signet-protocol 0.1.0

package/dist/index.js

@@ -0,0 +1,86 @@
+// Signet Protocol — TypeScript Library
+// Decentralised identity verification for Nostr
+// Entity display labels (value export from types)
+export { ENTITY_DISPLAY_LABELS } from './types.js';
+// Constants
+export { ATTESTATION_KIND, APP_DATA_KIND, ATTESTATION_TYPES, SIGNET_KINDS, SIGNET_LABEL, DEFAULT_VOUCH_THRESHOLD, DEFAULT_VOUCHER_MIN_TIER, DEFAULT_CREDENTIAL_EXPIRY_SECONDS, DEFAULT_REVOCATION_THRESHOLD, VERIFIER_ACTIVATION, TRUST_WEIGHTS, MAX_TRUST_SCORE, SIGNAL_PRIORITY, MIN_BRIDGE_RING_SIZE, ENTITY_TYPES, DELEGATION_CONSTRAINTS, ENTITY_LABELS, DEFAULT_CRYPTO_ALGORITHM, 
+// Bond constants
+BOND_DOMAIN_SEPARATOR, DEFAULT_BOND_MAX_AGE_SECS, VALID_BOND_ADDRESS_TYPES, } from './constants.js';
+// Crypto
+export { generateKeyPair, getPublicKey, signEvent, verifyEvent, getEventId, hash, hashString, } from './crypto.js';
+// Credentials (attestation type: credential)
+export { buildCredentialEvent, createSelfDeclaredCredential, createPeerVouchedCredential, createProfessionalCredential, createChildSafetyCredential, verifyCredential, isCredentialExpired, parseCredential, 
+// Ring-signature protected credentials
+createRingProtectedCredential, createRingProtectedChildCredential, verifyRingProtectedContent, 
+// Credential renewal
+renewCredential, needsRenewal, 
+// Two-credential ceremony
+createTwoCredentialCeremony, 
+// Credential chains
+supersedeCredential, resolveCredentialChain, isSuperseded, 
+// Nullifier utilities
+computeNullifier, checkNullifierDuplicate, buildNullifierChainTag, 
+// Multi-document nullifier families
+computeNullifierFamily, buildNullifierFamilyTags, checkNullifierFamilyDuplicate, 
+// Guardian delegation
+createGuardianDelegation, } from './credentials.js';
+// Vouches (attestation type: vouch)
+export { buildVouchEvent, createVouch, parseVouch, countQualifyingVouches, hasEnoughVouches, getVouchers, } from './vouches.js';
+// Policies (NIP-78 kind 30078)
+export { buildPolicyEvent, createPolicy, parsePolicy, checkPolicyCompliance, PolicyChecker, } from './policies.js';
+// Verifiers (attestation type: verifier)
+export { buildVerifierEvent, createVerifierCredential, parseVerifier, checkCrossVerification, isVerifierRevoked, } from './verifiers.js';
+// Bonds (proof-of-reserve bond attestation)
+export { buildBondMessage, createBondProof, verifyBondProof, isBondStale, bondProofToTags, parseBondProof, checkBondCompliance, } from './bonds.js';
+// Challenges & Revocations (attestation types: challenge, revocation)
+export { buildChallengeEvent, createChallenge, parseChallenge, buildRevocationEvent, createRevocation, parseRevocation, countChallengeConfirmations, hasReachedRevocationThreshold, } from './challenges.js';
+// Signet Score
+export { computeTrustScore, formatTrustDisplay, verifySignalOrdering, } from './trust-score.js';
+// Merkle Tree
+export { MerkleTree, verifyMerkleProof, verifySelectiveDisclosure, } from './merkle.js';
+// Ring Signatures
+export { MAX_RING_SIZE, ringSign, ringVerify, signCredentialRing, verifyCredentialRing, } from './ring-signature.js';
+// LSAG (Linkable Ring Signatures)
+export { MAX_RING_SIZE as LSAG_MAX_RING_SIZE, computeKeyImage, lsagSign, lsagVerify, hasDuplicateKeyImage, } from './lsag.js';
+// Identity Bridge (attestation type: identity-bridge)
+export { createIdentityBridge, verifyIdentityBridge, parseIdentityBridge, selectDecoyRing, computeBridgeWeight, } from './identity-bridge.js';
+// Range Proofs (Pedersen Commitments)
+export { commit, verifyCommitment, createRangeProof, verifyRangeProof, createAgeRangeProof, verifyAgeRangeProof, serializeRangeProof, deserializeRangeProof, } from './range-proof.js';
+// Relay Client
+export { RelayClient, publishToRelays, fetchFromRelay, } from './relay.js';
+// Event Store
+export { SignetStore } from './store.js';
+// Anomaly Detection
+export { detectAnomalies, scanForAnomalies, } from './anomaly.js';
+// Jurisdictions (re-exported from jurisdiction-kit)
+export { JURISDICTIONS, getJurisdiction, getJurisdictionCodes, getProfessionalBodies, getMutualRecognitionPartners, isProfessionRegulated, findJurisdictionsForProfession, getDigitalConsentAge, getAgeOfMajority, canTransferData, getAllLanguages, getJurisdictionsByLanguage, computeJurisdictionConfidence, getJurisdictionConfidence, rankJurisdictionsByConfidence, } from 'jurisdiction-kit';
+// Internationalization
+export { setLanguage, getLanguage, getSupportedLanguages, t, getTranslations, getLanguageName, getLanguageNativeName, formatLocalizedTrustScore, getTierDescription, } from './i18n.js';
+// Compliance
+export { checkCredentialCompliance, checkCrossBorderCompliance, checkChildCompliance, getConsentRequirements, getRetentionGuidance, checkMultiJurisdictionCompliance, getMostRestrictiveRequirements, } from './compliance.js';
+// Validation
+export { validateCredential, validateVouch, validatePolicy, validateVerifier, validateChallenge, validateRevocation, validateEvent, getTagValue, getTagValues, } from './validation.js';
+// Errors
+export { SignetError, SignetValidationError, SignetCryptoError, } from './errors.js';
+// BIP-39 Wordlist
+export { wordlist as BIP39_WORDLIST } from '@scure/bip39/wordlists/english.js';
+// Mnemonic (BIP-39)
+export { generateMnemonic, mnemonicToEntropy, entropyToMnemonic, validateMnemonic, } from '@scure/bip39';
+export { mnemonicToSeedSync as mnemonicToSeed } from '@scure/bip39';
+// Identity Tree (nsec-tree integration)
