@xfuel/verify 0.3.1 → 0.3.4

package/dist/row-hash.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.boundRowHash = boundRowHash;
+/**
+ * Leaf input for `task_id|row_hash`.
+ * Same order as verifyAnchoredRoot: top-level row_hash, then book_chain, then
+ * the inclusion or carry document. One source is enough. Two or three that
+ * differ fail closed. The value used for the leaf is the one they agree on.
+ * No string at all is `row: null`. An empty string is a present source.
+ */
+function boundRowHash(receipt, extra) {
+    const present = [];
+    if (typeof receipt.row_hash === 'string')
+        present.push(receipt.row_hash);
+    if (typeof receipt.book_chain?.row_hash === 'string')
+        present.push(receipt.book_chain.row_hash);
+    if (typeof extra?.row_hash === 'string')
+        present.push(extra.row_hash);
+    if (present.length === 0)
+        return { ok: true, row: null };
+    const agreed = present[0];
+    if (present.some((value) => value !== agreed))
+        return { ok: false, reason: 'row_hash_mismatch' };
+    return { ok: true, row: agreed };
+}
+//# sourceMappingURL=row-hash.js.map

package/dist/row-hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"row-hash.js","sourceRoot":"","sources":["../src/row-hash.ts"],"names":[],"mappings":";;AAOA,oCAYC;AAnBD;;;;;;GAMG;AACH,SAAgB,YAAY,CAC1B,OAAuF,EACvF,KAA2C;IAE3C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzE,IAAI,OAAO,OAAO,CAAC,UAAU,EAAE,QAAQ,KAAK,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAChG,IAAI,OAAO,KAAK,EAAE,QAAQ,KAAK,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACzD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,MAAM,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACjG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AACnC,CAAC"}

package/dist/shell.d.ts

@@ -0,0 +1,65 @@
+export declare const SHELL_SCHEMA = "chit402.receipt_shell.v1";
+export declare const INCLUDED_SHELL_LINE = "INCLUDED_SHELL: signature requires owner view";
+export declare function isReceiptShell(doc: unknown): doc is Record<string, unknown>;
+export declare function decodeJwsPayload(jws: unknown): Record<string, unknown> | null;
+/** Project the public shell from a holder receipt. Leaf proof is not invented. */
+export declare function shellFromHolder(receipt: Record<string, unknown>): Record<string, unknown>;
+/**
+ * The owner view returns `{ jws, salt, private_fields }`. A saved holder
+ * receipt has `issuer_signature`. Either can be the `--jws` file.
+ * An `issuer_jwk` on the owner-view body is ignored. Trust is a pinned
+ * kid or a JWKS entry, not a key the response carries.
+ */
+export declare function holderDocumentFromOwnerView(doc: Record<string, unknown> | string): Record<string, unknown>;
+export interface ShellHolderCheck {
+    signatureValid: boolean;
+    keyTrusted: boolean;
+    signatureReason?: string | null;
+    inclusionSupplied: boolean;
+    inclusionOk: boolean;
+    inclusionReason?: string | null;
+    paymentRef?: string | null;
+    bindingExpected?: boolean;
+    bindingMatches?: boolean;
+    shellLeaf?: string | null;
+    provedLeaf?: string | null;
+    /** The supplied head carries an issuer JWS (checked by verifyReceipt). */
+    headSigned?: boolean;
+}
+/**
+ * VERIFIED requires a trusted issuer key, a passing inclusion proof, and a
+ * signed payment. A shell alone, a missing proof, or a key that only
+ * verifies because it is embedded in the holder is not VERIFIED.
+ */
+export declare function shellHolderVerdict(check: ShellHolderCheck): {
+    verified: boolean;
+    reason: string | null;
+};
+/**
+ * Expected shell from the signed JWS claims only. Outer holder fields
+ * (payment.settled_amount, payment.network, payment_meta, task_id) are
+ * not signed and are not used, so they cannot ride along under VERIFIED.
+ */
+export declare function signedShellFromHolder(holder: Record<string, unknown> | string): Record<string, unknown>;
+export declare function compareShellToJws(shell: Record<string, unknown>, holder: Record<string, unknown> | string): {
+    ok: boolean;
+    field?: string;
+};
+/**
+ * v11: body_commitment = HMAC-SHA256(salt, raw body),
+ * request_digest = SHA-256 of the JCS object
+ * {body_commitment, idempotency_key, method, nonce, path}.
