agentic-payments 0.1.0

package/dist/active-mandate/index.js

@@ -0,0 +1,51 @@
+/**
+ * Active Mandate - Autonomous agent payment authorization
+ * Main entry point for Active Mandate functionality
+ */
+import { signedMandateSchema } from "./schema.js";
+import { verifyEd25519Signature } from "./signing.js";
+import { isRevoked, revokeMandate } from "./revocation.js";
+export * from "./types.js";
+export { signedMandateSchema, mandateSchema, spendCapSchema } from "./schema.js";
+export { verifyEd25519Signature, canonicalizeJSON, signWithTweetnacl, getPublicKeyBase64 } from "./signing.js";
+export { isRevoked, revokeMandate, getRevocation, clearRevocations, getAllRevocations } from "./revocation.js";
+export { copy, formatAmount, formatPeriod } from "./i18n.js";
+/**
+ * Validate schema and verify Ed25519 signature
+ */
+export function validateAndVerify(m) {
+    const parsed = signedMandateSchema.safeParse(m);
+    if (!parsed.success) {
+        return { valid: false, reason: parsed.error.message };
+    }
+    const sm = parsed.data;
+    if (isRevoked(sm.payload.mandate_id)) {
+        return { valid: false, reason: "mandate revoked" };
+    }
+    const ok = verifyEd25519Signature(sm.pubkey, sm.signature, sm.payload);
+    return ok ? { valid: true, parsed: sm } : { valid: false, reason: "signature invalid" };
+}
+/**
+ * Guard mandate execution with time window and revocation checks
+ */
+export function guardExecution(m) {
+    // time window checks
+    const now = Date.now();
+    if (m.payload.not_before && Date.parse(m.payload.not_before) > now) {
+        return { allowed: false, reason: "before not_before" };
+    }
+    if (Date.parse(m.payload.expires_at) <= now) {
+        return { allowed: false, reason: "expired" };
+    }
+    if (isRevoked(m.payload.mandate_id)) {
+        return { allowed: false, reason: "revoked" };
+    }
+    return { allowed: true };
+}
+/**
+ * Revoke a mandate by ID
+ */
+export function revoke(mandate_id, reason) {
+    return revokeMandate(mandate_id, reason);
+}
+//# sourceMappingURL=index.js.map

package/dist/active-mandate/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/active-mandate/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAG3D,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EACnB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,SAAS,EACT,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAG7D;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,CAAU;IAC1C,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IACxD,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAqB,CAAC;IACxC,IAAI,SAAS,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACrD,CAAC;IACD,MAAM,EAAE,GAAG,sBAAsB,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;IACvE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;AAC1F,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,CAAgB;IAC7C,qBAAqB;IACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,GAAG,EAAE,CAAC;QACnE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,GAAG,EAAE,CAAC;QAC5C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/C,CAAC;IACD,IAAI,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/C,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,MAAM,CAAC,UAAkB,EAAE,MAAe;IACxD,OAAO,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;AAC3C,CAAC"}

package/dist/active-mandate/revocation.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Mandate revocation system
+ * In-memory store (swap with database for production)
+ */
+import { RevocationRecord } from "./types.js";
+export declare function revokeMandate(mandate_id: string, reason?: string): RevocationRecord;
+export declare function isRevoked(mandate_id: string): boolean;
+export declare function getRevocation(mandate_id: string): RevocationRecord | undefined;
+export declare function clearRevocations(): void;
+export declare function getAllRevocations(): RevocationRecord[];
+//# sourceMappingURL=revocation.d.ts.map

package/dist/active-mandate/revocation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"revocation.d.ts","sourceRoot":"","sources":["../../src/active-mandate/revocation.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAI9C,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAQnF;AAED,wBAAgB,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAErD;AAED,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAE9E;AAED,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC;AAED,wBAAgB,iBAAiB,IAAI,gBAAgB,EAAE,CAEtD"}

