chit402-verify 0.3.4 → 0.4.0

package/dist/index.d.ts

@@ -0,0 +1,585 @@
+/**
+ * @xfuel/verify — Offline verification for Chit402 receipts.
+ *
+ * Verify payment binding and output commitment WITHOUT calling the Chit402 API.
+ * Third parties use this to confirm:
+ *   1. The receipt's payment binding matches on-chain settlement
+ *   2. The output hash commitment is correct
+ *   3. The issuer signature is valid (ES256/JWKS)
+ *   4. (Optional) The SP1 nullifier is anchored on-chain
+ *
+ * See docs/specs/RECEIPT_V2_SEMANTICS.md for the verification algorithm.
+ */
+import { type InclusionStep } from './anchor-witness.js';
+import { type CarryForwardView, type CarryHead, type CarryInclusion } from './carry-forward.js';
+import { computePaymentCommitment, computeInferenceBinding, type PaymentCommitmentInput, type InferenceBindingInput } from './binding.js';
+import { verifyBasePayer, parseBasePaymentRef, isEvmAddress, sumUsdcTransfersFromPayer, fetchBaseTransactionReceipt, USDC_ADDRESSES, ERC20_TRANSFER_TOPIC, BASE_RPC_URL, type BasePayerVerification, type BaseReceiptFetcher } from './base-payer.js';
+import { verifySolanaPayer, parseSolanaPaymentRef, isSolanaBase58Pubkey, extractUsdcTransfersFromTx, inferUsdcOutflowFromBalances, fetchSolanaTransaction, SOLANA_RPC_URL, SOLANA_USDC_MINT_MAINNET, SOLANA_USDC_MINT_DEVNET, type SolanaPayerVerification, type SolanaRpcFetcher, type SolanaRpcGetTransactionResult } from './solana-payer.js';
+import { verifyPayerBinding, receiptPayerClaimsFromEnvelope, decodeJwsPayload, type PayerBindingVerification, type ReceiptPayerClaims, type PayerRail } from './payer.js';
+import { resolvePinnedIssuerJwk, verifyIssuerJws } from './jws.js';
+import { type ReceiptLane, type ReceiptTreeHead } from './receipt-lane.js';
+import { type PreimageCheck } from './preimage.js';
+import { type IssuerHistoryCheck, type IssuerHistoryDocument } from './issuer-history.js';
+import { type TreeHeadDocument } from './anchor-trust.js';
+export { computePaymentCommitment, computeInferenceBinding, type PaymentCommitmentInput, type InferenceBindingInput, verifyBasePayer, parseBasePaymentRef, isEvmAddress, sumUsdcTransfersFromPayer, fetchBaseTransactionReceipt, USDC_ADDRESSES, ERC20_TRANSFER_TOPIC, BASE_RPC_URL, type BasePayerVerification, type BaseReceiptFetcher, verifySolanaPayer, parseSolanaPaymentRef, isSolanaBase58Pubkey, extractUsdcTransfersFromTx, inferUsdcOutflowFromBalances, fetchSolanaTransaction, SOLANA_RPC_URL, SOLANA_USDC_MINT_MAINNET, SOLANA_USDC_MINT_DEVNET, type SolanaPayerVerification, type SolanaRpcFetcher, type SolanaRpcGetTransactionResult, verifyPayerBinding, receiptPayerClaimsFromEnvelope, decodeJwsPayload, type PayerBindingVerification, type ReceiptPayerClaims, type PayerRail, };
+/** ZKVerifierSP1 contract on Base mainnet. */
+export declare const ZK_VERIFIER_ADDRESS = "0x9373499645292715a2275A78eD65B14215C41c06";
+/** Base Sepolia testnet RPC. */
+export declare const BASE_SEPOLIA_RPC_URL = "https://sepolia.base.org";
+/** Chit402 receipt (v2/v3 compatible). */
+export interface XFuelReceipt {
+    schema?: string;
+    task_id: string;
+    created_at?: number | string;
+    status: string;
+    proof_outcome?: string;
+    verify_url?: string;
+    route?: {
+        model?: string;
+        provider?: string;
+        model_commitment?: {
+            commitment?: string;
+        } | null;
+    };
+    payment?: {
+        rail?: string;
+        ref?: string | null;
+        gross_amount?: string | null;
+        settled_amount?: string | null;
+        net_amount?: string | null;
+        fee_amount?: string | null;
+        fee_bps?: number | null;
+        protocol_fee_bps?: number | null;
+        platform_fee?: string | null;
+        platform_fee_bps?: number | null;
+        asset?: string | null;
+        payee?: string | null;
+        accounting?: {
+            kind?: string;
+            scope?: string;
+            note?: string;
+            internal_breakdown?: {
+                route_margin_bps?: number | null;
+                route_margin_amount?: string | null;
+                receipt_floor_amount?: string | null;
+                provider_cogs_amount?: string | null;
+                tier2_proof_amount?: string | null;
+            };
+        } | null;
+    };
+    payment_meta?: {
+        network?: string;
+    } | null;
+    provider_cogs?: {
+        actual?: string;
+    };
+    output?: {
+        hash?: string;
+        kind?: string;
+    } | null;
+    proof?: {
+        tier?: string;
+        has_proof?: boolean;
+        nullifier?: string | null;
+    };
+    binding?: {
+        expected_commitment?: string;
+        recomputed_commitment?: string;
+        matches?: boolean;
+        covers?: string[];
+        model_commitment?: string | null;
+        output_hash?: string | null;
+        amount?: string;
+        rail?: string;
+    } | null;
+    signature?: {
+        alg?: string;
+        value?: string;
+        payload_version?: number;
+    };
+    hmac_attestation?: {
+        payload_version?: number;
+    };
+    issuer_signature?: {
+        alg?: string;
+        value?: string;
+        kid?: string;
+        jws?: string;
+        payload_version?: number;
+        payload_hash?: string;
+        canonical_preimage?: string;
+        issuer_jwk?: Es256Jwk;
+    };
+    verification?: {
+        source_of_truth?: string;
+        jwks_uri?: string;
+        issuer_jwk_pin?: string;
+        offline_key_source?: string;
+    };
+    caller_binding?: {
+        payer_wallet?: string | null;
+        agent_pubkey?: string | null;
+        api_key_hash?: string | null;
+        agent_id?: string | number | null;
+    } | null;
+    /** Book agent_id. Present on claim_id-era JWS payloads. Absent on older v8 receipts. */
+    claim_id?: string | null;
+    /**
+     * v9. Transparency-log head hash inside the issuer JWS. The outer copy is
+     * display only. Absent on v8 and earlier.
