agent-passport-system 6.0.0 → 7.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +3 -1
- package/SECURITY.md +5 -3
- package/dist/src/core/attribution.d.ts +26 -0
- package/dist/src/core/attribution.d.ts.map +1 -1
- package/dist/src/core/attribution.js +28 -2
- package/dist/src/core/attribution.js.map +1 -1
- package/dist/src/core/delegation.d.ts +32 -0
- package/dist/src/core/delegation.d.ts.map +1 -1
- package/dist/src/core/delegation.js +44 -0
- package/dist/src/core/delegation.js.map +1 -1
- package/dist/src/core/external-action-ref.d.ts.map +1 -1
- package/dist/src/core/external-action-ref.js +66 -8
- package/dist/src/core/external-action-ref.js.map +1 -1
- package/dist/src/index.d.ts +7 -1
- package/dist/src/index.d.ts.map +1 -1
- package/dist/src/index.js +17 -0
- package/dist/src/index.js.map +1 -1
- package/dist/src/v2/action-reference/v2.d.ts +15 -4
- package/dist/src/v2/action-reference/v2.d.ts.map +1 -1
- package/dist/src/v2/action-reference/v2.js +136 -11
- package/dist/src/v2/action-reference/v2.js.map +1 -1
- package/dist/src/v2/authority-delegation/budget.d.ts +12 -0
- package/dist/src/v2/authority-delegation/budget.d.ts.map +1 -1
- package/dist/src/v2/authority-delegation/budget.js +39 -7
- package/dist/src/v2/authority-delegation/budget.js.map +1 -1
- package/dist/src/v2/authority-delegation/canonical.d.ts +2 -1
- package/dist/src/v2/authority-delegation/canonical.d.ts.map +1 -1
- package/dist/src/v2/authority-delegation/canonical.js +2 -1
- package/dist/src/v2/authority-delegation/canonical.js.map +1 -1
- package/dist/src/v2/authority-delegation/compare.d.ts.map +1 -1
- package/dist/src/v2/authority-delegation/compare.js +21 -5
- package/dist/src/v2/authority-delegation/compare.js.map +1 -1
- package/dist/src/v2/authority-delegation/issue.d.ts +29 -6
- package/dist/src/v2/authority-delegation/issue.d.ts.map +1 -1
- package/dist/src/v2/authority-delegation/issue.js +188 -24
- package/dist/src/v2/authority-delegation/issue.js.map +1 -1
- package/dist/src/v2/authority-delegation/parse.d.ts.map +1 -1
- package/dist/src/v2/authority-delegation/parse.js +73 -32
- package/dist/src/v2/authority-delegation/parse.js.map +1 -1
- package/dist/src/v2/authority-delegation/plain-data.d.ts +37 -0
- package/dist/src/v2/authority-delegation/plain-data.d.ts.map +1 -0
- package/dist/src/v2/authority-delegation/plain-data.js +523 -0
- package/dist/src/v2/authority-delegation/plain-data.js.map +1 -0
- package/dist/src/v2/authority-delegation/schema.d.ts +19 -1
- package/dist/src/v2/authority-delegation/schema.d.ts.map +1 -1
- package/dist/src/v2/authority-delegation/schema.js +223 -34
- package/dist/src/v2/authority-delegation/schema.js.map +1 -1
- package/dist/src/v2/authority-delegation/scope.d.ts.map +1 -1
- package/dist/src/v2/authority-delegation/scope.js +89 -14
- package/dist/src/v2/authority-delegation/scope.js.map +1 -1
- package/dist/src/v2/authority-delegation/types.d.ts +26 -2
- package/dist/src/v2/authority-delegation/types.d.ts.map +1 -1
- package/dist/src/v2/authority-delegation/verify.d.ts +28 -1
- package/dist/src/v2/authority-delegation/verify.d.ts.map +1 -1
- package/dist/src/v2/authority-delegation/verify.js +183 -41
- package/dist/src/v2/authority-delegation/verify.js.map +1 -1
- package/dist/src/v2/receipt-core/composite.d.ts +41 -10
- package/dist/src/v2/receipt-core/composite.d.ts.map +1 -1
- package/dist/src/v2/receipt-core/composite.js +95 -30
- package/dist/src/v2/receipt-core/composite.js.map +1 -1
- package/dist/src/v2/receipt-core/decision-ref.d.ts +14 -0
- package/dist/src/v2/receipt-core/decision-ref.d.ts.map +1 -1
- package/dist/src/v2/receipt-core/decision-ref.js +44 -11
- package/dist/src/v2/receipt-core/decision-ref.js.map +1 -1
- package/dist/src/v2/receipt-core/jcs.d.ts +10 -0
- package/dist/src/v2/receipt-core/jcs.d.ts.map +1 -1
- package/dist/src/v2/receipt-core/jcs.js +36 -4
- package/dist/src/v2/receipt-core/jcs.js.map +1 -1
- package/dist/src/v2/receipt-core/receipt.d.ts +73 -3
- package/dist/src/v2/receipt-core/receipt.d.ts.map +1 -1
- package/dist/src/v2/receipt-core/receipt.js +268 -25
- package/dist/src/v2/receipt-core/receipt.js.map +1 -1
- package/dist/src/v2/receipt-core/stage.d.ts +70 -0
- package/dist/src/v2/receipt-core/stage.d.ts.map +1 -0
- package/dist/src/v2/receipt-core/stage.js +207 -0
- package/dist/src/v2/receipt-core/stage.js.map +1 -0
- package/package.json +5 -5
package/README.md
CHANGED
|
@@ -63,6 +63,8 @@ What ships in every deployment.
|
|
|
63
63
|
|
|
64
64
|
**Delegation** -- Scoped authority with monotonic narrowing. Sub-delegation can only reduce scope. Cascade revocation propagates through the full chain. `subDelegateAdvisor` implements the bounded-escalation delegation pattern used in multi-model agent workflows where a lower-cost executor escalates to a higher-capability advisor at decision points -- the advisor delegation is count-bounded, cannot execute tools, and cascade-revokes with its parent.
|
|
65
65
|
|
|
66
|
+
Two delegation records ship, and they are not interchangeable. `AuthorityDelegationV1` (`record_type` `aps:authority-delegation:v1`) is the delegated authority record of `draft-pidlisnyi-aps-03` section 3.1, with the seven signed facets and the chain verifier that returns valid, invalid, indeterminate or unsupported. The older `Delegation` from `createDelegation`, `subDelegate` and `verifyDelegation` is a pre-draft compatibility surface, deprecated and frozen: it predates the draft wire format and is not on the draft path. Its scope matching is the pre-draft rule, under which a bare grant `p` covers `p:x`; section 3.2 allows only `*` and a terminal `p:*` as wildcards, and the draft-path check follows section 3.2. The two rules are deliberately not converged, because changing either would change what records already signed under it authorize. New work uses `AuthorityDelegationV1`.
|
|
67
|
+
|
|
66
68
|
**Enforcement** -- 3-signature action chain: agent signs intent, policy engine signs evaluation, agent signs execution receipt. The agent cannot skip the check. Gateway evaluation runs under 2ms.
|
|
67
69
|
|
|
68
70
|
**Commerce** -- 5-gate preflight: valid passport, scope check, spend limit, merchant allowlist, idempotency. Human approval thresholds for high-value transactions.
|
|
@@ -286,6 +288,6 @@ ADK, A2A, MCP, OpenShell, IBAC, Gonka. Gateway evaluation under 2ms in the bench
|
|
|
286
288
|
- [aeoess.com](https://agent-passport.org) -- Protocol home
|
|
287
289
|
- [llms-full.txt](https://aeoess.com/llms-full.txt) -- Complete reference for AI agents
|
|
288
290
|
- [Dev log](https://aeoess.com/blog.html) -- Day-by-day build record
|
|
289
|
-
- [npm](https://www.npmjs.com/package/agent-passport-system) · [PyPI](https://pypi.org/project/agent-passport-system/) · [MCP](https://www.npmjs.com/package/agent-passport-system-mcp)
|
|
291
|
+
- [npm](https://www.npmjs.com/package/agent-passport-system) · [PyPI](https://pypi.org/project/agent-passport-system/) · [crates.io](https://crates.io/crates/agent-passport-system) · [Go](https://pkg.go.dev/github.com/aeoess/agent-passport-go) · [MCP](https://www.npmjs.com/package/agent-passport-system-mcp)
|
|
290
292
|
|
|
291
293
|
Copyright 2026 Tymofii Pidlisnyi. Apache-2.0.
|
package/SECURITY.md
CHANGED
|
@@ -57,16 +57,18 @@ The Agent Passport System operates under these assumptions:
|
|
|
57
57
|
| Package | Supported |
|
|
58
58
|
|---------|-----------|
|
|
59
59
|
| agent-passport-system >= 6.0.0 | ✅ |
|
|
60
|
+
| agent-passport-system-mcp >= 6.0.0 | ✅ |
|
|
60
61
|
| mingle-mcp >= 1.1.0 | ✅ |
|
|
61
62
|
| Older versions | ❌ |
|
|
62
63
|
|
|
63
64
|
Every `agent-passport-system` version from 1.5.1 through 5.0.3 is unsupported;
|
|
64
|
-
the
|
|
65
|
+
the 6.0.0 advisory, GHSA-r2fw-x6mg-f6h8, published at
|
|
65
66
|
https://github.com/aeoess/agent-passport-system/security/advisories, describes
|
|
66
67
|
the verification defects they carry.
|
|
67
68
|
|
|
68
|
-
|
|
69
|
-
server repository
|
|
69
|
+
`agent-passport-system-mcp` 6.0.0 and later target this SDK line; MCP releases
|
|
70
|
+
before 6.0.0 target SDK 5.x. The MCP server repository carries its own security
|
|
71
|
+
policy for the server itself.
|
|
70
72
|
|
|
71
73
|
## Verifying releases
|
|
72
74
|
|
|
@@ -53,6 +53,32 @@ export interface AttributionRevocationOptions {
|
|
|
53
53
|
checkedAt: string;
|
|
54
54
|
} | undefined;
|
|
55
55
|
}
|
|
56
|
+
/**
|
|
57
|
+
* Legacy lineage authenticity for a chain of legacy Delegation records.
|
|
58
|
+
*
|
|
59
|
+
* WHAT THIS IS NOT. This is not draft-03 principal attribution and not a
|
|
60
|
+
* beneficiary determination under the protocol. draft-pidlisnyi-aps-03 section 12
|
|
61
|
+
* keeps four attribution axes apart: authority (the delegation chain), contribution,
|
|
62
|
+
* principal (the entity on whose behalf the agent acted, reported as self_asserted,
|
|
63
|
+
* principal_attested or externally_verified_principal under section 2.3), and
|
|
64
|
+
* beneficiary (the entity that receives the value the work creates). The draft
|
|
65
|
+
* specifies the authority and principal axes and states that it does not specify a
|
|
66
|
+
* beneficiary-attribution model, so nothing this function returns is a draft-03
|
|
67
|
+
* beneficiary result.
|
|
68
|
+
*
|
|
69
|
+
* The beneficiary here is whatever the caller's beneficiaryMap says it is. Where the
|
|
70
|
+
* map has no entry, the reported beneficiary falls back to the root of the legacy
|
|
71
|
+
* delegation chain, which is an authority fact, not a statement about who benefits.
