agent-passport-system 4.1.1 → 4.2.0

package/dist/src/v2/receipt-core/receipt.js

@@ -0,0 +1,132 @@
+// Copyright (c) 2026 Tymofii Pidlisnyi
+// SPDX-License-Identifier: Apache-2.0
+import { createHash } from 'node:crypto';
+import { sign, verify } from '../../crypto/keys.js';
+import { assertExactKeys, strictJCS } from './jcs.js';
+export const RECEIPT_ID_TAG = 'APS-RECEIPT-ID-V1';
+export const RECEIPT_SIG_TAG = 'APS-RECEIPT-SIG-V1';
+const HEX64 = /^[0-9a-f]{64}$/;
+const HEX128 = /^[0-9a-f]{128}$/;
+const UTC_MS = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/;
+const sha256Hex = (s) => createHash('sha256').update(s, 'utf8').digest('hex');
+const compareUtf8 = (a, b) => Buffer.compare(Buffer.from(a, 'utf8'), Buffer.from(b, 'utf8'));
+function compareEvidence(a, b) {
+    return compareUtf8(a.artifact_type, b.artifact_type) || compareUtf8(a.sha256, b.sha256);
+}
+function compareSignatures(a, b) {
+    return compareUtf8(a.signer, b.signer) || compareUtf8(a.key_id, b.key_id);
+}
+function isExactUtcMilliseconds(value) {
+    if (!UTC_MS.test(value))
+        return false;
+    const parsed = new Date(value);
+    return !Number.isNaN(parsed.valueOf()) && parsed.toISOString() === value;
+}
+function receiptWithout(receipt, ...keys) {
+    const copy = { ...receipt };
+    keys.forEach(k => delete copy[k]);
+    return copy;
+}
+export function receiptIdPayloadV1(receipt) {
+    return `${RECEIPT_ID_TAG}\0${strictJCS(receiptWithout(receipt, 'receipt_id', 'signatures'))}`;
+}
+export function computeReceiptIdV1(receipt) {
+    return sha256Hex(receiptIdPayloadV1(receipt));
+}
+export function receiptSignaturePayloadV1(receipt, descriptor) {
+    const form = { receipt: receiptWithout(receipt, 'signatures'), signer: descriptor };
+    return `${RECEIPT_SIG_TAG}\0${strictJCS(form)}`;
+}
+export function validateReceiptV1(receipt, requireValues = true) {
+    assertExactKeys(receipt, ['profile', 'receipt_id', 'receipt_type', 'issuer', 'subject_agent', 'action_ref', 'delegation_ref', 'decision_ref', 'issued_at', 'evidence_refs', 'result', 'prev', 'signatures'], ['profile', 'receipt_id', 'receipt_type', 'issuer', 'subject_agent', 'action_ref', 'delegation_ref', 'issued_at', 'evidence_refs', 'result', 'signatures'], 'ReceiptV1');
+    strictJCS(receipt);
+    if (receipt.profile !== 'aps-receipt-v1')
+        throw new TypeError('ReceiptV1: profile');
+    if (!receipt.receipt_type || !receipt.issuer || !receipt.subject_agent || !receipt.delegation_ref)
+        throw new TypeError('ReceiptV1: empty identifier');
+    if (requireValues && !HEX64.test(receipt.receipt_id))
+        throw new TypeError('ReceiptV1: receipt_id');
+    if (!HEX64.test(receipt.action_ref))
+        throw new TypeError('ReceiptV1: action_ref');
+    if (receipt.decision_ref !== undefined && !HEX64.test(receipt.decision_ref))
+        throw new TypeError('ReceiptV1: decision_ref');
+    if (receipt.prev !== undefined && !HEX64.test(receipt.prev))
+        throw new TypeError('ReceiptV1: prev');
+    if (!isExactUtcMilliseconds(receipt.issued_at))
+        throw new TypeError('ReceiptV1: issued_at');
+    if (typeof receipt.result !== 'object' || receipt.result === null || Array.isArray(receipt.result))
+        throw new TypeError('ReceiptV1: result');
+    if (!Array.isArray(receipt.evidence_refs) || !Array.isArray(receipt.signatures))
+        throw new TypeError('ReceiptV1: arrays');
+    const seenEvidence = new Set();
+    receipt.evidence_refs.forEach((ref, i) => {
+        assertExactKeys(ref, ['artifact_type', 'sha256'], ['artifact_type', 'sha256'], 'EvidenceRefV1');
+        if (!ref.artifact_type || !HEX64.test(ref.sha256))
+            throw new TypeError('EvidenceRefV1: value');
+        const key = `${ref.artifact_type}\0${ref.sha256}`;
+        if (seenEvidence.has(key))
+            throw new TypeError('ReceiptV1: duplicate evidence_ref');
+        seenEvidence.add(key);
+        if (i > 0 && compareEvidence(receipt.evidence_refs[i - 1], ref) >= 0)
+            throw new TypeError('ReceiptV1: evidence_refs not sorted');
+    });
+    const seenSigs = new Set();
+    receipt.signatures.forEach((proof, i) => {
+        assertExactKeys(proof, ['signer', 'key_id', 'alg', 'value'], ['signer', 'key_id', 'alg', 'value'], 'ReceiptSignatureV1');
+        if (!proof.signer || !proof.key_id || proof.alg !== 'Ed25519' || (requireValues && !HEX128.test(proof.value)))
+            throw new TypeError('ReceiptSignatureV1: value');
+        const key = `${proof.signer}\0${proof.key_id}`;
+        if (seenSigs.has(key))
+            throw new TypeError('ReceiptV1: duplicate signature');
+        seenSigs.add(key);
+        if (i > 0 && compareSignatures(receipt.signatures[i - 1], proof) >= 0)
+            throw new TypeError('ReceiptV1: signatures not sorted');
+    });
+    if (requireValues && !receipt.signatures.some(s => s.signer === receipt.issuer))
+        throw new TypeError('ReceiptV1: issuer signature missing');
+}
+export function createReceiptV1(fields, signers) {
+    if (signers.length === 0)
+        throw new TypeError('ReceiptV1: at least one signer');
+    const copiedFields = structuredClone(fields);
+    const evidence_refs = [...copiedFields.evidence_refs].sort(compareEvidence);
+    const descriptors = signers.map(s => ({ signer: s.signer, key_id: s.key_id, alg: 'Ed25519', private_key: s.private_key }))
+        .sort(compareSignatures);
+    const draft = { ...copiedFields, evidence_refs, receipt_id: '0'.repeat(64), signatures: [] };
+    validateReceiptV1(draft, false);
+    draft.receipt_id = computeReceiptIdV1(draft);
+    draft.signatures = descriptors.map(({ private_key, ...descriptor }) => ({
+        ...descriptor,
+        value: sign(receiptSignaturePayloadV1(draft, descriptor), private_key),
+    }));
+    validateReceiptV1(draft);
+    return draft;
+}
+export function verifyReceiptV1(receipt, resolveKey) {