+     */
+    tree_head_hash?: string | null;
+    /** v9. Clock tolerance bound inside the issuer JWS. Absent on v8 and earlier. */
+    tolerance?: {
+        base?: number;
+        solana?: number;
+    } | null;
+    /** Append position. Unsigned relative to the payment JWS; signed inside book_chain. */
+    book_seq?: number | null;
+    /** Log leaf hash. Same field verifyAnchoredRoot reads before book_chain.row_hash. */
+    row_hash?: string | null;
+    book_chain?: {
+        seq?: number | null;
+        row_hash?: string | null;
+    } | null;
+    /** Unsigned derived refusal section. Ignored by signature verification. */
+    receipt_lane?: {
+        anchor_at_binding?: {
+            root: string | null;
+            tree_size: number | null;
+            anchor_tx: string | null;
+            solana_signature: string | null;
+        } | null;
+        anchor_current?: {
+            root: string | null;
+            tree_size: number | null;
+            anchor_tx: string | null;
+            solana_signature: string | null;
+        } | null;
+        freeze?: boolean;
+        anchor_changed_since_binding?: boolean | null;
+    } | null;
+    tree_head?: ReceiptTreeHead | null;
+    head?: ReceiptTreeHead | null;
+}
+/** JWK public key for ES256 verification. */
+export interface Es256Jwk {
+    kty: 'EC';
+    crv: 'P-256';
+    x: string;
+    y: string;
+    kid?: string;
+    alg?: string;
+    use?: string;
+}
+/** JWKS (JSON Web Key Set) structure. */
+export interface Jwks {
+    keys: Es256Jwk[];
+}
+/** Result of ECDSA signature verification. */
+export interface IssuerSignatureVerification {
+    /** Whether an issuer signature was present to check. */
+    checked: boolean;
+    /** True only when the signature verifies under a trusted key. */
+    valid: boolean;
+    /** Key ID from the signature. */
+    kid?: string;
+    /** Reason for failure when valid=false. `key untrusted` means the verifying key is not in the trust set. */
+    reason?: string;
+    /** True when the key used (or the only candidate key) is in the trust set. */
+    key_trusted?: boolean;
+    /** How the verifying key was trusted, when valid. */
+    trust?: 'jwks' | 'pinned_kid';
+    /** Verified JWS claims. Present only when valid is true. */
+    payload?: Record<string, unknown>;
+}
+/** Outer unsigned field disagrees with the JWS payload. */
+export interface ClaimMismatch {
+    field: string;
+    outer: string | null;
+    signed: string | null;
+}
+export interface BindingVerification {
+    verified: boolean;
+    expected: string | null;
+    recomputed: string | null;
+    matches: boolean;
+    covers: string[];
+    reason?: string;
+}
+export interface NullifierVerification {
+    verified: boolean;
+    nullifier: string | null;
+    anchored: boolean | null;
+    reason?: string;
+}
+export interface PayerVerification {
+    checked: boolean;
+    valid: boolean;
+    rail?: PayerRail;
+    reason?: string;
+    payer_wallet?: string | null;
+    payee?: string | null;
+    asset?: string | null;
+    amount?: string | null;
+}
+export interface ReceiptVerification {
+    receipt_id: string;
+    binding: BindingVerification;
+    issuer_signature: IssuerSignatureVerification;
+    payer: PayerVerification;
+    nullifier: NullifierVerification;
+    output_hash: string | null;
+    hub: string | null;
+    model: string | null;
+    /** Gross amount from verified signed claims, in atomic USDC. Null when the signature is not trusted. */
+    amount_usdc: string | null;
+    /** Settlement ref from verified signed claims. Null when the signature is not trusted. */
+    tx: string | null;
+    /** Signed claim paths whose outer copy disagrees. */
+    claim_mismatches: ClaimMismatch[];
+    /**
+     * Outer paths the payment JWS does not cover. Overall does not verify them.
+     * `issuer_signature` is omitted: those bytes are the signature that was checked.
+     */
+    unsigned_fields: string[];
+    /** Overall covers signed claims and the checks named in `errors`. */
+    verified_scope: 'signed_claims';
+    /**
+     * `not_present_legacy` — v8 (or older) payload with no claim_id key. Still verifies.
+     * `ok` — claim_id-era payload, and a payment.ref is paired with a seat.
+     * `refused` — claim_id-era payload, payment.ref set, claim_id null.
+     */
+    claim_id: 'not_present_legacy' | 'ok' | 'refused';
+    /**
+     * v9 head binding from verified claims only. Null when the signature is not
+     * trusted, when the payload is v8 or earlier, or when the pair is missing.