+ */
+export declare function openV11Commitment(input: {
+    payload: Record<string, unknown> | null;
+    saltHex: string;
+    body: Buffer | string;
+    method?: string;
+    path?: string;
+    nonce?: string;
+    idempotencyKey?: string;
+}): {
+    ok: boolean;
+    reason?: string;
+};
+//# sourceMappingURL=shell.d.ts.map

package/dist/shell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../src/shell.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,YAAY,6BAA6B,CAAC;AACvD,eAAO,MAAM,mBAAmB,kDAAkD,CAAC;AAEnF,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAE3E;AAoBD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAS7E;AAuBD,kFAAkF;AAClF,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqCzF;AAcD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAoC1G;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,OAAO,CAAC;IACxB,UAAU,EAAE,OAAO,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,EAAE,OAAO,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,0EAA0E;IAC1E,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,gBAAgB,GAAG;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAyBxG;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMvG;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAc3I;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAiBnC"}

package/dist/shell.js

@@ -0,0 +1,268 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.INCLUDED_SHELL_LINE = exports.SHELL_SCHEMA = void 0;
+exports.isReceiptShell = isReceiptShell;
+exports.decodeJwsPayload = decodeJwsPayload;
+exports.shellFromHolder = shellFromHolder;
+exports.holderDocumentFromOwnerView = holderDocumentFromOwnerView;
+exports.shellHolderVerdict = shellHolderVerdict;
+exports.signedShellFromHolder = signedShellFromHolder;
+exports.compareShellToJws = compareShellToJws;
+exports.openV11Commitment = openV11Commitment;
+/**
+ * Public receipt shell verdicts.
+ * A shell is inclusion and payment facts without the holder signature.
+ * INCLUDED_SHELL is never VERIFIED. A gated URL without the holder JWS
+ * is owner_proof_required.
+ * `--jws` is VERIFIED only when the holder key is trusted, inclusion
+ * passed, and the signed payment is present. The key inside the holder
+ * is not a trust root.
+ */
+const node_crypto_1 = __importDefault(require("node:crypto"));
+exports.SHELL_SCHEMA = 'chit402.receipt_shell.v1';
+exports.INCLUDED_SHELL_LINE = 'INCLUDED_SHELL: signature requires owner view';
+function isReceiptShell(doc) {
+    return !!doc && typeof doc === 'object' && doc.schema === exports.SHELL_SCHEMA;
+}
+function jcs(value) {
+    return JSON.stringify(canonicalize(value));
+}
+function canonicalize(value) {
+    if (Array.isArray(value))
+        return value.map(canonicalize);
+    if (value && typeof value === 'object') {
+        const out = {};
+        for (const key of Object.keys(value).sort()) {
+            const child = value[key];
+            if (child === undefined)
+                continue;
+            out[key] = canonicalize(child);
+        }
+        return out;
+    }
+    return value;
+}
+function decodeJwsPayload(jws) {
+    if (typeof jws !== 'string')
+        return null;
+    const parts = jws.split('.');
+    if (parts.length !== 3)
+        return null;
+    try {
+        return JSON.parse(Buffer.from(parts[1], 'base64url').toString('utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+function minuteIso(value) {
+    if (value == null || value === '')
+        return null;
+    const ms = typeof value === 'number'
+        ? (value < 1e12 ? value * 1000 : value)
+        : Date.parse(String(value));
+    if (!Number.isFinite(ms))
+        return null;
+    const date = new Date(ms);
+    date.setUTCSeconds(0, 0);
+    return date.toISOString();
+}
+function paymentOf(claims, receipt) {
+    const payment = (claims?.payment && typeof claims.payment === 'object')
+        ? claims.payment
+        : {};
+    const outer = (receipt.payment && typeof receipt.payment === 'object')
+        ? receipt.payment
+        : {};
+    return { ...outer, ...payment };
+}
+/** Project the public shell from a holder receipt. Leaf proof is not invented. */
+function shellFromHolder(receipt) {
+    const issuer = (receipt.issuer_signature && typeof receipt.issuer_signature === 'object')
+        ? receipt.issuer_signature
+        : {};
+    const claims = decodeJwsPayload(issuer.jws) || {};
+    const payment = paymentOf(claims, receipt);
+    const ref = String(payment.ref || '');
+    const prefix = ref.includes(':') ? ref.slice(0, ref.indexOf(':')) : '';