+export { createSignetIdentity, createSignetIdentityFromNsec, deriveAdditionalPersona, deriveSubIdentity, createLinkageProof, verifyLinkageProof, destroyIdentity, NATURAL_PERSON_PERSONA, ANONYMOUS_PERSONA, } from './identity-tree.js';
+// nsec-tree re-exports
+export { zeroise } from 'nsec-tree';
+// NIP-19 encoding (nsec-tree/encoding)
+export { encodeNsec, decodeNsec, encodeNpub, decodeNpub } from 'nsec-tree/encoding';
+// Shamir's Secret Sharing
+export { splitSecret, reconstructSecret, shareToWords, wordsToShare, } from '@forgesworn/shamir-words';
+// Connections (ECDH / QR Exchange)
+export { computeSharedSecret, createQRPayload, serializeQRPayload, parseQRPayload, createConnection, ConnectionStore, } from './connections.js';
+// Badge Display (Level 1 integration)
+export { computeBadge, getTrustLevel, meetsMinimumTier, filterEventsForPubkey, buildBadgeFilters, } from './badge.js';
+// Signet Words (Time-Based Verification — powered by spoken-token)
+export { SIGNET_EPOCH_SECONDS, SIGNET_WORD_COUNT, SIGNET_TOLERANCE, MAX_WORD_COUNT, SIGNET_WORDLIST, getEpoch, deriveWords, getSignetWords, verifySignetWords, formatSignetWords, getSignetDisplay, } from './signet-words.js';
+// Cold-Call Verification (institutional caller verification via .well-known/signet.json + ephemeral ECDH)
+export { fetchInstitutionKeys, generateSessionCode, deriveColdCallWords, initiateColdCallVerification, completeColdCallVerification, } from './cold-call.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,gDAAgD;AAkDhD,kDAAkD;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAEnD,YAAY;AACZ,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,YAAY,EACZ,uBAAuB,EACvB,wBAAwB,EACxB,iCAAiC,EACjC,4BAA4B,EAC5B,mBAAmB,EACnB,aAAa,EACb,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,YAAY,EACZ,sBAAsB,EACtB,aAAa,EACb,wBAAwB;AACxB,iBAAiB;AACjB,qBAAqB,EACrB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AAExB,SAAS;AACT,OAAO,EACL,eAAe,EACf,YAAY,EACZ,SAAS,EACT,WAAW,EACX,UAAU,EACV,IAAI,EACJ,UAAU,GACX,MAAM,aAAa,CAAC;AAErB,6CAA6C;AAC7C,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,2BAA2B,EAC3B,4BAA4B,EAC5B,2BAA2B,EAC3B,gBAAgB,EAChB,mBAAmB,EACnB,eAAe;AACf,uCAAuC;AACvC,6BAA6B,EAC7B,kCAAkC,EAClC,0BAA0B;AAC1B,qBAAqB;AACrB,eAAe,EACf,YAAY;AACZ,0BAA0B;AAC1B,2BAA2B;AAC3B,oBAAoB;AACpB,mBAAmB,EACnB,sBAAsB,EACtB,YAAY;AACZ,sBAAsB;AACtB,gBAAgB,EAChB,uBAAuB,EACvB,sBAAsB;AACtB,oCAAoC;AACpC,sBAAsB,EACtB,wBAAwB,EACxB,6BAA6B;AAC7B,sBAAsB;AACtB,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAI1B,oCAAoC;AACpC,OAAO,EACL,eAAe,EACf,WAAW,EACX,UAAU,EACV,sBAAsB,EACtB,gBAAgB,EAChB,WAAW,GACZ,MAAM,cAAc,CAAC;AAEtB,+BAA+B;AAC/B,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACX,qBAAqB,EACrB,aAAa,GACd,MAAM,eAAe,CAAC;AAEvB,yCAAyC;AACzC,OAAO,EACL,kBAAkB,EAClB,wBAAwB,EACxB,aAAa,EACb,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AAExB,4CAA4C;AAC5C,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,WAAW,EACX,eAAe,EACf,cAAc,EACd,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAIpB,sEAAsE;AACtE,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,EACf,2BAA2B,EAC3B,6BAA6B,GAC9B,MAAM,iBAAiB,CAAC;AAEzB,eAAe;AACf,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAE1B,cAAc;AACd,OAAO,EACL,UAAU,EACV,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,aAAa,CAAC;AAErB,kBAAkB;AAClB,OAAO,EACL,aAAa,EACb,QAAQ,EACR,UAAU,EACV,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAI7B,kCAAkC;AAClC,OAAO,EACL,aAAa,IAAI,kBAAkB,EACnC,eAAe,EACf,QAAQ,EACR,UAAU,EACV,oBAAoB,GACrB,MAAM,WAAW,CAAC;AAInB,sDAAsD;AACtD,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,GACpB,MAAM,sBAAsB,CAAC;AAE9B,sCAAsC;AACtC,OAAO,EACL,MAAM,EACN,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAI1B,eAAe;AACf,OAAO,EACL,WAAW,EACX,eAAe,EACf,cAAc,GACf,MAAM,YAAY,CAAC;AAUpB,cAAc;AACd,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAGzC,oBAAoB;AACpB,OAAO,EACL,eAAe,EACf,gBAAgB,GACjB,MAAM,cAAc,CAAC;AAQtB,oDAAoD;AACpD,OAAO,EACL,aAAa,EACb,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,4BAA4B,EAC5B,qBAAqB,EACrB,8BAA8B,EAC9B,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,0BAA0B,EAC1B,6BAA6B,EAC7B,yBAAyB,EACzB,6BAA6B,GAC9B,MAAM,kBAAkB,CAAC;AAY1B,uBAAuB;AACvB,OAAO,EACL,WAAW,EACX,WAAW,EACX,qBAAqB,EACrB,CAAC,EACD,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,WAAW,CAAC;AAInB,aAAa;AACb,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,EACpB,gCAAgC,EAChC,8BAA8B,GAC/B,MAAM,iBAAiB,CAAC;AAWzB,aAAa;AACb,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,WAAW,EACX,YAAY,GACb,MAAM,iBAAiB,CAAC;AAIzB,SAAS;AACT,OAAO,EACL,WAAW,EACX,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAErB,kBAAkB;AAClB,OAAO,EAAE,QAAQ,IAAI,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAE/E,oBAAoB;AACpB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,IAAI,cAAc,EAAE,MAAM,cAAc,CAAC;AAEpE,wCAAwC;AACxC,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,uBAAuB,EACvB,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAI5B,uBAAuB;AACvB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,uCAAuC;AACvC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEpF,0BAA0B;AAC1B,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,YAAY,EACZ,YAAY,GACb,MAAM,0BAA0B,CAAC;AAIlC,mCAAmC;AACnC,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAI1B,sCAAsC;AACtC,OAAO,EACL,YAAY,EACZ,aAAa,EACb,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,YAAY,CAAC;AAIpB,mEAAmE;AACnE,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,QAAQ,EACR,WAAW,EACX,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAI3B,0GAA0G;AAC1G,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,4BAA4B,EAC5B,4BAA4B,GAE7B,MAAM,gBAAgB,CAAC"}