package/dist/active-mandate/revocation.js

@@ -0,0 +1,27 @@
+/**
+ * Mandate revocation system
+ * In-memory store (swap with database for production)
+ */
+const revoked = new Map();
+export function revokeMandate(mandate_id, reason) {
+    const rec = {
+        mandate_id,
+        revoked_at: new Date().toISOString(),
+        reason
+    };
+    revoked.set(mandate_id, rec);
+    return rec;
+}
+export function isRevoked(mandate_id) {
+    return revoked.has(mandate_id);
+}
+export function getRevocation(mandate_id) {
+    return revoked.get(mandate_id);
+}
+export function clearRevocations() {
+    revoked.clear();
+}
+export function getAllRevocations() {
+    return Array.from(revoked.values());
+}
+//# sourceMappingURL=revocation.js.map

package/dist/active-mandate/revocation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revocation.js","sourceRoot":"","sources":["../../src/active-mandate/revocation.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;AAEpD,MAAM,UAAU,aAAa,CAAC,UAAkB,EAAE,MAAe;IAC/D,MAAM,GAAG,GAAG;QACV,UAAU;QACV,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,MAAM;KACP,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAC7B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,UAAkB;IAC1C,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,UAAkB;IAC9C,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,CAAC,KAAK,EAAE,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AACtC,CAAC"}

package/dist/active-mandate/schema.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Zod schemas for Active Mandate validation
+ */
+import { z } from "zod";
+export declare const spendCapSchema: z.ZodObject<{
+    amount: z.ZodNumber;
+    currency: z.ZodString;
+    period: z.ZodEnum<{
+        single: "single";
+        daily: "daily";
+        weekly: "weekly";
+        monthly: "monthly";
+    }>;
+}, z.core.$strip>;
+export declare const mandateSchema: z.ZodObject<{
+    mandate_id: z.ZodString;
+    kind: z.ZodEnum<{
+        intent: "intent";
+        cart: "cart";
+    }>;
+    agent: z.ZodString;
+    holder: z.ZodString;
+    cap: z.ZodObject<{
+        amount: z.ZodNumber;
+        currency: z.ZodString;
+        period: z.ZodEnum<{
+            single: "single";
+            daily: "daily";
+            weekly: "weekly";
+            monthly: "monthly";
+        }>;
+    }, z.core.$strip>;
+    merchant_allow: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    merchant_block: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    not_before: z.ZodOptional<z.ZodString>;
+    expires_at: z.ZodString;
+    line_items: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        sku: z.ZodString;
+        qty: z.ZodNumber;
+        unit_amount: z.ZodNumber;
+        currency: z.ZodString;
+    }, z.core.$strip>>>;
+    total_amount: z.ZodOptional<z.ZodNumber>;
+    meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    revocation_url: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const signedMandateSchema: z.ZodObject<{
+    alg: z.ZodLiteral<"ed25519">;
+    pubkey: z.ZodString;
+    signature: z.ZodString;
+    payload: z.ZodObject<{
+        mandate_id: z.ZodString;
+        kind: z.ZodEnum<{
+            intent: "intent";
+            cart: "cart";
+        }>;
+        agent: z.ZodString;
+        holder: z.ZodString;
+        cap: z.ZodObject<{
+            amount: z.ZodNumber;
+            currency: z.ZodString;
+            period: z.ZodEnum<{
+                single: "single";
+                daily: "daily";
+                weekly: "weekly";
+                monthly: "monthly";
+            }>;
+        }, z.core.$strip>;
+        merchant_allow: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        merchant_block: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        not_before: z.ZodOptional<z.ZodString>;
+        expires_at: z.ZodString;
+        line_items: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            sku: z.ZodString;
+            qty: z.ZodNumber;
+            unit_amount: z.ZodNumber;
+            currency: z.ZodString;
+        }, z.core.$strip>>>;
+        total_amount: z.ZodOptional<z.ZodNumber>;
+        meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+        revocation_url: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type SignedMandateSchema = z.infer<typeof signedMandateSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/active-mandate/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/active-mandate/schema.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,cAAc;;;;;;;;;iBAIzB,CAAC;AAEH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmBxB,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAK9B,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/active-mandate/schema.js