|
|
72
|
+
*
|
|
73
|
+
* What the result does establish is lineage authenticity: whether each hop of the
|
|
74
|
+
* supplied legacy chain carries a delegation whose signature and temporal validity
|
|
75
|
+
* check out under the caller's revocation posture. It implies no allocation of
|
|
76
|
+
* credit, benefit, compensation, liability or ownership, which section 12 places
|
|
77
|
+
* outside the document and does not imply from the authority chain.
|
|
78
|
+
*
|
|
79
|
+
* The record type is the pre-draft compatibility Delegation, not the draft-03
|
|
80
|
+
* AuthorityDelegationV1 of section 3.1. See the note on createDelegation.
|
|
81
|
+
*/
|
|
56
82
|
export declare function traceBeneficiary(receipt: ActionReceipt, delegations: Delegation[], beneficiaryMap: Map<string, BeneficiaryInfo>, revocation?: AttributionRevocationOptions): BeneficiaryTrace;
|
|
57
83
|
export declare function verifyAttributionReport(report: AttributionReport, publicKey: string): {
|
|
58
84
|
valid: boolean;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"attribution.d.ts","sourceRoot":"","sources":["../../../src/core/attribution.ts"],"names":[],"mappings":"AAcA,OAAO,EAAmC,KAAK,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AAE7F,OAAO,KAAK,EACV,aAAa,EAAE,UAAU,EACzB,gBAAgB,EAChB,iBAAiB,EACjB,WAAW,EACX,eAAe,EAChB,MAAM,sBAAsB,CAAA;AAU7B,wBAAgB,WAAW,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAE1D;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH;;;;;;;;;sEASsE;AACtE,MAAM,WAAW,4BAA4B;IAC3C,qBAAqB,CAAC,EAAE,qBAAqB,CAAA;IAC7C,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;yDAEqD;IACrD,iBAAiB,CAAC,EAAE,CAAC,UAAU,EAAE,UAAU,KAAK;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAA;CACpG;AAyCD,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,aAAa,EACtB,WAAW,EAAE,UAAU,EAAE,EACzB,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,EAC5C,UAAU,CAAC,EAAE,4BAA4B,GACxC,gBAAgB,CA+FlB;AAMD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,iBAAiB,EACzB,SAAS,EAAE,MAAM,GAChB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAyBtC;AAsBD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,CAmB5D;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,EAAE,EACpB,UAAU,EAAE,MAAM,GACjB,WAAW,GAAG,IAAI,CAiCpB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAU7D;AAUD,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAE7B,CAAA;AAE5B,wBAAgB,kBAAkB,CAAC,GAAG,KAAK,EAAE,OAAO,EAAE,GAAG,KAAK,CAE7D;AAED,wBAAgB,+BAA+B,CAAC,GAAG,KAAK,EAAE,OAAO,EAAE,GAAG,KAAK,CAE1E"}
|
|
1
|
+
{"version":3,"file":"attribution.d.ts","sourceRoot":"","sources":["../../../src/core/attribution.ts"],"names":[],"mappings":"AAcA,OAAO,EAAmC,KAAK,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AAE7F,OAAO,KAAK,EACV,aAAa,EAAE,UAAU,EACzB,gBAAgB,EAChB,iBAAiB,EACjB,WAAW,EACX,eAAe,EAChB,MAAM,sBAAsB,CAAA;AAU7B,wBAAgB,WAAW,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAE1D;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH;;;;;;;;;sEASsE;AACtE,MAAM,WAAW,4BAA4B;IAC3C,qBAAqB,CAAC,EAAE,qBAAqB,CAAA;IAC7C,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;yDAEqD;IACrD,iBAAiB,CAAC,EAAE,CAAC,UAAU,EAAE,UAAU,KAAK;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAA;CACpG;AAyCD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,aAAa,EACtB,WAAW,EAAE,UAAU,EAAE,EACzB,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,EAC5C,UAAU,CAAC,EAAE,4BAA4B,GACxC,gBAAgB,CA+FlB;AAMD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,iBAAiB,EACzB,SAAS,EAAE,MAAM,GAChB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAyBtC;AAsBD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,CAmB5D;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,EAAE,EACpB,UAAU,EAAE,MAAM,GACjB,WAAW,GAAG,IAAI,CAiCpB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAU7D;AAUD,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAE7B,CAAA;AAE5B,wBAAgB,kBAAkB,CAAC,GAAG,KAAK,EAAE,OAAO,EAAE,GAAG,KAAK,CAE7D;AAED,wBAAgB,+BAA+B,CAAC,GAAG,KAAK,EAAE,OAAO,EAAE,GAAG,KAAK,CAE1E"}
|
|
@@ -39,8 +39,8 @@ export function hashReceipt(receipt) {
|
|
|
39
39
|
* interface, which returns a Promise: a Promise has no `revoked` and no
|
|
40
40
|
* `checkedAt`, so under fail_open it would have read as not-revoked. That is
|
|
41
41
|
* benign only because fail_open is already permissive, which is not a
|
|
42
|
-
* property worth relying on. Same class as the
|
|
43
|
-
*
|
|
42
|
+
* property worth relying on. Same class as the resolver-normalization gap in
|
|
43
|
+
* the v2 authority-delegation verifier, handled the same way. */
|
|
44
44
|
function resolveEvidence(revocation, delegation) {
|
|
45
45
|
if (!revocation?.resolveRevocation)
|
|
46
46
|
return undefined;
|
|
@@ -61,6 +61,32 @@ function resolveEvidence(revocation, delegation) {
|
|
|
61
61
|
}
|
|
62
62
|
return { revoked: candidate.revoked, checkedAt: candidate.checkedAt };
|
|
63
63
|
}
|
|
64
|
+
/**
|
|
65
|
+
* Legacy lineage authenticity for a chain of legacy Delegation records.
|
|
66
|
+
*
|
|
67
|
+
* WHAT THIS IS NOT. This is not draft-03 principal attribution and not a
|
|
68
|
+
* beneficiary determination under the protocol. draft-pidlisnyi-aps-03 section 12
|
|
69
|
+
* keeps four attribution axes apart: authority (the delegation chain), contribution,
|
|
70
|
+
* principal (the entity on whose behalf the agent acted, reported as self_asserted,
|
|
71
|
+
* principal_attested or externally_verified_principal under section 2.3), and
|
|
72
|
+
* beneficiary (the entity that receives the value the work creates). The draft
|
|
73
|
+
* specifies the authority and principal axes and states that it does not specify a
|
|
74
|
+
* beneficiary-attribution model, so nothing this function returns is a draft-03
|
|
75
|
+
* beneficiary result.
|
|
76
|
+
*
|
|
77
|
+
* The beneficiary here is whatever the caller's beneficiaryMap says it is. Where the
|
|
78
|
+
* map has no entry, the reported beneficiary falls back to the root of the legacy
|
|
79
|
+
* delegation chain, which is an authority fact, not a statement about who benefits.
|
|
80
|
+
*
|
|
81
|
+
* What the result does establish is lineage authenticity: whether each hop of the
|
|
82
|
+
* supplied legacy chain carries a delegation whose signature and temporal validity
|
|
83
|
+
* check out under the caller's revocation posture. It implies no allocation of
|
|
84
|
+
* credit, benefit, compensation, liability or ownership, which section 12 places
|
|
85
|
+
* outside the document and does not imply from the authority chain.
|
|
86
|
+
*
|
|
87
|
+
* The record type is the pre-draft compatibility Delegation, not the draft-03
|
|
88
|
+
* AuthorityDelegationV1 of section 3.1. See the note on createDelegation.
|
|
89
|
+
*/
|
|
64
90
|
export function traceBeneficiary(receipt, delegations, beneficiaryMap, revocation) {
|
|
65
91
|
const chain = [];
|
|
66
92
|
const keyChain = receipt.delegationChain ?? [];
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"attribution.js","sourceRoot":"","sources":["../../../src/core/attribution.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,6DAA6D;AAC7D,uCAAuC;AACvC,EAAE;AACF,sEAAsE;AACtE,mEAAmE;AACnE,0DAA0D;AAC1D,sEAAsE;AACtE,wEAAwE;AAExE,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAC1C,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAA8B,MAAM,iBAAiB,CAAA;AAC7F,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAS7C,yCAAyC;AACzC,kBAAkB;AAClB,yCAAyC;AAEzC,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAChE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAsB;IAChD,OAAO,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAA;AACtC,CAAC;AAwDD;;;;;;;;;;;;;;;;;;
|
|
1
|
+
{"version":3,"file":"attribution.js","sourceRoot":"","sources":["../../../src/core/attribution.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,6DAA6D;AAC7D,uCAAuC;AACvC,EAAE;AACF,sEAAsE;AACtE,mEAAmE;AACnE,0DAA0D;AAC1D,sEAAsE;AACtE,wEAAwE;AAExE,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAC1C,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAA8B,MAAM,iBAAiB,CAAA;AAC7F,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAS7C,yCAAyC;AACzC,kBAAkB;AAClB,yCAAyC;AAEzC,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAChE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAsB;IAChD,OAAO,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAA;AACtC,CAAC;AAwDD;;;;;;;;;;;;;;;;;;kEAkBkE;AAClE,SAAS,eAAe,CACtB,UAAoD,EACpD,UAAsB;IAEtB,IAAI,CAAC,UAAU,EAAE,iBAAiB;QAAE,OAAO,SAAS,CAAA;IACpD,IAAI,GAAY,CAAA;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,UAAU,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAA;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IACvD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IAC7C,MAAM,SAAS,GAAG,GAAiD,CAAA;IACnE,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACtF,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,CAAA;AACvE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAsB,EACtB,WAAyB,EACzB,cAA4C,EAC5C,UAAyC;IAEzC,MAAM,KAAK,GAAoB,EAAE,CAAA;IACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,IAAI,EAAE,CAAA;IAE9C,6EAA6E;IAC7E,+EAA+E;IAC/E,EAAE;IACF,yEAAyE;IACzE,0EAA0E;IAC1E,yEAAyE;IACzE,sDAAsD;IACtD,gFAAgF;IAChF,4EAA4E;IAC5E,yBAAyB;IACzB,EAAE;IACF,+EAA+E;IAC/E,wEAAwE;IACxE,yEAAyE;IACzE,+EAA+E;IAC/E,+EAA+E;IAC/E,mDAAmD;IACnD,IAAI,iBAAiB,GAAG,IAAI,CAAA;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;QACxB,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QAC1B,MAAM,MAAM,GAAG,CAAC,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAA;QAExC,yEAAyE;QACzE,qCAAqC;QACrC,EAAE;QACF,uEAAuE;QACvE,wEAAwE;QACxE,2EAA2E;QAC3E,qEAAqE;QACrE,uEAAuE;QACvE,oEAAoE;QACpE,oEAAoE;QACpE,2EAA2E;QAC3E,wEAAwE;QACxE,6DAA6D;QAC7D,MAAM,OAAO,GAAG,WAAW;aACxB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,CAAC,WAAW,KAAK,EAAE,CAAC;aAC3D,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACT,GAAG,EAAE,CAAC;YACN,KAAK,EAAE,gBAAgB,CAAC,CAAC,EAAE;gBACzB,qBAAqB,EAAE,UAAU,EAAE,qBAAqB;gBACxD,YAAY,EAAE,UAAU,EAAE,YAAY;gBACtC,qBAAqB,EAAE,eAAe,CAAC,UAAU,EAAE,CAAC,CAAC;aACtD,CAAC,CAAC,KAAK;SACT,CAAC,CAAC,CAAA;QAEL,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,iBAAiB,GAAG,KAAK,CAAA;QAE1D,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACzC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;YACjB,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpB,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACrG,CAAA;QACD,MAAM,MAAM,GACV,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;eAClF,OAAO,CAAC,CAAC,CAAC,CAAA;QAEf,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,EAAE;YACR,YAAY,EAAE,MAAM,EAAE,GAAG,CAAC,YAAY,IAAI,SAAS;YACnD,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE;YAC9B,KAAK,EAAE,CAAC;SACT,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;IAChC,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;IAEpD,2EAA2E;IAC3E,0BAA0B;IAC1B,MAAM,QAAQ,GAAG,CAAC,CAAC,WAAW,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,CAAC,CAAA;IAEvG,uEAAuE;IACvE,yEAAyE;IACzE,4EAA4E;IAC5E,gDAAgD;IAChD,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IACjD,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,KAAK,CAAA;IACzF,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,gBAAgB,IAAI,iBAAiB,CAAA;IAE7E,OAAO;QACL,OAAO,EAAE,QAAQ,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACzC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,aAAa,EAAE,OAAO,CAAC,OAAO;QAC9B,WAAW,EAAE,WAAW,EAAE,WAAW,IAAI,YAAY;QACrD,KAAK;QACL,UAAU,EAAE,KAAK,CAAC,MAAM;QACxB,QAAQ;QACR,QAAQ;KACT,CAAA;AACH,CAAC;AAED,yCAAyC;AACzC,yCAAyC;AACzC,yCAAyC;AAEzC,MAAM,UAAU,uBAAuB,CACrC,MAAyB,EACzB,SAAiB;IAEjB,MAAM,MAAM,GAAa,EAAE,CAAA;IAE3B,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAA;IACzC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAA;IACrD,CAAC;IAED,IAAI,MAAM,CAAC,YAAY,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,2BAA2B,MAAM,CAAC,YAAY,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,UAAU,CAAC,CAAA;IACnG,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;IAC3E,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC;QACpF,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAA;IAC1D,CAAC;IAED,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;QACrD,IAAI,MAAM,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAA;QACvE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;AAC/C,CAAC;AAED,yCAAyC;AACzC,cAAc;AACd,yCAAyC;AACzC,sEAAsE;AACtE,oEAAoE;AACpE,iEAAiE;AAEjE,0EAA0E;AAC1E,0EAA0E;AAC1E,yEAAyE;AACzE,qEAAqE;AACrE,6DAA6D;AAC7D,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;AAC9B,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,KAAa;IACnD,OAAO,MAAM,CAAC,MAAM,GAAG,IAAI,GAAG,KAAK,CAAC,CAAA;AACtC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,UAAoB;IAClD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAA;IAEnD,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE,CAAA;IACrC,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;IAEpC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAa,EAAE,CAAA;QACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,IAAI,CACP,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM;gBAClB,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC1C,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CACb,CAAA;QACH,CAAC;QACD,KAAK,GAAG,IAAI,CAAA;IACd,CAAC;IAED,OAAO,KAAK,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAoB,EACpB,UAAkB;IAElB,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAExC,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE,CAAA;IACrC,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IAC9C,IAAI,WAAW,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAEnC,MAAM,KAAK,GAAsB,EAAE,CAAA;IACnC,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;IACpC,IAAI,KAAK,GAAG,WAAW,CAAA;IAEvB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,YAAY,GAAG,KAAK,GAAG,CAAC,KAAK,CAAC,CAAA;QACpC,MAAM,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAA;QAEzD,kEAAkE;QAClE,2CAA2C;QAC3C,IAAI,YAAY,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;QACtF,CAAC;QAED,MAAM,IAAI,GAAa,EAAE,CAAA;QACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,IAAI,CACP,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAC3E,CAAA;QACH,CAAC;QAED,KAAK,GAAG,IAAI,CAAA;QACZ,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;IAC/B,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAA;AAC/E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAkB;IAClD,IAAI,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;IAE1C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,GAAG,IAAI,CAAC,QAAQ,KAAK,MAAM;YAC7B,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;YACnC,CAAC,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IACvC,CAAC;IAED,OAAO,IAAI,KAAK,KAAK,CAAC,IAAI,CAAA;AAC5B,CAAC;AAED,yCAAyC;AACzC,+CAA+C;AAC/C,yCAAyC;AACzC,uEAAuE;AACvE,kEAAkE;AAElE,MAAM,KAAK,GAAG,gEAAgE,CAAA;AAE9E,MAAM,CAAC,MAAM,qBAAqB,GAA2B,IAAI,KAAK,CAAC,EAAE,EAAE;IACzE,GAAG,KAAK,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;CACjC,CAA2B,CAAA;AAE5B,MAAM,UAAU,kBAAkB,CAAC,GAAG,KAAgB;IACpD,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA;AACxB,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,GAAG,KAAgB;IACjE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA;AACxB,CAAC"}
|
|
@@ -20,6 +20,19 @@ export interface CreateDelegationOptions {
|
|
|
20
20
|
credentialCheckPolicy?: import('../v2/credential-check-policy/types.js').CredentialCheckPolicy;
|
|
21
21
|
privateKey: string;
|
|
22
22
|
}
|
|
23
|
+
/**
|
|
24
|
+
* Legacy Delegation, a pre-draft compatibility surface. Deprecated.
|
|
25
|
+
*
|
|
26
|
+
* The delegated authority record of draft-pidlisnyi-aps-03 is AuthorityDelegationV1
|
|
27
|
+
* (section 3.1, record_type "aps:authority-delegation:v1"), implemented in
|
|
28
|
+
* src/v2/authority-delegation/. This record is not that one: it predates the draft's
|
|
29
|
+
* wire format, carries a different member set, and is not on the draft path. It is
|
|
30
|
+
* kept so existing deployments keep working, and its authority semantics are frozen.
|
|
31
|
+
*
|
|
32
|
+
* A draft-03 conformant chain is built with issueAuthorityDelegation and
|
|
33
|
+
* issueSubAuthorityDelegation and verified with verifyAuthorityDelegationChain. New
|
|
34
|
+
* work uses those.
|
|
35
|
+
*/
|
|
23
36
|
export declare function createDelegation(opts: CreateDelegationOptions): Delegation;
|
|
24
37
|
export interface SubDelegateOptions {
|
|
25
38
|
parentDelegation: Delegation;
|
|
@@ -35,6 +48,15 @@ export interface SubDelegateOptions {
|
|
|
35
48
|
* Omitted leaves the previous behaviour: signature and expiry only. */
|
|
36
49
|
revocation?: RevocationCheckOptions;
|
|
37
50
|
}
|
|
51
|
+
/**
|
|
52
|
+
* Narrow a legacy Delegation into a child. Pre-draft compatibility surface,
|
|
53
|
+
* deprecated, and frozen: see the note on createDelegation.
|
|
54
|
+
*
|
|
55
|
+
* Its scope narrowing goes through scopeCovers, which is the pre-draft rule and not
|
|
56
|
+
* the rule of draft-pidlisnyi-aps-03 section 3.2. The difference is stated at
|
|
57
|
+
* scopeCovers. The draft-path narrowing check is compareAuthority in
|
|
58
|
+
* src/v2/authority-delegation/compare.ts.
|
|
59
|
+
*/
|
|
38
60
|
export declare function subDelegate(opts: SubDelegateOptions): Delegation;
|
|
39
61
|
/** How a verifier treats the revocation evidence it was given.
|
|
40
62
|
*
|
|
@@ -81,6 +103,16 @@ export interface RevocationCheckOptions {
|
|
|
81
103
|
* 'cache_grace', freshness bound for 'fail_closed'. Default 300000. */
|
|
82
104
|
cacheGraceMs?: number;
|
|
83
105
|
}
|
|
106
|
+
/**
|
|
107
|
+
* Verify a legacy Delegation. Pre-draft compatibility surface, deprecated, frozen:
|
|
108
|
+
* see the note on createDelegation.
|
|
109
|
+
*
|
|
110
|
+
* This is not the draft-03 chain verifier. draft-pidlisnyi-aps-03 section 3.3 runs a
|
|
111
|
+
* root-to-leaf chain through a fixed order of checks and returns one of valid,
|
|
112
|
+
* invalid, indeterminate or unsupported; that is verifyAuthorityDelegationChain in
|
|
113
|
+
* src/v2/authority-delegation/verify.ts. This function checks one legacy record's
|
|
114
|
+
* signature, window and depth, and reads revocation only from what the caller passed.
|
|
115
|
+
*/
|
|
84
116
|
export declare function verifyDelegation(delegation: Delegation, opts?: RevocationCheckOptions & {
|
|
85
117
|
/** Walk parent chain and check each ancestor's revocation status.