package/dist/key-derivation.d.ts

@@ -0,0 +1,43 @@
+/** Encode a 32-byte private key as an nsec bech32 string (NIP-19) */
+export declare function encodeNsec(privateKey: string): string;
+/** Encode a 32-byte public key as an npub bech32 string (NIP-19) */
+export declare function encodeNpub(publicKey: string): string;
+/** Decode an nsec bech32 string to private + public key hex (NIP-19) */
+export declare function decodeNsec(nsec: string): {
+    privateKey: string;
+    publicKey: string;
+};
+/** NIP-06 derivation path: m/44'/1237'/0'/0/0 */
+export declare const NIP06_DERIVATION_PATH = "m/44'/1237'/0'/0/0";
+/** Parse a BIP-32 derivation path into numeric indices.
+ *  Retained for backwards compatibility — @scure/bip32 handles paths internally. */
+export declare function parsePath(path: string): number[];
+/** Derive a private key at the given BIP-32 path from a seed.
+ *  Uses @scure/bip32 (audited BIP-32 implementation by paulmillr). */
+export declare function deriveKeyFromSeed(seed: Uint8Array, path: string): Uint8Array;
+/** Derive a Nostr keypair from a BIP-39 mnemonic using NIP-06 path.
+ *
+ *  SECURITY NOTE: Intermediate Uint8Arrays (seed, key bytes) are zeroed after use,
+ *  but the returned hex strings are JS primitives and cannot be wiped from memory.
+ *  This is a fundamental limitation of the JavaScript runtime. */
+export declare function deriveNostrKeyPair(mnemonic: string, passphrase?: string): {
+    privateKey: string;
+    publicKey: string;
+};
+/** Create a full Signet identity from a mnemonic.
+ *
+ * WARNING: The returned object contains the mnemonic alongside the private key.
+ * Do not serialise, log, or persist this object without first removing the
+ * mnemonic. The caller is responsible for discarding the mnemonic as quickly
+ * as possible. Mnemonics must never be stored in plaintext (use crypto-store.ts). */
+export declare function createIdentityFromMnemonic(mnemonic: string, passphrase?: string): {
+    mnemonic: string;
+    privateKey: string;
+    publicKey: string;
+};
+/** Derive a child account keypair (e.g., for a child's account) at a given account index */
+export declare function deriveChildAccount(mnemonic: string, accountIndex: number, passphrase?: string): {
+    privateKey: string;
+    publicKey: string;
+};
+//# sourceMappingURL=key-derivation.d.ts.map

package/dist/key-derivation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-derivation.d.ts","sourceRoot":"","sources":["../src/key-derivation.ts"],"names":[],"mappings":"AAsGA,qEAAqE;AACrE,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAKrD;AAED,oEAAoE;AACpE,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAKpD;AAED,wEAAwE;AACxE,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAUlF;AAED,iDAAiD;AACjD,eAAO,MAAM,qBAAqB,uBAAuB,CAAC;AAQ1D;oFACoF;AACpF,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAiBhD;AAED;sEACsE;AACtE,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,CAU5E;AAED;;;;kEAIkE;AAClE,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,UAAU,CAAC,EAAE,MAAM,GAClB;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAa3C;AAED;;;;;qFAKqF;AACrF,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,EAChB,UAAU,CAAC,EAAE,MAAM,GAClB;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAG7D;AAED,4FAA4F;AAC5F,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,UAAU,CAAC,EAAE,MAAM,GAClB;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAe3C"}