@@ -0,0 +1,36 @@
+/**
+ * Zod schemas for Active Mandate validation
+ */
+import { z } from "zod";
+export const spendCapSchema = z.object({
+    amount: z.number().int().nonnegative(),
+    currency: z.string(),
+    period: z.enum(["single", "daily", "weekly", "monthly"])
+});
+export const mandateSchema = z.object({
+    mandate_id: z.string().min(4),
+    kind: z.enum(["intent", "cart"]),
+    agent: z.string().min(1),
+    holder: z.string().min(1),
+    cap: spendCapSchema,
+    merchant_allow: z.array(z.string()).optional(),
+    merchant_block: z.array(z.string()).optional(),
+    not_before: z.string().datetime().optional(),
+    expires_at: z.string().datetime(),
+    line_items: z.array(z.object({
+        sku: z.string(),
+        qty: z.number().int().positive(),
+        unit_amount: z.number().int().nonnegative(),
+        currency: z.string()
+    })).optional(),
+    total_amount: z.number().int().nonnegative().optional(),
+    meta: z.record(z.string(), z.any()).optional(),
+    revocation_url: z.string().url().optional()
+});
+export const signedMandateSchema = z.object({
+    alg: z.literal("ed25519"),
+    pubkey: z.string().min(8),
+    signature: z.string().min(8),
+    payload: mandateSchema
+});
+//# sourceMappingURL=schema.js.map

package/dist/active-mandate/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/active-mandate/schema.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACtC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;CACzD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,GAAG,EAAE,cAAc;IACnB,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;QACf,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QAC3C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;KACrB,CAAC,CAAC,CAAC,QAAQ,EAAE;IACd,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACvD,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IACzB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,OAAO,EAAE,aAAa;CACvB,CAAC,CAAC"}

package/dist/active-mandate/signing.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Canonical JSON signing and Ed25519 verification for Active Mandates
+ */
+export declare function canonicalizeJSON(obj: unknown): Uint8Array;
+export declare function verifyEd25519Signature(pubkeyBase64: string, signatureBase64: string, payload: unknown): boolean;
+export declare function signWithTweetnacl(payload: unknown, secretKey: Uint8Array): string;
+export declare function getPublicKeyBase64(secretKey: Uint8Array): string;
+//# sourceMappingURL=signing.d.ts.map

package/dist/active-mandate/signing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.d.ts","sourceRoot":"","sources":["../../src/active-mandate/signing.ts"],"names":[],"mappings":"AAAA;;GAEG;AAuBH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,UAAU,CAgBzD;AAED,wBAAgB,sBAAsB,CAAC,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAS/G;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,GAAG,MAAM,CAIjF;AAED,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,UAAU,GAAG,MAAM,CAGhE"}

package/dist/active-mandate/signing.js

@@ -0,0 +1,64 @@
+/**
+ * Canonical JSON signing and Ed25519 verification for Active Mandates
+ */
+import nacl from "tweetnacl";
+function decodeBase64(s) {
+    if (typeof Buffer !== "undefined")
+        return new Uint8Array(Buffer.from(s, "base64"));
+    // for environments without Buffer
+    const bin = atob(s);
+    const bytes = new Uint8Array(bin.length);
+    for (let i = 0; i < bin.length; i++)
+        bytes[i] = bin.charCodeAt(i);
+    return bytes;
+}
+function encodeBase64(bytes) {
+    if (typeof Buffer !== "undefined")
+        return Buffer.from(bytes).toString("base64");
+    // for environments without Buffer
+    let binary = "";
+    for (let i = 0; i < bytes.length; i++) {
+        binary += String.fromCharCode(bytes[i] ?? 0);
+    }
+    return btoa(binary);
+}
+export function canonicalizeJSON(obj) {
+    // deterministic JSON stringify by sorting keys recursively
+    const stable = (v) => {
+        if (Array.isArray(v))
+            return v.map(stable);
+        if (v && typeof v === "object") {
+            return Object.keys(v).sort().reduce((acc, k) => {
+                acc[k] = stable(v[k]);
+                return acc;
+            }, {});
+        }
+        return v;
+    };
+    const text = JSON.stringify(stable(obj));
+    if (typeof Buffer !== "undefined")
+        return new Uint8Array(Buffer.from(text, "utf8"));
+    const encoder = new TextEncoder();
+    return encoder.encode(text);
+}
+export function verifyEd25519Signature(pubkeyBase64, signatureBase64, payload) {
+    try {
+        const pub = decodeBase64(pubkeyBase64);
+        const sig = decodeBase64(signatureBase64);
+        const msg = canonicalizeJSON(payload);
+        return nacl.sign.detached.verify(msg, sig, pub);
+    }
+    catch (error) {
+        return false;
+    }
+}
+export function signWithTweetnacl(payload, secretKey) {
+    const msg = canonicalizeJSON(payload);
+    const signature = nacl.sign.detached(msg, secretKey);
+    return encodeBase64(signature);
+}
+export function getPublicKeyBase64(secretKey) {
+    const keyPair = nacl.sign.keyPair.fromSecretKey(secretKey);
+    return encodeBase64(keyPair.publicKey);
+}
+//# sourceMappingURL=signing.js.map