|
|
86
118
|
* No-op without a DelegationStore; the option is preserved for API
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"delegation.d.ts","sourceRoot":"","sources":["../../../src/core/delegation.ts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,EACV,UAAU,EAAE,aAAa,EAAE,gBAAgB,EAAE,gBAAgB,EAC7D,uBAAuB,EAAE,yBAAyB,EAClD,eAAe,EAChB,MAAM,sBAAsB,CAAA;AAY7B,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,mBAAmB,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,cAAc,CAAA;IACvD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,cAAc,CAAC,EAAE,UAAU,GAAG,aAAa,CAAA;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;;mFAG+E;IAC/E,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,iBAAiB,CAAC,EAAE,OAAO,sBAAsB,EAAE,gBAAgB,CAAA;IACnE,kBAAkB,CAAC,EAAE,OAAO,sBAAsB,EAAE,iBAAiB,CAAA;IACrE,qBAAqB,CAAC,EAAE,OAAO,wCAAwC,EAAE,qBAAqB,CAAA;IAC9F,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,uBAAuB,GAAG,UAAU,CAoD1E;AAMD,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,EAAE,UAAU,CAAA;IAC5B,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,cAAc,CAAC,EAAE,UAAU,GAAG,aAAa,CAAA;IAC3C,iBAAiB,CAAC,EAAE,OAAO,sBAAsB,EAAE,gBAAgB,CAAA;IACnE,UAAU,EAAE,MAAM,CAAA;IAClB;;;4EAGwE;IACxE,UAAU,CAAC,EAAE,sBAAsB,CAAA;CACpC;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,UAAU,CAkHhE;AAMD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,qBAAqB,GAAG,WAAW,GAAG,aAAa,GAAG,aAAa,CAAA;AAE/E;uEACuE;AACvE,eAAO,MAAM,yBAAyB,EAAE,SAAS,qBAAqB,EACV,CAAA;AAE5D;;8CAE8C;AAC9C,eAAO,MAAM,+BAA+B,SAAS,CAAA;AAErD;;;;;;8EAM8E;AAC9E,MAAM,WAAW,sBAAsB;IACrC;oEACgE;IAChE,qBAAqB,CAAC,EAAE,qBAAqB,CAAA;IAC7C;6EACyE;IACzE,qBAAqB,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;IAC/D;4EACwE;IACxE,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AASD,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,sBAAsB,GAAG;IACvF;;8EAE0E;IAC1E,cAAc,CAAC,EAAE,OAAO,CAAA;CACzB,GAAG,gBAAgB,CA2JnB;AAMD,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,gBAAgB,GAAG,OAAO,CAOtE;AAMD,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,UAAU,CAAA;IACtB,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAA;IAC/B,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAA;IAC/B,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB;;;mEAG+D;IAC/D,UAAU,CAAC,EAAE,sBAAsB,CAAA;CACpC;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,oBAAoB,GAAG,aAAa,CAkCvE;AAED,wBAAgB,aAAa,CAC3B,OAAO,EAAE,aAAa,EACtB,cAAc,EAAE,MAAM,GACrB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAWtC;
|
|
1
|
+
{"version":3,"file":"delegation.d.ts","sourceRoot":"","sources":["../../../src/core/delegation.ts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,EACV,UAAU,EAAE,aAAa,EAAE,gBAAgB,EAAE,gBAAgB,EAC7D,uBAAuB,EAAE,yBAAyB,EAClD,eAAe,EAChB,MAAM,sBAAsB,CAAA;AAY7B,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,mBAAmB,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,cAAc,CAAA;IACvD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,cAAc,CAAC,EAAE,UAAU,GAAG,aAAa,CAAA;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;;mFAG+E;IAC/E,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,iBAAiB,CAAC,EAAE,OAAO,sBAAsB,EAAE,gBAAgB,CAAA;IACnE,kBAAkB,CAAC,EAAE,OAAO,sBAAsB,EAAE,iBAAiB,CAAA;IACrE,qBAAqB,CAAC,EAAE,OAAO,wCAAwC,EAAE,qBAAqB,CAAA;IAC9F,UAAU,EAAE,MAAM,CAAA;CACnB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,uBAAuB,GAAG,UAAU,CAoD1E;AAMD,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,EAAE,UAAU,CAAA;IAC5B,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,cAAc,CAAC,EAAE,UAAU,GAAG,aAAa,CAAA;IAC3C,iBAAiB,CAAC,EAAE,OAAO,sBAAsB,EAAE,gBAAgB,CAAA;IACnE,UAAU,EAAE,MAAM,CAAA;IAClB;;;4EAGwE;IACxE,UAAU,CAAC,EAAE,sBAAsB,CAAA;CACpC;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,UAAU,CAkHhE;AAMD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,qBAAqB,GAAG,WAAW,GAAG,aAAa,GAAG,aAAa,CAAA;AAE/E;uEACuE;AACvE,eAAO,MAAM,yBAAyB,EAAE,SAAS,qBAAqB,EACV,CAAA;AAE5D;;8CAE8C;AAC9C,eAAO,MAAM,+BAA+B,SAAS,CAAA;AAErD;;;;;;8EAM8E;AAC9E,MAAM,WAAW,sBAAsB;IACrC;oEACgE;IAChE,qBAAqB,CAAC,EAAE,qBAAqB,CAAA;IAC7C;6EACyE;IACzE,qBAAqB,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;IAC/D;4EACwE;IACxE,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AASD;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,sBAAsB,GAAG;IACvF;;8EAE0E;IAC1E,cAAc,CAAC,EAAE,OAAO,CAAA;CACzB,GAAG,gBAAgB,CA2JnB;AAMD,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,gBAAgB,GAAG,OAAO,CAOtE;AAMD,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,UAAU,CAAA;IACtB,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAA;IAC/B,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAA;IAC/B,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB;;;mEAG+D;IAC/D,UAAU,CAAC,EAAE,sBAAsB,CAAA;CACpC;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,oBAAoB,GAAG,aAAa,CAkCvE;AAED,wBAAgB,aAAa,CAC3B,OAAO,EAAE,aAAa,EACtB,cAAc,EAAE,MAAM,GACrB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAWtC;AA2BD,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAStE;AAED,wBAAgB,eAAe,CAAC,eAAe,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEpF;AAQD,wBAAgB,gBAAgB,CAC9B,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAC9E,gBAAgB,CAA2B;AAE9C,wBAAgB,aAAa,CAC3B,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAC9E,uBAAuB,CAA2B;AAErD,wBAAgB,aAAa,CAC3B,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAChF,gBAAgB,EAAE,CAA2B;AAEhD,wBAAgB,aAAa,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,yBAAyB,CAEjF;AAED,wBAAgB,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,EAAE,CAA2B;AAE1F,wBAAgB,aAAa,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,CAE9D;AAED,wBAAgB,YAAY,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,GAAG,MAAM,IAAI,CAEpF;AAED,wBAAgB,WAAW,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,aAAa,EAAE,CAA2B;AAE1F,wBAAgB,aAAa,CAAC,aAAa,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAEjF;AAED,wBAAgB,QAAQ,CAAC,WAAW,EAAE,UAAU,GAAG,MAAM,CAA2B;AAEpF;;;;GAIG;AACH,wBAAgB,WAAW,IAAI,IAAI,CAElC"}
|
|
@@ -34,6 +34,19 @@ import { canonicalizeForWrite } from './canonical.js';
|
|
|
34
34
|
const MOVED = 'This function has moved to DelegationStore in @aeoess/gateway. ' +
|
|
35
35
|
'Instantiate a DelegationStore and call the corresponding method. ' +
|
|
36
36
|
'See MIGRATION.md#delegation-store';
|
|
37
|
+
/**
|
|
38
|
+
* Legacy Delegation, a pre-draft compatibility surface. Deprecated.
|
|
39
|
+
*
|
|
40
|
+
* The delegated authority record of draft-pidlisnyi-aps-03 is AuthorityDelegationV1
|
|
41
|
+
* (section 3.1, record_type "aps:authority-delegation:v1"), implemented in
|
|
42
|
+
* src/v2/authority-delegation/. This record is not that one: it predates the draft's
|
|
43
|
+
* wire format, carries a different member set, and is not on the draft path. It is
|
|
44
|
+
* kept so existing deployments keep working, and its authority semantics are frozen.
|
|
45
|
+
*
|
|
46
|
+
* A draft-03 conformant chain is built with issueAuthorityDelegation and
|
|
47
|
+
* issueSubAuthorityDelegation and verified with verifyAuthorityDelegationChain. New
|
|
48
|
+
* work uses those.
|
|
49
|
+
*/
|
|
37
50
|
export function createDelegation(opts) {
|
|
38
51
|
if (!opts || typeof opts !== 'object')
|
|
39
52
|
throw new Error('createDelegation: opts must be an object');
|
|
@@ -87,6 +100,15 @@ export function createDelegation(opts) {
|
|
|
87
100
|
Object.freeze(signed);
|
|
88
101
|
return signed;
|
|
89
102
|
}
|
|
103
|
+
/**
|
|
104
|
+
* Narrow a legacy Delegation into a child. Pre-draft compatibility surface,
|
|
105
|
+
* deprecated, and frozen: see the note on createDelegation.
|
|
106
|
+
*
|
|
107
|
+
* Its scope narrowing goes through scopeCovers, which is the pre-draft rule and not
|
|
108
|
+
* the rule of draft-pidlisnyi-aps-03 section 3.2. The difference is stated at
|
|
109
|
+
* scopeCovers. The draft-path narrowing check is compareAuthority in
|
|
110
|
+
* src/v2/authority-delegation/compare.ts.
|
|
111
|
+
*/
|
|
90
112
|
export function subDelegate(opts) {
|
|
91
113
|
const parent = opts.parentDelegation;
|
|
92
114
|
const newDepth = parent.currentDepth + 1;
|
|
@@ -201,6 +223,16 @@ export const DEFAULT_REVOCATION_FRESHNESS_MS = 300000;
|
|
|
201
223
|
// Signature / expiry / notBefore / depth checks are pure. Revocation status
|
|
202
224
|
// is drawn exclusively from `opts.cachedRevocationState` — callers that need
|
|
203
225
|
// live revocation enforcement (or ancestor-chain walks) use DelegationStore.
|
|
226
|
+
/**
|
|
227
|
+
* Verify a legacy Delegation. Pre-draft compatibility surface, deprecated, frozen:
|
|
228
|
+
* see the note on createDelegation.
|
|
229
|
+
*
|
|
230
|
+
* This is not the draft-03 chain verifier. draft-pidlisnyi-aps-03 section 3.3 runs a
|
|
231
|
+
* root-to-leaf chain through a fixed order of checks and returns one of valid,
|
|
232
|
+
* invalid, indeterminate or unsupported; that is verifyAuthorityDelegationChain in
|
|
233
|
+
* src/v2/authority-delegation/verify.ts. This function checks one legacy record's
|
|
234
|
+
* signature, window and depth, and reads revocation only from what the caller passed.
|
|
235
|
+
*/
|
|
204
236
|
export function verifyDelegation(delegation, opts) {
|
|
205
237
|
// Null / undefined / non-object (attacker-deliverable JSON `null`) rejects
|
|
206
238
|
// as an invalid delegation rather than throwing on the destructuring below.
|
|
@@ -415,6 +447,18 @@ export function verifyReceipt(receipt, agentPublicKey) {
|
|
|
415
447
|
// - Universal wildcard: '*' covers everything
|
|
416
448
|
// - Prefix wildcard: 'commerce:*' covers 'commerce' and 'commerce:checkout'
|
|
417
449
|
// - NO reverse: 'code:deploy' does NOT cover 'code' (child does not satisfy parent)
|
|
450
|
+
//
|
|
451
|
+
// THIS IS THE PRE-DRAFT RULE, NOT THE SECTION 3.2 RULE, and it is deliberately kept.
|
|
452
|
+
// draft-pidlisnyi-aps-03 section 3.2 (published lines 516-521) allows "*" and a
|
|
453
|
+
// terminal ":*" as wildcards and nothing else: "An exact grant covers itself. A
|
|
454
|
+
// terminal wildcard p:* covers p and every grant beginning p:". The third line above,
|
|
455
|
+
// a bare 'code' covering 'code:deploy', is a fourth form the draft does not allow, so
|
|
456
|
+
// this function is wider than the draft rule on exactly that case.
|
|
457
|
+
//
|
|
458
|
+
// The draft-path check is scopeGrantCovers in src/v2/authority-delegation/scope.ts,
|
|
459
|
+
// which follows section 3.2. This one governs the legacy Delegation surface only, and
|
|
460
|
+
// its behaviour is frozen: converging the two would change what already-signed legacy
|
|
461
|
+
// records authorize. Draft-path code uses scopeGrantCovers and never this function.
