@ziffer-io/verify 0.1.1 → 0.2.1

package/dist/chain.js

@@ -0,0 +1,430 @@
+/**
+ * The audit chain export verifier (ACP-428) -- the TypeScript reader of the
+ * file the console's "Download the audit chain for this window" link gives.
+ *
+ * The link said the file was verifiable offline and nothing a customer held
+ * verified it. The Python SDK's `verify_chain` and this function are that
+ * verifier, and they are held to ONE verdict per file by the shared corpus in
+ * `fixtures/chain-export/` -- the same refusal name at the same record, the
+ * same recomputed last hash, the same report of what the anchors cover. The
+ * check order below is the Python reader's, step for step, because on a file
+ * with two defects the order decides which one is named.
+ *
+ * # What is recomputed, and what is only reported
+ *
+ * Every `chain_hash` is RECOMPUTED -- `sha256:` over the canonical bytes of the
+ * record (the first record of the chain) or of `{prev, record}` (every later
+ * one), the audit service's own link -- and the file's value is compared,
+ * never used. Every `previous_hash` after the first row is compared against
+ * the hash just recomputed. The first row's `previous_hash`, in a file that
+ * starts after the beginning of the chain, is the one link this file cannot
+ * recompute; it is reported as `startsAfter`, and it is checked only when an
+ * anchor names exactly that position.
+ *
+ * # The anchor key never comes from the file
+ *
+ * Every anchor entry carries an `anchor_identity` beside it. Reading the key
+ * from there would accept any file whose author signed their own anchors and
+ * wrote their own key next to them -- the party under verification supplying
+ * the value it is verified with. So the key is a parameter, from a file the
+ * customer holds, and with no key every anchor is reported `unchecked`: never
+ * passed, and never dropped from the report.
+ *
+ * # Numbers: the file's TEXT is read, not only its parsed values
+ *
+ * `JSON.parse` reads `1.0` as the integer 1. The record the writer hashed said
+ * `1.0`, so hashing `1` would compare bytes nobody wrote and name the wrong
+ * defect. The parser's reviver sees each number's source text (Node 22 and
+ * later), and a number written with a fraction or an exponent becomes a value
+ * the canonical encoder refuses -- `RecordNotCanonical` inside a record,
+ * `ExportMalformed` in the file's own fields, exactly where the Python reader
+ * says so. On a runtime whose parser does not hand the reviver the source
+ * text, that one case would be named `ChainHashMismatch` instead; the file is
+ * refused either way.
+ */
+import { createHash } from 'node:crypto';
+import { canon } from './canon.js';
+import { ed25519IsSmallOrder } from './ed25519.js';
+import { MLDSA65_PK_LEN, verifyUnderSuite } from './sig.js';
+import { isRecord } from './wire.js';
+/** The one suite an audit anchor is signed under here, and the only one an anchor key may name. */
+export const ANCHOR_SUITE = 'hybrid-ed25519-mldsa65';
+const ANCHOR_VERSION = 1;
+const HASH_PATTERN = /^sha256:[0-9a-f]{64}$/;
+const ED25519_PK_BYTES = 32;
+/** A refusal of an export, by name, at the first record or anchor that broke. */
+export class ChainRefusal extends Error {
+    /** The refusal name, identical to the Python reader's `ChainRefused.name`. */
+    refusal;
+    seq;
+    anchor;
+    constructor(refusal, detail, where = {}) {
+        super(`${refusal}: ${detail}`);
+        this.name = 'ChainRefusal';
+        this.refusal = refusal;
+        this.seq = where.seq ?? null;
+        this.anchor = where.anchor ?? null;
+    }
+}
+/** An anchor key file that cannot be used, by name. A defect in the caller's own file, not a verdict. */
+export class AnchorKeyRefusal extends Error {
+    refusal;
+    constructor(refusal, detail) {
+        super(`${refusal}: ${detail}`);
+        this.name = 'AnchorKeyRefusal';
+        this.refusal = refusal;
+    }
+}
+// A number the source spelled with a fraction or an exponent. A symbol, so the
+// canonical encoder refuses it wherever it lands and no field check mistakes it
+// for an integer.
+const NOT_AN_INTEGER = Symbol('a number written with a fraction or an exponent');
+function reviver(_key, value, context) {
+    if (typeof value === 'number' && typeof context?.source === 'string' && /[.eE]/.test(context.source)) {
+        return NOT_AN_INTEGER;
+    }
+    return value;
+}
+function isInt(v) {
+    return typeof v === 'number' && Number.isSafeInteger(v) && v >= 0;
+}
+// Half of a UTF-16 surrogate pair on its own: the Python reader cannot encode
+// one at all, and JSON.stringify would escape it into bytes nobody wrote.
+const LONE_SURROGATE = /[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/;
+function canonicalValue(v) {
+    if (v === null || typeof v === 'boolean')
+        return true;
+    if (typeof v === 'number')
+        return Number.isSafeInteger(v);
+    if (typeof v === 'string')
+        return !LONE_SURROGATE.test(v);
+    if (Array.isArray(v))
+        return v.every(canonicalValue);
+    if (isRecord(v))
+        return Object.entries(v).every(([k, x]) => !LONE_SURROGATE.test(k) && canonicalValue(x));
+    return false;
+}
+function sha256Hex(bytes) {
+    return createHash('sha256').update(bytes).digest('hex');
+}
+/** The audit service's link: `sha256:` over the canonical bytes. */
+function link(value) {
+    return `sha256:${sha256Hex(canon(value))}`;
+}
+/**
+ * RFC 4648 section 4 base64 with padding, in its one spelling: a value that
+ * does not re-encode to itself is refused, so two spellings of one signature
+ * are not two accepted signatures.
+ */
+function b64Strict(value) {
+    if (typeof value !== 'string' || value.length === 0)
+        return null;
+    if (!/^[A-Za-z0-9+/]*={0,2}$/.test(value) || value.length % 4 !== 0)
+        return null;
+    const raw = Uint8Array.from(Buffer.from(value, 'base64'));
+    return Buffer.from(raw).toString('base64') === value ? raw : null;
+}
+function parseText(file) {
+    let text;
+    if (typeof file === 'string') {
+        text = file;
+    }
+    else {
+        try {
+            // ignoreBOM keeps a byte-order mark in the text, where JSON.parse refuses
+            // it -- as the Python reader's parser does.
+            text = new TextDecoder('utf-8', { fatal: true, ignoreBOM: true }).decode(file);
+        }
+        catch {
+            throw new ChainRefusal('ExportMalformed', 'the file is not UTF-8');
+        }
+    }
+    try {
+        const parsed = JSON.parse(text, reviver);
+        return parsed;
+    }
+    catch {
+        throw new ChainRefusal('ExportMalformed', 'the file is not JSON');
+    }
+}
+/**
+ * Read the audit anchor identity's public document -- `{alg, classical, pq,
+ * fingerprint}`, the halves in base64 -- checking every redundant field: the
+ * fingerprint is recomputed over both halves and compared, and a small-order
+ * Ed25519 half is refused, because under one a single signature verifies every
+ * message.