+    const errors = [];
+    try {
+        validateReceiptV1(receipt);
+    }
+    catch (err) {
+        return { valid: false, receipt_id_valid: false, signature_results: [], errors: [err instanceof Error ? err.message : String(err)] };
+    }
+    const receipt_id_valid = computeReceiptIdV1(receipt) === receipt.receipt_id;
+    if (!receipt_id_valid)
+        errors.push('receipt_id_mismatch');
+    const signature_results = receipt.signatures.map(proof => {
+        try {
+            const key = resolveKey(proof.signer, proof.key_id, receipt.issued_at);
+            if (!key)
+                return { signer: proof.signer, key_id: proof.key_id, valid: false, reason: 'key_unresolved' };
+            const { value, ...descriptor } = proof;
+            return { signer: proof.signer, key_id: proof.key_id, valid: verify(receiptSignaturePayloadV1(receipt, descriptor), value, key) };
+        }
+        catch {
+            return { signer: proof.signer, key_id: proof.key_id, valid: false, reason: 'key_resolution_error' };
+        }
+    });
+    if (signature_results.some(r => !r.valid))
+        errors.push('signature_invalid');
+    return { valid: errors.length === 0, receipt_id_valid, signature_results, errors };
+}
+//# sourceMappingURL=receipt.js.map

package/dist/src/v2/receipt-core/receipt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt.js","sourceRoot":"","sources":["../../../../src/v2/receipt-core/receipt.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AAEtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AACnD,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AAGrD,MAAM,CAAC,MAAM,cAAc,GAAG,mBAA4B,CAAA;AAC1D,MAAM,CAAC,MAAM,eAAe,GAAG,oBAA6B,CAAA;AAC5D,MAAM,KAAK,GAAG,gBAAgB,CAAA;AAC9B,MAAM,MAAM,GAAG,iBAAiB,CAAA;AAChC,MAAM,MAAM,GAAG,+CAA+C,CAAA;AAC9D,MAAM,SAAS,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC7F,MAAM,WAAW,GAAG,CAAC,CAAS,EAAE,CAAS,EAAU,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;AAEpH,SAAS,eAAe,CAAC,CAAgB,EAAE,CAAgB;IACzD,OAAO,WAAW,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAA;AACzF,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAgD,EAAE,CAAgD;IAC3H,OAAO,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAA;AAC3E,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACrC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAA;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,CAAA;AAC1E,CAAC;AAED,SAAS,cAAc,CAAwC,OAAkB,EAAE,GAAG,IAAS;IAC7F,MAAM,IAAI,GAAG,EAAE,GAAG,OAAO,EAA6B,CAAA;IACtD,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;IACjC,OAAO,IAA0B,CAAA;AACnC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAkB;IACnD,OAAO,GAAG,cAAc,KAAK,SAAS,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,EAAE,CAAA;AAC/F,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAkB;IACnD,OAAO,SAAS,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAA;AAC/C,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAAkB,EAAE,UAA6C;IACzG,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;IACnF,OAAO,GAAG,eAAe,KAAK,SAAS,CAAC,IAAI,CAAC,EAAE,CAAA;AACjD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAkB,EAAE,aAAa,GAAG,IAAI;IACxE,eAAe,CAAC,OAA6C,EAC3D,CAAC,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,eAAe,EAAE,YAAY,EAAE,gBAAgB,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,EAClL,CAAC,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,eAAe,EAAE,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,CAAC,EAAE,WAAW,CAAC,CAAA;IAC1K,SAAS,CAAC,OAAO,CAAC,CAAA;IAClB,IAAI,OAAO,CAAC,OAAO,KAAK,gBAAgB;QAAE,MAAM,IAAI,SAAS,CAAC,oBAAoB,CAAC,CAAA;IACnF,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,cAAc;QAAE,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAA;IACrJ,IAAI,aAAa,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,uBAAuB,CAAC,CAAA;IAClG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,uBAAuB,CAAC,CAAA;IACjF,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAA;IAC3H,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,iBAAiB,CAAC,CAAA;IACnG,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,sBAAsB,CAAC,CAAA;IAC3F,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,mBAAmB,CAAC,CAAA;IAC5I,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,mBAAmB,CAAC,CAAA;IACzH,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAA;IACtC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QACvC,eAAe,CAAC,GAAyC,EAAE,CAAC,eAAe,EAAE,QAAQ,CAAC,EAAE,CAAC,eAAe,EAAE,QAAQ,CAAC,EAAE,eAAe,CAAC,CAAA;QACrI,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,sBAAsB,CAAC,CAAA;QAC9F,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,aAAa,KAAK,GAAG,CAAC,MAAM,EAAE,CAAA;QACjD,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAA;QACnF,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACrB,IAAI,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAA;IAClI,CAAC,CAAC,CAAA;IACF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;IAClC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACtC,eAAe,CAAC,KAA2C,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,oBAAoB,CAAC,CAAA;QAC9J,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAA;QAC/J,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAA;QAC9C,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAA;QAC5E,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACjB,IAAI,CAAC,GAAG,CAAC,IAAI,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAA;IAChI,CAAC,CAAC,CAAA;IACF,IAAI,aAAa,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAA;AAC7I,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,MAAoD,EACpD,OAA0B;IAE1B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAA;IAC/E,MAAM,YAAY,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;IAC5C,MAAM,aAAa,GAAG,CAAC,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IAC3E,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,SAAkB,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;SAChI,IAAI,CAAC,