|
|
418
462
|
export function scopeCovers(granted, required) {
|
|
419
463
|
if (granted === required)
|
|
420
464
|
return true;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"delegation.js","sourceRoot":"","sources":["../../../src/core/delegation.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,yEAAyE;AACzE,yEAAyE;AACzE,yEAAyE;AACzE,0EAA0E;AAC1E,wEAAwE;AACxE,0EAA0E;AAC1E,gDAAgD;AAChD,EAAE;AACF,qEAAqE;AACrE,4EAA4E;AAC5E,4DAA4D;AAC5D,gFAAgF;AAChF,uEAAuE;AACvE,EAAE;AACF,oEAAoE;AACpE,4EAA4E;AAC5E,qEAAqE;AACrE,0EAA0E;AAC1E,qDAAqD;AACrD,EAAE;AACF,qEAAqE;AACrE,mEAAmE;AACnE,yEAAyE;AACzE,6BAA6B;AAC7B,yEAAyE;AAEzE,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAM1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AAErD,MAAM,KAAK,GACT,iEAAiE;IACjE,mEAAmE;IACnE,mCAAmC,CAAA;AA4BrC,MAAM,UAAU,gBAAgB,CAAC,IAA6B;IAC5D,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAClG,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;IAC1I,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;IAC1I,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAC3F,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;IACvI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACnK,MAAM,IAAI,KAAK,CAAC,0EAA0E,IAAI,CAAC,UAAU,EAAE,CAAC,CAAA;IAC9G,CAAC;IAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAA;IAC1E,IAAI,iBAAiB,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAA;IAC/F,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;IACtB,iFAAiF;IACjF,mFAAmF;IACnF,kFAAkF;IAClF,gFAAgF;IAChF,uEAAuE;IACvE,4EAA4E;IAC5E,mFAAmF;IACnF,oEAAoE;IACpE,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAA;IAEvH,MAAM,UAAU,GAAkC;QAChD,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAC5C,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,CAAC,IAAI,CAAC,mBAAmB,IAAI,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAClF,SAAS,EAAE,YAAY;QACvB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,WAAW,EAAE,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC;QACnE,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,CAAC;QAC5B,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,CAAC;QACpC,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;QAC5B,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,WAAW,EAAE;QAC9C,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC5E,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC/E,GAAG,CAAC,IAAI,CAAC,qBAAqB,IAAI,EAAE,qBAAqB,EAAE,IAAI,CAAC,qBAAqB,EAAE,CAAC;KACzF,CAAA;IAED,MAAM,SAAS,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAA;IAClD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;IAElD,MAAM,MAAM,GAAG,EAAE,GAAG,UAAU,EAAE,SAAS,EAAE,CAAA;IAC3C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACrB,OAAO,MAAM,CAAA;AACf,CAAC;AAqBD,MAAM,UAAU,WAAW,CAAC,IAAwB;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAA;IAEpC,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,GAAG,CAAC,CAAA;IACxC,IAAI,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,wCAAwC,QAAQ,oBAAoB,MAAM,CAAC,QAAQ,EAAE,CACtF,CAAA;IACH,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1F,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,qBAAqB,aAAa,0BAA0B,MAAM,CAAC,KAAK,GAAG,CAC5E,CAAA;IACH,CAAC;IAED,IAAI,IAAI,CAAC,iBAAiB,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QACvD,MAAM,EAAE,GAAG,MAAM,CAAC,iBAAiB,CAAA;QACnC,MAAM,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAAA;QACjC,IAAI,CAAC,EAAE,CAAC,mBAAmB,IAAI,EAAE,CAAC,mBAAmB,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAA;QAClF,CAAC;QACD,IAAI,EAAE,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,CAAC,aAAa,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC;YAC5G,MAAM,IAAI,KAAK,CAAC,qDAAqD,EAAE,CAAC,aAAa,qBAAqB,EAAE,CAAC,aAAa,GAAG,CAAC,CAAA;QAChI,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,gBAAgB,IAAI,EAAE,CAAC,gBAAgB,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAA;QAC/E,CAAC;QACD,IAAI,EAAE,CAAC,kBAAkB,IAAI,EAAE,CAAC,kBAAkB,EAAE,CAAC;YACnD,MAAM,OAAO,GAAG,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,kBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;YACtF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,yCAAyC,OAAO,oBAAoB,EAAE,CAAC,kBAAkB,GAAG,CAAC,CAAA;YAC/G,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,iBAAiB,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,uGAAuG,CAAC,CAAA;IAC1H,CAAC;IAED,8EAA8E;IAC9E,+EAA+E;IAC/E,mDAAmD;IACnD,MAAM,uBAAuB,GAAG,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,CAAA;IACtG,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IACtG,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,IAAI,UAAU,CAAA;IACnD,0DAA0D;IAC1D,8EAA8E;IAC9E,+EAA+E;IAC/E,gFAAgF;IAChF,gFAAgF;IAChF,IAAI,uBAAuB,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,4EAA4E,SAAS,0BAA0B,UAAU,mIAAmI,CAC7P,CAAA;IACH,CAAC;IACD,MAAM,eAAe,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC,CAAA;IACnF,4EAA4E;IAC5E,6EAA6E;IAC7E,2EAA2E;IAC3E,MAAM,wBAAwB,GAAG,UAAU,KAAK,SAAS,IAAI,SAAS,KAAK,UAAU,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAA;IACxH,IAAI,wBAAwB,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,GAAG,eAAe,EAAE,CAAC;QAC/H,MAAM,IAAI,KAAK,CACb,eAAe,IAAI,CAAC,UAAU,6BAA6B,eAAe,EAAE,CAC7E,CAAA;IACH,CAAC;IAED,iFAAiF;IACjF,iFAAiF;IACjF,iFAAiF;IACjF,iFAAiF;IACjF,gFAAgF;IAChF,wCAAwC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACtB,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IACnD,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,oEAAoE,YAAY,CAAC,MAAM,GAAG,CAAC,CAAA;IAC7G,CAAC;IACD,MAAM,cAAc,GAAG,YAAY,CAAC,EAAE,CAAA;IACtC,IAAI,cAAc,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;IAC1E,CAAC;IACD,6FAA6F;IAC7F,8FAA8F;IAC9F,iGAAiG;IACjG,MAAM,YAAY,GAAG,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;IAC9D,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,+CAA+C,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAClG,CAAC;IACD,mFAAmF;IACnF,iFAAiF;IACjF,kFAAkF;IAClF,sBAAsB;IACtB,MAAM,cAAc,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE,GAAG,OAAO,EAAE,cAAc,CAAC,CAAC,CAAA;IAElF,OAAO,gBAAgB,CAAC;QACtB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,8FAA8F;QAC9F,iGAAiG;QACjG,8FAA8F;QAC9F,kFAAkF;QAClF,cAAc,EAAE,SAAS;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EAAE,MAAM,CAAC,YAAY,GAAG,CAAC;QACrC,SAAS,EAAE,cAAc;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,MAAM,CAAC,iBAAiB;QACrE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAA;AACJ,CAAC;AAwBD;uEACuE;AACvE,MAAM,CAAC,MAAM,yBAAyB,GACpC,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC,CAAA;AAE5D;;8CAE8C;AAC9C,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAA;AAqBrD,yCAAyC;AACzC,iCAAiC;AACjC,yCAAyC;AACzC,4EAA4E;AAC5E,6EAA6E;AAC7E,6EAA6E;AAE7E,MAAM,UAAU,gBAAgB,CAAC,UAAsB,EAAE,IAKxD;IACC,2EAA2E;IAC3E,4EAA4E;IAC5E,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,KAAK;YAClB,aAAa,EAAE,KAAK;YACpB,MAAM,EAAE,CAAC,mCAAmC,CAAC;YAC7C,kBAAkB,EAAE,QAAQ;SAC7B,CAAA;IACH,CAAC;IACD,6EAA6E;IAC7E,2EAA2E;IAC3E,0EAA0E;IAC1E,yEAAyE;IACzE,uEAAuE;IACvE,2EAA2E;IAC3E,4EAA4E;IAC5E,iDAAiD;IACjD,MAAM,eAAe,GAAG,IAAI,EAAE,qBAAqB,CAAA;IACnD,IAAI,eAAe,KAAK,SAAS,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAC1F,MAAM,IAAI,KAAK,CACb,mDAAmD,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI;YACtF,mBAAmB,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC3D,CAAA;IACH,CAAC;IACD,MAAM,MAAM,GAA0B,eAAe,IAAI,WAAW,CAAA;IACpE,MAAM,MAAM,GAAa,EAAE,CAAA;IAE3B,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,UAAU,CAAA;IAC7C,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;IACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,WAAW,CAAC,CAAA;IACrE,IAAI,CAAC,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;IAE1D,0EAA0E;IAC1E,6EAA6E;IAC7E,8EAA8E;IAC9E,4BAA4B;IAC5B,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;IACjD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAA;QACnD,OAAO,GAAG,IAAI,CAAA;IAChB,CAAC;SAAM,IAAI,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;QACjC,OAAO,GAAG,IAAI,CAAA;IAChB,CAAC;IAED,+EAA+E;IAC/E,gFAAgF;IAChF,6EAA6E;IAC7E,gFAAgF;IAChF,IAAI,WAAW,GAAG,KAAK,CAAA;IACvB,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QACpD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,sBAAsB,SAAS,CAAC,MAAM,GAAG,CAAC,CAAA;QACxD,CAAC;aAAM,IAAI,SAAS,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,wCAAwC,UAAU,CAAC,SAAS,GAAG,CAAC,CAAA;YAC5E,WAAW,GAAG,IAAI,CAAA;QACpB,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,yEAAyE;IACzE,2EAA2E;IAC3E,yEAAyE;IACzE,+DAA+D;IAC/D,EAAE;IACF,wEAAwE;IACxE,yEAAyE;IACzE,kDAAkD;IAClD,MAAM,WAAW,GAAG,IAAI,EAAE,YAAY,IAAI,+BAA+B,CAAA;IACzE,MAAM,MAAM,GAAG,IAAI,EAAE,qBAAqB,CAAA;IAC1C,IAAI,kBAAkB,GAAiC,QAAQ,CAAA;IAC/D,IAAI,kBAAkB,GAAG,KAAK,CAAA;IAC9B,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAChD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,kBAAkB,GAAG,IAAI,CAAA;YACzB,wEAAwE;YACxE,uEAAuE;YACvE,yDAAyD;YACzD,0DAA0D;YAC1D,oEAAoE;YACpE,qEAAqE;YACrE,0CAA0C;YAC1C,kBAAkB,GAAG,OAAO,CAAA;QAC9B,CAAC;aAAM,CAAC;YACN,uEAAuE;YACvE,wEAAwE;YACxE,wEAAwE;YACxE,yEAAyE;YACzE,yEAAyE;YACzE,kBAAkB;YAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,EAAE,CAAA;YAC1C,kBAAkB,GAAG,QAAQ,IAAI,CAAC,IAAI,QAAQ,IAAI,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAA;QACnF,CAAC;IACH,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,SAA6B,CAAA;IACjC,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,MAAM,KAAK,aAAa,IAAI,kBAAkB,KAAK,OAAO,EAAE,CAAC;YAC/D,mEAAmE;YACnE,2BAA2B;YAC3B,OAAO,GAAG,IAAI,CAAA;YACd,MAAM,CAAC,IAAI,CAAC,kBAAkB;gBAC5B,CAAC,CAAC,+DAA+D;gBACjE,CAAC,CAAC,+CAA+C,CAAC,CAAA;QACtD,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;QAC1B,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,SAAS,GAAG,MAAM,CAAC,SAAS,CAAA;YAC5B,MAAM,CAAC,IAAI,CAAC,iCAAiC,MAAM,CAAC,SAAS,GAAG,CAAC,CAAA;QACnE,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,2EAA2E;IAC3E,4EAA4E;IAC5E,yEAAyE;IACzE,wEAAwE;IACxE,IAAI,MAAM,KAAK,aAAa,IAAI,kBAAkB,KAAK,OAAO,EAAE,CAAC;QAC/D,4EAA4E;QAC5E,2EAA2E;QAC3E,sEAAsE;QACtE,wEAAwE;QACxE,oCAAoC;QACpC,MAAM,CAAC,IAAI,CACT,kBAAkB,KAAK,QAAQ;YAC7B,CAAC,CAAC,yEAAyE;YAC3E,CAAC,CAAC,kBAAkB;gBAClB,CAAC,CAAC,qFAAqF;gBACvF,CAAC,CAAC,yDAAyD,WAAW,gCAAgC,CAC3G,CAAA;IACH,CAAC;IAED,MAAM,aAAa,GAAG,UAAU,CAAC,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAA;IACnE,IAAI,aAAa;QAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;IAEtD,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,OAAO;QACP,OAAO;QACP,WAAW;QACX,aAAa;QACb,SAAS;QACT,MAAM;QACN,kBAAkB;KACnB,CAAA;AACH,CAAC;AAED,yCAAyC;AACzC,8BAA8B;AAC9B,yCAAyC;AAEzC,MAAM,UAAU,gBAAgB,CAAC,UAA4B;IAC3D,4EAA4E;IAC5E,8BAA8B;IAC9B,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAA;IACvC,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,UAAU,CAAA;IAC7C,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;IACxC,OAAO,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