+     * Never copied from the unsigned outer fields.
+     */
+    head_binding: {
+        tree_head_hash: string | null;
+        tolerance: unknown;
+    } | null;
+    /**
+     * Unsigned refusal decision beside book_seq. Not part of the payment JWS.
+     * freeze is true only for an unsettled receipt-lane row whose anchor changed
+     * after binding. It does not change `overall`.
+     */
+    receipt_lane: ReceiptLane;
+    /** Recompute of published preimages. Absent block is skipped unless requirePreimages. */
+    preimages: PreimageCheck;
+    /** Kid window against the signed issuer history. Unreachable is a warning unless strict. */
+    issuer_history: IssuerHistoryCheck;
+    warnings: string[];
+    /**
+     * Set only when the leaf is included under an earlier signed epoch head
+     * and under the current signed epoch head. Dates are those head claims.
+     * Absent for a receipt in the current epoch.
+     */
+    carry_forward?: CarryForwardView | null;
+    overall: 'verified' | 'partial' | 'failed' | 'verified_carried_forward';
+    errors: string[];
+    /** Signed version, or the outer 4/5 used when the JWS itself has no version. */
+    receipt_version?: number | null;
+    /** `inferred` is the Sep 4–5 unversioned rule. Otherwise the JWS payload. */
+    version_source?: 'signed' | 'inferred' | null;
+}
+/**
+ * HMAC payload version.
+ * Versions <= 7 keep the historical net/fee field list.
+ * Version 8 signs settled_amount plus the internal accounting breakdown.
+ * Lockstep with `canonicalPayloadVersion` in services/gateway/src/receipt.js
+ * for the v8 list (the v7 list here is the historical 15-field public formula).
+ */
+export declare function canonicalPayloadVersion(receipt: XFuelReceipt): number;
+/**
+ * Canonical, order-stable payload an HMAC issuer signature covers.
+ * v8 matches `canonicalSignedPayload` in services/gateway/src/receipt.js.
+ * v7 and earlier stay on the historical 15-field list so old signatures verify.
+ */
+export declare function canonicalIssuerPayload(receipt: XFuelReceipt): string;
+export interface TransferLog {
+    address?: string;
+    topics?: string[];
+    data?: string;
+}
+export interface SettledAmountReconciliation {
+    checked: boolean;
+    /** True when the signed settled/net amount equals the USDC Transfer to payee. */
+    matches: boolean;
+    payload_version: number;
+    signed_field: 'settled_amount' | 'gross_amount' | 'net_amount' | null;
+    signed_amount: string | null;
+    transfer_amount: string | null;
+    payee: string | null;
+    reason?: string;
+}
+/**
+ * Sum USDC Transfer values to `payee` in a transaction's logs.
+ * Non-Transfer logs are ignored. When `usdcAddress` is set, other contracts are ignored.
+ */
+export declare function sumUsdcTransfersToPayee(logs: TransferLog[] | null | undefined, payee: string, usdcAddress?: string): bigint | null;
+export interface ReconcileSettledTransferOptions {
+    usdcAddress?: string;
+    /** JWKS treated as a trust root. Keys are matched by `kid`. */
+    jwks?: Jwks;
+    /**
+     * RFC 7638 thumbprints allowed as an offline pin.
+     * Omit to use the default production pin. Pass `[]` to disable the pin.
+     */
+    trustedKids?: readonly string[];
+}
+/**
+ * Optional on-chain reconciliation. Given a tx receipt's logs, the signed
+ * amount the payee was supposed to receive must equal the USDC Transfer to payee.
+ *
+ * The amount and payee come from JWS claims only after a key-trust check
+ * (JWKS by kid, or an embedded key whose thumbprint is a pinned kid). An
+ * untrusted signature does not contribute those facts.
+ *
+ * v8 compares `settled_amount` (falling back to `gross_amount`): that is the
+ * on-chain transfer. v7 and earlier compare `net_amount`, which those receipts
+ * defined as "amount after fees". A single direct transfer of gross will not
+ * match a net that subtracts a fee that never moved on chain.
+ */
+export declare function reconcileSettledTransfer(receipt: XFuelReceipt, logs: TransferLog[] | null | undefined, options?: ReconcileSettledTransferOptions): SettledAmountReconciliation;
+/**
+ * Verify a receipt's ES256 issuer signature against a JWK (public key).
+ * This is the public-key verification path — no shared secret required.
+ *
+ * Verification steps:
+ *   1. GET /receipt/:taskId?format=json → receipt.issuer_signature
+ *   2. GET /.well-known/jwks.json → find key matching issuer_signature.kid
+ *   3. ES256 verify canonicalIssuerPayload(receipt) against the signature
+ *
+ * @param receipt - Receipt JSON with issuer_signature
+ * @param jwk - JWK public key { kty: 'EC', crv: 'P-256', x, y }
+ */
+export declare function verifyIssuerSignature(receipt: XFuelReceipt, jwk: Es256Jwk): IssuerSignatureVerification;
+/**
+ * Verify an issuer signature against trusted keys only.
+ *
+ * Trust, in order:
+ *   1. A JWKS entry matched by `kid` (supplied file or fetched issuer JWKS).
+ *   2. An embedded `issuer_jwk` whose RFC 7638 thumbprint equals a pinned trusted kid.
+ *
+ * An embedded key that merely verifies the bytes is `key untrusted`.
+ */
+export declare function verifyIssuerSignatureWithJwks(receipt: XFuelReceipt, jwks?: Jwks, options?: {
+    trustedKids?: readonly string[];
+}): IssuerSignatureVerification;
+export declare function verifyBinding(receipt: XFuelReceipt): BindingVerification;
+/**
+ * Verify a receipt's nullifier is anchored on-chain.
