk(jwk);
+    const kid = (0, jws_js_1.jwkThumbprint)(key);
+    if (!key.kid || key.kid !== kid || !singleLine(kid))
+        return { ok: false, code: exports.ISSUER_PIN_MISMATCH };
+    const signature = doc.self_signature == null ? null : doc.self_signature;
+    if (signature != null && typeof signature !== 'string')
+        return { ok: false, code: exports.ISSUER_SELF_SIG_INVALID };
+    let control = null;
+    if (doc.control != null) {
+        const row = readRecord(doc.control);
+        if (!row || typeof row.jws !== 'string' || !row.jws) {
+            return { ok: false, code: exports.ISSUER_ROTATION_UNCONTROLLED };
+        }
+        control = { jws: row.jws };
+    }
+    return {
+        ok: true,
+        pin: {
+            schema: exports.ISSUER_PIN_SCHEMA,
+            version: exports.ISSUER_PIN_VERSION,
+            chain_id: exports.ISSUER_PIN_CHAIN_ID,
+            created_at: doc.created_at,
+            jwk: { kty: 'EC', crv: 'P-256', x: key.x, y: key.y, kid, alg: 'ES256', use: 'sig' },
+            self_signature: signature,
+            control,
+        },
+    };
+}
+function verifyRegistrationSignature(pin) {
+    if (pin.self_signature == null || pin.self_signature === '') {
+        return { ok: true, code: null };
+    }
+    const kid = pin.jwk.kid || (0, jws_js_1.jwkThumbprint)(pin.jwk);
+    const message = registrationPreimage({ kid, createdAt: pin.created_at, jwk: pin.jwk });
+    try {
+        const valid = (0, node_crypto_1.verify)('sha256', Buffer.from(message, 'utf8'), { key: publicKeyOf(pin.jwk), dsaEncoding: 'ieee-p1363' }, Buffer.from(pin.self_signature, 'base64url'));
+        return valid ? { ok: true, code: null } : { ok: false, code: exports.ISSUER_SELF_SIG_INVALID };
+    }
+    catch {
+        return { ok: false, code: exports.ISSUER_SELF_SIG_INVALID };
+    }
+}
+function witnessKids(source) {
+    const root = readRecord(source);
+    if (!root)
+        return [];
+    const out = [];
+    if (typeof root.kid === 'string')
+        out.push(root.kid);
+    if (typeof root.issuer_kid === 'string')
+        out.push(root.issuer_kid);
+    const lists = [root.witnesses, root.keys];
+    for (const list of lists) {
+        if (!Array.isArray(list))
+            continue;
+        for (const item of list) {
+            const row = readRecord(item);
+            if (!row)
+                continue;
+            if (typeof row.kid === 'string')
+                out.push(row.kid);
+            const jwk = readRecord(row.jwk) || row;
+            if ((0, jws_js_1.isEs256PublicJwk)(asJwk(jwk)))
+                out.push((0, jws_js_1.jwkThumbprint)(asJwk(jwk)));
+        }
+    }
+    return out;
+}
+function payloadIssuerRootKid(payload) {
+    const issuerRoot = readRecord(payload?.issuer_root);
+    return typeof issuerRoot?.kid === 'string' && issuerRoot.kid ? issuerRoot.kid : null;
+}
+/**
+ * Kids the pin check is allowed to trust.
+ *
+ * A compact `issuer_signature.jws` is verified against the pin key. The kid
+ * comes from that protected header, and a v11 `issuer_root.kid` comes from
+ * the verified payload. Unsigned envelope copies are not a second source of
+ * truth: when they disagree with the signed values the check fails closed.
+ *
+ * When the receipt or the head claims `issuer_key_pin`, unsigned
+ * `issuer_signature.kid`, `issuer_jwk`, and `issuer_root.kid` do not satisfy
+ * the check. A missing JWS fails closed. Stripping the JWS and leaving a
+ * matching unsigned kid is `ISSUER_PIN_MISMATCH`.
