agent-passport-system 4.1.1 → 4.3.0

package/README.md

@@ -251,7 +251,7 @@ The composition contract specifies how a verifier MUST cross-check per-request s
 
 4,326 tests. 8 protocol layers. Framework adapters for CrewAI, LangChain, ADK, A2A, MCP, OpenShell, IBAC, Gonka. Gateway evaluation under 2ms. Zero heavy dependencies. Apache-2.0.
 
-The test count is one number derived from the suite, not three guesses. The badge above, this section, and the `package.json` description all carry the same `4,026`, which is the `tests` total reported by `npm test`. When the suite grows, re-run `npm test`, read the `tests` line, and update all three to match.
+The test count is one number derived from the suite, not three guesses. The badge above, this section, and the `package.json` description all carry the same `4,326`, which is the `tests` total reported by `npm test`. When the suite grows, re-run `npm test`, read the `tests` line, and update all three to match.
 
 ## Papers
 
@@ -263,7 +263,7 @@ The test count is one number derived from the suite, not three guesses. The badg
 - [Governance in the Medium](https://doi.org/10.5281/zenodo.19582550)
 - [Cognitive Attestation](https://doi.org/10.5281/zenodo.19646276)
 - [The Evidence-Safety Gap](https://doi.org/10.5281/zenodo.19914628)
-- IETF Internet-Draft: `draft-pidlisnyi-aps-01`
+- IETF Internet-Draft: `draft-pidlisnyi-aps-03`
 
 ## Security and conformance
 

package/dist/src/adapters/oauth-id-jag/import-v1.d.ts

@@ -0,0 +1,74 @@
+import type { HistoricalKeyResolver } from '../../v2/identity-binding/types.js';
+import type { IdJagClaims } from './types.js';
+export type IdJagActorBindingV1 = {
+    method: 'cnf.jkt';
+    agent_id: string;
+    verification_method: string;
+    jwk_thumbprint: string;
+} | {
+    method: 'dual_signature';
+    agent_id: string;
+    verification_method: string;
+    signature: string;
+};
+export interface IdJagImportV1 {
+    profile: 'aps-id-jag-import-v1';
+    draft: string;
+    grant_ref: string;
+    grant_decision_ref: string;
+    delegation_chain_root: string;
+    issuer: string;
+    subject: string;
+    client_id: string;
+    audience: string[];
+    agent_id: string;
+    actor_binding: IdJagActorBindingV1;
+    verified_by: string;
+    verification_method: string;
+    grant_key_id: string;
+    verified_at: string;
+    issued_at: string;
+    signature: string;
+}
+export interface VerifiedCompactIdJagGrantV1 {
+    compact_jws: string;
+    claims: IdJagClaims & {
+        cnf?: {
+            jkt?: string;
+        };
+    };
+    verification: {
+        status: 'verified';
+        verified_by: string;
+        verification_method: string;
+        grant_key_id: string;
+        verified_at: string;
+    };
+}
+export interface IdJagImportVerificationV1 {
+    state: 'valid' | 'invalid' | 'indeterminate';
+    code: string;
+    grant_bytes: 'matched' | 'mismatch';
+    importer_signature: 'verified' | 'rejected' | 'unresolved';
+    actor_binding: 'verified' | 'rejected' | 'unresolved';
+}
+export declare function computeIdJagGrantRefV1(compactJws: string): string;
+export declare function createIdJagActorBindingSignatureV1(grantRef: string, agentId: string, verificationMethod: string, agentPrivateKeyHex: string): string;
+export declare function createIdJagImportV1(input: {
+    grant: VerifiedCompactIdJagGrantV1;
+    delegation_chain_root: string;
+    agent_binding: IdJagActorBindingV1;
+    importer_private_key_hex: string;
+    issued_at: string;
+    resolve_agent_key?: HistoricalKeyResolver;
+    resolve_agent_jwk_thumbprint?: (agentId: string, verificationMethod: string, at: string) => string | undefined | Promise<string | undefined>;
+}): Promise<IdJagImportV1>;
+export declare function verifyIdJagImportV1(candidate: unknown, source: {
+    compact_jws: string;
+    claims: VerifiedCompactIdJagGrantV1['claims'];
+}, options: {
+    resolve_importer_key: HistoricalKeyResolver;
+    resolve_agent_key?: HistoricalKeyResolver;
+    resolve_agent_jwk_thumbprint?: (agentId: string, verificationMethod: string, at: string) => string | undefined | Promise<string | undefined>;
+}): Promise<IdJagImportVerificationV1>;
+//# sourceMappingURL=import-v1.d.ts.map

package/dist/src/adapters/oauth-id-jag/import-v1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-v1.d.ts","sourceRoot":"","sources":["../../../../src/adapters/oauth-id-jag/import-v1.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAA;AAU/E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAQ7C,MAAM,MAAM,mBAAmB,GAC3B;IACE,MAAM,EAAE,SAAS,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,cAAc,EAAE,MAAM,CAAA;CACvB,GACD;IACE,MAAM,EAAE,gBAAgB,CAAA;IACxB,QAAQ,EAAE,MAAM,CAAA;IAChB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA;AAEL,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,sBAAsB,CAAA;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,qBAAqB,EAAE,MAAM,CAAA;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,mBAAmB,CAAA;IAClC,WAAW,EAAE,MAAM,CAAA;IACnB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,2BAA2B;IAC1C,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,WAAW,GAAG;QAAE,GAAG,CAAC,EAAE;YAAE,GAAG,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAA;IAChD,YAAY,EAAE;QACZ,MAAM,EAAE,UAAU,CAAA;QAClB,WAAW,EAAE,MAAM,CAAA;QACnB,mBAAmB,EAAE,MAAM,CAAA;QAC3B,YAAY,EAAE,MAAM,CAAA;QACpB,WAAW,EAAE,MAAM,CAAA;KACpB,CAAA;CACF;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,eAAe,CAAA;IAC5C,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,SAAS,GAAG,UAAU,CAAA;IACnC,kBAAkB,EAAE,UAAU,GAAG,UAAU,GAAG,YAAY,CAAA;IAC1D,aAAa,EAAE,UAAU,GAAG,UAAU,GAAG,YAAY,CAAA;CACtD;AAED,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAGjE;AAED,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,kBAAkB,EAAE,MAAM,EAC1B,kBAAkB,EAAE,MAAM,GACzB,MAAM,CAIR;AAED,wBAAsB,mBAAmB,CAAC,KAAK,EAAE;IAC/C,KAAK,EAAE,2BAA2B,CAAA;IAClC,qBAAqB,EAAE,MAAM,CAAA;IAC7B,aAAa,EAAE,mBAAmB,CAAA;IAClC,wBAAwB,EAAE,MAAM,CAAA;IAChC,SAAS,EAAE,MAAM,CAAA;IACjB,iBAAiB,CAAC,EAAE,qBAAqB,CAAA;IACzC,4BAA4B,CAAC,EAAE,CAC7B,OAAO,EAAE,MAAM,EACf,kBAAkB,EAAE,MAAM,EAC1B,EAAE,EAAE,MAAM,KACP,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;CACtD,GAAG,OAAO,CAAC,aAAa,CAAC,CA4CzB;AAED,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,OAAO,EAClB,MAAM,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,2BAA2B,CAAC,QAAQ,CAAC,CAAA;CAAE,EAC9E,OAAO,EAAE;IACP,oBAAoB,EAAE,qBAAqB,CAAA;IAC3C,iBAAiB,CAAC,EAAE,qBAAqB,CAAA;IACzC,4BAA4B,CAAC,EAAE,CAC7B,OAAO,EAAE,MAAM,EACf,kBAAkB,EAAE,MAAM,EAC1B,EAAE,EAAE,MAAM,KACP,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;CACtD,GACA,OAAO,CAAC,yBAAyB,CAAC,CAsEpC"}