+ *
+ * Requires network access to the Base RPC.
+ */
+export declare function verifyNullifier(receipt: XFuelReceipt, options?: {
+    rpcUrl?: string;
+    verifierAddress?: string;
+}): Promise<NullifierVerification>;
+/**
+ * Canonical signed payload for HMAC verification.
+ * Alias of canonicalIssuerPayload — both must produce identical bytes.
+ */
+export declare const canonicalSignedPayload: typeof canonicalIssuerPayload;
+/**
+ * Hash the canonical payload (for ERC-8004 response_hash).
+ */
+export declare function hashCanonicalPayload(receipt: XFuelReceipt): string;
+/**
+ * claim_id-era receipts include the key even when the value is null.
+ * Older payloads omit the key and stay valid.
+ */
+export declare function claimIdVerdict(claims: Record<string, unknown> | null | undefined): 'not_present_legacy' | 'ok' | 'refused';
+/**
+ * Walk every signed claim. When the outer receipt has the same path, the
+ * values must match, including null against a filled-in outer copy. A path
+ * the outer receipt omits is not a copy, so it is not a mismatch.
+ */
+export declare function diffOuterClaims(receipt: XFuelReceipt, claims: Record<string, unknown> | null): ClaimMismatch[];
+/** Outer paths the signed claims do not cover. Sorted. Not a failure by themselves. */
+export declare function unsignedOuterFields(receipt: unknown, claims: Record<string, unknown> | null): string[];
+/**
+ * Key sources shared by receipt verification and the epoch-record check:
+ * a caller-supplied JWKS, `--jwks-url` (any https URL), and `--fetch-jwks`
+ * from an allowlisted host. A failed fetch is an error. It does not add a key.
+ */
+export declare function loadIssuerJwks(source: {
+    verification?: {
+        jwks_uri?: string | null;
+    };
+    issuer_signature?: {
+        jws?: string;
+    };
+} | null | undefined, options?: {
+    jwks?: Jwks;
+    jwksUri?: string;
+    fetchJwks?: boolean;
+    trustedJwksHosts?: readonly string[];
+    fetchImpl?: typeof fetch;
+}): Promise<{
+    jwks?: Jwks;
+    errors: string[];
+}>;
+/** Fetch a JWKS document. Caller decides whether the URL is a trust root. */
+export declare function fetchIssuerJwks(uri: string, fetchImpl?: typeof fetch): Promise<Jwks>;
+/**
+ * Full receipt verification — trusted issuer signature, signed-claim facts,
+ * optional on-chain payer and nullifier checks.
+ *
+ * Facts (amount, payer, payee, asset, tx, model) are taken only from a JWS
+ * that verified under a trusted key. The embedded `issuer_jwk` is not trusted
+ * unless its RFC 7638 thumbprint is a pinned kid, or the same key is in a JWKS.
+ */
+/** Extract JWS claims for payer binding. Prefers the JWS payload over the outer copy. */
+export declare function receiptPayerClaims(receipt: XFuelReceipt): ReceiptPayerClaims;
+export interface VerifyReceiptOptions {
+    /** Caller-supplied JWKS. Every key in it is a trust root, matched by kid. */
+    jwks?: Jwks;
+    /**
+     * Pinned trusted kids (RFC 7638 thumbprints). Defaults to the production
+     * api.chit402.com issuer kid. Pass `[]` to disable the offline pin.
+     */
+    trustedKids?: readonly string[];
+    /** Fetch JWKS from the receipt `jwks_uri` when its host is allowlisted. */
+    fetchJwks?: boolean;
+    /** Explicit JWKS URL. Any https URL is fetched; this is user-supplied trust. */
+    jwksUri?: string;
+    /** Hosts allowed for `fetchJwks`. Defaults to api.chit402.com. */
+    trustedJwksHosts?: readonly string[];
+    fetchImpl?: typeof fetch;
+    checkNullifier?: boolean;
+    checkPayer?: boolean;
+    rpcUrl?: string;
+    solanaRpcUrl?: string;
+    verifierAddress?: string;
+    fetchSolanaTransaction?: SolanaRpcFetcher;
+    fetchBaseReceipt?: BaseReceiptFetcher;
+    /**
+     * Tree head to check against the signed `tree_head_hash`. An equal root is
+     * the issuance prefix and proves inclusion of this receipt. A different root
+     * verifies only when `inclusion` proves the leaf is in that head.
+     * A tree-head witness (anything beyond `{ root, tree_size }`) is checked
+     * offline. A missing `issuer_signature` fails closed. The signature must
+     * cover the outer size, root, and the other signed fields. The issuer-history
+     * document fetched for this call is the one that trusts the head's kid.
+     * No chain RPC.
+     */
+    head?: (ReceiptTreeHead & TreeHeadDocument) | null;
+    /**
+     * Inclusion witness for `head` when its root is not the signed prefix.
+     * `leaf` is the 32-byte leaf hash hex. Without it the leaf is
+     * SHA-256(0x00 || `${task_id}|${row_hash}`).
+     */
+    inclusion?: {
+        leaf?: string | null;
+        leaf_index?: number | null;
+        tree_size?: number | null;
+        row_hash?: string | null;
+        proof?: InclusionStep[] | null;
+        /**
+         * Named head summary from an inclusion response. Used only when `head`
+         * is omitted and the summary JWS verifies under JWKS or a pinned kid.
+         */
+        head?: unknown;
+    } | null;
+    /**
+     * Fail when a recomputable hash has no preimage. A present `preimages`
+     * block is always checked, even when this is false.