package/dist/key-derivation.js

@@ -0,0 +1,212 @@
+// NIP-06 Nostr Key Derivation & NIP-19 nsec/npub encoding
+// Derives Nostr keypairs from BIP-39 mnemonics via @scure/bip32
+// Also provides nsec/npub bech32 encoding (NIP-19)
+import { secp256k1 } from '@noble/curves/secp256k1';
+import { bytesToHex, hexToBytes } from '@noble/hashes/utils';
+import { mnemonicToSeedSync } from '@scure/bip39';
+import { HDKey } from '@scure/bip32';
+import { zeroBytes } from './utils.js';
+import { SignetValidationError, SignetCryptoError } from './errors.js';
+// --- Bech32 encoding/decoding (BIP-173) for NIP-19 nsec/npub ---
+const BECH32_CHARSET = 'qpzry9x8gf2tvdw0s3jn54khce6mua7l';
+function bech32Polymod(values) {
+    const GEN = [0x3b6a57b2, 0x26508e6d, 0x1ea119fa, 0x3d4233dd, 0x2a1462b3];
+    let chk = 1;
+    for (const v of values) {
+        const b = chk >> 25;
+        chk = ((chk & 0x1ffffff) << 5) ^ v;
+        for (let i = 0; i < 5; i++) {
+            if ((b >> i) & 1)
+                chk ^= GEN[i];
+        }
+    }
+    return chk;
+}
+function bech32HrpExpand(hrp) {
+    const ret = [];
+    for (let i = 0; i < hrp.length; i++)
+        ret.push(hrp.charCodeAt(i) >> 5);
+    ret.push(0);
+    for (let i = 0; i < hrp.length; i++)
+        ret.push(hrp.charCodeAt(i) & 31);
+    return ret;
+}
+function bech32CreateChecksum(hrp, data) {
+    const values = bech32HrpExpand(hrp).concat(data).concat([0, 0, 0, 0, 0, 0]);
+    const polymod = bech32Polymod(values) ^ 1;
+    const ret = [];
+    for (let i = 0; i < 6; i++)
+        ret.push((polymod >> (5 * (5 - i))) & 31);
+    return ret;
+}
+function bech32VerifyChecksum(hrp, data) {
+    return bech32Polymod(bech32HrpExpand(hrp).concat(data)) === 1;
+}
+function bech32Encode(hrp, data) {
+    const checksum = bech32CreateChecksum(hrp, data);
+    const combined = data.concat(checksum);
+    let ret = hrp + '1';
+    for (const d of combined)
+        ret += BECH32_CHARSET[d];
+    return ret;
+}
+function bech32Decode(str) {
+    const lower = str.toLowerCase();
+    if (lower !== str && str.toUpperCase() !== str) {
+        throw new SignetValidationError('Mixed-case bech32 string');
+    }
+    const s = lower;
+    const pos = s.lastIndexOf('1');
+    if (pos < 1 || pos + 7 > s.length || s.length > 90) {
+        throw new SignetValidationError('Invalid bech32 string');
+    }
+    const hrp = s.slice(0, pos);
+    const dataChars = s.slice(pos + 1);
+    const data = [];
+    for (const c of dataChars) {
+        const idx = BECH32_CHARSET.indexOf(c);
+        if (idx === -1)
+            throw new SignetValidationError(`Invalid bech32 character: ${c}`);
+        data.push(idx);
+    }
+    if (!bech32VerifyChecksum(hrp, data)) {
+        throw new SignetValidationError('Invalid bech32 checksum');
+    }
+    return { hrp, data: data.slice(0, data.length - 6) };
+}
+function convertBits(data, fromBits, toBits, pad) {
+    let acc = 0;
+    let bits = 0;
+    const ret = [];
+    const maxv = (1 << toBits) - 1;
+    for (const value of data) {
+        if (value < 0 || value >> fromBits !== 0)
+            throw new SignetValidationError('Invalid value for convertBits');
+        acc = (acc << fromBits) | value;
+        bits += fromBits;
+        while (bits >= toBits) {
+            bits -= toBits;
+            ret.push((acc >> bits) & maxv);
+        }
+    }
+    if (pad) {
+        if (bits > 0)
+            ret.push((acc << (toBits - bits)) & maxv);
+    }
+    else if (bits >= fromBits || ((acc << (toBits - bits)) & maxv) !== 0) {
+        throw new SignetValidationError('Invalid padding in convertBits');
+    }
+    return ret;
+}
+/** Encode a 32-byte private key as an nsec bech32 string (NIP-19) */
+export function encodeNsec(privateKey) {
+    const bytes = hexToBytes(privateKey);
+    if (bytes.length !== 32)
+        throw new SignetValidationError('Private key must be 32 bytes');
+    const data5bit = convertBits(Array.from(bytes), 8, 5, true);
+    return bech32Encode('nsec', data5bit);
+}
+/** Encode a 32-byte public key as an npub bech32 string (NIP-19) */
+export function encodeNpub(publicKey) {
+    const bytes = hexToBytes(publicKey);
+    if (bytes.length !== 32)
+        throw new SignetValidationError('Public key must be 32 bytes');
+    const data5bit = convertBits(Array.from(bytes), 8, 5, true);
+    return bech32Encode('npub', data5bit);
+}
+/** Decode an nsec bech32 string to private + public key hex (NIP-19) */
+export function decodeNsec(nsec) {
+    const { hrp, data } = bech32Decode(nsec);
+    if (hrp !== 'nsec')
+        throw new SignetValidationError(`Expected nsec prefix, got ${hrp}`);
+    const bytes = convertBits(data, 5, 8, false);
+    if (bytes.length !== 32)
+        throw new SignetValidationError('Invalid nsec: decoded to wrong length');
+    const privateKey = bytesToHex(new Uint8Array(bytes));
+    // Derive x-only public key from private key
+    const fullPubkey = secp256k1.getPublicKey(new Uint8Array(bytes), true);
+    const publicKey = bytesToHex(fullPubkey.slice(1));
+    return { privateKey, publicKey };
+}
+/** NIP-06 derivation path: m/44'/1237'/0'/0/0 */
+export const NIP06_DERIVATION_PATH = "m/44'/1237'/0'/0/0";
+/** Maximum derivation path depth — prevents CPU-bound DoS on untrusted paths */
+const MAX_PATH_DEPTH = 10;
+/** Hardened offset for BIP-32 */
+const HARDENED_OFFSET = 0x80000000;
+/** Parse a BIP-32 derivation path into numeric indices.
+ *  Retained for backwards compatibility — @scure/bip32 handles paths internally. */
+export function parsePath(path) {
+    if (!path.startsWith('m/')) {
+        throw new SignetValidationError('Derivation path must start with m/');
+    }
+    const segments = path.slice(2).split('/');
+    if (segments.length > MAX_PATH_DEPTH) {
+        throw new SignetValidationError(`Derivation path too deep: ${segments.length} levels (max ${MAX_PATH_DEPTH})`);
+    }
+    return segments
+        .map((segment) => {
+        const hardened = segment.endsWith("'") || segment.endsWith('h');
+        const index = parseInt(hardened ? segment.slice(0, -1) : segment, 10);
+        if (isNaN(index) || index < 0) {
+            throw new SignetValidationError(`Invalid path segment: ${segment}`);
+        }
+        return hardened ? index + HARDENED_OFFSET : index;
+    });
+}
+/** Derive a private key at the given BIP-32 path from a seed.
+ *  Uses @scure/bip32 (audited BIP-32 implementation by paulmillr). */
+export function deriveKeyFromSeed(seed, path) {
+    // Validate path depth before delegating to @scure/bip32
+    parsePath(path);
+    const master = HDKey.fromMasterSeed(seed);
+    const child = master.derive(path);
+    if (!child.privateKey) {
+        throw new SignetCryptoError('Key derivation produced no private key');
+    }
+    // Return a copy — HDKey owns its internal buffer
+    return Uint8Array.from(child.privateKey);
+}
+/** Derive a Nostr keypair from a BIP-39 mnemonic using NIP-06 path.
+ *
+ *  SECURITY NOTE: Intermediate Uint8Arrays (seed, key bytes) are zeroed after use,
+ *  but the returned hex strings are JS primitives and cannot be wiped from memory.
+ *  This is a fundamental limitation of the JavaScript runtime. */
+export function deriveNostrKeyPair(mnemonic, passphrase) {
+    const seed = mnemonicToSeedSync(mnemonic, passphrase);
+    const privateKeyBytes = deriveKeyFromSeed(seed, NIP06_DERIVATION_PATH);
+    zeroBytes(seed);
+    const privateKey = bytesToHex(privateKeyBytes);
+    // x-only public key (BIP-340 / Nostr convention)
+    const fullPubkey = secp256k1.getPublicKey(privateKeyBytes, true); // 33 bytes compressed
+    // Drop the prefix byte to get x-only (32 bytes)
+    const publicKey = bytesToHex(fullPubkey.slice(1));
+    zeroBytes(privateKeyBytes);
+    return { privateKey, publicKey };
+}
+/** Create a full Signet identity from a mnemonic.
+ *
+ * WARNING: The returned object contains the mnemonic alongside the private key.
+ * Do not serialise, log, or persist this object without first removing the
+ * mnemonic. The caller is responsible for discarding the mnemonic as quickly
+ * as possible. Mnemonics must never be stored in plaintext (use crypto-store.ts). */
+export function createIdentityFromMnemonic(mnemonic, passphrase) {
+    const { privateKey, publicKey } = deriveNostrKeyPair(mnemonic, passphrase);
+    return { mnemonic, privateKey, publicKey };
+}
+/** Derive a child account keypair (e.g., for a child's account) at a given account index */
+export function deriveChildAccount(mnemonic, accountIndex, passphrase) {
+    if (!Number.isSafeInteger(accountIndex) || accountIndex < 0 || accountIndex > 0x7fffffff) {
+        throw new SignetValidationError('accountIndex must be an integer in [0, 2^31 - 1]');
+    }
+    const seed = mnemonicToSeedSync(mnemonic, passphrase);
+    const path = `m/44'/1237'/${accountIndex}'/0/0`;
+    const privateKeyBytes = deriveKeyFromSeed(seed, path);
+    zeroBytes(seed);
+    const privateKey = bytesToHex(privateKeyBytes);
+    const fullPubkey = secp256k1.getPublicKey(privateKeyBytes, true);
+    const publicKey = bytesToHex(fullPubkey.slice(1));
+    zeroBytes(privateKeyBytes);
+    return { privateKey, publicKey };
+}
+//# sourceMappingURL=key-derivation.js.map