+ */
+function receiptKids(receipt, pin, requireVerifiedJws) {
+    const root = readRecord(receipt);
+    const sig = readRecord(root?.issuer_signature);
+    const outerKid = typeof sig?.kid === 'string' && sig.kid ? sig.kid : null;
+    const embedded = readRecord(sig?.issuer_jwk);
+    const embeddedKids = [];
+    if (embedded && (0, jws_js_1.isEs256PublicJwk)(asJwk(embedded))) {
+        embeddedKids.push((0, jws_js_1.jwkThumbprint)(asJwk(embedded)));
+        if (typeof embedded.kid === 'string' && embedded.kid)
+            embeddedKids.push(embedded.kid);
+    }
+    const outerRootKid = payloadIssuerRootKid(root);
+    const pinKid = pin.kid || (0, jws_js_1.jwkThumbprint)(pin);
+    const jws = typeof sig?.jws === 'string' ? sig.jws : '';
+    if (!jws) {
+        const unsigned = [...(outerKid ? [outerKid] : []), ...embeddedKids];
+        if (outerRootKid)
+            unsigned.push(outerRootKid);
+        if (!requireVerifiedJws) {
+            return { ok: true, kids: unsigned, issuerRoot: outerRootKid };
+        }
+        for (const kid of unsigned) {
+            if (kid !== pinKid)
+                return { ok: false, code: exports.ISSUER_PIN_MISMATCH };
+        }
+        return { ok: true, kids: [], issuerRoot: null };
+    }
+    const verified = (0, jws_js_1.verifyIssuerJws)(jws, pin);
+    if (!verified.valid || !verified.payload)
+        return { ok: false, code: exports.ISSUER_PIN_MISMATCH };
+    const header = (0, jws_js_1.readJwsHeader)(jws);
+    const signedKid = typeof header?.kid === 'string' && header.kid ? header.kid : pinKid;
+    if (signedKid !== pinKid)
+        return { ok: false, code: exports.ISSUER_PIN_MISMATCH };
+    const signedRootKid = payloadIssuerRootKid(verified.payload);
+    if (outerKid && outerKid !== signedKid)
+        return { ok: false, code: exports.ISSUER_PIN_MISMATCH };
+    for (const kid of embeddedKids) {
+        if (kid !== signedKid)
+            return { ok: false, code: exports.ISSUER_PIN_MISMATCH };
+    }
+    if (signedRootKid && signedRootKid !== signedKid)
+        return { ok: false, code: exports.ISSUER_PIN_MISMATCH };
+    if (outerRootKid && outerRootKid !== (signedRootKid || signedKid)) {
+        return { ok: false, code: exports.ISSUER_PIN_MISMATCH };
+    }
+    return { ok: true, kids: [signedKid], issuerRoot: signedRootKid };
+}
+function verifyCitizenRotation(input) {
+    const priorKid = input.prior.jwk.kid || '';
+    const nextKid = input.next.jwk.kid || '';
+    // A prior that is not the published specimen is not a control key.
+    // Same-kid copies of an attacker pin do not waive the specimen gate.
+    if (priorKid !== exports.PUBLISHED_ISSUER_PIN_KID) {
+        return { ok: false, code: exports.ISSUER_ROTATION_UNCONTROLLED };
+    }
+    if (nextKid === priorKid)
+        return { ok: true };
+    if (!input.controlJws)
+        return { ok: false, code: exports.ISSUER_ROTATION_UNCONTROLLED };
+    if (!COMMIT_SHA.test(input.nextCommit) || !FILE_SHA.test(input.nextHash)) {
+        return { ok: false, code: exports.ISSUER_PIN_MUTABLE_REF };
+    }
+    const verified = (0, jws_js_1.verifyIssuerJws)(input.controlJws, input.prior.jwk);
+    if (!verified.valid || !verified.payload)
+        return { ok: false, code: exports.ISSUER_ROTATION_UNCONTROLLED };
+    const payload = verified.payload;
+    if (payload.chain_id != null && payload.chain_id !== exports.ISSUER_PIN_CHAIN_ID) {
+        return { ok: false, code: exports.ISSUER_PIN_CHAIN_REFUSED };
+    }
+    const statement = rotationStatement({
+        priorKid,
+        nextKid,
+        pinSha256: input.nextHash,
+        pinCommit: input.nextCommit,
+        createdAt: input.next.created_at,
+    });
+    if (payload.schema !== exports.CITIZEN_FREEZE_SCHEMA)
+        return { ok: false, code: exports.ISSUER_ROTATION_UNCONTROLLED };
+    if (payload.purpose !== exports.CITIZEN_FREEZE_PURPOSE)
+        return { ok: false, code: exports.ISSUER_ROTATION_UNCONTROLLED };
+    if (payload.chain_id !== exports.ISSUER_PIN_CHAIN_ID)
+        return { ok: false, code: exports.ISSUER_PIN_CHAIN_REFUSED };
+    if (payload.prior_kid !== priorKid || payload.next_kid !== nextKid) {
+        return { ok: false, code: exports.ISSUER_ROTATION_UNCONTROLLED };
+    }
+    if (payload.pin_sha256 !== input.nextHash || payload.pin_commit !== input.nextCommit) {
+        return { ok: false, code: exports.ISSUER_ROTATION_UNCONTROLLED };