+     */
+    requirePreimages?: boolean;
+    /** Signed issuer history document. Skips the network when set. */
+    issuerHistory?: IssuerHistoryDocument | null;
+    /** Fetch /.well-known/issuer-history.json. Unreachable warns unless strict. */
+    fetchIssuerHistory?: boolean;
+    /** Fail closed when the history cannot be loaded. */
+    strictIssuerHistory?: boolean;
+    /** Explicit history URL. Any https URL. */
+    issuerHistoryUrl?: string | null;
+    /** Exact issuer-history response bytes. SHA-256 must match a signed pin. */
+    issuerHistoryBytes?: string | null;
+    /**
+     * Library seam. The CLI does not set this: 0.4.0 always checks history.
+     * A skipped window is not a verified result. Callers that pass a document
+     * still run the window.
+     */
+    skipIssuerHistory?: boolean;
+    /** Ignored. `VERIFIED_NO_KEY_WINDOW` is retired. */
+    labelSkippedKeyWindow?: boolean;
+    /**
+     * Earlier-epoch head and current-epoch head for a leaf that was carried
+     * into the current log. Omitted for a receipt that is only in the current
+     * epoch. Dates are read from the signed heads, not from this object.
+     */
+    carry?: {
+        oldHead: CarryHead;
+        oldInclusion: CarryInclusion;
+        currentHead: CarryHead;
+        currentInclusions: CarryInclusion[];
+        row_hash?: string | null;
+    } | null;
+    /**
+     * Stored canonical object (the GET /preimage body). SHA-256 must match
+     * the signed payload_hash. Absent bytes are not rebuilt.
+     */
+    canonicalPreimage?: string | null;
+    /** Holder salt. 64 lowercase hex. Malformed values are rejected, not normalized. */
+    salt?: string | null;
+    /**
+     * Holder openings. `output` is raw bytes. The others are UTF-8 JSON of the
+     * committed object.
+     */
+    open?: {
+        output?: Buffer | null;
+        accounting?: string | null;
+        routing?: string | null;
+        refusal?: string | null;
+    } | null;
+}
+/** v1–v10 verifier. A v11 payload is `unsupported_version` and is not checked as v10. */
+export declare function verifyReceiptUpToV10(receipt: XFuelReceipt, options?: VerifyReceiptOptions): Promise<ReceiptVerification>;
+export declare function verifyReceipt(receipt: XFuelReceipt, options?: VerifyReceiptOptions): Promise<ReceiptVerification>;
+export { resolvePinnedIssuerJwk, verifyIssuerJws, DEFAULT_TRUSTED_ISSUER_KIDS, DEFAULT_TRUSTED_JWKS_HOSTS, KEY_UNTRUSTED, jwkThumbprint, isPinnedTrustedJwk, jwksHostAllowed, } from './jws.js';
+export { buildReceiptLane, receiptLaneFromVerification, receiptLaneDecision, deriveSettledBy, deriveSettled, anchorChangedSinceBinding, RECEIPT_LANE_SCHEMA, RECEIPT_LANE_RULE, RECEIPT_LANE_ORDERING, RECEIPT_LANE_BOUNDARY, type ReceiptLane, type SettledBy, type RegistryClassification, type LocalCheckHint, type AnchorIdentity, type ReceiptTreeHead, } from './receipt-lane.js';
+export { headBindingVerdict, signedHeadBinding, outerHeadDisagrees, HEAD_BINDING_PAYLOAD_VERSION, type HeadBindingVerdict, type SignedHeadBinding, } from './head-binding.js';
+export { isRefusalDocument, verifyRefusal, REFUSAL_SCHEMA, REFUSAL_SCHEMA_V2, REFUSAL_PAYLOAD_VERSION, REFUSAL_PROVES, REFUSAL_DOES_NOT_PROVE, type RefusalDocument, type RefusalVerification, type RefusalJwks, } from './refusal.js';
+export { verifyRequestDigest, requestDigestOfPreimage, type RequestBindingStatus, } from './request-binding.js';
+export { acceptTreeHeadSchema, verifyEpochLink, verifyEpochRecord, verifyEpochInclusion, verifyUnloggedSection, verifyUnloggedCommitment, unloggedIdCommitment, unloggedReasonForTask, canonicalUnloggedRows, TREE_HEAD_SCHEMA_V1, TREE_HEAD_SCHEMA_V2, EPOCH1_FINAL_ROOT, EPOCH1_FINAL_SIZE, EPOCH1_GENESIS_DIGEST, EPOCH1_SIZE1_ROOT, EPOCH1_SIZE2_ROOT, epoch1PrefixRoot, matchEpoch1Prefix, EPOCH2_OPENING_ROOT, type EpochTreeHead, type EpochRecord, type EpochRecordEntry, type EpochRecordOptions, type UnloggedRow, type UnloggedSection, type UnloggedCommitment, } from './epoch.js';
+export { verifyCarryForward, PINNED_ANCHOR_EPOCHS, CARRY_FORWARD_STATUS, type CarryForwardInput, type CarryForwardVerdict, type CarryForwardView, type CarryHead, type CarryInclusion, } from './carry-forward.js';
+export { verifyAnchoredRoot, verifyMerkleInclusion, extractMemos, parseAnchorMemo, leafHash, ANCHOR_PROVES, ANCHOR_DOES_NOT_PROVE, SOLANA_GENESIS, BASE_MAINNET_CHAIN_ID, type AnchorWitnessResult, type AnchorReceipt, type AnchorInclusion, type AnchorHead, type VerifyAnchoredRootInput, } from './anchor-witness.js';
+export { assessIssuerPin, issuerPinContentUrl, issuerPinFileHash, loadIssuerPinBytes, readIssuerPinClaim, registrationPreimage, rotationStatement, serializeIssuerPin, verifyCitizenRotation, verifyRegistrationSignature, canonicalPublicKey, ISSUER_REGISTRATION_CONTEXT, ISSUER_ROTATION_CONTEXT, ISSUER_PIN_VERSION, ISSUER_PIN_SCHEMA, ISSUER_PIN_PATH, ISSUER_PIN_CHAIN_ID, PUBLISHED_ISSUER_PIN_KID, CITIZEN_FREEZE_SCHEMA, CITIZEN_FREEZE_PURPOSE, ISSUER_PIN_MISMATCH, ISSUER_PIN_HASH_MISMATCH, ISSUER_SELF_SIG_INVALID, ISSUER_PIN_DOWNGRADE, ISSUER_PIN_MUTABLE_REF, ISSUER_ROTATION_UNCONTROLLED, ISSUER_PIN_CHAIN_REFUSED, type IssuerPinRef, type IssuerPinAssessment, type IssuerKeyPin, type AssessIssuerPinInput, } from './issuer-pin.js';