package/dist/src/adapters/oauth-id-jag/import-v1.js

@@ -0,0 +1,243 @@
+// Copyright (c) 2026 Tymofii Pidlisnyi
+// SPDX-License-Identifier: Apache-2.0
+import { createHash } from 'node:crypto';
+import { canonicalizeJCS } from '../../core/canonical-jcs.js';
+import { sign, verify } from '../../crypto/keys.js';
+import { assertExactKeys, assertHex, assertIJson, assertPlainRecord, assertSortedUnique, assertUtcMilliseconds, sortedUnique, } from '../../v2/identity-binding/validation.js';
+import { IDJAG_DRAFT } from './types.js';
+const GRANT_DOMAIN = 'APS-IDJAG-GRANT-V1\0';
+const ACTOR_BINDING_DOMAIN = 'APS-IDJAG-ACTOR-BINDING-V1\0';
+const DECISION_DOMAIN = 'APS-IDJAG-GRANT-DECISION-V1\0';
+const IMPORT_SIGNATURE_DOMAIN = 'APS-IDJAG-IMPORT-SIG-V1\0';
+export function computeIdJagGrantRefV1(compactJws) {
+    validateCompactJws(compactJws);
+    return digest(GRANT_DOMAIN + compactJws);
+}
+export function createIdJagActorBindingSignatureV1(grantRef, agentId, verificationMethod, agentPrivateKeyHex) {
+    assertHex(grantRef, 64, 'grant_ref');
+    const body = { agent_id: agentId, grant_ref: grantRef, verification_method: verificationMethod };
+    return sign(ACTOR_BINDING_DOMAIN + canonicalizeJCS(body), agentPrivateKeyHex);
+}
+export async function createIdJagImportV1(input) {
+    validateVerifiedGrant(input.grant);
+    assertHex(input.delegation_chain_root, 64, 'delegation_chain_root');
+    assertUtcMilliseconds(input.issued_at, 'issued_at');
+    const grantRef = computeIdJagGrantRefV1(input.grant.compact_jws);
+    await verifyActorBindingOrThrow(input.grant, grantRef, input.agent_binding, input.resolve_agent_key, input.resolve_agent_jwk_thumbprint);
+    const audiences = normalizeAudience(input.grant.claims.aud, input.grant.claims.resource);
+    const decisionInput = grantDecisionInput(grantRef, input.grant, input.agent_binding, input.delegation_chain_root, audiences);
+    const grantDecisionRef = digest(DECISION_DOMAIN + canonicalizeJCS(decisionInput));
+    const unsigned = {
+        profile: 'aps-id-jag-import-v1',
+        draft: IDJAG_DRAFT,
+        grant_ref: grantRef,
+        grant_decision_ref: grantDecisionRef,
+        delegation_chain_root: input.delegation_chain_root,
+        issuer: input.grant.claims.iss,
+        subject: input.grant.claims.sub,
+        client_id: input.grant.claims.client_id,
+        audience: audiences,
+        agent_id: input.agent_binding.agent_id,
+        actor_binding: input.agent_binding,
+        verified_by: input.grant.verification.verified_by,
+        verification_method: input.grant.verification.verification_method,
+        grant_key_id: input.grant.verification.grant_key_id,
+        verified_at: input.grant.verification.verified_at,
+        issued_at: input.issued_at,
+    };
+    validateImportUnsigned(unsigned);
+    return {
+        ...unsigned,
+        signature: sign(IMPORT_SIGNATURE_DOMAIN + canonicalizeJCS(unsigned), input.importer_private_key_hex),
+    };
+}
+export async function verifyIdJagImportV1(candidate, source, options) {
+    let record;
+    try {
+        record = validateImport(candidate);
+        validateClaimsMatchCompactJws(source.compact_jws, source.claims);
+    }
+    catch {
+        return outcome('invalid', 'IDJAG_IMPORT_MALFORMED', 'mismatch', 'rejected', 'rejected');
+    }
+    const grantRef = computeIdJagGrantRefV1(source.compact_jws);
+    if (grantRef !== record.grant_ref || !claimsMatchRecord(source.claims, record)) {
+        return outcome('invalid', 'IDJAG_GRANT_BYTES_MISMATCH', 'mismatch', 'rejected', 'rejected');
+    }
+    const syntheticGrant = {
+        compact_jws: source.compact_jws,
+        claims: source.claims,
+        verification: {
+            status: 'verified',
+            verified_by: record.verified_by,
+            verification_method: record.verification_method,
+            grant_key_id: record.grant_key_id,
+            verified_at: record.verified_at,
+        },
+    };
+    const decisionRef = digest(DECISION_DOMAIN + canonicalizeJCS(grantDecisionInput(grantRef, syntheticGrant, record.actor_binding, record.delegation_chain_root, record.audience)));
+    if (decisionRef !== record.grant_decision_ref) {
+        return outcome('invalid', 'IDJAG_GRANT_DECISION_MISMATCH', 'matched', 'rejected', 'rejected');
+    }
+    const importerResolution = await options.resolve_importer_key({
+        controller: record.verified_by,
+        verification_method: record.verification_method,
+        at: record.issued_at,
+    });
+    if (importerResolution.state !== 'resolved' || !importerResolution.public_key_hex) {
+        const unresolved = importerResolution.state === 'unreachable';
+        return outcome(unresolved ? 'indeterminate' : 'invalid', `IDJAG_IMPORTER_KEY_${importerResolution.state.toUpperCase()}`, 'matched', unresolved ? 'unresolved' : 'rejected', 'unresolved');
+    }
+    const unsigned = omit(record, ['signature']);
+    if (!verify(IMPORT_SIGNATURE_DOMAIN + canonicalizeJCS(unsigned), record.signature, importerResolution.public_key_hex))
+        return outcome('invalid', 'IDJAG_IMPORTER_SIGNATURE_INVALID', 'matched', 'rejected', 'unresolved');
+    try {
+        await verifyActorBindingOrThrow(syntheticGrant, grantRef, record.actor_binding, options.resolve_agent_key, options.resolve_agent_jwk_thumbprint);
+    }
+    catch (error) {
+        const unresolved = error instanceof Error && error.message.includes('unresolved');
+        return outcome(unresolved ? 'indeterminate' : 'invalid', unresolved ? 'IDJAG_ACTOR_BINDING_UNRESOLVED' : 'IDJAG_ACTOR_BINDING_INVALID', 'matched', 'verified', unresolved ? 'unresolved' : 'rejected');
+    }
+    return outcome('valid', 'OK', 'matched', 'verified', 'verified');
+}
+function validateVerifiedGrant(grant) {
+    validateClaimsMatchCompactJws(grant.compact_jws, grant.claims);
+    if (grant.verification.status !== 'verified')
+        throw new Error('grant not verified');
+    if (!grant.verification.verified_by || !grant.verification.verification_method || !grant.verification.grant_key_id) {
+        throw new Error('grant verification metadata incomplete');
+    }
+    if (!grant.verification.verification_method.startsWith(`${grant.verification.verified_by}#`)) {