+ */
+export function parseAnchorKey(file) {
+    let doc;
+    try {
+        doc = JSON.parse(typeof file === 'string' ? file : new TextDecoder('utf-8', { fatal: true }).decode(file));
+    }
+    catch {
+        throw new AnchorKeyRefusal('AnchorKeyMalformed', 'the anchor key file is not JSON');
+    }
+    if (!isRecord(doc)) {
+        throw new AnchorKeyRefusal('AnchorKeyMalformed', 'the anchor key document is not a JSON object');
+    }
+    if ('ed25519_pk_hex' in doc || 'identity' in doc) {
+        throw new AnchorKeyRefusal('AnchorKeyMalformed', 'this is a receipt trust anchor (the document `ziffer pubkey` writes), not the audit anchor identity');
+    }
+    if (doc['alg'] !== ANCHOR_SUITE) {
+        throw new AnchorKeyRefusal('AnchorKeyUnsupported', `audit anchors are verified under ${ANCHOR_SUITE} only`);
+    }
+    const classical = b64Strict(doc['classical']);
+    const pq = b64Strict(doc['pq']);
+    if (classical === null || classical.length !== ED25519_PK_BYTES || pq === null || pq.length !== MLDSA65_PK_LEN) {
+        throw new AnchorKeyRefusal('AnchorKeyMalformed', '`classical` must be 32 bytes and `pq` 1952 bytes, each in padded base64');
+    }
+    if (ed25519IsSmallOrder(classical)) {
+        throw new AnchorKeyRefusal('AnchorKeyMalformed', 'the Ed25519 half is a small-order point');
+    }
+    const both = new Uint8Array(classical.length + pq.length);
+    both.set(classical, 0);
+    both.set(pq, classical.length);
+    const fingerprint = `sha256:${sha256Hex(both)}`;
+    if (doc['fingerprint'] !== fingerprint) {
+        throw new AnchorKeyRefusal('AnchorKeyMalformed', 'the fingerprint is not the fingerprint of the document’s own keys; it was edited after it was written');
+    }
+    return { alg: ANCHOR_SUITE, classical, pq, fingerprint };
+}
+/**
+ * Both halves of the hybrid signature over the bytes the audit service signed:
+ * the canonical encoding of the anchor's `alg`, `heads`, `period_end` and `v`.
+ * Conjunctive, over exactly {classical, pq}.
+ */
+function anchorSignatureOk(key, signed) {
+    const sig = signed['sig'];
+    if (!isRecord(sig))
+        return false;
+    const names = Object.keys(sig).sort();
+    if (names.length !== 2 || names[0] !== 'classical' || names[1] !== 'pq')
+        return false;
+    const classical = b64Strict(sig['classical']);
+    const pq = b64Strict(sig['pq']);
+    if (classical === null || pq === null)
+        return false;
+    const body = canon({
+        alg: signed['alg'],
+        heads: signed['heads'],
+        period_end: signed['period_end'],
+        v: signed['v'],
+    });
+    const parts = [
+        { primitive: 'classical', bytes: classical },
+        { primitive: 'pq', bytes: pq },
+    ];
+    return verifyUnderSuite(ANCHOR_SUITE, key, body, parts) === null;
+}
+function isHead(h) {
+    return (Array.isArray(h) && h.length === 3 && typeof h[0] === 'string' && isInt(h[1]) && typeof h[2] === 'string');
+}
+/**
+ * Verify an audit chain export, from the file's bytes or text.
+ *
+ * Throws {@link ChainRefusal} at the first break: `ExportMalformed`,
+ * `ExportEmpty`, `ChainSeqGap`, `RecordOutOfPlace`, `ChainLinkBroken`,
+ * `RecordNotCanonical`, `ChainHashMismatch`, `AnchorMalformed`,
+ * `AnchorSuiteNotEnrolled`, `AnchorSignatureInvalid`, `AnchorHeadMismatch`.
+ *
+ * NOT checked, on purpose, as in the Python reader: whether each record's
+ * fields are the set its kind of event carries, the transparency-log entry and
+ * timestamp stored beside each anchor, and whether the file holds EVERY record
+ * of its window -- a file cut short at the end verifies, and `unanchoredFrom`
+ * says how much of it nothing yet commits to.
+ */
+export function verifyChain(file, anchorKey) {
+    const doc = parseText(file);
+    if (!isRecord(doc))
+        throw new ChainRefusal('ExportMalformed', 'the file is not a JSON object');
+    const tenant = doc['tenant'];
+    const chain = doc['chain'];
+    const anchors = doc['anchors'];
+    if (typeof tenant !== 'string' || !Array.isArray(chain) || !Array.isArray(anchors)) {
+        throw new ChainRefusal('ExportMalformed', 'the file carries no `tenant`, `chain` and `anchors`');
+    }
+    if (chain.length === 0)
+        throw new ChainRefusal('ExportEmpty', 'the file holds no records');
+    // ---- the chain: every link recomputed, in order -------------------------
+    const recomputed = [];
+    let firstSeq = 0;
+    let startsAfter = null;
+    for (let i = 0; i < chain.length; i += 1) {
+        const row = chain[i];
+        if (!isRecord(row) ||
+            !isInt(row['seq']) ||
+            typeof row['chain_hash'] !== 'string' ||
+            !('previous_hash' in row) ||
+            !(row['previous_hash'] === null || typeof row['previous_hash'] === 'string') ||
+            !isRecord(row['record'])) {
+            throw new ChainRefusal('ExportMalformed', `row ${i} is not {seq, previous_hash, chain_hash, record}`);
+        }
+        const seq = row['seq'];
+        const record = row['record'];
+        const previous = row['previous_hash'];
+        if (i === 0) {
+            firstSeq = seq;
+        }
+        else if (seq !== firstSeq + i) {
+            throw new ChainRefusal('ChainSeqGap', `follows record ${firstSeq + i - 1}; a chain has no gaps`, { seq });
+        }
+        const recordSeq = record['seq'];
+        if (record['tenant_id'] !== tenant || (seq > 0 && !(isInt(recordSeq) && recordSeq === seq))) {
+            throw new ChainRefusal('RecordOutOfPlace', 'the record names another tenant or another position', { seq });
+        }
+        let prev;
+        if (i === 0) {
+            if (seq === 0 && previous !== null) {
+                throw new ChainRefusal('ChainLinkBroken', 'the first record of a chain has no predecessor', { seq });
+            }
+            if (seq > 0) {
+                if (typeof previous !== 'string' || !HASH_PATTERN.test(previous)) {
+                    throw new ChainRefusal('ChainLinkBroken', 'the file starts after the chain’s beginning and does not say which hash it continues from', { seq });