+    const network = String(payment.network || receipt.payment_meta?.network || prefix || '');
+    const tx = ref.includes(':') ? ref.slice(ref.indexOf(':') + 1) : (ref || null);
+    const receiptId = (receipt.task_id || claims.task_id || receipt.receipt_id || null);
+    const gross = payment.gross_amount ?? null;
+    const settled = payment.settled_amount ?? null;
+    const inclusion = (receipt.inclusion && typeof receipt.inclusion === 'object')
+        ? receipt.inclusion
+        : null;
+    return {
+        schema: exports.SHELL_SCHEMA,
+        unsigned: true,
+        receipt_id: receiptId,
+        task_id: receiptId,
+        payload_version: claims.payload_version ?? issuer.payload_version ?? null,
+        asset: payment.asset || 'USDC',
+        chain: network || null,
+        pay_to: payment.payee ?? null,
+        amount_gross: gross == null ? null : String(gross),
+        amount_settled: settled == null ? null : String(settled),
+        payment_tx: tx,
+        issued_at: minuteIso(claims.iat ?? receipt.created_at ?? receipt.issued_at ?? null),
+        inclusion: {
+            leaf_hash: inclusion?.leaf || inclusion?.leaf_hash || null,
+            proof: inclusion?.proof ?? null,
+            signed_head: inclusion?.root
+                ? { root: inclusion.root, tree_size: inclusion.tree_size ?? null, signature: null }
+                : null,
+        },
+    };
+}
+const COMPARE_FIELDS = [
+    'receipt_id',
+    'payload_version',
+    'asset',
+    'chain',
+    'pay_to',
+    'amount_gross',
+    'amount_settled',
+    'payment_tx',
+    'issued_at',
+];
+/**
+ * The owner view returns `{ jws, salt, private_fields }`. A saved holder
+ * receipt has `issuer_signature`. Either can be the `--jws` file.
+ * An `issuer_jwk` on the owner-view body is ignored. Trust is a pinned
+ * kid or a JWKS entry, not a key the response carries.
+ */
+function holderDocumentFromOwnerView(doc) {
+    if (typeof doc === 'string') {
+        const compact = doc.trim();
+        if (compact.split('.').length === 3)
+            return holderDocumentFromOwnerView({ jws: compact });
+        throw new Error('holder is not a receipt or an owner-view response');
+    }
+    const signature = doc.issuer_signature;
+    if (signature && typeof signature === 'object' && typeof signature.jws === 'string') {
+        return doc;
+    }
+    const jws = typeof doc.jws === 'string' ? doc.jws : null;
+    if (!jws || jws.split('.').length !== 3) {
+        throw new Error('owner view is missing the holder JWS');
+    }
+    const claims = decodeJwsPayload(jws) || {};
+    let kid;
+    try {
+        const header = JSON.parse(Buffer.from(jws.split('.')[0], 'base64url').toString('utf8'));
+        if (typeof header.kid === 'string')
+            kid = header.kid;
+    }
+    catch {
+        kid = undefined;
+    }
+    // Owner view carries this receipt's own book row hash so the leaf
+    // task_id|row_hash can be rebuilt. It is not a signed claim; the leaf
+    // still has to be in a signed tree head.
+    const rowHash = typeof doc.row_hash === 'string' && /^[0-9a-f]{64}$/i.test(doc.row_hash) ? doc.row_hash : null;
+    return {
+        ...claims,
+        task_id: claims.task_id ?? null,
+        ...(rowHash ? { book_chain: { row_hash: rowHash } } : {}),
+        issuer_signature: {
+            jws,
+            kid,
+            payload_version: claims.payload_version ?? null,
+        },
+    };
+}
+/**
+ * VERIFIED requires a trusted issuer key, a passing inclusion proof, and a
+ * signed payment. A shell alone, a missing proof, or a key that only
+ * verifies because it is embedded in the holder is not VERIFIED.
+ */
+function shellHolderVerdict(check) {
+    if (!check.signatureValid || !check.keyTrusted) {
+        return { verified: false, reason: check.signatureReason || 'key untrusted' };
+    }
+    if (!check.inclusionSupplied || !check.inclusionOk) {
+        return { verified: false, reason: check.inclusionReason || 'inclusion_missing' };
+    }
+    const shellLeaf = check.shellLeaf ? String(check.shellLeaf).replace(/^0x/i, '').toLowerCase() : '';
+    const proved = check.provedLeaf ? String(check.provedLeaf).replace(/^0x/i, '').toLowerCase() : '';
+    if (shellLeaf && proved && shellLeaf !== proved) {
+        return { verified: false, reason: 'inclusion_mismatch' };
+    }
+    if (shellLeaf && !proved) {
+        return { verified: false, reason: 'inclusion_mismatch' };
+    }
+    // A {root, tree_size} written by hand (or a proof's own root) is not a log.