package/dist/active-mandate/signing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.js","sourceRoot":"","sources":["../../src/active-mandate/signing.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,SAAS,YAAY,CAAC,CAAS;IAC7B,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IACnF,kCAAkC;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,KAAiB;IACrC,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChF,kCAAkC;IAClC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,2DAA2D;IAC3D,MAAM,MAAM,GAAG,CAAC,CAAM,EAAO,EAAE;QAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;gBAC7C,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtB,OAAO,GAAG,CAAC;YACb,CAAC,EAAE,EAA6B,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,YAAoB,EAAE,eAAuB,EAAE,OAAgB;IACpG,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAgB,EAAE,SAAqB;IACvE,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACrD,OAAO,YAAY,CAAC,SAAS,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,SAAqB;IACtD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAC3D,OAAO,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AACzC,CAAC"}

package/dist/active-mandate/types.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Active Mandate types for autonomous agent payment authorization
+ * Based on ACP (Agent Commerce Protocol) specification
+ */
+export type Currency = "USD" | "CAD" | "EUR" | string;
+export interface SpendCap {
+    amount: number;
+    currency: Currency;
+    period: "single" | "daily" | "weekly" | "monthly";
+}
+export interface MandateCap {
+    cap: SpendCap;
+}
+export interface MandateParty {
+    agent: string;
+    holder: string;
+}
+export interface MerchantRules {
+    merchant_allow?: string[];
+    merchant_block?: string[];
+}
+export interface TimeWindow {
+    not_before?: string;
+    expires_at: string;
+}
+export type MandateKind = "intent" | "cart";
+export interface MandateBody extends MandateParty, MandateCap, MerchantRules, TimeWindow {
+    mandate_id: string;
+    kind: MandateKind;
+    line_items?: Array<{
+        sku: string;
+        qty: number;
+        unit_amount: number;
+        currency: Currency;
+    }>;
+    total_amount?: number;
+    meta?: Record<string, unknown>;
+    revocation_url?: string;
+}
+export interface SignedMandate {
+    alg: "ed25519";
+    pubkey: string;
+    signature: string;
+    payload: MandateBody;
+}
+export interface VerificationResult {
+    valid: boolean;
+    reason?: string;
+}
+export interface RevocationRecord {
+    mandate_id: string;
+    revoked_at: string;
+    reason?: string;
+}
+export interface ExecutionGuard {
+    allowed: boolean;
+    reason?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/active-mandate/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/active-mandate/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;AAEtD,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;CACnD;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,QAAQ,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE5C,MAAM,WAAW,WAAY,SAAQ,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU;IACtF,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,WAAW,CAAC;IAElB,UAAU,CAAC,EAAE,KAAK,CAAC;QACjB,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,QAAQ,CAAC;KACpB,CAAC,CAAC;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,SAAS,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB"}

package/dist/active-mandate/types.js

@@ -0,0 +1,6 @@
+/**
+ * Active Mandate types for autonomous agent payment authorization
+ * Based on ACP (Agent Commerce Protocol) specification
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/active-mandate/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/active-mandate/types.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/cli/commands/active-mandate.d.ts