+    }
+    if (payload.statement !== statement)
+        return { ok: false, code: exports.ISSUER_ROTATION_UNCONTROLLED };
+    return { ok: true };
+}
+function refOk(ref) {
+    if (!ref)
+        return { ok: false, code: exports.ISSUER_PIN_DOWNGRADE };
+    const commit = typeof ref.commit === 'string' ? ref.commit.trim().toLowerCase() : '';
+    const sha256 = typeof ref.sha256 === 'string' ? ref.sha256.trim().toLowerCase() : '';
+    if (!COMMIT_SHA.test(commit) || ref.path !== exports.ISSUER_PIN_PATH) {
+        return { ok: false, code: exports.ISSUER_PIN_MUTABLE_REF };
+    }
+    if (!FILE_SHA.test(sha256))
+        return { ok: false, code: exports.ISSUER_PIN_HASH_MISMATCH };
+    return { ok: true, ref: { commit, path: ref.path, sha256 } };
+}
+function namedPinField(value) {
+    if (typeof value !== 'string')
+        return null;
+    const trimmed = value.trim();
+    return trimmed ? trimmed : null;
+}
+function pinIdentity(ref) {
+    return {
+        commit: namedPinField(ref.commit)?.toLowerCase() ?? null,
+        path: namedPinField(ref.path),
+        sha256: namedPinField(ref.sha256)?.toLowerCase() ?? null,
+    };
+}
+function sourceIsComplete(field) {
+    return !!field.commit && !!field.sha256;
+}
+/**
+ * Agree one named field. An empty side does not fill the other and does not
+ * disagree with it.
+ */
+function agreeNamed(current, next) {
+    if (!next)
+        return { ok: true, value: current };
+    if (current && current !== next)
+        return { ok: false, code: exports.ISSUER_PIN_MISMATCH };
+    return { ok: true, value: next };
+}
+function mergePinFields(fields) {
+    let commit = null;
+    let path = null;
+    let sha256 = null;
+    for (const field of fields) {
+        const nextCommit = agreeNamed(commit, field.commit);
+        if (!nextCommit.ok)
+            return nextCommit;
+        commit = nextCommit.value;
+        const nextPath = agreeNamed(path, field.path);
+        if (!nextPath.ok)
+            return nextPath;
+        path = nextPath.value;
+        const nextHash = agreeNamed(sha256, field.sha256);
+        if (!nextHash.ok)
+            return nextHash;
+        sha256 = nextHash.value;
+    }
+    return { ok: true, field: { commit, path, sha256 } };
+}
+/**
+ * Every pin ref the receipt, the head, and the caller supplied.
+ *
+ * A source fills a blank commit or hash only when that source already names
+ * both. A commit from one claim and a hash from another are not one pin.
+ * Two sources that name different commits or hashes fail closed. Commit hex
+ * is compared in lowercase, the same way as the file hash.
+ */
+function agreedPinRef(refs) {
+    const present = refs.filter((item) => !!item);
+    if (present.length === 0)
+        return { ok: false, code: exports.ISSUER_PIN_DOWNGRADE };
+    const fields = present.map(pinIdentity);
+    const complete = fields.filter(sourceIsComplete);
+    const partial = fields.filter((field) => !sourceIsComplete(field));
+    if (complete.length === 0) {
+        const merged = mergePinFields(fields);
+        if (!merged.ok)
+            return merged;
+        const checked = refOk({
+            commit: merged.field.commit || '',
+            path: merged.field.path || exports.ISSUER_PIN_PATH,
+            sha256: merged.field.sha256 || '',
+        });
+        if (!checked.ok)
+            return checked;
+        return { ok: false, code: exports.ISSUER_PIN_DOWNGRADE };
+    }
+    const merged = mergePinFields(complete);
+    if (!merged.ok)
+        return merged;
+    const checked = refOk({
+        commit: merged.field.commit || '',
+        path: merged.field.path || exports.ISSUER_PIN_PATH,
+        sha256: merged.field.sha256 || '',
+    });
+    if (!checked.ok)
+        return checked;
+    for (const field of partial) {
+        if (field.commit && field.commit !== checked.ref.commit)
+            return { ok: false, code: exports.ISSUER_PIN_MISMATCH };
+        if (field.path && field.path !== checked.ref.path)
+            return { ok: false, code: exports.ISSUER_PIN_MISMATCH };
+        if (field.sha256 && field.sha256 !== checked.ref.sha256)
+            return { ok: false, code: exports.ISSUER_PIN_MISMATCH };
+    }
+    return checked;
+}
+/**
+ * Compare a receipt's issuer key to the pinned file, and to issuer_root
+ * and a /api/witnesses document when those sources are present.