+        throw new Error('grant verifier key/controller mismatch');
+    }
+    assertUtcMilliseconds(grant.verification.verified_at, 'verified_at');
+}
+function validateClaimsMatchCompactJws(compactJws, claims) {
+    validateCompactJws(compactJws);
+    assertIJson(claims);
+    const payload = JSON.parse(Buffer.from(compactJws.split('.')[1], 'base64url').toString('utf8'));
+    assertIJson(payload);
+    if (canonicalizeJCS(payload) !== canonicalizeJCS(claims))
+        throw new Error('decoded claims do not match compact JWS');
+}
+async function verifyActorBindingOrThrow(grant, grantRef, binding, resolveAgentKey, resolveThumbprint) {
+    validateActorBinding(binding);
+    if (binding.method === 'cnf.jkt') {
+        if (grant.claims.cnf?.jkt !== binding.jwk_thumbprint)
+            throw new Error('cnf.jkt mismatch');
+        if (!resolveThumbprint)
+            throw new Error('actor binding unresolved');
+        const resolved = await resolveThumbprint(binding.agent_id, binding.verification_method, grant.verification.verified_at);
+        if (!resolved)
+            throw new Error('actor binding unresolved');
+        if (resolved !== binding.jwk_thumbprint)
+            throw new Error('agent key thumbprint mismatch');
+        return;
+    }
+    if (!resolveAgentKey)
+        throw new Error('actor binding unresolved');
+    const resolution = await resolveAgentKey({
+        controller: binding.agent_id,
+        verification_method: binding.verification_method,
+        at: grant.verification.verified_at,
+    });
+    if (resolution.state !== 'resolved' || !resolution.public_key_hex)
+        throw new Error('actor binding unresolved');
+    const body = {
+        agent_id: binding.agent_id,
+        grant_ref: grantRef,
+        verification_method: binding.verification_method,
+    };
+    if (!verify(ACTOR_BINDING_DOMAIN + canonicalizeJCS(body), binding.signature, resolution.public_key_hex))
+        throw new Error('actor signature invalid');
+}
+function validateActorBinding(binding) {
+    assertPlainRecord(binding, 'actor binding');
+    if (!/^did:[a-z0-9]+:.+$/.test(binding.agent_id))
+        throw new Error('actor agent_id');
+    if (!binding.verification_method.startsWith(`${binding.agent_id}#`))
+        throw new Error('actor verification_method');
+    if (binding.method === 'cnf.jkt') {
+        assertExactKeys(binding, ['method', 'agent_id', 'verification_method', 'jwk_thumbprint'], [], 'actor binding');
+        if (!/^[A-Za-z0-9_-]{43}$/.test(binding.jwk_thumbprint))
+            throw new Error('actor jwk thumbprint');
+    }
+    else if (binding.method === 'dual_signature') {
+        assertExactKeys(binding, ['method', 'agent_id', 'verification_method', 'signature'], [], 'actor binding');
+        assertHex(binding.signature, 128, 'actor signature');
+    }
+    else
+        throw new Error('actor binding method');
+}
+function grantDecisionInput(grantRef, grant, binding, chainRoot, audience) {
+    return {
+        profile: 'aps-id-jag-grant-decision-v1',
+        grant_ref: grantRef,
+        delegation_chain_root: chainRoot,
+        audience,
+        actor_binding: binding,
+        verified_by: grant.verification.verified_by,
+        verification_method: grant.verification.verification_method,
+        grant_key_id: grant.verification.grant_key_id,
+        verified_at: grant.verification.verified_at,
+    };
+}
+function validateImport(value) {
+    assertPlainRecord(value, 'ID-JAG import');
+    assertExactKeys(value, [
+        'profile', 'draft', 'grant_ref', 'grant_decision_ref', 'delegation_chain_root',
+        'issuer', 'subject', 'client_id', 'audience', 'agent_id', 'actor_binding',
+        'verified_by', 'verification_method', 'grant_key_id', 'verified_at', 'issued_at', 'signature',
+    ], [], 'ID-JAG import');
+    validateImportUnsigned(omit(value, ['signature']));
+    assertHex(String(value.signature), 128, 'signature');
+    return value;
+}
+function validateImportUnsigned(value) {
+    assertIJson(value);
+    if (value.profile !== 'aps-id-jag-import-v1' || value.draft !== IDJAG_DRAFT)
+        throw new Error('ID-JAG profile');
+    assertHex(value.grant_ref, 64, 'grant_ref');
+    assertHex(value.grant_decision_ref, 64, 'grant_decision_ref');
+    assertHex(value.delegation_chain_root, 64, 'delegation_chain_root');
+    if (!value.issuer || !value.subject || !value.client_id || !value.grant_key_id)
+        throw new Error('ID-JAG identifiers');
+    if (!Array.isArray(value.audience) || value.audience.length === 0)
+        throw new Error('audience');
+    assertSortedUnique(value.audience, 'audience');
+    validateActorBinding(value.actor_binding);
+    if (value.agent_id !== value.actor_binding.agent_id)
+        throw new Error('agent_id mismatch');
+    if (!value.verification_method.startsWith(`${value.verified_by}#`))
+        throw new Error('importer verification method');
+    assertUtcMilliseconds(value.verified_at, 'verified_at');
+    assertUtcMilliseconds(value.issued_at, 'issued_at');
+}
+function normalizeAudience(aud, resource) {
+    return sortedUnique([aud, ...(resource === undefined ? [] : [resource])], 'audience');
+}
+function claimsMatchRecord(claims, record) {
+    return claims.iss === record.issuer && claims.sub === record.subject &&
+        claims.client_id === record.client_id &&
+        canonicalizeJCS(normalizeAudience(claims.aud, claims.resource)) === canonicalizeJCS(record.audience);
+}
+function validateCompactJws(value) {
+    if (typeof value !== 'string' || value.length > 131072 ||
+        !/^[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$/.test(value)) {
+        throw new Error('invalid compact JWS');
+    }
+}
+function digest(value) {
+    return createHash('sha256').update(value, 'utf8').digest('hex');
+}
+function omit(value, keys) {
+    const result = {};
+    for (const [key, entry] of Object.entries(value))
+        if (!keys.includes(key))
+            result[key] = entry;
+    return result;
+}
+function outcome(state, code, grant, importer, actor) {
+    return { state, code, grant_bytes: grant, importer_signature: importer, actor_binding: actor };
+}
+//# sourceMappingURL=import-v1.js.map