+                }
+                startsAfter = previous;
+            }
+            prev = typeof previous === 'string' ? previous : null;
+        }
+        else {
+            const before = recomputed[i - 1] ?? null;
+            if (previous !== before) {
+                throw new ChainRefusal('ChainLinkBroken', 'does not continue from the record before it', { seq });
+            }
+            prev = before;
+        }
+        if (!canonicalValue(record)) {
+            throw new ChainRefusal('RecordNotCanonical', 'the record holds a fraction or an integer too large to encode one way', { seq });
+        }
+        const hash = seq === 0 ? link(record) : link({ prev, record });
+        if (hash !== row['chain_hash']) {
+            throw new ChainRefusal('ChainHashMismatch', `the record hashes to ${hash}`, { seq });
+        }
+        recomputed.push(hash);
+    }
+    const lastSeq = firstSeq + chain.length - 1;
+    // ---- the anchors: each signature under YOUR key, each head against the chain
+    const results = [];
+    let anchoredThrough = null;
+    for (let j = 0; j < anchors.length; j += 1) {
+        const entry = anchors[j];
+        const signed = isRecord(entry) ? entry['anchor'] : undefined;
+        if (!isRecord(signed) ||
+            typeof signed['alg'] !== 'string' ||
+            !isInt(signed['v']) ||
+            signed['v'] !== ANCHOR_VERSION ||
+            !isInt(signed['period_end']) ||
+            !Array.isArray(signed['heads']) ||
+            !signed['heads'].every(isHead) ||
+            !('sig' in signed)) {
+            throw new ChainRefusal('AnchorMalformed', 'not {alg, heads, period_end, sig, v} with three-part heads', {
+                anchor: j,
+            });
+        }
+        const periodEnd = signed['period_end'];
+        const heads = signed['heads'];
+        const mine = heads.filter(isHead).filter((h) => h[0] === tenant);
+        if (mine.length > 1) {
+            throw new ChainRefusal('AnchorMalformed', `names this tenant ${mine.length} times`, { anchor: j });
+        }
+        let status = 'unchecked';
+        if (anchorKey !== undefined) {
+            if (signed['alg'] !== anchorKey.alg) {
+                throw new ChainRefusal('AnchorSuiteNotEnrolled', 'signed under a suite your anchor key is not', {
+                    anchor: j,
+                });
+            }
+            if (!anchorSignatureOk(anchorKey, signed)) {
+                throw new ChainRefusal('AnchorSignatureInvalid', 'the anchor’s signature does not verify under your anchor key -- both halves must', { anchor: j });
+            }
+            status = 'verified';
+        }
+        let placement = 'no_head';
+        let headSeq = null;
+        const head = mine[0];
+        if (head !== undefined) {
+            const [, hSeq, hHash] = head;
+            headSeq = hSeq;
+            let expected = null;
+            if (firstSeq <= hSeq && hSeq <= lastSeq) {
+                placement = 'in_file';
+                expected = recomputed[hSeq - firstSeq] ?? null;
+            }
+            else if (hSeq === firstSeq - 1 && startsAfter !== null) {
+                placement = 'window_floor';
+                expected = startsAfter;
+            }
+            else {
+                placement = hSeq < firstSeq ? 'before_file' : 'after_file';
+            }
+            // Compared with or without a key, as in the Python reader: a file whose
+            // anchors disagree with its own recomputed chain is refused either way.
+            if (expected !== null && hHash !== expected) {
+                throw new ChainRefusal('AnchorHeadMismatch', `the chain recomputes to ${expected} at this position`, {
+                    seq: hSeq,
+                    anchor: j,
+                });
+            }
+            if (status === 'verified' && (placement === 'in_file' || placement === 'window_floor')) {
+                anchoredThrough = anchoredThrough === null ? hSeq : Math.max(anchoredThrough, hSeq);
+            }
+        }
+        results.push({ index: j, status, placement, headSeq, periodEnd });
+    }
+    let unanchoredFrom;
+    if (anchoredThrough === null)
+        unanchoredFrom = firstSeq;
+    else if (anchoredThrough < lastSeq)
+        unanchoredFrom = anchoredThrough + 1;
+    else
+        unanchoredFrom = null;
+    const lastChainHash = recomputed[recomputed.length - 1];
+    if (lastChainHash === undefined)
+        throw new ChainRefusal('ExportEmpty', 'the file holds no records');
+    return {
+        tenant,
+        firstSeq,
+        lastSeq,
+        records: chain.length,
+        lastChainHash,
+        startsAfter,
+        anchorsChecked: anchorKey !== undefined,
+        anchors: results,
+        anchoredThrough,
+        unanchoredFrom,
+        unanchoredCount: unanchoredFrom === null ? 0 : lastSeq - unanchoredFrom + 1,
+    };
+}
+/** {@link verifyChain}'s answer, or its refusal, as one corpus-shaped object. */
+export function chainVerdict(file, anchorKey) {
+    let v;
+    try {
+        v = verifyChain(file, anchorKey);
+    }
+    catch (e) {
+        if (e instanceof ChainRefusal) {
+            return { verdict: 'refused', refusal: e.refusal, seq: e.seq, anchor: e.anchor };
+        }
+        throw e;
+    }
+    return {
+        verdict: 'verified',
+        tenant: v.tenant,
+        first_seq: v.firstSeq,
+        last_seq: v.lastSeq,
+        records: v.records,
+        last_chain_hash: v.lastChainHash,
+        starts_after: v.startsAfter,
+        anchors_checked: v.anchorsChecked,
+        anchors: v.anchors.map((a) => ({
+            index: a.index,
+            status: a.status,
+            placement: a.placement,
+            head_seq: a.headSeq,
+            period_end: a.periodEnd,
+        })),
+        anchored_through: v.anchoredThrough,
+        unanchored_from: v.unanchoredFrom,
+        unanchored_count: v.unanchoredCount,
+    };
+}