@@ -0,0 +1,4 @@
+import { Command } from 'commander';
+declare const activeMandateCommand: Command;
+export { activeMandateCommand };
+//# sourceMappingURL=active-mandate.d.ts.map

package/dist/cli/commands/active-mandate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"active-mandate.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/active-mandate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiBpC,QAAA,MAAM,oBAAoB,SAE4C,CAAC;AAyOvE,OAAO,EAAE,oBAAoB,EAAE,CAAC"}

package/dist/cli/commands/active-mandate.js

@@ -0,0 +1,218 @@
+import { Command } from 'commander';
+import chalk from 'chalk';
+import ora from 'ora';
+import { readFile, writeFile } from 'fs/promises';
+import { v4 as uuidv4 } from 'uuid';
+import { validateAndVerify, guardExecution, revoke, getAllRevocations, formatAmount, formatPeriod, copy } from '../../active-mandate/index.js';
+import nacl from 'tweetnacl';
+const activeMandateCommand = new Command('active-mandate')
+    .alias('am')
+    .description('Manage Active Mandates for autonomous agent payments');
+// Create subcommand
+activeMandateCommand
+    .command('create')
+    .description('Create a new Active Mandate')
+    .requiredOption('-a, --agent <name>', 'Agent identifier (e.g., claude-shopbot@agentics)')
+    .requiredOption('-h, --holder <name>', 'Holder/user identifier')
+    .requiredOption('--amount <number>', 'Spend cap amount in minor units (e.g., 12000 = $120.00)', parseInt)
+    .option('--currency <code>', 'Currency code', 'USD')
+    .option('--period <type>', 'Spend period: single, daily, weekly, monthly', 'single')
+    .option('-k, --kind <type>', 'Mandate kind: intent or cart', 'intent')
+    .option('--merchant-allow <hosts>', 'Comma-separated list of allowed merchant hostnames')
+    .option('--merchant-block <hosts>', 'Comma-separated list of blocked merchant hostnames')
+    .option('--expires <iso>', 'Expiration date (ISO8601)', new Date(Date.now() + 86400000).toISOString())
+    .option('--not-before <iso>', 'Not valid before date (ISO8601)')
+    .option('-o, --output <file>', 'Save mandate to file')
+    .action(async (options) => {
+    const spinner = ora('Creating Active Mandate...').start();
+    try {
+        const mandateBody = {
+            mandate_id: `mandate_${uuidv4()}`,
+            kind: options.kind,
+            agent: options.agent,
+            holder: options.holder,
+            cap: {
+                amount: options.amount,
+                currency: options.currency,
+                period: options.period
+            },
+            expires_at: options.expires,
+            ...(options.notBefore && { not_before: options.notBefore }),
+            ...(options.merchantAllow && { merchant_allow: options.merchantAllow.split(',') }),
+            ...(options.merchantBlock && { merchant_block: options.merchantBlock.split(',') })
+        };
+        spinner.succeed(chalk.green('Active Mandate created'));
+        const output = JSON.stringify(mandateBody, null, 2);
+        if (options.output) {
+            await writeFile(options.output, output, 'utf-8');
+            console.log(chalk.blue(`\n✓ Mandate saved to: ${options.output}`));
+        }
+        else {
+            console.log('\n' + chalk.cyan.bold('Active Mandate:'));
+            console.log(chalk.white(output));
+        }
+        // Display summary
+        console.log('\n' + chalk.yellow.bold('Summary:'));
+        console.log(chalk.gray(`  ${copy.en.mandateId}: ${mandateBody.mandate_id}`));
+        console.log(chalk.gray(`  ${copy.en.agent}: ${mandateBody.agent}`));