+    if (check.headSigned !== true) {
+        return { verified: false, reason: 'head_signature_missing' };
+    }
+    const ref = check.paymentRef ? String(check.paymentRef) : '';
+    if (!ref)
+        return { verified: false, reason: 'payment_unchecked' };
+    if (check.bindingExpected && !check.bindingMatches) {
+        return { verified: false, reason: 'payment_unchecked' };
+    }
+    return { verified: true, reason: null };
+}
+/**
+ * Expected shell from the signed JWS claims only. Outer holder fields
+ * (payment.settled_amount, payment.network, payment_meta, task_id) are
+ * not signed and are not used, so they cannot ride along under VERIFIED.
+ */
+function signedShellFromHolder(holder) {
+    const holderDoc = typeof holder === 'string' ? { issuer_signature: { jws: holder } } : holder;
+    const sig = (holderDoc.issuer_signature && typeof holderDoc.issuer_signature === 'object')
+        ? holderDoc.issuer_signature
+        : {};
+    return shellFromHolder({ issuer_signature: { jws: typeof sig.jws === 'string' ? sig.jws : null } });
+}
+function compareShellToJws(shell, holder) {
+    const holderDoc = typeof holder === 'string' ? { issuer_signature: { jws: holder } } : holder;
+    const expected = signedShellFromHolder(holderDoc);
+    for (const field of COMPARE_FIELDS) {
+        if (String(shell[field] ?? '') !== String(expected[field] ?? '')) {
+            return { ok: false, field };
+        }
+    }
+    const shellLeaf = shell.inclusion?.leaf_hash ?? null;
+    const expectedLeaf = expected.inclusion?.leaf_hash ?? null;
+    if (shellLeaf && expectedLeaf && String(shellLeaf) !== String(expectedLeaf)) {
+        return { ok: false, field: 'inclusion.leaf_hash' };
+    }
+    return { ok: true };
+}
+/**
+ * v11: body_commitment = HMAC-SHA256(salt, raw body),
+ * request_digest = SHA-256 of the JCS object
+ * {body_commitment, idempotency_key, method, nonce, path}.
+ */
+function openV11Commitment(input) {
+    const payload = input.payload;
+    if (!payload || payload.request_digest == null)
+        return { ok: false, reason: 'no_v11_commitment' };
+    let salt;
+    try {
+        salt = Buffer.from(input.saltHex, 'hex');
+    }
+    catch {
+        return { ok: false, reason: 'bad_salt' };
+    }
+    if (salt.length !== 32)
+        return { ok: false, reason: 'bad_salt' };
+    const body = Buffer.isBuffer(input.body) ? input.body : Buffer.from(input.body);
+    const bodyCommitment = node_crypto_1.default.createHmac('sha256', salt).update(body).digest('hex');
+    const digest = node_crypto_1.default.createHash('sha256').update(jcs({
+        body_commitment: bodyCommitment,
+        idempotency_key: input.idempotencyKey ?? payload.idempotency_key ?? null,
+        method: input.method ?? payload.method ?? null,
+        nonce: input.nonce ?? payload.nonce ?? null,
+        path: input.path ?? payload.path ?? null,
+    })).digest('hex');
+    if (digest !== String(payload.request_digest))
+        return { ok: false, reason: 'commitment_mismatch' };
+    return { ok: true };
+}
+//# sourceMappingURL=shell.js.map

package/dist/shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.js","sourceRoot":"","sources":["../src/shell.ts"],"names":[],"mappings":";;;;;;AAcA,wCAEC;AAoBD,4CASC;AAwBD,0CAqCC;AAoBD,kEAoCC;AAuBD,gDAyBC;AAOD,sDAMC;AAED,8CAcC;AAOD,8CAyBC;AA/QD;;;;;;;;GAQG;AACH,8DAAiC;AAEpB,QAAA,YAAY,GAAG,0BAA0B,CAAC;AAC1C,QAAA,mBAAmB,GAAG,+CAA+C,CAAC;AAEnF,SAAgB,cAAc,CAAC,GAAY;IACzC,OAAO,CAAC,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAK,GAA2B,CAAC,MAAM,KAAK,oBAAY,CAAC;AAClG,CAAC;AAED,SAAS,GAAG,CAAC,KAAc;IACzB,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACvE,MAAM,KAAK,GAAI,KAAiC,CAAC,GAAG,CAAC,CAAC;YACtD,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,GAAG,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,gBAAgB,CAAC,GAAY;IAC3C,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA4B,CAAC;IACpG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,EAAE,GAAG,OAAO,KAAK,KAAK,QAAQ;QAClC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QACvC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1B,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzB,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,SAAS,CAAC,MAAsC,EAAE,OAAgC;IACzF,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,OAAO,