+export { PINNED_BASE_ANCHOR_WALLET, PINNED_SOLANA_ANCHOR_FEE_PAYER, ANCHOR_WALLET_SOURCES_NOT_CONSULTED, LEGACY_HEAD_UNPINNED_SIGNER, HEAD_TRUST_MESSAGES, headOmitsPinnedSigner, headTrustedFromInclusion, verifyTreeHeadTrust, verifyAnchorWalletDocument, compileAnchorWallets, } from './anchor-trust.js';
+export { verifyCanonicalPreimageBytes, CANONICAL_PAYLOAD_VERSION, } from './canonical-preimage.js';
+export { SUPPORTED_RECEIPT_VERSIONS, LEGACY_PAYLOAD_VERSIONS, REFUSAL_EXACT_VERSIONS, VERIFIER_MIN, UNSUPPORTED_VERSION, VERSION_MISMATCH, classifyReceiptDocument, classifySignedClaims, legacyIdentityErrors, classifyShellDocument, signedClaimsOnAllowlist, formatSupportedReceiptVersions, readSignedClaims, refusalPayloadVersion, isJsonInteger, } from './receipt-version.js';
+export { readIssuerHistoryPin, issuerHistoryDocumentHash, type IssuerHistoryPin, } from './issuer-history.js';
+export { isReceiptShell, shellFromHolder, compareShellToJws, holderDocumentFromOwnerView, shellHolderVerdict, openV11Commitment, decodeJwsPayload as decodeShellJwsPayload, SHELL_SCHEMA, INCLUDED_SHELL_LINE, } from './shell.js';
+declare const _default: {
+    verifyBinding: typeof verifyBinding;
+    verifyIssuerSignature: typeof verifyIssuerSignature;
+    verifyIssuerSignatureWithJwks: typeof verifyIssuerSignatureWithJwks;
+    verifyIssuerJws: typeof verifyIssuerJws;
+    resolvePinnedIssuerJwk: typeof resolvePinnedIssuerJwk;
+    verifyNullifier: typeof verifyNullifier;
+    verifyPayerBinding: typeof verifyPayerBinding;
+    verifySolanaPayer: typeof verifySolanaPayer;
+    verifyBasePayer: typeof verifyBasePayer;
+    verifyReceipt: typeof verifyReceipt;
+    receiptPayerClaims: typeof receiptPayerClaims;
+    receiptPayerClaimsFromEnvelope: typeof receiptPayerClaimsFromEnvelope;
+    decodeJwsPayload: typeof decodeJwsPayload;
+    computePaymentCommitment: typeof computePaymentCommitment;
+    computeInferenceBinding: typeof computeInferenceBinding;
+    canonicalIssuerPayload: typeof canonicalIssuerPayload;
+    canonicalPayloadVersion: typeof canonicalPayloadVersion;
+    canonicalSignedPayload: typeof canonicalIssuerPayload;
+    reconcileSettledTransfer: typeof reconcileSettledTransfer;
+    sumUsdcTransfersToPayee: typeof sumUsdcTransfersToPayee;
+    hashCanonicalPayload: typeof hashCanonicalPayload;
+    ZK_VERIFIER_ADDRESS: string;
+    BASE_RPC_URL: string;
+    BASE_SEPOLIA_RPC_URL: string;
+    SOLANA_RPC_URL: string;
+};
+export default _default;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAmC,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE1F,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACd,KAAK,cAAc,EACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC3B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,YAAY,EACZ,yBAAyB,EACzB,2BAA2B,EAC3B,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACpB,0BAA0B,EAC1B,4BAA4B,EAC5B,sBAAsB,EACtB,cAAc,EACd,wBAAwB,EACxB,uBAAuB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,6BAA6B,EACnC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,kBAAkB,EAClB,8BAA8B,EAC9B,gBAAgB,EAChB,KAAK,wBAAwB,EAC7B,KAAK,kBAAkB,EACvB,KAAK,SAAS,EACf,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,sBAAsB,EACtB,eAAe,EAShB,MAAM,UAAU,CAAC;AAMlB,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,eAAe,EACrB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAA4B,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC3B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAiD,KAAK,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAEzG,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,eAAe,EACf,mBAAmB,EACnB,YAAY,EACZ,yBAAyB,EACzB,2BAA2B,EAC3B,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACpB,0BAA0B,EAC1B,4BAA4B,EAC5B,sBAAsB,EACtB,cAAc,EACd,wBAAwB,EACxB,uBAAuB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,6BAA6B,EAClC,kBAAkB,EAClB,8BAA8B,EAC9B,gBAAgB,EAChB,KAAK,wBAAwB,EAC7B,KAAK,kBAAkB,EACvB,KAAK,SAAS,GACf,CAAC;AAEF,8CAA8C;AAC9C,eAAO,MAAM,mBAAmB,+CAA+C,CAAC;AAEhF,gCAAgC;AAChC,eAAO,MAAM,oBAAoB,6BAA6B,CAAC;AAO/D,0CAA0C;AAC1C,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE;QACN,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,gBAAgB,CAAC,EAAE;YACjB,UAAU,CAAC,EAAE,MAAM,CAAC;SACrB,GAAG,IAAI,CAAC;KACV,CAAC;IACF,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,UAAU,CAAC,EAAE;YACX,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,kBAAkB,CAAC,EAAE;gBACnB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;gBACjC,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;gBACpC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;gBACrC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;gBACrC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;aACpC,CAAC;SACH,GAAG,IAAI,CAAC;KACV,CAAC;IACF,YAAY,CAAC,EAAE;QACb,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,IAAI,CAAC;IACT,aAAa,CAAC,EAAE;