iBAAiB,CAAC,CAAA;IAC1B,MAAM,KAAK,GAAG,EAAE,GAAG,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAe,CAAA;IACzG,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IAC/B,KAAK,CAAC,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAA;IAC5C,KAAK,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QACtE,GAAG,UAAU;QACb,KAAK,EAAE,IAAI,CAAC,yBAAyB,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,WAAW,CAAC;KACvE,CAAC,CAAC,CAAA;IACH,iBAAiB,CAAC,KAAK,CAAC,CAAA;IACxB,OAAO,KAAK,CAAA;AACd,CAAC;AASD,MAAM,UAAU,eAAe,CAAC,OAAkB,EAAE,UAAmF;IACrI,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,CAAC;QAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAAC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QAC9C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAA;IACrI,CAAC;IACD,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,UAAU,CAAA;IAC3E,IAAI,CAAC,gBAAgB;QAAE,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAA;IACzD,MAAM,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QACvD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;YACrE,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAA;YACvG,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,GAAG,KAAK,CAAA;YACtC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,yBAAyB,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,CAAA;QAClI,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAA;QACrG,CAAC;IACH,CAAC,CAAC,CAAA;IACF,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;IAC3E,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAA;AACpF,CAAC"}

package/dist/src/v2/receipt-core/supporting-record.d.ts

@@ -0,0 +1,55 @@
+import type { EvidenceBundleBodyV2, EvidenceBundleMemberInputV2, EvidenceBundleMemberV2, EvidenceBundleProofV2, JsonValue, SupportingRecordV1 } from './types.js';
+export declare const SUPPORTING_RECORD_ID_TAG: 'APS-SUPPORTING-RECORD-ID-V1';
+export declare const SUPPORTING_RECORD_SIG_TAG: 'APS-SUPPORTING-RECORD-SIG-V1';
+export declare function supportingRecordIdPayloadV1(record: SupportingRecordV1): string;
+export declare function computeSupportingRecordIdV1(record: SupportingRecordV1): string;
+export declare function supportingRecordSignaturePayloadV1(record: SupportingRecordV1): string;
+export declare function validateSupportingRecordV1(record: SupportingRecordV1, requireCrypto?: boolean): void;
+export declare function createSupportingRecordV1(fields: Omit<SupportingRecordV1, 'record_id' | 'sig'>, privateKey: string): SupportingRecordV1;
+export declare function verifySupportingRecordV1(record: SupportingRecordV1, publicKey: string): {
+    valid: boolean;
+    id_valid: boolean;
+    signature_valid: boolean;
+};
+export declare function evidenceBundleMerkleRootV2(entries: EvidenceBundleMemberV2[]): string;
+export declare function buildEvidenceBundleBodyV2(members: EvidenceBundleMemberInputV2[]): EvidenceBundleBodyV2;
+export declare function verifyEvidenceBundleBodyV2(body: EvidenceBundleBodyV2, payloads?: Record<string, JsonValue>): boolean;
+/** Build an inclusion proof over the already-sorted manifest members.
+ *  Odd nodes are promoted, never duplicated, and the promotion is explicit in
+ *  the proof so a verifier can validate the tree shape from leaf_count. */
+export declare function buildEvidenceBundleProofV2(entries: EvidenceBundleMemberV2[], memberId: string): EvidenceBundleProofV2;
+export declare function verifyEvidenceBundleProofV2(proof: EvidenceBundleProofV2, trustedRoot: string, payload?: JsonValue): boolean;
+export type SupportingRecordFormat = {
+    format: 'supporting-record-v1';
+    canonicalization: 'rfc8785';
+    legacy: false;
+} | {
+    format: 'evidence-bundle-v1';
+    canonicalization: 'aps-legacy-null-dropping';
+    legacy: true;
+} | {
+    format: 'composition-check-v0';
+    canonicalization: 'rfc8785-tagged-v0';
+    legacy: true;
+} | {
+    format: 'accountability-record-0.1.0';
+    canonicalization: 'rfc8785-untagged';
+    legacy: true;
+} | {
+    format: 'read-fidelity-unwrapped';
+    canonicalization: 'rfc8785-untagged';
+    legacy: true;
+} | {
+    format: 'revocation-observation-unversioned';
+    canonicalization: 'aps-legacy-null-dropping';
+    legacy: true;
+} | {
+    format: 'unknown';
+    canonicalization: 'unknown';
+    legacy: false;
+};
+/** Explicit discriminator dispatch. Verification code must never try both canonicalizers. */
+export declare function classifySupportingRecordFormat(value: unknown): SupportingRecordFormat;
+/** Legacy canonical bytes are exposed only after explicit legacy classification. */
+export declare function legacyNullDroppingPayload(value: JsonValue): string;
+//# sourceMappingURL=supporting-record.d.ts.map

package/dist/src/v2/receipt-core/supporting-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supporting-record.d.ts","sourceRoot":"","sources":["../../../../src/v2/receipt-core/supporting-record.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,sBAAsB,EAA6B,qBAAqB,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAE5L,eAAO,MAAM,wBAAwB,EAAG,6BAAsC,CAAA;AAC9E,eAAO,MAAM,yBAAyB,EAAG,8BAAuC,CAAA;AAkBhF,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAE9E;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAE9E;AAED,wBAAgB,kCAAkC,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAErF;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,kBAAkB,EAAE,aAAa,UAAO,GAAG,IAAI,CAYjG;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,WAAW,GAAG,KAAK,CAAC,EACrD,UAAU,EAAE,MAAM,GACjB,kBAAkB,CAOpB;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,eAAe,EAAE,OAAO,CAAA;CAAE,CAKvJ;AAYD,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,sBAAsB,EAAE,GAAG,MAAM,CAsBpF;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,2BAA2B,EAAE,GAAG,oBAAoB,CAWtG;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,oBAAoB,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,OAAO,CAepH;AAMD;;2EAE2E;AAC3E,