,CAAA;AAC3D,CAAC;AAqBD,MAAM,UAAU,aAAa,CAAC,IAA0B;IACtD,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;IACjE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,+CAA+C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC5F,CAAC;IAED,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CACb,UAAU,IAAI,CAAC,MAAM,CAAC,SAAS,wBAAwB,IAAI,CAAC,UAAU,CAAC,KAAK,GAAG,CAChF,CAAA;IACH,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,IAAI,CAAC,CAAA;QACjD,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,QAAQ,CAAC,GAAG,QAAQ,CAAA;QACrE,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,sBAAsB,SAAS,EAAE,CAAC,CAAA;QACrF,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAqC;QAChD,SAAS,EAAE,OAAO,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAC1C,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,eAAe,EAAE,IAAI,CAAC,eAAe;KACtC,CAAA;IAED,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAA;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;IAClD,OAAO,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAA;AAClC,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,OAAsB,EACtB,cAAsB;IAEtB,MAAM,MAAM,GAAa,EAAE,CAAA;IAE3B,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAA;IAC1C,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;IACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,cAAc,CAAC,CAAA;IAC7D,IAAI,CAAC,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;IAEvD,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAA;IAEzE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;AAC/C,CAAC;AAED,0CAA0C;AAC1C,4CAA4C;AAC5C,0CAA0C;AAC1C,6DAA6D;AAC7D,kEAAkE;AAClE,EAAE;AACF,SAAS;AACT,sCAAsC;AACtC,oEAAoE;AACpE,8CAA8C;AAC9C,4EAA4E;AAC5E,oFAAoF;AAEpF,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,QAAgB;IAC3D,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IACrC,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IAChC,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,GAAG,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IACnD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QACnC,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC;YAAE,OAAO,IAAI,CAAA;IAC3E,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,eAAyB,EAAE,QAAgB;IACzE,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAA;AAC5D,CAAC;AAED,yEAAyE;AACzE,iEAAiE;AACjE,yEAAyE;AACzE,0EAA0E;AAC1E,mEAAmE;AAEnE,MAAM,UAAU,gBAAgB,CAC9B,aAAqB,EAAE,UAAkB,EAAE,OAAe,EAAE,WAAmB,IAC3D,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;AAE9C,MAAM,UAAU,aAAa,CAC3B,aAAqB,EAAE,UAAkB,EAAE,OAAe,EAAE,WAAmB,IACpD,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;AAErD,MAAM,UAAU,aAAa,CAC3B,eAAuB,EAAE,UAAkB,EAAE,OAAe,EAAE,WAAmB,IAC3D,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;AAEhD,MAAM,UAAU,aAAa,CAAC,cAAwB;IACpD,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA;AACxB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,aAAqB,IAAc,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;AAE1F,MAAM,UAAU,aAAa,CAAC,aAAqB;IACjD,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA;AACxB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,SAA2C;IACtE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA;AACxB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,QAAiB,IAAqB,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;AAE1F,MAAM,UAAU,aAAa,CAAC,aAAqB;IACjD,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA;AACxB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,WAAuB,IAAY,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;AAEpF;;;;GAIG;AACH,MAAM,UAAU,WAAW;IACzB,6DAA6D;AAC/D,CAAC"}
|
|
1
|
+
{"version":3,"file":"delegation.js","sourceRoot":"","sources":["../../../src/core/delegation.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,yEAAyE;AACzE,yEAAyE;AACzE,yEAAyE;AACzE,0EAA0E;AAC1E,wEAAwE;AACxE,0EAA0E;AAC1E,gDAAgD;AAChD,EAAE;AACF,qEAAqE;AACrE,4EAA4E;AAC5E,4DAA4D;AAC5D,gFAAgF;AAChF,uEAAuE;AACvE,EAAE;AACF,oEAAoE;AACpE,4EAA4E;AAC5E,qEAAqE;AACrE,0EAA0E;AAC1E,qDAAqD;AACrD,EAAE;AACF,qEAAqE;AACrE,mEAAmE;AACnE,yEAAyE;AACzE,6BAA6B;AAC7B,yEAAyE;AAEzE,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAM1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AAErD,MAAM,KAAK,GACT,iEAAiE;IACjE,mEAAmE;IACnE,mCAAmC,CAAA;AA4BrC;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAA6B;IAC5D,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAClG,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;IAC1I,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;IAC1I,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAC3F,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;IACvI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACnK,MAAM,IAAI,KAAK,CAAC,0EAA0E,IAAI,CAAC,UAAU,EAAE,CAAC,CAAA;IAC9G,CAAC;IAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAA;IAC1E,IAAI,iBAAiB,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAA;IAC/F,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;IACtB,iFAAiF;IACjF,mFAAmF;IACnF,kFAAkF;IAClF,gFAAgF;IAChF,uEAAuE;IACvE,4EAA4E;IAC5E,mFAAmF;IACnF,oEAAoE;IACpE,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAA;IAEvH,MAAM,UAAU,GAAkC;QAChD,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAC5C,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,CAAC,IAAI,CAAC,mBAAmB,IAAI,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAClF,SAAS,EAAE,YAAY;QACvB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,WAAW,EAAE,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC;QACnE,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,CAAC;QAC5B,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,CAAC;QACpC,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;QAC5B,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,WAAW,EAAE;QAC9C,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC5E,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC/E,GAAG,CAAC,IAAI,CAAC,qBAAqB,IAAI,EAAE,qBAAqB,EAAE,IAAI,CAAC,qBAAqB,EAAE,CAAC;KACzF,CAAA;IAED,MAAM,SAAS,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAA;IAClD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;IAElD,MAAM,MAAM,GAAG,EAAE,GAAG,UAAU,EAAE,SAAS,EAAE,CAAA;IAC3C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACrB,OAAO,MAAM,CAAA;AACf,CAAC;AAqBD;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,IAAwB;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAA;IAEpC,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,GAAG,CAAC,CAAA;IACxC,IAAI,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,wCAAwC,QAAQ,oBAAoB,MAAM,CAAC,QAAQ,EAAE,CACtF,CAAA;IACH,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1F,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,qBAAqB,aAAa,0BAA0B,MAAM,CAAC,KAAK,GAAG,CAC5E,CAAA;IACH,CAAC;IAED,IAAI,IAAI,CAAC,iBAAiB,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QACvD,MAAM,EAAE,GAAG,MAAM,CAAC,iBAAiB,CAAA;QACnC,MAAM,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAAA;QACjC,IAAI,CAAC,EAAE,CAAC,mBAAmB,IAAI,EAAE,CAAC,mBAAmB,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAA;QAClF,CAAC;QACD,IAAI,EAAE,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,CAAC,aAAa,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC;YAC5G,MAAM,IAAI,KAAK,CAAC,qDAAqD,EAAE,CAAC,aAAa,qBAAqB,EAAE,CAAC,aAAa,GAAG,CAAC,CAAA;QAChI,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,gBAAgB,IAAI,EAAE,CAAC,gBAAgB,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAA;QAC/E,CAAC;QACD,IAAI,EAAE,CAAC,kBAAkB,IAAI,EAAE,CAAC,kBAAkB,EAAE,CAAC;YACnD,MAAM,OAAO,GAAG,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,kBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;YACtF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,yCAAyC,OAAO,oBAAoB,EAAE,CAAC,kBAAkB,GAAG,CAAC,CAAA;YAC/G,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,iBAAiB,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,uGAAuG,CAAC,CAAA;IAC1H,CAAC;IAED,8EAA8E;IAC9E,+EAA+E;IAC/E,mDAAmD;IACnD,MAAM,uBAAuB,GAAG,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,CAAA;IACtG,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IACtG,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,IAAI,UAAU,CAAA;IACnD,0DAA0D;IAC1D,8EAA8E;IAC9E,+EAA+E;IAC/E,gFAAgF;IAChF,gFAAgF;IAChF,IAAI,uBAAuB,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,4EAA4E,SAAS,0BAA0B,UAAU,mIAAmI,CAC7P,CAAA;IACH,CAAC;IACD,MAAM,eAAe,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC,CAAA;IACnF,4EAA4E;IAC5E,6EAA6E;IAC7E,2EAA2E;IAC3E,MAAM,wBAAwB,GAAG,UAAU,KAAK,SAAS,IAAI,SAAS,KAAK,UAAU,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAA;IACxH,IAAI,wBAAwB,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,GAAG,eAAe,EAAE,CAAC;QAC/H,MAAM,IAAI,KAAK,CACb,eAAe,IAAI,CAAC,UAAU,6BAA6B,eAAe,EAAE,CAC7E,CAAA;IACH,CAAC;IAED,iFAAiF;IACjF,iFAAiF;IACjF,iFAAiF;IACjF,iFAAiF;IACjF,gFAAgF;IAChF,wCAAwC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACtB,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IACnD,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,oEAAoE,YAAY,CAAC,MAAM,GAAG,CAAC,CAAA;IAC7G,CAAC;IACD,MAAM,cAAc,GAAG,YAAY,CAAC,EAAE,CAAA;IACtC,IAAI,cAAc,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;IAC1E,CAAC;IACD,6FAA6F;IAC7F,8FAA8F;IAC9F,iGAAiG;IACjG,MAAM,YAAY,GAAG,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;IAC9D,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,+CAA+C,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAClG,CAAC;IACD,mFAAmF;IACnF,iFAAiF;IACjF,kFAAkF;IAClF,sBAAsB;IACtB,MAAM,cAAc,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE,GAAG,OAAO,EAAE,cAAc,CAAC,CAAC,CAAA;IAElF,OAAO,gBAAgB,CAAC;QACtB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,8FAA8F;QAC9F,iGAAiG;QACjG,8FAA8F;QAC9F,kFAAkF;QAClF,cAAc,EAAE,SAAS;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EAAE,MAAM,CAAC,YAAY,GAAG,CAAC;QACrC,SAAS,EAAE,cAAc;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,MAAM,CAAC,iBAAiB;QACrE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAA;AACJ,CAAC;AAwBD;uEACuE;AACvE,MAAM,CAAC,MAAM,yBAAyB,GACpC,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC,CAAA;AAE5D;;8CAE8C;AAC9C,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAA;AAqBrD,yCAAyC;AACzC,iCAAiC;AACjC,yCAAyC;AACzC,4EAA4E;AAC5E,6EAA6E;AAC7E,6EAA6E;AAE7E;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAsB,EAAE,IAKxD;IACC,2EAA2E;IAC3E,4EAA4E;IAC5E,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,KAAK;YAClB,aAAa,EAAE,KAAK;YACpB,MAAM,EAAE,CAAC,mCAAmC,CAAC;YAC7C,kBAAkB,EAAE,QAAQ;SAC7B,CAAA;IACH,CAAC;IACD,6EAA6E;IAC7E,2EAA2E;IAC3E,0EAA0E;IAC1E,yEAAyE;IACzE,uEAAuE;IACvE,2EAA2E;IAC3E,4EAA4E;IAC5E,iDAAiD;IACjD,MAAM,eAAe,GAAG,IAAI,EAAE,qBAAqB,CAAA;IACnD,IAAI,eAAe,KAAK,SAAS,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAC1F,MAAM,IAAI,KAAK,CACb,mDAAmD,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI;YACtF,mBAAmB,