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,MAAM,CAAC,EAAE;QACP,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,GAAG,IAAI,CAAC;IACT,KAAK,CAAC,EAAE;QACN,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,CAAC;IACF,OAAO,CAAC,EAAE;QACR,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,GAAG,IAAI,CAAC;IACT,SAAS,CAAC,EAAE;QACV,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,gBAAgB,CAAC,EAAE;QACjB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,gBAAgB,CAAC,EAAE;QACjB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,UAAU,CAAC,EAAE,QAAQ,CAAC;KACvB,CAAC;IACF,YAAY,CAAC,EAAE;QACb,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC7B,CAAC;IACF,cAAc,CAAC,EAAE;QACf,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;KACnC,GAAG,IAAI,CAAC;IACT,wFAAwF;IACxF,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,iFAAiF;IACjF,SAAS,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACtD,uFAAuF;IACvF,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,qFAAqF;IACrF,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IACtE,2EAA2E;IAC3E,YAAY,CAAC,EAAE;QACb,iBAAiB,CAAC,EAAE;YAClB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;YACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;YACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;YACzB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;SACjC,GAAG,IAAI,CAAC;QACT,cAAc,CAAC,EAAE;YACf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;YACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;YACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;YACzB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;SACjC,GAAG,IAAI,CAAC;QACT,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,4BAA4B,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;KAC/C,GAAG,IAAI,CAAC;IACT,SAAS,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACnC,IAAI,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;CAC/B;AAED,6CAA6C;AAC7C,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,IAAI,CAAC;IACV,GAAG,EAAE,OAAO,CAAC;IACb,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;IACV,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,yCAAyC;AACzC,MAAM,WAAW,IAAI;IACnB,IAAI,EAAE,QAAQ,EAAE,CAAC;CAClB;AAED,8CAA8C;AAC9C,MAAM,WAAW,2BAA2B;IAC1C,wDAAwD;IACxD,OAAO,EAAE,OAAO,CAAC;IACjB,iEAAiE;IACjE,KAAK,EAAE,OAAO,CAAC;IACf,iCAAiC;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,4GAA4G;IAC5G,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC;IAC9B,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,2DAA2D;AAC3D,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,mBAAmB,CAAC;IAC7B,gBAAgB,EAAE,2BAA2B,CAAC;IAC9C,KAAK,EAAE,iBAAiB,CAAC;IACzB,SAAS,EAAE,qBAAqB,CAAC;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,wGAAwG;IACxG,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,0FAA0F;IAC1F,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,qDAAqD;IACrD,gBAAgB,EAAE,aAAa,EAAE,CAAC;IAClC;;;OAGG;IACH,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,qEAAqE;IACrE,cAAc,EAAE,eAAe,CAAC;IAChC;;;;OAIG;IACH,QAAQ,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,CAAC;IAClD;;;;OAIG;IACH,YAAY,EAAE;QACZ,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,SAAS,EAAE,OAAO,CAAC;KACpB,GAAG,IAAI,CAAC;IACT;;;;OAIG;IACH,YAAY,EAAE,WAAW,CAAC;IAC1B,yFAAyF;IACzF,SAAS,EAAE,aAAa,CAAC;IACzB,4FAA4F;IAC5F,cAAc,EAAE,kBAAkB,CAAC;IACnC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB;;;;OAIG;IACH,aAAa,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACxC,OAAO,EAAE,UAAU,GAAG,SAAS,GAAG,QAAQ,GAAG,0BAA0B,CAAC;IACxE,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,gFAAgF;IAChF,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,6EAA6E;IAC7E,cAAc,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,IAAI,CAAC;CAC/C;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,CAWrE;AAgDD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,CAKpE;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,iFAAiF;IACjF,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,gBAAgB,GAAG,cAAc,GAAG,YAAY,GAAG,IAAI,CAAC;IACtE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAOD;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,WAAW,EAAE,GAAG,IAAI,GAAG,SAAS,EACtC,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,MAAM,GAAG,IAAI,CAgBf;AAED,MAAM,WAAW,+BAA+B;IAC9C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+DAA+D;IAC/D,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ;;;OAGG;IACH,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACjC;AAmDD;;;;;;;;;;;;GAYG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,YAAY,EACrB,IAAI,EAAE,WAAW,EAAE,GAAG,IAAI,GAAG,SAAS,EACtC,OAAO,GAAE,+BAAoC,GAC5C,2BAA2B,CAmF7B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,YAAY,EACrB,GAAG,EAAE,QAAQ,GACZ,2BAA2B,CA4B7B;AAgBD;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,YAAY,EACrB,IAAI,CAAC,EAAE,IAAI,EACX,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAO,GAChD,2BAA2B,CA8G7B;AAkBD,wBAAgB,aAAa,CAAC,OAAO,EAAE,YAAY,GAAG,mBAAmB,CAkFxE;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,YAAY,EACrB,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAO,GAC1D,OAAO,CAAC,qBAAqB,CAAC,CA2ChC;AAED;;;GAGG;AACH,eAAO,MAAM,sBAAsB,+BAAyB,CAAC;AAE7D;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,CAElE;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,GACjD,oBAAoB,GAAG,IAAI,GAAG,SAAS,CAWzC;AA8ED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,aAAa,EAAE,CAK9G;AAqCD,uFAAuF;AACvF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,MAAM,EAAE,CAItG;AAgID;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE;IACN,YAAY,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC5C,gBAAgB,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACrC,GAAG,IAAI,GAAG,SAAS,EACpB,OAAO,GAAE;IACP,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CACrB,GACL,OAAO,CAAC;IAAE,IAAI,CAAC,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAqB5C;AAED,6EAA6E;AAC7E,wBAAsB,eAAe,CACnC,GAAG,EAAE,MAAM,EACX,SAAS,GAAE,OAAO,KAAwB,GACzC,OAAO,CAAC,IAAI,CAAC,CAOf;AAED;;;;;;;GAOG;AACH,yFAAyF;AACzF,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,YAAY,GAAG,kBAAkB,CAE5E;AAED,MAAM,WAAW,oBAAoB;IACnC,6EAA6E;IAC7E,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ;;;OAGG;IACH,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,2EAA2E;IAC3E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,sBAAsB,CAAC,EAAE,gBAAgB,CAAC;IAC1C,gBAAgB,CAAC,EAAE,kBAAkB,CAAC;IACtC;;;;;;;;;OASG;IACH,IAAI,CAAC,EAAE,CAAC,eAAe,GAAG,gBAAgB,CAAC,GAAG,IAAI,CAAC;IACnD;;;;OAIG;IACH,SAAS,CAAC,EAAE;QACV,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,KAAK,CAAC,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;QAC/B;;;WAGG;QACH,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB,GAAG,IAAI,CAAC;IACT;;;OAGG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,kEAAkE;IAClE,aAAa,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC7C,+EAA+E;IAC/E,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,qDAAqD;IACrD,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,2CAA2C;IAC3C,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,4EAA4E;IAC5E,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,oDAAoD;IACpD,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;;OAIG;IACH,KAAK,CAAC,EAAE;QACN,OAAO,EAAE,SAAS,CAAC;QACnB,YAAY,EAAE,cAAc,CAAC;QAC7B,WAAW,EAAE,SAAS,CAAC;QACvB,iBAAiB,EAAE,cAAc,EAAE,CAAC;QACpC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,GAAG,IAAI,CAAC;IACT;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,oFAAoF;IACpF,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB;;;OAGG;IACH,IAAI,CAAC,EAAE;QACL,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACzB,GAAG,IAAI,CAAC;CACV;AA8FD,yFAAyF;AACzF,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,YAAY,EACrB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,mBAAmB,CAAC,CAE9B;AAED,wBAAsB,aAAa,CACjC,OAAO,EAAE,YAAY,EACrB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,mBAAmB,CAAC,CAuc9B;AAED,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,2BAA2B,EAC3B,0BAA0B,EAC1B,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,eAAe,GAChB,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,gBAAgB,EAChB,2BAA2B,EAC3B,mBAAmB,EACnB,eAAe,EACf,aAAa,EACb,yBAAyB,EACzB,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,eAAe,GACrB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,4BAA4B,EAC5B,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,GACvB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,uBAAuB,EACvB,cAAc,EACd,sBAAsB,EACtB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,WAAW,GACjB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,KAAK,oBAAoB,GAC1B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,iBAAiB,EACjB,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,EACxB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,kBAAkB,GACxB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACd,KAAK,cAAc,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,YAAY,EACZ,eAAe,EACf,QAAQ,EACR,aAAa,EACb,qBAAqB,EACrB,cAAc,EACd,qBAAqB,EACrB,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,UAAU,EACf,KAAK,uBAAuB,GAC7B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,2BAA2B,EAC3B,kBAAkB,EAClB,2BAA2B,EAC3B,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,wBAAwB,EACxB,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,EACnB,wBAAwB,EACxB,uBAAuB,EACvB,oBAAoB,EACpB,sBAAsB,EACtB,4BAA4B,EAC5B,wBAAwB,EACxB,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,KAAK,YAAY,EACjB,KAAK,oBAAoB,GAC1B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,yBAAyB,EACzB,8BAA8B,EAC9B,mCAAmC,EACnC,2BAA2B,EAC3B,mBAAmB,EACnB,qBAAqB,EACrB,wBAAwB,EACxB,mBAAmB,EACnB,0BAA0B,EAC1B,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,sBAAsB,EACtB,YAAY,EACZ,mBAAmB,EACnB,gBAAgB,EAChB,uBAAuB,EACvB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACvB,8BAA8B,EAC9B,gBAAgB,EAChB,qBAAqB,EACrB,aAAa,GACd,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,KAAK,gBAAgB,GACtB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,2BAA2B,EAC3B,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,IAAI,qBAAqB,EACzC,YAAY,EACZ,mBAAmB,GACpB,MAAM,YAAY,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEpB,wBA0BE"}