package/dist/key-derivation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-derivation.js","sourceRoot":"","sources":["../src/key-derivation.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,gEAAgE;AAChE,mDAAmD;AAEnD,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEvE,kEAAkE;AAElE,MAAM,cAAc,GAAG,kCAAkC,CAAC;AAE1D,SAAS,aAAa,CAAC,MAAgB;IACrC,MAAM,GAAG,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IACzE,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,GAAG,IAAI,EAAE,CAAC;QACpB,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;gBAAE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACtE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAW,EAAE,IAAc;IACvD,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACtE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAW,EAAE,IAAc;IACvD,OAAO,aAAa,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,IAAc;IAC/C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IACpB,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,GAAG,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;IACnD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,IAAI,KAAK,KAAK,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,GAAG,EAAE,CAAC;QAC/C,MAAM,IAAI,qBAAqB,CAAC,0BAA0B,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,CAAC,GAAG,KAAK,CAAC;IAChB,MAAM,GAAG,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACnD,MAAM,IAAI,qBAAqB,CAAC,uBAAuB,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5B,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACnC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACtC,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,qBAAqB,CAAC,6BAA6B,CAAC,EAAE,CAAC,CAAC;QAClF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,qBAAqB,CAAC,yBAAyB,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,WAAW,CAAC,IAAc,EAAE,QAAgB,EAAE,MAAc,EAAE,GAAY;IACjF,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QACzB,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,QAAQ,KAAK,CAAC;YAAE,MAAM,IAAI,qBAAqB,CAAC,+BAA+B,CAAC,CAAC;QAC3G,GAAG,GAAG,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,KAAK,CAAC;QAChC,IAAI,IAAI,QAAQ,CAAC;QACjB,OAAO,IAAI,IAAI,MAAM,EAAE,CAAC;YACtB,IAAI,IAAI,MAAM,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,IAAI,GAAG,EAAE,CAAC;QACR,IAAI,IAAI,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1D,CAAC;SAAM,IAAI,IAAI,IAAI,QAAQ,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,qBAAqB,CAAC,gCAAgC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,UAAU,CAAC,UAAkB;IAC3C,MAAM,KAAK,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,qBAAqB,CAAC,8BAA8B,CAAC,CAAC;IACzF,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5D,OAAO,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,UAAU,CAAC,SAAiB;IAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,qBAAqB,CAAC,6BAA6B,CAAC,CAAC;IACxF,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5D,OAAO,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,GAAG,KAAK,MAAM;QAAE,MAAM,IAAI,qBAAqB,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAC;IACxF,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,qBAAqB,CAAC,uCAAuC,CAAC,CAAC;IAClG,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IACrD,4CAA4C;IAC5C,MAAM,UAAU,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AACnC,CAAC;AAED,iDAAiD;AACjD,MAAM,CAAC,MAAM,qBAAqB,GAAG,oBAAoB,CAAC;AAE1D,gFAAgF;AAChF,MAAM,cAAc,GAAG,EAAE,CAAC;AAE1B,iCAAiC;AACjC,MAAM,eAAe,GAAG,UAAU,CAAC;AAEnC;oFACoF;AACpF,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,qBAAqB,CAAC,oCAAoC,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,QAAQ,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QACrC,MAAM,IAAI,qBAAqB,CAAC,6BAA6B,QAAQ,CAAC,MAAM,gBAAgB,cAAc,GAAG,CAAC,CAAC;IACjH,CAAC;IACD,OAAO,QAAQ;SACZ,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACf,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACtE,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,qBAAqB,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,GAAG,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC;IACpD,CAAC,CAAC,CAAC;AACP,CAAC;AAED;sEACsE;AACtE,MAAM,UAAU,iBAAiB,CAAC,IAAgB,EAAE,IAAY;IAC9D,wDAAwD;IACxD,SAAS,CAAC,IAAI,CAAC,CAAC;IAChB,MAAM,MAAM,GAAG,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACtB,MAAM,IAAI,iBAAiB,CAAC,wCAAwC,CAAC,CAAC;IACxE,CAAC;IACD,iDAAiD;IACjD,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AAC3C,CAAC;AAED;;;;kEAIkE;AAClE,MAAM,UAAU,kBAAkB,CAChC,QAAgB,EAChB,UAAmB;IAEnB,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACtD,MAAM,eAAe,GAAG,iBAAiB,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;IACvE,SAAS,CAAC,IAAI,CAAC,CAAC;IAChB,MAAM,UAAU,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;IAE/C,iDAAiD;IACjD,MAAM,UAAU,GAAG,SAAS,CAAC,YAAY,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC,sBAAsB;IACxF,gDAAgD;IAChD,MAAM,SAAS,GAAG,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,SAAS,CAAC,eAAe,CAAC,CAAC;IAE3B,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AACnC,CAAC;AAED;;;;;qFAKqF;AACrF,MAAM,UAAU,0BAA0B,CACxC,QAAgB,EAChB,UAAmB;IAEnB,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,kBAAkB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC3E,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AAC7C,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,kBAAkB,CAChC,QAAgB,EAChB,YAAoB,EACpB,UAAmB;IAEnB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC,IAAI,YAAY,GAAG,UAAU,EAAE,CAAC;QACzF,MAAM,IAAI,qBAAqB,CAAC,kDAAkD,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,eAAe,YAAY,OAAO,CAAC;IAChD,MAAM,eAAe,GAAG,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtD,SAAS,CAAC,IAAI,CAAC,CAAC;IAChB,MAAM,UAAU,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;IAE/C,MAAM,UAAU,GAAG,SAAS,CAAC,YAAY,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,SAAS,CAAC,eAAe,CAAC,CAAC;IAE3B,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AACnC,CAAC"}