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC3D,CAAA;IACH,CAAC;IACD,MAAM,MAAM,GAA0B,eAAe,IAAI,WAAW,CAAA;IACpE,MAAM,MAAM,GAAa,EAAE,CAAA;IAE3B,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,UAAU,CAAA;IAC7C,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;IACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,WAAW,CAAC,CAAA;IACrE,IAAI,CAAC,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;IAE1D,0EAA0E;IAC1E,6EAA6E;IAC7E,8EAA8E;IAC9E,4BAA4B;IAC5B,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;IACjD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAA;QACnD,OAAO,GAAG,IAAI,CAAA;IAChB,CAAC;SAAM,IAAI,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;QACjC,OAAO,GAAG,IAAI,CAAA;IAChB,CAAC;IAED,+EAA+E;IAC/E,gFAAgF;IAChF,6EAA6E;IAC7E,gFAAgF;IAChF,IAAI,WAAW,GAAG,KAAK,CAAA;IACvB,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QACpD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,sBAAsB,SAAS,CAAC,MAAM,GAAG,CAAC,CAAA;QACxD,CAAC;aAAM,IAAI,SAAS,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,wCAAwC,UAAU,CAAC,SAAS,GAAG,CAAC,CAAA;YAC5E,WAAW,GAAG,IAAI,CAAA;QACpB,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,yEAAyE;IACzE,2EAA2E;IAC3E,yEAAyE;IACzE,+DAA+D;IAC/D,EAAE;IACF,wEAAwE;IACxE,yEAAyE;IACzE,kDAAkD;IAClD,MAAM,WAAW,GAAG,IAAI,EAAE,YAAY,IAAI,+BAA+B,CAAA;IACzE,MAAM,MAAM,GAAG,IAAI,EAAE,qBAAqB,CAAA;IAC1C,IAAI,kBAAkB,GAAiC,QAAQ,CAAA;IAC/D,IAAI,kBAAkB,GAAG,KAAK,CAAA;IAC9B,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAChD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,kBAAkB,GAAG,IAAI,CAAA;YACzB,wEAAwE;YACxE,uEAAuE;YACvE,yDAAyD;YACzD,0DAA0D;YAC1D,oEAAoE;YACpE,qEAAqE;YACrE,0CAA0C;YAC1C,kBAAkB,GAAG,OAAO,CAAA;QAC9B,CAAC;aAAM,CAAC;YACN,uEAAuE;YACvE,wEAAwE;YACxE,wEAAwE;YACxE,yEAAyE;YACzE,yEAAyE;YACzE,kBAAkB;YAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,EAAE,CAAA;YAC1C,kBAAkB,GAAG,QAAQ,IAAI,CAAC,IAAI,QAAQ,IAAI,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAA;QACnF,CAAC;IACH,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,SAA6B,CAAA;IACjC,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,MAAM,KAAK,aAAa,IAAI,kBAAkB,KAAK,OAAO,EAAE,CAAC;YAC/D,mEAAmE;YACnE,2BAA2B;YAC3B,OAAO,GAAG,IAAI,CAAA;YACd,MAAM,CAAC,IAAI,CAAC,kBAAkB;gBAC5B,CAAC,CAAC,+DAA+D;gBACjE,CAAC,CAAC,+CAA+C,CAAC,CAAA;QACtD,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;QAC1B,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,SAAS,GAAG,MAAM,CAAC,SAAS,CAAA;YAC5B,MAAM,CAAC,IAAI,CAAC,iCAAiC,MAAM,CAAC,SAAS,GAAG,CAAC,CAAA;QACnE,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,2EAA2E;IAC3E,4EAA4E;IAC5E,yEAAyE;IACzE,wEAAwE;IACxE,IAAI,MAAM,KAAK,aAAa,IAAI,kBAAkB,KAAK,OAAO,EAAE,CAAC;QAC/D,4EAA4E;QAC5E,2EAA2E;QAC3E,sEAAsE;QACtE,wEAAwE;QACxE,oCAAoC;QACpC,MAAM,CAAC,IAAI,CACT,kBAAkB,KAAK,QAAQ;YAC7B,CAAC,CAAC,yEAAyE;YAC3E,CAAC,CAAC,kBAAkB;gBAClB,CAAC,CAAC,qFAAqF;gBACvF,CAAC,CAAC,yDAAyD,WAAW,gCAAgC,CAC3G,CAAA;IACH,CAAC;IAED,MAAM,aAAa,GAAG,UAAU,CAAC,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAA;IACnE,IAAI,aAAa;QAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;IAEtD,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,OAAO;QACP,OAAO;QACP,WAAW;QACX,aAAa;QACb,SAAS;QACT,MAAM;QACN,kBAAkB;KACnB,CAAA;AACH,CAAC;AAED,yCAAyC;AACzC,8BAA8B;AAC9B,yCAAyC;AAEzC,MAAM,UAAU,gBAAgB,CAAC,UAA4B;IAC3D,4EAA4E;IAC5E,8BAA8B;IAC9B,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAA;IACvC,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,UAAU,CAAA;IAC7C,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;IACxC,OAAO,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,CAAA;AAC3D,CAAC;AAqBD,MAAM,UAAU,aAAa,CAAC,IAA0B;IACtD,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;IACjE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,+CAA+C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC5F,CAAC;IAED,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CACb,UAAU,IAAI,CAAC,MAAM,CAAC,SAAS,wBAAwB,IAAI,CAAC,UAAU,CAAC,KAAK,GAAG,CAChF,CAAA;IACH,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,IAAI,CAAC,CAAA;QACjD,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,QAAQ,CAAC,GAAG,QAAQ,CAAA;QACrE,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,sBAAsB,SAAS,EAAE,CAAC,CAAA;QACrF,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAqC;QAChD,SAAS,EAAE,OAAO,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAC1C,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,eAAe,EAAE,IAAI,CAAC,eAAe;KACtC,CAAA;IAED,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAA;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;IAClD,OAAO,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAA;AAClC,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,OAAsB,EACtB,cAAsB;IAEtB,MAAM,MAAM,GAAa,EAAE,CAAA;IAE3B,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAA;IAC1C,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;IACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,cAAc,CAAC,CAAA;IAC7D,IAAI,CAAC,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;IAEvD,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAA;IAEzE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;AAC/C,CAAC;AAED,0CAA0C;AAC1C,4CAA4C;AAC5C,0CAA0C;AAC1C,6DAA6D;AAC7D,kEAAkE;AAClE,EAAE;AACF,SAAS;AACT,sCAAsC;AACtC,oEAAoE;AACpE,8CAA8C;AAC9C,4EAA4E;AAC5E,oFAAoF;AACpF,EAAE;AACF,qFAAqF;AACrF,gFAAgF;AAChF,gFAAgF;AAChF,sFAAsF;AACtF,sFAAsF;AACtF,mEAAmE;AACnE,EAAE;AACF,oFAAoF;AACpF,sFAAsF;AACtF,sFAAsF;AACtF,oFAAoF;AAEpF,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,QAAgB;IAC3D,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IACrC,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IAChC,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,GAAG,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IACnD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QACnC,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC;YAAE,OAAO,IAAI,CAAA;IAC3E,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,eAAyB,EAAE,QAAgB;IACzE,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAA;AAC5D,CAAC;AAED,yEAAyE;AACzE,iEAAiE;AACjE,yEAAyE;AACzE,0EAA0E;AAC1E,mEAAmE;AAEnE,MAAM,UAAU,gBAAgB,CAC9B,aAAqB,EAAE,UAAkB,EAAE,OAAe,EAAE,WAAmB,IAC3D,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;AAE9C,MAAM,UAAU,aAAa,CAC3B,aAAqB,EAAE,UAAkB,EAAE,OAAe,EAAE,WAAmB,IACpD,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;AAErD,MAAM,UAAU,aAAa,CAC3B,eAAuB,EAAE,UAAkB,EAAE,OAAe,EAAE,WAAmB,IAC3D,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;AAEhD,MAAM,UAAU,aAAa,CAAC,cAAwB;IACpD,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA;AACxB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,aAAqB,IAAc,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;AAE1F,MAAM,UAAU,aAAa,CAAC,aAAqB;IACjD,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA;AACxB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,SAA2C;IACtE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA;AACxB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,QAAiB,IAAqB,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;AAE1F,MAAM,UAAU,aAAa,CAAC,aAAqB;IACjD,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA;AACxB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,WAAuB,IAAY,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;AAEpF;;;;GAIG;AACH,MAAM,UAAU,WAAW;IACzB,6DAA6D;AAC/D,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"external-action-ref.d.ts","sourceRoot":"","sources":["../../../src/core/external-action-ref.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"external-action-ref.d.ts","sourceRoot":"","sources":["../../../src/core/external-action-ref.ts"],"names":[],"mappings":"AAyCA,2CAA2C;AAC3C,MAAM,WAAW,wBAAwB;IACvC,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAA;IAClB,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAA;IACf;sDACkD;IAClD,KAAK,EAAE,MAAM,CAAA;IACb;;;sDAGkD;IAClD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AA6DD;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,wBAAwB,GAAG,MAAM,CAgBlF"}
|
|
@@ -16,24 +16,73 @@
|
|
|
16
16
|
// Differences from the APS-native §4.1 form:
|
|
17
17
|
// - snake_case preimage keys {action_type, agent_id, scope, timestamp}
|
|
18
18
|
// - scope is a single string, not the APS multi-scope array
|
|
19
|
-
// - timestamp is
|
|
20
|
-
// a Z
|
|
19
|
+
// - timestamp is an RFC 3339 date-time in UTC at exactly millisecond
|
|
20
|
+
// precision (three fractional-second digits and a literal Z), hashed as
|
|
21
|
+
// the byte sequence supplied and never normalized. Second 60 is valid
|
|
22
|
+
// only at 23:59 on the last day of its month in the proleptic Gregorian
|
|
23
|
+
// calendar (RFC 3339 section 5.7; Appendix D writes the leap second as
|
|
24
|
+
// "YYYY-MM-DDT23:59:60Z"); every other second-60 value is invalid, and
|
|
25
|
+
// the year-month-day must otherwise name a day that exists under that
|
|
26
|
+
// calendar. A non-conforming value (wrong shape, non-string, a
|
|
27
|
+
// calendar-invalid date, or an out-of-place second-60 value) is
|
|
28
|
+
// rejected, never coerced, truncated, extended or renormalized.
|
|
21
29
|
// ══════════════════════════════════════════════════════════════════
|
|
22
30
|
import { canonicalHashJCS } from './canonical-jcs.js';
|
|
23
31
|
// Canonical external timestamp shape: RFC 3339 UTC, exactly three
|
|
24
|
-
// fractional-second digits, mandatory Z.
|
|
25
|
-
|
|
32
|
+
// fractional-second digits, mandatory Z, second 00-60 in the grammar.
|
|
33
|
+
// Calendar validity (day-in-month) and the second-60 rule (valid only at
|
|
34
|
+
// 23:59 on a month's last day, RFC 3339 section 5.7 and Appendix D) are
|
|
35
|
+
// checked separately below, since a regex cannot encode "30 is invalid in
|
|
36
|
+
// February" or "this 23:59:60 is not on the last day".
|
|
37
|
+
const EXTERNAL_TS = /^([0-9]{4})-(0[1-9]|1[0-2])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):([0-5][0-9]):([0-5][0-9]|60)\.[0-9]{3}Z$/;
|
|
38
|
+
/** True if `year` is a leap year under the proleptic Gregorian calendar
|
|
39
|
+
* (divisible by 4 and not by 100, or divisible by 400; year 0000 is a
|
|
40
|
+
* leap year). */
|
|
41
|
+
function isLeapYear(year) {
|
|
42
|
+
return (year % 4 === 0 && year % 100 !== 0) || year % 400 === 0;
|
|
43
|
+
}
|
|
44
|
+
/** Days in `month` (1-12) of `year` under the proleptic Gregorian calendar. */
|
|
45
|
+
function daysInMonth(year, month) {
|
|
46
|
+
const lengths = [31, isLeapYear(year) ? 29 : 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31];
|
|
47
|
+
return lengths[month - 1];
|
|
48
|
+
}
|
|
49
|
+
// Never validate a timestamp string with Date: Date cannot represent a
|
|
50
|
+
// leap-second (:60) value, so it would wrongly reject what RFC 3339 section
|
|
51
|
+
// 5.7 and Appendix D admit at 23:59 on a month's last day.