+        console.log(chalk.gray(`  ${copy.en.holder}: ${mandateBody.holder}`));
+        console.log(chalk.gray(`  ${copy.en.spendCap}: ${formatAmount(mandateBody.cap.amount, mandateBody.cap.currency)} ${formatPeriod(mandateBody.cap.period)}`));
+        console.log(chalk.gray(`  ${copy.en.expires}: ${new Date(mandateBody.expires_at).toLocaleString()}\n`));
+    }
+    catch (error) {
+        spinner.fail(chalk.red('Failed to create mandate'));
+        console.error(chalk.red('\nError:'), error.message);
+        process.exit(1);
+    }
+});
+// Sign subcommand
+activeMandateCommand
+    .command('sign')
+    .description('Sign an Active Mandate with Ed25519')
+    .requiredOption('-f, --file <path>', 'Mandate file to sign')
+    .requiredOption('-k, --key <hex>', 'Private key (hex format, 64 bytes)')
+    .option('-o, --output <file>', 'Save signed mandate to file')
+    .action(async (options) => {
+    const spinner = ora('Signing mandate...').start();
+    try {
+        // Load mandate
+        const content = await readFile(options.file, 'utf-8');
+        const mandateBody = JSON.parse(content);
+        // Parse private key
+        const keyHex = options.key.replace(/^0x/, '');
+        const privateKeyBytes = new Uint8Array(keyHex.match(/.{1,2}/g).map((byte) => parseInt(byte, 16)));
+        if (privateKeyBytes.length !== 64) {
+            throw new Error('Private key must be 64 bytes (128 hex characters)');
+        }
+        // Generate keypair and sign
+        const keyPair = nacl.sign.keyPair.fromSecretKey(privateKeyBytes);
+        // Import signing functions
+        const { canonicalizeJSON } = await import('../../active-mandate/signing.js');
+        const msg = canonicalizeJSON(mandateBody);
+        const signature = nacl.sign.detached(msg, privateKeyBytes);
+        const signedMandate = {
+            alg: 'ed25519',
+            pubkey: Buffer.from(keyPair.publicKey).toString('base64'),
+            signature: Buffer.from(signature).toString('base64'),
+            payload: mandateBody
+        };
+        spinner.succeed(chalk.green('Mandate signed successfully'));
+        const output = JSON.stringify(signedMandate, null, 2);
+        if (options.output) {
+            await writeFile(options.output, output, 'utf-8');
+            console.log(chalk.blue(`\n✓ Signed mandate saved to: ${options.output}\n`));
+        }
+        else {
+            console.log('\n' + chalk.cyan.bold('Signed Mandate:'));
+            console.log(chalk.white(output) + '\n');
+        }
+    }
+    catch (error) {
+        spinner.fail(chalk.red('Failed to sign mandate'));
+        console.error(chalk.red('\nError:'), error.message);
+        process.exit(1);
+    }
+});
+// Verify subcommand
+activeMandateCommand
+    .command('verify')
+    .description('Verify an Active Mandate signature and validity')
+    .requiredOption('-f, --file <path>', 'Signed mandate file')
+    .option('-v, --verbose', 'Show detailed validation results')
+    .action(async (options) => {
+    const spinner = ora('Verifying mandate...').start();
+    try {
+        const content = await readFile(options.file, 'utf-8');
+        const signedMandate = JSON.parse(content);
+        const result = validateAndVerify(signedMandate);
+        spinner.stop();
+        if (result.valid && result.parsed) {
+            console.log(chalk.green.bold('\n✓ MANDATE VALID\n'));
+            const guard = guardExecution(result.parsed);
+            if (guard.allowed) {
+                console.log(chalk.green('✓ Execution allowed'));
+            }
+            else {