+//# sourceMappingURL=chain.js.map

package/dist/chain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain.js","sourceRoot":"","sources":["../src/chain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAsB,MAAM,UAAU,CAAC;AAChF,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,mGAAmG;AACnG,MAAM,CAAC,MAAM,YAAY,GAAG,wBAAwB,CAAC;AACrD,MAAM,cAAc,GAAG,CAAC,CAAC;AACzB,MAAM,YAAY,GAAG,uBAAuB,CAAC;AAC7C,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B,iFAAiF;AACjF,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,8EAA8E;IACrE,OAAO,CAAS;IAChB,GAAG,CAAgB;IACnB,MAAM,CAAgB;IAE/B,YAAY,OAAe,EAAE,MAAc,EAAE,QAA2C,EAAE;QACxF,KAAK,CAAC,GAAG,OAAO,KAAK,MAAM,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC;IACrC,CAAC;CACF;AAED,yGAAyG;AACzG,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,OAAO,CAAS;IAEzB,YAAY,OAAe,EAAE,MAAc;QACzC,KAAK,CAAC,GAAG,OAAO,KAAK,MAAM,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AA8DD,+EAA+E;AAC/E,gFAAgF;AAChF,kBAAkB;AAClB,MAAM,cAAc,GAAG,MAAM,CAAC,iDAAiD,CAAC,CAAC;AAEjF,SAAS,OAAO,CAAgB,IAAY,EAAE,KAAc,EAAE,OAA6B;IACzF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,OAAO,EAAE,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACrG,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,KAAK,CAAC,CAAU;IACvB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpE,CAAC;AAED,8EAA8E;AAC9E,0EAA0E;AAC1E,MAAM,cAAc,GAAG,wEAAwE,CAAC;AAEhG,SAAS,cAAc,CAAC,CAAU;IAChC,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAC1D,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1D,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACrD,IAAI,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1G,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAiB;IAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,oEAAoE;AACpE,SAAS,IAAI,CAAC,KAAc;IAC1B,OAAO,UAAU,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjF,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACpE,CAAC;AAED,SAAS,SAAS,CAAC,IAAyB;IAC1C,IAAI,IAAY,CAAC;IACjB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,0EAA0E;YAC1E,4CAA4C;YAC5C,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjF,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,sBAAsB,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,IAAyB;IACtD,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7G,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,EAAE,iCAAiC,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,EAAE,8CAA8C,CAAC,CAAC;IACnG,CAAC;IACD,IAAI,gBAAgB,IAAI,GAAG,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;QACjD,MAAM,IAAI,gBAAgB,CACxB,oBAAoB,EACpB,qGAAqG,CACtG,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,YAAY,EAAE,CAAC;QAChC,MAAM,IAAI,gBAAgB,CAAC,sBAAsB,EAAE,oCAAoC,YAAY,OAAO,CAAC,CAAC;IAC9G,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IAC9C,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAChC,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,MAAM,KAAK,gBAAgB,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QAC/G,MAAM,IAAI,gBAAgB,CACxB,oBAAoB,EACpB,yEAAyE,CAC1E,CAAC;IACJ,CAAC;IACD,IAAI,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,EAAE,yCAAyC,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACvB,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,WAAW,GAAG,UAAU,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;IAChD,IAAI,GAAG,CAAC,aAAa,CAAC,KAAK,WAAW,EAAE,CAAC;QACvC,MAAM,IAAI,gBAAgB,CACxB,oBAAoB,EACpB,uGAAuG,CACxG,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;AAC3D,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,GAAc,EAAE,MAA+B;IACxE,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IAC9C,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAChC,IAAI,SAAS,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACpD,MAAM,IAAI,GAAG,KAAK,CAAC;QACjB,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC;QACtB,UAAU,EAAE,MAAM,CAAC,YAAY,CAAC;QAChC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC;KACf,CAAC,CAAC;IACH,MAAM,KAAK,GAAoB;QAC7B,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE;QAC5C,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;KAC/B,CAAC;IACF,OAAO,gBAAgB,CAAC,YAAY,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;AACnE,CAAC;AAED,SAAS,MAAM,CAAC,CAAU;IACxB,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAC1G,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,WAAW,CAAC,IAAyB,EAAE,SAAqB;IAC1E,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,+BAA+B,CAAC,CAAC;IAC/F,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IAC/B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,qDAAqD,CAAC,CAAC;IACnG,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,2BAA2B,CAAC,CAAC;IAE3F,4EAA4E;IAC5E,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,WAAW,GAAkB,IAAI,CAAC;IACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,GAAG,GAAY,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9B,IACE,CAAC,QAAQ,CAAC,GAAG,CAAC;YACd,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAClB,OAAO,GAAG,CAAC,YAAY,CAAC,KAAK,QAAQ;YACrC,CAAC,CAAC,eAAe,IAAI,GAAG,CAAC;YACzB,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,eAAe,CAAC,KAAK,QAAQ,CAAC;YAC5E,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EACxB,CAAC;YACD,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,kDAAkD,CAAC,CAAC;QACxG,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QACvB,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,GAAG,CAAC,eAAe,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACZ,QAAQ,GAAG,GAAG,CAAC;QACjB,CAAC;aAAM,IAAI,GAAG,KAAK,QAAQ,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,kBAAkB,QAAQ,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5G,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,MAAM,CAAC,WAAW,CAAC,KAAK,MAAM,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,SAAS,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;YAC5F,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,qDAAqD,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7G,CAAC;QACD,IAAI,IAAmB,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACZ,IAAI,GAAG,KAAK,CAAC