|
|
52
|
+
function validateTimestampString(ts) {
|
|
53
|
+
const match = EXTERNAL_TS.exec(ts);
|
|
54
|
+
if (!match) {
|
|
55
|
+
throw new Error(`computeExternalActionRefV1: timestamp must be RFC 3339 UTC with three fractional digits and a Z suffix (YYYY-MM-DDTHH:MM:SS.mmmZ), got ${JSON.stringify(ts)}`);
|
|
56
|
+
}
|
|
57
|
+
const year = Number(match[1]);
|
|
58
|
+
const month = Number(match[2]);
|
|
59
|
+
const day = Number(match[3]);
|
|
60
|
+
const hour = Number(match[4]);
|
|
61
|
+
const minute = Number(match[5]);
|
|
62
|
+
const second = Number(match[6]);
|
|
63
|
+
const maxDay = daysInMonth(year, month);
|
|
64
|
+
if (day > maxDay) {
|
|
65
|
+
throw new Error(`computeExternalActionRefV1: timestamp names a day that does not exist in that month, got ${JSON.stringify(ts)}`);
|
|
66
|
+
}
|
|
67
|
+
if (second === 60 && !(hour === 23 && minute === 59 && day === maxDay)) {
|
|
68
|
+
throw new Error(`computeExternalActionRefV1: timestamp has second 60 outside 23:59 on the last day of its month, got ${JSON.stringify(ts)}`);
|
|
69
|
+
}
|
|
70
|
+
return ts;
|
|
71
|
+
}
|
|
26
72
|
function externalTimestamp(ts) {
|
|
27
73
|
if (ts instanceof Date) {
|
|
28
74
|
if (Number.isNaN(ts.getTime())) {
|
|
29
75
|
throw new Error('computeExternalActionRefV1: invalid Date timestamp');
|
|
30
76
|
}
|
|
31
|
-
|
|
77
|
+
// A Date outside years 0000-9999 renders via toISOString with an
|
|
78
|
+
// expanded year (e.g. "+010000-01-01T00:00:00.000Z"), which the string
|
|
79
|
+
// check below rejects rather than hashes.
|
|
80
|
+
return validateTimestampString(ts.toISOString());
|
|
32
81
|
}
|
|
33
|
-
if (
|
|
34
|
-
throw new Error(
|
|
82
|
+
if (typeof ts !== 'string') {
|
|
83
|
+
throw new Error('computeExternalActionRefV1: timestamp must be a string or a Date');
|
|
35
84
|
}
|
|
36
|
-
return ts;
|
|
85
|
+
return validateTimestampString(ts);
|
|
37
86
|
}
|
|
38
87
|
/**
|
|
39
88
|
* Compute the external cross-ecosystem correlation key
|
|
@@ -46,6 +95,15 @@ function externalTimestamp(ts) {
|
|
|
46
95
|
* Returns: lowercase hex SHA-256 digest.
|
|
47
96
|
*/
|
|
48
97
|
export function computeExternalActionRefV1(input) {
|
|
98
|
+
if (typeof input.actionType !== 'string') {
|
|
99
|
+
throw new Error('computeExternalActionRefV1: actionType must be a string');
|
|
100
|
+
}
|
|
101
|
+
if (typeof input.agentId !== 'string') {
|
|
102
|
+
throw new Error('computeExternalActionRefV1: agentId must be a string');
|
|
103
|
+
}
|
|
104
|
+
if (typeof input.scope !== 'string') {
|
|
105
|
+
throw new Error('computeExternalActionRefV1: scope must be a string');
|
|
106
|
+
}
|
|
49
107
|
return canonicalHashJCS({
|
|
50
108
|
action_type: input.actionType,
|
|
51
109
|
agent_id: input.agentId,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"external-action-ref.js","sourceRoot":"","sources":["../../../src/core/external-action-ref.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,kFAAkF;AAClF,qEAAqE;AACrE,wEAAwE;AACxE,cAAc;AACd,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,4EAA4E;AAC5E,oEAAoE;AACpE,uEAAuE;AACvE,oEAAoE;AACpE,EAAE;AACF,6CAA6C;AAC7C,yEAAyE;AACzE,8DAA8D;AAC9D,
|
|
1
|
+
{"version":3,"file":"external-action-ref.js","sourceRoot":"","sources":["../../../src/core/external-action-ref.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,kFAAkF;AAClF,qEAAqE;AACrE,wEAAwE;AACxE,cAAc;AACd,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,4EAA4E;AAC5E,oEAAoE;AACpE,uEAAuE;AACvE,oEAAoE;AACpE,EAAE;AACF,6CAA6C;AAC7C,yEAAyE;AACzE,8DAA8D;AAC9D,uEAAuE;AACvE,4EAA4E;AAC5E,0EAA0E;AAC1E,4EAA4E;AAC5E,2EAA2E;AAC3E,2EAA2E;AAC3E,0EAA0E;AAC1E,mEAAmE;AACnE,oEAAoE;AACpE,oEAAoE;AACpE,qEAAqE;AAErE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAErD,kEAAkE;AAClE,sEAAsE;AACtE,yEAAyE;AACzE,wEAAwE;AACxE,0EAA0E;AAC1E,uDAAuD;AACvD,MAAM,WAAW,GACf,kHAAkH,CAAA;AAkBpH;;kBAEkB;AAClB,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,IAAI,IAAI,GAAG,GAAG,KAAK,CAAC,CAAA;AACjE,CAAC;AAED,+EAA+E;AAC/E,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa;IAC9C,MAAM,OAAO,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;IACxF,OAAO,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;AAC3B,CAAC;AAED,uEAAuE;AACvE,4EAA4E;AAC5E,2DAA2D;AAC3D,SAAS,uBAAuB,CAAC,EAAU;IACzC,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,0IAA0I,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAC/J,CAAA;IACH,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/B,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACvC,IAAI,GAAG,GAAG,MAAM,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,4FAA4F,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CACjH,CAAA;IACH,CAAC;IACD,IAAI,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,EAAE,IAAI,MAAM,KAAK,EAAE,IAAI,GAAG,KAAK,MAAM,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CACb,uGAAuG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAC5H,CAAA;IACH,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED,SAAS,iBAAiB,CAAC,EAAiB;IAC1C,IAAI,EAAE,YAAY,IAAI,EAAE,CAAC;QACvB,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;QACvE,CAAC;QACD,iEAAiE;QACjE,uEAAuE;QACvE,0CAA0C;QAC1C,OAAO,uBAAuB,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA;IAClD,CAAC;IACD,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAA;IACrF,CAAC;IACD,OAAO,uBAAuB,CAAC,EAAE,CAAC,CAAA;AACpC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAA+B;IACxE,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;IAC5E,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;IACzE,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;IACvE,CAAC;IACD,OAAO,gBAAgB,CAAC;QACtB,WAAW,EAAE,KAAK,CAAC,UAAU;QAC7B,QAAQ,EAAE,KAAK,CAAC,OAAO;QACvB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,iBAAiB,CAAC,KAAK,CAAC,SAAS,CAAC;KAC9C,CAAC,CAAA;AACJ,CAAC"}
|
package/dist/src/index.d.ts
CHANGED
|
@@ -10,6 +10,8 @@ export { computeScopeVersionHash, verifyScopeVersionMatch } from './core/scope-v
|
|
|
10
10
|
export { computeActionRef, actionRefsMatch } from './core/action-ref.js';
|
|
11
11
|
export { computeExternalActionRefV1 } from './core/external-action-ref.js';
|
|
12
12
|
export type { ExternalActionRefV1Input } from './core/external-action-ref.js';
|
|
13
|
+
export { createActionReferenceInputV2, computeActionRefV2, computePayloadRefV1, validateActionReferenceInputV2, parseActionReferenceInputV2, computeActionRefV2FromJson, } from './v2/action-reference/v2.js';
|
|
14
|
+
export type { ActionReferenceInputV2, ActionReferenceProfileContextV2, } from './v2/action-reference/v2.js';
|
|
13
15
|
export { computeIdempotencyKey } from './core/idempotency.js';
|
|
14
16
|
export { computeEvidenceAge, isEvidenceFresh, createSnapshotFreshness, createRotatingFreshness } from './core/freshness.js';
|
|
15
17
|
export type { AttestationFreshness } from './types/passport.js';
|
|
@@ -283,7 +285,11 @@ export * from './profiles/a2a/index.js';
|
|
|
283
285
|
export type { HistoricalKeyResolver, HistoricalKeyResolutionRequest, HistoricalKeyResolutionResult, } from './v2/identity-binding/types.js';
|
|
284
286
|
export { RECEIPT_ID_TAG, RECEIPT_SIG_TAG, isExactUtcMilliseconds, receiptIdPayloadV1, computeReceiptIdV1, receiptSignaturePayloadV1, validateReceiptV1, createReceiptV1, verifyReceiptV1, verifyReceiptV1Serialized, } from './v2/receipt-core/receipt.js';
|
|
285
287
|
export type { ReceiptV1, ReceiptSignatureV1, ReceiptSignerV1, } from './v2/receipt-core/types.js';
|
|
286
|
-
export type { ReceiptVerificationV1 } from './v2/receipt-core/receipt.js';
|
|
288
|
+
export type { ReceiptVerificationV1, ReceiptVerificationStatusV1, ReceiptSignatureRequirementsV1, KeyResolutionFailure, } from './v2/receipt-core/receipt.js';
|
|
289
|
+
export { validateReceiptStageV1, RECEIPT_STAGE_TYPES_V1 } from './v2/receipt-core/stage.js';
|
|
290
|
+
export type { ReceiptStageV1, ReceiptStageStatusV1, ReceiptStageResultV1, ReceiptStageFailureV1, ReceiptStageOptionsV1, BoundaryIdentityResultV1, } from './v2/receipt-core/stage.js';
|
|
291
|
+
export { DECISION_REF_TAG, DECISION_COMPONENT_TAGS, computeDecisionComponentRefV1, validateDecisionRefInputV1, computeDecisionRefV1, validateCoreDecisionOutputV1, normalizeCoreDecisionOutputV1, buildDecisionRefV1, } from './v2/receipt-core/decision-ref.js';
|
|
292
|
+
export type { DecisionRefInputV1, CoreDecisionOutputV1, EvidenceRefV1 } from './v2/receipt-core/types.js';
|
|
287
293
|
export { verifyReceiptWithDecisionV1 } from './v2/receipt-core/composite.js';
|
|
288
294
|
export type { DecisionEvidenceV1, ReceiptWithDecisionVerificationV1, } from './v2/receipt-core/composite.js';
|
|
289
295
|
export { AUTHORITY_DELEGATION_ID_DOMAIN, AUTHORITY_DELEGATION_SIGNATURE_DOMAIN, authorityDelegationIdInput, computeAuthorityDelegationId, authorityDelegationSignatureInput, signAuthorityDelegation, verifyAuthorityDelegationSignature, } from './v2/authority-delegation/canonical.js';
|