package/dist/src/adapters/oauth-id-jag/import-v1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-v1.js","sourceRoot":"","sources":["../../../../src/adapters/oauth-id-jag/import-v1.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AAEtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAC7D,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAEnD,OAAO,EACL,eAAe,EACf,SAAS,EACT,WAAW,EACX,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,YAAY,GACb,MAAM,yCAAyC,CAAA;AAEhD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAExC,MAAM,YAAY,GAAG,sBAAsB,CAAA;AAC3C,MAAM,oBAAoB,GAAG,8BAA8B,CAAA;AAC3D,MAAM,eAAe,GAAG,+BAA+B,CAAA;AACvD,MAAM,uBAAuB,GAAG,2BAA2B,CAAA;AAwD3D,MAAM,UAAU,sBAAsB,CAAC,UAAkB;IACvD,kBAAkB,CAAC,UAAU,CAAC,CAAA;IAC9B,OAAO,MAAM,CAAC,YAAY,GAAG,UAAU,CAAC,CAAA;AAC1C,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,QAAgB,EAChB,OAAe,EACf,kBAA0B,EAC1B,kBAA0B;IAE1B,SAAS,CAAC,QAAQ,EAAE,EAAE,EAAE,WAAW,CAAC,CAAA;IACpC,MAAM,IAAI,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,CAAA;IAChG,OAAO,IAAI,CAAC,oBAAoB,GAAG,eAAe,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC,CAAA;AAC/E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAYzC;IACC,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAClC,SAAS,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,EAAE,uBAAuB,CAAC,CAAA;IACnE,qBAAqB,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;IACnD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;IAChE,MAAM,yBAAyB,CAC7B,KAAK,CAAC,KAAK,EACX,QAAQ,EACR,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,iBAAiB,EACvB,KAAK,CAAC,4BAA4B,CACnC,CAAA;IACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IACxF,MAAM,aAAa,GAAG,kBAAkB,CACtC,QAAQ,EACR,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,qBAAqB,EAC3B,SAAS,CACV,CAAA;IACD,MAAM,gBAAgB,GAAG,MAAM,CAAC,eAAe,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC,CAAA;IACjF,MAAM,QAAQ,GAAqC;QACjD,OAAO,EAAE,sBAAsB;QAC/B,KAAK,EAAE,WAAW;QAClB,SAAS,EAAE,QAAQ;QACnB,kBAAkB,EAAE,gBAAgB;QACpC,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG;QAC9B,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG;QAC/B,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS;QACvC,QAAQ,EAAE,SAAS;QACnB,QAAQ,EAAE,KAAK,CAAC,aAAa,CAAC,QAAQ;QACtC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW;QACjD,mBAAmB,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,mBAAmB;QACjE,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY;QACnD,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW;QACjD,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAA;IACD,sBAAsB,CAAC,QAAQ,CAAC,CAAA;IAChC,OAAO;QACL,GAAG,QAAQ;QACX,SAAS,EAAE,IAAI,CAAC,uBAAuB,GAAG,eAAe,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,wBAAwB,CAAC;KACrG,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,SAAkB,EAClB,MAA8E,EAC9E,OAQC;IAED,IAAI,MAAqB,CAAA;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,CAAA;QAClC,6BAA6B,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,SAAS,EAAE,wBAAwB,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAA;IACzF,CAAC;IACD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IAC3D,IAAI,QAAQ,KAAK,MAAM,CAAC,SAAS,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QAC/E,OAAO,OAAO,CAAC,SAAS,EAAE,4BAA4B,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAA;IAC7F,CAAC;IACD,MAAM,cAAc,GAAgC;QAClD,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,YAAY,EAAE;YACZ,MAAM,EAAE,UAAU;YAClB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC;KACF,CAAA;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,eAAe,GAAG,eAAe,CAAC,kBAAkB,CAC7E,QAAQ,EACR,cAAc,EACd,MAAM,CAAC,aAAa,EACpB,MAAM,CAAC,qBAAqB,EAC5B,MAAM,CAAC,QAAQ,CAChB,CAAC,CAAC,CAAA;IACH,IAAI,WAAW,KAAK,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC9C,OAAO,OAAO,CAAC,SAAS,EAAE,+BAA+B,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,CAAA;IAC/F,CAAC;IACD,MAAM,kBAAkB,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC;QAC5D,UAAU,EAAE,MAAM,CAAC,WAAW;QAC9B,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,EAAE,EAAE,MAAM,CAAC,SAAS;KACrB,CAAC,CAAA;IACF,IAAI,kBAAkB,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,kBAAkB,CAAC,cAAc,EAAE,CAAC;QAClF,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,KAAK,aAAa,CAAA;QAC7D,OAAO,OAAO,CACZ,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,EACxC,sBAAsB,kBAAkB,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,EAC9D,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,EAAE,YAAY,CAChE,CAAA;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,CAAA;IAC5C,IAAI,CAAC,MAAM,CACT,uBAAuB,GAAG,eAAe,CAAC,QAAQ,CAAC,EACnD,MAAM,CAAC,SAAS,EAChB,kBAAkB,CAAC,cAAc,CAClC;QAAE,OAAO,OAAO,CAAC,SAAS,EAAE,kCAAkC,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;IAErG,IAAI,CAAC;QACH,MAAM,yBAAyB,CAC7B,cAAc,EACd,QAAQ,EACR,MAAM,CAAC,aAAa,EACpB,OAAO,CAAC,iBAAiB,EACzB,OAAO,CAAC,4BAA4B,CACrC,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,UAAU,GAAG,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;QACjF,OAAO,OAAO,CACZ,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,EACxC,UAAU,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,6BAA6B,EAC7E,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAC9D,CAAA;IACH,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,CAAA;AAClE,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAkC;IAC/D,6BAA6B,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IAC9D,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;IACnF,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,mBAAmB,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,CAAC;QACnH,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAC3D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,mBAAmB,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAC3D,CAAC;IACD,qBAAqB,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,aAAa,CAAC,CAAA;AACtE,CAAC;AAED,SAAS,6BAA6B,CAAC,UAAkB,EAAE,MAAmB;IAC5E,kBAAkB,CAAC,UAAU,CAAC,CAAA;IAC9B,WAAW,CAAC,MAAM,CAAC,CAAA;IACnB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAA;IAC1G,WAAW,CAAC,OAAO,CAAC,CAAA;IACpB,IAAI,eAAe,CAAC,OAAO,CAAC,KAAK,eAAe,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;AACtH,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,KAAkC,EAClC,QAAgB,EAChB,OAA4B,EAC5B,eAAuC,EACvC,iBAAiI;IAEjI,oBAAoB,CAAC,OAAO,CAAC,CAAA;IAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;QACzF,IAAI,CAAC,iBAAiB;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;QACnE,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,mBAAmB,EAAE,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC,CAAA;QACvH,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;QAC1D,IAAI,QAAQ,KAAK,OAAO,CAAC,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;QACzF,OAAM;IACR,CAAC;IACD,IAAI,CAAC,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;IACjE,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC;QACvC,UAAU,EAAE,OAAO,CAAC,QAAQ;QAC5B,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;QAChD,EAAE,EAAE,KAAK,CAAC,YAAY,CAAC,WAAW;KACnC,CAAC,CAAA;IACF,IAAI,UAAU,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,UAAU,CAAC,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;IAC9G,MAAM,IAAI,GAAG;QACX,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,QAAQ;QACnB,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;KACjD,CAAA;IACD,IAAI,CAAC,MAAM,CACT,oBAAoB,GAAG,eAAe,CAAC,IAAI,CAAC,EAC5C,OAAO,CAAC,SAAS,EACjB,UAAU,CAAC,cAAc,CAC1B;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;AAC/C,CAAC;AAED,SAAS,oBAAoB,CAAC,OAA4B;IACxD,iBAAiB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAA;IAC3C,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAA;IACnF,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,QAAQ,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IACjH,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,eAAe,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,qBAAqB,EAAE,gBAAgB,CAAC,EAAE,EAAE,EAAE,eAAe,CAAC,CAAA;QAC9G,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;IAClG,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;QAC/C,eAAe,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,qBAAqB,EAAE,WAAW,CAAC,EAAE,EAAE,EAAE,eAAe,CAAC,CAAA;QACzG,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,iBAAiB,CAAC,CAAA;IACtD,CAAC;;QAAM,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;AAChD,CAAC;AAED,SAAS,kBAAkB,CACzB,QAAgB,EAChB,KAAkC,EAClC,OAA4B,EAC5B,SAAiB,EACjB,QAAkB;IAElB,OAAO;QACL,OAAO,EAAE,8BAA8B;QACvC,SAAS,EAAE,QAAQ;QACnB,qBAAqB,EAAE,SAAS;QAChC,QAAQ;QACR,aAAa,EAAE,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,YAAY,CAAC,WAAW;QAC3C,mBAAmB,EAAE,KAAK,CAAC,YAAY,CAAC,mBAAmB;QAC3D,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,YAAY;QAC7C,WAAW,EAAE,KAAK,CAAC,YAAY,CAAC,WAAW;KAC5C,CAAA;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,iBAAiB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAA;IACzC,eAAe,CAAC,KAAK,EAAE;QACrB,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,uBAAuB;QAC9E,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe;QACzE,aAAa,EAAE,qBAAqB,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW;KAC9F,EAAE,EAAE,EAAE,eAAe,CAAC,CAAA;IACvB,sBAAsB,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,CAAgD,CAAC,CAAA;IACjG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;IACpD,OAAO,KAAiC,CAAA;AAC1C,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAuC;IACrE,WAAW,CAAC,KAAK,CAAC,CAAA;IAClB,IAAI,KAAK,CAAC,OAAO,KAAK,sBAAsB,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAA;IAC9G,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,EAAE,WAAW,CAAC,CAAA;IAC3C,SAAS,CAAC,KAAK,CAAC,kBAAkB,EAAE,EAAE,EAAE,oBAAoB,CAAC,CAAA;IAC7D,SAAS,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,EAAE,uBAAuB,CAAC,CAAA;IACnE,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;IACrH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAA;IAC9F,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;IAC9C,oBAAoB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;IACzC,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,aAAa,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;IACzF,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,WAAW,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;IACnH,qBAAqB,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAA;IACvD,qBAAqB,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;AACrD,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW,EAAE,QAAiB;IACvD,OAAO,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;AACvF,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAmB,EAAE,MAAqB;IACnE,OAAO,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,OAAO;QAClE,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;QACrC,eAAe,CAAC,iBAAiB,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;AACxG,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM;QAClD,CAAC,kDAAkD,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;IACxC,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACjE,CAAC;AAED,SAAS,IAAI,CAAC,KAAa,EAAE,IAAuB;IAClD,MAAM,MAAM,GAA4B,EAAE,CAAA;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;IAC9F,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,OAAO,CACd,KAAyC,EACzC,IAAY,EACZ,KAA+C,EAC/C,QAAyD,EACzD,KAAiD;IAEjD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,CAAA;AAChG,CAAC"}