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC;QACrE,CAAC,CAAC,MAAM,CAAC,OAAkC;QAC3C,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC;QACpE,CAAC,CAAC,OAAO,CAAC,OAAkC;QAC5C,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,EAAE,GAAG,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC;AAClC,CAAC;AAED,kFAAkF;AAClF,SAAgB,eAAe,CAAC,OAAgC;IAC9D,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,OAAO,OAAO,CAAC,gBAAgB,KAAK,QAAQ,CAAC;QACvF,CAAC,CAAC,OAAO,CAAC,gBAA2C;QACrD,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAClD,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,IAAK,OAAO,CAAC,YAAiD,EAAE,OAAO,IAAI,MAAM,IAAI,EAAE,CAAC,CAAC;IAC/H,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IAC/E,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,IAAI,IAAI,CAAkB,CAAC;IACrG,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC;IAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC;IAC/C,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC;QAC5E,CAAC,CAAC,OAAO,CAAC,SAAoC;QAC9C,CAAC,CAAC,IAAI,CAAC;IACT,OAAO;QACL,MAAM,EAAE,oBAAY;QACpB,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,SAAS;QAClB,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe,IAAI,IAAI;QACzE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,MAAM;QAC9B,KAAK,EAAE,OAAO,IAAI,IAAI;QACtB,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;QAC7B,YAAY,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAClD,cAAc,EAAE,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QACxD,UAAU,EAAE,EAAE;QACd,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;QACnF,SAAS,EAAE;YACT,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,SAAS,EAAE,SAAS,IAAI,IAAI;YAC1D,KAAK,EAAE,SAAS,EAAE,KAAK,IAAI,IAAI;YAC/B,WAAW,EAAE,SAAS,EAAE,IAAI;gBAC1B,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,IAAI,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;gBACnF,CAAC,CAAC,IAAI;SACT;KACF,CAAC;AACJ,CAAC;AAED,MAAM,cAAc,GAAG;IACrB,YAAY;IACZ,iBAAiB;IACjB,OAAO;IACP,OAAO;IACP,QAAQ;IACR,cAAc;IACd,gBAAgB;IAChB,YAAY;IACZ,WAAW;CACH,CAAC;AAEX;;;;;GAKG;AACH,SAAgB,2BAA2B,CAAC,GAAqC;IAC/E,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,2BAA2B,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1F,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,CAAC,gBAAgB,CAAC;IACvC,IAAI,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,OAAQ,SAA+B,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC3G,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,GAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAqB,CAAC;QAC5G,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;YAAE,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,GAAG,SAAS,CAAC;IAClB,CAAC;IACD,kEAAkE;IAClE,sEAAsE;IACtE,yCAAyC;IACzC,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/G,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;QAC/B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,gBAAgB,EAAE;YAChB,GAAG;YACH,GAAG;YACH,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;SAChD;KACF,CAAC;AACJ,CAAC;AAkBD;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,KAAuB;IACxD,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QAC/C,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,eAAe,IAAI,eAAe,EAAE,CAAC;IAC/E,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,iBAAiB,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QACnD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,eAAe,IAAI,mBAAmB,EAAE,CAAC;IACnF,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnG,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClG,IAAI,SAAS,IAAI,MAAM,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QAChD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC3D,CAAC;IACD,4EAA4E;IAC5E,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAC9B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IAC/D,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAClE,IAAI,KAAK,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QACnD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,SAAgB,qBAAqB,CAAC,MAAwC;IAC5E,MAAM,SAAS,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9F,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,gBAAgB,IAAI,OAAO,SAAS,CAAC,gBAAgB,KAAK,QAAQ,CAAC;QACxF,CAAC,CAAC,SAAS,CAAC,gBAAqC;QACjD,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,eAAe,CAAC,EAAE,gBAAgB,EAAE,EAAE,GAAG,EAAE,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