+ * A receipt or head that claims a pinned era and omits the pin fails closed.
+ * No claim and no explicit pin leaves the caller on the previous path.
+ */
+function assessIssuerPin(input) {
+    const receiptClaim = readIssuerPinClaim(input.receipt);
+    const headClaim = readIssuerPinClaim(input.head);
+    const claimed = receiptClaim.claimed || headClaim.claimed;
+    const required = input.required === true || claimed;
+    if (!required && (input.pinBytes == null || input.pinBytes === '')) {
+        return { checked: false, ok: true, code: null };
+    }
+    if (input.pinBytes == null || input.pinBytes === '') {
+        return { checked: true, ok: false, code: exports.ISSUER_PIN_DOWNGRADE };
+    }
+    const checkedRef = agreedPinRef([input.ref, receiptClaim.ref, headClaim.ref]);
+    if (!checkedRef.ok)
+        return { checked: true, ok: false, code: checkedRef.code };
+    if (issuerPinFileHash(input.pinBytes) !== checkedRef.ref.sha256) {
+        return { checked: true, ok: false, code: exports.ISSUER_PIN_HASH_MISMATCH };
+    }
+    const parsed = parsePinDocument(input.pinBytes);
+    if (!parsed.ok)
+        return { checked: true, ok: false, code: parsed.code };
+    const pin = parsed.pin;
+    if (input.sigBytes != null && input.sigBytes.trim() !== '') {
+        if (pin.self_signature == null || input.sigBytes.trim() !== pin.self_signature) {
+            return { checked: true, ok: false, code: exports.ISSUER_SELF_SIG_INVALID };
+        }
+    }
+    const signature = verifyRegistrationSignature(pin);
+    if (!signature.ok)
+        return { checked: true, ok: false, code: signature.code };
+    const pinKid = pin.jwk.kid || (0, jws_js_1.jwkThumbprint)(pin.jwk);
+    // Signed kids are checked before the specimen gate so a JWS that does not
+    // verify, or a signed kid that disagrees with the envelope, is
+    // ISSUER_PIN_MISMATCH rather than a rotation error.
+    const fromReceipt = receiptKids(input.receipt, pin.jwk, claimed);
+    if (!fromReceipt.ok)
+        return { checked: true, ok: false, code: fromReceipt.code };
+    const fromHead = receiptKids(input.head, pin.jwk, claimed);
+    if (!fromHead.ok)
+        return { checked: true, ok: false, code: fromHead.code };
+    const signedKids = [...fromReceipt.kids, ...fromHead.kids];
+    if (claimed && signedKids.length === 0) {
+        return { checked: true, ok: false, code: exports.ISSUER_PIN_MISMATCH };
+    }
+    const compared = [...signedKids];
+    if (fromReceipt.issuerRoot)
+        compared.push(fromReceipt.issuerRoot);
+    if (fromHead.issuerRoot)
+        compared.push(fromHead.issuerRoot);
+    if (input.witnesses !== undefined)
+        compared.push(...witnessKids(input.witnesses));
+    if (required && compared.length === 0) {
+        return { checked: true, ok: false, code: exports.ISSUER_PIN_MISMATCH };
+    }
+    for (const kid of compared) {
+        if (kid !== pinKid)
+            return { checked: true, ok: false, code: exports.ISSUER_PIN_MISMATCH };
+    }
+    let rotatedFromSpecimen = false;
+    if (input.priorPinBytes != null && input.priorPinBytes !== '') {
+        if (!input.priorRef)
+            return { checked: true, ok: false, code: exports.ISSUER_PIN_MUTABLE_REF };
+        const priorChecked = refOk(input.priorRef);
+        if (!priorChecked.ok)
+            return { checked: true, ok: false, code: priorChecked.code };
+        if (issuerPinFileHash(input.priorPinBytes) !== priorChecked.ref.sha256) {
+            return { checked: true, ok: false, code: exports.ISSUER_PIN_HASH_MISMATCH };
+        }
+        const prior = parsePinDocument(input.priorPinBytes);
+        if (!prior.ok)
+            return { checked: true, ok: false, code: prior.code };
+        const control = input.controlJws || pin.control?.jws || null;
+        const rotation = verifyCitizenRotation({
+            prior: prior.pin,
+            next: pin,
+            nextHash: checkedRef.ref.sha256,
+            nextCommit: checkedRef.ref.commit,
+            controlJws: control,
+        });
+        if (!rotation.ok)
+            return { checked: true, ok: false, code: rotation.code };
+        rotatedFromSpecimen = (prior.pin.jwk.kid || '') !== (pin.jwk.kid || '');
+    }
+    else if (pin.control) {
+        return { checked: true, ok: false, code: exports.ISSUER_ROTATION_UNCONTROLLED };
+    }
+    if (pinKid !== exports.PUBLISHED_ISSUER_PIN_KID && !rotatedFromSpecimen) {
+        return { checked: true, ok: false, code: exports.ISSUER_ROTATION_UNCONTROLLED };
+    }
+    return { checked: true, ok: true, code: null };
+}
+//# sourceMappingURL=issuer-pin.js.map