package/dist/src/core/action-ref.d.ts

@@ -11,6 +11,21 @@ export type ActionRefIntent = Omit<Pick<ActionIntent, 'agentId' | 'action' | 'cr
         scopeRequired: ActionIntent['action']['scopeRequired'] | readonly string[];
     };
 };
+/** Raised when scopeRequired carries two elements that are equal after NFC
+ *  normalization. draft-pidlisnyi-aps-03 §4.1 defines scope_required as a
+ *  duplicate-free array, so a duplicated array has no canonical form and is
+ *  rejected rather than deduplicated: an equality key must not map distinct
+ *  inputs onto one value silently. Subclasses the built-in Error so any
+ *  existing handler that catches Error (or `catch (e)`) still catches it and
+ *  fails closed. */
+export declare class DuplicateScopeRequiredError extends Error {
+    readonly code = "ERR_DUPLICATE_SCOPE_REQUIRED";
+    /** Stable machine-readable category, shared across the APS SDKs. */
+    readonly category = "invalid_scope_required";
+    /** Specific failure within the category. */
+    readonly reason = "duplicate_scope_required";
+    constructor(message: string);
+}
 /**
  * Compute the content-addressed request identity for an ActionIntent.
  *
@@ -22,6 +37,12 @@ export type ActionRefIntent = Omit<Pick<ActionIntent, 'agentId' | 'action' | 'cr
  * array, the array is sorted by Unicode code point. No case folding; scopes
  * that differ only in case stay distinct.
  *
+ * Throws DuplicateScopeRequiredError when an array scopeRequired holds two
+ * elements equal after NFC normalization. The throw happens inside
+ * canonicalization, before the digest is computed, so a duplicated array can
+ * never present as an identity mismatch downstream: there is no action_ref to
+ * compare in the first place.
+ *
  * Canonicalization follows RFC 8785 JCS strictly, per draft-pidlisnyi-aps-01
  * §4.1: null/undefined-valued keys are preserved (not stripped) so that two
  * APS engines independently hashing the same request produce the same

package/dist/src/core/action-ref.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"action-ref.d.ts","sourceRoot":"","sources":["../../../src/core/action-ref.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEtD;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GACzB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC,EAAE,QAAQ,CAAC,GAAG;IACvE,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC,GAAG;QACtD,aAAa,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,eAAe,CAAC,GAAG,SAAS,MAAM,EAAE,CAAA;KAC3E,CAAA;CACF,CAAA;AAuCH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAQhE;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAE7D"}
+{"version":3,"file":"action-ref.d.ts","sourceRoot":"","sources":["../../../src/core/action-ref.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEtD;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GACzB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC,EAAE,QAAQ,CAAC,GAAG;IACvE,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC,GAAG;QACtD,aAAa,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,eAAe,CAAC,GAAG,SAAS,MAAM,EAAE,CAAA;KAC3E,CAAA;CACF,CAAA;AAEH;;;;;;oBAMoB;AACpB,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,QAAQ,CAAC,IAAI,kCAAiC;IAC9C,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,4BAA2B;IAC5C,4CAA4C;IAC5C,QAAQ,CAAC,MAAM,8BAA6B;IAC5C,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAyDD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAQhE;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAE7D"}