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,sBAAsB,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,qBAAqB,CAoBrH;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,GAAG,OAAO,CA+B3H;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,MAAM,EAAE,sBAAsB,CAAC;IAAC,gBAAgB,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,KAAK,CAAA;CAAE,GAC9E;IAAE,MAAM,EAAE,oBAAoB,CAAC;IAAC,gBAAgB,EAAE,0BAA0B,CAAC;IAAC,MAAM,EAAE,IAAI,CAAA;CAAE,GAC5F;IAAE,MAAM,EAAE,sBAAsB,CAAC;IAAC,gBAAgB,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,IAAI,CAAA;CAAE,GACvF;IAAE,MAAM,EAAE,6BAA6B,CAAC;IAAC,gBAAgB,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,IAAI,CAAA;CAAE,GAC7F;IAAE,MAAM,EAAE,yBAAyB,CAAC;IAAC,gBAAgB,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,IAAI,CAAA;CAAE,GACzF;IAAE,MAAM,EAAE,oCAAoC,CAAC;IAAC,gBAAgB,EAAE,0BAA0B,CAAC;IAAC,MAAM,EAAE,IAAI,CAAA;CAAE,GAC5G;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,gBAAgB,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,KAAK,CAAA;CAAE,CAAA;AAErE,6FAA6F;AAC7F,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,sBAAsB,CAUrF;AAED,oFAAoF;AACpF,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAElE"}

package/dist/src/v2/receipt-core/supporting-record.js

@@ -0,0 +1,243 @@
+// Copyright (c) 2026 Tymofii Pidlisnyi
+// SPDX-License-Identifier: Apache-2.0
+import { createHash } from 'node:crypto';
+import { sign, verify } from '../../crypto/keys.js';
+import { canonicalize } from '../../core/canonical.js';
+import { assertExactKeys, strictJCS } from './jcs.js';
+export const SUPPORTING_RECORD_ID_TAG = 'APS-SUPPORTING-RECORD-ID-V1';
+export const SUPPORTING_RECORD_SIG_TAG = 'APS-SUPPORTING-RECORD-SIG-V1';
+const HEX64 = /^[0-9a-f]{64}$/;
+const HEX128 = /^[0-9a-f]{128}$/;
+const UTC_MS = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/;
+const sha256 = (value) => createHash('sha256').update(value).digest();
+const sha256Hex = (value) => sha256(value).toString('hex');
+const isExactUtcMilliseconds = (value) => {
+    if (!UTC_MS.test(value))
+        return false;
+    const parsed = new Date(value);
+    return !Number.isNaN(parsed.valueOf()) && parsed.toISOString() === value;
+};
+function without(record, ...keys) {
+    const copy = { ...record };
+    keys.forEach(key => delete copy[key]);
+    return copy;
+}
+export function supportingRecordIdPayloadV1(record) {
+    return `${SUPPORTING_RECORD_ID_TAG}\0${record.record_type}\0${strictJCS(without(record, 'record_id', 'sig'))}`;
+}
+export function computeSupportingRecordIdV1(record) {
+    return sha256Hex(supportingRecordIdPayloadV1(record));
+}
+export function supportingRecordSignaturePayloadV1(record) {
+    return `${SUPPORTING_RECORD_SIG_TAG}\0${record.record_type}\0${strictJCS(without(record, 'sig'))}`;
+}
+export function validateSupportingRecordV1(record, requireCrypto = true) {
+    assertExactKeys(record, ['profile', 'record_id', 'record_type', 'issuer', 'issuer_key_id', 'issued_at', 'action_ref', 'body', 'sig_alg', 'sig'], ['profile', 'record_id', 'record_type', 'issuer', 'issuer_key_id', 'issued_at', 'body', 'sig_alg', 'sig'], 'SupportingRecordV1');
+    strictJCS(record);
+    if (record.profile !== 'aps-supporting-record-v1')
+        throw new TypeError('SupportingRecordV1: profile');
+    if (!record.record_type || !record.issuer || !record.issuer_key_id)
+        throw new TypeError('SupportingRecordV1: identifier');
+    if (!isExactUtcMilliseconds(record.issued_at))
+        throw new TypeError('SupportingRecordV1: issued_at');
+    if (record.action_ref !== undefined && !HEX64.test(record.action_ref))
+        throw new TypeError('SupportingRecordV1: action_ref');
+    if (typeof record.body !== 'object' || record.body === null || Array.isArray(record.body))
+        throw new TypeError('SupportingRecordV1: body');
+    if (record.sig_alg !== 'Ed25519')
+        throw new TypeError('SupportingRecordV1: sig_alg');
+    if (requireCrypto && (!HEX64.test(record.record_id) || !HEX128.test(record.sig)))
+        throw new TypeError('SupportingRecordV1: crypto encoding');
+}
+export function createSupportingRecordV1(fields, privateKey) {
+    const record = { ...structuredClone(fields), record_id: '0'.repeat(64), sig: '' };
+    validateSupportingRecordV1(record, false);
+    record.record_id = computeSupportingRecordIdV1(record);
+    record.sig = sign(supportingRecordSignaturePayloadV1(record), privateKey);
+    validateSupportingRecordV1(record);
+    return record;
+}
+export function verifySupportingRecordV1(record, publicKey) {
+    try {
+        validateSupportingRecordV1(record);
+    }
+    catch {
+        return { valid: false, id_valid: false, signature_valid: false };
+    }
+    const id_valid = computeSupportingRecordIdV1(record) === record.record_id;
+    const signature_valid = verify(supportingRecordSignaturePayloadV1(record), record.sig, publicKey);
+    return { valid: id_valid && signature_valid, id_valid, signature_valid };
+}
+function validateEvidenceBundleMemberV2(entry) {
+    assertExactKeys(entry, ['member_id', 'member_type', 'sha256'], ['member_id', 'member_type', 'sha256'], 'EvidenceBundleMemberV2');
+    if (!entry.member_id || !entry.member_type || !HEX64.test(entry.sha256))
+        throw new TypeError('EvidenceBundleMemberV2: value');
+}
+function entryCanonical(entry) {
+    validateEvidenceBundleMemberV2(entry);
+    return strictJCS(entry);
+}
+export function evidenceBundleMerkleRootV2(entries) {
+    if (entries.length === 0)
+        throw new TypeError('EvidenceBundleV2: at least one member');
+    const seen = new Set();
+    const canonicalEntries = entries.map((entry, i) => {
+        const canonical = entryCanonical(entry);
+        if (seen.has(entry.member_id))
+            throw new TypeError('EvidenceBundleV2: duplicate member_id');
+        seen.add(entry.member_id);