AACtG,CAAC;AAED,SAAgB,iBAAiB,CAAC,KAA8B,EAAE,MAAwC;IACxG,MAAM,SAAS,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9F,MAAM,QAAQ,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAClD,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACjE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAI,KAAK,CAAC,SAAiD,EAAE,SAAS,IAAI,IAAI,CAAC;IAC9F,MAAM,YAAY,GAAI,QAAQ,CAAC,SAAiD,EAAE,SAAS,IAAI,IAAI,CAAC;IACpG,IAAI,SAAS,IAAI,YAAY,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;IACrD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,SAAgB,iBAAiB,CAAC,KAQjC;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,cAAc,IAAI,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAClG,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAAC,CAAC;IACrG,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACjE,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChF,MAAM,cAAc,GAAG,qBAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,qBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QACpD,eAAe,EAAE,cAAc;QAC/B,eAAe,EAAE,KAAK,CAAC,cAAc,IAAI,OAAO,CAAC,eAAe,IAAI,IAAI;QACxE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI;QAC9C,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,IAAI,IAAI;QAC3C,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,IAAI,IAAI;KACzC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClB,IAAI,MAAM,KAAK,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IACnG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/v11-receipt.d.ts

@@ -0,0 +1,21 @@
+import type { ReceiptVerification, VerifyReceiptOptions, XFuelReceipt } from './index.js';
+export declare const V11_SIGNED_FIELDS: readonly ["v", "receipt_id", "iss", "kid", "issued_at", "asset", "chain", "pay_to", "amount_gross", "amount_settled", "payment_tx", "payer", "book_ref", "seq", "request_digest", "output_commitment", "accounting_commitment", "routing_commitment", "product", "proof_tier", "covers"];
+export declare const V11_REFUSAL_FIELDS: readonly ["v", "refusal_id", "iss", "kid", "issued_at", "reason", "request_digest", "refusal_commitment"];
+export declare function hkdfSubkey(saltHex: string, label: string): Buffer;
+export declare function commitHmac(subkey: Buffer, message: Buffer | string): string;
+/**
+ * Distinct rejection reasons. The salt is not lowercased, trimmed, or stripped.
+ * @returns null when the salt is 64 lowercase hex chars.
+ */
+export declare function v11SaltRejection(salt: string): string | null;
+export declare function verifyV11Receipt(receipt: XFuelReceipt, options?: VerifyReceiptOptions): Promise<ReceiptVerification>;
+/** payment_unbound plus a sub-reason. Chain, tx, payee, payer, and amounts. */
+export declare function paymentBindingErrors(payload: Record<string, unknown>): string[];
+export declare function verifyReceiptUpToV10(receipt: XFuelReceipt, options: VerifyReceiptOptions, full: (receipt: XFuelReceipt, options: VerifyReceiptOptions) => Promise<ReceiptVerification>): Promise<ReceiptVerification>;
+export declare function readOpenFile(spec: string): {
+    kind: 'output' | 'accounting' | 'routing' | 'refusal';
+    bytes: Buffer;
+    text: string;
+};
+export declare function sha256Hex(bytes: Buffer | string): string;
+//# sourceMappingURL=v11-receipt.d.ts.map

package/dist/v11-receipt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v11-receipt.d.ts","sourceRoot":"","sources":["../src/v11-receipt.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG1F,eAAO,MAAM,iBAAiB,0RAsBpB,CAAC;AAEX,eAAO,MAAM,kBAAkB,2GASrB,CAAC;AAmBX,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAEjE;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAG3E;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAM5D;AA+ED,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,YAAY,EACrB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,mBAAmB,CAAC,CAoD9B;AAuBD,+EAA+E;AAC/E,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,CAmB/E;AAgCD,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,YAAY,EACrB,OAAO,EAAE,oBAAoB,EAC7B,IAAI,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,oBAAoB,KAAK,OAAO,CAAC,mBAAmB,CAAC,GAC3F,OAAO,CAAC,mBAAmB,CAAC,CAoB9B;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,QAAQ,GAAG,YAAY,GAAG,SAAS,GAAG,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAUjI;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAExD"}