package/dist/issuer-pin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"issuer-pin.js","sourceRoot":"","sources":["../src/issuer-pin.ts"],"names":[],"mappings":";;;AAkEA,8CAEC;AAED,gDAEC;AAOD,oDAQC;AAED,8CAiBC;AAED,gDAmBC;AAMD,kDAWC;AAED,gDAaC;AAsBD,gDAWC;AAkDD,kEAiBC;AAsFD,sDA2CC;AAyID,0CA8EC;AA3lBD;;;;;;;;;;;;GAYG;AACH,6CAAkF;AAClF,qCAA0G;AAE7F,QAAA,2BAA2B,GAAG,gCAAgC,CAAC;AAC/D,QAAA,uBAAuB,GAAG,4BAA4B,CAAC;AACvD,QAAA,kBAAkB,GAAG,CAAC,CAAC;AACvB,QAAA,iBAAiB,GAAG,2BAA2B,CAAC;AAChD,QAAA,eAAe,GAAG,iCAAiC,CAAC;AACpD,QAAA,mBAAmB,GAAG,cAAc,CAAC;AACrC,QAAA,qBAAqB,GAAG,mBAAmB,CAAC;AAC5C,QAAA,sBAAsB,GAAG,oBAAoB,CAAC;AAC9C,QAAA,eAAe,GAAG,mBAAmB,CAAC;AAEnD;;;GAGG;AACU,QAAA,wBAAwB,GAAG,6CAA6C,CAAC;AAEzE,QAAA,mBAAmB,GAAG,qBAAqB,CAAC;AAC5C,QAAA,wBAAwB,GAAG,0BAA0B,CAAC;AACtD,QAAA,uBAAuB,GAAG,yBAAyB,CAAC;AACpD,QAAA,oBAAoB,GAAG,sBAAsB,CAAC;AAC9C,QAAA,sBAAsB,GAAG,wBAAwB,CAAC;AAClD,QAAA,4BAA4B,GAAG,8BAA8B,CAAC;AAC9D,QAAA,wBAAwB,GAAG,0BAA0B,CAAC;AAwBnE,MAAM,UAAU,GAAG,gBAAgB,CAAC;AACpC,MAAM,QAAQ,GAAG,gBAAgB,CAAC;AAClC,MAAM,UAAU,GAAG,oDAAoD,CAAC;AAExE,SAAgB,iBAAiB,CAAC,KAAa;IAC7C,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/E,CAAC;AAED,SAAgB,kBAAkB,CAAC,GAA8C;IAC/E,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED;;;;GAIG;AACH,SAAgB,oBAAoB,CAAC,KAAwD;IAC3F,OAAO;QACL,mCAA2B;QAC3B,MAAM,CAAC,0BAAkB,CAAC;QAC1B,KAAK,CAAC,GAAG;QACT,KAAK,CAAC,SAAS;QACf,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC;KAC9B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAgB,iBAAiB,CAAC,KAMjC;IACC,OAAO;QACL,+BAAuB;QACvB,MAAM,CAAC,0BAAkB,CAAC;QAC1B,KAAK,CAAC,QAAQ;QACd,KAAK,CAAC,OAAO;QACb,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,SAAS;QACf,2BAAmB;KACpB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAgB,kBAAkB,CAAC,GAAiB;IAClD,MAAM,IAAI,GAAG;QACX,MAAM,EAAE,yBAAiB;QACzB,OAAO,EAAE,0BAAkB;QAC3B,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,GAAG,EAAE;YACH,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG;YAChB,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG;YAChB,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YACZ,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YACZ,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO;YACZ,GAAG,EAAE,KAAK;SACX;QACD,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,OAAO,EAAE,GAAG,CAAC,OAAO;KACrB,CAAC;IACF,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CACjC,MAAc,EACd,IAAI,GAAG,uBAAe;IAEtB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK,uBAAe,EAAE,CAAC;QACzD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,8BAAsB,EAAE,CAAC;IACrD,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,GAAG,EAAE,qCAAqC,uBAAe,IAAI,MAAM,IAAI,IAAI,EAAE;KAC9E,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,kBAAkB,CACtC,GAAiB,EACjB,SAA+C;IAE/C,MAAM,GAAG,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;IAClD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;IACxC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,iBAAiB,CAAC,KAAK,CAAC,KAAK,MAAM,EAAE,CAAC;QAClE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gCAAwB,EAAE,CAAC;IACvD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,WAAW,CAAC,GAAa;IAChC,OAAO,IAAA,6BAAe,EAAC;QACrB,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE;QACvD,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;AACL,CAAC;AAED,SAAS,KAAK,CAAC,KAAc;IAC3B,OAAO,KAA4B,CAAC;AACtC,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAgB,kBAAkB,CAAC,GAAY;IAC7C,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAC7C,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IAC/C,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC;QACpC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,IAAI,uBAAe,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE;QACzE,CAAC,CAAC,IAAI,CAAC;IACT,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,2BAAmB,EAAE,CAAC;IAClD,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,2BAAmB,EAAE,CAAC;IAC1D,IAAI,GAAG,CAAC,MAAM,KAAK,yBAAiB,IAAI,GAAG,CAAC,OAAO,KAAK,0BAAkB,EAAE,CAAC;QAC3E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,2BAAmB,EAAE,CAAC;IAClD,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,2BAAmB,EAAE,CAAC;QACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gCAAwB,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,2BAAmB,EAAE,CAAC;IAClD,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAA,yBAAgB,EAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,2BAAmB,EAAE,CAAC;IAC3F,IAAI,GAAG,IAAI,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,2BAAmB,EAAE,CAAC;IAChE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACvB,MAAM,GAAG,GAAG,IAAA,sBAAa,EAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,2BAAmB,EAAE,CAAC;IACrG,MAAM,SAAS,GAAG,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;IACzE,IAAI,SAAS,IAAI,IAAI,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,+BAAuB,EAAE,CAAC;IAC5G,IAAI,OAAO,GAA2B,IAAI,CAAC;IAC3C,IAAI,GAAG,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oCAA4B,EAAE,CAAC;QAC3D,CAAC;QACD,OAAO,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,GAAG,EAAE;YACH,MAAM,EAAE,yBAAiB;YACzB,OAAO,EAAE,0BAAkB;YAC3B,QAAQ,EAAE,2BAAmB;YAC7B,