+                console.log(chalk.red(`✗ Execution blocked: ${guard.reason}`));
+            }
+            if (options.verbose) {
+                console.log('\n' + chalk.white.bold('Mandate Details:'));
+                console.log(chalk.gray(`  ${copy.en.mandateId}: ${result.parsed.payload.mandate_id}`));
+                console.log(chalk.gray(`  ${copy.en.agent}: ${result.parsed.payload.agent}`));
+                console.log(chalk.gray(`  ${copy.en.holder}: ${result.parsed.payload.holder}`));
+                console.log(chalk.gray(`  ${copy.en.spendCap}: ${formatAmount(result.parsed.payload.cap.amount, result.parsed.payload.cap.currency)} ${formatPeriod(result.parsed.payload.cap.period)}`));
+                console.log(chalk.gray(`  ${copy.en.expires}: ${new Date(result.parsed.payload.expires_at).toLocaleString()}`));
+                if (result.parsed.payload.merchant_allow) {
+                    console.log(chalk.gray(`  ${copy.en.allowed}: ${result.parsed.payload.merchant_allow.join(', ')}`));
+                }
+            }
+            console.log();
+            process.exit(0);
+        }
+        else {
+            console.log(chalk.red.bold('\n✗ MANDATE INVALID\n'));
+            console.log(chalk.red(`Reason: ${result.reason}\n`));
+            process.exit(1);
+        }
+    }
+    catch (error) {
+        spinner.fail(chalk.red('Verification failed'));
+        console.error(chalk.red('\nError:'), error.message);
+        process.exit(1);
+    }
+});
+// Revoke subcommand
+activeMandateCommand
+    .command('revoke')
+    .description('Revoke an Active Mandate')
+    .requiredOption('-i, --id <mandate_id>', 'Mandate ID to revoke')
+    .option('-r, --reason <text>', 'Revocation reason')
+    .action(async (options) => {
+    const spinner = ora('Revoking mandate...').start();
+    try {
+        const record = revoke(options.id, options.reason);
+        spinner.succeed(chalk.green('Mandate revoked'));
+        console.log('\n' + chalk.yellow.bold('Revocation Record:'));
+        console.log(chalk.gray(`  Mandate ID: ${record.mandate_id}`));
+        console.log(chalk.gray(`  Revoked at: ${new Date(record.revoked_at).toLocaleString()}`));
+        if (record.reason) {
+            console.log(chalk.gray(`  Reason: ${record.reason}`));
+        }
+        console.log();
+    }
+    catch (error) {
+        spinner.fail(chalk.red('Failed to revoke mandate'));
+        console.error(chalk.red('\nError:'), error.message);
+        process.exit(1);
+    }
+});
+// List revocations subcommand
+activeMandateCommand
+    .command('revocations')
+    .alias('list-revoked')
+    .description('List all revoked mandates')
+    .action(async () => {
+    try {
+        const revocations = getAllRevocations();
+        if (revocations.length === 0) {
+            console.log(chalk.gray('\nNo revoked mandates found.\n'));
+            return;
+        }
+        console.log('\n' + chalk.cyan.bold(`Revoked Mandates (${revocations.length}):`));
+        console.log(chalk.cyan.bold('═'.repeat(60)) + '\n');
+        revocations.forEach((rec, idx) => {
+            console.log(chalk.white(`${idx + 1}. ${rec.mandate_id}`));
+            console.log(chalk.gray(`   Revoked: ${new Date(rec.revoked_at).toLocaleString()}`));
+            if (rec.reason) {
+                console.log(chalk.gray(`   Reason: ${rec.reason}`));
+            }
+            console.log();
+        });
+    }
+    catch (error) {
+        console.error(chalk.red('Error:'), error.message);
+        process.exit(1);
+    }
+});
+export { activeMandateCommand };
+//# sourceMappingURL=active-mandate.js.map