+        if (i > 0 && Buffer.compare(Buffer.from(entryCanonical(entries[i - 1]), 'utf8'), Buffer.from(canonical, 'utf8')) >= 0) {
+            throw new TypeError('EvidenceBundleV2: members not sorted');
+        }
+        return canonical;
+    });
+    let level = canonicalEntries.map(canonical => sha256(Buffer.concat([Buffer.from([0]), Buffer.from(canonical, 'utf8')])));
+    while (level.length > 1) {
+        const next = [];
+        for (let i = 0; i < level.length; i += 2) {
+            if (i + 1 === level.length)
+                next.push(level[i]);
+            else
+                next.push(sha256(Buffer.concat([Buffer.from([1]), level[i], level[i + 1]])));
+        }
+        level = next;
+    }
+    return level[0].toString('hex');
+}
+export function buildEvidenceBundleBodyV2(members) {
+    if (members.length === 0)
+        throw new TypeError('EvidenceBundleV2: at least one member');
+    const seen = new Set();
+    const entries = members.map(member => {
+        assertExactKeys(member, ['member_id', 'member_type', 'payload'], ['member_id', 'member_type', 'payload'], 'EvidenceBundleMemberInputV2');
+        if (!member.member_id || !member.member_type)
+            throw new TypeError('EvidenceBundleV2: member identifier');
+        if (seen.has(member.member_id))
+            throw new TypeError('EvidenceBundleV2: duplicate member_id');
+        seen.add(member.member_id);
+        return { member_id: member.member_id, member_type: member.member_type, sha256: sha256Hex(strictJCS(member.payload)) };
+    }).sort((a, b) => Buffer.compare(Buffer.from(entryCanonical(a)), Buffer.from(entryCanonical(b))));
+    return { members: entries, merkle_root: evidenceBundleMerkleRootV2(entries) };
+}
+export function verifyEvidenceBundleBodyV2(body, payloads) {
+    try {
+        assertExactKeys(body, ['members', 'merkle_root'], ['members', 'merkle_root'], 'EvidenceBundleBodyV2');
+        if (!Array.isArray(body.members) || body.members.length === 0 || !HEX64.test(body.merkle_root))
+            return false;
+        const seen = new Set();
+        for (let i = 0; i < body.members.length; i++) {
+            const entry = body.members[i];
+            validateEvidenceBundleMemberV2(entry);
+            if (seen.has(entry.member_id))
+                return false;
+            seen.add(entry.member_id);
+            if (i > 0 && Buffer.compare(Buffer.from(entryCanonical(body.members[i - 1])), Buffer.from(entryCanonical(entry))) >= 0)
+                return false;
+            if (payloads && (!Object.prototype.hasOwnProperty.call(payloads, entry.member_id) || sha256Hex(strictJCS(payloads[entry.member_id])) !== entry.sha256))
+                return false;
+        }
+        return evidenceBundleMerkleRootV2(body.members) === body.merkle_root;
+    }
+    catch {
+        return false;
+    }
+}
+function evidenceLeaf(entry) {
+    return sha256(Buffer.concat([Buffer.from([0]), Buffer.from(entryCanonical(entry), 'utf8')]));
+}
+/** Build an inclusion proof over the already-sorted manifest members.
+ *  Odd nodes are promoted, never duplicated, and the promotion is explicit in
+ *  the proof so a verifier can validate the tree shape from leaf_count. */
+export function buildEvidenceBundleProofV2(entries, memberId) {
+    evidenceBundleMerkleRootV2(entries);
+    const leaf_index = entries.findIndex(entry => entry.member_id === memberId);
+    if (leaf_index < 0)
+        throw new TypeError('EvidenceBundleV2: member not found');
+    let index = leaf_index;
+    let level = entries.map(evidenceLeaf);
+    const path = [];
+    while (level.length > 1) {
+        if (index % 2 === 1)
+            path.push({ position: 'left', sha256: level[index - 1].toString('hex') });
+        else if (index + 1 < level.length)
+            path.push({ position: 'right', sha256: level[index + 1].toString('hex') });
+        else
+            path.push({ position: 'promote' });
+        const next = [];
+        for (let i = 0; i < level.length; i += 2) {
+            if (i + 1 === level.length)
+                next.push(level[i]);
+            else
+                next.push(sha256(Buffer.concat([Buffer.from([1]), level[i], level[i + 1]])));
+        }
+        index = Math.floor(index / 2);
+        level = next;
+    }
+    return { profile: 'aps-evidence-proof-v2', member: { ...entries[leaf_index] }, leaf_index, leaf_count: entries.length, path };
+}
+export function verifyEvidenceBundleProofV2(proof, trustedRoot, payload) {
+    try {
+        assertExactKeys(proof, ['profile', 'member', 'leaf_index', 'leaf_count', 'path'], ['profile', 'member', 'leaf_index', 'leaf_count', 'path'], 'EvidenceBundleProofV2');
+        if (proof.profile !== 'aps-evidence-proof-v2' || !HEX64.test(trustedRoot))
+            return false;
+        validateEvidenceBundleMemberV2(proof.member);
+        if (!Number.isSafeInteger(proof.leaf_index) || !Number.isSafeInteger(proof.leaf_count) || proof.leaf_count < 1 || proof.leaf_index < 0 || proof.leaf_index >= proof.leaf_count || !Array.isArray(proof.path))
+            return false;
+        if (payload !== undefined && sha256Hex(strictJCS(payload)) !== proof.member.sha256)
+            return false;
+        let index = proof.leaf_index;
+        let width = proof.leaf_count;
+        let hash = evidenceLeaf(proof.member);
+        let pathIndex = 0;
+        while (width > 1) {
+            const step = proof.path[pathIndex++];
+            if (!step)
+                return false;
+            const expected = index % 2 === 1 ? 'left' : index + 1 < width ? 'right' : 'promote';
+            if (step.position !== expected)
+                return false;
+            if (step.position === 'promote') {
+                assertExactKeys(step, ['position'], ['position'], 'EvidenceBundleProofStepV2');
+            }
+            else {
+                assertExactKeys(step, ['position', 'sha256'], ['position', 'sha256'], 'EvidenceBundleProofStepV2');