package/dist/lsag.d.ts

@@ -0,0 +1,23 @@
+import { computeKeyImage as _computeKeyImage, hasDuplicateKeyImage as _hasDuplicateKeyImage, type LsagSignature, MAX_RING_SIZE } from '@forgesworn/ring-sig';
+export { type LsagSignature, MAX_RING_SIZE };
+export declare const computeKeyImage: typeof _computeKeyImage;
+export declare const hasDuplicateKeyImage: typeof _hasDuplicateKeyImage;
+/**
+ * Sign with LSAG using Signet's domain separator.
+ *
+ * @param message - The message to sign (typically `electionId:SHA-256(encryptedVote)`)
+ * @param ring - Array of x-only public keys (hex) forming the anonymity set
+ * @param signerIndex - Index of the actual signer in the ring
+ * @param privateKey - Signer's private key (hex)
+ * @param electionId - Election identifier for key image linkability
+ * @returns A linkable ring signature with Signet domain
+ */
+export declare function lsagSign(message: string, ring: string[], signerIndex: number, privateKey: string, electionId: string): LsagSignature;
+/**
+ * Verify an LSAG signature.
+ *
+ * @param sig - The LSAG signature to verify
+ * @returns true if the signature is valid
+ */
+export declare function lsagVerify(sig: LsagSignature): boolean;
+//# sourceMappingURL=lsag.d.ts.map

package/dist/lsag.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lsag.d.ts","sourceRoot":"","sources":["../src/lsag.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,eAAe,IAAI,gBAAgB,EACnC,oBAAoB,IAAI,qBAAqB,EAG7C,KAAK,aAAa,EAClB,aAAa,EACd,MAAM,sBAAsB,CAAC;AAI9B,OAAO,EAAE,KAAK,aAAa,EAAE,aAAa,EAAE,CAAC;AAG7C,eAAO,MAAM,eAAe,yBAAmB,CAAC;AAChD,eAAO,MAAM,oBAAoB,8BAAwB,CAAC;AAE1D;;;;;;;;;GASG;AACH,wBAAgB,QAAQ,CACtB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,aAAa,CAIf;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAEtD"}

package/dist/lsag.js

@@ -0,0 +1,35 @@
+// LSAG (Linkable Spontaneous Anonymous Group) Ring Signatures
+// Thin re-export from @forgesworn/ring-sig with Signet domain separator.
+// Extends SAG with a key image that links signatures by the same signer
+// across multiple uses of the same election, enabling double-vote detection.
+import { computeKeyImage as _computeKeyImage, hasDuplicateKeyImage as _hasDuplicateKeyImage, lsagSign as _lsagSign, lsagVerify as _lsagVerify, MAX_RING_SIZE, } from '@forgesworn/ring-sig';
+const SIGNET_LSAG_DOMAIN = 'signet-lsag-v1';
+export { MAX_RING_SIZE };
+// Key image functions do not involve challenge hashes — safe to re-export directly.
+export const computeKeyImage = _computeKeyImage;
+export const hasDuplicateKeyImage = _hasDuplicateKeyImage;
+/**
+ * Sign with LSAG using Signet's domain separator.
+ *
+ * @param message - The message to sign (typically `electionId:SHA-256(encryptedVote)`)
+ * @param ring - Array of x-only public keys (hex) forming the anonymity set
+ * @param signerIndex - Index of the actual signer in the ring
+ * @param privateKey - Signer's private key (hex)
+ * @param electionId - Election identifier for key image linkability
+ * @returns A linkable ring signature with Signet domain
+ */
+export function lsagSign(message, ring, signerIndex, privateKey, electionId) {
+    const sig = _lsagSign(message, ring, signerIndex, privateKey, electionId, SIGNET_LSAG_DOMAIN);
+    sig.domain = SIGNET_LSAG_DOMAIN;
+    return sig;
+}
+/**
+ * Verify an LSAG signature.
+ *
+ * @param sig - The LSAG signature to verify
+ * @returns true if the signature is valid
+ */
+export function lsagVerify(sig) {
+    return _lsagVerify(sig);
+}
+//# sourceMappingURL=lsag.js.map