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACnC,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,gDAAgD,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;YACvG,CAAC;YACD,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;gBACZ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACjE,MAAM,IAAI,YAAY,CACpB,iBAAiB,EACjB,2FAA2F,EAC3F,EAAE,GAAG,EAAE,CACR,CAAC;gBACJ,CAAC;gBACD,WAAW,GAAG,QAAQ,CAAC;YACzB,CAAC;YACD,IAAI,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;YACzC,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACxB,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,6CAA6C,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;YACpG,CAAC;YACD,IAAI,GAAG,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,YAAY,CACpB,oBAAoB,EACpB,uEAAuE,EACvE,EAAE,GAAG,EAAE,CACR,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/D,IAAI,IAAI,KAAK,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,YAAY,CAAC,mBAAmB,EAAE,wBAAwB,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAE5C,+EAA+E;IAC/E,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,IAAI,eAAe,GAAkB,IAAI,CAAC;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAY,OAAO,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,IACE,CAAC,QAAQ,CAAC,MAAM,CAAC;YACjB,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ;YACjC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,CAAC,GAAG,CAAC,KAAK,cAAc;YAC9B,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC5B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;YAC9B,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,EAClB,CAAC;YACD,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,4DAA4D,EAAE;gBACtG,MAAM,EAAE,CAAC;aACV,CAAC,CAAC;QACL,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;QACvC,MAAM,KAAK,GAAc,MAAM,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;QACjE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,qBAAqB,IAAI,CAAC,MAAM,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QACrG,CAAC;QACD,IAAI,MAAM,GAA2B,WAAW,CAAC;QACjD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,GAAG,EAAE,CAAC;gBACpC,MAAM,IAAI,YAAY,CAAC,wBAAwB,EAAE,6CAA6C,EAAE;oBAC9F,MAAM,EAAE,CAAC;iBACV,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,YAAY,CACpB,wBAAwB,EACxB,kFAAkF,EAClF,EAAE,MAAM,EAAE,CAAC,EAAE,CACd,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,UAAU,CAAC;QACtB,CAAC;QACD,IAAI,SAAS,GAA8B,SAAS,CAAC;QACrD,IAAI,OAAO,GAAkB,IAAI,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC;YAC7B,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,QAAQ,GAAkB,IAAI,CAAC;YACnC,IAAI,QAAQ,IAAI,IAAI,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;gBACxC,SAAS,GAAG,SAAS,CAAC;gBACtB,QAAQ,GAAG,UAAU,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,IAAI,CAAC;YACjD,CAAC;iBAAM,IAAI,IAAI,KAAK,QAAQ,GAAG,CAAC,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;gBACzD,SAAS,GAAG,cAAc,CAAC;gBAC3B,QAAQ,GAAG,WAAW,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,SAAS,GAAG,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC;YAC7D,CAAC;YACD,wEAAwE;YACxE,wEAAwE;YACxE,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC5C,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,2BAA2B,QAAQ,mBAAmB,EAAE;oBACnG,GAAG,EAAE,IAAI;oBACT,MAAM,EAAE,CAAC;iBACV,CAAC,CAAC;YACL,CAAC;YACD,IAAI,MAAM,KAAK,UAAU,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,cAAc,CAAC,EAAE,CAAC;gBACvF,eAAe,GAAG,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,cAA6B,CAAC;IAClC,IAAI,eAAe,KAAK,IAAI;QAAE,cAAc,GAAG,QAAQ,CAAC;SACnD,IAAI,eAAe,GAAG,OAAO;QAAE,cAAc,GAAG,eAAe,GAAG,CAAC,CAAC;;QACpE,cAAc,GAAG,IAAI,CAAC;IAC3B,MAAM,aAAa,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxD,IAAI,aAAa,KAAK,SAAS;QAAE,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,2BAA2B,CAAC,CAAC;IACpG,OAAO;QACL,MAAM;QACN,QAAQ;QACR,OAAO;QACP,OAAO,EAAE,KAAK,CAAC,MAAM;QACrB,aAAa;QACb,WAAW;QACX,cAAc,EAAE,SAAS,KAAK,SAAS;QACvC,OAAO,EAAE,OAAO;QAChB,eAAe;QACf,cAAc;QACd,eAAe,EAAE,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,cAAc,GAAG,CAAC;KAC5E,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,YAAY,CAAC,IAAyB,EAAE,SAAqB;IAC3E,IAAI,CAAgB,CAAC;IACrB,IAAI,CAAC;QACH,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,YAAY,EAAE,CAAC;YAC9B,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAClF,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;IACD,OAAO;QACL,OAAO,EAAE,UAAU;QACnB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,SAAS,EAAE,CAAC,CAAC,QAAQ;QACrB,QAAQ,EAAE,CAAC,CAAC,OAAO;QACnB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,eAAe,EAAE,CAAC,CAAC,aAAa;QAChC,YAAY,EAAE,CAAC,CAAC,WAAW;QAC3B,eAAe,EAAE,CAAC,CAAC,cAAc;QACjC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7B,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,QAAQ,EAAE,CAAC,CAAC,OAAO;YACnB,UAAU,EAAE,CAAC,CAAC,SAAS;SACxB,CAAC,CAAC;QACH,gBAAgB,EAAE,CAAC,CAAC,eAAe;QACnC,eAAe,EAAE,CAAC,CAAC,cAAc;QACjC,gBAAgB,EAAE,CAAC,CAAC,eAAe;KACpC,CAAC;AACJ,CAAC"}

package/dist/clauses.d.ts

@@ -50,4 +50,74 @@ export declare const CLAUSE_WIRE_TYPE = "WE-4";
  * refusal carries the field's (ACP-88/ACP-89).
  */
 export declare const CLAUSE_RECEIPT_NONCE_SIZE = "L-17";
+/** Rust `quorum::CLAUSE_NO_ATTESTATIONS` -- INV-1-HIGH, a receipt commits to
+ * attestations and none arrived. */
+export declare const CLAUSE_NO_ATTESTATIONS = "INV-1-HIGH";
+/** Rust `quorum::CLAUSE_NO_OBJECT` -- AT-8, an entry carrying no Attestation
+ * Object (the pre-v1.3.3 form, where only the id travelled). */
+export declare const CLAUSE_NO_OBJECT = "AT-8";
+/** Rust `quorum::CLAUSE_OBJECT_SCHEMA` -- AT-8b, the object's field set is not
+ * exactly AT-1's. CLOSED: an unknown field is refused, a missing one never
+ * defaulted (Z4). */
+export declare const CLAUSE_OBJECT_SCHEMA = "AT-8b";
+/** Rust `quorum::CLAUSE_NONCE_SIZE` -- AT-1, `att_nonce` is well-formed but is
+ * not 128-bit. The ATTESTATION nonce's own size clause, never L-17 (which sizes
+ * the receipt's): one number, two clauses, and the refusal carries the field's. */
+export declare const CLAUSE_ATT_NONCE_SIZE = "AT-1";