+                if (!HEX64.test(step.sha256))
+                    return false;
+                const sibling = Buffer.from(step.sha256, 'hex');
+                hash = step.position === 'left'
+                    ? sha256(Buffer.concat([Buffer.from([1]), sibling, hash]))
+                    : sha256(Buffer.concat([Buffer.from([1]), hash, sibling]));
+            }
+            index = Math.floor(index / 2);
+            width = Math.ceil(width / 2);
+        }
+        return pathIndex === proof.path.length && hash.toString('hex') === trustedRoot;
+    }
+    catch {
+        return false;
+    }
+}
+/** Explicit discriminator dispatch. Verification code must never try both canonicalizers. */
+export function classifySupportingRecordFormat(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        return { format: 'unknown', canonicalization: 'unknown', legacy: false };
+    const v = value;
+    if (v.profile === 'aps-supporting-record-v1')
+        return { format: 'supporting-record-v1', canonicalization: 'rfc8785', legacy: false };
+    if (v.profile === 'aps-composition-check-v0')
+        return { format: 'composition-check-v0', canonicalization: 'rfc8785-tagged-v0', legacy: true };
+    if (v.spec_version === '0.1.0' && v.record_type === 'accountability_record')
+        return { format: 'accountability-record-0.1.0', canonicalization: 'rfc8785-untagged', legacy: true };
+    if (v.type === 'read_fidelity_receipt')
+        return { format: 'read-fidelity-unwrapped', canonicalization: 'rfc8785-untagged', legacy: true };
+    if (typeof v.manifest === 'object' && v.manifest !== null && v.manifest.profile === 'aps:evidence-bundle:v1')
+        return { format: 'evidence-bundle-v1', canonicalization: 'aps-legacy-null-dropping', legacy: true };
+    if ('authority_ref' in v && 'observer_key' in v && !('profile' in v))
+        return { format: 'revocation-observation-unversioned', canonicalization: 'aps-legacy-null-dropping', legacy: true };
+    return { format: 'unknown', canonicalization: 'unknown', legacy: false };
+}
+/** Legacy canonical bytes are exposed only after explicit legacy classification. */
+export function legacyNullDroppingPayload(value) {
+    return canonicalize(value);
+}
+//# sourceMappingURL=supporting-record.js.map

package/dist/src/v2/receipt-core/supporting-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supporting-record.js","sourceRoot":"","sources":["../../../../src/v2/receipt-core/supporting-record.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AAEtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AACtD,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AAGrD,MAAM,CAAC,MAAM,wBAAwB,GAAG,6BAAsC,CAAA;AAC9E,MAAM,CAAC,MAAM,yBAAyB,GAAG,8BAAuC,CAAA;AAChF,MAAM,KAAK,GAAG,gBAAgB,CAAA;AAC9B,MAAM,MAAM,GAAG,iBAAiB,CAAA;AAChC,MAAM,MAAM,GAAG,+CAA+C,CAAA;AAC9D,MAAM,MAAM,GAAG,CAAC,KAAsB,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAA;AAC9F,MAAM,SAAS,GAAG,CAAC,KAAsB,EAAU,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AACnF,MAAM,sBAAsB,GAAG,CAAC,KAAa,EAAW,EAAE;IACxD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACrC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAA;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,CAAA;AAC1E,CAAC,CAAA;AAED,SAAS,OAAO,CAAC,MAA0B,EAAE,GAAG,IAA6B;IAC3E,MAAM,IAAI,GAAG,EAAE,GAAG,MAAM,EAA0C,CAAA;IAClE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IACrC,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAA0B;IACpE,OAAO,GAAG,wBAAwB,KAAK,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,EAAE,CAAA;AAChH,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAA0B;IACpE,OAAO,SAAS,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC,CAAA;AACvD,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,MAA0B;IAC3E,OAAO,GAAG,yBAAyB,KAAK,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,CAAA;AACpG,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,MAA0B,EAAE,aAAa,GAAG,IAAI;IACzF,eAAe,CAAC,MAA4C,EAC1D,CAAC,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,eAAe,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,EACvH,CAAC,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,oBAAoB,CAAC,CAAA;IAClI,SAAS,CAAC,MAAM,CAAC,CAAA;IACjB,IAAI,MAAM,CAAC,OAAO,KAAK,0BAA0B;QAAE,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAA;IACrG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa;QAAE,MAAM,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAA;IACzH,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAA;IACnG,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAA;IAC5H,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAA;IAC1I,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAA;IACpF,IAAI,aAAa,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAA;AAC9I,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,MAAqD,EACrD,UAAkB;IAElB,MAAM,MAAM,GAAG,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAwB,CAAA;IACvG,0BAA0B,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IACzC,MAAM,CAAC,SAAS,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAA;IACtD,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,kCAAkC,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,CAAA;IACzE,0BAA0B,CAAC,MAAM,CAAC,CAAA;IAClC,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAA0B,EAAE,SAAiB;IACpF,IAAI,CAAC;QAAC,0BAA0B,CAAC,MAAM,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,CAAA;IAAC,CAAC;IACrH,MAAM,QAAQ,GAAG,2BAA2B,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,SAAS,CAAA;IACzE,MAAM,eAAe,GAAG,MAAM,CAAC,kCAAkC,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IACjG,OAAO,EAAE,KAAK,EAAE,QAAQ,IAAI,eAAe,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAA;AAC1E,CAAC;AAED,SAAS,8BAA8B,CAAC,KAA6B;IACnE,eAAe,CAAC,KAA2C,EAAE,CAAC,WAAW,EAAE,aAAa,EAAE,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,aAAa,EAAE,QAAQ,CAAC,EAAE,wBAAwB,CAAC,CAAA;IACtK,