package/dist/src/core/action-ref.js

@@ -18,6 +18,24 @@
 // ══════════════════════════════════════════════════════════════════
 import { normalizeTimestamp } from './canonical.js';
 import { canonicalHashJCS } from './canonical-jcs.js';
+/** Raised when scopeRequired carries two elements that are equal after NFC
+ *  normalization. draft-pidlisnyi-aps-03 §4.1 defines scope_required as a
+ *  duplicate-free array, so a duplicated array has no canonical form and is
+ *  rejected rather than deduplicated: an equality key must not map distinct
+ *  inputs onto one value silently. Subclasses the built-in Error so any
+ *  existing handler that catches Error (or `catch (e)`) still catches it and
+ *  fails closed. */
+export class DuplicateScopeRequiredError extends Error {
+    code = 'ERR_DUPLICATE_SCOPE_REQUIRED';
+    /** Stable machine-readable category, shared across the APS SDKs. */
+    category = 'invalid_scope_required';
+    /** Specific failure within the category. */
+    reason = 'duplicate_scope_required';
+    constructor(message) {
+        super(message);
+        this.name = 'DuplicateScopeRequiredError';
+    }
+}
 /**
  * Compare two strings by Unicode code point, per §4.1's sort requirement.
  * The JS default sort compares UTF-16 code units, which orders astral-plane
@@ -40,18 +58,34 @@ function compareCodePoints(a, b) {
 }
 /**
  * Canonicalize scopeRequired per draft-pidlisnyi-aps-03 §4.1 before hashing:
- * NFC-normalize each scope string, then sort the array by Unicode code point.
- * Operates on a copy; never mutates the caller's array. The single-string
- * form (the current ActionIntent type) is NFC-normalized; null/undefined and
- * any non-conforming shape (non-string elements) pass through unchanged so
- * the strict-JCS null-preservation contract and legacy behavior for
- * out-of-spec input both hold.
+ * NFC-normalize each scope string, reject duplicates, then sort the array by
+ * Unicode code point. Operates on a copy; never mutates the caller's array.
+ * The single-string form (the current ActionIntent type) is NFC-normalized;
+ * null/undefined and any non-conforming shape (non-string elements) pass
+ * through unchanged so the strict-JCS null-preservation contract and legacy
+ * behavior for out-of-spec input both hold.
+ *
+ * §4.1 defines scope_required as a duplicate-free array. Duplicates are
+ * detected AFTER normalization, so two spellings that collide only under NFC
+ * (U+00E9 and "e" + U+0301) reject as well. Rejection rather than dedupe:
+ * silently collapsing ["a","a"] to ["a"] would map two distinct inputs onto
+ * one identity with no error, and would change the identity previously
+ * computed for the duplicated input. Valid arrays are byte-unchanged.
  */
 function canonicalizeScopeRequired(scope) {
     if (typeof scope === 'string')
         return scope.normalize('NFC');
     if (Array.isArray(scope) && scope.every((s) => typeof s === 'string')) {
-        return scope.map((s) => s.normalize('NFC')).sort(compareCodePoints);
+        const normalized = scope.map((s) => s.normalize('NFC'));
+        const seen = new Set();
+        for (const s of normalized) {
+            if (seen.has(s)) {
+                throw new DuplicateScopeRequiredError('computeActionRef: scope_required contains duplicate elements after NFC ' +
+                    `normalization (duplicate_scope_required): ${JSON.stringify(s)}`);
+            }
+            seen.add(s);
+        }
+        return normalized.sort(compareCodePoints);
     }
     return scope;
 }
@@ -66,6 +100,12 @@ function canonicalizeScopeRequired(scope) {
  * array, the array is sorted by Unicode code point. No case folding; scopes
  * that differ only in case stay distinct.
  *
+ * Throws DuplicateScopeRequiredError when an array scopeRequired holds two
+ * elements equal after NFC normalization. The throw happens inside
+ * canonicalization, before the digest is computed, so a duplicated array can
+ * never present as an identity mismatch downstream: there is no action_ref to
+ * compare in the first place.
+ *
  * Canonicalization follows RFC 8785 JCS strictly, per draft-pidlisnyi-aps-01
  * §4.1: null/undefined-valued keys are preserved (not stripped) so that two
  * APS engines independently hashing the same request produce the same

package/dist/src/core/action-ref.js.map

@@ -1 +1 @@
-{"version":3,"file":"action-ref.js","sourceRoot":"","sources":["../../../src/core/action-ref.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,kDAAkD;AAClD,qEAAqE;AACrE,4CAA4C;AAC5C,qGAAqG;AACrG,8EAA8E;AAC9E,EAAE;AACF,mEAAmE;AACnE,yEAAyE;AACzE,2EAA2E;AAC3E,oCAAoC;AACpC,EAAE;AACF,yEAAyE;AACzE,wEAAwE;AACxE,+BAA+B;AAC/B,qEAAqE;AAErE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAiBrD;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,CAAS,EAAE,CAAS;IAC7C,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAW,CAAA;QACrC,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAW,CAAA;QACrC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,GAAG,EAAE,CAAA;QAC7B,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACxB,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;IACD,OAAO,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AACxC,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,yBAAyB,CAAC,KAAc;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QACtE,OAAQ,KAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;IACnF,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAuB;IACtD,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACvD,OAAO,gBAAgB,CAAC;QACtB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;QAC9B,aAAa,EAAE,yBAAyB,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;QACrE,SAAS,EAAE,kBAAkB,CAAC,EAAE,CAAC;KAClC,CAAC,CAAA;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,CAAS,EAAE,CAAS;IAClD,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAClF,CAAC"}
+{"version":3,"file":"action-ref.js","sourceRoot":"","sources":["../../../src/core/action-ref.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,kDAAkD;AAClD,qEAAqE;AACrE,4CAA4C;AAC5C,qGAAqG;AACrG,8EAA8E;AAC9E,EAAE;AACF,mEAAmE;AACnE,yEAAyE;AACzE,2EAA2E;AAC3E,oCAAoC;AACpC,EAAE;AACF,yEAAyE;AACzE,wEAAwE;AACxE,+BAA+B;AAC/B,qEAAqE;AAErE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAiBrD;;;;;;oBAMoB;AACpB,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAC3C,IAAI,GAAG,8BAA8B,CAAA;IAC9C,oEAAoE;IAC3D,QAAQ,GAAG,wBAAwB,CAAA;IAC5C,4CAA4C;IACnC,MAAM,GAAG,0BAA0B,CAAA;IAC5C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAA;IAC3C,CAAC;CACF;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,CAAS,EAAE,CAAS;IAC7C,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAW,CAAA;QACrC,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAW,CAAA;QACrC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,GAAG,EAAE,CAAA;QAC7B,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACxB,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;IACD,OAAO,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AACxC,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,yBAAyB,CAAC,KAAc;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QACtE,MAAM,UAAU,GAAI,KAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;QACrE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;QAC9B,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChB,MAAM,IAAI,2BAA2B,CACnC,yEAAyE;oBACvE,6CAA6C,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CACnE,CAAA;YACH,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACb,CAAC;QACD,OAAO,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;IAC3C,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAuB;IACtD,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACvD,OAAO,gBAAgB,CAAC;QACtB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;QAC9B,aAAa,EAAE,yBAAyB,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;QACrE,SAAS,EAAE,kBAAkB,CAAC,EAAE,CAAC;KAClC,CAAC,CAAA;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,CAAS,EAAE,CAAS;IAClD,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAClF,CAAC"}

package/dist/src/core/canonical-jcs.js

@@ -77,7 +77,7 @@ export function canonicalizeJCS(value) {
             if (Array.isArray(value)) {
                 return '[' + value.map(item => canonicalizeJCS(item)).join(',') + ']';
             }
-            // Object: sort keys by Unicode code point, preserve null values
+            // Object: sort keys as UTF-16 code unit arrays per RFC 8785 3.2.3, preserve null values
             const obj = value;
             const keys = Object.keys(obj).sort();
             const pairs = [];
@@ -141,7 +141,7 @@ export function getTestVectors() {
     // V2: Object with null — variants diverge
     addVector('cv-002', 'Null value — JCS preserves, legacy strips', { agentId: 'agent-001', metadata: null, scope: 'read' }, '{"agentId":"agent-001","metadata":null,"scope":"read"}', '{"agentId":"agent-001","scope":"read"}');
     // V3: Key ordering
-    addVector('cv-003', 'Keys sorted by Unicode code point', { zebra: 1, alpha: 2, middle: 3 }, '{"alpha":2,"middle":3,"zebra":1}', '{"alpha":2,"middle":3,"zebra":1}');
+    addVector('cv-003', 'Keys sorted by UTF-16 code units', { zebra: 1, alpha: 2, middle: 3 }, '{"alpha":2,"middle":3,"zebra":1}', '{"alpha":2,"middle":3,"zebra":1}');
     // V4: Nested objects with null
     addVector('cv-004', 'Nested object with null at depth', { outer: { inner: null, value: 42 }, top: 'ok' }, '{"outer":{"inner":null,"value":42},"top":"ok"}', '{"outer":{"value":42},"top":"ok"}');
     // V5: Arrays with null elements