package/dist/lsag.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lsag.js","sourceRoot":"","sources":["../src/lsag.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,yEAAyE;AACzE,wEAAwE;AACxE,6EAA6E;AAE7E,OAAO,EACL,eAAe,IAAI,gBAAgB,EACnC,oBAAoB,IAAI,qBAAqB,EAC7C,QAAQ,IAAI,SAAS,EACrB,UAAU,IAAI,WAAW,EAEzB,aAAa,GACd,MAAM,sBAAsB,CAAC;AAE9B,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AAE5C,OAAO,EAAsB,aAAa,EAAE,CAAC;AAE7C,oFAAoF;AACpF,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAChD,MAAM,CAAC,MAAM,oBAAoB,GAAG,qBAAqB,CAAC;AAE1D;;;;;;;;;GASG;AACH,MAAM,UAAU,QAAQ,CACtB,OAAe,EACf,IAAc,EACd,WAAmB,EACnB,UAAkB,EAClB,UAAkB;IAElB,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC;IAC9F,GAAG,CAAC,MAAM,GAAG,kBAAkB,CAAC;IAChC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,GAAkB;IAC3C,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC"}

package/dist/merkle.d.ts

@@ -0,0 +1,19 @@
+import type { MerkleProof, SelectiveDisclosure } from './types.js';
+export declare class MerkleTree {
+    private attributes;
+    private levels;
+    private leafHashes;
+    readonly root: string;
+    constructor(attributes: Record<string, string>);
+    /** Get the Merkle root */
+    getRoot(): string;
+    /** Generate a proof for a specific attribute */
+    prove(key: string): MerkleProof;
+    /** Create a selective disclosure revealing only specified attributes */
+    disclose(keys: string[]): SelectiveDisclosure;
+}
+/** Verify a Merkle proof against a root */
+export declare function verifyMerkleProof(key: string, value: string, proof: MerkleProof): boolean;
+/** Verify an entire selective disclosure */
+export declare function verifySelectiveDisclosure(disclosure: SelectiveDisclosure): boolean;
+//# sourceMappingURL=merkle.d.ts.map

package/dist/merkle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"merkle.d.ts","sourceRoot":"","sources":["../src/merkle.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAiEnE,qBAAa,UAAU;IAKT,OAAO,CAAC,UAAU;IAJ9B,OAAO,CAAC,MAAM,CAAa;IAC3B,OAAO,CAAC,UAAU,CAAW;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEF,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAWtD,0BAA0B;IAC1B,OAAO,IAAI,MAAM;IAIjB,gDAAgD;IAChD,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW;IA0B/B,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,mBAAmB;CAmB9C;AAED,2CAA2C;AAC3C,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,WAAW,GACjB,OAAO,CAcT;AAED,4CAA4C;AAC5C,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,mBAAmB,GAAG,OAAO,CAalF"}

package/dist/merkle.js

@@ -0,0 +1,155 @@
+// Merkle Tree Selective Disclosure
+// Credential attributes as Merkle leaves — reveal chosen attributes + sibling paths
+import { sha256 } from '@noble/hashes/sha2.js';
+import { bytesToHex, hexToBytes, utf8ToBytes } from '@noble/hashes/utils.js';
+import { SignetValidationError } from './errors.js';
+/**
+ * Hash a leaf node with domain separation prefix 0x00.
+ * Leaf hash: SHA-256(0x00 || "key:value")
+ * RFC 6962 domain separation prevents second-preimage attacks.
+ */
+function hashLeaf(data) {
+    const prefix = new Uint8Array([0x00]);
+    const content = utf8ToBytes(data);
+    const combined = new Uint8Array(1 + content.length);
+    combined.set(prefix);
+    combined.set(content, 1);
+    return bytesToHex(sha256(combined));
+}
+/**
+ * Hash an internal node with domain separation prefix 0x01.
+ * Internal node hash: SHA-256(0x01 || left || right)
+ * RFC 6962 domain separation prevents second-preimage attacks.
+ */
+function hashInternal(left, right) {
+    const prefix = new Uint8Array([0x01]);
+    const leftBytes = hexToBytes(left);
+    const rightBytes = hexToBytes(right);
+    const combined = new Uint8Array(1 + leftBytes.length + rightBytes.length);
+    combined.set(prefix);
+    combined.set(leftBytes, 1);
+    combined.set(rightBytes, 1 + leftBytes.length);
+    return bytesToHex(sha256(combined));
+}
+/** Combine two child hashes into a parent node.
+ *  Order is determined by tree position (left/right), NOT by hash value.
+ *  Sorting would allow proof transplanting between sibling positions. */
+function hashPairOrdered(left, right) {
+    return hashInternal(left, right);
+}
+/** Build a Merkle tree from leaf values. Returns all levels (bottom-up). */
+function buildTree(leaves) {
+    if (leaves.length === 0)
+        throw new SignetValidationError('Cannot build tree from empty leaves');
+    // Pad to power of 2
+    const paddedLeaves = [...leaves];
+    while (paddedLeaves.length & (paddedLeaves.length - 1)) {
+        paddedLeaves.push(hashLeaf('__padding__' + paddedLeaves.length));
+    }
+    const levels = [paddedLeaves];
+    let current = paddedLeaves;
+    while (current.length > 1) {
+        const next = [];
+        for (let i = 0; i < current.length; i += 2) {
+            next.push(hashPairOrdered(current[i], current[i + 1]));
+        }
+        levels.push(next);
+        current = next;
+    }
+    return levels;
+}
+export class MerkleTree {
+    attributes;
+    levels;
+    leafHashes;
+    root;
+    constructor(attributes) {
+        this.attributes = attributes;
+        for (const k of Object.keys(attributes)) {
+            if (k.includes(':'))
+                throw new SignetValidationError(`Merkle attribute key must not contain ':': "${k}"`);
+        }
+        const entries = Object.entries(attributes).sort(([a], [b]) => a.localeCompare(b));
+        // Each leaf is hashLeaf("key:value") — domain-separated with 0x00 prefix
+        this.leafHashes = entries.map(([k, v]) => hashLeaf(`${k}:${v}`));
+        this.levels = buildTree(this.leafHashes);
+        this.root = this.levels[this.levels.length - 1][0];
+    }
+    /** Get the Merkle root */
+    getRoot() {
+        return this.root;
+    }
+    /** Generate a proof for a specific attribute */
+    prove(key) {
+        const entries = Object.entries(this.attributes).sort(([a], [b]) => a.localeCompare(b));
+        const idx = entries.findIndex(([k]) => k === key);
+        if (idx === -1)
+            throw new SignetValidationError(`Attribute "${key}" not found`);
+        const leafHash = this.leafHashes[idx];
+        const siblings = [];
+        let currentIdx = idx;
+        // Pad index space to match padded tree
+        for (let level = 0; level < this.levels.length - 1; level++) {
+            const siblingIdx = currentIdx ^ 1; // flip last bit to get sibling
+            if (siblingIdx < this.levels[level].length) {
+                siblings.push(this.levels[level][siblingIdx]);
+            }
+            currentIdx = currentIdx >> 1;
+        }
+        return {
+            leaf: leafHash,
+            index: idx,
+            siblings,
+            root: this.root,
+        };
+    }
+    /** Create a selective disclosure revealing only specified attributes */
+    disclose(keys) {
+        const revealedAttributes = {};
+        const proofs = [];
+        for (const key of keys) {
+            const entries = Object.entries(this.attributes).sort(([a], [b]) => a.localeCompare(b));
+            const entry = entries.find(([k]) => k === key);
+            if (!entry)
+                throw new SignetValidationError(`Attribute "${key}" not found`);
+            revealedAttributes[key] = entry[1];
+            proofs.push(this.prove(key));
+        }
+        return {
+            revealedAttributes,
+            proofs,
+            merkleRoot: this.root,
+        };
+    }
+}
+/** Verify a Merkle proof against a root */
+export function verifyMerkleProof(key, value, proof) {
+    let currentHash = hashLeaf(`${key}:${value}`);
+    if (currentHash !== proof.leaf)
+        return false;
+    let idx = proof.index;
+    for (const sibling of proof.siblings) {
+        // Use index bit to determine left/right position — NOT sorted ordering
+        currentHash = (idx & 1) === 0
+            ? hashPairOrdered(currentHash, sibling)
+            : hashPairOrdered(sibling, currentHash);
+        idx = idx >> 1;
+    }
+    return currentHash === proof.root;
+}
+/** Verify an entire selective disclosure */
+export function verifySelectiveDisclosure(disclosure) {
+    const entries = Object.entries(disclosure.revealedAttributes);
+    if (entries.length !== disclosure.proofs.length)
+        return false;
+    for (let i = 0; i < entries.length; i++) {
+        const [key, value] = entries[i];
+        const proof = disclosure.proofs[i];
+        if (proof.root !== disclosure.merkleRoot)
+            return false;
+        if (!verifyMerkleProof(key, value, proof))
+            return false;
+    }
+    return true;
+}
+//# sourceMappingURL=merkle.js.map