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAA;AAC/H,CAAC;AAED,SAAS,cAAc,CAAC,KAA6B;IACnD,8BAA8B,CAAC,KAAK,CAAC,CAAA;IACrC,OAAO,SAAS,CAAC,KAAK,CAAC,CAAA;AACzB,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAiC;IAC1E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAA;IACtF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QAChD,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;QACvC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAA;QAC3F,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QACzB,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACtH,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAA;QAC7D,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC,CAAC,CAAA;IACF,IAAI,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxH,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAa,EAAE,CAAA;QACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM;gBAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;;gBAC1C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACnF,CAAC;QACD,KAAK,GAAG,IAAI,CAAA;IACd,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AACjC,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAAsC;IAC9E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAA;IACtF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;QACnC,eAAe,CAAC,MAA4C,EAAE,CAAC,WAAW,EAAE,aAAa,EAAE,SAAS,CAAC,EAAE,CAAC,WAAW,EAAE,aAAa,EAAE,SAAS,CAAC,EAAE,6BAA6B,CAAC,CAAA;QAC9K,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAA;QACxG,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAA;QAC5F,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAA;IACvH,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACjG,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,0BAA0B,CAAC,OAAO,CAAC,EAAE,CAAA;AAC/E,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,IAA0B,EAAE,QAAoC;IACzG,IAAI,CAAC;QACH,eAAe,CAAC,IAA0C,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,sBAAsB,CAAC,CAAA;QAC3I,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,OAAO,KAAK,CAAA;QAC5G,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;QAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;YAC7B,8BAA8B,CAAC,KAAK,CAAC,CAAA;YACrC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;gBAAE,OAAO,KAAK,CAAA;YAC3C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;YACzB,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,OAAO,KAAK,CAAA;YACpI,IAAI,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC;gBAAE,OAAO,KAAK,CAAA;QACtK,CAAC;QACD,OAAO,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,WAAW,CAAA;IACtE,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAA;IAAC,CAAC;AAC1B,CAAC;AAED,SAAS,YAAY,CAAC,KAA6B;IACjD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;AAC9F,CAAC;AAED;;2EAE2E;AAC3E,MAAM,UAAU,0BAA0B,CAAC,OAAiC,EAAE,QAAgB;IAC5F,0BAA0B,CAAC,OAAO,CAAC,CAAA;IACnC,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAA;IAC3E,IAAI,UAAU,GAAG,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAA;IAC7E,IAAI,KAAK,GAAG,UAAU,CAAA;IACtB,IAAI,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;IACrC,MAAM,IAAI,GAAgC,EAAE,CAAA;IAC5C,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,IAAI,KAAK,GAAG,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;aACzF,IAAI,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;;YACxG,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAA;QACvC,MAAM,IAAI,GAAa,EAAE,CAAA;QACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM;gBAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;;gBAC1C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACnF,CAAC;QACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;QAC7B,KAAK,GAAG,IAAI,CAAA;IACd,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,CAAA;AAC/H,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAA4B,EAAE,WAAmB,EAAE,OAAmB;IAChH,IAAI,CAAC;QACH,eAAe,CAAC,KAA2C,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,uBAAuB,CAAC,CAAA;QAC3M,IAAI,KAAK,CAAC,OAAO,KAAK,uBAAuB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,OAAO,KAAK,CAAA;QACvF,8BAA8B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAC5C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAA;QAC1N,IAAI,OAAO,KAAK,SAAS,IAAI,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO,KAAK,CAAA;QAChG,IAAI,KAAK,GAAG,KAAK,CAAC,UAAU,CAAA;QAC5B,IAAI,KAAK,GAAG,KAAK,CAAC,UAAU,CAAA;QAC5B,IAAI,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACrC,IAAI,SAAS,GAAG,CAAC,CAAA;QACjB,OAAO,KAAK,GAAG,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAA;YACpC,IAAI,CAAC,IAAI;gBAAE,OAAO,KAAK,CAAA;YACvB,MAAM,QAAQ,GAAG,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;YACnF,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAA;YAC5C,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAChC,eAAe,CAAC,IAA0C,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,2BAA2B,CAAC,CAAA;YACtH,CAAC;iBAAM,CAAC;gBACN,eAAe,CAAC,IAA0C,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,2BAA2B,CAAC,CAAA;gBACxI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;oBAAE,OAAO,KAAK,CAAA;gBAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;gBAC/C,IAAI,GAAG,IAAI,CAAC,QAAQ,KAAK,MAAM;oBAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;oBAC1D,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;YAC9D,CAAC;YACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;YAC7B,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;QAC9B,CAAC;QACD,OAAO,SAAS,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,WAAW,CAAA;IAChF,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAA;IAAC,CAAC;AAC1B,CAAC;AAWD,6FAA6F;AAC7F,MAAM,UAAU,8BAA8B,CAAC,KAAc;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;IACjJ,MAAM,CAAC,GAAG,KAAgC,CAAA;IAC1C,IAAI,CAAC,CAAC,OAAO,KAAK,0BAA0B;QAAE,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;IACnI,IAAI,CAAC,CAAC,OAAO,KAAK,0BAA0B;QAAE,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IAC5I,IAAI,CAAC,CAAC,YAAY,KAAK,OAAO,IAAI,CAAC,CAAC,WAAW,KAAK,uBAAuB;QAAE,OAAO,EAAE,MAAM,EAAE,6BAA6B,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IACjL,IAAI,CAAC,CAAC,IAAI,KAAK,uBAAuB;QAAE,OAAO,EAAE,MAAM,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IACxI,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAK,CAAC,CAAC,QAAoC,CAAC,OAAO,KAAK,wBAAwB;QAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IAC9O,IAAI,eAAe,IAAI,CAAC,IAAI,cAAc,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,oCAAoC,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IACzL,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;AAC1E,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,yBAAyB,CAAC,KAAgB;IACxD,OAAO,YAAY,CAAC,KAAK,CAAC,CAAA;AAC5B,CAAC"}