package/dist/src/core/canonical-jcs.js.map

@@ -1 +1 @@
-{"version":3,"file":"canonical-jcs.js","sourceRoot":"","sources":["../../../src/core/canonical-jcs.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,kEAAkE;AAClE,qEAAqE;AACrE,qEAAqE;AACrE,wEAAwE;AACxE,EAAE;AACF,wBAAwB;AACxB,mDAAmD;AACnD,uDAAuD;AACvD,EAAE;AACF,gEAAgE;AAChE,6DAA6D;AAC7D,qEAAqE;AAErE;;6EAE6E;AAC7E,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACxC,IAAI,CAAQ;IACrB,oEAAoE;IAC3D,QAAQ,GAAG,iBAAiB,CAAA;IACrC,mEAAmE;IAC1D,MAAM,CAAQ;IACvB,YAAY,IAAY,EAAE,OAAe,EAAE,MAAM,GAAG,gBAAgB;QAClE,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAA;QACtC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;CACF;AAED;;;;kFAIkF;AAClF,SAAS,qBAAqB,CAAC,CAAS;IACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;QACzB,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YACvD,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;gBAAC,CAAC,EAAE,CAAC;gBAAC,SAAQ;YAAC,CAAC,CAAC,aAAa;YACrE,MAAM,IAAI,wBAAwB,CAAC,wBAAwB,EAAE,kJAAkJ,CAAC,CAAA;QAClN,CAAC;QACD,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;YAC/B,MAAM,IAAI,wBAAwB,CAAC,wBAAwB,EAAE,iJAAiJ,CAAC,CAAA;QACjN,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;qEAKqE;AACrE,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAA;IAExD,QAAQ,OAAO,KAAK,EAAE,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAA;QACjC,KAAK,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;YAC7E,sEAAsE;YACtE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAC9B,CAAC;QACD,KAAK,QAAQ;YACX,qBAAqB,CAAC,KAAK,CAAC,CAAA;YAC5B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAC9B,KAAK,QAAQ,EAAE,CAAC;YACd,IAAI,KAAK,YAAY,IAAI;gBAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;YACvD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;YACvE,CAAC;YACD,gEAAgE;YAChE,MAAM,GAAG,GAAG,KAAgC,CAAA;YAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;YACpC,MAAM,KAAK,GAAa,EAAE,CAAA;YAC1B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,qBAAqB,CAAC,GAAG,CAAC,CAAA;gBAC1B,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAA;gBAClB,sDAAsD;gBACtD,yEAAyE;gBACzE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YAC5D,CAAC;YACD,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;QACpC,CAAC;QACD;YACE,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,KAAK,EAAE,CAAC,CAAA;IAC5D,CAAC;AACH,CAAC;AAED;kFACkF;AAClF,MAAM,UAAU,sBAAsB,CACpC,GAAY,EACZ,eAAuB;IAEvB,2EAA2E;IAC3E,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;QAAE,OAAO,WAAW,CAAA;IAC3C,uEAAuE;IACvE,IAAI,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAA;IACnD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IACtD,OAAO,MAAM,CAAC,MAAM,CAAC,GAA8B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAC5D,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC,CAAA;AACtD,CAAC;AAED,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAanC,8CAA8C;AAC9C,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAClE,CAAC;AAED;;;yDAGyD;AACzD,MAAM,UAAU,gBAAgB,CAAC,GAA4B;IAC3D,OAAO,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAA;AACxC,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,cAAc;IAC5B,MAAM,OAAO,GAAiC,EAAE,CAAA;IAEhD,SAAS,SAAS,CAAC,EAAU,EAAE,IAAY,EAAE,KAAc,EAAE,GAAW,EAAE,MAAc;QACtF,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK;YAC5B,YAAY,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM;YAC1C,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,SAAS,CAAC,MAAM,CAAC;SAC7D,CAAC,CAAA;IACJ,CAAC;IAED,8CAA8C;IAC9C,SAAS,CAAC,QAAQ,EAAE,8CAA8C,EAChE,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,EACvC,wCAAwC,EACxC,wCAAwC,CAAC,CAAA;IAE3C,0CAA0C;IAC1C,SAAS,CAAC,QAAQ,EAAE,2CAA2C,EAC7D,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EACvD,wDAAwD,EACxD,wCAAwC,CAAC,CAAA;IAE3C,mBAAmB;IACnB,SAAS,CAAC,QAAQ,EAAE,mCAAmC,EACrD,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EACjC,kCAAkC,EAClC,kCAAkC,CAAC,CAAA;IAErC,+BAA+B;IAC/B,SAAS,CAAC,QAAQ,EAAE,kCAAkC,EACpD,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAChD,gDAAgD,EAChD,mCAAmC,CAAC,CAAA;IAEtC,gCAAgC;IAChC,SAAS,CAAC,QAAQ,EAAE,sDAAsD,EACxE,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EACvB,sBAAsB,EACtB,sBAAsB,CAAC,CAAA;IAEzB,wBAAwB;IACxB,SAAS,CAAC,QAAQ,EAAE,yCAAyC,EAC3D,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,EACnD,oDAAoD,EACpD,oDAAoD,CAAC,CAAA;IAEvD,uBAAuB;IACvB,SAAS,CAAC,QAAQ,EAAE,8BAA8B,EAChD,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAC9B,+BAA+B,EAC/B,+BAA+B,CAAC,CAAA;IAElC,cAAc;IACd,SAAS,CAAC,QAAQ,EAAE,wBAAwB,EAC1C,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,EAChC,iCAAiC,EACjC,iCAAiC,CAAC,CAAA;IAEpC,uDAAuD;IACvD,SAAS,CAAC,QAAQ,EAAE,4DAA4D,EAC9E;QACE,YAAY,EAAE,YAAY;QAC1B,WAAW,EAAE,sBAAsB;QACnC,WAAW,EAAE,kBAAkB;QAC/B,KAAK,EAAE,CAAC,WAAW,EAAE,mBAAmB,CAAC;QACzC,UAAU,EAAE,GAAG;QACf,oBAAoB,EAAE,IAAI;QAC1B,SAAS,EAAE,sBAAsB;QACjC,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,CAAC;QACX,YAAY,EAAE,CAAC;QACf,SAAS,EAAE,sBAAsB;KAClC,EACD,iTAAiT,EACjT,oQAAoQ,CAAC,CAAA;IAEvQ,sBAAsB;IACtB,SAAS,CAAC,QAAQ,EAAE,gBAAgB,EAClC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAChC,iCAAiC,EACjC,iCAAiC,CAAC,CAAA;IAEpC,OAAO,OAAO,CAAA;AAChB,CAAC"}