+/** Rust `quorum::CLAUSE_ATTESTATION_SUITE` -- CR-4. An UNKNOWN suite refuses
+ * here under CR-4 and not CR-1, matching `Bundle.suite_ok`, which returns False
+ * for a name it does not know; the receipt path spells the same condition CR-1
+ * and the differential compares names, so the reference wins. */
+export declare const CLAUSE_ATTESTATION_SUITE = "CR-4";
+/** Rust `quorum::CLAUSE_ATTESTER_SIG` -- §9.3 step 7b(i). */
+export declare const CLAUSE_ATTESTER_SIG = "9.3-7b-i";
+/** Rust `quorum::CLAUSE_BINDING` -- §9.3 step 7b(ii), the object binds a
+ * DIFFERENT proposal. This is Y1: a genuine quorum raised for P1 attached to a
+ * receipt for P2. */
+export declare const CLAUSE_BINDING = "9.3-7b-ii";
+/** Rust `quorum::CLAUSE_POLICY_BASIS` -- §9.3 step 7b(iii), policy basis or
+ * object freshness. */
+export declare const CLAUSE_POLICY_BASIS = "9.3-7b-iii";
+/** Rust `quorum::CLAUSE_OPERATOR_DISAGREE` -- §9.3 step 7b(iii-a), the objects
+ * disagree on who the operator is (Y4). */
+export declare const CLAUSE_OPERATOR_DISAGREE = "9.3-7b-iii-a";
+/** Rust `quorum::CLAUSE_CONSENT` -- AT-9's SECOND requirement: an attester
+ * signed for a quorum other than the bundle's. A CONSENT check, not a threshold
+ * one; deleting it cannot lower a quorum. */
+export declare const CLAUSE_CONSENT = "AT-9";
+/** Rust `quorum::CLAUSE_DERIVED_ID` -- Y1b, a transmitted `attestation_id`
+ * differing from the derived one. */
+export declare const CLAUSE_DERIVED_ID = "Y1b";
+/** Rust `quorum::CLAUSE_MEMBERSHIP` -- AB-1, the entry digest binding: entry
+ * schema, digest-list type, or membership. */
+export declare const CLAUSE_MEMBERSHIP = "AB-1";
+/** Rust `quorum::CLAUSE_DIGEST_ORDER` -- AB-2, `attestation_digests` is not in
+ * the one canonical ordering. */
+export declare const CLAUSE_DIGEST_ORDER = "AB-2";
+/** Rust `quorum::CLAUSE_DIGEST_DUP` -- AB-3, a repeated digest. */
+export declare const CLAUSE_DIGEST_DUP = "AB-3";
+/** Rust `quorum::CLAUSE_CARDINALITY` -- AB-4, entry count and signed digest
+ * count disagree. Fewer is withholding, more is injection. */
+export declare const CLAUSE_CARDINALITY = "AB-4";
+/** Rust `quorum::CLAUSE_ASSURANCE` -- AT-10, an identity enrolled below the
+ * registry's assurance floor. */
+export declare const CLAUSE_ASSURANCE = "AT-10";
+/** Rust `quorum::CLAUSE_QUORUM` -- AT-3, fewer distinct approvals than the
+ * threshold recomputed from the bundle. */
+export declare const CLAUSE_QUORUM = "AT-3";
+/** Rust `quorum::CLAUSE_OPERATOR_SELF` -- AT-2, the operator counted toward
+ * their own quorum. */
+export declare const CLAUSE_OPERATOR_SELF = "AT-2";
+/** Rust `quorum::CLAUSE_WEBAUTHN_ALG` -- HM-3. The object's declared `alg` and
+ * the registry's disagree about what KIND of key this identity holds. Either
+ * side alone decides nothing; the DISAGREEMENT is the refusal, raised before a
+ * byte of the assertion is parsed. */
+export declare const CLAUSE_WEBAUTHN_ALG = "WebauthnAlgMismatch";
+/** Rust `quorum::CLAUSE_WEBAUTHN_COUNTER` -- HM-4 (f). A regression is a CLONED
+ * AUTHENTICATOR, not a retry. */
+export declare const CLAUSE_WEBAUTHN_COUNTER = "WebauthnCounter";
+/** Rust `quorum::CLAUSE_MALFORMED` -- the entry's `sig`, the assertion or the
+ * credential is not the shape §8.6c declares. Not a statement about a
+ * signature. */
+export declare const CLAUSE_MALFORMED = "Malformed";
 //# sourceMappingURL=clauses.d.ts.map

package/dist/clauses.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"clauses.d.ts","sourceRoot":"","sources":["../src/clauses.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,sFAAsF;AACtF,eAAO,MAAM,cAAc,SAAS,CAAC;AACrC,8FAA8F;AAC9F,eAAO,MAAM,gBAAgB,SAAS,CAAC;AACvC,gGAAgG;AAChG,eAAO,MAAM,oBAAoB,SAAS,CAAC;AAC3C,oGAAoG;AACpG,eAAO,MAAM,kBAAkB,SAAS,CAAC;AACzC,6FAA6F;AAC7F,eAAO,MAAM,gBAAgB,UAAU,CAAC;AACxC,oGAAoG;AACpG,eAAO,MAAM,gBAAgB,UAAU,CAAC;AACxC,4EAA4E;AAC5E,eAAO,MAAM,eAAe,UAAU,CAAC;AACvC;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,UAAU,CAAC;AAC/C,qGAAqG;AACrG,eAAO,MAAM,eAAe,UAAU,CAAC;AACvC;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,SAAS,CAAC;AAC7C,6FAA6F;AAC7F,eAAO,MAAM,gBAAgB,SAAS,CAAC;AACvC;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,SAAS,CAAC"}
+{"version":3,"file":"clauses.d.ts","sourceRoot":"","sources":["../src/clauses.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,sFAAsF;AACtF,eAAO,MAAM,cAAc,SAAS,CAAC;AACrC,8FAA8F;AAC9F,eAAO,MAAM,gBAAgB,SAAS,CAAC;AACvC,gGAAgG;AAChG,eAAO,MAAM,oBAAoB,SAAS,CAAC;AAC3C,oGAAoG;AACpG,eAAO,MAAM,kBAAkB,SAAS,CAAC;AACzC,6FAA6F;AAC7F,eAAO,MAAM,gBAAgB,UAAU,CAAC;AACxC,oGAAoG;AACpG,eAAO,MAAM,gBAAgB,UAAU,CAAC;AACxC,4EAA4E;AAC5E,eAAO,MAAM,eAAe,UAAU,CAAC;AACvC;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,UAAU,CAAC;AAC/C,qGAAqG;AACrG,eAAO,MAAM,eAAe,UAAU,CAAC;AACvC;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,SAAS,CAAC;AAC7C,6FAA6F;AAC7F,eAAO,MAAM,gBAAgB,SAAS,CAAC;AACvC;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,SAAS,CAAC;AAUhD;oCACoC;AACpC,eAAO,MAAM,sBAAsB,eAAe,CAAC;AACnD;gEACgE;AAChE,eAAO,MAAM,gBAAgB,SAAS,CAAC;AACvC;;qBAEqB;AACrB,eAAO,MAAM,oBAAoB,UAAU,CAAC;AAC5C;;mFAEmF;AACnF,eAAO,MAAM,qBAAqB,SAAS,CAAC;AAC5C;;;iEAGiE;AACjE,eAAO,MAAM,wBAAwB,SAAS,CAAC;AAC/C,6DAA6D;AAC7D,eAAO,MAAM,mBAAmB,aAAa,CAAC;AAC9C;;qBAEqB;AACrB,eAAO,MAAM,cAAc,cAAc,CAAC;AAC1C;uBACuB;AACvB,eAAO,MAAM,mBAAmB,eAAe,CAAC;AAChD;2CAC2C;AAC3C,eAAO,MAAM,wBAAwB,iBAAiB,CAAC;AACvD;;6CAE6C;AAC7C,eAAO,MAAM,cAAc,SAAS,CAAC;AACrC;qCACqC;AACrC,eAAO,MAAM,iBAAiB,QAAQ,CAAC;AACvC;8CAC8C;AAC9C,eAAO,MAAM,iBAAiB,SAAS,CAAC;AACxC;iCACiC;AACjC,eAAO,MAAM,mBAAmB,SAAS,CAAC;AAC1C,mEAAmE;AACnE,eAAO,MAAM,iBAAiB,SAAS,CAAC;AACxC;8DAC8D;AAC9D,eAAO,MAAM,kBAAkB,SAAS,CAAC;AACzC;iCACiC;AACjC,eAAO,MAAM,gBAAgB,UAAU,CAAC;AACxC;2CAC2C;AAC3C,eAAO,MAAM,aAAa,SAAS,CAAC;AACpC;uBACuB;AACvB,eAAO,MAAM,oBAAoB,SAAS,CAAC;AAC3C;;;sCAGsC;AACtC,eAAO,MAAM,mBAAmB,wBAAwB,CAAC;AACzD;iCACiC;AACjC,eAAO,MAAM,uBAAuB,oBAAoB,CAAC;AACzD;;gBAEgB;AAChB,eAAO,MAAM,gBAAgB,cAAc,CAAC"}

package/dist/clauses.js

@@ -50,4 +50,81 @@ export const CLAUSE_WIRE_TYPE = 'WE-4';
  * refusal carries the field's (ACP-88/ACP-89).