package/dist/src/v2/receipt-core/types.d.ts

@@ -0,0 +1,94 @@
+export type JsonPrimitive = null | boolean | number | string;
+export type JsonValue = JsonPrimitive | JsonValue[] | {
+    [key: string]: JsonValue;
+};
+export type Hex64 = string;
+export type Hex128 = string;
+export interface EvidenceRefV1 {
+    artifact_type: string;
+    sha256: Hex64;
+}
+export interface ReceiptSignatureV1 {
+    signer: string;
+    key_id: string;
+    alg: 'Ed25519';
+    value: Hex128;
+}
+export interface ReceiptV1 {
+    profile: 'aps-receipt-v1';
+    receipt_id: Hex64;
+    receipt_type: string;
+    issuer: string;
+    subject_agent: string;
+    action_ref: Hex64;
+    delegation_ref: string;
+    decision_ref?: Hex64;
+    issued_at: string;
+    evidence_refs: EvidenceRefV1[];
+    result: {
+        [key: string]: JsonValue;
+    };
+    prev?: Hex64;
+    signatures: ReceiptSignatureV1[];
+}
+export interface ReceiptSignerV1 {
+    signer: string;
+    key_id: string;
+    private_key: string;
+}
+export interface DecisionRefInputV1 {
+    profile: 'aps-decision-ref-v1';
+    action_ref: Hex64;
+    authority_state_ref: Hex64;
+    policy_ref: Hex64;
+    context_ref: Hex64;
+    decision_output_ref: Hex64;
+}
+export interface CoreDecisionOutputV1 {
+    profile: 'aps-core-decision-output-v1';
+    verdict: 'permit' | 'deny' | 'narrow';
+    effective_authority_ref: Hex64 | null;
+    constraints: string[];
+}
+export interface SupportingRecordV1 {
+    profile: 'aps-supporting-record-v1';
+    record_id: Hex64;
+    record_type: string;
+    issuer: string;
+    issuer_key_id: string;
+    issued_at: string;
+    action_ref?: Hex64;
+    body: {
+        [key: string]: JsonValue;
+    };
+    sig_alg: 'Ed25519';
+    sig: Hex128;
+}
+export interface EvidenceBundleMemberInputV2 {
+    member_id: string;
+    member_type: string;
+    payload: JsonValue;
+}
+export interface EvidenceBundleMemberV2 {
+    member_id: string;
+    member_type: string;
+    sha256: Hex64;
+}
+export interface EvidenceBundleBodyV2 {
+    members: EvidenceBundleMemberV2[];
+    merkle_root: Hex64;
+}
+export type EvidenceBundleProofStepV2 = {
+    position: 'left' | 'right';
+    sha256: Hex64;
+} | {
+    position: 'promote';
+};
+export interface EvidenceBundleProofV2 {
+    profile: 'aps-evidence-proof-v2';
+    member: EvidenceBundleMemberV2;
+    leaf_index: number;
+    leaf_count: number;
+    path: EvidenceBundleProofStepV2[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/src/v2/receipt-core/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/v2/receipt-core/types.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,aAAa,GAAG,IAAI,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAA;AAC5D,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,SAAS,EAAE,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAA;AAElF,MAAM,MAAM,KAAK,GAAG,MAAM,CAAA;AAC1B,MAAM,MAAM,MAAM,GAAG,MAAM,CAAA;AAE3B,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,MAAM,CAAA;IACrB,MAAM,EAAE,KAAK,CAAA;CACd;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,SAAS,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,gBAAgB,CAAA;IACzB,UAAU,EAAE,KAAK,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,KAAK,CAAA;IACjB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,KAAK,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,EAAE,aAAa,EAAE,CAAA;IAC9B,MAAM,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAA;IACpC,IAAI,CAAC,EAAE,KAAK,CAAA;IACZ,UAAU,EAAE,kBAAkB,EAAE,CAAA;CACjC;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,qBAAqB,CAAA;IAC9B,UAAU,EAAE,KAAK,CAAA;IACjB,mBAAmB,EAAE,KAAK,CAAA;IAC1B,UAAU,EAAE,KAAK,CAAA;IACjB,WAAW,EAAE,KAAK,CAAA;IAClB,mBAAmB,EAAE,KAAK,CAAA;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,6BAA6B,CAAA;IACtC,OAAO,EAAE,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAA;IACrC,uBAAuB,EAAE,KAAK,GAAG,IAAI,CAAA;IACrC,WAAW,EAAE,MAAM,EAAE,CAAA;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,0BAA0B,CAAA;IACnC,SAAS,EAAE,KAAK,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,aAAa,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,KAAK,CAAA;IAClB,IAAI,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAA;IAClC,OAAO,EAAE,SAAS,CAAA;IAClB,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,MAAM,WAAW,2BAA2B;IAC1C,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,SAAS,CAAA;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,KAAK,CAAA;CACd;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,sBAAsB,EAAE,CAAA;IACjC,WAAW,EAAE,KAAK,CAAA;CACnB;AAED,MAAM,MAAM,yBAAyB,GACjC;IAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAAC,MAAM,EAAE,KAAK,CAAA;CAAE,GAC7C;IAAE,QAAQ,EAAE,SAAS,CAAA;CAAE,CAAA;AAE3B,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,uBAAuB,CAAA;IAChC,MAAM,EAAE,sBAAsB,CAAA;IAC9B,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,yBAAyB,EAAE,CAAA;CAClC"}

package/dist/src/v2/receipt-core/types.js

@@ -0,0 +1,4 @@
+// Copyright (c) 2026 Tymofii Pidlisnyi
+// SPDX-License-Identifier: Apache-2.0
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/v2/receipt-core/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/v2/receipt-core/types.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC"}