package/dist/merkle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"merkle.js","sourceRoot":"","sources":["../src/merkle.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,oFAAoF;AAEpF,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAE7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD;;;;GAIG;AACH,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrB,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACzB,OAAO,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,IAAY,EAAE,KAAa;IAC/C,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAC1E,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrB,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC3B,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/C,OAAO,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;AACtC,CAAC;AAED;;yEAEyE;AACzE,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,OAAO,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,4EAA4E;AAC5E,SAAS,SAAS,CAAC,MAAgB;IACjC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,qBAAqB,CAAC,qCAAqC,CAAC,CAAC;IAEhG,oBAAoB;IACpB,MAAM,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;IACjC,OAAO,YAAY,CAAC,MAAM,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;QACvD,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,MAAM,GAAe,CAAC,YAAY,CAAC,CAAC;IAC1C,IAAI,OAAO,GAAG,YAAY,CAAC;IAE3B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,OAAO,UAAU;IAKD;IAJZ,MAAM,CAAa;IACnB,UAAU,CAAW;IACpB,IAAI,CAAS;IAEtB,YAAoB,UAAkC;QAAlC,eAAU,GAAV,UAAU,CAAwB;QACpD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,qBAAqB,CAAC,+CAA+C,CAAC,GAAG,CAAC,CAAC;QAC5G,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QAClF,yEAAyE;QACzE,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,0BAA0B;IAC1B,OAAO;QACL,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,GAAW;QACf,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QACvF,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;QAClD,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,qBAAqB,CAAC,cAAc,GAAG,aAAa,CAAC,CAAC;QAEhF,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,UAAU,GAAG,GAAG,CAAC;QAErB,uCAAuC;QACvC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;YAC5D,MAAM,UAAU,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,+BAA+B;YAClE,IAAI,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;gBAC3C,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;YAChD,CAAC;YACD,UAAU,GAAG,UAAU,IAAI,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,GAAG;YACV,QAAQ;YACR,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,QAAQ,CAAC,IAAc;QACrB,MAAM,kBAAkB,GAA2B,EAAE,CAAC;QACtD,MAAM,MAAM,GAAkB,EAAE,CAAC;QAEjC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;YACvF,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;YAC/C,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,qBAAqB,CAAC,cAAc,GAAG,aAAa,CAAC,CAAC;YAE5E,kBAAkB,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO;YACL,kBAAkB;YAClB,MAAM;YACN,UAAU,EAAE,IAAI,CAAC,IAAI;SACtB,CAAC;IACJ,CAAC;CACF;AAED,2CAA2C;AAC3C,MAAM,UAAU,iBAAiB,CAC/B,GAAW,EACX,KAAa,EACb,KAAkB;IAElB,IAAI,WAAW,GAAG,QAAQ,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;IAC9C,IAAI,WAAW,KAAK,KAAK,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAE7C,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC;IACtB,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,uEAAuE;QACvE,WAAW,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC;YAC3B,CAAC,CAAC,eAAe,CAAC,WAAW,EAAE,OAAO,CAAC;YACvC,CAAC,CAAC,eAAe,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC1C,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC;IACjB,CAAC;IAED,OAAO,WAAW,KAAK,KAAK,CAAC,IAAI,CAAC;AACpC,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,yBAAyB,CAAC,UAA+B;IACvE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;IAC9D,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAE9D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAEnC,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,UAAU;YAAE,OAAO,KAAK,CAAC;QACvD,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IAC1D,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}