  */
 export const CLAUSE_RECEIPT_NONCE_SIZE = 'L-17';
+// ------------------------------------------------------------------ step 7b
+//
+// The AT-* quorum and §8.6b's AB-*, spelled as `crates/acp-decision/src/quorum.rs`
+// and `reference/src/acp_executor.py` spell them. Several are literals at the
+// refusal site in Rust and named here; the VALUE is the contract either way, and
+// the Rust constant name is kept beside each one so a reader diffing the two
+// files sees one table rather than two vocabularies.
+/** Rust `quorum::CLAUSE_NO_ATTESTATIONS` -- INV-1-HIGH, a receipt commits to
+ * attestations and none arrived. */
+export const CLAUSE_NO_ATTESTATIONS = 'INV-1-HIGH';
+/** Rust `quorum::CLAUSE_NO_OBJECT` -- AT-8, an entry carrying no Attestation
+ * Object (the pre-v1.3.3 form, where only the id travelled). */
+export const CLAUSE_NO_OBJECT = 'AT-8';
+/** Rust `quorum::CLAUSE_OBJECT_SCHEMA` -- AT-8b, the object's field set is not
+ * exactly AT-1's. CLOSED: an unknown field is refused, a missing one never
+ * defaulted (Z4). */
+export const CLAUSE_OBJECT_SCHEMA = 'AT-8b';
+/** Rust `quorum::CLAUSE_NONCE_SIZE` -- AT-1, `att_nonce` is well-formed but is
+ * not 128-bit. The ATTESTATION nonce's own size clause, never L-17 (which sizes
+ * the receipt's): one number, two clauses, and the refusal carries the field's. */
+export const CLAUSE_ATT_NONCE_SIZE = 'AT-1';
+/** Rust `quorum::CLAUSE_ATTESTATION_SUITE` -- CR-4. An UNKNOWN suite refuses
+ * here under CR-4 and not CR-1, matching `Bundle.suite_ok`, which returns False
+ * for a name it does not know; the receipt path spells the same condition CR-1
+ * and the differential compares names, so the reference wins. */
+export const CLAUSE_ATTESTATION_SUITE = 'CR-4';
+/** Rust `quorum::CLAUSE_ATTESTER_SIG` -- §9.3 step 7b(i). */
+export const CLAUSE_ATTESTER_SIG = '9.3-7b-i';
+/** Rust `quorum::CLAUSE_BINDING` -- §9.3 step 7b(ii), the object binds a
+ * DIFFERENT proposal. This is Y1: a genuine quorum raised for P1 attached to a
+ * receipt for P2. */
+export const CLAUSE_BINDING = '9.3-7b-ii';
+/** Rust `quorum::CLAUSE_POLICY_BASIS` -- §9.3 step 7b(iii), policy basis or
+ * object freshness. */
+export const CLAUSE_POLICY_BASIS = '9.3-7b-iii';
+/** Rust `quorum::CLAUSE_OPERATOR_DISAGREE` -- §9.3 step 7b(iii-a), the objects
+ * disagree on who the operator is (Y4). */
+export const CLAUSE_OPERATOR_DISAGREE = '9.3-7b-iii-a';
+/** Rust `quorum::CLAUSE_CONSENT` -- AT-9's SECOND requirement: an attester
+ * signed for a quorum other than the bundle's. A CONSENT check, not a threshold
+ * one; deleting it cannot lower a quorum. */
+export const CLAUSE_CONSENT = 'AT-9';
+/** Rust `quorum::CLAUSE_DERIVED_ID` -- Y1b, a transmitted `attestation_id`
+ * differing from the derived one. */
+export const CLAUSE_DERIVED_ID = 'Y1b';
+/** Rust `quorum::CLAUSE_MEMBERSHIP` -- AB-1, the entry digest binding: entry
+ * schema, digest-list type, or membership. */
+export const CLAUSE_MEMBERSHIP = 'AB-1';
+/** Rust `quorum::CLAUSE_DIGEST_ORDER` -- AB-2, `attestation_digests` is not in
+ * the one canonical ordering. */
+export const CLAUSE_DIGEST_ORDER = 'AB-2';
+/** Rust `quorum::CLAUSE_DIGEST_DUP` -- AB-3, a repeated digest. */
+export const CLAUSE_DIGEST_DUP = 'AB-3';
+/** Rust `quorum::CLAUSE_CARDINALITY` -- AB-4, entry count and signed digest
+ * count disagree. Fewer is withholding, more is injection. */
+export const CLAUSE_CARDINALITY = 'AB-4';
+/** Rust `quorum::CLAUSE_ASSURANCE` -- AT-10, an identity enrolled below the
+ * registry's assurance floor. */
+export const CLAUSE_ASSURANCE = 'AT-10';
+/** Rust `quorum::CLAUSE_QUORUM` -- AT-3, fewer distinct approvals than the
+ * threshold recomputed from the bundle. */
+export const CLAUSE_QUORUM = 'AT-3';
+/** Rust `quorum::CLAUSE_OPERATOR_SELF` -- AT-2, the operator counted toward
+ * their own quorum. */
+export const CLAUSE_OPERATOR_SELF = 'AT-2';
+/** Rust `quorum::CLAUSE_WEBAUTHN_ALG` -- HM-3. The object's declared `alg` and
+ * the registry's disagree about what KIND of key this identity holds. Either
+ * side alone decides nothing; the DISAGREEMENT is the refusal, raised before a
+ * byte of the assertion is parsed. */
+export const CLAUSE_WEBAUTHN_ALG = 'WebauthnAlgMismatch';
+/** Rust `quorum::CLAUSE_WEBAUTHN_COUNTER` -- HM-4 (f). A regression is a CLONED
+ * AUTHENTICATOR, not a retry. */
+export const CLAUSE_WEBAUTHN_COUNTER = 'WebauthnCounter';
+/** Rust `quorum::CLAUSE_MALFORMED` -- the entry's `sig`, the assertion or the
+ * credential is not the shape §8.6c declares. Not a statement about a
+ * signature. */
+export const CLAUSE_MALFORMED = 'Malformed';
 //# sourceMappingURL=clauses.js.map

package/dist/clauses.js.map

@@ -1 +1 @@
-{"version":3,"file":"clauses.js","sourceRoot":"","sources":["../src/clauses.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,sFAAsF;AACtF,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC;AACrC,8FAA8F;AAC9F,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AACvC,gGAAgG;AAChG,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAC3C,oGAAoG;AACpG,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AACzC,6FAA6F;AAC7F,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AACxC,oGAAoG;AACpG,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AACxC,4EAA4E;AAC5E,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AACvC;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,OAAO,CAAC;AAC/C,qGAAqG;AACrG,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AACvC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAC7C,6FAA6F;AAC7F,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AACvC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC"}