package/dist/cli/commands/active-mandate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"active-mandate.js","sourceRoot":"","sources":["../../../src/cli/commands/active-mandate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,MAAM,EACN,iBAAiB,EACjB,YAAY,EACZ,YAAY,EACZ,IAAI,EACL,MAAM,+BAA+B,CAAC;AAEvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,oBAAoB,GAAG,IAAI,OAAO,CAAC,gBAAgB,CAAC;KACvD,KAAK,CAAC,IAAI,CAAC;KACX,WAAW,CAAC,sDAAsD,CAAC,CAAC;AAEvE,oBAAoB;AACpB,oBAAoB;KACjB,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,6BAA6B,CAAC;KAC1C,cAAc,CAAC,oBAAoB,EAAE,kDAAkD,CAAC;KACxF,cAAc,CAAC,qBAAqB,EAAE,wBAAwB,CAAC;KAC/D,cAAc,CAAC,mBAAmB,EAAE,yDAAyD,EAAE,QAAQ,CAAC;KACxG,MAAM,CAAC,mBAAmB,EAAE,eAAe,EAAE,KAAK,CAAC;KACnD,MAAM,CAAC,iBAAiB,EAAE,8CAA8C,EAAE,QAAQ,CAAC;KACnF,MAAM,CAAC,mBAAmB,EAAE,8BAA8B,EAAE,QAAQ,CAAC;KACrE,MAAM,CAAC,0BAA0B,EAAE,oDAAoD,CAAC;KACxF,MAAM,CAAC,0BAA0B,EAAE,oDAAoD,CAAC;KACxF,MAAM,CAAC,iBAAiB,EAAE,2BAA2B,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;KACrG,MAAM,CAAC,oBAAoB,EAAE,iCAAiC,CAAC;KAC/D,MAAM,CAAC,qBAAqB,EAAE,sBAAsB,CAAC;KACrD,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACxB,MAAM,OAAO,GAAG,GAAG,CAAC,4BAA4B,CAAC,CAAC,KAAK,EAAE,CAAC;IAE1D,IAAI,CAAC;QACH,MAAM,WAAW,GAAgB;YAC/B,UAAU,EAAE,WAAW,MAAM,EAAE,EAAE;YACjC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,EAAE;gBACH,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB;YACD,UAAU,EAAE,OAAO,CAAC,OAAO;YAC3B,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;YAC3D,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAClF,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;SACnF,CAAC;QAEF,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;QAEvD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,yBAAyB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACrE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;YACvD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACnC,CAAC;QAED,kBAAkB;QAClB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,SAAS,KAAK,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QAC7E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,KAAK,KAAK,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,QAAQ,KAAK,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5J,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;IAE1G,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC;QACpD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,kBAAkB;AAClB,oBAAoB;KACjB,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,qCAAqC,CAAC;KAClD,cAAc,CAAC,mBAAmB,EAAE,sBAAsB,CAAC;KAC3D,cAAc,CAAC,iBAAiB,EAAE,oCAAoC,CAAC;KACvE,MAAM,CAAC,qBAAqB,EAAE,6BAA6B,CAAC;KAC5D,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACxB,MAAM,OAAO,GAAG,GAAG,CAAC,oBAAoB,CAAC,CAAC,KAAK,EAAE,CAAC;IAElD,IAAI,CAAC;QACH,eAAe;QACf,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAgB,CAAC;QAEvD,oBAAoB;QACpB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC9C,MAAM,eAAe,GAAG,IAAI,UAAU,CACpC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAE,CAAC,GAAG,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CACnE,CAAC;QAEF,IAAI,eAAe,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QAED,4BAA4B;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;QAEjE,2BAA2B;QAC3B,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAE3D,MAAM,aAAa,GAAkB;YACnC,GAAG,EAAE,SAAS;YACd,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACzD,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACpD,OAAO,EAAE,WAAW;SACrB,CAAC;QAEF,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC;QAE5D,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACtD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gCAAgC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;QAC9E,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;YACvD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QAC1C,CAAC;IAEH,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC;QAClD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,oBAAoB;AACpB,oBAAoB;KACjB,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,iDAAiD,CAAC;KAC9D,cAAc,CAAC,mBAAmB,EAAE,qBAAqB,CAAC;KAC1D,MAAM,CAAC,eAAe,EAAE,kCAAkC,CAAC;KAC3D,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACxB,MAAM,OAAO,GAAG,GAAG,CAAC,sBAAsB,CAAC,CAAC,KAAK,EAAE,CAAC;IAEpD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAE1C,MAAM,MAAM,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;QAChD,OAAO,CAAC,IAAI,EAAE,CAAC;QAEf,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;YAErD,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5C,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;YAClD,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,wBAAwB,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACjE,CAAC;YAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;gBACzD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,SAAS,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;gBACvF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,KAAK,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBAC9E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;gBAChF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,QAAQ,KAAK,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC1L,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;gBAChH,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;oBACzC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,OAAO,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBACtG,CAAC;YACH,CAAC;YACD,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;YACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IAEH,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC/C,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,oBAAoB;AACpB,oBAAoB;KACjB,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,0BAA0B,CAAC;KACvC,cAAc,CAAC,uBAAuB,EAAE,sBAAsB,CAAC;KAC/D,MAAM,CAAC,qBAAqB,EAAE,mBAAmB,CAAC;KAClD,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACxB,MAAM,OAAO,GAAG,GAAG,CAAC,qBAAqB,CAAC,CAAC,KAAK,EAAE,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAClD,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAEhD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;QACzF,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAEhB,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC;QACpD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,8BAA8B;AAC9B,oBAAoB;KACjB,OAAO,CAAC,aAAa,CAAC;KACtB,KAAK,CAAC,cAAc,CAAC;KACrB,WAAW,CAAC,2BAA2B,CAAC;KACxC,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,iBAAiB,EAAE,CAAC;QAExC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC,CAAC;YAC1D,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,WAAW,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;QACjF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAEpD,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;YAC1D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;YACpF,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACtD,CAAC;YACD,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC,CAAC,CAAC;IAEL,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO,EAAE,oBAAoB,EAAE,CAAC"}