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE;YACnF,cAAc,EAAE,SAAS;YACzB,OAAO;SACR;KACF,CAAC;AACJ,CAAC;AAED,SAAgB,2BAA2B,CAAC,GAAiB;IAC3D,IAAI,GAAG,CAAC,cAAc,IAAI,IAAI,IAAI,GAAG,CAAC,cAAc,KAAK,EAAE,EAAE,CAAC;QAC5D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAClC,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,IAAA,sBAAa,EAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,oBAAoB,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IACvF,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAA,oBAAM,EAClB,QAAQ,EACR,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAC5B,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,EACxD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAC7C,CAAC;QACF,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,+BAAuB,EAAE,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,+BAAuB,EAAE,CAAC;IACtD,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,MAAe;IAClC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ;QAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrD,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACnD,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC;YACvC,IAAI,IAAA,yBAAgB,EAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,IAAA,sBAAa,EAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAmD;IAC/E,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACpD,OAAO,OAAO,UAAU,EAAE,GAAG,KAAK,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACvF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,WAAW,CAClB,OAAgB,EAChB,GAAa,EACb,kBAA2B;IAE3B,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,OAAO,GAAG,EAAE,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1E,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,QAAQ,IAAI,IAAA,yBAAgB,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAClD,YAAY,CAAC,IAAI,CAAC,IAAA,sBAAa,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAClD,IAAI,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ,IAAI,QAAQ,CAAC,GAAG;YAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,YAAY,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,IAAA,sBAAa,EAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,OAAO,GAAG,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,YAAY,CAAC,CAAC;QACpE,IAAI,YAAY;YAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;QAChE,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,IAAI,GAAG,KAAK,MAAM;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,2BAAmB,EAAE,CAAC;QACtE,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAClD,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,wBAAe,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,2BAAmB,EAAE,CAAC;IAC1F,MAAM,MAAM,GAAG,IAAA,sBAAa,EAAC,GAAG,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,OAAO,MAAM,EAAE,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;IACtF,IAAI,SAAS,KAAK,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,2BAAmB,EAAE,CAAC;IAC1E,MAAM,aAAa,GAAG,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7D,IAAI,QAAQ,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,2BAAmB,EAAE,CAAC;IACxF,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,2BAAmB,EAAE,CAAC;IACzE,CAAC;IACD,IAAI,aAAa,IAAI,aAAa,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,2BAAmB,EAAE,CAAC;IAClG,IAAI,YAAY,IAAI,YAAY,KAAK,CAAC,aAAa,IAAI,SAAS,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,2BAAmB,EAAE,CAAC;IAClD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC;AACpE,CAAC;AAED,SAAgB,qBAAqB,CAAC,KAMrC;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;IACzC,mEAAmE;IACnE,qEAAqE;IACrE,IAAI,QAAQ,KAAK,gCAAwB,EAAE,CAAC;QAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oCAA4B,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,KAAK,CAAC,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oCAA4B,EAAE,CAAC;IAChF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,8BAAsB,EAAE,CAAC;IACrD,CAAC;IACD,MAAM,QAAQ,GAAG,IAAA,wBAAe,EAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpE,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oCAA4B,EAAE,CAAC;IACnG,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACjC,IAAI,OAAO,CAAC,QAAQ,IAAI,IAAI,IAAI,OAAO,CAAC,QAAQ,KAAK,2BAAmB,EAAE,CAAC;QACzE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gCAAwB,EAAE,CAAC;IACvD,CAAC;IACD,MAAM,SAAS,GAAG,iBAAiB,CAAC;QAClC,QAAQ;QACR,OAAO;QACP,SAAS,EAAE,KAAK,CAAC,QAAQ;QACzB,SAAS,EAAE,KAAK,CAAC,UAAU;QAC3B,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU;KACjC,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,MAAM,KAAK,6BAAqB;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oCAA4B,EAAE,CAAC;IACvG,IAAI,OAAO,CAAC,OAAO,KAAK,8BAAsB;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oCAA4B,EAAE,CAAC;IACzG,IAAI,OAAO,CAAC,QAAQ,KAAK,2BAAmB;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gCAAwB,EAAE,CAAC;IACnG,IAAI,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oCAA4B,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