+{"version":3,"file":"clauses.js","sourceRoot":"","sources":["../src/clauses.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,sFAAsF;AACtF,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC;AACrC,8FAA8F;AAC9F,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AACvC,gGAAgG;AAChG,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAC3C,oGAAoG;AACpG,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AACzC,6FAA6F;AAC7F,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AACxC,oGAAoG;AACpG,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AACxC,4EAA4E;AAC5E,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AACvC;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,OAAO,CAAC;AAC/C,qGAAqG;AACrG,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AACvC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAC7C,6FAA6F;AAC7F,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AACvC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAEhD,6EAA6E;AAC7E,EAAE;AACF,mFAAmF;AACnF,8EAA8E;AAC9E,iFAAiF;AACjF,6EAA6E;AAC7E,qDAAqD;AAErD;oCACoC;AACpC,MAAM,CAAC,MAAM,sBAAsB,GAAG,YAAY,CAAC;AACnD;gEACgE;AAChE,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AACvC;;qBAEqB;AACrB,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAC5C;;mFAEmF;AACnF,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAC5C;;;iEAGiE;AACjE,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAC/C,6DAA6D;AAC7D,MAAM,CAAC,MAAM,mBAAmB,GAAG,UAAU,CAAC;AAC9C;;qBAEqB;AACrB,MAAM,CAAC,MAAM,cAAc,GAAG,WAAW,CAAC;AAC1C;uBACuB;AACvB,MAAM,CAAC,MAAM,mBAAmB,GAAG,YAAY,CAAC;AAChD;2CAC2C;AAC3C,MAAM,CAAC,MAAM,wBAAwB,GAAG,cAAc,CAAC;AACvD;;6CAE6C;AAC7C,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC;AACrC;qCACqC;AACrC,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AACvC;8CAC8C;AAC9C,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACxC;iCACiC;AACjC,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAC1C,mEAAmE;AACnE,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACxC;8DAC8D;AAC9D,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AACzC;iCACiC;AACjC,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AACxC;2CAC2C;AAC3C,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC;AACpC;uBACuB;AACvB,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAC3C;;;sCAGsC;AACtC,MAAM,CAAC,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AACzD;iCACiC;AACjC,MAAM,CAAC,MAAM,uBAAuB,GAAG,iBAAiB,CAAC;AACzD;;gBAEgB;AAChB,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAC"}

package/dist/index.d.ts

@@ -1,11 +1,18 @@
 /**
  * @ziffer-io/verify -- the third receipt-verifier implementation (ACP-197 §5).
  *
- * `verifyReceipt` is the API; everything else is exported so the pieces are
+ * `verifyReceipt` is the API for a receipt and `verifyChain` for an exported
+ * audit chain (ACP-428); everything else is exported so the pieces are
  * individually testable and so `@ziffer-io/client` can re-export ONE verify (the
  * client adds no verification logic of its own -- one home per rule).
  */
 export { canon, compareCodePoints, type Json } from './canon.js';
+export { ANCHOR_SUITE, AnchorKeyRefusal, ChainRefusal, chainVerdict, parseAnchorKey, verifyChain, type AnchorKey, type AnchorResult, type ChainVerdict, type ChainVerified, } from './chain.js';
+export { CborError, cborAsBytes, cborEncode, cborGetInt, cborGetText, cborIsMap, cborKeys, decodeCanonical, type Cbor, type CborMap, } from './cbor.js';
+export { CLAUSE_ASSURANCE, CLAUSE_ATTESTATION_SUITE, CLAUSE_ATTESTER_SIG, CLAUSE_ATT_NONCE_SIZE, CLAUSE_BINDING, CLAUSE_CARDINALITY, CLAUSE_CONSENT, CLAUSE_DERIVED_ID, CLAUSE_DIGEST_DUP, CLAUSE_DIGEST_ORDER, CLAUSE_MALFORMED, CLAUSE_MEMBERSHIP, CLAUSE_NO_ATTESTATIONS, CLAUSE_NO_OBJECT, CLAUSE_OBJECT_SCHEMA, CLAUSE_OPERATOR_DISAGREE, CLAUSE_OPERATOR_SELF, CLAUSE_POLICY_BASIS, CLAUSE_QUORUM, CLAUSE_WEBAUTHN_ALG, CLAUSE_WEBAUTHN_COUNTER, } from './clauses.js';
+export { AT1_FIELDS, attestationId, entryDigest, verifyQuorum, type AttesterCredential, type DecisionBasis, type HybridAttester, type QuorumOutcome, type QuorumPolicy, type WebauthnAttester, } from './quorum.js';
+export { ASSERTION_FIELDS, MALFORMED, REGISTRY_KEY_WEAK, WEBAUTHN_ALGS, WEBAUTHN_AUTHENTICATOR_DATA, WEBAUTHN_CHALLENGE, WEBAUTHN_ORIGIN, WEBAUTHN_PRIMITIVE, WEBAUTHN_SIGNATURE, WEBAUTHN_TYPE, WebauthnRefusal, coseKeyParse, decodeAssertion, verifyWebauthn, webauthnChallenge, type Assertion, type CredentialKey, } from './webauthn.js';
+export { b64Decode } from './wire.js';
 export { CLAUSE_BODY_SIZE, CLAUSE_CANONICAL, CLAUSE_DECISION, CLAUSE_PROPOSAL_BINDING, CLAUSE_RECEIPT_NONCE_SIZE, CLAUSE_SIGNATURE, CLAUSE_SUITE_FLOOR, CLAUSE_TEMPORAL, CLAUSE_UNKNOWN_SUITE, CLAUSE_VALIDITY_WINDOW, CLAUSE_VERSION, CLAUSE_WIRE_TYPE, } from './clauses.js';
 export { ED25519_PK_LEN, ED25519_SIG_LEN, ed25519IsSmallOrder, verifyEd25519Strict, } from './ed25519.js';
 export { parseInstant } from './instant.js';