+{"version":3,"file":"canonical-jcs.js","sourceRoot":"","sources":["../../../src/core/canonical-jcs.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,kEAAkE;AAClE,qEAAqE;AACrE,qEAAqE;AACrE,wEAAwE;AACxE,EAAE;AACF,wBAAwB;AACxB,mDAAmD;AACnD,uDAAuD;AACvD,EAAE;AACF,gEAAgE;AAChE,6DAA6D;AAC7D,qEAAqE;AAErE;;6EAE6E;AAC7E,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACxC,IAAI,CAAQ;IACrB,oEAAoE;IAC3D,QAAQ,GAAG,iBAAiB,CAAA;IACrC,mEAAmE;IAC1D,MAAM,CAAQ;IACvB,YAAY,IAAY,EAAE,OAAe,EAAE,MAAM,GAAG,gBAAgB;QAClE,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAA;QACtC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;CACF;AAED;;;;kFAIkF;AAClF,SAAS,qBAAqB,CAAC,CAAS;IACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;QACzB,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YACvD,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;gBAAC,CAAC,EAAE,CAAC;gBAAC,SAAQ;YAAC,CAAC,CAAC,aAAa;YACrE,MAAM,IAAI,wBAAwB,CAAC,wBAAwB,EAAE,kJAAkJ,CAAC,CAAA;QAClN,CAAC;QACD,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;YAC/B,MAAM,IAAI,wBAAwB,CAAC,wBAAwB,EAAE,iJAAiJ,CAAC,CAAA;QACjN,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;qEAKqE;AACrE,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAA;IAExD,QAAQ,OAAO,KAAK,EAAE,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAA;QACjC,KAAK,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;YAC7E,sEAAsE;YACtE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAC9B,CAAC;QACD,KAAK,QAAQ;YACX,qBAAqB,CAAC,KAAK,CAAC,CAAA;YAC5B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAC9B,KAAK,QAAQ,EAAE,CAAC;YACd,IAAI,KAAK,YAAY,IAAI;gBAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;YACvD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;YACvE,CAAC;YACD,wFAAwF;YACxF,MAAM,GAAG,GAAG,KAAgC,CAAA;YAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;YACpC,MAAM,KAAK,GAAa,EAAE,CAAA;YAC1B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,qBAAqB,CAAC,GAAG,CAAC,CAAA;gBAC1B,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAA;gBAClB,sDAAsD;gBACtD,yEAAyE;gBACzE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YAC5D,CAAC;YACD,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;QACpC,CAAC;QACD;YACE,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,KAAK,EAAE,CAAC,CAAA;IAC5D,CAAC;AACH,CAAC;AAED;kFACkF;AAClF,MAAM,UAAU,sBAAsB,CACpC,GAAY,EACZ,eAAuB;IAEvB,2EAA2E;IAC3E,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;QAAE,OAAO,WAAW,CAAA;IAC3C,uEAAuE;IACvE,IAAI,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAA;IACnD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IACtD,OAAO,MAAM,CAAC,MAAM,CAAC,GAA8B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAC5D,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC,CAAA;AACtD,CAAC;AAED,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAanC,8CAA8C;AAC9C,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAClE,CAAC;AAED;;;yDAGyD;AACzD,MAAM,UAAU,gBAAgB,CAAC,GAA4B;IAC3D,OAAO,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAA;AACxC,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,cAAc;IAC5B,MAAM,OAAO,GAAiC,EAAE,CAAA;IAEhD,SAAS,SAAS,CAAC,EAAU,EAAE,IAAY,EAAE,KAAc,EAAE,GAAW,EAAE,MAAc;QACtF,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK;YAC5B,YAAY,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM;YAC1C,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,SAAS,CAAC,MAAM,CAAC;SAC7D,CAAC,CAAA;IACJ,CAAC;IAED,8CAA8C;IAC9C,SAAS,CAAC,QAAQ,EAAE,8CAA8C,EAChE,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,EACvC,wCAAwC,EACxC,wCAAwC,CAAC,CAAA;IAE3C,0CAA0C;IAC1C,SAAS,CAAC,QAAQ,EAAE,2CAA2C,EAC7D,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EACvD,wDAAwD,EACxD,wCAAwC,CAAC,CAAA;IAE3C,mBAAmB;IACnB,SAAS,CAAC,QAAQ,EAAE,kCAAkC,EACpD,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EACjC,kCAAkC,EAClC,kCAAkC,CAAC,CAAA;IAErC,+BAA+B;IAC/B,SAAS,CAAC,QAAQ,EAAE,kCAAkC,EACpD,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAChD,gDAAgD,EAChD,mCAAmC,CAAC,CAAA;IAEtC,gCAAgC;IAChC,SAAS,CAAC,QAAQ,EAAE,sDAAsD,EACxE,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EACvB,sBAAsB,EACtB,sBAAsB,CAAC,CAAA;IAEzB,wBAAwB;IACxB,SAAS,CAAC,QAAQ,EAAE,yCAAyC,EAC3D,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,EACnD,oDAAoD,EACpD,oDAAoD,CAAC,CAAA;IAEvD,uBAAuB;IACvB,SAAS,CAAC,QAAQ,EAAE,8BAA8B,EAChD,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAC9B,+BAA+B,EAC/B,+BAA+B,CAAC,CAAA;IAElC,cAAc;IACd,SAAS,CAAC,QAAQ,EAAE,wBAAwB,EAC1C,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,EAChC,iCAAiC,EACjC,iCAAiC,CAAC,CAAA;IAEpC,uDAAuD;IACvD,SAAS,CAAC,QAAQ,EAAE,4DAA4D,EAC9E;QACE,YAAY,EAAE,YAAY;QAC1B,WAAW,EAAE,sBAAsB;QACnC,WAAW,EAAE,kBAAkB;QAC/B,KAAK,EAAE,CAAC,WAAW,EAAE,mBAAmB,CAAC;QACzC,UAAU,EAAE,GAAG;QACf,oBAAoB,EAAE,IAAI;QAC1B,SAAS,EAAE,sBAAsB;QACjC,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,CAAC;QACX,YAAY,EAAE,CAAC;QACf,SAAS,EAAE,sBAAsB;KAClC,EACD,iTAAiT,EACjT,oQAAoQ,CAAC,CAAA;IAEvQ,sBAAsB;IACtB,SAAS,CAAC,QAAQ,EAAE,gBAAgB,EAClC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAChC,iCAAiC,EACjC,iCAAiC,CAAC,CAAA;IAEpC,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/dist/src/index.d.ts

@@ -270,4 +270,7 @@ export type { RevocationObservation, SignedRevocationObservation, RevocationStat
 export { createEvidenceBundle, verifyEvidenceBundle, computeMemberDigest, proveMemberInclusion, verifyMemberInclusion, computeClaimBoundaryReport, } from './core/evidence-bundle.js';
 export type { CreateEvidenceBundleOptions, ClaimBoundaryReportOptions } from './core/evidence-bundle.js';
 export type { EvidenceBundle, EvidenceBundleManifest, EvidenceBundleManifestMember, EvidenceBundleMember, EvidenceBundleMemberType, EvidenceBundleVerification, EvidenceBundleMemberVerification, ClaimState, ClaimAxis, ClaimAxisReport, ClaimBoundaryReport, } from './types/evidence-bundle.js';
+export * from './profiles/mcp/index.js';
+export * from './profiles/a2a/index.js';
+export type { HistoricalKeyResolver, HistoricalKeyResolutionRequest, HistoricalKeyResolutionResult, } from './v2/identity-binding/types.js';
 //# sourceMappingURL=index.d.ts.map