;QACrF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oCAA4B,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oCAA4B,EAAE,CAAC;IAC9F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAoBD,SAAS,KAAK,CAAC,GAAoC;IACjD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,4BAAoB,EAAE,CAAC;IAC3D,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACrF,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACrF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,uBAAe,EAAE,CAAC;QAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,8BAAsB,EAAE,CAAC;IACrD,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gCAAwB,EAAE,CAAC;IACjF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,aAAa,CAAC,KAAyB;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAClC,CAAC;AAQD,SAAS,WAAW,CAAC,GAAiB;IACpC,OAAO;QACL,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI;QACxD,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;QAC7B,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI;KACzD,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAkB;IAC1C,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CACjB,OAAsB,EACtB,IAAmB;IAEnB,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC/C,IAAI,OAAO,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,2BAAmB,EAAE,CAAC;IACjF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,cAAc,CACrB,MAAqB;IAErB,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,OAAO,UAAU,CAAC;QACtC,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC;QAC1B,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,QAAQ,CAAC;QAClC,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC;QACtB,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,QAAQ,CAAC;QAClC,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,YAAY,CACnB,IAA4C;IAE5C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAwB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACpE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,4BAAoB,EAAE,CAAC;IAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,MAAM,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE;YACjC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,uBAAe;YAC1C,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC;QAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,4BAAoB,EAAE,CAAC;IACnD,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAC9B,MAAM,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE;QACjC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,uBAAe;QAC1C,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE;KAClC,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,2BAAmB,EAAE,CAAC;QACzG,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,GAAG,CAAC,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,2BAAmB,EAAE,CAAC;QACnG,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,2BAAmB,EAAE,CAAC;IAC3G,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,eAAe,CAAC,KAA2B;IACzD,MAAM,YAAY,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO,CAAC;IAC1D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,OAAO,CAAC;IACpD,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,IAAI,KAAK,CAAC,QAAQ,KAAK,EAAE,CAAC,EAAE,CAAC;QACnE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAClD,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAI,IAAI,KAAK,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,4BAAoB,EAAE,CAAC;IAClE,CAAC;IACD,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9E,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;IAC/E,IAAI,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAChE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gCAAwB,EAAE,CAAC;IACtE,CAAC;IACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IACvE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IACvB,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3D,IAAI,GAAG,CAAC,cAAc,IAAI,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,cAAc,EAAE,CAAC;YAC/E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,+BAAuB,EAAE,CAAC;QACrE,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC;IAE7E,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,IAAA,sBAAa,EAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrD,0EAA0E;IAC1E,+DAA+D;IAC/D,oDAAoD;IACpD,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACjE,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC;IACjF,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC3E,MAAM,UAAU,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3D,IAAI,OAAO,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,2BAAmB,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;IACjC,IAAI,WAAW,CAAC,UAAU;QAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IAClE,IAAI,QAAQ,CAAC,UAAU;QAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IAClF,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,2BAAmB,EAAE,CAAC;IACjE,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,GAAG,KAAK,MAAM;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,2BAAmB,EAAE,CAAC;IACrF,CAAC;IAED,IAAI,mBAAmB,GAAG,KAAK,CAAC;IAChC,IAAI,KAAK,CAAC,aAAa,IAAI,IAAI,IAAI,KAAK,CAAC,aAAa,KAAK,EAAE,EAAE,CAAC;QAC9D,IAAI,CAAC,KAAK,CAAC,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,8BAAsB,EAAE,CAAC;QACvF,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,YAAY,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC;QACnF,IAAI,iBAAiB,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YACvE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gCAAwB,EAAE,CAAC;QACtE,CAAC;QACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QACrE,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC;QAC7D,MAAM,QAAQ,GAAG,qBAAqB,CAAC;YACrC,KAAK,EAAE,KAAK,CAAC,GAAG;YAChB,IAAI,EAAE,GAAG;YACT,QAAQ,EAAE,UAAU,CAAC,GAAG,CAAC,MAAM;YAC/B,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,MAAM;YACjC,UAAU,EAAE,OAAO;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC3E,mBAAmB,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;SAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QACvB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oCAA4B,EAAE,CAAC;IAC1E,CAAC;IAED,IAAI,MAAM,KAAK,gCAAwB,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAChE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oCAA4B,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACjD,CAAC"}

package/dist/preimage.d.ts

@@ -2,6 +2,17 @@ export interface PreimageLeaf {
     preimage_utf8?: string;
     preimage_hex?: string;
 }
+export interface AuditSibling {
+    hash?: string;
+    /** Ignored. Index and tree size choose the side. */
+    position?: string;
+}
+export interface AuditPath {
+    index?: number;
+    tree_size?: number;
+    siblings?: AuditSibling[];
+    root?: string;
+}
 export interface PreimageEntry {
     field?: string;
     alg?: string;
@@ -10,7 +21,15 @@ export interface PreimageEntry {
     preimage_hex?: string;
     hash?: string;
     merkle?: string;
+    /** Old public shape: every leaf body in the prefix. Still accepted. */
     leaves?: PreimageLeaf[];
+    /** This receipt's leaf body. Other leaves are not on this object. */
+    leaf?: PreimageLeaf & {
+        index?: number;
+        task_id?: string;
+        kind?: string;
+    };
+    audit_path?: AuditPath;
     url?: string;
 }
 export interface PreimageBlock {
@@ -35,6 +54,16 @@ export interface PreimageCheck {
         reason?: string;
     }[];
 }
+/** The audit path folds to this receipt's leaf. A different leaf in the same prefix is not this receipt. */
+export declare const LEAF_NOT_BOUND = "leaf_not_bound";
+/**
+ * Bind an audit path to this receipt. Returns `leaf_not_bound` when any
+ * check fails, including when the agreed row hash is null, empty, or
+ * disagreed, or the leaf encoding does not canonicalize to `task_id|row_hash`.
+ * Inclusion leaf hash and leaf index are checked only when that field is present.
+ * Inclusion tree size is not compared: the witness can cover a longer log.
+ */
+export declare function auditLeafBinding(receipt: Record<string, unknown>, entry: PreimageEntry): string | null;
 /**
  * Fields a stranger is expected to recompute when they are present.
  * Coverage and tree_head_hash count only when the issuer published a preimage.

package/dist/preimage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"preimage.d.ts","sourceRoot":"","sources":["../src/preimage.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,YAAY;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACvC,gBAAgB,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC/E,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/B;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC3D;AAkGD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,CAUjF;AAmBD,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,EACE,gBAAwB,EACxB,SAA4B,EAC5B,YAAkC,GACnC,GAAE;IACD,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B,GACL,OAAO,CAAC,aAAa,CAAC,CAoDxB"}
+{"version":3,"file":"preimage.d.ts","sourceRoot":"","sources":["../src/preimage.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,YAAY;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;IACxB,qEAAqE;IACrE,IAAI,CAAC,EAAE,YAAY,GAAG;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1E,UAAU,CAAC,EAAE,SAAS,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACvC,gBAAgB,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC/E,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/B;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC3D;AA6DD,4GAA4G;AAC5G,eAAO,MAAM,cAAc,mBAAmB,CAAC;AAqE/C;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CA6BtG;AAyED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,CAUjF;AAmBD,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,EACE,gBAAwB,EACxB,SAA4B,EAC5B,YAAkC,GACnC,GAAE;IACD,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B,GACL,OAAO,CAAC,aAAa,CAAC,CA4DxB"}